Не могу нормально заходить на многие сайты.

This topic has 21 ответ, 3 участника, and was last updated 14 years, 1 month назад by Admin.

Просмотр 15 сообщений - с 1 по 15 (из 22 всего)

1 2 →

Автор

Сообщения
28 апреля, 2010 в 8:39 дп #18176
jurisprudens
Participant
- Темы:3
- Сообщений:20
Итак, дела таковы. ОС — ХР , 2-й Сервис Пак. Нет лицензии. Устанавливал давно (почти 3 года). Конечно, за это время он стал работать гораздо медленнее, иногда тормозит, но вроде было терпимо.

Недавно возникли глюки в работе Internet Explorer. Он не только тормозит, но и НЕ МОЖЕТ открывать некоторые сайты. Как правило, это сайты требующие логина, введения пароля и т.д. Например, не могу зайти вконтакте, одноклассники, но это не только социальные сети. Чуть ли не всякий раз, когда надо регистрироваться или вводить пароль, он выдает «Программа совершила ошибку и будет закрыта». Даже на вашем Форуме я не смог зарегистрироваться с Эксплорера, сейчас пишу с Файрфокса.

С Файрфоксом МЕНЬШЕ проблем: могу вводить пароли, не выдает об ошибке. НО даже с Файрфоксом появились проблемы, которых раньше не было. Не могу например открыть сайты, где много всяких флешей, картинок и т.п. Например, не могу зайти на фейсбук, на сайт bbc.com.
Возможно, это просто винда от старости барахлит. Но у меня все-таки есть подозрение по поводу вирусов. Во-первых, НИ ОДНИМ браузером не могу зайти на САЙТЫ АНТИВИРУСНЫХ ПРОГРАММ (Dr. Web, Nod32). Во-вторых, что еще более страшно, мой антивир Nod32 прекратил обновляться! Когда связывается с сервером, сообщает о сбое, чего раньше не было. Вот у меня и возникли подозрения…

Проверил комп бесплатным Dr. Web, скачанным с другого компа — ничего не нашел. Правда, проверял в обычном режиме винды — почему пока не могу зайти в безопасный.

Вот такая вот байда….
28 апреля, 2010 в 5:57 пп #29112
Admin
Keymaster
- Темы:40
- Сообщений:5676
Здравствуйте, добро пожаловать на Spyware-ru форум.

Необходимо проверить ваш компьютер.
Скачайте сканер RSIT кликнув по этой ссылке и сохраните файл на вашем рабочем столе.

* Дважды кликните по скачанному файлу.
* Если у вас есть файрвал (firewall) и он покажет, что программа RSIT пытается выйти в Интернет, то разрешите ей.
* Кликните по кнопке Continue.
* Когда программа закончит работу, будут показаны два лога (log.txt и info.txt).

Вставьте оба RSIT лога (их содержимое) в ваш ответ. Каждый лог в отдельное сообщение.
28 апреля, 2010 в 6:12 пп #29113
jurisprudens
Participant
- Темы:3
- Сообщений:20
Спасибо! Вот log.txt:

Logfile of random’s system information tool 1.06 (written by random/random)
Run by Отец и мать at 2010-04-28 22:11:07
Microsoft Windows XP Professional Service Pack 2
System drive C: has 78 GB (51%) free of 153 GB
Total RAM: 511 MB (21% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:11:25, on 28.04.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:Program FilesAnalog DevicesCoresmax4pnp.exe
C:Program FilesAnalog DevicesSoundMAXSmax4.exe
C:Program FilesSlySoftCloneCDCloneCDTray.exe
C:Program FilesEsetnod32kui.exe
C:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:Program FilesWinampwinampa.exe
C:WINDOWSsystem32rundll32.exe
C:Program FilesCommon FilesACD SystemsENDevDetect.exe
C:Program FilesiTunesiTunesHelper.exe
C:Program FilesJavajre6binjusched.exe
C:Program FilesCommon FilesRealUpdate_OBrealsched.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesDownload Masterdmaster.exe
C:Program FilesIVT CorporationBlueSoleilBlueSoleil.exe
C:Program FilesInterVideoCommonBinWinCinemaMgr.exe
C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe
C:Program FilesIVT CorporationBlueSoleilBTNtService.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe
C:Program FilesJavajre6binjqs.exe
C:Program FilesLogMeInx86RaMaint.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe
C:Program FilesLogMeInx86LogMeIn.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:Program FilesEsetnod32krn.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcIp.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcLog.exe
C:Program FilesCyberLinkShared FilesRichVideo.exe
C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindService.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesiPodbiniPodService.exe
C:WINDOWSsystem32wbemwmiapsrv.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:DownloadsВидеоRSIT.exe
C:Program Filestrend microОтец и мать.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.yandex.ru/?clid=48084
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://mail.ru/
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 — HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
F2 — REG:system.ini: UserInit=C:WINDOWSsystem32userinit.exe,C:WINDOWSsystem32d5067e85.exe,C:WINDOWSsystem32f3f3c839.exe,\?globalrootsystemrootsystem32fd1IpJq.exe,
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — C:PROGRA~1DOWNLO~1dmiehlp.dll
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — c:program filesgooglegoogletoolbar1.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 — Toolbar: DM Bar — {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — C:Program FilesDownload Masterdmbar.dll
O3 — Toolbar: &Google — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — c:program filesgooglegoogletoolbar1.dll
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O4 — HKLM..Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 — HKLM..Run: [SoundMAXPnP] C:Program FilesAnalog DevicesCoresmax4pnp.exe
O4 — HKLM..Run: [SoundMAX] «C:Program FilesAnalog DevicesSoundMAXSmax4.exe» /tray
O4 — HKLM..Run: [CloneCDTray] «C:Program FilesSlySoftCloneCDCloneCDTray.exe» /s
O4 — HKLM..Run: [nod32kui] «C:Program FilesEsetnod32kui.exe» /WAITSERVICE
O4 — HKLM..Run: [RemoteControl] «C:Program FilesCyberLinkPowerDVDPDVDServ.exe»
O4 — HKLM..Run: [LanguageShortcut] «C:Program FilesCyberLinkPowerDVDLanguageLanguage.exe»
O4 — HKLM..Run: [WinampAgent] C:Program FilesWinampwinampa.exe
O4 — HKLM..Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 — HKLM..Run: [Device Detector] DevDetect.exe -autorun
O4 — HKLM..Run: [QuickTime Task] «C:Program FilesQuickTimeqttask.exe» -atboottime
O4 — HKLM..Run: [iTunesHelper] «C:Program FilesiTunesiTunesHelper.exe»
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 8.0ReaderReader_sl.exe»
O4 — HKLM..Run: [SunJavaUpdateSched] «C:Program FilesJavajre6binjusched.exe»
O4 — HKLM..Run: [TkBellExe] «C:Program FilesCommon FilesRealUpdate_OBrealsched.exe» -osboot
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [Download Master] C:Program FilesDownload Masterdmaster.exe -autorun
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User ‘Default user’)
O4 — .DEFAULT User Startup: Adobe Gamma.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe (User ‘Default user’)
O4 — Global Startup: BlueSoleil.lnk = ?
O4 — Global Startup: InterVideo WinCinema Manager.lnk = C:Program FilesInterVideoCommonBinWinCinemaMgr.exe
O6 — HKCUSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~1OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — C:Program FilesDownload Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — C:Program FilesDownload Masterdmie.htm
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~1OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {c95fe080-8f5d-11d2-a20b-00aa003c157a} — C:WINDOWSsystem32shdocvw.dll
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O16 — DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) — http://www.miniclip.com/games/ricochet-lost-worlds/en/ReflexiveWebGameLoader.cab
O16 — DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) — http://download.divx.com/player/DivXBrowserPlugin.cab
O16 — DPF: {D1548A26-B8F6-4E86-AE74-E7062CCC2E2A} (igLoader Content on Demand) — http://www.miniclip.com/igloader/igloader.CAB
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 — DPF: {DF9C24D1-030E-49ED-5EB5-D6610086C313} (ChatRepublicPlayer ActiveX) — http://www.miniclip.com/superstar_racing/ChatRepublicPlayer.cab
O17 — HKLMSystemCCSServicesTcpip..{FCA83090-03C5-415F-B86D-3BA17B14F1B3}: NameServer = 212.188.4.10,195.34.32.116
O23 — Service: Adobe LM Service — Adobe Systems — C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe
O23 — Service: Apple Mobile Device — Apple, Inc. — C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — C:WINDOWSsystem32Ati2evxx.exe
O23 — Service: ATI Smart — Unknown owner — C:WINDOWSsystem32ati2sgag.exe
O23 — Service: BlueSoleil Hid Service — Unknown owner — C:Program FilesIVT CorporationBlueSoleilBTNtService.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Forceware Web Interface (ForcewareWebInterface) — Apache Software Foundation — C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe
O23 — Service: Google Updater Service (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: Сервис iPod (iPod Service) — Apple Inc. — C:Program FilesiPodbiniPodService.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — C:Program FilesJavajre6binjqs.exe
O23 — Service: LogMeIn Maintenance Service (LMIMaint) — LogMeIn, Inc. — C:Program FilesLogMeInx86RaMaint.exe
O23 — Service: LogMeIn — LogMeIn, Inc. — C:Program FilesLogMeInx86LogMeIn.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: NOD32 Kernel Service (NOD32krn) — Eset — C:Program FilesEsetnod32krn.exe
O23 — Service: ForceWare IP service (nSvcIp) — NVIDIA Corporation — C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcIp.exe
O23 — Service: ForceWare user log service (nSvcLog) — NVIDIA Corporation — C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcLog.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — C:Program FilesCyberLinkShared FilesRichVideo.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: StarWind iSCSI Service (StarWindService) — Rocket Division Software — C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindService.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 12130 bytes

======Scheduled tasks folder======

C:WINDOWStasksAppleSoftwareUpdate.job
C:WINDOWStasksRealUpgradeLogonTaskS-1-5-21-682003330-706699826-2147153767-1004.job
C:WINDOWStasksRealUpgradeScheduledTaskS-1-5-21-682003330-706699826-2147153767-1004.job
C:WINDOWStasksUser_Feed_Synchronization-{2AA7D6F2-3497-4F7B-BA4B-B70E52283A21}.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — C:PROGRA~1DOWNLO~1dmiehlp.dll [2007-07-20 152064]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — c:program filesgooglegoogletoolbar1.dll [2008-04-23 2403392]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — DM Bar — C:Program FilesDownload Masterdmbar.dll [2007-11-26 180224]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — &Google — c:program filesgooglegoogletoolbar1.dll [2008-04-23 2403392]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2009-03-25 3697952]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«High Definition Audio Property Page Shortcut»=C:WINDOWSsystem32HDAShCut.exe [2004-10-27 61952]
«SoundMAXPnP»=C:Program FilesAnalog DevicesCoresmax4pnp.exe [2005-05-20 925696]
«SoundMAX»=C:Program FilesAnalog DevicesSoundMAXSmax4.exe [2005-09-07 716800]
«CloneCDTray»=C:Program FilesSlySoftCloneCDCloneCDTray.exe [2006-09-28 57344]
«nod32kui»=C:Program FilesEsetnod32kui.exe [2057-04-28 917504]
«RemoteControl»=C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2006-12-06 69216]
«LanguageShortcut»=C:Program FilesCyberLinkPowerDVDLanguageLanguage.exe [2006-12-05 54832]
«WinampAgent»=C:Program FilesWinampwinampa.exe [2007-02-13 35328]
«BluetoothAuthenticationAgent»=bthprops.cpl,,BluetoothAuthenticationAgent []
«Device Detector»=DevDetect.exe -autorun []
«QuickTime Task»=C:Program FilesQuickTimeqttask.exe [2007-06-29 286720]
«iTunesHelper»=C:Program FilesiTunesiTunesHelper.exe [2007-08-15 271672]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2008-10-15 39792]
«SunJavaUpdateSched»=C:Program FilesJavajre6binjusched.exe [2009-10-11 149280]
«TkBellExe»=C:Program FilesCommon FilesRealUpdate_OBrealsched.exe [2010-03-30 202256]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2004-08-18 15360]
«Download Master»=C:Program FilesDownload Masterdmaster.exe [2008-01-25 3280896]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregATICCC]
C:Program FilesATI TechnologiesATI.ACECLIStart.exe [2006-09-25 90112]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregLogMeIn GUI]
C:Program FilesLogMeInx86LogMeInSystray.exe [2007-04-17 63048]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSecurity Central]
C:Program FilesSecurity CentralSecurity Central.exe []

C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
BlueSoleil.lnk — C:Program FilesIVT CorporationBlueSoleilBlueSoleil.exe
InterVideo WinCinema Manager.lnk — C:Program FilesInterVideoCommonBinWinCinemaMgr.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWSsystem32Ati2evxx.dll [2006-12-17 110592]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyLMIinit]
C:WINDOWSsystem32LMIinit.dll [2007-05-25 63040]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWgaLogon]
C:WINDOWSsystem32WgaLogon.dll [2006-06-27 3584]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2006-05-09 52224]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{0CB68AD9-FF66-3E63-636B-B693E62F6236}»=C:Program FilesInternet Explorerromdrivers.dll []

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetwork{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«NoInternetOpenWith «=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«NoSMHelp»=1
«NoSMConfigurePrograms»=1
«Start_NotifyNewApps»=0

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

======List of files/folders created in the last 1 months======

2057-04-28 20:49:04 —-D—- C:Program FilesEset
2057-04-28 20:49:04 —-A—- C:WINDOWSsystem32imon.dll
2010-04-28 22:11:08 —-D—- C:Program Filestrend micro
2010-04-28 22:11:07 —-D—- C:rsit
2010-04-28 21:57:55 —-A—- C:WINDOWSsystem32rv0OJDR.exe
2010-04-28 15:40:54 —-A—- C:WINDOWSsystem32lKK4rN8.exe
2010-04-28 15:33:41 —-A—- C:WINDOWSsystem32PyOrpAo.exe
2010-04-28 13:23:29 —-A—- C:WINDOWSsystem32MzVjI85.exe
2010-04-28 13:16:38 —-A—- C:WINDOWSsystem32xXL73Bz.exe
2010-04-28 13:12:53 —-A—- C:WINDOWSsystem323QXrWwo.exe
2010-04-28 11:58:08 —-A—- C:WINDOWSsystem32HW5kgYN.exe
2010-04-28 11:43:58 —-A—- C:WINDOWSsystem32UF28wkT.exe
2010-04-28 11:35:49 —-A—- C:WINDOWSsystem32DW8pHPk.exe
2010-04-28 01:41:00 —-A—- C:WINDOWSsystem32Fvmk6Al.exe
2010-04-27 21:53:06 —-A—- C:WINDOWSsystem32YvkFdRh.exe
2010-04-27 21:50:59 —-D—- C:Documents and SettingsОтец и матьApplication DataYandex
2010-04-27 21:50:56 —-D—- C:Program FilesYandex
2010-04-27 21:50:46 —-HD—- C:WINDOWSmsdownld.tmp
2010-04-27 21:49:57 —-N—- C:WINDOWSsystem32spmsg.dll
2010-04-27 21:48:43 —-HDC—- C:WINDOWSie8
2010-04-27 21:40:22 —-A—- C:WINDOWSsystem32Chwcklt.exe
2010-04-27 21:11:05 —-A—- C:WINDOWSsystem32xghtOXC.exe
2010-04-27 21:04:26 —-A—- C:Program FilesCommon Fileskeylog.txt
2010-04-27 21:04:25 —-A—- C:WINDOWSsystem32fd1IpJq.exe
2010-04-27 21:03:44 —-A—- C:WINDOWSsystem32f3f3c839.exe
2010-04-27 21:03:32 —-A—- C:WINDOWSsystem32d5067e85.exe
2010-03-30 18:28:16 —-A—- C:WINDOWSsystem32rmoc3260.dll
2010-03-30 18:28:09 —-A—- C:WINDOWSsystem32pndx5032.dll
2010-03-30 18:28:09 —-A—- C:WINDOWSsystem32pndx5016.dll
2010-03-30 18:27:38 —-D—- C:Program FilesCommon Filesxing shared

======List of files/folders modified in the last 1 months======

2010-04-28 22:11:08 —-RD—- C:Program Files
2010-04-28 22:10:35 —-D—- C:Temp
2010-04-28 21:57:55 —-D—- C:WINDOWSsystem32
2010-04-28 16:34:28 —-A—- C:WINDOWSSchedLgU.Txt
2010-04-28 13:28:50 —-D—- C:WINDOWSsystem32CatRoot2
2010-04-28 13:01:55 —-A—- C:WINDOWSNeroDigital.ini
2010-04-28 01:05:27 —-D—- C:Program FilesLogMeIn
2010-04-27 21:52:49 —-D—- C:WINDOWS
2010-04-27 21:52:10 —-HD—- C:WINDOWSinf
2010-04-27 21:52:10 —-D—- C:WINDOWSsystem32ru-ru
2010-04-27 21:52:10 —-D—- C:WINDOWSMedia
2010-04-27 21:52:10 —-D—- C:WINDOWSHelp
2010-04-27 21:52:10 —-D—- C:Program FilesInternet Explorer
2010-04-27 21:50:02 —-D—- C:WINDOWSsystem32dllcache
2010-04-27 21:49:57 —-D—- C:WINDOWSTemp
2010-04-27 21:41:09 —-D—- C:Documents and SettingsОтец и матьApplication DataMozilla
2010-04-27 21:41:00 —-D—- C:Program FilesMozilla Firefox
2010-04-27 21:33:51 —-D—- C:Program FilesCommon Files
2010-04-17 20:58:59 —-D—- C:WINDOWSPrefetch
2010-04-14 11:41:14 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2010-04-01 23:28:51 —-D—- C:Downloads
2010-03-30 18:34:01 —-D—- C:Documents and SettingsAll UsersApplication DataReal
2010-03-30 18:30:21 —-SD—- C:WINDOWSTasks
2010-03-30 18:29:57 —-D—- C:Documents and SettingsОтец и матьApplication DataReal
2010-03-30 18:28:24 —-D—- C:Program FilesCommon FilesReal
2010-03-30 18:27:46 —-SHD—- C:WINDOWSInstaller
2010-03-30 18:27:45 —-D—- C:Program FilesReal
2010-03-30 18:27:14 —-A—- C:WINDOWSsystem32pncrt.dll
2010-03-30 18:27:14 —-A—- C:WINDOWSsystem32msvcr71.dll
2010-03-30 18:27:14 —-A—- C:WINDOWSsystem32msvcp71.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;Драйвер AMD процессора; C:WINDOWSsystem32DRIVERSAmdK8.sys [2005-03-09 43008]
R1 prodrv05;StarForce Protection Environment Driver v5; C:WINDOWSSystem32driversprodrv05.sys [2002-12-26 53568]
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2004-08-18 12032]
R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B}; ??C:Program FilesCyberLinkPowerDVD00.fcl []
R2 AMON;AMON; ??C:WINDOWSsystem32driversamon.sys []
R2 ElbyCDIO;ElbyCDIO Driver; C:WINDOWSSystem32DriversElbyCDIO.sys [2006-12-26 15440]
R2 LMIInfo;LogMeIn Kernel Information Provider; ??C:Program FilesLogMeInx86RaInfo.sys []
R2 LMIRfsDriver;LogMeIn Remote File System Driver; ??C:WINDOWSsystem32driversLMIRfsDriver.sys []
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:WINDOWSsystem32driversADIHdAud.sys [2005-10-05 141312]
R3 AEAudioService;AEAudio Service; C:WINDOWSsystem32driversAEAudio.sys [2005-03-04 127872]
R3 ati2mtag;ati2mtag; C:WINDOWSsystem32DRIVERSati2mtag.sys [2006-12-17 1918464]
R3 BlueletAudio;Bluetooth Audio Service; C:WINDOWSsystem32DRIVERSblueletaudio.sys [2005-05-31 20480]
R3 BT;Bluetooth PAN Network Adapter; C:WINDOWSsystem32DRIVERSbtnetdrv.sys [2005-04-30 10804]
R3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:WINDOWSSystem32Driversbtcusb.sys [2005-04-06 23000]
R3 BTHidEnum;Bluetooth HID Enumerator; C:WINDOWSsystem32DRIVERSvbtenum.sys [2005-04-30 11860]
R3 ElbyCDFL;ElbyCDFL; C:WINDOWSSystem32DriversElbyCDFL.sys [2006-12-26 34760]
R3 GEARAspiWDM;GEARAspiWDM; C:WINDOWSSystem32DriversGEARAspiWDM.sys [2006-09-19 15664]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2004-10-27 138240]
R3 lmimirr;lmimirr; C:WINDOWSsystem32DRIVERSlmimirr.sys [2007-04-17 10144]
R3 MTsensor;ATK0110 ACPI UTILITY; C:WINDOWSsystem32DRIVERSASACPI.sys [2004-08-13 5810]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:WINDOWSsystem32DRIVERSNVENETFD.sys [2006-06-29 57856]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:WINDOWSsystem32DRIVERSnvnetbus.sys [2006-06-29 20480]
R3 pcouffin;VSO Software pcouffin; C:WINDOWSSystem32Driverspcouffin.sys [2007-04-28 47360]
R3 pfc;Padus ASPI Shell; C:WINDOWSsystem32driverspfc.sys [2007-05-07 10368]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:WINDOWSSystem32DriversRootMdm.sys [2004-08-18 5888]
R3 SenFiltService;SenFilt Service; C:WINDOWSsystem32driversSenfilt.sys [2005-10-10 393088]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2004-08-18 26624]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2004-08-18 57600]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2004-08-18 17024]
R3 usbstor;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-18 26496]
R3 vaxscsi;vaxscsi; C:WINDOWSSystem32Driversvaxscsi.sys [2007-04-28 223128]
R3 VComm;Virtual Serial port driver; C:WINDOWSsystem32DRIVERSVComm.sys [2004-10-19 61312]
R3 VcommMgr;Bluetooth VComm Manager Service; C:WINDOWSSystem32DriversVcommMgr.sys [2005-03-25 82148]
S3 BthEnum;Драйвер блока запроса Bluetooth; C:WINDOWSsystem32DRIVERSBthEnum.sys [2004-08-03 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:WINDOWSsystem32DRIVERSbthpan.sys [2004-08-03 100992]
S3 BTHPORT;Драйвер порта Bluetooth; C:WINDOWSSystem32DriversBTHport.sys [2004-08-17 274688]
S3 BTHUSB;Драйвер порта USB радиомодуля Bluetooth; C:WINDOWSSystem32DriversBTHUSB.sys [2004-08-03 18944]
S3 CCDECODE;Closed Caption декодер; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2004-08-03 17024]
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:WINDOWSsystem32driversHdAudio.sys [2004-10-27 145920]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWSsystem32DRIVERSNdisIP.sys [2004-08-03 10880]
S3 RFCOMM;Устройство Bluetooth (протокол RFCOMM TDI); C:WINDOWSsystem32DRIVERSrfcomm.sys [2004-08-03 59648]
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2004-08-03 15360]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2004-08-04 31616]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2004-08-03 15104]
S3 usbvideo;USB-видеоустройство (WDM); C:WINDOWSSystem32Driversusbvideo.sys [2004-08-04 78464]
S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2004-08-03 19328]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2006-04-11 82944]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2006-04-11 87808]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []
S4 LMIRfsClientNP;LMIRfsClientNP; C:WINDOWSsystem32driversLMIRfsClientNP.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe [2007-08-15 106496]
R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSsystem32Ati2evxx.exe [2006-12-17 434176]
R2 BlueSoleil Hid Service;BlueSoleil Hid Service; C:Program FilesIVT CorporationBlueSoleilBTNtService.exe [2005-04-06 110592]
R2 BthServ;Bluetooth Support Service; C:WINDOWSsystem32svchost.exe [2004-08-18 14336]
R2 ForcewareWebInterface;Forceware Web Interface; C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe [2006-04-13 20543]
R2 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2009-10-11 153376]
R2 LMIMaint;LogMeIn Maintenance Service; C:Program FilesLogMeInx86RaMaint.exe [2007-05-25 112200]
R2 LogMeIn;LogMeIn; C:Program FilesLogMeInx86LogMeIn.exe [2007-04-17 63040]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-19 322120]
R2 NOD32krn;NOD32 Kernel Service; C:Program FilesEsetnod32krn.exe [2057-04-28 495616]
R2 nSvcIp;ForceWare IP service; C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcIp.exe [2006-06-29 131131]
R2 nSvcLog;ForceWare user log service; C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcLog.exe [2006-06-29 65599]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:Program FilesCyberLinkShared FilesRichVideo.exe [2005-08-08 167936]
R2 StarWindService;StarWind iSCSI Service; C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindService.exe [2005-04-02 217600]
R3 iPod Service;Сервис iPod; C:Program FilesiPodbiniPodService.exe [2007-08-15 501048]
S2 ATI Smart;ATI Smart; C:WINDOWSsystem32ati2sgag.exe [2006-12-20 520192]
S3 Adobe LM Service;Adobe LM Service; C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe [2007-04-28 72704]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 gusvc;Google Updater Service; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2008-04-23 138168]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media PlayerWMPNetwk.exe [2006-05-09 823808]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2004-08-18 14336]

EOF
28 апреля, 2010 в 6:13 пп #29114
jurisprudens
Participant
- Темы:3
- Сообщений:20
А вот info.txt:

info.txt logfile of random’s system information tool 1.06 2010-04-28 22:11:27

======Uninstall list======

—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
ACDSee 9 Photo Manager—>MsiExec.exe /X{B2D41883-3BFC-4BA0-A2F6-5A2C9836C238}
Adobe Bridge 1.0—>MsiExec.exe /I{B74D4E10-6884-0000-0000-000000000103}
Adobe Common File Installer—>MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5101}
Adobe Flash Player 10 ActiveX—>C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Flash Player 10 Plugin—>C:WINDOWSsystem32MacromedFlashuninstall_plugin.exe
Adobe Help Center 1.0—>MsiExec.exe /I{E9787678-119F-4D52-B551-6739B2B22101}
Adobe Photoshop CS2—>msiexec /I {236BB7C4-4419-42FD-0419-1E257A25E34D}
Adobe Reader 8.1.3—>MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81300000003}
Adobe Shockwave Player 11.5—>»C:WINDOWSsystem32AdobeShockwave 11uninstaller.exe»
Adobe Stock Photos 1.0—>MsiExec.exe /I{EE0D5DCD-2B97-4473-98DF-E93C0BD92F7A}
Apple Mobile Device Support—>MsiExec.exe /I{763E8D6C-0098-4FF4-801A-3F311D2D9D80}
Apple Software Update—>MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Athlon 64 Processor Driver—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime91Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{C151CE54-E7EA-4804-854B-F515368B0798}setup.exe» -l0x19
ATI — Утилита деинсталляции—>C:Program FilesATI TechnologiesUninstallAllAtiCimUn.exe
ATI Catalyst Control Center—>MsiExec.exe /I{685755F8-C74B-4613-8137-C90AF458228D}
ATI Display Driver—>rundll32 C:WINDOWSsystem32atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI HYDRAVISION—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{083F79E4-6FE9-46FB-A6C6-4F8862742947}setup.exe»
ATI Parental Control & Encoder—>MsiExec.exe /I{36CDA33B-909B-4719-97D1-C4B99309BDC7}
ATI Problem Report Wizard—>MsiExec.exe /X{5DA6F06A-B389-407B-BF8C-1548767914D8}
AVIVO Codecs—>MsiExec.exe /X{C941F1F1-25B3-4DF5-83E6-888C51A1AAB6}
BlueSoleil—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{B9F499B8-D1F0-42FC-84BE-CC552123CCCB}setup.exe» -l0x19
CDisplay 1.8—>»C:Program FilesCDisplayunins000.exe»
CloneCD—>»C:Program FilesSlySoftCloneCDccd-uninst.exe» /D=»C:Program FilesSlySoftCloneCD»
CloneDVD 4.0—>»C:Program FilesCloneDVDunins000.exe»
Creative DVD Audio Plugin for Audigy Series—>»C:Program FilesCreativeCTDPluginCTUIDVD.exe » -u
DivX Web Player—>C:Program FilesDivXDivXWebPlayerUninstall.exe /PLUGIN
DjVu Browser Plug-in v.6.0.0 (русская версия)—>»C:Program FilesLizardTechDjVuControlUninstall.exe»
Download Master version 5.5.3.1131—>»C:Program FilesDownload Masterunins000.exe»
FLV Player 1.3.3—>»C:Program FilesFLVPlayeruninstall.exe»
Google Toolbar for Internet Explorer—>MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer—>regsvr32 /u /s «c:program filesgooglegoogletoolbar1.dll»
Google Video Player—>»C:Program FilesGoogleGoogle Video PlayerUninstall.exe»
High Definition Audio Driver Package — KB888111—>C:WINDOWS$NtUninstallKB888111WXPSP2$spuninstspuninst.exe
HijackThis 2.0.2—>»C:Program Filestrend microHijackThis.exe» /uninstall
IKEA Home Planner—>MsiExec.exe /I{A987FEC8-5616-49BD-BCA6-ACFFFE7403FE}
InterActual Player—>C:Program FilesInterActualInterActual Playerinuninst.exe
InterVideo WinDVD 7—>»C:Program FilesInstallShield Installation Information{90885A82-9673-49EA-AB39-AF776639C67C}setup.exe» REMOVEALL
iTunes—>MsiExec.exe /I{974C05A0-C76C-4724-A9A2-11D5D1355729}
Japanese Fonts Support For Adobe Reader 8—>MsiExec.exe /I{AC76BA86-7AD7-5760-0000-800000000003}
Java(TM) 6 Update 17—>MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 2—>MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 3—>MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java(TM) 6 Update 7—>MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Java(TM) SE Runtime Environment 6 Update 1—>MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
K-Lite Codec Pack 4.7.5 (Standard)—>»C:Program FilesK-Lite Codec Packunins000.exe»
LogMeIn—>MsiExec.exe /I{3FEC3A5B-60FF-4626-B425-08E09B121A15}
Medieval II Total War—>C:PROGRA~1MEDIEV~1UNWISE.EXE C:PROGRA~1MEDIEV~1INSTALL.LOG
Mephisto—>C:Program FilesUninstall.exe
Microsoft .NET Framework 2.0—>C:WINDOWSMicrosoft.NETFrameworkv2.0.50727Microsoft .NET Framework 2.0install.exe
Microsoft Office — профессиональный выпуск версии 2003—>MsiExec.exe /I{90110419-6000-11D3-8CFE-0150048383C9}
Microsoft User-Mode Driver Framework Feature Pack 1.0.0 (Pre-Release 5348)—>»C:WINDOWS$NtUninstallWudf01000$spuninstspuninst.exe»
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mozilla Firefox (3.6.3)—>C:Program FilesMozilla Firefoxuninstallhelper.exe
MSXML 4.0 SP2 Parser and SDK—>MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
Nero 7 Micro v7.7.5.1—>»C:Program FilesNerounins000.exe»
NOD32 FiX v1.9—>»C:Program FilesEsetunins000.exe»
NVIDIA Drivers—>C:WINDOWSsystem32NVUNINST.EXE UninstallGUI
NVIDIA ForceWare Network Access Manager—>C:PROGRA~1COMMON~1INSTAL~1Driver9INTEL3~1IDriver.exe /M{1F6423DE-7959-4178-80E0-023C7EAA5347} /l1033
pMetro 1.19—>»C:Program FilespMetrounins000.exe»
PowerDVD—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}setup.exe» -uninstall
QuickTime—>MsiExec.exe /I{95A890AA-B3B1-44B6-9C18-A8F7AB3EE7FC}
RealPlayer—>C:Program FilesCommon FilesRealUpdate_OBr1puninst.exe RealNetworks|RealPlayer|12.0
RealUpgrade 1.0—>MsiExec.exe /I{F4F4F84E-804F-4E9A-84D7-C34283F0088F}
SoundMAX—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime100Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{F0A37341-D692-11D4-A984-009027EC0A9C}setup.exe» -l0x19 -removeonly
StarCalc 5.72—>C:PROGRA~1StarCalcstarcalc.exe /uninstall
TeLL me More—>»C:TELL ME MORE NVBINunsetup.exe» -file «C:TELL ME MORE NVunsetup.aui»
Total Video Converter 3.10—>»C:Program FilesTotal Video Converterunins000.exe»
Winamp (remove only)—>»C:Program FilesWinampUninstWA.exe»
Windows Internet Explorer 8—>»C:WINDOWSie8spuninstspuninst.exe»
Windows Media Format 11 runtime—>»C:Program FilesWindows Media Playerwmsetsdk.exe» /UninstallAll
Windows Media Format 11 runtime—>»C:WINDOWS$NtUninstallWMFDist11$spuninstspuninst.exe»
Windows Media Player 11—>»C:Program FilesWindows Media PlayerSetup_wm.exe» /Uninstall
Антивирусная система NOD32—>C:Program FilesEsetSetupsetup.exe /UNINSTALL
Архиватор WinRAR—>C:Program FilesWinRARuninstall.exe
Князь 2—>C:PROGRA~1COMMON~1INSTAL~1Driver7INTEL3~1IDriver.exe /M{D5285445-F4A1-496C-8EA6-7FDA1BA96244}
Обновление безопасности для Windows XP (KB923789)—>C:WINDOWSsystem32MacroMedFlashgenuinst.exe C:WINDOWSsystem32MacroMedFlashKB923789.inf
Яндекс.Бар для Internet Explorer 4.1.0—>»C:Program FilesYandexYandexBarIEunins000.exe»

======Hosts File======

127.0.0.1 localhost

Securitycenter WMI appears to be broken

======System event log======

Computer Name: SUPERCOMP
Event Code: 7036
Message: Служба «Служба сетевого расположения (NLA)» перешла в состояние Работает.

Record Number: 43388
Source Name: Service Control Manager
Time Written: 20100306115845.000000+180
Event Type: информация
User:

Computer Name: SUPERCOMP
Event Code: 7035
Message: Служба «Служба сетевого расположения (NLA)» успешно отправила управляющий элемент «запустить».

Record Number: 43387
Source Name: Service Control Manager
Time Written: 20100306115845.000000+180
Event Type: информация
User: NT AUTHORITYSYSTEM

Computer Name: SUPERCOMP
Event Code: 7036
Message: Служба «Диспетчер подключений удаленного доступа» перешла в состояние Работает.

Record Number: 43386
Source Name: Service Control Manager
Time Written: 20100306115845.000000+180
Event Type: информация
User:

Computer Name: SUPERCOMP
Event Code: 7036
Message: Служба «Служба обнаружения SSDP» перешла в состояние Работает.

Record Number: 43385
Source Name: Service Control Manager
Time Written: 20100306115845.000000+180
Event Type: информация
User:

Computer Name: SUPERCOMP
Event Code: 7036
Message: Служба «Сервис iPod» перешла в состояние Работает.

Record Number: 43384
Source Name: Service Control Manager
Time Written: 20100306115845.000000+180
Event Type: информация
User:

=====Application event log=====

Computer Name: SUPERCOMP
Event Code: 0
Message:
Record Number: 7829
Source Name: iPod Service
Time Written: 20100423005249.000000+240
Event Type: информация
User:

Computer Name: SUPERCOMP
Event Code: 0
Message:
Record Number: 7828
Source Name: RichVideo
Time Written: 20100423005227.000000+240
Event Type: информация
User:

Computer Name: SUPERCOMP
Event Code: 100
Message: The Service has started.

Record Number: 7827
Source Name: LogMeIn
Time Written: 20100423005226.000000+240
Event Type: информация
User: NT AUTHORITYSYSTEM

Computer Name: SUPERCOMP
Event Code: 105
Message: The service was started.

Record Number: 7826
Source Name: ATI Smart
Time Written: 20100423005215.000000+240
Event Type: информация
User:

Computer Name: SUPERCOMP
Event Code: 0
Message:
Record Number: 7825
Source Name: iPod Service
Time Written: 20100422113459.000000+240
Event Type: информация
User:

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;C:Program FilesCommon FilesAdobeAGL;C:Program FilesQuickTimeQTSystem
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=15
«PROCESSOR_IDENTIFIER»=x86 Family 15 Model 79 Stepping 2, AuthenticAMD
«PROCESSOR_REVISION»=4f02
«NUMBER_OF_PROCESSORS»=1
«TEMP»=%SystemDrive%Temp
«TMP»=%SystemDrive%Temp
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«CLASSPATH»=.;C:Program FilesJavajre1.6.0_02libextQTJava.zip
«QTJAVA»=C:Program FilesJavajre1.6.0_02libextQTJava.zip

EOF
30 апреля, 2010 в 9:47 дп #29115
jurisprudens
Participant
- Темы:3
- Сообщений:20
Ну так что, кто-нибудь проверил эти логи?

Я не спец, но меня самого в них кое-что напрягло…. (((((
30 апреля, 2010 в 12:46 пп #29116
Helper
Participant
- Темы:19
- Сообщений:712
Что с проблемой?
30 апреля, 2010 в 5:16 пп #29118
jurisprudens
Participant
- Темы:3
- Сообщений:20
All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
No active process named :Services was found!
No active process named :Files was found!
No active process named C:WINDOWSsystem32d5067e85.exe was found!
No active process named C:WINDOWSsystem32f3f3c839.exe was found!
No active process named C:WINDOWSsystem32rv0OJDR.exe was found!
No active process named C:WINDOWSsystem32lKK4rN8.exe was found!
No active process named C:WINDOWSsystem32PyOrpAo.exe was found!
No active process named C:WINDOWSsystem32MzVjI85.exe was found!
No active process named C:WINDOWSsystem32xXL73Bz.exe was found!
No active process named C:WINDOWSsystem323QXrWwo.exe was found!
No active process named C:WINDOWSsystem32HW5kgYN.exe was found!
No active process named C:WINDOWSsystem32UF28wkT.exe was found!
No active process named C:WINDOWSsystem32DW8pHPk.exe was found!
No active process named C:WINDOWSsystem32Fvmk6Al.exe was found!
No active process named C:WINDOWSsystem32YvkFdRh.exe was found!
No active process named C:WINDOWSsystem32Chwcklt.exe was found!
No active process named C:WINDOWSsystem32xghtOXC.exe was found!
No active process named C:WINDOWSsystem32fd1IpJq.exe was found!
No active process named C:Program FilesSecurity CentralSecurity Central.exe was found!
No active process named C:Program FilesSecurity Central was found!
No active process named :Reg was found!
No active process named [-HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSecurity Central] was found!
No active process named [-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes] was found!
No active process named [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer] was found!
No active process named «NoSMHelp»=- was found!
No active process named «NoSMConfigurePrograms»=- was found!
No active process named :Commands was found!
No active process named [purity] was found!
No active process named [emptytemp] was found!
No active process named [start explorer] was found!
No active process named [Reboot] was found!

OTM by OldTimer — Version 3.1.10.0 log created on 04302010_211202
30 апреля, 2010 в 5:27 пп #29119
jurisprudens
Participant
- Темы:3
- Сообщений:20
Вот ссылка:

http://depositfiles.com/files/vdwm1v6ka
30 апреля, 2010 в 5:29 пп #29120
jurisprudens
Participant
- Темы:3
- Сообщений:20
Вот log.txt:
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Отец и мать at 2010-04-30 21:28:46
Microsoft Windows XP Professional Service Pack 2
System drive C: has 78 GB (51%) free of 153 GB
Total RAM: 511 MB (17% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:28:54, on 30.04.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:Program FilesAnalog DevicesCoresmax4pnp.exe
C:Program FilesAnalog DevicesSoundMAXSmax4.exe
C:Program FilesSlySoftCloneCDCloneCDTray.exe
C:Program FilesEsetnod32kui.exe
C:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:Program FilesWinampwinampa.exe
C:WINDOWSsystem32rundll32.exe
C:Program FilesCommon FilesACD SystemsENDevDetect.exe
C:Program FilesiTunesiTunesHelper.exe
C:Program FilesJavajre6binjusched.exe
C:Program FilesCommon FilesRealUpdate_OBrealsched.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesDownload Masterdmaster.exe
C:Program FilesIVT CorporationBlueSoleilBlueSoleil.exe
C:Program FilesInterVideoCommonBinWinCinemaMgr.exe
C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe
C:Program FilesIVT CorporationBlueSoleilBTNtService.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe
C:Program FilesJavajre6binjqs.exe
C:Program FilesLogMeInx86RaMaint.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe
C:Program FilesLogMeInx86LogMeIn.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:Program FilesEsetnod32krn.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcIp.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcLog.exe
C:Program FilesCyberLinkShared FilesRichVideo.exe
C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindService.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesiPodbiniPodService.exe
C:WINDOWSsystem32wbemwmiapsrv.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Documents and SettingsОтец и матьРабочий столRSIT.exe
C:Program Filestrend microОтец и мать.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.yandex.ru/?clid=48084
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://mail.ru/
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 — HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
F2 — REG:system.ini: UserInit=C:WINDOWSsystem32userinit.exe,C:WINDOWSsystem32d5067e85.exe,C:WINDOWSsystem32f3f3c839.exe,\?globalrootsystemrootsystem32fd1IpJq.exe,
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — C:PROGRA~1DOWNLO~1dmiehlp.dll
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — c:program filesgooglegoogletoolbar1.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 — Toolbar: DM Bar — {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — C:Program FilesDownload Masterdmbar.dll
O3 — Toolbar: &Google — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — c:program filesgooglegoogletoolbar1.dll
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O4 — HKLM..Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 — HKLM..Run: [SoundMAXPnP] C:Program FilesAnalog DevicesCoresmax4pnp.exe
O4 — HKLM..Run: [SoundMAX] «C:Program FilesAnalog DevicesSoundMAXSmax4.exe» /tray
O4 — HKLM..Run: [CloneCDTray] «C:Program FilesSlySoftCloneCDCloneCDTray.exe» /s
O4 — HKLM..Run: [nod32kui] «C:Program FilesEsetnod32kui.exe» /WAITSERVICE
O4 — HKLM..Run: [RemoteControl] «C:Program FilesCyberLinkPowerDVDPDVDServ.exe»
O4 — HKLM..Run: [LanguageShortcut] «C:Program FilesCyberLinkPowerDVDLanguageLanguage.exe»
O4 — HKLM..Run: [WinampAgent] C:Program FilesWinampwinampa.exe
O4 — HKLM..Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 — HKLM..Run: [Device Detector] DevDetect.exe -autorun
O4 — HKLM..Run: [QuickTime Task] «C:Program FilesQuickTimeqttask.exe» -atboottime
O4 — HKLM..Run: [iTunesHelper] «C:Program FilesiTunesiTunesHelper.exe»
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 8.0ReaderReader_sl.exe»
O4 — HKLM..Run: [SunJavaUpdateSched] «C:Program FilesJavajre6binjusched.exe»
O4 — HKLM..Run: [TkBellExe] «C:Program FilesCommon FilesRealUpdate_OBrealsched.exe» -osboot
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [Download Master] C:Program FilesDownload Masterdmaster.exe -autorun
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User ‘Default user’)
O4 — .DEFAULT User Startup: Adobe Gamma.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe (User ‘Default user’)
O4 — Global Startup: BlueSoleil.lnk = ?
O4 — Global Startup: InterVideo WinCinema Manager.lnk = C:Program FilesInterVideoCommonBinWinCinemaMgr.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~1OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — C:Program FilesDownload Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — C:Program FilesDownload Masterdmie.htm
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~1OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {c95fe080-8f5d-11d2-a20b-00aa003c157a} — C:WINDOWSsystem32shdocvw.dll
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O16 — DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) — http://www.miniclip.com/games/ricochet-lost-worlds/en/ReflexiveWebGameLoader.cab
O16 — DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) — http://download.divx.com/player/DivXBrowserPlugin.cab
O16 — DPF: {D1548A26-B8F6-4E86-AE74-E7062CCC2E2A} (igLoader Content on Demand) — http://www.miniclip.com/igloader/igloader.CAB
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 — DPF: {DF9C24D1-030E-49ED-5EB5-D6610086C313} (ChatRepublicPlayer ActiveX) — http://www.miniclip.com/superstar_racing/ChatRepublicPlayer.cab
O17 — HKLMSystemCCSServicesTcpip..{FCA83090-03C5-415F-B86D-3BA17B14F1B3}: NameServer = 212.188.4.10,195.34.32.116
O23 — Service: Adobe LM Service — Adobe Systems — C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe
O23 — Service: Apple Mobile Device — Apple, Inc. — C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — C:WINDOWSsystem32Ati2evxx.exe
O23 — Service: ATI Smart — Unknown owner — C:WINDOWSsystem32ati2sgag.exe
O23 — Service: BlueSoleil Hid Service — Unknown owner — C:Program FilesIVT CorporationBlueSoleilBTNtService.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Forceware Web Interface (ForcewareWebInterface) — Apache Software Foundation — C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe
O23 — Service: Google Updater Service (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: Сервис iPod (iPod Service) — Apple Inc. — C:Program FilesiPodbiniPodService.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — C:Program FilesJavajre6binjqs.exe
O23 — Service: LogMeIn Maintenance Service (LMIMaint) — LogMeIn, Inc. — C:Program FilesLogMeInx86RaMaint.exe
O23 — Service: LogMeIn — LogMeIn, Inc. — C:Program FilesLogMeInx86LogMeIn.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: NOD32 Kernel Service (NOD32krn) — Eset — C:Program FilesEsetnod32krn.exe
O23 — Service: ForceWare IP service (nSvcIp) — NVIDIA Corporation — C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcIp.exe
O23 — Service: ForceWare user log service (nSvcLog) — NVIDIA Corporation — C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcLog.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — C:Program FilesCyberLinkShared FilesRichVideo.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: StarWind iSCSI Service (StarWindService) — Rocket Division Software — C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindService.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 12083 bytes

======Scheduled tasks folder======

C:WINDOWStasksAppleSoftwareUpdate.job
C:WINDOWStasksRealUpgradeLogonTaskS-1-5-21-682003330-706699826-2147153767-1004.job
C:WINDOWStasksRealUpgradeScheduledTaskS-1-5-21-682003330-706699826-2147153767-1004.job
C:WINDOWStasksUser_Feed_Synchronization-{2AA7D6F2-3497-4F7B-BA4B-B70E52283A21}.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — C:PROGRA~1DOWNLO~1dmiehlp.dll [2007-07-20 152064]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — c:program filesgooglegoogletoolbar1.dll [2008-04-23 2403392]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — DM Bar — C:Program FilesDownload Masterdmbar.dll [2007-11-26 180224]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — &Google — c:program filesgooglegoogletoolbar1.dll [2008-04-23 2403392]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2009-03-25 3697952]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«High Definition Audio Property Page Shortcut»=C:WINDOWSsystem32HDAShCut.exe [2004-10-27 61952]
«SoundMAXPnP»=C:Program FilesAnalog DevicesCoresmax4pnp.exe [2005-05-20 925696]
«SoundMAX»=C:Program FilesAnalog DevicesSoundMAXSmax4.exe [2005-09-07 716800]
«CloneCDTray»=C:Program FilesSlySoftCloneCDCloneCDTray.exe [2006-09-28 57344]
«nod32kui»=C:Program FilesEsetnod32kui.exe [2057-04-28 917504]
«RemoteControl»=C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2006-12-06 69216]
«LanguageShortcut»=C:Program FilesCyberLinkPowerDVDLanguageLanguage.exe [2006-12-05 54832]
«WinampAgent»=C:Program FilesWinampwinampa.exe [2007-02-13 35328]
«BluetoothAuthenticationAgent»=bthprops.cpl,,BluetoothAuthenticationAgent []
«Device Detector»=DevDetect.exe -autorun []
«QuickTime Task»=C:Program FilesQuickTimeqttask.exe [2007-06-29 286720]
«iTunesHelper»=C:Program FilesiTunesiTunesHelper.exe [2007-08-15 271672]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2008-10-15 39792]
«SunJavaUpdateSched»=C:Program FilesJavajre6binjusched.exe [2009-10-11 149280]
«TkBellExe»=C:Program FilesCommon FilesRealUpdate_OBrealsched.exe [2010-03-30 202256]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2004-08-18 15360]
«Download Master»=C:Program FilesDownload Masterdmaster.exe [2008-01-25 3280896]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregATICCC]
C:Program FilesATI TechnologiesATI.ACECLIStart.exe [2006-09-25 90112]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregLogMeIn GUI]
C:Program FilesLogMeInx86LogMeInSystray.exe [2007-04-17 63048]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSecurity Central]
C:Program FilesSecurity CentralSecurity Central.exe []

C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
BlueSoleil.lnk — C:Program FilesIVT CorporationBlueSoleilBlueSoleil.exe
InterVideo WinCinema Manager.lnk — C:Program FilesInterVideoCommonBinWinCinemaMgr.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWSsystem32Ati2evxx.dll [2006-12-17 110592]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyLMIinit]
C:WINDOWSsystem32LMIinit.dll [2007-05-25 63040]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWgaLogon]
C:WINDOWSsystem32WgaLogon.dll [2006-06-27 3584]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2006-05-09 52224]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{0CB68AD9-FF66-3E63-636B-B693E62F6236}»=C:Program FilesInternet Explorerromdrivers.dll []

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetwork{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«NoInternetOpenWith «=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«NoSMHelp»=1
«NoSMConfigurePrograms»=1
«Start_NotifyNewApps»=0

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

======List of files/folders created in the last 1 months======

2057-04-28 20:49:04 —-D—- C:Program FilesEset
2057-04-28 20:49:04 —-A—- C:WINDOWSsystem32imon.dll
2010-04-30 21:15:41 —-A—- C:WINDOWSsystem32X6qKGFp.exe
2010-04-30 21:12:02 —-D—- C:_OTM
2010-04-30 20:39:05 —-A—- C:WINDOWSsystem32jKz79rC.exe
2010-04-30 13:47:05 —-A—- C:WINDOWSsystem32EZSkBj6.exe
2010-04-30 13:05:37 —-A—- C:WINDOWSsystem32KoujmHt.exe
2010-04-30 01:06:01 —-A—- C:WINDOWSsystem32gYveWEO.exe
2010-04-29 13:21:13 —-A—- C:WINDOWSsystem32iOn7UTN.exe
2010-04-29 01:49:14 —-A—- C:WINDOWSsystem32ZFyZXvJ.exe
2010-04-29 01:48:49 —-A—- C:WINDOWSsystem32fifTCIV.exe
2010-04-28 22:11:08 —-D—- C:Program Filestrend micro
2010-04-28 22:11:07 —-D—- C:rsit
2010-04-28 21:57:55 —-A—- C:WINDOWSsystem32rv0OJDR.exe
2010-04-28 15:40:54 —-A—- C:WINDOWSsystem32lKK4rN8.exe
2010-04-28 15:33:41 —-A—- C:WINDOWSsystem32PyOrpAo.exe
2010-04-28 13:23:29 —-A—- C:WINDOWSsystem32MzVjI85.exe
2010-04-28 13:16:38 —-A—- C:WINDOWSsystem32xXL73Bz.exe
2010-04-28 13:12:53 —-A—- C:WINDOWSsystem323QXrWwo.exe
2010-04-28 11:58:08 —-A—- C:WINDOWSsystem32HW5kgYN.exe
2010-04-28 11:43:58 —-A—- C:WINDOWSsystem32UF28wkT.exe
2010-04-28 11:35:49 —-A—- C:WINDOWSsystem32DW8pHPk.exe
2010-04-28 01:41:00 —-A—- C:WINDOWSsystem32Fvmk6Al.exe
2010-04-27 21:53:06 —-A—- C:WINDOWSsystem32YvkFdRh.exe
2010-04-27 21:50:59 —-D—- C:Documents and SettingsОтец и матьApplication DataYandex
2010-04-27 21:50:56 —-D—- C:Program FilesYandex
2010-04-27 21:50:46 —-HD—- C:WINDOWSmsdownld.tmp
2010-04-27 21:49:57 —-N—- C:WINDOWSsystem32spmsg.dll
2010-04-27 21:48:43 —-HDC—- C:WINDOWSie8
2010-04-27 21:40:22 —-A—- C:WINDOWSsystem32Chwcklt.exe
2010-04-27 21:11:05 —-A—- C:WINDOWSsystem32xghtOXC.exe
2010-04-27 21:04:26 —-A—- C:Program FilesCommon Fileskeylog.txt
2010-04-27 21:04:25 —-A—- C:WINDOWSsystem32fd1IpJq.exe
2010-04-27 21:03:44 —-A—- C:WINDOWSsystem32f3f3c839.exe
2010-04-27 21:03:32 —-A—- C:WINDOWSsystem32d5067e85.exe

======List of files/folders modified in the last 1 months======

2010-04-30 21:28:49 —-D—- C:Temp
2010-04-30 21:19:18 —-D—- C:WINDOWSHelp
2010-04-30 21:19:18 —-D—- C:Program FilesWinRAR
2010-04-30 21:15:41 —-D—- C:WINDOWSsystem32
2010-04-30 21:08:22 —-A—- C:WINDOWSNeroDigital.ini
2010-04-30 20:38:39 —-D—- C:WINDOWSPrefetch
2010-04-30 15:38:34 —-A—- C:WINDOWSSchedLgU.Txt
2010-04-30 14:42:40 —-D—- C:Program FilesCommon Files
2010-04-30 14:14:08 —-A—- C:WINDOWSntbtlog.txt
2010-04-30 00:04:54 —-D—- C:Program FilesLogMeIn
2010-04-28 22:11:08 —-RD—- C:Program Files
2010-04-28 13:28:50 —-D—- C:WINDOWSsystem32CatRoot2
2010-04-27 21:52:49 —-D—- C:WINDOWS
2010-04-27 21:52:10 —-HD—- C:WINDOWSinf
2010-04-27 21:52:10 —-D—- C:WINDOWSsystem32ru-ru
2010-04-27 21:52:10 —-D—- C:WINDOWSMedia
2010-04-27 21:52:10 —-D—- C:Program FilesInternet Explorer
2010-04-27 21:50:02 —-D—- C:WINDOWSsystem32dllcache
2010-04-27 21:49:57 —-D—- C:WINDOWSTemp
2010-04-27 21:41:09 —-D—- C:Documents and SettingsОтец и матьApplication DataMozilla
2010-04-27 21:41:00 —-D—- C:Program FilesMozilla Firefox
2010-04-14 11:41:14 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2010-04-01 23:28:51 —-D—- C:Downloads

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;Драйвер AMD процессора; C:WINDOWSsystem32DRIVERSAmdK8.sys [2005-03-09 43008]
R1 prodrv05;StarForce Protection Environment Driver v5; C:WINDOWSSystem32driversprodrv05.sys [2002-12-26 53568]
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2004-08-18 12032]
R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B}; ??C:Program FilesCyberLinkPowerDVD00.fcl []
R2 AMON;AMON; ??C:WINDOWSsystem32driversamon.sys []
R2 ElbyCDIO;ElbyCDIO Driver; C:WINDOWSSystem32DriversElbyCDIO.sys [2006-12-26 15440]
R2 LMIInfo;LogMeIn Kernel Information Provider; ??C:Program FilesLogMeInx86RaInfo.sys []
R2 LMIRfsDriver;LogMeIn Remote File System Driver; ??C:WINDOWSsystem32driversLMIRfsDriver.sys []
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:WINDOWSsystem32driversADIHdAud.sys [2005-10-05 141312]
R3 AEAudioService;AEAudio Service; C:WINDOWSsystem32driversAEAudio.sys [2005-03-04 127872]
R3 ati2mtag;ati2mtag; C:WINDOWSsystem32DRIVERSati2mtag.sys [2006-12-17 1918464]
R3 BlueletAudio;Bluetooth Audio Service; C:WINDOWSsystem32DRIVERSblueletaudio.sys [2005-05-31 20480]
R3 BT;Bluetooth PAN Network Adapter; C:WINDOWSsystem32DRIVERSbtnetdrv.sys [2005-04-30 10804]
R3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:WINDOWSSystem32Driversbtcusb.sys [2005-04-06 23000]
R3 BTHidEnum;Bluetooth HID Enumerator; C:WINDOWSsystem32DRIVERSvbtenum.sys [2005-04-30 11860]
R3 ElbyCDFL;ElbyCDFL; C:WINDOWSSystem32DriversElbyCDFL.sys [2006-12-26 34760]
R3 GEARAspiWDM;GEARAspiWDM; C:WINDOWSSystem32DriversGEARAspiWDM.sys [2006-09-19 15664]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2004-10-27 138240]
R3 lmimirr;lmimirr; C:WINDOWSsystem32DRIVERSlmimirr.sys [2007-04-17 10144]
R3 MTsensor;ATK0110 ACPI UTILITY; C:WINDOWSsystem32DRIVERSASACPI.sys [2004-08-13 5810]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:WINDOWSsystem32DRIVERSNVENETFD.sys [2006-06-29 57856]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:WINDOWSsystem32DRIVERSnvnetbus.sys [2006-06-29 20480]
R3 pcouffin;VSO Software pcouffin; C:WINDOWSSystem32Driverspcouffin.sys [2007-04-28 47360]
R3 pfc;Padus ASPI Shell; C:WINDOWSsystem32driverspfc.sys [2007-05-07 10368]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:WINDOWSSystem32DriversRootMdm.sys [2004-08-18 5888]
R3 SenFiltService;SenFilt Service; C:WINDOWSsystem32driversSenfilt.sys [2005-10-10 393088]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2004-08-18 26624]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2004-08-18 57600]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2004-08-18 17024]
R3 usbstor;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-18 26496]
R3 vaxscsi;vaxscsi; C:WINDOWSSystem32Driversvaxscsi.sys [2007-04-28 223128]
R3 VComm;Virtual Serial port driver; C:WINDOWSsystem32DRIVERSVComm.sys [2004-10-19 61312]
R3 VcommMgr;Bluetooth VComm Manager Service; C:WINDOWSSystem32DriversVcommMgr.sys [2005-03-25 82148]
S3 BthEnum;Драйвер блока запроса Bluetooth; C:WINDOWSsystem32DRIVERSBthEnum.sys [2004-08-03 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:WINDOWSsystem32DRIVERSbthpan.sys [2004-08-03 100992]
S3 BTHPORT;Драйвер порта Bluetooth; C:WINDOWSSystem32DriversBTHport.sys [2004-08-17 274688]
S3 BTHUSB;Драйвер порта USB радиомодуля Bluetooth; C:WINDOWSSystem32DriversBTHUSB.sys [2004-08-03 18944]
S3 CCDECODE;Closed Caption декодер; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2004-08-03 17024]
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:WINDOWSsystem32driversHdAudio.sys [2004-10-27 145920]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWSsystem32DRIVERSNdisIP.sys [2004-08-03 10880]
S3 RFCOMM;Устройство Bluetooth (протокол RFCOMM TDI); C:WINDOWSsystem32DRIVERSrfcomm.sys [2004-08-03 59648]
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2004-08-03 15360]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2004-08-04 31616]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2004-08-03 15104]
S3 usbvideo;USB-видеоустройство (WDM); C:WINDOWSSystem32Driversusbvideo.sys [2004-08-04 78464]
S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2004-08-03 19328]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2006-04-11 82944]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2006-04-11 87808]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []
S4 LMIRfsClientNP;LMIRfsClientNP; C:WINDOWSsystem32driversLMIRfsClientNP.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe [2007-08-15 106496]
R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSsystem32Ati2evxx.exe [2006-12-17 434176]
R2 BlueSoleil Hid Service;BlueSoleil Hid Service; C:Program FilesIVT CorporationBlueSoleilBTNtService.exe [2005-04-06 110592]
R2 BthServ;Bluetooth Support Service; C:WINDOWSsystem32svchost.exe [2004-08-18 14336]
R2 ForcewareWebInterface;Forceware Web Interface; C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe [2006-04-13 20543]
R2 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2009-10-11 153376]
R2 LMIMaint;LogMeIn Maintenance Service; C:Program FilesLogMeInx86RaMaint.exe [2007-05-25 112200]
R2 LogMeIn;LogMeIn; C:Program FilesLogMeInx86LogMeIn.exe [2007-04-17 63040]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-19 322120]
R2 NOD32krn;NOD32 Kernel Service; C:Program FilesEsetnod32krn.exe [2057-04-28 495616]
R2 nSvcIp;ForceWare IP service; C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcIp.exe [2006-06-29 131131]
R2 nSvcLog;ForceWare user log service; C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcLog.exe [2006-06-29 65599]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:Program FilesCyberLinkShared FilesRichVideo.exe [2005-08-08 167936]
R2 StarWindService;StarWind iSCSI Service; C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindService.exe [2005-04-02 217600]
R3 iPod Service;Сервис iPod; C:Program FilesiPodbiniPodService.exe [2007-08-15 501048]
S2 ATI Smart;ATI Smart; C:WINDOWSsystem32ati2sgag.exe [2006-12-20 520192]
S3 Adobe LM Service;Adobe LM Service; C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe [2007-04-28 72704]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 gusvc;Google Updater Service; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2008-04-23 138168]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media PlayerWMPNetwk.exe [2006-05-09 823808]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2004-08-18 14336]

EOF
30 апреля, 2010 в 5:30 пп #29121
jurisprudens
Participant
- Темы:3
- Сообщений:20
А info.txt он почему-то не создал!!!
30 апреля, 2010 в 7:39 пп #29122
Helper
Participant
- Темы:19
- Сообщений:712
Пуск-выполнить:
C:Program Filestrend microОтец и мать.exe
Нажать OK.
В главном окне программы нужно нажать «Do a system scan only»
В открывшемся логе сканирования поставить галочки напротив указанных строк и нажать кнопку «Fix Checked»
Строки фиксить эти:
```
F2 - REG:system.ini: UserInit=C:WINDOWSsystem32userinit.exe,C:WINDOWSsystem32d5067e85.exe,C:WINDOWSsystem32f3f3c839.exe,\?globalrootsystemrootsystem32fd1IpJq.exe,
```
Скачайте OTM by OldTimer и сохраните на рабочий стол.
Запустите OTM (в ОС Windows Vista необходимо запускать через правую кн. мыши от имени администратора)
временно выключите антивирус, firewall и другое защитное программное обеспечение. Выделите и скопируйте текст ниже (Ctrl+C)
```
:Processes

explorer.exe



:Services



:Files

C:WINDOWSsystem32d5067e85.exe

C:WINDOWSsystem32f3f3c839.exe

C:WINDOWSsystem32rv0OJDR.exe

C:WINDOWSsystem32lKK4rN8.exe

C:WINDOWSsystem32PyOrpAo.exe

C:WINDOWSsystem32MzVjI85.exe

C:WINDOWSsystem32xXL73Bz.exe

C:WINDOWSsystem323QXrWwo.exe

C:WINDOWSsystem32HW5kgYN.exe

C:WINDOWSsystem32UF28wkT.exe

C:WINDOWSsystem32DW8pHPk.exe

C:WINDOWSsystem32Fvmk6Al.exe

C:WINDOWSsystem32YvkFdRh.exe

C:WINDOWSsystem32Chwcklt.exe

C:WINDOWSsystem32xghtOXC.exe

C:WINDOWSsystem32fd1IpJq.exe

C:Program FilesSecurity CentralSecurity Central.exe

C:Program FilesSecurity Central



:Reg

[-HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSecurity Central]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]

"NoSMHelp"=-

"NoSMConfigurePrograms"=-



:Commands

[purity]

[emptytemp]

[start explorer]

[Reboot]
```
В OTM под панелью «Paste Instructions for Items to be Moved» (под желтой панелью) вставьте скопированный текст и нажмите кнопку «MoveIt!».
Компьютер перезагрузится.

После перезагрузки откройте папку «C:_OTMMovedFiles», найдите последний .log файл (лог в формате mmddyyyy_hhmmss.log), откройте и скопируйте текст из него в следующее сообщение.Запакуйте,пожалуйста,C:_OTMoveItMovedFiles(обновится) c паролем virus,закачайте на http://www.depositfiles.com
и дайте ссылку.
Повторите лог RSIT.(log.txt)Каждый лог в отдельное сообщение.Всего 2 сообщения.
1 мая, 2010 в 1:56 пп #29123
jurisprudens
Participant
- Темы:3
- Сообщений:20
Спасибо!

Как и в первый раз, OTM почему-то не перезагрузил компьютер сам — мне пришлось нажимать reset.

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
No active process named :Services was found!
No active process named :Files was found!
No active process named C:WINDOWSsystem32d5067e85.exe was found!
No active process named C:WINDOWSsystem32f3f3c839.exe was found!
No active process named C:WINDOWSsystem32rv0OJDR.exe was found!
No active process named C:WINDOWSsystem32lKK4rN8.exe was found!
No active process named C:WINDOWSsystem32PyOrpAo.exe was found!
No active process named C:WINDOWSsystem32MzVjI85.exe was found!
No active process named C:WINDOWSsystem32xXL73Bz.exe was found!
No active process named C:WINDOWSsystem323QXrWwo.exe was found!
No active process named C:WINDOWSsystem32HW5kgYN.exe was found!
No active process named C:WINDOWSsystem32UF28wkT.exe was found!
No active process named C:WINDOWSsystem32DW8pHPk.exe was found!
No active process named C:WINDOWSsystem32Fvmk6Al.exe was found!
No active process named C:WINDOWSsystem32YvkFdRh.exe was found!
No active process named C:WINDOWSsystem32Chwcklt.exe was found!
No active process named C:WINDOWSsystem32xghtOXC.exe was found!
No active process named C:WINDOWSsystem32fd1IpJq.exe was found!
No active process named C:Program FilesSecurity CentralSecurity Central.exe was found!
No active process named C:Program FilesSecurity Central was found!
No active process named :Reg was found!
No active process named [-HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSecurity Central] was found!
No active process named [-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersPersistentRoutes] was found!
No active process named [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer] was found!
No active process named «NoSMHelp»=- was found!
No active process named «NoSMConfigurePrograms»=- was found!
No active process named :Commands was found!
No active process named [purity] was found!
No active process named [emptytemp] was found!
No active process named [start explorer] was found!
No active process named [Reboot] was found!

OTM by OldTimer — Version 3.1.10.0 log created on 05012010_174847
1 мая, 2010 в 1:57 пп #29124
jurisprudens
Participant
- Темы:3
- Сообщений:20
Ссылка: http://depositfiles.com/files/2xmamye4b
1 мая, 2010 в 1:59 пп #29125
jurisprudens
Participant
- Темы:3
- Сообщений:20
С RSIT:

Logfile of random’s system information tool 1.06 (written by random/random)
Run by Отец и мать at 2010-05-01 17:59:08
Microsoft Windows XP Professional Service Pack 2
System drive C: has 78 GB (51%) free of 153 GB
Total RAM: 511 MB (20% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:59:14, on 01.05.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:Program FilesAnalog DevicesCoresmax4pnp.exe
C:Program FilesAnalog DevicesSoundMAXSmax4.exe
C:Program FilesSlySoftCloneCDCloneCDTray.exe
C:Program FilesEsetnod32kui.exe
C:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:Program FilesWinampwinampa.exe
C:WINDOWSsystem32rundll32.exe
C:Program FilesCommon FilesACD SystemsENDevDetect.exe
C:Program FilesiTunesiTunesHelper.exe
C:Program FilesJavajre6binjusched.exe
C:Program FilesCommon FilesRealUpdate_OBrealsched.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesDownload Masterdmaster.exe
C:Program FilesIVT CorporationBlueSoleilBlueSoleil.exe
C:Program FilesInterVideoCommonBinWinCinemaMgr.exe
C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe
C:Program FilesIVT CorporationBlueSoleilBTNtService.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe
C:Program FilesJavajre6binjqs.exe
C:Program FilesLogMeInx86RaMaint.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe
C:Program FilesLogMeInx86LogMeIn.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:Program FilesEsetnod32krn.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcIp.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcLog.exe
C:Program FilesCyberLinkShared FilesRichVideo.exe
C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindService.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesiPodbiniPodService.exe
C:WINDOWSsystem32wbemwmiapsrv.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Documents and SettingsОтец и матьРабочий столRSIT.exe
C:Program Filestrend microОтец и мать.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.yandex.ru/?clid=48084
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://mail.ru/
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 — HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
F2 — REG:system.ini: UserInit=C:WINDOWSsystem32userinit.exe,C:WINDOWSsystem32d5067e85.exe,C:WINDOWSsystem32f3f3c839.exe,\?globalrootsystemrootsystem32fd1IpJq.exe,
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — C:PROGRA~1DOWNLO~1dmiehlp.dll
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — c:program filesgooglegoogletoolbar1.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 — Toolbar: DM Bar — {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — C:Program FilesDownload Masterdmbar.dll
O3 — Toolbar: &Google — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — c:program filesgooglegoogletoolbar1.dll
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O4 — HKLM..Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 — HKLM..Run: [SoundMAXPnP] C:Program FilesAnalog DevicesCoresmax4pnp.exe
O4 — HKLM..Run: [SoundMAX] «C:Program FilesAnalog DevicesSoundMAXSmax4.exe» /tray
O4 — HKLM..Run: [CloneCDTray] «C:Program FilesSlySoftCloneCDCloneCDTray.exe» /s
O4 — HKLM..Run: [nod32kui] «C:Program FilesEsetnod32kui.exe» /WAITSERVICE
O4 — HKLM..Run: [RemoteControl] «C:Program FilesCyberLinkPowerDVDPDVDServ.exe»
O4 — HKLM..Run: [LanguageShortcut] «C:Program FilesCyberLinkPowerDVDLanguageLanguage.exe»
O4 — HKLM..Run: [WinampAgent] C:Program FilesWinampwinampa.exe
O4 — HKLM..Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 — HKLM..Run: [Device Detector] DevDetect.exe -autorun
O4 — HKLM..Run: [QuickTime Task] «C:Program FilesQuickTimeqttask.exe» -atboottime
O4 — HKLM..Run: [iTunesHelper] «C:Program FilesiTunesiTunesHelper.exe»
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 8.0ReaderReader_sl.exe»
O4 — HKLM..Run: [SunJavaUpdateSched] «C:Program FilesJavajre6binjusched.exe»
O4 — HKLM..Run: [TkBellExe] «C:Program FilesCommon FilesRealUpdate_OBrealsched.exe» -osboot
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [Download Master] C:Program FilesDownload Masterdmaster.exe -autorun
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User ‘Default user’)
O4 — .DEFAULT User Startup: Adobe Gamma.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe (User ‘Default user’)
O4 — Global Startup: BlueSoleil.lnk = ?
O4 — Global Startup: InterVideo WinCinema Manager.lnk = C:Program FilesInterVideoCommonBinWinCinemaMgr.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~1OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — C:Program FilesDownload Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — C:Program FilesDownload Masterdmie.htm
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~1OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {c95fe080-8f5d-11d2-a20b-00aa003c157a} — C:WINDOWSsystem32shdocvw.dll
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O16 — DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) — http://www.miniclip.com/games/ricochet-lost-worlds/en/ReflexiveWebGameLoader.cab
O16 — DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) — http://download.divx.com/player/DivXBrowserPlugin.cab
O16 — DPF: {D1548A26-B8F6-4E86-AE74-E7062CCC2E2A} (igLoader Content on Demand) — http://www.miniclip.com/igloader/igloader.CAB
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 — DPF: {DF9C24D1-030E-49ED-5EB5-D6610086C313} (ChatRepublicPlayer ActiveX) — http://www.miniclip.com/superstar_racing/ChatRepublicPlayer.cab
O17 — HKLMSystemCCSServicesTcpip..{FCA83090-03C5-415F-B86D-3BA17B14F1B3}: NameServer = 212.188.4.10,195.34.32.116
O23 — Service: Adobe LM Service — Adobe Systems — C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe
O23 — Service: Apple Mobile Device — Apple, Inc. — C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — C:WINDOWSsystem32Ati2evxx.exe
O23 — Service: ATI Smart — Unknown owner — C:WINDOWSsystem32ati2sgag.exe
O23 — Service: BlueSoleil Hid Service — Unknown owner — C:Program FilesIVT CorporationBlueSoleilBTNtService.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Forceware Web Interface (ForcewareWebInterface) — Apache Software Foundation — C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe
O23 — Service: Google Updater Service (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: Сервис iPod (iPod Service) — Apple Inc. — C:Program FilesiPodbiniPodService.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — C:Program FilesJavajre6binjqs.exe
O23 — Service: LogMeIn Maintenance Service (LMIMaint) — LogMeIn, Inc. — C:Program FilesLogMeInx86RaMaint.exe
O23 — Service: LogMeIn — LogMeIn, Inc. — C:Program FilesLogMeInx86LogMeIn.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: NOD32 Kernel Service (NOD32krn) — Eset — C:Program FilesEsetnod32krn.exe
O23 — Service: ForceWare IP service (nSvcIp) — NVIDIA Corporation — C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcIp.exe
O23 — Service: ForceWare user log service (nSvcLog) — NVIDIA Corporation — C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcLog.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — C:Program FilesCyberLinkShared FilesRichVideo.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: StarWind iSCSI Service (StarWindService) — Rocket Division Software — C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindService.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 12083 bytes

======Scheduled tasks folder======

C:WINDOWStasksAppleSoftwareUpdate.job
C:WINDOWStasksRealUpgradeLogonTaskS-1-5-21-682003330-706699826-2147153767-1004.job
C:WINDOWStasksRealUpgradeScheduledTaskS-1-5-21-682003330-706699826-2147153767-1004.job
C:WINDOWStasksUser_Feed_Synchronization-{2AA7D6F2-3497-4F7B-BA4B-B70E52283A21}.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — C:PROGRA~1DOWNLO~1dmiehlp.dll [2007-07-20 152064]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — c:program filesgooglegoogletoolbar1.dll [2008-04-23 2403392]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — DM Bar — C:Program FilesDownload Masterdmbar.dll [2007-11-26 180224]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — &Google — c:program filesgooglegoogletoolbar1.dll [2008-04-23 2403392]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2009-03-25 3697952]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«High Definition Audio Property Page Shortcut»=C:WINDOWSsystem32HDAShCut.exe [2004-10-27 61952]
«SoundMAXPnP»=C:Program FilesAnalog DevicesCoresmax4pnp.exe [2005-05-20 925696]
«SoundMAX»=C:Program FilesAnalog DevicesSoundMAXSmax4.exe [2005-09-07 716800]
«CloneCDTray»=C:Program FilesSlySoftCloneCDCloneCDTray.exe [2006-09-28 57344]
«nod32kui»=C:Program FilesEsetnod32kui.exe [2057-04-28 917504]
«RemoteControl»=C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2006-12-06 69216]
«LanguageShortcut»=C:Program FilesCyberLinkPowerDVDLanguageLanguage.exe [2006-12-05 54832]
«WinampAgent»=C:Program FilesWinampwinampa.exe [2007-02-13 35328]
«BluetoothAuthenticationAgent»=bthprops.cpl,,BluetoothAuthenticationAgent []
«Device Detector»=DevDetect.exe -autorun []
«QuickTime Task»=C:Program FilesQuickTimeqttask.exe [2007-06-29 286720]
«iTunesHelper»=C:Program FilesiTunesiTunesHelper.exe [2007-08-15 271672]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2008-10-15 39792]
«SunJavaUpdateSched»=C:Program FilesJavajre6binjusched.exe [2009-10-11 149280]
«TkBellExe»=C:Program FilesCommon FilesRealUpdate_OBrealsched.exe [2010-03-30 202256]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2004-08-18 15360]
«Download Master»=C:Program FilesDownload Masterdmaster.exe [2008-01-25 3280896]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregATICCC]
C:Program FilesATI TechnologiesATI.ACECLIStart.exe [2006-09-25 90112]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregLogMeIn GUI]
C:Program FilesLogMeInx86LogMeInSystray.exe [2007-04-17 63048]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSecurity Central]
C:Program FilesSecurity CentralSecurity Central.exe []

C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
BlueSoleil.lnk — C:Program FilesIVT CorporationBlueSoleilBlueSoleil.exe
InterVideo WinCinema Manager.lnk — C:Program FilesInterVideoCommonBinWinCinemaMgr.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWSsystem32Ati2evxx.dll [2006-12-17 110592]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyLMIinit]
C:WINDOWSsystem32LMIinit.dll [2007-05-25 63040]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWgaLogon]
C:WINDOWSsystem32WgaLogon.dll [2006-06-27 3584]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2006-05-09 52224]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{0CB68AD9-FF66-3E63-636B-B693E62F6236}»=C:Program FilesInternet Explorerromdrivers.dll []

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetwork{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«NoInternetOpenWith «=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«NoSMHelp»=1
«NoSMConfigurePrograms»=1
«Start_NotifyNewApps»=0

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

======List of files/folders created in the last 1 months======

2057-04-28 20:49:04 —-D—- C:Program FilesEset
2057-04-28 20:49:04 —-A—- C:WINDOWSsystem32imon.dll
2010-05-01 17:52:46 —-A—- C:WINDOWSsystem32omINUws.exe
2010-05-01 17:45:03 —-A—- C:WINDOWSsystem32wLEGB2G.exe
2010-04-30 21:15:41 —-A—- C:WINDOWSsystem32X6qKGFp.exe
2010-04-30 21:12:02 —-D—- C:_OTM
2010-04-30 20:39:05 —-A—- C:WINDOWSsystem32jKz79rC.exe
2010-04-30 13:47:05 —-A—- C:WINDOWSsystem32EZSkBj6.exe
2010-04-30 13:05:37 —-A—- C:WINDOWSsystem32KoujmHt.exe
2010-04-30 01:06:01 —-A—- C:WINDOWSsystem32gYveWEO.exe
2010-04-29 13:21:13 —-A—- C:WINDOWSsystem32iOn7UTN.exe
2010-04-29 01:49:14 —-A—- C:WINDOWSsystem32ZFyZXvJ.exe
2010-04-29 01:48:49 —-A—- C:WINDOWSsystem32fifTCIV.exe
2010-04-28 22:11:08 —-D—- C:Program Filestrend micro
2010-04-28 22:11:07 —-D—- C:rsit
2010-04-28 21:57:55 —-A—- C:WINDOWSsystem32rv0OJDR.exe
2010-04-28 15:40:54 —-A—- C:WINDOWSsystem32lKK4rN8.exe
2010-04-28 15:33:41 —-A—- C:WINDOWSsystem32PyOrpAo.exe
2010-04-28 13:23:29 —-A—- C:WINDOWSsystem32MzVjI85.exe
2010-04-28 13:16:38 —-A—- C:WINDOWSsystem32xXL73Bz.exe
2010-04-28 13:12:53 —-A—- C:WINDOWSsystem323QXrWwo.exe
2010-04-28 11:58:08 —-A—- C:WINDOWSsystem32HW5kgYN.exe
2010-04-28 11:43:58 —-A—- C:WINDOWSsystem32UF28wkT.exe
2010-04-28 11:35:49 —-A—- C:WINDOWSsystem32DW8pHPk.exe
2010-04-28 01:41:00 —-A—- C:WINDOWSsystem32Fvmk6Al.exe
2010-04-27 21:53:06 —-A—- C:WINDOWSsystem32YvkFdRh.exe
2010-04-27 21:50:59 —-D—- C:Documents and SettingsОтец и матьApplication DataYandex
2010-04-27 21:50:56 —-D—- C:Program FilesYandex
2010-04-27 21:50:46 —-HD—- C:WINDOWSmsdownld.tmp
2010-04-27 21:49:57 —-N—- C:WINDOWSsystem32spmsg.dll
2010-04-27 21:48:43 —-HDC—- C:WINDOWSie8
2010-04-27 21:40:22 —-A—- C:WINDOWSsystem32Chwcklt.exe
2010-04-27 21:11:05 —-A—- C:WINDOWSsystem32xghtOXC.exe
2010-04-27 21:04:26 —-A—- C:Program FilesCommon Fileskeylog.txt
2010-04-27 21:04:25 —-A—- C:WINDOWSsystem32fd1IpJq.exe
2010-04-27 21:03:44 —-A—- C:WINDOWSsystem32f3f3c839.exe
2010-04-27 21:03:32 —-A—- C:WINDOWSsystem32d5067e85.exe

======List of files/folders modified in the last 1 months======

2010-05-01 17:58:30 —-D—- C:Temp
2010-05-01 17:52:46 —-D—- C:WINDOWSsystem32
2010-05-01 15:22:45 —-D—- C:WINDOWSPrefetch
2010-05-01 02:09:48 —-A—- C:WINDOWSSchedLgU.Txt
2010-05-01 00:09:24 —-D—- C:Program FilesLogMeIn
2010-04-30 21:19:18 —-D—- C:WINDOWSHelp
2010-04-30 21:19:18 —-D—- C:Program FilesWinRAR
2010-04-30 21:08:22 —-A—- C:WINDOWSNeroDigital.ini
2010-04-30 14:42:40 —-D—- C:Program FilesCommon Files
2010-04-30 14:14:08 —-A—- C:WINDOWSntbtlog.txt
2010-04-28 22:11:08 —-RD—- C:Program Files
2010-04-28 13:28:50 —-D—- C:WINDOWSsystem32CatRoot2
2010-04-27 21:52:49 —-D—- C:WINDOWS
2010-04-27 21:52:10 —-HD—- C:WINDOWSinf
2010-04-27 21:52:10 —-D—- C:WINDOWSsystem32ru-ru
2010-04-27 21:52:10 —-D—- C:WINDOWSMedia
2010-04-27 21:52:10 —-D—- C:Program FilesInternet Explorer
2010-04-27 21:50:02 —-D—- C:WINDOWSsystem32dllcache
2010-04-27 21:49:57 —-D—- C:WINDOWSTemp
2010-04-27 21:41:09 —-D—- C:Documents and SettingsОтец и матьApplication DataMozilla
2010-04-27 21:41:00 —-D—- C:Program FilesMozilla Firefox
2010-04-14 11:41:14 —-A—- C:WINDOWSsystem32PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;Драйвер AMD процессора; C:WINDOWSsystem32DRIVERSAmdK8.sys [2005-03-09 43008]
R1 prodrv05;StarForce Protection Environment Driver v5; C:WINDOWSSystem32driversprodrv05.sys [2002-12-26 53568]
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2004-08-18 12032]
R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B}; ??C:Program FilesCyberLinkPowerDVD00.fcl []
R2 AMON;AMON; ??C:WINDOWSsystem32driversamon.sys []
R2 ElbyCDIO;ElbyCDIO Driver; C:WINDOWSSystem32DriversElbyCDIO.sys [2006-12-26 15440]
R2 LMIInfo;LogMeIn Kernel Information Provider; ??C:Program FilesLogMeInx86RaInfo.sys []
R2 LMIRfsDriver;LogMeIn Remote File System Driver; ??C:WINDOWSsystem32driversLMIRfsDriver.sys []
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:WINDOWSsystem32driversADIHdAud.sys [2005-10-05 141312]
R3 AEAudioService;AEAudio Service; C:WINDOWSsystem32driversAEAudio.sys [2005-03-04 127872]
R3 ati2mtag;ati2mtag; C:WINDOWSsystem32DRIVERSati2mtag.sys [2006-12-17 1918464]
R3 BlueletAudio;Bluetooth Audio Service; C:WINDOWSsystem32DRIVERSblueletaudio.sys [2005-05-31 20480]
R3 BT;Bluetooth PAN Network Adapter; C:WINDOWSsystem32DRIVERSbtnetdrv.sys [2005-04-30 10804]
R3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:WINDOWSSystem32Driversbtcusb.sys [2005-04-06 23000]
R3 BTHidEnum;Bluetooth HID Enumerator; C:WINDOWSsystem32DRIVERSvbtenum.sys [2005-04-30 11860]
R3 ElbyCDFL;ElbyCDFL; C:WINDOWSSystem32DriversElbyCDFL.sys [2006-12-26 34760]
R3 GEARAspiWDM;GEARAspiWDM; C:WINDOWSSystem32DriversGEARAspiWDM.sys [2006-09-19 15664]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2004-10-27 138240]
R3 lmimirr;lmimirr; C:WINDOWSsystem32DRIVERSlmimirr.sys [2007-04-17 10144]
R3 MTsensor;ATK0110 ACPI UTILITY; C:WINDOWSsystem32DRIVERSASACPI.sys [2004-08-13 5810]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:WINDOWSsystem32DRIVERSNVENETFD.sys [2006-06-29 57856]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:WINDOWSsystem32DRIVERSnvnetbus.sys [2006-06-29 20480]
R3 pcouffin;VSO Software pcouffin; C:WINDOWSSystem32Driverspcouffin.sys [2007-04-28 47360]
R3 pfc;Padus ASPI Shell; C:WINDOWSsystem32driverspfc.sys [2007-05-07 10368]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:WINDOWSSystem32DriversRootMdm.sys [2004-08-18 5888]
R3 SenFiltService;SenFilt Service; C:WINDOWSsystem32driversSenfilt.sys [2005-10-10 393088]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2004-08-18 26624]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2004-08-18 57600]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2004-08-18 17024]
R3 usbstor;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-18 26496]
R3 vaxscsi;vaxscsi; C:WINDOWSSystem32Driversvaxscsi.sys [2007-04-28 223128]
R3 VComm;Virtual Serial port driver; C:WINDOWSsystem32DRIVERSVComm.sys [2004-10-19 61312]
R3 VcommMgr;Bluetooth VComm Manager Service; C:WINDOWSSystem32DriversVcommMgr.sys [2005-03-25 82148]
S3 BthEnum;Драйвер блока запроса Bluetooth; C:WINDOWSsystem32DRIVERSBthEnum.sys [2004-08-03 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:WINDOWSsystem32DRIVERSbthpan.sys [2004-08-03 100992]
S3 BTHPORT;Драйвер порта Bluetooth; C:WINDOWSSystem32DriversBTHport.sys [2004-08-17 274688]
S3 BTHUSB;Драйвер порта USB радиомодуля Bluetooth; C:WINDOWSSystem32DriversBTHUSB.sys [2004-08-03 18944]
S3 CCDECODE;Closed Caption декодер; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2004-08-03 17024]
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:WINDOWSsystem32driversHdAudio.sys [2004-10-27 145920]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWSsystem32DRIVERSNdisIP.sys [2004-08-03 10880]
S3 RFCOMM;Устройство Bluetooth (протокол RFCOMM TDI); C:WINDOWSsystem32DRIVERSrfcomm.sys [2004-08-03 59648]
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2004-08-03 15360]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2004-08-04 31616]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2004-08-03 15104]
S3 usbvideo;USB-видеоустройство (WDM); C:WINDOWSSystem32Driversusbvideo.sys [2004-08-04 78464]
S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2004-08-03 19328]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2006-04-11 82944]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2006-04-11 87808]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []
S4 LMIRfsClientNP;LMIRfsClientNP; C:WINDOWSsystem32driversLMIRfsClientNP.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe [2007-08-15 106496]
R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSsystem32Ati2evxx.exe [2006-12-17 434176]
R2 BlueSoleil Hid Service;BlueSoleil Hid Service; C:Program FilesIVT CorporationBlueSoleilBTNtService.exe [2005-04-06 110592]
R2 BthServ;Bluetooth Support Service; C:WINDOWSsystem32svchost.exe [2004-08-18 14336]
R2 ForcewareWebInterface;Forceware Web Interface; C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe [2006-04-13 20543]
R2 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2009-10-11 153376]
R2 LMIMaint;LogMeIn Maintenance Service; C:Program FilesLogMeInx86RaMaint.exe [2007-05-25 112200]
R2 LogMeIn;LogMeIn; C:Program FilesLogMeInx86LogMeIn.exe [2007-04-17 63040]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-19 322120]
R2 NOD32krn;NOD32 Kernel Service; C:Program FilesEsetnod32krn.exe [2057-04-28 495616]
R2 nSvcIp;ForceWare IP service; C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcIp.exe [2006-06-29 131131]
R2 nSvcLog;ForceWare user log service; C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcLog.exe [2006-06-29 65599]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:Program FilesCyberLinkShared FilesRichVideo.exe [2005-08-08 167936]
R2 StarWindService;StarWind iSCSI Service; C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindService.exe [2005-04-02 217600]
R3 iPod Service;Сервис iPod; C:Program FilesiPodbiniPodService.exe [2007-08-15 501048]
S2 ATI Smart;ATI Smart; C:WINDOWSsystem32ati2sgag.exe [2006-12-20 520192]
S3 Adobe LM Service;Adobe LM Service; C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe [2007-04-28 72704]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 gusvc;Google Updater Service; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2008-04-23 138168]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media PlayerWMPNetwk.exe [2006-05-09 823808]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2004-08-18 14336]

EOF
1 мая, 2010 в 2:48 пп #29126
Helper
Participant
- Темы:19
- Сообщений:712
Пуск-выполнить:
C:Program Filestrend microОтец и мать.exe
Нажать OK.
В главном окне программы нужно нажать «Do a system scan only»
В открывшемся логе сканирования поставить галочки напротив указанных строк и нажать кнопку «Fix Checked»,потом нажать
Да
Строку фиксить эту:
```
F2 - REG:system.ini: UserInit=C:WINDOWSsystem32userinit.exe,C:WINDOWSsystem32d5067e85.exe,C:WINDOWSsystem32f3f3c839.exe,\?globalrootsystemrootsystem32fd1IpJq.exe,
```
Скачайте это файл:
http://gjf.hotbox.ru/mink.pif

http://www.spyware-ru.com/forums/forum/lechim-kompyutery/instruktsii-i-poleznaya-informatsiya/?&t=1401&p=7633#p7633
Вот так нужно скрипт выполнять.
Выполните такой скрипт:
```
begin

SearchRootkit(true, true);

SetAVZGuardStatus(True);

DeleteFile('C:Program FilesSecurity CentralSecurity Central.exe');

DeleteFile('C:WINDOWSsystem32fd1IpJq.exe');

DeleteFile('C:WINDOWSsystem32xghtOXC.exe');

DeleteFile('C:WINDOWSsystem32Chwcklt.exe');

DeleteFile('C:WINDOWSsystem32Chwcklt.exe');

DeleteFile('C:WINDOWSsystem32YvkFdRh.exe');

DeleteFile('C:WINDOWSsystem32Fvmk6Al.exe');

DeleteFile('C:WINDOWSsystem32DW8pHPk.exe');

DeleteFile('C:WINDOWSsystem32UF28wkT.exe');

DeleteFile('C:WINDOWSsystem32HW5kgYN.exe');

DeleteFile('C:WINDOWSsystem323QXrWwo.exe');

DeleteFile('C:WINDOWSsystem32xXL73Bz.exe');

DeleteFile('C:WINDOWSsystem32MzVjI85.exe');

DeleteFile('C:WINDOWSsystem32PyOrpAo.exe');

DeleteFile('C:WINDOWSsystem32lKK4rN8.exe');

DeleteFile('C:WINDOWSsystem32rv0OJDR.exe');

DeleteFile('C:WINDOWSsystem32f3f3c839.exe');

DeleteFile('C:WINDOWSsystem32d5067e85.exe');

DeleteFileMask('C:Program FilesSecurity Central' , '*.*', true);

DeleteDirectory('C:Program FilesSecurity Central');

BC_ImportDeletedList;

ExecuteSysClean;

BC_Activate;

ExecuteRepair(6);

ExecuteRepair(20);

RebootWindows(true);

end.
```
ПК перезагрузится!Повторите лог RSIT(log.txt).
Автор

Сообщения