Созданные ответы форума
-
Сообщения
-
Не знаю помогло нет….кажется за эту неделю с моего прошлого поста он успел размножится…давлю его везде где вижу, но…короч зделал все как Вы сказали..вот логи:
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========ServiceDriver acpi32 deleted successfully.
ServiceDriver axiogo7a not found.
ServiceDriver axiogo7a not found.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun\7CE0D5 deleted successfully.
Registry value HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun\Администратор deleted successfully.
Registry value HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun\antispy deleted successfully.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{cab5f017-8a5a-11dd-b083-00179aacadc8}\ deleted successfully.
========== FILES ==========
C:Documents and SettingsАдминистраторГлавное менюПрограммыАвтозагрузкаЎЎЎЎЎЎ.lnk moved successfully.
C:WINDOWSsystem32A8D2237CE0D5.EXE moved successfully.
C:Documents and SettingsАдминистраторejosxchlquaejotxdhmqv.exe moved successfully.
========== COMMANDS ==========
User’s Temp folder emptied.
User’s Internet Explorer cache folder emptied.
File delete failed. C:Documents and SettingsАдминистраторLocal SettingsTemporary Internet FilesContent.IE5index.dat scheduled to be deleted on reboot.
User’s Temporary Internet Files folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
Network Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Opera cache emptied.
Temp folders emptied.
Explorer started successfullyOTMoveIt3 by OldTimer — Version 1.0.11.0 log created on 04222009_210454
Files moved on Reboot…
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Администратор at 2009-04-22 22:09:40
Microsoft Windows XP Professional Service Pack 3
System drive C: has 7 GB (28%) free of 25 GB
Total RAM: 1535 MB (53% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:09:45, on 22.04.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:WINDOWSRTHDCPL.EXE
C:Program FilesD-LinkDSL-200dslstat.exe
C:Program FilesD-LinkDSL-200dslagent.exe
C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe
C:Program FilesvAvTraffervAv Traffer II.eXe
C:Program FilesUnlockerUnlockerAssistant.exe
C:Program FilesWinampwinampa.exe
C:WINDOWSsystem32RUNDLL32.EXE
C:Program FilesAlwil SoftwareAvast4ashDisp.exe
C:Program FilesSpyware DoctorpctsTray.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesVistaDriveIconVistaDrv.exe
C:Program FilesCommon FilesAheadLibNMBgMonitor.exe
C:Program FilesDAEMON Tools Litedaemon.exe
C:Program FilesPunto Switcherpunto.exe
C:Documents and SettingsАдминистраторLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe
C:Program FilesIObitAdvanced SystemCare 3AWC.exe
C:Program FilesCommon FilesAheadLibNMIndexStoreSvr.exe
C:Program FilesAVerTVQuickTV.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
D:Rockstar Games Social Club1_1_3_0RGSC.exe
C:Program FilesnnCronnncron.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32PnkBstrA.exe
C:Program FilesSpyware DoctorpctsAuxs.exe
C:Program FilesSpyware DoctorpctsSvc.exe
C:Program FilesnnCronnnguard.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesRaxcoPerfectDiskPDSched.exe
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
C:WINDOWSSystem32alg.exe
C:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe
C:WINDOWSsystem32wuauclt.exe
C:Program FilesOpera 10 Previewopera.exe
C:WINDOWSsystem32NOTEPAD.EXE
C:DownloadsПрограммыRSIT.exe
C:WINDOWSsystem32wbemwmiprvse.exe
C:Program Filestrend microАдминистратор.exeR1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://search.qip.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://start.qip.ru
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://search.qip.ru/search?query=%s&from=IE
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = 192.168.0.1:3128
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — (no file)
R3 — URLSearchHook: (no name) — — (no file)
R3 — URLSearchHook: Yahoo! Toolbar — {EF99BD32-C1FB-11D2-892F-0090271D4F88} — C:Program FilesYahoo!CompanionInstallscpnyt.dll
O2 — BHO: Yahoo! Toolbar Helper — {02478D38-C3F9-4EFB-9B51-7695ECA05670} — C:Program FilesYahoo!CompanionInstallscpnyt.dll
O2 — BHO: Groove GFS Browser Helper — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — C:PROGRA~1MICROS~2Office12GRA8E1~1.DLL
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_06binssv.dll
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — C:PROGRA~1DOWNLO~1dmiehlp.dll
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [NeroFilterCheck] C:Program FilesCommon FilesAheadLibNeroCheck.exe
O4 — HKLM..Run: [DSLSTATEXE] C:Program FilesD-LinkDSL-200dslstat.exe icon
O4 — HKLM..Run: [DSLAGENTEXE] C:Program FilesD-LinkDSL-200dslagent.exe
O4 — HKLM..Run: [GrooveMonitor] «C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe»
O4 — HKLM..Run: [vAv Traffer II] «C:Program FilesvAvTraffervAv Traffer II.eXe» /auto
O4 — HKLM..Run: [UnlockerAssistant] «C:Program FilesUnlockerUnlockerAssistant.exe» -H
O4 — HKLM..Run: [WinampAgent] «C:Program FilesWinampwinampa.exe»
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [nwiz] nwiz.exe /install
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [avast!] «C:Program FilesAlwil SoftwareAvast4ashDisp.exe»
O4 — HKLM..Run: [ISTray] «C:Program FilesSpyware DoctorpctsTray.exe»
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe
O4 — HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] «C:Program FilesCommon FilesAheadLibNMBgMonitor.exe»
O4 — HKCU..Run: [DAEMON Tools Lite] «C:Program FilesDAEMON Tools Litedaemon.exe» -autorun
O4 — HKCU..Run: [Punto Switcher] C:Program FilesPunto Switcherpunto.exe
O4 — HKCU..Run: [ccleaner] «C:Program FilesCCleanerCCleaner.exe» /AUTO
O4 — HKCU..Run: [Google Update] «C:Documents and SettingsАдминистраторLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe» /c
O4 — HKCU..Run: [Advanced SystemCare 3] «C:Program FilesIObitAdvanced SystemCare 3AWC.exe» /startup
O4 — HKCU..Run: [RGSC] D:Rockstar Games Social ClubRGSCLauncher.exe /silent
O4 — HKCU..Run: [Steam] «C:Program FilesSteamSteam.exe» -silent
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Global Startup: QuickTV.lnk = C:Program FilesAVerTVQuickTV.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — C:Program FilesDownload Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — C:Program FilesDownload Masterdmie.htm
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 — Extra button: (no name) — {96bd526e-2d24-4d9e-b693-0a6911621871} — (no file)
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O16 — DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) — C:Program FilesYahoo!Commonyinsthelper.dll
O17 — HKLMSystemCCSServicesTcpip..{F922A308-6B64-4320-A5D5-E50E54B344C8}: NameServer = 212.48.193.37 208.67.222.222
O18 — Protocol: grooveLocalGWS — {88FED34C-F0CA-4636-A375-3CB6248B04CD} — C:PROGRA~1MICROS~2Office12GR99D3~1.DLL
O23 — Service: avast! iAVS4 Control Service (aswUpdSv) — Unknown owner — C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 — Service: avast! Antivirus — Unknown owner — C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 — Service: avast! Mail Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 — Service: avast! Web Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: NBService — Nero AG — C:Program FilesNeroNero 7Nero BackItUpNBService.exe
O23 — Service: nnCron — nnSoft — C:Program FilesnnCronnncron.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: PDEngine — Raxco Software, Inc. — C:Program FilesRaxcoPerfectDiskPDEngine.exe
O23 — Service: PDScheduler (PDSched) — Raxco Software, Inc. — C:Program FilesRaxcoPerfectDiskPDSched.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: PnkBstrA — Unknown owner — C:WINDOWSsystem32PnkBstrA.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: PC Tools Auxiliary Service (sdAuxService) — PC Tools — C:Program FilesSpyware DoctorpctsAuxs.exe
O23 — Service: PC Tools Security Service (sdCoreService) — PC Tools — C:Program FilesSpyware DoctorpctsSvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe—
End of file — 11067 bytes======Scheduled tasks folder======
C:WINDOWStasksGoogleUpdateTaskUserS-1-5-21-842925246-796845957-1417001333-500.job
======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper — C:Program FilesYahoo!CompanionInstallscpnyt.dll [2006-10-26 440384][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper — C:PROGRA~1MICROS~2Office12GRA8E1~1.DLL [2006-10-27 2210608][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_06binssv.dll [2008-03-25 509328][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — C:PROGRA~1DOWNLO~1dmiehlp.dll [2009-03-06 157696][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2008-01-29 16859648]
«Alcmtr»=C:WINDOWSALCMTR.EXE [2005-05-03 69632]
«NeroFilterCheck»=C:Program FilesCommon FilesAheadLibNeroCheck.exe [2006-01-12 155648]
«DSLSTATEXE»=C:Program FilesD-LinkDSL-200dslstat.exe [2005-12-12 344064]
«DSLAGENTEXE»=C:Program FilesD-LinkDSL-200dslagent.exe [2005-08-25 65536]
«GrooveMonitor»=C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe [2006-10-27 31016]
«vAv Traffer II»=C:Program FilesvAvTraffervAv Traffer II.eXe [2005-08-01 312320]
«UnlockerAssistant»=C:Program FilesUnlockerUnlockerAssistant.exe [2008-05-02 15872]
«WinampAgent»=C:Program FilesWinampwinampa.exe [2009-02-26 37888]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2009-01-15 13680640]
«nwiz»=nwiz.exe /install []
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2009-01-15 86016]
«avast!»=C:Program FilesAlwil SoftwareAvast4ashDisp.exe [2007-01-15 108160]
«ISTray»=C:Program FilesSpyware DoctorpctsTray.exe [2008-12-08 1173384][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-25 17408]
«VistaIcon»=C:Program FilesVistaDriveIconVistaDrv.exe [2008-03-23 132096]
«BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}»=C:Program FilesCommon FilesAheadLibNMBgMonitor.exe [2006-09-13 139264]
«DAEMON Tools Lite»=C:Program FilesDAEMON Tools Litedaemon.exe [2008-02-14 486856]
«Punto Switcher»=C:Program FilesPunto Switcherpunto.exe [2008-10-07 734504]
«ccleaner»=C:Program FilesCCleanerCCleaner.exe [2008-12-01 1406192]
«Google Update»=C:Documents and SettingsАдминистраторLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe [2008-12-01 133104]
«Advanced SystemCare 3″=C:Program FilesIObitAdvanced SystemCare 3AWC.exe [2009-01-09 2262352]
«RGSC»=D:Rockstar Games Social ClubRGSCLauncher.exe [2009-01-25 306088]
«Steam»=C:Program FilesSteamSteam.exe [2008-12-20 1410296][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregGoogle Update]
C:Documents and SettingsАдминистраторLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe [2008-12-01 133104][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregRGSC]
[][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSteam]
C:Program FilesSteamSteam.exe [2008-12-20 1410296]C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
QuickTV.lnk — C:Program FilesAVerTVQuickTV.exe[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2008-03-21 133632][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{B5A7F190-DDA6-4420-B3BA-52453494E6CD}»=C:PROGRA~1MICROS~2Office12GRA8E1~1.DLL [2006-10-27 2210608][HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalsdauxservice]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalsdcoreservice]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworksdauxservice]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworksdcoreservice]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«SynchronousMachineGroupPolicy»=0
«SynchronousUserGroupPolicy»=0[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=36
«NoThumbnailCache»=1
«NoSMConfigurePrograms»=1
«NoDriveAutoRun»=FFFFFFFF[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoResolveSearch»=[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«D:Mirror’s EdgeBinariesMirrorsEdge.exe»=»D:Mirror’s EdgeBinariesMirrorsEdge.exe:*:Enabled:Mirror’s Edge™»
«D:BurnoutBurnoutLauncher.exe»=»D:BurnoutBurnoutLauncher.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box»
«D:BurnoutBurnoutConfigTool.exe»=»D:BurnoutBurnoutConfigTool.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box»
«D:BurnoutBurnoutParadise.exe»=»D:BurnoutBurnoutParadise.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box»
«D:AITDAlone.exe»=»D:AITDAlone.exe:*:Enabled:Alone In The Dark»
«C:WINDOWSsystem32drwtsn32.exe»=»C:WINDOWSsystem32drwtsn32.exe:*:Enabled:ENABLE»
«C:Program FilesInternet Exploreriexplore.exe»=»C:Program FilesInternet Exploreriexplore.exe:*:Enabled:ENABLE»
«C:Documents and SettingsАдминистраторinswchmqvbfkotxdhmqva.exe»=»C:Documents and SettingsАдминистраторinswchmqvbfkotxdhmqva.exe:*:Enabled:ENABLE»
«C:Documents and SettingsАдминистраторhmquaeinrvbfjoswcgkot.exe»=»C:Documents and SettingsАдминистраторhmquaeinrvbfjoswcgkot.exe:*:Enabled:ENABLE»
«D:NEED FOR SPEED UNDERCOVERnfs.exe»=»D:NEED FOR SPEED UNDERCOVERnfs.exe:*:Enabled:ENABLE»
«C:Program FilesOpera 10 Previewopera.exe»=»C:Program FilesOpera 10 Previewopera.exe:*:Enabled:ENABLE»
«C:WINDOWSsystem32Rundll32.exe»=»C:WINDOWSsystem32Rundll32.exe:*:Enabled:ENABLE»
«C:Program FilesAvaLink DC++AvaLink.exe»=»C:Program FilesAvaLink DC++AvaLink.exe:*:Enabled:ENABLE»
«C:Program FilesMicrosoft OfficeOffice12WINWORD.EXE»=»C:Program FilesMicrosoft OfficeOffice12WINWORD.EXE:*:Enabled:ENABLE»
«C:Documents and SettingsАдминистраторjosxchlqvafkotxdhmqva.exe»=»C:Documents and SettingsАдминистраторjosxchlqvafkotxdhmqva.exe:*:Enabled:ENABLE»
«C:Documents and SettingsАдминистраторlqvbfkotydimrvbgkpuye.exe»=»C:Documents and SettingsАдминистраторlqvbfkotydimrvbgkpuye.exe:*:Enabled:ENABLE»
«C:Documents and SettingsАдминистраторrwcglpuyeinrwbgkptydi.exe»=»C:Documents and SettingsАдминистраторrwcglpuyeinrwbgkptydi.exe:*:Enabled:ENABLE»
«C:Documents and SettingsАдминистраторLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe»=»C:Documents and SettingsАдминистраторLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe:*:Enabled:ENABLE»
«C:Program FilesAlwil SoftwareAvast4Setupsetup.ovr»=»C:Program FilesAlwil SoftwareAvast4Setupsetup.ovr:*:Enabled:ENABLE»
«C:Program FilesAlwil SoftwareAvast4setupavast.setup»=»C:Program FilesAlwil SoftwareAvast4setupavast.setup:*:Enabled:ENABLE»
«C:Documents and SettingsАдминистраторkpuyeinsxchlquaejnsxd.exe»=»C:Documents and SettingsАдминистраторkpuyeinsxchlquaejnsxd.exe:*:Enabled:ENABLE»
«C:Documents and SettingsАдминистраторLocal SettingsTempanvA6.tmp»=»C:Documents and SettingsАдминистраторLocal SettingsTempanvA6.tmp:*:Enabled:ENABLE»
«C:WINDOWSsystem32netsh.exe»=»C:WINDOWSsystem32netsh.exe:*:Enabled:ENABLE»
«D:Rockstar Games Social Club1_1_3_0RGSC.exe»=»D:Rockstar Games Social Club1_1_3_0RGSC.exe:*:Enabled:ENABLE»
«C:WINDOWSsystem32userinit.exe»=»C:WINDOWSsystem32userinit.exe:*:Enabled:ENABLE»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»======List of files/folders created in the last 1 months======
2009-04-22 22:09:40 —-D—- C:rsit
2009-04-22 20:51:19 —-D—- C:_OTMoveIt
2009-04-22 01:34:40 —-D—- C:Documents and SettingsАдминистраторApplication DataanvD6
2009-04-21 01:02:36 —-D—- C:Documents and SettingsАдминистраторApplication DataanvE8
2009-04-19 21:28:06 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv2
2009-04-19 17:53:46 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv1D
2009-04-19 02:18:31 —-D—- C:Documents and SettingsАдминистраторApplication DataanvB7
2009-04-18 01:41:30 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv79
2009-04-15 23:55:15 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv8B
2009-04-15 23:46:52 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv92
2009-04-15 23:46:51 —-D—- C:Documents and SettingsАдминистраторApplication DataanvBB
2009-04-15 23:14:29 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv2E
2009-04-15 22:47:27 —-RASHD—- C:autorun.inf
2009-04-14 03:28:36 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv81
2009-04-13 23:14:00 —-HD—- C:WINDOWSsystem32DD8E72
2009-04-13 23:14:00 —-HD—- C:WINDOWSsystem32A8D223
2009-04-13 23:14:00 —-HD—- C:WINDOWSsystem32369CAE
2009-04-13 22:35:56 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv6B
2009-04-13 21:03:57 —-D—- C:Program Filestrend micro
2009-04-13 20:53:21 —-D—- C:Program FilesCommon FilesPC Tools
2009-04-13 20:53:16 —-D—- C:Program FilesSpyware Doctor
2009-04-13 20:53:16 —-D—- C:Documents and SettingsАдминистраторApplication DataPC Tools
2009-04-13 20:53:16 —-D—- C:Documents and SettingsAll UsersApplication DataPC Tools
2009-04-13 17:09:27 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv8D
2009-04-13 16:16:29 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv2B
2009-04-13 16:10:30 —-D—- C:Documents and SettingsАдминистраторApplication DataanvB8
2009-04-13 15:44:39 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv84
2009-04-13 15:44:39 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv38
2009-04-13 15:05:03 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv28
2009-04-13 13:41:27 —-D—- C:Documents and SettingsАдминистраторApplication DataanvF
2009-04-13 12:50:03 —-D—- C:Documents and SettingsАдминистраторApplication DataanvF5
2009-04-13 12:01:52 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv19
2009-04-13 11:24:47 —-D—- C:Documents and SettingsАдминистраторApplication DataanvB2
2009-04-13 11:24:47 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv63
2009-04-13 09:59:14 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv15
2009-04-13 09:51:47 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv6
2009-04-13 09:42:06 —-D—- C:Documents and SettingsАдминистраторApplication DataanvDC
2009-04-13 09:29:06 —-D—- C:Documents and SettingsАдминистраторApplication DataanvEC
2009-04-10 23:33:47 —-D—- C:Documents and SettingsАдминистраторApplication DataanvD
2009-04-10 23:02:22 —-D—- C:Documents and SettingsАдминистраторApplication DataanvD5
2009-04-10 11:57:27 —-D—- C:Documents and SettingsАдминистраторApplication DataMalwarebytes
2009-04-10 11:57:23 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2009-04-10 11:57:23 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2009-04-10 11:31:44 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv8F
2009-04-10 11:11:00 —-D—- C:Documents and SettingsАдминистраторApplication DataanvE7
2009-04-10 10:59:22 —-D—- C:Documents and SettingsАдминистраторApplication DataanvA6
2009-04-10 10:59:21 —-D—- C:Documents and SettingsАдминистраторApplication DataanvD2
2009-04-10 10:55:06 —-A—- C:WINDOWSsystem32aswBoot.exe
2009-04-10 10:04:35 —-D—- C:Documents and SettingsАдминистраторApplication DataanvFD
2009-04-08 19:18:06 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv16======List of files/folders modified in the last 1 months======
2009-04-22 22:08:15 —-D—- C:Program FilesvAvTraffer
2009-04-22 22:07:26 —-D—- C:WINDOWSPrefetch
2009-04-22 22:07:20 —-D—- C:WINDOWSTemp
2009-04-22 22:06:32 —-D—- C:WINDOWSsystem32CatRoot2
2009-04-22 22:06:13 —-AD—- C:Documents and SettingsAll UsersApplication DataTEMP
2009-04-22 22:06:08 —-D—- C:WINDOWS
2009-04-22 22:05:56 —-D—- C:WINDOWSsystem32drivers
2009-04-22 22:05:40 —-D—- C:WINDOWSsystem32
2009-04-22 22:05:35 —-D—- C:Program FilesnnCron
2009-04-22 22:05:34 —-D—- C:Program FilesSteam
2009-04-22 22:05:34 —-A—- C:WINDOWSAVerTV.ini
2009-04-22 22:04:20 —-N—- C:WINDOWSSchedLgU.Txt
2009-04-22 21:56:17 —-A—- C:WINDOWSNeroDigital.ini
2009-04-22 21:23:46 —-RD—- C:Program Files
2009-04-19 21:00:58 —-HD—- C:ChSTemp
2009-04-19 17:37:23 —-D—- C:Documents and SettingsАдминистраторApplication DataWinamp
2009-04-19 15:17:14 —-A—- C:audiodec.txt
2009-04-16 00:09:23 —-D—- C:Program FilesAVerTV
2009-04-15 22:46:27 —-D—- C:Downloads
2009-04-13 20:58:55 —-D—- C:Program FilesDownload Master
2009-04-13 20:53:21 —-D—- C:Program FilesCommon Files
2009-04-11 15:20:56 —-SHD—- C:RECYCLER
2009-04-11 14:05:23 —-D—- C:Program FilesWinamp
2009-04-10 11:02:10 —-D—- C:Program FilesDreamRender
2009-04-10 10:48:30 —-SHD—- C:WINDOWSInstaller
2009-04-09 09:17:50 —-A—- C:WINDOWSsystem32PnkBstrB.exe
2009-03-29 17:04:38 —-A—- C:WINDOWSsystem32PerfStringBackup.INI======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:WINDOWSsystem32driversAavmker4.sys [2006-12-21 31560]
R1 aswTdi;avast! Network Shield Support; C:WINDOWSsystem32driversaswTdi.sys [2007-01-15 43176]
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-15 40704]
R2 aswMon2;avast! Standard Shield Support; C:WINDOWSsystem32driversaswMon2.sys [2006-12-21 94424]
R2 Defrag32;Defrag32; C:WINDOWSsystem32driversDefrag32.sys [2005-06-28 61920]
R2 mdmxsdk;mdmxsdk; C:WINDOWSsystem32DRIVERSmdmxsdk.sys [2008-04-25 11868]
R3 aswRdr;aswRdr; C:WINDOWSsystem32driversaswRdr.sys [2007-01-15 23352]
R3 Cap7134;Cap7134 Capture; C:WINDOWSsystem32DRIVERSCap7134.sys [2008-08-17 407072]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-15 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2008-01-30 4725760]
R3 lanusb;D-Link DSL-200 USB ADSL LAN Modem; C:WINDOWSsystem32DRIVERSglausb.sys [2005-09-22 148480]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2009-01-15 6301248]
R3 PhTVTune;Cap7134 TVTuner; C:WINDOWSsystem32DRIVERSPhTVTune.sys [2008-08-17 57120]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtenicxp.sys [2008-01-04 105856]
R3 Tetris;Tetris driver; C:WINDOWSSystem32DriversTetris.sys [2008-10-23 48928]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-15 30208]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-15 20608]
S1 kbdhid;Драйвер клавиатуры HID; C:WINDOWSsystem32DRIVERSkbdhid.sys [2008-04-25 14720]
S3 axdk2pfq;axdk2pfq; C:WINDOWSsystem32driversaxdk2pfq.sys []
S3 CCDECODE;Closed Caption декодер; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2008-04-25 17024]
S3 gdrv;gdrv; ??C:WINDOWSgdrv.sys []
S3 ggflt;SEMC USB Flash Driver Filter; C:WINDOWSsystem32DRIVERSggflt.sys [2007-09-25 13352]
S3 ggsemc;SEMC USB Flash Driver; C:WINDOWSsystem32DRIVERSggsemc.sys [2007-09-25 20520]
S3 GVCplDrv;GVCplDrv; C:WINDOWSsystem32driversGVCplDrv.sys [2004-05-02 23040]
S3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-25 10368]
S3 HSF_DP;HSF_DP; C:WINDOWSsystem32DRIVERSHSFDPSP2.sys [2008-04-25 1041536]
S3 HSFHWBS2;HSFHWBS2; C:WINDOWSsystem32DRIVERSHSFBS2S2.sys [2008-04-25 220032]
S3 MarkFun_NT;MarkFun_NT; ??C:Program FilesGigabyte@BIOSmarkfun.w32 []
S3 MBAMSwissArmy;MBAMSwissArmy; ??C:WINDOWSsystem32driversmbamswissarmy.sys []
S3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-19 12160]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2008-04-25 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2008-04-25 85248]
S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWSsystem32DRIVERSNdisIP.sys [2008-04-25 10880]
S3 npkcrypt;npkcrypt; ??E:С хабаLineage2_Эверsystemnpkcrypt.sys []
S3 npkcusb;npkcusb; ??D:Lineage 2 interludesystemnpkcusb.sys []
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2008-04-25 11136]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2008-04-25 15232]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-25 32128]
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-25 25856]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-25 15104]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-25 26368]
S3 Wdf01000;Wdf01000; C:WINDOWSsystem32DRIVERSWdf01000.sys [2006-11-02 492000]
S3 winachsf;winachsf; C:WINDOWSsystem32DRIVERSHSFCXTS2.sys [2008-04-25 685056]
S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2008-04-25 19200]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2008-03-21 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2008-03-21 82944]======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aswUpdSv;avast! iAVS4 Control Service; C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe [2007-01-15 59008]
R2 avast! Antivirus;avast! Antivirus; C:Program FilesAlwil SoftwareAvast4ashServ.exe [2007-01-15 132736]
R2 nnCron;nnCron; C:Program FilesnnCronnncron.exe [2006-03-21 408576]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2009-01-15 163908]
R2 PDSched;PDScheduler; C:Program FilesRaxcoPerfectDiskPDSched.exe [2005-06-28 241731]
R2 PnkBstrA;PnkBstrA; C:WINDOWSsystem32PnkBstrA.exe [2008-12-06 66872]
R2 sdAuxService;PC Tools Auxiliary Service; C:Program FilesSpyware DoctorpctsAuxs.exe [2009-01-07 348752]
R2 sdCoreService;PC Tools Security Service; C:Program FilesSpyware DoctorpctsSvc.exe [2009-01-21 1095560]
R3 avast! Mail Scanner;avast! Mail Scanner; C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe [2007-01-15 255616]
R3 avast! Web Scanner;avast! Web Scanner; C:Program FilesAlwil SoftwareAvast4ashWebSv.exe [2007-01-15 370304]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2006-10-20 36864]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 idsvc;Windows CardSpace; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2006-10-30 741376]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:Program FilesMicrosoft OfficeOffice12GrooveAuditService.exe [2006-10-27 65824]
S3 NBService;NBService; C:Program FilesNeroNero 7Nero BackItUpNBService.exe [2006-09-12 724992]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 PDEngine;PDEngine; C:Program FilesRaxcoPerfectDiskPDEngine.exe [2005-06-28 483397]
S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2008-03-21 914944]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2006-10-30 122880]
EOF
Надеюсь до следующего вашего сообщения пройдет не слишком много времени чтоб это чудо успело размножится…Пока вроде все тихо, но кто его знает, этого рапида…
П.С. я бы кстати в слове рапид буквы бы переставил…и назвал бы так его создателя…
Эммм….только дописал, отправил и тут же вылетел из оперы с помощью моего уже родного Рапид антивируса….сволочь живучая…хоть Винду сноси, что делать уже и не знаю….
Спасибо, Валерий…не знаю помогло или нет, но спасибо что ты есть и помогаешь людям….при первом пуске OTMoveIt3 он жестко завис, мин 15 я подождал и перезагрузил комп…при второй попытке вроде всепрошло хорошо, но сразу после срабатывания отмоведа вылез этот чертов Рапид…ща перезагрузил, сижу жду…пока все тихо…
Вот логи:OTMoveIt3:
Error: Unable to interpret in the current context!
Error: Unable to interpret in the current context!
========== REGISTRY ==========
Registry value HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun\Администратор deleted successfully.
Registry value HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun\antispy deleted successfully.
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows\»AppInit_DLLS»|»» /E : value set successfully!
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{2424e173-6bba-11dd-b03b-0016e65d1f85}\ deleted successfully.
========== FILES ==========
File/Folder C:Documents and SettingsАдминистраторГлавное менюПрограммыАвтозагрузкаRapid Antivirus.lnk not found.
C:Documents and SettingsАдминистраторnsxdhmqvafkptyeinsxch.exe moved successfully.
File/Folder H:oufddh.exe
C:WINDOWSsystem32mmmjjarr.dll not found.
LoadLibrary failed for C:WINDOWSsystem32mmmujhuj.dll
C:WINDOWSsystem32mmmujhuj.dll NOT unregistered.
C:WINDOWSsystem32mmmujhuj.dll moved successfully.
DllUnregisterServer procedure not found in C:WINDOWSsystem32mmmpfnpf.dll
C:WINDOWSsystem32mmmpfnpf.dll NOT unregistered.
C:WINDOWSsystem32mmmpfnpf.dll moved successfully.
C:Program FilesRapid Antivirus moved successfully.
DllUnregisterServer procedure not found in C:WINDOWSsystem32mmmoyqoy.dll
C:WINDOWSsystem32mmmoyqoy.dll NOT unregistered.
C:WINDOWSsystem32mmmoyqoy.dll moved successfully.
DllUnregisterServer procedure not found in C:WINDOWSsystem32mmmzvwzv.dll
C:WINDOWSsystem32mmmzvwzv.dll NOT unregistered.
C:WINDOWSsystem32mmmzvwzv.dll moved successfully.
C:WINDOWSsystem32wincreate.exe moved successfully.
C:WINDOWSsystem32search_fid.txt moved successfully.
DllUnregisterServer procedure not found in C:WINDOWSsystem32mmmijtxb.dll
C:WINDOWSsystem32mmmijtxb.dll NOT unregistered.
C:WINDOWSsystem32mmmijtxb.dll moved successfully.
File/Folder C:WINDOWSsystem32driversamd64si.sys not found.
C:WINDOWSsystem32driversi386si.sys moved successfully.
File/Folder C:WINDOWSsystem32driversport135sik.sys not found.
========== COMMANDS ==========
File delete failed. C:DOCUME~19335~1LOCALS~1TempE_4com.run scheduled to be deleted on reboot.
File delete failed. C:DOCUME~19335~1LOCALS~1TempE_4dp1.fne scheduled to be deleted on reboot.
File delete failed. C:DOCUME~19335~1LOCALS~1TempE_4eAPI.fne scheduled to be deleted on reboot.
File delete failed. C:DOCUME~19335~1LOCALS~1TempE_4krnln.fnr scheduled to be deleted on reboot.
File delete failed. C:DOCUME~19335~1LOCALS~1TempE_4shell.fne scheduled to be deleted on reboot.
File delete failed. C:DOCUME~19335~1LOCALS~1TempanvA6.tmp scheduled to be deleted on reboot.
User’s Temp folder emptied.
User’s Internet Explorer cache folder emptied.
File delete failed. C:Documents and SettingsАдминистраторLocal SettingsTemporary Internet FilesContent.IE5index.dat scheduled to be deleted on reboot.
User’s Temporary Internet Files folder emptied.
Local Service Temp folder emptied.
File delete failed. C:Documents and SettingsLocalServiceLocal SettingsTemporary Internet FilesContent.IE5index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
Network Service Temporary Internet Files folder emptied.
File delete failed. C:WINDOWStemp_avast4_Webshlock.txt scheduled to be deleted on reboot.
File delete failed. C:WINDOWStempPerflib_Perfdata_3e8.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Opera cache emptied.
Temp folders emptied.
Explorer started successfullyOTMoveIt3 by OldTimer — Version 1.0.11.0 log created on 04152009_233329
Files moved on Reboot…
C:DOCUME~19335~1LOCALS~1TempE_4com.run moved successfully.
C:DOCUME~19335~1LOCALS~1TempE_4dp1.fne moved successfully.
C:DOCUME~19335~1LOCALS~1TempE_4eAPI.fne moved successfully.
C:DOCUME~19335~1LOCALS~1TempE_4krnln.fnr moved successfully.
C:DOCUME~19335~1LOCALS~1TempE_4shell.fne moved successfully.
C:DOCUME~19335~1LOCALS~1TempanvA6.tmp moved successfully.
File C:WINDOWStemp_avast4_Webshlock.txt not found!
File C:WINDOWStempPerflib_Perfdata_3e8.dat not found!RSIT
log.txt:
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Администратор at 2009-04-15 23:42:12
Microsoft Windows XP Professional Service Pack 3
System drive C: has 3 GB (14%) free of 25 GB
Total RAM: 1535 MB (61% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:42:50, on 15.04.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:WINDOWSRTHDCPL.EXE
C:Program FilesD-LinkDSL-200dslstat.exe
C:Program FilesD-LinkDSL-200dslagent.exe
C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe
C:Program FilesvAvTraffervAv Traffer II.eXe
C:Program FilesUnlockerUnlockerAssistant.exe
C:Program FilesWinampwinampa.exe
C:WINDOWSsystem32RUNDLL32.EXE
C:Program FilesAlwil SoftwareAvast4ashDisp.exe
C:WINDOWSsystem32A8D2237CE0D5.EXE
C:WINDOWSsystem32ctfmon.exe
C:Program FilesVistaDriveIconVistaDrv.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesCommon FilesAheadLibNMBgMonitor.exe
C:Program FilesDAEMON Tools Litedaemon.exe
C:Program FilesPunto Switcherpunto.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:Documents and SettingsАдминистраторLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe
C:Program FilesIObitAdvanced SystemCare 3AWC.exe
C:Program FilesCommon FilesAheadLibNMIndexStoreSvr.exe
C:Program FilesnnCronnncron.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32PnkBstrA.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesAVerTVQuickTV.exe
C:Program FilesRaxcoPerfectDiskPDSched.exe
D:Rockstar Games Social Club1_1_3_0RGSC.exe
C:Program FilesnnCronnnguard.exe
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
C:Program FilesOpera 10 Previewopera.exe
C:WINDOWSsystem32wuauclt.exe
C:WINDOWSSystem32svchost.exe
C:DOCUME~19335~1LOCALS~1TempBN6B.tmp
C:Documents and SettingsАдминистраторАдминистратор.exe
C:DOCUME~19335~1LOCALS~1TempanvBB.tmp
C:Documents and SettingsАдминистраторРабочий столRSIT.exe
C:Program Filestrend microАдминистратор.exeR1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://search.qip.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://start.qip.ru
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://search.qip.ru/search?query=%s&from=IE
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = 192.168.0.1:3128
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — (no file)
R3 — URLSearchHook: (no name) — — (no file)
R3 — URLSearchHook: Yahoo! Toolbar — {EF99BD32-C1FB-11D2-892F-0090271D4F88} — C:Program FilesYahoo!CompanionInstallscpnyt.dll
O2 — BHO: Yahoo! Toolbar Helper — {02478D38-C3F9-4EFB-9B51-7695ECA05670} — C:Program FilesYahoo!CompanionInstallscpnyt.dll
O2 — BHO: Groove GFS Browser Helper — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — C:PROGRA~1MICROS~2Office12GRA8E1~1.DLL
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_06binssv.dll
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — C:PROGRA~1DOWNLO~1dmiehlp.dll
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [NeroFilterCheck] C:Program FilesCommon FilesAheadLibNeroCheck.exe
O4 — HKLM..Run: [DSLSTATEXE] C:Program FilesD-LinkDSL-200dslstat.exe icon
O4 — HKLM..Run: [DSLAGENTEXE] C:Program FilesD-LinkDSL-200dslagent.exe
O4 — HKLM..Run: [GrooveMonitor] «C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe»
O4 — HKLM..Run: [vAv Traffer II] «C:Program FilesvAvTraffervAv Traffer II.eXe» /auto
O4 — HKLM..Run: [UnlockerAssistant] «C:Program FilesUnlockerUnlockerAssistant.exe» -H
O4 — HKLM..Run: [WinampAgent] «C:Program FilesWinampwinampa.exe»
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [nwiz] nwiz.exe /install
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [avast!] «C:Program FilesAlwil SoftwareAvast4ashDisp.exe»
O4 — HKLM..Run: [7CE0D5] C:WINDOWSsystem32A8D2237CE0D5.EXE
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe
O4 — HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] «C:Program FilesCommon FilesAheadLibNMBgMonitor.exe»
O4 — HKCU..Run: [DAEMON Tools Lite] «C:Program FilesDAEMON Tools Litedaemon.exe» -autorun
O4 — HKCU..Run: [Punto Switcher] C:Program FilesPunto Switcherpunto.exe
O4 — HKCU..Run: [ccleaner] «C:Program FilesCCleanerCCleaner.exe» /AUTO
O4 — HKCU..Run: [Google Update] «C:Documents and SettingsАдминистраторLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe» /c
O4 — HKCU..Run: [Advanced SystemCare 3] «C:Program FilesIObitAdvanced SystemCare 3AWC.exe» /startup
O4 — HKCU..Run: [RGSC] D:Rockstar Games Social ClubRGSCLauncher.exe /silent
O4 — HKCU..Run: [Steam] «C:Program FilesSteamSteam.exe» -silent
O4 — HKCU..Run: [Администратор] C:Documents and SettingsАдминистраторАдминистратор.exe /i
O4 — HKCU..Run: [antispy] C:Documents and SettingsАдминистраторejosxchlquaejotxdhmqv.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Startup: ЎЎЎЎЎЎ.lnk = C:WINDOWSsystem32A8D2237CE0D5.EXE
O4 — Global Startup: QuickTV.lnk = C:Program FilesAVerTVQuickTV.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — C:Program FilesDownload Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — C:Program FilesDownload Masterdmie.htm
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 — Extra button: (no name) — {96bd526e-2d24-4d9e-b693-0a6911621871} — (no file)
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O16 — DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) — C:Program FilesYahoo!Commonyinsthelper.dll
O17 — HKLMSystemCCSServicesTcpip..{F922A308-6B64-4320-A5D5-E50E54B344C8}: NameServer = 212.48.193.37 208.67.222.222
O18 — Protocol: grooveLocalGWS — {88FED34C-F0CA-4636-A375-3CB6248B04CD} — C:PROGRA~1MICROS~2Office12GR99D3~1.DLL
O23 — Service: avast! iAVS4 Control Service (aswUpdSv) — Unknown owner — C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 — Service: avast! Antivirus — Unknown owner — C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 — Service: avast! Mail Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 — Service: avast! Web Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: NBService — Nero AG — C:Program FilesNeroNero 7Nero BackItUpNBService.exe
O23 — Service: nnCron — nnSoft — C:Program FilesnnCronnncron.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: PDEngine — Raxco Software, Inc. — C:Program FilesRaxcoPerfectDiskPDEngine.exe
O23 — Service: PDScheduler (PDSched) — Raxco Software, Inc. — C:Program FilesRaxcoPerfectDiskPDSched.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: PnkBstrA — Unknown owner — C:WINDOWSsystem32PnkBstrA.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: PC Tools Auxiliary Service (sdAuxService) — PC Tools — C:Program FilesSpyware DoctorpctsAuxs.exe
O23 — Service: PC Tools Security Service (sdCoreService) — PC Tools — C:Program FilesSpyware DoctorpctsSvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe—
End of file — 11124 bytes======Scheduled tasks folder======
C:WINDOWStasksGoogleUpdateTaskUserS-1-5-21-842925246-796845957-1417001333-500.job
======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper — C:Program FilesYahoo!CompanionInstallscpnyt.dll [2006-10-26 440384][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper — C:PROGRA~1MICROS~2Office12GRA8E1~1.DLL [2006-10-27 2210608][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_06binssv.dll [2008-03-25 509328][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — C:PROGRA~1DOWNLO~1dmiehlp.dll [2009-03-06 157696][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2008-01-29 16859648]
«Alcmtr»=C:WINDOWSALCMTR.EXE [2005-05-03 69632]
«NeroFilterCheck»=C:Program FilesCommon FilesAheadLibNeroCheck.exe [2006-01-12 155648]
«DSLSTATEXE»=C:Program FilesD-LinkDSL-200dslstat.exe [2005-12-12 344064]
«DSLAGENTEXE»=C:Program FilesD-LinkDSL-200dslagent.exe [2005-08-25 65536]
«GrooveMonitor»=C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe [2006-10-27 31016]
«vAv Traffer II»=C:Program FilesvAvTraffervAv Traffer II.eXe [2005-08-01 312320]
«UnlockerAssistant»=C:Program FilesUnlockerUnlockerAssistant.exe [2008-05-02 15872]
«WinampAgent»=C:Program FilesWinampwinampa.exe [2009-02-26 37888]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2009-01-15 13680640]
«nwiz»=nwiz.exe /install []
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2009-01-15 86016]
«avast!»=C:Program FilesAlwil SoftwareAvast4ashDisp.exe [2007-01-15 108160]
«7CE0D5″=C:WINDOWSsystem32A8D2237CE0D5.EXE [2009-04-13 1513696][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-25 17408]
«VistaIcon»=C:Program FilesVistaDriveIconVistaDrv.exe [2008-03-23 132096]
«BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}»=C:Program FilesCommon FilesAheadLibNMBgMonitor.exe [2006-09-13 139264]
«DAEMON Tools Lite»=C:Program FilesDAEMON Tools Litedaemon.exe [2008-02-14 486856]
«Punto Switcher»=C:Program FilesPunto Switcherpunto.exe [2008-10-07 734504]
«ccleaner»=C:Program FilesCCleanerCCleaner.exe [2008-12-01 1406192]
«Google Update»=C:Documents and SettingsАдминистраторLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe [2008-12-01 133104]
«Advanced SystemCare 3″=C:Program FilesIObitAdvanced SystemCare 3AWC.exe [2009-01-09 2262352]
«RGSC»=D:Rockstar Games Social ClubRGSCLauncher.exe [2009-01-25 306088]
«Steam»=C:Program FilesSteamSteam.exe [2008-12-20 1410296]
«Администратор»=C:Documents and SettingsАдминистраторАдминистратор.exe [2009-04-07 20417]
«antispy»=C:Documents and SettingsАдминистраторejosxchlquaejotxdhmqv.exe [2009-04-15 1087488][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregGoogle Update]
C:Documents and SettingsАдминистраторLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe [2008-12-01 133104][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregRGSC]
[][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSteam]
C:Program FilesSteamSteam.exe [2008-12-20 1410296]C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
QuickTV.lnk — C:Program FilesAVerTVQuickTV.exeC:Documents and SettingsАдминистраторГлавное менюПрограммыАвтозагрузка
ЎЎЎЎЎЎ.lnk — C:WINDOWSsystem32A8D2237CE0D5.EXE[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2008-03-21 133632][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{B5A7F190-DDA6-4420-B3BA-52453494E6CD}»=C:PROGRA~1MICROS~2Office12GRA8E1~1.DLL [2006-10-27 2210608][HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalsdauxservice]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalsdcoreservice]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworksdauxservice]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworksdcoreservice]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«SynchronousMachineGroupPolicy»=0
«SynchronousUserGroupPolicy»=0[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=36
«NoThumbnailCache»=1
«NoSMConfigurePrograms»=1
«NoDriveAutoRun»=FFFFFFFF[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoResolveSearch»=[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«D:Mirror’s EdgeBinariesMirrorsEdge.exe»=»D:Mirror’s EdgeBinariesMirrorsEdge.exe:*:Enabled:Mirror’s Edge™»
«D:BurnoutBurnoutLauncher.exe»=»D:BurnoutBurnoutLauncher.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box»
«D:BurnoutBurnoutConfigTool.exe»=»D:BurnoutBurnoutConfigTool.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box»
«D:BurnoutBurnoutParadise.exe»=»D:BurnoutBurnoutParadise.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box»
«D:AITDAlone.exe»=»D:AITDAlone.exe:*:Enabled:Alone In The Dark»
«C:WINDOWSsystem32drwtsn32.exe»=»C:WINDOWSsystem32drwtsn32.exe:*:Enabled:ENABLE»
«C:Program FilesInternet Exploreriexplore.exe»=»C:Program FilesInternet Exploreriexplore.exe:*:Enabled:ENABLE»
«C:Documents and SettingsАдминистраторinswchmqvbfkotxdhmqva.exe»=»C:Documents and SettingsАдминистраторinswchmqvbfkotxdhmqva.exe:*:Enabled:ENABLE»
«C:Documents and SettingsАдминистраторhmquaeinrvbfjoswcgkot.exe»=»C:Documents and SettingsАдминистраторhmquaeinrvbfjoswcgkot.exe:*:Enabled:ENABLE»
«D:NEED FOR SPEED UNDERCOVERnfs.exe»=»D:NEED FOR SPEED UNDERCOVERnfs.exe:*:Enabled:ENABLE»
«C:Program FilesOpera 10 Previewopera.exe»=»C:Program FilesOpera 10 Previewopera.exe:*:Enabled:ENABLE»
«C:WINDOWSsystem32Rundll32.exe»=»C:WINDOWSsystem32Rundll32.exe:*:Enabled:ENABLE»
«C:Program FilesAvaLink DC++AvaLink.exe»=»C:Program FilesAvaLink DC++AvaLink.exe:*:Enabled:ENABLE»
«C:Program FilesMicrosoft OfficeOffice12WINWORD.EXE»=»C:Program FilesMicrosoft OfficeOffice12WINWORD.EXE:*:Enabled:ENABLE»
«C:Documents and SettingsАдминистраторjosxchlqvafkotxdhmqva.exe»=»C:Documents and SettingsАдминистраторjosxchlqvafkotxdhmqva.exe:*:Enabled:ENABLE»
«C:Documents and SettingsАдминистраторlqvbfkotydimrvbgkpuye.exe»=»C:Documents and SettingsАдминистраторlqvbfkotydimrvbgkpuye.exe:*:Enabled:ENABLE»
«C:Documents and SettingsАдминистраторrwcglpuyeinrwbgkptydi.exe»=»C:Documents and SettingsАдминистраторrwcglpuyeinrwbgkptydi.exe:*:Enabled:ENABLE»
«C:Documents and SettingsАдминистраторLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe»=»C:Documents and SettingsАдминистраторLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe:*:Enabled:ENABLE»
«C:Program FilesAlwil SoftwareAvast4Setupsetup.ovr»=»C:Program FilesAlwil SoftwareAvast4Setupsetup.ovr:*:Enabled:ENABLE»
«C:Program FilesAlwil SoftwareAvast4setupavast.setup»=»C:Program FilesAlwil SoftwareAvast4setupavast.setup:*:Enabled:ENABLE»
«C:Documents and SettingsАдминистраторkpuyeinsxchlquaejnsxd.exe»=»C:Documents and SettingsАдминистраторkpuyeinsxchlquaejnsxd.exe:*:Enabled:ENABLE»
«C:Documents and SettingsАдминистраторLocal SettingsTempanvA6.tmp»=»C:Documents and SettingsАдминистраторLocal SettingsTempanvA6.tmp:*:Enabled:ENABLE»
«C:WINDOWSsystem32userinit.exe»=»C:WINDOWSsystem32userinit.exe:*:Enabled:ENABLE»
«D:Rockstar Games Social Club1_1_3_0RGSC.exe»=»D:Rockstar Games Social Club1_1_3_0RGSC.exe:*:Enabled:ENABLE»
«C:WINDOWSsystem32netsh.exe»=»C:WINDOWSsystem32netsh.exe:*:Enabled:ENABLE»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{2deb9f68-71fe-11dd-b049-00179aacadc8}]
shellAutoRuncommand — G:AUTORUN.EXE[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{cab5f017-8a5a-11dd-b083-00179aacadc8}]
shell1command — H:Notepad.exe
shell2command — H:Notepad.exe
shellAutoRuncommand — C:WINDOWSsystem32RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Notepad.exe======List of files/folders created in the last 1 months======
2009-04-15 23:35:06 —-D—- C:Documents and SettingsАдминистраторApplication DataRapid Antivirus
2009-04-15 23:22:29 —-D—- C:_OTMoveIt
2009-04-15 23:14:29 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv2E
2009-04-15 22:47:27 —-RASHD—- C:autorun.inf
2009-04-14 03:28:36 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv81
2009-04-13 23:14:00 —-HD—- C:WINDOWSsystem32DD8E72
2009-04-13 23:14:00 —-HD—- C:WINDOWSsystem32A8D223
2009-04-13 23:14:00 —-HD—- C:WINDOWSsystem32369CAE
2009-04-13 22:35:56 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv6B
2009-04-13 21:03:57 —-D—- C:rsit
2009-04-13 21:03:57 —-D—- C:Program Filestrend micro
2009-04-13 20:53:21 —-D—- C:Program FilesCommon FilesPC Tools
2009-04-13 20:53:16 —-D—- C:Program FilesSpyware Doctor
2009-04-13 20:53:16 —-D—- C:Documents and SettingsАдминистраторApplication DataPC Tools
2009-04-13 20:53:16 —-D—- C:Documents and SettingsAll UsersApplication DataPC Tools
2009-04-13 17:09:27 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv8D
2009-04-13 16:16:29 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv2B
2009-04-13 16:10:30 —-D—- C:Documents and SettingsАдминистраторApplication DataanvB8
2009-04-13 15:44:39 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv84
2009-04-13 15:44:39 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv38
2009-04-13 15:05:03 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv28
2009-04-13 13:41:27 —-D—- C:Documents and SettingsАдминистраторApplication DataanvF
2009-04-13 12:50:03 —-D—- C:Documents and SettingsАдминистраторApplication DataanvF5
2009-04-13 12:01:52 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv19
2009-04-13 11:24:47 —-D—- C:Documents and SettingsАдминистраторApplication DataanvB2
2009-04-13 11:24:47 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv63
2009-04-13 09:59:14 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv15
2009-04-13 09:51:47 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv6
2009-04-13 09:42:06 —-D—- C:Documents and SettingsАдминистраторApplication DataanvDC
2009-04-13 09:29:06 —-D—- C:Documents and SettingsАдминистраторApplication DataanvEC
2009-04-10 23:33:47 —-D—- C:Documents and SettingsАдминистраторApplication DataanvD
2009-04-10 23:02:22 —-D—- C:Documents and SettingsАдминистраторApplication DataanvD5
2009-04-10 11:57:27 —-D—- C:Documents and SettingsАдминистраторApplication DataMalwarebytes
2009-04-10 11:57:23 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2009-04-10 11:57:23 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2009-04-10 11:31:44 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv8F
2009-04-10 11:11:00 —-D—- C:Documents and SettingsАдминистраторApplication DataanvE7
2009-04-10 10:59:22 —-D—- C:Documents and SettingsАдминистраторApplication DataanvA6
2009-04-10 10:59:21 —-D—- C:Documents and SettingsАдминистраторApplication DataanvD2
2009-04-10 10:55:06 —-A—- C:WINDOWSsystem32aswBoot.exe
2009-04-10 10:04:35 —-D—- C:Documents and SettingsАдминистраторApplication DataanvFD
2009-04-08 19:18:06 —-D—- C:Documents and SettingsАдминистраторApplication Dataanv16======List of files/folders modified in the last 1 months======
2009-04-15 23:41:38 —-D—- C:WINDOWSsystem32drivers
2009-04-15 23:39:22 —-D—- C:Program FilesvAvTraffer
2009-04-15 23:39:21 —-D—- C:WINDOWSTemp
2009-04-15 23:37:52 —-D—- C:WINDOWSsystem32CatRoot2
2009-04-15 23:37:29 —-D—- C:WINDOWS
2009-04-15 23:37:13 —-D—- C:Program FilesSteam
2009-04-15 23:37:13 —-A—- C:WINDOWSAVerTV.ini
2009-04-15 23:37:11 —-D—- C:Program FilesnnCron
2009-04-15 23:35:49 —-N—- C:WINDOWSSchedLgU.Txt
2009-04-15 23:33:36 —-RD—- C:Program Files
2009-04-15 23:33:36 —-D—- C:WINDOWSsystem32
2009-04-15 23:07:21 —-D—- C:WINDOWSPrefetch
2009-04-15 23:05:39 —-A—- C:WINDOWSNeroDigital.ini
2009-04-15 22:46:27 —-D—- C:Downloads
2009-04-13 23:34:20 —-AD—- C:Documents and SettingsAll UsersApplication DataTEMP
2009-04-13 20:58:55 —-D—- C:Program FilesDownload Master
2009-04-13 20:53:21 —-D—- C:Program FilesCommon Files
2009-04-13 09:59:21 —-D—- C:Documents and SettingsАдминистраторApplication DataWinamp
2009-04-11 15:20:56 —-SHD—- C:RECYCLER
2009-04-11 14:05:23 —-D—- C:Program FilesWinamp
2009-04-10 11:02:10 —-D—- C:Program FilesDreamRender
2009-04-10 10:48:30 —-SHD—- C:WINDOWSInstaller
2009-04-09 20:30:07 —-A—- C:audiodec.txt
2009-04-09 09:17:50 —-A—- C:WINDOWSsystem32PnkBstrB.exe
2009-04-04 18:28:58 —-D—- C:Program FilesAVerTV
2009-03-29 17:04:38 —-A—- C:WINDOWSsystem32PerfStringBackup.INI======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:WINDOWSsystem32driversAavmker4.sys [2006-12-21 31560]
R1 aswTdi;avast! Network Shield Support; C:WINDOWSsystem32driversaswTdi.sys [2007-01-15 43176]
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-15 40704]
R2 aswMon2;avast! Standard Shield Support; C:WINDOWSsystem32driversaswMon2.sys [2006-12-21 94424]
R2 Defrag32;Defrag32; C:WINDOWSsystem32driversDefrag32.sys [2005-06-28 61920]
R2 mdmxsdk;mdmxsdk; C:WINDOWSsystem32DRIVERSmdmxsdk.sys [2008-04-25 11868]
R3 aswRdr;aswRdr; C:WINDOWSsystem32driversaswRdr.sys [2007-01-15 23352]
R3 Cap7134;Cap7134 Capture; C:WINDOWSsystem32DRIVERSCap7134.sys [2008-08-17 407072]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-15 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2008-01-30 4725760]
R3 lanusb;D-Link DSL-200 USB ADSL LAN Modem; C:WINDOWSsystem32DRIVERSglausb.sys [2005-09-22 148480]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2009-01-15 6301248]
R3 PhTVTune;Cap7134 TVTuner; C:WINDOWSsystem32DRIVERSPhTVTune.sys [2008-08-17 57120]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtenicxp.sys [2008-01-04 105856]
R3 Tetris;Tetris driver; C:WINDOWSSystem32DriversTetris.sys [2008-10-23 48928]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-15 30208]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-15 20608]
S1 kbdhid;Драйвер клавиатуры HID; C:WINDOWSsystem32DRIVERSkbdhid.sys [2008-04-25 14720]
S2 acpi32;acpi32; ??C:WINDOWSsystem32driversacpi32.sys []
S3 axiogo7a;axiogo7a; C:WINDOWSsystem32driversaxiogo7a.sys []
S3 CCDECODE;Closed Caption декодер; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2008-04-25 17024]
S3 gdrv;gdrv; ??C:WINDOWSgdrv.sys []
S3 ggflt;SEMC USB Flash Driver Filter; C:WINDOWSsystem32DRIVERSggflt.sys [2007-09-25 13352]
S3 ggsemc;SEMC USB Flash Driver; C:WINDOWSsystem32DRIVERSggsemc.sys [2007-09-25 20520]
S3 GVCplDrv;GVCplDrv; C:WINDOWSsystem32driversGVCplDrv.sys [2004-05-02 23040]
S3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-25 10368]
S3 HSF_DP;HSF_DP; C:WINDOWSsystem32DRIVERSHSFDPSP2.sys [2008-04-25 1041536]
S3 HSFHWBS2;HSFHWBS2; C:WINDOWSsystem32DRIVERSHSFBS2S2.sys [2008-04-25 220032]
S3 MarkFun_NT;MarkFun_NT; ??C:Program FilesGigabyte@BIOSmarkfun.w32 []
S3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-19 12160]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2008-04-25 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2008-04-25 85248]
S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWSsystem32DRIVERSNdisIP.sys [2008-04-25 10880]
S3 npkcrypt;npkcrypt; ??E:С хабаLineage2_Эверsystemnpkcrypt.sys []
S3 npkcusb;npkcusb; ??D:Lineage 2 interludesystemnpkcusb.sys []
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2008-04-25 11136]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2008-04-25 15232]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-25 32128]
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-25 25856]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-25 15104]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-25 26368]
S3 Wdf01000;Wdf01000; C:WINDOWSsystem32DRIVERSWdf01000.sys [2006-11-02 492000]
S3 winachsf;winachsf; C:WINDOWSsystem32DRIVERSHSFCXTS2.sys [2008-04-25 685056]
S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2008-04-25 19200]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2008-03-21 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2008-03-21 82944]======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aswUpdSv;avast! iAVS4 Control Service; C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe [2007-01-15 59008]
R2 avast! Antivirus;avast! Antivirus; C:Program FilesAlwil SoftwareAvast4ashServ.exe [2007-01-15 132736]
R2 nnCron;nnCron; C:Program FilesnnCronnncron.exe [2006-03-21 408576]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2009-01-15 163908]
R2 PDSched;PDScheduler; C:Program FilesRaxcoPerfectDiskPDSched.exe [2005-06-28 241731]
R2 PnkBstrA;PnkBstrA; C:WINDOWSsystem32PnkBstrA.exe [2008-12-06 66872]
R3 avast! Mail Scanner;avast! Mail Scanner; C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe [2007-01-15 255616]
R3 avast! Web Scanner;avast! Web Scanner; C:Program FilesAlwil SoftwareAvast4ashWebSv.exe [2007-01-15 370304]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2006-10-20 36864]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 idsvc;Windows CardSpace; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2006-10-30 741376]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:Program FilesMicrosoft OfficeOffice12GrooveAuditService.exe [2006-10-27 65824]
S3 NBService;NBService; C:Program FilesNeroNero 7Nero BackItUpNBService.exe [2006-09-12 724992]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 PDEngine;PDEngine; C:Program FilesRaxcoPerfectDiskPDEngine.exe [2005-06-28 483397]
S3 sdAuxService;PC Tools Auxiliary Service; C:Program FilesSpyware DoctorpctsAuxs.exe [2009-01-07 348752]
S3 sdCoreService;PC Tools Security Service; C:Program FilesSpyware DoctorpctsSvc.exe [2009-01-21 1095560]
S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2008-03-21 914944]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2006-10-30 122880]
EOF
Вот вроде и все…кстати диска H у меня нет, скорее всего флешка залетная….но буду внимательней к флешкам…Еще раз спс….
