SPYWARE-RU.COM

Созданные ответы форума

Просмотр 1 сообщения - с 1 по 1 (всего 1)

Автор

Сообщения
15 июля, 2010 в 2:35 дп в ответ на: помогите войти в безопасный режим #30103
golovastik
Participant
- Темы:1
- Сообщений:2
спасибо, скачала, просканировала, вот результаты:

Logfile of random’s system information tool 1.08 (written by random/random)
Run by user at 2010-07-15 07:24:45
Microsoft Windows XP Professional Service Pack 3
System drive C: has 37 GB (48%) free of 76 GB
Total RAM: 2047 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:24:58 AM, on 7/15/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesESETESET NOD32 Antivirusekrn.exe
C:WINDOWSsystem32WgaTray.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32svchost.exe
C:WINDOWSTwain_32In-Sight Motion WebcamMTTool.exe
C:WINDOWSTwain_32In-Sight Motion WebcamSnapTrap.exe
C:Program FilesABBYY Lingvo 12Lvagent.exe
C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe
C:Program FilesESETESET NOD32 Antivirusegui.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesuTorrentuTorrent.exe
C:Documents and SettingsuserApplication DataQipGuardQipGuard.exe
C:Program FilesSUPERAntiSpywareSUPERAntiSpyware.exe
C:Program FilesYandexPunto Switcherpunto.exe
C:Program FilesOperaopera.exe
C:Program FilesDownload Masterdmaster.exe
C:Documents and SettingsuserDesktopRSIT.exe
C:Program Filestrend microuser.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://search.qip.ru/ie
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://search.qip.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://search.myheritage.com
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://search.qip.ru/ie
R1 — HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://www.skype.com/go/help.guides.ieaddon?lang=en
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:Program FilesMail.RuAgentMradllnewmrasearch.dll
R3 — URLSearchHook: (no name) — — (no file)
R3 — URLSearchHook: (no name) — {00A6FAF6-072E-44cf-8957-5838F569A31D} — C:Program FilesMyWebSearchbar1.binMWSSRCAS.DLL (file missing)
R3 — URLSearchHook: Niooiee@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
R3 — URLSearchHook: MHURLSearchHook Class — {1C4AB6A5-595F-4e86-B15F-F93CCE2BBD48} — C:Program FilesFamily Toolbartbhelper.dll
R3 — URLSearchHook: QIPBHO Class — {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} — C:Documents and SettingsuserApplication DataMicrosoftInternet Explorerqipsearchbar.dll
O2 — BHO: MyWebSearch Search Assistant BHO — {00A6FAF1-072E-44cf-8957-5838F569A31D} — (no file)
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: mwsBar BHO — {07B18EA1-A523-4961-B6BB-170DE4475CCA} — C:Program FilesMyWebSearchbar1.binMWSBAR.DLL (file missing)
O2 — BHO: MHTBPos00 — {0C37B053-FD68-456a-82E1-D788EE342E6F} — C:Program FilesFamily Toolbartbcore3.dll
O2 — BHO: QipLI — {6B5863A0-C43F-4C0A-982B-CC0E9125783F} — C:Documents and SettingsuserApplication DataMicrosoftInternet Explorerqstatsrv.dll
O2 — BHO: Niooiee@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — C:PROGRA~1DOWNLO~1dmiehlp.dll
O2 — BHO: QIPBHO — {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} — C:Documents and SettingsuserApplication DataMicrosoftInternet Explorerqipsearchbar.dll
O2 — BHO: SkypeIEPluginBHO — {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O3 — Toolbar: PROMT — {FF284F5C-7CF9-4682-8701-D467C1DBB99F} — C:Program FilesPRMT6PRMTIEprmtie.dll
O3 — Toolbar: Niooiee@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O3 — Toolbar: DM Bar — {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — C:Program FilesDownload Masterdmbar.dll
O3 — Toolbar: Family Toolbar — {FD2FD708-1F6F-4B68-B141-C5778F0C19BB} — C:Program FilesFamily Toolbartbcore3.dll
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe -LM
O4 — HKLM..Run: [Motor_Tracking_Tool] C:WINDOWSTwain_32In-Sight Motion WebcamMTTool.exe
O4 — HKLM..Run: [STICAP] C:WINDOWSTwain_32In-Sight Motion WebcamSnapTrap.exe
O4 — HKLM..Run: [My Web Search Bar] rundll32 C:PROGRA~1MYWEBS~1bar1.binMWSBAR.DLL,S
O4 — HKLM..Run: [Lingvo Launcher] «C:Program FilesABBYY Lingvo 12Lvagent.exe» /STARTUP
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 8.0ReaderReader_sl.exe»
O4 — HKLM..Run: [Adobe ARM] «C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe»
O4 — HKLM..Run: [Family Tree Builder Update] C:Program FilesMyHeritageBinFTBCheckUpdates.exe
O4 — HKLM..Run: [egui] «C:Program FilesESETESET NOD32 Antivirusegui.exe» /hide /waitservice
O4 — HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [MyWebSearch Email Plugin] C:PROGRA~1MYWEBS~1bar1.binmwsoemon.exe
O4 — HKCU..Run: [Download Master] C:Program FilesDownload Masterdmaster.exe -autorun
O4 — HKCU..Run: [uTorrent] «C:Program FilesuTorrentuTorrent.exe»
O4 — HKCU..Run: [QIP Internet Guardian] C:Documents and SettingsuserApplication DataQipGuardQipGuard.exe
O4 — HKCU..Run: [Skype] «C:Program FilesSkypePhoneSkype.exe» /nosplash /minimized
O4 — HKCU..Run: [SUPERAntiSpyware] C:Program FilesSUPERAntiSpywareSUPERAntiSpyware.exe
O4 — HKCU..Run: [Tutor.exe] C:Program FilesABBYY Lingvo 12Tutor.exe /AS
O4 — HKUSS-1-5-19..RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User ‘Default user’)
O4 — Startup: Punto Switcher.lnk = C:Program FilesYandexPunto Switcherpunto.exe
O8 — Extra context menu item: &Search — http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?s=100000348&p=ZSman000&si=&a=T7EYsJlF37PF2M.nYoepQw&n=2010031812
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: Translate with ABBYY &Lingvo… — res://C:Program FilesABBYY Lingvo 12Lingvo.exe/3000
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — C:Program FilesDownload Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — C:Program FilesDownload Masterdmie.htm
O8 — Extra context menu item: Передать на удаленную закачку DM — C:Program FilesDownload Masterremdown.htm
O9 — Extra button: Mail.Ru Aaaio — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Aaaio — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: (no name) — {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} — C:Program FilesPRMT6PRMTIEprmtie5.htm
O9 — Extra ‘Tools’ menuitem: Ia?aaanoe — {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} — C:Program FilesPRMT6PRMTIEprmtie5.htm
O9 — Extra button: (no name) — {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} — C:Program FilesPRMT6PRMTIEoptions.htm
O9 — Extra ‘Tools’ menuitem: Iano?ieea ia?aiao?ia ia?aaiaa — {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} — C:Program FilesPRMT6PRMTIEoptions.htm
O9 — Extra button: Skype add-on for Internet Explorer — {898EA8C8-E7FF-479B-8935-AEC46303B9E5} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O9 — Extra ‘Tools’ menuitem: Skype add-on for Internet Explorer — {898EA8C8-E7FF-479B-8935-AEC46303B9E5} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra button: Ni?aai?iua iaoa?eaeu — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O9 — Extra button: QIP Infium — {1EF681F7-A04B-4D6D-9012-A307CCA55610} — C:Program FilesQIP Infiuminfium.exe (HKCU)
O12 — Plugin for .spop: C:Program FilesInternet ExplorerPluginsNPDocBox.dll
O16 — DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) — http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1278431235203
O17 — HKLMSystemCCSServicesTcpip..{87D04C56-CE0F-4E83-A917-43686715B71A}: NameServer = 217.64.16.1,217.64.16.2
O18 — Protocol: skype-ie-addon-data — {91774881-D725-4E58-B298-07617B9B86A8} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 — Winlogon Notify: !SASWinLogon — C:Program FilesSUPERAntiSpywareSASWINLO.DLL
O22 — SharedTaskScheduler: Browseui preloader — {438755C2-A8BA-11D1-B96B-00A0C90312E1} — C:WINDOWSsystem32browseui.dll
O22 — SharedTaskScheduler: Component Categories cache daemon — {8C7461EF-2B13-11d2-BE35-3078302C2030} — C:WINDOWSsystem32browseui.dll
O23 — Service: ESET HTTP Server (EhttpSrv) — ESET — C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe
O23 — Service: ESET Service (ekrn) — ESET — C:Program FilesESETESET NOD32 Antivirusekrn.exe
O23 — Service: Google Update Service (gupdate) (gupdate) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe

—
End of file — 11194 bytes

======Scheduled tasks folder======

C:WINDOWStasksGoogleUpdateTaskMachineCore.job
C:WINDOWStasksGoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{00A6FAF1-072E-44cf-8957-5838F569A31D}]
MyWebSearch Search Assistant BHO

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2009-12-18 61888]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{07B18EA1-A523-4961-B6BB-170DE4475CCA}]
mwsBar BHO — C:Program FilesMyWebSearchbar1.binMWSBAR.DLL []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{0C37B053-FD68-456a-82E1-D788EE342E6F}]
MHTBPos00 Class — C:Program FilesFamily Toolbartbcore3.dll [2009-05-08 2642432]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{6B5863A0-C43F-4C0A-982B-CC0E9125783F}]
QipLI Class — C:Documents and SettingsuserApplication DataMicrosoftInternet Explorerqstatsrv.dll [2010-04-12 48080]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2009-02-27 676704]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — C:PROGRA~1DOWNLO~1dmiehlp.dll [2009-04-16 158208]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class — C:Documents and SettingsuserApplication DataMicrosoftInternet Explorerqipsearchbar.dll [2010-04-12 149968]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{FF284F5C-7CF9-4682-8701-D467C1DBB99F} — PROMT — C:Program FilesPRMT6PRMTIEprmtie.dll [2004-07-28 434176]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Niooiee@Mail.Ru — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2009-02-27 676704]
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — DM Bar — C:Program FilesDownload Masterdmbar.dll [2007-11-26 180224]
{FD2FD708-1F6F-4B68-B141-C5778F0C19BB} — Family Toolbar — C:Program FilesFamily Toolbartbcore3.dll [2009-05-08 2642432]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«MAgent»=C:Program FilesMail.RuAgentMAgent.exe [2009-02-27 5600952]
«Motor_Tracking_Tool»=C:WINDOWSTwain_32In-Sight Motion WebcamMTTool.exe [2006-08-22 602168]
«STICAP»=C:WINDOWSTwain_32In-Sight Motion WebcamSnapTrap.exe [2007-02-02 135168]
«My Web Search Bar»=rundll32 C:PROGRA~1MYWEBS~1bar1.binMWSBAR.DLL,S []
«»= []
«Lingvo Launcher»=C:Program FilesABBYY Lingvo 12Lvagent.exe [2006-12-14 258048]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2009-12-18 40368]
«Adobe ARM»=C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe [2010-06-09 976832]
«Family Tree Builder Update»=C:Program FilesMyHeritageBinFTBCheckUpdates.exe [2009-11-02 222736]
«egui»=C:Program FilesESETESET NOD32 Antivirusegui.exe [2010-04-07 2145000]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«ctfmon.exe»=C:WINDOWSsystem32ctfmon.exe [2008-04-14 15360]
«MyWebSearch Email Plugin»=C:PROGRA~1MYWEBS~1bar1.binmwsoemon.exe []
«Download Master»=C:Program FilesDownload Masterdmaster.exe [2010-04-30 3791360]
«uTorrent»=C:Program FilesuTorrentuTorrent.exe [2010-05-27 322352]
«QIP Internet Guardian»=C:Documents and SettingsuserApplication DataQipGuardQipGuard.exe [2010-04-12 184272]
«Skype»=C:Program FilesSkypePhoneSkype.exe [2010-05-13 26192168]
«SUPERAntiSpyware»=C:Program FilesSUPERAntiSpywareSUPERAntiSpyware.exe [2010-06-29 2403568]
«Tutor.exe»=C:Program FilesABBYY Lingvo 12Tutor.exe [2006-12-14 987136]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAdobe Reader Speed Launcher]
C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2009-12-18 40368]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAlcmtr]
C:WINDOWSALCMTR.EXE [2008-12-30 77824]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregBgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:Program FilesCommon FilesAheadLibNMBgMonitor.exe [2006-12-23 143360]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregICQ]
C:Program FilesICQ6ICQ.exe silent []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregMAgent]
C:Program FilesMail.RuAgentmagent.exe [2009-02-27 5600952]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregMsnMsgr]
C:Program FilesMSN MessengerMsnMsgr.Exe /background []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNeroFilterCheck]
C:Program FilesCommon FilesAheadLibNeroCheck.exe [2006-01-12 155648]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNvCplDaemon]
C:WINDOWSsystem32NvCpl.dll [2008-05-16 13529088]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNvMediaCenter]
C:WINDOWSsystem32NvMcTray.dll [2008-05-16 86016]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregnwiz]
nwiz.exe /install []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregRemoteControl]
C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2005-01-12 32768]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregRTHDCPL]
C:WINDOWSRTHDCPL.EXE [2008-12-30 17701888]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSkype]
C:Program FilesSkypePhoneSkype.exe [2010-05-13 26192168]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigservices]
«usnjsvc»=3
«ose»=3
«NMIndexingService»=3
«NBService»=3
«NVSvc»=2

C:Documents and SettingsuserStart MenuProgramsStartup
Punto Switcher.lnk — C:Program FilesYandexPunto Switcherpunto.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotify!SASWinLogon]
C:Program FilesSUPERAntiSpywareSASWINLO.DLL [2009-09-04 548352]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWgaLogon]
C:WINDOWSsystem32WgaLogon.dll [2009-03-10 239496]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}»=C:Program FilesSUPERAntiSpywareSASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«DisableCAD»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«NoSMMyDocs»=1
«NoSMMyPictures»=1
«NoSMConfigurePrograms»=1
«NoSMHelp»=1
«ForceClassicControlPanel»=1

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«HonorAutoRunSetting»=1

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesMSN Messengermsnmsgr.exe»=»C:Program FilesMSN Messengermsnmsgr.exe:*:Enabled:Windows Live Messenger 8.1»
«C:Program FilesMSN Messengerlivecall.exe»=»C:Program FilesMSN Messengerlivecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)»
«C:Program FilesICQ6ICQ.exe»=»C:Program FilesICQ6ICQ.exe:*:Enabled:ICQ6»
«C:Program FilesICQ6.5ICQ.exe»=»C:Program FilesICQ6.5ICQ.exe:*:Enabled:ICQ6»
«C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
«C:Program FilesSkypePlugin ManagerskypePM.exe»=»C:Program FilesSkypePlugin ManagerskypePM.exe:*:Enabled:Skype Extras Manager»
«C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesMSN Messengermsnmsgr.exe»=»C:Program FilesMSN Messengermsnmsgr.exe:*:Enabled:Windows Live Messenger 8.1»
«C:Program FilesMSN Messengerlivecall.exe»=»C:Program FilesMSN Messengerlivecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)»

======List of files/folders created in the last 1 months======

2010-07-15 07:24:45 —-D—- C:rsit
2010-07-15 07:24:45 —-D—- C:Program Filestrend micro
2010-07-14 03:01:35 —-HDC—- C:WINDOWS$NtUninstallKB2229593$
2010-07-09 09:29:24 —-D—- C:Documents and SettingsuserApplication DataSUPERAntiSpyware.com
2010-07-09 09:29:24 —-D—- C:Documents and SettingsAll UsersApplication DataSUPERAntiSpyware.com
2010-07-09 09:29:16 —-D—- C:Program FilesSUPERAntiSpyware
2010-07-09 08:18:55 —-D—- C:WINDOWSWBEM
2010-07-09 08:17:48 —-D—- C:Program FilesMSXML 4.0
2010-07-09 08:17:43 —-D—- C:WINDOWSsystem32PreInstall
2010-07-08 23:58:35 —-HDC—- C:WINDOWS$NtUninstallKB970430$
2010-07-08 23:58:24 —-HDC—- C:WINDOWS$NtUninstallKB971737$
2010-07-08 22:09:25 —-D—- C:WINDOWSie8updates
2010-07-08 22:07:55 —-HDC—- C:WINDOWSie8
2010-07-08 07:40:37 —-A—- C:WINDOWSsystem32MRT.exe
2010-07-08 07:39:56 —-D—- C:Documents and SettingsAll UsersApplication DataWindows Genuine Advantage
2010-07-08 00:41:07 —-HDC—- C:WINDOWS$NtUninstallKB980218$
2010-07-08 00:41:02 —-HDC—- C:WINDOWS$NtUninstallKB951376-v2$
2010-07-08 00:40:57 —-HDC—- C:WINDOWS$NtUninstallKB952954$
2010-07-08 00:40:52 —-HDC—- C:WINDOWS$NtUninstallKB959426$
2010-07-08 00:40:48 —-HDC—- C:WINDOWS$NtUninstallKB956803$
2010-07-08 00:40:43 —-HDC—- C:WINDOWS$NtUninstallKB960859$
2010-07-08 00:40:39 —-HDC—- C:WINDOWS$NtUninstallKB971468$
2010-07-08 00:40:32 —-HDC—- C:WINDOWS$NtUninstallKB979683$
2010-07-08 00:40:28 —-HDC—- C:WINDOWS$NtUninstallKB958869$
2010-07-08 00:40:24 —-HDC—- C:WINDOWS$NtUninstallKB980195$
2010-07-08 00:40:19 —-HDC—- C:WINDOWS$NtUninstallKB980232$
2010-07-08 00:40:14 —-HDC—- C:WINDOWS$NtUninstallKB979402_WM9$
2010-07-08 00:40:09 —-HDC—- C:WINDOWS$NtUninstallKB955759$
2010-07-08 00:39:59 —-HDC—- C:WINDOWS$NtUninstallKB974318$
2010-07-08 00:39:54 —-HDC—- C:WINDOWS$NtUninstallKB951978$
2010-07-08 00:39:49 —-HDC—- C:WINDOWS$NtUninstallKB969059$
2010-07-08 00:39:44 —-HDC—- C:WINDOWS$NtUninstallKB981349$
2010-07-08 00:39:40 —-HDC—- C:WINDOWS$NtUninstallKB950974$
2010-07-08 00:39:36 —-HDC—- C:WINDOWS$NtUninstallKB978037$
2010-07-08 00:39:31 —-HDC—- C:WINDOWS$NtUninstallKB975713$
2010-07-08 00:39:26 —-HDC—- C:WINDOWS$NtUninstallKB971657$
2010-07-08 00:39:22 —-HDC—- C:WINDOWS$NtUninstallKB978338$
2010-07-08 00:39:18 —-HDC—- C:WINDOWS$NtUninstallKB954155_WM9$
2010-07-08 00:39:14 —-HDC—- C:WINDOWS$NtUninstallKB960225$
2010-07-08 00:39:10 —-HDC—- C:WINDOWS$NtUninstallKB972270$
2010-07-08 00:39:06 —-HDC—- C:WINDOWS$NtUninstallKB956744$
2010-07-08 00:39:01 —-HDC—- C:WINDOWS$NtUninstallKB974112$
2010-07-08 00:38:52 —-HDC—- C:WINDOWS$NtUninstallKB956572$
2010-07-08 00:38:46 —-HDC—- C:WINDOWS$NtUninstallKB956844$
2010-07-08 00:38:42 —-HDC—- C:WINDOWS$NtUninstallKB961501$
2010-07-08 00:38:38 —-HDC—- C:WINDOWS$NtUninstallKB975561$
2010-07-08 00:38:33 —-HDC—- C:WINDOWS$NtUninstallKB973869$
2010-07-08 00:38:29 —-HDC—- C:WINDOWS$NtUninstallKB975025$
2010-07-08 00:38:23 —-HDC—- C:WINDOWS$NtUninstallKB952004$
2010-07-08 00:38:19 —-HDC—- C:WINDOWS$NtUninstallKB974571$
2010-07-08 00:38:15 —-HDC—- C:WINDOWS$NtUninstallKB975560$
2010-07-08 00:38:10 —-HDC—- C:WINDOWS$NtUninstallKB973507$
2010-07-08 00:38:06 —-HDC—- C:WINDOWS$NtUninstallKB941569$
2010-07-08 00:37:50 —-HDC—- C:WINDOWS$NtUninstallKB977816$
2010-07-08 00:37:45 —-HDC—- C:WINDOWS$NtUninstallKB973687$
2010-07-08 00:37:41 —-HDC—- C:WINDOWS$NtUninstallKB950762$
2010-07-08 00:37:37 —-HDC—- C:WINDOWS$NtUninstallKB981793$
2010-07-08 00:37:32 —-HDC—- C:WINDOWS$NtUninstallKB978601$
2010-07-08 00:37:28 —-HDC—- C:WINDOWS$NtUninstallKB979559$
2010-07-08 00:37:24 —-HDC—- C:WINDOWS$NtUninstallKB952287$
2010-07-08 00:37:20 —-HDC—- C:WINDOWS$NtUninstallKB978695_WM9$
2010-07-08 00:37:15 —-HDC—- C:WINDOWS$NtUninstallKB973904$
2010-07-08 00:37:08 —-HDC—- C:WINDOWS$NtUninstallKB967715$
2010-07-08 00:37:02 —-HDC—- C:WINDOWS$NtUninstallKB973540_WM9$
2010-07-08 00:36:58 —-HDC—- C:WINDOWS$NtUninstallKB950760$
2010-07-08 00:36:54 —-HDC—- C:WINDOWS$NtUninstallKB974392$
2010-07-08 00:36:50 —-HDC—- C:WINDOWS$NtUninstallKB954459$
2010-07-08 00:36:45 —-HDC—- C:WINDOWS$NtUninstallKB952069_WM9$
2010-07-08 00:36:40 —-HDC—- C:WINDOWS$NtUninstallKB977914$
2010-07-08 00:36:33 —-HDC—- C:WINDOWS$NtUninstallKB951748$
2010-07-08 00:36:29 —-HDC—- C:WINDOWS$NtUninstallKB978542$
2010-07-08 00:36:24 —-HDC—- C:WINDOWS$NtUninstallKB970238$
2010-07-08 00:36:21 —-HDC—- C:WINDOWS$NtUninstallKB979309$
2010-07-08 00:36:17 —-HDC—- C:WINDOWS$NtUninstallKB979482$
2010-07-08 00:36:12 —-HDC—- C:WINDOWS$NtUninstallKB978706$
2010-07-08 00:36:08 —-HDC—- C:WINDOWS$NtUninstallKB960803$
2010-07-08 00:36:04 —-HDC—- C:WINDOWS$NtUninstallKB973815$
2010-07-08 00:36:00 —-HDC—- C:WINDOWS$NtUninstallKB975562$
2010-07-08 00:35:56 —-HDC—- C:WINDOWS$NtUninstallKB958644$
2010-07-08 00:35:51 —-HDC—- C:WINDOWS$NtUninstallKB955069$
2010-07-08 00:35:47 —-HDC—- C:WINDOWS$NtUninstallKB956802$
2010-07-08 00:35:38 —-HDC—- C:WINDOWS$NtUninstallKB982381$
2010-07-08 00:35:21 —-HDC—- C:WINDOWS$NtUninstallKB923561$
2010-07-08 00:35:17 —-HDC—- C:WINDOWS$NtUninstallKB971961$
2010-07-08 00:35:13 —-HDC—- C:WINDOWS$NtUninstallKB975467$
2010-07-08 00:35:07 —-HDC—- C:WINDOWS$NtUninstallKB968389$
2010-07-07 18:53:00 —-N—- C:WINDOWSsystem32driversbthport.sys
2010-07-07 18:41:32 —-N—- C:WINDOWSsystem32xpsp4res.dll
2010-07-07 18:18:52 —-A—- C:WINDOWSimsins.BAK
2010-07-07 18:18:48 —-N—- C:WINDOWSsystem32spmsg.dll
2010-07-07 18:18:48 —-A—- C:WINDOWSsystem32spupdsvc.exe
2010-07-07 18:18:47 —-HDC—- C:WINDOWS$NtUninstallKB898461$
2010-07-07 18:18:47 —-HD—- C:WINDOWS$hf_mig$
2010-07-06 19:48:47 —-A—- C:WINDOWSsystem32wups2.dll
2010-07-06 19:48:47 —-A—- C:WINDOWSsystem32wups.dll
2010-07-06 19:48:46 —-A—- C:WINDOWSsystem32wucltui.dll.mui
2010-07-06 19:48:46 —-A—- C:WINDOWSsystem32wucltui.dll
2010-07-06 19:48:46 —-A—- C:WINDOWSsystem32wuauserv.dll
2010-07-06 19:48:46 —-A—- C:WINDOWSsystem32wuaueng.dll.mui
2010-07-06 19:48:46 —-A—- C:WINDOWSsystem32wuaueng.dll
2010-07-06 19:48:46 —-A—- C:WINDOWSsystem32wuauclt.exe
2010-07-06 19:48:46 —-A—- C:WINDOWSsystem32wuapi.dll.mui
2010-07-06 19:48:46 —-A—- C:WINDOWSsystem32wuapi.dll
2010-07-06 19:47:33 —-D—- C:WINDOWSSoftwareDistribution
2010-07-05 20:49:33 —-D—- C:Program FilesESET
2010-07-05 20:49:33 —-D—- C:Documents and SettingsAll UsersApplication DataESET

======List of files/folders modified in the last 1 months======

2010-07-15 07:24:53 —-D—- C:WINDOWSPrefetch
2010-07-15 07:24:46 —-D—- C:WINDOWSTemp
2010-07-15 07:24:45 —-RD—- C:Program Files
2010-07-15 07:21:37 —-D—- C:WINDOWSsystem32
2010-07-15 07:21:37 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2010-07-15 07:18:59 —-D—- C:Documents and SettingsuserApplication DataSkype
2010-07-15 07:17:35 —-D—- C:Documents and SettingsuserApplication DatauTorrent
2010-07-14 20:55:38 —-D—- C:Documents and SettingsuserApplication DataskypePM
2010-07-14 20:53:25 —-D—- C:WINDOWS
2010-07-14 18:20:41 —-A—- C:WINDOWSSchedLgU.Txt
2010-07-14 03:01:44 —-HD—- C:WINDOWSinf
2010-07-14 03:01:38 —-RSHDC—- C:WINDOWSsystem32dllcache
2010-07-14 03:01:19 —-D—- C:WINDOWSsystem32CatRoot2
2010-07-12 09:24:57 —-D—- C:Games
2010-07-09 08:19:09 —-D—- C:WINDOWSsystem32drivers
2010-07-09 08:18:48 —-D—- C:WINDOWSsystem32wbem
2010-07-09 08:17:48 —-SHD—- C:Config.Msi
2010-07-09 08:17:28 —-SHD—- C:WINDOWSInstaller
2010-07-09 08:17:19 —-D—- C:Program FilesOutlook Express
2010-07-09 08:17:00 —-D—- C:Program FilesMovie Maker
2010-07-09 08:16:41 —-D—- C:WINDOWSAppPatch
2010-07-09 08:16:27 —-D—- C:Program FilesInternet Explorer
2010-07-09 08:05:44 —-D—- C:WINDOWSsystem32Restore
2010-07-08 22:21:08 —-SD—- C:WINDOWSDownloaded Program Files
2010-07-08 22:10:57 —-D—- C:WINDOWSHelp
2010-07-08 22:08:55 —-D—- C:WINDOWSsystem32en-US
2010-07-08 22:08:49 —-D—- C:WINDOWSMedia
2010-07-08 07:40:11 —-SD—- C:WINDOWSTasks
2010-07-08 00:40:28 —-D—- C:WINDOWSWinSxS
2010-07-05 22:41:48 —-A—- C:WINDOWSNeroDigital.ini
2010-07-05 20:53:10 —-D—- C:Documents and SettingsAll UsersApplication DataAlwil Software
2010-06-30 22:13:01 —-A—- C:WINDOWSMyHeritage.INI
2010-06-28 08:22:46 —-D—- C:Documents and SettingsuserApplication DataICQ
2010-06-25 08:07:20 —-D—- C:Program FilesICQ6.5

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; C:WINDOWSSystem32DriversPxHelp20.sys [2006-05-17 46080]
R1 ehdrv;ehdrv; C:WINDOWSsystem32DRIVERSehdrv.sys [2010-04-07 114984]
R1 epfwtdir;epfwtdir; C:WINDOWSsystem32DRIVERSepfwtdir.sys [2010-04-07 95872]
R1 intelppm;Intel Processor Driver; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-13 36352]
R1 SASDIFSV;SASDIFSV; ??C:Program FilesSUPERAntiSpywareSASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; ??C:Program FilesSUPERAntiSpywareSASKUTIL.SYS []
R2 eamon;eamon; C:WINDOWSsystem32DRIVERSeamon.sys [2010-04-07 140216]
R2 mdmxsdk;mdmxsdk; C:WINDOWSsystem32DRIVERSmdmxsdk.sys [2004-03-17 13059]
R3 AtcL002;NDIS Miniport Driver for Atheros L2 Fast Ethernet Controller; C:WINDOWSsystem32DRIVERSl251x86.sys [2007-12-21 30720]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-13 144384]
R3 HSF_DPV;HSF_DPV; C:WINDOWSsystem32DRIVERSHSF_DPV.sys [2005-08-23 1035008]
R3 HSFHWBS2;HSFHWBS2; C:WINDOWSsystem32DRIVERSHSFHWBS2.sys [2005-08-23 244480]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2008-12-30 4751360]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2008-05-16 6557408]
R3 SQTECH930B;In-Sight Motion Webcam; C:WINDOWSSystem32DriversCapt930b.sys [2006-09-07 376374]
R3 usbstor;USB Mass Storage Driver; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-14 20608]
R3 winachsf;winachsf; C:WINDOWSsystem32DRIVERSHSF_CNXT.sys [2005-08-23 718464]
S3 CCDECODE;Closed Caption Decoder; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2008-04-14 17024]
S3 HidUsb;Microsoft HID Class Driver; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-13 10368]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:WINDOWSsystem32driversMSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:WINDOWSsystem32DRIVERSNdisIP.sys [2008-04-14 10880]
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2008-04-14 15232]
S3 usbaudio;USB Audio Driver (WDM); C:WINDOWSsystem32driversusbaudio.sys [2008-04-13 60032]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-13 32128]
S3 WSTCODEC;World Standard Teletext Codec; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2008-04-14 19200]
S4 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2001-08-23 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:Program FilesESETESET NOD32 Antivirusekrn.exe [2010-04-07 810120]
R2 UMWdf;Windows User Mode Driver Framework; C:WINDOWSsystem32wdfmgr.exe [2004-08-11 38912]
S2 gupdate;Google Update Service (gupdate); C:Program FilesGoogleUpdateGoogleUpdate.exe [2010-03-12 135664]
S3 EhttpSrv;ESET HTTP Server; C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe [2010-04-07 33560]
S4 NBService;NBService; C:Program FilesNeroNero 7Nero BackItUpNBService.exe [2007-01-05 774144]
S4 NMIndexingService;NMIndexingService; C:Program FilesCommon FilesAheadLibNMIndexingService.exe [2006-12-23 262144]
S4 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2008-05-16 159812]
S4 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]

EOF

и вот:
info.txt logfile of random’s system information tool 1.08 2010-07-15 07:25:00

======Uninstall list======

—>C:Program FilesNeroNero 7nerouninstallUNNERO.exe /UNINSTALL
—>C:WINDOWSUNNeroBackItUp.exe /UNINSTALL
—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
µTorrent—>»C:Program FilesuTorrentuTorrent.exe» /UNINSTALL
ABBYY Lingvo 12 Multilingual Edition—>MsiExec.exe /I{A1200000-0004-0000-0000-074957833700}
Adobe Acrobat 5.0—>C:WINDOWSISUNINST.EXE -f»C:Program FilesCommon FilesAdobeAcrobat 5.0NTUninst.isu» -c»C:Program FilesCommon FilesAdobeAcrobat 5.0NTUninst.dll»
Adobe Flash Player 10 ActiveX—>C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Flash Player 10 Plugin—>C:WINDOWSsystem32MacromedFlashuninstall_plugin.exe
Adobe Reader 8.2.0—>MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A82000000003}
ADOC N@vigator 2.2 Stand-alone—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime701Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{F75D1BE7-965C-4473-BB47-7AA7F0E202CF}setup.exe» -l0x9
Call Of Duty 2—>»C:Program FilesCall Of Duty 2unins000.exe»
Call Of Duty 4 Modern Warfare—>»C:Program FilesCall Of Duty 4 Modern Warfareunins000.exe»
CCleaner—>»C:Program FilesCCleaneruninst.exe»
Download Master version 5.6.5.1201—>»C:Program FilesDownload Masterunins000.exe»
Google Update Helper—>MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Планета Земля—>MsiExec.exe /X{F7B0939E-58DF-11DF-B3A6-005056806466}
Hotfix for Windows XP (KB952287)—>»C:WINDOWS$NtUninstallKB952287$spuninstspuninst.exe»
Hotfix for Windows XP (KB981793)—>»C:WINDOWS$NtUninstallKB981793$spuninstspuninst.exe»
ICQ6.5—>»C:Program FilesInstallShield Installation Information{60DE4033-9503-48D1-A483-7846BD217CA9}setup.exe» -runfromtemp -l0x0009 -removeonly
In-Sight Motion Webcam—>C:Program FilesInstallShield Installation Information{D0AF1483-31AD-4FEB-A961-C9327185439F}setup.exe -runfromtemp -l0x0009 -removeonly
K-Lite Codec Pack 4.2.5 (Full)—>»C:Program FilesK-Lite Codec Packunins000.exe»
L&H TTS3000 Deutsch—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFLHTTSGED.inf, Uninstall
L&H TTS3000 Espaсol—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFLHTTSSPE.inf, Uninstall
L&H TTS3000 Franзais—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFLHTTSFRF.inf, Uninstall
L&H TTS3000 Italiano—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFLHTTSITI.inf, Uninstall
L&H TTS3000 Russian—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFLHTTSRUR.inf, Uninstall
Lernout & Hauspie TruVoice American English TTS Engine—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFtv_enua.inf, Uninstall
LoudMo Contextual Ad Assistant—>C:WINDOWSsystem32pS-b-H1b.exe
Mail.Ru Агент 5.3 (сборка 2564, для всех пользователей)—>C:Program FilesMail.RuAgentmagentsetup.exe -uninstalllm
Mail.Ru Спутник 2.0.1.54—>C:Program FilesMail.RuSputnikSputnikInstaller.exe -uninstall
Microsoft Office — профессиональный выпуск версии 2003—>MsiExec.exe /I{90110419-6000-11D3-8CFE-0150048383C9}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable — x86 9.0.30729.4148—>MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Mozilla Firefox (3.0.18)—>C:Program FilesMozilla Firefoxuninstallhelper.exe
MSXML 4.0 SP2 (KB954430)—>MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)—>MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
My Web Search (Smiley Central)—>rundll32 C:PROGRA~1MYWEBS~1bar1.binmwsbar.dll,O
MyHeritage Family Tree Builder—>C:Program FilesMyHeritageBinUninstall.exe
Need for Speed Most Wanted—>»C:Program FilesEA GAMESNeed for Speed Most Wantedunins000.exe»
Nero 7 Essentials—>MsiExec.exe /X{AAB93551-3FFE-42B2-8315-96252BBC1049}
NVIDIA Drivers—>C:WINDOWSsystem32nvuninst.exe UninstallGUI
Opera 9.62—>MsiExec.exe /X{D9226EB1-C528-48AC-B423-BD9240E1F60B}
PCI SoftV92 Modem—>C:Program FilesCONEXANTCNXT_MODEM_PCI_VEN_14F1&DEV_2F30&SUBSYS_205514F1HXFSetup.exe -U -IPSCRCTR5K.inf
PowerDVD—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}Setup.exe» -uninstall
PROMT Expert 7 Giant—>MsiExec.exe /I{CB1E6607-55D7-4E83-918C-6D5E2CA5090A}
Punto Switcher 3.1—>C:Program FilesYandexPunto Switcheruninstall.exe
Realtek High Definition Audio Driver—>RtlUpd.exe -r -m -nrg2709
save2pc Light 3.46—>»C:Program FilesFDRLabsave2pcunins000.exe»
Security Update for Windows Internet Explorer 8 (KB971961)—>»C:WINDOWSie8updatesKB971961-IE8spuninstspuninst.exe»
Security Update for Windows Internet Explorer 8 (KB981332)—>»C:WINDOWSie8updatesKB981332-IE8spuninstspuninst.exe»
Security Update for Windows Internet Explorer 8 (KB982381)—>»C:WINDOWSie8updatesKB982381-IE8spuninstspuninst.exe»
Security Update for Windows Media Player (KB952069)—>»C:WINDOWS$NtUninstallKB952069_WM9$spuninstspuninst.exe»
Security Update for Windows Media Player (KB954155)—>»C:WINDOWS$NtUninstallKB954155_WM9$spuninstspuninst.exe»
Security Update for Windows Media Player (KB973540)—>»C:WINDOWS$NtUninstallKB973540_WM9$spuninstspuninst.exe»
Security Update for Windows Media Player (KB978695)—>»C:WINDOWS$NtUninstallKB978695_WM9$spuninstspuninst.exe»
Security Update for Windows Media Player (KB979402)—>»C:WINDOWS$NtUninstallKB979402_WM9$spuninstspuninst.exe»
Security Update for Windows XP (KB2229593)—>»C:WINDOWS$NtUninstallKB2229593$spuninstspuninst.exe»
Security Update for Windows XP (KB923561)—>»C:WINDOWS$NtUninstallKB923561$spuninstspuninst.exe»
Security Update for Windows XP (KB941569)—>»C:WINDOWS$NtUninstallKB941569$spuninstspuninst.exe»
Security Update for Windows XP (KB950760)—>»C:WINDOWS$NtUninstallKB950760$spuninstspuninst.exe»
Security Update for Windows XP (KB950762)—>»C:WINDOWS$NtUninstallKB950762$spuninstspuninst.exe»
Security Update for Windows XP (KB950974)—>»C:WINDOWS$NtUninstallKB950974$spuninstspuninst.exe»
Security Update for Windows XP (KB951376-v2)—>»C:WINDOWS$NtUninstallKB951376-v2$spuninstspuninst.exe»
Security Update for Windows XP (KB951748)—>»C:WINDOWS$NtUninstallKB951748$spuninstspuninst.exe»
Security Update for Windows XP (KB952004)—>»C:WINDOWS$NtUninstallKB952004$spuninstspuninst.exe»
Security Update for Windows XP (KB952954)—>»C:WINDOWS$NtUninstallKB952954$spuninstspuninst.exe»
Security Update for Windows XP (KB954459)—>»C:WINDOWS$NtUninstallKB954459$spuninstspuninst.exe»
Security Update for Windows XP (KB955069)—>»C:WINDOWS$NtUninstallKB955069$spuninstspuninst.exe»
Security Update for Windows XP (KB956572)—>»C:WINDOWS$NtUninstallKB956572$spuninstspuninst.exe»
Security Update for Windows XP (KB956744)—>»C:WINDOWS$NtUninstallKB956744$spuninstspuninst.exe»
Security Update for Windows XP (KB956802)—>»C:WINDOWS$NtUninstallKB956802$spuninstspuninst.exe»
Security Update for Windows XP (KB956803)—>»C:WINDOWS$NtUninstallKB956803$spuninstspuninst.exe»
Security Update for Windows XP (KB956844)—>»C:WINDOWS$NtUninstallKB956844$spuninstspuninst.exe»
Security Update for Windows XP (KB958644)—>»C:WINDOWS$NtUninstallKB958644$spuninstspuninst.exe»
Security Update for Windows XP (KB958869)—>»C:WINDOWS$NtUninstallKB958869$spuninstspuninst.exe»
Security Update for Windows XP (KB959426)—>»C:WINDOWS$NtUninstallKB959426$spuninstspuninst.exe»
Security Update for Windows XP (KB960225)—>»C:WINDOWS$NtUninstallKB960225$spuninstspuninst.exe»
Security Update for Windows XP (KB960803)—>»C:WINDOWS$NtUninstallKB960803$spuninstspuninst.exe»
Security Update for Windows XP (KB960859)—>»C:WINDOWS$NtUninstallKB960859$spuninstspuninst.exe»
Security Update for Windows XP (KB961501)—>»C:WINDOWS$NtUninstallKB961501$spuninstspuninst.exe»
Security Update for Windows XP (KB969059)—>»C:WINDOWS$NtUninstallKB969059$spuninstspuninst.exe»
Security Update for Windows XP (KB970238)—>»C:WINDOWS$NtUninstallKB970238$spuninstspuninst.exe»
Security Update for Windows XP (KB970430)—>»C:WINDOWS$NtUninstallKB970430$spuninstspuninst.exe»
Security Update for Windows XP (KB971468)—>»C:WINDOWS$NtUninstallKB971468$spuninstspuninst.exe»
Security Update for Windows XP (KB971657)—>»C:WINDOWS$NtUninstallKB971657$spuninstspuninst.exe»
Security Update for Windows XP (KB971961)—>»C:WINDOWS$NtUninstallKB971961$spuninstspuninst.exe»
Security Update for Windows XP (KB972270)—>»C:WINDOWS$NtUninstallKB972270$spuninstspuninst.exe»
Security Update for Windows XP (KB973507)—>»C:WINDOWS$NtUninstallKB973507$spuninstspuninst.exe»
Security Update for Windows XP (KB973869)—>»C:WINDOWS$NtUninstallKB973869$spuninstspuninst.exe»
Security Update for Windows XP (KB973904)—>»C:WINDOWS$NtUninstallKB973904$spuninstspuninst.exe»
Security Update for Windows XP (KB974112)—>»C:WINDOWS$NtUninstallKB974112$spuninstspuninst.exe»
Security Update for Windows XP (KB974318)—>»C:WINDOWS$NtUninstallKB974318$spuninstspuninst.exe»
Security Update for Windows XP (KB974392)—>»C:WINDOWS$NtUninstallKB974392$spuninstspuninst.exe»
Security Update for Windows XP (KB974571)—>»C:WINDOWS$NtUninstallKB974571$spuninstspuninst.exe»
Security Update for Windows XP (KB975025)—>»C:WINDOWS$NtUninstallKB975025$spuninstspuninst.exe»
Security Update for Windows XP (KB975467)—>»C:WINDOWS$NtUninstallKB975467$spuninstspuninst.exe»
Security Update for Windows XP (KB975560)—>»C:WINDOWS$NtUninstallKB975560$spuninstspuninst.exe»
Security Update for Windows XP (KB975561)—>»C:WINDOWS$NtUninstallKB975561$spuninstspuninst.exe»
Security Update for Windows XP (KB975562)—>»C:WINDOWS$NtUninstallKB975562$spuninstspuninst.exe»
Security Update for Windows XP (KB975713)—>»C:WINDOWS$NtUninstallKB975713$spuninstspuninst.exe»
Security Update for Windows XP (KB977816)—>»C:WINDOWS$NtUninstallKB977816$spuninstspuninst.exe»
Security Update for Windows XP (KB977914)—>»C:WINDOWS$NtUninstallKB977914$spuninstspuninst.exe»
Security Update for Windows XP (KB978037)—>»C:WINDOWS$NtUninstallKB978037$spuninstspuninst.exe»
Security Update for Windows XP (KB978338)—>»C:WINDOWS$NtUninstallKB978338$spuninstspuninst.exe»
Security Update for Windows XP (KB978542)—>»C:WINDOWS$NtUninstallKB978542$spuninstspuninst.exe»
Security Update for Windows XP (KB978601)—>»C:WINDOWS$NtUninstallKB978601$spuninstspuninst.exe»
Security Update for Windows XP (KB978706)—>»C:WINDOWS$NtUninstallKB978706$spuninstspuninst.exe»
Security Update for Windows XP (KB979309)—>»C:WINDOWS$NtUninstallKB979309$spuninstspuninst.exe»
Security Update for Windows XP (KB979482)—>»C:WINDOWS$NtUninstallKB979482$spuninstspuninst.exe»
Security Update for Windows XP (KB979559)—>»C:WINDOWS$NtUninstallKB979559$spuninstspuninst.exe»
Security Update for Windows XP (KB979683)—>»C:WINDOWS$NtUninstallKB979683$spuninstspuninst.exe»
Security Update for Windows XP (KB980195)—>»C:WINDOWS$NtUninstallKB980195$spuninstspuninst.exe»
Security Update for Windows XP (KB980218)—>»C:WINDOWS$NtUninstallKB980218$spuninstspuninst.exe»
Security Update for Windows XP (KB980232)—>»C:WINDOWS$NtUninstallKB980232$spuninstspuninst.exe»
Security Update for Windows XP (KB981349)—>»C:WINDOWS$NtUninstallKB981349$spuninstspuninst.exe»
Security Update for Windows XP (KB982381)—>»C:WINDOWS$NtUninstallKB982381$spuninstspuninst.exe»
Skype Toolbars—>MsiExec.exe /I{981029E0-7FC9-4CF3-AB39-6F133621921A}
Skype™ 4.2—>MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
SUPERAntiSpyware—>»C:Program FilesSUPERAntiSpywareUninstall.exe»
Ulead Photo Explorer 7.0 SE—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{E38E1721-7FE7-11D4-A898-0000E83DCDA6}setup.exe» -l0x9
Update for Windows Internet Explorer 8 (KB976662)—>»C:WINDOWSie8updatesKB976662-IE8spuninstspuninst.exe»
Update for Windows Internet Explorer 8 (KB982632)—>»C:WINDOWSie8updatesKB982632-IE8spuninstspuninst.exe»
Update for Windows XP (KB898461)—>»C:WINDOWS$NtUninstallKB898461$spuninstspuninst.exe»
Update for Windows XP (KB951978)—>»C:WINDOWS$NtUninstallKB951978$spuninstspuninst.exe»
Update for Windows XP (KB955759)—>»C:WINDOWS$NtUninstallKB955759$spuninstspuninst.exe»
Update for Windows XP (KB967715)—>»C:WINDOWS$NtUninstallKB967715$spuninstspuninst.exe»
Update for Windows XP (KB968389)—>»C:WINDOWS$NtUninstallKB968389$spuninstspuninst.exe»
Update for Windows XP (KB971737)—>»C:WINDOWS$NtUninstallKB971737$spuninstspuninst.exe»
Update for Windows XP (KB973687)—>»C:WINDOWS$NtUninstallKB973687$spuninstspuninst.exe»
Update for Windows XP (KB973815)—>»C:WINDOWS$NtUninstallKB973815$spuninstspuninst.exe»
Winamp (remove only)—>»C:Program FilesWinampUninstWA.exe»
Windows Internet Explorer 8—>»C:WINDOWSie8spuninstspuninst.exe»
Windows Media Format Runtime—>»C:Program FilesWindows Media Playerwmsetsdk.exe» /UninstallAll
Архиватор WinRAR—>C:Program FilesWinRARuninstall.exe
Свен Всемогущий—>»C:Program FilesРуссобит-МСвен Всемогущийunins000.exe»

======Security center information======

AV: ESET NOD32 Antivirus 4.2

======System event log======

Computer Name: KOMPUTER
Event Code: 7036
Message: Служба «Application Layer Gateway Service» перешла в состояние Работает.

Record Number: 14791
Source Name: Service Control Manager
Time Written: 20100603204131.000000+240
Event Type: информация
User:

Computer Name: KOMPUTER
Event Code: 7035
Message: Служба «Application Layer Gateway Service» успешно отправила управляющий элемент «запустить».

Record Number: 14790
Source Name: Service Control Manager
Time Written: 20100603204131.000000+240
Event Type: информация
User: NT AUTHORITYSYSTEM

Computer Name: KOMPUTER
Event Code: 7036
Message: Служба «IMAPI CD-Burning COM Service» перешла в состояние Работает.

Record Number: 14789
Source Name: Service Control Manager
Time Written: 20100603204131.000000+240
Event Type: информация
User:

Computer Name: KOMPUTER
Event Code: 7035
Message: Служба «IMAPI CD-Burning COM Service» успешно отправила управляющий элемент «запустить».

Record Number: 14788
Source Name: Service Control Manager
Time Written: 20100603204131.000000+240
Event Type: информация
User: NT AUTHORITYSYSTEM

Computer Name: KOMPUTER
Event Code: 7036
Message: Служба «Terminal Services» перешла в состояние Работает.

Record Number: 14787
Source Name: Service Control Manager
Time Written: 20100603204131.000000+240
Event Type: информация
User:

=====Application event log=====

Computer Name: KOMPUTER
Event Code: 1903
Message:
Record Number: 5910
Source Name: HHCTRL
Time Written: 20100524142400.000000+240
Event Type: информация
User:

Computer Name: KOMPUTER
Event Code: 1903
Message:
Record Number: 5909
Source Name: HHCTRL
Time Written: 20100524135401.000000+240
Event Type: информация
User:

Computer Name: KOMPUTER
Event Code: 20
Message:
Record Number: 5908
Source Name: Google Update
Time Written: 20100524132605.000000+240
Event Type: ошибка
User: NT AUTHORITYSYSTEM

Computer Name: KOMPUTER
Event Code: 1903
Message:
Record Number: 5907
Source Name: HHCTRL
Time Written: 20100524132401.000000+240
Event Type: информация
User:

Computer Name: KOMPUTER
Event Code: 1903
Message:
Record Number: 5906
Source Name: HHCTRL
Time Written: 20100524125401.000000+240
Event Type: информация
User:

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=6
«PROCESSOR_IDENTIFIER»=x86 Family 6 Model 15 Stepping 13, GenuineIntel
«PROCESSOR_REVISION»=0f0d
«NUMBER_OF_PROCESSORS»=2
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP

EOF

а удалить мне нужно, я даже не знаю как сказать, программку, не программку, просто при автоматическом обновлении у меня появилась надпись что винда не лицензионная, и так далее, нашла как от этого избавиться, но нужно войти в безопасный режим для этого, а войти то как раз и не получается
Автор

Сообщения

Просмотр 1 сообщения - с 1 по 1 (всего 1)

golovastik

Созданные ответы форума

Добро пожаловать

Поиск

Важные инструкции

Убрать рекламу в браузере (Chrome, Firefox, Opera, Yandex)

Какой лучший антивирус ? Как выбрать антивирус ?

Как восстановить зашифрованные файлы (Инструкция)

Удалить вирус, всплывающие окна и рекламу в Mac OS X

Как удалить вирус с телефона Андроид (Инструкция)

СПАЙВАРЕ РУ

Нужна помощь?

Ссылки