SPYWARE-RU.COM

Созданные ответы форума

Просмотр 8 сообщений - с 1 по 8 (из 8 всего)

Автор

Сообщения
27 июня, 2009 в 7:21 пп в ответ на: Порно-информер #24460
schu
Participant
- Темы:1
- Сообщений:9
Спасибо огромное!!!! Все чистенько и опрятненько)))) В Опере тоже все чисто!
25 июня, 2009 в 10:12 пп в ответ на: Порно-информер #24458
schu
Participant
- Темы:1
- Сообщений:9
O1 HOSTS File: (128 bytes) — C:WINDOWSSystem32driversetcHosts
O1 — Hosts: 127.0.0.1 localhost
O1 — Hosts: 88.198.72.190 css.yandex.net #AdwMtam_MicroSoft
O1 — Hosts: 127.0.0.1 vkontakte.ru
O1 — Hosts: 127.0.0.1 http://www.vkontakte.ru
O2 — BHO: (Octh Class) — {000123B4-9B42-4900-B3F7-F4B073EFC214} — C:Program FilesOrbitdownloaderorbitcth.dll (Orbitdownloader.com)
O2 — BHO: (Yahoo! Toolbar Helper) — {02478D38-C3F9-4EFB-9B51-7695ECA05670} — C:Program FilesYahoo!CompanionInstallscpn0yt.dll (Yahoo! Inc.)
O2 — BHO: (Winamp Toolbar Loader) — {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} — C:Program FilesWinamp Toolbarwinamptb.dll (AOL LLC.)
O2 — BHO: (Spybot-S&D IE Protection) — {53707962-6F74-2D53-2644-206D7942484F} — C:Program FilesSpybot — Search & DestroySDHelper.dll (Safer Networking Limited)
O2 — BHO: (Groove GFS Browser Helper) — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — D:Program FilesOffice12GrooveShellExtensions.dll (Microsoft Corporation)
O2 — BHO: (MailRuBHO Class) — {8984B388-A5BB-4DF7-B274-77B879E179DB} — C:Program FilesMail.RuSputnikMailRuSputnik.dll (@Mail.Ru)
O2 — BHO: (Google Toolbar Helper) — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll ()
O2 — BHO: (Google Toolbar Notifier BHO) — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.0.926.3450swg.dll (Google Inc.)
O2 — BHO: (Google Dictionary Compression sdch) — {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_219B3E1547538286.dll (Google Inc.)
O2 — BHO: (Java(tm) Plug-In 2 SSV Helper) — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll (Sun Microsystems, Inc.)
O2 — BHO: (JQSIEStartDetectorImpl Class) — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll (Sun Microsystems, Inc.)
O3 — HKLM..Toolbar: (Спутник@Mail.Ru) — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll (@Mail.Ru)
O3 — HKLM..Toolbar: (&Google Toolbar) — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll ()
O3 — HKLM..Toolbar: (Rambler-Ассистент) — {468CD8A9-7C25-45FA-969E-3D925C689DC4} — C:Program FilesRambler AssistantramblertoolbarU0.dll (Rambler.ru)
O3 — HKLM..Toolbar: (ICQToolBar) — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll (ICQ)
O3 — HKLM..Toolbar: (Яндекс.Бар) — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll (ООО «ЯНДЕКС»)
O3 — HKLM..Toolbar: (Grab Pro) — {C55BBCD6-41AD-48AD-9953-3609C48EACC7} — C:Program FilesOrbitdownloaderGrabPro.dll ()
O3 — HKLM..Toolbar: (Winamp Toolbar) — {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} — C:Program FilesWinamp Toolbarwinamptb.dll (AOL LLC.)
O3 — HKLM..Toolbar: (Yahoo! Toolbar) — {EF99BD32-C1FB-11D2-892F-0090271D4F88} — C:Program FilesYahoo!CompanionInstallscpn0yt.dll (Yahoo! Inc.)
O3 — HKU.DEFAULT..ToolbarWebBrowser: (Яндекс.Бар) — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll (ООО «ЯНДЕКС»)
O3 — HKUS-1-5-18..ToolbarWebBrowser: (Яндекс.Бар) — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll (ООО «ЯНДЕКС»)
O3 — HKUS-1-5-21-861567501-651377827-839522115-1004..ToolbarWebBrowser: (&Адрес) — {01E04581-4EEE-11D0-BFE9-00AA005B4383} — C:WINDOWSSystem32browseui.dll (Корпорация Майкрософт)
O3 — HKUS-1-5-21-861567501-651377827-839522115-1004..ToolbarWebBrowser: (Спутник@Mail.Ru) — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll (@Mail.Ru)
O3 — HKUS-1-5-21-861567501-651377827-839522115-1004..ToolbarWebBrowser: (&Ссылки) — {0E5CBF21-D15F-11D0-8301-00AA005B4383} — C:WINDOWSSystem32SHELL32.dll (Корпорация Майкрософт)
O3 — HKUS-1-5-21-861567501-651377827-839522115-1004..ToolbarWebBrowser: (&Google Toolbar) — {2318C2B1-4965-11D4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll ()
O3 — HKUS-1-5-21-861567501-651377827-839522115-1004..ToolbarWebBrowser: (Rambler-Ассистент) — {468CD8A9-7C25-45FA-969E-3D925C689DC4} — C:Program FilesRambler AssistantramblertoolbarU0.dll (Rambler.ru)
O3 — HKUS-1-5-21-861567501-651377827-839522115-1004..ToolbarWebBrowser: (Яндекс.Бар) — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll (ООО «ЯНДЕКС»)
O3 — HKUS-1-5-21-861567501-651377827-839522115-1004..ToolbarWebBrowser: (Grab Pro) — {C55BBCD6-41AD-48AD-9953-3609C48EACC7} — C:Program FilesOrbitdownloaderGrabPro.dll ()
O3 — HKUS-1-5-21-861567501-651377827-839522115-1004..ToolbarWebBrowser: (Yahoo! Toolbar) — {EF99BD32-C1FB-11D2-892F-0090271D4F88} — C:Program FilesYahoo!CompanionInstallscpn0yt.dll (Yahoo! Inc.)
O4 — HKLM..Run: [avast!] C:Program FilesAlwil SoftwareAvast4ashDisp.exe (ALWIL Software)
O4 — HKLM..Run: [DSLAGENTEXE] C:Program FilesD-LinkDSL-200dslagent.exe ()
O4 — HKLM..Run: [DSLSTATEXE] C:Program FilesD-LinkDSL-200dslstat.exe (Conexant Systems, Inc.)
O4 — HKLM..Run: [GrooveMonitor] D:Program FilesOffice12GrooveMonitor.exe (Microsoft Corporation)
O4 — HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe (Hewlett-Packard)
O4 — HKLM..Run: [LoviVkontakte] C:Program FilesLoviVkontaktelovivkontakte.exe (Zeyfman Genady)
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe (Mail.Ru)
O4 — HKLM..Run: [NvCplDaemon] C:WINDOWSSystem32NvCpl.DLL (NVIDIA Corporation)
O4 — HKLM..Run: [NvMediaCenter] C:WINDOWSSystem32NvMCTray.DLL (NVIDIA Corporation)
O4 — HKLM..Run: [nwiz] C:WINDOWSSystem32nwiz.exe ()
O4 — HKLM..Run: [SoundMan] C:WINDOWSSOUNDMAN.EXE (Realtek Semiconductor Corp.)
O4 — HKLM..Run: [SunJavaUpdateSched] C:Program FilesJavajre6binjusched.exe (Sun Microsystems, Inc.)
O4 — HKLM..Run: [Vetton Wallpapers] C:Downloadsvw.exe ()
O4 — HKLM..Run: [WinampAgent] C:Program FilesWinampwinampa.exe ()
O4 — HKUS-1-5-21-861567501-651377827-839522115-1004..Run: [ICQ] C:Program FilesICQ6.5ICQ.exe (ICQ, LLC.)
O4 — HKUS-1-5-21-861567501-651377827-839522115-1004..Run: [Orb] C:Program FilesWinamp RemotebinOrbTray.exe (Orb Networks)
O4 — HKUS-1-5-21-861567501-651377827-839522115-1004..Run: [SpybotSD TeaTimer] C:Program FilesSpybot — Search & DestroyTeaTimer.exe (Safer Networking Limited)
O4 — Startup: C:Documents and SettingsAll Users.WINDOWSГлавное менюПрограммыАвтозагрузкаHP Digital Imaging Monitor.lnk = C:Program FilesHPDigital Imagingbinhpqtra08.exe (Hewlett-Packard Development Company, L.P.)
O4 — Startup: C:Documents and SettingsAll Users.WINDOWSГлавное менюПрограммыАвтозагрузкаOrbit.lnk = C:Program FilesOrbitdownloaderorbitdm.exe (Orbitdownloader.com)
O4 — Startup: C:Documents and SettingsШуГлавное менюПрограммыАвтозагрузкаВырезка экрана и программа запуска для OneNote 2007.lnk = D:Program FilesOffice12ONENOTEM.EXE (Microsoft Corporation)
O4 — Startup: C:Documents and SettingsШуГлавное менюПрограммыАвтозагрузкаИнформер от rp5.ru.lnk = C:Program Filesrp5.rurp5.exe ()
O6 — HKLMSoftwarePoliciesMicrosoftInternet ExplorerLow Rights present
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: HonorAutoRunSetting = 1
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDrives = 0
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: dontdisplaylastusername = 0
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: legalnoticecaption =
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: legalnoticetext =
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: shutdownwithoutlogon = 1
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: undockwithoutlogon = 1
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: DisableRegistryTools = 0
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: HideLegacyLogonScripts = 0
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: HideLogoffScripts = 0
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: RunLogonScriptSync = 1
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: RunStartupScriptSync = 0
O6 — HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: HideStartupScripts = 0
O7 — HKU.DEFAULTSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 — HKU.DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O7 — HKUS-1-5-18SoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 — HKUS-1-5-18SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O7 — HKUS-1-5-19SoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 — HKUS-1-5-19SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O7 — HKUS-1-5-19_ClassesSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 — HKUS-1-5-20SoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 — HKUS-1-5-20SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O7 — HKUS-1-5-20_ClassesSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 — HKUS-1-5-21-861567501-651377827-839522115-1004SoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O7 — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDrives = 0
O7 — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: HideLegacyLogonScripts = 0
O7 — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: HideLogoffScripts = 0
O7 — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: HideStartupScripts = 0
O7 — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: RunLogonScriptSync = 1
O7 — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: RunStartupScriptSync = 0
O7 — HKUS-1-5-21-861567501-651377827-839522115-1004_ClassesSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O8 — Extra context menu item: &Download by Orbit — C:Program FilesOrbitdownloaderorbitmxt.dll (Orbitdownloader.com)
O8 — Extra context menu item: &Grab video by Orbit — C:Program FilesOrbitdownloaderorbitmxt.dll (Orbitdownloader.com)
O8 — Extra context menu item: &Winamp Search — C:Documents and SettingsAll Users.WINDOWSApplication DataWinamp ToolbarieToolbarresourcesen-USlocalsearch.html ()
O8 — Extra context menu item: &Экспорт в Microsoft Excel — D:Program FilesOffice12EXCEL.EXE (Microsoft Corporation)
O8 — Extra context menu item: Do&wnload selected by Orbit — C:Program FilesOrbitdownloaderorbitmxt.dll (Orbitdownloader.com)
O8 — Extra context menu item: Down&load all by Orbit — C:Program FilesOrbitdownloaderorbitmxt.dll (Orbitdownloader.com)
O8 — Extra context menu item: Добавить в Rambler-Закладки — C:Program FilesRambler AssistantramblertoolbarU0.dll (Rambler.ru)
O8 — Extra context menu item: Найти с помощью Рамблера — C:Program FilesRambler AssistantramblertoolbarU0.dll (Rambler.ru)
O8 — Extra context menu item: Перевести с помощью словарей Рамблера — C:Program FilesRambler AssistantramblertoolbarU0.dll (Rambler.ru)
O8 — Extra context menu item: Поиск@Mail.Ru — C:Program FilesMail.RuSputnikMailRuSputnik.dll (@Mail.Ru)
O8 — Extra context menu item: Словари@Mail.Ru — C:Program FilesMail.RuSputnikMailRuSputnik.dll (@Mail.Ru)
O9 — Extra Button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — D:Program FilesOffice12ONBttnIE.dll (Microsoft Corporation)
O9 — Extra ‘Tools’ menuitem : &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — D:Program FilesOffice12ONBttnIE.dll (Microsoft Corporation)
O9 — Extra Button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe (Mail.Ru)
O9 — Extra ‘Tools’ menuitem : Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe (Mail.Ru)
O9 — Extra Button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:Program FilesMicrosoft OfficeOFFICE11REFIEBAR.DLL (Microsoft Corporation)
O9 — Extra ‘Tools’ menuitem : Spybot — Search & Destroy Configuration — {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} — C:Program FilesSpybot — Search & DestroySDHelper.dll (Safer Networking Limited)
O9 — Extra ‘Tools’ menuitem : @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe (Microsoft Corporation)
O9 — Extra Button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe (ICQ, LLC.)
O9 — Extra ‘Tools’ menuitem : ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe (ICQ, LLC.)
O9 — Extra Button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe (Microsoft Corporation)
O9 — Extra ‘Tools’ menuitem : Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe (Microsoft Corporation)
O10 — NameSpace_Catalog5Catalog_Entries00000000001 [] — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — NameSpace_Catalog5Catalog_Entries00000000003 [] — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000001 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000002 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000003 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000004 — C:WINDOWSSystem32rsvpsp.dll (Microsoft Corporation)
O10 — Protocol_Catalog9Catalog_Entries00000000005 — C:WINDOWSSystem32rsvpsp.dll (Microsoft Corporation)
O10 — Protocol_Catalog9Catalog_Entries00000000006 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000007 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000008 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000009 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000010 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000011 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000012 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000013 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000014 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O10 — Protocol_Catalog9Catalog_Entries00000000015 — C:WINDOWSSystem32mswsock.dll (Корпорация Майкрософт)
O15 — HKLM..Trusted Domains: 43 domain(s) and sub-domain(s) not assigned to a zone.
O15 — HKU.DEFAULT..Trusted Domains: 42 domain(s) and sub-domain(s) not assigned to a zone.
O15 — HKUS-1-5-18..Trusted Domains: 42 domain(s) and sub-domain(s) not assigned to a zone.
O15 — HKUS-1-5-21-861567501-651377827-839522115-1004..Trusted Domains: 42 domain(s) and sub-domain(s) not assigned to a zone.
O16 — DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 — DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 — DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O18 — ProtocolHandlerdvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} — C:WINDOWSSystem32msvidctl.dll (Корпорация Майкрософт)
O18 — ProtocolHandlergrooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} — D:Program FilesOffice12GrooveSystemServices.dll (Microsoft Corporation)
O18 — ProtocolHandlerhttpx00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} — C:Program FilesCommon FilesSystemOle DBMSDAIPP.DLL (Microsoft Corporation)
O18 — ProtocolHandlerhttpoledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} — C:Program FilesCommon FilesSystemOle DBMSDAIPP.DLL (Microsoft Corporation)
O18 — ProtocolHandlerhttpsx00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} — C:Program FilesCommon FilesSystemOle DBMSDAIPP.DLL (Microsoft Corporation)
O18 — ProtocolHandlerhttpsoledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} — C:Program FilesCommon FilesSystemOle DBMSDAIPP.DLL (Microsoft Corporation)
O18 — ProtocolHandleripp — No CLSID value found
O18 — ProtocolHandlerippx00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} — C:Program FilesCommon FilesSystemOle DBMSDAIPP.DLL (Microsoft Corporation)
O18 — ProtocolHandlermsdaipp — No CLSID value found
O18 — ProtocolHandlermsdaippx00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} — C:Program FilesCommon FilesSystemOle DBMSDAIPP.DLL (Microsoft Corporation)
O18 — ProtocolHandlermsdaippoledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} — C:Program FilesCommon FilesSystemOle DBMSDAIPP.DLL (Microsoft Corporation)
O18 — ProtocolHandlerms-help {314111c7-a502-11d2-bbca-00c04f8ec294} — C:Program FilesCommon FilesMicrosoft SharedHelphxds.dll (Microsoft Corporation)
O18 — ProtocolHandlermso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} — C:Program FilesCommon FilesMicrosoft SharedWeb Components11OWC11.DLL (Microsoft Corporation)
O18 — ProtocolHandlertv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} — C:WINDOWSSystem32msvidctl.dll (Корпорация Майкрософт)
O18 — ProtocolFilter: — text/webviewhtml — C:WINDOWSSystem32SHELL32.dll (Корпорация Майкрософт)
O18 — ProtocolFilter: — text/xml — C:Program FilesCommon FilesMicrosoft SharedOFFICE11MSOXMLMF.DLL (Microsoft Corporation)
O20 — HKLM Winlogon: Shell — (Explorer.exe) — C:WINDOWSExplorer.exe (Корпорация Майкрософт)
O20 — HKLM Winlogon: UserInit — (C:WINDOWSsystem32userinit.exe) — C:WINDOWSSystem32userinit.exe (Корпорация Майкрософт)
O20 — HKLM Winlogon: UIHost — (logonui.exe) — C:WINDOWSSystem32logonui.exe (Корпорация Майкрософт)
O20 — HKLM Winlogon: VMApplet — (rundll32 shell32) — C:WINDOWSSystem32shell32.dll (Корпорация Майкрософт)
O20 — HKLM Winlogon: VMApplet — (Control_RunDLL «sysdm.cpl») — C:WINDOWSSystem32sysdm.cpl (Корпорация Майкрософт)
O20 — WinlogonNotifycrypt32chain: DllName — crypt32.dll — C:WINDOWSSystem32crypt32.dll (Корпорация Майкрософт)
O20 — WinlogonNotifycscdll: DllName — cscdll.dll — C:WINDOWSSystem32cscdll.dll (Корпорация Майкрософт)
O20 — WinlogonNotifyScCertProp: DllName — wlnotify.dll — C:WINDOWSSystem32wlnotify.dll (Корпорация Майкрософт)
O20 — WinlogonNotifySchedule: DllName — wlnotify.dll — C:WINDOWSSystem32wlnotify.dll (Корпорация Майкрософт)
O20 — WinlogonNotifysclgntfy: DllName — sclgntfy.dll — C:WINDOWSSystem32sclgntfy.dll (Корпорация Майкрософт)
O20 — WinlogonNotifySensLogn: DllName — WlNotify.dll — C:WINDOWSSystem32WlNotify.dll (Корпорация Майкрософт)
O20 — WinlogonNotifytermsrv: DllName — wlnotify.dll — C:WINDOWSSystem32wlnotify.dll (Корпорация Майкрософт)
O20 — WinlogonNotifywlballoon: DllName — wlnotify.dll — C:WINDOWSSystem32wlnotify.dll (Корпорация Майкрософт)
O21 — SSODL: CDBurn — {fbeb8a05-beee-4442-804e-409d6c4515e9} — C:WINDOWSSystem32SHELL32.dll (Корпорация Майкрософт)
O21 — SSODL: PostBootReminder — {7849596a-48ea-486e-8937-a2a3009f31a9} — C:WINDOWSSystem32SHELL32.dll (Корпорация Майкрософт)
O21 — SSODL: SysTray — {35CEC8A3-2BE6-11D2-8773-92E220524153} — C:WINDOWSSystem32stobject.dll (Корпорация Майкрософт)
O22 — SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} — Предзагрузчик Browseui — C:WINDOWSSystem32browseui.dll (Корпорация Майкрософт)
O22 — SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} — Демон кэша категорий компонентов — C:WINDOWSSystem32browseui.dll (Корпорация Майкрософт)
O24 — Desktop Components:0 (Моя текущая домашняя страница) — About:Home
O28 — HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} — C:WINDOWSSystem32shell32.dll (Корпорация Майкрософт)
O28 — HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} — D:Program FilesOffice12GrooveShellExtensions.dll (Microsoft Corporation)
O29 — HKLM SecurityProviders — (digest.dll) — C:WINDOWSSystem32digest.dll (Корпорация Майкрософт)
O29 — HKLM SecurityProviders — (msnsspc.dll) — C:WINDOWSSystem32msnsspc.dll (Корпорация Майкрософт)
O31 — SafeBoot: AlternateShell — cmd.exe
O32 — HKLM CDRom: AutoRun — 1
O32 — AutoRun File — [2007.12.06 22:09:02 | 00,000,000 | —- | M] () — C:AUTOEXEC.BAT — [ NTFS ]
O33 — MountPoints2{8c99498b-a424-11dc-8ef7-806d6172696f}Shell — «» = AutoRun
O33 — MountPoints2{8c99498b-a424-11dc-8ef7-806d6172696f}ShellAutoRuncommand — «» = E:Setup.exe — File not found
O34 — HKLM BootExecute: (autocheck) — File not found
O34 — HKLM BootExecute: (autochk) — C:WINDOWSSystem32autochk.exe (Microsoft Corporation)
O34 — HKLM BootExecute: (*) — File not found

========== Files/Folders — Created Within 30 Days ==========

[7 C:WINDOWS*.tmp files]
[2009.06.26 01:56:11 | 00,513,536 | —- | C] (OldTimer Tools) — C:Documents and SettingsШуРабочий столOTL.exe
[2009.06.22 01:56:56 | 00,000,000 | —D | C] — C:Program FilesWinamp Toolbar
[2009.06.20 04:12:17 | 00,000,000 | -HSD | C] — C:RECYCLER
[2009.06.20 02:06:50 | 00,212,480 | —- | C] (SteelWerX) — C:WINDOWSSWXCACLS.exe
[2009.06.20 02:06:50 | 00,161,792 | —- | C] (SteelWerX) — C:WINDOWSSWREG.exe
[2009.06.20 02:06:50 | 00,136,704 | —- | C] (SteelWerX) — C:WINDOWSSWSC.exe
[2009.06.20 02:06:50 | 00,098,816 | —- | C] () — C:WINDOWSsed.exe
[2009.06.20 02:06:50 | 00,089,504 | —- | C] (Smallfrogs Studio) — C:WINDOWSfdsv.exe
[2009.06.20 02:06:50 | 00,080,412 | —- | C] () — C:WINDOWSgrep.exe
[2009.06.20 02:06:50 | 00,068,096 | —- | C] () — C:WINDOWSzip.exe
[2009.06.20 02:06:50 | 00,049,152 | —- | C] () — C:WINDOWSVFIND.exe
[2009.06.20 02:06:50 | 00,028,672 | —- | C] (NirSoft) — C:WINDOWSNIRCMD.exe
[2009.06.20 01:54:43 | 02,873,584 | R— | C] () — C:Documents and SettingsШуРабочий столComboFix.exe
[2009.06.18 06:22:05 | 00,000,000 | -H-D | C] — C:WINDOWSie8
[2009.06.18 00:44:56 | 00,000,842 | —- | C] () — C:Documents and SettingsШуРабочий столСобачий рай.lnk
[2009.06.18 00:13:19 | 00,000,000 | —D | C] — C:Documents and SettingsAll Users.WINDOWSApplication DataFreshGames
[2009.06.18 00:09:32 | 00,000,871 | —- | C] () — C:Documents and SettingsШуРабочий столПереполох на ранчо.lnk
[2009.06.17 21:02:58 | 00,000,000 | —D | C] — C:Program Filestrend micro
[2009.06.17 21:02:52 | 00,000,000 | —D | C] — C:rsit
[2009.06.17 20:55:37 | 00,781,909 | —- | C] () — C:Documents and SettingsШуРабочий столRSIT.exe
[2009.06.17 05:11:57 | 00,000,000 | —D | C] — C:Program FilesSuperAX
[2009.06.17 02:45:49 | 00,000,000 | -HSD | C] — C:Recycled
[2009.06.16 23:27:14 | 00,000,000 | —D | C] — C:Documents and SettingsШуLocal SettingsApplication DataOpera
[2009.06.16 23:27:14 | 00,000,000 | —D | C] — C:Documents and SettingsШуApplication DataOpera
[2009.06.16 17:20:35 | 00,000,000 | —D | C] — C:Program FilesTrojan Remover
[2009.06.16 17:20:35 | 00,000,000 | —D | C] — C:Documents and SettingsШуМои документыSimply Super Software
[2009.06.16 17:20:35 | 00,000,000 | —D | C] — C:Documents and SettingsAll Users.WINDOWSApplication DataSimply Super Software
[2009.06.16 15:56:11 | 00,000,000 | -HSD | C] — C:RECYCLER(3)
[2009.06.16 04:01:49 | 00,000,000 | —D | C] — C:RECYCLER(2)
[2009.06.16 03:22:24 | 00,000,267 | —- | C] () — C:Boot.bak
[2009.06.16 03:22:18 | 00,260,272 | —- | C] () — C:cmldr
[2009.06.16 03:22:17 | 00,000,000 | —D | C] — C:cmdcons
[2009.06.16 03:19:06 | 00,000,000 | —D | C] — C:WINDOWSERDNT
[2009.06.16 03:18:50 | 00,000,000 | —D | C] — C:Qoobox
[2009.06.15 04:51:02 | 00,000,008 | -H— | C] () — C:Documents and SettingsШуApplication Datamicrosoft.data.xsl
[2009.06.15 01:31:05 | 00,000,000 | —D | C] — C:Program FilesSiteAccess
[2009.06.13 04:54:13 | 00,079,872 | —- | C] () — C:Documents and SettingsШуМои документыВне зоны боевых действий.doc
[2009.06.12 03:09:10 | 00,000,000 | —D | C] — C:Documents and SettingsAll Users.WINDOWSApplication DataВеселаяФерма2
[2009.06.12 03:02:50 | 00,001,541 | —- | C] () — C:Documents and SettingsШуРабочий столФабрика игр Alawar.lnk
[2009.06.12 03:02:50 | 00,000,826 | —- | C] () — C:Documents and SettingsШуРабочий столВеселая ферма 2.lnk
[2009.06.12 03:00:06 | 00,000,000 | —D | C] — C:Program FilesAlawar.ru
[2009.06.11 23:30:21 | 00,012,800 | —- | C] (Microsoft Corporation) — C:WINDOWSSystem32dllcachexpshims.dll
[2009.06.11 23:30:19 | 00,246,272 | —- | C] (Microsoft Corporation) — C:WINDOWSSystem32dllcacheieproxy.dll
[2009.06.08 03:17:53 | 00,227,840 | —- | C] (Teebo Software Solutions) — C:WINDOWSSystem32tssOfficeMenu1d.ocx
[2009.06.08 03:17:53 | 00,047,104 | —- | C] (Microsoft Corporation) — C:WINDOWSSystem32declrds.ax
[2009.06.08 03:17:52 | 00,115,016 | —- | C] (Microsoft Corporation) — C:WINDOWSSystem32MSINET.OCX
[2009.06.08 03:17:52 | 00,109,248 | —- | C] (Microsoft Corporation) — C:WINDOWSSystem32MSWINSCK.OCX
[2009.06.08 03:17:51 | 00,338,432 | —- | C] (MultiMedia Soft) — C:WINDOWSSystem323dabm7u.ocx
[2009.06.08 03:17:50 | 00,245,408 | —- | C] (Microsoft Corporation) — C:WINDOWSSystem32unicows.dll
[2009.06.08 03:17:37 | 00,000,000 | —D | C] — C:Program FilesWebTV
[2009.06.08 00:01:35 | 00,025,600 | —- | C] () — C:Documents and SettingsШуМои документыДЕВИЗ НАСТОЯЩЕЙ ЖЕНЩИНЫ.doc
[2009.06.05 17:41:04 | 00,346,624 | —- | C] () — C:Documents and SettingsШуМои документыСтефани Габриелла Герминотта.doc
[2009.06.02 01:50:28 | 00,000,000 | —D | C] — C:Program FilesLoviVkontakte
[2009.06.02 01:29:52 | 00,050,176 | —- | C] () — C:Documents and SettingsШуМои документыВлюбляйся в поступки.doc
[2009.05.30 11:42:02 | 00,061,440 | —- | C] () — C:Documents and SettingsШуМои документыДевочки.doc
[2009.05.02 22:47:09 | 00,000,038 | —- | C] () — C:WINDOWSavisplitter.INI
[2009.04.30 20:14:17 | 00,354,816 | —- | C] () — C:WINDOWSSystem32psisdecd.dll
[2009.04.28 00:05:38 | 00,755,027 | —- | C] () — C:WINDOWSSystem32xvidcore.dll
[2009.04.28 00:05:37 | 03,596,288 | —- | C] () — C:WINDOWSSystem32qt-dx331.dll
[2009.04.28 00:05:37 | 00,159,839 | —- | C] () — C:WINDOWSSystem32xvidvfw.dll
[2009.04.28 00:05:35 | 00,007,680 | —- | C] () — C:WINDOWSSystem32ff_vfw.dll
[2009.04.28 00:05:35 | 00,000,547 | —- | C] () — C:WINDOWSSystem32ff_vfw.dll.manifest
[2009.04.01 20:36:03 | 00,077,824 | R— | C] () — C:WINDOWSSystem32HPZIDS01.dll
[2008.11.06 14:42:59 | 00,005,632 | —- | C] () — C:WINDOWSSystem32driversStarOpen.sys
[2008.11.03 22:33:02 | 00,033,576 | —- | C] () — C:WINDOWSSystem32BCGPOleAcc.dll
[2008.08.11 22:34:22 | 00,000,069 | —- | C] () — C:WINDOWSNeroDigital.ini
[2008.08.05 11:43:36 | 00,019,427 | —- | C] () — C:WINDOWSwwdslcfg.ini
[2008.08.05 11:28:07 | 00,000,394 | —- | C] () — C:WINDOWSODBC.INI
[2008.08.05 11:22:26 | 00,164,352 | —- | C] () — C:WINDOWSSystem32unrar.dll
[2008.08.03 19:02:35 | 00,721,904 | —- | C] () — C:WINDOWSSystem32driverssptd.sys
[2008.08.03 19:02:20 | 00,278,728 | —- | C] () — C:WINDOWSSystem32driversatksgt.sys
[2008.08.03 19:02:19 | 00,025,416 | —- | C] () — C:WINDOWSSystem32driverslirsgt.sys
[2008.08.01 21:34:14 | 00,000,115 | —- | C] () — C:WINDOWSAWOPR.INI
[2008.08.01 20:43:44 | 00,135,168 | R— | C] () — C:WINDOWSSystem32RtlCPAPI.dll
[2008.08.01 20:43:36 | 00,000,164 | R— | C] () — C:WINDOWSavrack.ini
[2008.08.01 20:42:20 | 00,000,258 | —- | C] () — C:WINDOWSSystem32raidmgmt.ini
[2008.08.01 16:43:12 | 00,000,169 | —- | C] () — C:WINDOWSRtlRack.ini
[2008.08.01 16:39:29 | 00,034,308 | —- | C] () — C:WINDOWSSystem32BASSMOD.dll
[2008.08.01 14:34:59 | 00,002,704 | —- | C] () — C:WINDOWSWINCMD.INI
[2007.03.12 22:31:28 | 01,732,608 | —- | C] () — C:WINDOWSSystem32BCGPStyle2007Luna.dll
[2006.06.01 13:22:00 | 01,662,976 | —- | C] () — C:WINDOWSSystem32nvwdmcpl.dll
[2006.06.01 13:22:00 | 01,466,368 | —- | C] () — C:WINDOWSSystem32nview.dll
[2006.06.01 13:22:00 | 01,019,904 | —- | C] () — C:WINDOWSSystem32nvwimg.dll
[2006.06.01 13:22:00 | 00,581,632 | —- | C] () — C:WINDOWSSystem32nvhwvid.dll
[2006.06.01 13:22:00 | 00,466,944 | —- | C] () — C:WINDOWSSystem32nvshell.dll
[2006.06.01 13:22:00 | 00,286,720 | —- | C] () — C:WINDOWSSystem32nvnt4cpl.dll
[2006.06.01 13:22:00 | 00,196,608 | —- | C] () — C:WINDOWSSystem32nvapi.dll
[2006.03.02 16:00:00 | 00,000,637 | —- | C] () — C:WINDOWSwin.ini
[2006.03.02 16:00:00 | 00,000,227 | —- | C] () — C:WINDOWSsystem.ini
[2001.07.07 03:00:02 | 00,003,249 | —- | C] () — C:WINDOWSSystem32HPTCPMON.INI

========== Files — Modified Within 30 Days ==========

[4 C:WINDOWSSystem32*.tmp files]
[7 C:WINDOWS*.tmp files]
[2009.06.26 00:40:27 | 00,000,438 | -H— | M] () — C:WINDOWStasksUser_Feed_Synchronization-{7E654ACB-1BBB-4723-8E60-902208151B9F}.job
[2009.06.26 00:36:00 | 00,000,128 | —- | M] () — C:WINDOWSSystem32driversetchosts
[2009.06.26 00:35:50 | 00,001,554 | —- | M] () — C:Documents and SettingsAll Users.WINDOWSГлавное менюПрограммыАвтозагрузкаOrbit.lnk
[2009.06.26 00:35:23 | 00,063,804 | —- | M] () — C:WINDOWSSystem32nvapps.xml
[2009.06.26 00:35:15 | 00,000,006 | -H— | M] () — C:WINDOWStasksSA.DAT
[2009.06.26 00:35:07 | 00,002,048 | —S- | M] () — C:WINDOWSbootstat.dat
[2009.06.25 14:03:24 | 00,513,536 | —- | M] (OldTimer Tools) — C:Documents and SettingsШуРабочий столOTL.exe
[2009.06.25 02:45:07 | 00,002,422 | —- | M] () — C:WINDOWSSystem32wpa.dbl
[2009.06.23 01:18:37 | 00,002,463 | —- | M] () — C:Documents and SettingsШуРабочий столMicrosoft Office Word 2003.lnk
[2009.06.22 01:57:09 | 00,000,664 | —- | M] () — C:Documents and SettingsAll Users.WINDOWSРабочий столWinamp.lnk
[2009.06.20 02:12:59 | 00,000,227 | —- | M] () — C:WINDOWSsystem.ini
[2009.06.18 13:36:34 | 04,319,442 | -H— | M] () — C:Documents and SettingsШуLocal SettingsApplication DataIconCache.db
[2009.06.18 05:24:16 | 00,034,308 | —- | M] () — C:WINDOWSSystem32BASSMOD.dll
[2009.06.18 05:20:16 | 00,110,592 | —- | M] (Microsoft Corporation) — C:WINDOWSSystem32dllcachedbnetlib.dll
[2009.06.18 05:20:16 | 00,110,592 | —- | M] (Microsoft Corporation) — C:WINDOWSSystem32dbnetlib.dll
[2009.06.18 05:09:03 | 00,721,904 | —- | M] () — C:WINDOWSSystem32driverssptd.sys
[2009.06.18 00:44:56 | 00,001,541 | —- | M] () — C:Documents and SettingsШуРабочий столФабрика игр Alawar.lnk
[2009.06.18 00:44:56 | 00,000,842 | —- | M] () — C:Documents and SettingsШуРабочий столСобачий рай.lnk
[2009.06.18 00:09:32 | 00,000,871 | —- | M] () — C:Documents and SettingsШуРабочий столПереполох на ранчо.lnk
[2009.06.15 04:51:02 | 00,000,008 | -H— | M] () — C:Documents and SettingsШуApplication Datamicrosoft.data.xsl
[2009.06.15 04:20:12 | 00,048,640 | —- | M] () — C:Documents and SettingsШуLocal SettingsApplication DataDCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.06.13 04:54:13 | 00,079,872 | —- | M] () — C:Documents and SettingsШуМои документыВне зоны боевых действий.doc
[2009.06.12 05:18:38 | 00,271,784 | —- | M] () — C:WINDOWSSystem32FNTCACHE.DAT
[2009.06.12 03:02:50 | 00,000,826 | —- | M] () — C:Documents and SettingsШуРабочий столВеселая ферма 2.lnk
[2009.06.08 00:01:35 | 00,025,600 | —- | M] () — C:Documents and SettingsШуМои документыДЕВИЗ НАСТОЯЩЕЙ ЖЕНЩИНЫ.doc
[2009.06.05 17:41:05 | 00,346,624 | —- | M] () — C:Documents and SettingsШуМои документыСтефани Габриелла Герминотта.doc
[2009.06.04 21:27:38 | 00,000,038 | —- | M] () — C:WINDOWSavisplitter.INI
[2009.06.02 01:29:52 | 00,050,176 | —- | M] () — C:Documents and SettingsШуМои документыВлюбляйся в поступки.doc
[2009.06.01 20:51:12 | 23,635,392 | —- | M] (Microsoft Corporation) — C:WINDOWSSystem32MRT.exe
[2009.05.30 11:42:03 | 00,061,440 | —- | M] () — C:Documents and SettingsШуМои документыДевочки.doc

========== Alternate Data Streams ==========

@Alternate Data Stream — 88 bytes -> C:WINDOWSSystem32dbnetlib.dll:SummaryInformation
25 июня, 2009 в 10:11 пп в ответ на: Порно-информер #24457
schu
Participant
- Темы:1
- Сообщений:9
OTL logfile created on: 26.06.2009 1:57:00 — Run 1
OTL by OldTimer — Version 3.0.5.3 Folder = C:Documents and SettingsШуРабочий стол
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) — Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000419 | Country: Россия | Language: RUS | Date Format: dd.MM.yyyy

1023,48 Mb Total Physical Memory | 488,79 Mb Available Physical Memory | 47,76% Memory free
2,40 Gb Paging File | 1,94 Gb Available in Paging File | 80,92% Paging File free
Paging file location(s): C:pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:WINDOWS | %ProgramFiles% = C:Program Files
Drive C: | 15,71 Gb Total Space | 1,56 Gb Free Space | 9,95% Space Free | Partition Type: NTFS
Drive D: | 58,80 Gb Total Space | 14,95 Gb Free Space | 25,43% Space Free | Partition Type: FAT32
Drive E: | 3,97 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: SCHULDIG
Current User Name: Шу
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: On
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC — [2008.04.14 20:11:09 | 00,050,688 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32smss.exe
PRC — [2008.04.14 20:11:13 | 00,509,440 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32winlogon.exe
PRC — [2009.02.09 15:25:55 | 00,111,104 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32services.exe
PRC — [2009.02.06 00:01:25 | 00,018,752 | —- | M] (ALWIL Software) — C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
PRC — [2009.02.06 00:08:40 | 00,138,680 | —- | M] (ALWIL Software) — C:Program FilesAlwil SoftwareAvast4ashServ.exe
PRC — [2008.04.14 20:10:56 | 01,034,240 | —- | M] (Корпорация Майкрософт) — C:WINDOWSExplorer.EXE
PRC — [2008.06.10 20:26:28 | 00,222,456 | —- | M] () — C:Program FilesICQ6ToolbarICQ Service.exe
PRC — [2009.05.07 00:09:53 | 00,152,984 | —- | M] (Sun Microsystems, Inc.) — C:Program FilesJavajre6binjqs.exe
PRC — [2009.02.09 22:42:58 | 00,476,672 | —- | M] (Zeyfman Genady) — C:Program FilesLoviVkontakteVkontakteService.exe
PRC — [2006.06.01 13:22:00 | 00,155,715 | —- | M] (NVIDIA Corporation) — C:WINDOWSSystem32nvsvc32.exe
PRC — [2008.04.14 20:11:07 | 00,033,280 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32RunDLL32.exe
PRC — [2006.03.01 12:22:04 | 00,577,536 | —- | M] (Realtek Semiconductor Corp.) — C:WINDOWSSOUNDMAN.EXE
PRC — [2005.12.12 11:44:12 | 00,344,064 | —- | M] (Conexant Systems, Inc.) — C:Program FilesD-LinkDSL-200dslstat.exe
PRC — [2005.08.25 13:47:52 | 00,065,536 | —- | M] () — C:Program FilesD-LinkDSL-200dslagent.exe
PRC — [2007.05.03 00:22:10 | 01,172,480 | —- | M] () — C:Downloadsvw.exe
PRC — [2007.08.24 07:00:48 | 00,033,648 | —- | M] (Microsoft Corporation) — D:Program FilesOffice12GrooveMonitor.exe
PRC — [2009.04.10 21:29:08 | 00,037,888 | —- | M] () — C:Program FilesWinampwinampa.exe
PRC — [2007.05.08 16:24:20 | 00,054,840 | —- | M] (Hewlett-Packard) — C:Program FilesHPHP Software UpdateHPWuSchd2.exe
PRC — [2009.05.07 00:09:54 | 00,148,888 | —- | M] (Sun Microsystems, Inc.) — C:Program FilesJavajre6binjusched.exe
PRC — [2009.02.06 00:08:45 | 00,081,000 | —- | M] (ALWIL Software) — C:Program FilesAlwil SoftwareAvast4ashDisp.exe
PRC — [2009.03.26 22:44:18 | 00,726,016 | —- | M] (Zeyfman Genady) — C:Program FilesLoviVkontaktelovivkontakte.exe
PRC — [2008.01.28 11:43:40 | 02,097,488 | -HS- | M] (Safer Networking Limited) — C:Program FilesSpybot — Search & DestroyTeaTimer.exe
PRC — [2009.03.01 14:59:42 | 00,172,792 | —- | M] (ICQ, LLC.) — C:Program FilesICQ6.5ICQ.exe
PRC — [2006.02.19 04:21:22 | 00,288,472 | —- | M] (Hewlett-Packard Development Company, L.P.) — C:Program FilesHPDigital Imagingbinhpqtra08.exe
PRC — [2009.04.03 17:44:28 | 01,719,496 | —- | M] (Orbitdownloader.com) — C:Program FilesOrbitdownloaderorbitdm.exe
PRC — [2009.02.06 00:08:26 | 00,254,040 | —- | M] (ALWIL Software) — C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
PRC — [2009.02.06 00:06:04 | 00,352,920 | —- | M] (ALWIL Software) — C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
PRC — [2009.03.16 16:39:02 | 00,557,056 | —- | M] (Orbitdownloader.com) — C:Program FilesOrbitdownloaderorbitnet.exe
PRC — [2006.02.19 05:24:52 | 00,239,320 | —- | M] (Hewlett-Packard Development Company, L.P.) — C:Program FilesHPDigital ImagingbinhpqSTE08.exe
PRC — [2009.06.25 14:03:24 | 00,513,536 | —- | M] (OldTimer Tools) — C:Documents and SettingsШуРабочий столOTL.exe

========== Win32 Services (SafeList) ==========

SRV — [2005.09.23 07:28:32 | 00,029,896 | —- | M] (Microsoft Corporation) — C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe — (aspnet_state [On_Demand | Stopped])
SRV — [2009.02.06 00:01:25 | 00,018,752 | —- | M] (ALWIL Software) — C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe — (aswUpdSv [Auto | Running])
SRV — [2009.02.06 00:08:40 | 00,138,680 | —- | M] (ALWIL Software) — C:Program FilesAlwil SoftwareAvast4ashServ.exe — (avast! Antivirus [Auto | Running])
SRV — [2009.02.06 00:08:26 | 00,254,040 | —- | M] (ALWIL Software) — C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe — (avast! Mail Scanner [On_Demand | Running])
SRV — [2009.02.06 00:06:04 | 00,352,920 | —- | M] (ALWIL Software) — C:Program FilesAlwil SoftwareAvast4ashWebSv.exe — (avast! Web Scanner [On_Demand | Running])
SRV — [2008.04.14 20:10:43 | 00,409,088 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32qmgr.dll — (BITS [Auto | Running])
SRV — [2005.09.23 07:28:56 | 00,066,240 | —- | M] (Microsoft Corporation) — C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe — (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
SRV — [2008.04.14 20:10:35 | 00,126,464 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32dhcpcsvc.dll — (Dhcp [Auto | Running])
SRV — [2008.04.14 20:10:35 | 00,024,064 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32dmserver.dll — (dmserver [On_Demand | Stopped])
SRV — [2008.04.14 20:10:35 | 00,045,568 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32dnsrslvr.dll — (Dnscache [Auto | Running])
SRV — [2009.02.09 15:25:55 | 00,111,104 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32services.exe — (Eventlog [Auto | Running])
SRV — [2008.04.14 20:10:44 | 00,135,680 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32shsvcs.dll — (FastUserSwitchingCompatibility [On_Demand | Running])
SRV — [2006.10.20 21:21:24 | 00,036,864 | —- | M] (Microsoft Corporation) — C:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe — (FontCache3.0.0.0 [On_Demand | Stopped])
SRV — [2009.01.02 17:47:25 | 00,137,200 | —- | M] (Google) — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe — (gusvc [On_Demand | Stopped])
SRV — [2008.04.14 20:10:43 | 00,038,400 | —- | M] (Microsoft Corporation) — C:WINDOWSPCHealthHelpCtrBinariespchsvc.dll — (helpsvc [Auto | Running])
SRV — [2008.06.10 20:26:28 | 00,222,456 | —- | M] () — C:Program FilesICQ6ToolbarICQ Service.exe — (ICQ Service [Auto | Running])
SRV — [2006.10.30 03:33:58 | 00,741,376 | —- | M] (Microsoft Corporation) — C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe — (idsvc [Unknown | Stopped])
SRV — [2008.04.14 20:10:58 | 00,150,528 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32imapi.exe — (ImapiService [On_Demand | Stopped])
SRV — [2009.05.07 00:09:53 | 00,152,984 | —- | M] (Sun Microsystems, Inc.) — C:Program FilesJavajre6binjqs.exe — (JavaQuickStarterService [Auto | Running])
SRV — [2009.02.09 22:42:58 | 00,476,672 | —- | M] (Zeyfman Genady) — C:Program FilesLoviVkontakteVkontakteService.exe — (LoviVkontakteService [Auto | Running])
SRV — [2007.08.24 06:59:20 | 00,068,464 | —- | M] (Microsoft Corporation) — D:Program FilesOffice12GrooveAuditService.exe — (Microsoft Office Groove Audit Service [On_Demand | Stopped])
SRV — [2008.04.14 20:11:00 | 00,032,768 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32mnmsrvc.exe — (mnmsrvc [On_Demand | Stopped])
SRV — [2008.04.14 20:11:04 | 00,113,664 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32netdde.exe — (NetDDE [Disabled | Stopped])
SRV — [2008.04.14 20:11:04 | 00,113,664 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32netdde.exe — (NetDDEdsdm [Disabled | Stopped])
SRV — [2008.04.14 20:10:41 | 00,198,144 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32netman.dll — (Netman [On_Demand | Running])
SRV — [2006.10.30 03:34:02 | 00,122,880 | —- | M] (Microsoft Corporation) — C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe — (NetTcpPortSharing [Disabled | Stopped])
SRV — [2008.06.20 21:48:23 | 00,247,296 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32mswsock.dll — (Nla [On_Demand | Running])
SRV — [2008.04.14 20:10:42 | 00,436,736 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32ntmssvc.dll — (NtmsSvc [On_Demand | Stopped])
SRV — [2006.06.01 13:22:00 | 00,155,715 | —- | M] (NVIDIA Corporation) — C:WINDOWSSystem32nvsvc32.exe — (NVSvc [Auto | Running])
SRV — [2007.08.24 04:19:12 | 00,443,776 | —- | M] (Microsoft Corporation) — C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE — (odserv [On_Demand | Stopped])
SRV — [2006.10.26 14:03:08 | 00,145,184 | —- | M] (Microsoft Corporation) — C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE — (ose [On_Demand | Stopped])
SRV — [2009.02.09 15:25:55 | 00,111,104 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32services.exe — (PlugPlay [Auto | Running])
SRV — [2007.08.09 11:27:52 | 00,073,728 | —- | M] (HP) — C:WINDOWSSystem32HPZipm12.exe — (Pml Driver HPZ12 [Auto | Stopped])
SRV — [2008.04.14 20:11:08 | 00,141,824 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32sessmgr.exe — (RDSessMgr [On_Demand | Stopped])
SRV — [2008.04.14 20:11:07 | 00,096,768 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32SCardSvr.exe — (SCardSvr [On_Demand | Stopped])
SRV — [2008.04.14 20:10:44 | 00,193,024 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32schedsvc.dll — (Schedule [Auto | Running])
SRV — [2008.04.14 20:10:44 | 00,018,944 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32seclogon.dll — (seclogon [Auto | Running])
SRV — [2008.04.07 09:17:30 | 00,430,592 | —- | M] (Nokia.) — C:Program FilesPC Connectivity SolutionServiceLayer.exe — (ServiceLayer [On_Demand | Stopped])
SRV — [2008.04.14 20:10:38 | 00,331,264 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32ipnathlp.dll — (SharedAccess [Auto | Running])
SRV — [2008.04.14 20:10:44 | 00,135,680 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32shsvcs.dll — (ShellHWDetection [Auto | Running])
SRV — [2008.04.14 20:10:45 | 00,171,008 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32srsvc.dll — (srservice [Auto | Running])
SRV — [2008.04.14 20:10:46 | 00,333,824 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32wiaservc.dll — (stisvc [Auto | Running])
SRV — [2008.04.14 20:11:09 | 00,091,648 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32smlogsvc.exe — (SysmonLog [On_Demand | Stopped])
SRV — [2008.04.14 20:10:45 | 00,249,856 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32tapisrv.dll — (TapiSrv [On_Demand | Running])
SRV — [2008.04.14 20:10:45 | 00,295,936 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32termsrv.dll — (TermService [On_Demand | Running])
SRV — [2008.04.14 20:10:44 | 00,135,680 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32shsvcs.dll — (Themes [Auto | Running])
SRV — [2008.04.14 20:10:46 | 00,186,368 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32upnphost.dll — (upnphost [On_Demand | Stopped])
SRV — [2008.04.14 20:11:12 | 00,290,304 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32vssvc.exe — (VSS [On_Demand | Stopped])
SRV — [2008.04.14 20:10:46 | 00,175,616 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32w32time.dll — (W32Time [Auto | Running])
SRV — [2008.04.14 20:10:46 | 00,145,408 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32wbemWMIsvc.dll — (winmgmt [Auto | Running])
SRV — [2008.04.14 20:11:13 | 00,126,464 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32wbemwmiapsrv.exe — (WmiApSrv [On_Demand | Stopped])
SRV — [2006.11.02 23:06:32 | 00,914,944 | —- | M] (Microsoft Corporation) — C:Program FilesWindows Media PlayerWMPNetwk.exe — (WMPNetworkSvc [On_Demand | Stopped])
SRV — [2008.04.14 20:10:48 | 00,483,840 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32wzcsvc.dll — (WZCSVC [Auto | Running])

========== Driver Services (SafeList) ==========

DRV — [2009.02.06 00:05:11 | 00,026,944 | —- | M] (ALWIL Software) — C:WINDOWSSystem32driversaavmker4.sys — (Aavmker4 [System | Running])
DRV — [2008.04.14 19:37:37 | 00,188,288 | —- | M] (Корпорация Майкрософт) — C:WINDOWSsystem32DRIVERSACPI.sys — (ACPI [Boot | Running])
DRV — [2006.03.02 16:00:00 | 00,011,776 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32driversacpiec.sys — (ACPIEC [Disabled | Stopped])
DRV — [2006.05.10 11:44:08 | 03,964,736 | R— | M] (Realtek Semiconductor Corp.) — C:WINDOWSSystem32driversALCXWDM.SYS — (ALCXWDM [On_Demand | Running])
DRV — [2005.03.09 10:53:00 | 00,036,352 | R— | M] (Advanced Micro Devices) — C:WINDOWSSystem32DRIVERSAmdK8.sys — (AmdK8 [System | Running])
DRV — [1999.09.10 12:06:00 | 00,025,244 | —- | M] (Adaptec) — C:WINDOWSSystem32driversASPI32.SYS — (ASPI32 [System | Running])
DRV — [2009.02.06 00:07:12 | 00,020,560 | —- | M] (ALWIL Software) — C:WINDOWSSystem32DRIVERSaswFsBlk.sys — (aswFsBlk [Auto | Running])
DRV — [2009.02.06 00:08:10 | 00,094,032 | —- | M] (ALWIL Software) — C:WINDOWSSystem32driversaswmon2.sys — (aswMon2 [Auto | Running])
DRV — [2009.02.06 00:06:10 | 00,023,152 | —- | M] (ALWIL Software) — C:WINDOWSSystem32driversaswRdr.sys — (aswRdr [On_Demand | Running])
DRV — [2009.02.06 00:07:23 | 00,114,768 | —- | M] (ALWIL Software) — C:WINDOWSSystem32driversaswSP.sys — (aswSP [System | Running])
DRV — [2009.02.06 00:06:20 | 00,051,376 | —- | M] (ALWIL Software) — C:WINDOWSSystem32driversaswTdi.sys — (aswTdi [System | Running])
DRV — [2008.08.03 19:02:20 | 00,278,728 | —- | M] () — C:WINDOWSSystem32DRIVERSatksgt.sys — (atksgt [Auto | Running])
DRV — [2008.04.14 19:41:12 | 00,044,544 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32driversfips.sys — (Fips [System | Running])
DRV — [2006.03.02 16:00:00 | 00,125,440 | —- | M] (Корпорация Майкрософт) — C:WINDOWSsystem32DRIVERSftdisk.sys — (Ftdisk [Boot | Running])
DRV — [2006.04.13 04:04:39 | 00,049,664 | R— | M] (HP) — C:WINDOWSSystem32DRIVERSHPZid412.sys — (HPZid412 [On_Demand | Stopped])
DRV — [2006.04.13 04:04:39 | 00,016,496 | R— | M] (HP) — C:WINDOWSSystem32DRIVERSHPZipr12.sys — (HPZipr12 [On_Demand | Stopped])
DRV — [2006.04.13 04:04:39 | 00,021,568 | R— | M] (HP) — C:WINDOWSSystem32DRIVERSHPZius12.sys — (HPZius12 [On_Demand | Stopped])
DRV — [2008.04.14 19:44:08 | 00,053,120 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32DRIVERSi8042prt.sys — (i8042prt [System | Running])
DRV — [2008.04.14 19:47:15 | 00,037,504 | —- | M] (Корпорация Майкрософт) — C:WINDOWSsystem32DRIVERSisapnp.sys — (isapnp [Boot | Running])
DRV — [2008.04.14 19:47:55 | 00,024,832 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32DRIVERSkbdclass.sys — (Kbdclass [System | Running])
DRV — [2008.04.14 19:47:56 | 00,014,720 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32DRIVERSkbdhid.sys — (kbdhid [System | Running])
DRV — [2008.08.03 19:02:19 | 00,025,416 | —- | M] () — C:WINDOWSSystem32DRIVERSlirsgt.sys — (lirsgt [Auto | Running])
DRV — [2008.04.14 19:37:37 | 00,030,208 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32driversmodem.sys — (Modem [On_Demand | Stopped])
DRV — [2008.04.14 19:37:43 | 00,023,296 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32DRIVERSmouclass.sys — (Mouclass [System | Running])
DRV — [2001.10.19 20:33:10 | 00,012,160 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32DRIVERSmouhid.sys — (mouhid [On_Demand | Stopped])
DRV — [2006.06.01 13:22:00 | 03,925,920 | —- | M] (NVIDIA Corporation) — C:WINDOWSSystem32DRIVERSnv4_mini.sys — (nv [On_Demand | Running])
DRV — [2005.08.18 13:52:06 | 00,093,568 | R— | M] (NVIDIA Corporation) — C:WINDOWSsystem32DRIVERSnvata.sys — (nvata [Boot | Running])
DRV — [2005.07.26 13:48:28 | 00,033,664 | R— | M] (NVIDIA Corporation) — C:WINDOWSSystem32DRIVERSNVENETFD.sys — (NVENETFD [On_Demand | Running])
DRV — [2005.04.05 23:22:30 | 00,012,928 | R— | M] (NVIDIA Corporation) — C:WINDOWSSystem32DRIVERSnvnetbus.sys — (nvnetbus [On_Demand | Running])
DRV — [2008.04.14 19:52:21 | 00,080,128 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32DRIVERSparport.sys — (Parport [On_Demand | Running])
DRV — [2006.03.02 16:00:00 | 00,006,912 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32driversparvdm.sys — (ParVdm [Auto | Running])
DRV — [2008.04.14 19:52:28 | 00,068,480 | —- | M] (Корпорация Майкрософт) — C:WINDOWSsystem32DRIVERSpci.sys — (PCI [Boot | Running])
DRV — [2006.03.02 16:00:00 | 00,003,328 | —- | M] (Корпорация Майкрософт) — C:WINDOWSsystem32DRIVERSpciide.sys — (PCIIde [Boot | Running])
DRV — [2008.04.14 19:52:30 | 00,120,192 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32driverspcmcia.sys — (Pcmcia [Disabled | Stopped])
DRV — [2006.03.02 16:00:00 | 00,017,792 | —- | M] (Parallel Technologies, Inc.) — C:WINDOWSSystem32DRIVERSptilink.sys — (Ptilink [On_Demand | Running])
DRV — [2007.03.08 03:51:00 | 00,043,528 | —- | M] (Sonic Solutions) — C:WINDOWSSystem32DriversPxHelp20.sys — (PxHelp20 [Boot | Running])
DRV — [2008.04.14 19:41:47 | 00,058,368 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32DRIVERSredbook.sys — (redbook [System | Running])
DRV — [2008.04.13 20:39:17 | 00,020,480 | —- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) — C:WINDOWSSystem32DRIVERSsecdrv.sys — (Secdrv [On_Demand | Stopped])
DRV — [2008.04.14 19:44:00 | 00,065,024 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32DRIVERSserial.sys — (Serial [System | Running])
DRV — [2005.03.03 21:53:57 | 00,048,640 | —- | M] (Protection Technology) — C:WINDOWSSystem32driverssfdrv01.sys — (sfdrv01 [Boot | Running])
DRV — [2005.02.23 19:59:54 | 00,006,656 | —- | M] (Protection Technology) — C:WINDOWSSystem32driverssfhlp02.sys — (sfhlp02 [Boot | Running])
DRV — [2004.12.03 14:20:41 | 00,020,544 | —- | M] (Protection Technology) — C:WINDOWSSystem32driverssfsync02.sys — (sfsync02 [Boot | Running])
DRV — [2009.06.18 05:09:03 | 00,721,904 | —- | M] () — C:WINDOWSSystem32Driverssptd.sys — (sptd [Boot | Running])
DRV — [2008.04.14 19:52:45 | 00,073,472 | —- | M] (Корпорация Майкрософт) — C:WINDOWSsystem32DRIVERSsr.sys — (sr [Boot | Running])
DRV — [2007.05.02 12:11:16 | 00,083,592 | —- | M] (MCCI Corporation) — C:WINDOWSSystem32DRIVERSss_bus.sys — (ss_bus [On_Demand | Stopped])
DRV — [2007.05.02 12:11:18 | 00,015,112 | —- | M] (MCCI Corporation) — C:WINDOWSSystem32DRIVERSss_mdfl.sys — (ss_mdfl [On_Demand | Stopped])
DRV — [2007.05.02 12:11:18 | 00,109,704 | —- | M] (MCCI Corporation) — C:WINDOWSSystem32DRIVERSss_mdm.sys — (ss_mdm [On_Demand | Stopped])
DRV — [2008.11.06 15:07:46 | 00,005,632 | —- | M] () — C:WINDOWSSystem32driversStarOpen.sys — (StarOpen [System | Running])
DRV — [2008.04.14 19:40:08 | 00,051,968 | —- | M] (Корпорация Майкрософт) — C:WINDOWSSystem32driversvolsnap.sys — (VolSnap [Boot | Running])
DRV — [2005.09.22 12:31:32 | 00,158,592 | —- | M] (Conexant Systems Inc.) — C:WINDOWSSystem32DRIVERSgwausb.sys — (wanusb [On_Demand | Running])

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE — HKLMSOFTWAREMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE — HKLMSOFTWAREMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE — HKLMSOFTWAREMicrosoftInternet ExplorerMain,Default_Secondary_Page_URL = [binary data]
IE — HKLMSOFTWAREMicrosoftInternet ExplorerMain,Extensions Off Page = about:NoAdd-ons
IE — HKLMSOFTWAREMicrosoftInternet ExplorerMain,Local Page = C:WINDOWSsystem32blank.htm
IE — HKLMSOFTWAREMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE — HKLMSOFTWAREMicrosoftInternet ExplorerMain,Security Risk Page = about:SecurityRisk
IE — HKLMSOFTWAREMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE — HKLMSOFTWAREMicrosoftInternet ExplorerSearch,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE — HKLMSOFTWAREMicrosoftInternet ExplorerSearch,Default_Search_URL = http://www.google.com/ie
IE — HKLMSOFTWAREMicrosoftInternet ExplorerSearch,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE — URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} — C:Program FilesWinamp Toolbarwinamptb.dll (AOL LLC.)

IE — HKU.DEFAULTSOFTWAREMicrosoftInternet ExplorerMain,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE — HKU.DEFAULTSOFTWAREMicrosoftInternet ExplorerMain,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE — HKU.DEFAULT.DEFAULTSoftwareMicrosoftWindowsCurrentVersionInternet Settings: «ProxyEnable» = 0

IE — HKUS-1-5-18SOFTWAREMicrosoftInternet ExplorerMain,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE — HKUS-1-5-18SOFTWAREMicrosoftInternet ExplorerMain,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE — HKUS-1-5-18S-1-5-18SoftwareMicrosoftWindowsCurrentVersionInternet Settings: «ProxyEnable» = 0

IE — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftInternet ExplorerMain,Local Page = C:WINDOWSsystem32blank.htm
IE — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftInternet ExplorerMain,Page_Transitions = 1
IE — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftInternet ExplorerMain,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftInternet ExplorerMain,SearchDefaultBranded = 1
IE — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftInternet ExplorerMain,SearchMigratedDefaultName = Google
IE — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftInternet ExplorerMain,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE — HKUS-1-5-21-861567501-651377827-839522115-1004SOFTWAREMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=48084
IE — URLSearchHook: {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll (@Mail.Ru)
IE — URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} — C:Program FilesWinamp Toolbarwinamptb.dll (AOL LLC.)
IE — URLSearchHook: {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:Program FilesMail.RuAgentMradllnewmrasearch.dll ()
IE — URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll (ICQ)
IE — URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} — C:Program FilesYahoo!CompanionInstallscpn0yt.dll (Yahoo! Inc.)
IE — HKUS-1-5-21-861567501-651377827-839522115-1004S-1-5-21-861567501-651377827-839522115-1004SoftwareMicrosoftWindowsCurrentVersionInternet Settings: «ProxyEnable» = 0

========== FireFox ==========

FF — prefs.js..browser.search.defaultenginename: «Winamp Search»
FF — prefs.js..browser.search.defaulturl: «http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query=»
FF — prefs.js..browser.search.selectedEngine: «РЇРЅРґРµРєСЃ»
FF — prefs.js..browser.search.useDBForOrder: true
FF — prefs.js..browser.startup.homepage: «http://www.yandex.ru/?clid=43914»
FF — prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.4.1
FF — prefs.js..extensions.enabledItems: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.1.9.6
FF — prefs.js..extensions.enabledItems: {463F6CA5-EE3C-4be1-B7E6-7FEE11953374}:3.5.5
FF — prefs.js..extensions.enabledItems: {EF522540-89F5-46b9-B6FE-1829E2B572C6}:3.22
FF — prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.4
FF — prefs.js..extensions.enabledItems: {9CF826EF-2211-4747-ACD8-711F744C2424}:1.0
FF — prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13
FF — prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF — prefs.js..extensions.enabledItems: orbit_ffext@orbitdownloader:2.02
FF — prefs.js..extensions.enabledItems: rambler_toolbar@rambler.ru:2.1.3
FF — prefs.js..extensions.enabledItems: {AE93811A-5C9A-4d34-8462-F7B864FC4696}:3.29
FF — prefs.js..extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.10.1
FF — prefs.js..extensions.enabledItems: yasearch@yandex.ru:4.1.0
FF — prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.10
FF — prefs.js..keyword.URL: «http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampab&query=»

FF — HKLMsoftwaremozillaFirefoxextensions\jqs@sun.com: C:Program FilesJavajre6libdeployjqsff [2009.05.07 00:10:01 | 00,000,000 | —D | M]
FF — HKLMsoftwaremozillaMozilla Firefox 3.0.11extensions\Components: C:Program FilesMozilla Firefoxcomponents [2009.06.17 02:45:22 | 00,000,000 | —D | M]
FF — HKLMsoftwaremozillaMozilla Firefox 3.0.11extensions\Plugins: C:Program FilesMozilla Firefoxplugins [2009.06.17 02:45:23 | 00,000,000 | —D | M]

[2008.08.05 11:56:31 | 00,000,000 | —D | M] — C:Documents and SettingsШуApplication DatamozillaExtensions
[2008.08.05 11:56:31 | 00,000,000 | —D | M] — C:Documents and SettingsШуApplication DatamozillaExtensions{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009.06.26 01:50:59 | 00,000,000 | —D | M] — C:Documents and SettingsШуApplication DatamozillaFirefoxProfilesbw4bmuzw.defaultextensions
[2009.06.22 19:54:48 | 00,000,000 | —D | M] — C:Documents and SettingsШуApplication DatamozillaFirefoxProfilesbw4bmuzw.defaultextensions{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2009.06.22 19:54:53 | 00,000,000 | —D | M] — C:Documents and SettingsШуApplication DatamozillaFirefoxProfilesbw4bmuzw.defaultextensions{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}
[2009.06.17 02:44:34 | 00,000,000 | —D | M] — C:Documents and SettingsШуApplication DatamozillaFirefoxProfilesbw4bmuzw.defaultextensions{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}
[2009.06.23 00:46:31 | 00,000,000 | —D | M] — C:Documents and SettingsШуApplication DatamozillaFirefoxProfilesbw4bmuzw.defaultextensions{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}
[2009.04.23 20:53:56 | 00,000,000 | —D | M] — C:Documents and SettingsШуApplication DatamozillaFirefoxProfilesbw4bmuzw.defaultextensions{AE93811A-5C9A-4d34-8462-F7B864FC4696}
[2009.05.18 03:31:12 | 00,000,000 | —D | M] — C:Documents and SettingsШуApplication DatamozillaFirefoxProfilesbw4bmuzw.defaultextensions{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2009.06.17 02:45:57 | 00,000,000 | —D | M] — C:Documents and SettingsШуApplication DatamozillaFirefoxProfilesbw4bmuzw.defaultextensions{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}(2)
[2009.06.06 20:09:39 | 00,000,000 | —D | M] — C:Documents and SettingsШуApplication DatamozillaFirefoxProfilesbw4bmuzw.defaultextensions{EF522540-89F5-46b9-B6FE-1829E2B572C6}
[2009.05.21 01:00:05 | 00,000,000 | —D | M] — C:Documents and SettingsШуApplication DatamozillaFirefoxProfilesbw4bmuzw.defaultextensionsyasearch@yandex.ru
[2009.05.21 01:00:03 | 00,000,000 | —D | M] — C:Documents and SettingsШуApplication DatamozillaFirefoxProfilesbw4bmuzw.defaultextensionsyasearch@yandex.ruchromeskinextensions-hacks
[2009.06.22 01:32:02 | 00,000,950 | —- | M] () — C:Documents and SettingsШуApplication DataMozillaFireFoxProfilesbw4bmuzw.defaultsearchpluginsicqplugin-1.xml
[2009.06.16 03:43:12 | 00,000,950 | —- | M] () — C:Documents and SettingsШуApplication DataMozillaFireFoxProfilesbw4bmuzw.defaultsearchpluginsicqplugin-10.xml
[2008.12.19 20:50:10 | 00,000,950 | —- | M] () — C:Documents and SettingsШуApplication DataMozillaFireFoxProfilesbw4bmuzw.defaultsearchpluginsicqplugin-2.xml
[2009.02.07 12:16:57 | 00,000,950 | —- | M] () — C:Documents and SettingsШуApplication DataMozillaFireFoxProfilesbw4bmuzw.defaultsearchpluginsicqplugin-3.xml
[2009.03.14 21:24:07 | 00,000,950 | —- | M] () — C:Documents and SettingsШуApplication DataMozillaFireFoxProfilesbw4bmuzw.defaultsearchpluginsicqplugin-4.xml
[2009.03.28 23:38:39 | 00,000,950 | —- | M] () — C:Documents and SettingsШуApplication DataMozillaFireFoxProfilesbw4bmuzw.defaultsearchpluginsicqplugin-5.xml
[2009.04.23 23:07:31 | 00,000,950 | —- | M] () — C:Documents and SettingsШуApplication DataMozillaFireFoxProfilesbw4bmuzw.defaultsearchpluginsicqplugin-6.xml
[2009.04.30 02:32:08 | 00,000,950 | —- | M] () — C:Documents and SettingsШуApplication DataMozillaFireFoxProfilesbw4bmuzw.defaultsearchpluginsicqplugin-7.xml
[2009.05.04 15:25:38 | 00,000,950 | —- | M] () — C:Documents and SettingsШуApplication DataMozillaFireFoxProfilesbw4bmuzw.defaultsearchpluginsicqplugin-8.xml
[2009.06.13 14:40:59 | 00,000,950 | —- | M] () — C:Documents and SettingsШуApplication DataMozillaFireFoxProfilesbw4bmuzw.defaultsearchpluginsicqplugin-9.xml
[2008.11.23 05:34:30 | 00,000,944 | —- | M] () — C:Documents and SettingsШуApplication DataMozillaFireFoxProfilesbw4bmuzw.defaultsearchpluginsicqplugin.xml
[2009.05.04 15:22:54 | 00,006,197 | —- | M] () — C:Documents and SettingsШуApplication DataMozillaFireFoxProfilesbw4bmuzw.defaultsearchpluginsrambler.xml
[2009.06.22 19:55:19 | 00,001,196 | —- | M] () — C:Documents and SettingsШуApplication DataMozillaFireFoxProfilesbw4bmuzw.defaultsearchpluginswinamp-search.xml
[2009.06.26 01:50:59 | 00,000,000 | —D | M] — C:Program Filesmozilla firefoxextensions
[2008.12.12 00:12:52 | 00,000,000 | —D | M] — C:Program Filesmozilla firefoxextensions{800b5000-a755-47e1-992b-48a1c1357f07}
[2009.06.16 03:42:30 | 00,000,000 | —D | M] — C:Program Filesmozilla firefoxextensions{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009.06.18 06:38:54 | 00,000,000 | —D | M] — C:Program Filesmozilla firefoxextensions{9CF826EF-2211-4747-ACD8-711F744C2424}
[2009.05.07 00:10:42 | 00,000,000 | —D | M] — C:Program Filesmozilla firefoxextensions{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
[2009.05.04 15:25:11 | 00,000,000 | —D | M] — C:Program Filesmozilla firefoxextensionsrambler_toolbar@rambler.ru
[2009.06.17 02:45:23 | 00,000,000 | —D | M] — C:Program Filesmozilla firefoxextensionsyasearch@yandex.ru
[2009.06.16 03:42:31 | 00,000,000 | —D | M] — C:Program Filesmozilla firefoxextensionsyasearch@yandex.ruchromeskinextensions-hacks
[2009.06.13 14:39:29 | 00,023,032 | —- | M] (Mozilla Foundation) — C:Program Filesmozilla firefoxcomponentsbrowserdirprovider.dll
[2009.06.13 14:39:29 | 00,134,648 | —- | M] (Mozilla Foundation) — C:Program Filesmozilla firefoxcomponentsbrwsrcmp.dll
[2009.05.07 00:09:59 | 00,410,984 | —- | M] (Sun Microsystems, Inc.) — C:Program Filesmozilla firefoxpluginsnpdeploytk.dll
[2009.06.13 14:39:36 | 00,065,528 | —- | M] (mozilla.org) — C:Program Filesmozilla firefoxpluginsnpnul32.dll
[2006.10.26 21:12:16 | 00,016,192 | —- | M] (Microsoft Corporation) — C:Program Filesmozilla firefoxpluginsNPOFF12.DLL
[2007.03.22 20:23:30 | 00,017,248 | —- | M] (Microsoft Corporation) — C:Program Filesmozilla firefoxpluginsNPOFFICE.DLL
25 июня, 2009 в 10:03 пп в ответ на: Порно-информер #24456
schu
Participant
- Темы:1
- Сообщений:9
OTL Extras logfile created on: 26.06.2009 1:57:00 — Run 1
OTL by OldTimer — Version 3.0.5.3 Folder = C:Documents and SettingsШуРабочий стол
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) — Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000419 | Country: Россия | Language: RUS | Date Format: dd.MM.yyyy

1023,48 Mb Total Physical Memory | 488,79 Mb Available Physical Memory | 47,76% Memory free
2,40 Gb Paging File | 1,94 Gb Available in Paging File | 80,92% Paging File free
Paging file location(s): C:pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:WINDOWS | %ProgramFiles% = C:Program Files
Drive C: | 15,71 Gb Total Space | 1,56 Gb Free Space | 9,95% Space Free | Partition Type: NTFS
Drive D: | 58,80 Gb Total Space | 14,95 Gb Free Space | 25,43% Space Free | Partition Type: FAT32
Drive E: | 3,97 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: SCHULDIG
Current User Name: Шу
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: On
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINESOFTWAREClasses]
.chm [@ = chm.file] — C:WINDOWShh.exe (Microsoft Corporation)
.cpl [@ = cplfile] — C:WINDOWSSystem32shell32.DLL (Корпорация Майкрософт)
.hlp [@ = hlpfile] — C:WINDOWSSystem32winhlp32.exe (Корпорация Майкрософт)
.html [@ = htmlfile] — C:Program FilesInternet ExplorerIEXPLORE.EXE (Microsoft Corporation)
.inf [@ = inffile] — C:WINDOWSSystem32NOTEPAD.EXE (Корпорация Майкрософт)
.ini [@ = inifile] — C:WINDOWSSystem32NOTEPAD.EXE (Корпорация Майкрософт)
.reg [@ = regfile] — C:WINDOWSregedit.exe (Корпорация Майкрософт)
.txt [@ = txtfile] — C:WINDOWSSystem32NOTEPAD.EXE (Корпорация Майкрософт)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center]
«FirstRunDisabled» = 1
«AntiVirusDisableNotify» = 0
«FirewallDisableNotify» = 0
«UpdatesDisableNotify» = 0
«AntiVirusOverride» = 0
«FirewallOverride» = 0

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoring]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringAhnlabAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringKasperskyAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringMcAfeeAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringMcAfeeFirewall]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringPandaAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringPandaFirewall]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringSophosAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringSymantecAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringSymantecFirewall]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringTinyFirewall]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringTrendAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringTrendFirewall]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringZoneLabsFirewall]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyDomainProfile]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfile]
«EnableFirewall» = 1
«DoNotAllowExceptions» = 0
«DisableNotifications» = 0

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileGloballyOpenPortsList]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyDomainProfileAuthorizedApplicationsList]
[2008.04.14 20:11:08 | 00,141,824 | —- | M] (Корпорация Майкрософт) — %windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
[2008.04.13 22:53:32 | 00,558,080 | —- | M] (Microsoft Corporation) — %windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList]
[2008.04.14 20:11:08 | 00,141,824 | —- | M] (Корпорация Майкрософт) — %windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
[2007.08.11 01:31:58 | 00,563,200 | —- | M] () — C:Program FilesHfsHfs.exe:*:Enabled:Hfs
[2009.04.03 17:44:28 | 01,719,496 | —- | M] (Orbitdownloader.com) — C:Program FilesOrbitdownloaderorbitdm.exe:*:Enabled:Orbit
[2009.03.16 16:39:02 | 00,557,056 | —- | M] (Orbitdownloader.com) — C:Program FilesOrbitdownloaderorbitnet.exe:*:Enabled:Orbit
[2009.03.08 14:09:26 | 00,638,816 | —- | M] (Microsoft Corporation) — C:Program FilesInternet Exploreriexplore.exe:*:Enabled:Internet Explorer
[2008.10.26 15:11:21 | 00,270,128 | —- | M] (BitTorrent, Inc.) — C:Program FilesuTorrentutorrent.exe:*:Enabled:utorrent
[2008.04.13 22:53:32 | 00,558,080 | —- | M] (Microsoft Corporation) — %windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
[2008.07.01 20:34:30 | 03,256,320 | —- | M] (The Author of QIP) — C:Program FilesQIPqip.exe:*:Enabled:Quiet Internet Pager
[2009.04.17 03:30:12 | 12,438,896 | —- | M] (Microsoft Corporation) — D:Program FilesOffice12OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook
[2007.08.29 00:23:36 | 00,340,856 | —- | M] (Microsoft Corporation) — D:Program FilesOffice12GROOVE.EXE:*:Enabled:Microsoft Office Groove
[2008.05.21 05:54:40 | 01,022,496 | —- | M] (Microsoft Corporation) — D:Program FilesOffice12ONENOTE.EXE:*:Enabled:Microsoft Office OneNote
[2008.11.23 06:34:41 | 00,153,848 | —- | M] (ICQ, Inc.) — C:Program FilesICQLiteICQ.exe:*:Enabled:ICQ Lite
[2008.01.30 06:19:32 | 00,073,728 | —- | M] (Orb Networks, Inc.) — C:Program FilesWinamp RemotebinOrb.exe:*:Enabled:Orb
[2008.04.01 05:54:06 | 00,507,904 | —- | M] (Orb Networks) — C:Program FilesWinamp RemotebinOrbTray.exe:*:Enabled:OrbTray
[2008.03.28 05:00:24 | 05,844,992 | —- | M] (Orb Networks) — C:Program FilesWinamp RemotebinOrbStreamerClient.exe:*:Enabled:Orb Stream Client
[2006.02.19 04:21:22 | 00,288,472 | —- | M] (Hewlett-Packard Development Company, L.P.) — C:Program FilesHPDigital Imagingbinhpqtra08.exe:*:Enabled:hpqtra08.exe
[2006.02.19 05:24:52 | 00,239,320 | —- | M] (Hewlett-Packard Development Company, L.P.) — C:Program FilesHPDigital Imagingbinhpqste08.exe:*:Enabled:hpqste08.exe
[2006.04.21 00:13:30 | 00,231,000 | —- | M] (Hewlett-Packard Development Company, L.P.) — C:Program FilesHPDigital Imagingbinhpofxm08.exe:*:Enabled:hpofxm08.exe
[2006.04.20 21:28:12 | 00,040,960 | —- | M] (Hewlett-Packard Development Company, L.P.) — C:Program FilesHPDigital Imagingbinhposfx08.exe:*:Enabled:hposfx08.exe
[2006.04.20 23:43:46 | 00,087,640 | —- | M] (Hewlett-Packard Development Company, L.P.) — C:Program FilesHPDigital Imagingbinhposid01.exe:*:Enabled:hposid01.exe
[2006.02.17 00:19:34 | 00,192,512 | —- | M] () — C:Program FilesHPDigital Imagingbinhpqscnvw.exe:*:Enabled:hpqscnvw.exe
[2006.02.16 22:49:52 | 01,085,440 | R— | M] (Hewlett-Packard) — C:Program FilesHPDigital Imagingbinhpqkygrp.exe:*:Enabled:hpqkygrp.exe
[2006.04.21 00:06:26 | 00,181,848 | —- | M] (Hewlett-Packard Development Company, L.P.) — C:Program FilesHPDigital ImagingbinhpqCopy.exe:*:Enabled:hpqcopy.exe
[2006.02.15 10:37:26 | 00,147,511 | R— | M] (Hewlett-Packard) — C:Program FilesHPDigital Imagingbinhpfccopy.exe:*:Enabled:hpfccopy.exe
[2006.04.21 00:13:00 | 00,456,280 | —- | M] (Hewlett-Packard Development Company, L.P.) — C:Program FilesHPDigital Imagingbinhpzwiz01.exe:*:Enabled:hpzwiz01.exe
[2006.02.09 16:43:36 | 00,110,592 | R— | M] (Hewlett-Packard) — C:Program FilesHPDigital ImagingUnloadHpqPhUnl.exe:*:Enabled:hpqphunl.exe
[2006.02.09 16:41:28 | 00,573,440 | —- | M] ( ) — C:Program FilesHPDigital ImagingUnloadHpqDIA.exe:*:Enabled:hpqdia.exe
[2006.04.20 23:42:18 | 00,063,064 | —- | M] (Hewlett-Packard Development Company, L.P.) — C:Program FilesHPDigital Imagingbinhpoews01.exe:*:Enabled:hpoews01.exe
[2006.02.19 05:29:46 | 00,139,264 | —- | M] (Hewlett-Packard Development Company, L.P.) — C:Program FilesHPDigital Imagingbinhpqnrs08.exe:*:Enabled:hpqnrs08.exe
[2009.03.01 14:59:42 | 00,172,792 | —- | M] (ICQ, LLC.) — C:Program FilesICQ6.5ICQ.exe:*:Enabled:ICQ6

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall]
«{15095BF3-A3D7-4DDF-B193-3A496881E003}» = Microsoft .NET Framework 3.0
«{212748BB-0DA5-46DE-82A1-403736DC9F27}» = MSVC80_x86
«{2318C2B1-4965-11d4-9B18-009027A5CD4F}» = Google Toolbar for Internet Explorer
«{2376813B-2E5A-4641-B7B3-A0D5ADB55229}» = HPPhotoSmartExpress
«{26A24AE4-039D-4CA4-87B4-2F83216013FF}» = Java(TM) 6 Update 13
«{2BA86C08-061B-4F10-AA6C-0E50ECD77AE3}» = PROMT Почта 8 Giant Try-Buy
«{2F410A9B-7047-48A2-AAE8-969B1170A103}» = Яндекс.Бар 4.2 для Internet Explorer
«{350C9419-3D7C-4EE8-BAA9-00BCB3D54227}» = WebFldrs XP
«{363790D2-DA98-41DD-9C9F-69FA36B169DE}» = PanoStandAlone
«{36FDBE6E-6684-462B-AE98-9A39A1B200CC}» = HP Product Assistant
«{388E4B09-3E71-4649-8921-F44A3A2954A7}» = Microsoft Visual Studio 2005 Tools for Office Runtime
«{3921A67A-5AB1-4E48-9444-C71814CF3027}» = VCRedistSetup
«{43129937-0134-4BD0-BD0E-8453F8448061}_is1» = LoviVkontakte 2.25.0.0
«{45B8A76B-57EC-4242-B019-066400CD8428}» = BufferChm
«{491DD792-AD81-429C-9EB4-86DD3D22E333}» = Windows Communication Foundation
«{4A11948E-8521-43B8-BBBD-5C24B804F0A3}» = Samsung PC Studio 3
«{4EA684E9-5C81-4033-A696-3019EC57AC3A}» = HPProductAssistant
«{56C049BE-79E9-4502-BEA7-9754A3E60F9B}» = neroxml
«{60DE4033-9503-48D1-A483-7846BD217CA9}» = ICQ6.5
«{66910000-8B30-4973-A159-6371345AFFA5}» = WebReg
«{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}» = eSupportQFolder
«{68763C27-235D-4165-A961-FDEA228CE504}» = AiOSoftwareNPI
«{6909F917-5499-482e-9AA1-FAD06A99F231}» = Toolbox
«{6994491D-D491-48F1-AE1F-E179C1FFFC2F}» = HP Photosmart Essential
«{6C13128C-1782-456F-84A4-017CECE259CA}» = ICQ Lite
«{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}» = CustomerResearchQFolder
«{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}» = Microsoft .NET Framework 2.0
«{7299052b-02a4-4627-81f2-1818da5d550d}» = Microsoft Visual C++ 2005 Redistributable
«{736C803C-DD3B-4015-BC51-AFB9E67B9076}» = Readme
«{742498A3-F4AD-484F-B144-4763BC1FA267}» = WebTV
«{7AC15160-A49B-4A89-B181-D4619C025FFF}» = Samsung Samples Installer
«{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}» = Windows Workflow Foundation
«{7E7B7865-6C80-4373-8BC1-C2EB9431F9DE}» = ProductContextNPI
«{8331C3EA-0C91-43AA-A4D4-27221C631139}» = Status
«{87E2B986-07E8-477a-93DC-AF0B6758B192}» = DocProcQFolder
«{8A4CE7FD-9657-4B06-9943-E1819F3D5D67}» = DocProc
«{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}» = Unload
«{90110419-6000-11D3-8CFE-0150048383C9}» = Microsoft Office — профессиональный выпуск версии 2003
«{90120000-0010-0419-0000-0000000FF1CE}» = Microsoft Software Update for Web Folders (Russian) 12
«{90120000-0015-0419-0000-0000000FF1CE}» = Microsoft Office Access MUI (Russian) 2007
«{90120000-0015-0419-0000-0000000FF1CE}_ENTERPRISER_{1AD50F4A-04F7-4944-BD47-4421532548F5}» = 2007 Microsoft Office Suite Service Pack 1 (SP1)
«{90120000-0016-0419-0000-0000000FF1CE}» = Microsoft Office Excel MUI (Russian) 2007
«{90120000-0016-0419-0000-0000000FF1CE}_ENTERPRISER_{1AD50F4A-04F7-4944-BD47-4421532548F5}» = 2007 Microsoft Office Suite Service Pack 1 (SP1)
«{90120000-0018-0419-0000-0000000FF1CE}» = Microsoft Office PowerPoint MUI (Russian) 2007
«{90120000-0018-0419-0000-0000000FF1CE}_ENTERPRISER_{1AD50F4A-04F7-4944-BD47-4421532548F5}» = 2007 Microsoft Office Suite Service Pack 1 (SP1)
«{90120000-0019-0419-0000-0000000FF1CE}» = Microsoft Office Publisher MUI (Russian) 2007
«{90120000-0019-0419-0000-0000000FF1CE}_ENTERPRISER_{1AD50F4A-04F7-4944-BD47-4421532548F5}» = 2007 Microsoft Office Suite Service Pack 1 (SP1)
«{90120000-001A-0419-0000-0000000FF1CE}» = Microsoft Office Outlook MUI (Russian) 2007
«{90120000-001A-0419-0000-0000000FF1CE}_ENTERPRISER_{1AD50F4A-04F7-4944-BD47-4421532548F5}» = 2007 Microsoft Office Suite Service Pack 1 (SP1)
«{90120000-001B-0419-0000-0000000FF1CE}» = Microsoft Office Word MUI (Russian) 2007
«{90120000-001B-0419-0000-0000000FF1CE}_ENTERPRISER_{1AD50F4A-04F7-4944-BD47-4421532548F5}» = 2007 Microsoft Office Suite Service Pack 1 (SP1)
«{90120000-001F-0407-0000-0000000FF1CE}» = Microsoft Office Proof (German) 2007
«{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISER_{2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}» = 2007 Microsoft Office Suite Service Pack 1 (SP1)
«{90120000-001F-0409-0000-0000000FF1CE}» = Microsoft Office Proof (English) 2007
«{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISER_{3EC77D26-799B-4CD8-914F-C1565E796173}» = 2007 Microsoft Office Suite Service Pack 1 (SP1)
«{90120000-001F-0419-0000-0000000FF1CE}» = Microsoft Office Proof (Russian) 2007
«{90120000-001F-0419-0000-0000000FF1CE}_ENTERPRISER_{D7CE14BC-96D9-41C5-822D-F5B1C2C35AA2}» = 2007 Microsoft Office Suite Service Pack 1 (SP1)
«{90120000-001F-0422-0000-0000000FF1CE}» = Microsoft Office Proof (Ukrainian) 2007
«{90120000-001F-0422-0000-0000000FF1CE}_ENTERPRISER_{DC154E48-5278-423A-80A1-B93247E38A1A}» = 2007 Microsoft Office Suite Service Pack 1 (SP1)
«{90120000-002C-0419-0000-0000000FF1CE}» = Microsoft Office Proofing (Russian) 2007
«{90120000-0044-0419-0000-0000000FF1CE}» = Microsoft Office InfoPath MUI (Russian) 2007
«{90120000-0044-0419-0000-0000000FF1CE}_ENTERPRISER_{1AD50F4A-04F7-4944-BD47-4421532548F5}» = 2007 Microsoft Office Suite Service Pack 1 (SP1)
«{90120000-006E-0419-0000-0000000FF1CE}» = Microsoft Office Shared MUI (Russian) 2007
«{90120000-006E-0419-0000-0000000FF1CE}_ENTERPRISER_{23653CA5-BFB5-4B52-B2DA-045D7ABEB874}» = 2007 Microsoft Office Suite Service Pack 1 (SP1)
«{90120000-00A1-0419-0000-0000000FF1CE}» = Microsoft Office OneNote MUI (Russian) 2007
«{90120000-00A1-0419-0000-0000000FF1CE}_ENTERPRISER_{1AD50F4A-04F7-4944-BD47-4421532548F5}» = 2007 Microsoft Office Suite Service Pack 1 (SP1)
«{90120000-00BA-0419-0000-0000000FF1CE}» = Microsoft Office Groove MUI (Russian) 2007
«{90120000-00BA-0419-0000-0000000FF1CE}_ENTERPRISER_{1AD50F4A-04F7-4944-BD47-4421532548F5}» = 2007 Microsoft Office Suite Service Pack 1 (SP1)
«{91120000-0030-0000-0000-0000000FF1CE}» = Microsoft Office Enterprise 2007
«{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{BEE75E01-DD3F-4D5F-B96C-609E6538D419}» = 2007 Microsoft Office Suite Service Pack 1 (SP1)
«{996512CF-F35B-48DE-9291-557FA5316967}» = ScannerCopy
«{9FC8D8F8-AF3A-4488-98AF-51C6DEC732F2}» = c3100_Help
«{AB5D51AE-EBC3-438D-872C-705C7C2084B0}» = DeviceManagementQFolder
«{AC599724-5755-48C1-ABE7-ABB857652930}» = PC Connectivity Solution
«{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1» = Spybot — Search & Destroy
«{BAF78226-3200-4DB4-BE33-4D922A799840}» = Windows Presentation Foundation
«{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}» = HP Photosmart, Officejet and Deskjet 7.0.A
«{C4A4722E-79F9-417C-BD72-8D359A090C97}» = Samsung PC Studio 3
«{C7F54CF8-D6FB-4E0A-93A3-E68AE0D6C476}» = SolutionCenter
«{C8753E28-2680-49BF-BD48-DD38FD086EFE}» = AiO_Scan_CDA
«{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}» = Microsoft .NET Framework 1.1
«{DBC20735-34E6-4E97-A9E5-2066B66B243D}» = TrayApp
«{DCB46B42-723F-350E-B18A-449BC6C21636}» = Microsoft Visual C++ 2008 Redistributable — x86 9.0.21022
«{E1B80DEE-A795-4258-8445-074C06AE3AB8}» = MarketResearch
«{EB8C9964-09AC-48bf-8B98-027609C78251}» = C3100
«{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}» = Samsung PC Studio 3 USB Driver Installer
«{F157460F-720E-482f-8625-AD7843891E5F}» = InstantShareDevicesMFC
«{F3760724-B29D-465B-BC53-E5D72095BCC4}» = Scan
«{F6076EF9-08E1-442F-B6A2-BFB61B295A14}» = Fax_CDA
«{FB08F381-6533-4108-B7DD-039E11FBC27E}» = Realtek AC’97 Audio
«{FB15E224-67C3-491F-9F5C-F257BC418412}» = Destinations
«{FBB980B0-63F8-4B48-8D65-90F1D9F81D9F}» = NewCopy_CDA
«{FE57DE70-95DE-4B64-9266-84DA811053DB}» = HP Update
«Adobe Flash Player ActiveX» = Adobe Flash Player 10 ActiveX
«Adobe Flash Player Plugin» = Adobe Flash Player 10 Plugin
«avast!» = avast! Antivirus
«CCleaner» = CCleaner (remove only)
«Data Cod Downloader_is1» = Data Cod Downloader 1.23
«D-Link DSL-200 ADSL Modem» = D-Link DSL-200 ADSL Modem
«eMusic Promotion» = 50 FREE MP3s +1 Free Audiobook!
«ENTERPRISER» = Microsoft Office Enterprise 2007
«FoxyTunesForFirefox» = FoxyTunes for Firefox
«GOM Player» = GOM Player
«HijackThis» = HijackThis 2.0.2
«HMM4 — Последняя битва» = HMM4 — Последняя битва
«HP Imaging Device Functions» = HP Imaging Device Functions 7.0
«HP Solution Center & Imaging Support Tools» = HP Solution Center 7.0
«HPExtendedCapabilities» = HP Customer Participation Program 7.0
«HPOCR» = OCR Software by I.R.I.S 7.0
«ICQToolbar» = ICQ Toolbar
«IDNMitigationAPIs» = Microsoft Internationalized Domain Names Mitigation APIs
«ie8» = Windows Internet Explorer 8
«KLiteCodecPack_is1» = K-Lite Codec Pack 4.0.0 (Full)
«LHTTSFRF» = L&H TTS3000 Franзais
«LHTTSGED» = L&H TTS3000 Deutsch
«LHTTSITI» = L&H TTS3000 Italiano
«LHTTSRUR» = L&H TTS3000 Russian
«LHTTSSPE» = L&H TTS3000 Espaсol
«MailRuSputnik» = Mail.Ru Спутник 2.0.1.54
«Microsoft .NET Framework 1.1 (1033)» = Microsoft .NET Framework 1.1
«Microsoft .NET Framework 2.0» = Microsoft .NET Framework 2.0
«Microsoft .NET Framework 3.0» = Microsoft .NET Framework 3.0
«Microsoft Visual Studio 2005 Tools for Office Runtime» = еда выполнения Visual Studio 2005 Tools for Office, второй выпуск
«Mozilla Firefox (3.0.11)» = Mozilla Firefox (3.0.11)
«MRA» = Mail.Ru Агент 5.3 (сборка 2560, для всех пользователей)
«MSCompPackV1» = Microsoft Compression Client Pack 1.0 for Windows XP
«Nero8114_Micro_is1» = Nero 8 Micro v8.1.1.4b
«NLSDownlevelMapping» = Microsoft National Language Support Downlevel APIs
«NVIDIA Drivers» = NVIDIA Drivers
«Orb» = Winamp Remote
«Orbit_is1» = Orbit Downloader
«Rambler.ru Toolbar» = Rambler-Ассистент
«SAMSUNG Mobile Modem» = SAMSUNG Mobile Modem Driver Set
«Samsung Mobile phone USB driver» = Samsung Mobile phone USB driver Software
«SAMSUNG Mobile USB Modem» = SAMSUNG Mobile USB Modem Software
«SAMSUNG Mobile USB Modem 1.0» = SAMSUNG Mobile USB Modem 1.0 Software
«ToolTipFixer» = ToolTipFixer 1.0.1
«tv_enua» = Lernout & Hauspie TruVoice American English TTS Engine
«Wdf01005» = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
«Winamp» = Winamp
«Winamp Toolbar» = Winamp Toolbar
«Windows Media Format Runtime» = Windows Media Format 11 runtime
«Windows Media Player» = Проигрыватель Windows Media 11
«Windows XP Service Pack» = Windows XP Service Pack 3
«WinRAR archiver» = Архиватор WinRAR
«WMFDist11» = Windows Media Format 11 runtime
«wmp11» = Windows Media Player 11
«Wudf01005» = Microsoft User-Mode Driver Framework Feature Pack 1.5
«XpsEPSC» = XML Paper Specification Shared Components Pack 1.0
«Yahoo! Companion» = Yahoo! Toolbar
«Yahoo! Toolbar» = Yahoo! Toolbar
«Веселая ферма 2» = Веселая ферма 2
«Переполох на ранчо» = Переполох на ранчо
«Расписание Погоды rp5.ru» = Расписание Погоды rp5.ru
«Собачий рай» = Собачий рай
«Справочник лекарственных средств» = Справочник лекарственных средств
«Энциклопедия традиционной и нетрадиционной медицины_is1» = Энциклопедия традиционной и нетрадиционной медицины Версия 1.0

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionUninstall]
«uTorrent» = µTorrent

========== Last 10 Event Log Errors ==========

[ Antivirus Events ]
Error — 14.10.2008 11:11:14 | Computer Name = SCHULDIG | Source = avast! | ID = 33554522
Description = AAVM — scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of
A:расчет дебаланса на АЗС-66-3.xls failed, 0000001E.

Error — 14.10.2008 11:12:17 | Computer Name = SCHULDIG | Source = avast! | ID = 33554522
Description = AAVM — scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of
A:расчет дебаланса на АЗС-66-3.xls failed, 0000001E.

Error — 14.10.2008 11:12:28 | Computer Name = SCHULDIG | Source = avast! | ID = 33554522
Description = AAVM — scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of
A:расчет дебаланса на АЗС-66-3.xls failed, 0000001E.

Error — 14.10.2008 11:13:03 | Computer Name = SCHULDIG | Source = avast! | ID = 33554522
Description = AAVM — scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of
A:расчет дебаланса на АЗС-66-3.xls failed, 0000001E.

Error — 16.10.2008 22:58:50 | Computer Name = SCHULDIG | Source = avast! | ID = 33554522
Description = AAVM — scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of
A:расчет дебаланса на АЗС-66-3.xls failed, 0000001E.

Error — 06.11.2008 7:07:08 | Computer Name = SCHULDIG | Source = avast! | ID = 33554522
Description = AAVM — scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of
E:PC StudioSamsung_Samples_Installer.exe failed, 0000001E.

Error — 16.06.2009 10:20:06 | Computer Name = SCHULDIG | Source = avast! | ID = 33554522
Description = AAVM — scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of
C:DOCUME~134C2~1LOCALS~1Tempwis1.tmpfile0056.bin failed, 0000000D.

[ Application Events ]
Error — 14.05.2009 20:29:09 | Computer Name = SCHULDIG | Source = ESENT | ID = 439
Description = wuauclt (308) Не удается записать теневой заголовок для файла C:WINDOWSSoftwareDistributionDataStoreLogstmp.edb.
Ошибка -1808

Error — 14.05.2009 20:29:13 | Computer Name = SCHULDIG | Source = ESENT | ID = 482
Description = wuauclt (3960) Попытка записи в файл «C:WINDOWSSoftwareDistributionDataStoreLogstmp.edb»
в смещении 0 (0x0000000000000000) для 8192 (0x00002000) байт вызвала системную
ошибку 112 (0x00000070): «Недостаточно места на диске. «. Операция записи приведет
к ошибке -1808 (0xfffff8f0). Если ошибка повторится, то файл, возможно, поврежден,
и потребуется восстановить его из предыдущей резервной копии.

Error — 14.05.2009 20:29:13 | Computer Name = SCHULDIG | Source = ESENT | ID = 439
Description = wuauclt (3960) Не удается записать теневой заголовок для файла C:WINDOWSSoftwareDistributionDataStoreLogstmp.edb.
Ошибка -1808

Error — 14.05.2009 20:29:16 | Computer Name = SCHULDIG | Source = ESENT | ID = 482
Description = wuauclt (2168) Попытка записи в файл «C:WINDOWSSoftwareDistributionDataStoreLogstmp.edb»
в смещении 8192 (0x0000000000002000) для 57344 (0x0000e000) байт вызвала системную
ошибку 112 (0x00000070): «Недостаточно места на диске. «. Операция записи приведет
к ошибке -1808 (0xfffff8f0). Если ошибка повторится, то файл, возможно, поврежден,
и потребуется восстановить его из предыдущей резервной копии.

Error — 15.05.2009 16:12:18 | Computer Name = SCHULDIG | Source = Application Error | ID = 1000
Description = Ошибка приложения magent.exe, версия 5.3.2560.0, модуль magent.exe,
версия 5.3.2560.0, адрес 0x0000aaa6.

Error — 15.05.2009 17:58:43 | Computer Name = SCHULDIG | Source = Application Error | ID = 1000
Description = Ошибка приложения orbitdm.exe, версия 2.8.0.8, модуль unknown, версия
0.0.0.0, адрес 0x00000000.

Error — 15.05.2009 17:59:34 | Computer Name = SCHULDIG | Source = Application Error | ID = 1000
Description = Ошибка приложения orbitdm.exe, версия 2.8.0.8, модуль unknown, версия
0.0.0.0, адрес 0x00000000.

Error — 17.05.2009 8:27:26 | Computer Name = SCHULDIG | Source = Application Hang | ID = 1002
Description = Зависшее приложение ICQ.exe, версия 6.5.0.1042, зависший модуль hungapp,
версия 0.0.0.0, адрес 0x00000000.

Error — 17.05.2009 18:08:21 | Computer Name = SCHULDIG | Source = MsiInstaller | ID = 11931
Description = Product: MSXML 6.0 Parser (KB925673) — Error 1931. The Windows Installer
service cannot update the system file C:WINDOWSsystem32msxml6r.dll because the
file is protected by Windows. You may need to update your operating system for
this program to work correctly. Package version: 6.0.3883.0, OS Protected version:
6.0.3883.0

Error — 18.05.2009 2:11:34 | Computer Name = SCHULDIG | Source = Application Error | ID = 1000
Description = Ошибка приложения magent.exe, версия 5.3.2560.0, модуль , версия 0.0.0.0,
адрес 0x00000000.
23 июня, 2009 в 2:36 пп в ответ на: Порно-информер #24454
schu
Participant
- Темы:1
- Сообщений:9
На Mozilla — остался рекламный модуль с Водонаевой, а IE — чистый.
19 июня, 2009 в 10:23 пп в ответ на: Порно-информер #24452
schu
Participant
- Темы:1
- Сообщений:9
Здравствуйте! выкладываю результат:
ComboFix 08-12-14.05 — Шу 2009-06-20 2:09:06.1 — NTFSx86
Running from: c:documents and settingsШуРабочий столComboFix.exe
Command switches used :: c:documents and settingsШуРабочий столCFScript.txt

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
— REDUCED FUNCTIONALITY MODE —

FILE ::
c:documents and settingsШуApplication Databpfeed.dll
c:windowssystem32SiteAccess.dll
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:documents and settingsШуApplication Databpfeed.dll
c:windowssystem32SiteAccess.dll

.
((((((((((((((((((((((((( Files Created from 2009-05-19 to 2009-06-19 )))))))))))))))))))))))))))))))
.

2009-06-18 06:23 . 2009-06-18 06:23 1,374 —a—c— c:windowsimsins.BAK
2009-06-18 06:22 . 2009-06-18 06:23 d—h-c— c:windowsie8
2009-06-18 02:01 . 2009-06-20 02:06 dr-h-c— c:documents and settingsШуRecent
2009-06-18 02:01 . 2009-06-20 02:06 dr-h-c— c:documents and settingsШуRecent
2009-06-18 00:13 . 2009-06-18 00:13 d—-c— c:documents and settingsAll Users.WINDOWSApplication DataFreshGames
2009-06-17 21:02 . 2009-06-17 21:03 d—-c— C:rsit
2009-06-17 21:02 . 2009-06-20 01:58 d—-c— c:program filestrend micro
2009-06-17 05:11 . 2009-06-17 05:15 d—-c— c:program filesSuperAX
2009-06-17 02:45 . 2009-06-17 02:45 d—hsc— C:Recycled
2009-06-16 23:27 . 2009-06-16 23:27 d—-c— c:documents and settingsШуApplication DataOpera
2009-06-16 17:20 . 2009-06-17 02:42 d—-c— c:program filesTrojan Remover
2009-06-16 17:20 . 2009-06-16 17:20 d—-c— c:documents and settingsAll Users.WINDOWSApplication DataSimply Super Software
2009-06-16 15:56 . 2009-06-17 02:42 d—hsc— C:RECYCLER(3)
2009-06-16 04:01 . 2009-06-17 02:45 d—-c— C:RECYCLER(2)
2009-06-15 04:21 . 2009-06-20 02:09 6,815,744 —a

c:documents and settingsШуntuser.dat
2009-06-15 04:21 . 2009-06-20 02:09 6,815,744 —a

c:documents and settingsШуntuser.dat
2009-06-15 01:31 . 2009-06-15 01:31 d—-c— c:program filesSiteAccess
2009-06-12 03:09 . 2009-06-12 03:09 d—-c— c:documents and settingsAll Users.WINDOWSApplication DataВеселаяФерма2
2009-06-12 03:00 . 2009-06-18 00:44 d—-c— c:program filesAlawar.ru
2009-06-11 23:30 . 2009-05-01 01:16 246,272

c— c:windowssystem32dllcacheieproxy.dll
2009-06-11 23:30 . 2009-05-01 01:16 12,800

c— c:windowssystem32dllcachexpshims.dll
2009-06-08 03:17 . 2009-06-15 03:57 d—-c— c:program filesWebTV
2009-06-08 03:17 . 2005-03-14 18:27 338,432 —a—c— c:windowssystem323dabm7u.ocx
2009-06-08 03:17 . 2003-04-21 14:09 245,408 —a—c— c:windowssystem32unicows.dll
2009-06-08 03:17 . 2005-09-17 02:34 227,840

c— c:windowssystem32tssOfficeMenu1d.ocx
2009-06-08 03:17 . 1998-06-24 00:00 115,016 —a—c— c:windowssystem32MSINET.OCX
2009-06-08 03:17 . 2000-12-06 01:00 109,248 —a—c— c:windowssystem32MSWINSCK.OCX
2009-06-08 03:17 . 2002-12-11 20:38 47,104

c— c:windowssystem32declrds.ax
2009-06-02 01:50 . 2009-06-17 02:46 d—-c— c:program filesLoviVkontakte

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-19 22:14

dc—-w c:documents and settingsШуApplication DataOrbit
2009-06-18 02:41

dc—-w c:documents and settingsШуApplication DataLavasoft
2009-06-18 01:09 721,904 —-a-w c:windowssystem32driverssptd.sys
2009-06-18 01:04

dc—-w c:documents and settingsШуApplication DatauTorrent
2009-06-17 01:16

dc—-w c:program filesAdStoper
2009-06-16 22:42

dc—-w c:program filesJava
2009-06-16 13:51

dc—-w c:program filesMail.Ru
2009-06-14 23:57

dc-h—w c:program filesInstallShield Installation Information
2009-06-14 23:03

dc—-w c:documents and settingsAll Users.WINDOWSApplication DataMicrosoft Help
2009-06-13 22:41

dc—-w c:program filesWinamp Remote
2009-06-11 23:06

dc—-w c:documents and settingsAll Users.WINDOWSApplication DataAlawarWrapper
2009-05-17 22:42

dc—-w c:program filesPRMT8
2009-05-17 22:29

dc—-w c:documents and settingsAll Users.WINDOWSApplication DataPRMT
2009-05-05 20:26

dc—-w c:program filesRambler Assistant
2009-05-04 16:02

dc—-w c:documents and settingsШуApplication DataICQ
2009-05-04 12:25

dc—-w c:program filesICQ6.5
2009-05-04 11:25

dc—-w c:documents and settingsШуApplication Datarambler.ru
2009-04-27 20:05

dc—-w c:program filesK-Lite Codec Pack
2009-04-27 20:05

dc—-w c:documents and settingsШуApplication DataDivX
2009-04-23 18:02

dc—-w c:documents and settingsШуApplication DataThe Path
2009-04-23 00:44

dc—-w c:program filesXavior
2009-04-23 00:41

dc—-w c:documents and settingsШуApplication DataAgelong Tree
2008-03-26 21:38 87,608 -c—a-w c:documents and settingsАдминистраторApplication Datainst.exe
2008-03-26 21:38 47,360 -c—a-w c:documents and settingsАдминистраторApplication Datapcouffin.sys
2008-03-26 21:07 556 -c-ha-w c:program filespcdocpro.exe.manifest
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerURLSearchHooks]
«{57BCA5FA-5DBB-45a2-B558-1755C3F6253B}»= «c:program filesWinamp Toolbarwinamptb.dll» [2008-07-17 1266992]

[HKEY_CLASSES_ROOTclsid{57bca5fa-5dbb-45a2-b558-1755c3f6253b}]
[HKEY_CLASSES_ROOTWINAMPTB.AOLTBSearch.1]
[HKEY_CLASSES_ROOTTypeLib{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOTWINAMPTB.AOLTBSearch]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
«{91397D20-1446-11D4-8AF4-0040CA1127B6}»= «c:program filesYandexYandexBarIEyndbar.dll» [2009-04-15 3699488]

[HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerToolbarWebbrowser]
«{91397D20-1446-11D4-8AF4-0040CA1127B6}»= «c:program filesYandexYandexBarIEyndbar.dll» [2009-04-15 3699488]

[HKEY_CLASSES_ROOTclsid{91397d20-1446-11d4-8af4-0040ca1127b6}]
[HKEY_CLASSES_ROOTYandex.Toolbar.1]
[HKEY_CLASSES_ROOTTypeLib{91397D13-1446-11D4-8AF4-0040CA1127B6}]
[HKEY_CLASSES_ROOTYandex.Toolbar]

[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=»c:windowssystem32ctfmon.exe» [2008-04-14 15360]
«SpybotSD TeaTimer»=»c:program filesSpybot — Search & DestroyTeaTimer.exe» [2008-01-28 2097488]
«Orb»=»c:program filesWinamp RemotebinOrbTray.exe» [2008-04-01 507904]
«ICQ»=»c:progra~1ICQ6.5ICQ.exe» [2009-03-01 172792]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
«NvCplDaemon»=»c:windowssystem32NvCpl.dll» [2006-06-01 7618560]
«DSLSTATEXE»=»c:program filesD-LinkDSL-200dslstat.exe» [2005-12-12 344064]
«DSLAGENTEXE»=»c:program filesD-LinkDSL-200dslagent.exe» [2005-08-25 65536]
«MAgent»=»c:program filesMail.RuAgentMAgent.exe» [2009-01-24 5603000]
«Vetton Wallpapers»=»c:downloadsvw.exe» [2007-05-03 1172480]
«GrooveMonitor»=»d:program filesOffice12GrooveMonitor.exe» [2007-08-24 33648]
«WinampAgent»=»c:program filesWinampwinampa.exe» [2008-08-04 36352]
«HP Software Update»=»c:program filesHPHP Software UpdateHPWuSchd2.exe» [2007-05-08 54840]
«SunJavaUpdateSched»=»c:program filesJavajre6binjusched.exe» [2009-05-07 148888]
«avast!»=»c:progra~1ALWILS~1Avast4ashDisp.exe» [2009-02-06 81000]
«LoviVkontakte»=»c:program filesLoviVkontaktelovivkontakte.exe» [2009-03-26 726016]
«nwiz»=»nwiz.exe» [2006-06-01 c:windowssystem32nwiz.exe]
«NvMediaCenter»=»NvMCTray.dll» [2006-06-01 c:windowssystem32nvmctray.dll]
«SoundMan»=»SOUNDMAN.EXE» [2006-03-01 c:windowssoundman.exe]

[HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=»c:windowssystem32CTFMON.EXE» [2008-04-14 15360]

c:documents and settingsгѓ« ў®Ґ ¬ҐоЏа®Ја ¬¬лЂўв®§ Јаг§Є
‚лаҐ§Є нЄа Ё Їа®Ја ¬¬ § ЇгбЄ ¤«п OneNote 2007.lnk — d:program filesOffice12ONENOTEM.EXE [2007-12-07 101440]
€д®а¬Ґа ®в rp5.ru.lnk — c:program filesrp5.rurp5.exe [2008-12-13 600576]

c:documents and settingsAll Users.WINDOWSѓ« ў®Ґ ¬ҐоЏа®Ја ¬¬лЂўв®§ Јаг§Є
HP Digital Imaging Monitor.lnk — c:program filesHPDigital Imagingbinhpqtra08.exe [2006-02-19 288472]
Orbit.lnk — c:program filesOrbitdownloaderorbitdm.exe [2008-08-01 1719496]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversiondrivers32]
«msacm.divxa32″= msaud32_divx.acm

[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList]
«%windir%\system32\sessmgr.exe»=
«c:\Program Files\Hfs\Hfs.exe»=
«c:\Program Files\Orbitdownloader\orbitdm.exe»=
«c:\Program Files\Orbitdownloader\orbitnet.exe»=
«c:\Program Files\Internet Explorer\iexplore.exe»=
«c:\Program Files\uTorrent\utorrent.exe»=
«%windir%\Network Diagnostic\xpnetdiag.exe»=
«c:\Program Files\QIP\qip.exe»=
«d:\Program Files\Office12\OUTLOOK.EXE»=
«d:\Program Files\Office12\GROOVE.EXE»=
«d:\Program Files\Office12\ONENOTE.EXE»=
«c:\Program Files\ICQLite\ICQ.exe»=
«c:\Program Files\Winamp Remote\bin\Orb.exe»=
«c:\Program Files\Winamp Remote\bin\OrbTray.exe»=
«c:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hpqste08.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hposfx08.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hposid01.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe»=
«c:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe»=
«c:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hpoews01.exe»=
«c:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe»=
«c:\Program Files\ICQ6.5\ICQ.exe»=

R1 aswSP;avast! Self Protection;c:windowssystem32driversaswSP.sys [2009-05-15 114768]
R2 aswFsBlk;aswFsBlk;c:windowssystem32DRIVERSaswFsBlk.sys [2009-05-15 20560]
R2 ICQ Service;ICQ Service;c:program filesICQ6ToolbarICQ Service.exe [2008-12-12 222456]
R2 LoviVkontakteService;LoviVkontake Service;c:program filesLoviVkontakteVkontakteService.exe [2009-06-02 476672]

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{8c99498b-a424-11dc-8ef7-806d6172696f}]
ShellAutoRuncommand — E:Setup.exe
.
Contents of the ‘Scheduled Tasks’ folder

2009-06-19 c:windowsTasksUser_Feed_Synchronization-{7E654ACB-1BBB-4723-8E60-902208151B9F}.job
— c:windowssystem32msfeedssync.exe [2009-03-08 04:31]
.
.

Supplementary Scan

.
uStart Page = hxxp://www.yandex.ru/?clid=48084
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Download by Orbit — c:program filesOrbitdownloaderorbitmxt.dll/201
IE: &Grab video by Orbit — c:program filesOrbitdownloaderorbitmxt.dll/204
IE: &Winamp Search — c:documents and settingsAll Users.WINDOWSApplication DataWinamp ToolbarieToolbarresourcesen-USlocalsearch.html
IE: &Экспорт в Microsoft Excel — d:progra~1Office12EXCEL.EXE/3000
IE: Do&wnload selected by Orbit — c:program filesOrbitdownloaderorbitmxt.dll/203
IE: Down&load all by Orbit — c:program filesOrbitdownloaderorbitmxt.dll/202
IE: Добавить в Rambler-Закладки — c:program filesRambler AssistantramblertoolbarU0.dll/zakladki.htm
IE: Найти с помощью Рамблера — c:program filesRambler AssistantramblertoolbarU0.dll/search.htm
IE: Перевести с помощью словарей Рамблера — c:program filesRambler AssistantramblertoolbarU0.dll/dic.htm
IE: Поиск@Mail.Ru — c:program filesMail.RuSputnikMailRuSputnik.dll/282
IE: Словари@Mail.Ru — c:program filesMail.RuSputnikMailRuSputnik.dll/283
IE: {{7558B7E5-7B26-4201-BEDB-00D5FF534523} — c:program filesMail.RuAgentmagent.exe
IE: {{c95fe080-8f5d-11d2-a20b-00aa003c157a}
IE: {{7558B7E5-7B26-4201-BEDB-00D5FF534523} — c:program filesMail.RuAgentmagent.exe —
IE: {{c95fe080-8f5d-11d2-a20b-00aa003c157a} — —
TCP: {27A7621B-6FE8-4F15-9489-99DF7384949D} = 212.48.193.36 212.48.193.38
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-20 02:12:43
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

c:windowsTEMP_av_proI.tm~a02324
c:windowsTEMP_av_proI.tm~a02324setup.lok 0 bytes

scan completed successfully
hidden files: 2

**************************************************************************
.

Other Running Processes

.
c:program filesAlwil SoftwareAvast4aswUpdSv.exe
c:program filesAlwil SoftwareAvast4ashServ.exe
c:program filesJavajre6binjqs.exe
c:windowssystem32nvsvc32.exe
c:program filesAlwil SoftwareAvast4ashMaiSv.exe
c:program filesAlwil SoftwareAvast4ashWebSv.exe
c:windowssystem32rundll32.exe
c:program filesOrbitdownloaderorbitnet.exe
c:program filesWinamp RemotebinOrb.exe
c:program filesHPDigital Imagingbinhpqste08.exe
.
**************************************************************************
.
Completion time: 2009-06-20 2:18:45 — machine was rebooted
ComboFix-quarantined-files.txt 2009-06-19 22:18:23
ComboFix2.txt 2009-06-15 23:29:36

Pre-Run: 1 864 918 016 байт свободно
Post-Run: 1,859,033,600 байт свободно

222 — E O F — 2009-06-18 09:39:48
17 июня, 2009 в 5:26 пп в ответ на: Порно-информер #24450
schu
Participant
- Темы:1
- Сообщений:9
info.txt logfile of random’s system information tool 1.06 2009-06-17 21:03:49

======Uninstall list======

—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-0015-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-0016-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-0018-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-0019-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-001A-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-001B-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-001F-0419-0000-0000000FF1CE} /uninstall {D7CE14BC-96D9-41C5-822D-F5B1C2C35AA2}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-001F-0422-0000-0000000FF1CE} /uninstall {DC154E48-5278-423A-80A1-B93247E38A1A}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-0044-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-006E-0419-0000-0000000FF1CE} /uninstall {23653CA5-BFB5-4B52-B2DA-045D7ABEB874}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-00A1-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-00BA-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {91120000-0030-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
50 FREE MP3s +1 Free Audiobook!—>»C:Program FilesWinampeMusicUninst-eMusic-promotion.exe»
Ad-Aware SE Professional—>C:PROGRA~1LavasoftAD-AWA~1UNWISE.EXE C:PROGRA~1LavasoftAD-AWA~1INSTALL.LOG
Adobe Flash Player 10 ActiveX—>C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Flash Player 10 Plugin—>C:WINDOWSsystem32MacromedFlashuninstall_plugin.exe
avast! Antivirus—>C:Program FilesAlwil SoftwareAvast4aswRunDll.exe «C:Program FilesAlwil SoftwareAvast4Setupsetiface.dll»,RunSetup
CCleaner (remove only)—>»C:Program FilesCCleaneruninst.exe»
Data Cod Downloader 1.23—>»C:Program FilesDCodDownloaderunins000.exe»
D-Link DSL-200 ADSL Modem—>C:Program FilesD-LinkDSL-200uninstall.exe
GOM Player—>»C:Program FilesGRETECHGomPlayerUninstall.exe»
Google Toolbar for Internet Explorer—>»C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarManager_0531C63A913CC9D1.exe» /uninstall
HijackThis 2.0.2—>»C:Program Filestrend microHijackThis.exe» /uninstall
HMM4 — Последняя битва—>D:PROGRA~1HMM4-F~1UNWISE.EXE D:PROGRA~1HMM4-F~1INSTALL.LOG
Hotfix for Windows Media Format 11 SDK (KB929399)—>»C:WINDOWS$NtUninstallKB929399$spuninstspuninst.exe»
HP Customer Participation Program 7.0—>C:Program FilesHPDigital ImagingExtCapUninstallhpzscr01.exe -datfile hpqhsc01.dat
HP Imaging Device Functions 7.0—>C:Program FilesHPDigital ImagingDeviceManagementhpzscr01.exe -datfile hpqbud01.dat
HP Photosmart Essential—>MsiExec.exe /X{6994491D-D491-48F1-AE1F-E179C1FFFC2F}
HP Photosmart, Officejet and Deskjet 7.0.A—>C:Program FilesHPDigital Imaging{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}setuphpzscr01.exe -datfile hposcr11.dat
HP Product Assistant—>MsiExec.exe /I{36FDBE6E-6684-462B-AE98-9A39A1B200CC}
HP Solution Center 7.0—>C:Program FilesHPDigital ImagingeSupporthpzscr01.exe -datfile hpqbud05.dat
HP Update—>MsiExec.exe /X{FE57DE70-95DE-4B64-9266-84DA811053DB}
ICQ Lite—>»C:Program FilesInstallShield Installation Information{6C13128C-1782-456F-84A4-017CECE259CA}setup.exe» -runfromtemp -l0x0009 -removeonly
ICQ Toolbar—>C:Program FilesICQ6ToolbarICQUnToolbar.exe
ICQ6.5—>»C:Program FilesInstallShield Installation Information{60DE4033-9503-48D1-A483-7846BD217CA9}setup.exe» -runfromtemp -l0x0009 -removeonly
Java(TM) 6 Update 13—>MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
K-Lite Codec Pack 4.0.0 (Full)—>»C:Program FilesK-Lite Codec Packunins000.exe»
L&H TTS3000 Deutsch—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFLHTTSGED.inf, Uninstall
L&H TTS3000 Espaсol—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFLHTTSSPE.inf, Uninstall
L&H TTS3000 Franзais—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFLHTTSFRF.inf, Uninstall
L&H TTS3000 Italiano—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFLHTTSITI.inf, Uninstall
L&H TTS3000 Russian—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFLHTTSRUR.inf, Uninstall
Lernout & Hauspie TruVoice American English TTS Engine—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFtv_enua.inf, Uninstall
LoviVkontakte 2.25.0.0—>»C:Program FilesLoviVkontakteunins000.exe»
Mail.Ru Агент 5.3 (сборка 2560, для всех пользователей)—>C:Program FilesMail.RuAgentmagentsetup.exe -uninstalllm
Mail.Ru Спутник 2.0.1.54—>C:Program FilesMail.RuSputnikSputnikInstaller.exe -uninstall
Microsoft .NET Framework 1.1 Hotfix (KB928366)—>»C:WINDOWSMicrosoft.NETFrameworkv1.1.4322Updateshotfix.exe» «C:WINDOWSMicrosoft.NETFrameworkv1.1.4322UpdatesM928366M928366Uninstall.msp»
Microsoft .NET Framework 1.1—>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1—>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0—>C:WINDOWSMicrosoft.NETFrameworkv2.0.50727Microsoft .NET Framework 2.0install.exe
Microsoft .NET Framework 3.0—>C:WINDOWSMicrosoft.NETFrameworkv3.0Microsoft .NET Framework 3.0setup.exe
Microsoft .NET Framework 3.0—>MsiExec.exe /X{15095BF3-A3D7-4DDF-B193-3A496881E003}
Microsoft Compression Client Pack 1.0 for Windows XP—>»C:WINDOWS$NtUninstallMSCompPackV1$spuninstspuninst.exe»
Microsoft Internationalized Domain Names Mitigation APIs—>»C:WINDOWS$NtServicePackUninstallIDNMitigationAPIs$spuninstspuninst.exe»
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5—>»C:WINDOWS$NtUninstallWdf01005$spuninstspuninst.exe»
Microsoft National Language Support Downlevel APIs—>»C:WINDOWS$NtServicePackUninstallNLSDownlevelMapping$spuninstspuninst.exe»
Microsoft Office — профессиональный выпуск версии 2003—>MsiExec.exe /I{90110419-6000-11D3-8CFE-0150048383C9}
Microsoft Office Access MUI (Russian) 2007—>MsiExec.exe /X{90120000-0015-0419-0000-0000000FF1CE}
Microsoft Office Enterprise 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall ENTERPRISER /dll OSETUP.DLL
Microsoft Office Enterprise 2007—>MsiExec.exe /X{91120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Russian) 2007—>MsiExec.exe /X{90120000-0016-0419-0000-0000000FF1CE}
Microsoft Office Groove MUI (Russian) 2007—>MsiExec.exe /X{90120000-00BA-0419-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Russian) 2007—>MsiExec.exe /X{90120000-0044-0419-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Russian) 2007—>MsiExec.exe /X{90120000-00A1-0419-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Russian) 2007—>MsiExec.exe /X{90120000-001A-0419-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Russian) 2007—>MsiExec.exe /X{90120000-0018-0419-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007—>MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007—>MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Russian) 2007—>MsiExec.exe /X{90120000-001F-0419-0000-0000000FF1CE}
Microsoft Office Proof (Ukrainian) 2007—>MsiExec.exe /X{90120000-001F-0422-0000-0000000FF1CE}
Microsoft Office Proofing (Russian) 2007—>MsiExec.exe /X{90120000-002C-0419-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Russian) 2007—>MsiExec.exe /X{90120000-0019-0419-0000-0000000FF1CE}
Microsoft Office Shared MUI (Russian) 2007—>MsiExec.exe /X{90120000-006E-0419-0000-0000000FF1CE}
Microsoft Office Word MUI (Russian) 2007—>MsiExec.exe /X{90120000-001B-0419-0000-0000000FF1CE}
Microsoft User-Mode Driver Framework Feature Pack 1.5—>»C:WINDOWS$NtUninstallWudf01005$spuninstspuninst.exe»
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable — x86 9.0.21022—>MsiExec.exe /X{DCB46B42-723F-350E-B18A-449BC6C21636}
Microsoft Visual Studio 2005 Tools for Office Runtime—>MsiExec.exe /X{388E4B09-3E71-4649-8921-F44A3A2954A7}
Mozilla Firefox (3.0.11)—>C:Program FilesMozilla Firefoxuninstallhelper.exe
MSVC80_x86—>MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27}
MSXML 4.0 SP2 (KB936181)—>MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)—>MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6.0 Parser (KB925673)—>MsiExec.exe /I{FE9126DB-5F84-495A-BB46-3C724F1C2D08}
Nero 8 Micro v8.1.1.4b—>»C:Program FilesNerounins001.exe»
neroxml—>MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NVIDIA Drivers—>C:WINDOWSsystem32NVUNINST.EXE UninstallGUI
OCR Software by I.R.I.S 7.0—>C:Program FilesHPDigital ImagingOCRhpzscr01.exe -datfile hpqbud11.dat
Orbit Downloader—>»C:Program FilesOrbitdownloaderunins000.exe»
PC Connectivity Solution—>MsiExec.exe /I{AC599724-5755-48C1-ABE7-ABB857652930}
PROMT Почта 8 Giant Try-Buy—>MsiExec.exe /I{2BA86C08-061B-4F10-AA6C-0E50ECD77AE3}
Rambler-Ассистент—>»C:Program FilesRambler Assistantuninstall.exe»
Realtek AC’97 Audio—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{FB08F381-6533-4108-B7DD-039E11FBC27E}Setup.exe» -l0x19 -removeonly
SAMSUNG Mobile Modem Driver Set—>C:Program FilesSAMSUNGSAMSUNG Mobile ModemSSCDUninstall.exe
Samsung Mobile phone USB driver Software—>C:WINDOWSsystem32Samsung_USB_Drivers5SSSDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software—>C:WINDOWSsystem32Samsung_USB_Drivers1SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software—>C:Documents and SettingsШуМои документыSSM_Uninstall.exe
Samsung PC Studio 3 USB Driver Installer—>»C:Program FilesInstallShield Installation Information{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}setup.exe» -runfromtemp -l0x0019 -removeonly
Samsung PC Studio 3—>»C:Program FilesInstallShield Installation Information{C4A4722E-79F9-417C-BD72-8D359A090C97}setup.exe» -runfromtemp -l0x0019 -removeonly
Samsung Samples Installer—>»C:Program FilesInstallShield Installation Information{7AC15160-A49B-4A89-B181-D4619C025FFF}setup.exe» -runfromtemp -l0x0019 -removeonly
Security Update for 2007 Microsoft Office System (KB951550)—>msiexec /package {91120000-0030-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
Security Update for 2007 Microsoft Office System (KB951944)—>msiexec /package {91120000-0030-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for 2007 Microsoft Office System (KB969559)—>msiexec /package {91120000-0030-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB969679)—>msiexec /package {91120000-0030-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
Security Update for Microsoft Office Excel 2007 (KB969682)—>msiexec /package {91120000-0030-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}
Security Update for Microsoft Office OneNote 2007 (KB950130)—>msiexec /package {91120000-0030-0000-0000-0000000FF1CE} /uninstall {F1B2401C-B610-4BF2-AA1C-52C55827A8F4}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)—>msiexec /package {91120000-0030-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office Publisher 2007 (KB950114)—>msiexec /package {91120000-0030-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85}
Security Update for Microsoft Office system 2007 (KB954326)—>msiexec /package {91120000-0030-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
Security Update for Microsoft Office system 2007 (KB969613)—>msiexec /package {91120000-0030-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office Word 2007 (KB969604)—>msiexec /package {91120000-0030-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
Spybot — Search & Destroy—>»C:Program FilesSpybot — Search & Destroyunins000.exe»
ToolTipFixer 1.0.1—>C:Program FilesNeoSmart TechnologiesToolTipFixeruninstall.exe
Update for 2007 Microsoft Office System (KB967642)—>msiexec /package {91120000-0030-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft Office Outlook 2007 (KB969907)—>msiexec /package {91120000-0030-0000-0000-0000000FF1CE} /uninstall {74F98B24-AFBD-4800-9BD6-87D349B5C462}
Update for Outlook 2007 Junk Email Filter (kb970012)—>msiexec /package {91120000-0030-0000-0000-0000000FF1CE} /uninstall {DC4A962B-9EC2-469C-BC9C-87312ADAEE81}
VCRedistSetup—>MsiExec.exe /I{3921A67A-5AB1-4E48-9444-C71814CF3027}
Winamp Remote—>»C:Program FilesWinamp Remoteuninstall.exe»
Winamp Toolbar for Firefox—>»C:Documents and SettingsШуApplication DataMozillaFirefoxProfilesbw4bmuzw.defaultextensions{0b38152b-1b20-484d-a11f-5e04a9b0661f}uninstall.exe»
Winamp Toolbar for Internet Explorer—>»C:Program FilesWinamp Toolbaruninstall.exe»
Winamp—>»C:Program FilesWinampUninstWA.exe»
Windows Communication Foundation—>MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333}
Windows Internet Explorer 8—>»C:WINDOWSie8spuninstspuninst.exe»
Windows Media Format 11 runtime—>»C:Program FilesWindows Media Playerwmsetsdk.exe» /UninstallAll
Windows Media Format 11 runtime—>»C:WINDOWS$NtUninstallWMFDist11$spuninstspuninst.exe»
Windows Media Player 11—>»C:WINDOWS$NtUninstallwmp11$spuninstspuninst.exe»
Windows Presentation Foundation—>MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Workflow Foundation—>MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}
Windows XP Service Pack 3—>»C:WINDOWS$NtServicePackUninstall$spuninstspuninst.exe»
Yahoo! Toolbar—>C:PROGRA~1Yahoo!Commonunyt.exe
Архиватор WinRAR—>C:Program FilesWinRARuninstall.exe
Веселая ферма 2—>C:Program FilesAlawar.ruВеселая ферма 2Uninstall.exe
еда выполнения Visual Studio 2005 Tools for Office, второй выпуск—>C:Program FilesCommon FilesMicrosoft SharedVSTO8.0Microsoft Visual Studio 2005 Tools for Office Runtimeinstall.exe
Исправление для Windows XP (KB952287)—>»C:WINDOWS$NtUninstallKB952287$spuninstspuninst.exe»
Исправление для проигрывателя Windows Media 11 — (KB939683)—>»C:WINDOWS$NtUninstallKB939683$spuninstspuninst.exe»
Критическое обновление для проигрывателя Windows Media 11 — (KB959772)—>»C:WINDOWS$NtUninstallKB959772_WM11$spuninstspuninst.exe»
Обновление безопасности для Windows Internet Explorer 7 (KB938127-v2)—>»C:WINDOWSie7updatesKB938127-v2-IE7spuninstspuninst.exe»
Обновление безопасности для Windows Internet Explorer 7 (KB956390)—>»C:WINDOWSie7updatesKB956390-IE7spuninstspuninst.exe»
Обновление безопасности для Windows Internet Explorer 7 (KB958215)—>»C:WINDOWSie7updatesKB958215-IE7spuninstspuninst.exe»
Обновление безопасности для Windows Internet Explorer 7 (KB960714)—>»C:WINDOWSie7updatesKB960714-IE7spuninstspuninst.exe»
Обновление безопасности для Windows Internet Explorer 7 (KB961260)—>»C:WINDOWSie7updatesKB961260-IE7spuninstspuninst.exe»
Обновление безопасности для Windows Internet Explorer 8 (KB969897)—>»C:WINDOWSie8updatesKB969897-IE8spuninstspuninst.exe»
Обновление безопасности для Windows XP — (KB941569)—>»C:WINDOWS$NtUninstallKB941569$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB923561)—>»C:WINDOWS$NtUninstallKB923561$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB923789)—>C:WINDOWSsystem32MacroMedFlashgenuinst.exe C:WINDOWSsystem32MacroMedFlashKB923789.inf
Обновление безопасности для Windows XP (KB938464)—>»C:WINDOWS$NtUninstallKB938464$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB946648)—>»C:WINDOWS$NtUninstallKB946648$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB950759)—>»C:WINDOWS$NtUninstallKB950759$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB950760)—>»C:WINDOWS$NtUninstallKB950760$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB950762)—>»C:WINDOWS$NtUninstallKB950762$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB950974)—>»C:WINDOWS$NtUninstallKB950974$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB951066)—>»C:WINDOWS$NtUninstallKB951066$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB951376-v2)—>»C:WINDOWS$NtUninstallKB951376-v2$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB951698)—>»C:WINDOWS$NtUninstallKB951698$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB951748)—>»C:WINDOWS$NtUninstallKB951748$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB952004)—>»C:WINDOWS$NtUninstallKB952004$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB952954)—>»C:WINDOWS$NtUninstallKB952954$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB953838)—>»C:WINDOWS$NtUninstallKB953838$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB953839)—>»C:WINDOWS$NtUninstallKB953839$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB954211)—>»C:WINDOWS$NtUninstallKB954211$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB954459)—>»C:WINDOWS$NtUninstallKB954459$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB954600)—>»C:WINDOWS$NtUninstallKB954600$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB955069)—>»C:WINDOWS$NtUninstallKB955069$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956390)—>»C:WINDOWS$NtUninstallKB956390$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956391)—>»C:WINDOWS$NtUninstallKB956391$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956572)—>»C:WINDOWS$NtUninstallKB956572$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956802)—>»C:WINDOWS$NtUninstallKB956802$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956803)—>»C:WINDOWS$NtUninstallKB956803$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956841)—>»C:WINDOWS$NtUninstallKB956841$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB957095)—>»C:WINDOWS$NtUninstallKB957095$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB957097)—>»C:WINDOWS$NtUninstallKB957097$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB958215)—>»C:WINDOWS$NtUninstallKB958215$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB958644)—>»C:WINDOWS$NtUninstallKB958644$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB958687)—>»C:WINDOWS$NtUninstallKB958687$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB958690)—>»C:WINDOWS$NtUninstallKB958690$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB959426)—>»C:WINDOWS$NtUninstallKB959426$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB960225)—>»C:WINDOWS$NtUninstallKB960225$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB960714)—>»C:WINDOWS$NtUninstallKB960714$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB960715)—>»C:WINDOWS$NtUninstallKB960715$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB960803)—>»C:WINDOWS$NtUninstallKB960803$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB961373)—>»C:WINDOWS$NtUninstallKB961373$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB961501)—>»C:WINDOWS$NtUninstallKB961501$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB968537)—>»C:WINDOWS$NtUninstallKB968537$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB969898)—>»C:WINDOWS$NtUninstallKB969898$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB970238)—>»C:WINDOWS$NtUninstallKB970238$spuninstspuninst.exe»
Обновление безопасности для проигрывателя Windows Media — (KB952069)—>»C:WINDOWS$NtUninstallKB952069_WM9$spuninstspuninst.exe»
Обновление безопасности для проигрывателя Windows Media 11 — (KB936782)—>»C:WINDOWS$NtUninstallKB936782_WMP11$spuninstspuninst.exe»
Обновление безопасности для проигрывателя Windows Media 11 — (KB954154)—>»C:WINDOWS$NtUninstallKB954154_WM11$spuninstspuninst.exe»
Обновление для Windows Internet Explorer 8 (KB968220)—>»C:WINDOWSie8updatesKB968220-IE8spuninstspuninst.exe»
Обновление для Windows XP (KB942763)—>»C:WINDOWS$NtUninstallKB942763$spuninstspuninst.exe»
Обновление для Windows XP (KB951072-v2)—>»C:WINDOWS$NtUninstallKB951072-v2$spuninstspuninst.exe»
Обновление для Windows XP (KB951978)—>»C:WINDOWS$NtUninstallKB951978$spuninstspuninst.exe»
Обновление для Windows XP (KB955839)—>»C:WINDOWS$NtUninstallKB955839$spuninstspuninst.exe»
Обновление для Windows XP (KB967715)—>»C:WINDOWS$NtUninstallKB967715$spuninstspuninst.exe»
Проигрыватель Windows Media 11—>»C:Program FilesWindows Media PlayerSetup_wm.exe» /Uninstall
Расписание Погоды rp5.ru—>C:PROGRA~1rp5.ruUNWISE.EXE C:PROGRA~1rp5.ruINSTALL.LOG
Справочник лекарственных средств—>C:Program FilesKeepsoftSLS2007uninst.exe
Энциклопедия традиционной и нетрадиционной медицины Версия 1.0—>»C:Program FilesMedunins000.exe»
Яндекс.Бар для Internet Explorer 4.1.0—>»C:Program FilesYandexYandexBarIEunins000.exe»

======Hosts File======

127.0.0.1 http://www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 http://www.008k.com
127.0.0.1 008k.com
127.0.0.1 http://www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 http://www.032439.com
127.0.0.1 032439.com

======Security center information======

AV: avast! antivirus 4.8.1335 [VPS 090616-0]

======System event log======

Computer Name: SCHULDIG
Event Code: 7036
Message: Служба «Pml Driver HPZ12» перешла в состояние Остановлена.

Record Number: 2170302
Source Name: Service Control Manager
Time Written: 20090617194350.000000+240
Event Type: информация
User:

Computer Name: SCHULDIG
Event Code: 7036
Message: Служба «Pml Driver HPZ12» перешла в состояние Работает.

Record Number: 2170301
Source Name: Service Control Manager
Time Written: 20090617194350.000000+240
Event Type: информация
User:

Computer Name: SCHULDIG
Event Code: 7035
Message: Служба «Pml Driver HPZ12» успешно отправила управляющий элемент «запустить».

Record Number: 2170300
Source Name: Service Control Manager
Time Written: 20090617194350.000000+240
Event Type: информация
User: SCHULDIGШу

Computer Name: SCHULDIG
Event Code: 7036
Message: Служба «Pml Driver HPZ12» перешла в состояние Остановлена.

Record Number: 2170299
Source Name: Service Control Manager
Time Written: 20090617194345.000000+240
Event Type: информация
User:

Computer Name: SCHULDIG
Event Code: 7036
Message: Служба «Pml Driver HPZ12» перешла в состояние Работает.

Record Number: 2170298
Source Name: Service Control Manager
Time Written: 20090617194345.000000+240
Event Type: информация
User:

=====Application event log=====

Computer Name: SCHULDIG
Event Code: 1000
Message: Ошибка приложения magent.exe, версия 5.1.2243.0, модуль ntdll.dll, версия 5.1.2600.5512, адрес 0x0001166b.

Record Number: 242
Source Name: Application Error
Time Written: 20080814170754.000000+240
Event Type: ошибка
User:

Computer Name: SCHULDIG
Event Code: 0
Message:
Record Number: 241
Source Name: ServiceLayer
Time Written: 20080814170717.000000+240
Event Type: информация
User:

Computer Name: SCHULDIG
Event Code: 1800
Message: Служба центра обеспечения безопасности Windows запущена.

Record Number: 240
Source Name: SecurityCenter
Time Written: 20080814170709.000000+240
Event Type: информация
User:

Computer Name: SCHULDIG
Event Code: 0
Message:
Record Number: 239
Source Name: ServiceLayer
Time Written: 20080814104659.000000+240
Event Type: информация
User:

Computer Name: SCHULDIG
Event Code: 1800
Message: Служба центра обеспечения безопасности Windows запущена.

Record Number: 238
Source Name: SecurityCenter
Time Written: 20080814104649.000000+240
Event Type: информация
User:

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=C:Program FilesPC Connectivity Solution;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;D:Program Files;C:Program Files
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=15
«PROCESSOR_IDENTIFIER»=x86 Family 15 Model 47 Stepping 2, AuthenticAMD
«PROCESSOR_REVISION»=2f02
«NUMBER_OF_PROCESSORS»=1
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP

EOF
17 июня, 2009 в 5:25 пп в ответ на: Порно-информер #24449
schu
Participant
- Темы:1
- Сообщений:9
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Шу at 2009-06-17 21:02:52
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 2 GB (12%) free of 16 GB
Total RAM: 1023 MB (35% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:03:34, on 17.06.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesICQ6ToolbarICQ Service.exe
C:Program FilesJavajre6binjqs.exe
C:Program FilesLoviVkontakteVkontakteService.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSExplorer.EXE
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
C:WINDOWSsystem32RunDLL32.exe
C:WINDOWSSOUNDMAN.EXE
C:Program FilesD-LinkDSL-200dslstat.exe
C:Program FilesD-LinkDSL-200dslagent.exe
C:Downloadsvw.exe
D:Program FilesOffice12GrooveMonitor.exe
C:Program FilesWinampwinampa.exe
C:Program FilesHPHP Software UpdateHPWuSchd2.exe
C:Program FilesJavajre6binjusched.exe
C:PROGRA~1ALWILS~1Avast4ashDisp.exe
C:Program FilesLoviVkontaktelovivkontakte.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesSpybot — Search & DestroyTeaTimer.exe
C:Program FilesSuperAXSuperAXTrayApp.exe
C:Program FilesHPDigital Imagingbinhpqtra08.exe
C:Program FilesOrbitdownloaderorbitdm.exe
C:Program FilesOrbitdownloaderorbitnet.exe
C:Program FilesHPDigital ImagingbinhpqSTE08.exe
C:Program FilesTotal CommanderTotalcmd.exe
C:Program FilesAlwil SoftwareAvast4ashSimpl.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:DownloadsRSIT.exe
C:Program Filestrend microШу.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.yandex.ru/?clid=44290
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=43914
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Windows Internet Explorer предоставлен: Яндекс
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:Program FilesMail.RuAgentMradllnewmrasearch.dll
R3 — URLSearchHook: Yahoo! Toolbar — {EF99BD32-C1FB-11D2-892F-0090271D4F88} — C:Program FilesYahoo!CompanionInstallscpn0yt.dll
R3 — URLSearchHook: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
R3 — URLSearchHook: (no name) — — (no file)
R3 — URLSearchHook: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
R3 — URLSearchHook: Winamp Search Class — {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} — C:Program FilesWinamp Toolbarwinamptb.dll
O1 — Hosts: 88.198.72.190 css.yandex.net #AdwMtam_MicroSoft
O2 — BHO: btorbit.com — {000123B4-9B42-4900-B3F7-F4B073EFC214} — C:Program FilesOrbitdownloaderorbitcth.dll
O2 — BHO: Yahoo! Toolbar Helper — {02478D38-C3F9-4EFB-9B51-7695ECA05670} — C:Program FilesYahoo!CompanionInstallscpn0yt.dll
O2 — BHO: Winamp Toolbar Loader — {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} — C:Program FilesWinamp Toolbarwinamptb.dll
O2 — BHO: Spybot-S&D IE Protection — {53707962-6F74-2D53-2644-206D7942484F} — C:PROGRA~1SPYBOT~1SDHelper.dll
O2 — BHO: Groove GFS Browser Helper — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — D:Program FilesOffice12GrooveShellExtensions.dll
O2 — BHO: (no name) — {88888888-8888-8888-8888-888888888888} — (no file)
O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O2 — BHO: BP Data Feeder — {9D64F819-9380-8473-DAB2-702FCB3D7A3E} — %USERPROFILE%Application Databpfeed.dll (file missing)
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.0.926.3450swg.dll
O2 — BHO: Google Dictionary Compression sdch — {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_219B3E1547538286.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 — Toolbar: Yahoo! Toolbar — {EF99BD32-C1FB-11D2-892F-0090271D4F88} — C:Program FilesYahoo!CompanionInstallscpn0yt.dll
O3 — Toolbar: Grab Pro — {C55BBCD6-41AD-48AD-9953-3609C48EACC7} — C:Program FilesOrbitdownloaderGrabPro.dll
O3 — Toolbar: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O3 — Toolbar: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
O3 — Toolbar: &Google Toolbar — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
O3 — Toolbar: Winamp Toolbar — {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} — C:Program FilesWinamp Toolbarwinamptb.dll
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O3 — Toolbar: Rambler-Ассистент — {468CD8A9-7C25-45FA-969E-3D925C689DC4} — C:Program FilesRambler AssistantramblertoolbarU0.dll
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [nwiz] nwiz.exe /install
O4 — HKLM..Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 — HKLM..Run: [SoundMan] SOUNDMAN.EXE
O4 — HKLM..Run: [DSLSTATEXE] C:Program FilesD-LinkDSL-200dslstat.exe icon
O4 — HKLM..Run: [DSLAGENTEXE] C:Program FilesD-LinkDSL-200dslagent.exe
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe -LM
O4 — HKLM..Run: [Vetton Wallpapers] C:Downloadsvw.exe —
O4 — HKLM..Run: [GrooveMonitor] «D:Program FilesOffice12GrooveMonitor.exe»
O4 — HKLM..Run: [WinampAgent] «C:Program FilesWinampwinampa.exe»
O4 — HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe
O4 — HKLM..Run: [SunJavaUpdateSched] «C:Program FilesJavajre6binjusched.exe»
O4 — HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 — HKLM..Run: [LoviVkontakte] C:Program FilesLoviVkontaktelovivkontakte.exe
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [SpybotSD TeaTimer] C:Program FilesSpybot — Search & DestroyTeaTimer.exe
O4 — HKCU..Run: [Orb] «C:Program FilesWinamp RemotebinOrbTray.exe» /background
O4 — HKCU..Run: [ICQ] «C:PROGRA~1ICQ6.5ICQ.exe» silent
O4 — HKCU..Run: [SuperAX Tray Control Application] C:Program FilesSuperAXSuperAXTrayApp.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Startup: Вырезка экрана и программа запуска для OneNote 2007.lnk = D:Program FilesOffice12ONENOTEM.EXE
O4 — Startup: Информер от rp5.ru.lnk = C:Program Filesrp5.rurp5.exe
O4 — Global Startup: HP Digital Imaging Monitor.lnk = C:Program FilesHPDigital Imagingbinhpqtra08.exe
O4 — Global Startup: Orbit.lnk = C:Program FilesOrbitdownloaderorbitdm.exe
O8 — Extra context menu item: &Download by Orbit — res://C:Program FilesOrbitdownloaderorbitmxt.dll/201
O8 — Extra context menu item: &Grab video by Orbit — res://C:Program FilesOrbitdownloaderorbitmxt.dll/204
O8 — Extra context menu item: &Winamp Search — C:Documents and SettingsAll Users.WINDOWSApplication DataWinamp ToolbarieToolbarresourcesen-USlocalsearch.html
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://D:PROGRA~1Office12EXCEL.EXE/3000
O8 — Extra context menu item: Do&wnload selected by Orbit — res://C:Program FilesOrbitdownloaderorbitmxt.dll/203
O8 — Extra context menu item: Down&load all by Orbit — res://C:Program FilesOrbitdownloaderorbitmxt.dll/202
O8 — Extra context menu item: Добавить в Rambler-Закладки — res://C:Program FilesRambler AssistantramblertoolbarU0.dll/zakladki.htm
O8 — Extra context menu item: Найти с помощью Рамблера — res://C:Program FilesRambler AssistantramblertoolbarU0.dll/search.htm
O8 — Extra context menu item: Перевести с помощью словарей Рамблера — res://C:Program FilesRambler AssistantramblertoolbarU0.dll/dic.htm
O8 — Extra context menu item: Поиск@Mail.Ru — res://C:Program FilesMail.RuSputnikMailRuSputnik.dll/282
O8 — Extra context menu item: Словари@Mail.Ru — res://C:Program FilesMail.RuSputnikMailRuSputnik.dll/283
O9 — Extra button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — D:PROGRA~1Office12ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — D:PROGRA~1Office12ONBttnIE.dll
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} — C:PROGRA~1SPYBOT~1SDHelper.dll
O9 — Extra ‘Tools’ menuitem: Spybot — Search & Destroy Configuration — {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} — C:PROGRA~1SPYBOT~1SDHelper.dll
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O17 — HKLMSystemCCSServicesTcpip..{27A7621B-6FE8-4F15-9489-99DF7384949D}: NameServer = 212.48.193.36 212.48.193.38
O17 — HKLMSystemCS1ServicesTcpip..{27A7621B-6FE8-4F15-9489-99DF7384949D}: NameServer = 212.48.193.36 212.48.193.38
O18 — Protocol: grooveLocalGWS — {88FED34C-F0CA-4636-A375-3CB6248B04CD} — D:Program FilesOffice12GrooveSystemServices.dll
O20 — AppInit_DLLs: C:WINDOWSsystem32SiteAccess.dll
O23 — Service: avast! iAVS4 Control Service (aswUpdSv) — ALWIL Software — C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 — Service: avast! Antivirus — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 — Service: avast! Mail Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 — Service: avast! Web Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Google Updater Service (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: ICQ Service — Unknown owner — C:Program FilesICQ6ToolbarICQ Service.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — C:Program FilesJavajre6binjqs.exe
O23 — Service: LoviVkontake Service (LoviVkontakteService) — Zeyfman Genady — C:Program FilesLoviVkontakteVkontakteService.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Pml Driver HPZ12 — HP — C:WINDOWSsystem32HPZipm12.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: ServiceLayer — Nokia. — C:Program FilesPC Connectivity SolutionServiceLayer.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 13920 bytes

======Scheduled tasks folder======

C:WINDOWStasksUser_Feed_Synchronization-{7E654ACB-1BBB-4723-8E60-902208151B9F}.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{000123B4-9B42-4900-B3F7-F4B073EFC214}]
Octh Class — C:Program FilesOrbitdownloaderorbitcth.dll [2009-04-03 134344]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper — C:Program FilesYahoo!CompanionInstallscpn0yt.dll [2006-10-26 440384]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
Winamp Toolbar Loader — C:Program FilesWinamp Toolbarwinamptb.dll [2008-07-17 1266992]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection — C:PROGRA~1SPYBOT~1SDHelper.dll [2008-01-28 1554256]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper — D:Program FilesOffice12GrooveShellExtensions.dll [2007-08-24 2212224]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{88888888-8888-8888-8888-888888888888}]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2009-01-24 676704]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9D64F819-9380-8473-DAB2-702FCB3D7A3E}]
BP Data Feeder — C:Documents and SettingsШуApplication Databpfeed.dll [2009-06-15 12800]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll [2009-01-02 251504]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier5.0.926.3450swg.dll [2009-01-02 657904]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch — C:Program FilesGoogleGoogle ToolbarComponentfastsearch_219B3E1547538286.dll [2009-01-02 522224]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2009-05-07 35840]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2009-05-07 73728]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} — Yahoo! Toolbar — C:Program FilesYahoo!CompanionInstallscpn0yt.dll [2006-10-26 440384]
{C55BBCD6-41AD-48AD-9953-3609C48EACC7} — Grab Pro — C:Program FilesOrbitdownloaderGrabPro.dll [2009-04-03 650360]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2009-01-24 676704]
{855F3B16-6D32-4fe6-8A56-BBB695989046} — ICQToolBar — C:Program FilesICQ6ToolbarICQToolBar.dll [2008-06-12 958712]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — &Google Toolbar — C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll [2009-01-02 251504]
{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} — Winamp Toolbar — C:Program FilesWinamp Toolbarwinamptb.dll [2008-07-17 1266992]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2009-04-15 3699488]
{468CD8A9-7C25-45FA-969E-3D925C689DC4} — Rambler-Ассистент — C:Program FilesRambler AssistantramblertoolbarU0.dll [2009-05-06 849392]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2006-06-01 7618560]
«nwiz»=nwiz.exe /install []
«NvMediaCenter»=NvMCTray.dll,NvTaskbarInit []
«SoundMan»=C:WINDOWSSOUNDMAN.EXE [2006-03-01 577536]
«DSLSTATEXE»=C:Program FilesD-LinkDSL-200dslstat.exe [2005-12-12 344064]
«DSLAGENTEXE»=C:Program FilesD-LinkDSL-200dslagent.exe [2005-08-25 65536]
«MAgent»=C:Program FilesMail.RuAgentMAgent.exe [2009-01-24 5603000]
«Vetton Wallpapers»=C:Downloadsvw.exe [2007-05-03 1172480]
«GrooveMonitor»=D:Program FilesOffice12GrooveMonitor.exe [2007-08-24 33648]
«WinampAgent»=C:Program FilesWinampwinampa.exe [2008-08-04 36352]
«HP Software Update»=C:Program FilesHPHP Software UpdateHPWuSchd2.exe [2007-05-08 54840]
«SunJavaUpdateSched»=C:Program FilesJavajre6binjusched.exe [2009-05-07 148888]
«avast!»=C:PROGRA~1ALWILS~1Avast4ashDisp.exe [2009-02-06 81000]
«LoviVkontakte»=C:Program FilesLoviVkontaktelovivkontakte.exe [2009-03-26 726016]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-14 15360]
«SpybotSD TeaTimer»=C:Program FilesSpybot — Search & DestroyTeaTimer.exe [2008-01-28 2097488]
«Orb»=C:Program FilesWinamp RemotebinOrbTray.exe [2008-04-01 507904]
«ICQ»=C:PROGRA~1ICQ6.5ICQ.exe [2009-03-01 172792]
«SuperAX Tray Control Application»=C:Program FilesSuperAXSuperAXTrayApp.exe [2009-03-22 524288]

C:Documents and SettingsAll Users.WINDOWSГлавное менюПрограммыАвтозагрузка
HP Digital Imaging Monitor.lnk — C:Program FilesHPDigital Imagingbinhpqtra08.exe
Orbit.lnk — C:Program FilesOrbitdownloaderorbitdm.exe

C:Documents and SettingsШуГлавное менюПрограммыАвтозагрузка
Вырезка экрана и программа запуска для OneNote 2007.lnk — D:Program FilesOffice12ONENOTEM.EXE
Информер от rp5.ru.lnk — C:Program Filesrp5.rurp5.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLS»=»C:WINDOWSsystem32SiteAccess.dll»

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{B5A7F190-DDA6-4420-B3BA-52453494E6CD}»=D:Program FilesOffice12GrooveShellExtensions.dll [2007-08-24 2212224]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetwork{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«HonorAutoRunSetting»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«D:Doom III CollectionDOOM3DED.EXE»=»D:Doom III CollectionDOOM3DED.EXE:*:Enabled:DOOM 3»
«C:Program FilesHfsHfs.exe»=»C:Program FilesHfsHfs.exe:*:Enabled:Hfs»
«C:Program FilesOrbitdownloaderorbitdm.exe»=»C:Program FilesOrbitdownloaderorbitdm.exe:*:Enabled:Orbit»
«C:Program FilesOrbitdownloaderorbitnet.exe»=»C:Program FilesOrbitdownloaderorbitnet.exe:*:Enabled:Orbit»
«C:Program FilesInternet Exploreriexplore.exe»=»C:Program FilesInternet Exploreriexplore.exe:*:Enabled:Internet Explorer»
«C:Program FilesuTorrentutorrent.exe»=»C:Program FilesuTorrentutorrent.exe:*:Enabled:utorrent»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:Program FilesQIPqip.exe»=»C:Program FilesQIPqip.exe:*:Enabled:Quiet Internet Pager»
«D:Program FilesOffice12OUTLOOK.EXE»=»D:Program FilesOffice12OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook»
«D:Program FilesOffice12GROOVE.EXE»=»D:Program FilesOffice12GROOVE.EXE:*:Enabled:Microsoft Office Groove»
«D:Program FilesOffice12ONENOTE.EXE»=»D:Program FilesOffice12ONENOTE.EXE:*:Enabled:Microsoft Office OneNote»
«C:Program FilesICQLiteICQ.exe»=»C:Program FilesICQLiteICQ.exe:*:Enabled:ICQ Lite»
«C:Program FilesWinamp RemotebinOrb.exe»=»C:Program FilesWinamp RemotebinOrb.exe:*:Enabled:Orb»
«C:Program FilesWinamp RemotebinOrbTray.exe»=»C:Program FilesWinamp RemotebinOrbTray.exe:*:Enabled:OrbTray»
«C:Program FilesWinamp RemotebinOrbStreamerClient.exe»=»C:Program FilesWinamp RemotebinOrbStreamerClient.exe:*:Enabled:Orb Stream Client»
«C:Program FilesHPDigital Imagingbinhpqtra08.exe»=»C:Program FilesHPDigital Imagingbinhpqtra08.exe:*:Enabled:hpqtra08.exe»
«C:Program FilesHPDigital Imagingbinhpqste08.exe»=»C:Program FilesHPDigital Imagingbinhpqste08.exe:*:Enabled:hpqste08.exe»
«C:Program FilesHPDigital Imagingbinhpofxm08.exe»=»C:Program FilesHPDigital Imagingbinhpofxm08.exe:*:Enabled:hpofxm08.exe»
«C:Program FilesHPDigital Imagingbinhposfx08.exe»=»C:Program FilesHPDigital Imagingbinhposfx08.exe:*:Enabled:hposfx08.exe»
«C:Program FilesHPDigital Imagingbinhposid01.exe»=»C:Program FilesHPDigital Imagingbinhposid01.exe:*:Enabled:hposid01.exe»
«C:Program FilesHPDigital Imagingbinhpqscnvw.exe»=»C:Program FilesHPDigital Imagingbinhpqscnvw.exe:*:Enabled:hpqscnvw.exe»
«C:Program FilesHPDigital Imagingbinhpqkygrp.exe»=»C:Program FilesHPDigital Imagingbinhpqkygrp.exe:*:Enabled:hpqkygrp.exe»
«C:Program FilesHPDigital ImagingbinhpqCopy.exe»=»C:Program FilesHPDigital ImagingbinhpqCopy.exe:*:Enabled:hpqcopy.exe»
«C:Program FilesHPDigital Imagingbinhpfccopy.exe»=»C:Program FilesHPDigital Imagingbinhpfccopy.exe:*:Enabled:hpfccopy.exe»
«C:Program FilesHPDigital Imagingbinhpzwiz01.exe»=»C:Program FilesHPDigital Imagingbinhpzwiz01.exe:*:Enabled:hpzwiz01.exe»
«C:Program FilesHPDigital ImagingUnloadHpqPhUnl.exe»=»C:Program FilesHPDigital ImagingUnloadHpqPhUnl.exe:*:Enabled:hpqphunl.exe»
«C:Program FilesHPDigital ImagingUnloadHpqDIA.exe»=»C:Program FilesHPDigital ImagingUnloadHpqDIA.exe:*:Enabled:hpqdia.exe»
«C:Program FilesHPDigital Imagingbinhpoews01.exe»=»C:Program FilesHPDigital Imagingbinhpoews01.exe:*:Enabled:hpoews01.exe»
«C:Program FilesHPDigital Imagingbinhpqnrs08.exe»=»C:Program FilesHPDigital Imagingbinhpqnrs08.exe:*:Enabled:hpqnrs08.exe»
«C:Program FilesICQ6.5ICQ.exe»=»C:Program FilesICQ6.5ICQ.exe:*:Enabled:ICQ6»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{8c99498b-a424-11dc-8ef7-806d6172696f}]
shellAutoRuncommand — E:Setup.exe

======List of files/folders created in the last 1 months======

2009-06-17 21:02:58 —-DC—- C:Program Filestrend micro
2009-06-17 21:02:52 —-DC—- C:rsit
2009-06-17 05:11:57 —-DC—- C:Program FilesSuperAX
2009-06-17 02:45:50 —-DC—- C:32788R22FWJFW
2009-06-17 02:45:49 —-SHDC—- C:RECYCLER
2009-06-17 02:45:49 —-SHDC—- C:Recycled
2009-06-17 02:43:39 —-DC—- C:Program FilesConnectionServices
2009-06-17 02:43:39 —-DC—- C:Program FilesBitAccelerator
2009-06-16 23:27:14 —-DC—- C:Documents and SettingsШуApplication DataOpera
2009-06-16 17:20:35 —-DC—- C:Program FilesTrojan Remover
2009-06-16 17:20:35 —-DC—- C:Documents and SettingsAll Users.WINDOWSApplication DataSimply Super Software
2009-06-16 15:56:11 —-SHDC—- C:RECYCLER(3)
2009-06-16 04:01:49 —-DC—- C:RECYCLER(2)
2009-06-16 03:29:36 —-AC—- C:ComboFix.txt
2009-06-16 03:22:24 —-AC—- C:Boot.bak
2009-06-16 03:22:17 —-DC—- C:cmdcons
2009-06-16 03:19:06 —-DC—- C:WINDOWSERDNT
2009-06-16 03:18:50 —-DC—- C:Qoobox
2009-06-15 02:04:20 —-AC—- C:Documents and SettingsШуApplication Databpfeed.dll
2009-06-15 01:31:05 —-DC—- C:Program FilesSiteAccess
2009-06-12 03:47:14 —-HDC—- C:WINDOWS$NtUninstallKB961501$
2009-06-12 03:43:24 —-HDC—- C:WINDOWS$NtUninstallKB969898$
2009-06-12 03:09:10 —-DC—- C:Documents and SettingsAll Users.WINDOWSApplication DataВеселаяФерма2
2009-06-12 03:07:24 —-HDC—- C:WINDOWS$NtUninstallKB970238$
2009-06-12 03:05:43 —-HDC—- C:WINDOWS$NtUninstallKB968537$
2009-06-12 03:00:06 —-DC—- C:Program FilesAlawar.ru
2009-06-08 03:17:50 —-AC—- C:WINDOWSsystem32unicows.dll
2009-06-08 03:17:37 —-DC—- C:Program FilesWebTV
2009-06-02 01:50:28 —-DC—- C:Program FilesLoviVkontakte
2009-05-18 02:44:46 —-DC—- C:WINDOWSspeech
2009-05-18 02:29:47 —-DC—- C:WINDOWSLhsp
2009-05-18 02:29:47 —-DC—- C:Documents and SettingsAll Users.WINDOWSApplication DataPRMT
2009-05-18 02:29:46 —-DC—- C:Program FilesPRMT8
2009-05-18 02:16:31 —-C—- C:WINDOWSsystem32spmsg2.dll

======List of files/folders modified in the last 1 months======

2009-06-17 21:03:16 —-DC—- C:Downloads
2009-06-17 21:02:58 —-RDC—- C:Program Files
2009-06-17 20:56:06 —-DC—- C:Documents and SettingsШуApplication DataOrbit
2009-06-17 20:31:11 —-DC—- C:Program FilesMozilla Firefox
2009-06-17 19:51:12 —-DC—- C:WINDOWSsystem32CatRoot2
2009-06-17 18:21:49 —-DC—- C:WINDOWSTemp
2009-06-17 18:18:35 —-DC—- C:WINDOWS
2009-06-17 10:41:58 —-A—- C:WINDOWSSchedLgU.Txt
2009-06-17 05:18:16 —-DC—- C:WINDOWSDebug
2009-06-17 05:16:30 —-DC—- C:Program FilesAdStoper
2009-06-17 03:48:49 —-DC—- C:WINDOWSPrefetch
2009-06-17 02:49:47 —-DC—- C:WINDOWSsystem32config
2009-06-17 02:47:24 —-DC—- C:WINDOWSsystem32wbem
2009-06-17 02:47:15 —-DC—- C:WINDOWSRegistration
2009-06-17 02:46:04 —-RSHDC—- C:WINDOWSsystem32dllcache
2009-06-17 02:46:04 —-DC—- C:WINDOWSsystem32
2009-06-17 02:46:03 —-DC—- C:WINDOWSsystem32usmt
2009-06-17 02:42:29 —-DC—- C:Program FilesJava
2009-06-16 17:51:32 —-DC—- C:Program FilesMail.Ru
2009-06-16 05:07:43 —-HDC—- C:WINDOWSinf
2009-06-16 03:25:59 —-AC—- C:WINDOWSsystem.ini
2009-06-16 03:24:00 —-DC—- C:WINDOWSsystem32drivers
2009-06-16 03:24:00 —-DC—- C:WINDOWSAppPatch
2009-06-16 03:23:58 —-DC—- C:Program FilesCommon Files
2009-06-15 03:57:46 —-HDC—- C:Program FilesInstallShield Installation Information
2009-06-15 03:03:08 —-SHDC—- C:WINDOWSInstaller
2009-06-15 03:03:07 —-HDC—- C:Config.Msi
2009-06-15 03:03:06 —-DC—- C:Documents and SettingsAll Users.WINDOWSApplication DataMicrosoft Help
2009-06-14 17:50:05 —-DC—- C:Program FilesInternet Explorer
2009-06-14 02:41:30 —-DC—- C:Program FilesWinamp Remote
2009-06-12 08:57:14 —-DC—- C:Documents and SettingsШуApplication DatauTorrent
2009-06-12 03:52:50 —-DC—- C:WINDOWSie8updates
2009-06-12 03:52:16 —-HDC—- C:WINDOWS$hf_mig$
2009-06-12 03:06:09 —-DC—- C:Documents and SettingsAll Users.WINDOWSApplication DataAlawarWrapper
2009-06-04 21:27:38 —-AC—- C:WINDOWSavisplitter.INI
2009-06-01 20:51:12 —-AC—- C:WINDOWSsystem32MRT.exe
2009-05-18 12:18:39 —-RSDC—- C:WINDOWSassembly
2009-05-18 12:18:39 —-DC—- C:WINDOWSMicrosoft.NET
2009-05-18 02:45:30 —-RSDC—- C:WINDOWSFonts
2009-05-18 02:44:28 —-DC—- C:WINDOWSmsagent
2009-05-18 02:44:28 —-DC—- C:WINDOWSHelp
2009-05-18 02:28:13 —-DC—- C:Program FilesCommon FilesMicrosoft Shared
2009-05-18 02:27:09 —-AC—- C:WINDOWSsystem32PerfStringBackup.INI
2009-05-18 02:20:21 —-DC—- C:WINDOWSsystem32XPSViewer
2009-05-18 02:20:20 —-DC—- C:WINDOWSsystem32en-us
2009-05-18 02:10:46 —-DC—- C:WINDOWSWinSxS

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:WINDOWSsystem32driversAavmker4.sys [2009-02-06 26944]
R1 AmdK8;AMD Processor Driver; C:WINDOWSsystem32DRIVERSAmdK8.sys [2005-03-09 36352]
R1 ASPI32;ASPI32; C:WINDOWSsystem32driversASPI32.sys [1999-09-10 25244]
R1 aswSP;avast! Self Protection; C:WINDOWSsystem32driversaswSP.sys [2009-02-06 114768]
R1 aswTdi;avast! Network Shield Support; C:WINDOWSsystem32driversaswTdi.sys [2009-02-06 51376]
R1 kbdhid;Драйвер клавиатуры HID; C:WINDOWSsystem32DRIVERSkbdhid.sys [2008-04-14 14720]
R1 StarOpen;StarOpen; C:WINDOWSsystem32driversStarOpen.sys [2008-11-06 5632]
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2006-03-02 12032]
R2 aswFsBlk;aswFsBlk; C:WINDOWSsystem32DRIVERSaswFsBlk.sys [2009-02-06 20560]
R2 aswMon2;avast! Standard Shield Support; C:WINDOWSsystem32driversaswMon2.sys [2009-02-06 94032]
R2 atksgt;atksgt; C:WINDOWSsystem32DRIVERSatksgt.sys [2008-08-03 278728]
R2 lirsgt;lirsgt; C:WINDOWSsystem32DRIVERSlirsgt.sys [2008-08-03 25416]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:WINDOWSsystem32driversALCXWDM.SYS [2006-05-10 3964736]
R3 aswRdr;aswRdr; C:WINDOWSsystem32driversaswRdr.sys [2009-02-06 23152]
R3 hidusb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-13 10368]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2006-06-01 3925920]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:WINDOWSsystem32DRIVERSNVENETFD.sys [2005-07-26 33664]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:WINDOWSsystem32DRIVERSnvnetbus.sys [2005-04-05 12928]
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-13 32128]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-13 30208]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-13 59520]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2008-04-13 17152]
R3 wanusb;D-Link DSL-200 USB ADSL WAN Modem; C:WINDOWSsystem32DRIVERSgwausb.sys [2005-09-22 158592]
S3 ax2j0w84;ax2j0w84; C:WINDOWSsystem32driversax2j0w84.sys []
S3 GMSIPCI;GMSIPCI; ??E:INSTALLGMSIPCI.SYS []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:WINDOWSsystem32DRIVERSHPZid412.sys [2006-04-13 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:WINDOWSsystem32DRIVERSHPZipr12.sys [2006-04-13 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:WINDOWSsystem32DRIVERSHPZius12.sys [2006-04-13 21568]
S3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-19 12160]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:WINDOWSsystem32DRIVERSss_bus.sys [2007-05-02 83592]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:WINDOWSsystem32DRIVERSss_mdfl.sys [2007-05-02 15112]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:WINDOWSsystem32DRIVERSss_mdm.sys [2007-05-02 109704]
S3 upperdev;upperdev; C:WINDOWSsystem32DRIVERSusbser_lowerflt.sys []
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-13 25856]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-13 15104]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Wdf01000; C:WINDOWSsystem32DRIVERSWdf01000.sys [2006-11-02 492000]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-15 82688]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe [2009-02-06 18752]
R2 avast! Antivirus;avast! Antivirus; C:Program FilesAlwil SoftwareAvast4ashServ.exe [2009-02-06 138680]
R2 ICQ Service;ICQ Service; C:Program FilesICQ6ToolbarICQ Service.exe [2008-06-10 222456]
R2 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2009-05-07 152984]
R2 LoviVkontakteService;LoviVkontake Service; C:Program FilesLoviVkontakteVkontakteService.exe [2009-02-09 476672]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2006-06-01 155715]
R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe [2009-02-06 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:Program FilesAlwil SoftwareAvast4ashWebSv.exe [2009-02-06 352920]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:WINDOWSsystem32HPZipm12.exe [2007-08-09 73728]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2006-10-20 36864]
S3 gusvc;Google Updater Service; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-01-02 137200]
S3 idsvc;Windows CardSpace; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2006-10-30 741376]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; D:Program FilesOffice12GrooveAuditService.exe [2007-08-24 68464]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:Program FilesPC Connectivity SolutionServiceLayer.exe [2008-04-07 430592]
S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2006-11-02 914944]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2006-10-30 122880]

EOF
Автор

Сообщения

Просмотр 8 сообщений - с 1 по 8 (из 8 всего)

schu

Созданные ответы форума

Добро пожаловать

Поиск

Важные инструкции

Установлено в соответствии с корпоративным правилом (Удалить из Хрома)

Как удалить рекламный вирус в браузере (Chrome, Opera, Firefox, Internet Explorer, Edge)

Как восстановить зашифрованные файлы (Инструкция)

Удалить всплывающие окна, рекламу, уведомления в Chrome

Какой лучший антивирус ? Как выбрать антивирус ?

СПАЙВАРЕ РУ

Нужна помощь?

Ссылки