Созданные ответы форума
-
Сообщения
-
Ах да, совсем забыл от радости, реклама благополучно исчезла. Спасибо вам большое.
Вот Лог от OTMoveIt:
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{065408F9-7ADC-41E0-87C0-771916035956}\ deleted successfully.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{3a7a909c-7549-11dd-959b-0016cfceca51}\ deleted successfully.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{3e82a8d2-7ee5-11dd-95a9-0016cfceca51}\ deleted successfully.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{58efa9fd-be78-11dd-9678-0016cfceca51}\ deleted successfully.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{5cd4aab0-9379-11dd-960d-0015c5729cc7}\ deleted successfully.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{87e8e196-8a3f-11dc-9070-0016cfceca51}\ deleted successfully.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{9187d8f2-eea7-11dd-81a4-0016cfceca51}\ deleted successfully.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{d63fb722-df61-11dc-92bb-0016cfceca51}\ deleted successfully.
========== FILES ==========
C:Documents and SettingsAll UsersApplication Databxolib.dll unregistered successfully.
C:Documents and SettingsAll UsersApplication Databxolib.dll moved successfully.
========== COMMANDS ==========
User’s Temp folder emptied.
User’s Temporary Internet Files folder emptied.
User’s Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:Documents and SettingsLocalServiceLocal SettingsTemporary Internet FilesContent.IE5index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:WINDOWStempPerflib_Perfdata_68c.dat scheduled to be deleted on reboot.
File delete failed. C:WINDOWStempPerflib_Perfdata_758.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfullyOTMoveIt3 by OldTimer — Version 1.0.8.0 log created on 02092009_025827
Files moved on Reboot…
File move failed. C:Documents and SettingsLocalServiceLocal SettingsTemporary Internet FilesContent.IE5index.dat scheduled to be moved on reboot.
File C:WINDOWStempPerflib_Perfdata_68c.dat not found!
File C:WINDOWStempPerflib_Perfdata_758.dat not found!А вот новый Лог от RSIT:
Logfile of random’s system information tool 1.05 (written by random/random)
Run by ШОК at 2009-02-09 15:44:45
Microsoft Windows XP Professional Service Pack 3
System drive C: has 5 GB (5%) free of 109 GB
Total RAM: 1014 MB (62% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:44:55, on 09.02.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesIntelWirelessBinEvtEng.exe
C:Program FilesIntelWirelessBinS24EvMon.exe
C:Program FilesIntelWirelessBinWLKeeper.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe
C:Program FilesJavajre6binjqs.exe
C:Program FilesIntelWirelessBinRegSrvc.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32SearchIndexer.exe
C:Program FilesJavajre6binjusched.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesIntelWirelessbinZCfgSvc.exe
C:Program FilesIntelWirelessBinifrmewrk.exe
C:WINDOWSSystem32DLADLACTRLW.EXE
C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe
C:Program FilesDellMediaDirectPCMService.exe
C:PROGRA~1ALWILS~1Avast4ashDisp.exe
C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe
C:WINDOWSsystem32wuauclt.exe
C:Program FilesCyberlinkShared Filesbrs.exe
C:WINDOWSsystem32hkcmd.exe
C:WINDOWSsystem32igfxpers.exe
C:WINDOWSstsystra.exe
C:WINDOWSsystem32igfxsrvc.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe
C:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe
C:Program FilesDigital Line DetectDLG.exe
C:Program Fileswarc10warc.exe
C:PROGRA~1IntelWirelessBinDot1XCfg.exe
C:PROGRA~1WIDCOMMBLUETO~1BTSTAC~1.EXE
C:Program FilesFreedom ScientificJAWS9.0jfw.exe
C:Documents and SettingsШОКРабочий столRSIT.exe
C:Program Filestrend microШОК.exeR0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:pahaагентMradllnewmrasearch.dll
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 — BHO: Skype add-on (mastermind) — {22BF413B-C6D2-4d91-82A9-A0F997BA588C} — C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O2 — BHO: DriveLetterAccess — {5CA3D70E-1895-11CF-8E15-001234567890} — C:WINDOWSSystem32DLADLASHX_W.DLL
O2 — BHO: Java(tm) Plug-In SSV Helper — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre6binssv.dll
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — C:PROGRA~1DOWNLO~1dmiehlp.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 — Toolbar: (no name) — {E0E899AB-F487-11D5-8D29-0050BA6940E3} — (no file)
O3 — Toolbar: DM Bar — {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — C:Program FilesDownload Masterdmbar.dll
O4 — HKLM..Run: [SunJavaUpdateSched] «C:Program FilesJavajre6binjusched.exe»
O4 — HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 — HKLM..Run: [IntelZeroConfig] «C:Program FilesIntelWirelessbinZCfgSvc.exe»
O4 — HKLM..Run: [IntelWireless] «C:Program FilesIntelWirelessBinifrmewrk.exe» /tf Intel PROSet/Wireless
O4 — HKLM..Run: [DLA] C:WINDOWSSystem32DLADLACTRLW.EXE
O4 — HKLM..Run: [ISUSPM Startup] C:PROGRA~1COMMON~1INSTAL~1UPDATE~1ISUSPM.exe -startup
O4 — HKLM..Run: [ISUSScheduler] «C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe» -start
O4 — HKLM..Run: [PCMService] «C:Program FilesDellMediaDirectPCMService.exe»
O4 — HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 — HKLM..Run: [QuickTime Task] «C:Program FilesQuickTimeqttask.exe» -atboottime
O4 — HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 — HKLM..Run: [RemoteControl8] «C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe»
O4 — HKLM..Run: [PDVD8LanguageShortcut] «C:Program FilesCyberLinkPowerDVD8LanguageLanguage.exe»
O4 — HKLM..Run: [BDRegion] C:Program FilesCyberlinkShared Filesbrs.exe
O4 — HKLM..Run: [igfxtray] C:WINDOWSsystem32igfxtray.exe
O4 — HKLM..Run: [igfxhkcmd] C:WINDOWSsystem32hkcmd.exe
O4 — HKLM..Run: [igfxpers] C:WINDOWSsystem32igfxpers.exe
O4 — HKLM..Run: [SigmatelSysTrayApp] stsystra.exe
O4 — HKLM..Run: [MAgent] C:pahaагентMAgent.exe -LM
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [MSMSGS] «C:Program FilesMessengermsmsgs.exe» /background
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe (User ‘Default user’)
O4 — Startup: SAM.lnk = C:Program FilesSAMSAM.exe
O4 — Startup: WinAmp Remote Control.lnk = C:Program Fileswarc10warc.exe
O4 — Global Startup: Adobe Reader Speed Launch.lnk = C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe
O4 — Global Startup: BTTray.lnk = ?
O4 — Global Startup: Digital Line Detect.lnk = ?
O4 — Global Startup: Picture Package Menu.lnk = ?
O4 — Global Startup: Picture Package VCD Maker.lnk = ?
O8 — Extra context menu item: &Отправить на устройство Bluetooth… — C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie_ctx.htm
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — C:Program FilesDownload Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — C:Program FilesDownload Masterdmie.htm
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:pahaагентmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:pahaагентmagent.exe
O9 — Extra button: Skype — {77BF5300-1474-4EC7-9980-D32B190E9B07} — C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O16 — DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) — http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1223226802781
O17 — HKLMSystemCCSServicesTcpip..{D733DA66-9B1B-4F4D-8903-D59D5A5913B3}: NameServer = 91.189.232.2,91.189.233.2
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O23 — Service: avast! iAVS4 Control Service (aswUpdSv) — ALWIL Software — C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 — Service: avast! Antivirus — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 — Service: avast! Mail Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 — Service: avast! Web Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 — Service: Bluetooth Service (btwdins) — Broadcom Corporation. — C:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Intel(R) PROSet/Wireless Event Log (EvtEng) — Intel Corporation — C:Program FilesIntelWirelessBinEvtEng.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — C:Program FilesJavajre6binjqs.exe
O23 — Service: Kaspersky Anti-Virus Service (kavsvc) — Unknown owner — C:Program FilesKaspersky LabKaspersky Anti-Virus 5.0 for Windows Workstationskavsvc.exe (file missing)
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) — Intel Corporation — C:Program FilesIntelWirelessBinRegSrvc.exe
O23 — Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) — Intel Corporation — C:Program FilesIntelWirelessBinS24EvMon.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: FrontLine Drivers Auto Removal (v2) (sfrem02) — Protection Technology (StarForce) — C:WINDOWSsystem32sfrem02.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) — Intel(R) Corporation — C:Program FilesIntelWirelessBinWLKeeper.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe
O24 — Desktop Component 0: (no name) — http://www.anime-zone.ru/wallpaper/show/883.jpg—
End of file — 10948 bytes======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll [2006-12-18 59032][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) — C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll [2008-08-11 1443112][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{5CA3D70E-1895-11CF-8E15-001234567890}]
DriveLetterAccess — C:WINDOWSSystem32DLADLASHX_W.DLL [2005-09-08 110652][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper — C:Program FilesJavajre6binssv.dll [2008-12-02 320920][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — C:PROGRA~1DOWNLO~1dmiehlp.dll [2008-10-24 157696][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2008-12-02 34816][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2008-12-02 73728][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3}
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — DM Bar — C:Program FilesDownload Masterdmbar.dll [2007-11-26 180224][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«SunJavaUpdateSched»=C:Program FilesJavajre6binjusched.exe [2008-12-02 136600]
«SynTPEnh»=C:Program FilesSynapticsSynTPSynTPEnh.exe [2006-03-09 761947]
«IntelZeroConfig»=C:Program FilesIntelWirelessbinZCfgSvc.exe [2006-05-01 667718]
«IntelWireless»=C:Program FilesIntelWirelessBinifrmewrk.exe [2006-05-01 602182]
«DLA»=C:WINDOWSSystem32DLADLACTRLW.EXE [2005-09-08 122940]
«ISUSPM Startup»=C:PROGRA~1COMMON~1INSTAL~1UPDATE~1ISUSPM.exe [2004-07-28 221184]
«ISUSScheduler»=C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe [2004-07-28 81920]
«PCMService»=C:Program FilesDellMediaDirectPCMService.exe [2006-08-23 184320]
«NeroFilterCheck»=C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
«QuickTime Task»=C:Program FilesQuickTimeqttask.exe [2007-10-28 98304]
«avast!»=C:PROGRA~1ALWILS~1Avast4ashDisp.exe [2008-11-27 81000]
«RemoteControl8″=C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe [2008-03-20 83240]
«PDVD8LanguageShortcut»=C:Program FilesCyberLinkPowerDVD8LanguageLanguage.exe [2007-12-14 50472]
«BDRegion»=C:Program FilesCyberlinkShared Filesbrs.exe [2008-06-27 91432]
«igfxtray»=C:WINDOWSsystem32igfxtray.exe [2005-12-13 98304]
«igfxhkcmd»=C:WINDOWSsystem32hkcmd.exe [2005-12-13 77824]
«igfxpers»=C:WINDOWSsystem32igfxpers.exe [2005-12-13 118784]
«SigmatelSysTrayApp»=C:WINDOWSstsystra.exe [2006-03-25 282624]
«MAgent»=C:pahaагентMAgent.exe [2009-01-13 3040760][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-16 15360]
«MSMSGS»=C:Program FilesMessengermsmsgs.exe [2008-04-15 1695232]C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
Adobe Reader Speed Launch.lnk — C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe
BTTray.lnk — C:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe
Digital Line Detect.lnk — C:Program FilesDigital Line DetectDLG.exe
Picture Package Menu.lnk — C:Program FilesSony CorporationPicture PackagePicture Package MenuSonyTray.exe
Picture Package VCD Maker.lnk — C:Program FilesSony CorporationPicture PackagePicture Package ApplicationsResidence.exeC:Documents and SettingsШОКГлавное менюПрограммыАвтозагрузка
SAM.lnk — C:Program FilesSAMSAM.exe
WinAmp Remote Control.lnk — C:Program Fileswarc10warc.exe[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyigfxcui]
C:WINDOWSsystem32igfxdev.dll [2005-12-13 139264][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWgaLogon]
WgaLogon.dll [][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{56F9679E-7826-4C84-81F3-532071A8BCC5}»=C:Program FilesWindows Desktop SearchMSNLNamespaceMgr.dll [2008-05-26 304128][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=36
«NoDriveAutoRun»=FFFFFFFF
«NoDrives»=0[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveAutoRun»=
«NoDriveTypeAutoRun»=
«NoDrives»=[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesDellMediaDirectPCMService.exe»=»C:Program FilesDellMediaDirectPCMService.exe:*:Enabled:CyberLink PowerCinema Resident Program»
«C:Program FilesQIPqip.exe»=»C:Program FilesQIPqip.exe:*:Enabled:Quiet Internet Pager»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
«C:Program FileseMuleemule.exe»=»C:Program FileseMuleemule.exe:*:Enabled:eMule»
«C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»======File associations======
.inf — open — «C:Program FilesTextEdTextEd.exe» «%1»
.inf — install —
.ini — open — «C:Program FilesTextEdTextEd.exe» «%1»
.txt — open — «C:Program FilesTextEdTextEd.exe» «%1»======List of files/folders created in the last 1 months======
2009-02-09 02:58:27 —-D—- C:_OTMoveIt
2009-02-09 02:47:45 —-RASHD—- C:autorun.inf
2009-02-06 15:03:59 —-SHD—- C:RECYCLER
2009-02-06 14:00:37 —-D—- C:Program Filestrend micro
2009-02-06 14:00:36 —-D—- C:rsit
2009-02-06 12:24:15 —-A—- C:ComboFix.txt
2009-02-06 12:18:17 —-D—- C:ComboFix
2009-02-06 11:33:41 —-A—- C:WINDOWSzip.exe
2009-02-06 11:33:41 —-A—- C:WINDOWSVFIND.exe
2009-02-06 11:33:41 —-A—- C:WINDOWSSWXCACLS.exe
2009-02-06 11:33:41 —-A—- C:WINDOWSSWSC.exe
2009-02-06 11:33:41 —-A—- C:WINDOWSSWREG.exe
2009-02-06 11:33:41 —-A—- C:WINDOWSsed.exe
2009-02-06 11:33:41 —-A—- C:WINDOWSNIRCMD.exe
2009-02-06 11:33:41 —-A—- C:WINDOWSgrep.exe
2009-02-06 11:33:41 —-A—- C:WINDOWSfdsv.exe
2009-02-06 11:33:33 —-D—- C:WINDOWSERDNT
2009-02-06 11:33:33 —-D—- C:Qoobox
2009-02-06 03:37:39 —-D—- C:Documents and SettingsШОКApplication DataMalwarebytes
2009-02-06 03:37:34 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2009-02-06 03:37:34 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2009-02-05 22:06:22 —-D—- C:Program FilesPanda Security
2009-02-01 19:20:00 —-A—- C:Documents and SettingsAll UsersApplication Datagyxlib.dll
2009-01-31 17:22:06 —-D—- C:SISSigner
2009-01-30 18:33:38 —-D—- C:Program FilesMSBuild
2009-01-30 18:33:28 —-D—- C:WINDOWSsystem32XPSViewer
2009-01-30 18:33:20 —-D—- C:WINDOWSsystem32en-us
2009-01-30 18:33:20 —-D—- C:Program FilesReference Assemblies
2009-01-30 18:32:30 —-N—- C:WINDOWSsystem32spmsg2.dll
2009-01-15 05:03:27 —-HDC—- C:WINDOWS$NtUninstallKB958687$
2009-01-12 21:35:30 —-D—- C:Documents and SettingsШОКApplication DataMra
2009-01-12 21:28:12 —-D—- C:Program FilesMail.Ru======List of files/folders modified in the last 1 months======
2009-02-09 15:44:38 —-D—- C:WINDOWSPrefetch
2009-02-09 15:41:57 —-D—- C:WINDOWSsystem32
2009-02-09 15:41:57 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2009-02-09 15:41:49 —-D—- C:Documents and SettingsШОКApplication DataSkype
2009-02-09 15:41:02 —-D—- C:MDT
2009-02-09 15:40:31 —-D—- C:WINDOWSTemp
2009-02-09 03:00:19 —-A—- C:WINDOWSModemLog_Факс-модем Bluetooth.txt
2009-02-09 03:00:19 —-A—- C:WINDOWSModemLog_Модем Bluetooth.txt
2009-02-09 03:00:13 —-A—- C:WINDOWSModemLog_Conexant HDA D110 MDC V.92 Modem.txt
2009-02-09 02:59:20 —-A—- C:WINDOWSSchedLgU.Txt
2009-02-09 02:52:04 —-D—- C:Program FilesMozilla Firefox
2009-02-08 01:06:15 —-A—- C:WINDOWSNeroDigital.ini
2009-02-07 22:04:54 —-D—- C:WINDOWSsystem32CatRoot2
2009-02-07 14:23:36 —-D—- C:WINDOWSsystem32FxsTmp
2009-02-06 20:22:27 —-D—- C:Program FilesQIP
2009-02-06 20:21:32 —-D—- C:Install
2009-02-06 20:19:45 —-D—- C:Downloads
2009-02-06 20:17:37 —-D—- C:Program FilesDownload Master
2009-02-06 14:00:37 —-RD—- C:Program Files
2009-02-06 12:24:17 —-D—- C:WINDOWS
2009-02-06 12:21:46 —-A—- C:WINDOWSsystem.ini
2009-02-06 12:20:46 —-D—- C:WINDOWSsystem32drivers
2009-02-06 12:20:44 —-D—- C:WINDOWSAppPatch
2009-02-06 12:20:44 —-D—- C:Program FilesCommon Files
2009-02-06 11:36:03 —-D—- C:WINDOWSsystem
2009-02-05 22:09:55 —-HD—- C:WINDOWSinf
2009-02-05 17:42:42 —-D—- C:paha
2009-02-05 15:58:25 —-D—- C:Documents and SettingsШОКApplication DatauTorrent
2009-02-03 13:24:27 —-RD—- C:Музыка
2009-01-30 20:12:10 —-D—- C:WINDOWSMicrosoft.NET
2009-01-30 20:12:09 —-RSD—- C:WINDOWSassembly
2009-01-30 19:52:47 —-SHD—- C:WINDOWSInstaller
2009-01-30 19:52:18 —-D—- C:WINDOWSsystem32CatRoot
2009-01-30 19:49:33 —-D—- C:WINDOWSWinSxS
2009-01-30 18:33:34 —-RSD—- C:WINDOWSFonts
2009-01-30 18:32:47 —-D—- C:WINDOWSsystem32spool
2009-01-30 18:32:33 —-RSHDC—- C:WINDOWSsystem32dllcache
2009-01-30 05:44:27 —-D—- C:Фильмы
2009-01-15 14:27:26 —-D—- C:Program FilesMicrosoft Office
2009-01-15 05:02:30 —-HD—- C:WINDOWS$hf_mig$
2009-01-14 04:19:24 —-D—- C:Program FilesFileZilla FTP Client
2009-01-14 04:18:36 —-D—- C:Documents and SettingsШОКApplication DataFileZilla
2009-01-13 14:28:47 —-SHD—- C:WINDOWSCSC
2009-01-10 13:35:28 —-A—- C:WINDOWSsystem32MRT.exe======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:WINDOWSsystem32driversAavmker4.sys [2008-11-27 26944]
R1 APPDRV;APPDRV; C:WINDOWSSYSTEM32DRIVERSAPPDRV.SYS [2005-08-13 16128]
R1 aswSP;avast! Self Protection; C:WINDOWSsystem32driversaswSP.sys [2008-11-27 111184]
R1 aswTdi;avast! Network Shield Support; C:WINDOWSsystem32driversaswTdi.sys [2008-11-27 50864]
R1 cdrbsvsd;cdrbsvsd; C:WINDOWSsystem32driverscdrbsvsd.sys [2003-12-03 13566]
R1 DLACDBHM;DLACDBHM; C:WINDOWSSystem32DriversDLACDBHM.SYS [2005-08-26 5628]
R1 DLARTL_N;DLARTL_N; C:WINDOWSSystem32DriversDLARTL_N.SYS [2005-08-26 22684]
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-16 40704]
R1 PQNTDrv;PQNTDrv; C:WINDOWSsystem32driversPQNTDrv.sys [2002-09-16 4228]
R1 WmiAcpi;Интерфейс управления для ACPI Microsoft Windows; C:WINDOWSsystem32DRIVERSwmiacpi.sys [2008-04-16 8832]
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2008-04-16 12032]
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}; ??C:Program FilesCyberLinkPowerDVD8 00.fcl []
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.10.0; C:WINDOWSsystem32DRIVERSAegisP.sys [2006-12-28 21275]
R2 aswFsBlk;aswFsBlk; C:WINDOWSsystem32DRIVERSaswFsBlk.sys [2008-11-27 20560]
R2 aswMon2;avast! Standard Shield Support; C:WINDOWSsystem32driversaswMon2.sys [2008-11-27 94032]
R2 BTSERIAL;Bluetooth Serial Driver; ??C:WINDOWSsystem32driversbtserial.sys []
R2 DLABOIOM;DLABOIOM; C:WINDOWSSystem32DLADLABOIOM.SYS [2005-09-08 25628]
R2 DLADResN;DLADResN; C:WINDOWSSystem32DLADLADResN.SYS [2005-09-08 2496]
R2 DLAIFS_M;DLAIFS_M; C:WINDOWSSystem32DLADLAIFS_M.SYS [2005-09-08 86524]
R2 DLAOPIOM;DLAOPIOM; C:WINDOWSSystem32DLADLAOPIOM.SYS [2005-09-08 14684]
R2 DLAPoolM;DLAPoolM; C:WINDOWSSystem32DLADLAPoolM.SYS [2005-09-08 6364]
R2 DLAUDF_M;DLAUDF_M; C:WINDOWSSystem32DLADLAUDF_M.SYS [2005-09-08 87036]
R2 DLAUDFAM;DLAUDFAM; C:WINDOWSSystem32DLADLAUDFAM.SYS [2005-09-08 94332]
R2 DRVNDDM;DRVNDDM; C:WINDOWSSystem32DriversDRVNDDM.SYS [2005-08-12 40544]
R2 mdmxsdk;mdmxsdk; C:WINDOWSsystem32DRIVERSmdmxsdk.sys [2005-10-05 12544]
R2 s24trans;Транспорт беспроводной сети; C:WINDOWSsystem32DRIVERSs24trans.sys [2006-05-01 13568]
R2 Sentinel;Sentinel; C:WINDOWSSystem32DriversSENTINEL.SYS [2001-06-22 73728]
R3 Arp1394;Протокол клиента 1394 ARP; C:WINDOWSsystem32DRIVERSarp1394.sys [2008-04-16 60800]
R3 aswRdr;aswRdr; C:WINDOWSsystem32driversaswRdr.sys [2008-11-27 23152]
R3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:WINDOWSsystem32DRIVERSbcm4sbxp.sys [2006-08-25 44544]
R3 btaudio;Аудиоустройство Bluetooth; C:WINDOWSsystem32driversbtaudio.sys [2006-05-25 328237]
R3 BTDriver;Драйвер виртуальной связи Bluetooth; C:WINDOWSsystem32DRIVERSbtport.sys [2006-05-25 30427]
R3 BTKRNL;Нумератор шины Bluetooth; C:WINDOWSsystem32DRIVERSbtkrnl.sys [2006-05-25 851434]
R3 BTWDNDIS;Сервер доступа к локальной сети Bluetooth; C:WINDOWSsystem32DRIVERSbtwdndis.sys [2006-05-25 148900]
R3 btwmodem;Модем Bluetooth; C:WINDOWSsystem32DRIVERSbtwmodem.sys [2006-05-25 30285]
R3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:WINDOWSSystem32Driversbtwusb.sys [2006-05-25 66488]
R3 CmBatt;Драйвер батареи с ACPI-управлением (Майкрософт); C:WINDOWSsystem32DRIVERSCmBatt.sys [2008-04-16 13952]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-16 144384]
R3 HSF_DPV;HSF_DPV; C:WINDOWSsystem32DRIVERSHSX_DPV.sys [2005-12-01 936960]
R3 HSXHWAZL;HSXHWAZL; C:WINDOWSsystem32DRIVERSHSXHWAZL.sys [2005-12-01 192512]
R3 ialm;ialm; C:WINDOWSsystem32DRIVERSialmnt5.sys [2005-12-13 1364574]
R3 NIC1394;Сетевой драйвер 1394; C:WINDOWSsystem32DRIVERSnic1394.sys [2008-04-16 61824]
R3 pcouffin;VSO Software pcouffin; C:WINDOWSSystem32Driverspcouffin.sys [2008-10-27 47360]
R3 pfc;Padus ASPI Shell; C:WINDOWSsystem32driverspfc.sys [2007-10-25 10368]
R3 rimmptsk;rimmptsk; C:WINDOWSsystem32DRIVERSrimmptsk.sys [2005-07-14 28544]
R3 rimsptsk;rimsptsk; C:WINDOWSsystem32DRIVERSrimsptsk.sys [2005-07-12 51328]
R3 rismxdp;Ricoh xD-Picture Card Driver; C:WINDOWSsystem32DRIVERSrixdptsk.sys [2005-07-14 307968]
R3 sdbus;sdbus; C:WINDOWSsystem32DRIVERSsdbus.sys [2008-04-16 79232]
R3 STHDA;SigmaTel High Definition Audio CODEC; C:WINDOWSsystem32driverssthda.sys [2006-03-25 1156648]
R3 SynTP;Synaptics TouchPad Driver; C:WINDOWSsystem32DRIVERSSynTP.sys [2006-03-09 191872]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-16 30208]
R3 usbhub;Драйвер стандартного концентратора USB (Microsoft); C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-16 59520]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-16 20608]
R3 w39n51;Intel(R) PRO/Wireless 3945ABG Adapter Driver; C:WINDOWSsystem32DRIVERSw39n51.sys [2006-04-27 1429632]
R3 winachsf;winachsf; C:WINDOWSsystem32DRIVERSHSX_CNXT.sys [2005-12-01 669696]
S1 kbdhid;Драйвер клавиатуры HID; C:WINDOWSsystem32DRIVERSkbdhid.sys [2008-04-16 14720]
S3 btwhid;btwhid; C:WINDOWSsystem32DRIVERSbtwhid.sys [2006-05-25 45683]
S3 E100B;Intel PRO адаптер, драйвер; C:WINDOWSsystem32DRIVERSe100b325.sys [2001-10-20 117760]
S3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-16 10368]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:WINDOWSsystem32DRIVERSk750bus.sys []
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:WINDOWSsystem32DRIVERSk750mdfl.sys []
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:WINDOWSsystem32DRIVERSk750mdm.sys []
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:WINDOWSsystem32DRIVERSk750mgmt.sys []
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:WINDOWSsystem32DRIVERSk750obex.sys []
S3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2008-04-16 12160]
S3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2004-08-04 1897408]
S3 sffdisk;Драйвер класса SFF Storage; C:WINDOWSsystem32DRIVERSsffdisk.sys [2008-04-16 11904]
S3 sffp_sd;Драйвер протокола SFF Storage для SDBus; C:WINDOWSsystem32DRIVERSsffp_sd.sys [2008-04-16 11008]
S3 slicedisk.sys;slicedisk.sys; ??C:WINDOWSsystem32slicedisk.sys []
S3 SONYPVU1;Драйвер Sony USB фильтра (SONYPVU1); C:WINDOWSsystem32DRIVERSSONYPVU1.SYS [2001-08-17 7552]
S3 StMp3Rec;Player Recovery Device Control Driver; C:WINDOWSSystem32DriversStMp3Rec.sys [2006-06-29 71368]
S3 usbaudio;Аудио драйвер USB (WDM); C:WINDOWSsystem32driversusbaudio.sys [2008-04-14 60032]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-16 32128]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-16 26368]
S4 agp440;Intel — фильтр шины AGP; C:WINDOWSsystem32DRIVERSagp440.sys [2008-04-14 42368]
S4 agpCPQ;Compaq — фильтр шины AGP; C:WINDOWSsystem32DRIVERSagpCPQ.sys [2008-04-14 44928]
S4 alim1541;ALI — фильтр шины AGP; C:WINDOWSsystem32DRIVERSalim1541.sys [2008-04-14 42752]
S4 amdagp;AMD — драйвер фильтра шины AGP; C:WINDOWSsystem32DRIVERSamdagp.sys [2008-04-14 43008]
S4 cbidf;cbidf; C:WINDOWSsystem32DRIVERScbidf2k.sys [2008-04-16 13952]
S4 IntelIde;IntelIde; C:WINDOWSsystem32DRIVERSintelide.sys [2008-04-16 5504]
S4 sisagp;SIS — фильтр шины AGP; C:WINDOWSsystem32DRIVERSsisagp.sys [2008-04-14 40960]
S4 viaagp;VIA — фильтр шины AGP; C:WINDOWSsystem32DRIVERSviaagp.sys [2008-04-14 42240]======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aswUpdSv;avast! iAVS4 Control Service; C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe [2008-11-27 18752]
R2 avast! Antivirus;avast! Antivirus; C:Program FilesAlwil SoftwareAvast4ashServ.exe [2008-11-27 155160]
R2 btwdins;Bluetooth Service; C:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe [2006-05-25 266295]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:Program FilesIntelWirelessBinEvtEng.exe [2006-05-01 114753]
R2 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2008-12-02 152984]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:Program FilesIntelWirelessBinRegSrvc.exe [2006-05-01 217164]
R2 S24EventMonitor;Intel(R) PROSet/Wireless Service; C:Program FilesIntelWirelessBinS24EvMon.exe [2006-05-01 540745]
R2 WLANKEEPER;Intel(R) PROSet/Wireless SSO Service; C:Program FilesIntelWirelessBinWLKeeper.exe [2006-05-01 262217]
R2 WSearch;Windows Search; C:WINDOWSsystem32SearchIndexer.exe [2008-05-26 439808]
S2 Fax;Fax; C:WINDOWSsystem32fxssvc.exe [2008-04-15 268288]
S2 kavsvc;Kaspersky Anti-Virus Service; C:Program FilesKaspersky LabKaspersky Anti-Virus 5.0 for Windows Workstationskavsvc.exe []
S2 sfrem02;FrontLine Drivers Auto Removal (v2); C:WINDOWSsystem32sfrem02.exe [2006-05-12 358008]
S3 aspnet_state;Служба состояний ASP.NET; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2007-10-24 33800]
S3 avast! Mail Scanner;avast! Mail Scanner; C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe [2008-11-27 254040]
S3 avast! Web Scanner;avast! Web Scanner; C:Program FilesAlwil SoftwareAvast4ashWebSv.exe [2008-11-27 352920]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2007-10-24 70144]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2007-10-09 36864]
S3 idsvc;Windows CardSpace; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2007-10-11 864256]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 UMWdf;Windows User Mode Driver Framework; C:WINDOWSsystem32wdfmgr.exe [2005-01-28 38912]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2007-10-11 122880]
EOF
Logfile of random’s system information tool 1.05 (written by random/random)
Run by ШОК at 2009-02-06 14:02:49
Microsoft Windows XP Professional Service Pack 3
System drive C: has 3 GB (3%) free of 109 GB
Total RAM: 1014 MB (43% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:02:50, on 06.02.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesIntelWirelessBinEvtEng.exe
C:Program FilesIntelWirelessBinS24EvMon.exe
C:Program FilesIntelWirelessBinWLKeeper.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:Program FilesJavajre6binjusched.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesIntelWirelessbinZCfgSvc.exe
C:Program FilesIntelWirelessBinifrmewrk.exe
C:WINDOWSSystem32DLADLACTRLW.EXE
C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe
C:Program FilesDellMediaDirectPCMService.exe
C:PROGRA~1ALWILS~1Avast4ashDisp.exe
C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe
C:Program FilesCyberlinkShared Filesbrs.exe
C:WINDOWSsystem32hkcmd.exe
C:WINDOWSsystem32igfxpers.exe
C:WINDOWSsystem32igfxsrvc.exe
C:WINDOWSstsystra.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesDigital Line DetectDLG.exe
C:PROGRA~1WIDCOMMBLUETO~1BTSTAC~1.EXE
C:Program Fileswarc10warc.exe
C:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe
C:Program FilesJavajre6binjqs.exe
C:Program FilesIntelWirelessBinRegSrvc.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32SearchIndexer.exe
C:PROGRA~1IntelWirelessBinDot1XCfg.exe
C:WINDOWSexplorer.exe
C:Program FilesMessengermsmsgs.exe
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:Program FilesFreedom ScientificJAWS9.0jfw.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Documents and SettingsШОКРабочий столRSIT.exe
C:Program Filestrend microШОК.exeR0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
O2 — BHO: bxolibP — {065408F9-7ADC-41E0-87C0-771916035956} — C:Documents and SettingsAll UsersApplication Databxolib.dll
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 — BHO: Skype add-on (mastermind) — {22BF413B-C6D2-4d91-82A9-A0F997BA588C} — C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O2 — BHO: DriveLetterAccess — {5CA3D70E-1895-11CF-8E15-001234567890} — C:WINDOWSSystem32DLADLASHX_W.DLL
O2 — BHO: Java(tm) Plug-In SSV Helper — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre6binssv.dll
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — C:PROGRA~1DOWNLO~1dmiehlp.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 — Toolbar: (no name) — {E0E899AB-F487-11D5-8D29-0050BA6940E3} — (no file)
O3 — Toolbar: DM Bar — {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — C:Program FilesDownload Masterdmbar.dll
O4 — HKLM..Run: [SunJavaUpdateSched] «C:Program FilesJavajre6binjusched.exe»
O4 — HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 — HKLM..Run: [IntelZeroConfig] «C:Program FilesIntelWirelessbinZCfgSvc.exe»
O4 — HKLM..Run: [IntelWireless] «C:Program FilesIntelWirelessBinifrmewrk.exe» /tf Intel PROSet/Wireless
O4 — HKLM..Run: [DLA] C:WINDOWSSystem32DLADLACTRLW.EXE
O4 — HKLM..Run: [ISUSPM Startup] C:PROGRA~1COMMON~1INSTAL~1UPDATE~1ISUSPM.exe -startup
O4 — HKLM..Run: [ISUSScheduler] «C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe» -start
O4 — HKLM..Run: [PCMService] «C:Program FilesDellMediaDirectPCMService.exe»
O4 — HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 — HKLM..Run: [QuickTime Task] «C:Program FilesQuickTimeqttask.exe» -atboottime
O4 — HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 — HKLM..Run: [RemoteControl8] «C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe»
O4 — HKLM..Run: [PDVD8LanguageShortcut] «C:Program FilesCyberLinkPowerDVD8LanguageLanguage.exe»
O4 — HKLM..Run: [BDRegion] C:Program FilesCyberlinkShared Filesbrs.exe
O4 — HKLM..Run: [igfxtray] C:WINDOWSsystem32igfxtray.exe
O4 — HKLM..Run: [igfxhkcmd] C:WINDOWSsystem32hkcmd.exe
O4 — HKLM..Run: [igfxpers] C:WINDOWSsystem32igfxpers.exe
O4 — HKLM..Run: [SigmatelSysTrayApp] stsystra.exe
O4 — HKLM..Run: [MAgent] C:pahaагентMAgent.exe -LM
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [MSMSGS] «C:Program FilesMessengermsmsgs.exe» /background
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe (User ‘Default user’)
O4 — Startup: SAM.lnk = C:Program FilesSAMSAM.exe
O4 — Startup: WinAmp Remote Control.lnk = C:Program Fileswarc10warc.exe
O4 — Global Startup: Adobe Reader Speed Launch.lnk = C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe
O4 — Global Startup: BTTray.lnk = ?
O4 — Global Startup: Digital Line Detect.lnk = ?
O4 — Global Startup: Picture Package Menu.lnk = ?
O4 — Global Startup: Picture Package VCD Maker.lnk = ?
O4 — Global Startup: Windows Search.lnk = C:Program FilesWindows Desktop SearchWindowsSearch.exe
O8 — Extra context menu item: &Отправить на устройство Bluetooth… — C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie_ctx.htm
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — C:Program FilesDownload Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — C:Program FilesDownload Masterdmie.htm
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:pahaагентmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:pahaагентmagent.exe
O9 — Extra button: Skype — {77BF5300-1474-4EC7-9980-D32B190E9B07} — C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O16 — DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) — http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1223226802781
O17 — HKLMSystemCCSServicesTcpip..{D733DA66-9B1B-4F4D-8903-D59D5A5913B3}: NameServer = 91.189.232.2,91.189.233.2
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O23 — Service: avast! iAVS4 Control Service (aswUpdSv) — ALWIL Software — C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 — Service: avast! Antivirus — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 — Service: avast! Mail Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 — Service: avast! Web Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 — Service: Bluetooth Service (btwdins) — Broadcom Corporation. — C:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Intel(R) PROSet/Wireless Event Log (EvtEng) — Intel Corporation — C:Program FilesIntelWirelessBinEvtEng.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — C:Program FilesJavajre6binjqs.exe
O23 — Service: Kaspersky Anti-Virus Service (kavsvc) — Unknown owner — C:Program FilesKaspersky LabKaspersky Anti-Virus 5.0 for Windows Workstationskavsvc.exe (file missing)
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) — Intel Corporation — C:Program FilesIntelWirelessBinRegSrvc.exe
O23 — Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) — Intel Corporation — C:Program FilesIntelWirelessBinS24EvMon.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: FrontLine Drivers Auto Removal (v2) (sfrem02) — Protection Technology (StarForce) — C:WINDOWSsystem32sfrem02.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) — Intel(R) Corporation — C:Program FilesIntelWirelessBinWLKeeper.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe
O24 — Desktop Component 0: (no name) — http://www.anime-zone.ru/wallpaper/show/883.jpg—
End of file — 11106 bytes======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{065408F9-7ADC-41E0-87C0-771916035956}]
LTAC Data Decoder — C:Documents and SettingsAll UsersApplication Databxolib.dll [2009-02-01 323072][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll [2006-12-18 59032][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) — C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll [2008-08-11 1443112][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{5CA3D70E-1895-11CF-8E15-001234567890}]
DriveLetterAccess — C:WINDOWSSystem32DLADLASHX_W.DLL [2005-09-08 110652][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper — C:Program FilesJavajre6binssv.dll [2008-12-02 320920][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — C:PROGRA~1DOWNLO~1dmiehlp.dll [2008-10-24 157696][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2008-12-02 34816][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2008-12-02 73728][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3}
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — DM Bar — C:Program FilesDownload Masterdmbar.dll [2007-11-26 180224][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«SunJavaUpdateSched»=C:Program FilesJavajre6binjusched.exe [2008-12-02 136600]
«SynTPEnh»=C:Program FilesSynapticsSynTPSynTPEnh.exe [2006-03-09 761947]
«IntelZeroConfig»=C:Program FilesIntelWirelessbinZCfgSvc.exe [2006-05-01 667718]
«IntelWireless»=C:Program FilesIntelWirelessBinifrmewrk.exe [2006-05-01 602182]
«DLA»=C:WINDOWSSystem32DLADLACTRLW.EXE [2005-09-08 122940]
«ISUSPM Startup»=C:PROGRA~1COMMON~1INSTAL~1UPDATE~1ISUSPM.exe [2004-07-28 221184]
«ISUSScheduler»=C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe [2004-07-28 81920]
«PCMService»=C:Program FilesDellMediaDirectPCMService.exe [2006-08-23 184320]
«NeroFilterCheck»=C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
«QuickTime Task»=C:Program FilesQuickTimeqttask.exe [2007-10-28 98304]
«avast!»=C:PROGRA~1ALWILS~1Avast4ashDisp.exe [2008-11-27 81000]
«RemoteControl8″=C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe [2008-03-20 83240]
«PDVD8LanguageShortcut»=C:Program FilesCyberLinkPowerDVD8LanguageLanguage.exe [2007-12-14 50472]
«BDRegion»=C:Program FilesCyberlinkShared Filesbrs.exe [2008-06-27 91432]
«igfxtray»=C:WINDOWSsystem32igfxtray.exe [2005-12-13 98304]
«igfxhkcmd»=C:WINDOWSsystem32hkcmd.exe [2005-12-13 77824]
«igfxpers»=C:WINDOWSsystem32igfxpers.exe [2005-12-13 118784]
«SigmatelSysTrayApp»=C:WINDOWSstsystra.exe [2006-03-25 282624]
«MAgent»=C:pahaагентMAgent.exe [2009-01-13 3040760][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-16 15360]
«MSMSGS»=C:Program FilesMessengermsmsgs.exe [2008-04-15 1695232]C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
Adobe Reader Speed Launch.lnk — C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe
BTTray.lnk — C:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe
Digital Line Detect.lnk — C:Program FilesDigital Line DetectDLG.exe
Picture Package Menu.lnk — C:Program FilesSony CorporationPicture PackagePicture Package MenuSonyTray.exe
Picture Package VCD Maker.lnk — C:Program FilesSony CorporationPicture PackagePicture Package ApplicationsResidence.exe
Windows Search.lnk — C:Program FilesWindows Desktop SearchWindowsSearch.exeC:Documents and SettingsШОКГлавное менюПрограммыАвтозагрузка
SAM.lnk — C:Program FilesSAMSAM.exe
WinAmp Remote Control.lnk — C:Program Fileswarc10warc.exe[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyigfxcui]
C:WINDOWSsystem32igfxdev.dll [2005-12-13 139264][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWgaLogon]
WgaLogon.dll [][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{56F9679E-7826-4C84-81F3-532071A8BCC5}»=C:Program FilesWindows Desktop SearchMSNLNamespaceMgr.dll [2008-05-26 304128][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=323
«NoDriveAutoRun»=67108863
«NoDrives»=0[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveAutoRun»=
«NoDriveTypeAutoRun»=
«NoDrives»=[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesDellMediaDirectPCMService.exe»=»C:Program FilesDellMediaDirectPCMService.exe:*:Enabled:CyberLink PowerCinema Resident Program»
«C:Program FilesQIPqip.exe»=»C:Program FilesQIPqip.exe:*:Enabled:Quiet Internet Pager»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
«C:Program FileseMuleemule.exe»=»C:Program FileseMuleemule.exe:*:Enabled:eMule»
«C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{3a7a909c-7549-11dd-959b-0016cfceca51}]
shellAutocommand — E:fun.xls.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL fun.xls.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{3e82a8d2-7ee5-11dd-95a9-0016cfceca51}]
shellAUToplaycommand — E:wmox.pif
shellAutoRuncommand — E:wmox.pif
shellExPlOrecommand — E:wmox.pif
shelloPeNcommand — E:wmox.pif[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{58efa9fd-be78-11dd-9678-0016cfceca51}]
shell pencommand — E:Secret.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Secret.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{5cd4aab0-9379-11dd-960d-0015c5729cc7}]
shellauTOPLaycommand — E:kdyhlf.pif
shellAutoRuncommand — E:kdyhlf.pif
shelleXplOrEcommand — E:kdyhlf.pif
shellopencommand — E:kdyhlf.pif[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{87e8e196-8a3f-11dc-9070-0016cfceca51}]
shellAutocommand — sxs.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL sxs.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{9187d8f2-eea7-11dd-81a4-0016cfceca51}]
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL system.exe
shellExplorecommand — E:system.exe
shellOpencommand — E:system.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{d63fb722-df61-11dc-92bb-0016cfceca51}]
shellAutoRuncommand — E:8ng8w.com
shellexplorecommand — E:8ng8w.com
shellopencommand — E:8ng8w.com======File associations======
.inf — open — «C:Program FilesTextEdTextEd.exe» «%1»
.inf — install —
.ini — open — «C:Program FilesTextEdTextEd.exe» «%1»
.txt — open — «C:Program FilesTextEdTextEd.exe» «%1»======List of files/folders created in the last 1 months======
2009-02-06 14:00:37 —-D—- C:Program Filestrend micro
2009-02-06 14:00:36 —-D—- C:rsit
2009-02-06 12:24:15 —-A—- C:ComboFix.txt
2009-02-06 12:18:17 —-D—- C:ComboFix
2009-02-06 11:33:41 —-A—- C:WINDOWSzip.exe
2009-02-06 11:33:41 —-A—- C:WINDOWSVFIND.exe
2009-02-06 11:33:41 —-A—- C:WINDOWSSWXCACLS.exe
2009-02-06 11:33:41 —-A—- C:WINDOWSSWSC.exe
2009-02-06 11:33:41 —-A—- C:WINDOWSSWREG.exe
2009-02-06 11:33:41 —-A—- C:WINDOWSsed.exe
2009-02-06 11:33:41 —-A—- C:WINDOWSNIRCMD.exe
2009-02-06 11:33:41 —-A—- C:WINDOWSgrep.exe
2009-02-06 11:33:41 —-A—- C:WINDOWSfdsv.exe
2009-02-06 11:33:33 —-D—- C:WINDOWSERDNT
2009-02-06 11:33:33 —-D—- C:Qoobox
2009-02-06 03:37:39 —-D—- C:Documents and SettingsШОКApplication DataMalwarebytes
2009-02-06 03:37:34 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2009-02-06 03:37:34 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2009-02-05 22:06:22 —-D—- C:Program FilesPanda Security
2009-02-01 19:20:00 —-A—- C:Documents and SettingsAll UsersApplication Datagyxlib.dll
2009-02-01 19:05:09 —-A—- C:Documents and SettingsAll UsersApplication Databxolib.dll
2009-01-31 17:22:06 —-D—- C:SISSigner
2009-01-30 18:33:38 —-D—- C:Program FilesMSBuild
2009-01-30 18:33:28 —-D—- C:WINDOWSsystem32XPSViewer
2009-01-30 18:33:20 —-D—- C:WINDOWSsystem32en-us
2009-01-30 18:33:20 —-D—- C:Program FilesReference Assemblies
2009-01-30 18:32:30 —-N—- C:WINDOWSsystem32spmsg2.dll
2009-01-15 05:03:27 —-HDC—- C:WINDOWS$NtUninstallKB958687$
2009-01-12 21:35:30 —-D—- C:Documents and SettingsШОКApplication DataMra
2009-01-12 21:28:12 —-D—- C:Program FilesMail.Ru======List of files/folders modified in the last 1 months======
2009-02-06 14:01:33 —-D—- C:WINDOWSsystem32FxsTmp
2009-02-06 14:00:37 —-RD—- C:Program Files
2009-02-06 13:47:36 —-D—- C:Program FilesMozilla Firefox
2009-02-06 12:24:21 —-D—- C:WINDOWSTemp
2009-02-06 12:24:18 —-D—- C:WINDOWSsystem32
2009-02-06 12:24:17 —-D—- C:WINDOWS
2009-02-06 12:21:46 —-A—- C:WINDOWSsystem.ini
2009-02-06 12:20:46 —-D—- C:WINDOWSsystem32drivers
2009-02-06 12:20:44 —-D—- C:WINDOWSAppPatch
2009-02-06 12:20:44 —-D—- C:Program FilesCommon Files
2009-02-06 12:18:55 —-D—- C:WINDOWSsystem32CatRoot2
2009-02-06 12:18:28 —-A—- C:WINDOWSSchedLgU.Txt
2009-02-06 12:17:39 —-D—- C:Documents and SettingsШОКApplication DataSkype
2009-02-06 11:57:29 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2009-02-06 11:57:24 —-D—- C:MDT
2009-02-06 11:57:19 —-A—- C:WINDOWSModemLog_Факс-модем Bluetooth.txt
2009-02-06 11:57:18 —-A—- C:WINDOWSModemLog_Модем Bluetooth.txt
2009-02-06 11:57:12 —-A—- C:WINDOWSModemLog_Conexant HDA D110 MDC V.92 Modem.txt
2009-02-06 11:36:03 —-D—- C:WINDOWSsystem
2009-02-06 11:33:38 —-D—- C:WINDOWSPrefetch
2009-02-05 22:09:55 —-HD—- C:WINDOWSinf
2009-02-05 17:42:42 —-D—- C:paha
2009-02-05 15:58:25 —-D—- C:Documents and SettingsШОКApplication DatauTorrent
2009-02-04 18:00:13 —-D—- C:Install
2009-02-04 08:16:37 —-A—- C:WINDOWSNeroDigital.ini
2009-02-03 13:24:27 —-RD—- C:Музыка
2009-02-01 19:49:26 —-D—- C:Downloads
2009-01-30 20:12:10 —-D—- C:WINDOWSMicrosoft.NET
2009-01-30 20:12:09 —-RSD—- C:WINDOWSassembly
2009-01-30 19:52:47 —-SHD—- C:WINDOWSInstaller
2009-01-30 19:52:18 —-D—- C:WINDOWSsystem32CatRoot
2009-01-30 19:49:33 —-D—- C:WINDOWSWinSxS
2009-01-30 18:33:34 —-RSD—- C:WINDOWSFonts
2009-01-30 18:32:47 —-D—- C:WINDOWSsystem32spool
2009-01-30 18:32:33 —-RSHDC—- C:WINDOWSsystem32dllcache
2009-01-30 05:44:27 —-D—- C:Фильмы
2009-01-28 09:28:06 —-D—- C:Program FilesDownload Master
2009-01-22 23:43:14 —-D—- C:Program FilesQIP
2009-01-15 14:27:26 —-D—- C:Program FilesMicrosoft Office
2009-01-15 05:02:30 —-HD—- C:WINDOWS$hf_mig$
2009-01-14 04:19:24 —-D—- C:Program FilesFileZilla FTP Client
2009-01-14 04:18:36 —-D—- C:Documents and SettingsШОКApplication DataFileZilla
2009-01-13 14:28:47 —-SHD—- C:WINDOWSCSC
2009-01-10 13:35:28 —-A—- C:WINDOWSsystem32MRT.exe======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:WINDOWSsystem32driversAavmker4.sys [2008-11-27 26944]
R1 APPDRV;APPDRV; C:WINDOWSSYSTEM32DRIVERSAPPDRV.SYS [2005-08-13 16128]
R1 aswSP;avast! Self Protection; C:WINDOWSsystem32driversaswSP.sys [2008-11-27 111184]
R1 aswTdi;avast! Network Shield Support; C:WINDOWSsystem32driversaswTdi.sys [2008-11-27 50864]
R1 cdrbsvsd;cdrbsvsd; C:WINDOWSsystem32driverscdrbsvsd.sys [2003-12-03 13566]
R1 DLACDBHM;DLACDBHM; C:WINDOWSSystem32DriversDLACDBHM.SYS [2005-08-26 5628]
R1 DLARTL_N;DLARTL_N; C:WINDOWSSystem32DriversDLARTL_N.SYS [2005-08-26 22684]
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-16 40704]
R1 PQNTDrv;PQNTDrv; C:WINDOWSsystem32driversPQNTDrv.sys [2002-09-16 4228]
R1 WmiAcpi;Интерфейс управления для ACPI Microsoft Windows; C:WINDOWSsystem32DRIVERSwmiacpi.sys [2008-04-16 8832]
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2008-04-16 12032]
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}; ??C:Program FilesCyberLinkPowerDVD8 00.fcl []
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.10.0; C:WINDOWSsystem32DRIVERSAegisP.sys [2006-12-28 21275]
R2 aswFsBlk;aswFsBlk; C:WINDOWSsystem32DRIVERSaswFsBlk.sys [2008-11-27 20560]
R2 aswMon2;avast! Standard Shield Support; C:WINDOWSsystem32driversaswMon2.sys [2008-11-27 94032]
R2 BTSERIAL;Bluetooth Serial Driver; ??C:WINDOWSsystem32driversbtserial.sys []
R2 DLABOIOM;DLABOIOM; C:WINDOWSSystem32DLADLABOIOM.SYS [2005-09-08 25628]
R2 DLADResN;DLADResN; C:WINDOWSSystem32DLADLADResN.SYS [2005-09-08 2496]
R2 DLAIFS_M;DLAIFS_M; C:WINDOWSSystem32DLADLAIFS_M.SYS [2005-09-08 86524]
R2 DLAOPIOM;DLAOPIOM; C:WINDOWSSystem32DLADLAOPIOM.SYS [2005-09-08 14684]
R2 DLAPoolM;DLAPoolM; C:WINDOWSSystem32DLADLAPoolM.SYS [2005-09-08 6364]
R2 DLAUDF_M;DLAUDF_M; C:WINDOWSSystem32DLADLAUDF_M.SYS [2005-09-08 87036]
R2 DLAUDFAM;DLAUDFAM; C:WINDOWSSystem32DLADLAUDFAM.SYS [2005-09-08 94332]
R2 DRVNDDM;DRVNDDM; C:WINDOWSSystem32DriversDRVNDDM.SYS [2005-08-12 40544]
R2 mdmxsdk;mdmxsdk; C:WINDOWSsystem32DRIVERSmdmxsdk.sys [2005-10-05 12544]
R2 s24trans;Транспорт беспроводной сети; C:WINDOWSsystem32DRIVERSs24trans.sys [2006-05-01 13568]
R2 Sentinel;Sentinel; C:WINDOWSSystem32DriversSENTINEL.SYS [2001-06-22 73728]
R3 Arp1394;Протокол клиента 1394 ARP; C:WINDOWSsystem32DRIVERSarp1394.sys [2008-04-16 60800]
R3 aswRdr;aswRdr; C:WINDOWSsystem32driversaswRdr.sys [2008-11-27 23152]
R3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:WINDOWSsystem32DRIVERSbcm4sbxp.sys [2006-08-25 44544]
R3 btaudio;Аудиоустройство Bluetooth; C:WINDOWSsystem32driversbtaudio.sys [2006-05-25 328237]
R3 BTDriver;Драйвер виртуальной связи Bluetooth; C:WINDOWSsystem32DRIVERSbtport.sys [2006-05-25 30427]
R3 BTKRNL;Нумератор шины Bluetooth; C:WINDOWSsystem32DRIVERSbtkrnl.sys [2006-05-25 851434]
R3 BTWDNDIS;Сервер доступа к локальной сети Bluetooth; C:WINDOWSsystem32DRIVERSbtwdndis.sys [2006-05-25 148900]
R3 btwmodem;Модем Bluetooth; C:WINDOWSsystem32DRIVERSbtwmodem.sys [2006-05-25 30285]
R3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:WINDOWSSystem32Driversbtwusb.sys [2006-05-25 66488]
R3 CmBatt;Драйвер батареи с ACPI-управлением (Майкрософт); C:WINDOWSsystem32DRIVERSCmBatt.sys [2008-04-16 13952]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-16 144384]
R3 HSF_DPV;HSF_DPV; C:WINDOWSsystem32DRIVERSHSX_DPV.sys [2005-12-01 936960]
R3 HSXHWAZL;HSXHWAZL; C:WINDOWSsystem32DRIVERSHSXHWAZL.sys [2005-12-01 192512]
R3 ialm;ialm; C:WINDOWSsystem32DRIVERSialmnt5.sys [2005-12-13 1364574]
R3 NIC1394;Сетевой драйвер 1394; C:WINDOWSsystem32DRIVERSnic1394.sys [2008-04-16 61824]
R3 pcouffin;VSO Software pcouffin; C:WINDOWSSystem32Driverspcouffin.sys [2008-10-27 47360]
R3 pfc;Padus ASPI Shell; C:WINDOWSsystem32driverspfc.sys [2007-10-25 10368]
R3 rimmptsk;rimmptsk; C:WINDOWSsystem32DRIVERSrimmptsk.sys [2005-07-14 28544]
R3 rimsptsk;rimsptsk; C:WINDOWSsystem32DRIVERSrimsptsk.sys [2005-07-12 51328]
R3 rismxdp;Ricoh xD-Picture Card Driver; C:WINDOWSsystem32DRIVERSrixdptsk.sys [2005-07-14 307968]
R3 sdbus;sdbus; C:WINDOWSsystem32DRIVERSsdbus.sys [2008-04-16 79232]
R3 STHDA;SigmaTel High Definition Audio CODEC; C:WINDOWSsystem32driverssthda.sys [2006-03-25 1156648]
R3 SynTP;Synaptics TouchPad Driver; C:WINDOWSsystem32DRIVERSSynTP.sys [2006-03-09 191872]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-16 30208]
R3 usbhub;Драйвер стандартного концентратора USB (Microsoft); C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-16 59520]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-16 20608]
R3 w39n51;Intel(R) PRO/Wireless 3945ABG Adapter Driver; C:WINDOWSsystem32DRIVERSw39n51.sys [2006-04-27 1429632]
R3 winachsf;winachsf; C:WINDOWSsystem32DRIVERSHSX_CNXT.sys [2005-12-01 669696]
S1 kbdhid;Драйвер клавиатуры HID; C:WINDOWSsystem32DRIVERSkbdhid.sys [2008-04-16 14720]
S3 btwhid;btwhid; C:WINDOWSsystem32DRIVERSbtwhid.sys [2006-05-25 45683]
S3 E100B;Intel PRO адаптер, драйвер; C:WINDOWSsystem32DRIVERSe100b325.sys [2001-10-20 117760]
S3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-16 10368]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:WINDOWSsystem32DRIVERSk750bus.sys []
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:WINDOWSsystem32DRIVERSk750mdfl.sys []
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:WINDOWSsystem32DRIVERSk750mdm.sys []
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:WINDOWSsystem32DRIVERSk750mgmt.sys []
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:WINDOWSsystem32DRIVERSk750obex.sys []
S3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2008-04-16 12160]
S3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2004-08-04 1897408]
S3 sffdisk;Драйвер класса SFF Storage; C:WINDOWSsystem32DRIVERSsffdisk.sys [2008-04-16 11904]
S3 sffp_sd;Драйвер протокола SFF Storage для SDBus; C:WINDOWSsystem32DRIVERSsffp_sd.sys [2008-04-16 11008]
S3 slicedisk.sys;slicedisk.sys; ??C:WINDOWSsystem32slicedisk.sys []
S3 SONYPVU1;Драйвер Sony USB фильтра (SONYPVU1); C:WINDOWSsystem32DRIVERSSONYPVU1.SYS [2001-08-17 7552]
S3 StMp3Rec;Player Recovery Device Control Driver; C:WINDOWSSystem32DriversStMp3Rec.sys [2006-06-29 71368]
S3 usbaudio;Аудио драйвер USB (WDM); C:WINDOWSsystem32driversusbaudio.sys [2008-04-14 60032]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-16 32128]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-16 26368]
S4 agp440;Intel — фильтр шины AGP; C:WINDOWSsystem32DRIVERSagp440.sys [2008-04-14 42368]
S4 agpCPQ;Compaq — фильтр шины AGP; C:WINDOWSsystem32DRIVERSagpCPQ.sys [2008-04-14 44928]
S4 alim1541;ALI — фильтр шины AGP; C:WINDOWSsystem32DRIVERSalim1541.sys [2008-04-14 42752]
S4 amdagp;AMD — драйвер фильтра шины AGP; C:WINDOWSsystem32DRIVERSamdagp.sys [2008-04-14 43008]
S4 cbidf;cbidf; C:WINDOWSsystem32DRIVERScbidf2k.sys [2008-04-16 13952]
S4 IntelIde;IntelIde; C:WINDOWSsystem32DRIVERSintelide.sys [2008-04-16 5504]
S4 sisagp;SIS — фильтр шины AGP; C:WINDOWSsystem32DRIVERSsisagp.sys [2008-04-14 40960]
S4 viaagp;VIA — фильтр шины AGP; C:WINDOWSsystem32DRIVERSviaagp.sys [2008-04-14 42240]======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aswUpdSv;avast! iAVS4 Control Service; C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe [2008-11-27 18752]
R2 avast! Antivirus;avast! Antivirus; C:Program FilesAlwil SoftwareAvast4ashServ.exe [2008-11-27 155160]
R2 btwdins;Bluetooth Service; C:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe [2006-05-25 266295]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:Program FilesIntelWirelessBinEvtEng.exe [2006-05-01 114753]
R2 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2008-12-02 152984]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:Program FilesIntelWirelessBinRegSrvc.exe [2006-05-01 217164]
R2 S24EventMonitor;Intel(R) PROSet/Wireless Service; C:Program FilesIntelWirelessBinS24EvMon.exe [2006-05-01 540745]
R2 WLANKEEPER;Intel(R) PROSet/Wireless SSO Service; C:Program FilesIntelWirelessBinWLKeeper.exe [2006-05-01 262217]
R2 WSearch;Windows Search; C:WINDOWSsystem32SearchIndexer.exe [2008-05-26 439808]
S2 Fax;Fax; C:WINDOWSsystem32fxssvc.exe [2008-04-15 268288]
S2 kavsvc;Kaspersky Anti-Virus Service; C:Program FilesKaspersky LabKaspersky Anti-Virus 5.0 for Windows Workstationskavsvc.exe []
S2 sfrem02;FrontLine Drivers Auto Removal (v2); C:WINDOWSsystem32sfrem02.exe [2006-05-12 358008]
S3 aspnet_state;Служба состояний ASP.NET; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2007-10-24 33800]
S3 avast! Mail Scanner;avast! Mail Scanner; C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe [2008-11-27 254040]
S3 avast! Web Scanner;avast! Web Scanner; C:Program FilesAlwil SoftwareAvast4ashWebSv.exe [2008-11-27 352920]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2007-10-24 70144]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2007-10-09 36864]
S3 idsvc;Windows CardSpace; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2007-10-11 864256]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 UMWdf;Windows User Mode Driver Framework; C:WINDOWSsystem32wdfmgr.exe [2005-01-28 38912]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2007-10-11 122880]
EOF
