• Инструкции
    • Как использовать
      • Программы
    • Как удалить
      • Шпионское и рекламное ПО (adware и spyware)
      • Поддельное антиспайваре
      • Руткиты
      • Трояны
      • Кейлоггеры
  • Скачать программы
  • Вопросы и Ответы
  • Форумы

SPYWARE-RU.COM
Меню
  • Инструкции
    • Как использовать
      • Программы
    • Как удалить
      • Шпионское и рекламное ПО (adware и spyware)
      • Поддельное антиспайваре
      • Руткиты
      • Трояны
      • Кейлоггеры
  • Скачать программы
  • Вопросы и Ответы
  • Форумы
В начало
Adguard
 

barlak

  • Профиль
  • Начатые темы
  • Созданные ответы
  • Engagements
  • Избранное

Созданные ответы форума

Просмотр 3 сообщений - с 1 по 3 (из 3 всего)
  • Автор
    Сообщения
  • 14 февраля, 2009 в 5:32 пп в ответ на: появилась рекламная лента.как быть и что делать незнаю #21859
    barlak
    Participant
    • Темы:1
    • Сообщений:4
    • ☆

    эксплорер заработал нормально.большое вам спасибо.

    ComboFix 09-02-12.03 — Admin 2009-02-14 22:26:11.7 — NTFSx86
    Microsoft Windows XP Professional 5.1.2600.3.1251.1.1049.18.1023.594 [GMT 5:00]
    Running from: c:documents and settingsAdminРабочий столлечилкиComboFix.exe
    Command switches used :: c:documents and settingsAdminРабочий столCFScript.txt
    AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Updated)
    * Created a new restore point

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

    FILE ::
    c:documents and settingsAll UsersApplication Dataaqplib.dll
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:documents and settingsAdminLocal SettingsTemporary Internet Files0EB9F12C_6E6B_4c03_AEBA_8C04CFA98AA4.jpg
    c:documents and settingsAdminLocal SettingsTemporary Internet Files15913497_F86C_4218_8817_F50940D1E1B2.jpg
    c:documents and settingsAdminLocal SettingsTemporary Internet Files29887DDE_00B9_4011_9CF7_59511F1ECC1B.jpg
    c:documents and settingsAdminLocal SettingsTemporary Internet Files35B7DFFA_884F_4fbc_8E60_DA601BDC7BF7.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet Files362FD6E8_8CDA_4c2a_A8AA-BDA22B321711.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet Files3DF04940_9866_4241_A998_0CDDFAFD147A.jpg
    c:documents and settingsAdminLocal SettingsTemporary Internet Files426500D7_0FF3_426c_828D_065DBAEA0581.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet Files478BD4AE_2691_438d_BDCA_3485DC022700.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet Files5C6C645F_BAA8_4149_BFEB_2031230FF0FD.jpg
    c:documents and settingsAdminLocal SettingsTemporary Internet Files61EA7D69_19D4_421a_A899_0DF4D58CD119.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet Files777FDAFB_83CF_4960_AA71_4E5D7BCD8E57.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet Files8DA878D5_E80B_4721_B75A_17EFFAF1A700.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet Files98F6DF79_7171_452d_9C26_C0193E12DBDF.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet FilesA2B240D6_0386_419e_91C5_3F7D90437CD0.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet FilesC75CEF8D_5AF4_4563_8594_C45A45E14E63.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet FilesE21285C1_40E6_435c_A69F_3387E7BD89CB.jpg
    c:documents and settingsAdminLocal SettingsTemporary Internet FilesE9A4D648_ED73_4ea7_88B2_18332DBA4F3E.gif
    c:documents and settingsAll UsersApplication Dataaqplib.dll

    .
    ((((((((((((((((((((((((( Files Created from 2009-01-14 to 2009-02-14 )))))))))))))))))))))))))))))))
    .

    2009-02-14 12:14 . 2009-02-14 12:15 43,520 —a

    c:windowssystem32CmdLineExt03.dll
    2009-02-14 12:00 . 2009-02-14 12:00 d

    c:program filesDaemonTools_WhenUSave_Installer
    2009-02-14 12:00 . 2009-02-14 12:00     d

    c:program filesDAEMON Tools
    2009-02-14 01:05 . 2009-02-14 01:05     d

    c:documents and settingsAdminApplication DataDSound
    2009-02-14 01:03 . 2009-02-14 01:03     d

    c:program filesVSTplugins
    2009-02-14 01:03 . 2009-02-14 01:03     d

    c:program filesDSound
    2009-02-14 01:03 . 2009-02-14 01:03     d

    c:program filesASIO
    2009-02-14 00:18 . 2009-02-14 00:18     d

    c:program filesAlien Connections
    2009-02-14 00:18 . 2009-02-14 00:18 0 —a

    c:windowsPROTOCOL.INI
    2009-02-14 00:17 . 2009-02-14 00:17     d

    c:documents and settingsAdminWINDOWS
    2009-02-14 00:17 . 1997-01-18 11:40 299,520 —a

    c:windowsuninst.exe
    2009-02-14 00:12 . 2009-02-14 00:12     d

    c:documents and settingsAdminApplication DataCakewalk
    2009-02-14 00:04 . 2009-02-14 00:04     d

    c:program filesCakewalk
    2009-02-14 00:03 . 2009-02-14 00:03 118,784 —a

    c:windowsdsdxirmv.exe
    2009-02-14 00:01 . 2009-02-14 00:01     d

    c:documents and settingsAll UsersApplication DataCakewalk
    2009-02-14 00:01 . 2005-09-14 10:00 233,472 —a

    c:windowssystem32REX Shared Library.dll
    2009-02-14 00:01 . 2005-09-14 10:00 180,224 —a

    c:windowssystem32ReWire.dll
    2009-02-13 23:56 . 2009-02-14 00:11     d

    C:Cakewalk
    2009-02-13 23:41 . 2009-02-13 23:41     d

    c:program filesASIO4ALL v2
    2009-02-13 23:29 . 2009-02-13 23:29     d

    c:program filesCommon FilesDigidesign
    2009-02-13 23:28 . 2009-02-13 23:28     d

    c:program filesNative Instruments
    2009-02-11 18:59 . 2009-02-11 19:04     d

    c:documents and settingsAdminApplication DataSPORE
    2009-02-11 18:24 . 2009-02-11 18:24     d

    c:documents and settingsLocalServiceРабочий стол
    2009-02-10 02:17 . 2009-02-10 02:17     d

    c:documents and settingsAdminApplication DataABBYY
    2009-02-10 02:14 . 2009-02-10 02:14     d

    c:program filesCommon FilesABBYY
    2009-02-10 02:12 . 2009-02-10 02:17     d

    c:program filesABBYY FineReader 9.0
    2009-02-10 02:12 . 2009-02-10 22:52     d

    c:documents and settingsAll UsersApplication DataABBYY
    2009-02-10 02:09 . 2009-02-10 02:10     d

    c:tempFR90PE
    2009-02-10 02:09 . 2009-02-10 02:09     d

    C:temp
    2009-02-09 23:23 . 2009-02-11 02:08     d

    c:documents and settingsAdminApplication DataQIP.Online
    2009-02-09 23:21 . 2009-02-09 23:21     d

    c:program filesQIP.Online
    2009-02-09 23:14 . 2009-02-09 23:14     d

    c:documents and settingsAdminApplication DataQIP
    2009-02-09 23:13 . 2009-02-09 23:27     d

    c:program filesQIP Infium
    2009-02-09 06:48 . 2009-02-09 06:48     d

    c:program filestrend micro
    2009-02-09 06:47 . 2009-02-09 06:48     d

    C:rsit
    2009-02-09 06:06 . 2009-02-09 06:06     d

    c:program filesSpybot — Search & Destroy
    2009-02-09 06:06 . 2009-02-09 06:35     d

    c:documents and settingsAll UsersApplication DataSpybot — Search & Destroy
    2009-02-08 22:52 . 2009-02-08 22:52     d

    c:documents and settingsAdminApplication DataGrym
    2009-02-08 22:51 . 2009-02-08 22:51     d

    c:program files2gis
    2009-02-08 22:51 . 2009-02-08 22:54     d

    c:documents and settingsAll UsersApplication Data2GIS
    2009-02-08 17:00 . 2009-02-08 17:00     d

    c:program filesExact Audio Copy
    2009-02-08 17:00 . 2009-02-08 17:00     d

    c:documents and settingsAdminApplication DataAD ON Multimedia
    2009-02-08 17:00 . 2009-02-08 17:00     d

    c:documents and settingsAdminApplication DataAccurateRip
    2009-02-08 08:04 . 2009-02-09 04:04     d

    c:program filesDAEMON Tools Toolbar
    2009-02-08 08:04 . 2009-02-08 08:04     d

    c:documents and settingsAdminApplication DataDAEMON Tools
    2009-02-08 07:21 . 2006-07-28 20:11 3,076,096

    c:windowsUNNeroSipps.exe
    2009-02-08 07:21 . 2006-07-31 15:34 78,027

    c:windowsUNNeroSipps.cfg
    2009-02-08 05:21 . 2009-02-08 05:21 603,904 —a

    c:windowssystem32TUProgSt.exe
    2009-02-08 05:20 . 2009-02-08 05:22     d

    c:program filesTuneUp Utilities 2009
    2009-02-08 05:20 . 2009-02-08 05:20     d

    c:documents and settingsAll UsersApplication DataTuneUp Software
    2009-02-08 05:20 . 2009-02-08 05:20     d—hs—- c:documents and settingsAll UsersApplication Data{55A29068-F2CE-456C-9148-C869879E2357}
    2009-02-08 05:20 . 2009-02-08 05:20     d

    c:documents and settingsAdminApplication DataTuneUp Software
    2009-02-08 05:20 . 2009-02-08 05:20 362,240 —a

    c:windowssystem32TuneUpDefragService.exe
    2009-02-08 05:20 . 2008-11-12 16:44 27,904 —a

    c:windowssystem32uxtuneup.dll
    2009-02-08 04:44 . 2009-02-14 02:44 69 —a

    c:windowsNeroDigital.ini
    2009-02-08 04:02 . 2009-02-12 19:54     d

    c:documents and settingsAdminApplication DataAhead
    2009-02-08 03:59 . 2009-02-08 07:20     d

    c:program filesNero
    2009-02-08 03:59 . 2009-02-08 07:20     d

    c:program filesCommon FilesAhead
    2009-02-08 03:27 . 2009-02-08 03:27 1,857,540 —ah

    c:windows03.mpg
    2009-02-08 03:27 . 2009-02-08 03:27 1,828,868 —ah

    c:windows01.mpg
    2009-02-07 02:01 . 2009-02-08 02:38     d—h

    c:windows$hf_mig$
    2009-02-07 02:00 . 2009-02-07 02:00     d

    c:program filesMSXML 4.0
    2009-02-07 01:35 . 2009-02-07 01:35     d

    c:documents and settingsAdminApplication Datafltk.org
    2009-02-07 00:22 . 2009-02-07 00:22     d

    c:documents and settingsAdminApplication DataMedia Player Classic
    2009-02-07 00:21 . 2009-02-07 00:21     d

    c:program filesK-Lite Codec Pack
    2009-02-06 23:36 . 2009-02-06 23:36     d

    c:documents and settingsAll UsersApplication DataESET
    2009-02-06 22:24 . 2009-02-06 22:24     d

    c:documents and settingsAll UsersApplication DataFLEXnet
    2009-02-06 22:20 . 2009-02-06 22:20     d

    c:program filesCommon FilesMacrovision Shared
    2009-02-06 22:19 . 2009-02-06 22:19     d

    c:program filesBonjour
    2009-02-06 21:56 . 2009-02-06 21:56     d

    c:program filesMail.Ru
    2009-02-06 21:56 . 2009-02-14 20:51     d

    c:documents and settingsAdminApplication DataMra
    2009-02-06 21:36 . 2008-08-14 18:26 2,190,976

    c— c:windowssystem32dllcachentoskrnl.exe
    2009-02-06 21:36 . 2008-08-14 18:26 2,147,328

    c— c:windowssystem32dllcachentkrnlmp.exe
    2009-02-06 21:36 . 2008-08-14 18:26 2,067,840

    c— c:windowssystem32dllcachentkrnlpa.exe
    2009-02-06 21:36 . 2008-08-14 18:26 2,025,984

    c— c:windowssystem32dllcachentkrpamp.exe
    2009-02-06 19:25 . 2009-02-06 19:25     d

    c:windowssystem32Adobe
    2009-02-06 19:25 . 2009-02-06 19:25     d

    c:windowsProfiles
    2009-02-06 19:25 . 2009-02-06 22:38     d

    c:program filesCommon FilesAdobe
    2009-02-06 19:25 . 2009-02-06 19:25     d

    c:documents and settingsAdminApplication DataInterTrust
    2009-02-06 19:25 . 1998-10-29 14:45 306,688 —a

    c:windowsIsUninst.exe
    2009-02-06 19:02 . 2008-10-24 16:21 455,296

    c— c:windowssystem32dllcachemrxsmb.sys
    2009-02-06 18:40 . 2009-02-06 19:25     d

    C:Tech_rem
    2009-02-06 18:40 . 2009-02-06 18:39 286,720 —a

    c:windowsiun505.exe
    2009-02-06 18:29 . 2008-09-04 22:17 1,106,944

    c— c:windowssystem32dllcachemsxml3.dll
    2009-02-06 15:41 . 2008-08-19 20:15 26,368 —a—c— c:windowssystem32dllcacheusbstor.sys
    2009-02-06 13:58 . 2009-02-06 13:58     d

    c:program filesGuitar Pro 5
    2009-02-06 12:58 . 2008-10-16 16:06 268,648 —a

    c:windowssystem32mucltui.dll
    2009-02-06 12:58 . 2008-10-16 16:06 27,496 —a

    c:windowssystem32mucltui.dll.mui
    2009-02-06 04:06 . 2009-02-06 04:08     d

    c:program filesMatrix-Reload
    2009-02-06 04:00 . 2009-02-08 16:38     dr

    c:program filesMatrix
    2009-02-06 03:12 . 2009-02-08 01:36     d

    c:program filesESET
    2009-02-06 03:09 . 2009-02-13 00:09     d

    c:program filesOpera
    2009-02-06 02:00 . 2008-08-20 01:15 172,416 —a

    c:windowssystem32driverskmixer.sys
    2009-02-06 02:00 . 2008-08-20 01:15 142,592 —a

    c:windowssystem32driversaec.sys
    2009-02-06 02:00 . 2008-08-20 01:15 83,072 —a

    c:windowssystem32driverswdmaud.sys
    2009-02-06 02:00 . 2008-08-20 01:15 60,800 —a

    c:windowssystem32driverssysaudio.sys
    2009-02-06 02:00 . 2008-08-20 01:15 56,576 —a

    c:windowssystem32driversswmidi.sys
    2009-02-06 02:00 . 2008-08-20 01:15 52,864 —a

    c:windowssystem32driversDMusic.sys
    2009-02-06 02:00 . 2008-08-20 01:15 7,552 —a

    c:windowssystem32driversMSKSSRV.sys
    2009-02-06 02:00 . 2008-08-20 01:15 6,272 —a

    c:windowssystem32driverssplitter.sys
    2009-02-06 02:00 . 2008-08-20 01:15 5,376 —a

    c:windowssystem32driversMSPCLOCK.sys
    2009-02-06 02:00 . 2008-08-20 01:15 4,992 —a

    c:windowssystem32driversMSPQM.sys
    2009-02-06 02:00 . 2001-08-18 02:59 3,072 —a

    c:windowssystem32driversaudstub.sys
    2009-02-06 02:00 . 2008-08-20 01:15 2,944 —a

    c:windowssystem32driversdrmkaud.sys

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-02-14 17:25

    d

    w c:documents and settingsAdminApplication DatauTorrent
    2009-02-14 07:24

    d—h—w c:program filesInstallShield Installation Information
    2009-02-13 20:03

    d

    w c:program filesCommon FilesInstallShield
    2009-02-07 21:45

    d

    w c:documents and settingsAll UsersApplication DataMicrosoft Help
    2009-02-06 10:24

    d

    w c:program filesCommon FilesArsenal Shared
    2009-02-05 19:25

    d

    w c:program filesAGEIA Technologies
    2009-02-05 19:24

    d

    w c:program filesCommon FilesWise Installation Wizard
    2009-02-05 19:14

    d

    w c:program filesEXPERTool
    2009-02-05 19:04

    d

    w c:program filesuTorrent
    2009-02-05 18:35

    d

    w c:program filesVuescan
    2009-02-05 18:35

    d

    w c:program filesUltraISO
    2009-02-05 18:35

    d

    w c:program filesEverest
    2009-02-05 18:35

    d

    w c:program filesCommon FilesEZB Systems
    2009-02-05 18:34

    d

    w c:program filesCommon FilesMacromedia
    2009-02-05 18:34

    d

    w c:program filesArsenal Company
    2009-02-05 18:33

    d

    w c:program filesMacromedia
    2009-02-05 18:20

    d

    w c:program filesMicrosoft.NET
    2009-02-05 18:20

    d

    w c:program filesMicrosoft Works
    2009-02-05 18:18

    d

    w c:program filesWinDjView
    2009-02-05 18:18

    d

    w c:program filesSolid Converter PDF
    2009-02-05 18:18

    d

    w c:program filesPunto Switcher
    2009-02-05 18:18

    d

    w c:program filesFoxit Reader
    2009-02-05 18:11 717,296 —-a-w c:windowssystem32driverssptd.sys
    2009-02-05 18:11

    d

    w c:program filesVistaDriveIcon
    2009-02-05 18:11

    d

    w c:program filesPaint.NET
    2009-02-05 18:11

    d

    w c:program filesJava
    2009-02-05 18:10

    d

    w c:program filesCommon FilesJava
    2009-02-05 18:03

    d

    w c:program filesWindows Media Connect 2
    .

    Sigcheck


    2008-08-19 21:23 579072 23b7d3f3f5ec8feea75ec381c71cbd5e c:windowssystem32user32.dll

    2008-08-19 21:20 361600 6a104ba98d99d53ab0c91825ce659fc6 c:windowssystem32driverstcpip.sys

    2008-08-19 21:22 1721344 62ea07edf5e3f3ff34eff9bf7619bc64 c:windowsexplorer.exe

    2008-08-19 21:21 30208 b8b35f99dadaa5459fba639f20045fe2 c:windowssystem32ctfmon.exe
    .
    ((((((((((((((((((((((((((((( SnapShot@2009-02-09_ 5.28.49,67 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2004-07-08 23:26:38 11,392 —-a-w c:windowsDriver Cachei386bdasup.sys
    + 2004-07-08 23:26:38 16,384 —-a-w c:windowsDriver Cachei386ccdecode.sys
    + 2002-12-11 19:14:32 130,304 —-a-w c:windowsDriver Cachei386ks.sys
    + 2002-12-11 19:14:32 4,096 —-a-w c:windowsDriver Cachei386ksuser.dll
    + 2004-07-08 23:26:38 15,104 —-a-w c:windowsDriver Cachei386mpe.sys
    + 2004-07-08 23:26:38 52,096 —-a-w c:windowsDriver Cachei386msdv.sys
    + 2002-12-11 19:14:32 7,424 —-a-w c:windowsDriver Cachei386mskssrv.sys
    + 2002-12-11 19:14:32 5,248 —-a-w c:windowsDriver Cachei386mspclock.sys
    + 2001-08-23 00:00:00 4,608 —-a-w c:windowsDriver Cachei386mspqm.sys
    + 2002-12-11 19:14:32 5,504 —-a-w c:windowsDriver Cachei386mstee.sys
    + 2004-07-08 23:26:38 16,896 —-a-w c:windowsDriver Cachei386msyuv.dll
    + 2004-07-08 23:26:38 83,968 —-a-w c:windowsDriver Cachei386nabtsfec.sys
    + 2004-07-08 23:26:38 10,112 —-a-w c:windowsDriver Cachei386ndisip.sys
    + 2002-08-28 22:41:00 31,744 —-a-w c:windowsDriver Cachei386pid.dll
    + 2004-07-08 23:26:40 354,816 —-a-w c:windowsDriver Cachei386psisdecd.dll
    + 2004-07-08 23:26:40 10,880 —-a-w c:windowsDriver Cachei386slip.sys
    + 2004-07-08 23:27:28 48,512 —-a-w c:windowsDriver Cachei386stream.sys
    + 2004-07-08 23:26:40 14,976 —-a-w c:windowsDriver Cachei386streamip.sys
    + 2002-12-11 19:14:32 4,096 —-a-w c:windowsDriver Cachei386swenum.sys
    + 2004-07-08 23:26:40 18,688 —-a-w c:windowsDriver Cachei386wstcodec.sys
    + 2009-02-09 21:16:42 25,214 —-a-r c:windowsInstaller{F9000000-0001-0000-0000-074957833700}ARPPRODUCTICON.exe
    + 2009-02-09 21:16:43 25,214 —-a-r c:windowsInstaller{F9000000-0001-0000-0000-074957833700}ICON_FineReader.exe
    + 2009-02-09 21:16:43 25,214 —-a-r c:windowsInstaller{F9000000-0001-0000-0000-074957833700}ICON_ScreenshotReader.exe
    + 2002-12-11 19:14:32 64,512 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}amstream.dll
    + 2004-07-08 23:27:28 1,201,152 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}d3d8.dll
    + 2002-12-11 19:14:32 8,192 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}d3d8thk.dll
    + 2003-05-30 04:00:02 797,184 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}d3dim700.dll
    + 2004-07-08 23:27:28 292,864 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}ddraw.dll
    + 2002-12-11 19:14:32 24,064 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}ddrawex.dll
    + 2003-05-30 04:00:02 132,608 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}devenum.dll
    + 2002-12-11 19:14:32 27,136 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dmband.dll
    + 2002-12-11 19:14:32 58,368 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dmcompos.dll
    + 2004-07-08 23:27:28 181,248 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dmime.dll
    + 2002-12-11 19:14:32 33,280 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dmloader.dll
    + 2002-12-11 19:14:32 76,800 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dmscript.dll
    + 2002-12-11 19:14:32 98,816 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dmstyle.dll
    + 2002-12-11 19:14:32 100,864 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dmsynth.dll
    + 2004-07-08 23:27:28 122,880 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dmusic.dll
    + 2002-12-11 19:14:32 28,160 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dplaysvr.exe
    + 2004-07-08 23:27:28 230,400 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dplayx.dll
    + 2002-12-11 19:14:32 77,824 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dpmodemx.dll
    + 2002-12-11 19:14:32 3,072 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dpnaddr.dll
    + 2002-12-11 19:14:32 723,968 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dpnet.dll
    + 2003-03-24 04:00:02 32,768 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dpnhpast.dll
    + 2003-03-24 04:00:02 68,096 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dpnhupnp.dll
    + 2002-12-11 19:14:32 3,072 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dpnlobby.dll
    + 2002-12-11 19:14:32 16,896 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dpnsvr.exe
    + 2002-12-11 19:14:32 19,968 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dpvacm.dll
    + 2002-12-11 19:14:32 381,952 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dpvoice.dll
    + 2002-12-11 19:14:32 80,896 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dpvsetup.exe
    + 2002-12-11 19:14:32 112,128 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dpvvox.dll
    + 2004-07-08 23:27:28 79,360 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dpwsockx.dll
    + 2002-12-11 19:14:32 186,880 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dsdmo.dll
    + 2002-12-11 19:14:32 491,520 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dsdmoprp.dll
    + 2004-07-08 23:27:28 381,952 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dsound.dll
    + 2002-12-11 19:14:32 1,294,336 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dsound3d.dll
    + 2002-12-11 19:14:32 18,432 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dswave.dll
    + 2002-12-11 19:14:32 602,624 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dx7vb.dll
    + 2003-05-30 04:00:02 1,189,888 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dx8vb.dll
    + 2004-07-08 23:27:28 974,848 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dxdiag.exe
    + 2002-12-11 19:14:32 46,592 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}dxdllreg.exe
    + 2002-12-11 19:14:32 18,944 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}encapi.dll
    + 2002-12-11 19:14:32 130,304 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}ks.sys
    + 2002-12-11 19:14:32 4,096 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}ksuser.dll
    + 2002-12-11 19:14:32 34,304 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}mciqtz32.dll
    + 2002-12-11 19:14:32 13,312 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}msdmo.dll
    + 2002-12-11 19:14:32 7,424 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}mskssrv.sys
    + 2002-12-11 19:14:32 5,248 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}mspclock.sys
    + 2001-08-23 00:00:00 4,608 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}mspqm.sys
    + 2002-12-11 19:14:32 5,504 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}mstee.sys
    + 2002-12-11 19:14:32 324,096 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}mswebdvd.dll
    + 2002-12-11 19:14:32 173,056 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}qasf.dll
    + 2002-12-11 19:14:32 257,024 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}qcap.dll
    + 2004-07-08 23:27:28 316,928 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}qdv.dll
    + 2004-07-08 23:27:28 470,528 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}qdvd.dll
    + 2002-12-11 19:14:32 1,798,144 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}qedit.dll
    + 2002-12-11 19:14:32 733,184 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}qedwipes.dll
    + 2003-05-30 04:00:02 1,962,496 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}quartz.dll
    + 2004-07-08 23:27:28 48,512 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}stream.sys
    + 2002-12-11 19:14:32 4,096 —-a-w c:windowsRegisteredPackages{44BBA855-CC51-11CF-AAFA-00AA00B6015C}swenum.sys
    + 2004-07-08 23:26:38 11,392 —-a-w c:windowsRegisteredPackages{AA936DF4-2B08-4B1F-B071-72192E287704}bdasup.sys
    + 2004-07-08 23:26:38 16,384 —-a-w c:windowsRegisteredPackages{AA936DF4-2B08-4B1F-B071-72192E287704}ccdecode.sys
    + 2004-07-08 23:26:38 15,104 —-a-w c:windowsRegisteredPackages{AA936DF4-2B08-4B1F-B071-72192E287704}mpe.sys
    + 2004-07-08 23:26:38 1,230,336 —-a-w c:windowsRegisteredPackages{AA936DF4-2B08-4B1F-B071-72192E287704}msvidctl.dll
    + 2004-07-08 23:26:38 16,896 —-a-w c:windowsRegisteredPackages{AA936DF4-2B08-4B1F-B071-72192E287704}msyuv.dll
    + 2004-07-08 23:26:38 83,968 —-a-w c:windowsRegisteredPackages{AA936DF4-2B08-4B1F-B071-72192E287704}nabtsfec.sys
    + 2004-07-08 23:26:38 10,112 —-a-w c:windowsRegisteredPackages{AA936DF4-2B08-4B1F-B071-72192E287704}ndisip.sys
    + 2004-07-08 23:26:40 354,816 —-a-w c:windowsRegisteredPackages{AA936DF4-2B08-4B1F-B071-72192E287704}psisdecd.dll
    + 2004-07-08 23:26:40 10,880 —-a-w c:windowsRegisteredPackages{AA936DF4-2B08-4B1F-B071-72192E287704}slip.sys
    + 2004-07-08 23:26:40 14,976 —-a-w c:windowsRegisteredPackages{AA936DF4-2B08-4B1F-B071-72192E287704}streamip.sys
    + 2004-07-08 23:26:40 18,688 —-a-w c:windowsRegisteredPackages{AA936DF4-2B08-4B1F-B071-72192E287704}wstcodec.sys
    + 2004-07-08 23:26:40 47,104 —-a-w c:windowsRegisteredPackages{AA936DF4-2B08-4B1F-B071-72192E287704}wstdecod.dll
    + 2004-07-08 23:26:38 11,392 -c—a-w c:windowssystem32dllcachebdasup.sys
    + 2004-07-08 23:26:38 16,384 -c—a-w c:windowssystem32dllcacheccdecode.sys
    + 2002-12-11 19:14:32 381,952 -c—a-w c:windowssystem32dllcachedpvoice.dll
    + 2001-08-23 00:00:00 223,232 -c—a-w c:windowssystem32dllcachegcdef.dll
    + 2004-07-08 23:26:38 15,104 -c—a-w c:windowssystem32dllcachempe.sys
    + 2004-07-08 23:26:38 52,096 -c—a-w c:windowssystem32dllcachemsdv.sys
    + 2002-12-11 19:14:32 5,504 -c—a-w c:windowssystem32dllcachemstee.sys
    + 2004-07-08 23:26:38 83,968 -c—a-w c:windowssystem32dllcachenabtsfec.sys
    + 2004-07-08 23:26:38 10,112 -c—a-w c:windowssystem32dllcachendisip.sys
    + 2002-08-28 22:41:00 31,744 -c—a-w c:windowssystem32dllcachepid.dll
    + 2004-07-08 23:26:40 354,816 -c—a-w c:windowssystem32dllcachepsisdecd.dll
    + 2003-05-30 04:00:02 1,962,496 -c—a-w c:windowssystem32dllcachequartz.dll
    + 2004-07-08 23:26:40 10,880 -c—a-w c:windowssystem32dllcacheslip.sys
    + 2004-07-08 23:26:40 14,976 -c—a-w c:windowssystem32dllcachestreamip.sys
    + 2004-07-08 23:26:40 18,688 -c—a-w c:windowssystem32dllcachewstcodec.sys
    + 2004-07-08 23:26:38 11,392 —-a-w c:windowssystem32driversbdasup.sys
    + 2004-07-08 23:26:38 16,384 —-a-w c:windowssystem32driversccdecode.sys
    + 2004-07-08 23:26:38 15,104 —-a-w c:windowssystem32driversmpe.sys
    + 2004-07-08 23:26:38 52,096 —-a-w c:windowssystem32driversmsdv.sys
    + 2002-12-11 19:14:32 5,504 —-a-w c:windowssystem32driversmstee.sys
    + 2004-07-08 23:26:38 83,968 —-a-w c:windowssystem32driversnabtsfec.sys
    + 2004-07-08 23:26:38 10,112 —-a-w c:windowssystem32driversndisip.sys
    + 2004-07-08 23:26:40 10,880 —-a-w c:windowssystem32driversslip.sys
    + 2004-07-08 23:26:40 14,976 —-a-w c:windowssystem32driversstreamip.sys
    + 2004-07-08 23:26:40 18,688 —-a-w c:windowssystem32driverswstcodec.sys
    + 2002-12-11 19:14:32 46,592 —-a-w c:windowssystem32dxdllreg.exe
    — 2009-02-08 08:43:53 157,952 —-a-w c:windowssystem32FNTCACHE.DAT
    + 2009-02-14 06:13:34 158,752 —-a-w c:windowssystem32FNTCACHE.DAT
    + 2008-10-05 03:24:02 3,695,008 —-a-w c:windowssystem32MacromedFlashNPSWF32.dll
    + 2008-10-05 03:24:04 235,936 —-a-w c:windowssystem32MacromedFlashNPSWF32_FlashUtil.exe
    + 2009-02-09 17:38:49 84,661 —-a-w c:windowssystem32MacromedFlashuninstall_plugin.exe
    — 2002-01-05 01:40:20 487,424 —-a-w c:windowssystem32MSVCP70.DLL
    + 2005-09-14 05:00:00 487,424 —-a-w c:windowssystem32MSVCP70.DLL
    + 2004-07-08 23:26:40 354,816 —-a-w c:windowssystem32psisdecd.dll
    .
    — Snapshot reset to current date —
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerURLSearchHooks]
    «{95289393-33EA-4F8D-B952-483415B9C955}»= «c:documents and settingsAdminApplication DataMicrosoftInternet Explorerqipsearchbar.dll» [2009-01-20 131072]

    [HKEY_CLASSES_ROOTclsid{95289393-33ea-4f8d-b952-483415b9c955}]
    [HKEY_CLASSES_ROOTqipbar.QIPBHO.1]
    [HKEY_CLASSES_ROOTTypeLib{45FF696B-5284-4781-B2CA-ECF3A742A17B}]
    [HKEY_CLASSES_ROOTqipbar.QIPBHO]

    [HKEY_LOCAL_MACHINE~Browser Helper Objects{95289393-33EA-4F8D-B952-483415B9C955}]
    2009-01-20 13:09 131072 —a

    c:documents and settingsAdminApplication DataMicrosoftInternet Explorerqipsearchbar.dll

    [HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
    «CTFMON.EXE»=»c:windowssystem32ctfmon.exe» [2008-08-19 30208]
    «VistaIcon»=»c:program filesVistaDriveIconVistaDrv.exe» [2008-01-02 132096]
    «Punto Switcher»=»c:program filesPunto Switcherps.exe» [2008-05-30 722112]
    «GAINWARD»=»c:program filesEXPERToolTBPanel.exe» [2008-07-10 2177576]
    «BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}»=»c:program filesCommon FilesAheadLibNMBgMonitor.exe» [2006-07-31 139264]
    «SpybotSD TeaTimer»=»c:program filesSpybot — Search & DestroyTeaTimer.exe» [2009-01-26 2144088]
    «DAEMON Tools»=»c:program filesDAEMON Toolsdaemon.exe» [2007-04-04 165784]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
    «NvCplDaemon»=»c:windowssystem32NvCpl.dll» [2008-11-12 13672448]
    «NvMediaCenter»=»c:windowssystem32NvMcTray.dll» [2008-11-12 86016]
    «MAgent»=»c:program filesMail.RuAgentMAgent.exe» [2009-02-06 5600952]
    «egui»=»c:program filesESETESET NOD32 Antivirusegui.exe» [2008-02-06 1443072]
    «NeroFilterCheck»=»c:program filesCommon FilesAheadLibNeroCheck.exe» [2006-01-12 155648]
    «SoundMan»=»SOUNDMAN.EXE» [2007-04-17 c:windowsSOUNDMAN.EXE]
    «nwiz»=»nwiz.exe» [2008-11-12 c:windowssystem32nwiz.exe]

    [HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
    «CTFMON.EXE»=»c:windowssystem32CTFMON.EXE» [2008-08-19 30208]
    «VistaIcon»=»c:program filesVistaDriveIconVistaDrv.exe» [2008-01-02 132096]

    [HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRunOnce]
    «IE7_011″=»shell32» [X]
    «ZZZZ2_FirstLogonSetting»=»advpack.dll» [2008-10-17 c:windowssystem32advpack.dll]
    «IE7_012″=»advpack.dll» [2008-10-17 c:windowssystem32advpack.dll]

    [HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionpoliciesexplorer]
    «NoSMConfigurePrograms»= 1 (0x1)

    [HKEY_USERS.defaultsoftwaremicrosoftwindowscurrentversionpoliciesexplorer]
    «NoSMConfigurePrograms»= 1 (0x1)

    [HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversiondrivers32]
    «VIDC.X264″= x264vfw.dll

    [HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity center]
    «UpdatesDisableNotify»=dword:00000001
    «UpdatesOverride»=dword:00000001
    «AntiVirusDisableNotify»=dword:00000001

    [HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList]
    «%windir%\Network Diagnostic\xpnetdiag.exe»=
    «%windir%\system32\sessmgr.exe»=
    «c:\Program Files\uTorrent\utorrent.exe»=
    «c:\Program Files\Bonjour\mDNSResponder.exe»=
    «c:\Program Files\Opera\opera.exe»=

    R1 epfwtdir;epfwtdir;c:windowssystem32driversepfwtdir.sys [2008-02-06 34312]
    R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service;c:program filesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe [2007-12-06 660768]
    R2 ekrn;Eset Service;c:program filesESETESET NOD32 Antivirusekrn.exe [2008-02-06 472320]
    R2 FinePrint Диспетчер v6;FinePrint Диспетчер v6;c:windowssystem32spooldriversw32x863fpdisp6.exe [2009-02-05 557056]
    R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:windowssystem32TUProgSt.exe [2009-02-08 603904]

    HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionSvchost — NetSvcs
    UxTuneUp

    [HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{80d279ca-faa2-11dd-945f-000461aebaa7}]
    ShellAutoRuncommand — H:u.bat
    ShellexploreCommand — H:u.bat
    ShellopenCommand — H:u.bat
    .
    Contents of the ‘Scheduled Tasks’ folder

    2009-02-14 c:windowsTasks1-Click Maintenance.job
    — c:program filesTuneUp Utilities 2009OneClickStarter.exe [2008-11-20 16:28]
    .
    .

    Supplementary Scan

    .
    uStart Page = hxxp://www.daemon-search.com/default
    IE: &Перевести — c:program filesArsenal CompanySOCRAT InternetHTMLWSocrat.js
    IE: &Экспорт в Microsoft Excel — c:progra~1MICROS~1Office12EXCEL.EXE/3000
    IE: Поиск@Mail.Ru — c:program filesMail.RuSputnikMailRuSputnik.dll/282
    IE: Словари@Mail.Ru — c:program filesMail.RuSputnikMailRuSputnik.dll/283
    IE: {{7558B7E5-7B26-4201-BEDB-00D5FF534523} — c:program filesMail.RuAgentmagent.exe
    IE: {{17FA5CD6-5737-45c2-B194-74C8A4A7F7E7} — {7E1F0737-53A5-4EDC-8734-DD94B50AAF83} — c:program filesArsenal CompanySOCRAT InternetSocratInternet.dll
    IE: {{DFDC8970-FD66-4385-B8C0-835A4AA1DA00} — {A3400175-12F9-4220-83BF-A7210CA4003E} — c:program filesArsenal CompanySOCRAT InternetSocratInternet.dll
    .

    **************************************************************************

    catchme 0.3.1367 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-02-14 22:27:43
    Windows 5.1.2600 Service Pack 3 NTFS

    scanning hidden processes …

    scanning hidden autostart entries …

    scanning hidden files …

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .

    DLLs Loaded Under Running Processes


    — — — — — — — > ‘winlogon.exe'(672)
    c:windowssystem32SETUPAPI.dll
    c:windowssystem32cscui.dll

    — — — — — — — > ‘lsass.exe'(732)
    c:windowssystem32SETUPAPI.dll
    .
    Completion time: 2009-02-14 22:29:01
    ComboFix-quarantined-files.txt 2009-02-14 17:28:54
    ComboFix2.txt 2009-02-12 23:49:29
    ComboFix3.txt 2009-02-09 01:35:04
    ComboFix4.txt 2009-02-09 00:45:36
    ComboFix5.txt 2009-02-14 17:25:41

    Pre-Run: 2 217 639 936 байт свободно
    Post-Run: 2,209,415,168 байт свободно

    412 — E O F — 2009-02-07 21:45:54

    12 февраля, 2009 в 11:53 пп в ответ на: появилась рекламная лента.как быть и что делать незнаю #21857
    barlak
    Participant
    • Темы:1
    • Сообщений:4
    • ☆

    к сажелению лента так и осталась.лог ниже
    ComboFix 09-02-12.03 — Admin 2009-02-13 4:46:49.6 — NTFSx86
    Microsoft Windows XP Professional 5.1.2600.3.1251.1.1049.18.1023.358 [GMT 5:00]
    Running from: c:documents and settingsAdminРабочий столлечилкиComboFix.exe
    Command switches used :: c:documents and settingsAdminРабочий столлечилкиCFScript.txt
    AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Updated)

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

    FILE ::
    c:documents and settingsAll UsersApplication Datayvulib.dll
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:documents and settingsAdminLocal SettingsTemporary Internet Files0EB9F12C_6E6B_4c03_AEBA_8C04CFA98AA4.jpg
    c:documents and settingsAdminLocal SettingsTemporary Internet Files15913497_F86C_4218_8817_F50940D1E1B2.jpg
    c:documents and settingsAdminLocal SettingsTemporary Internet Files29887DDE_00B9_4011_9CF7_59511F1ECC1B.jpg
    c:documents and settingsAdminLocal SettingsTemporary Internet Files35B7DFFA_884F_4fbc_8E60_DA601BDC7BF7.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet Files362FD6E8_8CDA_4c2a_A8AA-BDA22B321711.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet Files3DF04940_9866_4241_A998_0CDDFAFD147A.jpg
    c:documents and settingsAdminLocal SettingsTemporary Internet Files426500D7_0FF3_426c_828D_065DBAEA0581.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet Files478BD4AE_2691_438d_BDCA_3485DC022700.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet Files5C6C645F_BAA8_4149_BFEB_2031230FF0FD.jpg
    c:documents and settingsAdminLocal SettingsTemporary Internet Files61EA7D69_19D4_421a_A899_0DF4D58CD119.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet Files777FDAFB_83CF_4960_AA71_4E5D7BCD8E57.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet Files8DA878D5_E80B_4721_B75A_17EFFAF1A700.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet Files98F6DF79_7171_452d_9C26_C0193E12DBDF.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet FilesA2B240D6_0386_419e_91C5_3F7D90437CD0.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet FilesC75CEF8D_5AF4_4563_8594_C45A45E14E63.gif
    c:documents and settingsAdminLocal SettingsTemporary Internet FilesE21285C1_40E6_435c_A69F_3387E7BD89CB.jpg
    c:documents and settingsAdminLocal SettingsTemporary Internet FilesE9A4D648_ED73_4ea7_88B2_18332DBA4F3E.gif
    c:documents and settingsAll UsersApplication Datayvulib.dll
    H:d.com

    .
    ((((((((((((((((((((((((( Files Created from 2009-01-12 to 2009-02-12 )))))))))))))))))))))))))))))))
    .

    2009-02-11 18:59 . 2009-02-11 19:04

    d

    c:documents and settingsAdminApplication DataSPORE
    2009-02-11 18:24 . 2009-02-11 18:24     d

    c:documents and settingsLocalServiceРабочий стол
    2009-02-10 02:17 . 2009-02-10 02:17     d

    c:documents and settingsAdminApplication DataABBYY
    2009-02-10 02:14 . 2009-02-10 02:14     d

    c:program filesCommon FilesABBYY
    2009-02-10 02:12 . 2009-02-10 02:17     d

    c:program filesABBYY FineReader 9.0
    2009-02-10 02:12 . 2009-02-10 22:52     d

    c:documents and settingsAll UsersApplication DataABBYY
    2009-02-10 02:09 . 2009-02-10 02:10     d

    c:tempFR90PE
    2009-02-10 02:09 . 2009-02-10 02:09     d

    C:temp
    2009-02-09 23:23 . 2009-02-11 02:08     d

    c:documents and settingsAdminApplication DataQIP.Online
    2009-02-09 23:21 . 2009-02-09 23:21     d

    c:program filesQIP.Online
    2009-02-09 23:14 . 2009-02-09 23:14     d

    c:documents and settingsAdminApplication DataQIP
    2009-02-09 23:13 . 2009-02-09 23:27     d

    c:program filesQIP Infium
    2009-02-09 06:48 . 2009-02-09 06:48     d

    c:program filestrend micro
    2009-02-09 06:47 . 2009-02-09 06:48     d

    C:rsit
    2009-02-09 06:06 . 2009-02-09 06:06     d

    c:program filesSpybot — Search & Destroy
    2009-02-09 06:06 . 2009-02-09 06:35     d

    c:documents and settingsAll UsersApplication DataSpybot — Search & Destroy
    2009-02-09 04:14 . 2009-02-09 04:14 320,000 —a

    c:documents and settingsAll UsersApplication Dataaqplib.dll
    2009-02-08 22:52 . 2009-02-08 22:52     d

    c:documents and settingsAdminApplication DataGrym
    2009-02-08 22:51 . 2009-02-08 22:51     d

    c:program files2gis
    2009-02-08 22:51 . 2009-02-08 22:54     d

    c:documents and settingsAll UsersApplication Data2GIS
    2009-02-08 17:00 . 2009-02-08 17:00     d

    c:program filesExact Audio Copy
    2009-02-08 17:00 . 2009-02-08 17:00     d

    c:documents and settingsAdminApplication DataAD ON Multimedia
    2009-02-08 17:00 . 2009-02-08 17:00     d

    c:documents and settingsAdminApplication DataAccurateRip
    2009-02-08 08:04 . 2009-02-09 04:04     d

    c:program filesDAEMON Tools Toolbar
    2009-02-08 08:04 . 2009-02-08 08:04     d

    c:documents and settingsAdminApplication DataDAEMON Tools
    2009-02-08 07:21 . 2006-07-28 20:11 3,076,096

    c:windowsUNNeroSipps.exe
    2009-02-08 07:21 . 2006-07-31 15:34 78,027

    c:windowsUNNeroSipps.cfg
    2009-02-08 05:21 . 2009-02-08 05:21 603,904 —a

    c:windowssystem32TUProgSt.exe
    2009-02-08 05:20 . 2009-02-08 05:22     d

    c:program filesTuneUp Utilities 2009
    2009-02-08 05:20 . 2009-02-08 05:20     d

    c:documents and settingsAll UsersApplication DataTuneUp Software
    2009-02-08 05:20 . 2009-02-08 05:20     d—hs—- c:documents and settingsAll UsersApplication Data{55A29068-F2CE-456C-9148-C869879E2357}
    2009-02-08 05:20 . 2009-02-08 05:20     d

    c:documents and settingsAdminApplication DataTuneUp Software
    2009-02-08 05:20 . 2009-02-08 05:20 362,240 —a

    c:windowssystem32TuneUpDefragService.exe
    2009-02-08 05:20 . 2008-11-12 16:44 27,904 —a

    c:windowssystem32uxtuneup.dll
    2009-02-08 04:44 . 2009-02-13 00:36 69 —a

    c:windowsNeroDigital.ini
    2009-02-08 04:02 . 2009-02-12 19:54     d

    c:documents and settingsAdminApplication DataAhead
    2009-02-08 03:59 . 2009-02-08 07:20     d

    c:program filesNero
    2009-02-08 03:59 . 2009-02-08 07:20     d

    c:program filesCommon FilesAhead
    2009-02-08 03:27 . 2009-02-08 03:27 1,857,540 —ah

    c:windows03.mpg
    2009-02-08 03:27 . 2009-02-08 03:27 1,828,868 —ah

    c:windows01.mpg
    2009-02-07 02:01 . 2009-02-08 02:38     d—h

    c:windows$hf_mig$
    2009-02-07 02:00 . 2009-02-07 02:00     d

    c:program filesMSXML 4.0
    2009-02-07 01:35 . 2009-02-07 01:35     d

    c:documents and settingsAdminApplication Datafltk.org
    2009-02-07 00:22 . 2009-02-07 00:22     d

    c:documents and settingsAdminApplication DataMedia Player Classic
    2009-02-07 00:21 . 2009-02-07 00:21     d

    c:program filesK-Lite Codec Pack
    2009-02-06 23:36 . 2009-02-06 23:36     d

    c:documents and settingsAll UsersApplication DataESET
    2009-02-06 22:24 . 2009-02-06 22:24     d

    c:documents and settingsAll UsersApplication DataFLEXnet
    2009-02-06 22:20 . 2009-02-06 22:20     d

    c:program filesCommon FilesMacrovision Shared
    2009-02-06 22:19 . 2009-02-06 22:19     d

    c:program filesBonjour
    2009-02-06 21:56 . 2009-02-06 21:56     d

    c:program filesMail.Ru
    2009-02-06 21:56 . 2009-02-13 02:51     d

    c:documents and settingsAdminApplication DataMra
    2009-02-06 21:36 . 2008-08-14 18:26 2,190,976

    c— c:windowssystem32dllcachentoskrnl.exe
    2009-02-06 21:36 . 2008-08-14 18:26 2,147,328

    c— c:windowssystem32dllcachentkrnlmp.exe
    2009-02-06 21:36 . 2008-08-14 18:26 2,067,840

    c— c:windowssystem32dllcachentkrnlpa.exe
    2009-02-06 21:36 . 2008-08-14 18:26 2,025,984

    c— c:windowssystem32dllcachentkrpamp.exe
    2009-02-06 19:25 . 2009-02-06 19:25     d

    c:windowssystem32Adobe
    2009-02-06 19:25 . 2009-02-06 19:25     d

    c:windowsProfiles
    2009-02-06 19:25 . 2009-02-06 22:38     d

    c:program filesCommon FilesAdobe
    2009-02-06 19:25 . 2009-02-06 19:25     d

    c:documents and settingsAdminApplication DataInterTrust
    2009-02-06 19:25 . 1998-10-29 14:45 306,688 —a

    c:windowsIsUninst.exe
    2009-02-06 19:02 . 2008-10-24 16:21 455,296

    c— c:windowssystem32dllcachemrxsmb.sys
    2009-02-06 18:40 . 2009-02-06 19:25     d

    C:Tech_rem
    2009-02-06 18:40 . 2009-02-06 18:39 286,720 —a

    c:windowsiun505.exe
    2009-02-06 18:29 . 2008-09-04 22:17 1,106,944

    c— c:windowssystem32dllcachemsxml3.dll
    2009-02-06 15:41 . 2008-08-19 20:15 26,368 —a—c— c:windowssystem32dllcacheusbstor.sys
    2009-02-06 13:58 . 2009-02-06 13:58     d

    c:program filesGuitar Pro 5
    2009-02-06 12:58 . 2008-10-16 16:06 268,648 —a

    c:windowssystem32mucltui.dll
    2009-02-06 12:58 . 2008-10-16 16:06 27,496 —a

    c:windowssystem32mucltui.dll.mui
    2009-02-06 04:06 . 2009-02-06 04:08     d

    c:program filesMatrix-Reload
    2009-02-06 04:00 . 2009-02-08 16:38     dr

    c:program filesMatrix
    2009-02-06 03:12 . 2009-02-08 01:36     d

    c:program filesESET
    2009-02-06 03:09 . 2009-02-13 00:09     d

    c:program filesOpera
    2009-02-06 02:00 . 2008-08-20 01:15 172,416 —a

    c:windowssystem32driverskmixer.sys
    2009-02-06 02:00 . 2008-08-20 01:15 142,592 —a

    c:windowssystem32driversaec.sys
    2009-02-06 02:00 . 2008-08-20 01:15 83,072 —a

    c:windowssystem32driverswdmaud.sys
    2009-02-06 02:00 . 2008-08-20 01:15 60,800 —a

    c:windowssystem32driverssysaudio.sys
    2009-02-06 02:00 . 2008-08-20 01:15 56,576 —a

    c:windowssystem32driversswmidi.sys
    2009-02-06 02:00 . 2008-08-20 01:15 52,864 —a

    c:windowssystem32driversDMusic.sys
    2009-02-06 02:00 . 2008-08-20 01:15 7,552 —a

    c:windowssystem32driversMSKSSRV.sys
    2009-02-06 02:00 . 2008-08-20 01:15 6,272 —a

    c:windowssystem32driverssplitter.sys
    2009-02-06 02:00 . 2008-08-20 01:15 5,376 —a

    c:windowssystem32driversMSPCLOCK.sys
    2009-02-06 02:00 . 2008-08-20 01:15 4,992 —a

    c:windowssystem32driversMSPQM.sys
    2009-02-06 02:00 . 2001-08-18 02:59 3,072 —a

    c:windowssystem32driversaudstub.sys
    2009-02-06 02:00 . 2008-08-20 01:15 2,944 —a

    c:windowssystem32driversdrmkaud.sys

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-02-11 20:27

    d

    w c:documents and settingsAdminApplication DatauTorrent
    2009-02-07 21:45

    d

    w c:documents and settingsAll UsersApplication DataMicrosoft Help
    2009-02-06 10:24

    d

    w c:program filesCommon FilesArsenal Shared
    2009-02-05 19:25

    d

    w c:program filesAGEIA Technologies
    2009-02-05 19:24

    d

    w c:program filesCommon FilesWise Installation Wizard
    2009-02-05 19:14

    d

    w c:program filesEXPERTool
    2009-02-05 19:04

    d

    w c:program filesuTorrent
    2009-02-05 18:56

    d

    w c:program filesCommon FilesInstallShield
    2009-02-05 18:35

    d

    w c:program filesVuescan
    2009-02-05 18:35

    d

    w c:program filesUltraISO
    2009-02-05 18:35

    d

    w c:program filesEverest
    2009-02-05 18:35

    d

    w c:program filesCommon FilesEZB Systems
    2009-02-05 18:34

    d—h—w c:program filesInstallShield Installation Information
    2009-02-05 18:34

    d

    w c:program filesCommon FilesMacromedia
    2009-02-05 18:34

    d

    w c:program filesArsenal Company
    2009-02-05 18:33

    d

    w c:program filesMacromedia
    2009-02-05 18:20

    d

    w c:program filesMicrosoft.NET
    2009-02-05 18:20

    d

    w c:program filesMicrosoft Works
    2009-02-05 18:18

    d

    w c:program filesWinDjView
    2009-02-05 18:18

    d

    w c:program filesSolid Converter PDF
    2009-02-05 18:18

    d

    w c:program filesPunto Switcher
    2009-02-05 18:18

    d

    w c:program filesFoxit Reader
    2009-02-05 18:11 717,296 —-a-w c:windowssystem32driverssptd.sys
    2009-02-05 18:11

    d

    w c:program filesVistaDriveIcon
    2009-02-05 18:11

    d

    w c:program filesPaint.NET
    2009-02-05 18:11

    d

    w c:program filesJava
    2009-02-05 18:10

    d

    w c:program filesCommon FilesJava
    2009-02-05 18:03

    d

    w c:program filesWindows Media Connect 2
    2008-11-12 10:45 453,152 —-a-w c:windowssystem32NVUNINST.EXE
    .

    Sigcheck


    2008-08-19 21:23 579072 23b7d3f3f5ec8feea75ec381c71cbd5e c:windowssystem32user32.dll

    2008-08-19 21:20 361600 6a104ba98d99d53ab0c91825ce659fc6 c:windowssystem32driverstcpip.sys

    2008-08-19 21:22 1721344 62ea07edf5e3f3ff34eff9bf7619bc64 c:windowsexplorer.exe

    2008-08-19 21:21 30208 b8b35f99dadaa5459fba639f20045fe2 c:windowssystem32ctfmon.exe
    .
    ((((((((((((((((((((((((((((( SnapShot@2009-02-09_ 5.28.49,67 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2009-02-09 21:16:42 25,214 —-a-r c:windowsInstaller{F9000000-0001-0000-0000-074957833700}ARPPRODUCTICON.exe
    + 2009-02-09 21:16:43 25,214 —-a-r c:windowsInstaller{F9000000-0001-0000-0000-074957833700}ICON_FineReader.exe
    + 2009-02-09 21:16:43 25,214 —-a-r c:windowsInstaller{F9000000-0001-0000-0000-074957833700}ICON_ScreenshotReader.exe
    + 2008-10-05 03:24:02 3,695,008 —-a-w c:windowssystem32MacromedFlashNPSWF32.dll
    + 2008-10-05 03:24:04 235,936 —-a-w c:windowssystem32MacromedFlashNPSWF32_FlashUtil.exe
    + 2009-02-09 17:38:49 84,661 —-a-w c:windowssystem32MacromedFlashuninstall_plugin.exe
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerURLSearchHooks]
    «{95289393-33EA-4F8D-B952-483415B9C955}»= «c:documents and settingsAdminApplication DataMicrosoftInternet Explorerqipsearchbar.dll» [2009-01-20 131072]

    [HKEY_CLASSES_ROOTclsid{95289393-33ea-4f8d-b952-483415b9c955}]
    [HKEY_CLASSES_ROOTqipbar.QIPBHO.1]
    [HKEY_CLASSES_ROOTTypeLib{45FF696B-5284-4781-B2CA-ECF3A742A17B}]
    [HKEY_CLASSES_ROOTqipbar.QIPBHO]

    [HKEY_LOCAL_MACHINE~Browser Helper Objects{95289393-33EA-4F8D-B952-483415B9C955}]
    2009-01-20 13:09 131072 —a

    c:documents and settingsAdminApplication DataMicrosoftInternet Explorerqipsearchbar.dll

    [HKEY_LOCAL_MACHINE~Browser Helper Objects{CBC43FBB-B0CD-4343-88C3-BFB1F2C1E89D}]
    2009-02-09 04:14 320000 —a

    c:documents and settingsAll UsersApplication Dataaqplib.dll

    [HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
    «CTFMON.EXE»=»c:windowssystem32ctfmon.exe» [2008-08-19 30208]
    «VistaIcon»=»c:program filesVistaDriveIconVistaDrv.exe» [2008-01-02 132096]
    «Punto Switcher»=»c:program filesPunto Switcherps.exe» [2008-05-30 722112]
    «GAINWARD»=»c:program filesEXPERToolTBPanel.exe» [2008-07-10 2177576]
    «BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}»=»c:program filesCommon FilesAheadLibNMBgMonitor.exe» [2006-07-31 139264]
    «SpybotSD TeaTimer»=»c:program filesSpybot — Search & DestroyTeaTimer.exe» [2009-01-26 2144088]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
    «NvCplDaemon»=»c:windowssystem32NvCpl.dll» [2008-11-12 13672448]
    «NvMediaCenter»=»c:windowssystem32NvMcTray.dll» [2008-11-12 86016]
    «MAgent»=»c:program filesMail.RuAgentMAgent.exe» [2009-02-06 5600952]
    «egui»=»c:program filesESETESET NOD32 Antivirusegui.exe» [2008-02-06 1443072]
    «NeroFilterCheck»=»c:program filesCommon FilesAheadLibNeroCheck.exe» [2006-01-12 155648]
    «SoundMan»=»SOUNDMAN.EXE» [2007-04-17 c:windowsSOUNDMAN.EXE]
    «nwiz»=»nwiz.exe» [2008-11-12 c:windowssystem32nwiz.exe]

    [HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
    «CTFMON.EXE»=»c:windowssystem32CTFMON.EXE» [2008-08-19 30208]
    «VistaIcon»=»c:program filesVistaDriveIconVistaDrv.exe» [2008-01-02 132096]

    [HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRunOnce]
    «IE7_011″=»shell32» [X]
    «ZZZZ2_FirstLogonSetting»=»advpack.dll» [2008-10-17 c:windowssystem32advpack.dll]
    «IE7_012″=»advpack.dll» [2008-10-17 c:windowssystem32advpack.dll]

    [HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionpoliciesexplorer]
    «NoSMConfigurePrograms»= 1 (0x1)

    [HKEY_USERS.defaultsoftwaremicrosoftwindowscurrentversionpoliciesexplorer]
    «NoSMConfigurePrograms»= 1 (0x1)

    [HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversiondrivers32]
    «VIDC.X264″= x264vfw.dll

    [HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity center]
    «UpdatesDisableNotify»=dword:00000001
    «UpdatesOverride»=dword:00000001
    «AntiVirusDisableNotify»=dword:00000001

    [HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList]
    «%windir%\Network Diagnostic\xpnetdiag.exe»=
    «%windir%\system32\sessmgr.exe»=
    «c:\Program Files\uTorrent\utorrent.exe»=
    «c:\Program Files\Bonjour\mDNSResponder.exe»=

    R1 epfwtdir;epfwtdir;c:windowssystem32driversepfwtdir.sys [2008-02-06 34312]
    R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service;c:program filesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe [2007-12-06 660768]
    R2 ekrn;Eset Service;c:program filesESETESET NOD32 Antivirusekrn.exe [2008-02-06 472320]
    R2 FinePrint Диспетчер v6;FinePrint Диспетчер v6;c:windowssystem32spooldriversw32x863fpdisp6.exe [2009-02-05 557056]
    R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:windowssystem32TUProgSt.exe [2009-02-08 603904]

    HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionSvchost — NetSvcs
    UxTuneUp
    .
    Contents of the ‘Scheduled Tasks’ folder

    2009-02-12 c:windowsTasks1-Click Maintenance.job
    — c:program filesTuneUp Utilities 2009OneClickStarter.exe [2008-11-20 16:28]
    .
    .

    Supplementary Scan

    .
    uStart Page = hxxp://www.daemon-search.com/default
    IE: &Перевести — c:program filesArsenal CompanySOCRAT InternetHTMLWSocrat.js
    IE: &Экспорт в Microsoft Excel — c:progra~1MICROS~1Office12EXCEL.EXE/3000
    IE: Поиск@Mail.Ru — c:program filesMail.RuSputnikMailRuSputnik.dll/282
    IE: Словари@Mail.Ru — c:program filesMail.RuSputnikMailRuSputnik.dll/283
    IE: {{7558B7E5-7B26-4201-BEDB-00D5FF534523} — c:program filesMail.RuAgentmagent.exe
    IE: {{17FA5CD6-5737-45c2-B194-74C8A4A7F7E7} — {7E1F0737-53A5-4EDC-8734-DD94B50AAF83} — c:program filesArsenal CompanySOCRAT InternetSocratInternet.dll
    IE: {{DFDC8970-FD66-4385-B8C0-835A4AA1DA00} — {A3400175-12F9-4220-83BF-A7210CA4003E} — c:program filesArsenal CompanySOCRAT InternetSocratInternet.dll
    TCP: {710ABC31-627F-4E3E-8BA3-A0C4DD8F11D5} = 91.144.132.1 91.144.134.1
    .

    **************************************************************************

    catchme 0.3.1367 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-02-13 04:48:18
    Windows 5.1.2600 Service Pack 3 NTFS

    scanning hidden processes …

    scanning hidden autostart entries …

    scanning hidden files …

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .

    DLLs Loaded Under Running Processes


    — — — — — — — > ‘winlogon.exe'(664)
    c:windowssystem32SETUPAPI.dll
    c:windowssystem32cscui.dll

    — — — — — — — > ‘lsass.exe'(724)
    c:windowssystem32SETUPAPI.dll
    .
    Completion time: 2009-02-13 4:49:27
    ComboFix-quarantined-files.txt 2009-02-12 23:49:25
    ComboFix2.txt 2009-02-09 01:35:04
    ComboFix3.txt 2009-02-09 00:45:36
    ComboFix4.txt 2009-02-09 00:35:09

    Pre-Run: 2 901 102 592 байт свободно
    Post-Run: 2,911,784,960 байт свободно

    267 — E O F — 2009-02-07 21:45:54

    9 февраля, 2009 в 1:55 дп в ответ на: появилась рекламная лента.как быть и что делать незнаю #21855
    barlak
    Participant
    • Темы:1
    • Сообщений:4
    • ☆

    часть 2

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:Program FilesBonjourmDNSResponder.exe [2006-02-28 229376]
    R2 ekrn;Eset Service; C:Program FilesESETESET NOD32 Antivirusekrn.exe [2008-02-06 472320]
    R2 FinePrint Диспетчер v6;FinePrint Диспетчер v6; C:WINDOWSSystem32spoolDRIVERSW32X863fpdisp6.exe [2008-07-11 557056]
    R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2008-11-12 163908]
    R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service; C:WINDOWSSystem32TUProgSt.exe [2009-02-08 603904]
    R2 UxTuneUp;TuneUp Theme Extension; C:WINDOWSSystem32svchost.exe [2008-04-15 14336]
    S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2007-10-24 33800]
    S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2007-10-24 70144]
    S3 EhttpSrv;Eset HTTP Server; C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe [2008-02-06 19200]
    S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe [2009-02-06 654848]
    S3 NBService;NBService; C:Program FilesNeroNero 7Nero BackItUpNBService.exe [2006-07-31 720896]
    S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2006-10-26 441136]
    S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
    S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:WINDOWSSystem32TuneUpDefragService.exe [2009-02-08 362240]
    S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media Playerwmpnetwk.exe [2006-10-18 913408]
    S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]

    EOF

    info.txt logfile of random’s system information tool 1.05 2009-02-09 06:48:10

    ======Uninstall list======

    —>C:Program FilesNeroNero 7nerouninstallUNNERO.exe /UNINSTALL
    —>C:WINDOWSUNNeroBackItUp.exe /UNINSTALL
    —>C:WINDOWSUNNeroMediaHome.exe /UNINSTALL
    —>C:WINDOWSUNNeroShowTime.exe /UNINSTALL
    —>C:WINDOWSUNNeroVision.exe /UNINSTALL
    —>C:WINDOWSUNRecode.exe /UNINSTALL
    —>msiexec /package {90120000-0015-0000-0000-0000000FF1CE} /uninstall {10B5F4EF-C4DC-47AF-913B-EAF05C69C852}
    —>msiexec /package {90120000-0016-0000-0000-0000000FF1CE} /uninstall {C5060182-C90D-4314-9AE9-5C0DCF8FD1EF}
    —>msiexec /package {90120000-0018-0000-0000-0000000FF1CE} /uninstall {00E877D5-CDF8-4DDC-9AE0-E541B4BB6487}
    —>msiexec /package {90120000-001A-0000-0000-0000000FF1CE} /uninstall {2A33A0C2-2B09-446E-9022-1508A85ECD2D}
    —>msiexec /package {90120000-001B-0000-0000-0000000FF1CE} /uninstall {3520B304-0EF8-475D-8C52-47ABCCC75FC6}
    —>msiexec /package {90120000-0051-0000-0000-0000000FF1CE} /uninstall {5C395839-FBA5-49C5-923A-787665D5E128}
    —>MsiExec /X{AC54E544-3E42-443C-A91D-A00A6974C592}
    —>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
    Adobe Acrobat 5.0—>C:WINDOWSISUNINST.EXE -f»C:Program FilesCommon FilesAdobeAcrobat 5.0NTUninst.isu» -c»C:Program FilesCommon FilesAdobeAcrobat 5.0NTUninst.dll»
    Adobe Anchor Service CS3—>MsiExec.exe /I{A4464AC3-D85E-4649-8748-706191063DF6}
    Adobe Asset Services CS3—>MsiExec.exe /I{7302810D-7ACF-4339-B27B-57016CAADDCD}
    Adobe Bridge CS3—>MsiExec.exe /I{FABA59CC-347B-478B-B2A7-37BF0885CACB}
    Adobe Bridge Start Meeting—>MsiExec.exe /I{CE52110A-7773-444F-9E5D-4A45E4792DB6}
    Adobe Camera Raw 4.0—>MsiExec.exe /I{AED353B9-E6D7-406F-B007-2C55C5265EB3}
    Adobe CMaps—>MsiExec.exe /I{D8FC8E35-D397-4C16-87AE-141A625221E4}
    Adobe Default Language CS3—>MsiExec.exe /I{D446BA40-1F5F-44EB-A794-0AC14F809C79}
    Adobe Device Central CS3—>MsiExec.exe /I{265FCC3B-4814-4B2B-89D6-217DFB8AD886}
    Adobe ExtendScript Toolkit 2—>MsiExec.exe /I{F36CFE58-47C0-4D75-995B-E0172563FA83}
    Adobe Flash Player ActiveX—>C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
    Adobe Fonts All—>MsiExec.exe /I{162DDD86-C087-4E59-B7A8-0C1D8F884A9A}
    Adobe Help Viewer 1.1—>MsiExec.exe /I{F3697BA5-C8D8-4925-ACCA-F486C76BAD33}
    Adobe Linguistics CS3—>MsiExec.exe /I{E5C28906-EC86-404E-BB4F-6AB2590451FF}
    Adobe PDF Library Files—>MsiExec.exe /I{91D829E6-F1D1-433F-861F-0552DFED0EAD}
    Adobe Photoshop CS3—>C:Program FilesCommon FilesAdobeInstallers8d0dc9390f2c596455e1446b5918a40Setup.exe
    Adobe Photoshop CS3—>MsiExec.exe /I{F32F1F7C-322D-46B9-B69A-5C3EDC88B74C}
    Adobe Setup—>MsiExec.exe /I{CBF7A9A4-C0D4-4BA0-8991-C9B7D90A5298}
    Adobe Stock Photos CS3—>MsiExec.exe /I{73B79E83-490B-460D-B0D6-2C7B73980325}
    Adobe Type Support—>MsiExec.exe /I{A78A65E4-1D88-477A-83B4-3EC540F6A55A}
    Adobe Version Cue CS3 Client—>MsiExec.exe /I{BF18C55F-791F-4C17-AB75-E397EE01C14B}
    Adobe WinSoft Linguistics Plugin—>MsiExec.exe /I{51DC4D9C-F729-48A7-9CE0-BC77529ECCA2}
    Adobe XMP Panels CS3—>MsiExec.exe /I{F0CF6455-EDD8-41C6-A96A-223874E660CC}
    Command and Conquer Generals — Zero Hour—>F:PROGRA~1C&CGEN~1UNWISE.EXE F:PROGRA~1C&CGEN~1INSTALL.LOG
    DAEMON Tools Toolbar—>C:Program FilesDAEMON Tools Toolbaruninst.exe
    ESET NOD32 Antivirus—>MsiExec.exe /I{3D057AD8-E03B-46D3-88C2-BAE2A8B6261A}
    Eset-NOD32: Fix Dasumo v3 until 2029—>C:Program FilesESETuninstall.exe
    Everest—>C:Program FilesEverestUninstall.exe
    Exact Audio Copy 0.99pb4—>C:Program FilesExact Audio Copyuninst.exe
    EXPERTool 6.4—>»C:Program FilesEXPERToolunins000.exe»
    FinePrint—>C:WINDOWSSystem32spoolDRIVERSW32X863fpinst6.exe /uninstall
    Foxit Reader—>C:Program FilesFoxit ReaderUninstall.exe
    Guitar Pro 5.2—>»C:Program FilesGuitar Pro 5unins000.exe»
    HijackThis 2.0.2—>»C:Program Filestrend microHijackThis.exe» /uninstall
    Java(TM) 6 Update 7—>MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
    K-Lite Codec Pack 2.76 Full—>»C:Program FilesK-Lite Codec Packunins000.exe»
    Macromedia Dreamweaver 8—>MsiExec.exe /I{0837A661-FEC3-48B3-876C-91E7D32048A9}
    Mail.Ru Агент 5.3 (сборка 2564, для всех пользователей)—>C:Program FilesMail.RuAgentmagentsetup.exe -uninstalllm
    Mail.Ru Спутник 2.0.1.54—>C:Program FilesMail.RuSputnikSputnikInstaller.exe -uninstall
    Matrix Челябинск 6.0.8—>C:Program FilesMatrixuninst.exe
    Matrix-Reload —>C:Program FilesMatrix-Reloaduninst.exe
    Microsoft .NET Framework 1.1 Russian Language Pack—>MsiExec.exe /X{2BB372D9-52B4-410A-BC1A-FEAB63181EEF}
    Microsoft .NET Framework 1.1—>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 1.1—>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 2.0 Service Pack 1—>MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
    Microsoft Office Access 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall ACCESS /dll OSETUP.DLL
    Microsoft Office Access 2007—>MsiExec.exe /X{90120000-0015-0000-0000-0000000FF1CE}
    Microsoft Office Access MUI (Russian) 2007—>MsiExec.exe /X{90120000-0015-0419-0000-0000000FF1CE}
    Microsoft Office Excel 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall EXCEL /dll OSETUP.DLL
    Microsoft Office Excel 2007—>MsiExec.exe /X{90120000-0016-0000-0000-0000000FF1CE}
    Microsoft Office Excel MUI (Russian) 2007—>MsiExec.exe /X{90120000-0016-0419-0000-0000000FF1CE}
    Microsoft Office Outlook 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall OUTLOOK /dll OSETUP.DLL
    Microsoft Office Outlook 2007—>MsiExec.exe /X{90120000-001A-0000-0000-0000000FF1CE}
    Microsoft Office Outlook MUI (Russian) 2007—>MsiExec.exe /X{90120000-001A-0419-0000-0000000FF1CE}
    Microsoft Office PowerPoint 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall POWERPOINT /dll OSETUP.DLL
    Microsoft Office PowerPoint 2007—>MsiExec.exe /X{90120000-0018-0000-0000-0000000FF1CE}
    Microsoft Office PowerPoint MUI (Russian) 2007—>MsiExec.exe /X{90120000-0018-0419-0000-0000000FF1CE}
    Microsoft Office Proof (English) 2007—>MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
    Microsoft Office Proof (German) 2007—>MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
    Microsoft Office Proof (Russian) 2007—>MsiExec.exe /X{90120000-001F-0419-0000-0000000FF1CE}
    Microsoft Office Proof (Ukrainian) 2007—>MsiExec.exe /X{90120000-001F-0422-0000-0000000FF1CE}
    Microsoft Office Proofing (Russian) 2007—>MsiExec.exe /X{90120000-002C-0419-0000-0000000FF1CE}
    Microsoft Office Shared MUI (Russian) 2007—>MsiExec.exe /X{90120000-006E-0419-0000-0000000FF1CE}
    Microsoft Office Visio MUI (Russian) 2007—>MsiExec.exe /X{90120000-0054-0419-0000-0000000FF1CE}
    Microsoft Office Visio Professional 2007—>MsiExec.exe /X{90120000-0051-0000-0000-0000000FF1CE}
    Microsoft Office Visio Профессиональный 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall VISPRO /dll OSETUP.DLL
    Microsoft Office Word 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall WORD /dll OSETUP.DLL
    Microsoft Office Word 2007—>MsiExec.exe /X{90120000-001B-0000-0000-0000000FF1CE}
    Microsoft Office Word MUI (Russian) 2007—>MsiExec.exe /X{90120000-001B-0419-0000-0000000FF1CE}
    Mozilla Firefox—>C:Program FilesMozilla FirefoxUninstall.exe
    MSXML 4.0 SP2 (KB941833)—>MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
    MSXML 4.0 SP2 (KB954430)—>MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
    Nero 7 Premium—>MsiExec.exe /I{11439F51-B8D2-4736-9CDF-8889FEBE1049}
    Nero Sipps—>C:WINDOWSUNNeroSipps.exe /UNINSTALL
    neroxml—>MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
    NVIDIA Drivers—>C:WINDOWSsystem32nvuninst.exe UninstallGUI
    NVIDIA PhysX v8.10.13—>MsiExec.exe /X{AC54E544-3E42-443C-A91D-A00A6974C592}
    Opera—>C:PROGRA~1Operauninstunwise.exe C:PROGRA~1Operauninstinstall.log
    Paint.NET v3.35—>rundll32.exe advpack.dll,LaunchINFSection PaintDN.inf,Uninstall
    Punto Switcher—>C:Program FilesPunto SwitcherUninstall.exe
    Realtek AC’97 Audio—>Alcrmv.exe -r -m
    Security Update for 2007 Microsoft Office System (KB951550)—>msiexec /package {90120000-0015-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
    Security Update for 2007 Microsoft Office System (KB951550)—>msiexec /package {90120000-0016-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
    Security Update for 2007 Microsoft Office System (KB951550)—>msiexec /package {90120000-0018-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
    Security Update for 2007 Microsoft Office System (KB951550)—>msiexec /package {90120000-001A-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
    Security Update for 2007 Microsoft Office System (KB951550)—>msiexec /package {90120000-001B-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
    Security Update for 2007 Microsoft Office System (KB951550)—>msiexec /package {90120000-0051-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
    Security Update for 2007 Microsoft Office System (KB951944)—>msiexec /package {90120000-0015-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
    Security Update for 2007 Microsoft Office System (KB951944)—>msiexec /package {90120000-0016-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
    Security Update for 2007 Microsoft Office System (KB951944)—>msiexec /package {90120000-0018-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
    Security Update for 2007 Microsoft Office System (KB951944)—>msiexec /package {90120000-001A-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
    Security Update for 2007 Microsoft Office System (KB951944)—>msiexec /package {90120000-001B-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
    Security Update for 2007 Microsoft Office System (KB951944)—>msiexec /package {90120000-0051-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
    Security Update for 2007 Microsoft Office System (KB958439)—>msiexec /package {90120000-0018-0000-0000-0000000FF1CE} /uninstall {6491B8AA-D11C-4648-A461-6234B31EB7E2}
    Security Update for 2007 Microsoft Office System (KB958439)—>msiexec /package {90120000-001B-0000-0000-0000000FF1CE} /uninstall {6491B8AA-D11C-4648-A461-6234B31EB7E2}
    Security Update for Microsoft Office Excel 2007 (KB958437)—>msiexec /package {90120000-0016-0000-0000-0000000FF1CE} /uninstall {648FC016-2D6B-4A16-8D87-404533642F4B}
    Security Update for Microsoft Office PowerPoint 2007 (KB951338)—>msiexec /package {90120000-0018-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
    Security Update for Microsoft Office system 2007 (KB954326)—>msiexec /package {90120000-0015-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
    Security Update for Microsoft Office system 2007 (KB954326)—>msiexec /package {90120000-0016-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
    Security Update for Microsoft Office system 2007 (KB954326)—>msiexec /package {90120000-0018-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
    Security Update for Microsoft Office system 2007 (KB954326)—>msiexec /package {90120000-001A-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
    Security Update for Microsoft Office system 2007 (KB954326)—>msiexec /package {90120000-001B-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
    Security Update for Microsoft Office system 2007 (KB954326)—>msiexec /package {90120000-0051-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
    Security Update for Microsoft Office system 2007 (KB956828)—>msiexec /package {90120000-0018-0000-0000-0000000FF1CE} /uninstall {885E081B-72BD-4E76-8E98-30B4BE468FAC}
    Security Update for Microsoft Office Visio 2007 (KB947590)—>msiexec /package {90120000-0051-0000-0000-0000000FF1CE} /uninstall {199018BD-578E-44BD-A28F-7F944931CABD}
    Security Update for Microsoft Office Word 2007 (KB956358)—>msiexec /package {90120000-001A-0000-0000-0000000FF1CE} /uninstall {4551666D-0FD6-4C69-8A81-1C6F2E64517C}
    Security Update for Microsoft Office Word 2007 (KB956358)—>msiexec /package {90120000-001B-0000-0000-0000000FF1CE} /uninstall {4551666D-0FD6-4C69-8A81-1C6F2E64517C}
    Solid Converter PDF—>C:Program FilesSolid Converter PDFUninstall.exe
    Spybot — Search & Destroy—>»C:Program FilesSpybot — Search & Destroyunins000.exe»
    Tech_rem—>C:WINDOWSiun505.exe C:Tech_remirunin.ini
    TuneUp Utilities 2009—>MsiExec.exe /I{55A29068-F2CE-456C-9148-C869879E2357}
    UltraISO Premium (only 32bit) v9.3.0.2612—>»C:Program FilesUltraISOunins000.exe»
    Update for Microsoft Office Outlook 2007 (KB952142)—>msiexec /package {90120000-001A-0000-0000-0000000FF1CE} /uninstall {4AD3A076-427C-491F-A5B7-7D1DE788A756}
    Update for Office 2007 (KB934391)—>msiexec /package {90120000-0018-0000-0000-0000000FF1CE} /uninstall {B3091818-7C56-4C45-BE7D-CA23027A5EA5}
    Update for Office 2007 (KB934391)—>msiexec /package {90120000-001B-0000-0000-0000000FF1CE} /uninstall {B3091818-7C56-4C45-BE7D-CA23027A5EA5}
    Update for Office 2007 (KB946691)—>msiexec /package {90120000-0015-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
    Update for Office 2007 (KB946691)—>msiexec /package {90120000-0016-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
    Update for Office 2007 (KB946691)—>msiexec /package {90120000-0018-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
    Update for Office 2007 (KB946691)—>msiexec /package {90120000-001A-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
    Update for Office 2007 (KB946691)—>msiexec /package {90120000-001B-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
    Update for Office 2007 (KB946691)—>msiexec /package {90120000-0051-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
    Update for Outlook 2007 Junk Email Filter (kb959141)—>msiexec /package {90120000-001A-0000-0000-0000000FF1CE} /uninstall {CC6191C2-B0CE-473C-AD77-61EA3497D796}
    uTorrent—>C:Program FilesuTorrentUninstall.exe
    VCRedistSetup—>MsiExec.exe /I{3921A67A-5AB1-4E48-9444-C71814CF3027}
    Vista Drive Icon—>rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFVistaDrv.inf,Uninstall
    Vuescan—>C:Program FilesVuescanUninstall.exe
    WinDjView 0.5—>»C:Program FilesWinDjViewunins000.exe»
    Архиватор WinRAR—>C:Program FilesWinRARuninstall.exe
    Данные ДубльГИС г.Челябинск 01.11.2008—>MsiExec.exe /X{AC06AEEC-C884-484A-9AC5-67E8243E25CC}
    ДубльГИС 3.0.4.1—>MsiExec.exe /X{FA671504-B676-42B9-A5E5-30399BD8F676}
    Обновление безопасности для Windows Internet Explorer 7 (KB938127-v2)—>»C:WINDOWSie7updatesKB938127-v2-IE7spuninstspuninst.exe»
    Обновление безопасности для Windows Internet Explorer 7 (KB958215)—>»C:WINDOWSie7updatesKB958215-IE7spuninstspuninst.exe»
    Обновление безопасности для Windows Internet Explorer 7 (KB960714)—>»C:WINDOWSie7updatesKB960714-IE7spuninstspuninst.exe»
    Обновление безопасности для Windows XP (KB938464)—>»C:WINDOWS$NtUninstallKB938464$spuninstspuninst.exe»
    Обновление безопасности для Windows XP (KB954211)—>»C:WINDOWS$NtUninstallKB954211$spuninstspuninst.exe»
    Обновление безопасности для Windows XP (KB954459)—>»C:WINDOWS$NtUninstallKB954459$spuninstspuninst.exe»
    Обновление безопасности для Windows XP (KB954600)—>»C:WINDOWS$NtUninstallKB954600$spuninstspuninst.exe»
    Обновление безопасности для Windows XP (KB955069)—>»C:WINDOWS$NtUninstallKB955069$spuninstspuninst.exe»
    Обновление безопасности для Windows XP (KB956391)—>»C:WINDOWS$NtUninstallKB956391$spuninstspuninst.exe»
    Обновление безопасности для Windows XP (KB956802)—>»C:WINDOWS$NtUninstallKB956802$spuninstspuninst.exe»
    Обновление безопасности для Windows XP (KB956803)—>»C:WINDOWS$NtUninstallKB956803$spuninstspuninst.exe»
    Обновление безопасности для Windows XP (KB956841)—>»C:WINDOWS$NtUninstallKB956841$spuninstspuninst.exe»
    Обновление безопасности для Windows XP (KB957097)—>»C:WINDOWS$NtUninstallKB957097$spuninstspuninst.exe»
    Обновление безопасности для Windows XP (KB958644)—>»C:WINDOWS$NtUninstallKB958644$spuninstspuninst.exe»
    Обновление безопасности для Windows XP (KB958687)—>»C:WINDOWS$NtUninstallKB958687$spuninstspuninst.exe»
    Обновление безопасности для проигрывателя Windows Media — (KB952069)—>»C:WINDOWS$NtUninstallKB952069_WM9$spuninstspuninst.exe»
    Обновление безопасности для проигрывателя Windows Media 11 — (KB954154)—>»C:WINDOWS$NtUninstallKB954154_WM11$spuninstspuninst.exe»
    Обновление для Windows XP (KB955839)—>»C:WINDOWS$NtUninstallKB955839$spuninstspuninst.exe»
    СОКРАТ Интернет 3.0 Полиглот—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{A1CE8874-17FC-4646-81F5-BA704330CD72}setup.exe»
    Сократ Персональный 4.1—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{9CD789E2-B7CE-11D5-B7E9-00A0C9449F99}setup.exe»

    ======Security center information======

    AV: ESET NOD32 Antivirus 3.0 (disabled)

    System event log

    Computer Name: MICROSOF-624729
    Event Code: 3260
    Message: Этот компьютер был успешно присоединен к workgroup ‘WORKGROUP’.

    Record Number: 5
    Source Name: Workstation
    Time Written: 20090205230236.000000+300
    Event Type: информация
    User:

    Computer Name: MICROSOF-624729
    Event Code: 6011
    Message: NetBIOS-имя и имя DNS-узла этого компьютера были изменены с «MACHINENAME» на «MICROSOF-624729».

    Record Number: 4
    Source Name: EventLog
    Time Written: 20090205230108.000000+300
    Event Type: информация
    User:

    Computer Name: MACHINENAME
    Event Code: 2
    Message: При проверке, что DeviceSerial0 является последовательным портом, обнаружена и будет использоваться прямая очередь.

    Record Number: 3
    Source Name: Serial
    Time Written: 20090206015141.000000+300
    Event Type: информация
    User:

    Computer Name: MACHINENAME
    Event Code: 6005
    Message: Запущена служба журнала событий.

    Record Number: 2
    Source Name: EventLog
    Time Written: 20090206015121.000000+300
    Event Type: информация
    User:

    Computer Name: MACHINENAME
    Event Code: 6009
    Message: Microsoft (R) Windows 2000 (R) 5.01. 2600 Service Pack 3 Uniprocessor Free.

    Record Number: 1
    Source Name: EventLog
    Time Written: 20090206015121.000000+300
    Event Type: информация
    User:

    Application event log

    Computer Name: MICROSOF-624729
    Event Code: 1000
    Message: Счетчики производительности для службы MSDTC (MSDTC) загружены успешно.
    Данные записи содержат новые значение индекса,
    назначенного этой службе.

    Record Number: 5
    Source Name: LoadPerf
    Time Written: 20090205230356.000000+300
    Event Type: информация
    User:

    Computer Name: MICROSOF-624729
    Event Code: 1000
    Message: Счетчики производительности для службы TermService (Службы терминалов) загружены успешно.
    Данные записи содержат новые значение индекса,
    назначенного этой службе.

    Record Number: 4
    Source Name: LoadPerf
    Time Written: 20090205230351.000000+300
    Event Type: информация
    User:

    Computer Name: MICROSOF-624729
    Event Code: 1000
    Message: Счетчики производительности для службы RemoteAccess (Маршрутизация и удаленный доступ) загружены успешно.
    Данные записи содержат новые значение индекса,
    назначенного этой службе.

    Record Number: 3
    Source Name: LoadPerf
    Time Written: 20090205230233.000000+300
    Event Type: информация
    User:

    Computer Name: MICROSOF-624729
    Event Code: 1000
    Message: Счетчики производительности для службы PSched (PSched) загружены успешно.
    Данные записи содержат новые значение индекса,
    назначенного этой службе.

    Record Number: 2
    Source Name: LoadPerf
    Time Written: 20090205230213.000000+300
    Event Type: информация
    User:

    Computer Name: MICROSOF-624729
    Event Code: 1000
    Message: Счетчики производительности для службы RSVP (QoS RSVP) загружены успешно.
    Данные записи содержат новые значение индекса,
    назначенного этой службе.

    Record Number: 1
    Source Name: LoadPerf
    Time Written: 20090205230117.000000+300
    Event Type: информация
    User:

    ======Environment variables======

    «ComSpec»=%SystemRoot%system32cmd.exe
    «Path»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem
    «windir»=%SystemRoot%
    «FP_NO_HOST_CHECK»=NO
    «OS»=Windows_NT
    «PROCESSOR_ARCHITECTURE»=x86
    «PROCESSOR_LEVEL»=15
    «PROCESSOR_IDENTIFIER»=x86 Family 15 Model 4 Stepping 9, GenuineIntel
    «PROCESSOR_REVISION»=0409
    «NUMBER_OF_PROCESSORS»=1
    «PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
    «TEMP»=%SystemRoot%TEMP
    «TMP»=%SystemRoot%TEMP

    EOF

  • Автор
    Сообщения
Просмотр 3 сообщений - с 1 по 3 (из 3 всего)

Добро пожаловать

На нашем сайте размещены инструкции и программы, которые помогут вам абсолютно бесплатно и самостоятельно удалить навязчивую рекламу, вирусы и трояны.

Поиск

Важные инструкции

Какой лучший антивирус ? Как выбрать антивирус ?
Убрать рекламу в браузере (Chrome, Firefox, Opera, Yandex)
Установлено в соответствии с корпоративным правилом (Удалить из Хрома)
Этот параметр включен администратором
вредоносные программы
Как удалить вредоносные программы, лучшие утилиты

СПАЙВАРЕ РУ

  • О Спайваре Ру
  • Контакты
  • Реклама на сайте
  • Политика конфиденциальности
  • Правила использования

Нужна помощь?

Задайте свой вопрос прямо сейчас кликнув по следующей ссылке Задать вопрос.

Или обратитесь на наш форум, где команда Spyware-ru поможет вам. Узнайте, как попросить о помощи здесь.

Ссылки

  • Инструкции
  • Скачать программы
  • Помощь в удалении вирусов
  • Как вылечить компьютер
Copyright © 2008 - 2024 Spyware-RU.com (en)