SPYWARE-RU.COM

Созданные ответы форума

Просмотр 6 сообщений - с 1 по 6 (из 6 всего)

Автор

Сообщения
18 февраля, 2009 в 9:23 пп в ответ на: проблема с порно лентой в IE #22139
Ant
Participant
- Темы:3
- Сообщений:9
Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

Completed script processing.

*******************

Finished! Terminate.
18 февраля, 2009 в 9:22 пп в ответ на: проблема с порно лентой в IE #22138
Ant
Participant
- Темы:3
- Сообщений:9
Logfile of random’s system information tool 1.05 (written by random/random)
Run by Ant-Killer at 2009-02-19 00:12:28
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 0:12:29, on 19.02.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20815)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesMail.RuAgentMAgent.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesPunto Switcherpunto.exe
C:Program FilesCommon FilesAcronisSchedule2schedul2.exe
C:OrCADlicense_managerlmgrd.exe
C:WINDOWSsystem32lkcitdl.exe
C:OrCADlicense_managerlmgrd.exe
C:WINDOWSsystem32lkads.exe
C:WINDOWSsystem32lktsrv.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe
C:Program FilesNational InstrumentsSharedSecuritynidmsrv.exe
C:WINDOWSsystem32nisvcloc.exe
C:Program FilesCyberLinkShared FilesRichVideo.exe
C:WINDOWSSystem32snmp.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSHelpzpx2.exe
C:WINDOWSsystem32wuauclt.exe
C:Program FilesOperaopera.exe
C:Program FilesMalwarebytes’ Anti-Malwarembam.exe
C:rsitRSIT.exe
C:Program Filestrend microHijackThisAnt-Killer.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://search.qip.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=40316
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://search.qip.ru/search?query=%s&from=IE
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = http=127.0.0.1:8600
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
R3 — URLSearchHook: (no name) — — (no file)
R3 — URLSearchHook: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll
O2 — BHO: Skype add-on (mastermind) — {22BF413B-C6D2-4d91-82A9-A0F997BA588C} — (no file)
O2 — BHO: flashget urlcatch — {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} — C:Program FilesFlashGetjccatch.dll
O2 — BHO: azdlibP — {4B5DF7B5-5FAB-4547-8420-35CFF12A2263} — C:Documents and SettingsAll Users.WINDOWSApplication Dataazdlib.dll
O2 — BHO: IEVkbdBHO — {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} — (no file)
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_06binssv.dll
O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O2 — BHO: FlashGet GetFlash Class — {F156768E-81EF-470C-9057-481BA8380DBA} — C:Program FilesFlashGetgetflash.dll
O3 — Toolbar: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe -LM
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [Punto Switcher] C:Program FilesPunto Switcherpunto.exe
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [IE7_012] rundll32 advpack.dll,LaunchINFSectionEx IE7int.inf,AfterUserStart,,4,N (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘Default user’)
O8 — Extra context menu item: &Закачать все при помощи FlashGet — C:Program FilesFlashGetjc_all.htm
O8 — Extra context menu item: &Закачать при помощи FlashGet — C:Program FilesFlashGetjc_link.htm
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O8 — Extra context menu item: Найти в интернете — res://C:Program FilesMail.RuSputnikMailRuSputnik.dll/282
O8 — Extra context menu item: Найти в словарях — res://C:Program FilesMail.RuSputnikMailRuSputnik.dll/283
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: Skype — {77BF5300-1474-4EC7-9980-D32B190E9B07} — C:WINDOWSsystem32shdocvw.dll
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 — Extra button: FlashGet — {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} — C:Program FilesFlashGetFlashGet.exe
O9 — Extra ‘Tools’ menuitem: FlashGet — {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} — C:Program FilesFlashGetFlashGet.exe
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O17 — HKLMSystemCCSServicesTcpip..{2238F8B2-7C1B-4F50-8446-B541F84C9E4F}: NameServer = 10.0.0.10
O17 — HKLMSystemCCSServicesTcpip..{78B076FE-17D5-4121-A567-1B96D385A841}: NameServer = 10.0.0.10
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O23 — Service: Acronis Scheduler2 Service (AcrSch2Svc) — Acronis — C:Program FilesCommon FilesAcronisSchedule2schedul2.exe
O23 — Service: Cadence License Manager — Macrovision Corporation — C:OrCADlicense_managerlmgrd.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Google Updater Service (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Lookout Citadel Server (LkCitadelServer) — National Instruments, Inc. — C:WINDOWSsystem32lkcitdl.exe
O23 — Service: National Instruments PSP Server Locator (lkClassAds) — National Instruments, Inc. — C:WINDOWSsystem32lkads.exe
O23 — Service: National Instruments Time Synchronization (lkTimeSync) — National Instruments, Inc. — C:WINDOWSsystem32lktsrv.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: National Instruments Domain Service (NIDomainService) — National Instruments, Inc. — C:Program FilesNational InstrumentsSharedSecuritynidmsrv.exe
O23 — Service: NILM License Manager — Macrovision Corporation — C:Program FilesNational InstrumentsSharedLicense ManagerBinlmgrd.exe
O23 — Service: NI Service Locator (niSvcLoc) — National Instruments Corp. — C:WINDOWSsystem32nisvcloc.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — C:Program FilesCyberLinkShared FilesRichVideo.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Служба SNMP (SNMP) — Корпорация Майкрософт — C:WINDOWSSystem32snmp.exe
O23 — Service: SpIDer Guard for Windows (SPIDERNT) — Doctor Web, Ltd. — C:PROGRA~1DrWebspidernt.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Windows Security Guard (winsecguard) — Unknown owner — C:WINDOWSHelpzpx2.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 9454 bytes

======Scheduled tasks folder======

C:WINDOWStaskskzrojlee.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class — C:Program FilesAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll [2003-05-15 50376]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}]
FGCatchUrl — C:Program FilesFlashGetjccatch.dll [2007-08-06 94308]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{4B5DF7B5-5FAB-4547-8420-35CFF12A2263}]
RKAU Data Provider — C:Documents and SettingsAll Users.WINDOWSApplication Dataazdlib.dll [2009-02-17 477184]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_06binssv.dll [2008-03-25 509328]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2008-12-10 667336]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{F156768E-81EF-470C-9057-481BA8380DBA}]
FlashGet GetFlash Class — C:Program FilesFlashGetgetflash.dll [2007-05-18 163840]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2008-12-10 667336]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2008-10-16 1578248]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«MAgent»=C:Program FilesMail.RuAgentMAgent.exe [2008-12-10 4428472]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-15 15360]
«Punto Switcher»=C:Program FilesPunto Switcherpunto.exe [2008-10-16 735016]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2007-06-18 133632]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=36
«NoDriveAutoRun»=FFFFFFFF
«NoDrives»=0

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=
«NoDriveAutoRun»=
«NoDrives»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
«C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE»=»C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook»
«C:Program FilesFlashGetflashget.exe»=»C:Program FilesFlashGetflashget.exe:*:Enabled:Flashget»
«C:OrCADOrCAD_16.0toolsbincdnshelp.exe»=»C:OrCADOrCAD_16.0toolsbincdnshelp.exe:*:Enabled:cdnshelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsinfo.exe»=»C:OrCADOrCAD_16.0toolsbincdsinfo.exe:*:Enabled:cdsinfo (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsmps.exe»=»C:OrCADOrCAD_16.0toolsbincdsmps.exe:*:Enabled:cdsmps (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsMsgServer.exe»=»C:OrCADOrCAD_16.0toolsbincdsMsgServer.exe:*:Enabled:cdsMsgServer (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsNameServer.exe»=»C:OrCADOrCAD_16.0toolsbincdsNameServer.exe:*:Enabled:cdsNameServer (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsOaPathUtil.exe»=»C:OrCADOrCAD_16.0toolsbincdsOaPathUtil.exe:*:Enabled:cdsOaPathUtil (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsRemote.exe»=»C:OrCADOrCAD_16.0toolsbincdsRemote.exe:*:Enabled:cdsRemote (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsRemshClient.exe»=»C:OrCADOrCAD_16.0toolsbincdsRemshClient.exe:*:Enabled:cdsRemshClient (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsRunHidden.exe»=»C:OrCADOrCAD_16.0toolsbincdsRunHidden.exe:*:Enabled:cdsRunHidden (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsServIpc.exe»=»C:OrCADOrCAD_16.0toolsbincdsServIpc.exe:*:Enabled:cdsServIpc (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsUnzip.exe»=»C:OrCADOrCAD_16.0toolsbincdsUnzip.exe:*:Enabled:cdsUnzip (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdswhich.exe»=»C:OrCADOrCAD_16.0toolsbincdswhich.exe:*:Enabled:cdswhich (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsZip.exe»=»C:OrCADOrCAD_16.0toolsbincdsZip.exe:*:Enabled:cdsZip (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincds_root.exe»=»C:OrCADOrCAD_16.0toolsbincds_root.exe:*:Enabled:cds_root (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinclsAdminTool.exe»=»C:OrCADOrCAD_16.0toolsbinclsAdminTool.exe:*:Enabled:clsAdminTool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinclsbd.exe»=»C:OrCADOrCAD_16.0toolsbinclsbd.exe:*:Enabled:clsbd (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinclu.exe»=»C:OrCADOrCAD_16.0toolsbinclu.exe:*:Enabled:clu (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincmfeedback.exe»=»C:OrCADOrCAD_16.0toolsbincmfeedback.exe:*:Enabled:cmfeedback (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinconsmgr.exe»=»C:OrCADOrCAD_16.0toolsbinconsmgr.exe:*:Enabled:consmgr (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbindregprint.exe»=»C:OrCADOrCAD_16.0toolsbindregprint.exe:*:Enabled:dregprint (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinemsMkError.exe»=»C:OrCADOrCAD_16.0toolsbinemsMkError.exe:*:Enabled:emsMkError (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinmpsinfo.exe»=»C:OrCADOrCAD_16.0toolsbinmpsinfo.exe:*:Enabled:mpsinfo (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinmsgHelp.exe»=»C:OrCADOrCAD_16.0toolsbinmsgHelp.exe:*:Enabled:msgHelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinnmp.exe»=»C:OrCADOrCAD_16.0toolsbinnmp.exe:*:Enabled:nmp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinnmppath.exe»=»C:OrCADOrCAD_16.0toolsbinnmppath.exe:*:Enabled:nmppath (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinswitchversion.exe»=»C:OrCADOrCAD_16.0toolsbinswitchversion.exe:*:Enabled:switchversion (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinvan.exe»=»C:OrCADOrCAD_16.0toolsbinvan.exe:*:Enabled:van (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinversionviewer.exe»=»C:OrCADOrCAD_16.0toolsbinversionviewer.exe:*:Enabled:versionviewer (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturecapture.exe»=»C:OrCADOrCAD_16.0toolscapturecapture.exe:*:Enabled:capture (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturecomp16.exe»=»C:OrCADOrCAD_16.0toolscapturecomp16.exe:*:Enabled:comp16 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturepcadi.exe»=»C:OrCADOrCAD_16.0toolscapturepcadi.exe:*:Enabled:pcadi (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturepspiceexplorersrvr.exe»=»C:OrCADOrCAD_16.0toolscapturepspiceexplorersrvr.exe:*:Enabled:pspiceexplorersrvr (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturepstswp.exe»=»C:OrCADOrCAD_16.0toolscapturepstswp.exe:*:Enabled:pstswp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscaptureregsvr32.exe»=»C:OrCADOrCAD_16.0toolscaptureregsvr32.exe:*:Enabled:regsvr32 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturesch2cap.exe»=»C:OrCADOrCAD_16.0toolscapturesch2cap.exe:*:Enabled:sch2cap (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturetutorialCAPTUTOR.EXE»=»C:OrCADOrCAD_16.0toolscapturetutorialCAPTUTOR.EXE:*:Enabled:CAPTUTOR (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscdnshelpbincdnshelp.exe»=»C:OrCADOrCAD_16.0toolscdnshelpbincdnshelp.exe:*:Enabled:cdnshelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscdnshelpbintopicgen.exe»=»C:OrCADOrCAD_16.0toolscdnshelpbintopicgen.exe:*:Enabled:topicgen (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscdnshelpbin_cdnshelp.exe»=»C:OrCADOrCAD_16.0toolscdnshelpbin_cdnshelp.exe:*:Enabled:_cdnshelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsdfIIbinskill.exe»=»C:OrCADOrCAD_16.0toolsdfIIbinskill.exe:*:Enabled:skill (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsdfIIbinskill_g.exe»=»C:OrCADOrCAD_16.0toolsdfIIbinskill_g.exe:*:Enabled:skill_g (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinbodygen.exe»=»C:OrCADOrCAD_16.0toolsfetbinbodygen.exe:*:Enabled:bodygen (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbincpmaccess.exe»=»C:OrCADOrCAD_16.0toolsfetbincpmaccess.exe:*:Enabled:cpmaccess (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinlibaccess.exe»=»C:OrCADOrCAD_16.0toolsfetbinlibaccess.exe:*:Enabled:libaccess (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinlrm.exe»=»C:OrCADOrCAD_16.0toolsfetbinlrm.exe:*:Enabled:lrm (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinmkdefcfg.exe»=»C:OrCADOrCAD_16.0toolsfetbinmkdefcfg.exe:*:Enabled:mkdefcfg (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinnewgenasym.exe»=»C:OrCADOrCAD_16.0toolsfetbinnewgenasym.exe:*:Enabled:newgenasym (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinpcbCache.exe»=»C:OrCADOrCAD_16.0toolsfetbinpcbCache.exe:*:Enabled:pcbCache (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinprojmgr.exe»=»C:OrCADOrCAD_16.0toolsfetbinprojmgr.exe:*:Enabled:projmgr (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinpsetup.exe»=»C:OrCADOrCAD_16.0toolsfetbinpsetup.exe:*:Enabled:psetup (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinpurge.exe»=»C:OrCADOrCAD_16.0toolsfetbinpurge.exe:*:Enabled:purge (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinQPSetup.exe»=»C:OrCADOrCAD_16.0toolsfetbinQPSetup.exe:*:Enabled:QPSetup (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinrollback.exe»=»C:OrCADOrCAD_16.0toolsfetbinrollback.exe:*:Enabled:rollback (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinUniversalBrowser.exe»=»C:OrCADOrCAD_16.0toolsfetbinUniversalBrowser.exe:*:Enabled:UniversalBrowser (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinversiontool.exe»=»C:OrCADOrCAD_16.0toolsfetbinversiontool.exe:*:Enabled:versiontool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjava.exe»=»C:OrCADOrCAD_16.0toolsjrebinjava.exe:*:Enabled:java (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjavacpl.exe»=»C:OrCADOrCAD_16.0toolsjrebinjavacpl.exe:*:Enabled:javacpl (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjavaw.exe»=»C:OrCADOrCAD_16.0toolsjrebinjavaw.exe:*:Enabled:javaw (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjavaws.exe»=»C:OrCADOrCAD_16.0toolsjrebinjavaws.exe:*:Enabled:javaws (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjucheck.exe»=»C:OrCADOrCAD_16.0toolsjrebinjucheck.exe:*:Enabled:jucheck (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjusched.exe»=»C:OrCADOrCAD_16.0toolsjrebinjusched.exe:*:Enabled:jusched (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinkeytool.exe»=»C:OrCADOrCAD_16.0toolsjrebinkeytool.exe:*:Enabled:keytool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinkinit.exe»=»C:OrCADOrCAD_16.0toolsjrebinkinit.exe:*:Enabled:kinit (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinklist.exe»=»C:OrCADOrCAD_16.0toolsjrebinklist.exe:*:Enabled:klist (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinktab.exe»=»C:OrCADOrCAD_16.0toolsjrebinktab.exe:*:Enabled:ktab (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinorbd.exe»=»C:OrCADOrCAD_16.0toolsjrebinorbd.exe:*:Enabled:orbd (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinpack200.exe»=»C:OrCADOrCAD_16.0toolsjrebinpack200.exe:*:Enabled:pack200 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinpolicytool.exe»=»C:OrCADOrCAD_16.0toolsjrebinpolicytool.exe:*:Enabled:policytool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinrmid.exe»=»C:OrCADOrCAD_16.0toolsjrebinrmid.exe:*:Enabled:rmid (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinrmiregistry.exe»=»C:OrCADOrCAD_16.0toolsjrebinrmiregistry.exe:*:Enabled:rmiregistry (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinservertool.exe»=»C:OrCADOrCAD_16.0toolsjrebinservertool.exe:*:Enabled:servertool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebintnameserv.exe»=»C:OrCADOrCAD_16.0toolsjrebintnameserv.exe:*:Enabled:tnameserv (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinunpack200.exe»=»C:OrCADOrCAD_16.0toolsjrebinunpack200.exe:*:Enabled:unpack200 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutfvupdateutil.exe»=»C:OrCADOrCAD_16.0toolslayoutfvupdateutil.exe:*:Enabled:fvupdateutil (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutgcad.exe»=»C:OrCADOrCAD_16.0toolslayoutgcad.exe:*:Enabled:gcad (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutgcam.exe»=»C:OrCADOrCAD_16.0toolslayoutgcam.exe:*:Enabled:gcam (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutgcdin.exe»=»C:OrCADOrCAD_16.0toolslayoutgcdin.exe:*:Enabled:gcdin (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutidfin.exe»=»C:OrCADOrCAD_16.0toolslayoutidfin.exe:*:Enabled:idfin (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutipc356.exe»=»C:OrCADOrCAD_16.0toolslayoutipc356.exe:*:Enabled:ipc356 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutlayout.exe»=»C:OrCADOrCAD_16.0toolslayoutlayout.exe:*:Enabled:layout (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutlibcat.exe»=»C:OrCADOrCAD_16.0toolslayoutlibcat.exe:*:Enabled:libcat (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutlsession.exe»=»C:OrCADOrCAD_16.0toolslayoutlsession.exe:*:Enabled:lsession (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmax2hyp.exe»=»C:OrCADOrCAD_16.0toolslayoutmax2hyp.exe:*:Enabled:max2hyp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxascb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxascb.exe:*:Enabled:maxascb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxascx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxascx.exe:*:Enabled:maxascx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxdxf.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxdxf.exe:*:Enabled:maxdxf (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxeco.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxeco.exe:*:Enabled:maxeco (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxfnetx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxfnetx.exe:*:Enabled:maxfnetx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxminb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxminb.exe:*:Enabled:maxminb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxminw.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxminw.exe:*:Enabled:maxminw (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxminx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxminx.exe:*:Enabled:maxminx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxorcad.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxorcad.exe:*:Enabled:maxorcad (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxp99x.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxp99x.exe:*:Enabled:maxp99x (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxpadb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxpadb.exe:*:Enabled:maxpadb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxpadx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxpadx.exe:*:Enabled:maxpadx (Release OrCAD 16.0)»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:OrCADOrCAD_16.0toolsbincdnshelp.exe»=»C:OrCADOrCAD_16.0toolsbincdnshelp.exe:*:Enabled:cdnshelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsinfo.exe»=»C:OrCADOrCAD_16.0toolsbincdsinfo.exe:*:Enabled:cdsinfo (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsmps.exe»=»C:OrCADOrCAD_16.0toolsbincdsmps.exe:*:Enabled:cdsmps (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsMsgServer.exe»=»C:OrCADOrCAD_16.0toolsbincdsMsgServer.exe:*:Enabled:cdsMsgServer (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsNameServer.exe»=»C:OrCADOrCAD_16.0toolsbincdsNameServer.exe:*:Enabled:cdsNameServer (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsOaPathUtil.exe»=»C:OrCADOrCAD_16.0toolsbincdsOaPathUtil.exe:*:Enabled:cdsOaPathUtil (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsRemote.exe»=»C:OrCADOrCAD_16.0toolsbincdsRemote.exe:*:Enabled:cdsRemote (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsRemshClient.exe»=»C:OrCADOrCAD_16.0toolsbincdsRemshClient.exe:*:Enabled:cdsRemshClient (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsRunHidden.exe»=»C:OrCADOrCAD_16.0toolsbincdsRunHidden.exe:*:Enabled:cdsRunHidden (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsServIpc.exe»=»C:OrCADOrCAD_16.0toolsbincdsServIpc.exe:*:Enabled:cdsServIpc (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsUnzip.exe»=»C:OrCADOrCAD_16.0toolsbincdsUnzip.exe:*:Enabled:cdsUnzip (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdswhich.exe»=»C:OrCADOrCAD_16.0toolsbincdswhich.exe:*:Enabled:cdswhich (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsZip.exe»=»C:OrCADOrCAD_16.0toolsbincdsZip.exe:*:Enabled:cdsZip (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincds_root.exe»=»C:OrCADOrCAD_16.0toolsbincds_root.exe:*:Enabled:cds_root (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinclsAdminTool.exe»=»C:OrCADOrCAD_16.0toolsbinclsAdminTool.exe:*:Enabled:clsAdminTool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinclsbd.exe»=»C:OrCADOrCAD_16.0toolsbinclsbd.exe:*:Enabled:clsbd (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinclu.exe»=»C:OrCADOrCAD_16.0toolsbinclu.exe:*:Enabled:clu (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincmfeedback.exe»=»C:OrCADOrCAD_16.0toolsbincmfeedback.exe:*:Enabled:cmfeedback (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinconsmgr.exe»=»C:OrCADOrCAD_16.0toolsbinconsmgr.exe:*:Enabled:consmgr (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbindregprint.exe»=»C:OrCADOrCAD_16.0toolsbindregprint.exe:*:Enabled:dregprint (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinemsMkError.exe»=»C:OrCADOrCAD_16.0toolsbinemsMkError.exe:*:Enabled:emsMkError (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinmpsinfo.exe»=»C:OrCADOrCAD_16.0toolsbinmpsinfo.exe:*:Enabled:mpsinfo (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinmsgHelp.exe»=»C:OrCADOrCAD_16.0toolsbinmsgHelp.exe:*:Enabled:msgHelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinnmp.exe»=»C:OrCADOrCAD_16.0toolsbinnmp.exe:*:Enabled:nmp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinnmppath.exe»=»C:OrCADOrCAD_16.0toolsbinnmppath.exe:*:Enabled:nmppath (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinswitchversion.exe»=»C:OrCADOrCAD_16.0toolsbinswitchversion.exe:*:Enabled:switchversion (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinvan.exe»=»C:OrCADOrCAD_16.0toolsbinvan.exe:*:Enabled:van (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinversionviewer.exe»=»C:OrCADOrCAD_16.0toolsbinversionviewer.exe:*:Enabled:versionviewer (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturecapture.exe»=»C:OrCADOrCAD_16.0toolscapturecapture.exe:*:Enabled:capture (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturecomp16.exe»=»C:OrCADOrCAD_16.0toolscapturecomp16.exe:*:Enabled:comp16 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturepcadi.exe»=»C:OrCADOrCAD_16.0toolscapturepcadi.exe:*:Enabled:pcadi (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturepspiceexplorersrvr.exe»=»C:OrCADOrCAD_16.0toolscapturepspiceexplorersrvr.exe:*:Enabled:pspiceexplorersrvr (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturepstswp.exe»=»C:OrCADOrCAD_16.0toolscapturepstswp.exe:*:Enabled:pstswp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscaptureregsvr32.exe»=»C:OrCADOrCAD_16.0toolscaptureregsvr32.exe:*:Enabled:regsvr32 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturesch2cap.exe»=»C:OrCADOrCAD_16.0toolscapturesch2cap.exe:*:Enabled:sch2cap (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturetutorialCAPTUTOR.EXE»=»C:OrCADOrCAD_16.0toolscapturetutorialCAPTUTOR.EXE:*:Enabled:CAPTUTOR (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscdnshelpbincdnshelp.exe»=»C:OrCADOrCAD_16.0toolscdnshelpbincdnshelp.exe:*:Enabled:cdnshelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscdnshelpbintopicgen.exe»=»C:OrCADOrCAD_16.0toolscdnshelpbintopicgen.exe:*:Enabled:topicgen (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscdnshelpbin_cdnshelp.exe»=»C:OrCADOrCAD_16.0toolscdnshelpbin_cdnshelp.exe:*:Enabled:_cdnshelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsdfIIbinskill.exe»=»C:OrCADOrCAD_16.0toolsdfIIbinskill.exe:*:Enabled:skill (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsdfIIbinskill_g.exe»=»C:OrCADOrCAD_16.0toolsdfIIbinskill_g.exe:*:Enabled:skill_g (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinbodygen.exe»=»C:OrCADOrCAD_16.0toolsfetbinbodygen.exe:*:Enabled:bodygen (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbincpmaccess.exe»=»C:OrCADOrCAD_16.0toolsfetbincpmaccess.exe:*:Enabled:cpmaccess (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinlibaccess.exe»=»C:OrCADOrCAD_16.0toolsfetbinlibaccess.exe:*:Enabled:libaccess (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinlrm.exe»=»C:OrCADOrCAD_16.0toolsfetbinlrm.exe:*:Enabled:lrm (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinmkdefcfg.exe»=»C:OrCADOrCAD_16.0toolsfetbinmkdefcfg.exe:*:Enabled:mkdefcfg (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinnewgenasym.exe»=»C:OrCADOrCAD_16.0toolsfetbinnewgenasym.exe:*:Enabled:newgenasym (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinpcbCache.exe»=»C:OrCADOrCAD_16.0toolsfetbinpcbCache.exe:*:Enabled:pcbCache (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinprojmgr.exe»=»C:OrCADOrCAD_16.0toolsfetbinprojmgr.exe:*:Enabled:projmgr (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinpsetup.exe»=»C:OrCADOrCAD_16.0toolsfetbinpsetup.exe:*:Enabled:psetup (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinpurge.exe»=»C:OrCADOrCAD_16.0toolsfetbinpurge.exe:*:Enabled:purge (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinQPSetup.exe»=»C:OrCADOrCAD_16.0toolsfetbinQPSetup.exe:*:Enabled:QPSetup (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinrollback.exe»=»C:OrCADOrCAD_16.0toolsfetbinrollback.exe:*:Enabled:rollback (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinUniversalBrowser.exe»=»C:OrCADOrCAD_16.0toolsfetbinUniversalBrowser.exe:*:Enabled:UniversalBrowser (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinversiontool.exe»=»C:OrCADOrCAD_16.0toolsfetbinversiontool.exe:*:Enabled:versiontool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjava.exe»=»C:OrCADOrCAD_16.0toolsjrebinjava.exe:*:Enabled:java (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjavacpl.exe»=»C:OrCADOrCAD_16.0toolsjrebinjavacpl.exe:*:Enabled:javacpl (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjavaw.exe»=»C:OrCADOrCAD_16.0toolsjrebinjavaw.exe:*:Enabled:javaw (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjavaws.exe»=»C:OrCADOrCAD_16.0toolsjrebinjavaws.exe:*:Enabled:javaws (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjucheck.exe»=»C:OrCADOrCAD_16.0toolsjrebinjucheck.exe:*:Enabled:jucheck (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjusched.exe»=»C:OrCADOrCAD_16.0toolsjrebinjusched.exe:*:Enabled:jusched (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinkeytool.exe»=»C:OrCADOrCAD_16.0toolsjrebinkeytool.exe:*:Enabled:keytool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinkinit.exe»=»C:OrCADOrCAD_16.0toolsjrebinkinit.exe:*:Enabled:kinit (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinklist.exe»=»C:OrCADOrCAD_16.0toolsjrebinklist.exe:*:Enabled:klist (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinktab.exe»=»C:OrCADOrCAD_16.0toolsjrebinktab.exe:*:Enabled:ktab (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinorbd.exe»=»C:OrCADOrCAD_16.0toolsjrebinorbd.exe:*:Enabled:orbd (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinpack200.exe»=»C:OrCADOrCAD_16.0toolsjrebinpack200.exe:*:Enabled:pack200 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinpolicytool.exe»=»C:OrCADOrCAD_16.0toolsjrebinpolicytool.exe:*:Enabled:policytool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinrmid.exe»=»C:OrCADOrCAD_16.0toolsjrebinrmid.exe:*:Enabled:rmid (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinrmiregistry.exe»=»C:OrCADOrCAD_16.0toolsjrebinrmiregistry.exe:*:Enabled:rmiregistry (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinservertool.exe»=»C:OrCADOrCAD_16.0toolsjrebinservertool.exe:*:Enabled:servertool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebintnameserv.exe»=»C:OrCADOrCAD_16.0toolsjrebintnameserv.exe:*:Enabled:tnameserv (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinunpack200.exe»=»C:OrCADOrCAD_16.0toolsjrebinunpack200.exe:*:Enabled:unpack200 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutfvupdateutil.exe»=»C:OrCADOrCAD_16.0toolslayoutfvupdateutil.exe:*:Enabled:fvupdateutil (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutgcad.exe»=»C:OrCADOrCAD_16.0toolslayoutgcad.exe:*:Enabled:gcad (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutgcam.exe»=»C:OrCADOrCAD_16.0toolslayoutgcam.exe:*:Enabled:gcam (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutgcdin.exe»=»C:OrCADOrCAD_16.0toolslayoutgcdin.exe:*:Enabled:gcdin (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutidfin.exe»=»C:OrCADOrCAD_16.0toolslayoutidfin.exe:*:Enabled:idfin (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutipc356.exe»=»C:OrCADOrCAD_16.0toolslayoutipc356.exe:*:Enabled:ipc356 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutlayout.exe»=»C:OrCADOrCAD_16.0toolslayoutlayout.exe:*:Enabled:layout (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutlibcat.exe»=»C:OrCADOrCAD_16.0toolslayoutlibcat.exe:*:Enabled:libcat (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutlsession.exe»=»C:OrCADOrCAD_16.0toolslayoutlsession.exe:*:Enabled:lsession (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmax2hyp.exe»=»C:OrCADOrCAD_16.0toolslayoutmax2hyp.exe:*:Enabled:max2hyp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxascb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxascb.exe:*:Enabled:maxascb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxascx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxascx.exe:*:Enabled:maxascx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxdxf.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxdxf.exe:*:Enabled:maxdxf (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxeco.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxeco.exe:*:Enabled:maxeco (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxfnetx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxfnetx.exe:*:Enabled:maxfnetx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxminb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxminb.exe:*:Enabled:maxminb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxminw.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxminw.exe:*:Enabled:maxminw (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxminx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxminx.exe:*:Enabled:maxminx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxorcad.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxorcad.exe:*:Enabled:maxorcad (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxp99x.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxp99x.exe:*:Enabled:maxp99x (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxpadb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxpadb.exe:*:Enabled:maxpadb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxpadx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxpadx.exe:*:Enabled:maxpadx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxpcadb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxpcadb.exe:*:Enabled:maxpcadb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxpcadx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxpcadx.exe:*:Enabled:maxpcadx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxprotb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxprotb.exe:*:Enabled:maxprotb (Release OrCAD 16.0)»

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{5b618b14-bfdc-11dd-bb5d-0004614509b8}]
shellAutoRuncommand — O:RECYCLERS-1-6-21-2434476501-1644491937-600003330-1213autorunme.exe
shellopencommand — O:RECYCLERS-1-6-21-2434476501-1644491937-600003330-1213autorunme.exe

======List of files/folders created in the last 1 months======

2009-02-19 00:06:44 —-A—- C:avenger.txt
2009-02-18 23:12:53 —-D—- C:ComboFix
2009-02-18 23:09:16 —-D—- C:Program FilesCommon Files{6EA9B29A-C801-4F76-805F-E41ACF9ED16Z}
2009-02-18 23:04:09 —-A—- C:WINDOWSsystem32CF27790.exe
2009-02-18 22:56:44 —-D—- C:_OTMoveIt
2009-02-17 22:03:51 —-A—- C:Documents and SettingsAll Users.WINDOWSApplication Dataazdlib.dll
2009-02-08 18:28:03 —-A—- C:WINDOWSUI.INI
2009-02-08 18:09:34 —-A—- C:WINDOWSsystem32Borlndmm.dll
2009-02-08 18:08:14 —-A—- C:WINDOWSsystem32MKScannerSetting.ini
2009-02-08 18:08:14 —-A—- C:WINDOWSsystem32MKCoInstaller.dll
2009-02-08 18:08:14 —-A—- C:WINDOWSsystem32ForgiveMe.exe
2009-02-08 18:08:14 —-A—- C:WINDOWSsystem32A2Nusd.dll
2009-02-08 18:08:14 —-A—- C:WINDOWSsystem32A2NMinidrv.ini
2009-02-08 18:08:14 —-A—- C:WINDOWSsystem32A2NMinidrv.dll
2009-02-08 13:58:20 —-A—- C:updating.exe
2009-02-07 16:21:10 —-D—- C:Documents and SettingsAnt-KillerApplication DataNero
2009-02-06 17:42:49 —-A—- C:WINDOWSsystem32winlogon2.exe
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lvkrn12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lvgl12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lvdx12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lvdlg12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltwvc12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32LTWND12n.DLL
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltwen12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32LTWEB12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltvid12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lttwn12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lttmb12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32LTTLB12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32LTSCR12n.DLL
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltnet12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltlst12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltisi12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltefx12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltdlg12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32LTDIS12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32LTDic12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32LTCON12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltcap12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltbar12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32LTAUT12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Ltann12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfxwd12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32lfXpm12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32lfXbm12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfwpg12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfwfx12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfvec12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lftga12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfsgi12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32lfRaw12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfras12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfpsd12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32LFPNM12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfpng12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfplt12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfpdf12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfpct12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfpcd12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfmsp12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfmpg12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfmac12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lflma12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfkodak.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfitg12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfiff12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfica12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfgif12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfgbr12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lffpx7.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lffpx12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfflc12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfeps12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfdxf12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32lfdwg12N.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfdwf12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfdrw12n.dll
2009-02-05 11:36:20 —-A—- C:WINDOWSsystem32Lfdgn12n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Ltwrp10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Ltkrn10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Ltimg10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Ltfil10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32LTDIS10N.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfwmf10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lftif10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfpcx10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfpct10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfmac10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lflmb10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lflma10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfimg10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lffax10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfdic10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32lfCUT12n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32LFCMW12n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfcmp10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfclp12n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfcgm12n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfcal12n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfcal10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfbmp10n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfawd12n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfavi12n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32Lfani12n.dll
2009-02-05 11:36:19 —-A—- C:WINDOWSsystem32BPEnhan.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Ltkrn12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Ltimg12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Ltfil12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Lfwmf12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Lftif12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Lfpcx12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Lflmb12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Lfjbg12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32LFJ2K12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Lfimg12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Lffax12n.dll
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32LFCMP12n.DLL
2009-02-05 11:36:18 —-A—- C:WINDOWSsystem32Lfbmp12n.dll
2009-02-05 11:36:17 —-A—- C:WINDOWSsystem32Vb5ko.dll
2009-02-05 02:01:42 —-A—- C:windowsupdates.exe
2009-02-04 19:49:51 —-A—- C:updates.exe
2009-01-23 08:30:14 —-A—- C:do.exe
2009-01-22 17:55:52 —-A—- C:winupdates2.exe
2009-01-22 08:19:45 —-D—- C:Program FilesQIP.Online
2009-01-21 20:52:50 —-D—- C:Program FilesCommon FilesICQ
2009-01-21 20:52:14 —-D—- C:Program FilesICQLite
2009-01-21 18:41:39 —-D—- C:Program FilesICQ6Toolbar
2009-01-21 18:41:36 —-D—- C:Documents and SettingsAll Users.WINDOWSApplication DataICQ
2009-01-21 18:39:42 —-D—- C:Documents and SettingsAnt-KillerApplication DataICQ
2009-01-21 18:39:26 —-D—- C:Program FilesICQ6.5

======List of files/folders modified in the last 1 months======

2009-02-19 00:12:28 —-D—- C:rsit
2009-02-19 00:12:25 —-D—- C:WINDOWSsystem32
2009-02-19 00:07:35 —-D—- C:WINDOWSTemp
2009-02-19 00:07:31 —-D—- C:Avenger
2009-02-19 00:07:21 —-D—- C:Program FilesDrWeb
2009-02-19 00:06:44 —-D—- C:WINDOWSsystem32drivers
2009-02-19 00:06:05 —-A—- C:WINDOWSSchedLgU.Txt
2009-02-19 00:03:52 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2009-02-18 23:51:52 —-D—- C:Program FilesTVBrowserLITE
2009-02-18 23:37:26 —-RAD—- C:Program Files
2009-02-18 23:13:04 —-D—- C:WINDOWS
2009-02-18 23:09:16 —-D—- C:WINDOWSHelp
2009-02-18 23:09:16 —-D—- C:Program FilesCommon Files
2009-02-18 23:05:49 —-D—- C:Qoobox
2009-02-17 14:39:56 —-D—- C:Program FilesFlashGet
2009-02-15 20:05:12 —-D—- C:Documents and SettingsAnt-KillerApplication DatauTorrent
2009-02-13 14:40:58 —-D—- C:WINDOWSPrefetch
2009-02-13 00:35:38 —-D—- C:Downloads
2009-02-12 23:43:11 —-D—- C:Program FilesMozilla Firefox
2009-02-08 18:10:43 —-HD—- C:WINDOWSinf
2009-02-08 18:10:43 —-D—- C:WINDOWSsystem32CatRoot2
2009-02-08 18:09:36 —-D—- C:WINDOWSsystem
2009-02-07 16:20:37 —-D—- C:Program FilesNero
2009-02-07 16:20:25 —-SHD—- C:WINDOWSInstaller
2009-02-04 16:30:44 —-D—- C:Program FilesQIP 8030 локалка
2009-02-04 16:30:21 —-D—- C:Program FilesQIP 8030
2009-02-04 16:29:45 —-D—- C:Program FilesQIP
2009-01-22 17:55:22 —-SHD—- C:RECYCLER
2009-01-21 20:52:49 —-HD—- C:Program FilesInstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2008-04-15 12032]
R2 acedrv11;acedrv11; ??C:WINDOWSsystem32driversacedrv11.sys []
R2 Aspi32;Aspi32; C:WINDOWSsystem32driversAspi32.sys [2002-07-17 16877]
R2 cvintdrv;cvintdrv; C:WINDOWSsystem32driverscvintdrv.sys [2006-07-27 4096]
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2008-06-05 62336]
R2 tifsfilter;Acronis True Image FS Filter; C:WINDOWSsystem32DRIVERStifsfilt.sys [2008-12-01 44704]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:WINDOWSsystem32driversALCXWDM.SYS [2006-05-10 3964736]
R3 hidusb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-15 10368]
R3 MBAMSwissArmy;MBAMSwissArmy; ??C:WINDOWSsystem32driversmbamswissarmy.sys []
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2008-07-07 12160]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2006-06-01 3925920]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtenicxp.sys [2006-06-17 83968]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-07-07 30336]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2008-07-07 17152]
R3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-07-08 25856]
R3 usbstor;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-15 26368]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-15 20608]
S2 SPIDER;SpIDer Guard File System Monitor; ??C:PROGRA~1DrWebspider.sys []
S3 a0ifdo2m;a0ifdo2m; C:WINDOWSsystem32driversa0ifdo2m.sys []
S3 ae21cbsr;ae21cbsr; C:WINDOWSsystem32driversae21cbsr.sys []
S3 GT680x;BearPaw 2448TA Plus Usb Scanner; C:WINDOWSSystem32DriversGt680x.sys [2003-02-18 17504]
S3 GVCplDrv;GVCplDrv; C:WINDOWSsystem32driversGVCplDrv.sys [2004-05-02 23040]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2007-06-18 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2007-06-18 82944]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcrSch2Svc;Acronis Scheduler2 Service; C:Program FilesCommon FilesAcronisSchedule2schedul2.exe [2008-11-04 554264]
R2 Cadence License Manager;Cadence License Manager; C:OrCADlicense_managerlmgrd.exe [2007-03-18 1327104]
R2 LkCitadelServer;Lookout Citadel Server; C:WINDOWSsystem32lkcitdl.exe [2006-06-19 688190]
R2 lkClassAds;National Instruments PSP Server Locator; C:WINDOWSsystem32lkads.exe [2006-07-25 45056]
R2 lkTimeSync;National Instruments Time Synchronization; C:WINDOWSsystem32lktsrv.exe [2006-07-25 57344]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe [2006-10-26 335872]
R2 NIDomainService;National Instruments Domain Service; C:Program FilesNational InstrumentsSharedSecuritynidmsrv.exe [2006-07-25 200704]
R2 niSvcLoc;NI Service Locator; C:WINDOWSsystem32nisvcloc.exe [2006-02-06 49152]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:Program FilesCyberLinkShared FilesRichVideo.exe [2007-11-02 167936]
R2 SNMP;Служба SNMP; C:WINDOWSSystem32snmp.exe [2008-04-15 32768]
R2 winsecguard;Windows Security Guard; C:WINDOWSHelpzpx2.exe [2009-02-18 494080]
S2 SPIDERNT;SpIDer Guard for Windows; C:PROGRA~1DrWebspidernt.exe [2008-10-23 197896]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2007-10-24 70144]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2007-10-09 36864]
S3 gusvc;Google Updater Service; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-01-17 137200]
S3 idsvc;Windows CardSpace; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2007-10-11 864256]
S3 LPDSVC;Сервер печати TCP/IP; C:WINDOWSsystem32tcpsvcs.exe [2008-04-15 19456]
S3 NILM License Manager;NILM License Manager; C:Program FilesNational InstrumentsSharedLicense ManagerBinlmgrd.exe [2006-06-27 1007616]
S3 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2006-06-01 155715]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 SNMPTRAP;Служба ловушек SNMP; C:WINDOWSSystem32snmptrap.exe [2008-04-15 8704]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media Playerwmpnetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S4 ICQ Service;ICQ Service; C:Program FilesICQ6ToolbarICQ Service.exe [2008-06-10 222456]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2007-10-11 122880]
S4 StarWindServiceAE;StarWind AE Service; C:Program FilesAlcohol SoftAlcohol 52StarWindStarWindServiceAE.exe [2007-05-28 275968]

EOF
18 февраля, 2009 в 9:20 пп в ответ на: проблема с порно лентой в IE #22137
Ant
Participant
- Темы:3
- Сообщений:9
info.txt logfile of random’s system information tool 1.05 2009-02-19 00:12:30

======Uninstall list======

—>C:Program FilesDivXDivXConverterUninstall.exe /CONVERTER
—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-0015-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-0016-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-0018-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-0019-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-001A-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-001B-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-001F-0419-0000-0000000FF1CE} /uninstall {D7CE14BC-96D9-41C5-822D-F5B1C2C35AA2}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-001F-0422-0000-0000000FF1CE} /uninstall {DC154E48-5278-423A-80A1-B93247E38A1A}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-0044-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-006E-0419-0000-0000000FF1CE} /uninstall {23653CA5-BFB5-4B52-B2DA-045D7ABEB874}
ABBYY FineReader 8.0 Professional Edition—>MsiExec.exe /I{AAF80000-22B9-4CE9-98D6-2CCF359BAC07}
ACDSee 9 Photo Manager—>MsiExec.exe /X{B2D41883-3BFC-4BA0-A2F6-5A2C9836C238}
Acronis Disk Director Suite—>MsiExec.exe /X{2300EE96-0A41-4FAB-BD03-989EC44577A0}
Acronis True Image Home—>MsiExec.exe /X{37C8899D-FD70-481F-94AA-1F1B08765E22}
Adobe Flash Player 10 ActiveX—>C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Flash Player 10 Plugin—>C:WINDOWSsystem32MacromedFlashuninstall_plugin.exe
Adobe Reader 6.0—>MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-000000000001}
BearPaw 2448TA Plus v1.0—>C:PROGRA~1BEARPA~1DriverUNINST.EXE
BearPaw 2448TA Plus v1.1—>C:PROGRA~1BEARPA~1DriverUNINST.EXE
Cadence License Manager—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime701Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{CE9CAAD2-A4CA-48CC-B0C2-07254867FAD4}Setup.exe» -l0x9 Uninstall
Crystal XI—>MsiExec.exe /I{0B9E27C7-9ECD-4362-B311-030EA48F8E72}
DAEMON Tools Toolbar—>C:Program FilesDAEMON Tools Toolbaruninst.exe
DivX Converter—>C:Program FilesDivXDivXConverterUninstall.exe /CONVERTER
DivX Player—>C:Program FilesDivXDivXPlayerUninstall.exe /PLAYER
DivX Web Player—>C:Program FilesDivXDivXWebPlayerUninstall.exe /PLUGIN
Dr.Web—>»C:Program FilesInstallShield Installation Information{BBE2F69C-4338-11D7-8F0C-00A0244F4E2D}setup.exe» -runfromtemp -l0x0019 -removeonly
FlashGet 1.9.6.1073—>C:Program FilesFlashGetuninst.exe
Google Toolbar for Internet Explorer—>»C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarManager_0531C63A913CC9D1.exe» /uninstall
HashTab 1.14—>C:WINDOWSsystem32htdel.bat
HijackThis 2.0.2—>»C:Program FilesTrend MicroHijackThisHijackThis.exe» /uninstall
HI-TECH C51-lite V9.60PL0—>»C:Program FilesHI-TECH SoftwareHC51lite9.60resourcessetup.exe»
HI-TECH PICC lite V9.60PL0—>»C:Program FilesHI-TECH SoftwarePICClite9.60resourcessetup.exe»
HP OrderReminder—>»C:Program FilesHewlett-PackardOrderReminderuninstallhpuninstaller.exe» hp_LaserJet_1018
ICQ Lite—>»C:Program FilesInstallShield Installation Information{6C13128C-1782-456F-84A4-017CECE259CA}setup.exe» -runfromtemp -l0x0009 -removeonly
ICQ Toolbar—>C:Program FilesICQ6ToolbarICQUnToolbar.exe
ICQ6.5—>»C:Program FilesInstallShield Installation Information{60DE4033-9503-48D1-A483-7846BD217CA9}setup.exe» -runfromtemp -l0x0009 -removeonly
Java(TM) 6 Update 6—>MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160060}
KB905474 (1.5.708)—>»C:WINDOWSunins000.exe»
K-Lite Mega Codec Pack 4.4.2—>»C:Program FilesK-Lite Codec Packunins000.exe»
LaserJet 1018—>C:Program FilesZenographics{BC30EAE3-5D3C-4C8A-AE9F-F3F5413432F9}setup.exe -u «HPLJInstaller.dll=Hplj1018.inf»
Mail.Ru Агент 5.2 (сборка 2415, для всех пользователей)—>C:Program FilesMail.RuAgentmagentsetup.exe -uninstalllm
Mail.Ru Спутник 2.0.1.31—>C:Program FilesMail.RuSputnikSputnikInstaller.exe -uninstall
Malwarebytes’ Anti-Malware—>»C:Program FilesMalwarebytes’ Anti-Malwareunins000.exe»
Mathcad 14 Help—>MsiExec.exe /I{205ACCD7-5342-4694-91F3-3A99E4FD5AA6}
Mathcad 14 Resource Center—>MsiExec.exe /I{EBD38AE9-D52D-448D-9DB4-4D5F66E1DAFC}
Mathcad 14 Russian Pack—>C:WINDOWSMathcad 14 Russian Pack Uninstaller.exe
Mathcad 14—>MsiExec.exe /I{E666A69B-A76D-43D5-AF28-4B2150A6EDE2}
Media Add-ons для Acronis True Image Home 2009—>MsiExec.exe /X{8B961557-75BB-4336-8167-90267ED34267}
Microsoft .NET Framework 1.1 Russian Language Pack—>MsiExec.exe /X{2BB372D9-52B4-410A-BC1A-FEAB63181EEF}
Microsoft .NET Framework 1.1—>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1—>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1—>MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft .NET Framework 3.0 Service Pack 1—>MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
Microsoft .NET Framework 3.5—>C:WINDOWSMicrosoft.NETFrameworkv3.5Microsoft .NET Framework 3.5setup.exe
Microsoft .NET Framework 3.5—>MsiExec.exe /I{2FC099BD-AC9B-33EB-809C-D332E1B27C40}
Microsoft Office Access MUI (Russian) 2007—>MsiExec.exe /X{90120000-0015-0419-0000-0000000FF1CE}
Microsoft Office Excel MUI (Russian) 2007—>MsiExec.exe /X{90120000-0016-0419-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Russian) 2007—>MsiExec.exe /X{90120000-0044-0419-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Russian) 2007—>MsiExec.exe /X{90120000-001A-0419-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Russian) 2007—>MsiExec.exe /X{90120000-0018-0419-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007—>MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007—>MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007—>MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Russian) 2007—>MsiExec.exe /X{90120000-001F-0419-0000-0000000FF1CE}
Microsoft Office Proof (Ukrainian) 2007—>MsiExec.exe /X{90120000-001F-0422-0000-0000000FF1CE}
Microsoft Office Proofing (Russian) 2007—>MsiExec.exe /X{90120000-002C-0419-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Russian) 2007—>MsiExec.exe /X{90120000-0019-0419-0000-0000000FF1CE}
Microsoft Office Shared MUI (Russian) 2007—>MsiExec.exe /X{90120000-006E-0419-0000-0000000FF1CE}
Microsoft Office Word MUI (Russian) 2007—>MsiExec.exe /X{90120000-001B-0419-0000-0000000FF1CE}
Microsoft Office Профессиональный плюс 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Silverlight—>MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
MSXML 4.0 SP2 (KB936181)—>MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 Parser and SDK—>MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
National Instruments Software—>»C:Program FilesNational InstrumentsSharedNIUninstalleruninst.exe»
Nero 8 Micro v8.0.3.0—>»C:Program FilesNerounins000.exe»
NI EULA Depot—>MsiExec.exe /I{0BEA337D-71D0-44C7-A575-932612A00908}
NI MDF Support—>MsiExec.exe /I{53FE1175-1B37-4677-924C-62AFFCC83800}
NVIDIA Drivers—>C:WINDOWSsystem32nvudisp.exe UninstallGUI
PowerDVD—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}SETUP.EXE» -uninstall
ProtectDisc Driver, Version 11—>C:Program FilesProtectDisc Driver Installeruninstall_v11.exe
Punto Switcher 3.0—>C:Program FilesPunto Switcheruninstall.exe
QIP 2005 8082—>»C:Program FilesQIP 8030 локалкаunins000.exe»
QIP 2005 Uninstall—>»C:Program FilesQIPunqip.exe»
QIP Infium 2.0.9022 RC4—>»C:Program FilesQIPunins000.exe»
QIP.Online—>C:Program FilesQIP.OnlineUninstall.exe
Realtek AC’97 Audio—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{FB08F381-6533-4108-B7DD-039E11FBC27E}setup.exe» -l0x19 -removeonly
REALTEK GbE & FE Ethernet PCI NIC Driver—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime110Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}setup.exe» -l0x19 -removeonly
REALTEK GbE & FE Ethernet PCI-E NIC Driver—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime110Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{C9BED750-1211-4480-B1A5-718A3BE15525}setup.exe» -l0x19 -removeonly
Release OrCAD 16.0—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{FF9312A2-9810-40E2-9954-617DDE7B123F}setup.exe» -l0x9 Uninstall -removeonly
RTL Biathlon 2009—>»E:GamesRTL Biathlon 2009Uninstall.exe»
Russian interface language for ABBYY FineReader 8.0 Professional Edition—>MsiExec.exe /X{A32C73ED-D8AD-4805-B293-39022C3DF15D}
Sid Meier’s Civilization IV: Колонизация v 1.0—>»E:GamesCIV IV Colonizationunins000.exe»
Skype™ 3.8—>MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
SopCast 3.0.3—>C:Program FilesSopCastuninst.exe
ViewSonic Monitor Drivers—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{B4FEA924-630D-11D4-B78E-005004566E4D}Setup.exe» -l0x9
Windows Media Format 11 runtime—>»C:Program FilesWindows Media Playerwmsetsdk.exe» /UninstallAll
Windows Media Player Firefox Plugin—>MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
WinPatrol 2007—>C:PROGRA~1BILLPS~1WINPAT~1Setup.exe /remove /q0
Яндекс.Бар для Internet Explorer 3.5.4—>»C:Program FilesYandexYandexBarIEunins000.exe»

======Hosts File======

127.0.0.1 mpa.one.microsoft.com

======Security center information======

AV: Doctor Web Anti-Virus (outdated)
AV: Антивирус Касперского (outdated)

System event log

Computer Name: ANTDEN
Event Code: 20159
Message: Подключение пользователя «k3Pube@realm» к «den-link», выполненное с помощью устройства «PPPoE4-0», было прервано.

Record Number: 5134
Source Name: RemoteAccess
Time Written: 20090119231203.000000+180
Event Type: информация
User:

Computer Name: ANTDEN
Event Code: 20158
Message: Успешно выполнено подключение пользователя «k3Pube@realm»к «den-link», с помощью устройства «PPPoE4-0».

Record Number: 5133
Source Name: RemoteAccess
Time Written: 20090119190849.000000+180
Event Type: информация
User:

Computer Name: ANTDEN
Event Code: 51
Message: Обнаружена ошибка на устройстве DeviceHarddisk0D во время выполнения операции страничного обмена.

Record Number: 5132
Source Name: Disk
Time Written: 20090119190820.000000+180
Event Type: предупреждение
User:

Computer Name: ANTDEN
Event Code: 51
Message: Обнаружена ошибка на устройстве DeviceHarddisk0D во время выполнения операции страничного обмена.

Record Number: 5131
Source Name: Disk
Time Written: 20090119190820.000000+180
Event Type: предупреждение
User:

Computer Name: ANTDEN
Event Code: 51
Message: Обнаружена ошибка на устройстве DeviceHarddisk0D во время выполнения операции страничного обмена.

Record Number: 5130
Source Name: Disk
Time Written: 20090119190820.000000+180
Event Type: предупреждение
User:

Application event log

Computer Name: ANTDEN
Event Code: 1035
Message: Установщик Windows изменил настройку продукта. Продукт: Microsoft Office Proof (Russian) 2007. Версия: 12.0.6213.1000. Язык: 1049. Изменение настройки завершено с состоянием: 0.

Record Number: 369
Source Name: MsiInstaller
Time Written: 20081128124218.000000+180
Event Type: информация
User: ANTDENAnt-Killer

Computer Name: ANTDEN
Event Code: 11728
Message: Product: Microsoft Office Proof (Russian) 2007 — Настройка завершена успешно.

Record Number: 368
Source Name: MsiInstaller
Time Written: 20081128124218.000000+180
Event Type: информация
User: ANTDENAnt-Killer

Computer Name: ANTDEN
Event Code: 1036
Message: Установщик Windows выполнил установку обновления. Продукт: Microsoft Office Proof (Russian) 2007. Версия: 12.0.6213.1000. Язык: 1049. Обновление: 2007 Microsoft Office Suite Service Pack 1 (SP1). Установка завершена с состоянием: 0.

Record Number: 367
Source Name: MsiInstaller
Time Written: 20081128124218.000000+180
Event Type: информация
User: ANTDENAnt-Killer

Computer Name: ANTDEN
Event Code: 1022
Message: Продукт: Microsoft Office Proof (Russian) 2007 — пакет обновлений «2007 Microsoft Office Suite Service Pack 1 (SP1)» успешно установлен.

Record Number: 366
Source Name: MsiInstaller
Time Written: 20081128124218.000000+180
Event Type: информация
User: ANTDENAnt-Killer

Computer Name: ANTDEN
Event Code: 1040
Message: Начата транзакция установщика Windows: {90120000-001F-0419-0000-0000000FF1CE}. ИД клиентского процесса: 1156.

Record Number: 365
Source Name: MsiInstaller
Time Written: 20081128124216.000000+180
Event Type: информация
User: ANTDENAnt-Killer

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«FP_NO_HOST_CHECK»=NO
«KMP_DUPLICATE_LIB_OK»=TRUE
«MKL_SERIAL»=YES
«NUMBER_OF_PROCESSORS»=2
«OS»=Windows_NT
«Path»=%systemroot%system32;%systemroot%;%systemroot%system32wbem;%CDSROOT%toolsfetbin;%CDSROOT%toolspcbbin;%CDSROOT%toolsspecctrabin;%CDSROOT%toolsPSpice;%CDSROOT%toolsPSpiceLibrary;%CDSROOT%toolsCapture;%CDSROOT%toolsbin
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_IDENTIFIER»=x86 Family 15 Model 75 Stepping 2, AuthenticAMD
«PROCESSOR_LEVEL»=15
«PROCESSOR_REVISION»=4b02
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP
«windir»=%SystemRoot%
«CONCEPT_INST_DIR»=%CDSROOT%
«CDSROOT»=C:OrCADOrCAD_16.0

EOF
11 января, 2009 в 8:47 дп в ответ на: Antivirus 2009 (те же грабли как и у многих) #21049
Ant
Participant
- Темы:3
- Сообщений:9
4) Avenger:
Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

Completed script processing.

*******************

Finished! Terminate.
11 января, 2009 в 8:43 дп в ответ на: Antivirus 2009 (те же грабли как и у многих) #21048
Ant
Participant
- Темы:3
- Сообщений:9
3) Malwarebytes’ Anti-Malware 1.32:
Malwarebytes’ Anti-Malware 1.32
Версия базы данных: 1638
Windows 5.1.2600 Service Pack 3

10.01.2009 16:50:34
mbam-log-2009-01-10 (16-50-34).txt

Тип проверки: Быстрая
Проверено объектов: 85812
Прошло времени: 40 minute(s), 53 second(s)

Заражено процессов в памяти: 0
Заражено модулей в памяти: 0
Заражено ключей реестра: 0
Заражено значений реестра: 0
Заражено параметров реестра: 0
Заражено папок: 0
Заражено файлов: 0

Заражено процессов в памяти:
(Вредоносные программы не обнаружены)

Заражено модулей в памяти:
(Вредоносные программы не обнаружены)

Заражено ключей реестра:
(Вредоносные программы не обнаружены)

Заражено значений реестра:
(Вредоносные программы не обнаружены)

Заражено параметров реестра:
(Вредоносные программы не обнаружены)

Заражено папок:
(Вредоносные программы не обнаружены)

Заражено файлов:
(Вредоносные программы не обнаружены)
11 января, 2009 в 8:42 дп в ответ на: Antivirus 2009 (те же грабли как и у многих) #21047
Ant
Participant
- Темы:3
- Сообщений:9
1) и 2) RSIT:

Logfile of random’s system information tool 1.05 (written by random/random)
Run by Ant-Killer at 2009-01-11 11:32:13
Microsoft Windows XP Professional Service Pack 3
System drive C: has 12 GB (25%) free of 49 GB
Total RAM: 2047 MB (79% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:32:16, on 11.01.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20815)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32RunDLL32.exe
C:Program FilesMail.RuAgentMAgent.exe
C:Program FilesDrWebspiderml.exe
C:Program FilesDrWebDRWEBSCD.EXE
C:PROGRA~1DrWebspiderui.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesPunto Switcherpunto.exe
C:Program FilesCommon FilesAcronisSchedule2schedul2.exe
C:OrCADlicense_managerlmgrd.exe
C:OrCADlicense_managerlmgrd.exe
C:WINDOWSsystem32lkcitdl.exe
C:WINDOWSsystem32lkads.exe
C:WINDOWSsystem32lktsrv.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe
C:Program FilesNational InstrumentsSharedSecuritynidmsrv.exe
C:WINDOWSsystem32nisvcloc.exe
C:WINDOWSsystem32nvsvc32.exe
C:Program FilesCyberLinkShared FilesRichVideo.exe
C:WINDOWSSystem32snmp.exe
C:Program FilesAlcohol SoftAlcohol 52StarWindStarWindServiceAE.exe
C:Program FilesOperaopera.exe
C:Documents and SettingsAnt-KillerРабочий столRSIT.exe
C:Program Filestrend microHijackThisAnt-Killer.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://search.qip.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=40316
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://samlab.ws
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://search.qip.ru
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://search.qip.ru/search?query=%s&from=IE
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
R3 — URLSearchHook: (no name) — {d3e23b4b-f153-4687-82c2-816319dd3c5a} — (no file)
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:Program FilesMail.RuAgentMradllnewmrasearch.dll
O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll
O2 — BHO: &Research — {0B014B81-4E12-46F9-806F-55867AF8FD3C} — C:WINDOWSsystem32winsystems.dll
O2 — BHO: Skype add-on (mastermind) — {22BF413B-C6D2-4d91-82A9-A0F997BA588C} — (no file)
O2 — BHO: flashget urlcatch — {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} — C:Program FilesFlashGetjccatch.dll
O2 — BHO: IEVkbdBHO — {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} — (no file)
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_06binssv.dll
O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — c:program filesgooglegoogletoolbar1.dll
O2 — BHO: FlashGet GetFlash Class — {F156768E-81EF-470C-9057-481BA8380DBA} — C:Program FilesFlashGetgetflash.dll
O3 — Toolbar: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O3 — Toolbar: DAEMON Tools Toolbar — {32099AAC-C132-4136-9E9A-4E364A424E17} — C:Program FilesDAEMON Tools ToolbarDTToolbar.dll
O3 — Toolbar: &Google — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — c:program filesgooglegoogletoolbar1.dll
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 — HKLM..Run: [OSSelectorReinstall] C:Program FilesCommon FilesAcronisAcronis Disk Directoross_reinstall.exe
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe -LM
O4 — HKLM..Run: [SpIDerMail] «C:Program FilesDrWebspiderml.exe»
O4 — HKLM..Run: [DrWebScheduler] «C:Program FilesDrWebDRWEBSCD.EXE»
O4 — HKLM..Run: [SpIDerNT] C:PROGRA~1DrWebspiderui.exe /agent
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [Punto Switcher] C:Program FilesPunto Switcherpunto.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,OnceFirstLogonInstall,0 (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE7_011] regsvr32 /s /n /i:u shell32 (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE7_012] rundll32 advpack.dll,LaunchINFSectionEx IE7int.inf,AfterUserStart,,4,N (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,OnceFirstLogonInstall,0 (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘Default user’)
O8 — Extra context menu item: &Закачать все при помощи FlashGet — C:Program FilesFlashGetjc_all.htm
O8 — Extra context menu item: &Закачать при помощи FlashGet — C:Program FilesFlashGetjc_link.htm
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O8 — Extra context menu item: Найти в интернете — res://C:Program FilesMail.RuSputnikMailRuSputnik.dll/282
O8 — Extra context menu item: Найти в словарях — res://C:Program FilesMail.RuSputnikMailRuSputnik.dll/283
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: Skype — {77BF5300-1474-4EC7-9980-D32B190E9B07} — C:WINDOWSsystem32shdocvw.dll
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 — Extra button: FlashGet — {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} — C:Program FilesFlashGetFlashGet.exe
O9 — Extra ‘Tools’ menuitem: FlashGet — {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} — C:Program FilesFlashGetFlashGet.exe
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O17 — HKLMSystemCCSServicesTcpip..{2238F8B2-7C1B-4F50-8446-B541F84C9E4F}: NameServer = 10.0.0.10
O17 — HKLMSystemCCSServicesTcpip..{78B076FE-17D5-4121-A567-1B96D385A841}: NameServer = 10.0.0.10
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O23 — Service: Acronis Scheduler2 Service (AcrSch2Svc) — Acronis — C:Program FilesCommon FilesAcronisSchedule2schedul2.exe
O23 — Service: Cadence License Manager — Macrovision Corporation — C:OrCADlicense_managerlmgrd.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Google Updater Service (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Lookout Citadel Server (LkCitadelServer) — National Instruments, Inc. — C:WINDOWSsystem32lkcitdl.exe
O23 — Service: National Instruments PSP Server Locator (lkClassAds) — National Instruments, Inc. — C:WINDOWSsystem32lkads.exe
O23 — Service: National Instruments Time Synchronization (lkTimeSync) — National Instruments, Inc. — C:WINDOWSsystem32lktsrv.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: National Instruments Domain Service (NIDomainService) — National Instruments, Inc. — C:Program FilesNational InstrumentsSharedSecuritynidmsrv.exe
O23 — Service: NILM License Manager — Macrovision Corporation — C:Program FilesNational InstrumentsSharedLicense ManagerBinlmgrd.exe
O23 — Service: NI Service Locator (niSvcLoc) — National Instruments Corp. — C:WINDOWSsystem32nisvcloc.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — C:Program FilesCyberLinkShared FilesRichVideo.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Служба SNMP (SNMP) — Корпорация Майкрософт — C:WINDOWSSystem32snmp.exe
O23 — Service: SpIDer Guard for Windows (SPIDERNT) — Doctor Web, Ltd. — C:PROGRA~1DrWebspidernt.exe
O23 — Service: StarWind AE Service (StarWindServiceAE) — Rocket Division Software — C:Program FilesAlcohol SoftAlcohol 52StarWindStarWindServiceAE.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 11577 bytes

======Scheduled tasks folder======

C:WINDOWStaskskzrojlee.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class — C:Program FilesAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll [2003-05-15 50376]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{0B014B81-4E12-46F9-806F-55867AF8FD3C}]
&Research — C:WINDOWSsystem32winsystems.dll [2008-07-07 310272]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}]
FGCatchUrl — C:Program FilesFlashGetjccatch.dll [2007-08-06 94308]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_06binssv.dll [2008-03-25 509328]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2008-12-10 667336]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — c:program filesgooglegoogletoolbar1.dll [2009-01-09 2427968]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{F156768E-81EF-470C-9057-481BA8380DBA}]
FlashGet GetFlash Class — C:Program FilesFlashGetgetflash.dll [2007-05-18 163840]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2008-12-10 667336]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2008-10-16 1578248]
{32099AAC-C132-4136-9E9A-4E364A424E17} — DAEMON Tools Toolbar — C:Program FilesDAEMON Tools ToolbarDTToolbar.dll [2008-12-10 929224]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — &Google — c:program filesgooglegoogletoolbar1.dll [2009-01-09 2427968]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2006-06-01 7618560]
«NvMediaCenter»=C:WINDOWSsystem32NvMCTray.dll [2006-06-01 86016]
«OSSelectorReinstall»=C:Program FilesCommon FilesAcronisAcronis Disk Directoross_reinstall.exe [2007-03-26 2227256]
«MAgent»=C:Program FilesMail.RuAgentMAgent.exe [2008-12-10 4428472]
«SpIDerMail»=C:Program FilesDrWebspiderml.exe [2008-06-10 501080]
«DrWebScheduler»=C:Program FilesDrWebDRWEBSCD.EXE [2008-05-05 283888]
«SpIDerNT»=C:PROGRA~1DrWebspiderui.exe [2008-10-23 197896]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-15 15360]
«Punto Switcher»=C:Program FilesPunto Switcherpunto.exe [2008-10-16 735016]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2007-06-18 133632]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=36
«NoDriveAutoRun»=FFFFFFFF

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
«C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE»=»C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook»
«C:Program FilesFlashGetflashget.exe»=»C:Program FilesFlashGetflashget.exe:*:Enabled:Flashget»
«C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype»
«C:OrCADOrCAD_16.0toolsbincdnshelp.exe»=»C:OrCADOrCAD_16.0toolsbincdnshelp.exe:*:Enabled:cdnshelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsinfo.exe»=»C:OrCADOrCAD_16.0toolsbincdsinfo.exe:*:Enabled:cdsinfo (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsmps.exe»=»C:OrCADOrCAD_16.0toolsbincdsmps.exe:*:Enabled:cdsmps (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsMsgServer.exe»=»C:OrCADOrCAD_16.0toolsbincdsMsgServer.exe:*:Enabled:cdsMsgServer (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsNameServer.exe»=»C:OrCADOrCAD_16.0toolsbincdsNameServer.exe:*:Enabled:cdsNameServer (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsOaPathUtil.exe»=»C:OrCADOrCAD_16.0toolsbincdsOaPathUtil.exe:*:Enabled:cdsOaPathUtil (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsRemote.exe»=»C:OrCADOrCAD_16.0toolsbincdsRemote.exe:*:Enabled:cdsRemote (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsRemshClient.exe»=»C:OrCADOrCAD_16.0toolsbincdsRemshClient.exe:*:Enabled:cdsRemshClient (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsRunHidden.exe»=»C:OrCADOrCAD_16.0toolsbincdsRunHidden.exe:*:Enabled:cdsRunHidden (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsServIpc.exe»=»C:OrCADOrCAD_16.0toolsbincdsServIpc.exe:*:Enabled:cdsServIpc (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsUnzip.exe»=»C:OrCADOrCAD_16.0toolsbincdsUnzip.exe:*:Enabled:cdsUnzip (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdswhich.exe»=»C:OrCADOrCAD_16.0toolsbincdswhich.exe:*:Enabled:cdswhich (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsZip.exe»=»C:OrCADOrCAD_16.0toolsbincdsZip.exe:*:Enabled:cdsZip (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincds_root.exe»=»C:OrCADOrCAD_16.0toolsbincds_root.exe:*:Enabled:cds_root (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinclsAdminTool.exe»=»C:OrCADOrCAD_16.0toolsbinclsAdminTool.exe:*:Enabled:clsAdminTool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinclsbd.exe»=»C:OrCADOrCAD_16.0toolsbinclsbd.exe:*:Enabled:clsbd (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinclu.exe»=»C:OrCADOrCAD_16.0toolsbinclu.exe:*:Enabled:clu (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincmfeedback.exe»=»C:OrCADOrCAD_16.0toolsbincmfeedback.exe:*:Enabled:cmfeedback (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinconsmgr.exe»=»C:OrCADOrCAD_16.0toolsbinconsmgr.exe:*:Enabled:consmgr (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbindregprint.exe»=»C:OrCADOrCAD_16.0toolsbindregprint.exe:*:Enabled:dregprint (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinemsMkError.exe»=»C:OrCADOrCAD_16.0toolsbinemsMkError.exe:*:Enabled:emsMkError (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinmpsinfo.exe»=»C:OrCADOrCAD_16.0toolsbinmpsinfo.exe:*:Enabled:mpsinfo (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinmsgHelp.exe»=»C:OrCADOrCAD_16.0toolsbinmsgHelp.exe:*:Enabled:msgHelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinnmp.exe»=»C:OrCADOrCAD_16.0toolsbinnmp.exe:*:Enabled:nmp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinnmppath.exe»=»C:OrCADOrCAD_16.0toolsbinnmppath.exe:*:Enabled:nmppath (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinswitchversion.exe»=»C:OrCADOrCAD_16.0toolsbinswitchversion.exe:*:Enabled:switchversion (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinvan.exe»=»C:OrCADOrCAD_16.0toolsbinvan.exe:*:Enabled:van (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinversionviewer.exe»=»C:OrCADOrCAD_16.0toolsbinversionviewer.exe:*:Enabled:versionviewer (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturecapture.exe»=»C:OrCADOrCAD_16.0toolscapturecapture.exe:*:Enabled:capture (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturecomp16.exe»=»C:OrCADOrCAD_16.0toolscapturecomp16.exe:*:Enabled:comp16 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturepcadi.exe»=»C:OrCADOrCAD_16.0toolscapturepcadi.exe:*:Enabled:pcadi (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturepspiceexplorersrvr.exe»=»C:OrCADOrCAD_16.0toolscapturepspiceexplorersrvr.exe:*:Enabled:pspiceexplorersrvr (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturepstswp.exe»=»C:OrCADOrCAD_16.0toolscapturepstswp.exe:*:Enabled:pstswp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscaptureregsvr32.exe»=»C:OrCADOrCAD_16.0toolscaptureregsvr32.exe:*:Enabled:regsvr32 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturesch2cap.exe»=»C:OrCADOrCAD_16.0toolscapturesch2cap.exe:*:Enabled:sch2cap (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturetutorialCAPTUTOR.EXE»=»C:OrCADOrCAD_16.0toolscapturetutorialCAPTUTOR.EXE:*:Enabled:CAPTUTOR (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscdnshelpbincdnshelp.exe»=»C:OrCADOrCAD_16.0toolscdnshelpbincdnshelp.exe:*:Enabled:cdnshelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscdnshelpbintopicgen.exe»=»C:OrCADOrCAD_16.0toolscdnshelpbintopicgen.exe:*:Enabled:topicgen (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscdnshelpbin_cdnshelp.exe»=»C:OrCADOrCAD_16.0toolscdnshelpbin_cdnshelp.exe:*:Enabled:_cdnshelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsdfIIbinskill.exe»=»C:OrCADOrCAD_16.0toolsdfIIbinskill.exe:*:Enabled:skill (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsdfIIbinskill_g.exe»=»C:OrCADOrCAD_16.0toolsdfIIbinskill_g.exe:*:Enabled:skill_g (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinbodygen.exe»=»C:OrCADOrCAD_16.0toolsfetbinbodygen.exe:*:Enabled:bodygen (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbincpmaccess.exe»=»C:OrCADOrCAD_16.0toolsfetbincpmaccess.exe:*:Enabled:cpmaccess (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinlibaccess.exe»=»C:OrCADOrCAD_16.0toolsfetbinlibaccess.exe:*:Enabled:libaccess (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinlrm.exe»=»C:OrCADOrCAD_16.0toolsfetbinlrm.exe:*:Enabled:lrm (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinmkdefcfg.exe»=»C:OrCADOrCAD_16.0toolsfetbinmkdefcfg.exe:*:Enabled:mkdefcfg (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinnewgenasym.exe»=»C:OrCADOrCAD_16.0toolsfetbinnewgenasym.exe:*:Enabled:newgenasym (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinpcbCache.exe»=»C:OrCADOrCAD_16.0toolsfetbinpcbCache.exe:*:Enabled:pcbCache (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinprojmgr.exe»=»C:OrCADOrCAD_16.0toolsfetbinprojmgr.exe:*:Enabled:projmgr (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinpsetup.exe»=»C:OrCADOrCAD_16.0toolsfetbinpsetup.exe:*:Enabled:psetup (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinpurge.exe»=»C:OrCADOrCAD_16.0toolsfetbinpurge.exe:*:Enabled:purge (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinQPSetup.exe»=»C:OrCADOrCAD_16.0toolsfetbinQPSetup.exe:*:Enabled:QPSetup (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinrollback.exe»=»C:OrCADOrCAD_16.0toolsfetbinrollback.exe:*:Enabled:rollback (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinUniversalBrowser.exe»=»C:OrCADOrCAD_16.0toolsfetbinUniversalBrowser.exe:*:Enabled:UniversalBrowser (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinversiontool.exe»=»C:OrCADOrCAD_16.0toolsfetbinversiontool.exe:*:Enabled:versiontool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjava.exe»=»C:OrCADOrCAD_16.0toolsjrebinjava.exe:*:Enabled:java (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjavacpl.exe»=»C:OrCADOrCAD_16.0toolsjrebinjavacpl.exe:*:Enabled:javacpl (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjavaw.exe»=»C:OrCADOrCAD_16.0toolsjrebinjavaw.exe:*:Enabled:javaw (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjavaws.exe»=»C:OrCADOrCAD_16.0toolsjrebinjavaws.exe:*:Enabled:javaws (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjucheck.exe»=»C:OrCADOrCAD_16.0toolsjrebinjucheck.exe:*:Enabled:jucheck (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjusched.exe»=»C:OrCADOrCAD_16.0toolsjrebinjusched.exe:*:Enabled:jusched (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinkeytool.exe»=»C:OrCADOrCAD_16.0toolsjrebinkeytool.exe:*:Enabled:keytool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinkinit.exe»=»C:OrCADOrCAD_16.0toolsjrebinkinit.exe:*:Enabled:kinit (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinklist.exe»=»C:OrCADOrCAD_16.0toolsjrebinklist.exe:*:Enabled:klist (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinktab.exe»=»C:OrCADOrCAD_16.0toolsjrebinktab.exe:*:Enabled:ktab (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinorbd.exe»=»C:OrCADOrCAD_16.0toolsjrebinorbd.exe:*:Enabled:orbd (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinpack200.exe»=»C:OrCADOrCAD_16.0toolsjrebinpack200.exe:*:Enabled:pack200 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinpolicytool.exe»=»C:OrCADOrCAD_16.0toolsjrebinpolicytool.exe:*:Enabled:policytool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinrmid.exe»=»C:OrCADOrCAD_16.0toolsjrebinrmid.exe:*:Enabled:rmid (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinrmiregistry.exe»=»C:OrCADOrCAD_16.0toolsjrebinrmiregistry.exe:*:Enabled:rmiregistry (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinservertool.exe»=»C:OrCADOrCAD_16.0toolsjrebinservertool.exe:*:Enabled:servertool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebintnameserv.exe»=»C:OrCADOrCAD_16.0toolsjrebintnameserv.exe:*:Enabled:tnameserv (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinunpack200.exe»=»C:OrCADOrCAD_16.0toolsjrebinunpack200.exe:*:Enabled:unpack200 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutfvupdateutil.exe»=»C:OrCADOrCAD_16.0toolslayoutfvupdateutil.exe:*:Enabled:fvupdateutil (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutgcad.exe»=»C:OrCADOrCAD_16.0toolslayoutgcad.exe:*:Enabled:gcad (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutgcam.exe»=»C:OrCADOrCAD_16.0toolslayoutgcam.exe:*:Enabled:gcam (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutgcdin.exe»=»C:OrCADOrCAD_16.0toolslayoutgcdin.exe:*:Enabled:gcdin (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutidfin.exe»=»C:OrCADOrCAD_16.0toolslayoutidfin.exe:*:Enabled:idfin (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutipc356.exe»=»C:OrCADOrCAD_16.0toolslayoutipc356.exe:*:Enabled:ipc356 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutlayout.exe»=»C:OrCADOrCAD_16.0toolslayoutlayout.exe:*:Enabled:layout (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutlibcat.exe»=»C:OrCADOrCAD_16.0toolslayoutlibcat.exe:*:Enabled:libcat (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutlsession.exe»=»C:OrCADOrCAD_16.0toolslayoutlsession.exe:*:Enabled:lsession (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmax2hyp.exe»=»C:OrCADOrCAD_16.0toolslayoutmax2hyp.exe:*:Enabled:max2hyp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxascb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxascb.exe:*:Enabled:maxascb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxascx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxascx.exe:*:Enabled:maxascx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxdxf.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxdxf.exe:*:Enabled:maxdxf (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxeco.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxeco.exe:*:Enabled:maxeco (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxfnetx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxfnetx.exe:*:Enabled:maxfnetx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxminb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxminb.exe:*:Enabled:maxminb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxminw.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxminw.exe:*:Enabled:maxminw (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxminx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxminx.exe:*:Enabled:maxminx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxorcad.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxorcad.exe:*:Enabled:maxorcad (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxp99x.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxp99x.exe:*:Enabled:maxp99x (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxpadb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxpadb.exe:*:Enabled:maxpadb (Release OrCAD 16.0)»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:OrCADOrCAD_16.0toolsbincdnshelp.exe»=»C:OrCADOrCAD_16.0toolsbincdnshelp.exe:*:Enabled:cdnshelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsinfo.exe»=»C:OrCADOrCAD_16.0toolsbincdsinfo.exe:*:Enabled:cdsinfo (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsmps.exe»=»C:OrCADOrCAD_16.0toolsbincdsmps.exe:*:Enabled:cdsmps (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsMsgServer.exe»=»C:OrCADOrCAD_16.0toolsbincdsMsgServer.exe:*:Enabled:cdsMsgServer (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsNameServer.exe»=»C:OrCADOrCAD_16.0toolsbincdsNameServer.exe:*:Enabled:cdsNameServer (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsOaPathUtil.exe»=»C:OrCADOrCAD_16.0toolsbincdsOaPathUtil.exe:*:Enabled:cdsOaPathUtil (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsRemote.exe»=»C:OrCADOrCAD_16.0toolsbincdsRemote.exe:*:Enabled:cdsRemote (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsRemshClient.exe»=»C:OrCADOrCAD_16.0toolsbincdsRemshClient.exe:*:Enabled:cdsRemshClient (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsRunHidden.exe»=»C:OrCADOrCAD_16.0toolsbincdsRunHidden.exe:*:Enabled:cdsRunHidden (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsServIpc.exe»=»C:OrCADOrCAD_16.0toolsbincdsServIpc.exe:*:Enabled:cdsServIpc (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsUnzip.exe»=»C:OrCADOrCAD_16.0toolsbincdsUnzip.exe:*:Enabled:cdsUnzip (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdswhich.exe»=»C:OrCADOrCAD_16.0toolsbincdswhich.exe:*:Enabled:cdswhich (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincdsZip.exe»=»C:OrCADOrCAD_16.0toolsbincdsZip.exe:*:Enabled:cdsZip (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincds_root.exe»=»C:OrCADOrCAD_16.0toolsbincds_root.exe:*:Enabled:cds_root (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinclsAdminTool.exe»=»C:OrCADOrCAD_16.0toolsbinclsAdminTool.exe:*:Enabled:clsAdminTool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinclsbd.exe»=»C:OrCADOrCAD_16.0toolsbinclsbd.exe:*:Enabled:clsbd (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinclu.exe»=»C:OrCADOrCAD_16.0toolsbinclu.exe:*:Enabled:clu (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbincmfeedback.exe»=»C:OrCADOrCAD_16.0toolsbincmfeedback.exe:*:Enabled:cmfeedback (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinconsmgr.exe»=»C:OrCADOrCAD_16.0toolsbinconsmgr.exe:*:Enabled:consmgr (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbindregprint.exe»=»C:OrCADOrCAD_16.0toolsbindregprint.exe:*:Enabled:dregprint (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinemsMkError.exe»=»C:OrCADOrCAD_16.0toolsbinemsMkError.exe:*:Enabled:emsMkError (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinmpsinfo.exe»=»C:OrCADOrCAD_16.0toolsbinmpsinfo.exe:*:Enabled:mpsinfo (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinmsgHelp.exe»=»C:OrCADOrCAD_16.0toolsbinmsgHelp.exe:*:Enabled:msgHelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinnmp.exe»=»C:OrCADOrCAD_16.0toolsbinnmp.exe:*:Enabled:nmp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinnmppath.exe»=»C:OrCADOrCAD_16.0toolsbinnmppath.exe:*:Enabled:nmppath (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinswitchversion.exe»=»C:OrCADOrCAD_16.0toolsbinswitchversion.exe:*:Enabled:switchversion (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinvan.exe»=»C:OrCADOrCAD_16.0toolsbinvan.exe:*:Enabled:van (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsbinversionviewer.exe»=»C:OrCADOrCAD_16.0toolsbinversionviewer.exe:*:Enabled:versionviewer (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturecapture.exe»=»C:OrCADOrCAD_16.0toolscapturecapture.exe:*:Enabled:capture (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturecomp16.exe»=»C:OrCADOrCAD_16.0toolscapturecomp16.exe:*:Enabled:comp16 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturepcadi.exe»=»C:OrCADOrCAD_16.0toolscapturepcadi.exe:*:Enabled:pcadi (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturepspiceexplorersrvr.exe»=»C:OrCADOrCAD_16.0toolscapturepspiceexplorersrvr.exe:*:Enabled:pspiceexplorersrvr (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturepstswp.exe»=»C:OrCADOrCAD_16.0toolscapturepstswp.exe:*:Enabled:pstswp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscaptureregsvr32.exe»=»C:OrCADOrCAD_16.0toolscaptureregsvr32.exe:*:Enabled:regsvr32 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturesch2cap.exe»=»C:OrCADOrCAD_16.0toolscapturesch2cap.exe:*:Enabled:sch2cap (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscapturetutorialCAPTUTOR.EXE»=»C:OrCADOrCAD_16.0toolscapturetutorialCAPTUTOR.EXE:*:Enabled:CAPTUTOR (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscdnshelpbincdnshelp.exe»=»C:OrCADOrCAD_16.0toolscdnshelpbincdnshelp.exe:*:Enabled:cdnshelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscdnshelpbintopicgen.exe»=»C:OrCADOrCAD_16.0toolscdnshelpbintopicgen.exe:*:Enabled:topicgen (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolscdnshelpbin_cdnshelp.exe»=»C:OrCADOrCAD_16.0toolscdnshelpbin_cdnshelp.exe:*:Enabled:_cdnshelp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsdfIIbinskill.exe»=»C:OrCADOrCAD_16.0toolsdfIIbinskill.exe:*:Enabled:skill (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsdfIIbinskill_g.exe»=»C:OrCADOrCAD_16.0toolsdfIIbinskill_g.exe:*:Enabled:skill_g (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinbodygen.exe»=»C:OrCADOrCAD_16.0toolsfetbinbodygen.exe:*:Enabled:bodygen (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbincpmaccess.exe»=»C:OrCADOrCAD_16.0toolsfetbincpmaccess.exe:*:Enabled:cpmaccess (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinlibaccess.exe»=»C:OrCADOrCAD_16.0toolsfetbinlibaccess.exe:*:Enabled:libaccess (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinlrm.exe»=»C:OrCADOrCAD_16.0toolsfetbinlrm.exe:*:Enabled:lrm (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinmkdefcfg.exe»=»C:OrCADOrCAD_16.0toolsfetbinmkdefcfg.exe:*:Enabled:mkdefcfg (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinnewgenasym.exe»=»C:OrCADOrCAD_16.0toolsfetbinnewgenasym.exe:*:Enabled:newgenasym (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinpcbCache.exe»=»C:OrCADOrCAD_16.0toolsfetbinpcbCache.exe:*:Enabled:pcbCache (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinprojmgr.exe»=»C:OrCADOrCAD_16.0toolsfetbinprojmgr.exe:*:Enabled:projmgr (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinpsetup.exe»=»C:OrCADOrCAD_16.0toolsfetbinpsetup.exe:*:Enabled:psetup (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinpurge.exe»=»C:OrCADOrCAD_16.0toolsfetbinpurge.exe:*:Enabled:purge (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinQPSetup.exe»=»C:OrCADOrCAD_16.0toolsfetbinQPSetup.exe:*:Enabled:QPSetup (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinrollback.exe»=»C:OrCADOrCAD_16.0toolsfetbinrollback.exe:*:Enabled:rollback (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinUniversalBrowser.exe»=»C:OrCADOrCAD_16.0toolsfetbinUniversalBrowser.exe:*:Enabled:UniversalBrowser (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsfetbinversiontool.exe»=»C:OrCADOrCAD_16.0toolsfetbinversiontool.exe:*:Enabled:versiontool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjava.exe»=»C:OrCADOrCAD_16.0toolsjrebinjava.exe:*:Enabled:java (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjavacpl.exe»=»C:OrCADOrCAD_16.0toolsjrebinjavacpl.exe:*:Enabled:javacpl (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjavaw.exe»=»C:OrCADOrCAD_16.0toolsjrebinjavaw.exe:*:Enabled:javaw (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjavaws.exe»=»C:OrCADOrCAD_16.0toolsjrebinjavaws.exe:*:Enabled:javaws (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjucheck.exe»=»C:OrCADOrCAD_16.0toolsjrebinjucheck.exe:*:Enabled:jucheck (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinjusched.exe»=»C:OrCADOrCAD_16.0toolsjrebinjusched.exe:*:Enabled:jusched (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinkeytool.exe»=»C:OrCADOrCAD_16.0toolsjrebinkeytool.exe:*:Enabled:keytool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinkinit.exe»=»C:OrCADOrCAD_16.0toolsjrebinkinit.exe:*:Enabled:kinit (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinklist.exe»=»C:OrCADOrCAD_16.0toolsjrebinklist.exe:*:Enabled:klist (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinktab.exe»=»C:OrCADOrCAD_16.0toolsjrebinktab.exe:*:Enabled:ktab (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinorbd.exe»=»C:OrCADOrCAD_16.0toolsjrebinorbd.exe:*:Enabled:orbd (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinpack200.exe»=»C:OrCADOrCAD_16.0toolsjrebinpack200.exe:*:Enabled:pack200 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinpolicytool.exe»=»C:OrCADOrCAD_16.0toolsjrebinpolicytool.exe:*:Enabled:policytool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinrmid.exe»=»C:OrCADOrCAD_16.0toolsjrebinrmid.exe:*:Enabled:rmid (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinrmiregistry.exe»=»C:OrCADOrCAD_16.0toolsjrebinrmiregistry.exe:*:Enabled:rmiregistry (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinservertool.exe»=»C:OrCADOrCAD_16.0toolsjrebinservertool.exe:*:Enabled:servertool (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebintnameserv.exe»=»C:OrCADOrCAD_16.0toolsjrebintnameserv.exe:*:Enabled:tnameserv (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolsjrebinunpack200.exe»=»C:OrCADOrCAD_16.0toolsjrebinunpack200.exe:*:Enabled:unpack200 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutfvupdateutil.exe»=»C:OrCADOrCAD_16.0toolslayoutfvupdateutil.exe:*:Enabled:fvupdateutil (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutgcad.exe»=»C:OrCADOrCAD_16.0toolslayoutgcad.exe:*:Enabled:gcad (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutgcam.exe»=»C:OrCADOrCAD_16.0toolslayoutgcam.exe:*:Enabled:gcam (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutgcdin.exe»=»C:OrCADOrCAD_16.0toolslayoutgcdin.exe:*:Enabled:gcdin (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutidfin.exe»=»C:OrCADOrCAD_16.0toolslayoutidfin.exe:*:Enabled:idfin (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutipc356.exe»=»C:OrCADOrCAD_16.0toolslayoutipc356.exe:*:Enabled:ipc356 (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutlayout.exe»=»C:OrCADOrCAD_16.0toolslayoutlayout.exe:*:Enabled:layout (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutlibcat.exe»=»C:OrCADOrCAD_16.0toolslayoutlibcat.exe:*:Enabled:libcat (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutlsession.exe»=»C:OrCADOrCAD_16.0toolslayoutlsession.exe:*:Enabled:lsession (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmax2hyp.exe»=»C:OrCADOrCAD_16.0toolslayoutmax2hyp.exe:*:Enabled:max2hyp (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxascb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxascb.exe:*:Enabled:maxascb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxascx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxascx.exe:*:Enabled:maxascx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxdxf.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxdxf.exe:*:Enabled:maxdxf (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxeco.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxeco.exe:*:Enabled:maxeco (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxfnetx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxfnetx.exe:*:Enabled:maxfnetx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxminb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxminb.exe:*:Enabled:maxminb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxminw.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxminw.exe:*:Enabled:maxminw (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxminx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxminx.exe:*:Enabled:maxminx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxorcad.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxorcad.exe:*:Enabled:maxorcad (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxp99x.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxp99x.exe:*:Enabled:maxp99x (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxpadb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxpadb.exe:*:Enabled:maxpadb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxpadx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxpadx.exe:*:Enabled:maxpadx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxpcadb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxpcadb.exe:*:Enabled:maxpcadb (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxpcadx.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxpcadx.exe:*:Enabled:maxpcadx (Release OrCAD 16.0)»
«C:OrCADOrCAD_16.0toolslayoutmaxprotb.exe»=»C:OrCADOrCAD_16.0toolslayoutmaxprotb.exe:*:Enabled:maxprotb (Release OrCAD 16.0)»

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{5b618b14-bfdc-11dd-bb5d-0004614509b8}]
shellAutoRuncommand — N:RECYCLERS-1-6-21-2434476501-1644491937-600003330-1213autorunme.exe
shellopencommand — N:RECYCLERS-1-6-21-2434476501-1644491937-600003330-1213autorunme.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{7894fa33-c696-11dd-bb75-0004614509b8}]
shellAutoRuncommand — G:RECYCLERS-1-6-21-2434476501-1644491937-600003330-1213autorunme.exe
shellopencommand — G:RECYCLERS-1-6-21-2434476501-1644491937-600003330-1213autorunme.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{c8e75fb8-cd98-11dd-bb83-0004614509b8}]
shellAutoRuncommand — O:RECYCLERS-1-6-21-2434476501-1644491937-600003330-1213autorunme.exe
shellopencommand — O:RECYCLERS-1-6-21-2434476501-1644491937-600003330-1213autorunme.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{e2f5bd7b-be0b-11dd-bb50-0004614509b8}]
shellAutoRuncommand — O:RECYCLERS-1-5-21-1482476501-1644491937-682003330-1013iuhi64.exe
shellopencommand — O:RECYCLERS-1-5-21-1482476501-1644491937-682003330-1013iuhi64.exe

======List of files/folders created in the last 1 months======

2009-01-10 00:36:42 —-A—- C:WINDOWSIE4 Error Log.txt
2009-01-09 22:16:39 —-D—- C:Documents and SettingsAnt-KillerApplication DataInstallShield
2009-01-09 21:27:10 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2009-01-09 21:20:34 —-A—- C:avenger.txt
2009-01-09 21:05:50 —-RASHD—- C:autorun.inf
2009-01-09 20:23:04 —-N—- C:WINDOWSsystem32spmsg.dll
2009-01-09 20:22:05 —-D—- C:Documents and SettingsAll Users.WINDOWSApplication DataWindows Genuine Advantage
2009-01-09 19:51:15 —-D—- C:_OTMoveIt
2009-01-09 19:42:47 —-D—- C:PFiles
2009-01-09 17:41:46 —-AT—- C:WINDOWSsystem32DRWEBSP.DLL
2009-01-09 17:41:42 —-D—- C:Program FilesDrWeb
2009-01-09 15:26:29 —-D—- C:Program Filestrend micro
2009-01-09 15:26:28 —-D—- C:rsit
2009-01-09 14:27:29 —-D—- C:Program FilesEnigma Software Group
2009-01-09 13:12:53 —-D—- C:Avenger
2009-01-08 18:23:11 —-D—- C:Documents and SettingsAnt-KillerApplication DataMalwarebytes
2009-01-08 18:23:05 —-D—- C:Documents and SettingsAll Users.WINDOWSApplication DataMalwarebytes
2009-01-08 18:20:22 —-D—- C:translation
2009-01-08 18:20:22 —-D—- C:smiles
2009-01-08 16:54:54 —-D—- C:WINDOWSsystem32appmgmt
2009-01-08 16:51:58 —-A—- C:WINDOWSntbtlog.txt
2009-01-08 16:25:57 —-D—- C:Documents and SettingsAll Users.WINDOWSApplication DataKaspersky Lab Setup Files
2009-01-08 10:16:28 —-D—- C:Documents and SettingsAll Users.WINDOWSApplication DataESET
2009-01-07 21:26:40 —-D—- C:Documents and SettingsAll Users.WINDOWSApplication DataLavasoft
2009-01-07 11:47:01 —-SH—- C:WINDOWSsystem32ppxxkysh.ini
2009-01-07 11:46:23 —-A—- C:WINDOWSsystem32d73fbb0a-.txt
2008-12-28 16:32:12 —-D—- C:Documents and SettingsAnt-KillerApplication DataCyberLink
2008-12-21 00:43:41 —-D—- C:Program FilesSopCast
2008-12-20 11:59:35 —-A—- C:WINDOWSsystem32rmoc3260.dll
2008-12-20 11:59:35 —-A—- C:WINDOWSsystem32pndx5032.dll
2008-12-20 11:59:35 —-A—- C:WINDOWSsystem32pndx5016.dll
2008-12-20 11:59:35 —-A—- C:WINDOWSsystem32pncrt.dll
2008-12-20 11:59:34 —-A—- C:WINDOWSavisplitter.ini
2008-12-20 11:59:33 —-A—- C:WINDOWSsystem32yv12vfw.dll
2008-12-20 11:59:33 —-A—- C:WINDOWSsystem32xvidvfw.dll
2008-12-20 11:59:33 —-A—- C:WINDOWSsystem32xvidcore.dll
2008-12-20 11:59:32 —-A—- C:WINDOWSsystem32qt-dx331.dll
2008-12-20 11:59:32 —-A—- C:WINDOWSsystem32ff_vfw.dll.manifest
2008-12-20 11:59:32 —-A—- C:WINDOWSsystem32ff_vfw.dll
2008-12-20 11:59:32 —-A—- C:WINDOWSsystem32dpl100.dll
2008-12-20 11:59:32 —-A—- C:WINDOWSsystem32divx.dll
2008-12-20 11:59:31 —-D—- C:Program FilesK-Lite Codec Pack
2008-12-20 11:59:31 —-D—- C:Documents and SettingsAnt-KillerApplication DataReal
2008-12-20 11:59:31 —-D—- C:Documents and SettingsAll Users.WINDOWSApplication DataReal
2008-12-17 11:31:05 —-D—- C:Documents and SettingsAnt-KillerApplication DataDAEMON Tools Pro
2008-12-17 11:30:24 —-D—- C:Documents and SettingsAll Users.WINDOWSApplication DataDAEMON Tools Lite
2008-12-17 11:30:19 —-D—- C:Program FilesDAEMON Tools Toolbar
2008-12-17 11:29:37 —-D—- C:Documents and SettingsAnt-KillerApplication DataDAEMON Tools Lite
2008-12-15 17:12:57 —-D—- C:Downloads

======List of files/folders modified in the last 1 months======

2009-01-11 11:32:14 —-D—- C:WINDOWSTemp
2009-01-11 11:31:13 —-D—- C:WINDOWSPrefetch
2009-01-11 11:21:17 —-A—- C:WINDOWSSchedLgU.Txt
2009-01-10 23:53:22 —-D—- C:Program FilesFlashGet
2009-01-10 23:43:19 —-D—- C:Documents and SettingsAnt-KillerApplication DatauTorrent
2009-01-10 19:21:04 —-SHD—- C:WINDOWSInstaller
2009-01-10 16:06:57 —-D—- C:WINDOWSsystem32drivers
2009-01-10 13:51:22 —-D—- C:Program FilesStamina
2009-01-10 13:51:10 —-RAD—- C:Program Files
2009-01-10 11:07:16 —-D—- C:Program FilesDAEMON Tools Lite
2009-01-10 00:36:42 —-D—- C:WINDOWS
2009-01-09 22:38:53 —-D—- C:WINDOWSsystem32
2009-01-09 20:24:23 —-D—- C:WINDOWSsystem32CatRoot
2009-01-09 20:23:04 —-HD—- C:WINDOWSinf
2009-01-09 20:22:22 —-D—- C:WINDOWSsystem32CatRoot2
2009-01-09 19:52:14 —-D—- C:WINDOWSsystem32Macromed
2009-01-09 19:41:10 —-SD—- C:WINDOWSDownloaded Program Files
2009-01-09 19:39:16 —-D—- C:Program FilesGoogle
2009-01-09 19:39:15 —-D—- C:Documents and SettingsAll Users.WINDOWSApplication DataGoogle
2009-01-09 17:17:46 —-D—- C:WINDOWSNetwork Diagnostic
2009-01-09 11:30:10 —-D—- C:Program FilesPunto Switcher
2009-01-08 18:17:27 —-D—- C:Program FilesOpera
2009-01-08 17:19:29 —-D—- C:WINDOWSsystem32NtmsData
2009-01-08 17:01:14 —-D—- C:Program FilesYahoo!
2009-01-08 16:52:18 —-D—- C:Documents and Settings
2009-01-08 10:17:34 —-D—- C:Program FilesEset
2009-01-07 21:26:18 —-D—- C:Program FilesCommon FilesWise Installation Wizard
2009-01-07 11:40:54 —-SD—- C:WINDOWSTasks
2009-01-06 22:32:31 —-D—- C:Program FilesTVBrowserLITE
2009-01-06 15:18:37 —-D—- C:Documents and SettingsAnt-KillerApplication DataAdobeUM
2009-01-05 15:41:10 —-SHD—- C:RECYCLER
2009-01-05 09:56:20 —-SD—- C:Documents and SettingsAnt-KillerApplication DataMicrosoft
2008-12-17 15:38:44 —-D—- C:WINDOWSsrchasst
2008-12-17 11:39:07 —-D—- C:WINDOWSsystem32DirectX
2008-12-17 11:38:53 —-RSD—- C:WINDOWSassembly
2008-12-17 11:31:05 —-D—- C:Documents and SettingsAnt-KillerApplication DataDAEMON Tools
2008-12-15 20:19:33 —-D—- C:WINDOWSsystem32wbem
2008-12-15 20:19:33 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2008-12-13 23:13:49 —-D—- C:Program FilesDivX
2008-12-13 22:51:14 —-D—- C:закачка
2008-12-13 20:33:46 —-D—- C:Documents and SettingsAnt-KillerApplication DataSkype
2008-12-12 10:39:21 —-D—- C:Documents and SettingsAll Users.WINDOWSApplication DataMicrosoft Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2008-04-15 12032]
R2 acedrv11;acedrv11; ??C:WINDOWSsystem32driversacedrv11.sys []
R2 Aspi32;Aspi32; C:WINDOWSsystem32driversAspi32.sys [2002-07-17 16877]
R2 cvintdrv;cvintdrv; C:WINDOWSsystem32driverscvintdrv.sys [2006-07-27 4096]
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2008-06-05 62336]
R2 tifsfilter;Acronis True Image FS Filter; C:WINDOWSsystem32DRIVERStifsfilt.sys [2008-12-01 44704]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:WINDOWSsystem32driversALCXWDM.SYS [2006-05-10 3964736]
R3 hidusb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-15 10368]
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2008-07-07 12160]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2006-06-01 3925920]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtenicxp.sys [2006-06-17 83968]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-07-07 30336]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2008-07-07 17152]
R3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-07-08 25856]
R3 usbstor;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-15 26368]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-15 20608]
S2 SPIDER;SpIDer Guard File System Monitor; ??C:PROGRA~1DrWebspider.sys []
S3 a95md1rp;a95md1rp; C:WINDOWSsystem32driversa95md1rp.sys []
S3 apiz6bd4;apiz6bd4; C:WINDOWSsystem32driversapiz6bd4.sys []
S3 GVCplDrv;GVCplDrv; C:WINDOWSsystem32driversGVCplDrv.sys [2004-05-02 23040]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2007-06-18 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2007-06-18 82944]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcrSch2Svc;Acronis Scheduler2 Service; C:Program FilesCommon FilesAcronisSchedule2schedul2.exe [2008-11-04 554264]
R2 Cadence License Manager;Cadence License Manager; C:OrCADlicense_managerlmgrd.exe [2007-03-18 1327104]
R2 LkCitadelServer;Lookout Citadel Server; C:WINDOWSsystem32lkcitdl.exe [2006-06-19 688190]
R2 lkClassAds;National Instruments PSP Server Locator; C:WINDOWSsystem32lkads.exe [2006-07-25 45056]
R2 lkTimeSync;National Instruments Time Synchronization; C:WINDOWSsystem32lktsrv.exe [2006-07-25 57344]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe [2006-10-26 335872]
R2 NIDomainService;National Instruments Domain Service; C:Program FilesNational InstrumentsSharedSecuritynidmsrv.exe [2006-07-25 200704]
R2 niSvcLoc;NI Service Locator; C:WINDOWSsystem32nisvcloc.exe [2006-02-06 49152]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2006-06-01 155715]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:Program FilesCyberLinkShared FilesRichVideo.exe [2007-11-02 167936]
R2 SNMP;Служба SNMP; C:WINDOWSSystem32snmp.exe [2008-04-15 32768]
R2 StarWindServiceAE;StarWind AE Service; C:Program FilesAlcohol SoftAlcohol 52StarWindStarWindServiceAE.exe [2007-05-28 275968]
S2 SPIDERNT;SpIDer Guard for Windows; C:PROGRA~1DrWebspidernt.exe [2008-10-23 197896]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2007-10-24 70144]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2007-10-09 36864]
S3 gusvc;Google Updater Service; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-01-09 138168]
S3 idsvc;Windows CardSpace; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2007-10-11 864256]
S3 LPDSVC;Сервер печати TCP/IP; C:WINDOWSsystem32tcpsvcs.exe [2008-04-15 19456]
S3 NILM License Manager;NILM License Manager; C:Program FilesNational InstrumentsSharedLicense ManagerBinlmgrd.exe [2006-06-27 1007616]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 SNMPTRAP;Служба ловушек SNMP; C:WINDOWSSystem32snmptrap.exe [2008-04-15 8704]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media Playerwmpnetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2007-10-11 122880]

EOF
Автор

Сообщения

Просмотр 6 сообщений - с 1 по 6 (из 6 всего)

Ant

Созданные ответы форума

Добро пожаловать

Поиск

Важные инструкции

Убрать рекламу в браузере (Chrome, Firefox, Opera, Yandex)

Как восстановить зашифрованные файлы (Инструкция)

Как удалить вредоносные программы, лучшие утилиты

Удалить вирус, всплывающие окна и рекламу в Mac OS X

Установлено в соответствии с корпоративным правилом (Удалить из Хрома)

СПАЙВАРЕ РУ

Нужна помощь?

Ссылки