Untitled

Созданные ответы форума

Просмотр 13 сообщений - с 16 по 28 (из 28 всего)

← 1 2

Автор

Сообщения
29 июня, 2010 в 8:42 пп в ответ на: накопитель #29899
G-Gurda
Participant
- Темы:4
- Сообщений:32
Мне казалось что раньше он выдавал 2 разных отчета сейчас- только один.
29 июня, 2010 в 8:39 пп в ответ на: накопитель #29893
G-Gurda
Participant
- Темы:4
- Сообщений:32
Logfile of random’s system information tool 1.06 (written by random/random)
Run by user at 2010-06-30 00:37:25
Microsoft Windows XP Professional Service Pack 3
System drive H: has 285 MB (0%) free of 101 GB
Total RAM: 2046 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 0:37:26, on 30.06.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
H:WINDOWSSystem32smss.exe
H:WINDOWSsystem32winlogon.exe
H:WINDOWSsystem32services.exe
H:WINDOWSsystem32lsass.exe
H:WINDOWSsystem32Ati2evxx.exe
H:WINDOWSsystem32svchost.exe
H:WINDOWSSystem32svchost.exe
H:WINDOWSsystem32Ati2evxx.exe
H:WINDOWSsystem32svchost.exe
H:WINDOWSsystem32spoolsv.exe
H:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe
H:Program FilesCommon FilesAcronisSchedule2schedul2.exe
H:WINDOWSsystem32bgsvcgen.exe
H:Program FilesDrWeb AV-DeskDWENGINE.EXE
H:Program FilesJavajre6binjqs.exe
H:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
H:Program FilesDrWeb AV-DeskSPIDERNT.EXE
H:WINDOWSsystem32svchost.exe
H:WINDOWSsystem32CNAB4RPK.EXE
H:Program FilesDrWeb AV-Deskdrwagntd.exe
H:WINDOWSsystem32wscntfy.exe
H:WINDOWSexplorer.exe
H:Program FilesuTorrentuTorrent.exe
H:Documents and SettingsuserМои документыЗагрузкиRSIT.exe
H:Program Filestrend microuser.exe

R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://yandex.ru/
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
F2 — REG:system.ini: UserInit=H:WINDOWSsystem32userinit.exe,H:WINDOWSsystem32d542de00.exe,\?globalrootsystemrootsystem321h43Z8O.exe,
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — H:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: RealPlayer Download and Record Plugin for Internet Explorer — {3049C3E9-B461-4BC5-8870-4C09146192CA} — H:Program FilesRealRealPlayerrpbrowserrecordplugin.dll (file missing)
O2 — BHO: Java(tm) Plug-In SSV Helper — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — H:Program FilesJavajre6binssv.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — H:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — H:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O4 — HKLM..Run: [GEST] H:Program FilesGIGABYTEGESTRUN.exe
O4 — HKLM..Run: [JMB36X IDE Setup] H:WINDOWSRaidToolxInsIDE.exe
O4 — HKLM..Run: [36X Raid Configurer] H:WINDOWSsystem32xRaidSetup.exe boot
O4 — HKLM..Run: [Acronis True Image Monitor] «H:Program FilesAcronisTrueImageTrueImageMonitor.exe»
O4 — HKLM..Run: [Acronis Scheduler2 Service] «H:Program FilesCommon FilesAcronisSchedule2schedhlp.exe»
O4 — HKLM..Run: [NeroFilterCheck] H:WINDOWSsystem32NeroCheck.exe
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «H:Program FilesAdobeReader 9.0ReaderReader_sl.exe»
O4 — HKLM..Run: [NokiaMServer] H:Program FilesCommon FilesNokiaMPlatformNokiaMServer /watchfiles
O4 — HKLM..Run: [Nokia FastStart] «H:Program FilesNokiaNokia MusicNokiaMusic.exe» /command:faststart
O4 — HKLM..Run: [SunJavaUpdateSched] «H:Program FilesJavajre6binjusched.exe»
O4 — HKLM..Run: [StartCCC] «H:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe» MSRun
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [DrWebAgentUI] «H:Program FilesDrWeb AV-Deskdrwagnui.exe»
O4 — HKLM..Run: [SpIDerMail] «H:Program FilesDrWeb AV-DeskSPIDERML.EXE»
O4 — HKLM..Run: [SpIDerNT] «H:Program FilesDrWeb AV-DeskSPIDERUI.EXE» /agent
O4 — HKLM..Run: [QuickTime Task] «H:Program FilesQuickTimeQTTask.exe» -atboottime
O4 — HKCU..Run: [AlcoholAutomount] «H:Program FilesAlcohol SoftAlcohol 120axcmd.exe» /automount
O4 — HKCU..Run: [AlSrvN] H:Program FilesAlcohol SoftAlcohol 120PluginsHelperAlSrvN.exe
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Startup: FIFA 10 Registration.lnk = D:Program FilesEA SportsFIFA 10SupportEAregister.exe
O4 — Startup: Need for Speed™ Undercover — регистрация.lnk = D:Need for Speed UndercoverSupportEAregister.exe
O4 — Global Startup: Nokia Ovi Suite.lnk = H:Program FilesNokiaOviSuiteRunLauncher.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://H:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — H:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} — (no file)
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — H:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — H:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — H:Program FilesICQ6.5ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — H:Program FilesICQ6.5ICQ.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — H:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — H:Program FilesMessengermsmsgs.exe
O16 — DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) — http://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
O17 — HKLMSystemCCSServicesTcpip..{641DB3C5-8660-49BE-A22B-9D95FE173AA3}: NameServer = 91.123.16.120 91.189.240.28
O23 — Service: ABBYY FineReader 9.0 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) — ABBYY (BIT Software) — H:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe
O23 — Service: Acronis Scheduler2 Service (AcrSch2Svc) — Acronis — H:Program FilesCommon FilesAcronisSchedule2schedul2.exe
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — H:WINDOWSsystem32Ati2evxx.exe
O23 — Service: ATI Smart — Unknown owner — H:WINDOWSsystem32ati2sgag.exe
O23 — Service: B’s Recorder GOLD Library General Service (bgsvcgen) — B.H.A Corporation — H:WINDOWSsystem32bgsvcgen.exe
O23 — Service: Dr.Web(R) AV-Desk Agent (drwagntd) — Doctor Web, Ltd. — H:Program FilesDrWeb AV-Deskdrwagntd.exe
O23 — Service: Dr.Web (R) Scanning Engine (DrWebEngine) — Doctor Web, Ltd. — H:Program FilesDrWeb AV-DeskDWENGINE.EXE
O23 — Service: Dr.Web(R) AV-Desk Upgrade Service (drwupgrade) — Doctor Web, Ltd. — H:Program FilesDrWeb AV-Deskdrwupgrade.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — H:WINDOWSsystem32services.exe
O23 — Service: GEST Service for program management. (GEST Service) — Unknown owner — H:Program FilesGIGABYTEGESTGSvr.exe
O23 — Service: Служба Google Update (gupdate1ca1104ee4fa4be) (gupdate1ca1104ee4fa4be) — Google Inc. — H:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — H:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — H:WINDOWSsystem32imapi.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — H:Program FilesJavajre6binjqs.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — H:WINDOWSsystem32mnmsrvc.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — H:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — H:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — H:WINDOWSSystem32SCardSvr.exe
O23 — Service: ServiceLayer — Nokia. — H:Program FilesNokiaPC Connectivity SolutionServiceLayer.exe
O23 — Service: SpIDer Guard (R) for Windows (spidernt) — Doctor Web, Ltd. — H:Program FilesDrWeb AV-DeskSPIDERNT.EXE
O23 — Service: StarWind AE Service (StarWindServiceAE) — Unknown owner — H:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe (file missing)
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — H:WINDOWSsystem32smlogsvc.exe
O23 — Service: Telnet (TlntSvr) — Корпорация Майкрософт — H:WINDOWSsystem32tlntsvr.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — H:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — H:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 9105 bytes

======Scheduled tasks folder======

H:WINDOWStasksAppleSoftwareUpdate.job
H:WINDOWStasksGoogleUpdateTaskMachineCore.job
H:WINDOWStasksGoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — H:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer — H:Program FilesRealRealPlayerrpbrowserrecordplugin.dll []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper — H:Program FilesJavajre6binssv.dll [2009-06-09 320920]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — H:Program FilesJavajre6binjp2ssv.dll [2009-06-09 34816]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — H:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2009-06-09 73728]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«GEST»=H:Program FilesGIGABYTEGESTRUN.exe [2007-12-14 236040]
«JMB36X IDE Setup»=H:WINDOWSRaidToolxInsIDE.exe [2007-03-20 36864]
«36X Raid Configurer»=H:WINDOWSsystem32xRaidSetup.exe [2007-08-29 1966080]
«Acronis True Image Monitor»=H:Program FilesAcronisTrueImageTrueImageMonitor.exe [2008-08-26 417536]
«Acronis Scheduler2 Service»=H:Program FilesCommon FilesAcronisSchedule2schedhlp.exe [2008-08-26 61440]
«NeroFilterCheck»=H:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
«Adobe Reader Speed Launcher»=H:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2008-06-12 34672]
«NokiaMServer»=H:Program FilesCommon FilesNokiaMPlatformNokiaMServer /watchfiles []
«Nokia FastStart»=H:Program FilesNokiaNokia MusicNokiaMusic.exe [2008-12-03 2372840]
«SunJavaUpdateSched»=H:Program FilesJavajre6binjusched.exe [2009-06-09 136600]
«StartCCC»=H:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2009-04-28 61440]
«RTHDCPL»=H:WINDOWSRTHDCPL.EXE [2007-09-19 16844800]
«DrWebAgentUI»=H:Program FilesDrWeb AV-Deskdrwagnui.exe [2010-06-22 1692976]
«SpIDerMail»=H:Program FilesDrWeb AV-DeskSPIDERML.EXE [2010-06-22 644336]
«SpIDerNT»=H:Program FilesDrWeb AV-DeskSPIDERUI.EXE [2010-06-22 231816]
«QuickTime Task»=H:Program FilesQuickTimeQTTask.exe [2010-03-17 421888]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«AlcoholAutomount»=H:Program FilesAlcohol SoftAlcohol 120axcmd.exe [2009-04-24 203928]
«AlSrvN»=H:Program FilesAlcohol SoftAlcohol 120PluginsHelperAlSrvN.exe [2009-04-17 53248]

H:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
Nokia Ovi Suite.lnk — H:Program FilesNokiaOviSuiteRunLauncher.exe

H:Documents and SettingsuserГлавное менюПрограммыАвтозагрузка
FIFA 10 Registration.lnk — D:Program FilesEA SportsFIFA 10SupportEAregister.exe
Need for Speed™ Undercover — регистрация.lnk — D:Need for Speed UndercoverSupportEAregister.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
H:WINDOWSsystem32Ati2evxx.dll [2009-04-29 155648]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — H:WINDOWSsystem32WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetwork{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=323
«NoDriveAutoRun»=67108863
«NoDrives»=0

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveAutoRun»=
«NoDriveTypeAutoRun»=
«NoDrives»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«H:Program FilesGIGABYTEGESTrun.exe»=»H:Program FilesGIGABYTEGESTrun.exe:*:Enabled:update»
«H:Program FilesQIPqip.exe»=»H:Program FilesQIPqip.exe:*:Enabled:Quiet Internet Pager»
«H:WINDOWSsystem32PnkBstrA.exe»=»H:WINDOWSsystem32PnkBstrA.exe:*:Enabled:PnkBstrA»
«H:WINDOWSsystem32PnkBstrB.exe»=»H:WINDOWSsystem32PnkBstrB.exe:*:Enabled:PnkBstrB»
«H:WINDOWSsystem32CNAB4RPK.EXE»=»H:WINDOWSsystem32CNAB4RPK.EXE:*:Disabled:Canon LBP2900 RPC Server Process»
«H:WINDOWSsystem32dplaysvr.exe»=»H:WINDOWSsystem32dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«H:Program FilesuTorrentutorrent.exe»=»H:Program FilesuTorrentutorrent.exe:*:Enabled:µTorrent»
«H:Program FilesICQ6.5ICQ.exe»=»H:Program FilesICQ6.5ICQ.exe:*:Enabled:ICQ6»
«H:Program FilesUbisoftUbisoft Game LauncherUbisoftGameLauncher.exe»=»H:Program FilesUbisoftUbisoft Game LauncherUbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»

======List of files/folders created in the last 1 months======

2010-06-29 13:03:31 —-A—- H:Program FilesCommon Fileskeylog.txt
2010-06-28 13:22:42 —-SHD—- H:RECYCLER
2010-06-28 13:20:11 —-D—- H:Program FilesLight Alloy
2010-06-28 13:16:26 —-A—- H:WINDOWSsystem32nj0NAdI.exe
2010-06-28 13:13:56 —-A—- H:ComboFix.txt
2010-06-28 01:06:57 —-D—- H:Documents and SettingsuserApplication DataFileZilla
2010-06-23 20:23:38 —-D—- H:WINDOWStemp
2010-06-16 12:59:54 —-D—- H:Program FilesMetaTrader — Alpari
2010-06-08 15:38:29 —-D—- H:Program FilesQuickTime
2010-06-08 15:38:28 —-D—- H:Documents and SettingsAll UsersApplication DataApple Computer
2010-06-04 15:35:29 —-D—- H:Documents and SettingsuserApplication DataFriday’s games

======List of files/folders modified in the last 1 months======

2010-06-30 00:37:26 —-D—- H:Program Filestrend micro
2010-06-30 00:37:23 —-D—- H:Documents and SettingsuserApplication DatauTorrent
2010-06-30 00:34:53 —-D—- H:WINDOWSPrefetch
2010-06-30 00:27:32 —-D—- H:Новая папка
2010-06-29 23:43:17 —-D—- H:Program FilesDrWeb AV-Desk
2010-06-29 14:13:15 —-D—- H:WINDOWSsystem32CatRoot2
2010-06-29 13:03:31 —-D—- H:Program FilesCommon Files
2010-06-28 23:34:57 —-A—- H:WINDOWSNeroDigital.ini
2010-06-28 17:17:30 —-D—- H:Program FilesICQ6.5
2010-06-28 13:20:11 —-RD—- H:Program Files
2010-06-28 13:20:04 —-D—- H:Program FilesFishki.net
2010-06-28 13:18:42 —-D—- H:Program FilesAutochartist
2010-06-28 13:18:31 —-HD—- H:Program FilesInstallShield Installation Information
2010-06-28 13:16:26 —-D—- H:WINDOWSsystem32
2010-06-28 13:13:59 —-AD—- H:Qoobox
2010-06-28 13:12:53 —-D—- H:WINDOWS
2010-06-28 13:12:53 —-A—- H:WINDOWSsystem.ini
2010-06-28 13:02:51 —-D—- H:WINDOWSsystem32drivers
2010-06-28 13:02:51 —-D—- H:WINDOWSAppPatch
2010-06-28 12:54:15 —-A—- H:WINDOWSSchedLgU.Txt
2010-06-28 11:05:20 —-SHD—- H:WINDOWSInstaller
2010-06-28 11:05:02 —-D—- H:Program FilesMozilla Firefox
2010-06-28 00:18:30 —-SHD—- H:System Volume Information
2010-06-24 17:35:39 —-D—- H:Program FilesFLV Player
2010-06-23 20:31:17 —-SD—- H:WINDOWSTasks
2010-06-23 20:24:26 —-D—- H:WINDOWSsystem32config
2010-06-23 20:24:05 —-A—- H:WINDOWSntbtlog.txt
2010-06-23 20:23:43 —-D—- H:WINDOWSERDNT
2010-06-23 20:23:06 —-D—- H:Program FilesWinRAR
2010-06-23 18:57:49 —-D—- H:Documents and Settings
2010-06-22 14:20:55 —-D—- H:Documents and SettingsuserApplication Datadvdcss
2010-06-08 15:38:56 —-D—- H:Config.Msi
2010-06-04 15:34:31 —-D—- H:Program FilesAlawar
2010-06-01 15:23:14 —-A—- H:WINDOWSBurnout(TM) Paradise The Ultimate Box Patch Log.txt
2010-06-01 01:49:34 —-D—- H:Program FilesCommon FilesWise Installation Wizard
2010-06-01 01:49:32 —-D—- H:WINDOWSsystem32DirectX
2010-06-01 01:49:30 —-HD—- H:WINDOWSinf
2010-06-01 01:48:28 —-RSD—- H:WINDOWSassembly

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 cdrbsdrv;cdrbsdrv; H:WINDOWSsystem32driverscdrbsdrv.sys [2006-02-20 33408]
R1 intelppm;Драйвер Intel процессора; H:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-15 40704]
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; H:WINDOWSSystem32driversws2ifsl.sys [2008-04-15 12032]
R2 spider;SpIDer Guard (R) File System Monitor; ??H:Program FilesDrWeb AV-DeskSPIDER.SYS []
R2 tifsfilter;Acronis TrueImage FS Filter; H:WINDOWSsystem32DRIVERStifsfilt.sys [2008-08-26 28096]
R3 ati2mtag;ati2mtag; H:WINDOWSsystem32DRIVERSati2mtag.sys [2009-04-29 3643904]
R3 AtiHdmiService;ATI Function Driver for HDMI Service; H:WINDOWSsystem32driversAtiHdmi.sys [2009-04-01 93184]
R3 catchme;catchme; ??H:DOCUME~1userLOCALS~1Tempcatchme.sys []
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; H:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-15 144384]
R3 HidUsb;Драйвер класса HID Microsoft; H:WINDOWSsystem32DRIVERShidusb.sys [2008-04-15 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); H:WINDOWSsystem32driversRtkHDAud.sys [2007-09-19 4617728]
R3 mouhid;Драйвер мыши HID; H:WINDOWSsystem32DRIVERSmouhid.sys [2008-04-15 12160]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; H:WINDOWSsystem32DRIVERSRtenicxp.sys [2007-12-05 104064]
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); H:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-15 32128]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; H:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-15 30208]
R3 usbhub;USB2 концентратор; H:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbstor;Драйвер запоминающих устройств для USB; H:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-15 26368]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; H:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-15 20608]
S3 ET5Drv;ET5Drv; ??H:WINDOWSsystem32DriversET5Drv.sys []
S3 gdrv;gdrv; ??H:WINDOWSgdrv.sys []
S3 mbr;mbr; ??H:DOCUME~1userLOCALS~1Tempmbr.sys []
S3 nmwcd;Nokia USB Phone Parent; H:WINDOWSsystem32driversccdcmb.sys [2008-05-07 17536]
S3 pccsmcfd;PCCS Mode Change Filter Driver; H:WINDOWSsystem32DRIVERSpccsmcfd.sys [2008-08-26 18816]
S3 usbprint;Класс принтеров Microsoft USB; H:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-14 25856]
S3 usbscan;Драйвер USB-сканера; H:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
S3 Wdf01000;Wdf01000; H:WINDOWSsystem32DRIVERSWdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; H:WINDOWSsystem32DRIVERSwpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; H:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; H:WINDOWSsystem32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service; H:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe [2007-12-06 660768]
R2 AcrSch2Svc;Acronis Scheduler2 Service; H:Program FilesCommon FilesAcronisSchedule2schedul2.exe [2008-08-26 122880]
R2 Ati HotKey Poller;Ati HotKey Poller; H:WINDOWSsystem32Ati2evxx.exe [2009-04-29 602112]
R2 bgsvcgen;B’s Recorder GOLD Library General Service; H:WINDOWSsystem32bgsvcgen.exe [2007-06-15 145504]
R2 DrWebEngine;Dr.Web (R) Scanning Engine; H:Program FilesDrWeb AV-DeskDWENGINE.EXE [2010-06-22 1094048]
R2 JavaQuickStarterService;Java Quick Starter; H:Program FilesJavajre6binjqs.exe [2009-06-09 152984]
R2 MDM;Machine Debug Manager; H:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-19 322120]
R2 spidernt;SpIDer Guard (R) for Windows; H:Program FilesDrWeb AV-DeskSPIDERNT.EXE [2010-06-22 231816]
R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; H:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R3 drwagntd;Dr.Web(R) AV-Desk Agent; H:Program FilesDrWeb AV-Deskdrwagntd.exe [2010-06-22 2340144]
S2 ATI Smart;ATI Smart; H:WINDOWSsystem32ati2sgag.exe [2009-04-28 593920]
S2 drwupgrade;Dr.Web(R) AV-Desk Upgrade Service; H:Program FilesDrWeb AV-Deskdrwupgrade.exe [2010-06-22 828720]
S2 gupdate1ca1104ee4fa4be;Служба Google Update (gupdate1ca1104ee4fa4be); H:Program FilesGoogleUpdateGoogleUpdate.exe [2009-07-30 133104]
S2 StarWindServiceAE;StarWind AE Service; H:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe []
S3 aspnet_state;ASP.NET State Service; H:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; H:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; H:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2006-10-20 36864]
S3 GEST Service;GEST Service for program management.; H:Program FilesGIGABYTEGESTGSvr.exe [2007-12-14 47624]
S3 IDriverT;InstallDriver Table Manager; H:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; H:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2006-10-30 741376]
S3 ose;Office Source Engine; H:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; H:Program FilesNokiaPC Connectivity SolutionServiceLayer.exe [2008-09-08 575488]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; H:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2006-10-30 122880]

EOF
29 июня, 2010 в 3:28 пп в ответ на: накопитель #29897
G-Gurda
Participant
- Темы:4
- Сообщений:32
Ладно, какой прогой и при подключенном накопителе я так думаю?
29 июня, 2010 в 9:06 дп в ответ на: накопитель #29896
G-Gurda
Participant
- Темы:4
- Сообщений:32
Да их у меня нет я почти уверен вот только что комбофиксом всё вынес + дрвеб подтвердил.
16 марта, 2010 в 7:22 дп в ответ на: Не запускается даже безопасный режим #26797
G-Gurda
Participant
- Темы:4
- Сообщений:32
наконец наша эпопея кажется закончена, всё работает отлично спасибо вам за помощь. У меня еще ноутбук барахлит но я вам потом в личку кину лог( какой прогой кстати лучше?) если вы не против. И вот еще какой мне антивирус лучше поставить нод32 или доктор веб?

ComboFix 10-03-15.04 — user 16.03.2010 9:54.1.2 — x86
Microsoft Windows XP Professional 5.1.2600.3.1251.7.1049.18.2046.1681 [GMT 3:00]
Running from: h:documents and settingsuserРабочий столComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

D:Autorun.inf
D:khq
h:docume~1userLOCALS~1Temp_co.txt
h:documents and settingsuserApplication Data.#
h:documents and settingsuserApplication Data.#MBX@BF0@343578.###
h:documents and settingsuserApplication Data.#MBX@BF0@343588.###
h:documents and settingsuserApplication Data.#MBX@BF0@343598.###
h:documents and settingsuserApplication Data.#MBX@BF0@3435A8.###
h:program filesMyCentria
h:program filesWebMoney Advisor
h:program filesWebMoney Advisor16x16x32b.bmp
h:program filesWebMoney Advisorbasis.xml
h:program filesWebMoney Advisorbooble.html
h:program filesWebMoney Advisorinfo.txt
h:program filesWebMoney Advisortbs_include_script_014708.js
h:program filesWebMoney Advisortbs_include_script_wmadvisor.js
h:program filesWebMoney Advisorversion.txt
h:program filesWebMoney Advisorwmadvisor.crc
h:recyclerS-1-5-21-2525408738-8637638833-374915209-6575
h:recyclerS-1-5-21-3960467834-7783471534-966831158-4505
h:recyclerS-1-5-21-5173805693-6086749553-795268656-0509
h:recyclerS-1-5-21-6830404304-3184402041-501554399-5429
h:recyclerS-1-5-21-6952829768-3549675177-572841897-3797
h:windowsccdrive32.exe
h:windowsjjdrive32.exe
h:windowssystem32.exe
h:windowssystem320.exe
h:windowssystem3212.exe
h:windowssystem3224.scr
h:windowssystem3233.exe
h:windowssystem3241.exe
h:windowssystem3246.exe
h:windowssystem3256.scr
h:windowssystem3273.scr
h:windowssystem32alog.txt
h:windowssystem32avsys.exe
h:windowssystem32bb1.dat
h:windowssystem32browseit.log
h:windowssystem32COMEt.dll
h:windowssystem32cs.dat
h:windowssystem32ealregsnapshot1.reg
h:windowssystem32i
h:windowssystem32ieuinit.inf
h:windowssystem32msvmcls64.exe
h:windowssystem32netprotocol.dll
h:windowssystem32office.exe
h:windowssystem32ps1.dat
h:windowssystem32rc.dat
h:windowssystem32SIntf16.dll
h:windowssystem32sshnas21.dll
h:windowssystem32umdmgr.exe
h:windowssystem32umdmgr.log
h:windowssystem32upd32.exe

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

Legacy_NETPROTOCOL

Legacy_SSHNAS

Service_Netprotocol

Service_SSHNAS

((((((((((((((((((((((((( Files Created from 2010-02-16 to 2010-03-16 )))))))))))))))))))))))))))))))
.

2010-03-16 06:49 . 2007-09-29 05:30 65024 —-a-r- h:windowssystem32driversJRAID_2.sys
2010-03-15 09:59 . 2010-03-15 12:45

d-sh—w- h:documents and settingsuserLocal SettingsApplication Data.#
2010-03-12 21:05 . 2010-03-12 21:05

d

w- h:program filesMicrosoft Games
2010-02-23 07:51 . 2010-02-23 07:51

d

w- H:_OTM
2010-02-22 12:34 . 2008-04-15 12:00 9216 -c—a-w- h:windowssystem32dllcachewamps51.dll
2010-02-22 12:34 . 2008-04-15 12:00 76800 -c—a-w- h:windowssystem32dllcachewam51.dll
2010-02-22 12:34 . 2008-04-15 12:00 53248 -c—a-w- h:windowssystem32dllcachewamreg51.dll
2010-02-22 12:34 . 2008-04-15 12:00 41600 -c—a-w- h:windowssystem32dllcacheweitekp9.dll
2010-02-22 12:34 . 2008-04-15 12:00 364544 -c—a-w- h:windowssystem32dllcachew3svc.dll
2010-02-22 12:34 . 2008-04-15 12:00 31232 -c—a-w- h:windowssystem32dllcacheweitekp9.sys
2010-02-22 12:32 . 2008-04-15 12:00 7680 -c—a-w- h:windowssystem32dllcacheftpctrs2.dll
2010-02-22 12:16 . 2008-04-15 12:00 13312 -c—a-w- h:windowssystem32dllcacheirclass.dll
2010-02-22 12:16 . 2008-04-15 12:00 13312 —-a-w- h:windowssystem32irclass.dll
2010-02-22 12:16 . 2008-04-15 12:00 24661 -c—a-w- h:windowssystem32dllcachespxcoins.dll
2010-02-22 12:16 . 2008-04-15 12:00 24661 —-a-w- h:windowssystem32spxcoins.dll
2010-02-19 18:15 . 2010-02-23 08:01

d

w- h:program filestrend micro
2010-02-19 18:15 . 2010-02-19 18:16

d

w- H:rsit
2010-02-19 16:51 . 2008-04-14 18:40 221184 —-a-w- h:windowssystem32wmpns.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-16 07:06 . 2008-08-26 10:43 16608 —-a-w- h:windowsgdrv.sys
2010-03-16 07:03 . 2009-02-28 13:26

d

w- h:program filesAutochartist
2010-03-16 06:37 . 2008-08-27 14:31

d

w- h:documents and settingsuserApplication DatauTorrent
2010-03-14 21:53 . 2009-03-10 20:42

d

w- h:program filesFxClub
2010-03-14 21:22 . 2009-07-23 22:15

d

w- h:documents and settingsAll UsersApplication DataWinZip
2010-03-14 21:21 . 2008-08-26 10:44

d—h—w- h:program filesInstallShield Installation Information
2010-03-14 13:28 . 2008-12-21 12:59 2056552 —-a-w- h:documents and settingsLocalServiceLocal SettingsApplication DataFontCache3.0.0.0.dat
2010-03-13 10:15 . 2008-08-26 10:40 69448 —-a-w- h:documents and settingsuserLocal SettingsApplication DataGDIPFONTCACHEV1.DAT
2010-03-08 17:17 . 2008-08-26 15:44

d

w- h:program filesEset
2010-03-06 20:39 . 2009-02-11 13:38

d

w- h:program filesuTorrent
2010-02-28 09:57 . 2009-11-27 14:19 79488 —-a-w- h:documents and settingsuserApplication DataSunJavajre1.6.0_17gtapi.dll
2010-02-26 21:30 . 2009-03-03 20:28

d

w- h:documents and settingsuserApplication Datadvdcss
2010-02-22 12:46 . 2001-10-20 12:00 85634 —-a-w- h:windowssystem32perfc019.dat
2010-02-22 12:46 . 2001-10-20 12:00 485954 —-a-w- h:windowssystem32perfh019.dat
2010-02-22 12:29 . 2008-08-26 10:33 24428 —-a-w- h:windowssystem32emptyregdb.dat
2010-02-22 08:38 . 2010-01-25 19:13

d

w- h:program filesSteam
2010-02-22 08:37 . 2010-01-23 10:27

d

w- h:documents and settingsAll UsersApplication DataSkype
2010-02-22 08:04 . 2010-01-23 10:40

d

w- h:documents and settingsuserApplication DataskypePM
2010-02-19 17:58 . 2009-11-11 14:55

d

w- h:program filesTeorex Inpaint
2010-02-19 17:58 . 2009-10-11 16:54

d

w- h:program filesReal Alternative
2010-02-19 17:58 . 2009-09-22 20:29

d

w- h:program filesMetaTrader — Alpari
2010-02-19 17:58 . 2009-06-24 09:07

d

w- h:program filesA-one Video Convertor
2010-02-19 17:58 . 2009-07-30 11:00

d

w- h:program filesDivX
2010-02-19 17:36 . 2009-10-26 08:25

d

w- h:program filesAll Office Converter Platinum
2010-02-13 19:33 . 2010-02-13 18:06 139264 —-a-w- h:windowssystem32dh.exe
2010-02-13 18:06 . 2010-02-13 18:06 139264 —sh—r- h:windowsacp.exe
2010-02-13 17:19 . 2010-02-13 17:19 143360 —sh—r- h:windowssystem32driversCbfgm.exe
2010-02-12 06:10 . 2009-08-30 13:53

d

w- h:documents and settingsuserApplication DataDivX
2010-02-09 14:34 . 2010-02-09 14:34

d

w- h:documents and settingsuserApplication DataPlayFirst
2010-02-09 14:34 . 2010-02-09 14:34

d

w- h:documents and settingsAll UsersApplication DataPlayFirst
2010-02-09 14:13 . 2010-01-23 08:50

d

w- h:program filesGames
2010-02-07 13:09 . 2010-02-07 13:09

d

w- h:program filesBaldaWin Demo
2010-01-31 12:39 . 2010-01-31 12:39

d

w- h:documents and settingsuserApplication DataEltima Software
2010-01-31 12:37 . 2010-01-31 12:37

d

w- h:program filesEltima Software
2010-01-27 11:16 . 2010-01-27 11:16

d

w- h:program filesElectronic Arts
2010-01-24 19:59 . 2009-12-21 23:21

d

w- h:program filesGamesTopDownloads
2010-01-24 19:39 . 2010-01-24 19:38

d

w- h:program filesAGEIA Technologies
2010-01-24 19:38 . 2009-09-25 07:01

d

w- h:program filesCommon FilesWise Installation Wizard
2010-01-24 13:45 . 2008-09-03 10:49 138184 —-a-w- h:windowssystem32driversPnkBstrK.sys
2010-01-24 13:45 . 2008-09-03 10:49 183112 —-a-w- h:windowssystem32PnkBstrB.exe
2010-01-23 10:40 . 2010-01-23 10:40 56 —ha-w- h:windowssystem32ezsidmv.dat
2010-01-22 15:44 . 2010-01-22 15:42

d

w- h:program filesРусская Рыбалка 2.2
2010-01-22 15:39 . 2009-11-11 19:46

d

w- h:program filesРусская Рыбалка Installsoft Edition
2010-01-19 07:13 . 2009-06-02 02:21

d

w- h:program filesICQ6.5
2009-05-13 21:55 . 2009-05-13 21:55 1044480 —-a-w- h:program filesmozilla firefoxpluginslibdivx.dll
2009-05-13 21:55 . 2009-05-13 21:55 200704 —-a-w- h:program filesmozilla firefoxpluginsssldivx.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
«Autochartist»=»h:program filesAutochartistAutochartist_FXCLUB2.exe» [2010-02-22 4144456]
«AlcoholAutomount»=»h:program filesAlcohol SoftAlcohol 120axcmd.exe» [2009-04-24 203928]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
«NokiaMServer»=»h:program filesCommon FilesNokiaMPlatformNokiaMServer» [X]
«GEST»=»h:program filesGIGABYTEGESTRUN.exe» [2007-12-14 236040]
«JMB36X IDE Setup»=»h:windowsRaidToolxInsIDE.exe» [2007-03-20 36864]
«36X Raid Configurer»=»h:windowssystem32xRaidSetup.exe» [2007-08-29 1966080]
«Acronis True Image Monitor»=»h:program filesAcronisTrueImageTrueImageMonitor.exe» [2008-08-26 417536]
«Acronis Scheduler2 Service»=»h:program filesCommon FilesAcronisSchedule2schedhlp.exe» [2008-08-26 61440]
«NeroFilterCheck»=»h:windowssystem32NeroCheck.exe» [2001-07-09 155648]
«Adobe Reader Speed Launcher»=»h:program filesAdobeReader 9.0ReaderReader_sl.exe» [2008-06-11 34672]
«QuickTime Task»=»h:program filesQuickTimeqttask.exe» [2008-09-06 413696]
«Nokia FastStart»=»h:program filesNokiaNokia MusicNokiaMusic.exe» [2008-12-03 2372840]
«SunJavaUpdateSched»=»h:program filesJavajre6binjusched.exe» [2009-06-09 136600]
«StartCCC»=»h:program filesATI TechnologiesATI.ACECore-StaticCLIStart.exe» [2009-04-28 61440]
«RTHDCPL»=»RTHDCPL.EXE» [2007-09-19 16844800]

[HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=»h:windowssystem32CTFMON.EXE» [2008-04-15 15360]

h:documents and settingsAll Usersѓ« ў®Ґ ¬ҐоЏа®Ја ¬¬лЂўв®§ Јаг§Є
Nokia Ovi Suite.lnk — h:program filesNokiaOviSuiteRunLauncher.exe [2008-11-28 946176]

[HKLM~servicessharedaccessparametersfirewallpolicystandardprofile]
«EnableFirewall»= 0 (0x0)

[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList]
«%windir%\system32\sessmgr.exe»=
«h:\Program Files\GIGABYTE\GEST\run.exe»=
«h:\Program Files\QIP\qip.exe»=
«h:\WINDOWS\system32\PnkBstrA.exe»=
«h:\WINDOWS\system32\PnkBstrB.exe»=
«h:\WINDOWS\system32\CNAB4RPK.EXE»=
«h:\Program Files\TVUPlayer\TVUPlayer.exe»=
«h:\WINDOWS\system32\dplaysvr.exe»=
«%windir%\Network Diagnostic\xpnetdiag.exe»=
«h:\Program Files\uTorrent\utorrent.exe»=
«h:\Program Files\ICQ6.5\ICQ.exe»=

R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);h:windowssystem32driverssfdrv01a.sys [05.07.2006 15:46 63352]
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service;h:program filesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe [06.12.2007 21:03 660768]
R3 GEST Service;GEST Service for program management.;h:program filesGIGABYTEGESTGSvr.exe [26.08.2008 13:44 47624]
S0 sptd;sptd;h:windowssystem32driverssptd.sys [31.01.2009 18:22 721904]
S2 gupdate1ca1104ee4fa4be;Служба Google Update (gupdate1ca1104ee4fa4be);h:program filesGoogleUpdateGoogleUpdate.exe [30.07.2009 14:00 133104]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionsvchost]
DcomLaunch REG_MULTI_SZ DcomLaunch TermService Netprotocol
.
Contents of the ‘Scheduled Tasks’ folder

2010-03-15 h:windowsTasksAppleSoftwareUpdate.job
— h:program filesApple Software UpdateSoftwareUpdate.exe [2008-07-30 09:34]

2010-03-16 h:windowsTasksGoogleUpdateTaskMachineCore.job
— h:program filesGoogleUpdateGoogleUpdate.exe [2009-07-30 11:00]

2010-03-16 h:windowsTasksGoogleUpdateTaskMachineUA.job
— h:program filesGoogleUpdateGoogleUpdate.exe [2009-07-30 11:00]
.
.

Supplementary Scan

.
uStart Page = hxxp://www.yandex.ru/
IE: &Экспорт в Microsoft Excel — h:progra~1MICROS~2OFFICE11EXCEL.EXE/3000
FF — ProfilePath — h:documents and settingsuserApplication DataMozillaFirefoxProfilesi1vdypvy.default
FF — plugin: h:documents and settingsuserApplication DataMozillaFirefoxProfilesi1vdypvy.defaultextensionsfirefox@tvunetworks.compluginsnpTVUAx.dll
FF — plugin: h:program filesGoogleUpdate1.2.183.17npGoogleOneClick8.dll

—- FIREFOX POLICIES —-
h:program filesMozilla Firefoxgreprefsall.js — pref(«ui.use_native_colors», true);
h:program filesMozilla Firefoxgreprefsall.js — pref(«ui.use_native_popup_windows», false);
h:program filesMozilla Firefoxgreprefsall.js — pref(«browser.enable_click_image_resizing», true);
h:program filesMozilla Firefoxgreprefsall.js — pref(«accessibility.browsewithcaret_shortcut.enabled», true);
h:program filesMozilla Firefoxgreprefsall.js — pref(«javascript.options.mem.high_water_mark», 32);
h:program filesMozilla Firefoxgreprefsall.js — pref(«javascript.options.mem.gc_frequency», 1600);
h:program filesMozilla Firefoxgreprefsall.js — pref(«network.auth.force-generic-ntlm», false);
h:program filesMozilla Firefoxgreprefsall.js — pref(«svg.smil.enabled», false);
h:program filesMozilla Firefoxgreprefsall.js — pref(«ui.trackpoint_hack.enabled», -1);
h:program filesMozilla Firefoxgreprefsall.js — pref(«browser.formfill.debug», false);
h:program filesMozilla Firefoxgreprefsall.js — pref(«browser.formfill.agedWeight», 2);
h:program filesMozilla Firefoxgreprefsall.js — pref(«browser.formfill.bucketSize», 1);
h:program filesMozilla Firefoxgreprefsall.js — pref(«browser.formfill.maxTimeGroupings», 25);
h:program filesMozilla Firefoxgreprefsall.js — pref(«browser.formfill.timeGroupingSize», 604800);
h:program filesMozilla Firefoxgreprefsall.js — pref(«browser.formfill.boundaryWeight», 25);
h:program filesMozilla Firefoxgreprefsall.js — pref(«browser.formfill.prefixWeight», 5);
h:program filesMozilla Firefoxgreprefsall.js — pref(«html5.enable», false);
h:program filesMozilla Firefoxdefaultspreffirefox-branding.js — pref(«app.update.download.backgroundInterval», 600);
h:program filesMozilla Firefoxdefaultspreffirefox-branding.js — pref(«app.update.url.manual», «http://www.firefox.com»);
h:program filesMozilla Firefoxdefaultspreffirefox-branding.js — pref(«browser.search.param.yahoo-fr-ja», «mozff»);
h:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name», «chrome://browser/locale/browser.properties»);
h:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description», «chrome://browser/locale/browser.properties»);
h:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«xpinstall.whitelist.add», «addons.mozilla.org»);
h:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«xpinstall.whitelist.add.36», «getpersonas.com»);
h:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«lightweightThemes.update.enabled», true);
h:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«browser.allTabs.previews», false);
h:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«plugins.hide_infobar_for_outdated_plugin», false);
h:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«plugins.update.notifyUser», false);
h:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«toolbar.customization.usesheet», false);
h:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«browser.taskbar.previews.enable», false);
h:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«browser.taskbar.previews.max», 20);
h:program filesMozilla Firefoxdefaultspreffirefox.js — pref(«browser.taskbar.previews.cachetime», 20);
.
— — — — ORPHANS REMOVED — — — —

HKCU-Run-RGSC — h:program filesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe
HKCU-Run-EA Core — h:program filesElectronic ArtsEADMCore.exe
HKCU-Run-RealJukeboxSystray — h:program filesRealRealJukeboxtsystray.exe
HKCU-Run-AlSrvN — h:program filesAlcohol SoftAlcohol 120PluginsHelperAlSrvN.exe
HKLM-Run-avsys — h:windowssystem32avsys.exe
HKLM-Run-upd32 — h:windowssystem32upd32.exe
HKLM-Run-Microsoft Update Setup — h:windowsjjdrive32.exe
HKLM-Explorer_Run-Microsoft Update Setup — h:windowsjjdrive32.exe
AddRemove-Darkest of Days_is1 — d:dVIDEO_TSНовая папка (3)Darkest of Daysunins000.exe
AddRemove-delete — d:сall of duty modern warfare 2Uninstall.exe
AddRemove-EADM — h:program filesElectronic ArtsEADMUninstall.exe
AddRemove-MyCentria — h:program filesMyCentriaMyCentriaUninstall.exe
AddRemove-RealJukebox 1.0 — h:program filesRealRealJukeboxUpdaternuninst.exe
AddRemove-{19282A44-3FD7-4E9F-A848-F59AD64A0E57}_is1 — d:pcgamePRO EVOLUTION SOCCER 2009unins000.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-16 10:02
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x89E1DCA8]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
DriverDisk -> CLASSPNP.SYS @ 0xba0fcf28
DriverACPI -> ACPI.sys @ 0xb9f7fcb8
Driveratapi -> 0x89e1dca8
IoDeviceObjectType -> DeleteProcedure -> ntkrnlpa.exe @ 0x805836a8
ParseProcedure -> ntkrnlpa.exe @ 0x805827e8
DeviceHarddisk0DR0 -> DeleteProcedure -> ntkrnlpa.exe @ 0x805836a8
ParseProcedure -> ntkrnlpa.exe @ 0x805827e8
NDIS: Realtek RTL8168/8111 PCI-E Gigabit Ethernet NIC -> SendCompleteHandler -> NDIS.sys @ 0xb9cdebb0
PacketIndicateHandler -> NDIS.sys @ 0xb9ceba21
SendHandler -> NDIS.sys @ 0xb9cc987b
Warning: possible MBR rootkit infection !
user & kernel MBR OK

**************************************************************************
.

DLLs Loaded Under Running Processes

— — — — — — — > ‘winlogon.exe'(764)
h:windowssystem32Ati2evxx.dll

— — — — — — — > ‘explorer.exe'(408)
h:windowssystem32WPDShServiceObj.dll
h:windowssystem32PortableDeviceTypes.dll
h:windowssystem32PortableDeviceApi.dll
.

Other Running Processes

.
h:windowssystem32Ati2evxx.exe
h:windowssystem32Ati2evxx.exe
h:windowssystem32CNAB4RPK.EXE
h:program filesCommon FilesAcronisSchedule2schedul2.exe
h:windowssystem32bgsvcgen.exe
h:program filesJavajre6binjqs.exe
h:program filesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
h:windowssystem32wscntfy.exe
h:program filesCommon FilesNokiaMPlatformNokiaMServer.exe
h:windowsRTHDCPL.EXE
h:program filesATI TechnologiesATI.ACECore-StaticMOM.exe
h:program filesATI TechnologiesATI.ACECore-Staticccc.exe
h:program filesNokiaPC Connectivity SolutionServiceLayer.exe
h:program filesNokiaPC Connectivity SolutionTransportsNclUSBSrv.exe
h:program filesNokiaPC Connectivity SolutionTransportsNclRSSrv.exe
.
**************************************************************************
.
Completion time: 2010-03-16 10:08:05 — machine was rebooted
ComboFix-quarantined-files.txt 2010-03-16 07:08

Pre-Run: 6 362 587 136 байт свободно
Post-Run: 6 757 535 744 байт свободно

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)WINDOWS
[operating systems]
h:cmdconsBOOTSECT.DAT=»Microsoft Windows Recovery Console» /cmdcons
multi(0)disk(0)rdisk(0)partition(1)WINDOWS=»Microsoft Windows XP Professional RU» /fastdetect /noexecute=optin

Current=1 Default=1 Failed=0 LastKnownGood=4 Sets=1,2,3,4
— — End Of File — — 5EC151442F97A811D9549DBB2DC7F1FD
9 марта, 2010 в 10:36 пп в ответ на: Не запускается даже безопасный режим #26795
G-Gurda
Participant
- Темы:4
- Сообщений:32
Я просто перетаскиваю образ xpsp3….. на иконку комбофикса))что-то не то?
8 марта, 2010 в 8:57 пп в ответ на: Не запускается даже безопасный режим #26793
G-Gurda
Participant
- Темы:4
- Сообщений:32
заново скачал комбофикс, полностью удалил нод32. та же самая ошибка.
28 февраля, 2010 в 11:40 дп в ответ на: Не запускается даже безопасный режим #26791
G-Gurda
Participant
- Темы:4
- Сообщений:32
перетаскиваю образ на ярлык комбофикс , выдает ошибку cfscript name error where you trying to run cfscript? the name cfscript appears to be incorretly spelt
23 февраля, 2010 в 1:53 пп в ответ на: Не запускается даже безопасный режим #26789
G-Gurda
Participant
- Темы:4
- Сообщений:32
Нет , инет всё еще тупит как и раньше и работает хорошо только минут 5 после каждой перезагрузки.
23 февраля, 2010 в 8:03 дп в ответ на: Не запускается даже безопасный режим #26788
G-Gurda
Participant
- Темы:4
- Сообщений:32
Так ошибки всё еще появляются но хоть итерне заработал с обычной скоростью.

All processes killed
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinad00.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWincf66.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinct77.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWingq55.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinjk33.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinjv66.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinpo00.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinwq55.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinxi66.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinyf00.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinad00.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWincf66.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinct77.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWingq55.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinjk33.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinjv66.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinpo00.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinwq55.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinxi66.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinyf00.sys deleted successfully.
========== FILES ==========
H:WINDOWStasks{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job moved successfully.
H:WINDOWStasks{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 18272455 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: user
->Temp folder emptied: 11862420967 bytes
->Temporary Internet Files folder emptied: 10913230 bytes
->Java cache emptied: 505648 bytes
->FireFox cache emptied: 80462653 bytes
->Google Chrome cache emptied: 5976421 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 6832303 bytes
%systemroot%System32 .tmp files removed: 5274768 bytes
%systemroot%System32dllcache .tmp files removed: 0 bytes
%systemroot%System32drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 19307044 bytes
%systemroot%system32configsystemprofileLocal SettingsTemp folder emptied: 0 bytes
%systemroot%system32configsystemprofileLocal SettingsTemporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 11 454,00 mb

OTM by OldTimer — Version 3.1.9.0 log created on 02232010_105111

Files moved on Reboot…

Registry entries deleted on Reboot…

Logfile of random’s system information tool 1.06 (written by random/random)
Run by user at 2010-02-23 11:01:56
Microsoft Windows XP Professional Service Pack 3
System drive H: has 17 GB (17%) free of 101 GB
Total RAM: 2046 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:02:00, on 23.02.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
H:WINDOWSSystem32smss.exe
H:WINDOWSsystem32winlogon.exe
H:WINDOWSsystem32services.exe
H:WINDOWSsystem32lsass.exe
H:WINDOWSsystem32Ati2evxx.exe
H:WINDOWSsystem32svchost.exe
H:WINDOWSSystem32svchost.exe
H:WINDOWSsystem32svchost.exe
H:WINDOWSsystem32Ati2evxx.exe
H:WINDOWSsystem32spoolsv.exe
H:WINDOWSsystem32CNAB4RPK.EXE
H:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe
H:Program FilesCommon FilesAcronisSchedule2schedul2.exe
H:WINDOWSsystem32bgsvcgen.exe
H:Program FilesJavajre6binjqs.exe
H:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
H:WINDOWSsystem32svchost.exe
H:Program FilesEsetnod32krn.exe
H:WINDOWSsystem32svchost.exe
H:WINDOWSExplorer.EXE
H:WINDOWSsystem32dwwin.exe
H:WINDOWSsystem32wuauclt.exe
H:WINDOWSnotepad.exe
H:Program FilesAcronisTrueImageTrueImageMonitor.exe
H:WINDOWSjjdrive32.exe
H:Program FilesGIGABYTEGESTgest.exe
H:Program FilesCommon FilesAcronisSchedule2schedhlp.exe
H:Program FilesEsetnod32kui.exe
H:Program FilesAdobeReader 9.0ReaderReader_sl.exe
H:Program FilesCommon FilesNokiaMPlatformNokiaMServer.exe
H:Program FilesJavajre6binjusched.exe
H:WINDOWSsystem32dumprep.exe
H:WINDOWSsystem32umdmgr.exe
H:WINDOWSsystem32umdmgr.exe
H:WINDOWSsystem32umdmgr.exe
H:WINDOWSsystem32umdmgr.exe
H:WINDOWSsystem32upd32.exe
H:WINDOWSsystem32umdmgr.exe
H:Program FilesATI TechnologiesATI.ACECore-StaticMOM.exe
H:WINDOWSsystem32avsys.exe
H:WINDOWSRTHDCPL.EXE
H:Program FilesGIGABYTEGESTGSvr.exe
H:WINDOWSsystem32rundll32.exe
H:WINDOWSsystem32umdmgr.exe
H:WINDOWSsystem32umdmgr.exe
H:WINDOWSsystem32.exe
H:WINDOWSsystem32umdmgr.exe
H:WINDOWSsystem32umdmgr.exe
H:WINDOWSsystem32ctfmon.exe
H:Program FilesICQ6.5ICQ.exe
H:WINDOWSsystem32upd32.exe
H:WINDOWSsystem32avsys.exe
H:Program FilesMozilla Firefoxfirefox.exe
H:Program FilesATI TechnologiesATI.ACECore-Staticccc.exe
H:Program FilesNokiaPC Connectivity SolutionServiceLayer.exe
H:Program FilesNokiaPC Connectivity SolutionTransportsNclUSBSrv.exe
H:Program FilesNokiaPC Connectivity SolutionTransportsNclRSSrv.exe
H:WINDOWSsystem32.exe
H:Documents and SettingsuserРабочий столRSIT.exe
H:Program Filestrend microuser.exe

R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
O2 — BHO: CometCursor Class — {1678F7E1-C422-11D0-AD7D-00400515CAAA} — H:WINDOWSsystem32COMET.DLL
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — H:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: RealPlayer Download and Record Plugin for Internet Explorer — {3049C3E9-B461-4BC5-8870-4C09146192CA} — H:Program FilesRealRealPlayerrpbrowserrecordplugin.dll (file missing)
O2 — BHO: Java(tm) Plug-In SSV Helper — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — H:Program FilesJavajre6binssv.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — H:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — H:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O4 — HKLM..Run: [GEST] H:Program FilesGIGABYTEGESTRUN.exe
O4 — HKLM..Run: [JMB36X IDE Setup] H:WINDOWSRaidToolxInsIDE.exe
O4 — HKLM..Run: [36X Raid Configurer] H:WINDOWSsystem32xRaidSetup.exe boot
O4 — HKLM..Run: [Acronis True Image Monitor] «H:Program FilesAcronisTrueImageTrueImageMonitor.exe»
O4 — HKLM..Run: [Acronis Scheduler2 Service] «H:Program FilesCommon FilesAcronisSchedule2schedhlp.exe»
O4 — HKLM..Run: [NeroFilterCheck] H:WINDOWSsystem32NeroCheck.exe
O4 — HKLM..Run: [nod32kui] «H:Program FilesEsetnod32kui.exe» /WAITSERVICE
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «H:Program FilesAdobeReader 9.0ReaderReader_sl.exe»
O4 — HKLM..Run: [QuickTime Task] «H:Program FilesQuickTimeqttask.exe» -atboottime
O4 — HKLM..Run: [NokiaMServer] H:Program FilesCommon FilesNokiaMPlatformNokiaMServer /watchfiles
O4 — HKLM..Run: [Nokia FastStart] «H:Program FilesNokiaNokia MusicNokiaMusic.exe» /command:faststart
O4 — HKLM..Run: [SunJavaUpdateSched] «H:Program FilesJavajre6binjusched.exe»
O4 — HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 — HKLM..Run: [StartCCC] «H:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe» MSRun
O4 — HKLM..Run: [UserFaultCheck] %systemroot%system32dumprep 0 -u
O4 — HKLM..Run: [211] H:WINDOWSsystem32umdmgr.exe
O4 — HKLM..Run: [755] H:WINDOWSsystem32umdmgr.exe
O4 — HKLM..Run: [avsys] H:WINDOWSsystem32avsys.exe
O4 — HKLM..Run: [upd32] H:WINDOWSsystem32upd32.exe
O4 — HKLM..Run: [736] H:WINDOWSsystem32umdmgr.exe
O4 — HKLM..Run: [647] H:WINDOWSsystem32umdmgr.exe
O4 — HKLM..Run: [975] H:WINDOWSsystem32umdmgr.exe
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [508] H:WINDOWSsystem32umdmgr.exe
O4 — HKLM..Run: [466] H:WINDOWSsystem32umdmgr.exe
O4 — HKLM..Run: [] H:WINDOWSsystem32.exe
O4 — HKLM..Run: [095] H:WINDOWSsystem32umdmgr.exe
O4 — HKLM..Run: [936] H:WINDOWSsystem32umdmgr.exe
O4 — HKLM..Run: [Microsoft Update Setup] H:WINDOWSjjdrive32.exe
O4 — HKCU..Run: [CTFMON.EXE] H:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [RGSC] H:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe /silent
O4 — HKCU..Run: [Autochartist] H:Program FilesAutochartistAutochartist_FXCLUB2.exe
O4 — HKCU..Run: [EA Core] «H:Program FilesElectronic ArtsEADMCore.exe» -silent
O4 — HKCU..Run: [RealJukeboxSystray] H:Program FilesRealRealJukeboxtsystray.exe
O4 — HKCU..Run: [AlcoholAutomount] «H:Program FilesAlcohol SoftAlcohol 120axcmd.exe» /automount
O4 — HKCU..Run: [AlSrvN] H:Program FilesAlcohol SoftAlcohol 120PluginsHelperAlSrvN.exe
O4 — HKCU..Run: [ICQ] «H:Program FilesICQ6.5ICQ.exe» silent
O4 — HKCU..Run: [psysnew] C:RECYCLERS-1-5-21-0243556031-888888379-781863308-1455psysnew.exe
O4 — HKLM..PoliciesExplorerRun: [Microsoft Update Setup] H:WINDOWSjjdrive32.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Startup: FIFA 10 Registration.lnk = D:Program FilesEA SportsFIFA 10SupportEAregister.exe
O4 — Startup: Need for Speed™ Undercover — регистрация.lnk = D:Need for Speed UndercoverSupportEAregister.exe
O4 — Global Startup: Nokia Ovi Suite.lnk = H:Program FilesNokiaOviSuiteRunLauncher.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://H:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — H:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} — (no file)
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — H:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — H:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — H:Program FilesICQ6.5ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — H:Program FilesICQ6.5ICQ.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — H:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — H:Program FilesMessengermsmsgs.exe
O16 — DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) — http://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
O17 — HKLMSystemCCSServicesTcpip..{641DB3C5-8660-49BE-A22B-9D95FE173AA3}: NameServer = 91.123.16.120 91.123.16.120
O23 — Service: ABBYY FineReader 9.0 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) — ABBYY (BIT Software) — H:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe
O23 — Service: Acronis Scheduler2 Service (AcrSch2Svc) — Acronis — H:Program FilesCommon FilesAcronisSchedule2schedul2.exe
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — H:WINDOWSsystem32Ati2evxx.exe
O23 — Service: ATI Smart — Unknown owner — H:WINDOWSsystem32ati2sgag.exe
O23 — Service: B’s Recorder GOLD Library General Service (bgsvcgen) — B.H.A Corporation — H:WINDOWSsystem32bgsvcgen.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — H:WINDOWSsystem32services.exe
O23 — Service: GEST Service for program management. (GEST Service) — Unknown owner — H:Program FilesGIGABYTEGESTGSvr.exe
O23 — Service: Служба Google Update (gupdate1ca1104ee4fa4be) (gupdate1ca1104ee4fa4be) — Google Inc. — H:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — H:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — H:WINDOWSsystem32imapi.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — H:Program FilesJavajre6binjqs.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — H:WINDOWSsystem32mnmsrvc.exe
O23 — Service: NOD32 Kernel Service (NOD32krn) — Eset — H:Program FilesEsetnod32krn.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — H:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — H:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — H:WINDOWSSystem32SCardSvr.exe
O23 — Service: ServiceLayer — Nokia. — H:Program FilesNokiaPC Connectivity SolutionServiceLayer.exe
O23 — Service: StarWind AE Service (StarWindServiceAE) — Unknown owner — H:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe (file missing)
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — H:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — H:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — H:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 11235 bytes

======Scheduled tasks folder======

H:WINDOWStasksAppleSoftwareUpdate.job
H:WINDOWStasksGoogleUpdateTaskMachineCore.job
H:WINDOWStasksGoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{1678F7E1-C422-11D0-AD7D-00400515CAAA}]
CometCursor Class — H:WINDOWSsystem32COMET.DLL [2009-10-11 96768]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — H:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer — H:Program FilesRealRealPlayerrpbrowserrecordplugin.dll []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper — H:Program FilesJavajre6binssv.dll [2009-06-09 320920]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — H:Program FilesJavajre6binjp2ssv.dll [2009-06-09 34816]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — H:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2009-06-09 73728]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«GEST»=H:Program FilesGIGABYTEGESTRUN.exe [2007-12-14 236040]
«JMB36X IDE Setup»=H:WINDOWSRaidToolxInsIDE.exe [2007-03-20 36864]
«36X Raid Configurer»=H:WINDOWSsystem32xRaidSetup.exe [2007-08-29 1966080]
«Acronis True Image Monitor»=H:Program FilesAcronisTrueImageTrueImageMonitor.exe [2008-08-26 417536]
«Acronis Scheduler2 Service»=H:Program FilesCommon FilesAcronisSchedule2schedhlp.exe [2008-08-26 61440]
«NeroFilterCheck»=H:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
«nod32kui»=H:Program FilesEsetnod32kui.exe [2008-08-26 949376]
«Adobe Reader Speed Launcher»=H:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2008-06-12 34672]
«QuickTime Task»=H:Program FilesQuickTimeqttask.exe [2008-09-06 413696]
«NokiaMServer»=H:Program FilesCommon FilesNokiaMPlatformNokiaMServer /watchfiles []
«Nokia FastStart»=H:Program FilesNokiaNokia MusicNokiaMusic.exe [2008-12-03 2372840]
«SunJavaUpdateSched»=H:Program FilesJavajre6binjusched.exe [2009-06-09 136600]
«KernelFaultCheck»=H:WINDOWSsystem32dumprep 0 -k []
«StartCCC»=H:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2009-04-28 61440]
«UserFaultCheck»=H:WINDOWSsystem32dumprep 0 -u []
«211»=H:WINDOWSsystem32umdmgr.exe [2010-02-21 196615]
«755»=H:WINDOWSsystem32umdmgr.exe [2010-02-21 196615]
«avsys»=H:WINDOWSsystem32avsys.exe [2010-02-22 221191]
«upd32″=H:WINDOWSsystem32upd32.exe [2010-02-21 221191]
«736»=H:WINDOWSsystem32umdmgr.exe [2010-02-21 196615]
«647»=H:WINDOWSsystem32umdmgr.exe [2010-02-21 196615]
«975»=H:WINDOWSsystem32umdmgr.exe [2010-02-21 196615]
«RTHDCPL»=H:WINDOWSRTHDCPL.EXE [2007-09-19 16844800]
«Alcmtr»=H:WINDOWSALCMTR.EXE [2005-05-03 69632]
«508»=H:WINDOWSsystem32umdmgr.exe [2010-02-21 196615]
«466»=H:WINDOWSsystem32umdmgr.exe [2010-02-21 196615]
«»=H:WINDOWSsystem32.exe [2010-02-22 221191]
«095»=H:WINDOWSsystem32umdmgr.exe [2010-02-21 196615]
«936»=H:WINDOWSsystem32umdmgr.exe [2010-02-21 196615]
«Microsoft Update Setup»=H:WINDOWSjjdrive32.exe [2010-02-23 145927]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerRun]
«Microsoft Update Setup»=H:WINDOWSjjdrive32.exe [2010-02-23 145927]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=H:WINDOWSsystem32ctfmon.exe [2008-04-15 15360]
«RGSC»=H:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe [2008-12-13 306088]
«Autochartist»=H:Program FilesAutochartistAutochartist_FXCLUB2.exe [2010-02-22 4144456]
«EA Core»=H:Program FilesElectronic ArtsEADMCore.exe -silent []
«RealJukeboxSystray»=H:Program FilesRealRealJukeboxtsystray.exe []
«AlcoholAutomount»=H:Program FilesAlcohol SoftAlcohol 120axcmd.exe [2009-04-24 203928]
«AlSrvN»=H:Program FilesAlcohol SoftAlcohol 120PluginsHelperAlSrvN.exe []
«ICQ»=H:Program FilesICQ6.5ICQ.exe [2009-11-16 172792]
«psysnew»=C:RECYCLERS-1-5-21-0243556031-888888379-781863308-1455psysnew.exe [2010-02-23 43008]

H:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
Nokia Ovi Suite.lnk — H:Program FilesNokiaOviSuiteRunLauncher.exe

H:Documents and SettingsuserГлавное менюПрограммыАвтозагрузка
FIFA 10 Registration.lnk — D:Program FilesEA SportsFIFA 10SupportEAregister.exe
Need for Speed™ Undercover — регистрация.lnk — D:Need for Speed UndercoverSupportEAregister.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
H:WINDOWSsystem32Ati2evxx.dll [2009-04-29 155648]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — H:WINDOWSsystem32WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«H:Program FilesGIGABYTEGESTrun.exe»=»H:Program FilesGIGABYTEGESTrun.exe:*:Enabled:update»
«H:Program FilesQIPqip.exe»=»H:Program FilesQIPqip.exe:*:Enabled:Quiet Internet Pager»
«H:WINDOWSsystem32qeulb.exe»=»H:WINDOWSsystem32qeulb.exe:*:Enabled:ENABLE»
«H:Program FilesAkella GamesTest Drive UnlimitedTestDriveUnlimited.exe»=»H:Program FilesAkella GamesTest Drive UnlimitedTestDriveUnlimited.exe:*:Enabled:Test Drive Unlimited»
«H:WINDOWSsystem32PnkBstrA.exe»=»H:WINDOWSsystem32PnkBstrA.exe:*:Enabled:PnkBstrA»
«H:WINDOWSsystem32PnkBstrB.exe»=»H:WINDOWSsystem32PnkBstrB.exe:*:Enabled:PnkBstrB»
«H:Documents and Settingsuserhskjh.exe»=»H:Documents and Settingsuserhskjh.exe:*:Enabled:ENABLE»
«H:WINDOWSsystem32CNAB4RPK.EXE»=»H:WINDOWSsystem32CNAB4RPK.EXE:*:Disabled:Canon LBP2900 RPC Server Process»
«H:Program FilesTVUPlayerTVUPlayer.exe»=»H:Program FilesTVUPlayerTVUPlayer.exe:*:Enabled:TVUPlayer Component»
«H:Program FilesInternet ExplorerIEXPLORE.EXE»=»H:Program FilesInternet ExplorerIEXPLORE.EXE:*:Enabled:Internet Explorer»
«H:Program FilesSopCastSopCast.exe»=»H:Program FilesSopCastSopCast.exe:*:Enabled:SopCast Main Application»
«H:Program FilesSopCastadvSopAdver.exe»=»H:Program FilesSopCastadvSopAdver.exe:*:Enabled:SopCast Adver»
«H:Program FilesTVAntsTvants.exe»=»H:Program FilesTVAntsTvants.exe:*:Enabled:TVAnts»
«H:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbinxrEngine.exe»=»H:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbinxrEngine.exe:*:Enabled:С.Т.А.Л.К.Е.Р. — Чистое Небо (CLI)»
«H:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbindedicatedxrEngine.exe»=»H:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbindedicatedxrEngine.exe:*:Enabled:С.Т.А.Л.К.Е.Р. — Чистое Небо (SRV)»
«C:1243124TestDriveUnlimited.exe»=»C:1243124TestDriveUnlimited.exe:*:Enabled:Test Drive Unlimited»
«D:Electronic ArtsDead SpaceDead Space.exe»=»D:Electronic ArtsDead SpaceDead Space.exe:*:Enabled:Dead Space ™»
«D:White GoldXenus.exe»=»D:White GoldXenus.exe:*:Disabled:Executable»
«H:Program FilesSmall RocketsRed Ace Squadronacenet_server_release.exe»=»H:Program FilesSmall RocketsRed Ace Squadronacenet_server_release.exe:*:Enabled:server»
«H:WINDOWSsystem32dplaysvr.exe»=»H:WINDOWSsystem32dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«D:Astrum Online EntertainmentВластелин Колец Онлайнlotroclient.exe»=»D:Astrum Online EntertainmentВластелин Колец Онлайнlotroclient.exe:*:Enabled:lotroclient»
«H:Program FilesuTorrentutorrent.exe»=»H:Program FilesuTorrentutorrent.exe:*:Enabled:µTorrent»
«C:Program FilesSteamsteam.exe»=»C:Program FilesSteamsteam.exe:*:Enabled:Steam»
«D:PCGAMEPRO EVOLUTION SOCCER 2009pes2009.exe»=»D:PCGAMEPRO EVOLUTION SOCCER 2009pes2009.exe:*:Enabled:Pro Evolution Soccer 2009»
«C:Delta Force Xtreme 2 BETADFX2BETA.EXE»=»C:Delta Force Xtreme 2 BETADFX2BETA.EXE:*:Enabled:Delta Force Xtreme 2 BETA»
«C:Delta Force Xtreme 2 BETAUPDATE.EXE»=»C:Delta Force Xtreme 2 BETAUPDATE.EXE:*:Enabled:Delta Force Xtreme 2 BETA»
«H:Program FilesICQ6.5ICQ.exe»=»H:Program FilesICQ6.5ICQ.exe:*:Enabled:ICQ6»
«H:Program FilesElectronic ArtsEADMCore.exe»=»H:Program FilesElectronic ArtsEADMCore.exe:*:Enabled:EA Download Manager»
«H:Program FilesLimeWireLimeWire.exe»=»H:Program FilesLimeWireLimeWire.exe:*:Enabled:LimeWire»
«H:Program FileseMuleemule.exe»=»H:Program FileseMuleemule.exe:*:Enabled:eMule»
«D:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe»=»D:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe:*:Enabled:Rockstar Games Social Club»
«H:FlylinkDC++FlylinkDC.exe»=»H:FlylinkDC++FlylinkDC.exe:*:Enabled:FlylinkDC++»
«H:Program FilesUbisoftTransmission GamesHeroes Over Europeheroes2.exe»=»H:Program FilesUbisoftTransmission GamesHeroes Over Europeheroes2.exe:*:Enabled:heroes2»
«H:Program FilesRealRealPlayerrealplay.exe»=»H:Program FilesRealRealPlayerrealplay.exe:*:Enabled:RealPlayer»
«D:Program FilesPro Evolution Soccer 2010pes2010.exe»=»D:Program FilesPro Evolution Soccer 2010pes2010.exe:*:Enabled:Pro Evolution Soccer 2010»
«D:Rockstar GamesGrand Theft Auto IVLaunchGTAIV.exe»=»D:Rockstar GamesGrand Theft Auto IVLaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV»
«D:Rockstar GamesGrand Theft Auto IVGTAIV.exe»=»D:Rockstar GamesGrand Theft Auto IVGTAIV.exe:*:Enabled:Grand Theft Auto IV»
«H:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe»=»H:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe:*:Enabled:Rockstar Games Social Club»
«H:Program FilesSkypePlugin ManagerskypePM.exe»=»H:Program FilesSkypePlugin ManagerskypePM.exe:*:Enabled:Skype Extras Manager»
«D:Program FilesRockstar GamesGrand Theft Auto IVGTAIV.exe»=»D:Program FilesRockstar GamesGrand Theft Auto IVGTAIV.exe:*:Enabled:Grand Theft Auto IV»
«H:Program FilesSteamSteam.exe»=»H:Program FilesSteamSteam.exe:*:Enabled:Steam»
«D:Сall of Duty Modern Warfare 2iw4mp.exe»=»D:Сall of Duty Modern Warfare 2iw4mp.exe:*:Enabled:iw4mp»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»

======List of files/folders created in the last 1 months======

2010-02-23 10:51:11 —-D—- H:_OTM
2010-02-22 16:25:31 —-A—- H:WINDOWSsystem32.exe
2010-02-22 15:37:35 —-D—- H:WINDOWSPrefetch
2010-02-22 15:30:35 —-RAH—- H:WINDOWSsystem32logonui.exe.manifest
2010-02-22 15:24:25 —-A—- H:WINDOWSpnplog.txt
2010-02-22 15:16:17 —-A—- H:WINDOWSsystem32irclass.dll
2010-02-22 15:16:16 —-A—- H:WINDOWSsystem32spxcoins.dll
2010-02-22 14:49:25 —-SH—- H:BOOT.BAK
2010-02-22 14:49:12 —-A—- H:WINDOWSUPGRADE.TXT
2010-02-22 14:49:09 —-D—- H:WINDOWSsetup.pss
2010-02-22 12:17:05 —-A—- H:WINDOWSsystem32avsys.exe
2010-02-21 18:08:42 —-A—- H:WINDOWSsystem32upd32.exe
2010-02-21 17:59:56 —-A—- H:WINDOWSsystem32umdmgr.exe
2010-02-19 21:16:20 —-RSH—- H:WINDOWSjjdrive32.exe
2010-02-19 21:16:05 —-RSH—- H:WINDOWSccdrive32.exe
2010-02-19 21:15:56 —-D—- H:Program Filestrend micro
2010-02-19 21:15:54 —-D—- H:rsit
2010-02-19 20:31:11 —-A—- H:WINDOWSsystem32msvmcls64.exe
2010-02-19 19:51:13 —-A—- H:WINDOWSsystem32wmpns.dll
2010-02-13 22:35:20 —-A—- H:WINDOWSsystem3212.exe
2010-02-13 22:22:42 —-A—- H:WINDOWSsystem320.exe
2010-02-13 21:06:29 —-A—- H:WINDOWSpothead.txt
2010-02-13 21:06:24 —-A—- H:WINDOWSsystem3233.exe
2010-02-13 21:06:11 —-RSH—- H:WINDOWSacp.exe
2010-02-13 21:06:08 —-A—- H:WINDOWSsystem32dh.exe
2010-02-13 21:00:30 —-A—- H:WINDOWSsystem3246.exe
2010-02-13 20:36:30 —-A—- H:WINDOWSsystem3241.exe
2010-02-13 20:06:21 —-A—- H:WINDOWSsystem32sshnas21.dll
2010-02-09 17:34:45 —-D—- H:Documents and SettingsuserApplication DataPlayFirst
2010-02-09 17:34:45 —-D—- H:Documents and SettingsAll UsersApplication DataPlayFirst
2010-02-07 20:43:35 —-A—- H:WINDOWSsystem32netprotocol.dll
2010-02-07 16:09:47 —-D—- H:Program FilesBaldaWin Demo
2010-01-31 15:39:00 —-D—- H:Documents and SettingsuserApplication DataEltima Software
2010-01-31 15:37:23 —-D—- H:Program FilesEltima Software
2010-01-27 14:16:14 —-D—- H:Program FilesElectronic Arts
2010-01-25 22:13:02 —-D—- H:Program FilesSteam
2010-01-24 22:38:55 —-D—- H:WINDOWSsystem32AGEIA
2010-01-24 22:38:53 —-D—- H:Program FilesAGEIA Technologies

======List of files/folders modified in the last 1 months======

2010-02-23 11:01:57 —-D—- H:WINDOWSTemp
2010-02-23 10:59:09 —-D—- H:Program FilesAutochartist
2010-02-23 10:52:23 —-D—- H:WINDOWSsystem32
2010-02-23 10:52:23 —-D—- H:WINDOWS
2010-02-23 10:51:12 —-SD—- H:WINDOWSTasks
2010-02-23 10:35:44 —-A—- H:WINDOWSSchedLgU.Txt
2010-02-23 10:33:43 —-D—- H:Documents and SettingsuserApplication DatauTorrent
2010-02-23 00:10:42 —-A—- H:WINDOWSNeroDigital.ini
2010-02-22 18:58:27 —-D—- H:Новая папка
2010-02-22 18:13:57 —-SH—- H:boot.ini
2010-02-22 18:13:27 —-D—- H:WINDOWSsystem
2010-02-22 18:13:26 —-D—- H:WINDOWSsystem32Setup
2010-02-22 18:13:25 —-D—- H:WINDOWSHelp
2010-02-22 18:13:20 —-D—- H:WINDOWSl2schemas
2010-02-22 18:13:19 —-D—- H:WINDOWSsystem32usmt
2010-02-22 18:13:19 —-D—- H:WINDOWSsystem32drivers
2010-02-22 18:13:12 —-D—- H:WINDOWSAppPatch
2010-02-22 18:13:11 —-D—- H:WINDOWSehome
2010-02-22 18:13:10 —-D—- H:WINDOWSime
2010-02-22 18:13:09 —-RSD—- H:WINDOWSFonts
2010-02-22 18:13:09 —-D—- H:WINDOWSMedia
2010-02-22 18:13:08 —-D—- H:WINDOWSnetwork diagnostic
2010-02-22 18:13:06 —-D—- H:WINDOWSsystem32ru-ru
2010-02-22 18:12:57 —-D—- H:WINDOWSPeerNet
2010-02-22 18:12:44 —-D—- H:WINDOWSsystem32npp
2010-02-22 18:12:38 —-D—- H:WINDOWSmsagent
2010-02-22 18:12:34 —-D—- H:WINDOWSsystem32ru
2010-02-22 18:10:21 —-D—- H:WINDOWSsystem321049
2010-02-22 18:10:10 —-D—- H:WINDOWStwain_32
2010-02-22 18:09:40 —-D—- H:WINDOWSsystem32icsxml
2010-02-22 18:09:14 —-D—- H:WINDOWSsystem32ias
2010-02-22 18:09:11 —-D—- H:WINDOWSsystem321033
2010-02-22 18:08:33 —-D—- H:WINDOWSDriver Cache
2010-02-22 15:45:57 —-A—- H:WINDOWSsystem32PerfStringBackup.INI
2010-02-22 15:45:27 —-D—- H:WINDOWSRegistration
2010-02-22 15:44:53 —-D—- H:WINDOWSsystem32CatRoot2
2010-02-22 15:44:51 —-HD—- H:WINDOWSinf
2010-02-22 15:44:48 —-A—- H:WINDOWSsetuplog.txt
2010-02-22 15:37:54 —-SHD—- H:System Volume Information
2010-02-22 15:37:54 —-D—- H:WINDOWSsystem32Restore
2010-02-22 15:35:48 —-D—- H:WINDOWSsystem32config
2010-02-22 15:34:09 —-RSHDC—- H:WINDOWSsystem32dllcache
2010-02-22 15:32:10 —-D—- H:WINDOWSsecurity
2010-02-22 15:31:33 —-A—- H:WINDOWSOEWABLog.txt
2010-02-22 15:31:26 —-A—- H:WINDOWSODBCINST.INI
2010-02-22 15:30:38 —-RD—- H:WINDOWSWeb
2010-02-22 15:30:38 —-RD—- H:Program Files
2010-02-22 15:30:30 —-RAH—- H:WINDOWSsystem32cdplayer.exe.manifest
2010-02-22 15:30:19 —-A—- H:WINDOWSwin.ini
2010-02-22 15:30:13 —-D—- H:WINDOWSsystem32oobe
2010-02-22 15:29:29 —-D—- H:WINDOWSsystem32Com
2010-02-22 15:29:01 —-D—- H:WINDOWSsystem32wbem
2010-02-22 15:16:21 —-A—- H:WINDOWSsystem.ini
2010-02-22 15:16:08 —-ASH—- H:Documents and SettingsAll UsersApplication Datadesktop.ini
2010-02-22 15:16:03 —-D—- H:WINDOWSsystem32CatRoot
2010-02-22 11:53:57 —-D—- H:Program FilesMozilla Firefox
2010-02-22 11:38:09 —-SHD—- H:WINDOWSInstaller
2010-02-22 11:38:08 —-D—- H:Config.Msi
2010-02-22 11:37:36 —-D—- H:Program FilesCommon Files
2010-02-22 11:37:36 —-D—- H:Documents and SettingsAll UsersApplication DataSkype
2010-02-22 11:04:06 —-D—- H:Documents and SettingsuserApplication DataskypePM
2010-02-19 21:03:06 —-D—- H:FlylinkDC++
2010-02-19 20:58:56 —-D—- H:Program FilesTeorex Inpaint
2010-02-19 20:58:55 —-D—- H:Program FilesReal Alternative
2010-02-19 20:58:51 —-D—- H:Program FilesMetaTrader — Alpari
2010-02-19 20:58:50 —-D—- H:Program FilesMessenger
2010-02-19 20:58:49 —-D—- H:Program FilesA-one Video Convertor
2010-02-19 20:58:47 —-D—- H:Program FilesDivX
2010-02-19 20:36:21 —-D—- H:Program FilesAll Office Converter Platinum
2010-02-19 19:54:37 —-A—- H:WINDOWSimsins.BAK
2010-02-13 22:35:33 —-SHD—- H:RECYCLER
2010-02-12 09:10:50 —-D—- H:Documents and SettingsuserApplication DataDivX
2010-02-11 14:42:28 —-D—- H:Program FilesuTorrent
2010-02-09 17:13:50 —-D—- H:Program FilesGames
2010-02-06 18:54:02 —-HD—- H:Program FilesInstallShield Installation Information
2010-02-06 18:45:43 —-D—- H:WINDOWSsystem32DirectX
2010-02-06 18:45:42 —-RSD—- H:WINDOWSassembly
2010-02-02 13:35:47 —-D—- H:Documents and SettingsuserApplication Datadvdcss
2010-01-31 17:49:43 —-A—- H:WINDOWSntbtlog.txt
2010-01-29 19:54:41 —-SD—- H:Documents and SettingsAll UsersApplication DataMicrosoft
2010-01-29 19:54:39 —-SD—- H:Documents and SettingsuserApplication DataMicrosoft
2010-01-29 19:54:30 —-D—- H:WINDOWSWinSxS
2010-01-24 22:59:20 —-D—- H:Program FilesGamesTopDownloads
2010-01-24 22:38:02 —-D—- H:Program FilesCommon FilesWise Installation Wizard
2010-01-24 16:45:30 —-A—- H:WINDOWSsystem32PnkBstrB.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 cdrbsdrv;cdrbsdrv; H:WINDOWSsystem32driverscdrbsdrv.sys [2006-02-20 33408]
R1 intelppm;Драйвер Intel процессора; H:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-15 40704]
R1 nod32drv;nod32drv; H:WINDOWSsystem32driversnod32drv.sys [2008-08-26 15424]
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; H:WINDOWSSystem32driversws2ifsl.sys [2008-04-15 12032]
R2 AMON;AMON; H:WINDOWSsystem32driversamon.sys [2008-08-26 512096]
R2 tifsfilter;Acronis TrueImage FS Filter; H:WINDOWSsystem32DRIVERStifsfilt.sys [2008-08-26 28096]
R3 ati2mtag;ati2mtag; H:WINDOWSsystem32DRIVERSati2mtag.sys [2009-04-29 3643904]
R3 AtiHdmiService;ATI Function Driver for HDMI Service; H:WINDOWSsystem32driversAtiHdmi.sys [2009-04-01 93184]
R3 ET5Drv;ET5Drv; ??H:WINDOWSsystem32DriversET5Drv.sys []
R3 gdrv;gdrv; ??H:WINDOWSgdrv.sys []
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; H:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-15 144384]
R3 HidUsb;Драйвер класса HID Microsoft; H:WINDOWSsystem32DRIVERShidusb.sys [2008-04-15 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); H:WINDOWSsystem32driversRtkHDAud.sys [2007-09-19 4617728]
R3 mouhid;Драйвер мыши HID; H:WINDOWSsystem32DRIVERSmouhid.sys [2008-04-15 12160]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; H:WINDOWSsystem32DRIVERSRtenicxp.sys [2007-12-05 104064]
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); H:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-15 32128]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; H:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-15 30208]
R3 usbhub;USB2 концентратор; H:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbstor;Драйвер запоминающих устройств для USB; H:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-15 26368]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; H:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-15 20608]
S3 nmwcd;Nokia USB Phone Parent; H:WINDOWSsystem32driversccdcmb.sys [2008-05-07 17536]
S3 pccsmcfd;PCCS Mode Change Filter Driver; H:WINDOWSsystem32DRIVERSpccsmcfd.sys [2008-08-26 18816]
S3 usbprint;Класс принтеров Microsoft USB; H:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-14 25856]
S3 usbscan;Драйвер USB-сканера; H:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
S3 Wdf01000;Wdf01000; H:WINDOWSsystem32DRIVERSWdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; H:WINDOWSsystem32DRIVERSwpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; H:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; H:WINDOWSsystem32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service; H:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe [2007-12-06 660768]
R2 AcrSch2Svc;Acronis Scheduler2 Service; H:Program FilesCommon FilesAcronisSchedule2schedul2.exe [2008-08-26 122880]
R2 Ati HotKey Poller;Ati HotKey Poller; H:WINDOWSsystem32Ati2evxx.exe [2009-04-29 602112]
R2 bgsvcgen;B’s Recorder GOLD Library General Service; H:WINDOWSsystem32bgsvcgen.exe [2007-06-15 145504]
R2 JavaQuickStarterService;Java Quick Starter; H:Program FilesJavajre6binjqs.exe [2009-06-09 152984]
R2 MDM;Machine Debug Manager; H:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-19 322120]
R2 Netprotocol;Network Protocol Driver; H:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R2 NOD32krn;NOD32 Kernel Service; H:Program FilesEsetnod32krn.exe [2008-08-26 552064]
R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; H:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; H:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2006-10-20 36864]
R3 GEST Service;GEST Service for program management.; H:Program FilesGIGABYTEGESTGSvr.exe [2007-12-14 47624]
R3 ServiceLayer;ServiceLayer; H:Program FilesNokiaPC Connectivity SolutionServiceLayer.exe [2008-09-08 575488]
S2 ATI Smart;ATI Smart; H:WINDOWSsystem32ati2sgag.exe [2009-04-28 593920]
S2 gupdate1ca1104ee4fa4be;Служба Google Update (gupdate1ca1104ee4fa4be); H:Program FilesGoogleUpdateGoogleUpdate.exe [2009-07-30 133104]
S2 SSHNAS;SSHNAS; H:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S2 StarWindServiceAE;StarWind AE Service; H:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe []
S3 aspnet_state;ASP.NET State Service; H:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; H:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 IDriverT;InstallDriver Table Manager; H:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; H:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2006-10-30 741376]
S3 ose;Office Source Engine; H:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; H:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2006-10-30 122880]

EOF
22 февраля, 2010 в 12:58 пп в ответ на: Не запускается даже безопасный режим #26786
G-Gurda
Participant
- Темы:4
- Сообщений:32
Люди! Помогите пожалуйста. У меня нет вирусов уже никаких винду 2 раза переустановил а инет на любом браузере нереально тормозит а чаще не грузится вообще (хотя торренты залетают с обычно приличной скоростью) и тут не в поставщике услуг дело. И вот еще какой момент- нажмаю C-A-D у меня яко,ы запущены какие-то проги FSD и CSA и еще у меня ошибка- предотвращение выполнения данных- имя- Generic host for Win32 Servicies.
19 февраля, 2010 в 6:30 пп в ответ на: Не запускается даже безопасный режим #26785
G-Gurda
Participant
- Темы:4
- Сообщений:32
Так я поставил заново винду. Но теперь у меня ужастно всё притормаживает особенно firefox.
Как мне быть?

Logfile of random’s system information tool 1.06 (written by random/random)
Run by user at 2010-02-19 21:15:54
Microsoft Windows XP Professional Service Pack 3
System drive H: has 2 GB (2%) free of 101 GB
Total RAM: 2046 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:16:41, on 19.02.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
H:WINDOWSSystem32smss.exe
H:WINDOWSsystem32winlogon.exe
H:WINDOWSsystem32services.exe
H:WINDOWSsystem32lsass.exe
H:WINDOWSsystem32Ati2evxx.exe
H:WINDOWSsystem32svchost.exe
H:WINDOWSSystem32svchost.exe
H:WINDOWSsystem32svchost.exe
H:WINDOWSsystem32Ati2evxx.exe
H:WINDOWSsystem32spoolsv.exe
H:WINDOWSExplorer.EXE
H:WINDOWSTEMPZfx.exe
H:WINDOWSTEMPZfw.exe
H:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe
H:Program FilesAcronisTrueImageTrueImageMonitor.exe
H:Program FilesCommon FilesAcronisSchedule2schedhlp.exe
H:Program FilesGIGABYTEGESTGEST.exe
H:WINDOWSsystem32driversCbfgm.exe
H:Program FilesAdobeReader 9.0ReaderReader_sl.exe
H:Program FilesCommon FilesNokiaMPlatformNokiaMServer.exe
H:Program FilesNokiaNokia MusicNokiaMusic.exe
H:Program FilesJavajre6binjusched.exe
H:WINDOWSRTHDCPL.EXE
H:Program FilesATI TechnologiesATI.ACECore-StaticMOM.exe
H:WINDOWSacp.exe
H:WINDOWSsystem32ctfmon.exe
H:WINDOWSsystem32msvmcls64.exe
H:Program FilesCommon FilesAcronisSchedule2schedul2.exe
H:WINDOWSsystem32CNAB4RPK.EXE
H:WINDOWSsystem32bgsvcgen.exe
H:Program FilesJavajre6binjqs.exe
H:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
H:WINDOWSsystem32svchost.exe
H:Program FilesEsetnod32krn.exe
H:WINDOWSsystem32svchost.exe
H:Program FilesATI TechnologiesATI.ACECore-Staticccc.exe
H:Program FilesGIGABYTEGESTGSvr.exe
H:WINDOWSsystem32wuauclt.exe
H:WINDOWSsystem32dwwin.exe
H:Program FilesMozilla Firefoxfirefox.exe
H:Documents and SettingsuserРабочий столRSIT.exe
H:WINDOWSccdrive32.exe
H:WINDOWSjjdrive32.exe
H:Program Filestrend microuser.exe
H:Program FilesSkypeToolbarsSharedSkypeNames.exe

R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
F2 — REG:system.ini: UserInit=H:WINDOWSsystem32userinit.exe,H:Documents and Settingsuserhskjh.exe s
O1 — Hosts: 195.82.147.147 pornolab.net static.pornolab.net
O1 — Hosts: 195.82.147.120 bt.pornolab.net
O1 — Hosts: 195.82.147.147 pornolab.net
O1 — Hosts: 195.82.147.147 static.pornolab.net
O1 — Hosts: 195.82.147.147 bt.pornolab.net
O2 — BHO: CometCursor Class — {1678F7E1-C422-11D0-AD7D-00400515CAAA} — H:WINDOWSsystem32COMET.DLL
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — H:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: RealPlayer Download and Record Plugin for Internet Explorer — {3049C3E9-B461-4BC5-8870-4C09146192CA} — H:Program FilesRealRealPlayerrpbrowserrecordplugin.dll (file missing)
O2 — BHO: Java(tm) Plug-In SSV Helper — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — H:Program FilesJavajre6binssv.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — H:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — H:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O4 — HKLM..Run: [GEST] H:Program FilesGIGABYTEGESTRUN.exe
O4 — HKLM..Run: [JMB36X IDE Setup] H:WINDOWSRaidToolxInsIDE.exe
O4 — HKLM..Run: [36X Raid Configurer] H:WINDOWSsystem32xRaidSetup.exe boot
O4 — HKLM..Run: [Acronis True Image Monitor] «H:Program FilesAcronisTrueImageTrueImageMonitor.exe»
O4 — HKLM..Run: [Acronis Scheduler2 Service] «H:Program FilesCommon FilesAcronisSchedule2schedhlp.exe»
O4 — HKLM..Run: [NeroFilterCheck] H:WINDOWSsystem32NeroCheck.exe
O4 — HKLM..Run: [nod32kui] «H:Program FilesEsetnod32kui.exe» /WAITSERVICE
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «H:Program FilesAdobeReader 9.0ReaderReader_sl.exe»
O4 — HKLM..Run: [advap32] «H:Documents and SettingsuserРабочий стол.//..//drwvas.exe» /r
O4 — HKLM..Run: [QuickTime Task] «H:Program FilesQuickTimeqttask.exe» -atboottime
O4 — HKLM..Run: [NokiaMServer] H:Program FilesCommon FilesNokiaMPlatformNokiaMServer /watchfiles
O4 — HKLM..Run: [Nokia FastStart] «H:Program FilesNokiaNokia MusicNokiaMusic.exe» /command:faststart
O4 — HKLM..Run: [SunJavaUpdateSched] «H:Program FilesJavajre6binjusched.exe»
O4 — HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 — HKLM..Run: [StartCCC] «H:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe» MSRun
O4 — HKLM..Run: [UserFaultCheck] %systemroot%system32dumprep 0 -u
O4 — HKLM..Run: [Microsoft Driver Setup] H:WINDOWSccdrive32.exe
O4 — HKLM..Run: [Windows System Info Serivce] acp.exe
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [MS Virtual CLS] H:WINDOWSsystem32msvmcls64.exe
O4 — HKLM..Run: [Microsoft Update Setup] H:WINDOWSjjdrive32.exe
O4 — HKCU..Run: [CTFMON.EXE] H:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [RGSC] H:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe /silent
O4 — HKCU..Run: [Autochartist] H:Program FilesAutochartistAutochartist_FXCLUB2.exe
O4 — HKCU..Run: [EA Core] «H:Program FilesElectronic ArtsEADMCore.exe» -silent
O4 — HKCU..Run: [RealJukeboxSystray] H:Program FilesRealRealJukeboxtsystray.exe
O4 — HKCU..Run: [AlcoholAutomount] «H:Program FilesAlcohol SoftAlcohol 120axcmd.exe» /automount
O4 — HKCU..Run: [AlSrvN] H:Program FilesAlcohol SoftAlcohol 120PluginsHelperAlSrvN.exe
O4 — HKCU..Run: [ICQ] «H:Program FilesICQ6.5ICQ.exe» silent
O4 — HKCU..Run: [Skype] «H:Program FilesSkypePhoneSkype.exe» /nosplash /minimized
O4 — HKCU..Run: [Steam] «H:Program FilesSteamSteam.exe» -silent
O4 — HKCU..Run: [psuu4] C:RECYCLERS-1-5-21-0243556031-888888379-781863308-1455psyu44.exe
O4 — HKCU..Run: [psysnew] C:RECYCLERS-1-5-21-0243556031-888888379-781863308-1455psysnew.exe
O4 — HKLM..PoliciesExplorerRun: [Microsoft Driver Setup] H:WINDOWSccdrive32.exe
O4 — HKLM..PoliciesExplorerRun: [Microsoft Update Setup] H:WINDOWSjjdrive32.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Startup: FIFA 10 Registration.lnk = D:Program FilesEA SportsFIFA 10SupportEAregister.exe
O4 — Startup: Need for Speed™ Undercover — регистрация.lnk = D:Need for Speed UndercoverSupportEAregister.exe
O4 — Global Startup: Nokia Ovi Suite.lnk = H:Program FilesNokiaOviSuiteRunLauncher.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://H:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — H:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} — (no file)
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — H:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — H:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — H:Program FilesICQ6.5ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — H:Program FilesICQ6.5ICQ.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — H:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — H:Program FilesMessengermsmsgs.exe
O16 — DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) — http://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
O17 — HKLMSystemCCSServicesTcpip..{641DB3C5-8660-49BE-A22B-9D95FE173AA3}: NameServer = 91.123.16.120 91.189.240.28
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — H:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 — Winlogon Notify: WinCtrl32 — WinCtrl32.dll (file missing)
O23 — Service: ABBYY FineReader 9.0 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) — ABBYY (BIT Software) — H:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe
O23 — Service: Acronis Scheduler2 Service (AcrSch2Svc) — Acronis — H:Program FilesCommon FilesAcronisSchedule2schedul2.exe
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — H:WINDOWSsystem32Ati2evxx.exe
O23 — Service: ATI Smart — Unknown owner — H:WINDOWSsystem32ati2sgag.exe
O23 — Service: B’s Recorder GOLD Library General Service (bgsvcgen) — B.H.A Corporation — H:WINDOWSsystem32bgsvcgen.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — H:WINDOWSsystem32services.exe
O23 — Service: GEST Service for program management. (GEST Service) — Unknown owner — H:Program FilesGIGABYTEGESTGSvr.exe
O23 — Service: Служба Google Update (gupdate1ca1104ee4fa4be) (gupdate1ca1104ee4fa4be) — Google Inc. — H:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — H:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — H:WINDOWSsystem32imapi.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — H:Program FilesJavajre6binjqs.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — H:WINDOWSsystem32mnmsrvc.exe
O23 — Service: NOD32 Kernel Service (NOD32krn) — Eset — H:Program FilesEsetnod32krn.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — H:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — H:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — H:WINDOWSSystem32SCardSvr.exe
O23 — Service: ServiceLayer — Nokia. — H:Program FilesNokiaPC Connectivity SolutionServiceLayer.exe
O23 — Service: StarWind AE Service (StarWindServiceAE) — Unknown owner — H:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe (file missing)
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — H:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — H:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — H:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 11163 bytes

======Scheduled tasks folder======

H:WINDOWStasksAppleSoftwareUpdate.job
H:WINDOWStasksGoogleUpdateTaskMachineCore.job
H:WINDOWStasksGoogleUpdateTaskMachineUA.job
H:WINDOWStasks{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
H:WINDOWStasks{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{1678F7E1-C422-11D0-AD7D-00400515CAAA}]
CometCursor Class — H:WINDOWSsystem32COMET.DLL [2009-10-11 96768]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — H:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer — H:Program FilesRealRealPlayerrpbrowserrecordplugin.dll []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper — H:Program FilesJavajre6binssv.dll [2009-06-09 320920]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — H:Program FilesJavajre6binjp2ssv.dll [2009-06-09 34816]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — H:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2009-06-09 73728]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«GEST»=H:Program FilesGIGABYTEGESTRUN.exe [2007-12-14 236040]
«JMB36X IDE Setup»=H:WINDOWSRaidToolxInsIDE.exe [2007-03-20 36864]
«36X Raid Configurer»=H:WINDOWSsystem32xRaidSetup.exe [2007-08-29 1966080]
«Acronis True Image Monitor»=H:Program FilesAcronisTrueImageTrueImageMonitor.exe [2008-08-26 417536]
«Acronis Scheduler2 Service»=H:Program FilesCommon FilesAcronisSchedule2schedhlp.exe [2008-08-26 61440]
«NeroFilterCheck»=H:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
«nod32kui»=H:Program FilesEsetnod32kui.exe [2008-08-26 949376]
«Adobe Reader Speed Launcher»=H:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2008-06-12 34672]
«advap32″=H:Documents and SettingsuserРабочий стол.//..//drwvas.exe /r []
«QuickTime Task»=H:Program FilesQuickTimeqttask.exe [2008-09-06 413696]
«NokiaMServer»=H:Program FilesCommon FilesNokiaMPlatformNokiaMServer /watchfiles []
«Nokia FastStart»=H:Program FilesNokiaNokia MusicNokiaMusic.exe [2008-12-03 2372840]
«SunJavaUpdateSched»=H:Program FilesJavajre6binjusched.exe [2009-06-09 136600]
«KernelFaultCheck»=H:WINDOWSsystem32dumprep 0 -k []
«StartCCC»=H:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2009-04-28 61440]
«UserFaultCheck»=H:WINDOWSsystem32dumprep 0 -u []
«Microsoft Driver Setup»=H:WINDOWSccdrive32.exe [2010-02-19 178695]
«Windows System Info Serivce»=H:WINDOWSacp.exe [2010-02-13 139264]
«RTHDCPL»=H:WINDOWSRTHDCPL.EXE [2007-09-19 16844800]
«Alcmtr»=H:WINDOWSALCMTR.EXE [2005-05-03 69632]
«MS Virtual CLS»=H:WINDOWSsystem32msvmcls64.exe [2010-02-19 206848]
«Microsoft Update Setup»=H:WINDOWSjjdrive32.exe [2010-02-19 178695]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerRun]
«Microsoft Driver Setup»=H:WINDOWSccdrive32.exe [2010-02-19 178695]
«Microsoft Update Setup»=H:WINDOWSjjdrive32.exe [2010-02-19 178695]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=H:WINDOWSsystem32ctfmon.exe [2008-04-15 15360]
«RGSC»=H:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe [2008-12-13 306088]
«Autochartist»=H:Program FilesAutochartistAutochartist_FXCLUB2.exe [2009-05-06 4297216]
«EA Core»=H:Program FilesElectronic ArtsEADMCore.exe -silent []
«RealJukeboxSystray»=H:Program FilesRealRealJukeboxtsystray.exe []
«AlcoholAutomount»=H:Program FilesAlcohol SoftAlcohol 120axcmd.exe [2009-04-24 203928]
«AlSrvN»=H:Program FilesAlcohol SoftAlcohol 120PluginsHelperAlSrvN.exe []
«ICQ»=H:Program FilesICQ6.5ICQ.exe [2009-11-16 172792]
«Skype»=H:Program FilesSkypePhoneSkype.exe [2009-10-09 25623336]
«Steam»=H:Program FilesSteamSteam.exe [2010-01-25 1217808]
«psuu4″=C:RECYCLERS-1-5-21-0243556031-888888379-781863308-1455psyu44.exe [2010-02-19 43008]
«psysnew»=C:RECYCLERS-1-5-21-0243556031-888888379-781863308-1455psysnew.exe [2010-02-19 43008]

H:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
Nokia Ovi Suite.lnk — H:Program FilesNokiaOviSuiteRunLauncher.exe

H:Documents and SettingsuserГлавное менюПрограммыАвтозагрузка
FIFA 10 Registration.lnk — D:Program FilesEA SportsFIFA 10SupportEAregister.exe
Need for Speed™ Undercover — регистрация.lnk — D:Need for Speed UndercoverSupportEAregister.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
H:WINDOWSsystem32Ati2evxx.dll [2009-04-29 155648]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWinCtrl32]
WinCtrl32.dll []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — H:WINDOWSsystem32WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinad00.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWincf66.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinct77.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWingq55.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinjk33.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinjv66.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinpo00.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinwq55.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinxi66.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinyf00.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinad00.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWincf66.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinct77.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWingq55.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinjk33.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinjv66.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinpo00.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinwq55.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinxi66.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinyf00.sys]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«H:Program FilesGIGABYTEGESTrun.exe»=»H:Program FilesGIGABYTEGESTrun.exe:*:Enabled:update»
«H:Program FilesQIPqip.exe»=»H:Program FilesQIPqip.exe:*:Enabled:Quiet Internet Pager»
«H:WINDOWSsystem32qeulb.exe»=»H:WINDOWSsystem32qeulb.exe:*:Enabled:ENABLE»
«H:Program FilesAkella GamesTest Drive UnlimitedTestDriveUnlimited.exe»=»H:Program FilesAkella GamesTest Drive UnlimitedTestDriveUnlimited.exe:*:Enabled:Test Drive Unlimited»
«H:WINDOWSsystem32PnkBstrA.exe»=»H:WINDOWSsystem32PnkBstrA.exe:*:Enabled:PnkBstrA»
«H:WINDOWSsystem32PnkBstrB.exe»=»H:WINDOWSsystem32PnkBstrB.exe:*:Enabled:PnkBstrB»
«H:Documents and Settingsuserhskjh.exe»=»H:Documents and Settingsuserhskjh.exe:*:Enabled:ENABLE»
«H:WINDOWSsystem32CNAB4RPK.EXE»=»H:WINDOWSsystem32CNAB4RPK.EXE:*:Disabled:Canon LBP2900 RPC Server Process»
«H:Program FilesTVUPlayerTVUPlayer.exe»=»H:Program FilesTVUPlayerTVUPlayer.exe:*:Enabled:TVUPlayer Component»
«H:Program FilesInternet ExplorerIEXPLORE.EXE»=»H:Program FilesInternet ExplorerIEXPLORE.EXE:*:Enabled:Internet Explorer»
«H:Program FilesSopCastSopCast.exe»=»H:Program FilesSopCastSopCast.exe:*:Enabled:SopCast Main Application»
«H:Program FilesSopCastadvSopAdver.exe»=»H:Program FilesSopCastadvSopAdver.exe:*:Enabled:SopCast Adver»
«H:Program FilesTVAntsTvants.exe»=»H:Program FilesTVAntsTvants.exe:*:Enabled:TVAnts»
«H:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbinxrEngine.exe»=»H:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbinxrEngine.exe:*:Enabled:С.Т.А.Л.К.Е.Р. — Чистое Небо (CLI)»
«H:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbindedicatedxrEngine.exe»=»H:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbindedicatedxrEngine.exe:*:Enabled:С.Т.А.Л.К.Е.Р. — Чистое Небо (SRV)»
«C:1243124TestDriveUnlimited.exe»=»C:1243124TestDriveUnlimited.exe:*:Enabled:Test Drive Unlimited»
«D:Electronic ArtsDead SpaceDead Space.exe»=»D:Electronic ArtsDead SpaceDead Space.exe:*:Enabled:Dead Space ™»
«D:White GoldXenus.exe»=»D:White GoldXenus.exe:*:Disabled:Executable»
«H:Program FilesSmall RocketsRed Ace Squadronacenet_server_release.exe»=»H:Program FilesSmall RocketsRed Ace Squadronacenet_server_release.exe:*:Enabled:server»
«H:WINDOWSsystem32dplaysvr.exe»=»H:WINDOWSsystem32dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«D:Astrum Online EntertainmentВластелин Колец Онлайнlotroclient.exe»=»D:Astrum Online EntertainmentВластелин Колец Онлайнlotroclient.exe:*:Enabled:lotroclient»
«H:Program FilesuTorrentutorrent.exe»=»H:Program FilesuTorrentutorrent.exe:*:Enabled:µTorrent»
«C:Program FilesSteamsteam.exe»=»C:Program FilesSteamsteam.exe:*:Enabled:Steam»
«D:PCGAMEPRO EVOLUTION SOCCER 2009pes2009.exe»=»D:PCGAMEPRO EVOLUTION SOCCER 2009pes2009.exe:*:Enabled:Pro Evolution Soccer 2009»
«C:Delta Force Xtreme 2 BETADFX2BETA.EXE»=»C:Delta Force Xtreme 2 BETADFX2BETA.EXE:*:Enabled:Delta Force Xtreme 2 BETA»
«C:Delta Force Xtreme 2 BETAUPDATE.EXE»=»C:Delta Force Xtreme 2 BETAUPDATE.EXE:*:Enabled:Delta Force Xtreme 2 BETA»
«H:Program FilesICQ6.5ICQ.exe»=»H:Program FilesICQ6.5ICQ.exe:*:Enabled:ICQ6»
«H:Program FilesElectronic ArtsEADMCore.exe»=»H:Program FilesElectronic ArtsEADMCore.exe:*:Enabled:EA Download Manager»
«H:Program FilesLimeWireLimeWire.exe»=»H:Program FilesLimeWireLimeWire.exe:*:Enabled:LimeWire»
«H:Program FileseMuleemule.exe»=»H:Program FileseMuleemule.exe:*:Enabled:eMule»
«D:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe»=»D:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe:*:Enabled:Rockstar Games Social Club»
«H:FlylinkDC++FlylinkDC.exe»=»H:FlylinkDC++FlylinkDC.exe:*:Enabled:FlylinkDC++»
«H:Program FilesUbisoftTransmission GamesHeroes Over Europeheroes2.exe»=»H:Program FilesUbisoftTransmission GamesHeroes Over Europeheroes2.exe:*:Enabled:heroes2»
«H:Program FilesRealRealPlayerrealplay.exe»=»H:Program FilesRealRealPlayerrealplay.exe:*:Enabled:RealPlayer»
«D:Program FilesPro Evolution Soccer 2010pes2010.exe»=»D:Program FilesPro Evolution Soccer 2010pes2010.exe:*:Enabled:Pro Evolution Soccer 2010»
«D:Rockstar GamesGrand Theft Auto IVLaunchGTAIV.exe»=»D:Rockstar GamesGrand Theft Auto IVLaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV»
«D:Rockstar GamesGrand Theft Auto IVGTAIV.exe»=»D:Rockstar GamesGrand Theft Auto IVGTAIV.exe:*:Enabled:Grand Theft Auto IV»
«H:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe»=»H:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe:*:Enabled:Rockstar Games Social Club»
«H:Program FilesSkypePlugin ManagerskypePM.exe»=»H:Program FilesSkypePlugin ManagerskypePM.exe:*:Enabled:Skype Extras Manager»
«D:Program FilesRockstar GamesGrand Theft Auto IVGTAIV.exe»=»D:Program FilesRockstar GamesGrand Theft Auto IVGTAIV.exe:*:Enabled:Grand Theft Auto IV»
«H:Program FilesSteamSteam.exe»=»H:Program FilesSteamSteam.exe:*:Enabled:Steam»
«D:Сall of Duty Modern Warfare 2iw4mp.exe»=»D:Сall of Duty Modern Warfare 2iw4mp.exe:*:Enabled:iw4mp»
«H:Program FilesSkypePhoneSkype.exe»=»H:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»

======List of files/folders created in the last 1 months======

2010-02-19 21:16:20 —-RSH—- H:WINDOWSjjdrive32.exe
2010-02-19 21:16:05 —-RSH—- H:WINDOWSccdrive32.exe
2010-02-19 21:15:56 —-D—- H:Program Filestrend micro
2010-02-19 21:15:54 —-D—- H:rsit
2010-02-19 20:31:11 —-A—- H:WINDOWSsystem32msvmcls64.exe
2010-02-19 19:56:03 —-D—- H:WINDOWSPrefetch
2010-02-19 19:51:13 —-A—- H:WINDOWSsystem32wmpns.dll
2010-02-19 19:50:05 —-RAH—- H:WINDOWSsystem32logonui.exe.manifest
2010-02-19 19:22:25 —-A—- H:WINDOWSsystem32spxcoins.dll
2010-02-19 19:22:25 —-A—- H:WINDOWSsystem32irclass.dll
2010-02-19 19:22:07 —-RA—- H:WINDOWSSET66.tmp
2010-02-19 19:22:00 —-RA—- H:WINDOWSSET5A.tmp
2010-02-19 19:21:58 —-RA—- H:WINDOWSSET57.tmp
2010-02-13 22:35:20 —-A—- H:WINDOWSsystem3212.exe
2010-02-13 22:22:42 —-A—- H:WINDOWSsystem320.exe
2010-02-13 21:06:29 —-A—- H:WINDOWSpothead.txt
2010-02-13 21:06:24 —-A—- H:WINDOWSsystem3233.exe
2010-02-13 21:06:11 —-RSH—- H:WINDOWSacp.exe
2010-02-13 21:06:08 —-A—- H:WINDOWSsystem32dh.exe
2010-02-13 21:00:30 —-A—- H:WINDOWSsystem3246.exe
2010-02-13 20:36:30 —-A—- H:WINDOWSsystem3241.exe
2010-02-13 20:06:21 —-A—- H:WINDOWSsystem32sshnas21.dll
2010-02-09 17:34:45 —-D—- H:Documents and SettingsuserApplication DataPlayFirst
2010-02-09 17:34:45 —-D—- H:Documents and SettingsAll UsersApplication DataPlayFirst
2010-02-07 20:43:35 —-A—- H:WINDOWSsystem32netprotocol.dll
2010-02-07 16:09:47 —-D—- H:Program FilesBaldaWin Demo
2010-01-31 15:39:00 —-D—- H:Documents and SettingsuserApplication DataEltima Software
2010-01-31 15:37:23 —-D—- H:Program FilesEltima Software
2010-01-27 14:16:14 —-D—- H:Program FilesElectronic Arts
2010-01-25 22:13:02 —-D—- H:Program FilesSteam
2010-01-24 22:38:55 —-D—- H:WINDOWSsystem32AGEIA
2010-01-24 22:38:53 —-D—- H:Program FilesAGEIA Technologies
2010-01-23 13:40:51 —-D—- H:Documents and SettingsuserApplication DataskypePM
2010-01-23 13:29:09 —-D—- H:Documents and SettingsuserApplication DataSkype
2010-01-23 13:27:50 —-D—- H:Program FilesCommon FilesSkype
2010-01-23 13:27:44 —-RD—- H:Program FilesSkype
2010-01-23 13:27:33 —-D—- H:Documents and SettingsAll UsersApplication DataSkype
2010-01-23 11:50:32 —-D—- H:Program FilesGames
2010-01-22 18:42:06 —-D—- H:Program FilesРусская Рыбалка 2.2

======List of files/folders modified in the last 1 months======

2010-02-19 22:19:21 —-SH—- H:boot.ini
2010-02-19 22:18:52 —-D—- H:WINDOWSsystem32Setup
2010-02-19 22:18:52 —-D—- H:WINDOWSsystem
2010-02-19 22:18:50 —-D—- H:WINDOWSHelp
2010-02-19 22:18:46 —-D—- H:WINDOWSl2schemas
2010-02-19 22:18:44 —-D—- H:WINDOWSsystem32usmt
2010-02-19 22:18:37 —-D—- H:WINDOWSAppPatch
2010-02-19 22:18:36 —-D—- H:WINDOWSehome
2010-02-19 22:18:35 —-D—- H:WINDOWSime
2010-02-19 22:18:34 —-RSD—- H:WINDOWSFonts
2010-02-19 22:18:34 —-D—- H:WINDOWSMedia
2010-02-19 22:18:33 —-D—- H:WINDOWSnetwork diagnostic
2010-02-19 22:18:31 —-D—- H:WINDOWSsystem32ru-ru
2010-02-19 22:18:22 —-D—- H:WINDOWSPeerNet
2010-02-19 22:18:09 —-D—- H:WINDOWSsystem32npp
2010-02-19 22:18:03 —-D—- H:WINDOWSmsagent
2010-02-19 22:17:59 —-D—- H:WINDOWSsystem32ru
2010-02-19 22:15:45 —-D—- H:WINDOWSsystem321049
2010-02-19 22:15:34 —-D—- H:WINDOWStwain_32
2010-02-19 22:15:04 —-D—- H:WINDOWSsystem32icsxml
2010-02-19 22:14:43 —-D—- H:WINDOWSsystem32ias
2010-02-19 22:14:40 —-D—- H:WINDOWSsystem321033
2010-02-19 22:13:57 —-D—- H:WINDOWSDriver Cache
2010-02-19 21:16:38 —-D—- H:WINDOWSTemp
2010-02-19 21:16:20 —-D—- H:WINDOWS
2010-02-19 21:16:12 —-D—- H:Program FilesMozilla Firefox
2010-02-19 21:15:56 —-RD—- H:Program Files
2010-02-19 21:14:53 —-D—- H:Program FilesAutochartist
2010-02-19 21:13:41 —-SD—- H:WINDOWSTasks
2010-02-19 21:12:09 —-A—- H:WINDOWSSchedLgU.Txt
2010-02-19 21:11:59 —-D—- H:Documents and SettingsuserApplication DatauTorrent
2010-02-19 21:10:28 —-A—- H:WINDOWSNeroDigital.ini
2010-02-19 21:03:06 —-D—- H:FlylinkDC++
2010-02-19 21:02:37 —-SHD—- H:WINDOWSInstaller
2010-02-19 21:02:13 —-D—- H:Config.Msi
2010-02-19 21:02:12 —-HD—- H:WINDOWSinf
2010-02-19 21:02:12 —-D—- H:WINDOWSsystem32drivers
2010-02-19 20:58:56 —-D—- H:Program FilesTeorex Inpaint
2010-02-19 20:58:55 —-D—- H:Program FilesReal Alternative
2010-02-19 20:58:51 —-D—- H:Program FilesMetaTrader — Alpari
2010-02-19 20:58:50 —-D—- H:Program FilesMessenger
2010-02-19 20:58:49 —-D—- H:Program FilesA-one Video Convertor
2010-02-19 20:58:47 —-D—- H:Program FilesDivX
2010-02-19 20:36:21 —-D—- H:Program FilesAll Office Converter Platinum
2010-02-19 20:31:11 —-D—- H:WINDOWSsystem32
2010-02-19 20:14:49 —-A—- H:WINDOWSsystem32PerfStringBackup.INI
2010-02-19 20:14:03 —-D—- H:WINDOWSRegistration
2010-02-19 20:13:28 —-D—- H:WINDOWSsystem32CatRoot2
2010-02-19 20:13:23 —-A—- H:WINDOWSsetuplog.txt
2010-02-19 19:56:38 —-SHD—- H:System Volume Information
2010-02-19 19:56:38 —-D—- H:WINDOWSsystem32Restore
2010-02-19 19:55:26 —-D—- H:WINDOWSsystem32config
2010-02-19 19:53:46 —-RSHDC—- H:WINDOWSsystem32dllcache
2010-02-19 19:51:45 —-D—- H:WINDOWSsecurity
2010-02-19 19:51:05 —-A—- H:WINDOWSOEWABLog.txt
2010-02-19 19:50:59 —-A—- H:WINDOWSODBCINST.INI
2010-02-19 19:50:08 —-RD—- H:WINDOWSWeb
2010-02-19 19:49:59 —-RAH—- H:WINDOWSsystem32cdplayer.exe.manifest
2010-02-19 19:49:46 —-A—- H:WINDOWSwin.ini
2010-02-19 19:49:40 —-D—- H:WINDOWSsystem32oobe
2010-02-19 19:48:51 —-D—- H:WINDOWSsystem32Com
2010-02-19 19:48:21 —-D—- H:WINDOWSsystem32wbem
2010-02-19 19:23:19 —-D—- H:WINDOWSsystem32CatRoot
2010-02-19 19:22:30 —-A—- H:WINDOWSsystem.ini
2010-02-19 19:22:16 —-ASH—- H:Documents and SettingsAll UsersApplication Datadesktop.ini
2010-02-13 22:35:33 —-RSHD—- H:RECYCLER
2010-02-12 09:10:50 —-D—- H:Documents and SettingsuserApplication DataDivX
2010-02-12 00:30:26 —-D—- H:Новая папка
2010-02-11 14:42:28 —-D—- H:Program FilesuTorrent
2010-02-06 18:54:02 —-HD—- H:Program FilesInstallShield Installation Information
2010-02-06 18:45:43 —-D—- H:WINDOWSsystem32DirectX
2010-02-06 18:45:42 —-RSD—- H:WINDOWSassembly
2010-02-02 13:35:47 —-D—- H:Documents and SettingsuserApplication Datadvdcss
2010-01-31 17:49:43 —-A—- H:WINDOWSntbtlog.txt
2010-01-29 19:54:41 —-SD—- H:Documents and SettingsAll UsersApplication DataMicrosoft
2010-01-29 19:54:39 —-SD—- H:Documents and SettingsuserApplication DataMicrosoft
2010-01-29 19:54:30 —-D—- H:WINDOWSWinSxS
2010-01-24 22:59:20 —-D—- H:Program FilesGamesTopDownloads
2010-01-24 22:38:02 —-D—- H:Program FilesCommon FilesWise Installation Wizard
2010-01-24 16:45:30 —-A—- H:WINDOWSsystem32PnkBstrB.exe
2010-01-23 13:27:50 —-D—- H:Program FilesCommon Files
2010-01-22 18:39:40 —-D—- H:Program FilesРусская Рыбалка Installsoft Edition

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 cdrbsdrv;cdrbsdrv; H:WINDOWSsystem32driverscdrbsdrv.sys [2006-02-20 33408]
R1 intelppm;Драйвер Intel процессора; H:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-15 40704]
R1 nod32drv;nod32drv; H:WINDOWSsystem32driversnod32drv.sys [2008-08-26 15424]
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; H:WINDOWSSystem32driversws2ifsl.sys [2008-04-15 12032]
R2 AMON;AMON; H:WINDOWSsystem32driversamon.sys [2008-08-26 512096]
R2 tifsfilter;Acronis TrueImage FS Filter; H:WINDOWSsystem32DRIVERStifsfilt.sys [2008-08-26 28096]
R3 ati2mtag;ati2mtag; H:WINDOWSsystem32DRIVERSati2mtag.sys [2009-04-29 3643904]
R3 AtiHdmiService;ATI Function Driver for HDMI Service; H:WINDOWSsystem32driversAtiHdmi.sys [2009-04-01 93184]
R3 ET5Drv;ET5Drv; ??H:WINDOWSsystem32DriversET5Drv.sys []
R3 gdrv;gdrv; ??H:WINDOWSgdrv.sys []
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; H:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-15 144384]
R3 HidUsb;Драйвер класса HID Microsoft; H:WINDOWSsystem32DRIVERShidusb.sys [2008-04-15 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); H:WINDOWSsystem32driversRtkHDAud.sys [2007-09-19 4617728]
R3 mouhid;Драйвер мыши HID; H:WINDOWSsystem32DRIVERSmouhid.sys [2008-04-15 12160]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; H:WINDOWSsystem32DRIVERSRtenicxp.sys [2007-12-05 104064]
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); H:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-15 32128]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; H:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-15 30208]
R3 usbhub;USB2 концентратор; H:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbstor;Драйвер запоминающих устройств для USB; H:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-15 26368]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; H:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-15 20608]
S3 nmwcd;Nokia USB Phone Parent; H:WINDOWSsystem32driversccdcmb.sys [2008-05-07 17536]
S3 pccsmcfd;PCCS Mode Change Filter Driver; H:WINDOWSsystem32DRIVERSpccsmcfd.sys [2008-08-26 18816]
S3 usbprint;Класс принтеров Microsoft USB; H:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-14 25856]
S3 usbscan;Драйвер USB-сканера; H:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
S3 Wdf01000;Wdf01000; H:WINDOWSsystem32DRIVERSWdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; H:WINDOWSsystem32DRIVERSwpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; H:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; H:WINDOWSsystem32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service; H:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe [2007-12-06 660768]
R2 AcrSch2Svc;Acronis Scheduler2 Service; H:Program FilesCommon FilesAcronisSchedule2schedul2.exe [2008-08-26 122880]
R2 Ati HotKey Poller;Ati HotKey Poller; H:WINDOWSsystem32Ati2evxx.exe [2009-04-29 602112]
R2 bgsvcgen;B’s Recorder GOLD Library General Service; H:WINDOWSsystem32bgsvcgen.exe [2007-06-15 145504]
R2 JavaQuickStarterService;Java Quick Starter; H:Program FilesJavajre6binjqs.exe [2009-06-09 152984]
R2 MDM;Machine Debug Manager; H:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-19 322120]
R2 Netprotocol;Network Protocol Driver; H:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R2 NOD32krn;NOD32 Kernel Service; H:Program FilesEsetnod32krn.exe [2008-08-26 552064]
R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; H:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; H:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2006-10-20 36864]
R3 GEST Service;GEST Service for program management.; H:Program FilesGIGABYTEGESTGSvr.exe [2007-12-14 47624]
S2 ATI Smart;ATI Smart; H:WINDOWSsystem32ati2sgag.exe [2009-04-28 593920]
S2 gupdate1ca1104ee4fa4be;Служба Google Update (gupdate1ca1104ee4fa4be); H:Program FilesGoogleUpdateGoogleUpdate.exe [2009-07-30 133104]
S2 SSHNAS;SSHNAS; H:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S2 StarWindServiceAE;StarWind AE Service; H:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe []
S3 aspnet_state;ASP.NET State Service; H:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; H:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 IDriverT;InstallDriver Table Manager; H:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; H:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2006-10-30 741376]
S3 ose;Office Source Engine; H:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; H:Program FilesNokiaPC Connectivity SolutionServiceLayer.exe [2008-09-08 575488]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; H:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2006-10-30 122880]

EOF

И вот еще выдает

info.txt logfile of random’s system information tool 1.06 2010-02-19 21:16:44

======Uninstall list======

—>H:Program FilesDivXDivXConverterUninstall.exe /CONVERTER
—>MsiExec /X{65F1CF63-31E0-450B-96F3-4A88BE7361A6}
—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 H:WINDOWSINFPCHealth.inf
7-Zip 4.65—>»H:Program Files7-ZipUninstall.exe»
ABBYY FineReader 9.0 Professional Edition—>MsiExec.exe /I{F9000000-0001-0000-0000-074957833700}
Acrobat.com—>H:Program FilesCommon FilesAdobe AIRVersions1.0Adobe AIR Application Installer.exe -uninstall com.adobe.mauby 4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
Acrobat.com—>MsiExec.exe /I{77DCDCE3-2DED-62F3-8154-05E745472D07}
Acronis True Image—>H:Program FilesAcronisTrueImageMediaBuilder.exe -uninstall
Adobe AIR—>H:Program FilesCommon FilesAdobe AIRVersions1.0Adobe AIR Updater.exe -arp:uninstall
Adobe AIR—>MsiExec.exe /I{00203668-8170-44A0-BE44-B632FA4D780F}
Adobe Flash Player 10 ActiveX—>H:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Flash Player 10 Plugin—>H:WINDOWSsystem32MacromedFlashuninstall_plugin.exe
Adobe Reader 9—>MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A90000000001}
AGEIA PhysX v7.07.09—>MsiExec.exe /X{65F1CF63-31E0-450B-96F3-4A88BE7361A6}
All Office Converter Platinum 6.2—>»H:Program FilesAll Office Converter Platinumunins000.exe»
A-one Video Convertor 4.47—>»H:Program FilesA-one Video Convertorunins000.exe»
Apple Software Update—>MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
ArtMoney SE v7.31—>»H:Program FilesArtMoneyUninstallunins000.exe»
ATI — Утилита деинсталляции—>H:Program FilesATI TechnologiesUninstallAllAtiCimUn.exe
ATI AVIVO Codecs—>MsiExec.exe /I{2AEB1EAF-9E1C-4361-8562-5AC7AE6AC177}
ATI AVIVO Codecs—>MsiExec.exe /I{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}
ATI Catalyst Control Center—>RunDll32 H:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime91Intel32Ctor.dll,LaunchSetup «H:Program FilesInstallShield Installation Information{055EE59D-217B-43A7-ABFF-507B966405D8}setup.exe» -l0x0
ATI Display Driver—>rundll32 H:WINDOWSsystem32atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI HYDRAVISION—>RunDll32 H:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1ctor.dll,LaunchSetup «H:Program FilesInstallShield Installation Information{3EA9D975-BFDC-4E8E-B88B-0446FBC8CA66}setup.exe»
ATI Parental Control & Encoder—>MsiExec.exe /I{36CDA33B-909B-4719-97D1-C4B99309BDC7}
ATI Problem Report Wizard—>MsiExec.exe /X{5DA6F06A-B389-407B-BF8C-1548767914D8}
BaldaWin Demo—>»H:Program FilesBaldaWin Demounins000.exe»
Call of Duty(R) — World at War(TM) 1.2 Patch—>H:Program FilesInstallShield Installation Information{2BF0AE92-C3BC-4112-9066-1546342B1FAE}setup.exe -runfromtemp -l0x0409
Call of Duty(R) — World at War(TM) 1.4 Patch—>H:Program FilesInstallShield Installation Information{9F01A67B-7D67-482F-9D4F-D5980A440FD4}setup.exe -runfromtemp -l0x0409
Call of Duty(R) — World at War(TM) 1.5 Patch—>H:Program FilesInstallShield Installation Information{C3DC2DF5-EFAC-4055-9010-31F7C545DD9E}setup.exe -runfromtemp -l0x0409
Canon LBP2900—>H:Program FilesCanonPrnUninstallCanon LBP2900CNAB4UN.EXE
Catalyst Control Center — Branding—>MsiExec.exe /I{D3B1C799-CB73-42DE-BA0F-2344793A095C}
Comet Cursor—>H:WINDOWSsystem32csuninst.exe
delete—>D:Сall of Duty Modern Warfare 2Uninstall.exe
DivX Codec—>H:Program FilesDivXDivXCodecUninstall.exe /CODEC
DivX Converter—>H:Program FilesDivXDivXConverterUninstall.exe /CONVERTER
DivX Player—>H:Program FilesDivXDivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters—>H:Program FilesDivXDivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player—>H:Program FilesDivXDivXWebPlayerUninstall.exe /PLUGIN
Dynamic Energy Saver 1.0 B8.0128.1—>RunDll32 H:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime110Intel32Ctor.dll,LaunchSetup «H:Program FilesInstallShield Installation Information{5869CE1E-BC0B-4648-B1AE-6EF4A985590C}setup.exe» -l0x9 -removeonly
EA Download Manager—>H:Program FilesElectronic ArtsEADMUninstall.exe
FLV Player—>»H:WINDOWSFLV Playeruninstall.exe» «/U:H:Program FilesFLV PlayerUninstalluninstall.xml»
Gigabyte Raid Configurer—>RunDll32 H:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime110Intel32Ctor.dll,LaunchSetup «H:Program FilesInstallShield Installation Information{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}SETUP.EXE» -l0x19 -removeonly
Google Chrome—>»H:Program FilesGoogleChromeApplication4.0.249.89Installersetup.exe» —uninstall —system-level
Google Update Helper—>MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
GTA2—>H:WINDOWSIsUn0419.exe -f»H:Program FilesGTA2Uninst.isu»
HD Writer 2.5E for HDC—>H:Program FilesInstallShield Installation Information{095B0246-4EB6-45B9-B1BE-536097A0BDDA}setup.exe -runfromtemp -l0x0009 -removeonly
Heroes of Might and Magic IV—>RunDll32 H:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «D:йцуSetup.exe» -l0x19
HijackThis 2.0.2—>»H:Program Filestrend microHijackThis.exe» /uninstall
ICQ6.5—>»H:Program FilesInstallShield Installation Information{60DE4033-9503-48D1-A483-7846BD217CA9}setup.exe» -runfromtemp -l0x0009 -removeonly
Inpaint 2.0—>»H:Program FilesTeorex Inpaintunins000.exe»
Java(TM) 6 Update 11—>MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
K-Lite Codec Pack 3.1.0 Full—>»H:Program FilesK-Lite Codec Packunins000.exe»
LAVA-Online Client—>MsiExec.exe /I{B8555C88-DC3E-43E0-B300-A142BF0AEDAB}
Light Alloy 4.1—>H:Program FilesLight Alloyuninst.exe
MetaTrader — Alpari 4.00—>»H:Program FilesMetaTrader — AlpariUninstall.exe» «H:Program FilesMetaTrader — Alpariinstall.log»
Microsoft .NET Framework 1.1—>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1—>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Language Pack — RUS—>H:WINDOWSMicrosoft.NETFrameworkv2.0.50727Microsoft .NET Framework 2.0 Language Pack — RUSinstall.exe
Microsoft .NET Framework 2.0—>H:WINDOWSMicrosoft.NETFrameworkv2.0.50727Microsoft .NET Framework 2.0install.exe
Microsoft .NET Framework 3.0 Russian Language Pack—>H:WINDOWSMicrosoft.NETFrameworkv3.0Microsoft .NET Framework 3.0 Russian Language Packsetup.exe
Microsoft .NET Framework 3.0 Russian Language Pack—>MsiExec.exe /X{855B04CC-4F7A-4FBB-B7BA-D965D23F7AD5}
Microsoft .NET Framework 3.0—>H:WINDOWSMicrosoft.NETFrameworkv3.0Microsoft .NET Framework 3.0setup.exe
Microsoft .NET Framework 3.0—>MsiExec.exe /X{15095BF3-A3D7-4DDF-B193-3A496881E003}
Microsoft Games for Windows — LIVE Redistributable—>MsiExec.exe /X{FD052FB9-FE90-4438-B355-15EDC89D8FB1}
Microsoft Office — профессиональный выпуск версии 2003—>MsiExec.exe /I{90110419-6000-11D3-8CFE-0150048383C9}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Visual C++ 2008 Redistributable — x86 9.0.30729.17—>MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Windows Media Video 9 VCM—>RunDll32 advpack.dll,LaunchINFSection H:WINDOWSINFwmv9vcm.inf, Uninstall
Mozilla Firefox (3.5.7)—>H:Program FilesMozilla Firefoxuninstallhelper.exe
MSXML 4.0 SP2 Parser and SDK—>MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
MSXML 6.0 Parser (KB933579)—>MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
Nero 6 Ultra Edition—>H:Program FilesAheadnerouninstallUNNERO.exe /UNINSTALL
Nokia Connectivity Cable Driver—>MsiExec.exe /X{C3F19A5F-35A8-4FDB-A6ED-0F4CE398DA48}
Nokia Download!—>MsiExec.exe /X{D353C323-5E95-4873-9825-9FEC1C8A3794}
Nokia Flashing Cable Driver—>MsiExec.exe /X{A4E0CA0F-1903-440A-9B98-FEA6CB049999}
Nokia Map Loader—>MsiExec.exe /I{03528A01-7E5E-4C5F-94DF-1D8012E969EF}
Nokia Music—>MsiExec.exe /I{9333DA9B-4F8C-4580-88A7-F12D7B10DC2A}
Nokia Ovi Application Installer 6.85.3011—>msiexec /qn /x {42B74521-4706-412A-9A27-AED12B83E886}
Nokia Ovi Application Installer—>MsiExec.exe /I{42B74521-4706-412A-9A27-AED12B83E886}
Nokia Ovi Content Copier 6.85.3011—>msiexec /qn /x {6442DEDF-AC2F-4CBA-85DE-42E459C5006C}
Nokia Ovi Content Copier—>MsiExec.exe /X{6442DEDF-AC2F-4CBA-85DE-42E459C5006C}
Nokia Ovi One Touch Access 6.85.3011—>msiexec /qn /x {4AE48A64-6C6A-4E5A-95FA-55F5131DECF9}
Nokia Ovi One Touch Access—>MsiExec.exe /I{4AE48A64-6C6A-4E5A-95FA-55F5131DECF9}
Nokia Ovi Suite—>MsiExec.exe /I{CCF31747-7D4C-4F77-9FF8-60DA9B49B353}
Nokia Ovi System Utilities 6.85.3011—>msiexec /qn /x {E81A68BF-6F5F-4F20-A2EA-AE429736A017}
Nokia Ovi System Utilities—>MsiExec.exe /X{E81A68BF-6F5F-4F20-A2EA-AE429736A017}
Nokia Photos—>MsiExec.exe /I{AE977FE5-F014-4F1E-83F7-B4FD143B5EEF}
Nokia Software Updater—>MsiExec.exe /X{2FA28330-2028-4033-BD10-425C87EB4D54}
OpenAL—>»H:Program FilesOpenALoalinst.exe» /U
PC Connectivity Solution—>MsiExec.exe /I{83258E90-1F76-4E13-9F60-A0F8ED41E76F}
PowerDVD—>RunDll32 H:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «H:Program FilesInstallShield Installation Information{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}Setup.exe» -uninstall
PRO EVOLUTION SOCCER 2009 v.1.0—>»D:PCGAMEPRO EVOLUTION SOCCER 2009unins000.exe»
PunkBuster Services—>H:WINDOWSsystem32pbsvc.exe -u
QIP 2005 8090—>»H:Program FilesQIPunins000.exe»
QIP 2005 Uninstall—>»H:Program FilesQIPunqip.exe»
QuickTime—>MsiExec.exe /I{8DC42D05-680B-41B0-8878-6C14D24602DB}
Raven Squad—>»D:DVIDEO_TSНовая папка (3)Darkest of Daysunins000.exe»
Real Alternative 2.0.0—>»H:Program FilesReal Alternativeunins000.exe»
RealJukebox—>H:Program FilesRealRealJukeboxUpdaternuninst.exe RealNetworks|RealJukebox|1.0
REALTEK GbE & FE Ethernet PCI-E NIC Driver—>H:Program FilesInstallShield Installation Information{C9BED750-1211-4480-B1A5-718A3BE15525}SETUP.EXE -runfromtemp -l0x0019 -removeonly
Realtek High Definition Audio Driver—>RtlUpd.exe -r -m
Recuva (remove only)—>»H:Program FilesRecuvauninst.exe»
Rockstar Games Social Club—>»H:Program FilesInstallShield Installation Information{08B3869E-D282-424C-9AFC-870E04A4BA14}setup.exe» -runfromtemp -l0x0009 -removeonly
Rumus—>H:Program FilesFxClubRumus2uninstall.exe
Skype web features—>MsiExec.exe /I{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}
Skype™ 4.1—>MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
Steam—>MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
SWF & FLV Player 3.0 (build 3.0.33.5106)—>»H:Program FilesEltima SoftwareSWF & FLV Playerunins000.exe»
TrendCatch FX 4.2—>H:Program FilesTrendCatch L.L.C.TrendCatch FXUninstall.exe
TVUPlayer 2.4.9.1—>H:Program FilesTVUPlayeruninst.exe
VC80CRTRedist — 8.0.50727.762—>MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
VLC media player 0.9.6—>H:Program FilesVideoLANVLCuninstall.exe
Windows Communication Foundation—>MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333}
Windows Media Format 11 runtime—>»H:Program FilesWindows Media Playerwmsetsdk.exe» /UninstallAll
Windows Media Format 11 runtime—>»H:WINDOWS$NtUninstallWMFDist11$spuninstspuninst.exe»
Windows Presentation Foundation Language Pack (RUS)—>MsiExec.exe /X{D83A3DFC-8528-4E31-93DC-0A41C477109C}
Windows Presentation Foundation—>MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Workflow Foundation RU Language Pack—>MsiExec.exe /I{1C7ADED3-C371-40DF-A69D-FE0EA73DC394}
Windows Workflow Foundation—>MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}
WinZip 11.2—>MsiExec.exe /X{CD95F661-A5C4-44F5-A6AA-ECDD91C240B2}
XML Paper Specification Shared Components Language Pack 1.0—>»H:WINDOWS$NtUninstallXPSEPSCLP$spuninstspuninst.exe»
XviD MPEG-4 Codec—>»H:Program FilesXviDUninstXviD.exe»
Антивирусная система NOD32—>H:Program FilesEsetSetupsetup.exe /UNINSTALL
Архиватор WinRAR (только удаление)—>H:Program FilesWinRARuninstall.exe
Интернет помощник MyCentria—>H:Program FilesMyCentriaMyCentriaUninstall.exe
Пакет драйверов Windows — Nokia pccsmcfd (08/22/2008 7.0.0.0)—>H:PROGRA~1DIFX270581355A767BF1dpinst.exe /u H:WINDOWSsystem32DRVSTOREpccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294pccsmcfd.inf

======Hosts File======

195.82.147.147 pornolab.net static.pornolab.net
195.82.147.120 bt.pornolab.net
195.82.147.147 pornolab.net
195.82.147.147 static.pornolab.net
195.82.147.147 bt.pornolab.net

======Security center information======

AV: Антивирусная система Eset NOD32 2.70 (outdated)

======System event log======

Computer Name: HOME5
Event Code: 51
Message: Обнаружена ошибка на устройстве DeviceHarddisk1D во время выполнения операции страничного обмена.

Record Number: 15871
Source Name: Disk
Time Written: 20100208111005.000000+180
Event Type: предупреждение
User:

Computer Name: HOME5
Event Code: 51
Message: Обнаружена ошибка на устройстве DeviceHarddisk1D во время выполнения операции страничного обмена.

Record Number: 15870
Source Name: Disk
Time Written: 20100208110955.000000+180
Event Type: предупреждение
User:

Computer Name: HOME5
Event Code: 51
Message: Обнаружена ошибка на устройстве DeviceHarddisk1D во время выполнения операции страничного обмена.

Record Number: 15869
Source Name: Disk
Time Written: 20100208110945.000000+180
Event Type: предупреждение
User:

Computer Name: HOME5
Event Code: 51
Message: Обнаружена ошибка на устройстве DeviceHarddisk1D во время выполнения операции страничного обмена.

Record Number: 15868
Source Name: Disk
Time Written: 20100208110934.000000+180
Event Type: предупреждение
User:

Computer Name: HOME5
Event Code: 51
Message: Обнаружена ошибка на устройстве DeviceHarddisk1D во время выполнения операции страничного обмена.

Record Number: 15867
Source Name: Disk
Time Written: 20100208110924.000000+180
Event Type: предупреждение
User:

=====Application event log=====

Computer Name: HOME5
Event Code: 1
Message: Nokia M Platform 2.2.72 (NLib 0.8.205)

Nokia M Data Store opened at location «H:Documents and SettingsuserLocal SettingsApplication DataNokiaNokia Data StoreDataBaseMDataStore.db3»

Record Number: 936
Source Name: Nokia M Platform
Time Written: 20091103195548.000000+180
Event Type: информация
User:

Computer Name: HOME5
Event Code: 1
Message: Nokia M Platform 2.2.72 (NLib 0.8.205)

Nokia M Data Store opened at location «H:Documents and SettingsuserLocal SettingsApplication DataNokiaNokia Data StoreDataBaseMDataStore.db3»

Record Number: 935
Source Name: Nokia M Platform
Time Written: 20091103195547.000000+180
Event Type: информация
User:

Computer Name: HOME5
Event Code: 1800
Message: Служба центра обеспечения безопасности Windows запущена.

Record Number: 934
Source Name: SecurityCenter
Time Written: 20091103195530.000000+180
Event Type: информация
User:

Computer Name: HOME5
Event Code: 1
Message: Nokia M Platform 2.2.72 (NLib 0.8.205)

Nokia M Data Store opened at location «h:docume~1userlocals~1applic~1nokianokiad~1ThumbnailDataBaseMDataStore.db3»

Record Number: 933
Source Name: Nokia M Platform
Time Written: 20091103195530.000000+180
Event Type: информация
User:

Computer Name: HOME5
Event Code: 1
Message: Nokia M Platform 2.2.72 (NLib 0.8.205)

Nokia M Data Store opened at location «h:docume~1userlocals~1applic~1nokianokiad~1DataBaseMDataStore.db3»

Record Number: 932
Source Name: Nokia M Platform
Time Written: 20091103195529.000000+180
Event Type: информация
User:

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%system32WBEM;H:Program FilesNokiaPC Connectivity Solution;H:Program FilesATI TechnologiesATI.ACECore-Static;H:Program FilesQuickTimeQTSystem;H:Program FilesCommon FilesDivX Shared
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=6
«PROCESSOR_IDENTIFIER»=x86 Family 6 Model 23 Stepping 6, GenuineIntel
«PROCESSOR_REVISION»=1706
«NUMBER_OF_PROCESSORS»=2
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP
«CLASSPATH»=.;H:Program FilesQuickTimeQTSystemQTJava.zip
«QTJAVA»=H:Program FilesQuickTimeQTSystemQTJava.zip
«RGSCLauncher»=H:Program FilesRockstar GamesRockstar Games Social Club
«RGSC»=H:Program FilesRockstar GamesRockstar Games Social Club1_0_0_0

EOF
14 февраля, 2010 в 10:04 пп в ответ на: Не запускается даже безопасный режим #26784
G-Gurda
Participant
- Темы:4
- Сообщений:32
Совершенно верно.Ну или перезагрузка до того же места в двух других случаях.
Автор

Сообщения