Проблемы с boot menu

[jevgenij]

Здравствуйте.
Заранее извиняюсь за некорректные выражения и действия — я обычный пользователь, не продвинутый…

1.Началось с того, что при попытке войти в режим safe mode через F8 появляется таблица синего цвета BOOT MENU, где предлагается выбрать first device. При выборе 1st master: HDD появляется чёрный экран с сообщением NTLDR is missing и press ctrl+alt+del to restart. Т.е. войти в безопасный режим нет возможности. ОС как таковая загружается, всё остальное работает.
2.Далее в один день не получилось запустить ОС, т.е. не загрузилась. Уже не помню, что за сообщения были.
Мои действия:
3.взял загрузочный диск, выбрал первым устройством CD, вошёл в консоль восстановления, использовал chkdsk /p/r . Получилось восстановить загрузку ОС. Но пункт 1. остался без изменений.
4.на Вашем форуме нашёл и выполнил SafeBootKeyRepair (без результата), SUPERAntiSpyware (без результата), т.е. программы находили гадости и производили лечение, но п.1. оставался.
5.воспользовался способом run-msconfig-boot.ini и т.д., зашёл в safe mode, произвёл полную проверку KIS-ом. Вредных не обнаружил.
6.ещё раз с загрузочным диском использовал fixboot

По железу:
AMD Athlon(tm)64×2 Dual Core processor 6000+, 3.11Ghz, 3.00 GB of RAM;
M2N-E, socket AM2, Nvidia nForce 570-ultra, HT2000 MT/s, dual-ch. DDR2 800, PCI-E x16 slot, gigabit LAN, 8-ch HD audio;
по прогр.:
Win XP professional version 2002 SP3;
защита KIS 2009;
ОС одна, HDD два.
В результате пункт 1. так и остался в силе… Вот теперь, пользуясь Вашими советами, прошу помощи. Проверил с помощью rsit, только не сосем понял как приложить info и log файлы. Просто скопировать содержание в сообщение?

[jevgenij]

Ау-у-у, кто-нибудь, помогите…

[CERBER]

Здравствуйте!
Добро пожаловать на Spyware-ru форум.
Выполните действия, как описано вот в этой теме:
Как вылечить компьютер, первые шаги.

[jevgenij]

Вроде так всё и сделал.
Вобщем прикладываю содержимое info.txt. Так и не понял — прямо сюда всё копировать? 🙁

info.txt logfile of random’s system information tool 1.08 2011-01-20 12:44:17

======Uninstall list======

—>»C:Program FilesInstallShield Installation Information{F37167DD-4436-4641-90B6-329D60632DDA}Setup.exe» REMOVEALL —u:{F37167DD-4436-4641-90B6-329D60632DDA}
—>C:Program FilesNeroNero 7nerouninstallUNNERO.exe /UNINSTALL
—>C:WINDOWSUNNeroBackItUp.exe /UNINSTALL
—>C:WINDOWSUNNeroMediaHome.exe /UNINSTALL
—>C:WINDOWSUNNeroShowTime.exe /UNINSTALL
—>C:WINDOWSUNNeroVision.exe /UNINSTALL
—>C:WINDOWSUNRecode.exe /UNINSTALL
—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime701Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{FA7621DC-7144-4A24-973C-B9BC0E945628}setup.exe» -l0x9
—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
AC3Filter (remove only)—>C:Program FilesAC3Filteruninstall.exe
Adobe AIR—>c:Program FilesCommon FilesAdobe AIRVersions1.0ResourcesAdobe AIR Updater.exe -arp:uninstall
Adobe AIR—>MsiExec.exe /I{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}
Adobe Flash Player 10 Plugin—>C:WINDOWSsystem32MacromedFlashuninstall_plugin.exe
Adobe Media Player—>msiexec /qb /x {39F6E2B4-CFE8-C30A-66E8-489651F0F34C}
Adobe Media Player—>MsiExec.exe /I{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}
Adobe Reader 7.0—>MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70000000000}
Altysoft Free DVD Ripper 2.7—>»E:New FolderAltysoft Free DVD Ripperunins000.exe»
Codec Pack — All In 1 6.0.1.9—>C:WINDOWSiun6002.exe «C:Program FilesCodec Pack — All In 1irunin.ini»
Cool & Quiet—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{1ADE1AA0-7F82-4BB1-B1BD-727DE438057B}setup.exe» -l0x9
CyberLink PowerDVD 8—>»C:Program FilesInstallShield Installation Information{307BD415-B3E6-4E60-962A-FEF793237322}setup.exe» /z-uninstall
CyberLink PowerDVD 8—>»C:Program FilesInstallShield Installation Information{307BD415-B3E6-4E60-962A-FEF793237322}setup.exe» /z-uninstall
Google Toolbar for Internet Explorer—>»C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarManager_4079369A224CB572.exe» /uninstall
Google Toolbar for Internet Explorer—>MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper—>MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Планета Земля—>MsiExec.exe /X{4286E640-B5FB-11DF-AC4B-005056C00008}
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)—>C:WINDOWSsystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=»»
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)—>C:WINDOWSsystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=»»
Hotfix for Windows XP (KB2158563)—>»C:WINDOWS$NtUninstallKB2158563$spuninstspuninst.exe»
Hotfix for Windows XP (KB2443685)—>»C:WINDOWS$NtUninstallKB2443685$spuninstspuninst.exe»
Hotfix for Windows XP (KB952287)—>»C:WINDOWS$NtUninstallKB952287$spuninstspuninst.exe»
Hotfix for Windows XP (KB961118)—>»C:WINDOWS$NtUninstallKB961118$spuninstspuninst.exe»
Hotfix for Windows XP (KB970653-v3)—>»C:WINDOWS$NtUninstallKB970653-v3$spuninstspuninst.exe»
Hotfix for Windows XP (KB976098-v2)—>»C:WINDOWS$NtUninstallKB976098-v2$spuninstspuninst.exe»
Hotfix for Windows XP (KB979306)—>»C:WINDOWS$NtUninstallKB979306$spuninstspuninst.exe»
Hotfix for Windows XP (KB981793)—>»C:WINDOWS$NtUninstallKB981793$spuninstspuninst.exe»
InterVideo MediaOne Gallery—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{34F0D55F-C386-4195-9A5B-961D3F6ACD46}setup.exe» REMOVEALL
Kaspersky Internet Security 2009—>MsiExec.exe /I{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55}
Kaspersky Internet Security 2009—>MsiExec.exe /I{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55}
King’s Bounty: Легенда о Рыцаре—>»C:GamesKings.Bounty.Legenda.o.rycare.2008.PCKing’s Bounty. Легенда о Рыцареunins000.exe»
K-Lite Codec Pack 4.4.2 (Standard)—>»C:Program FilesCodecK-Lite Codec Packunins000.exe»
Microsoft .NET Framework 1.1 Security Update (KB2416447)—>»C:WINDOWSMicrosoft.NETFrameworkv1.1.4322Updateshotfix.exe» «C:WINDOWSMicrosoft.NETFrameworkv1.1.4322UpdatesM2416447M2416447Uninstall.msp»
Microsoft .NET Framework 1.1 Security Update (KB979906)—>»C:WINDOWSMicrosoft.NETFrameworkv1.1.4322Updateshotfix.exe» «C:WINDOWSMicrosoft.NETFrameworkv1.1.4322UpdatesM979906M979906Uninstall.msp»
Microsoft .NET Framework 1.1—>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1—>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2—>MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2—>MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1—>C:WINDOWSMicrosoft.NETFrameworkv3.5Microsoft .NET Framework 3.5 SP1setup.exe
Microsoft .NET Framework 3.5 SP1—>MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Office Professional Edition 2003—>MsiExec.exe /I{90110409-6000-11D3-8CFE-0150048383C9}
Microsoft Visual C++ 2005 ATL Update kb973923 — x86 8.0.50727.4053—>MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mozilla Firefox (3.0.8)—>C:Program FilesMozilla Firefoxuninstallhelper.exe
MSXML 4.0 SP2 (KB954430)—>MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)—>MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MSXML 6 Service Pack 2 (KB954459)—>MsiExec.exe /I{1A528690-6A2D-4BC5-B143-8C4AE8D19D96}
MSXML4 Parser—>MsiExec.exe /I{01501EBA-EC35-4F9F-8889-3BE346E5DA13}
Nero 7 Ultra Edition—>MsiExec.exe /I{70AB1576-7883-2313-C650-7A71270B1049}
NVIDIA Drivers—>C:WINDOWSsystem32nvuninst.exe UninstallGUI
NVIDIA DVD Decoder—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime91Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{055FEF8E-4B86-400F-A5C6-8FAC0042DCD9}setup.exe» -l0x19 -uninstall
NVIDIA ForceWare Network Access Manager—>C:PROGRA~1COMMON~1INSTAL~1Driver9INTEL3~1IDriver.exe /M{1F6423DE-7959-4178-80E0-023C7EAA5347} /l1033
OpenAL—>»C:Program FilesOpenALoalinst.exe» /U
Pinnacle Hollywood FX for Studio—>C:WINDOWSunvise32.exe C:Hollywood FX for Studio5.5uninstal.log
PunkBuster Services—>C:WINDOWSsystem32pbsvc.exe -u
SAMSUNG Mobile Modem Driver Set—>C:WINDOWSsystem32Samsung_USB_Drivers3SSCDUninstall.exe
Samsung Mobile phone USB driver Software—>C:WINDOWSsystem32Samsung_USB_Drivers5SSSDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software—>C:WINDOWSsystem32Samsung_USB_Drivers1SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software—>C:WINDOWSsystem32Samsung_USB_Drivers2SSM_Uninstall.exe
Samsung PC Studio 3 USB Driver Installer—>»C:Program FilesInstallShield Installation Information{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}setup.exe» -runfromtemp -l0x0019 -removeonly
Samsung PC Studio 3—>»C:Program FilesInstallShield Installation Information{C4A4722E-79F9-417C-BD72-8D359A090C97}setup.exe» -runfromtemp -l0x0019 -removeonly
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)—>C:WINDOWSsystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A8894F19-59C8-38D2-8A75-36C0CCE56A5B} /qb+ REBOOTPROMPT=»»
Security Update for Windows Internet Explorer 8 (KB2183461)—>»C:WINDOWSie8updatesKB2183461-IE8spuninstspuninst.exe»
Security Update for Windows Internet Explorer 8 (KB2360131)—>»C:WINDOWSie8updatesKB2360131-IE8spuninstspuninst.exe»
Security Update for Windows Internet Explorer 8 (KB2416400)—>»C:WINDOWSie8updatesKB2416400-IE8spuninstspuninst.exe»
Security Update for Windows Internet Explorer 8 (KB971961)—>»C:WINDOWSie8updatesKB971961-IE8spuninstspuninst.exe»
Security Update for Windows Internet Explorer 8 (KB974455)—>»C:WINDOWSie8updatesKB974455-IE8spuninstspuninst.exe»
Security Update for Windows Internet Explorer 8 (KB976325)—>»C:WINDOWSie8updatesKB976325-IE8spuninstspuninst.exe»
Security Update for Windows Internet Explorer 8 (KB978207)—>»C:WINDOWSie8updatesKB978207-IE8spuninstspuninst.exe»
Security Update for Windows Internet Explorer 8 (KB981332)—>»C:WINDOWSie8updatesKB981332-IE8spuninstspuninst.exe»
Security Update for Windows Internet Explorer 8 (KB982381)—>»C:WINDOWSie8updatesKB982381-IE8spuninstspuninst.exe»
Security Update for Windows Media Player (KB2378111)—>»C:WINDOWS$NtUninstallKB2378111_WM9$spuninstspuninst.exe»
Security Update for Windows Media Player (KB952069)—>»C:WINDOWS$NtUninstallKB952069_WM9$spuninstspuninst.exe»
Security Update for Windows Media Player (KB954155)—>»C:WINDOWS$NtUninstallKB954155_WM9$spuninstspuninst.exe»
Security Update for Windows Media Player (KB968816)—>»C:WINDOWS$NtUninstallKB968816_WM9$spuninstspuninst.exe»
Security Update for Windows Media Player (KB973540)—>»C:WINDOWS$NtUninstallKB973540_WM9L$spuninstspuninst.exe»
Security Update for Windows Media Player (KB975558)—>»C:WINDOWS$NtUninstallKB975558_WM8$spuninstspuninst.exe»
Security Update for Windows Media Player (KB978695)—>»C:WINDOWS$NtUninstallKB978695_WM9$spuninstspuninst.exe»
Security Update for Windows Media Player 10 (KB936782)—>»C:WINDOWS$NtUninstallKB936782_WMP10$spuninstspuninst.exe»
Security Update for Windows XP (KB2079403)—>»C:WINDOWS$NtUninstallKB2079403$spuninstspuninst.exe»
Security Update for Windows XP (KB2115168)—>»C:WINDOWS$NtUninstallKB2115168$spuninstspuninst.exe»
Security Update for Windows XP (KB2121546)—>»C:WINDOWS$NtUninstallKB2121546$spuninstspuninst.exe»
Security Update for Windows XP (KB2160329)—>»C:WINDOWS$NtUninstallKB2160329$spuninstspuninst.exe»
Security Update for Windows XP (KB2229593)—>»C:WINDOWS$NtUninstallKB2229593$spuninstspuninst.exe»
Security Update for Windows XP (KB2259922)—>»C:WINDOWS$NtUninstallKB2259922$spuninstspuninst.exe»
Security Update for Windows XP (KB2279986)—>»C:WINDOWS$NtUninstallKB2279986$spuninstspuninst.exe»
Security Update for Windows XP (KB2286198)—>»C:WINDOWS$NtUninstallKB2286198$spuninstspuninst.exe»
Security Update for Windows XP (KB2296011)—>»C:WINDOWS$NtUninstallKB2296011$spuninstspuninst.exe»
Security Update for Windows XP (KB2296199)—>»C:WINDOWS$NtUninstallKB2296199$spuninstspuninst.exe»
Security Update for Windows XP (KB2347290)—>»C:WINDOWS$NtUninstallKB2347290$spuninstspuninst.exe»
Security Update for Windows XP (KB2360937)—>»C:WINDOWS$NtUninstallKB2360937$spuninstspuninst.exe»
Security Update for Windows XP (KB2387149)—>»C:WINDOWS$NtUninstallKB2387149$spuninstspuninst.exe»
Security Update for Windows XP (KB2419632)—>»C:WINDOWS$NtUninstallKB2419632$spuninstspuninst.exe»
Security Update for Windows XP (KB2423089)—>»C:WINDOWS$NtUninstallKB2423089$spuninstspuninst.exe»
Security Update for Windows XP (KB2436673)—>»C:WINDOWS$NtUninstallKB2436673$spuninstspuninst.exe»
Security Update for Windows XP (KB2440591)—>»C:WINDOWS$NtUninstallKB2440591$spuninstspuninst.exe»
Security Update for Windows XP (KB2443105)—>»C:WINDOWS$NtUninstallKB2443105$spuninstspuninst.exe»
Security Update for Windows XP (KB923561)—>»C:WINDOWS$NtUninstallKB923561$spuninstspuninst.exe»
Security Update for Windows XP (KB938464-v2)—>»C:WINDOWS$NtUninstallKB938464-v2$spuninstspuninst.exe»
Security Update for Windows XP (KB941569)—>»C:WINDOWS$NtUninstallKB941569$spuninstspuninst.exe»
Security Update for Windows XP (KB946648)—>»C:WINDOWS$NtUninstallKB946648$spuninstspuninst.exe»
Security Update for Windows XP (KB950760)—>»C:WINDOWS$NtUninstallKB950760$spuninstspuninst.exe»
Security Update for Windows XP (KB950762)—>»C:WINDOWS$NtUninstallKB950762$spuninstspuninst.exe»
Security Update for Windows XP (KB950974)—>»C:WINDOWS$NtUninstallKB950974$spuninstspuninst.exe»
Security Update for Windows XP (KB951066)—>»C:WINDOWS$NtUninstallKB951066$spuninstspuninst.exe»
Security Update for Windows XP (KB951376-v2)—>»C:WINDOWS$NtUninstallKB951376-v2$spuninstspuninst.exe»
Security Update for Windows XP (KB951698)—>»C:WINDOWS$NtUninstallKB951698$spuninstspuninst.exe»
Security Update for Windows XP (KB951748)—>»C:WINDOWS$NtUninstallKB951748$spuninstspuninst.exe»
Security Update for Windows XP (KB952004)—>»C:WINDOWS$NtUninstallKB952004$spuninstspuninst.exe»
Security Update for Windows XP (KB952954)—>»C:WINDOWS$NtUninstallKB952954$spuninstspuninst.exe»
Security Update for Windows XP (KB954459)—>»C:WINDOWS$NtUninstallKB954459$spuninstspuninst.exe»
Security Update for Windows XP (KB954600)—>»C:WINDOWS$NtUninstallKB954600$spuninstspuninst.exe»
Security Update for Windows XP (KB955069)—>»C:WINDOWS$NtUninstallKB955069$spuninstspuninst.exe»
Security Update for Windows XP (KB956572)—>»C:WINDOWS$NtUninstallKB956572$spuninstspuninst.exe»
Security Update for Windows XP (KB956744)—>»C:WINDOWS$NtUninstallKB956744$spuninstspuninst.exe»
Security Update for Windows XP (KB956802)—>»C:WINDOWS$NtUninstallKB956802$spuninstspuninst.exe»
Security Update for Windows XP (KB956803)—>»C:WINDOWS$NtUninstallKB956803$spuninstspuninst.exe»
Security Update for Windows XP (KB956841)—>»C:WINDOWS$NtUninstallKB956841$spuninstspuninst.exe»
Security Update for Windows XP (KB956844)—>»C:WINDOWS$NtUninstallKB956844$spuninstspuninst.exe»
Security Update for Windows XP (KB957097)—>»C:WINDOWS$NtUninstallKB957097$spuninstspuninst.exe»
Security Update for Windows XP (KB958215)—>»C:WINDOWS$NtUninstallKB958215$spuninstspuninst.exe»
Security Update for Windows XP (KB958644)—>»C:WINDOWS$NtUninstallKB958644$spuninstspuninst.exe»
Security Update for Windows XP (KB958687)—>»C:WINDOWS$NtUninstallKB958687$spuninstspuninst.exe»
Security Update for Windows XP (KB958690)—>»C:WINDOWS$NtUninstallKB958690$spuninstspuninst.exe»
Security Update for Windows XP (KB958869)—>»C:WINDOWS$NtUninstallKB958869$spuninstspuninst.exe»
Security Update for Windows XP (KB959426)—>»C:WINDOWS$NtUninstallKB959426$spuninstspuninst.exe»
Security Update for Windows XP (KB960225)—>»C:WINDOWS$NtUninstallKB960225$spuninstspuninst.exe»
Security Update for Windows XP (KB960714)—>»C:WINDOWS$NtUninstallKB960714$spuninstspuninst.exe»
Security Update for Windows XP (KB960715)—>»C:WINDOWS$NtUninstallKB960715$spuninstspuninst.exe»
Security Update for Windows XP (KB960803)—>»C:WINDOWS$NtUninstallKB960803$spuninstspuninst.exe»
Security Update for Windows XP (KB960859)—>»C:WINDOWS$NtUninstallKB960859$spuninstspuninst.exe»
Security Update for Windows XP (KB961371)—>»C:WINDOWS$NtUninstallKB961371$spuninstspuninst.exe»
Security Update for Windows XP (KB961373)—>»C:WINDOWS$NtUninstallKB961373$spuninstspuninst.exe»
Security Update for Windows XP (KB961501)—>»C:WINDOWS$NtUninstallKB961501$spuninstspuninst.exe»
Security Update for Windows XP (KB963027)—>»C:WINDOWS$NtUninstallKB963027$spuninstspuninst.exe»
Security Update for Windows XP (KB968537)—>»C:WINDOWS$NtUninstallKB968537$spuninstspuninst.exe»
Security Update for Windows XP (KB969059)—>»C:WINDOWS$NtUninstallKB969059$spuninstspuninst.exe»
Security Update for Windows XP (KB969897)—>»C:WINDOWS$NtUninstallKB969897$spuninstspuninst.exe»
Security Update for Windows XP (KB969898)—>»C:WINDOWS$NtUninstallKB969898$spuninstspuninst.exe»
Security Update for Windows XP (KB969947)—>»C:WINDOWS$NtUninstallKB969947$spuninstspuninst.exe»
Security Update for Windows XP (KB970238)—>»C:WINDOWS$NtUninstallKB970238$spuninstspuninst.exe»
Security Update for Windows XP (KB970430)—>»C:WINDOWS$NtUninstallKB970430$spuninstspuninst.exe»
Security Update for Windows XP (KB971468)—>»C:WINDOWS$NtUninstallKB971468$spuninstspuninst.exe»
Security Update for Windows XP (KB971486)—>»C:WINDOWS$NtUninstallKB971486$spuninstspuninst.exe»
Security Update for Windows XP (KB971557)—>»C:WINDOWS$NtUninstallKB971557$spuninstspuninst.exe»
Security Update for Windows XP (KB971633)—>»C:WINDOWS$NtUninstallKB971633$spuninstspuninst.exe»
Security Update for Windows XP (KB971657)—>»C:WINDOWS$NtUninstallKB971657$spuninstspuninst.exe»
Security Update for Windows XP (KB971961)—>»C:WINDOWS$NtUninstallKB971961$spuninstspuninst.exe»
Security Update for Windows XP (KB972260)—>»C:WINDOWS$NtUninstallKB972260$spuninstspuninst.exe»
Security Update for Windows XP (KB972270)—>»C:WINDOWS$NtUninstallKB972270$spuninstspuninst.exe»
Security Update for Windows XP (KB973346)—>»C:WINDOWS$NtUninstallKB973346$spuninstspuninst.exe»
Security Update for Windows XP (KB973354)—>»C:WINDOWS$NtUninstallKB973354$spuninstspuninst.exe»
Security Update for Windows XP (KB973507)—>»C:WINDOWS$NtUninstallKB973507$spuninstspuninst.exe»
Security Update for Windows XP (KB973525)—>»C:WINDOWS$NtUninstallKB973525$spuninstspuninst.exe»
Security Update for Windows XP (KB973869)—>»C:WINDOWS$NtUninstallKB973869$spuninstspuninst.exe»
Security Update for Windows XP (KB973904)—>»C:WINDOWS$NtUninstallKB973904$spuninstspuninst.exe»
Security Update for Windows XP (KB974112)—>»C:WINDOWS$NtUninstallKB974112$spuninstspuninst.exe»
Security Update for Windows XP (KB974318)—>»C:WINDOWS$NtUninstallKB974318$spuninstspuninst.exe»
Security Update for Windows XP (KB974392)—>»C:WINDOWS$NtUninstallKB974392$spuninstspuninst.exe»
Security Update for Windows XP (KB974455)—>»C:WINDOWS$NtUninstallKB974455$spuninstspuninst.exe»
Security Update for Windows XP (KB974571)—>»C:WINDOWS$NtUninstallKB974571$spuninstspuninst.exe»
Security Update for Windows XP (KB975025)—>»C:WINDOWS$NtUninstallKB975025$spuninstspuninst.exe»
Security Update for Windows XP (KB975467)—>»C:WINDOWS$NtUninstallKB975467$spuninstspuninst.exe»
Security Update for Windows XP (KB975560)—>»C:WINDOWS$NtUninstallKB975560$spuninstspuninst.exe»
Security Update for Windows XP (KB975561)—>»C:WINDOWS$NtUninstallKB975561$spuninstspuninst.exe»
Security Update for Windows XP (KB975562)—>»C:WINDOWS$NtUninstallKB975562$spuninstspuninst.exe»
Security Update for Windows XP (KB975713)—>»C:WINDOWS$NtUninstallKB975713$spuninstspuninst.exe»
Security Update for Windows XP (KB977165-v2)—>»C:WINDOWS$NtUninstallKB977165-v2$spuninstspuninst.exe»
Security Update for Windows XP (KB977816)—>»C:WINDOWS$NtUninstallKB977816$spuninstspuninst.exe»
Security Update for Windows XP (KB977914)—>»C:WINDOWS$NtUninstallKB977914$spuninstspuninst.exe»
Security Update for Windows XP (KB978037)—>»C:WINDOWS$NtUninstallKB978037$spuninstspuninst.exe»
Security Update for Windows XP (KB978251)—>»C:WINDOWS$NtUninstallKB978251$spuninstspuninst.exe»
Security Update for Windows XP (KB978262)—>»C:WINDOWS$NtUninstallKB978262$spuninstspuninst.exe»
Security Update for Windows XP (KB978338)—>»C:WINDOWS$NtUninstallKB978338$spuninstspuninst.exe»
Security Update for Windows XP (KB978542)—>»C:WINDOWS$NtUninstallKB978542$spuninstspuninst.exe»
Security Update for Windows XP (KB978601)—>»C:WINDOWS$NtUninstallKB978601$spuninstspuninst.exe»
Security Update for Windows XP (KB978706)—>»C:WINDOWS$NtUninstallKB978706$spuninstspuninst.exe»
Security Update for Windows XP (KB979309)—>»C:WINDOWS$NtUninstallKB979309$spuninstspuninst.exe»
Security Update for Windows XP (KB979482)—>»C:WINDOWS$NtUninstallKB979482$spuninstspuninst.exe»
Security Update for Windows XP (KB979683)—>»C:WINDOWS$NtUninstallKB979683$spuninstspuninst.exe»
Security Update for Windows XP (KB979687)—>»C:WINDOWS$NtUninstallKB979687$spuninstspuninst.exe»
Security Update for Windows XP (KB980195)—>»C:WINDOWS$NtUninstallKB980195$spuninstspuninst.exe»
Security Update for Windows XP (KB980218)—>»C:WINDOWS$NtUninstallKB980218$spuninstspuninst.exe»
Security Update for Windows XP (KB980232)—>»C:WINDOWS$NtUninstallKB980232$spuninstspuninst.exe»
Security Update for Windows XP (KB980436)—>»C:WINDOWS$NtUninstallKB980436$spuninstspuninst.exe»
Security Update for Windows XP (KB981322)—>»C:WINDOWS$NtUninstallKB981322$spuninstspuninst.exe»
Security Update for Windows XP (KB981852)—>»C:WINDOWS$NtUninstallKB981852$spuninstspuninst.exe»
Security Update for Windows XP (KB981957)—>»C:WINDOWS$NtUninstallKB981957$spuninstspuninst.exe»
Security Update for Windows XP (KB981997)—>»C:WINDOWS$NtUninstallKB981997$spuninstspuninst.exe»
Security Update for Windows XP (KB982132)—>»C:WINDOWS$NtUninstallKB982132$spuninstspuninst.exe»
Security Update for Windows XP (KB982214)—>»C:WINDOWS$NtUninstallKB982214$spuninstspuninst.exe»
Security Update for Windows XP (KB982665)—>»C:WINDOWS$NtUninstallKB982665$spuninstspuninst.exe»
Security Update for Windows XP (KB982802)—>»C:WINDOWS$NtUninstallKB982802$spuninstspuninst.exe»
Skype Toolbars—>MsiExec.exe /I{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
Skype™ 5.0—>MsiExec.exe /X{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}
SoundMAX—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime100Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{F0A37341-D692-11D4-A984-009027EC0A9C}setup.exe» -l0x19 -removeonly
SUPERAntiSpyware—>»C:Program FilesSUPERAntiSpywareUninstall.exe»
The Sims — Pet Stories—>»C:GamesThe Sims — Pet Storiesunins000.exe»
The Sims 2 Apartment Life—>C:GamesTHESIM~1UNWISE.EXE C:GamesTHESIM~1INSTALL.LOG
The Sims 2 Double Deluxe—>C:GamesTheSims2ApartmentLifeunwise.exe
The Sims 2—>C:Program FilesEA GAMESThe Sims 2EAUninstall.exe
The Sims™ 2 Переезд в квартиру—>C:GamesTheSims2ApartmentLifeunwise.exe
Tildes Biroja 2005 servisu 2. labojums—>MsiExec.exe /I{E89B296A-88D2-460E-B896-F7EC1F99DB2B}
Tildes Birojs 2005—>MsiExec.exe /I{36E408F0-DF8A-4F9B-BF26-AED92C789F5D}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)—>C:WINDOWSsystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=»»
Update for Windows Internet Explorer 8 (KB975364)—>»C:WINDOWSie8updatesKB975364-IE8spuninstspuninst.exe»
Update for Windows Internet Explorer 8 (KB976662)—>»C:WINDOWSie8updatesKB976662-IE8spuninstspuninst.exe»
Update for Windows Internet Explorer 8 (KB976749)—>»C:WINDOWSie8updatesKB976749-IE8spuninstspuninst.exe»
Update for Windows Internet Explorer 8 (KB980182)—>»C:WINDOWSie8updatesKB980182-IE8spuninstspuninst.exe»
Update for Windows XP (KB2141007)—>»C:WINDOWS$NtUninstallKB2141007$spuninstspuninst.exe»
Update for Windows XP (KB2345886)—>»C:WINDOWS$NtUninstallKB2345886$spuninstspuninst.exe»
Update for Windows XP (KB2467659)—>»C:WINDOWS$NtUninstallKB2467659$spuninstspuninst.exe»
Update for Windows XP (KB951978)—>»C:WINDOWS$NtUninstallKB951978$spuninstspuninst.exe»
Update for Windows XP (KB955759)—>»C:WINDOWS$NtUninstallKB955759$spuninstspuninst.exe»
Update for Windows XP (KB955839)—>»C:WINDOWS$NtUninstallKB955839$spuninstspuninst.exe»
Update for Windows XP (KB967715)—>»C:WINDOWS$NtUninstallKB967715$spuninstspuninst.exe»
Update for Windows XP (KB968389)—>»C:WINDOWS$NtUninstallKB968389$spuninstspuninst.exe»
Update for Windows XP (KB971737)—>»C:WINDOWS$NtUninstallKB971737$spuninstspuninst.exe»
Update for Windows XP (KB973687)—>»C:WINDOWS$NtUninstallKB973687$spuninstspuninst.exe»
Update for Windows XP (KB973815)—>»C:WINDOWS$NtUninstallKB973815$spuninstspuninst.exe»
Uranus v9.20—>C:Documents and SettingsrexDesktopIrinaUranusUranus v9.20uninstall.exe
VegaSviri Standard—>C:Documents and SettingsrexDesktopIrinaNew Folderuninstal.exe
Winamp Toolbar—>»C:Program FilesWinamp Toolbaruninstall.exe»
Winamp—>»C:Program FilesWinampUninstWA.exe»
Windows Driver Package — Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)—>C:PROGRA~1DIFX7B44739871F4D539FA473F57A832EA4B6A59EF06DPInst.exe /d /u C:WINDOWSsystem32DRVSTOREamdk8_6FE44FCD212D4A086C7BC0C98B9A619782073FB7amdk8.inf
Windows Internet Explorer 8—>»C:WINDOWSie8spuninstspuninst.exe»
Windows XP Service Pack 3—>»C:WINDOWS$NtServicePackUninstall$spuninstspuninst.exe»
WinRAR archiver—>C:Program FilesWinRARuninstall.exe
ZET 9 Lite 0.52—>C:Documents and SettingsrexDesktopIrinaZET 9Uninstall.exe
Мадагаскар 2(TM)—>C:Program FilesInstallShield Installation Information{F8C02517-4AC3-4026-8292-ACF23E98A7D7}setup.exe -runfromtemp -l0x0419
Сталкер (версия 1)—>C:Stalker1UNINST~1.EXE C:Stalker1INSTALL.LOG

======Hosts File======

127.0.0.1 localhost

======Security center information======

AV: Kaspersky Internet Security
FW: Kaspersky Internet Security

======System event log======

Computer Name: MY-24F6AEA044AA
Event Code: 10016
Message: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}
to the user NT AUTHORITYLOCAL SERVICE SID (S-1-5-19). This security permission can be modified using the Component Services administrative tool.

Record Number: 23550
Source Name: DCOM
Time Written: 20101224212241.000000+120
Event Type: error
User: NT AUTHORITYLOCAL SERVICE

Computer Name: MY-24F6AEA044AA
Event Code: 10016
Message: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}
to the user NT AUTHORITYLOCAL SERVICE SID (S-1-5-19). This security permission can be modified using the Component Services administrative tool.

Record Number: 23549
Source Name: DCOM
Time Written: 20101224212234.000000+120
Event Type: error
User: NT AUTHORITYLOCAL SERVICE

Computer Name: MY-24F6AEA044AA
Event Code: 10016
Message: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}
to the user NT AUTHORITYLOCAL SERVICE SID (S-1-5-19). This security permission can be modified using the Component Services administrative tool.

Record Number: 23548
Source Name: DCOM
Time Written: 20101224212231.000000+120
Event Type: error
User: NT AUTHORITYLOCAL SERVICE

Computer Name: MY-24F6AEA044AA
Event Code: 10016
Message: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}
to the user NT AUTHORITYLOCAL SERVICE SID (S-1-5-19). This security permission can be modified using the Component Services administrative tool.

Record Number: 23547
Source Name: DCOM
Time Written: 20101224212214.000000+120
Event Type: error
User: NT AUTHORITYLOCAL SERVICE

Computer Name: MY-24F6AEA044AA
Event Code: 10016
Message: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}
to the user NT AUTHORITYLOCAL SERVICE SID (S-1-5-19). This security permission can be modified using the Component Services administrative tool.

Record Number: 23546
Source Name: DCOM
Time Written: 20101224212212.000000+120
Event Type: error
User: NT AUTHORITYLOCAL SERVICE

=====Application event log=====

Computer Name: MY-24F6AEA044AA
Event Code: 1000
Message: Faulting application explorer.exe, version 6.0.2900.5512, faulting module ffdshow.ax, version 1.0.5.2406, fault address 0x0019a22a.

Record Number: 2658
Source Name: Application Error
Time Written: 20100514093340.000000+180
Event Type: error
User:

Computer Name: MY-24F6AEA044AA
Event Code: 1517
Message: Windows saved user MY-24F6AEA044AArex registry while an application or service was still using the registry during log off. The memory used by the user’s registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

Record Number: 2649
Source Name: Userenv
Time Written: 20100512221536.000000+180
Event Type: warning
User: NT AUTHORITYSYSTEM

Computer Name: MY-24F6AEA044AA
Event Code: 1517
Message: Windows saved user MY-24F6AEA044AArex registry while an application or service was still using the registry during log off. The memory used by the user’s registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

Record Number: 2379
Source Name: Userenv
Time Written: 20100406223642.000000+180
Event Type: warning
User: NT AUTHORITYSYSTEM

Computer Name: MY-24F6AEA044AA
Event Code: 1517
Message: Windows saved user MY-24F6AEA044AArex registry while an application or service was still using the registry during log off. The memory used by the user’s registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

Record Number: 2354
Source Name: Userenv
Time Written: 20100403220310.000000+180
Event Type: warning
User: NT AUTHORITYSYSTEM

Computer Name: MY-24F6AEA044AA
Event Code: 1517
Message: Windows saved user MY-24F6AEA044AArex registry while an application or service was still using the registry during log off. The memory used by the user’s registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

Record Number: 2345
Source Name: Userenv
Time Written: 20100402222537.000000+180
Event Type: warning
User: NT AUTHORITYSYSTEM

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;C:Program FilesSamsungSamsung PC Studio 3
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=15
«PROCESSOR_IDENTIFIER»=x86 Family 15 Model 107 Stepping 2, AuthenticAMD
«PROCESSOR_REVISION»=6b02
«NUMBER_OF_PROCESSORS»=2
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP

---

EOF

---

[jevgenij]

И ещё

Logfile of random’s system information tool 1.08 (written by random/random)
Run by rex at 2011-01-20 12:45:11
Microsoft Windows XP Professional Service Pack 3
System drive C: has 273 GB (57%) free of 477 GB
Total RAM: 3070 MB (79% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:45:13, on 20.01.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcLog.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32PnkBstrA.exe
C:WINDOWSsystem32PnkBstrB.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesCommon FilesUlead SystemsDVDULCDRSvr.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcAppFlt.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcIp.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32RUNDLL32.EXE
C:PROGRA~1TILDES~1Pianists.exe
C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe
C:Program FilesCyberlinkShared Filesbrs.exe
C:Program FilesTildes Birojs 2005mdiction.exe
C:Program FilesAnalog DevicesSoundMAXSmax4.exe
C:Program FilesAnalog DevicesCoresmax4pnp.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:Program FilesMessengermsmsgs.exe
C:GamesDTLite4355_0068DAEMON Tools LiteDTLite.exe
C:Program FilesSUPERAntiSpywareSUPERAntiSpyware.exe
C:WINDOWSsystem32wuauclt.exe
C:Program FilesMozilla Firefoxfirefox.exe
E:New Folderboot-infoRSIT.exe
C:Program Filestrend microrex.exe

R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=41128
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 — URLSearchHook: Winamp Search Class — {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} — C:Program FilesWinamp Toolbarwinamptb.dll
O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 — BHO: Tildes Birojs — {1E6700F0-0F85-40fd-8022-7EB60AB46F10} — C:Program FilesTildes Birojs 2005IEjosla.dll
O2 — BHO: Winamp Toolbar Loader — {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} — C:Program FilesWinamp Toolbarwinamptb.dll
O2 — BHO: IEVkbdBHO — {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} — C:Program FilesKaspersky LabKaspersky Internet Security 2009ievkbd.dll
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O2 — BHO: SkypeIEPluginBHO — {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.6.5805.1910swg.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — E:New Folderbinjp2ssv.dll (file missing)
O3 — Toolbar: Tildes Birojs — {1E6700F0-0F85-40fd-8022-7EB60AB46F10} — C:Program FilesTildes Birojs 2005IEjosla.dll
O3 — Toolbar: Winamp Toolbar — {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} — C:Program FilesWinamp Toolbarwinamptb.dll
O3 — Toolbar: Google Toolbar — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O4 — HKLM..Run: [AsusStartupHelp] C:Program FilesASUSAASP1.00.14AsRunHelp.exe
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [nwiz] nwiz.exe /install
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [NeroFilterCheck] C:Program FilesCommon FilesAheadLibNeroCheck.exe
O4 — HKLM..Run: [Pianists] C:PROGRA~1TILDES~1Pianists.exe
O4 — HKLM..Run: [CheckCU] «C:PROGRA~1TILDES~1CheckCU.exe» {36E408F0-DF8A-4F9B-BF26-AED92C789F5D} Tildes Birojs 2005
O4 — HKLM..Run: [AVP] «C:Program FilesKaspersky LabKaspersky Internet Security 2009avp.exe»
O4 — HKLM..Run: [RemoteControl8] «C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe»
O4 — HKLM..Run: [PDVD8LanguageShortcut] «C:Program FilesCyberLinkPowerDVD8LanguageLanguage.exe»
O4 — HKLM..Run: [BDRegion] C:Program FilesCyberlinkShared Filesbrs.exe
O4 — HKLM..Run: [mdiction] C:Program FilesTildes Birojs 2005mdiction.exe
O4 — HKLM..Run: [SoundMAX] «C:Program FilesAnalog DevicesSoundMAXSmax4.exe» /tray
O4 — HKLM..Run: [SoundMAXPnP] C:Program FilesAnalog DevicesCoresmax4pnp.exe
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [swg] «C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe»
O4 — HKCU..Run: [MSMSGS] «C:Program FilesMessengermsmsgs.exe» /background
O4 — HKCU..Run: [DAEMON Tools Lite] «C:GamesDTLite4355_0068DAEMON Tools LiteDTLite.exe» -autorun
O4 — HKCU..Run: [RegistryBooster] «C:AVZRegistryBoosterlauncher.exe» delay 20000
O4 — HKCU..Run: [SUPERAntiSpyware] C:Program FilesSUPERAntiSpywareSUPERAntiSpyware.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Global Startup: Adobe Reader Speed Launch.lnk = C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe
O8 — Extra context menu item: &Translate with Tilde Computer Dictionary — res://C:Program FilesTildes Birojs 2005TDVLauncher.DLL /201
O8 — Extra context menu item: &Tulkot ar Tildes Datorvardnicu — res://C:Program FilesTildes Birojs 2005TDVLauncher.DLL /201
O8 — Extra context menu item: &Winamp Search — C:Documents and SettingsAll UsersApplication DataWinamp ToolbarieToolbarresourcesen-USlocalsearch.html
O8 — Extra context menu item: E&xport to Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: Google Sidewiki… — res://C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
O8 — Extra context menu item: Добавить в Анти-Баннер — C:Program FilesKaspersky LabKaspersky Internet Security 2009ie_banner_deny.htm
O9 — Extra button: Nnancnncza ealcnu aai-nsaocza — {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} — C:Program FilesKaspersky LabKaspersky Internet Security 2009SCIEPlgn.dll
O9 — Extra button: Skype Plug-In — {898EA8C8-E7FF-479B-8935-AEC46303B9E5} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O9 — Extra ‘Tools’ menuitem: Skype Plug-In — {898EA8C8-E7FF-479B-8935-AEC46303B9E5} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O16 — DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) — http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1228577891703
O16 — DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) — http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1228577878421
O18 — Protocol: skype-ie-addon-data — {91774881-D725-4E58-B298-07617B9B86A8} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 — AppInit_DLLs: C:PROGRA~1KASPER~1KASPER~1mzvkbd3.dll,C:PROGRA~1KASPER~1KASPER~1adialhk.dll,C:PROGRA~1KASPER~1KASPER~1kloehk.dll
O20 — Winlogon Notify: !SASWinLogon — C:Program FilesSUPERAntiSpywareSASWINLO.DLL
O22 — SharedTaskScheduler: Browseui preloader — {438755C2-A8BA-11D1-B96B-00A0C90312E1} — C:WINDOWSsystem32browseui.dll
O22 — SharedTaskScheduler: Component Categories cache daemon — {8C7461EF-2B13-11d2-BE35-3078302C2030} — C:WINDOWSsystem32browseui.dll
O23 — Service: Kaspersky Internet Security (avp) — Kaspersky Lab — C:Program FilesKaspersky LabKaspersky Internet Security 2009avp.exe
O23 — Service: ForceWare Intelligent Application Manager (IAM) — Unknown owner — C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcAppFlt.exe
O23 — Service: Forceware Web Interface (ForcewareWebInterface) — Apache Software Foundation — C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe
O23 — Service: Google Update pakalpojums (gupdate) (gupdate) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 — Service: ForceWare IP service (nSvcIp) — NVIDIA Corporation — C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcIp.exe
O23 — Service: ForceWare user log service (nSvcLog) — NVIDIA Corporation — C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcLog.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: PnkBstrA — Unknown owner — C:WINDOWSsystem32PnkBstrA.exe
O23 — Service: PnkBstrB — Unknown owner — C:WINDOWSsystem32PnkBstrB.exe
O23 — Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) — Protection Technology (StarForce) — C:WINDOWSsystem32sfrem01.exe
O23 — Service: Ulead Burning Helper (UleadBurningHelper) — Ulead Systems, Inc. — C:Program FilesCommon FilesUlead SystemsDVDULCDRSvr.exe
O24 — Desktop Component 0: (no name) — file:///C:/DOCUME~1/rex/LOCALS~1/Temp/msohtml1/01/clip_image001.jpg
O24 — Desktop Component 1: (no name) — file:///C:/DOCUME~1/rex/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg

—
End of file — 11227 bytes

======Scheduled tasks folder======

C:WINDOWStasksGoogleUpdateTaskMachineCore.job
C:WINDOWStasksGoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{1E6700F0-0F85-40fd-8022-7EB60AB46F10}]
Tildes Birojs — C:Program FilesTildes Birojs 2005IEjosla.dll [2005-06-05 177688]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
Winamp Toolbar Loader — C:Program FilesWinamp Toolbarwinamptb.dll [2009-02-19 1262888]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class — C:Program FilesKaspersky LabKaspersky Internet Security 2009ievkbd.dll [2008-11-11 62728]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-12-03 297648]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll [2010-09-27 1250696]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier5.6.5805.1910swg.dll [2010-10-23 843832]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — E:New Folderbinjp2ssv.dll []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{1E6700F0-0F85-40fd-8022-7EB60AB46F10} — Tildes Birojs — C:Program FilesTildes Birojs 2005IEjosla.dll [2005-06-05 177688]
{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} — Winamp Toolbar — C:Program FilesWinamp Toolbarwinamptb.dll [2009-02-19 1262888]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-12-03 297648]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«AsusStartupHelp»=C:Program FilesASUSAASP1.00.14AsRunHelp.exe [2006-11-14 363008]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2008-05-16 13529088]
«nwiz»=nwiz.exe /install []
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2008-05-16 86016]
«NeroFilterCheck»=C:Program FilesCommon FilesAheadLibNeroCheck.exe [2006-01-12 155648]
«Pianists»=C:PROGRA~1TILDES~1Pianists.exe [2005-06-05 165400]
«CheckCU»=C:PROGRA~1TILDES~1CheckCU.exe [2005-06-05 40960]
«AVP»=C:Program FilesKaspersky LabKaspersky Internet Security 2009avp.exe [2009-07-21 208616]
«RemoteControl8″=C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe [2008-03-20 83240]
«PDVD8LanguageShortcut»=C:Program FilesCyberLinkPowerDVD8LanguageLanguage.exe [2007-12-14 50472]
«BDRegion»=C:Program FilesCyberlinkShared Filesbrs.exe [2008-08-08 91432]
«mdiction»=C:Program FilesTildes Birojs 2005mdiction.exe [2005-06-05 184320]
«SoundMAX»=C:Program FilesAnalog DevicesSoundMAXSmax4.exe [2006-07-13 729088]
«SoundMAXPnP»=C:Program FilesAnalog DevicesCoresmax4pnp.exe [2006-12-18 868352]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-14 15360]
«swg»=C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2009-06-10 68856]
«MSMSGS»=C:Program FilesMessengermsmsgs.exe [2008-04-14 1695232]
«DAEMON Tools Lite»=C:GamesDTLite4355_0068DAEMON Tools LiteDTLite.exe [2009-10-30 369200]
«RegistryBooster»=C:AVZRegistryBoosterlauncher.exe delay 20000 []
«SUPERAntiSpyware»=C:Program FilesSUPERAntiSpywareSUPERAntiSpyware.exe [2011-01-13 2424560]

C:Documents and SettingsAll UsersStart MenuProgramsStartup
Adobe Reader Speed Launch.lnk — C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLs»=»C:PROGRA~1KASPER~1KASPER~1mzvkbd3.dll,C:PROGRA~1KASPER~1KASPER~1adialhk.dll,C:PROGRA~1KASPER~1KASPER~1kloehk.dll»

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotify!SASWinLogon]
C:Program FilesSUPERAntiSpywareSASWINLO.DLL [2009-09-04 548352]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyklogon]
C:WINDOWSsystem32klogon.dll [2008-11-11 218376]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}»=C:Program FilesSUPERAntiSpywareSASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«HonorAutoRunSetting»=1
«NoDriveTypeAutoRun»=28

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binApache.exe»=»C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binApache.exe:*:Enabled:Apache HTTP Server»
«C:Documents and SettingsAll UsersApplication DataKaspersky Lab Setup FilesKaspersky Internet Security 7.0.1.321Russiansetup.exe»=»C:Documents and SettingsAll UsersApplication DataKaspersky Lab Setup FilesKaspersky Internet Security 7.0.1.321Russiansetup.exe:*:Enabled:Программа установки Kaspersky Internet Security 7.0»
«C:Program FilesTildes Birojs 2005TLWS.exe»=»C:Program FilesTildes Birojs 2005TLWS.exe:*:Enabled:Tilde Search Manager»
«C:Program FilesTildes Birojs 2005TildesBirojsAutoUpdate.exe»=»C:Program FilesTildes Birojs 2005TildesBirojsAutoUpdate.exe:*:Enabled:Tilde Birojs Auto Updater»
«C:Program FilesFiraxis GamesSid Meier’s Civilization 4 DemoCivilization4.exe»=»C:Program FilesFiraxis GamesSid Meier’s Civilization 4 DemoCivilization4.exe:*:Enabled:Sid Meier’s Civilization 4 Demo»
«E:torrentuTorrent.exe»=»E:torrentuTorrent.exe:*:Enabled:µTorrent»
«C:WINDOWSsystem32PnkBstrA.exe»=»C:WINDOWSsystem32PnkBstrA.exe:*:Enabled:PnkBstrA»
«C:WINDOWSsystem32PnkBstrB.exe»=»C:WINDOWSsystem32PnkBstrB.exe:*:Enabled:PnkBstrB»
«C:Documents and SettingsrexMy DocumentsMy GamesS.T.A.L.K.E.R.Ten’.chernobylya.RUS.2007.PCS.T.A.L.K.E.RbinXR_3DA.exe»=»C:Documents and SettingsrexMy DocumentsMy GamesS.T.A.L.K.E.R.Ten’.chernobylya.RUS.2007.PCS.T.A.L.K.E.RbinXR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. (CLI)»
«C:Documents and SettingsrexMy DocumentsMy GamesS.T.A.L.K.E.R.Ten’.chernobylya.RUS.2007.PCS.T.A.L.K.E.RbindedicatedXR_3DA.exe»=»C:Documents and SettingsrexMy DocumentsMy GamesS.T.A.L.K.E.R.Ten’.chernobylya.RUS.2007.PCS.T.A.L.K.E.RbindedicatedXR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. (SRV)»
«C:Documents and SettingsrexMy DocumentsMy GamesS.T.A.L.K.E.RbinXR_3DA.exe»=»C:Documents and SettingsrexMy DocumentsMy GamesS.T.A.L.K.E.RbinXR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. (CLI)»
«C:Documents and SettingsrexMy DocumentsMy GamesS.T.A.L.K.E.RbindedicatedXR_3DA.exe»=»C:Documents and SettingsrexMy DocumentsMy GamesS.T.A.L.K.E.RbindedicatedXR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. (SRV)»
«C:Program FilesCyberLinkPowerDVD8PowerDVD8.exe»=»C:Program FilesCyberLinkPowerDVD8PowerDVD8.exe:*:Enabled:CyberLink PowerDVD 8.0»
«C:Program FilesGoogleGoogle Earthclientgoogleearth.exe»=»C:Program FilesGoogleGoogle Earthclientgoogleearth.exe:*:Disabled:Google Earth»
«C:Program FilesSkypePlugin ManagerskypePM.exe»=»C:Program FilesSkypePlugin ManagerskypePM.exe:*:Enabled:Skype Extras Manager»
«C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype»
«C:WINDOWSsystem32rundll32.exe»=»C:WINDOWSsystem32rundll32.exe:*:Enabled:Run a DLL as an App»
«C:WINDOWSsystem32dpvsetup.exe»=»C:WINDOWSsystem32dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesCyberLinkPowerDVD8PowerDVD8.exe»=»C:Program FilesCyberLinkPowerDVD8PowerDVD8.exe:*:Enabled:CyberLink PowerDVD 8.0»

======List of files/folders created in the last 1 months======

2011-01-20 12:44:09 —-D—- C:Program Filestrend micro
2011-01-20 12:44:08 —-D—- C:rsit
2011-01-20 12:09:27 —-ASH—- C:pagefile.sys
2011-01-19 21:10:06 —-D—- C:WINDOWSpss
2011-01-19 20:07:51 —-D—- C:Documents and SettingsrexApplication DataSUPERAntiSpyware.com
2011-01-19 20:07:51 —-D—- C:Documents and SettingsAll UsersApplication DataSUPERAntiSpyware.com
2011-01-19 20:07:14 —-D—- C:Program FilesSUPERAntiSpyware
2011-01-19 19:47:09 —-A—- C:SAFEBOOT_REPAIR.TXT
2011-01-19 11:23:54 —-A—- C:WINDOWSsystem32driversuze4mtyw.sys
2011-01-19 10:21:19 —-HDC—- C:WINDOWS$NtUninstallKB2419632$
2011-01-05 15:35:48 —-D—- C:WINDOWSsystem32NtmsData
2011-01-05 12:46:35 —-A—- C:WINDOWSAscd_tmp.ini
2011-01-05 12:12:38 —-RA—- C:WINDOWSsystem32driversaeaudio.sys
2011-01-05 12:12:37 —-RA—- C:WINDOWSsystem32driverssenfilt.sys
2011-01-05 12:12:37 —-RA—- C:WINDOWSsystem32driversADIHdAud.sys
2011-01-05 12:04:24 —-N—- C:WINDOWSsystem32wdmioctl.dll
2011-01-05 12:04:23 —-N—- C:WINDOWSsystem32SMMedia.dll
2011-01-05 12:04:21 —-N—- C:WINDOWSsystem32DSndUp.exe
2011-01-05 12:04:21 —-N—- C:WINDOWSsystem32CleanUp.exe
2010-12-27 14:43:47 —-D—- C:New Folder
2010-12-24 21:07:51 —-D—- C:Documents and SettingsAll UsersApplication DatanView_Profiles

======List of files/folders modified in the last 1 months======

2011-01-20 12:45:11 —-D—- C:WINDOWSTemp
2011-01-20 12:44:15 —-D—- C:WINDOWSPrefetch
2011-01-20 12:44:09 —-RD—- C:Program Files
2011-01-20 12:39:13 —-D—- C:Program FilesMozilla Firefox
2011-01-20 12:28:15 —-D—- C:Documents and SettingsAll UsersApplication DataKaspersky Lab
2011-01-20 12:25:59 —-A—- C:WINDOWSSchedLgU.Txt
2011-01-20 12:19:12 —-RSH—- C:boot.ini
2011-01-20 12:19:12 —-A—- C:WINDOWSwin.ini
2011-01-20 12:19:12 —-A—- C:WINDOWSsystem.ini
2011-01-19 21:10:06 —-D—- C:WINDOWS
2011-01-19 20:09:28 —-D—- C:WINDOWSsystem32CatRoot2
2011-01-19 19:47:08 —-D—- C:WINDOWSrepair
2011-01-19 12:31:52 —-D—- C:WINDOWSsystem32drivers
2011-01-19 10:27:41 —-D—- C:WINDOWSsystem32
2011-01-19 10:21:28 —-A—- C:WINDOWSsystem32MRT.exe
2011-01-19 10:21:25 —-HD—- C:WINDOWSinf
2011-01-19 10:21:21 —-RSHDC—- C:WINDOWSsystem32dllcache
2011-01-19 10:21:07 —-HD—- C:WINDOWS$hf_mig$
2011-01-11 17:58:35 —-D—- C:Documents and SettingsrexApplication DataSkype
2011-01-11 17:51:39 —-D—- C:Documents and SettingsrexApplication DataskypePM
2011-01-06 13:46:30 —-D—- C:WINDOWSMinidump
2011-01-05 12:54:22 —-D—- C:WINDOWSsystem32ReinstallBackups
2011-01-05 12:13:06 —-D—- C:WINDOWSsystem32CatRoot
2011-01-05 12:12:39 —-D—- C:WINDOWSsystem
2011-01-05 12:12:38 —-D—- C:Program FilesAnalog Devices
2011-01-05 11:59:01 —-A—- C:WINDOWSAS_Debug.txt
2011-01-02 19:33:54 —-SHD—- C:WINDOWSInstaller
2010-12-31 22:21:41 —-D—- C:Documents and SettingsrexApplication DatauTorrent
2010-12-30 20:12:38 —-A—- C:WINDOWSNeroDigital.ini
2010-12-27 17:57:17 —-D—- C:Program FilesTildes Birojs 2005
2010-12-27 15:20:28 —-HD—- C:Program FilesInstallShield Installation Information
2010-12-26 00:12:24 —-D—- C:Irina
2010-12-24 21:06:12 —-SD—- C:Documents and SettingsrexApplication DataMicrosoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 kl1;Kl1; C:WINDOWSsystem32driverskl1.sys [2008-07-21 121872]
R0 klbg;Kaspersky Lab Boot Guard Driver; C:WINDOWSsystem32driversklbg.sys [2009-04-06 33808]
R0 nvata;nvata; C:WINDOWSsystem32DRIVERSnvata.sys [2006-08-21 105344]
R0 PxHelp20;PxHelp20; C:WINDOWSSystem32DriversPxHelp20.sys [2007-03-08 43528]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:WINDOWSSystem32driverssfdrv01.sys [2005-05-17 50176]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:WINDOWSSystem32driverssfhlp02.sys [2005-05-16 6656]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:WINDOWSSystem32driverssfsync02.sys [2004-12-03 20544]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:WINDOWSSystem32driverssfvfs02.sys [2005-06-27 66560]
R0 sptd;sptd; C:WINDOWSSystem32Driverssptd.sys [2010-08-09 691696]
R1 AmdK8;AMD Processor Driver; C:WINDOWSsystem32DRIVERSAmdK8.sys [2006-06-18 36864]
R1 AsIO;AsIO; C:WINDOWSsystem32driversAsIO.sys [2006-10-18 12664]
R1 klif;Kaspersky Lab Driver; C:WINDOWSsystem32DRIVERSklif.sys [2009-04-06 226832]
R1 NVTCP;NVIDIA TCP/IP Protocol Driver; C:WINDOWSSystem32DRIVERSNVTcp.sys [2006-09-11 110592]
R1 PCLEPCI;PCLEPCI; ??C:WINDOWSsystem32driverspclepci.sys []
R1 SASDIFSV;SASDIFSV; ??C:Program FilesSUPERAntiSpywareSASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; ??C:Program FilesSUPERAntiSpywareSASKUTIL.SYS []
R1 StarOpen;StarOpen; C:WINDOWSsystem32driversStarOpen.sys [2006-07-24 5632]
R1 uze4mtyw;AVZ-RK Kernel Driver; ??C:WINDOWSsystem32Driversuze4mtyw.sys []
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:WINDOWSSystem32driversws2ifsl.sys [2001-08-23 12032]
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}; ??C:Program FilesCyberLinkPowerDVD800.fcl []
R2 NvNdis;NVIDIA NDIS IO Control Driver; ??C:WINDOWSsystem32DriversNvNdis.sys []
R2 rspndr;Link-Layer Topology Discovery Responder; C:WINDOWSsystem32DRIVERSrspndr.sys [2007-02-18 62336]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:WINDOWSsystem32driversADIHdAud.sys [2007-01-16 293888]
R3 AEAudio;AE Audio Service; C:WINDOWSsystem32driversAEAudio.sys [2006-08-07 93952]
R3 FStarForce;FStarForce; C:WINDOWSsystem32DRIVERSFStarForce.sys [2009-03-02 8704]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2007-02-18 138752]
R3 hidusb;Microsoft HID Class Driver; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-13 10368]
R3 Iviaspi;IVI ASPI Shell; C:WINDOWSsystem32driversiviaspi.sys [2005-07-26 10368]
R3 KLFLTDEV;Kaspersky Lab KLFltDev; C:WINDOWSsystem32DRIVERSklfltdev.sys [2008-03-13 26640]
R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:WINDOWSsystem32DRIVERSklim5.sys [2008-04-30 24592]
R3 MTsensor;ATK0110 ACPI UTILITY; C:WINDOWSsystem32DRIVERSASACPI.sys [2004-08-13 5810]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2008-05-16 6557408]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:WINDOWSsystem32DRIVERSNVENETFD.sys [2006-09-11 57856]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:WINDOWSsystem32DRIVERSnvnetbus.sys [2006-09-11 19968]
R3 pfc;Padus ASPI Shell; C:WINDOWSsystem32driverspfc.sys [2004-10-11 9856]
R3 SenFiltService;SenFilt Service; C:WINDOWSsystem32driversSenfilt.sys [2006-03-17 392960]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-13 32128]
R3 usbstor;USB Mass Storage Driver; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-13 26368]
S0 sfsync04;StarForce Protection Synchronization Driver (version 4.x); C:WINDOWSsystem32driverssfsync04.sys []
S2 adfs;adfs; C:WINDOWSsystem32driversadfs.sys []
S3 alp3rb3f;alp3rb3f; C:WINDOWSsystem32driversalp3rb3f.sys []
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:WINDOWSsystem32DRIVERSss_bus.sys [2007-05-02 83592]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:WINDOWSsystem32DRIVERSss_mdfl.sys [2007-05-02 15112]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:WINDOWSsystem32DRIVERSss_mdm.sys [2007-05-02 109704]
S3 usbprint;Microsoft USB PRINTER Class; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-13 25856]
S3 usbscan;USB Scanner Driver; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-13 15104]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avp;Kaspersky Internet Security; C:Program FilesKaspersky LabKaspersky Internet Security 2009avp.exe [2009-07-21 208616]
R2 ForceWare Intelligent Application Manager (IAM);ForceWare Intelligent Application Manager (IAM); C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcAppFlt.exe [2006-09-11 172032]
R2 ForcewareWebInterface;Forceware Web Interface; C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2binapache.exe [2006-04-13 20543]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-19 322120]
R2 nSvcIp;ForceWare IP service; C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcIp.exe [2006-09-11 135227]
R2 nSvcLog;ForceWare user log service; C:Program FilesNVIDIA CorporationNetworkAccessManagerbinnSvcLog.exe [2006-09-11 65599]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2008-05-16 159812]
R2 PnkBstrA;PnkBstrA; C:WINDOWSsystem32PnkBstrA.exe [2009-01-31 66872]
R2 PnkBstrB;PnkBstrB; C:WINDOWSsystem32PnkBstrB.exe [2009-01-31 107832]
R2 UleadBurningHelper;Ulead Burning Helper; C:Program FilesCommon FilesUlead SystemsDVDULCDRSvr.exe [2004-12-13 49152]
S2 gupdate;Google Update pakalpojums (gupdate); C:Program FilesGoogleUpdateGoogleUpdate.exe [2010-02-07 135664]
S2 sfrem01;SF FrontLine Drivers Auto Removal (v1); C:WINDOWSsystem32sfrem01.exe [2006-05-10 353912]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-06-12 182768]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 UMWdf;Windows User Mode Driver Framework; C:WINDOWSsystem32wdfmgr.exe [2007-02-18 38912]
S3 WMConnectCDS;Windows Media Connect Service; C:Program FilesWindows Media Connect 2wmccds.exe [2005-10-06 855552]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-07-29 132096]

---

EOF

---

[Автор]

Сообщения