Не запускается даже безопасный режим

[G-Gurda]

Вчера у меня появилась какая-то ошибка я решил перезагрузить комп и теперь ничего не запускается вообще, без нажатий F8 появляется страница с выбором режима- безопасный режим, БР с загрузкой сетевых драйверов, БР с поддержкой командной строки, запуск последней удачной конфигурации и просто запуск винды, при выборе последних двух просто происходит перезагрузка с возвратом на эту страницу выбора режима, при выборе всех остальных зависает черный экран с курсором и ничего не происходит. При выборе БР мне предлагает прекратить или продолжить загрузку файлов SPTD.SYS и затем точно такой же вопрос оносительно d347bus.sys. Что делать чтоб хоть в БР запуститься?)) Помогите пожалуйста

[CERBER]

Здравствуйте!
Добро пожаловать на Spyware-ru форум.
SPTD.SYS — принадлежит программе-эмулятору дисковода Daemon tools
d347bus.sys — это драйвер из той же программы

Варианты:
1-е) посмотрите эту тему: Чёрный экран Windows XP… решение
2-е) воспользоваться загрузочным диском Live CD, это Операционная Система загружается с диска, более подробно можно посмотреть в НЭТе

P.S. На сколько я понял, у вас проблема с Даимон тулс.

[Admin]

Здравствуйте, добро пожаловать на Spyware-ru форум.

ри выборе БР мне предлагает прекратить или продолжить загрузку файлов SPTD.SYS и затем точно такой же вопрос оносительно d347bus.sys.

Чтобы вы не выбирали результат одинаков ? Чёрный экран ?

[G-Gurda]

Совершенно верно.Ну или перезагрузка до того же места в двух других случаях.

[G-Gurda]

Так я поставил заново винду. Но теперь у меня ужастно всё притормаживает особенно firefox.
Как мне быть?

Logfile of random’s system information tool 1.06 (written by random/random)
Run by user at 2010-02-19 21:15:54
Microsoft Windows XP Professional Service Pack 3
System drive H: has 2 GB (2%) free of 101 GB
Total RAM: 2046 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:16:41, on 19.02.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
H:WINDOWSSystem32smss.exe
H:WINDOWSsystem32winlogon.exe
H:WINDOWSsystem32services.exe
H:WINDOWSsystem32lsass.exe
H:WINDOWSsystem32Ati2evxx.exe
H:WINDOWSsystem32svchost.exe
H:WINDOWSSystem32svchost.exe
H:WINDOWSsystem32svchost.exe
H:WINDOWSsystem32Ati2evxx.exe
H:WINDOWSsystem32spoolsv.exe
H:WINDOWSExplorer.EXE
H:WINDOWSTEMPZfx.exe
H:WINDOWSTEMPZfw.exe
H:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe
H:Program FilesAcronisTrueImageTrueImageMonitor.exe
H:Program FilesCommon FilesAcronisSchedule2schedhlp.exe
H:Program FilesGIGABYTEGESTGEST.exe
H:WINDOWSsystem32driversCbfgm.exe
H:Program FilesAdobeReader 9.0ReaderReader_sl.exe
H:Program FilesCommon FilesNokiaMPlatformNokiaMServer.exe
H:Program FilesNokiaNokia MusicNokiaMusic.exe
H:Program FilesJavajre6binjusched.exe
H:WINDOWSRTHDCPL.EXE
H:Program FilesATI TechnologiesATI.ACECore-StaticMOM.exe
H:WINDOWSacp.exe
H:WINDOWSsystem32ctfmon.exe
H:WINDOWSsystem32msvmcls64.exe
H:Program FilesCommon FilesAcronisSchedule2schedul2.exe
H:WINDOWSsystem32CNAB4RPK.EXE
H:WINDOWSsystem32bgsvcgen.exe
H:Program FilesJavajre6binjqs.exe
H:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
H:WINDOWSsystem32svchost.exe
H:Program FilesEsetnod32krn.exe
H:WINDOWSsystem32svchost.exe
H:Program FilesATI TechnologiesATI.ACECore-Staticccc.exe
H:Program FilesGIGABYTEGESTGSvr.exe
H:WINDOWSsystem32wuauclt.exe
H:WINDOWSsystem32dwwin.exe
H:Program FilesMozilla Firefoxfirefox.exe
H:Documents and SettingsuserРабочий столRSIT.exe
H:WINDOWSccdrive32.exe
H:WINDOWSjjdrive32.exe
H:Program Filestrend microuser.exe
H:Program FilesSkypeToolbarsSharedSkypeNames.exe

R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
F2 — REG:system.ini: UserInit=H:WINDOWSsystem32userinit.exe,H:Documents and Settingsuserhskjh.exe s
O1 — Hosts: 195.82.147.147 pornolab.net static.pornolab.net
O1 — Hosts: 195.82.147.120 bt.pornolab.net
O1 — Hosts: 195.82.147.147 pornolab.net
O1 — Hosts: 195.82.147.147 static.pornolab.net
O1 — Hosts: 195.82.147.147 bt.pornolab.net
O2 — BHO: CometCursor Class — {1678F7E1-C422-11D0-AD7D-00400515CAAA} — H:WINDOWSsystem32COMET.DLL
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — H:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: RealPlayer Download and Record Plugin for Internet Explorer — {3049C3E9-B461-4BC5-8870-4C09146192CA} — H:Program FilesRealRealPlayerrpbrowserrecordplugin.dll (file missing)
O2 — BHO: Java(tm) Plug-In SSV Helper — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — H:Program FilesJavajre6binssv.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — H:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — H:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O4 — HKLM..Run: [GEST] H:Program FilesGIGABYTEGESTRUN.exe
O4 — HKLM..Run: [JMB36X IDE Setup] H:WINDOWSRaidToolxInsIDE.exe
O4 — HKLM..Run: [36X Raid Configurer] H:WINDOWSsystem32xRaidSetup.exe boot
O4 — HKLM..Run: [Acronis True Image Monitor] «H:Program FilesAcronisTrueImageTrueImageMonitor.exe»
O4 — HKLM..Run: [Acronis Scheduler2 Service] «H:Program FilesCommon FilesAcronisSchedule2schedhlp.exe»
O4 — HKLM..Run: [NeroFilterCheck] H:WINDOWSsystem32NeroCheck.exe
O4 — HKLM..Run: [nod32kui] «H:Program FilesEsetnod32kui.exe» /WAITSERVICE
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «H:Program FilesAdobeReader 9.0ReaderReader_sl.exe»
O4 — HKLM..Run: [advap32] «H:Documents and SettingsuserРабочий стол.//..//drwvas.exe» /r
O4 — HKLM..Run: [QuickTime Task] «H:Program FilesQuickTimeqttask.exe» -atboottime
O4 — HKLM..Run: [NokiaMServer] H:Program FilesCommon FilesNokiaMPlatformNokiaMServer /watchfiles
O4 — HKLM..Run: [Nokia FastStart] «H:Program FilesNokiaNokia MusicNokiaMusic.exe» /command:faststart
O4 — HKLM..Run: [SunJavaUpdateSched] «H:Program FilesJavajre6binjusched.exe»
O4 — HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 — HKLM..Run: [StartCCC] «H:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe» MSRun
O4 — HKLM..Run: [UserFaultCheck] %systemroot%system32dumprep 0 -u
O4 — HKLM..Run: [Microsoft Driver Setup] H:WINDOWSccdrive32.exe
O4 — HKLM..Run: [Windows System Info Serivce] acp.exe
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [MS Virtual CLS] H:WINDOWSsystem32msvmcls64.exe
O4 — HKLM..Run: [Microsoft Update Setup] H:WINDOWSjjdrive32.exe
O4 — HKCU..Run: [CTFMON.EXE] H:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [RGSC] H:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe /silent
O4 — HKCU..Run: [Autochartist] H:Program FilesAutochartistAutochartist_FXCLUB2.exe
O4 — HKCU..Run: [EA Core] «H:Program FilesElectronic ArtsEADMCore.exe» -silent
O4 — HKCU..Run: [RealJukeboxSystray] H:Program FilesRealRealJukeboxtsystray.exe
O4 — HKCU..Run: [AlcoholAutomount] «H:Program FilesAlcohol SoftAlcohol 120axcmd.exe» /automount
O4 — HKCU..Run: [AlSrvN] H:Program FilesAlcohol SoftAlcohol 120PluginsHelperAlSrvN.exe
O4 — HKCU..Run: [ICQ] «H:Program FilesICQ6.5ICQ.exe» silent
O4 — HKCU..Run: [Skype] «H:Program FilesSkypePhoneSkype.exe» /nosplash /minimized
O4 — HKCU..Run: [Steam] «H:Program FilesSteamSteam.exe» -silent
O4 — HKCU..Run: [psuu4] C:RECYCLERS-1-5-21-0243556031-888888379-781863308-1455psyu44.exe
O4 — HKCU..Run: [psysnew] C:RECYCLERS-1-5-21-0243556031-888888379-781863308-1455psysnew.exe
O4 — HKLM..PoliciesExplorerRun: [Microsoft Driver Setup] H:WINDOWSccdrive32.exe
O4 — HKLM..PoliciesExplorerRun: [Microsoft Update Setup] H:WINDOWSjjdrive32.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Startup: FIFA 10 Registration.lnk = D:Program FilesEA SportsFIFA 10SupportEAregister.exe
O4 — Startup: Need for Speed™ Undercover — регистрация.lnk = D:Need for Speed UndercoverSupportEAregister.exe
O4 — Global Startup: Nokia Ovi Suite.lnk = H:Program FilesNokiaOviSuiteRunLauncher.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://H:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — H:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} — (no file)
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — H:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — H:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — H:Program FilesICQ6.5ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — H:Program FilesICQ6.5ICQ.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — H:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — H:Program FilesMessengermsmsgs.exe
O16 — DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) — http://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
O17 — HKLMSystemCCSServicesTcpip..{641DB3C5-8660-49BE-A22B-9D95FE173AA3}: NameServer = 91.123.16.120 91.189.240.28
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — H:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 — Winlogon Notify: WinCtrl32 — WinCtrl32.dll (file missing)
O23 — Service: ABBYY FineReader 9.0 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) — ABBYY (BIT Software) — H:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe
O23 — Service: Acronis Scheduler2 Service (AcrSch2Svc) — Acronis — H:Program FilesCommon FilesAcronisSchedule2schedul2.exe
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — H:WINDOWSsystem32Ati2evxx.exe
O23 — Service: ATI Smart — Unknown owner — H:WINDOWSsystem32ati2sgag.exe
O23 — Service: B’s Recorder GOLD Library General Service (bgsvcgen) — B.H.A Corporation — H:WINDOWSsystem32bgsvcgen.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — H:WINDOWSsystem32services.exe
O23 — Service: GEST Service for program management. (GEST Service) — Unknown owner — H:Program FilesGIGABYTEGESTGSvr.exe
O23 — Service: Служба Google Update (gupdate1ca1104ee4fa4be) (gupdate1ca1104ee4fa4be) — Google Inc. — H:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — H:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — H:WINDOWSsystem32imapi.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — H:Program FilesJavajre6binjqs.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — H:WINDOWSsystem32mnmsrvc.exe
O23 — Service: NOD32 Kernel Service (NOD32krn) — Eset — H:Program FilesEsetnod32krn.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — H:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — H:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — H:WINDOWSSystem32SCardSvr.exe
O23 — Service: ServiceLayer — Nokia. — H:Program FilesNokiaPC Connectivity SolutionServiceLayer.exe
O23 — Service: StarWind AE Service (StarWindServiceAE) — Unknown owner — H:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe (file missing)
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — H:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — H:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — H:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 11163 bytes

======Scheduled tasks folder======

H:WINDOWStasksAppleSoftwareUpdate.job
H:WINDOWStasksGoogleUpdateTaskMachineCore.job
H:WINDOWStasksGoogleUpdateTaskMachineUA.job
H:WINDOWStasks{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
H:WINDOWStasks{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{1678F7E1-C422-11D0-AD7D-00400515CAAA}]
CometCursor Class — H:WINDOWSsystem32COMET.DLL [2009-10-11 96768]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — H:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer — H:Program FilesRealRealPlayerrpbrowserrecordplugin.dll []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper — H:Program FilesJavajre6binssv.dll [2009-06-09 320920]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — H:Program FilesJavajre6binjp2ssv.dll [2009-06-09 34816]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — H:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2009-06-09 73728]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«GEST»=H:Program FilesGIGABYTEGESTRUN.exe [2007-12-14 236040]
«JMB36X IDE Setup»=H:WINDOWSRaidToolxInsIDE.exe [2007-03-20 36864]
«36X Raid Configurer»=H:WINDOWSsystem32xRaidSetup.exe [2007-08-29 1966080]
«Acronis True Image Monitor»=H:Program FilesAcronisTrueImageTrueImageMonitor.exe [2008-08-26 417536]
«Acronis Scheduler2 Service»=H:Program FilesCommon FilesAcronisSchedule2schedhlp.exe [2008-08-26 61440]
«NeroFilterCheck»=H:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
«nod32kui»=H:Program FilesEsetnod32kui.exe [2008-08-26 949376]
«Adobe Reader Speed Launcher»=H:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2008-06-12 34672]
«advap32″=H:Documents and SettingsuserРабочий стол.//..//drwvas.exe /r []
«QuickTime Task»=H:Program FilesQuickTimeqttask.exe [2008-09-06 413696]
«NokiaMServer»=H:Program FilesCommon FilesNokiaMPlatformNokiaMServer /watchfiles []
«Nokia FastStart»=H:Program FilesNokiaNokia MusicNokiaMusic.exe [2008-12-03 2372840]
«SunJavaUpdateSched»=H:Program FilesJavajre6binjusched.exe [2009-06-09 136600]
«KernelFaultCheck»=H:WINDOWSsystem32dumprep 0 -k []
«StartCCC»=H:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2009-04-28 61440]
«UserFaultCheck»=H:WINDOWSsystem32dumprep 0 -u []
«Microsoft Driver Setup»=H:WINDOWSccdrive32.exe [2010-02-19 178695]
«Windows System Info Serivce»=H:WINDOWSacp.exe [2010-02-13 139264]
«RTHDCPL»=H:WINDOWSRTHDCPL.EXE [2007-09-19 16844800]
«Alcmtr»=H:WINDOWSALCMTR.EXE [2005-05-03 69632]
«MS Virtual CLS»=H:WINDOWSsystem32msvmcls64.exe [2010-02-19 206848]
«Microsoft Update Setup»=H:WINDOWSjjdrive32.exe [2010-02-19 178695]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerRun]
«Microsoft Driver Setup»=H:WINDOWSccdrive32.exe [2010-02-19 178695]
«Microsoft Update Setup»=H:WINDOWSjjdrive32.exe [2010-02-19 178695]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=H:WINDOWSsystem32ctfmon.exe [2008-04-15 15360]
«RGSC»=H:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe [2008-12-13 306088]
«Autochartist»=H:Program FilesAutochartistAutochartist_FXCLUB2.exe [2009-05-06 4297216]
«EA Core»=H:Program FilesElectronic ArtsEADMCore.exe -silent []
«RealJukeboxSystray»=H:Program FilesRealRealJukeboxtsystray.exe []
«AlcoholAutomount»=H:Program FilesAlcohol SoftAlcohol 120axcmd.exe [2009-04-24 203928]
«AlSrvN»=H:Program FilesAlcohol SoftAlcohol 120PluginsHelperAlSrvN.exe []
«ICQ»=H:Program FilesICQ6.5ICQ.exe [2009-11-16 172792]
«Skype»=H:Program FilesSkypePhoneSkype.exe [2009-10-09 25623336]
«Steam»=H:Program FilesSteamSteam.exe [2010-01-25 1217808]
«psuu4″=C:RECYCLERS-1-5-21-0243556031-888888379-781863308-1455psyu44.exe [2010-02-19 43008]
«psysnew»=C:RECYCLERS-1-5-21-0243556031-888888379-781863308-1455psysnew.exe [2010-02-19 43008]

H:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
Nokia Ovi Suite.lnk — H:Program FilesNokiaOviSuiteRunLauncher.exe

H:Documents and SettingsuserГлавное менюПрограммыАвтозагрузка
FIFA 10 Registration.lnk — D:Program FilesEA SportsFIFA 10SupportEAregister.exe
Need for Speed™ Undercover — регистрация.lnk — D:Need for Speed UndercoverSupportEAregister.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
H:WINDOWSsystem32Ati2evxx.dll [2009-04-29 155648]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWinCtrl32]
WinCtrl32.dll []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — H:WINDOWSsystem32WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinad00.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWincf66.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinct77.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWingq55.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinjk33.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinjv66.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinpo00.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinwq55.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinxi66.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinyf00.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinad00.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWincf66.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinct77.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWingq55.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinjk33.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinjv66.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinpo00.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinwq55.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinxi66.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinyf00.sys]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«H:Program FilesGIGABYTEGESTrun.exe»=»H:Program FilesGIGABYTEGESTrun.exe:*:Enabled:update»
«H:Program FilesQIPqip.exe»=»H:Program FilesQIPqip.exe:*:Enabled:Quiet Internet Pager»
«H:WINDOWSsystem32qeulb.exe»=»H:WINDOWSsystem32qeulb.exe:*:Enabled:ENABLE»
«H:Program FilesAkella GamesTest Drive UnlimitedTestDriveUnlimited.exe»=»H:Program FilesAkella GamesTest Drive UnlimitedTestDriveUnlimited.exe:*:Enabled:Test Drive Unlimited»
«H:WINDOWSsystem32PnkBstrA.exe»=»H:WINDOWSsystem32PnkBstrA.exe:*:Enabled:PnkBstrA»
«H:WINDOWSsystem32PnkBstrB.exe»=»H:WINDOWSsystem32PnkBstrB.exe:*:Enabled:PnkBstrB»
«H:Documents and Settingsuserhskjh.exe»=»H:Documents and Settingsuserhskjh.exe:*:Enabled:ENABLE»
«H:WINDOWSsystem32CNAB4RPK.EXE»=»H:WINDOWSsystem32CNAB4RPK.EXE:*:Disabled:Canon LBP2900 RPC Server Process»
«H:Program FilesTVUPlayerTVUPlayer.exe»=»H:Program FilesTVUPlayerTVUPlayer.exe:*:Enabled:TVUPlayer Component»
«H:Program FilesInternet ExplorerIEXPLORE.EXE»=»H:Program FilesInternet ExplorerIEXPLORE.EXE:*:Enabled:Internet Explorer»
«H:Program FilesSopCastSopCast.exe»=»H:Program FilesSopCastSopCast.exe:*:Enabled:SopCast Main Application»
«H:Program FilesSopCastadvSopAdver.exe»=»H:Program FilesSopCastadvSopAdver.exe:*:Enabled:SopCast Adver»
«H:Program FilesTVAntsTvants.exe»=»H:Program FilesTVAntsTvants.exe:*:Enabled:TVAnts»
«H:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbinxrEngine.exe»=»H:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbinxrEngine.exe:*:Enabled:С.Т.А.Л.К.Е.Р. — Чистое Небо (CLI)»
«H:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbindedicatedxrEngine.exe»=»H:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbindedicatedxrEngine.exe:*:Enabled:С.Т.А.Л.К.Е.Р. — Чистое Небо (SRV)»
«C:1243124TestDriveUnlimited.exe»=»C:1243124TestDriveUnlimited.exe:*:Enabled:Test Drive Unlimited»
«D:Electronic ArtsDead SpaceDead Space.exe»=»D:Electronic ArtsDead SpaceDead Space.exe:*:Enabled:Dead Space ™»
«D:White GoldXenus.exe»=»D:White GoldXenus.exe:*:Disabled:Executable»
«H:Program FilesSmall RocketsRed Ace Squadronacenet_server_release.exe»=»H:Program FilesSmall RocketsRed Ace Squadronacenet_server_release.exe:*:Enabled:server»
«H:WINDOWSsystem32dplaysvr.exe»=»H:WINDOWSsystem32dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«D:Astrum Online EntertainmentВластелин Колец Онлайнlotroclient.exe»=»D:Astrum Online EntertainmentВластелин Колец Онлайнlotroclient.exe:*:Enabled:lotroclient»
«H:Program FilesuTorrentutorrent.exe»=»H:Program FilesuTorrentutorrent.exe:*:Enabled:µTorrent»
«C:Program FilesSteamsteam.exe»=»C:Program FilesSteamsteam.exe:*:Enabled:Steam»
«D:PCGAMEPRO EVOLUTION SOCCER 2009pes2009.exe»=»D:PCGAMEPRO EVOLUTION SOCCER 2009pes2009.exe:*:Enabled:Pro Evolution Soccer 2009»
«C:Delta Force Xtreme 2 BETADFX2BETA.EXE»=»C:Delta Force Xtreme 2 BETADFX2BETA.EXE:*:Enabled:Delta Force Xtreme 2 BETA»
«C:Delta Force Xtreme 2 BETAUPDATE.EXE»=»C:Delta Force Xtreme 2 BETAUPDATE.EXE:*:Enabled:Delta Force Xtreme 2 BETA»
«H:Program FilesICQ6.5ICQ.exe»=»H:Program FilesICQ6.5ICQ.exe:*:Enabled:ICQ6»
«H:Program FilesElectronic ArtsEADMCore.exe»=»H:Program FilesElectronic ArtsEADMCore.exe:*:Enabled:EA Download Manager»
«H:Program FilesLimeWireLimeWire.exe»=»H:Program FilesLimeWireLimeWire.exe:*:Enabled:LimeWire»
«H:Program FileseMuleemule.exe»=»H:Program FileseMuleemule.exe:*:Enabled:eMule»
«D:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe»=»D:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe:*:Enabled:Rockstar Games Social Club»
«H:FlylinkDC++FlylinkDC.exe»=»H:FlylinkDC++FlylinkDC.exe:*:Enabled:FlylinkDC++»
«H:Program FilesUbisoftTransmission GamesHeroes Over Europeheroes2.exe»=»H:Program FilesUbisoftTransmission GamesHeroes Over Europeheroes2.exe:*:Enabled:heroes2»
«H:Program FilesRealRealPlayerrealplay.exe»=»H:Program FilesRealRealPlayerrealplay.exe:*:Enabled:RealPlayer»
«D:Program FilesPro Evolution Soccer 2010pes2010.exe»=»D:Program FilesPro Evolution Soccer 2010pes2010.exe:*:Enabled:Pro Evolution Soccer 2010»
«D:Rockstar GamesGrand Theft Auto IVLaunchGTAIV.exe»=»D:Rockstar GamesGrand Theft Auto IVLaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV»
«D:Rockstar GamesGrand Theft Auto IVGTAIV.exe»=»D:Rockstar GamesGrand Theft Auto IVGTAIV.exe:*:Enabled:Grand Theft Auto IV»
«H:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe»=»H:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe:*:Enabled:Rockstar Games Social Club»
«H:Program FilesSkypePlugin ManagerskypePM.exe»=»H:Program FilesSkypePlugin ManagerskypePM.exe:*:Enabled:Skype Extras Manager»
«D:Program FilesRockstar GamesGrand Theft Auto IVGTAIV.exe»=»D:Program FilesRockstar GamesGrand Theft Auto IVGTAIV.exe:*:Enabled:Grand Theft Auto IV»
«H:Program FilesSteamSteam.exe»=»H:Program FilesSteamSteam.exe:*:Enabled:Steam»
«D:Сall of Duty Modern Warfare 2iw4mp.exe»=»D:Сall of Duty Modern Warfare 2iw4mp.exe:*:Enabled:iw4mp»
«H:Program FilesSkypePhoneSkype.exe»=»H:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»

======List of files/folders created in the last 1 months======

2010-02-19 21:16:20 —-RSH—- H:WINDOWSjjdrive32.exe
2010-02-19 21:16:05 —-RSH—- H:WINDOWSccdrive32.exe
2010-02-19 21:15:56 —-D—- H:Program Filestrend micro
2010-02-19 21:15:54 —-D—- H:rsit
2010-02-19 20:31:11 —-A—- H:WINDOWSsystem32msvmcls64.exe
2010-02-19 19:56:03 —-D—- H:WINDOWSPrefetch
2010-02-19 19:51:13 —-A—- H:WINDOWSsystem32wmpns.dll
2010-02-19 19:50:05 —-RAH—- H:WINDOWSsystem32logonui.exe.manifest
2010-02-19 19:22:25 —-A—- H:WINDOWSsystem32spxcoins.dll
2010-02-19 19:22:25 —-A—- H:WINDOWSsystem32irclass.dll
2010-02-19 19:22:07 —-RA—- H:WINDOWSSET66.tmp
2010-02-19 19:22:00 —-RA—- H:WINDOWSSET5A.tmp
2010-02-19 19:21:58 —-RA—- H:WINDOWSSET57.tmp
2010-02-13 22:35:20 —-A—- H:WINDOWSsystem3212.exe
2010-02-13 22:22:42 —-A—- H:WINDOWSsystem320.exe
2010-02-13 21:06:29 —-A—- H:WINDOWSpothead.txt
2010-02-13 21:06:24 —-A—- H:WINDOWSsystem3233.exe
2010-02-13 21:06:11 —-RSH—- H:WINDOWSacp.exe
2010-02-13 21:06:08 —-A—- H:WINDOWSsystem32dh.exe
2010-02-13 21:00:30 —-A—- H:WINDOWSsystem3246.exe
2010-02-13 20:36:30 —-A—- H:WINDOWSsystem3241.exe
2010-02-13 20:06:21 —-A—- H:WINDOWSsystem32sshnas21.dll
2010-02-09 17:34:45 —-D—- H:Documents and SettingsuserApplication DataPlayFirst
2010-02-09 17:34:45 —-D—- H:Documents and SettingsAll UsersApplication DataPlayFirst
2010-02-07 20:43:35 —-A—- H:WINDOWSsystem32netprotocol.dll
2010-02-07 16:09:47 —-D—- H:Program FilesBaldaWin Demo
2010-01-31 15:39:00 —-D—- H:Documents and SettingsuserApplication DataEltima Software
2010-01-31 15:37:23 —-D—- H:Program FilesEltima Software
2010-01-27 14:16:14 —-D—- H:Program FilesElectronic Arts
2010-01-25 22:13:02 —-D—- H:Program FilesSteam
2010-01-24 22:38:55 —-D—- H:WINDOWSsystem32AGEIA
2010-01-24 22:38:53 —-D—- H:Program FilesAGEIA Technologies
2010-01-23 13:40:51 —-D—- H:Documents and SettingsuserApplication DataskypePM
2010-01-23 13:29:09 —-D—- H:Documents and SettingsuserApplication DataSkype
2010-01-23 13:27:50 —-D—- H:Program FilesCommon FilesSkype
2010-01-23 13:27:44 —-RD—- H:Program FilesSkype
2010-01-23 13:27:33 —-D—- H:Documents and SettingsAll UsersApplication DataSkype
2010-01-23 11:50:32 —-D—- H:Program FilesGames
2010-01-22 18:42:06 —-D—- H:Program FilesРусская Рыбалка 2.2

======List of files/folders modified in the last 1 months======

2010-02-19 22:19:21 —-SH—- H:boot.ini
2010-02-19 22:18:52 —-D—- H:WINDOWSsystem32Setup
2010-02-19 22:18:52 —-D—- H:WINDOWSsystem
2010-02-19 22:18:50 —-D—- H:WINDOWSHelp
2010-02-19 22:18:46 —-D—- H:WINDOWSl2schemas
2010-02-19 22:18:44 —-D—- H:WINDOWSsystem32usmt
2010-02-19 22:18:37 —-D—- H:WINDOWSAppPatch
2010-02-19 22:18:36 —-D—- H:WINDOWSehome
2010-02-19 22:18:35 —-D—- H:WINDOWSime
2010-02-19 22:18:34 —-RSD—- H:WINDOWSFonts
2010-02-19 22:18:34 —-D—- H:WINDOWSMedia
2010-02-19 22:18:33 —-D—- H:WINDOWSnetwork diagnostic
2010-02-19 22:18:31 —-D—- H:WINDOWSsystem32ru-ru
2010-02-19 22:18:22 —-D—- H:WINDOWSPeerNet
2010-02-19 22:18:09 —-D—- H:WINDOWSsystem32npp
2010-02-19 22:18:03 —-D—- H:WINDOWSmsagent
2010-02-19 22:17:59 —-D—- H:WINDOWSsystem32ru
2010-02-19 22:15:45 —-D—- H:WINDOWSsystem321049
2010-02-19 22:15:34 —-D—- H:WINDOWStwain_32
2010-02-19 22:15:04 —-D—- H:WINDOWSsystem32icsxml
2010-02-19 22:14:43 —-D—- H:WINDOWSsystem32ias
2010-02-19 22:14:40 —-D—- H:WINDOWSsystem321033
2010-02-19 22:13:57 —-D—- H:WINDOWSDriver Cache
2010-02-19 21:16:38 —-D—- H:WINDOWSTemp
2010-02-19 21:16:20 —-D—- H:WINDOWS
2010-02-19 21:16:12 —-D—- H:Program FilesMozilla Firefox
2010-02-19 21:15:56 —-RD—- H:Program Files
2010-02-19 21:14:53 —-D—- H:Program FilesAutochartist
2010-02-19 21:13:41 —-SD—- H:WINDOWSTasks
2010-02-19 21:12:09 —-A—- H:WINDOWSSchedLgU.Txt
2010-02-19 21:11:59 —-D—- H:Documents and SettingsuserApplication DatauTorrent
2010-02-19 21:10:28 —-A—- H:WINDOWSNeroDigital.ini
2010-02-19 21:03:06 —-D—- H:FlylinkDC++
2010-02-19 21:02:37 —-SHD—- H:WINDOWSInstaller
2010-02-19 21:02:13 —-D—- H:Config.Msi
2010-02-19 21:02:12 —-HD—- H:WINDOWSinf
2010-02-19 21:02:12 —-D—- H:WINDOWSsystem32drivers
2010-02-19 20:58:56 —-D—- H:Program FilesTeorex Inpaint
2010-02-19 20:58:55 —-D—- H:Program FilesReal Alternative
2010-02-19 20:58:51 —-D—- H:Program FilesMetaTrader — Alpari
2010-02-19 20:58:50 —-D—- H:Program FilesMessenger
2010-02-19 20:58:49 —-D—- H:Program FilesA-one Video Convertor
2010-02-19 20:58:47 —-D—- H:Program FilesDivX
2010-02-19 20:36:21 —-D—- H:Program FilesAll Office Converter Platinum
2010-02-19 20:31:11 —-D—- H:WINDOWSsystem32
2010-02-19 20:14:49 —-A—- H:WINDOWSsystem32PerfStringBackup.INI
2010-02-19 20:14:03 —-D—- H:WINDOWSRegistration
2010-02-19 20:13:28 —-D—- H:WINDOWSsystem32CatRoot2
2010-02-19 20:13:23 —-A—- H:WINDOWSsetuplog.txt
2010-02-19 19:56:38 —-SHD—- H:System Volume Information
2010-02-19 19:56:38 —-D—- H:WINDOWSsystem32Restore
2010-02-19 19:55:26 —-D—- H:WINDOWSsystem32config
2010-02-19 19:53:46 —-RSHDC—- H:WINDOWSsystem32dllcache
2010-02-19 19:51:45 —-D—- H:WINDOWSsecurity
2010-02-19 19:51:05 —-A—- H:WINDOWSOEWABLog.txt
2010-02-19 19:50:59 —-A—- H:WINDOWSODBCINST.INI
2010-02-19 19:50:08 —-RD—- H:WINDOWSWeb
2010-02-19 19:49:59 —-RAH—- H:WINDOWSsystem32cdplayer.exe.manifest
2010-02-19 19:49:46 —-A—- H:WINDOWSwin.ini
2010-02-19 19:49:40 —-D—- H:WINDOWSsystem32oobe
2010-02-19 19:48:51 —-D—- H:WINDOWSsystem32Com
2010-02-19 19:48:21 —-D—- H:WINDOWSsystem32wbem
2010-02-19 19:23:19 —-D—- H:WINDOWSsystem32CatRoot
2010-02-19 19:22:30 —-A—- H:WINDOWSsystem.ini
2010-02-19 19:22:16 —-ASH—- H:Documents and SettingsAll UsersApplication Datadesktop.ini
2010-02-13 22:35:33 —-RSHD—- H:RECYCLER
2010-02-12 09:10:50 —-D—- H:Documents and SettingsuserApplication DataDivX
2010-02-12 00:30:26 —-D—- H:Новая папка
2010-02-11 14:42:28 —-D—- H:Program FilesuTorrent
2010-02-06 18:54:02 —-HD—- H:Program FilesInstallShield Installation Information
2010-02-06 18:45:43 —-D—- H:WINDOWSsystem32DirectX
2010-02-06 18:45:42 —-RSD—- H:WINDOWSassembly
2010-02-02 13:35:47 —-D—- H:Documents and SettingsuserApplication Datadvdcss
2010-01-31 17:49:43 —-A—- H:WINDOWSntbtlog.txt
2010-01-29 19:54:41 —-SD—- H:Documents and SettingsAll UsersApplication DataMicrosoft
2010-01-29 19:54:39 —-SD—- H:Documents and SettingsuserApplication DataMicrosoft
2010-01-29 19:54:30 —-D—- H:WINDOWSWinSxS
2010-01-24 22:59:20 —-D—- H:Program FilesGamesTopDownloads
2010-01-24 22:38:02 —-D—- H:Program FilesCommon FilesWise Installation Wizard
2010-01-24 16:45:30 —-A—- H:WINDOWSsystem32PnkBstrB.exe
2010-01-23 13:27:50 —-D—- H:Program FilesCommon Files
2010-01-22 18:39:40 —-D—- H:Program FilesРусская Рыбалка Installsoft Edition

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 cdrbsdrv;cdrbsdrv; H:WINDOWSsystem32driverscdrbsdrv.sys [2006-02-20 33408]
R1 intelppm;Драйвер Intel процессора; H:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-15 40704]
R1 nod32drv;nod32drv; H:WINDOWSsystem32driversnod32drv.sys [2008-08-26 15424]
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; H:WINDOWSSystem32driversws2ifsl.sys [2008-04-15 12032]
R2 AMON;AMON; H:WINDOWSsystem32driversamon.sys [2008-08-26 512096]
R2 tifsfilter;Acronis TrueImage FS Filter; H:WINDOWSsystem32DRIVERStifsfilt.sys [2008-08-26 28096]
R3 ati2mtag;ati2mtag; H:WINDOWSsystem32DRIVERSati2mtag.sys [2009-04-29 3643904]
R3 AtiHdmiService;ATI Function Driver for HDMI Service; H:WINDOWSsystem32driversAtiHdmi.sys [2009-04-01 93184]
R3 ET5Drv;ET5Drv; ??H:WINDOWSsystem32DriversET5Drv.sys []
R3 gdrv;gdrv; ??H:WINDOWSgdrv.sys []
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; H:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-15 144384]
R3 HidUsb;Драйвер класса HID Microsoft; H:WINDOWSsystem32DRIVERShidusb.sys [2008-04-15 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); H:WINDOWSsystem32driversRtkHDAud.sys [2007-09-19 4617728]
R3 mouhid;Драйвер мыши HID; H:WINDOWSsystem32DRIVERSmouhid.sys [2008-04-15 12160]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; H:WINDOWSsystem32DRIVERSRtenicxp.sys [2007-12-05 104064]
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); H:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-15 32128]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; H:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-15 30208]
R3 usbhub;USB2 концентратор; H:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbstor;Драйвер запоминающих устройств для USB; H:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-15 26368]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; H:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-15 20608]
S3 nmwcd;Nokia USB Phone Parent; H:WINDOWSsystem32driversccdcmb.sys [2008-05-07 17536]
S3 pccsmcfd;PCCS Mode Change Filter Driver; H:WINDOWSsystem32DRIVERSpccsmcfd.sys [2008-08-26 18816]
S3 usbprint;Класс принтеров Microsoft USB; H:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-14 25856]
S3 usbscan;Драйвер USB-сканера; H:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
S3 Wdf01000;Wdf01000; H:WINDOWSsystem32DRIVERSWdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; H:WINDOWSsystem32DRIVERSwpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; H:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; H:WINDOWSsystem32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service; H:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe [2007-12-06 660768]
R2 AcrSch2Svc;Acronis Scheduler2 Service; H:Program FilesCommon FilesAcronisSchedule2schedul2.exe [2008-08-26 122880]
R2 Ati HotKey Poller;Ati HotKey Poller; H:WINDOWSsystem32Ati2evxx.exe [2009-04-29 602112]
R2 bgsvcgen;B’s Recorder GOLD Library General Service; H:WINDOWSsystem32bgsvcgen.exe [2007-06-15 145504]
R2 JavaQuickStarterService;Java Quick Starter; H:Program FilesJavajre6binjqs.exe [2009-06-09 152984]
R2 MDM;Machine Debug Manager; H:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-19 322120]
R2 Netprotocol;Network Protocol Driver; H:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R2 NOD32krn;NOD32 Kernel Service; H:Program FilesEsetnod32krn.exe [2008-08-26 552064]
R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; H:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; H:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2006-10-20 36864]
R3 GEST Service;GEST Service for program management.; H:Program FilesGIGABYTEGESTGSvr.exe [2007-12-14 47624]
S2 ATI Smart;ATI Smart; H:WINDOWSsystem32ati2sgag.exe [2009-04-28 593920]
S2 gupdate1ca1104ee4fa4be;Служба Google Update (gupdate1ca1104ee4fa4be); H:Program FilesGoogleUpdateGoogleUpdate.exe [2009-07-30 133104]
S2 SSHNAS;SSHNAS; H:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S2 StarWindServiceAE;StarWind AE Service; H:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe []
S3 aspnet_state;ASP.NET State Service; H:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; H:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 IDriverT;InstallDriver Table Manager; H:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; H:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2006-10-30 741376]
S3 ose;Office Source Engine; H:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; H:Program FilesNokiaPC Connectivity SolutionServiceLayer.exe [2008-09-08 575488]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; H:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2006-10-30 122880]

---

EOF

---

И вот еще выдает

info.txt logfile of random’s system information tool 1.06 2010-02-19 21:16:44

======Uninstall list======

—>H:Program FilesDivXDivXConverterUninstall.exe /CONVERTER
—>MsiExec /X{65F1CF63-31E0-450B-96F3-4A88BE7361A6}
—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 H:WINDOWSINFPCHealth.inf
7-Zip 4.65—>»H:Program Files7-ZipUninstall.exe»
ABBYY FineReader 9.0 Professional Edition—>MsiExec.exe /I{F9000000-0001-0000-0000-074957833700}
Acrobat.com—>H:Program FilesCommon FilesAdobe AIRVersions1.0Adobe AIR Application Installer.exe -uninstall com.adobe.mauby 4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
Acrobat.com—>MsiExec.exe /I{77DCDCE3-2DED-62F3-8154-05E745472D07}
Acronis True Image—>H:Program FilesAcronisTrueImageMediaBuilder.exe -uninstall
Adobe AIR—>H:Program FilesCommon FilesAdobe AIRVersions1.0Adobe AIR Updater.exe -arp:uninstall
Adobe AIR—>MsiExec.exe /I{00203668-8170-44A0-BE44-B632FA4D780F}
Adobe Flash Player 10 ActiveX—>H:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Flash Player 10 Plugin—>H:WINDOWSsystem32MacromedFlashuninstall_plugin.exe
Adobe Reader 9—>MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A90000000001}
AGEIA PhysX v7.07.09—>MsiExec.exe /X{65F1CF63-31E0-450B-96F3-4A88BE7361A6}
All Office Converter Platinum 6.2—>»H:Program FilesAll Office Converter Platinumunins000.exe»
A-one Video Convertor 4.47—>»H:Program FilesA-one Video Convertorunins000.exe»
Apple Software Update—>MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
ArtMoney SE v7.31—>»H:Program FilesArtMoneyUninstallunins000.exe»
ATI — Утилита деинсталляции—>H:Program FilesATI TechnologiesUninstallAllAtiCimUn.exe
ATI AVIVO Codecs—>MsiExec.exe /I{2AEB1EAF-9E1C-4361-8562-5AC7AE6AC177}
ATI AVIVO Codecs—>MsiExec.exe /I{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}
ATI Catalyst Control Center—>RunDll32 H:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime91Intel32Ctor.dll,LaunchSetup «H:Program FilesInstallShield Installation Information{055EE59D-217B-43A7-ABFF-507B966405D8}setup.exe» -l0x0
ATI Display Driver—>rundll32 H:WINDOWSsystem32atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI HYDRAVISION—>RunDll32 H:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1ctor.dll,LaunchSetup «H:Program FilesInstallShield Installation Information{3EA9D975-BFDC-4E8E-B88B-0446FBC8CA66}setup.exe»
ATI Parental Control & Encoder—>MsiExec.exe /I{36CDA33B-909B-4719-97D1-C4B99309BDC7}
ATI Problem Report Wizard—>MsiExec.exe /X{5DA6F06A-B389-407B-BF8C-1548767914D8}
BaldaWin Demo—>»H:Program FilesBaldaWin Demounins000.exe»
Call of Duty(R) — World at War(TM) 1.2 Patch—>H:Program FilesInstallShield Installation Information{2BF0AE92-C3BC-4112-9066-1546342B1FAE}setup.exe -runfromtemp -l0x0409
Call of Duty(R) — World at War(TM) 1.4 Patch—>H:Program FilesInstallShield Installation Information{9F01A67B-7D67-482F-9D4F-D5980A440FD4}setup.exe -runfromtemp -l0x0409
Call of Duty(R) — World at War(TM) 1.5 Patch—>H:Program FilesInstallShield Installation Information{C3DC2DF5-EFAC-4055-9010-31F7C545DD9E}setup.exe -runfromtemp -l0x0409
Canon LBP2900—>H:Program FilesCanonPrnUninstallCanon LBP2900CNAB4UN.EXE
Catalyst Control Center — Branding—>MsiExec.exe /I{D3B1C799-CB73-42DE-BA0F-2344793A095C}
Comet Cursor—>H:WINDOWSsystem32csuninst.exe
delete—>D:Сall of Duty Modern Warfare 2Uninstall.exe
DivX Codec—>H:Program FilesDivXDivXCodecUninstall.exe /CODEC
DivX Converter—>H:Program FilesDivXDivXConverterUninstall.exe /CONVERTER
DivX Player—>H:Program FilesDivXDivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters—>H:Program FilesDivXDivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player—>H:Program FilesDivXDivXWebPlayerUninstall.exe /PLUGIN
Dynamic Energy Saver 1.0 B8.0128.1—>RunDll32 H:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime110Intel32Ctor.dll,LaunchSetup «H:Program FilesInstallShield Installation Information{5869CE1E-BC0B-4648-B1AE-6EF4A985590C}setup.exe» -l0x9 -removeonly
EA Download Manager—>H:Program FilesElectronic ArtsEADMUninstall.exe
FLV Player—>»H:WINDOWSFLV Playeruninstall.exe» «/U:H:Program FilesFLV PlayerUninstalluninstall.xml»
Gigabyte Raid Configurer—>RunDll32 H:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime110Intel32Ctor.dll,LaunchSetup «H:Program FilesInstallShield Installation Information{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}SETUP.EXE» -l0x19 -removeonly
Google Chrome—>»H:Program FilesGoogleChromeApplication4.0.249.89Installersetup.exe» —uninstall —system-level
Google Update Helper—>MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
GTA2—>H:WINDOWSIsUn0419.exe -f»H:Program FilesGTA2Uninst.isu»
HD Writer 2.5E for HDC—>H:Program FilesInstallShield Installation Information{095B0246-4EB6-45B9-B1BE-536097A0BDDA}setup.exe -runfromtemp -l0x0009 -removeonly
Heroes of Might and Magic IV—>RunDll32 H:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «D:йцуSetup.exe» -l0x19
HijackThis 2.0.2—>»H:Program Filestrend microHijackThis.exe» /uninstall
ICQ6.5—>»H:Program FilesInstallShield Installation Information{60DE4033-9503-48D1-A483-7846BD217CA9}setup.exe» -runfromtemp -l0x0009 -removeonly
Inpaint 2.0—>»H:Program FilesTeorex Inpaintunins000.exe»
Java(TM) 6 Update 11—>MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
K-Lite Codec Pack 3.1.0 Full—>»H:Program FilesK-Lite Codec Packunins000.exe»
LAVA-Online Client—>MsiExec.exe /I{B8555C88-DC3E-43E0-B300-A142BF0AEDAB}
Light Alloy 4.1—>H:Program FilesLight Alloyuninst.exe
MetaTrader — Alpari 4.00—>»H:Program FilesMetaTrader — AlpariUninstall.exe» «H:Program FilesMetaTrader — Alpariinstall.log»
Microsoft .NET Framework 1.1—>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1—>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Language Pack — RUS—>H:WINDOWSMicrosoft.NETFrameworkv2.0.50727Microsoft .NET Framework 2.0 Language Pack — RUSinstall.exe
Microsoft .NET Framework 2.0—>H:WINDOWSMicrosoft.NETFrameworkv2.0.50727Microsoft .NET Framework 2.0install.exe
Microsoft .NET Framework 3.0 Russian Language Pack—>H:WINDOWSMicrosoft.NETFrameworkv3.0Microsoft .NET Framework 3.0 Russian Language Packsetup.exe
Microsoft .NET Framework 3.0 Russian Language Pack—>MsiExec.exe /X{855B04CC-4F7A-4FBB-B7BA-D965D23F7AD5}
Microsoft .NET Framework 3.0—>H:WINDOWSMicrosoft.NETFrameworkv3.0Microsoft .NET Framework 3.0setup.exe
Microsoft .NET Framework 3.0—>MsiExec.exe /X{15095BF3-A3D7-4DDF-B193-3A496881E003}
Microsoft Games for Windows — LIVE Redistributable—>MsiExec.exe /X{FD052FB9-FE90-4438-B355-15EDC89D8FB1}
Microsoft Office — профессиональный выпуск версии 2003—>MsiExec.exe /I{90110419-6000-11D3-8CFE-0150048383C9}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Visual C++ 2008 Redistributable — x86 9.0.30729.17—>MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Windows Media Video 9 VCM—>RunDll32 advpack.dll,LaunchINFSection H:WINDOWSINFwmv9vcm.inf, Uninstall
Mozilla Firefox (3.5.7)—>H:Program FilesMozilla Firefoxuninstallhelper.exe
MSXML 4.0 SP2 Parser and SDK—>MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
MSXML 6.0 Parser (KB933579)—>MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
Nero 6 Ultra Edition—>H:Program FilesAheadnerouninstallUNNERO.exe /UNINSTALL
Nokia Connectivity Cable Driver—>MsiExec.exe /X{C3F19A5F-35A8-4FDB-A6ED-0F4CE398DA48}
Nokia Download!—>MsiExec.exe /X{D353C323-5E95-4873-9825-9FEC1C8A3794}
Nokia Flashing Cable Driver—>MsiExec.exe /X{A4E0CA0F-1903-440A-9B98-FEA6CB049999}
Nokia Map Loader—>MsiExec.exe /I{03528A01-7E5E-4C5F-94DF-1D8012E969EF}
Nokia Music—>MsiExec.exe /I{9333DA9B-4F8C-4580-88A7-F12D7B10DC2A}
Nokia Ovi Application Installer 6.85.3011—>msiexec /qn /x {42B74521-4706-412A-9A27-AED12B83E886}
Nokia Ovi Application Installer—>MsiExec.exe /I{42B74521-4706-412A-9A27-AED12B83E886}
Nokia Ovi Content Copier 6.85.3011—>msiexec /qn /x {6442DEDF-AC2F-4CBA-85DE-42E459C5006C}
Nokia Ovi Content Copier—>MsiExec.exe /X{6442DEDF-AC2F-4CBA-85DE-42E459C5006C}
Nokia Ovi One Touch Access 6.85.3011—>msiexec /qn /x {4AE48A64-6C6A-4E5A-95FA-55F5131DECF9}
Nokia Ovi One Touch Access—>MsiExec.exe /I{4AE48A64-6C6A-4E5A-95FA-55F5131DECF9}
Nokia Ovi Suite—>MsiExec.exe /I{CCF31747-7D4C-4F77-9FF8-60DA9B49B353}
Nokia Ovi System Utilities 6.85.3011—>msiexec /qn /x {E81A68BF-6F5F-4F20-A2EA-AE429736A017}
Nokia Ovi System Utilities—>MsiExec.exe /X{E81A68BF-6F5F-4F20-A2EA-AE429736A017}
Nokia Photos—>MsiExec.exe /I{AE977FE5-F014-4F1E-83F7-B4FD143B5EEF}
Nokia Software Updater—>MsiExec.exe /X{2FA28330-2028-4033-BD10-425C87EB4D54}
OpenAL—>»H:Program FilesOpenALoalinst.exe» /U
PC Connectivity Solution—>MsiExec.exe /I{83258E90-1F76-4E13-9F60-A0F8ED41E76F}
PowerDVD—>RunDll32 H:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «H:Program FilesInstallShield Installation Information{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}Setup.exe» -uninstall
PRO EVOLUTION SOCCER 2009 v.1.0—>»D:PCGAMEPRO EVOLUTION SOCCER 2009unins000.exe»
PunkBuster Services—>H:WINDOWSsystem32pbsvc.exe -u
QIP 2005 8090—>»H:Program FilesQIPunins000.exe»
QIP 2005 Uninstall—>»H:Program FilesQIPunqip.exe»
QuickTime—>MsiExec.exe /I{8DC42D05-680B-41B0-8878-6C14D24602DB}
Raven Squad—>»D:DVIDEO_TSНовая папка (3)Darkest of Daysunins000.exe»
Real Alternative 2.0.0—>»H:Program FilesReal Alternativeunins000.exe»
RealJukebox—>H:Program FilesRealRealJukeboxUpdaternuninst.exe RealNetworks|RealJukebox|1.0
REALTEK GbE & FE Ethernet PCI-E NIC Driver—>H:Program FilesInstallShield Installation Information{C9BED750-1211-4480-B1A5-718A3BE15525}SETUP.EXE -runfromtemp -l0x0019 -removeonly
Realtek High Definition Audio Driver—>RtlUpd.exe -r -m
Recuva (remove only)—>»H:Program FilesRecuvauninst.exe»
Rockstar Games Social Club—>»H:Program FilesInstallShield Installation Information{08B3869E-D282-424C-9AFC-870E04A4BA14}setup.exe» -runfromtemp -l0x0009 -removeonly
Rumus—>H:Program FilesFxClubRumus2uninstall.exe
Skype web features—>MsiExec.exe /I{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}
Skype™ 4.1—>MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
Steam—>MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
SWF & FLV Player 3.0 (build 3.0.33.5106)—>»H:Program FilesEltima SoftwareSWF & FLV Playerunins000.exe»
TrendCatch FX 4.2—>H:Program FilesTrendCatch L.L.C.TrendCatch FXUninstall.exe
TVUPlayer 2.4.9.1—>H:Program FilesTVUPlayeruninst.exe
VC80CRTRedist — 8.0.50727.762—>MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
VLC media player 0.9.6—>H:Program FilesVideoLANVLCuninstall.exe
Windows Communication Foundation—>MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333}
Windows Media Format 11 runtime—>»H:Program FilesWindows Media Playerwmsetsdk.exe» /UninstallAll
Windows Media Format 11 runtime—>»H:WINDOWS$NtUninstallWMFDist11$spuninstspuninst.exe»
Windows Presentation Foundation Language Pack (RUS)—>MsiExec.exe /X{D83A3DFC-8528-4E31-93DC-0A41C477109C}
Windows Presentation Foundation—>MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Workflow Foundation RU Language Pack—>MsiExec.exe /I{1C7ADED3-C371-40DF-A69D-FE0EA73DC394}
Windows Workflow Foundation—>MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}
WinZip 11.2—>MsiExec.exe /X{CD95F661-A5C4-44F5-A6AA-ECDD91C240B2}
XML Paper Specification Shared Components Language Pack 1.0—>»H:WINDOWS$NtUninstallXPSEPSCLP$spuninstspuninst.exe»
XviD MPEG-4 Codec—>»H:Program FilesXviDUninstXviD.exe»
Антивирусная система NOD32—>H:Program FilesEsetSetupsetup.exe /UNINSTALL
Архиватор WinRAR (только удаление)—>H:Program FilesWinRARuninstall.exe
Интернет помощник MyCentria—>H:Program FilesMyCentriaMyCentriaUninstall.exe
Пакет драйверов Windows — Nokia pccsmcfd (08/22/2008 7.0.0.0)—>H:PROGRA~1DIFX270581355A767BF1dpinst.exe /u H:WINDOWSsystem32DRVSTOREpccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294pccsmcfd.inf

======Hosts File======

195.82.147.147 pornolab.net static.pornolab.net
195.82.147.120 bt.pornolab.net
195.82.147.147 pornolab.net
195.82.147.147 static.pornolab.net
195.82.147.147 bt.pornolab.net

======Security center information======

AV: Антивирусная система Eset NOD32 2.70 (outdated)

======System event log======

Computer Name: HOME5
Event Code: 51
Message: Обнаружена ошибка на устройстве DeviceHarddisk1D во время выполнения операции страничного обмена.

Record Number: 15871
Source Name: Disk
Time Written: 20100208111005.000000+180
Event Type: предупреждение
User:

Computer Name: HOME5
Event Code: 51
Message: Обнаружена ошибка на устройстве DeviceHarddisk1D во время выполнения операции страничного обмена.

Record Number: 15870
Source Name: Disk
Time Written: 20100208110955.000000+180
Event Type: предупреждение
User:

Computer Name: HOME5
Event Code: 51
Message: Обнаружена ошибка на устройстве DeviceHarddisk1D во время выполнения операции страничного обмена.

Record Number: 15869
Source Name: Disk
Time Written: 20100208110945.000000+180
Event Type: предупреждение
User:

Computer Name: HOME5
Event Code: 51
Message: Обнаружена ошибка на устройстве DeviceHarddisk1D во время выполнения операции страничного обмена.

Record Number: 15868
Source Name: Disk
Time Written: 20100208110934.000000+180
Event Type: предупреждение
User:

Computer Name: HOME5
Event Code: 51
Message: Обнаружена ошибка на устройстве DeviceHarddisk1D во время выполнения операции страничного обмена.

Record Number: 15867
Source Name: Disk
Time Written: 20100208110924.000000+180
Event Type: предупреждение
User:

=====Application event log=====

Computer Name: HOME5
Event Code: 1
Message: Nokia M Platform 2.2.72 (NLib 0.8.205)

Nokia M Data Store opened at location «H:Documents and SettingsuserLocal SettingsApplication DataNokiaNokia Data StoreDataBaseMDataStore.db3»

Record Number: 936
Source Name: Nokia M Platform
Time Written: 20091103195548.000000+180
Event Type: информация
User:

Computer Name: HOME5
Event Code: 1
Message: Nokia M Platform 2.2.72 (NLib 0.8.205)

Nokia M Data Store opened at location «H:Documents and SettingsuserLocal SettingsApplication DataNokiaNokia Data StoreDataBaseMDataStore.db3»

Record Number: 935
Source Name: Nokia M Platform
Time Written: 20091103195547.000000+180
Event Type: информация
User:

Computer Name: HOME5
Event Code: 1800
Message: Служба центра обеспечения безопасности Windows запущена.

Record Number: 934
Source Name: SecurityCenter
Time Written: 20091103195530.000000+180
Event Type: информация
User:

Computer Name: HOME5
Event Code: 1
Message: Nokia M Platform 2.2.72 (NLib 0.8.205)

Nokia M Data Store opened at location «h:docume~1userlocals~1applic~1nokianokiad~1ThumbnailDataBaseMDataStore.db3»

Record Number: 933
Source Name: Nokia M Platform
Time Written: 20091103195530.000000+180
Event Type: информация
User:

Computer Name: HOME5
Event Code: 1
Message: Nokia M Platform 2.2.72 (NLib 0.8.205)

Nokia M Data Store opened at location «h:docume~1userlocals~1applic~1nokianokiad~1DataBaseMDataStore.db3»

Record Number: 932
Source Name: Nokia M Platform
Time Written: 20091103195529.000000+180
Event Type: информация
User:

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%system32WBEM;H:Program FilesNokiaPC Connectivity Solution;H:Program FilesATI TechnologiesATI.ACECore-Static;H:Program FilesQuickTimeQTSystem;H:Program FilesCommon FilesDivX Shared
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=6
«PROCESSOR_IDENTIFIER»=x86 Family 6 Model 23 Stepping 6, GenuineIntel
«PROCESSOR_REVISION»=1706
«NUMBER_OF_PROCESSORS»=2
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP
«CLASSPATH»=.;H:Program FilesQuickTimeQTSystemQTJava.zip
«QTJAVA»=H:Program FilesQuickTimeQTSystemQTJava.zip
«RGSCLauncher»=H:Program FilesRockstar GamesRockstar Games Social Club
«RGSC»=H:Program FilesRockstar GamesRockstar Games Social Club1_0_0_0

---

EOF

---

[G-Gurda]

Люди! Помогите пожалуйста. У меня нет вирусов уже никаких винду 2 раза переустановил а инет на любом браузере нереально тормозит а чаще не грузится вообще (хотя торренты залетают с обычно приличной скоростью) и тут не в поставщике услуг дело. И вот еще какой момент- нажмаю C-A-D у меня яко,ы запущены какие-то проги FSD и CSA и еще у меня ошибка- предотвращение выполнения данных- имя- Generic host for Win32 Servicies.

[Admin]

Судя по RSIT логам, ваш компьютер заражён множеством троянов. Тему я перенёс в соответствующий раздел.

Запустите HijackThis, для этого кликните Пуск, Выполнить, введите

H:Program Filestrend microuser.exe

и нажмите Enter.
Откроется главное меню программы HijackThis.
Кликните по кнопке Do a system scan only.
Далее отметьте галочкой (слева) следующие строки, если они присутствуют:

F2 - REG:system.ini: UserInit=H:WINDOWSsystem32userinit.exe,H:Documents and Settingsuserhskjh.exe s

O1 - Hosts: 195.82.147.147 pornolab.net static.pornolab.net

O1 - Hosts: 195.82.147.120 bt.pornolab.net

O1 - Hosts: 195.82.147.147 pornolab.net

O1 - Hosts: 195.82.147.147 static.pornolab.net

O1 - Hosts: 195.82.147.147 bt.pornolab.net

O4 - HKLM..Run: [advap32] "H:Documents and SettingsuserРабочий стол.//..//drwvas.exe" /r

O4 - HKLM..Run: [Microsoft Driver Setup] H:WINDOWSccdrive32.exe

O4 - HKLM..Run: [Windows System Info Serivce] acp.exe

O4 - HKLM..Run: [MS Virtual CLS] H:WINDOWSsystem32msvmcls64.exe

O4 - HKLM..Run: [Microsoft Update Setup] H:WINDOWSjjdrive32.exe

O4 - HKCU..Run: [psuu4] C:RECYCLERS-1-5-21-0243556031-888888379-781863308-1455psyu44.exe

O4 - HKCU..Run: [psysnew] C:RECYCLERS-1-5-21-0243556031-888888379-781863308-1455psysnew.exe

O4 - HKLM..PoliciesExplorerRun: [Microsoft Driver Setup] H:WINDOWSccdrive32.exe

O4 - HKLM..PoliciesExplorerRun: [Microsoft Update Setup] H:WINDOWSjjdrive32.exe

O20 - Winlogon Notify: WinCtrl32 - WinCtrl32.dll (file missing)

Закройте все запущенные программы (включая InternetExplorer) и окна Windows.
Кликните по кнопке Fix checked и подтвердите свои действия выбрав YES.
Перезагрузите компьютер.

Скачайте OTM by OldTimer кликнув по этой ссылке.
Запустите OTM и в большое поле ввода (заголовок этого поля выделен желтым цветом) скопируйте следующий текст.

:reg

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinad00.sys]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWincf66.sys]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinct77.sys]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWingq55.sys]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinjk33.sys]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinjv66.sys]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinpo00.sys]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinwq55.sys]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinxi66.sys]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinyf00.sys]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinad00.sys]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWincf66.sys]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinct77.sys]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWingq55.sys]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinjk33.sys]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinjv66.sys]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinpo00.sys]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinwq55.sys]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinxi66.sys]

[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinyf00.sys]



:files

H:WINDOWStasks{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

H:WINDOWStasks{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job



:Commands

[emptytemp]

[Reboot]

Проверьте вставленный скрипт, если слева перед директивами появились пробелы, то удалите их, скрипт должен выглядеть так же как в сообщении. Кликните по кнопке MoveIt!. В процессе работы возможна перезагрузка компьютера.
По-завершении работы программы должен будет показан лог. Если лог не будет показан, то его можно найти в папке C:_OTMMovedFiles.

Вставьте в ваше ответное сообщение содержимое этого лога. И приложите свежий RSIT лог.

[G-Gurda]

Так ошибки всё еще появляются но хоть итерне заработал с обычной скоростью.

All processes killed
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinad00.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWincf66.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinct77.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWingq55.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinjk33.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinjv66.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinpo00.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinwq55.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinxi66.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinyf00.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinad00.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWincf66.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinct77.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWingq55.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinjk33.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinjv66.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinpo00.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinwq55.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinxi66.sys deleted successfully.
Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWinyf00.sys deleted successfully.
========== FILES ==========
H:WINDOWStasks{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job moved successfully.
H:WINDOWStasks{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 18272455 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: user
->Temp folder emptied: 11862420967 bytes
->Temporary Internet Files folder emptied: 10913230 bytes
->Java cache emptied: 505648 bytes
->FireFox cache emptied: 80462653 bytes
->Google Chrome cache emptied: 5976421 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 6832303 bytes
%systemroot%System32 .tmp files removed: 5274768 bytes
%systemroot%System32dllcache .tmp files removed: 0 bytes
%systemroot%System32drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 19307044 bytes
%systemroot%system32configsystemprofileLocal SettingsTemp folder emptied: 0 bytes
%systemroot%system32configsystemprofileLocal SettingsTemporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 11 454,00 mb

OTM by OldTimer — Version 3.1.9.0 log created on 02232010_105111

Files moved on Reboot…

Registry entries deleted on Reboot…

Logfile of random’s system information tool 1.06 (written by random/random)
Run by user at 2010-02-23 11:01:56
Microsoft Windows XP Professional Service Pack 3
System drive H: has 17 GB (17%) free of 101 GB
Total RAM: 2046 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:02:00, on 23.02.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
H:WINDOWSSystem32smss.exe
H:WINDOWSsystem32winlogon.exe
H:WINDOWSsystem32services.exe
H:WINDOWSsystem32lsass.exe
H:WINDOWSsystem32Ati2evxx.exe
H:WINDOWSsystem32svchost.exe
H:WINDOWSSystem32svchost.exe
H:WINDOWSsystem32svchost.exe
H:WINDOWSsystem32Ati2evxx.exe
H:WINDOWSsystem32spoolsv.exe
H:WINDOWSsystem32CNAB4RPK.EXE
H:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe
H:Program FilesCommon FilesAcronisSchedule2schedul2.exe
H:WINDOWSsystem32bgsvcgen.exe
H:Program FilesJavajre6binjqs.exe
H:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
H:WINDOWSsystem32svchost.exe
H:Program FilesEsetnod32krn.exe
H:WINDOWSsystem32svchost.exe
H:WINDOWSExplorer.EXE
H:WINDOWSsystem32dwwin.exe
H:WINDOWSsystem32wuauclt.exe
H:WINDOWSnotepad.exe
H:Program FilesAcronisTrueImageTrueImageMonitor.exe
H:WINDOWSjjdrive32.exe
H:Program FilesGIGABYTEGESTgest.exe
H:Program FilesCommon FilesAcronisSchedule2schedhlp.exe
H:Program FilesEsetnod32kui.exe
H:Program FilesAdobeReader 9.0ReaderReader_sl.exe
H:Program FilesCommon FilesNokiaMPlatformNokiaMServer.exe
H:Program FilesJavajre6binjusched.exe
H:WINDOWSsystem32dumprep.exe
H:WINDOWSsystem32umdmgr.exe
H:WINDOWSsystem32umdmgr.exe
H:WINDOWSsystem32umdmgr.exe
H:WINDOWSsystem32umdmgr.exe
H:WINDOWSsystem32upd32.exe
H:WINDOWSsystem32umdmgr.exe
H:Program FilesATI TechnologiesATI.ACECore-StaticMOM.exe
H:WINDOWSsystem32avsys.exe
H:WINDOWSRTHDCPL.EXE
H:Program FilesGIGABYTEGESTGSvr.exe
H:WINDOWSsystem32rundll32.exe
H:WINDOWSsystem32umdmgr.exe
H:WINDOWSsystem32umdmgr.exe
H:WINDOWSsystem32.exe
H:WINDOWSsystem32umdmgr.exe
H:WINDOWSsystem32umdmgr.exe
H:WINDOWSsystem32ctfmon.exe
H:Program FilesICQ6.5ICQ.exe
H:WINDOWSsystem32upd32.exe
H:WINDOWSsystem32avsys.exe
H:Program FilesMozilla Firefoxfirefox.exe
H:Program FilesATI TechnologiesATI.ACECore-Staticccc.exe
H:Program FilesNokiaPC Connectivity SolutionServiceLayer.exe
H:Program FilesNokiaPC Connectivity SolutionTransportsNclUSBSrv.exe
H:Program FilesNokiaPC Connectivity SolutionTransportsNclRSSrv.exe
H:WINDOWSsystem32.exe
H:Documents and SettingsuserРабочий столRSIT.exe
H:Program Filestrend microuser.exe

R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
O2 — BHO: CometCursor Class — {1678F7E1-C422-11D0-AD7D-00400515CAAA} — H:WINDOWSsystem32COMET.DLL
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — H:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: RealPlayer Download and Record Plugin for Internet Explorer — {3049C3E9-B461-4BC5-8870-4C09146192CA} — H:Program FilesRealRealPlayerrpbrowserrecordplugin.dll (file missing)
O2 — BHO: Java(tm) Plug-In SSV Helper — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — H:Program FilesJavajre6binssv.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — H:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — H:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O4 — HKLM..Run: [GEST] H:Program FilesGIGABYTEGESTRUN.exe
O4 — HKLM..Run: [JMB36X IDE Setup] H:WINDOWSRaidToolxInsIDE.exe
O4 — HKLM..Run: [36X Raid Configurer] H:WINDOWSsystem32xRaidSetup.exe boot
O4 — HKLM..Run: [Acronis True Image Monitor] «H:Program FilesAcronisTrueImageTrueImageMonitor.exe»
O4 — HKLM..Run: [Acronis Scheduler2 Service] «H:Program FilesCommon FilesAcronisSchedule2schedhlp.exe»
O4 — HKLM..Run: [NeroFilterCheck] H:WINDOWSsystem32NeroCheck.exe
O4 — HKLM..Run: [nod32kui] «H:Program FilesEsetnod32kui.exe» /WAITSERVICE
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «H:Program FilesAdobeReader 9.0ReaderReader_sl.exe»
O4 — HKLM..Run: [QuickTime Task] «H:Program FilesQuickTimeqttask.exe» -atboottime
O4 — HKLM..Run: [NokiaMServer] H:Program FilesCommon FilesNokiaMPlatformNokiaMServer /watchfiles
O4 — HKLM..Run: [Nokia FastStart] «H:Program FilesNokiaNokia MusicNokiaMusic.exe» /command:faststart
O4 — HKLM..Run: [SunJavaUpdateSched] «H:Program FilesJavajre6binjusched.exe»
O4 — HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 — HKLM..Run: [StartCCC] «H:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe» MSRun
O4 — HKLM..Run: [UserFaultCheck] %systemroot%system32dumprep 0 -u
O4 — HKLM..Run: [211] H:WINDOWSsystem32umdmgr.exe
O4 — HKLM..Run: [755] H:WINDOWSsystem32umdmgr.exe
O4 — HKLM..Run: [avsys] H:WINDOWSsystem32avsys.exe
O4 — HKLM..Run: [upd32] H:WINDOWSsystem32upd32.exe
O4 — HKLM..Run: [736] H:WINDOWSsystem32umdmgr.exe
O4 — HKLM..Run: [647] H:WINDOWSsystem32umdmgr.exe
O4 — HKLM..Run: [975] H:WINDOWSsystem32umdmgr.exe
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [508] H:WINDOWSsystem32umdmgr.exe
O4 — HKLM..Run: [466] H:WINDOWSsystem32umdmgr.exe
O4 — HKLM..Run: [] H:WINDOWSsystem32.exe
O4 — HKLM..Run: [095] H:WINDOWSsystem32umdmgr.exe
O4 — HKLM..Run: [936] H:WINDOWSsystem32umdmgr.exe
O4 — HKLM..Run: [Microsoft Update Setup] H:WINDOWSjjdrive32.exe
O4 — HKCU..Run: [CTFMON.EXE] H:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [RGSC] H:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe /silent
O4 — HKCU..Run: [Autochartist] H:Program FilesAutochartistAutochartist_FXCLUB2.exe
O4 — HKCU..Run: [EA Core] «H:Program FilesElectronic ArtsEADMCore.exe» -silent
O4 — HKCU..Run: [RealJukeboxSystray] H:Program FilesRealRealJukeboxtsystray.exe
O4 — HKCU..Run: [AlcoholAutomount] «H:Program FilesAlcohol SoftAlcohol 120axcmd.exe» /automount
O4 — HKCU..Run: [AlSrvN] H:Program FilesAlcohol SoftAlcohol 120PluginsHelperAlSrvN.exe
O4 — HKCU..Run: [ICQ] «H:Program FilesICQ6.5ICQ.exe» silent
O4 — HKCU..Run: [psysnew] C:RECYCLERS-1-5-21-0243556031-888888379-781863308-1455psysnew.exe
O4 — HKLM..PoliciesExplorerRun: [Microsoft Update Setup] H:WINDOWSjjdrive32.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Startup: FIFA 10 Registration.lnk = D:Program FilesEA SportsFIFA 10SupportEAregister.exe
O4 — Startup: Need for Speed™ Undercover — регистрация.lnk = D:Need for Speed UndercoverSupportEAregister.exe
O4 — Global Startup: Nokia Ovi Suite.lnk = H:Program FilesNokiaOviSuiteRunLauncher.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://H:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — H:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} — (no file)
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — H:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — H:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — H:Program FilesICQ6.5ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — H:Program FilesICQ6.5ICQ.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — H:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — H:Program FilesMessengermsmsgs.exe
O16 — DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) — http://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
O17 — HKLMSystemCCSServicesTcpip..{641DB3C5-8660-49BE-A22B-9D95FE173AA3}: NameServer = 91.123.16.120 91.123.16.120
O23 — Service: ABBYY FineReader 9.0 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) — ABBYY (BIT Software) — H:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe
O23 — Service: Acronis Scheduler2 Service (AcrSch2Svc) — Acronis — H:Program FilesCommon FilesAcronisSchedule2schedul2.exe
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — H:WINDOWSsystem32Ati2evxx.exe
O23 — Service: ATI Smart — Unknown owner — H:WINDOWSsystem32ati2sgag.exe
O23 — Service: B’s Recorder GOLD Library General Service (bgsvcgen) — B.H.A Corporation — H:WINDOWSsystem32bgsvcgen.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — H:WINDOWSsystem32services.exe
O23 — Service: GEST Service for program management. (GEST Service) — Unknown owner — H:Program FilesGIGABYTEGESTGSvr.exe
O23 — Service: Служба Google Update (gupdate1ca1104ee4fa4be) (gupdate1ca1104ee4fa4be) — Google Inc. — H:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — H:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — H:WINDOWSsystem32imapi.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — H:Program FilesJavajre6binjqs.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — H:WINDOWSsystem32mnmsrvc.exe
O23 — Service: NOD32 Kernel Service (NOD32krn) — Eset — H:Program FilesEsetnod32krn.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — H:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — H:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — H:WINDOWSSystem32SCardSvr.exe
O23 — Service: ServiceLayer — Nokia. — H:Program FilesNokiaPC Connectivity SolutionServiceLayer.exe
O23 — Service: StarWind AE Service (StarWindServiceAE) — Unknown owner — H:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe (file missing)
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — H:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — H:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — H:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 11235 bytes

======Scheduled tasks folder======

H:WINDOWStasksAppleSoftwareUpdate.job
H:WINDOWStasksGoogleUpdateTaskMachineCore.job
H:WINDOWStasksGoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{1678F7E1-C422-11D0-AD7D-00400515CAAA}]
CometCursor Class — H:WINDOWSsystem32COMET.DLL [2009-10-11 96768]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — H:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer — H:Program FilesRealRealPlayerrpbrowserrecordplugin.dll []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper — H:Program FilesJavajre6binssv.dll [2009-06-09 320920]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — H:Program FilesJavajre6binjp2ssv.dll [2009-06-09 34816]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — H:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2009-06-09 73728]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«GEST»=H:Program FilesGIGABYTEGESTRUN.exe [2007-12-14 236040]
«JMB36X IDE Setup»=H:WINDOWSRaidToolxInsIDE.exe [2007-03-20 36864]
«36X Raid Configurer»=H:WINDOWSsystem32xRaidSetup.exe [2007-08-29 1966080]
«Acronis True Image Monitor»=H:Program FilesAcronisTrueImageTrueImageMonitor.exe [2008-08-26 417536]
«Acronis Scheduler2 Service»=H:Program FilesCommon FilesAcronisSchedule2schedhlp.exe [2008-08-26 61440]
«NeroFilterCheck»=H:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
«nod32kui»=H:Program FilesEsetnod32kui.exe [2008-08-26 949376]
«Adobe Reader Speed Launcher»=H:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2008-06-12 34672]
«QuickTime Task»=H:Program FilesQuickTimeqttask.exe [2008-09-06 413696]
«NokiaMServer»=H:Program FilesCommon FilesNokiaMPlatformNokiaMServer /watchfiles []
«Nokia FastStart»=H:Program FilesNokiaNokia MusicNokiaMusic.exe [2008-12-03 2372840]
«SunJavaUpdateSched»=H:Program FilesJavajre6binjusched.exe [2009-06-09 136600]
«KernelFaultCheck»=H:WINDOWSsystem32dumprep 0 -k []
«StartCCC»=H:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2009-04-28 61440]
«UserFaultCheck»=H:WINDOWSsystem32dumprep 0 -u []
«211»=H:WINDOWSsystem32umdmgr.exe [2010-02-21 196615]
«755»=H:WINDOWSsystem32umdmgr.exe [2010-02-21 196615]
«avsys»=H:WINDOWSsystem32avsys.exe [2010-02-22 221191]
«upd32″=H:WINDOWSsystem32upd32.exe [2010-02-21 221191]
«736»=H:WINDOWSsystem32umdmgr.exe [2010-02-21 196615]
«647»=H:WINDOWSsystem32umdmgr.exe [2010-02-21 196615]
«975»=H:WINDOWSsystem32umdmgr.exe [2010-02-21 196615]
«RTHDCPL»=H:WINDOWSRTHDCPL.EXE [2007-09-19 16844800]
«Alcmtr»=H:WINDOWSALCMTR.EXE [2005-05-03 69632]
«508»=H:WINDOWSsystem32umdmgr.exe [2010-02-21 196615]
«466»=H:WINDOWSsystem32umdmgr.exe [2010-02-21 196615]
«»=H:WINDOWSsystem32.exe [2010-02-22 221191]
«095»=H:WINDOWSsystem32umdmgr.exe [2010-02-21 196615]
«936»=H:WINDOWSsystem32umdmgr.exe [2010-02-21 196615]
«Microsoft Update Setup»=H:WINDOWSjjdrive32.exe [2010-02-23 145927]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerRun]
«Microsoft Update Setup»=H:WINDOWSjjdrive32.exe [2010-02-23 145927]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=H:WINDOWSsystem32ctfmon.exe [2008-04-15 15360]
«RGSC»=H:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe [2008-12-13 306088]
«Autochartist»=H:Program FilesAutochartistAutochartist_FXCLUB2.exe [2010-02-22 4144456]
«EA Core»=H:Program FilesElectronic ArtsEADMCore.exe -silent []
«RealJukeboxSystray»=H:Program FilesRealRealJukeboxtsystray.exe []
«AlcoholAutomount»=H:Program FilesAlcohol SoftAlcohol 120axcmd.exe [2009-04-24 203928]
«AlSrvN»=H:Program FilesAlcohol SoftAlcohol 120PluginsHelperAlSrvN.exe []
«ICQ»=H:Program FilesICQ6.5ICQ.exe [2009-11-16 172792]
«psysnew»=C:RECYCLERS-1-5-21-0243556031-888888379-781863308-1455psysnew.exe [2010-02-23 43008]

H:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
Nokia Ovi Suite.lnk — H:Program FilesNokiaOviSuiteRunLauncher.exe

H:Documents and SettingsuserГлавное менюПрограммыАвтозагрузка
FIFA 10 Registration.lnk — D:Program FilesEA SportsFIFA 10SupportEAregister.exe
Need for Speed™ Undercover — регистрация.lnk — D:Need for Speed UndercoverSupportEAregister.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
H:WINDOWSsystem32Ati2evxx.dll [2009-04-29 155648]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — H:WINDOWSsystem32WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«H:Program FilesGIGABYTEGESTrun.exe»=»H:Program FilesGIGABYTEGESTrun.exe:*:Enabled:update»
«H:Program FilesQIPqip.exe»=»H:Program FilesQIPqip.exe:*:Enabled:Quiet Internet Pager»
«H:WINDOWSsystem32qeulb.exe»=»H:WINDOWSsystem32qeulb.exe:*:Enabled:ENABLE»
«H:Program FilesAkella GamesTest Drive UnlimitedTestDriveUnlimited.exe»=»H:Program FilesAkella GamesTest Drive UnlimitedTestDriveUnlimited.exe:*:Enabled:Test Drive Unlimited»
«H:WINDOWSsystem32PnkBstrA.exe»=»H:WINDOWSsystem32PnkBstrA.exe:*:Enabled:PnkBstrA»
«H:WINDOWSsystem32PnkBstrB.exe»=»H:WINDOWSsystem32PnkBstrB.exe:*:Enabled:PnkBstrB»
«H:Documents and Settingsuserhskjh.exe»=»H:Documents and Settingsuserhskjh.exe:*:Enabled:ENABLE»
«H:WINDOWSsystem32CNAB4RPK.EXE»=»H:WINDOWSsystem32CNAB4RPK.EXE:*:Disabled:Canon LBP2900 RPC Server Process»
«H:Program FilesTVUPlayerTVUPlayer.exe»=»H:Program FilesTVUPlayerTVUPlayer.exe:*:Enabled:TVUPlayer Component»
«H:Program FilesInternet ExplorerIEXPLORE.EXE»=»H:Program FilesInternet ExplorerIEXPLORE.EXE:*:Enabled:Internet Explorer»
«H:Program FilesSopCastSopCast.exe»=»H:Program FilesSopCastSopCast.exe:*:Enabled:SopCast Main Application»
«H:Program FilesSopCastadvSopAdver.exe»=»H:Program FilesSopCastadvSopAdver.exe:*:Enabled:SopCast Adver»
«H:Program FilesTVAntsTvants.exe»=»H:Program FilesTVAntsTvants.exe:*:Enabled:TVAnts»
«H:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbinxrEngine.exe»=»H:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbinxrEngine.exe:*:Enabled:С.Т.А.Л.К.Е.Р. — Чистое Небо (CLI)»
«H:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbindedicatedxrEngine.exe»=»H:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbindedicatedxrEngine.exe:*:Enabled:С.Т.А.Л.К.Е.Р. — Чистое Небо (SRV)»
«C:1243124TestDriveUnlimited.exe»=»C:1243124TestDriveUnlimited.exe:*:Enabled:Test Drive Unlimited»
«D:Electronic ArtsDead SpaceDead Space.exe»=»D:Electronic ArtsDead SpaceDead Space.exe:*:Enabled:Dead Space ™»
«D:White GoldXenus.exe»=»D:White GoldXenus.exe:*:Disabled:Executable»
«H:Program FilesSmall RocketsRed Ace Squadronacenet_server_release.exe»=»H:Program FilesSmall RocketsRed Ace Squadronacenet_server_release.exe:*:Enabled:server»
«H:WINDOWSsystem32dplaysvr.exe»=»H:WINDOWSsystem32dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«D:Astrum Online EntertainmentВластелин Колец Онлайнlotroclient.exe»=»D:Astrum Online EntertainmentВластелин Колец Онлайнlotroclient.exe:*:Enabled:lotroclient»
«H:Program FilesuTorrentutorrent.exe»=»H:Program FilesuTorrentutorrent.exe:*:Enabled:µTorrent»
«C:Program FilesSteamsteam.exe»=»C:Program FilesSteamsteam.exe:*:Enabled:Steam»
«D:PCGAMEPRO EVOLUTION SOCCER 2009pes2009.exe»=»D:PCGAMEPRO EVOLUTION SOCCER 2009pes2009.exe:*:Enabled:Pro Evolution Soccer 2009»
«C:Delta Force Xtreme 2 BETADFX2BETA.EXE»=»C:Delta Force Xtreme 2 BETADFX2BETA.EXE:*:Enabled:Delta Force Xtreme 2 BETA»
«C:Delta Force Xtreme 2 BETAUPDATE.EXE»=»C:Delta Force Xtreme 2 BETAUPDATE.EXE:*:Enabled:Delta Force Xtreme 2 BETA»
«H:Program FilesICQ6.5ICQ.exe»=»H:Program FilesICQ6.5ICQ.exe:*:Enabled:ICQ6»
«H:Program FilesElectronic ArtsEADMCore.exe»=»H:Program FilesElectronic ArtsEADMCore.exe:*:Enabled:EA Download Manager»
«H:Program FilesLimeWireLimeWire.exe»=»H:Program FilesLimeWireLimeWire.exe:*:Enabled:LimeWire»
«H:Program FileseMuleemule.exe»=»H:Program FileseMuleemule.exe:*:Enabled:eMule»
«D:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe»=»D:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe:*:Enabled:Rockstar Games Social Club»
«H:FlylinkDC++FlylinkDC.exe»=»H:FlylinkDC++FlylinkDC.exe:*:Enabled:FlylinkDC++»
«H:Program FilesUbisoftTransmission GamesHeroes Over Europeheroes2.exe»=»H:Program FilesUbisoftTransmission GamesHeroes Over Europeheroes2.exe:*:Enabled:heroes2»
«H:Program FilesRealRealPlayerrealplay.exe»=»H:Program FilesRealRealPlayerrealplay.exe:*:Enabled:RealPlayer»
«D:Program FilesPro Evolution Soccer 2010pes2010.exe»=»D:Program FilesPro Evolution Soccer 2010pes2010.exe:*:Enabled:Pro Evolution Soccer 2010»
«D:Rockstar GamesGrand Theft Auto IVLaunchGTAIV.exe»=»D:Rockstar GamesGrand Theft Auto IVLaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV»
«D:Rockstar GamesGrand Theft Auto IVGTAIV.exe»=»D:Rockstar GamesGrand Theft Auto IVGTAIV.exe:*:Enabled:Grand Theft Auto IV»
«H:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe»=»H:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe:*:Enabled:Rockstar Games Social Club»
«H:Program FilesSkypePlugin ManagerskypePM.exe»=»H:Program FilesSkypePlugin ManagerskypePM.exe:*:Enabled:Skype Extras Manager»
«D:Program FilesRockstar GamesGrand Theft Auto IVGTAIV.exe»=»D:Program FilesRockstar GamesGrand Theft Auto IVGTAIV.exe:*:Enabled:Grand Theft Auto IV»
«H:Program FilesSteamSteam.exe»=»H:Program FilesSteamSteam.exe:*:Enabled:Steam»
«D:Сall of Duty Modern Warfare 2iw4mp.exe»=»D:Сall of Duty Modern Warfare 2iw4mp.exe:*:Enabled:iw4mp»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»

======List of files/folders created in the last 1 months======

2010-02-23 10:51:11 —-D—- H:_OTM
2010-02-22 16:25:31 —-A—- H:WINDOWSsystem32.exe
2010-02-22 15:37:35 —-D—- H:WINDOWSPrefetch
2010-02-22 15:30:35 —-RAH—- H:WINDOWSsystem32logonui.exe.manifest
2010-02-22 15:24:25 —-A—- H:WINDOWSpnplog.txt
2010-02-22 15:16:17 —-A—- H:WINDOWSsystem32irclass.dll
2010-02-22 15:16:16 —-A—- H:WINDOWSsystem32spxcoins.dll
2010-02-22 14:49:25 —-SH—- H:BOOT.BAK
2010-02-22 14:49:12 —-A—- H:WINDOWSUPGRADE.TXT
2010-02-22 14:49:09 —-D—- H:WINDOWSsetup.pss
2010-02-22 12:17:05 —-A—- H:WINDOWSsystem32avsys.exe
2010-02-21 18:08:42 —-A—- H:WINDOWSsystem32upd32.exe
2010-02-21 17:59:56 —-A—- H:WINDOWSsystem32umdmgr.exe
2010-02-19 21:16:20 —-RSH—- H:WINDOWSjjdrive32.exe
2010-02-19 21:16:05 —-RSH—- H:WINDOWSccdrive32.exe
2010-02-19 21:15:56 —-D—- H:Program Filestrend micro
2010-02-19 21:15:54 —-D—- H:rsit
2010-02-19 20:31:11 —-A—- H:WINDOWSsystem32msvmcls64.exe
2010-02-19 19:51:13 —-A—- H:WINDOWSsystem32wmpns.dll
2010-02-13 22:35:20 —-A—- H:WINDOWSsystem3212.exe
2010-02-13 22:22:42 —-A—- H:WINDOWSsystem320.exe
2010-02-13 21:06:29 —-A—- H:WINDOWSpothead.txt
2010-02-13 21:06:24 —-A—- H:WINDOWSsystem3233.exe
2010-02-13 21:06:11 —-RSH—- H:WINDOWSacp.exe
2010-02-13 21:06:08 —-A—- H:WINDOWSsystem32dh.exe
2010-02-13 21:00:30 —-A—- H:WINDOWSsystem3246.exe
2010-02-13 20:36:30 —-A—- H:WINDOWSsystem3241.exe
2010-02-13 20:06:21 —-A—- H:WINDOWSsystem32sshnas21.dll
2010-02-09 17:34:45 —-D—- H:Documents and SettingsuserApplication DataPlayFirst
2010-02-09 17:34:45 —-D—- H:Documents and SettingsAll UsersApplication DataPlayFirst
2010-02-07 20:43:35 —-A—- H:WINDOWSsystem32netprotocol.dll
2010-02-07 16:09:47 —-D—- H:Program FilesBaldaWin Demo
2010-01-31 15:39:00 —-D—- H:Documents and SettingsuserApplication DataEltima Software
2010-01-31 15:37:23 —-D—- H:Program FilesEltima Software
2010-01-27 14:16:14 —-D—- H:Program FilesElectronic Arts
2010-01-25 22:13:02 —-D—- H:Program FilesSteam
2010-01-24 22:38:55 —-D—- H:WINDOWSsystem32AGEIA
2010-01-24 22:38:53 —-D—- H:Program FilesAGEIA Technologies

======List of files/folders modified in the last 1 months======

2010-02-23 11:01:57 —-D—- H:WINDOWSTemp
2010-02-23 10:59:09 —-D—- H:Program FilesAutochartist
2010-02-23 10:52:23 —-D—- H:WINDOWSsystem32
2010-02-23 10:52:23 —-D—- H:WINDOWS
2010-02-23 10:51:12 —-SD—- H:WINDOWSTasks
2010-02-23 10:35:44 —-A—- H:WINDOWSSchedLgU.Txt
2010-02-23 10:33:43 —-D—- H:Documents and SettingsuserApplication DatauTorrent
2010-02-23 00:10:42 —-A—- H:WINDOWSNeroDigital.ini
2010-02-22 18:58:27 —-D—- H:Новая папка
2010-02-22 18:13:57 —-SH—- H:boot.ini
2010-02-22 18:13:27 —-D—- H:WINDOWSsystem
2010-02-22 18:13:26 —-D—- H:WINDOWSsystem32Setup
2010-02-22 18:13:25 —-D—- H:WINDOWSHelp
2010-02-22 18:13:20 —-D—- H:WINDOWSl2schemas
2010-02-22 18:13:19 —-D—- H:WINDOWSsystem32usmt
2010-02-22 18:13:19 —-D—- H:WINDOWSsystem32drivers
2010-02-22 18:13:12 —-D—- H:WINDOWSAppPatch
2010-02-22 18:13:11 —-D—- H:WINDOWSehome
2010-02-22 18:13:10 —-D—- H:WINDOWSime
2010-02-22 18:13:09 —-RSD—- H:WINDOWSFonts
2010-02-22 18:13:09 —-D—- H:WINDOWSMedia
2010-02-22 18:13:08 —-D—- H:WINDOWSnetwork diagnostic
2010-02-22 18:13:06 —-D—- H:WINDOWSsystem32ru-ru
2010-02-22 18:12:57 —-D—- H:WINDOWSPeerNet
2010-02-22 18:12:44 —-D—- H:WINDOWSsystem32npp
2010-02-22 18:12:38 —-D—- H:WINDOWSmsagent
2010-02-22 18:12:34 —-D—- H:WINDOWSsystem32ru
2010-02-22 18:10:21 —-D—- H:WINDOWSsystem321049
2010-02-22 18:10:10 —-D—- H:WINDOWStwain_32
2010-02-22 18:09:40 —-D—- H:WINDOWSsystem32icsxml
2010-02-22 18:09:14 —-D—- H:WINDOWSsystem32ias
2010-02-22 18:09:11 —-D—- H:WINDOWSsystem321033
2010-02-22 18:08:33 —-D—- H:WINDOWSDriver Cache
2010-02-22 15:45:57 —-A—- H:WINDOWSsystem32PerfStringBackup.INI
2010-02-22 15:45:27 —-D—- H:WINDOWSRegistration
2010-02-22 15:44:53 —-D—- H:WINDOWSsystem32CatRoot2
2010-02-22 15:44:51 —-HD—- H:WINDOWSinf
2010-02-22 15:44:48 —-A—- H:WINDOWSsetuplog.txt
2010-02-22 15:37:54 —-SHD—- H:System Volume Information
2010-02-22 15:37:54 —-D—- H:WINDOWSsystem32Restore
2010-02-22 15:35:48 —-D—- H:WINDOWSsystem32config
2010-02-22 15:34:09 —-RSHDC—- H:WINDOWSsystem32dllcache
2010-02-22 15:32:10 —-D—- H:WINDOWSsecurity
2010-02-22 15:31:33 —-A—- H:WINDOWSOEWABLog.txt
2010-02-22 15:31:26 —-A—- H:WINDOWSODBCINST.INI
2010-02-22 15:30:38 —-RD—- H:WINDOWSWeb
2010-02-22 15:30:38 —-RD—- H:Program Files
2010-02-22 15:30:30 —-RAH—- H:WINDOWSsystem32cdplayer.exe.manifest
2010-02-22 15:30:19 —-A—- H:WINDOWSwin.ini
2010-02-22 15:30:13 —-D—- H:WINDOWSsystem32oobe
2010-02-22 15:29:29 —-D—- H:WINDOWSsystem32Com
2010-02-22 15:29:01 —-D—- H:WINDOWSsystem32wbem
2010-02-22 15:16:21 —-A—- H:WINDOWSsystem.ini
2010-02-22 15:16:08 —-ASH—- H:Documents and SettingsAll UsersApplication Datadesktop.ini
2010-02-22 15:16:03 —-D—- H:WINDOWSsystem32CatRoot
2010-02-22 11:53:57 —-D—- H:Program FilesMozilla Firefox
2010-02-22 11:38:09 —-SHD—- H:WINDOWSInstaller
2010-02-22 11:38:08 —-D—- H:Config.Msi
2010-02-22 11:37:36 —-D—- H:Program FilesCommon Files
2010-02-22 11:37:36 —-D—- H:Documents and SettingsAll UsersApplication DataSkype
2010-02-22 11:04:06 —-D—- H:Documents and SettingsuserApplication DataskypePM
2010-02-19 21:03:06 —-D—- H:FlylinkDC++
2010-02-19 20:58:56 —-D—- H:Program FilesTeorex Inpaint
2010-02-19 20:58:55 —-D—- H:Program FilesReal Alternative
2010-02-19 20:58:51 —-D—- H:Program FilesMetaTrader — Alpari
2010-02-19 20:58:50 —-D—- H:Program FilesMessenger
2010-02-19 20:58:49 —-D—- H:Program FilesA-one Video Convertor
2010-02-19 20:58:47 —-D—- H:Program FilesDivX
2010-02-19 20:36:21 —-D—- H:Program FilesAll Office Converter Platinum
2010-02-19 19:54:37 —-A—- H:WINDOWSimsins.BAK
2010-02-13 22:35:33 —-SHD—- H:RECYCLER
2010-02-12 09:10:50 —-D—- H:Documents and SettingsuserApplication DataDivX
2010-02-11 14:42:28 —-D—- H:Program FilesuTorrent
2010-02-09 17:13:50 —-D—- H:Program FilesGames
2010-02-06 18:54:02 —-HD—- H:Program FilesInstallShield Installation Information
2010-02-06 18:45:43 —-D—- H:WINDOWSsystem32DirectX
2010-02-06 18:45:42 —-RSD—- H:WINDOWSassembly
2010-02-02 13:35:47 —-D—- H:Documents and SettingsuserApplication Datadvdcss
2010-01-31 17:49:43 —-A—- H:WINDOWSntbtlog.txt
2010-01-29 19:54:41 —-SD—- H:Documents and SettingsAll UsersApplication DataMicrosoft
2010-01-29 19:54:39 —-SD—- H:Documents and SettingsuserApplication DataMicrosoft
2010-01-29 19:54:30 —-D—- H:WINDOWSWinSxS
2010-01-24 22:59:20 —-D—- H:Program FilesGamesTopDownloads
2010-01-24 22:38:02 —-D—- H:Program FilesCommon FilesWise Installation Wizard
2010-01-24 16:45:30 —-A—- H:WINDOWSsystem32PnkBstrB.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 cdrbsdrv;cdrbsdrv; H:WINDOWSsystem32driverscdrbsdrv.sys [2006-02-20 33408]
R1 intelppm;Драйвер Intel процессора; H:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-15 40704]
R1 nod32drv;nod32drv; H:WINDOWSsystem32driversnod32drv.sys [2008-08-26 15424]
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; H:WINDOWSSystem32driversws2ifsl.sys [2008-04-15 12032]
R2 AMON;AMON; H:WINDOWSsystem32driversamon.sys [2008-08-26 512096]
R2 tifsfilter;Acronis TrueImage FS Filter; H:WINDOWSsystem32DRIVERStifsfilt.sys [2008-08-26 28096]
R3 ati2mtag;ati2mtag; H:WINDOWSsystem32DRIVERSati2mtag.sys [2009-04-29 3643904]
R3 AtiHdmiService;ATI Function Driver for HDMI Service; H:WINDOWSsystem32driversAtiHdmi.sys [2009-04-01 93184]
R3 ET5Drv;ET5Drv; ??H:WINDOWSsystem32DriversET5Drv.sys []
R3 gdrv;gdrv; ??H:WINDOWSgdrv.sys []
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; H:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-15 144384]
R3 HidUsb;Драйвер класса HID Microsoft; H:WINDOWSsystem32DRIVERShidusb.sys [2008-04-15 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); H:WINDOWSsystem32driversRtkHDAud.sys [2007-09-19 4617728]
R3 mouhid;Драйвер мыши HID; H:WINDOWSsystem32DRIVERSmouhid.sys [2008-04-15 12160]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; H:WINDOWSsystem32DRIVERSRtenicxp.sys [2007-12-05 104064]
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); H:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-15 32128]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; H:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-15 30208]
R3 usbhub;USB2 концентратор; H:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbstor;Драйвер запоминающих устройств для USB; H:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-15 26368]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; H:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-15 20608]
S3 nmwcd;Nokia USB Phone Parent; H:WINDOWSsystem32driversccdcmb.sys [2008-05-07 17536]
S3 pccsmcfd;PCCS Mode Change Filter Driver; H:WINDOWSsystem32DRIVERSpccsmcfd.sys [2008-08-26 18816]
S3 usbprint;Класс принтеров Microsoft USB; H:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-14 25856]
S3 usbscan;Драйвер USB-сканера; H:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
S3 Wdf01000;Wdf01000; H:WINDOWSsystem32DRIVERSWdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; H:WINDOWSsystem32DRIVERSwpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; H:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; H:WINDOWSsystem32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service; H:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe [2007-12-06 660768]
R2 AcrSch2Svc;Acronis Scheduler2 Service; H:Program FilesCommon FilesAcronisSchedule2schedul2.exe [2008-08-26 122880]
R2 Ati HotKey Poller;Ati HotKey Poller; H:WINDOWSsystem32Ati2evxx.exe [2009-04-29 602112]
R2 bgsvcgen;B’s Recorder GOLD Library General Service; H:WINDOWSsystem32bgsvcgen.exe [2007-06-15 145504]
R2 JavaQuickStarterService;Java Quick Starter; H:Program FilesJavajre6binjqs.exe [2009-06-09 152984]
R2 MDM;Machine Debug Manager; H:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-19 322120]
R2 Netprotocol;Network Protocol Driver; H:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R2 NOD32krn;NOD32 Kernel Service; H:Program FilesEsetnod32krn.exe [2008-08-26 552064]
R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; H:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; H:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2006-10-20 36864]
R3 GEST Service;GEST Service for program management.; H:Program FilesGIGABYTEGESTGSvr.exe [2007-12-14 47624]
R3 ServiceLayer;ServiceLayer; H:Program FilesNokiaPC Connectivity SolutionServiceLayer.exe [2008-09-08 575488]
S2 ATI Smart;ATI Smart; H:WINDOWSsystem32ati2sgag.exe [2009-04-28 593920]
S2 gupdate1ca1104ee4fa4be;Служба Google Update (gupdate1ca1104ee4fa4be); H:Program FilesGoogleUpdateGoogleUpdate.exe [2009-07-30 133104]
S2 SSHNAS;SSHNAS; H:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S2 StarWindServiceAE;StarWind AE Service; H:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe []
S3 aspnet_state;ASP.NET State Service; H:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; H:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 IDriverT;InstallDriver Table Manager; H:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; H:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2006-10-30 741376]
S3 ose;Office Source Engine; H:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; H:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2006-10-30 122880]

---

EOF

---

[G-Gurda]

Нет , инет всё еще тупит как и раньше и работает хорошо только минут 5 после каждой перезагрузки.

[Admin]

Тогда продолжим лечение.
Скачайте программу Combofix. Закройте все открытые окна и запустите эту программу.
После выполнения будет создан лог файл, пожалуйста вставьте его в ваш ответ.

Примечание: перед использованием Combofix обязательно установите Recovery console. Как это сделать будет описано на странице, ссылку на которую я привёл выше.

[G-Gurda]

перетаскиваю образ на ярлык комбофикс , выдает ошибку cfscript name error where you trying to run cfscript? the name cfscript appears to be incorretly spelt

[Admin]

Извинясь за задержку с ответом. Просто потерял ваш топик из вида.

Скачайте свежую версию Combofix и запустите. Если будет задан вопрос об установке Recovery console, кликните YES.
Да, перед запуском программы отключите антивирус и брандмауэр.

[G-Gurda]

заново скачал комбофикс, полностью удалил нод32. та же самая ошибка.

[Admin]

Вы просто запускаете программу или перетаскиваете инсталлятор консоли восстановления на неё ?

[G-Gurda]

Я просто перетаскиваю образ xpsp3….. на иконку комбофикса))что-то не то?

[Автор]

Сообщения