Появляется стабильно при закрытии страницы Internet Explorer

[510]

Logfile of random’s system information tool 1.07 (written by random/random)
Run by User at 2010-05-31 00:30:43
Microsoft Windows XP Professional Service Pack 3
System drive C: has 13 GB (26%) free of 51 GB
Total RAM: 2047 MB (43% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 0:30:49, on 31.05.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesDrive Space IndicatorDrvSpace.exe
C:WINDOWSsystem32WinstyleMonitor.exe
C:WINDOWSRTHDCPL.EXE
C:Program FilesMail.RuAgentMAgent.exe
C:Program FilesMail.RuGuardGuardMailRu.exe
C:Program FilesESETESET NOD32 Antivirusegui.exe
C:Program FilesVisualTaskTipsVisualTaskTips.exe
C:Program FilesWindows Sidebarsidebar.exe
C:Program FilesPRMT8PRMTEDEDLauncher.exe
C:WINDOWSsystem32ctfmon.exe
D:Новая папкаАськаICQ7.1ICQ.exe
C:ИгрыNevoDRMrun.exe
C:Program FilesWindows Sidebarsidebar.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:Program FilesMcAfee Security Scan2.0.181SSScheduler.exe
C:Program FilesPRMT8PRMTEDprmedsvr.exe
C:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe
C:Program FilesESETESET NOD32 Antivirusekrn.exe
C:Program FilesMail.RuGuardGuardMailRu.exe
C:Program FilesJavajre6binjqs.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe
C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesSkypePhoneSkype.exe
C:Program FilesSkypePlugin ManagerskypePM.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesInternet Exploreriexplore.exe
c:program filesmail.rusputnikSputnikHelper.exe
c:program filesmail.rusputnikSputnikFlashPlayer.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesDownload Masterdmaster.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesInternet Exploreriexplore.exe
C:DownloadsПрограммыRSIT.exe
C:Program Filestrend microUser.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=50062
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://mail.ru
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Текст заголовка окна
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Избранное
R3 — URLSearchHook: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — c:program filesmail.rusputnikMailRuSputnik.dll
R3 — URLSearchHook: Radio W Toolbar — {b4efb02b-cd4a-44b9-b5d9-aa486cdffab6} — C:Program FilesRadio_WtbRad0.dll
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — c:program filesmail.rusputnikMailRuSputnik.dll
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — C:PROGRA~1DOWNLO~1dmiehlp.dll
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.5.4723.1820swg.dll
O2 — BHO: Radio W Toolbar — {b4efb02b-cd4a-44b9-b5d9-aa486cdffab6} — C:Program FilesRadio_WtbRad0.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 — Toolbar: DM Bar — {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — C:Program FilesDownload Masterdmbar.dll
O3 — Toolbar: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — c:program filesmail.rusputnikMailRuSputnik.dll
O3 — Toolbar: Radio W Toolbar — {b4efb02b-cd4a-44b9-b5d9-aa486cdffab6} — C:Program FilesRadio_WtbRad0.dll
O3 — Toolbar: Яндекс.Бар (для НевоСофт) — {17679b4f-3bcc-644b-8f28-a47597fbb905} — C:Program FilesYandexYandexBarIEbarsbarienevosoftyndbar.dll
O4 — HKLM..Run: [DriveSpace] C:Program FilesDrive Space IndicatorDrvSpace.exe
O4 — HKLM..Run: [WinStyleMON] C:WINDOWSsystem32WinstyleMonitor.exe
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [TNOD UP] «C:Program FilesTNod User & Password FinderTNODUP.exe» /i
O4 — HKLM..Run: [nwiz] nwiz.exe /installquiet
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe -LM
O4 — HKLM..Run: [Guard.Mail.ru.gui] «C:Program FilesMail.RuGuardGuardMailRu.exe» /gui
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 9.0ReaderReader_sl.exe»
O4 — HKLM..Run: [Adobe ARM] «C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe»
O4 — HKLM..Run: [egui] «C:Program FilesESETESET NOD32 Antivirusegui.exe» /hide /waitservice
O4 — HKLM..Run: [NevoDRM] «C:ИгрыNevoDRMNevoDRM.exe»
O4 — HKCU..Run: [VisualTaskTips] C:Program FilesVisualTaskTipsVisualTaskTips.exe noTrayIcon
O4 — HKCU..Run: [Sidebar] C:Program FilesWindows Sidebarsidebar.exe /autoRun
O4 — HKCU..Run: [EDLauncher] C:Program FilesPRMT8PRMTEDEDLauncher.exe
O4 — HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [ICQ] «D:Новая папкаАськаICQ7.1ICQ.exe» silent loginmode=4
O4 — HKCU..Run: [swg] «C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe»
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [VisualTaskTips] C:Program FilesVisualTaskTipsVisualTaskTips.exe noTrayIcon (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE8_01] regsvr32 /s /n /i:u shell32 (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [IE8_01] regsvr32 /s /n /i:u shell32 (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [IE8_01] regsvr32 /s /n /i:u shell32 (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [IE8_01] regsvr32 /s /n /i:u shell32 (User ‘Default user’)
O4 — Startup: MediaGet.lnk = C:Program FilesMediaGetmediaget.exe
O4 — Global Startup: McAfee Security Scan Plus.lnk = ?
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~3Office12EXCEL.EXE/3000
O8 — Extra context menu item: Google ВикиКомментарии… — res://C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O8 — Extra context menu item: Добавить в Rambler-Закладки — res://C:Program FilesRambler AssistantramblertoolbarU5971.dll/zakladki.htm
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — C:Program FilesDownload Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — C:Program FilesDownload Masterdmie.htm
O8 — Extra context menu item: Найти с помощью Рамблера — res://C:Program FilesRambler AssistantramblertoolbarU5971.dll/search.htm
O8 — Extra context menu item: Перевести с помощью словарей Рамблера — res://C:Program FilesRambler AssistantramblertoolbarU5971.dll/dic.htm
O8 — Extra context menu item: Передать на удаленную закачку DM — C:Program FilesDownload Masterremdown.htm
O9 — Extra button: ICQ7.1 — {71BFC818-0CED-42D6-9C87-5142918957EE} — D:Новая папкаАськаICQ7.1ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ7.1 — {71BFC818-0CED-42D6-9C87-5142918957EE} — D:Новая папкаАськаICQ7.1ICQ.exe
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~3Office12REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 — DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} — http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O22 — SharedTaskScheduler: Предзагрузчик Browseui — {438755C2-A8BA-11D1-B96B-00A0C90312E1} — C:WINDOWSsystem32browseui.dll
O22 — SharedTaskScheduler: Демон кэша категорий компонентов — {8C7461EF-2B13-11d2-BE35-3078302C2030} — C:WINDOWSsystem32browseui.dll
O23 — Service: ABBYY FineReader 9.0 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) — ABBYY (BIT Software) — C:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe
O23 — Service: Eset HTTP Server (EhttpSrv) — ESET — C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe
O23 — Service: Eset Service (ekrn) — ESET — C:Program FilesESETESET NOD32 Antivirusekrn.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Guard.Mail.ru — Unknown owner — C:Program FilesMail.RuGuardGuardMailRu.exe
O23 — Service: Служба Google Update (gupdate1cae708b5a4e91e) (gupdate1cae708b5a4e91e) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — C:Program FilesJavajre6binjqs.exe
O23 — Service: McAfee Security Scan Component Host Service (McComponentHostService) — McAfee, Inc. — C:Program FilesMcAfee Security Scan2.0.181McCHSvc.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: Nero BackItUp Scheduler 4.0 — Nero AG — C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe
O23 — Service: NVIDIA Display Driver Service (nvsvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 12706 bytes

======Scheduled tasks folder======

C:WINDOWStasksGoogleUpdateTaskMachineCore.job
C:WINDOWStasksGoogleUpdateTaskMachineUA.job
C:WINDOWStasksNorton Security Scan for User.job
C:WINDOWStasksWise Disk Cleaner 4.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — c:program filesmail.rusputnikMailRuSputnik.dll [2010-05-07 1115320]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — C:PROGRA~1DOWNLO~1dmiehlp.dll [2009-04-16 158208]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-05-16 279664]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier5.5.4723.1820swg.dll [2010-05-16 812528]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{b4efb02b-cd4a-44b9-b5d9-aa486cdffab6}]
Radio W Toolbar — C:Program FilesRadio_WtbRad0.dll [2010-04-15 2515552]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2009-10-29 41760]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2009-10-29 73728]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — DM Bar — C:Program FilesDownload Masterdmbar.dll [2007-11-27 180224]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — c:program filesmail.rusputnikMailRuSputnik.dll [2010-05-07 1115320]
{b4efb02b-cd4a-44b9-b5d9-aa486cdffab6} — Radio W Toolbar — C:Program FilesRadio_WtbRad0.dll [2010-04-15 2515552]
{17679b4f-3bcc-644b-8f28-a47597fbb905} — Яндекс.Бар (для НевоСофт) — C:Program FilesYandexYandexBarIEbarsbarienevosoftyndbar.dll [2009-11-10 5610760]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«DriveSpace»=C:Program FilesDrive Space IndicatorDrvSpace.exe [2009-04-18 417761]
«WinStyleMON»=C:WINDOWSsystem32WinstyleMonitor.exe [2009-08-19 102400]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2009-05-23 17881600]
«TNOD UP»=C:Program FilesTNod User & Password FinderTNODUP.exe [2009-10-02 1486336]
«nwiz»=nwiz.exe /installquiet []
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2009-11-20 110184]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2009-11-20 12669544]
«MAgent»=C:Program FilesMail.RuAgentMAgent.exe [2010-04-26 7975608]
«Guard.Mail.ru.gui»=C:Program FilesMail.RuGuardGuardMailRu.exe [2010-05-07 563392]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2010-04-04 36272]
«Adobe ARM»=C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe [2010-03-24 952768]
«egui»=C:Program FilesESETESET NOD32 Antivirusegui.exe [2009-10-07 1461080]
«NevoDRM»=C:ИгрыNevoDRMNevoDRM.exe [2008-12-11 41984]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«VisualTaskTips»=C:Program FilesVisualTaskTipsVisualTaskTips.exe [2008-06-23 65536]
«Sidebar»=C:Program FilesWindows Sidebarsidebar.exe [2007-02-27 1254912]
«EDLauncher»=C:Program FilesPRMT8PRMTEDEDLauncher.exe [2007-03-14 118784]
«ctfmon.exe»=C:WINDOWSsystem32ctfmon.exe [2009-08-25 30208]
«ICQ»=D:Новая папкаАськаICQ7.1ICQ.exe [2010-04-23 133368]
«swg»=C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2010-05-16 39408]

C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
McAfee Security Scan Plus.lnk — C:Program FilesMcAfee Security Scan2.0.181SSScheduler.exe

C:Documents and SettingsUserГлавное менюПрограммыАвтозагрузка
MediaGet.lnk — C:Program FilesMediaGetmediaget.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32wpdshserviceobj.dll [2008-05-18 133632]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetwork{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«NoInternetOpenWith «=1
«EnableLUA»=0

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«HonorAutoRunSetting»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE»=»C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook»
«C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype»
«C:Program FilesUtorrentutorrent.exe»=»C:Program FilesUtorrentutorrent.exe:*:Enabled:µTorrent»
«D:Новая папкаАськаICQ7.1ICQ.exe»=»D:Новая папкаАськаICQ7.1ICQ.exe:*:Enabled:ICQ7.1»
«D:Новая папкаАськаICQ7.1aolload.exe»=»D:Новая папкаАськаICQ7.1aolload.exe:*:Enabled:aolload.exe»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«D:Новая папкаАськаICQ7.1ICQ.exe»=»D:Новая папкаАськаICQ7.1ICQ.exe:*:Enabled:ICQ7.1»
«D:Новая папкаАськаICQ7.1aolload.exe»=»D:Новая папкаАськаICQ7.1aolload.exe:*:Enabled:aolload.exe»

======List of files/folders created in the last 1 months======

2010-05-31 00:10:39 —-D—- C:rsit
2010-05-31 00:10:39 —-D—- C:Program Filestrend micro
2010-05-30 22:54:02 —-D—- C:Documents and SettingsUserApplication DataMedia Get LLC
2010-05-30 22:45:57 —-D—- C:Documents and SettingsAll UsersApplication DataMedia Get LLC
2010-05-30 22:45:45 —-D—- C:Program FilesMediaGet
2010-05-29 23:00:25 —-D—- C:Documents and SettingsUserApplication DataPlayFirst
2010-05-29 23:00:25 —-D—- C:Documents and SettingsAll UsersApplication DataPlayFirst
2010-05-29 22:54:58 —-D—- C:Program FilesAbsolutist games
2010-05-27 22:21:02 —-D—- C:Documents and SettingsUserApplication DataBeachPartyCraze
2010-05-26 22:56:23 —-D—- C:Documents and SettingsUserApplication DataSulusGames
2010-05-26 22:55:06 —-D—- C:Игры
2010-05-20 22:17:49 —-D—- C:Program FilesAlawar.ru
2010-05-20 22:09:29 —-D—- C:WINDOWSSun
2010-05-17 05:28:19 —-D—- C:Program FilesCommon FilesSymantec Shared
2010-05-17 05:17:00 —-D—- C:Program FilesNorton Security Scan
2010-05-17 05:17:00 —-D—- C:Documents and SettingsAll UsersApplication DataSymantec
2010-05-17 05:17:00 —-D—- C:Documents and SettingsAll UsersApplication DataNorton
2010-05-17 05:16:58 —-D—- C:Program FilesNortonInstaller
2010-05-17 05:16:58 —-D—- C:Documents and SettingsAll UsersApplication DataNortonInstaller
2010-05-17 00:06:07 —-D—- C:Program FilesAdobe
2010-05-16 23:58:14 —-D—- C:WINDOWSsystem32Adobe
2010-05-16 23:44:55 —-D—- C:Documents and SettingsAll UsersApplication DataMcAfee Security Scan
2010-05-16 23:44:55 —-D—- C:Documents and SettingsAll UsersApplication DataMcAfee
2010-05-16 23:44:53 —-D—- C:Program FilesMcAfee Security Scan
2010-05-16 23:44:04 —-D—- C:Documents and SettingsUserApplication DataGoogle
2010-05-16 23:43:37 —-D—- C:Documents and SettingsAll UsersApplication DataGoogle
2010-05-16 23:42:28 —-D—- C:Documents and SettingsAll UsersApplication DataNOS
2010-05-14 00:14:53 —-D—- C:Documents and SettingsAll UsersApplication DataFarmFrenzy3
2010-05-12 23:26:47 —-D—- C:Documents and SettingsAll UsersApplication DataFarmFrenzy2
2010-05-08 22:56:47 —-D—- C:Documents and SettingsUserApplication DataMerscom
2010-05-08 22:56:47 —-D—- C:Documents and SettingsAll UsersApplication DataMerscom
2010-05-08 22:55:52 —-D—- C:Program FilesGamesTopDownloads
2010-05-08 22:55:47 —-D—- C:Program FilesAlawar
2010-05-08 22:23:12 —-D—- C:Documents and SettingsUserApplication DataUnpack
2010-05-05 22:38:15 —-D—- C:Documents and SettingsAll UsersApplication DataYandex
2010-05-05 22:38:13 —-D—- C:Program FilesYandex
2010-05-05 22:38:13 —-D—- C:Documents and SettingsUserApplication DataYandex
2010-05-05 21:46:20 —-D—- C:Program FilesConduit
2010-05-05 21:46:19 —-D—- C:Program FilesRadio_W

======List of files/folders modified in the last 1 months======

2010-05-31 00:30:43 —-D—- C:WINDOWSTemp
2010-05-31 00:26:42 —-D—- C:Documents and SettingsUserApplication DataSkype
2010-05-31 00:19:51 —-D—- C:Documents and SettingsUserApplication DatauTorrent
2010-05-31 00:13:46 —-D—- C:WINDOWSPrefetch
2010-05-31 00:10:39 —-RD—- C:Program Files
2010-05-30 22:45:55 —-SHD—- C:WINDOWSInstaller
2010-05-30 22:45:55 —-D—- C:WINDOWSWinSxS
2010-05-30 20:23:56 —-D—- C:WINDOWSsystem32CatRoot2
2010-05-30 16:36:12 —-D—- C:Documents and SettingsUserApplication DataskypePM
2010-05-30 16:35:01 —-AD—- C:WINDOWSsystem32
2010-05-30 16:34:59 —-A—- C:WINDOWSsystem32OemInfo.ini
2010-05-30 14:07:35 —-A—- C:WINDOWSSchedLgU.Txt
2010-05-29 21:01:26 —-SD—- C:WINDOWSDownloaded Program Files
2010-05-28 20:39:46 —-D—- C:Documents and SettingsUserApplication DataICQ
2010-05-27 22:20:59 —-D—- C:Documents and SettingsAll UsersApplication DataAlawarWrapper
2010-05-26 13:39:04 —-RD—- C:Program FilesSkype
2010-05-20 22:09:29 —-D—- C:WINDOWS
2010-05-18 14:58:49 —-HD—- C:WINDOWSinf
2010-05-18 14:58:49 —-D—- C:WINDOWSsystem32drivers
2010-05-17 23:17:07 —-D—- C:Program FilesGames.Mail.Ru
2010-05-17 22:26:57 —-A—- C:WINDOWSNeroDigital.ini
2010-05-17 18:44:09 —-D—- C:Downloads
2010-05-17 05:28:19 —-D—- C:Program FilesCommon Files
2010-05-17 05:17:03 —-SD—- C:WINDOWSTasks
2010-05-17 00:20:15 —-D—- C:Documents and SettingsUserApplication DataAdobe
2010-05-17 00:06:12 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
2010-05-16 23:50:59 —-D—- C:Program FilesCommon FilesAdobe
2010-05-16 23:43:45 —-D—- C:Program FilesGoogle
2010-05-16 21:15:47 —-D—- C:WINDOWSsystem32Restore
2010-05-07 10:17:22 —-D—- C:Elca
2010-05-05 22:38:05 —-D—- C:Program FilesDownload Master

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdPPM;Драйвер AMD HwPState процессора; C:WINDOWSsystem32DRIVERSAmdPPM.sys [2007-04-16 33792]
R1 easdrv;easdrv; C:WINDOWSsystem32DRIVERSeasdrv.sys [2009-10-07 54184]
R1 epfwtdir;epfwtdir; C:WINDOWSsystem32DRIVERSepfwtdir.sys [2009-10-07 35168]
R2 eamon;EAMON; C:WINDOWSsystem32DRIVERSeamon.sys [2009-10-07 40824]
R2 exFat;exFat; C:WINDOWSsystem32driversexFat.sys [2009-01-28 133632]
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2008-10-11 62848]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-15 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2009-05-25 5082624]
R3 MTsensor;ATK0110 ACPI UTILITY; C:WINDOWSsystem32DRIVERSASACPI.sys [2004-08-15 5810]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2009-11-21 10235968]
R3 NVENETFD;NVIDIA nForce 10/100/1000 Mbps Ethernet ; C:WINDOWSsystem32DRIVERSNVENETFD.sys [2008-08-03 54784]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:WINDOWSsystem32DRIVERSnvnetbus.sys [2008-08-03 22016]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2009-08-25 30336]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2009-08-25 17152]
S3 Ambfilt;Ambfilt; C:WINDOWSsystem32driversAmbfilt.sys [2008-08-07 1684736]
S3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-14 10368]
S3 Monfilt;Monfilt; C:WINDOWSsystem32driversMonfilt.sys [2006-01-06 1389056]
S3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-19 12160]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-14 26368]
S3 WpdUsb;WpdUsb; C:WINDOWSsystem32DRIVERSwpdusb.sys [2008-05-18 38528]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2008-05-18 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service; C:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe [2007-12-06 660768]
R2 ekrn;Eset Service; C:Program FilesESETESET NOD32 Antivirusekrn.exe [2009-10-07 472280]
R2 Guard.Mail.ru;Guard.Mail.ru; C:Program FilesMail.RuGuardGuardMailRu.exe [2010-05-07 563392]
R2 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2009-10-29 153376]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe [2006-10-26 335872]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe [2008-12-05 935208]
R2 nvsvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2009-11-20 154216]
R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S2 gupdate1cae708b5a4e91e;Служба Google Update (gupdate1cae708b5a4e91e); C:Program FilesGoogleUpdateGoogleUpdate.exe [2010-04-28 133104]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;Eset HTTP Server; C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe [2009-10-07 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2010-05-16 182768]
S3 idsvc;Windows CardSpace; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-07-29 881664]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:Program FilesMcAfee Security Scan2.0.181McCHSvc.exe [2010-01-15 227232]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media Playerwmpnetwk.exe [2006-11-03 914944]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-07-29 132096]

---

EOF

---

[510]

info.txt logfile of random’s system information tool 1.06 2010-05-31 00:13:35

======Uninstall list======

—>MsiExec /X{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
2007 Microsoft Office Suite Service Pack 2 (SP2)—>msiexec /package {90120000-0015-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
2007 Microsoft Office Suite Service Pack 2 (SP2)—>msiexec /package {90120000-0016-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
2007 Microsoft Office Suite Service Pack 2 (SP2)—>msiexec /package {90120000-0018-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
2007 Microsoft Office Suite Service Pack 2 (SP2)—>msiexec /package {90120000-0019-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
2007 Microsoft Office Suite Service Pack 2 (SP2)—>msiexec /package {90120000-001A-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
2007 Microsoft Office Suite Service Pack 2 (SP2)—>msiexec /package {90120000-001B-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
2007 Microsoft Office Suite Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
2007 Microsoft Office Suite Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
2007 Microsoft Office Suite Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0419-0000-0000000FF1CE} /uninstall {57A92C5E-E76A-49CC-9EC2-A7B6CE1255EA}
2007 Microsoft Office Suite Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0422-0000-0000000FF1CE} /uninstall {6F177D09-F21D-4F50-9436-353972D1D232}
2007 Microsoft Office Suite Service Pack 2 (SP2)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
2007 Microsoft Office Suite Service Pack 2 (SP2)—>msiexec /package {90120000-0044-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
2007 Microsoft Office Suite Service Pack 2 (SP2)—>msiexec /package {90120000-006E-0419-0000-0000000FF1CE} /uninstall {37317C49-30C4-412C-B0B9-D95090F330D8}
2007 Microsoft Office Suite Service Pack 2 (SP2)—>msiexec /package {90120000-00A1-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
2007 Microsoft Office Suite Service Pack 2 (SP2)—>msiexec /package {90120000-00BA-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
ABBYY FineReader 9.0 Professional Edition—>MsiExec.exe /I{F9000000-0001-0000-0000-074957833700}
Adobe Flash Player 10 ActiveX—>C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Flash Player 10 Plugin—>C:WINDOWSsystem32MacromedFlashuninstall_plugin.exe
Adobe Reader 9.3.2 — Russian—>MsiExec.exe /I{AC76BA86-7AD7-1049-7B44-A93000000001}
Adobe Shockwave Player 11.5—>»C:WINDOWSsystem32AdobeShockwave 11uninstaller.exe»
AMD Processor Driver—>C:Program FilesInstallShield Installation Information{C151CE54-E7EA-4804-854B-F515368B0798}setup.exe -runfromtemp -l0x0019 -removeonly
Armed Assault Gold—>»D:Новая папкаGames & ApplicationsArmed Assault Goldunins000.exe»
Cosmopolitan VMO—>C:PROGRA~1COSMOP~1VMO3UNWISE.EXE C:PROGRA~1COSMOP~1VMO3INSTALL.LOG
Download Master version 5.6.5.1201—>»C:Program FilesDownload Masterunins000.exe»
Drive Space Indicator v5.3.5.5—>»C:Program FilesDrive Space Indicatorunins000.exe»
ESET NOD32 Antivirus—>MsiExec.exe /I{DDBDB885-CFBA-48DD-BCDA-C44BB7C0A39C}
FIFA 2008—>»D:Новая папкаGames & ApplicationsFIFA 2008unins000.exe»
FileMenu Tools 5.7—>»C:Program FilesFileMenu Toolsunins000.exe»
FlylinkDC++ r394 build 3137—>C:Program FilesДатаСвiтFlylinkDC++Uninstall.exe
Garfield 2—>D:9B02~1GARFIE~1UNWISE.EXE D:9B02~1GARFIE~1INSTALL.LOG
Google Chrome—>»C:Program FilesGoogleChromeApplication5.0.375.55Installersetup.exe» —uninstall —system-level
Google Toolbar for Internet Explorer—>»C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarManager_E85CDE7661A53A6A.exe» /uninstall
Google Toolbar for Internet Explorer—>MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper—>MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Guard.Mail.ru—>»C:Program FilesMail.RuGuardGuardMailRu.exe» /uninstall
HashTab32 — вкладка с хешами в свойстваx файла—>rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFHashTab32.inf,Uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)—>C:WINDOWSsystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=»»
Ice Age 2 The Meltdown—>D:9B02~1GAMES&~1IceAge2UNWISE.EXE D:9B02~1GAMES&~1IceAge2INSTALL.LOG
ICQ7.1—>»C:Program FilesInstallShield Installation Information{71BFC818-0CED-42D6-9C87-5142918957EE}ICQ7.exe» -runfromtemp -l0x0009 -removeonly
Java(TM) 6 Update 12—>MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216012F0}
Java(TM) 6 Update 16—>MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216016FF}
K-Lite Mega Codec Pack 5.3.0—>»C:Program FilesK-Lite Codec Packunins000.exe»
L&H TTS3000 Deutsch—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFLHTTSGED.inf, Uninstall
L&H TTS3000 Espaсol—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFLHTTSSPE.inf, Uninstall
L&H TTS3000 Franзais—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFLHTTSFRF.inf, Uninstall
L&H TTS3000 Italiano—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFLHTTSITI.inf, Uninstall
L&H TTS3000 Russian—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFLHTTSRUR.inf, Uninstall
Lernout & Hauspie TruVoice American English TTS Engine—>RunDll32 advpack.dll,LaunchINFSection C:WINDOWSINFtv_enua.inf, Uninstall
Mail.Ru Агент 5.5 (сборка 2842, для всех пользователей)—>C:Program FilesMail.RuAgentmagentsetup.exe -uninstalllm
Mail.Ru Спутник 2.3.0.104—>c:program filesmail.rusputnikSputnikInstaller.exe -uninstall
McAfee Security Scan Plus—>»C:Program FilesMcAfee Security Scanuninstall.exe»
MediaGet 1.12—>»C:Program FilesMediaGetunins000.exe»
MenuEx—>C:Program FilesMenuExuninst.exe
Microsoft .NET Framework 2.0 Service Pack 2—>MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2—>MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1—>C:WINDOWSMicrosoft.NETFrameworkv3.5Microsoft .NET Framework 3.5 SP1setup.exe
Microsoft .NET Framework 3.5 SP1—>MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Office Access MUI (Russian) 2007—>MsiExec.exe /X{90120000-0015-0419-0000-0000000FF1CE}
Microsoft Office Enterprise 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007—>MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel 2007 Help Обновление (KB963678)—>msiexec /package {90120000-0016-0419-0000-0000000FF1CE} /uninstall {420938DB-BF97-4664-BE29-0C68B4802C00}
Microsoft Office Excel MUI (Russian) 2007—>MsiExec.exe /X{90120000-0016-0419-0000-0000000FF1CE}
Microsoft Office Groove MUI (Russian) 2007—>MsiExec.exe /X{90120000-00BA-0419-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Russian) 2007—>MsiExec.exe /X{90120000-0044-0419-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Russian) 2007—>MsiExec.exe /X{90120000-00A1-0419-0000-0000000FF1CE}
Microsoft Office Outlook 2007 Help Обновление (KB963677)—>msiexec /package {90120000-001A-0419-0000-0000000FF1CE} /uninstall {E9D6C0F9-9879-4FC4-8E13-BF0D3953E0E6}
Microsoft Office Outlook MUI (Russian) 2007—>MsiExec.exe /X{90120000-001A-0419-0000-0000000FF1CE}
Microsoft Office Powerpoint 2007 Help Обновление (KB963669)—>msiexec /package {90120000-0018-0419-0000-0000000FF1CE} /uninstall {BD1C2AC7-63F3-4C75-8B44-DE3D700B3BC8}
Microsoft Office PowerPoint MUI (Russian) 2007—>MsiExec.exe /X{90120000-0018-0419-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007—>MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007—>MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Russian) 2007—>MsiExec.exe /X{90120000-001F-0419-0000-0000000FF1CE}
Microsoft Office Proof (Ukrainian) 2007—>MsiExec.exe /X{90120000-001F-0422-0000-0000000FF1CE}
Microsoft Office Proofing (Russian) 2007—>MsiExec.exe /X{90120000-002C-0419-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Russian) 2007—>MsiExec.exe /X{90120000-0019-0419-0000-0000000FF1CE}
Microsoft Office Shared MUI (Russian) 2007—>MsiExec.exe /X{90120000-006E-0419-0000-0000000FF1CE}
Microsoft Office Word 2007 Help Обновление (KB963665)—>msiexec /package {90120000-001B-0419-0000-0000000FF1CE} /uninstall {D3A002FB-0F62-4840-80AD-2D2C63F83449}
Microsoft Office Word MUI (Russian) 2007—>MsiExec.exe /X{90120000-001B-0419-0000-0000000FF1CE}
Microsoft Silverlight—>MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable — x86 9.0.21022—>MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Microsoft Visual Studio 2005 Tools for Office Runtime—>MsiExec.exe /X{388E4B09-3E71-4649-8921-F44A3A2954A7}
MSXML 4.0 SP3 Parser—>MsiExec.exe /I{196467F1-C11F-4F76-858B-5812ADC83B94}
MSXML 6.0 Parser (KB925673)—>MsiExec.exe /I{FE9126DB-5F84-495A-BB46-3C724F1C2D08}
Nero 9—>C:Program FilesCommon FilesNeroNero ProductInstaller 4SetupX.exe REMOVESERIALNUMBER=»9M03-01A1-PCX7-K31A-8A94-98PT-KT2E-522A»
neroxml—>MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NevoSoft Burger Mania (remove only)—>»C:ИгрыBurger Maniauninstall.exe»
Norton Security Scan—>C:Program FilesNortonInstaller{397E31AA-0D78-4649-A01C-339D73A2ED35}NSSLicenseType2.7.3.34InstStub.exe /X
NVIDIA Display Control Panel—>C:Program FilesNVIDIA CorporationUninstallnvuninst.exe DisplayControlPanel
NVIDIA Drivers—>C:Program FilesNVIDIA CorporationUninstallnvuninst.exe UninstallGUI
NVIDIA nView Desktop Manager—>C:Program FilesNVIDIA CorporationnViewnViewSetup.exe -uninstall
NVIDIA PhysX—>MsiExec.exe /X{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
Opera 10.01—>MsiExec.exe /X{6CDC748B-47B0-45EB-B740-681E8429F7F9}
ProLing Office—>MsiExec.exe /I{7F6CEB29-F0DC-4A53-8FB7-8CF3C19C999A}
PROMT Expert 8 Giant Try-Buy—>MsiExec.exe /I{A4F761F7-FBC8-49BF-BC37-15550C3EAA85}
Radio_W Toolbar—>C:PROGRA~1Radio_WUNWISE.EXE /U C:PROGRA~1Radio_WINSTALL.LOG
Rambler-Ассистент—>»C:Program FilesRambler Assistantuninstall.exe»
Realtek High Definition Audio Driver—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}setup.exe» -l0x19 -removeonly
Security Update for 2007 Microsoft Office System (KB969559)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB969679)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
Security Update for Microsoft Office Excel 2007 (KB969682)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office system 2007 (KB969613)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office Word 2007 (KB969604)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
Skype™ 4.2—>MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
SpongeBob SquarePants Employee of the Month—>D:9B02~1EMPLOY~1UNWISE.EXE D:9B02~1EMPLOY~1INSTALL.LOG
TNod User & Password Finder—>»C:Program FilesTNod User & Password Finderuninst-TNod.exe»
Total Commander 7.50a PowerPack—>»C:Program FilesTotal Commanderuninstall.exe»
Unlocker 1.8.7—>C:Program FilesUnlockeruninst.exe
Update for 2007 Microsoft Office System (KB967642)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft Office Outlook 2007 (KB969907)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {74F98B24-AFBD-4800-9BD6-87D349B5C462}
Update for Outlook 2007 Junk Email Filter (kb970012)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {DC4A962B-9EC2-469C-BC9C-87312ADAEE81}
Visual Task Tips—>rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFVTTips3.inf,Uninstall
Winamp—>»C:Program FilesWinampUninstWA.exe»
Windows Presentation Foundation—>MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Архиватор WinRAR—>C:Program FilesWinRARuninstall.exe
Боковая панель Windows—>rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFSidebar.inf,DefaultUnInstall
Веселая ферма 2—>C:Program FilesGamesTopDownloadsВеселая ферма 2Uninstall.exe
Веселая ферма 3—>C:Program FilesGames.Mail.RuВеселая ферма 3Uninstall.exe
Веселая ферма—>C:Program FilesAlawar.ruВеселая фермаUninstall.exe
Дополнительные апплеты—>»C:WINDOWSsystem32CPLDAPUunins000.exe»
Дракоша По следам великих изобретений—>»D:Новая папкаGames & ApplicationsДракоша По следам великих изобретенийunins000.exe»
еда выполнения Visual Studio 2005 Tools for Office, второй выпуск—>C:Program FilesCommon FilesMicrosoft SharedVSTO8.0Microsoft Visual Studio 2005 Tools for Office Runtimeinstall.exe
Моя прелестная няня—>C:Program FilesGamesTopDownloadsNanny 911Uninstall.exe
Папины дочки—>C:Program FilesGames.Mail.RuПапины дочкиUninstall.exe
Пляжный переполох—>C:Program FilesAlawar.ruПляжный переполохUninstall.exe
Телефоны Краматорска—>C:PROGRA~1PHONEB~1UNWISE.EXE C:PROGRA~1PHONEB~1INSTALL.LOG
Установка Road Ready Streetwise—>D:9B02~1GAMES&~1ROADRE~1UNWISE.EXE D:9B02~1GAMES&~1ROADRE~1INSTALL.LOG
Шоколатор—>C:Program FilesAbsolutist gamesChocolatierUninstall.exe
Шопоголик—>C:Program FilesGamesTopDownloadsШопоголикUninstall.exe
Яндекс.Бар 4.2 для Internet Explorer (НевоСофт)—>MsiExec.exe /X{33360F81-3065-48B1-9A86-B6242500CED6}
Яндекс.Бар 5.0 для Internet Explorer—>MsiExec.exe /X{40C9BDA3-7883-415E-8BF2-B10AE296B9C5}

======Security center information======

AV: ESET NOD32 Antivirus 3.0

======System event log======

Computer Name: BEST-AAD523EBA4
Event Code: 7036
Message: Служба «Совместимость быстрого переключения пользователей» перешла в состояние Работает.

Record Number: 4084
Source Name: Service Control Manager
Time Written: 20100507160936.000000+180
Event Type: информация
User:

Computer Name: BEST-AAD523EBA4
Event Code: 7035
Message: Служба «Служба COM записи компакт-дисков IMAPI» успешно отправила управляющий элемент «запустить».

Record Number: 4083
Source Name: Service Control Manager
Time Written: 20100507160936.000000+180
Event Type: информация
User: NT AUTHORITYSYSTEM

Computer Name: BEST-AAD523EBA4
Event Code: 7035
Message: Служба «Сетевые подключения» успешно отправила управляющий элемент «запустить».

Record Number: 4082
Source Name: Service Control Manager
Time Written: 20100507160936.000000+180
Event Type: информация
User: NT AUTHORITYSYSTEM

Computer Name: BEST-AAD523EBA4
Event Code: 7035
Message: Служба «Совместимость быстрого переключения пользователей» успешно отправила управляющий элемент «запустить».

Record Number: 4081
Source Name: Service Control Manager
Time Written: 20100507160936.000000+180
Event Type: информация
User: NT AUTHORITYSYSTEM

Computer Name: BEST-AAD523EBA4
Event Code: 7036
Message: Служба «Службы терминалов» перешла в состояние Работает.

Record Number: 4080
Source Name: Service Control Manager
Time Written: 20100507160936.000000+180
Event Type: информация
User:

=====Application event log=====

Computer Name: BEST-AAD523EBA4
Event Code: 1035
Message: Установщик Windows изменил настройку продукта. Продукт: WebFldrs XP. Версия: 9.50.7523. Язык: 1049. Изменение настройки завершено с состоянием: 0.

Record Number: 5
Source Name: MsiInstaller
Time Written: 20100323203816.000000+120
Event Type: информация
User: BEST-AAD523EBA4User

Computer Name: BEST-AAD523EBA4
Event Code: 11728
Message: Product: WebFldrs XP — Настройка завершена успешно.

Record Number: 4
Source Name: MsiInstaller
Time Written: 20100323203816.000000+120
Event Type: информация
User: BEST-AAD523EBA4User

Computer Name: BEST-AAD523EBA4
Event Code: 1040
Message: Начата транзакция установщика Windows: C:WINDOWSsystem32webfldrs.msi. ИД клиентского процесса: 124.

Record Number: 3
Source Name: MsiInstaller
Time Written: 20100323203815.000000+120
Event Type: информация
User: BEST-AAD523EBA4User

Computer Name: BEST-AAD523EBA4
Event Code: 1800
Message: Служба центра обеспечения безопасности Windows запущена.

Record Number: 2
Source Name: SecurityCenter
Time Written: 20100323203809.000000+120
Event Type: информация
User:

Computer Name: BEST-AAD523EBA4
Event Code: 1001
Message: Checking file system on D:
The type of the file system is NTFS.

One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.
Cleaning up minor inconsistencies on the drive.

260011992 KB total disk space.
4 KB in 8 indexes.
0 KB in bad sectors.
73912 KB in use by the system.
65536 KB occupied by the log file.
259938076 KB available on disk.

4096 bytes in each allocation unit.
65002998 total allocation units on disk.
64984519 allocation units available on disk.

Internal Info:
20 00 00 00 13 00 00 00 0f 00 00 00 00 00 00 00 ……………
00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 …………….
84 d7 17 00 00 00 00 00 ae 4c 2d 00 00 00 00 00 ………L-…..
de 39 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 .9…………..
00 00 00 00 00 00 00 00 ac 23 fc 06 00 00 00 00 ………#……
00 54 a2 b3 00 00 00 00 80 39 07 00 00 00 00 00 .T…….9……
00 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 …………….

Record Number: 1
Source Name: Winlogon
Time Written: 20100323203807.000000+120
Event Type: информация
User:

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=16
«PROCESSOR_IDENTIFIER»=x86 Family 16 Model 6 Stepping 2, AuthenticAMD
«PROCESSOR_REVISION»=0602
«NUMBER_OF_PROCESSORS»=2
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP

---

EOF

---

[Admin]

Здравствуйте, добро пожаловать на Spyware-ru форум.

Расскажите подробнее о ваших проблемах с компьютером.

[Автор]

Сообщения