• Инструкции
    • Как использовать
      • Программы
    • Как удалить
      • Шпионское и рекламное ПО (adware и spyware)
      • Поддельное антиспайваре
      • Руткиты
      • Трояны
      • Кейлоггеры
  • Скачать программы
  • Вопросы и Ответы
  • Форумы

SPYWARE-RU.COM

Меню
  • Инструкции
    • Как использовать
      • Программы
    • Как удалить
      • Шпионское и рекламное ПО (adware и spyware)
      • Поддельное антиспайваре
      • Руткиты
      • Трояны
      • Кейлоггеры
  • Скачать программы
  • Вопросы и Ответы
  • Форумы
В начало
Adguard
 

exest

  • Профиль
  • Начатые темы
  • Созданные ответы
  • Engagements
  • Избранное

Созданные ответы форума

Просмотр 4 сообщений - с 1 по 4 (из 4 всего)
  • Автор
    Сообщения
  • 29 сентября, 2010 в 10:18 дп в ответ на: hale.exe што за зверь такой? #31613
    exest
    Participant
    • Темы:1
    • Сообщений:5
    • ☆

    Єто собственно файл рендера для 3d max.

    File name: vrayspawner60.exe
    Submission date: 2010-09-29 10:11:24 (UTC)
    Current status: finished
    Result: 0/ 43 (0.0%)

    AhnLab-V3 2010.09.29.01 2010.09.29 —
    AntiVir 7.10.12.78 2010.09.29 —
    Antiy-AVL 2.0.3.7 2010.09.29 —
    Authentium 5.2.0.5 2010.09.29 —
    Avast 4.8.1351.0 2010.09.29 —
    Avast5 5.0.594.0 2010.09.28 —
    AVG 9.0.0.851 2010.09.29 —
    BitDefender 7.2 2010.09.29 —
    CAT-QuickHeal 11.00 2010.09.29 —
    ClamAV 0.96.2.0-git 2010.09.29 —
    Comodo 6235 2010.09.29 —
    DrWeb 5.0.2.03300 2010.09.29 —
    Emsisoft 5.0.0.50 2010.09.29 —
    eSafe 7.0.17.0 2010.09.28 —
    eTrust-Vet 36.1.7881 2010.09.28 —
    F-Prot 4.6.2.117 2010.09.28 —
    F-Secure 9.0.15370.0 2010.09.29 —
    Fortinet 4.1.143.0 2010.09.29 —
    GData 21 2010.09.29 —
    Ikarus T3.1.1.90.0 2010.09.29 —
    Jiangmin 13.0.900 2010.09.29 —
    K7AntiVirus 9.63.2628 2010.09.28 —
    Kaspersky 7.0.0.125 2010.09.29 —
    McAfee 5.400.0.1158 2010.09.29 —
    McAfee-GW-Edition 2010.1C 2010.09.29 —
    Microsoft 1.6201 2010.09.29 —
    NOD32 5488 2010.09.29 —
    Norman 6.06.06 2010.09.28 —
    nProtect 2010-09-29.01 2010.09.29 —
    Panda 10.0.2.7 2010.09.28 —
    PCTools 7.0.3.5 2010.09.28 —
    Prevx 3.0 2010.09.29 —
    Rising 22.67.01.01 2010.09.29 —
    Sophos 4.58.0 2010.09.29 —
    Sunbelt 6943 2010.09.29 —
    SUPERAntiSpyware 4.40.0.1006 2010.09.29 —
    Symantec 20101.2.0.161 2010.09.29 —
    TheHacker 6.7.0.1.039 2010.09.29 —
    TrendMicro 9.120.0.1004 2010.09.29 —
    TrendMicro-HouseCall 9.120.0.1004 2010.09.29 —
    VBA32 3.12.14.1 2010.09.27 —
    ViRobot 2010.8.31.4017 2010.09.29 —
    VirusBuster 12.66.4.0 2010.09.28 —

    27 сентября, 2010 в 3:40 пп в ответ на: hale.exe што за зверь такой? #31612
    exest
    Participant
    • Темы:1
    • Сообщений:5
    • ☆

    А вот эти файли G-data отправляет на карантин при обнаружении hale.exe

    crc32.exe
    flick.exe
    icsm.dll
    wac32.dll
    wac64.dll
    wiv32.dll
    wiv64.dll
    wla32.dll
    wla64.dll
    wslmt.dll

    27 сентября, 2010 в 3:35 пп в ответ на: hale.exe што за зверь такой? #31611
    exest
    Participant
    • Темы:1
    • Сообщений:5
    • ☆

    info

    info.txt logfile of random’s system information tool 1.08 2010-09-27 12:23:11

    ======Uninstall list======

    —>MsiExec /X{F9835182-794B-4F24-902A-E2CA9D43380F}
    —>MsiExec.exe /I{9A346205-EA92-4406-B1AB-50379DA3F057}
    3DMark Vantage—>»C:Program Files (x86)InstallShield Installation Information{C40C3C3D-97CF-44B5-836C-766E374464B3}setup.exe» -runfromtemp -l0x0009 -removeonly
    3ds max 7 Additional Maps and Materials—>MsiExec.exe /I{5EB4C5CA-962C-486B-81FF-A41B7B8FFBEC}
    3ds max 7 Architectural Materials—>MsiExec.exe /I{54199443-342B-4162-B10D-CAA1C211E7A6}
    3ds max 7 Reference Files—>MsiExec.exe /I{E5F6E1A6-44AA-4CF7-883E-4F7FA7C4BCA5}
    3ds max 7—>MsiExec.exe /I{F92AB933-9FE7-4335-92BD-D1C3BA27613C}
    3dsmax ancillary install—>MsiExec.exe /I{7C8B5E63-821A-4DFB-BDFA-19854D88EC5C}
    7-Zip 9.05 alpha—>»C:Program Files (x86)7-ZipUninstall.exe»
    AAA Logo 2009 Business Edition 3.0—>»C:Program Files (x86)AAALOGO2009unins000.exe»
    ABBYY FineReader 9.0 Professional Edition—>MsiExec.exe /I{F9000000-0001-0000-0000-074957833700}
    ACDSee Pro 2—>MsiExec.exe /I{4AAC95F4-A30E-4EE5-A086-6F79581D0D70}
    ACDSee Pro 3—>MsiExec.exe /I{1B280FAF-AE10-4E31-A41A-DB3917D651DC}
    Adobe After Effects CS4 Presets—>MsiExec.exe /I{44E240EC-2224-4078-A88B-2CEE0D3016EF}
    Adobe After Effects CS4 Third Party Content—>MsiExec.exe /I{67A9747A-E1F5-4E9A-81CC-12B5D5B81B6E}
    Adobe After Effects CS4—>C:Program Files (x86)Common FilesAdobeInstallers3dcb365ab9e01871fb8c6f27b0ea079Setup.exe —uninstall=1
    Adobe After Effects CS4—>MsiExec.exe /I{45EC816C-0771-4C14-AE6D-72D1B578F4C8}
    Adobe AIR—>C:Program Files (x86)Common FilesAdobe AIRVersions1.0ResourcesAdobe AIR Updater.exe -arp:uninstall
    Adobe AIR—>MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
    Adobe Anchor Service CS4—>MsiExec.exe /I{1618734A-3957-4ADD-8199-F973763109A8}
    Adobe Bridge CS4—>MsiExec.exe /I{83877DB1-8B77-45BC-AB43-2BAC22E093E0}
    Adobe CMaps CS4—>MsiExec.exe /I{94D398EB-D2FD-4FD1-B8C4-592635E8A191}
    Adobe Color EU Extra Settings CS4—>MsiExec.exe /I{5570C7F0-43D0-4916-8A9E-AEDD52FA86F4}
    Adobe Color JA Extra Settings CS4—>MsiExec.exe /I{0D6013AB-A0C7-41DC-973C-E93129C9A29F}
    Adobe Color NA Recommended Settings CS4—>MsiExec.exe /I{00ADFB20-AE75-46F4-AD2C-F48B15AC3100}
    Adobe Color Video Profiles AE CS4—>MsiExec.exe /I{B15381DD-FF97-4FCD-A881-ED4DB0975500}
    Adobe Community Help—>msiexec /qb /x {0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
    Adobe Community Help—>MsiExec.exe /I{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
    Adobe CSI CS4—>MsiExec.exe /I{0F723FC1-7606-4867-866C-CE80AD292DAF}
    Adobe Default Language CS4—>MsiExec.exe /I{C52E3EC1-048C-45E1-8D53-10B0C6509683}
    Adobe Device Central CS4—>MsiExec.exe /I{67F0E67A-8E93-4C2C-B29D-47C48262738A}
    Adobe Dreamweaver CS4—>C:Program Files (x86)Common FilesAdobeInstallersacce07fd2c8fe7f9e3f26243e626578Setup.exe —uninstall=1
    Adobe Dreamweaver CS4—>MsiExec.exe /I{30C8AA56-4088-426F-91D1-0EDFD3A25678}
    Adobe Drive CS4—>MsiExec.exe /I{16E16F01-2E2D-4248-A42F-76261C147B6C}
    Adobe Dynamiclink Support—>MsiExec.exe /I{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}
    Adobe ExtendScript Toolkit CS4—>MsiExec.exe /I{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}
    Adobe Extension Manager CS4—>MsiExec.exe /I{054EFA56-2AC1-48F4-A883-0AB89874B972}
    Adobe Flash Player 10 ActiveX—>MsiExec.exe /X{6E9EF98E-259E-416D-B5F8-0ABDB99942CE}
    Adobe Flash Player 10 Plugin—>C:WindowsSysWOW64MacromedFlashFlashUtil10k_Plugin.exe -maintain plugin
    Adobe Flash Professional CS5—>C:Program Files (x86)Common FilesAdobeOOBEPDAppcorePDApp.exe —appletID=»DWA_UI» —appletVersion=»1.0″ —mode=»Uninstall» —mediaSignature=»{CFC9F871-7C40-40B6-BE4A-B98A5B309716}»
    Adobe Fonts All—>MsiExec.exe /I{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}
    Adobe Illustrator CS4—>C:Program Files (x86)Common FilesAdobeInstallers2a31ae7a5c43ff52d8577782dd34e04Setup.exe —uninstall=1
    Adobe Illustrator CS4—>MsiExec.exe /I{87532CAB-7932-4F84-8937-823337622807}
    Adobe Linguistics CS4—>MsiExec.exe /I{931AB7EA-3656-4BB7-864D-022B09E3DD67}
    Adobe Media Encoder CS4 Additional Exporter—>MsiExec.exe /I{BE9CEAAA-F069-4331-BF2F-8D350F6504F4}
    Adobe Media Encoder CS4 Exporter—>MsiExec.exe /I{561968FD-56A1-49FD-9ED0-F55482C7C5BC}
    Adobe Media Encoder CS4 Importer—>MsiExec.exe /I{8186FF34-D389-4B7E-9A2F-C197585BCFBD}
    Adobe Media Encoder CS4—>MsiExec.exe /I{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}
    Adobe Media Player—>msiexec /qb /x {39F6E2B4-CFE8-C30A-66E8-489651F0F34C}
    Adobe Media Player—>MsiExec.exe /I{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}
    Adobe MotionPicture Color Files CS4—>MsiExec.exe /I{B05DE7B7-0B40-4411-BD4B-222CAE2D8F15}
    Adobe Output Module—>MsiExec.exe /I{BB4E33EC-8181-4685-96F7-8554293DEC6A}
    Adobe PDF Library Files CS4—>MsiExec.exe /I{F93C84A6-0DC6-42AF-89FA-776F7C377353}
    Adobe Photoshop CS5—>C:Program Files (x86)Common FilesAdobeOOBEPDAppcorePDApp.exe —appletID=»DWA_UI» —appletVersion=»1.0″ —mode=»Uninstall» —mediaSignature=»{15FEDA5F-141C-4127-8D7E-B962D1742728}»
    Adobe Reader 9.1 — Russian—>MsiExec.exe /I{AC76BA86-7AD7-1049-7B44-A91000000001}
    Adobe Search for Help—>MsiExec.exe /I{F0E64E2E-3A60-40D8-A55D-92F6831875DA}
    Adobe Service Manager Extension—>MsiExec.exe /I{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}
    Adobe Setup—>MsiExec.exe /I{14AFE241-FC6E-4FDB-BCA0-7AD6F4974171}
    Adobe Setup—>MsiExec.exe /I{411F3ABA-2AB5-4799-AA19-6ADF0A8F7424}
    Adobe Setup—>MsiExec.exe /I{8CE08C3C-8FF4-45D9-925E-4F3CE2D7FA7D}
    Adobe Type Support CS4—>MsiExec.exe /I{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}
    Adobe Update Manager CS4—>MsiExec.exe /I{05308C4E-7285-4066-BAE3-6B50DA6ED755}
    Adobe WinSoft Linguistics Plugin—>MsiExec.exe /I{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}
    Adobe XMP Panels CS4—>MsiExec.exe /I{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}
    AdobeColorCommonSetCMYK—>MsiExec.exe /I{68243FF8-83CA-466B-B2B8-9F99DA5479C4}
    AdobeColorCommonSetRGB—>MsiExec.exe /I{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}
    AIMP2—>C:Program Files (x86)AIMP2Uninstall.exe
    Aliens vs Predator—>»E:GamesAliens vs Predatorunins000.exe»
    AMD Fusion Media Explorer—>MsiExec.exe /X{2D943F95-2C76-4951-9AEF-0977AF5DE11A}
    AMD OverDrive—>MsiExec.exe /X{20AEA7B1-6155-44A2-B58E-430F2C9F4ABD}
    Apple Application Support—>MsiExec.exe /I{3FA365DF-2D68-45ED-8F83-8C8A33E65143}
    Apple Software Update—>MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
    ArtIcons Pro—>»C:Program Files (x86)ArtIcons Prouninstall.exe»
    ArtMoney SE v7.31—>»C:Program Files (x86)ArtMoneyUninstallunins000.exe»
    ATI Catalyst Registration—>MsiExec.exe /X{11083C7A-D0D6-4DA4-8C3A-74B8389EC07B}
    Autodesk 3ds Max 2010 32-bit—>MsiExec.exe /I{317AC0C7-FEBF-0409-87A3-4FC70D0ED900}
    Autodesk DWF Viewer 7—>MsiExec.exe /I{9A346205-EA92-4406-B1AB-50379DA3F057}
    Autodesk FBX Plugin 2009.4 — 3ds Max 2010—>C:Program Files (x86)AutodeskFBXFBXPlugins2009.43ds Max 2010Uninstall.exe
    Autodesk Material Library 2011 Base Image library—>MsiExec.exe /I{CD1E078C-A6B9-47DA-B035-6365C85C7832}
    Autodesk Material Library 2011—>MsiExec.exe /I{9DEABCB6-B759-4D52-92F8-51B34A2B4D40}
    Backburner—>MsiExec.exe /I{3D347E6D-5A03-4342-B5BA-6A771885F379}
    Battlefield: Bad Company™ 2—>MsiExec.exe /X{3AC8457C-0385-4BEA-A959-E095F05D6D67}
    BearPaw 1200CU Plus v1.0—>DriverUNINST.EXE
    Bink and Smacker—>C:PROGRA~2RADVideoUNWISE.EXE C:PROGRA~2RADVideoINSTALL.LOG
    BitTorrent—>C:Program Files (x86)BitTorrentuninst.exe
    boujou 4.1.1—>»C:Program Files (x86)2d3boujou 4.1.1unins000.exe»
    Button Beats Virtual Piano 4—>C:Program Files (x86)Button Beats Virtual Piano 4uninstall.exe
    Call Of Duty 2 — Modern Warfare 2—>»E:GamesCall Of Duty 2 — Modern Warfare 2unins000.exe»
    Catalyst Control Center — Branding—>MsiExec.exe /I{87323561-58BA-4D5B-BADA-A791B69D1705}
    CCleaner—>»C:Program Files (x86)CCleaneruninst.exe»
    Colin McRae. DiRT 2—>»C:UsersAMDAppDataLocalR.G. MechanicsColin McRae. DiRT 2Uninstallunins000.exe»
    ColorMania 2.6—>»C:Program Files (x86)ColorManiaunins000.exe»
    Connect—>MsiExec.exe /I{B29AD377-CC12-490A-A480-1452337C618D}
    Counter-Strike 1.6—>RunDll32 C:PROGRA~2COMMON~1INSTAL~1PROFES~1RunTime90Intel32Ctor.dll,LaunchSetup «C:Program Files (x86)InstallShield Installation Information{13B792AA-C078-43A4-8A3A-8B12D629940D}Setup.exe» -l0x19
    CyberLink PowerDVD 8—>»C:Program Files (x86)InstallShield Installation Information{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}setup.exe» /z-uninstall
    Download Master version 5.7.3.1221—>»C:Program Files (x86)Download Masterunins000.exe»
    DVDFab Platinum—>C:Program Files (x86)DVDFab 5Uninstall.exe
    EDIUS 5(SetupManager)—>»C:Program Files (x86)InstallShield Installation Information{FA8B6532-78E9-490B-B97D-32379E16810E}setup.exe» -runfromtemp -l0x0009 -removeonly
    eMusic — 50 Free MP3 offer—>»C:Program Files (x86)WinampeMusicUninst-eMusic-promotion.exe»
    EVEREST Ultimate Edition v5.02—>»C:Program Files (x86)LavalysEVEREST Ultimate Editionunins000.exe»
    FARO LS 1.1.406.58—>MsiExec.exe /I{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}
    FBX Plugin 2006.08 for Max 9.0—>C:Program Files (x86)AutodeskFBXFbxPlugins2006.08Max90Uninstall.exe
    Feed Viewer for Windows SideShow—>MsiExec.exe /X{E4DA04B6-3EC4-4DFD-A14E-44959EF36D5B}
    FeedDemon—>»C:Program Files (x86)FeedDemonunins000.exe»
    ffdshow [rev 3285] [2010-02-25]—>»C:Program Files (x86)K-Lite Codec Packffdshowunins000.exe»
    FileZilla Client 3.3.3—>C:Program Files (x86)FileZilla FTP Clientuninstall.exe
    Format Convert 2.0—>»C:Program Files (x86)Format Convert 2.0unins000.exe»
    Fortop Album Creator 1.9—>»C:Program Files (x86)Fortop Digital SoftwareFortop Album Creatorunins000.exe»
    Fraps—>»E:EXESTfrapsuninstall.exe»
    Futuremark SystemInfo—>»C:Program Files (x86)InstallShield Installation Information{BEE64C14-BEF1-4610-8A68-A16EAA47B882}setup.exe» -runfromtemp -l0x0009 -removeonly
    G Data TotalCare 2011—>MsiExec.exe /I{31B59248-4591-4ED7-BBE9-588C60F09FAC}
    Gamestudio A7—>»C:Program Files (x86)GStudio7un_gstudio705_14314.exe»
    Garena 2010—>C:Program Files (x86)Garenauninst.exe
    Garena 2010—>C:Program Files (x86)Garenauninst.exe
    Genuine Fractals 6.0 Professional Edition—>»C:Program Files (x86)InstallShield Installation Information{FCADA4FF-142C-42A8-B73C-0A54A7F83345}setup.exe» -runfromtemp -l0x0009 -uninst -removeonly
    GOM Player—>»C:Program Files (x86)GRETECHGomPlayerUninstall.exe»
    Google Books Download—>»C:Program Files (x86)PDFsvgGoogle Books DownloadUninstall.exe»
    Google Chrome—>»C:Program Files (x86)GoogleChromeApplication6.0.472.63Installersetup.exe» —uninstall —system-level
    Google Earth—>MsiExec.exe /X{4286E640-B5FB-11DF-AC4B-005056C00008}
    Google Update Helper—>MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
    Grand Theft Auto IV—>»E:GamesGrand Theft Auto IVunins000.exe»
    Guardant driver—>»C:Windowssystem32rundll32.exe» grddrv32.dll,GD_UninstallDriver 1
    HASP Device Drivers—>C:Windowssystem32UNWISE.EXE C:Windowssystem32HDD32.LOG
    HDD Regenerator—>MsiExec.exe /X{2445981B-A23B-4A0E-AD15-3D391BDAEC3E}
    Hotfix for Microsoft Visual C# 2008 Express Edition with SP1 — ENU (KB945282)—>C:WindowsSysWOW64msiexec.exe /package {A4418082-E601-3954-805B-D56A2B50EC8B} /uninstall /qb+ REBOOTPROMPT=»»
    Hotfix for Microsoft Visual C# 2008 Express Edition with SP1 — ENU (KB946040)—>C:WindowsSysWOW64msiexec.exe /package {A4418082-E601-3954-805B-D56A2B50EC8B} /uninstall /qb+ REBOOTPROMPT=»»
    Hotfix for Microsoft Visual C# 2008 Express Edition with SP1 — ENU (KB946308)—>C:WindowsSysWOW64msiexec.exe /package {A4418082-E601-3954-805B-D56A2B50EC8B} /uninstall /qb+ REBOOTPROMPT=»»
    Hotfix for Microsoft Visual C# 2008 Express Edition with SP1 — ENU (KB947540)—>C:WindowsSysWOW64msiexec.exe /package {A4418082-E601-3954-805B-D56A2B50EC8B} /uninstall /qb+ REBOOTPROMPT=»»
    Hotfix for Microsoft Visual C# 2008 Express Edition with SP1 — ENU (KB947789)—>C:WindowsSysWOW64msiexec.exe /package {A4418082-E601-3954-805B-D56A2B50EC8B} /uninstall /qb+ REBOOTPROMPT=»»
    Hotfix for Microsoft Visual Studio 2008 Remote Debugger Light (x64) — ENU (KB944899)—>C:WindowsSysWOW64msiexec.exe /package {90A80D89-A0E4-33C1-B13D-B93CB3496867} /uninstall /qb+ REBOOTPROMPT=»»
    ICQ Toolbar—>C:Program Files (x86)ICQ6ToolbarICQUnToolbar.exe
    ICQ6.5—>»C:Program Files (x86)InstallShield Installation Information{60DE4033-9503-48D1-A483-7846BD217CA9}setup.exe» -runfromtemp -l0x0009 -removeonly
    Internet Explorer Proxy Monitor 1.0—>»C:Program Files (x86)Internet Explorer Proxy Monitorunins000.exe»
    iZotope Ozone 4—>»C:Program Files (x86)iZotopeOzone 4unins000.exe»
    iZotope Vinyl—>»C:Program Files (x86)iZotopeVinylunins000.exe»
    JAF Setup—>»C:Program Files (x86)ODEONJAFuninstall.exe»
    Java(TM) 6 Update 21—>MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216021FF}
    K-Lite Codec Pack 5.1.0 (Full)—>»C:Program Files (x86)K-Lite Codec Packunins000.exe»
    kuler—>MsiExec.exe /I{098727E1-775A-4450-B573-3F441F1CA243}
    L4D Update 1.0.1.4 (3887)—>C:Program Files (x86)Steamsteamappscommonleft 4 deadUninstall.exe
    Left 4 Dead Standalone Patch—>C:Program Files (x86)Steamsteamappscommonleft 4 deaduninstall.exe
    Lightsmark 2008—>MsiExec.exe /I{9418C162-91BF-47DC-B302-60EC1A6749E0}
    Lizardtech DjVu Control—>RunDll32 C:PROGRA~2COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program Files (x86)InstallShield Installation Information{105CFC7C-6992-11D5-BD9D-000102C10FD8}Setup.exe» -l0x9
    LOST PLANET 2 Benchmark Version—>MsiExec.exe /X{FB2D4820-A19F-4D3B-AAB6-5A16CE9040B6}
    Mafia II (With Shitty Crack)—>»E:GamesMafia II (With Shitty Crack)Uninstallunins000.exe»
    Magic Bullet PhotoLooks—>C:Windowsunvise32.exe C:Program Files (x86)AdobeAdobe Photoshop CS3Plug-insmbphotolooks.log
    Malwarebytes’ Anti-Malware—>»C:Program Files (x86)Malwarebytes’ Anti-Malwareunins000.exe»
    Maya 2010 Documentation (en_US)—>MsiExec.exe /I{3CAA4788-85E1-4bd6-890E-09B4BE3CD3D1}
    Metro 2033—>»E:GamesMetro 2033unins000.exe»
    Microsoft Games for Windows — LIVE Redistributable—>MsiExec.exe /X{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}
    Microsoft Games for Windows — LIVE—>MsiExec.exe /X{A1C962E2-2426-49C6-A38B-9A07E40D607C}
    Microsoft Office — профессиональный выпуск версии 2003—>MsiExec.exe /I{90110419-6000-11D3-8CFE-0150048383C9}
    Microsoft SOAP Toolkit 3.0—>MsiExec.exe /I{BCB4C18A-ACA6-4383-8688-E19933A705DD}
    Microsoft SQL Server 2008 Management Objects—>MsiExec.exe /I{F5E87B12-3C27-452F-8E78-21D42164FD83}
    Microsoft SQL Server Compact 3.5 SP1 Design Tools English—>MsiExec.exe /X{0C19D563-5F25-4621-BF10-01F741BD283F}
    Microsoft SQL Server Compact 3.5 SP1 English—>MsiExec.exe /I{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}
    Microsoft Visual C# 2008 Express Edition with SP1 — ENU—>C:Program Files (x86)Microsoft Visual Studio 9.0Microsoft Visual C# 2008 Express Edition with SP1 — ENUsetup.exe
    Microsoft Visual C# 2008 Express Edition with SP1 — ENU—>MsiExec.exe /X{A4418082-E601-3954-805B-D56A2B50EC8B}
    Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
    Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
    Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
    Microsoft Visual C++ 2008 Redistributable — x86 9.0.21022—>MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
    Microsoft Visual C++ 2008 Redistributable — x86 9.0.30411—>MsiExec.exe /X{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}
    Microsoft Visual C++ 2008 Redistributable — x86 9.0.30729.17—>MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
    Microsoft Visual C++ 2008 Redistributable — x86 9.0.30729.4148—>MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
    Microsoft Visual C++ 2008 Redistributable — x86 9.0.30729—>MsiExec.exe /X{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}
    Microsoft Visual C++ 2008 Redistributable — x86 9.0.30729—>MsiExec.exe /X{402ED4A1-8F5B-387A-8688-997ABF58B8F2}
    Microsoft Visual Studio 2008 Remote Debugger Light (x64) — ENU Service Pack 1 (KB945140)—>C:WindowsSysWOW64msiexec.exe /package {90A80D89-A0E4-33C1-B13D-B93CB3496867} /uninstall /qb+ REBOOTPROMPT=»»
    Microsoft XNA Framework Redistributable 3.0—>MsiExec.exe /I{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}
    Microsoft XNA Framework Redistributable 3.1—>MsiExec.exe /I{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}
    Microsoft XNA Game Studio 3.1 (ARP entry)—>MsiExec.exe /I{E1D78366-91DA-4AD0-B417-28155743CC22}
    Microsoft XNA Game Studio 3.1 (Platformer)—>MsiExec.exe /I{007BECB0-17DD-4230-9D2F-185287262B14}
    Microsoft XNA Game Studio 3.1 (Redists)—>MsiExec.exe /I{0DC16794-7E69-4534-82FA-9DD0500FF338}
    Microsoft XNA Game Studio 3.1 (Shared Components)—>MsiExec.exe /I{AF9BDE67-11A5-449A-B9F0-BE572A093DDB}
    Microsoft XNA Game Studio 3.1 (VCSExpress)—>MsiExec.exe /I{3BA37E38-B53D-4520-B8DA-1DD62AD3A74E}
    Microsoft XNA Game Studio 3.1 (XnaLiveProxy)—>MsiExec.exe /I{DFB81F19-ED3A-4DA5-AFE4-1B999E2A8DC5}
    Microsoft XNA Game Studio 3.1 Documentation—>MsiExec.exe /I{7FD30AE7-281D-455F-AF9F-0C6C5E334EAD}
    Microsoft XNA Game Studio 3.1—>C:Program Files (x86)Microsoft XNAXNA Game Studiov3.1SetupBootstrapper.exe en-US
    Microsoft XNA Game Studio Platform Tools—>MsiExec.exe /I{BED4CEEC-863F-4AB3-BA23-541764E2D2CE}
    Microsoft_VC80_ATL_x86—>MsiExec.exe /I{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}
    Microsoft_VC80_CRT_x86—>MsiExec.exe /I{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}
    Microsoft_VC80_MFC_x86—>MsiExec.exe /I{D1A19B02-817E-4296-A45B-07853FD74D57}
    Microsoft_VC80_MFCLOC_x86—>MsiExec.exe /I{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}
    Microsoft_VC90_ATL_x86—>MsiExec.exe /I{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}
    Microsoft_VC90_CRT_x86—>MsiExec.exe /I{08D2E121-7F6A-43EB-97FD-629B44903403}
    Microsoft_VC90_MFC_x86—>MsiExec.exe /I{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}
    Mozilla Firefox (3.6.8)—>C:Program Files (x86)Mozilla Firefox 3.6 Beta 2uninstallhelper.exe
    MSVC80_x86_v2—>MsiExec.exe /I{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}
    MSVC80_x86—>MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27}
    MSXML 4.0 SP2 (KB973688)—>MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
    Natural Mod—>C:Program Files (x86)Natural Moduninstall.exe
    Neat Image v6 Demo (with plug-in)—>»C:Program Files (x86)Neat Imageunins000.exe»
    NewBlue 3D Explosions for Windows—>C:Program Files (x86)NewBlue3D Explosions for WindowsUninstalEdius.exe
    NewBlue Art Effects for Windows—>C:Program Files (x86)NewBlueArt Effects for WindowsUninstalEdius.exe
    NewBlue Film Effects for Windows—>C:Program Files (x86)NewBlueFilm Effects for WindowsUninstalEdius.exe
    NewBlue Video Essentials for Windows—>C:Program Files (x86)NewBlueVideo Essentials for WindowsUninstalEdius.exe
    Nexus 10.3—>»C:Program Files (x86)Winstepunins000.exe»
    Nexus Radio—>MsiExec.exe /X{E550F15F-1024-4FB6-8A76-5E9F77368B53}
    NFSpeed-Shift—>»E:GamesNFSpeed-Shiftunins000.exe»
    Notepad++—>C:Program Files (x86)Notepad++uninstall.exe
    NVIDIA PhysX—>MsiExec.exe /X{F9835182-794B-4F24-902A-E2CA9D43380F}
    Offline Course Player—>RunDll32 C:PROGRA~2COMMON~1INSTAL~1PROFES~1RunTime701Intel32Ctor.dll,LaunchSetup «C:Program Files (x86)InstallShield Installation Information{3BC1AB78-2D98-4906-84B5-4230B5420DCC}Setup.exe» -l0x9
    Ontrack EasyRecovery Professional—>C:PROGRA~2COMMON~1INSTAL~1Driver7INTEL3~1IDriver.exe /M{268723B7-A994-4286-9F85-B974D5CAFC7B} /l1033
    OpenAL—>»C:Program Files (x86)OpenALoalinst.exe» /U
    OpenOffice.org 3.1—>MsiExec.exe /I{B1D25CBD-A1E2-4807-B556-20C14DB9FEF9}
    Opera 10.00—>MsiExec.exe /X{2085F05D-24C5-4E27-B7B4-A51DE890FFC9}
    Opera 10.10—>MsiExec.exe /X{690BE098-6D0D-493D-B079-BD7E8F81A141}
    Opera 10.50—>MsiExec.exe /X{022F6097-A053-4B1B-BE50-3AADE4116B92}
    Opera 10.51—>MsiExec.exe /X{05ADEEC8-BD58-43D9-A9E3-1F53B0DA117A}
    Opera 10.53—>MsiExec.exe /X{1A0D2EFC-C4FC-446A-8BC3-57A54CE5EADD}
    Opera 10.61—>MsiExec.exe /X{70858C67-8761-4444-895A-0A8B2E9E144E}
    Opera 10.62—>MsiExec.exe /X{18E65799-76BD-46EF-9E53-972FE5A40736}
    Opera 9.64—>MsiExec.exe /X{E1BBBAC5-2857-4155-82A6-54492CE88620}
    Pantera 2.0—>c:Program FilesPanterauninstal.exe
    Passware Kit Enterprise 7.9—>C:Program Files (x86)Passwareun-kit_ent.exe
    PDF Settings CS4—>MsiExec.exe /I{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}
    PDF Settings CS5—>MsiExec.exe /I{A78FE97A-C0C8-49CE-89D0-EDD524A17392}
    PhotoFrame Pro 3.1 Demo—>RunDll32 C:PROGRA~2COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program Files (x86)InstallShield Installation Information{5F073685-ADDB-4D5A-98E9-0F795989A57F}setup.exe» -l0x9 -uninst -removeonly
    Photoshop Camera Raw—>MsiExec.exe /I{CC75AB5C-2110-4A7F-AF52-708680D22FE8}
    PhotoTune 3.0.1—>»C:Program Files (x86)InstallShield Installation Information{12DC97BF-4D60-4C97-9A10-762F8D710695}setup.exe» -runfromtemp -l0x0009 -uninst -removeonly
    PIMOne 5.35—>»C:Program Files (x86)PIMOneunins000.exe»
    Pixel Bender Toolkit—>MsiExec.exe /I{43509E18-076E-40FE-AF38-CA5ED400A5A9}
    PixiePack Codec Pack—>MsiExec.exe /I{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}
    pLan OpenVPN Edition—>C:PROGRA~2pLanUNWISE.EXE C:PROGRA~2pLanINSTALL.LOG
    proDAD Vitascene 1.0—>»C:Program Files (x86)proDADVitascene-1.0uninstall.exe» uninstall spcp PATHVERSION 1.0 MAINNAME Vitascene
    PunkBuster Services—>C:Windowssystem32pbsvc_bc2.exe -u
    QuickTime—>MsiExec.exe /I{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}
    Radiotracker—>MsiExec.exe /I{CC1F6639-8DF7-43AC-B321-82D94C9D475A}
    RapidShare Plus 4 1.00—>C:Program Files (x86)Gladiator16RapidShare Plus 4Uninstall.exe
    RAR Recovery Toolbox 1.1—>»C:Program Files (x86)RAR Recovery Toolboxunins000.exe»
    Realtek 8136 8168 8169 Ethernet Driver—>C:Program Files (x86)InstallShield Installation Information{8833FFB6-5B0C-4764-81AA-06DFEED9A476}setup.exe -runfromtemp -removeonly
    Realtek High Definition Audio Driver—>RunDll32 C:PROGRA~2COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program Files (x86)InstallShield Installation Information{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}Setup.exe» -removeonly
    Risen—>»C:Program Files (x86)InstallShield Installation Information{155F4A0E-76ED-45A2-91FB-FF2A2133C31A}setup.exe» -runfromtemp -l0x0019 -removeonly
    RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition—>»C:Program Files (x86)RivaTuner v2.24 MSI Master Overclocking Arena 2009 editionuninstall.exe»
    RocketDock 1.3.5—>»C:Program Files (x86)RocketDockunins000.exe»
    Rockstar Games Social Club—>»C:Program Files (x86)InstallShield Installation Information{08B3869E-D282-424C-9AFC-870E04A4BA14}setup.exe» -runfromtemp -l0x0009 -removeonly
    Safari—>MsiExec.exe /I{D6E4E5D6-7693-4BB4-95BA-21F38FAFEE90}
    Save Flash 4.2—>C:Program Files (x86)Save Flashuninst.exe
    Screensaver (vodopad)—>C:Windowsvodopad.scr /U
    Side 9 Screensaver—>C:Windowssystem32Side 9 Screensaver.scr /u
    Skype Toolbars—>MsiExec.exe /I{981029E0-7FC9-4CF3-AB39-6F133621921A}
    Skype™ 4.2—>MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
    SmartPhotoRefresh—>UNWISE.EXE install.log
    SmartSound Quicktracks Plugin—>C:PROGRA~2COMMON~1INSTAL~1Driver9INTEL3~1IDriver.exe /M{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}
    SnagIt 9—>MsiExec.exe /I{2FADA80A-5D89-4CC8-9ED7-445527754A83}
    Sothink SWF Decompiler—>»C:Program Files (x86)SourceTecSothink SWF Decompilerunins000.exe»
    SpeedFan (remove only)—>»C:Program Files (x86)SpeedFanuninstall.exe»
    Splash Lite—>MsiExec.exe /I{465E6124-3DD3-4176-B560-0D1E3E09370B}
    Splash PRO—>MsiExec.exe /I{337E9F8D-2062-4D93-A593-6697D80E0096}
    SQL Server System CLR Types—>MsiExec.exe /I{342D4AD7-EC4C-4EC8-AEA6-E70F5905A490}
    Steam—>MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
    Suite Shared Configuration CS4—>MsiExec.exe /I{842B4B72-9E8F-4962-B3C1-1C422A5C4434}
    The Bat! Professional v4.2.36.4—>MsiExec.exe /I{80C22308-DC4F-4F1E-BE7C-FB903B0AFCF8}
    The Lord of the Rings FREE Trial —>MsiExec.exe /X{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}
    tools-freebsd—>MsiExec.exe /X{003BFBBD-6C67-419E-A24D-0DCAFC3A5249}
    tools-linux—>MsiExec.exe /X{D102611A-6466-4101-A51D-51069303AC65}
    tools-netware—>MsiExec.exe /X{197597A7-AD33-4898-9D8E-73066818B464}
    tools-solaris—>MsiExec.exe /X{AB1C87CB-1807-4CF0-B4C2-CEE14C18CDB4}
    tools-windows—>MsiExec.exe /X{FFD9383C-01D5-4897-A954-43AF599AED30}
    tools-winPre

    27 сентября, 2010 в 3:34 пп в ответ на: hale.exe што за зверь такой? #31610
    exest
    Participant
    • Темы:1
    • Сообщений:5
    • ☆

    log

    Logfile of random’s system information tool 1.08 (written by random/random)
    Run by AMD at 2010-09-27 18:30:39
    Microsoft Windows 7 Максимальная Service Pack 3
    System drive C: has 11 GB (16%) free of 71 GB
    Total RAM: 4094 MB (64% free)

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 18:31:43, on 27.09.2010
    Platform: Windows 7 SP3 (WinNT 6.00.3504)
    MSIE: Internet Explorer v8.00 (8.00.7600.16385)
    Boot mode: Normal

    Running processes:
    C:WindowsSystem32hale.exe
    C:Program Files (x86)RocketDockRocketDock.exe
    C:Program Files (x86)WinstepNexus.exe
    C:Program Files (x86)WIBUKEYServerWkSvMgr.exe
    C:Program Files (x86)WebMoney Agentwmagent.exe
    C:Program Files (x86)Malwarebytes’ Anti-Malwarembamgui.exe
    C:Program Files (x86)Common FilesJavaJava Updatejusched.exe
    C:Program Files (x86)G DataTotalCareAVKTrayAVKTray.exe
    C:Program Files (x86)G DataTotalCareFirewallGDFirewallTray.exe
    C:UsersAMDDesktopRSIT.exe
    C:Program Files (x86)AIMP2AIMP2.exe
    C:Program Files (x86)GoogleChromeApplicationchrome.exe
    C:Program Files (x86)GoogleChromeApplicationchrome.exe
    C:Program Files (x86)GoogleChromeApplicationchrome.exe
    C:Program Files (x86)GoogleChromeApplicationchrome.exe
    C:Program Files (x86)GoogleChromeApplicationchrome.exe
    C:Program Files (x86)GoogleChromeApplicationchrome.exe
    C:Program Files (x86)GoogleChromeApplicationchrome.exe
    C:Program Files (x86)GoogleChromeApplicationchrome.exe
    C:Program Files (x86)GoogleChromeApplicationchrome.exe
    C:Program Files (x86)GoogleChromeApplicationchrome.exe
    C:Program Files (x86)GoogleChromeApplicationchrome.exe
    C:Program Files (x86)trend microAMD.exe

    R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = Preserve
    R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.APEHA.ru
    R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
    R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
    R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
    R3 — URLSearchHook: (no name) — — (no file)
    R3 — URLSearchHook: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program Files (x86)ICQ6ToolbarICQToolBar.dll
    R3 — URLSearchHook: ToolbarURLSearchHook Class — {CA3EB689-8F09-4026-AA10-B9534C691CE0} — C:Program Files (x86)WebMoney Advisortbhelper.dll
    O1 — Hosts: ::1 localhost
    O2 — BHO: G Data WebFilter Class — {0124123D-61B4-456f-AF86-78C53A0790C5} — C:Program Files (x86)G DataTotalCareWebFilterAvkWebIE.dll
    O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — C:PROGRA~2DOWNLO~1dmiehlp.dll
    O2 — BHO: SkypeIEPluginBHO — {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} — C:Program Files (x86)SkypeToolbarsInternet Explorerskypeieplugin.dll
    O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program Files (x86)GoogleGoogleToolbarNotifier5.2.4204.1700swg.dll
    O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program Files (x86)Javajre6binjp2ssv.dll
    O2 — BHO: TBSB03374 — {FCBCCB87-9224-4B8D-B117-F56D924BEB18} — C:Program Files (x86)WebMoney Advisortbcore3.dll
    O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program Files (x86)YandexYandexBarIEyndbar.dll
    O3 — Toolbar: (no name) — {32099AAC-C132-4136-9E9A-4E364A424E17} — (no file)
    O3 — Toolbar: SnagIt — {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} — C:Program Files (x86)TechSmithSnagIt 9SnagItIEAddin.dll
    O3 — Toolbar: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program Files (x86)ICQ6ToolbarICQToolBar.dll
    O3 — Toolbar: Trellian Toolbar — {71AAABE5-1F0F-11d7-BD6F-004854603DCE} — C:Program Files (x86)TRELLIANToolBartoolbar.dll
    O3 — Toolbar: WebMoney Advisor — {3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840} — C:Program Files (x86)WebMoney Advisortbcore3.dll
    O3 — Toolbar: &Save Flash — {4064EA35-578D-4073-A834-C96D82CBCF40} — C:Program Files (x86)Save FlashSaveFlash.dll
    O3 — Toolbar: G Data WebFilter — {0124123D-61B4-456f-AF86-78C53A0790C5} — C:Program Files (x86)G DataTotalCareWebFilterAvkWebIE.dll
    O4 — HKLM..Run: [wmagent.exe] «C:Program Files (x86)WebMoney Agentwmagent.exe»
    O4 — HKLM..Run: [Malwarebytes’ Anti-Malware] «C:Program Files (x86)Malwarebytes’ Anti-Malwarembamgui.exe» /starttray
    O4 — HKLM..Run: [StartCCC] «C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLIStart.exe» MSRun
    O4 — HKLM..Run: [ATICustomerCare] «C:Program Files (x86)ATIATICustomerCareATICustomerCare.exe»
    O4 — HKLM..Run: [SunJavaUpdateSched] «C:Program Files (x86)Common FilesJavaJava Updatejusched.exe»
    O4 — HKLM..Run: [G Data AntiVirus Tray Application] C:Program Files (x86)G DataTotalCareAVKTrayAVKTray.exe
    O4 — HKLM..Run: [GDFirewallTray] C:Program Files (x86)G DataTotalCareFirewallGDFirewallTray.exe
    O4 — HKCU..Run: [RocketDock] «C:Program Files (x86)RocketDockRocketDock.exe»
    O4 — HKCU..Run: [NeXuS] C:Program Files (x86)WinstepNexus.exe autostart
    O4 — HKCU..Run: [DAEMON Tools Lite] «C:Program Files (x86)DAEMON Tools LiteDTLite.exe» -autorun
    O4 — HKUSS-1-5-19..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /autoRun (User ‘LOCAL SERVICE’)
    O4 — HKUSS-1-5-19..RunOnce: [mctadmin] C:WindowsSystem32mctadmin.exe (User ‘LOCAL SERVICE’)
    O4 — HKUSS-1-5-20..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /autoRun (User ‘NETWORK SERVICE’)
    O4 — HKUSS-1-5-20..RunOnce: [mctadmin] C:WindowsSystem32mctadmin.exe (User ‘NETWORK SERVICE’)
    O4 — Startup: vrayspawner60.exe
    O4 — Global Startup: Network Server.lnk = C:Program Files (x86)WIBUKEYServerWkSvMgr.exe
    O8 — Extra context menu item: Sothink SWF Catcher — C:Program Files (x86)Common FilesSourceTecSWF CatcherInternetExplorer.htm
    O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — C:Program Files (x86)Download Masterdmieall.htm
    O8 — Extra context menu item: Закачать при помощи Download Master — C:Program Files (x86)Download Masterdmie.htm
    O8 — Extra context menu item: Передать на удаленную закачку DM — C:Program Files (x86)Download Masterremdown.htm
    O9 — Extra button: WebMoney Advisor — {3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840} — C:Program Files (x86)WebMoney Advisortbcore3.dll
    O9 — Extra ‘Tools’ menuitem: WebMoney Advisor — {3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840} — C:Program Files (x86)WebMoney Advisortbcore3.dll
    O9 — Extra button: Skype add-on for Internet Explorer — {898EA8C8-E7FF-479B-8935-AEC46303B9E5} — C:Program Files (x86)SkypeToolbarsInternet Explorerskypeieplugin.dll
    O9 — Extra ‘Tools’ menuitem: Skype add-on for Internet Explorer — {898EA8C8-E7FF-479B-8935-AEC46303B9E5} — C:Program Files (x86)SkypeToolbarsInternet Explorerskypeieplugin.dll
    O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program Files (x86)Download Masterdmaster.exe
    O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program Files (x86)Download Masterdmaster.exe
    O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~2MICROS~1OFFICE11REFIEBAR.DLL
    O9 — Extra button: Sothink SWF Catcher — {E19ADC6E-3909-43E4-9A89-B7B676377EE3} — C:Program Files (x86)Common FilesSourceTecSWF CatcherInternetExplorer.htm
    O9 — Extra ‘Tools’ menuitem: Sothink SWF Catcher — {E19ADC6E-3909-43E4-9A89-B7B676377EE3} — C:Program Files (x86)Common FilesSourceTecSWF CatcherInternetExplorer.htm
    O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program Files (x86)ICQ6.5ICQ.exe
    O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program Files (x86)ICQ6.5ICQ.exe
    O10 — Unknown file in Winsock LSP: c:program files (x86)vmwarevmware workstationvsocklib.dll
    O10 — Unknown file in Winsock LSP: c:program files (x86)vmwarevmware workstationvsocklib.dll
    O15 — Trusted Zone: http://*.capitaller.ru
    O15 — Trusted Zone: http://linktrader.cyberspacehq.com
    O15 — Trusted Zone: http://*.enum.ru
    O15 — Trusted Zone: http://*.exchanger.ru
    O15 — Trusted Zone: http://*.indx.ru
    O15 — Trusted Zone: http://*.megastock.com
    O15 — Trusted Zone: http://*.megastock.ru
    O15 — Trusted Zone: http://*.oplata.info
    O15 — Trusted Zone: http://*.paymer.com
    O15 — Trusted Zone: http://*.publicant.ru
    O15 — Trusted Zone: http://*.shareholder.ru
    O15 — Trusted Zone: http://*.softactivation.com
    O15 — Trusted Zone: http://*.telepat.ru
    O15 — Trusted Zone: http://*.webmoney.ru
    O15 — Trusted Zone: http://*.wmkeeper.com
    O15 — Trusted Zone: http://*.wmtransfer.com
    O17 — HKLMSystemCCSServicesTcpip..{CAA3E2AD-4433-416A-B8AA-D31BCBBF7C3D}: NameServer = 178.210.128.3 178.210.128.5
    O18 — Protocol: skype-ie-addon-data — {91774881-D725-4E58-B298-07617B9B86A8} — C:Program Files (x86)SkypeToolbarsInternet Explorerskypeieplugin.dll
    O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~2COMMON~1SkypeSKYPE4~1.DLL
    O20 — AppInit_DLLs:
    O22 — SharedTaskScheduler: Windows DreamScene — {E31004D1-A431-41B8-826F-E902F9D95C81} — C:WindowsSysWow64DreamScene.dll
    O23 — Service: @%SystemRoot%system32Alg.exe,-112 (ALG) — Unknown owner — C:WindowsSystem32alg.exe (file missing)
    O23 — Service: AMD External Events Utility — Unknown owner — C:Windowssystem32atiesrxx.exe (file missing)
    O23 — Service: AODService — Unknown owner — C:Program Files (x86)AMDOverDriveAODAssist.exe
    O23 — Service: Apple Mobile Device — Apple Inc. — C:Program Files (x86)Common FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe
    O23 — Service: AST Service (astcc) — Nalpeiron Ltd. — C:WindowsSYSTEM32astsrv.exe
    O23 — Service: Atihedlsode — Unknown owner — (no file)
    O23 — Service: Autodesk Licensing Service — Unknown owner — C:Program Files (x86)Common FilesAutodesk SharedServiceAdskScSrv.exe
    O23 — Service: G Data AntiVirus Proxy (AVKProxy) — G Data Software AG — C:Program Files (x86)Common FilesG DATAAVKProxyAVKProxy.exe
    O23 — Service: G Data Scheduler (AVKService) — G Data Software AG — C:Program Files (x86)G DataTotalCareAVKAVKService.exe
    O23 — Service: G Data Монитор файловой системы (AVKWCtl) — Unknown owner — C:Program Files (x86)G DataTotalCareAVKAVKWCtlX64.exe
    O23 — Service: Bonjour Service — Apple Inc. — C:Program Files (x86)BonjourmDNSResponder.exe
    O23 — Service: @%SystemRoot%system32efssvc.dll,-100 (EFS) — Unknown owner — C:WindowsSystem32lsass.exe (file missing)
    O23 — Service: @%systemroot%system32fxsresm.dll,-118 (Fax) — Unknown owner — C:Windowssystem32fxssvc.exe (file missing)
    O23 — Service: FLEXnet Licensing Service — Acresso Software Inc. — C:Program Files (x86)Common FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
    O23 — Service: FLEXnet Licensing Service 64 — Acresso Software Inc. — C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService64.exe
    O23 — Service: G Data Backup Service (GDBackupSvc) — G Data Software AG — C:Program Files (x86)G DataTotalCareAVKBackupAVKBackupService.exe
    O23 — Service: G Data Personal Firewall (GDFwSvc) — G Data Software AG — C:Program Files (x86)G DataTotalCareFirewallGDFwSvcx64.exe
    O23 — Service: G Data Scanner (GDScan) — G Data Software AG — C:Program Files (x86)Common FilesG DATAGDScanGDScan.exe
    O23 — Service: G Data Tuner Service (GDTunerSvc) — G Data Software AG — C:Program Files (x86)G DataTotalCareAVKTunerAVKTunerService.exe
    O23 — Service: Google Update Service (gupdate) (gupdate) — Google Inc. — C:Program Files (x86)GoogleUpdateGoogleUpdate.exe
    O23 — Service: Google Software Updater (gusvc) — Google — C:Program Files (x86)GoogleCommonGoogle UpdaterGoogleUpdaterService.exe
    O23 — Service: ICQ Service — Unknown owner — C:Program Files (x86)ICQ6ToolbarICQ Service.exe
    O23 — Service: iPod Service — Apple Inc. — C:Program FilesiPodbiniPodService.exe
    O23 — Service: @keyiso.dll,-100 (KeyIso) — Unknown owner — C:Windowssystem32lsass.exe (file missing)
    O23 — Service: MBAMService — Malwarebytes Corporation — C:Program Files (x86)Malwarebytes’ Anti-Malwarembamservice.exe
    O23 — Service: mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit (mi-raysat_3dsmax2010_32) — Unknown owner — C:Program Files (x86)Autodesk3ds Max 2010mentalraysatelliteraysat_3dsmax2010_32server.exe
    O23 — Service: @comres.dll,-2797 (MSDTC) — Unknown owner — C:WindowsSystem32msdtc.exe (file missing)
    O23 — Service: @%SystemRoot%System32netlogon.dll,-102 (Netlogon) — Unknown owner — C:Windowssystem32lsass.exe (file missing)
    O23 — Service: PnkBstrA — Unknown owner — C:Windowssystem32PnkBstrA.exe
    O23 — Service: PnkBstrB — Unknown owner — C:Windowssystem32PnkBstrB.exe
    O23 — Service: @%systemroot%system32psbase.dll,-300 (ProtectedStorage) — Unknown owner — C:Windowssystem32lsass.exe (file missing)
    O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — D:CyberLink PowerDVD Ultra v8.0.2021.50+Keys-HeartBugSetup 8.0.1730RichVideoRichVideo.exe (file missing)
    O23 — Service: @%systemroot%system32Locator.exe,-2 (RpcLocator) — Unknown owner — C:Windowssystem32locator.exe (file missing)
    O23 — Service: @%SystemRoot%system32samsrv.dll,-1 (SamSs) — Unknown owner — C:Windowssystem32lsass.exe (file missing)
    O23 — Service: @%SystemRoot%system32snmptrap.exe,-3 (SNMPTRAP) — Unknown owner — C:WindowsSystem32snmptrap.exe (file missing)
    O23 — Service: @%systemroot%system32spoolsv.exe,-1 (Spooler) — Unknown owner — C:WindowsSystem32spoolsv.exe (file missing)
    O23 — Service: @%SystemRoot%system32sppsvc.exe,-101 (sppsvc) — Unknown owner — C:Windowssystem32sppsvc.exe (file missing)
    O23 — Service: Steam Client Service — Valve Corporation — C:Program Files (x86)Common FilesSteamSteamService.exe
    O23 — Service: SwitchBoard — Adobe Systems Incorporated — C:Program Files (x86)Common FilesAdobeSwitchBoardSwitchBoard.exe
    O23 — Service: VMware Agent Service (ufad-ws60) — VMware, Inc. — C:Program Files (x86)VMwareVMware Workstationvmware-ufad.exe
    O23 — Service: @%SystemRoot%system32ui0detect.exe,-101 (UI0Detect) — Unknown owner — C:Windowssystem32UI0Detect.exe (file missing)
    O23 — Service: Ulead Burning Helper (UleadBurningHelper) — Unknown owner — C:Program Files (x86)Common FilesUlead SystemsDVDULCDRSvr.exe (file missing)
    O23 — Service: @%SystemRoot%system32vaultsvc.dll,-1003 (VaultSvc) — Unknown owner — C:Windowssystem32lsass.exe (file missing)
    O23 — Service: @%SystemRoot%system32vds.exe,-100 (vds) — Unknown owner — C:WindowsSystem32vds.exe (file missing)
    O23 — Service: VMware Authorization Service (VMAuthdService) — VMware, Inc. — C:Program Files (x86)VMwareVMware Workstationvmware-authd.exe
    O23 — Service: VMware DHCP Service (VMnetDHCP) — VMware, Inc. — C:Windowssystem32vmnetdhcp.exe
    O23 — Service: VMware USB Arbitration Service (VMUSBArbService) — VMware, Inc. — C:Program Files (x86)Common FilesVMwareUSBvmware-usbarbitrator.exe
    O23 — Service: VMware NAT Service — VMware, Inc. — C:Windowssystem32vmnat.exe
    O23 — Service: @%systemroot%system32vssvc.exe,-102 (VSS) — Unknown owner — C:Windowssystem32vssvc.exe (file missing)
    O23 — Service: @%SystemRoot%system32WatWatUX.exe,-601 (WatAdminSvc) — Unknown owner — C:Windowssystem32WatWatAdminSvc.exe (file missing)
    O23 — Service: @%systemroot%system32wbengine.exe,-104 (wbengine) — Unknown owner — C:Windowssystem32wbengine.exe (file missing)
    O23 — Service: Winstep Xtreme Service — Unknown owner — C:Program.exe (file missing)
    O23 — Service: WIBU-KEY Server (WkSvW32.exe) — WIBU-SYSTEMS AG — C:PROGRAM FILES (X86)WIBUKEYSERVERWkSvW32.exe
    O23 — Service: @%Systemroot%system32wbemwmiapsrv.exe,-110 (wmiApSrv) — Unknown owner — C:Windowssystem32wbemWmiApSrv.exe (file missing)
    O23 — Service: @%PROGRAMFILES%Windows Media Playerwmpnetwk.exe,-101 (WMPNetworkSvc) — Unknown owner — C:Program Files (x86)Windows Media Playerwmpnetwk.exe (file missing)
    O23 — Service: XAMPP Service (XAMPP) — Unknown owner — C:Serverxamppservice.exe (file missing)
    O23 — Service: Служба G Data Тюнер — G Data Software AG — C:Program Files (x86)G DataTotalCareAVKTunerAVKTunerService.exe

    —
    End of file — 16822 bytes

    ======Scheduled tasks folder======

    C:WindowstasksAd-Aware Update (Weekly).job
    C:WindowstasksGoogle Software Updater.job
    C:WindowstasksGoogleUpdateTaskMachineCore.job
    C:WindowstasksGoogleUpdateTaskMachineUA.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{0124123D-61B4-456f-AF86-78C53A0790C5}]
    G Data WebFilter — C:Program Files (x86)G DataTotalCareWebFilterAvkWebIE.dll [2010-09-02 658504]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
    IE 4.x-6.x BHO for Download Master — C:PROGRA~2DOWNLO~1dmiehlp.dll [2010-07-27 165184]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
    Skype add-on for Internet Explorer — C:Program Files (x86)SkypeToolbarsInternet Explorerskypeieplugin.dll [2010-02-08 804136]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
    Google Toolbar Notifier BHO — C:Program Files (x86)GoogleGoogleToolbarNotifier5.2.4204.1700swg.dll [2010-05-18 761840]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
    Java(tm) Plug-In 2 SSV Helper — C:Program Files (x86)Javajre6binjp2ssv.dll [2010-09-22 41760]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
    WebMoney Advisor — BHO Helper — C:Program Files (x86)WebMoney Advisortbcore3.dll [2010-02-24 2559608]

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
    {91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program Files (x86)YandexYandexBarIEyndbar.dll [2009-12-24 8729864]
    {32099AAC-C132-4136-9E9A-4E364A424E17}
    {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} — SnagIt — C:Program Files (x86)TechSmithSnagIt 9SnagItIEAddin.dll [2008-09-16 161096]
    {855F3B16-6D32-4fe6-8A56-BBB695989046} — ICQToolBar — C:Program Files (x86)ICQ6ToolbarICQToolBar.dll [2009-10-27 1014520]
    {71AAABE5-1F0F-11d7-BD6F-004854603DCE} — Trellian Toolbar — C:Program Files (x86)TRELLIANToolBartoolbar.dll [2003-10-10 507904]
    {3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840} — WebMoney Advisor — C:Program Files (x86)WebMoney Advisortbcore3.dll [2010-02-24 2559608]
    {4064EA35-578D-4073-A834-C96D82CBCF40} — &Save Flash — C:Program Files (x86)Save FlashSaveFlash.dll [2010-06-04 1179648]
    {0124123D-61B4-456f-AF86-78C53A0790C5} — G Data WebFilter — C:Program Files (x86)G DataTotalCareWebFilterAvkWebIE.dll [2010-09-02 658504]

    [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
    «wmagent.exe»=C:Program Files (x86)WebMoney Agentwmagent.exe [2009-10-19 210400]
    «Malwarebytes’ Anti-Malware»=C:Program Files (x86)Malwarebytes’ Anti-Malwarembamgui.exe [2010-04-29 437584]
    «StartCCC»=C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLIStart.exe [2010-02-03 98304]
    «ATICustomerCare»=C:Program Files (x86)ATIATICustomerCareATICustomerCare.exe [2010-03-04 311296]
    «SunJavaUpdateSched»=C:Program Files (x86)Common FilesJavaJava Updatejusched.exe [2010-05-14 248552]
    «G Data AntiVirus Tray Application»=C:Program Files (x86)G DataTotalCareAVKTrayAVKTray.exe [2010-09-02 994888]
    «GDFirewallTray»=C:Program Files (x86)G DataTotalCareFirewallGDFirewallTray.exe [2010-09-02 1537096]

    [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
    «RocketDock»=C:Program Files (x86)RocketDockRocketDock.exe [2007-09-02 495616]
    «AdobeBridge»= []
    «NeXuS»=C:Program Files (x86)WinstepNexus.exe [2010-03-27 8892468]
    «DAEMON Tools Lite»=C:Program Files (x86)DAEMON Tools LiteDTLite.exe [2010-04-01 357696]

    C:ProgramDataMicrosoftWindowsStart MenuProgramsStartup
    Network Server.lnk — C:Program Files (x86)WIBUKEYServerWkSvMgr.exe

    C:UsersAMDAppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
    vrayspawner60.exe

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
    «AppInit_DLLs»=» «

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
    WebCheck — {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionexplorerSharedTaskScheduler]
    Windows DreamScene — {E31004D1-A431-41B8-826F-E902F9D95C81} — C:WindowsSysWow64DreamScene.dll [2009-05-12 275360]

    [HKEY_LOCAL_MACHINEsystemcurrentcontrolsetcontrolsecurityproviders]
    «SecurityProviders»=credssp.dll

    [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkAFD]

    [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
    «ConsentPromptBehaviorAdmin»=0
    «EnableLUA»=0
    «EnableUIADesktopToggle»=0
    «PromptOnSecureDesktop»=0
    «dontdisplaylastusername»=0
    «legalnoticecaption»=
    «legalnoticetext»=
    «shutdownwithoutlogon»=1
    «undockwithoutlogon»=1

    [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
    «NoDriveTypeAutoRun»=145

    [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
    «NoActiveDesktop»=1
    «ForceActiveDesktopOn»=0
    «NoActiveDesktopChanges»=0

    [HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]

    [HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]

    ======File associations======

    .js — edit — C:WindowsSystem32Notepad.exe %1
    .js — open — «C:Program Files (x86)AdobeAdobe Dreamweaver CS4Dreamweaver.exe»,»%1″
    .scr — open — C:Windowssystem32notepad.exe «%1»
    .scr — install —
    .scr — config —

    ======List of files/folders created in the last 1 months======

    2010-09-27 12:23:01 —-D—- C:Program Files (x86)trend micro
    2010-09-27 12:23:00 —-D—- C:rsit
    2010-09-24 14:13:09 —-D—- C:UsersAMDAppDataRoamingXWindows Dock
    2010-09-22 22:11:23 —-D—- C:WindowsSun
    2010-09-22 20:39:15 —-D—- C:ProgramDataSun
    2010-09-22 20:39:13 —-D—- C:Program Files (x86)Common FilesJava
    2010-09-22 20:38:40 —-A—- C:WindowsSysWOW64javaws.exe
    2010-09-22 20:38:40 —-A—- C:WindowsSysWOW64javaw.exe
    2010-09-22 20:38:40 —-A—- C:WindowsSysWOW64java.exe
    2010-09-22 20:38:40 —-A—- C:WindowsSysWOW64deployJava1.dll
    2010-09-22 20:37:51 —-D—- C:Program Files (x86)Java
    2010-09-22 17:31:16 —-D—- C:ProgramDataG DATA
    2010-09-22 17:31:16 —-D—- C:Program Files (x86)G Data
    2010-09-22 17:31:16 —-D—- C:Program Files (x86)Common FilesG DATA
    2010-09-22 12:33:19 —-D—- C:Windows1C4551A64743409391E41477CD655043.TMP
    2010-09-16 19:32:30 —-D—- C:ProgramDataDivinity 2
    2010-09-15 18:30:58 —-A—- C:WindowsSysWOW64iertutil.dll
    2010-09-15 16:43:13 —-D—- C:Program Files (x86)Lightsmark 2008
    2010-09-11 21:03:31 —-A—- C:plugin.ini
    2010-09-11 20:56:12 —-D—- C:Program Files (x86)Chaos Group
    2010-09-11 20:53:19 —-A—- C:WindowsSysWOW64WkExt32.dll
    2010-09-11 20:53:19 —-A—- C:WindowsSysWOW64WibuXpm4J32.dll
    2010-09-11 20:53:19 —-A—- C:WindowsSysWOW64wibuKJni.dll
    2010-09-11 20:53:09 —-A—- C:WindowsSysWOW64WkWin32.dll
    2010-09-11 20:53:04 —-D—- C:Program Files (x86)WIBU-SYSTEMS
    2010-09-11 20:53:04 —-D—- C:Program Files (x86)WIBUKEY
    2010-09-05 13:21:04 —-D—- C:UsersAMDAppDataRoamingYoutube Downloader HD
    2010-09-05 13:20:40 —-D—- C:Program Files (x86)Youtube Downloader HD
    2010-09-04 15:16:31 —-A—- C:WindowsSysWOW64tsccvid.dll
    2010-09-04 15:15:25 —-D—- C:WindowsSysWOW64QuickTime
    2010-09-02 14:05:45 —-D—- C:UsersAMDAppDataRoamingF-Secure
    2010-09-02 12:05:13 —-A—- C:WindowsSysWOW64driversfsbts.sys
    2010-09-02 12:02:28 —-D—- C:Program Files (x86)F-Secure
    2010-09-02 12:01:53 —-D—- C:ProgramDatafssg
    2010-09-02 12:00:26 —-D—- C:ProgramDataf-secure

    ======List of files/folders modified in the last 1 months======

    2010-09-27 18:31:39 —-D—- C:WindowsTemp
    2010-09-27 18:31:13 —-D—- C:UsersAMDAppDataRoamingAIMP
    2010-09-27 18:29:41 —-D—- C:ProgramDataVMware
    2010-09-27 17:34:37 —-D—- C:Program Files (x86)Garena
    2010-09-27 17:34:14 —-A—- C:vraylog.txt
    2010-09-27 12:34:28 —-D—- C:Program Files (x86)Mozilla Firefox 3.6 Beta 2
    2010-09-27 12:23:01 —-RD—- C:Program Files (x86)
    2010-09-27 11:32:01 —-SHD—- C:System Volume Information
    2010-09-25 16:18:34 —-D—- C:UsersAMDAppDataRoaminguTorrent
    2010-09-24 20:48:37 —-D—- C:WindowsSystem32
    2010-09-24 20:48:37 —-D—- C:Windowsinf
    2010-09-24 13:46:47 —-AD—- C:Windows
    2010-09-24 13:45:48 —-D—- C:WindowsTasks
    2010-09-24 13:45:46 —-D—- C:Windowsregistration
    2010-09-24 13:45:46 —-D—- C:Program Files (x86)Total Commander
    2010-09-24 13:45:46 —-D—- C:Program Files (x86)RocketDock
    2010-09-23 23:16:28 —-D—- C:UsersAMDAppDataRoamingSkype
    2010-09-23 17:41:41 —-D—- C:UsersAMDAppDataRoamingskypePM
    2010-09-23 16:52:54 —-HD—- C:ProgramData
    2010-09-23 16:39:27 —-SHD—- C:WindowsInstaller
    2010-09-23 16:38:07 —-D—- C:WindowsSysWOW64
    2010-09-23 16:31:44 —-D—- C:Program Files (x86)campaper
    2010-09-23 11:56:18 —-D—- C:Windowswinsxs
    2010-09-22 20:39:13 —-D—- C:Program Files (x86)Common Files
    2010-09-22 17:29:11 —-D—- C:WindowsPrefetch
    2010-09-22 12:29:50 —-RSD—- C:Windowsassembly
    2010-09-22 12:22:34 —-HD—- C:Program Files (x86)InstallShield Installation Information
    2010-09-22 06:16:15 —-D—- C:Program Files (x86)Google
    2010-09-21 20:40:50 —-D—- C:Windowsdebug
    2010-09-21 19:44:19 —-D—- C:UsersAMDAppDataRoamingVMware
    2010-09-20 22:42:00 —-D—- C:UsersAMDAppDataRoamingFileZilla
    2010-09-20 20:23:55 —-D—- C:UsersAMDAppDataRoamingThe Bat!
    2010-09-16 15:27:27 —-A—- C:WindowsSysWOW64PnkBstrB.exe
    2010-09-15 15:56:31 —-D—- C:Program Files (x86)3dsmax7
    2010-09-12 21:26:57 —-D—- C:Program Files (x86)Opera 10 Preview
    2010-09-12 01:37:40 —-D—- C:Program Files (x86)Common FilesChaosGroup
    2010-09-12 01:37:02 —-RD—- C:Program Files
    2010-09-11 20:05:02 —-A—- C:Windowswinamp.ini
    2010-09-08 00:40:52 —-D—- C:UsersAMDAppDataRoamingWebMoney
    2010-09-07 19:11:01 —-AD—- C:ProgramDataTEMP
    2010-09-04 20:16:20 —-D—- C:Downloads
    2010-09-04 19:57:42 —-D—- C:Program Files (x86)Common FilesAutodesk Shared
    2010-09-02 17:21:20 —-A—- C:WindowsSysWOW64PerfStringBackup.INI
    2010-09-02 12:05:13 —-D—- C:WindowsSysWOW64drivers
    2010-09-02 11:55:50 —-D—- C:ProgramDataAvira
    2010-08-31 12:49:17 —-D—- C:My Recorded Files
    2010-08-30 11:47:20 —-D—- C:Program Files (x86)Nexus Radio

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R0 GDBehave;GDBehave; C:Windowssystem32driversGDBehave.sys []
    R0 pciide;pciide; C:Windowssystem32DRIVERSpciide.sys []
    R0 rdyboost;ReadyBoost; C:WindowsSystem32driversrdyboost.sys []
    R0 speedfan;speedfan; C:WindowsSysWOW64speedfan.sys [2007-02-07 14104]
    R0 sptd;sptd; C:WindowsSystem32Driverssptd.sys []
    R1 cdrblock;cdrblock; C:Windowssystem32DRIVERScdrblock.sys []
    R1 CSC;@%systemroot%system32cscsvc.dll,-202; C:Windowssystem32driverscsc.sys []
    R1 GDMnIcpt;GDMnIcpt; ??C:Windowssystem32driversMiniIcpt.sys []
    R1 gdwfpcd;G DATA WFP CD; C:Windowssystem32driversgdwfpcd64.sys []
    R1 GRD;G Data Rootkit Detector Driver; ??C:Windowssystem32driversGRD.sys []
    R1 HookCentre;HookCentre; ??C:Windowssystem32driversHookCentre.sys []
    R2 adfs;adfs; C:WindowsSysWOW64driversadfs.sys [2008-08-14 74720]
    R2 aksdf;aksdf; C:Windowssystem32DRIVERSaksdf.sys []
    R2 atksgt;atksgt; C:Windowssystem32DRIVERSatksgt.sys []
    R2 Hardlock;Hardlock; ??C:Windowssystem32drivershardlock.sys []
    R2 hcmon;VMware hcmon; ??C:Windowssystem32drivershcmon.sys []
    R2 lirsgt;lirsgt; C:Windowssystem32DRIVERSlirsgt.sys []
    R2 vmci;VMware vmci; ??C:Windowssystem32driversvmci.sys []
    R2 VMnetBridge;VMware Bridge Protocol; C:Windowssystem32DRIVERSvmnetbridge.sys []
    R2 VMnetuserif;VMware Network Application Interface; ??C:Windowssystem32driversvmnetuserif.sys []
    R2 vmx86;VMware vmx86; ??C:Windowssystem32driversvmx86.sys []
    R2 vstor2-ws60;Vstor2 WS60 Virtual Storage Driver; ??C:Program Files (x86)VMwareVMware Workstationvstor2-ws60.sys [2009-10-12 32816]
    R3 amdkmdag;amdkmdag; C:Windowssystem32DRIVERSatikmdag.sys []
    R3 amdkmdap;amdkmdap; C:Windowssystem32DRIVERSatikmpag.sys []
    R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:Windowssystem32driversAtiHdmi.sys []
    R3 GDPkIcpt;GDPkIcpt; ??C:Windowssystem32driversPktIcpt.sys []
    R3 GearAspiWDM;GEARAspiWDM; C:WindowsSystem32driversGEARAspiWDM.sys []
    R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:Windowssystem32driversRTKVHD64.sys []
    R3 pcouffin;VSO Software pcouffin; C:WindowsSystem32Driverspcouffin.sys []
    R3 RTL8167;Драйвер Realtek 8167 NT; C:Windowssystem32DRIVERSRt64win7.sys []
    R3 TotRec7;Total Recorder WDM audio driver; C:Windowssystem32driversTotRec7.sys []
    R3 TotRec8;Total Recorder WDM audio filter driver; ??C:Windowssystem32driversTotRec8.sys []
    R3 vmkbd;VMware kbd; ??C:Windowssystem32driversVMkbd.sys []
    S1 hwinterface;hwinterface; C:WindowsSystem32Drivershwinterface.sys [2009-10-01 3026]
    S1 NVKEYNT;NVKEYNT; ??C:Windowssystem32DRIVERSNVKEYNT.SYS [2005-10-06 71680]
    S3 61883;Устройство 61883; C:Windowssystem32DRIVERS61883.sys []
    S3 atikmdag;atikmdag; C:Windowssystem32DRIVERSatikmdag.sys []
    S3 Avc;Устройство AVC; C:Windowssystem32DRIVERSavc.sys []
    S3 Bridge;@%SystemRoot%system32bridgeres.dll,-3; C:Windowssystem32DRIVERSbridge.sys []
    S3 BridgeMP;@%SystemRoot%system32bridgeres.dll,-1; C:Windowssystem32DRIVERSbridge.sys []
    S3 cpuz130;cpuz130; ??C:UsersAMDAppDataLocalTempcpuz130cpuz_x64.sys []
    S3 ENTECH64;ENTECH64; ??C:Windowssystem32DRIVERSENTECH64.sys []
    S3 GGSAFERDriver;GGSAFER Driver; ??C:Program Files (x86)GarenapluginsUIsafedrv.sys []
    S3 GT680x;GrandTechICNameNT; C:WindowsSystem32Driversgt680x.sys [2007-02-06 22528]
    S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:Windowssystem32DRIVERSewusbmdm.sys []
    S3 MBAMProtector;MBAMProtector; ??C:Windowssystem32driversmbam.sys []
    S3 MSDV;Microsoft DV Camera and VCR; C:Windowssystem32DRIVERSmsdv.sys []
    S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:Windowssystem32driversnmwcdnsucx64.sys []
    S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:Windowssystem32driversnmwcdnsux64.sys []
    S3 pccsmcfd;PCCS Mode Change Filter Driver; C:Windowssystem32DRIVERSpccsmcfdx64.sys []
    S3 PPJoyBus;Parallel Port Joystick Bus Enumerator; C:Windowssystem32DRIVERSPPJoyBus64.sys []
    S3 PPortJoystick;Parallel Port Joystick Device Driver; C:Windowssystem32DRIVERSPPortJoy64.sys []
    S3 RDPDR;Terminal Server Device Redirector Driver; C:WindowsSystem32driversrdpdr.sys []
    S3 RivaTuner64;RivaTuner64; ??C:Program Files (x86)RivaTuner v2.24 MSI Master Overclocking Arena 2009 editionRivaTuner64.sys [2009-08-22 12288]
    S3 s3cap;s3cap; C:Windowssystem32DRIVERSvms3cap.sys []
    S3 storvsc;storvsc; C:Windowssystem32DRIVERSstorvsc.sys []
    S3 tbhsd;Tunebite High-Speed Dubbing; C:Windowssystem32driverstbhsd.sys []
    S3 upperdev;upperdev; C:Windowssystem32DRIVERSusbser_lowerfltx64.sys []
    S3 vmbus;@%SystemRoot%system32vmbusres.dll,-1000; C:Windowssystem32DRIVERSvmbus.sys []
    S3 VMBusHID;VMBusHID; C:Windowssystem32DRIVERSVMBusHID.sys []
    S3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:Windowssystem32DRIVERSvmnetadapter.sys []
    S3 vmusb;VMware USB Client Driver; C:WindowsSystem32Driversvmusb.sys []
    S3 vserial;ELTIMA Virtual Serial Ports Driver; C:WindowsSystem32DRIVERSvserial.sys []

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 AMD External Events Utility;AMD External Events Utility; C:Windowssystem32atiesrxx.exe []
    R2 astcc;AST Service; C:WindowsSYSTEM32astsrv.exe [2010-02-16 57344]
    R2 Autodesk Licensing Service;Autodesk Licensing Service; C:Program Files (x86)Common FilesAutodesk SharedServiceAdskScSrv.exe [2010-07-18 68608]
    R2 AVKProxy;G Data AntiVirus Proxy; C:Program Files (x86)Common FilesG DATAAVKProxyAVKProxy.exe [2010-09-02 1097288]
    R2 AVKService;G Data Scheduler; C:Program Files (x86)G DataTotalCareAVKAVKService.exe [2010-04-12 410696]
    R2 AVKWCtl;G Data Монитор файловой системы; C:Program Files (x86)G DataTotalCareAVKAVKWCtlX64.exe [2010-08-26 1865344]
    R2 Bonjour Service;Bonjour Service; C:Program Files (x86)BonjourmDNSResponder.exe [2008-12-12 238888]
    R2 CscService;@%systemroot%system32cscsvc.dll,-200; C:WindowsSystem32svchost.exe [2009-07-14 20992]
    R2 mi-raysat_3dsmax2010_32;mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit; C:Program Files (x86)Autodesk3ds Max 2010mentalraysatelliteraysat_3dsmax2010_32server.exe [2009-03-12 86016]
    R2 PnkBstrA;PnkBstrA; C:Windowssystem32PnkBstrA.exe [2010-02-12 75064]
    R2 PnkBstrB;PnkBstrB; C:Windowssystem32PnkBstrB.exe [2010-09-16 215128]
    R2 VMnetDHCP;VMware DHCP Service; C:Windowssystem32vmnetdhcp.exe [2009-10-22 334384]
    R2 VMUSBArbService;VMware USB Arbitration Service; C:Program Files (x86)Common FilesVMwareUSBvmware-usbarbitrator.exe [2009-10-22 563760]
    R2 VMware NAT Service;VMware NAT Service; C:Windowssystem32vmnat.exe [2009-10-22 395824]
    R3 GDFwSvc;G Data Personal Firewall; C:Program Files (x86)G DataTotalCareFirewallGDFwSvcx64.exe [2010-08-26 1718608]
    R3 GDScan;G Data Scanner; C:Program Files (x86)Common FilesG DATAGDScanGDScan.exe [2010-08-26 340552]
    S2 AODService;AODService; C:Program Files (x86)AMDOverDriveAODAssist.exe [2009-05-05 124256]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe [2010-03-18 130384]
    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:WindowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe [2010-03-18 138576]
    S2 gupdate;Google Update Service (gupdate); C:Program Files (x86)GoogleUpdateGoogleUpdate.exe [2010-05-06 136176]
    S2 gusvc;Google Software Updater; C:Program Files (x86)GoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2010-07-12 194104]
    S2 MBAMService;MBAMService; C:Program Files (x86)Malwarebytes’ Anti-Malwarembamservice.exe [2010-04-29 304464]
    S2 UleadBurningHelper;Ulead Burning Helper; C:Program Files (x86)Common FilesUlead SystemsDVDULCDRSvr.exe []
    S2 VMAuthdService;VMware Authorization Service; C:Program Files (x86)VMwareVMware Workstationvmware-authd.exe [2009-10-22 113200]
    S3 Apple Mobile Device;Apple Mobile Device; C:Program Files (x86)Common FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe [2009-08-28 144672]
    S3 AppMgmt;@appmgmts.dll,-3250; C:Windowssystem32svchost.exe [2009-07-14 20992]
    S3 aspnet_state;ASP.NET State Service; C:WindowsMicrosoft.NETFramework64v4.0.30319aspnet_state.exe [2010-03-18 44376]
    S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService64.exe [2010-06-16 1436424]
    S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:Program Files (x86)Common FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe [2010-03-04 867080]
    S3 GDBackupSvc;G Data Backup Service; C:Program Files (x86)G DataTotalCareAVKBackupAVKBackupService.exe [2010-05-05 901192]
    S3 GDTunerSvc;G Data Tuner Service; C:Program Files (x86)G DataTotalCareAVKTunerAVKTunerService.exe [2010-03-08 934984]
    S3 ICQ Service;ICQ Service; C:Program Files (x86)ICQ6ToolbarICQ Service.exe [2009-10-27 246520]
    S3 iPod Service;iPod Service; C:Program FilesiPodbiniPodService.exe [2009-11-12 660256]
    S3 ose;Office Source Engine; C:Program Files (x86)Common FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
    S3 PeerDistSvc;@%SystemRoot%system32peerdistsvc.dll,-9000; C:WindowsSystem32svchost.exe [2009-07-14 20992]
    S3 RichVideo;Cyberlink RichVideo Service(CRVS); D:CyberLink PowerDVD Ultra v8.0.2021.50+Keys-HeartBugSetup 8.0.1730RichVideoRichVideo.exe []
    S3 Steam Client Service;Steam Client Service; C:Program Files (x86)Common FilesSteamSteamService.exe [2010-03-08 332720]
    S3 SwitchBoard;SwitchBoard; C:Program Files (x86)Common FilesAdobeSwitchBoardSwitchBoard.exe [2010-02-19 517096]
    S3 ufad-ws60;VMware Agent Service; C:Program Files (x86)VMwareVMware Workstationvmware-ufad.exe [2009-10-12 191024]
    S3 UmRdpService;@%SystemRoot%system32umrdp.dll,-1000; C:WindowsSystem32svchost.exe [2009-07-14 20992]
    S3 WatAdminSvc;@%SystemRoot%system32WatWatUX.exe,-601; C:Windowssystem32WatWatAdminSvc.exe []
    S4 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service; C:Program Files (x86)Common FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe [2007-12-06 660768]
    S4 msvsmon90;Visual Studio 2008 Remote Debugger; C:Program FilesMicrosoft Visual Studio 9.0Common7IDERemote Debuggerx64msvsmon.exe [2008-07-29 4737024]
    S4 NetMsmqActivator;@C:WindowsMicrosoft.NETFramework64v4.0.30319\ServiceModelInstallRC.dll,-8195; C:WindowsMicrosoft.NETFramework64v4.0.30319SMSvcHost.exe [2010-03-18 124240]
    S4 NetPipeActivator;@C:WindowsMicrosoft.NETFramework64v4.0.30319\ServiceModelInstallRC.dll,-8197; C:WindowsMicrosoft.NETFramework64v4.0.30319SMSvcHost.exe [2010-03-18 124240]
    S4 NetTcpActivator;@C:WindowsMicrosoft.NETFramework64v4.0.30319\ServiceModelInstallRC.dll,-8199; C:WindowsMicrosoft.NETFramework64v4.0.30319SMSvcHost.exe [2010-03-18 124240]


    EOF


  • Автор
    Сообщения
Просмотр 4 сообщений - с 1 по 4 (из 4 всего)

Добро пожаловать

На нашем сайте размещены инструкции и программы, которые помогут вам абсолютно бесплатно и самостоятельно удалить навязчивую рекламу, вирусы и трояны.

Поиск

Важные инструкции

Установлено в соответствии с корпоративным правилом (Удалить из Хрома)
Как запустить компьютер в безопасном режиме (Safe Mode)
Удалить всплывающие окна, рекламу, уведомления в Chrome
Проверка на вирусы Андроид телефона
Как удалить вирус с телефона Андроид (Инструкция)
Как удалить всплывающие окна

СПАЙВАРЕ РУ

  • О Спайваре Ру
  • Контакты
  • Реклама на сайте
  • Политика конфиденциальности
  • Правила использования

Нужна помощь?

Задайте свой вопрос прямо сейчас кликнув по следующей ссылке Задать вопрос.

Или обратитесь на наш форум, где команда Spyware-ru поможет вам. Узнайте, как попросить о помощи здесь.

Ссылки

  • Инструкции
  • Скачать программы
  • Помощь в удалении вирусов
  • Как вылечить компьютер
Copyright © 2008 - 2024 Spyware-RU.com (en)