рс defolder

[yuliyaag]

Помогите!!!!!!!!!Эта зараза никак удаляться не желает!!!!!!!!
\
Logfile of random’s system information tool 1.08 (written by random/random)
Run by User at 2010-09-17 11:35:40
Microsoft Windows XP Professional Service Pack 2
System drive C: has 503 MB (2%) free of 20 GB
Total RAM: 2047 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:35:42, on 17.09.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesDef GroupPC Defenderpcdef.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32ctfmon.exe
C:Program FilesDef GroupPC Defenderproccheck.exe
C:WINDOWSRTHDCPL.EXE
C:WINDOWSsystem32RUNDLL32.EXE
C:WINDOWSSamsungPanelMgrSSMMgr.exe
C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe
C:Program FilesJavajre6binjusched.exe
C:Program FilesiTunesiTunesHelper.exe
C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe
C:Program FilesSkypePhoneSkype.exe
C:Program FilesMessengermsmsgs.exe
D:Download Masterdmaster.exe
D:GameWOLFENSTEINSPdaemon.exe
C:Program FilesMicrosoft OfficeOffice12ONENOTEM.EXE
C:Program FilesSkypePlugin ManagerskypePM.exe
C:WINDOWSsystem32svchost.exe
C:Program Files2gisUpdateClientWin32UpdateClientService.exe
C:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe
C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
C:Program FilesJavajre6binjqs.exe
C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe
C:WINDOWSsystem32nvsvc32.exe
C:Documents and SettingsAll UsersApplication DataWin32S3DCService.exe
C:WINDOWSSystem32PAStiSvc.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesiPodbiniPodService.exe
C:WINDOWSSystem32alg.exe
C:WINDOWSsystem32wuauclt.exe
C:Program FilesMozilla Firefoxfirefox.exe
D:ПрограммыRSIT.exe
C:WINDOWSsystem32wbemwmiprvse.exe
C:Program Filestrend microUser.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60446
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=155829
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60446
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60446
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60446
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60446
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — D:Program FilesMradllnewmrasearch.dll (file missing)
R3 — URLSearchHook: Yahoo! Toolbar — {EF99BD32-C1FB-11D2-892F-0090271D4F88} — C:Program FilesYahoo!CompanionInstallscpnyt.dll (file missing)
F2 — REG:system.ini: UserInit=C:WINDOWSsystem32userinit.exe,»C:Program FilesDef GroupPC Defenderpcdef.exe»
O2 — BHO: &Yahoo! Toolbar Helper — {02478D38-C3F9-4efb-9B51-7695ECA05670} — C:Program FilesYahoo!CompanionInstallscpnyt.dll (file missing)
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: IEVkbdBHO — {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} — C:Program FilesKaspersky LabKaspersky Anti-Virus 2009ievkbd.dll
O2 — BHO: Groove GFS Browser Helper — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll
O2 — BHO: Java(tm) Plug-In SSV Helper — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre6binssv.dll
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — D:DOWNLO~1dmiehlp.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 — Toolbar: DM Bar — {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — D:Download Masterdmbar.dll
O3 — Toolbar: Yahoo! Toolbar — {EF99BD32-C1FB-11D2-892F-0090271D4F88} — C:Program FilesYahoo!CompanionInstallscpnyt.dll (file missing)
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [nwiz] nwiz.exe /install
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [Samsung PanelMgr] C:WINDOWSSamsungPanelMgrSSMMgr.exe /autorun
O4 — HKLM..Run: [AVP] «C:Program FilesKaspersky LabKaspersky Anti-Virus 2009avp.exe»
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 9.0ReaderReader_sl.exe»
O4 — HKLM..Run: [Adobe ARM] «C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe»
O4 — HKLM..Run: [NeroFilterCheck] C:Program FilesCommon FilesAheadLibNeroCheck.exe
O4 — HKLM..Run: [WinSys2] C:WINDOWSsystem32winsys2.exe
O4 — HKLM..Run: [SunJavaUpdateSched] «C:Program FilesJavajre6binjusched.exe»
O4 — HKLM..Run: [QuickTime Task] «C:Program FilesQuickTimeQTTask.exe» -atboottime
O4 — HKLM..Run: [iTunesHelper] «C:Program FilesiTunesiTunesHelper.exe»
O4 — HKLM..Run: [GrooveMonitor] «C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe»
O4 — HKLM..Run: [adstopper] D:AdStoperAdStopperTrayApp.exe
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [AlcoholAutomount] «C:Program FilesAlcohol SoftAlcohol 120axcmd.exe» /automount
O4 — HKCU..Run: [Skype] «C:Program FilesSkype\PhoneSkype.exe» /nosplash /minimized
O4 — HKCU..Run: [MSMSGS] «C:Program FilesMessengermsmsgs.exe» /background
O4 — HKCU..Run: [Download Master] D:Download Masterdmaster.exe -autorun
O4 — HKCU..Run: [Deluxe Tree] C:Documents and SettingsUserРабочий столНовогодняя_елка.exe
O4 — HKCU..Run: [DAEMON Tools Lite] «D:GameWOLFENSTEINSPdaemon.exe» -autorun
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Startup: Вырезка экрана и программа запуска для OneNote 2007.lnk = C:Program FilesMicrosoft OfficeOffice12ONENOTEM.EXE
O4 — Global Startup: Adobe Gamma Loader.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe
O8 — Extra context menu item: &Search — http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZUman000
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O8 — Extra context menu item: SmarThru4 Capture Selection — C:Program FilesSmarThru 4WebCapture.dll2.htm
O8 — Extra context menu item: SmarThru4 Save as HTML — C:Program FilesSmarThru 4WebCapture.dll1.htm
O8 — Extra context menu item: SmarThru4 Save Selected Text — C:Program FilesSmarThru 4WebCapture.dll.htm
O8 — Extra context menu item: SmarThru4 Web Capture — C:Program FilesSmarThru 4WebCapture.dll
O8 — Extra context menu item: SmarThru4 Сохранение выделенного — C:Program FilesSmarThru 4WebCapture.dll2.htm
O8 — Extra context menu item: SmarThru4 Сохранить выбранный текст — C:Program FilesSmarThru 4WebCapture.dll.htm
O8 — Extra context menu item: SmarThru4 Сохранить как HTML — C:Program FilesSmarThru 4WebCapture.dll1.htm
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — D:Download Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — D:Download Masterdmie.htm
O8 — Extra context menu item: Передать на удаленную закачку DM — D:Download Masterremdown.htm
O9 — Extra button: Cтатистика защиты веб-трафика — {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} — C:Program FilesKaspersky LabKaspersky Anti-Virus 2009SCIEPlgn.dll
O9 — Extra button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — D:Download Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — D:Download Masterdmaster.exe
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra button: SmarThru4 Web Capture — {5941A0E4-56C1-4a49-9B18-05762CAC5F9B} — C:Program FilesSmarThru 4WebCapture.dll (HKCU)
O9 — Extra ‘Tools’ menuitem: SmarThru4 Web Capture — {5941A0E4-56C1-4a49-9B18-05762CAC5F9B} — C:Program FilesSmarThru 4WebCapture.dll (HKCU)
O9 — Extra button: SmarThru4 Сохранение выделенного — {A07BFEF7-DD11-4937-B23B-E70C11D2EDF4} — C:Program FilesSmarThru 4WebCapture.dll (HKCU)
O9 — Extra ‘Tools’ menuitem: SmarThru4 Сохранение выделенного — {A07BFEF7-DD11-4937-B23B-E70C11D2EDF4} — C:Program FilesSmarThru 4WebCapture.dll (HKCU)
O9 — Extra button: SmarThru4 Сохранить как HTML — {E753A93F-2367-4978-BFA0-83048C1E61CB} — C:Program FilesSmarThru 4WebCapture.dll (HKCU)
O9 — Extra ‘Tools’ menuitem: SmarThru4 Сохранить как HTML — {E753A93F-2367-4978-BFA0-83048C1E61CB} — C:Program FilesSmarThru 4WebCapture.dll (HKCU)
O9 — Extra button: SmarThru4 Сохранить выбранный текст — {F1F53366-3E11-47ab-BF84-580C94F9C9AD} — C:Program FilesSmarThru 4WebCapture.dll (HKCU)
O9 — Extra ‘Tools’ menuitem: SmarThru4 Сохранить выбранный текст — {F1F53366-3E11-47ab-BF84-580C94F9C9AD} — C:Program FilesSmarThru 4WebCapture.dll (HKCU)
O12 — Plugin for .spop: C:Program FilesInternet ExplorerPluginsNPDocBox.dll
O17 — HKLMSystemCCSServicesTcpip..{28851A5C-769A-4883-BE25-C1BE4A531DC4}: NameServer = 217.25.209.2 217.25.208.6
O18 — Protocol: grooveLocalGWS — {88FED34C-F0CA-4636-A375-3CB6248B04CD} — C:Program FilesMicrosoft OfficeOffice12GrooveSystemServices.dll
O18 — Protocol: jpip — {B92DD248-E3D5-4A92-B311-C9B841681455} — C:Program FilesLizardTechExpress Viewexpressview.dll
O18 — Protocol: sidlet — {B92DD248-E3D5-4A92-B311-C9B841681455} — C:Program FilesLizardTechExpress Viewexpressview.dll
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 — AppInit_DLLs: C:PROGRA~1KASPER~1KASPER~1mzvkbd.dll, C:PROGRA~1KASPER~1KASPER~1mzvkbd3.dll
O22 — SharedTaskScheduler: Предзагрузчик Browseui — {438755C2-A8BA-11D1-B96B-00A0C90312E1} — C:WINDOWSsystem32browseui.dll
O22 — SharedTaskScheduler: Демон кэша категорий компонентов — {8C7461EF-2B13-11d2-BE35-3078302C2030} — C:WINDOWSsystem32browseui.dll
O23 — Service: 2GIS UpdateClientService — ДубльГИС — C:Program Files2gisUpdateClientWin32UpdateClientService.exe
O23 — Service: ABBYY FineReader 9.0 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) — ABBYY (BIT Software) — C:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe
O23 — Service: Adobe LM Service — Adobe Systems — C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe
O23 — Service: Application Driver Auto Removal Service (01) (appdrvrem01) — Protection Technology — C:WINDOWSSystem32appdrvrem01.exe
O23 — Service: Apple Mobile Device — Apple Inc. — C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
O23 — Service: Kaspersky Anti-Virus (AVP) — Unknown owner — C:Program FilesKaspersky LabKaspersky Anti-Virus 2009avp.exe (file missing)
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Сервис iPod (iPod Service) — Apple Inc. — C:Program FilesiPodbiniPodService.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — C:Program FilesJavajre6binjqs.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: NBService — Nero AG — C:Program FilesNeroNero 7Nero BackItUpNBService.exe
O23 — Service: Nero BackItUp Scheduler 4.0 — Nero AG — C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: PLFlash DeviceIoControl Service — Unknown owner — C:WINDOWSsystem32IoctlSvc.exe (file missing)
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: S3D Service (Win32) — iZ3D Inc. — C:Documents and SettingsAll UsersApplication DataWin32S3DCService.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: StarWind AE Service (StarWindServiceAE) — Unknown owner — C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe (file missing)
O23 — Service: STI Simulator — Unknown owner — C:WINDOWSSystem32PAStiSvc.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe
O23 — Service: Servicio de uso compartido de red del Reproductor de Windows Media (WMPNetworkSvc) — Unknown owner — C:Program FilesWindows Media PlayerWMPNetwk.exe

—
End of file — 15050 bytes

======Scheduled tasks folder======

C:WINDOWStasksAppleSoftwareUpdate.job
C:WINDOWStasksWGASetup.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{02478D38-C3F9-4efb-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper — C:Program FilesYahoo!CompanionInstallscpnyt.dll []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2010-04-04 61888]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class — C:Program FilesKaspersky LabKaspersky Anti-Virus 2009ievkbd.dll [2008-07-29 62728]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper — C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper — C:Program FilesJavajre6binssv.dll [2010-08-28 320920]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — D:DOWNLO~1dmiehlp.dll [2009-04-16 158208]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2010-08-28 34816]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2010-08-28 73728]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — DM Bar — D:Download Masterdmbar.dll [2007-11-26 180224]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} — Yahoo! Toolbar — C:Program FilesYahoo!CompanionInstallscpnyt.dll []
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2009-12-24 8729864]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2007-10-12 16384512]
«Alcmtr»=C:WINDOWSALCMTR.EXE [2007-10-12 69632]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2007-06-28 8466432]
«nwiz»=nwiz.exe /install []
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2007-06-28 81920]
«Samsung PanelMgr»=C:WINDOWSSamsungPanelMgrSSMMgr.exe [2008-04-16 536576]
«AVP»=C:Program FilesKaspersky LabKaspersky Anti-Virus 2009avp.exe []
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2010-04-04 36272]
«Adobe ARM»=C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe [2010-06-09 976832]
«NeroFilterCheck»=C:Program FilesCommon FilesAheadLibNeroCheck.exe [2006-01-12 155648]
«WinSys2″=C:WINDOWSsystem32winsys2.exe [2006-04-29 208896]
«SunJavaUpdateSched»=C:Program FilesJavajre6binjusched.exe [2010-08-28 136600]
«QuickTime Task»=C:Program FilesQuickTimeQTTask.exe [2010-08-10 421888]
«iTunesHelper»=C:Program FilesiTunesiTunesHelper.exe [2010-09-01 421160]
«GrooveMonitor»=C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe [2008-10-25 31072]
«adstopper»=D:AdStoperAdStopperTrayApp.exe []

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2003-08-18 15360]
«AlcoholAutomount»=C:Program FilesAlcohol SoftAlcohol 120axcmd.exe /automount []
«Skype»=C:Program FilesSkype\PhoneSkype.exe [2010-05-13 26192168]
«MSMSGS»=C:Program FilesMessengermsmsgs.exe [2004-10-13 1694208]
«Download Master»=D:Download Masterdmaster.exe [2010-02-09 3783168]
«Deluxe Tree»=C:Documents and SettingsUserРабочий столНовогодняя_елка.exe []
«DAEMON Tools Lite»=D:GameWOLFENSTEINSPdaemon.exe [2009-04-23 691656]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^User^Главное меню^Программы^Автозагрузка^setup_9.0.0.722_16.09.2010_14-24.lnk]
C:DOCUME~1User016~1VIRUSR~1SETUP_~1.201startup.exe [2009-10-01 72208]

C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
Adobe Gamma Loader.lnk — C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe

C:Documents and SettingsUserГлавное менюПрограммыАвтозагрузка
Вырезка экрана и программа запуска для OneNote 2007.lnk — C:Program FilesMicrosoft OfficeOffice12ONENOTEM.EXE

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLs»=»C:PROGRA~1KASPER~1KASPER~1mzvkbd.dll, C:PROGRA~1KASPER~1KASPER~1mzvkbd3.dll»

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyklogon]
C:WINDOWSsystem32klogon.dll [2008-07-29 218376]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{B5A7F190-DDA6-4420-B3BA-52453494E6CD}»=C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«DisableTaskMgr»=0

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«EnableLUA»=0

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=28
«HonorAutoRunSetting»=1

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE»=»C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook»
«C:Program FilesMicrosoft OfficeOffice12GROOVE.EXE»=»C:Program FilesMicrosoft OfficeOffice12GROOVE.EXE:*:Enabled:Microsoft Office Groove»
«C:Program FilesMicrosoft OfficeOffice12ONENOTE.EXE»=»C:Program FilesMicrosoft OfficeOffice12ONENOTE.EXE:*:Enabled:Microsoft Office OneNote»
«D:игры для юрыNeed For Speed UndergroundSpeed.exe»=»D:игры для юрыNeed For Speed UndergroundSpeed.exe:*:Disabled:Speed»
«D:GamesBaronArcRed Baron Arcade.exe»=»D:GamesBaronArcRed Baron Arcade.exe:*:Disabled:Red Baron Arcade»
«C:Program FilesNeroNero 7Nero HomeNeroHome.exe»=»C:Program FilesNeroNero 7Nero HomeNeroHome.exe:*:Enabled:Nero Home»
«C:Program FilesSkypePlugin ManagerskypePM.exe»=»C:Program FilesSkypePlugin ManagerskypePM.exe:*:Enabled:Skype Extras Manager»
«D:Gamesiw3mp.exe»=»D:Gamesiw3mp.exe:*:Enabled:iw3mp»
«C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
«D:Program FilesiPhone Tunnel Suite 2.6 BETAiTunneliTunnel.exe»=»D:Program FilesiPhone Tunnel Suite 2.6 BETAiTunneliTunnel.exe:*:Enabled:iTunnel»
«D:hiplFlylinkDC.exe»=»D:hiplFlylinkDC.exe:*:Enabled:hiplDC++»
«C:Program FilesiTunesiTunes.exe»=»C:Program FilesiTunesiTunes.exe:*:Enabled:iTunes»
«C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype «

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

======List of files/folders created in the last 1 months======

2010-09-17 11:16:03 —-D—- C:Documents and SettingsUserApplication DataQuickScan
2010-09-17 11:04:25 —-A—- C:WINDOWSntbtlog.txt
2010-09-17 10:18:55 —-A—- C:WINDOWSsystem32driversute5otcy.sys
2010-09-17 09:31:14 —-SHD—- C:Config.Msi
2010-09-17 00:21:56 —-D—- C:WINDOWSpss
2010-09-17 00:18:44 —-D—- C:Documents and SettingsUserApplication DataTeamViewer
2010-09-16 23:40:06 —-D—- C:rsit
2010-09-16 23:40:06 —-D—- C:Program Filestrend micro
2010-09-16 23:24:39 —-D—- C:Program FilesCommon FilesPC Tools
2010-09-16 22:52:15 —-D—- C:Documents and SettingsUserApplication DataMalwarebytes
2010-09-16 22:52:09 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2010-09-16 18:51:24 —-A—- C:WINDOWSsystem32drivers4867342.sys
2010-09-16 18:51:24 —-A—- C:WINDOWSsystem32drivers4867341.sys
2010-09-16 18:51:24 —-A—- C:WINDOWSsystem32drivers486734.sys
2010-09-16 18:25:10 —-D—- C:WINDOWSLastGood
2010-09-16 17:10:09 —-D—- C:WINDOWSLastGood.Tmp
2010-09-16 17:02:03 —-A—- C:WINDOWSPJTOKRWNNHAOZFMDMFH.bat
2010-09-16 17:02:02 —-A—- C:WINDOWSNHRNIPULLFYMXDKBKD.bat
2010-09-16 17:02:02 —-A—- C:WINDOWSGAZWFDPLXAYEGNYZDIGU.bat
2010-09-16 17:02:01 —-D—- C:Program FilesDef Group
2010-09-15 12:53:21 —-D—- C:Program FilesiPod
2010-09-15 12:52:02 —-D—- C:Program FilesQuickTime
2010-09-12 12:16:30 —-D—- C:Documents and SettingsUserApplication DataYoutube Downloader HD
2010-08-29 00:04:26 —-D—- C:Program FilesFOTO-BOOKS.ru Master PhotoBook
2010-08-29 00:04:25 —-A—- C:WINDOWSsystem32Мастер фотокниг FOTO-BOOKS.ru_Мастер фотокниг FOTO-BOOKS_uninstaller.exe
2010-08-28 23:53:11 —-D—- C:My_FotoBooks
2010-08-28 23:28:29 —-D—- C:temp
2010-08-28 23:28:05 —-D—- C:Documents and SettingsAll UsersApplication DataM-Photo
2010-08-28 23:24:44 —-D—- C:Program FilesMyFotoBooks
2010-08-28 23:24:41 —-A—- C:WINDOWSsystem32My_MyFotoBooks_uninstaller.exe
2010-08-28 21:47:31 —-A—- C:WINDOWSsystem32javaws.exe
2010-08-28 21:47:31 —-A—- C:WINDOWSsystem32javaw.exe
2010-08-28 21:47:31 —-A—- C:WINDOWSsystem32java.exe
2010-08-28 21:47:09 —-D—- C:Program FilesJava
2010-08-24 13:09:42 —-D—- C:Program FilesAlawar

======List of files/folders modified in the last 1 months======

2010-09-17 11:25:20 —-D—- C:Documents and SettingsUserApplication DataSkype
2010-09-17 11:24:18 —-D—- C:WINDOWSTemp
2010-09-17 11:24:18 —-D—- C:WINDOWSsystem32CatRoot2
2010-09-17 11:22:10 —-A—- C:WINDOWSSchedLgU.Txt
2010-09-17 11:04:25 —-D—- C:WINDOWS
2010-09-17 10:43:28 —-RD—- C:Program Files
2010-09-17 10:43:27 —-D—- C:WINDOWSsystem32drivers
2010-09-17 10:15:53 —-D—- C:Documents and SettingsAll UsersApplication DataKaspersky Lab
2010-09-17 09:31:16 —-SHD—- C:WINDOWSInstaller
2010-09-17 09:31:15 —-D—- C:WINDOWSsystem32
2010-09-17 09:14:08 —-RSH—- C:boot.ini
2010-09-17 09:14:08 —-A—- C:WINDOWSwin.ini
2010-09-17 09:14:08 —-A—- C:WINDOWSsystem.ini
2010-09-17 00:14:46 —-D—- C:Documents and SettingsUserApplication DataskypePM
2010-09-17 00:13:54 —-SHD—- C:System Volume Information
2010-09-16 23:32:14 —-AD—- C:Documents and SettingsAll UsersApplication DataTEMP
2010-09-16 23:31:58 —-HD—- C:WINDOWSinf
2010-09-16 23:24:47 —-D—- C:WINDOWSWinSxS
2010-09-16 23:24:39 —-D—- C:Program FilesCommon Files
2010-09-16 19:09:52 —-D—- C:Program FilesKaspersky Lab
2010-09-16 19:09:50 —-D—- C:WINDOWSsystem32CatRoot
2010-09-16 18:25:10 —-D—- C:WINDOWSPrefetch
2010-09-16 18:23:55 —-D—- C:Documents and SettingsAll UsersApplication DataKaspersky Lab Setup Files
2010-09-16 17:03:02 —-SD—- C:WINDOWSTasks
2010-09-16 17:02:18 —-D—- C:Program FilesMozilla Firefox
2010-09-16 17:01:37 —-A—- C:WINDOWSNeroDigital.ini
2010-09-16 10:00:32 —-D—- C:Program FilesuTorrent
2010-09-15 23:10:16 —-D—- C:Documents and SettingsAll UsersApplication DataMicrosoft Help
2010-09-15 23:08:31 —-D—- C:Documents and SettingsUserApplication DatauTorrent
2010-09-15 14:02:10 —-D—- C:Documents and SettingsUserApplication DataAdobe
2010-09-15 14:02:10 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
2010-09-15 12:53:42 —-D—- C:Program FilesiTunes
2010-09-15 12:53:20 —-D—- C:Program FilesCommon FilesApple
2010-09-15 12:51:22 —-DC—- C:WINDOWSsystem32DRVSTORE
2010-09-15 12:51:19 —-D—- C:WINDOWSsystem32ReinstallBackups
2010-09-14 20:28:51 —-RSHDC—- C:WINDOWSsystem32dllcache
2010-09-13 15:55:24 —-D—- C:Documents and SettingsUserApplication DataYandex
2010-08-28 21:47:14 —-A—- C:WINDOWSsystem32deploytk.dll
2010-08-27 11:27:42 —-AC—- C:WINDOWSPhotoSnapViewer.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 04867342;04867342 Boot Guard Driver; C:WINDOWSsystem32DRIVERS4867342.sys [2009-10-22 37392]
R0 kl1;Kl1; C:WINDOWSsystem32driverskl1.sys [2008-07-21 121872]
R0 klbg;Kaspersky Lab Boot Guard Driver; C:WINDOWSsystem32driversklbg.sys [2010-06-24 33808]
R0 PxHelp20;PxHelp20; C:WINDOWSSystem32DriversPxHelp20.sys [2008-07-04 44944]
R0 sptd;sptd; C:WINDOWSSystem32Driverssptd.sys [2010-03-06 691696]
R0 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2006-09-28 77568]
R1 04867341;04867341; C:WINDOWSsystem32DRIVERS4867341.sys [2009-09-25 128016]
R1 appdrv01;Application Driver (01); C:WINDOWSSystem32Driversappdrv01.sys [2010-03-29 3033712]
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2003-08-18 40448]
R1 iZ3DInjectionDriver;Driver inject our D3D and OGL wrappers; ??C:Documents and SettingsAll UsersApplication DataWin32S3DInjectionDriver.sys []
R1 setup_9.0.0.722_16.09.2010_14-24drv;setup_9.0.0.722_16.09.2010_14-24drv; C:WINDOWSsystem32DRIVERS486734.sys [2009-10-09 315408]
R2 DgiVecp;DgiVecp; ??C:WINDOWSsystem32DriversDgiVecp.sys []
R3 FStarForce;FStarForce; C:WINDOWSsystem32DRIVERSFStarForce.sys [2009-07-13 9216]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:WINDOWSsystem32DRIVERSGEARAspiWDM.sys [2009-05-18 26600]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2005-01-07 138752]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2007-10-12 4609024]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2007-06-28 6807328]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtenicxp.sys [2007-10-12 94592]
R3 usbstor;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2003-08-18 26496]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2004-08-03 20480]
S1 KLIF;Kaspersky Lab Driver; C:WINDOWSsystem32DRIVERSklif.sys []
S2 SSPORT;SSPORT; ??C:WINDOWSsystem32DriversSSPORT.sys []
S3 ada4lrul;ada4lrul; C:WINDOWSsystem32driversada4lrul.sys []
S3 ayglfkpm;ayglfkpm; C:WINDOWSsystem32driversayglfkpm.sys []
S3 CCDECODE;Closed Caption декодер; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2004-08-03 17024]
S3 Faseppmulavf;Faseppmulavf; C:WINDOWSsystem32driversFaseppmulavf.sys []
S3 GMSIPCI;GMSIPCI; ??I:INSTALLGMSIPCI.SYS []
S3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2001-08-17 9600]
S3 libusb0;LibUsb-Win32 — Kernel Driver, Version 0.1.12.1; C:WINDOWSsystem32driverslibusb0.sys [2007-03-20 28672]
S3 MBAMSwissArmy;MBAMSwissArmy; ??C:WINDOWSsystem32driversmbamswissarmy.sys []
S3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-19 12160]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWSsystem32DRIVERSNdisIP.sys [2004-08-03 10880]
S3 PAC7311;Phenix-Q8; C:WINDOWSsystem32DRIVERSPA707UCM.SYS [2005-10-18 154752]
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2004-08-03 11136]
S3 SONYPVU1;Драйвер Sony USB фильтра (SONYPVU1); C:WINDOWSsystem32DRIVERSSONYPVU1.SYS [2001-08-17 7552]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2004-08-03 15360]
S3 USBAAPL;Apple Mobile USB Driver; C:WINDOWSSystem32Driversusbaapl.sys [2010-04-19 41984]
S3 usbaudio;Аудио драйвер USB (WDM); C:WINDOWSsystem32driversusbaudio.sys [2004-08-03 59264]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2004-08-03 31616]
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2004-08-03 25856]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2004-08-03 15104]
S3 ute5otcy;AVZ Kernel Driver; ??C:WINDOWSsystem32Driversute5otcy.sys []
S3 WpdUsb;WpdUsb; C:WINDOWSsystem32DRIVERSwpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2004-08-03 19328]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-28 82944]
S4 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2003-08-18 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 2GIS UpdateClientService;2GIS UpdateClientService; C:Program Files2gisUpdateClientWin32UpdateClientService.exe [2008-09-17 1134592]
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service; C:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe [2007-12-06 660768]
R2 Apple Mobile Device;Apple Mobile Device; C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe [2010-08-13 144672]
R2 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2010-08-28 152984]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe [2009-05-15 935208]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2007-06-28 155716]
R2 S3D Service (Win32);S3D Service (Win32); C:Documents and SettingsAll UsersApplication DataWin32S3DCService.exe [2009-11-03 360960]
R2 STI Simulator;STI Simulator; C:WINDOWSSystem32PAStiSvc.exe [2005-01-14 53248]
R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2003-08-18 14336]
R3 iPod Service;Сервис iPod; C:Program FilesiPodbiniPodService.exe [2010-09-01 820008]
S2 appdrvrem01;Application Driver Auto Removal Service (01); C:WINDOWSSystem32appdrvrem01.exe [2010-03-29 316816]
S2 AVP;Kaspersky Anti-Virus; C:Program FilesKaspersky LabKaspersky Anti-Virus 2009avp.exe -r []
S2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:WINDOWSsystem32IoctlSvc.exe []
S2 StarWindServiceAE;StarWind AE Service; C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe []
S3 Adobe LM Service;Adobe LM Service; C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe [2008-06-09 72704]
S3 aspnet_state;Служба состояний ASP.NET; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:Program FilesMicrosoft OfficeOffice12GrooveAuditService.exe [2008-10-25 65888]
S3 NBService;NBService; C:Program FilesNeroNero 7Nero BackItUpNBService.exe [2006-06-08 208896]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Servicio de uso compartido de red del Reproductor de Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2006-11-03 916480]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-07-29 132096]

---

EOF

---

[Helper]

Здравствуйте, добро пожаловать на Spyware-ru форум.

Скачайте сканер RSIT кликнув по этой ссылке и сохраните файл на вашем рабочем столе. Если эта ссылка для вас не работает, то попробуйте одну из приведённых здесь.

* Дважды кликните по скачанному файлу.
* Если у вас есть файрвал (firewall) и он покажет, что программа RSIT пытается выйти в Интернет, то разрешите ей.
* Кликните по кнопке Continue.
* Когда программа закончит работу, будут показаны два лога (log.txt и info.txt).

Вставьте оба RSIT лога (их содержимое) в ваш ответ. Каждый лог в отдельное сообщение.

Если не получиться запустить или скачать программу, то попробуйте следующее:
1. зайти в безопасном режиме
2. создать нового пользователя, авторизоваться как этот пользователь и затем попробовать скачать/запустить программу

[Автор]

Сообщения