Требует ввести код активации vkontakte.ru, mail.ru

[Jack_Carver]

После скачивания какого-то файла с сайта vkontakte.ru начало перенаправлять при входе на него на фейковый http://vkontakte/kont/login.php, так же и на этом http://vkontakte/kont/login.phр и на mail.ru требует ввести код активации(через смс, на один и тот же номер в обеих случаях). Кроме этого не грузит вообще yandex.ru youtube.com. Проверял KIS 7 с новейшими базами 3 раза, программой «аvz4», kidokiller’ом 2 раза прогнал — все чисто. Но во время проверки утилитой от Dr.Web СureIt! на каком-то этапе появлялся синий экран(белым текстом написано, что Виндовс прекратил работу для избежания поломки оборудования на англ языке). И так я 3 раза этой утилитой проверял и все 3 раза этот экран. Антивирус свой никогда не выключал и всегда обновлял сразу после выхода обновлений, раз в 1-2 недели делал проверку системы.
П.с. Через прокси-сервера на vkontakte.ru вообще не заходит. Проверял файл hosts но там только одна строка «127.0.0.1 localhost» (хотя в ниже приведенном отчете меня смущают строки:
O1 — Hosts: 91.216.122.10 vkontakte.ru
O1 — Hosts: 91.216.122.10 http://www.vkontakte.ru
O1 — Hosts: 91.216.122.10 vkontakte.com
O1 — Hosts: 91.216.122.10 http://www.vkontakte.com
O1 — Hosts: 91.216.122.10 durov.ru
O1 — Hosts: 91.216.122.10 http://www.durov.ru
O1 — Hosts: 91.216.122.10 vk.com
O1 — Hosts: 91.216.122.10 http://www.vk.com
O1 — Hosts: 91.216.122.10 odnoklassniki.ru
O1 — Hosts: 91.216.122.10 http://www.odnoklassniki.ru
O1 — Hosts: 91.216.122.10 mail.ru
O1 — Hosts: 91.216.122.10 http://www.mail.ru ) Ну Вы сами увидите.
Следуя вашей инструкции, программой RSIT.exe был создан
Только что решил проблему. Через Total cmd просмотрел папку с Hosts’ом там их оказалось 2. Один «нормальный», второй — с вышеуказанными строками) Удалил все лишнее теперь все нормально работает. Но вопрос: что делать дальше? Вирус то может и остался где-то?

log.txt Вот его содержание:

Logfile of random’s system information tool 1.07 (written by random/random)
Run by Администратор at 2010-06-09 09:18:23
Microsoft Windows XP Professional Service Pack 3
System drive C: has 7 GB (22%) free of 30 GB
Total RAM: 3071 MB (78% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:18:27, on 09.06.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20815)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:WINDOWSRTHDCPL.EXE
C:WINDOWSsystem32RUNDLL32.EXE
C:Program FilesHard Drive InspectorHDInspector.exe
C:Program FilesKaspersky LabKaspersky Internet Security 7.0avp.exe
C:Program FilesKaspersky LabKaspersky Internet Security 7.0avp.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesBonjourmDNSResponder.exe
C:Program FilesVistaDriveIconVistaDrv.exe
C:Program FilesUSB Safely RemoveUSBSafelyRemove.exe
C:WINDOWSsystem32fsproflt.exe
C:Program FilesMicrosoft OfficeOffice14MSOSYNC.EXE
C:My progamsBitMeterBitMeter2.exe
C:My progamsuTorrentutorrent.exe
C:WINDOWSsystem32HDDSvc.exe
C:Program FilesCanonIJPLMIJPLMSVC.EXE
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe
C:WINDOWSsystem32PnkBstrA.exe
C:Program FilesCyberLinkShared filesRichVideo.exe
C:Program FilesAlcohol 120StarWindStarWindServiceAE.exe
C:WINDOWSsystem32svchost.exe
C:My progamssVirtual CD v9Systemvc9secs.exe
C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE
C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSvcM.exe
C:Program FilesOperaopera.exe
C:Documents and SettingsАдминистраторРабочий столRSIT.exe
C:Program Filestrend microАдминистратор.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = 127.0.0.1;*.local
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: (no name) — — (no file)
R3 — URLSearchHook: DVDVideoSoftTB Toolbar — {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} — C:Program FilesDVDVideoSofttbDVD1.dll
O1 — Hosts: 91.216.122.10 vkontakte.ru
O1 — Hosts: 91.216.122.10 http://www.vkontakte.ru
O1 — Hosts: 91.216.122.10 vkontakte.com
O1 — Hosts: 91.216.122.10 http://www.vkontakte.com
O1 — Hosts: 91.216.122.10 durov.ru
O1 — Hosts: 91.216.122.10 http://www.durov.ru
O1 — Hosts: 91.216.122.10 vk.com
O1 — Hosts: 91.216.122.10 http://www.vk.com
O1 — Hosts: 91.216.122.10 odnoklassniki.ru
O1 — Hosts: 91.216.122.10 http://www.odnoklassniki.ru
O1 — Hosts: 91.216.122.10 mail.ru
O1 — Hosts: 91.216.122.10 http://www.mail.ru
O2 — BHO: SnagIt Toolbar Loader — {00C6482D-C502-44C8-8409-FCE54AD9C208} — C:Program FilesTechSmithSnagIt 8SnagItBHO.dll
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: Groove GFS Browser Helper — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — C:PROGRA~1MICROS~2Office14GROOVEEX.DLL
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_06binssv.dll
O2 — BHO: Windows Live Sign-in Helper — {9030D464-4C02-4ABF-8ECC-5164760863C6} — C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 — BHO: URLRedirectionBHO — {B4F3A835-0E21-4959-BA22-42B3008E02FF} — C:PROGRA~1MICROS~2Office14URLREDIR.DLL
O2 — BHO: QUICKfind BHO Object — {C08DF07A-3E49-4E25-9AB0-D3882835F153} — C:PROGRA~1TEXTwareQUICKF~1PlugInsIEHelp.dll
O2 — BHO: FDMIECookiesBHO Class — {CC59E0F9-7E43-44FA-9FAA-8377850BF205} — C:My progamsFree Download Manageriefdm2.dll
O2 — BHO: DVDVideoSoftTB Toolbar — {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} — C:Program FilesDVDVideoSofttbDVD1.dll
O3 — Toolbar: SnagIt — {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} — C:Program FilesTechSmithSnagIt 8SnagItIEAddin.dll
O3 — Toolbar: DVDVideoSoftTB Toolbar — {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} — C:Program FilesDVDVideoSofttbDVD1.dll
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [HDInspector.exe] C:Program FilesHard Drive InspectorHDInspector.exe
O4 — HKLM..Run: [AVP] «C:Program FilesKaspersky LabKaspersky Internet Security 7.0avp.exe»
O4 — HKLM..Run: [AdobeAAMUpdater-1.0] «C:Program FilesCommon FilesAdobeOOBEPDAppUWAUpdaterStartupUtility.exe»
O4 — HKLM..Run: [SwitchBoard] C:Program FilesCommon FilesAdobeSwitchBoardSwitchBoard.exe
O4 — HKLM..Run: [AdobeCS5ServiceManager] «C:Program FilesCommon FilesAdobeCS5ServiceManagerCS5ServiceManager.exe» -launchedbylogin
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe
O4 — HKCU..Run: [USB Safely Remove] C:Program FilesUSB Safely RemoveUSBSafelyRemove.exe /startup
O4 — HKCU..Run: [OfficeSyncProcess] C:Program FilesMicrosoft OfficeOffice14MSOSYNC.EXE
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,OnceFirstLogonInstall,0 (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE7_012] rundll32 advpack.dll,LaunchINFSectionEx IE7int.inf,AfterUserStart,,4,N (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,OnceFirstLogonInstall,0 (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘Default user’)
O4 — Startup: µTorrent.lnk = C:My progamsuTorrentutorrent.exe
O4 — Global Startup: Bitmeter2.lnk = C:My progamsBitMeterBitMeter2.exe
O8 — Extra context menu item: &Отправить в OneNote — res:///105
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office14EXCEL.EXE/3000
O8 — Extra context menu item: Добавить в Анти-Баннер — C:Program FilesKaspersky LabKaspersky Internet Security 7.0ie_banner_deny.htm
O8 — Extra context menu item: Закачать все с помощью FDM — file://C:My progamsFree Download Managerdlall.htm
O8 — Extra context menu item: Закачать выбранное с помощью FDM — file://C:My progamsFree Download Managerdlselected.htm
O8 — Extra context menu item: Закачать с помощью FDM — file://C:My progamsFree Download Managerdllink.htm
O8 — Extra context menu item: Скачать видео с Free Download Manager — file://C:My progamsFree Download Managerdlfvideo.htm
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra button: Cтатистика Веб-Антивируса — {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} — C:Program FilesKaspersky LabKaspersky Internet Security 7.0SCIEPlgn.dll
O9 — Extra button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:Program FilesMicrosoft OfficeOffice14ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:Program FilesMicrosoft OfficeOffice14ONBttnIE.dll
O9 — Extra button: &Связанные заметки OneNote — {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} — C:Program FilesMicrosoft OfficeOffice14ONBttnIELinkedNotes.dll
O9 — Extra ‘Tools’ menuitem: &Связанные заметки OneNote — {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} — C:Program FilesMicrosoft OfficeOffice14ONBttnIELinkedNotes.dll
O9 — Extra button: (no name) — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — (no file)
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O18 — Filter hijack: text/xml — {807573E5-5146-11D5-A672-00B0D022E945} — C:Program FilesCommon FilesMicrosoft SharedOFFICE14MSOXMLMF.DLL
O20 — AppInit_DLLs: C:PROGRA~1KASPER~1KASPER~1.0adialhk.dll
O22 — SharedTaskScheduler: Предзагрузчик Browseui — {438755C2-A8BA-11D1-B96B-00A0C90312E1} — C:WINDOWSsystem32browseui.dll
O22 — SharedTaskScheduler: Демон кэша категорий компонентов — {8C7461EF-2B13-11d2-BE35-3078302C2030} — C:WINDOWSsystem32browseui.dll
O23 — Service: Kaspersky Internet Security 7.0 (AVP) — Kaspersky Lab — C:Program FilesKaspersky LabKaspersky Internet Security 7.0avp.exe
O23 — Service: Служба Bonjour (Bonjour Service) — Apple Inc. — C:Program FilesBonjourmDNSResponder.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: FSPro Filter Service (fsproflt) — FSPro Labs — C:WINDOWSsystem32fsproflt.exe
O23 — Service: HDD Information Service (HDDSvc) — AltrixSoft (http://www.altrixsoft.com/) — C:WINDOWSsystem32HDDSvc.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 — Service: Inkjet Printer/Scanner Extended Survey Program (IJPLMSVC) — Unknown owner — C:Program FilesCanonIJPLMIJPLMSVC.EXE
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: Nero BackItUp Scheduler 4.0 — Nero AG — C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe
O23 — Service: NVIDIA Display Driver Service (nvsvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: PnkBstrA — Unknown owner — C:WINDOWSsystem32PnkBstrA.exe
O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — C:Program FilesCyberLinkShared filesRichVideo.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: ServiceLayer — Nokia. — C:Program FilesPC Connectivity SolutionServiceLayer.exe
O23 — Service: StarWind AE Service (StarWindServiceAE) — Rocket Division Software — C:Program FilesAlcohol 120StarWindStarWindServiceAE.exe
O23 — Service: SwitchBoard — Adobe Systems Incorporated — C:Program FilesCommon FilesAdobeSwitchBoardSwitchBoard.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Virtual CD v9 Management Service (VC9SecS) — H+H Software GmbH — C:My progamssVirtual CD v9Systemvc9secs.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 13354 bytes

======Scheduled tasks folder======

C:WINDOWStasksAdobeAAMUpdater-1.0-MICROSOF-B36B85-Администратор.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{00C6482D-C502-44C8-8409-FCE54AD9C208}]
SnagIt Toolbar Loader — C:Program FilesTechSmithSnagIt 8SnagItBHO.dll [2007-05-01 63048]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper — C:PROGRA~1MICROS~2Office14GROOVEEX.DLL [2009-10-29 4150160]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_06binssv.dll [2008-03-25 509328]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper — C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll [2009-03-25 403832]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler — C:PROGRA~1MICROS~2Office14URLREDIR.DLL [2009-11-03 556432]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{C08DF07A-3E49-4E25-9AB0-D3882835F153}]
QUICKfind BHO Object — C:PROGRA~1TEXTwareQUICKF~1PlugInsIEHelp.dll [2001-08-10 388608]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
FDMIECookiesBHO Class — C:My progamsFree Download Manageriefdm2.dll [2008-12-30 98304]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}]
DVDVideoSoftTB Toolbar — C:Program FilesDVDVideoSofttbDVD1.dll [2010-06-09 2736736]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} — SnagIt — C:Program FilesTechSmithSnagIt 8SnagItIEAddin.dll [2007-05-01 161352]
{e9911ec6-1bcc-40b0-9993-e0eea7f6953f} — DVDVideoSoftTB Toolbar — C:Program FilesDVDVideoSofttbDVD1.dll [2010-06-09 2736736]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2008-04-10 16861184]
«Alcmtr»=C:WINDOWSALCMTR.EXE [2005-05-03 69632]
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2009-09-27 86016]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2009-09-27 13918208]
«HDInspector.exe»=C:Program FilesHard Drive InspectorHDInspector.exe [2008-04-14 1006344]
«AVP»=C:Program FilesKaspersky LabKaspersky Internet Security 7.0avp.exe [2008-02-08 227856]
«AdobeAAMUpdater-1.0″=C:Program FilesCommon FilesAdobeOOBEPDAppUWAUpdaterStartupUtility.exe [2010-06-06 500208]
«SwitchBoard»=C:Program FilesCommon FilesAdobeSwitchBoardSwitchBoard.exe [2010-02-19 517096]
«AdobeCS5ServiceManager»=C:Program FilesCommon FilesAdobeCS5ServiceManagerCS5ServiceManager.exe [2010-02-22 406992]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-06-25 17408]
«VistaIcon»=C:Program FilesVistaDriveIconVistaDrv.exe [2008-03-23 132096]
«USB Safely Remove»=C:Program FilesUSB Safely RemoveUSBSafelyRemove.exe [2007-12-20 700928]
«OfficeSyncProcess»=C:Program FilesMicrosoft OfficeOffice14MSOSYNC.EXE [2009-11-03 649072]
«AdobeBridge»= []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAdobe ARM]
C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe [2009-12-11 948672]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAdobe Reader Speed Launcher]
C:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2009-12-22 35760]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAlcoholAutomount]
C:Program FilesAlcohol 120axcmd.exe [2007-12-22 221568]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregBCSSync]
C:Program FilesMicrosoft OfficeOffice14BCSSync.exe [2009-09-27 83312]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregCanonMyPrinter]
C:Program FilesCanonMyPrinterBJMyPrt.exe [2008-03-03 1848648]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregCanonSolutionMenu]
C:Program FilesCanonSolutionMenuCNSLMAIN.exe [2008-03-10 689488]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregLanguageShortcut]
C:Program FilesCyberLinkPowerDVDLanguageLanguage.exe [2007-02-07 54832]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregRemoteControl]
C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2007-02-07 71216]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSteam]
D:GamesHLSteam.exe -silent []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregVC9Player]
C:My progamssVirtual CD v9SystemVC9Play.exe [2007-12-03 202048]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^Администратор^Главное меню^Программы^Автозагрузка^XFilesDialog.LNK]
C:PROGRA~1XFILES~1XFILES~1.EXE [2006-08-31 249856]

C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
Bitmeter2.lnk — C:My progamsBitMeterBitMeter2.exe

C:Documents and SettingsАдминистраторГлавное менюПрограммыАвтозагрузка
µTorrent.lnk — C:My progamsuTorrentutorrent.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLS»=»C:PROGRA~1KASPER~1KASPER~1.0adialhk.dll»

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyklogon]
C:WINDOWSsystem32klogon.dll [2008-02-08 219664]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2008-03-21 133632]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{B5A7F190-DDA6-4420-B3BA-52453494E6CD}»=C:PROGRA~1MICROS~2Office14GROOVEEX.DLL [2009-10-29 4150160]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalfsproflt]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWdf01000.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkfsproflt]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWdf01000.sys]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«SynchronousMachineGroupPolicy»=0
«SynchronousUserGroupPolicy»=0

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«NoThumbnailCache»=1
«NoSMConfigurePrograms»=1
«NoSMHelp»=1

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{93eafab9-0585-11df-867c-00e04c777304}]
shellAutoRuncommand — H:LONG/island.exe
shellopencommand — H:LONG/island.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{b9e1b553-efea-11de-862d-00e04c777304}]
shellAutoRuncommand — H:RECYCLERS-51-9-25-3434476501-1644491933-601013361-1214CzuF.exe
shellopencommand — H:RECYCLERS-51-9-25-3434476501-1644491933-601013361-1214CzuF.exe

======List of files/folders created in the last 1 months======

2010-06-09 09:10:14 —-D—- C:Program Filestrend micro
2010-06-09 09:10:08 —-D—- C:rsit
2010-06-09 02:18:33 —-HD—- C:WINDOWSPIF
2010-06-08 20:56:50 —-D—- C:Documents and SettingsАдминистраторApplication DataPriceGong
2010-06-08 19:40:28 —-D—- C:Documents and SettingsАдминистраторApplication DatadWOwLy
2010-06-06 02:46:55 —-D—- C:Documents and SettingsАдминистраторApplication DataStageManager.BD092818F67280F4B42B04877600987F0111B594.1
2010-06-06 02:46:55 —-D—- C:Documents and SettingsАдминистраторApplication DataAdobe Mini Bridge CS5
2010-06-06 02:30:24 —-D—- C:Documents and SettingsAll UsersApplication Dataregid.1986-12.com.adobe
2010-06-06 02:26:25 —-D—- C:Program FilesAdobe Media Player
2010-06-06 02:24:13 —-D—- C:Program FilesCommon FilesAdobe AIR
2010-06-06 01:51:35 —-D—- C:Documents and SettingsАдминистраторApplication DataUDC Profiles
2010-06-06 01:50:59 —-A—- C:WINDOWSsystem32udcpm.dll
2010-06-06 01:50:54 —-D—- C:Program FilesUniversal Document Converter
2010-06-06 01:33:23 —-A—- C:WINDOWSiltwain.ini
2010-06-06 01:33:19 —-D—- C:Documents and SettingsAll UsersApplication DataBlueLabelSoft
2010-06-06 01:33:18 —-D—- C:Program FilesBlue Label Soft
2010-05-17 20:56:30 —-D—- C:Documents and SettingsАдминистраторApplication DataMathWorks
2010-05-17 19:38:33 —-A—- C:WINDOWSsystem32jit.dll
2010-05-17 19:38:33 —-A—- C:WINDOWSsetdebug.exe
2010-05-17 19:38:32 —-A—- C:WINDOWSsystem32javaee.dll
2010-05-17 19:38:32 —-A—- C:WINDOWSsystem32dx3j.dll
2010-05-17 19:38:26 —-A—- C:WINDOWSsystem32wjview.exe
2010-05-17 19:38:26 —-A—- C:WINDOWSsystem32vmhelper.dll
2010-05-17 19:38:26 —-A—- C:WINDOWSsystem32msjdbc10.dll
2010-05-17 19:38:25 —-A—- C:WINDOWSsystem32msjava.dll
2010-05-17 19:38:25 —-A—- C:WINDOWSsystem32msawt.dll
2010-05-17 19:38:25 —-A—- C:WINDOWSsystem32jview.exe
2010-05-17 19:38:24 —-A—- C:WINDOWSsystem32jdbgmgr.exe
2010-05-17 19:38:24 —-A—- C:WINDOWSsystem32javart.dll
2010-05-17 19:38:24 —-A—- C:WINDOWSsystem32javaprxy.dll
2010-05-17 19:38:23 —-A—- C:WINDOWSsystem32javacypt.dll
2010-05-17 19:38:23 —-A—- C:WINDOWSsystem32clspack.exe
2010-05-12 23:04:13 —-D—- C:Documents and SettingsАдминистраторApplication DataTeamViewer
2010-05-12 22:25:08 —-D—- C:Documents and SettingsАдминистраторApplication DataskypePM
2010-05-12 22:23:55 —-D—- C:Documents and SettingsАдминистраторApplication DataSkype
2010-05-12 22:23:47 —-D—- C:Program FilesCommon FilesSkype
2010-05-12 22:23:38 —-D—- C:Documents and SettingsAll UsersApplication DataSkype

======List of files/folders modified in the last 1 months======

2010-06-09 09:18:25 —-D—- C:WINDOWSTemp
2010-06-09 09:18:07 —-D—- C:Documents and SettingsAll UsersApplication DataBitmeter2
2010-06-09 09:17:59 —-D—- C:Documents and SettingsАдминистраторApplication DatauTorrent
2010-06-09 09:10:23 —-D—- C:WINDOWSPrefetch
2010-06-09 09:10:14 —-RD—- C:Program Files
2010-06-09 09:04:29 —-D—- C:WINDOWSsystem32CatRoot2
2010-06-09 09:04:29 —-D—- C:Documents and SettingsAll UsersApplication DataKaspersky Lab
2010-06-09 09:03:40 —-D—- C:WINDOWS
2010-06-09 07:26:20 —-A—- C:WINDOWSSchedLgU.Txt
2010-06-09 02:20:46 —-D—- C:WINDOWSsystem32
2010-06-09 01:59:38 —-D—- C:WINDOWSsystem32config
2010-06-09 01:59:22 —-D—- C:WINDOWSsystem32wbem
2010-06-09 01:59:21 —-D—- C:WINDOWSRegistration
2010-06-08 21:18:05 —-D—- C:WINDOWSsystem32drivers
2010-06-08 20:49:47 —-SHD—- C:WINDOWSInstaller
2010-06-08 20:49:43 —-HD—- C:WINDOWSinf
2010-06-08 20:49:22 —-D—- C:Documents and SettingsAll UsersApplication DataTechSmith
2010-06-08 20:49:20 —-D—- C:Program FilesTechSmith
2010-06-08 20:48:23 —-D—- C:Program FilesCommon FilesWise Installation Wizard
2010-06-08 01:14:52 —-D—- C:Program FilesPowerOff53
2010-06-06 02:39:17 —-D—- C:Program FilesCommon FilesAdobe
2010-06-06 02:34:54 —-SD—- C:WINDOWSTasks
2010-06-06 02:34:47 —-D—- C:Documents and SettingsАдминистраторApplication DataAdobe
2010-06-06 02:30:22 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
2010-06-06 02:29:05 —-D—- C:Program FilesAdobe
2010-06-06 02:27:36 —-RSD—- C:WINDOWSFonts
2010-06-06 02:24:13 —-D—- C:Program FilesCommon Files
2010-06-06 02:22:22 —-D—- C:WINDOWSWinSxS
2010-06-05 14:06:04 —-D—- C:Program FilesRujimCo
2010-06-04 22:35:30 —-D—- C:Documents and SettingsAll UsersApplication DataCanonIJPLM
2010-06-04 18:00:41 —-AD—- C:Documents and SettingsAll UsersApplication DataTEMP
2010-05-31 22:30:09 —-A—- C:WINDOWSNeroDigital.ini
2010-05-28 23:48:23 —-D—- C:Documents and SettingsAll UsersApplication DataMicrosoft Help
2010-05-27 00:14:42 —-D—- C:Documents and SettingsАдминистраторApplication DataFree Download Manager
2010-05-26 18:43:40 —-D—- C:Program FilesDVDVideoSoft
2010-05-25 23:42:27 —-D—- C:Documents and SettingsАдминистраторApplication DataICQ
2010-05-17 20:13:38 —-RSD—- C:WINDOWSassembly
2010-05-17 19:38:30 —-D—- C:WINDOWSjava
2010-05-14 21:11:44 —-D—- C:WINDOWSsystem32DirectX
2010-05-13 22:13:04 —-D—- C:Documents and SettingsAll UsersApplication DataCanonIJ

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-15 40704]
R1 klif;Klif; ??C:WINDOWSsystem32driversklif.sys []
R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B}; ??C:Program FilesCyberLinkPowerDVD00.fcl []
R2 Hardlock;Hardlock; ??C:WINDOWSsystem32drivershardlock.sys []
R2 Haspnt;Haspnt; ??C:WINDOWSsystem32driversHaspnt.sys []
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2008-06-05 62336]
R2 TBPanel;TBPanel; C:WINDOWSsystem32driversTBPanel.sys [2007-03-16 12256]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-15 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2008-04-17 4707328]
R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:WINDOWSsystem32DRIVERSklim5.sys [2007-12-13 24592]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2009-10-05 7655872]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtnicxp.sys [2007-11-21 104320]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-24 30336]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-14 59520]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-14 20608]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:WINDOWSsystem32driversWmBEnum.sys [2009-09-11 22792]
R3 WmXlCore;Logitech Translation Layer Driver; C:WINDOWSsystem32driversWmXlCore.sys [2009-09-11 66056]
S3 acq0tm5t;acq0tm5t; C:WINDOWSsystem32driversacq0tm5t.sys []
S3 Cardex;Cardex; ??C:WINDOWSsystem32driversTBPANEL.SYS []
S3 ENTECH;ENTECH; ??C:WINDOWSsystem32DRIVERSENTECH.sys []
S3 HH9Help.sys;HH9Help.sys; ??C:WINDOWSsystem32driversHH9Help.sys []
S3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-14 10368]
S3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-19 12160]
S3 nmwcd;Nokia USB Phone Parent; C:WINDOWSsystem32driversccdcmb.sys [2009-02-09 17664]
S3 nmwcdc;Nokia USB Generic; C:WINDOWSsystem32driversccdcmbo.sys [2009-02-09 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:WINDOWSsystem32DRIVERSpccsmcfd.sys [2008-08-26 18816]
S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtenicxp.sys [2008-01-04 105856]
S3 upperdev;upperdev; C:WINDOWSsystem32DRIVERSusbser_lowerflt.sys [2009-02-09 7808]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-22 32384]
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-14 25856]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
S3 usbser;USB Modem Driver; C:WINDOWSsystem32driversusbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:WINDOWSsystem32DRIVERSusbser_lowerfltj.sys [2009-02-09 7808]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:WINDOWSSystem32Driverswdf01000.sys [2008-03-27 503008]
S3 WmFilter;Logitech Gaming HID Filter Driver; C:WINDOWSsystem32driversWmFilter.sys [2009-09-11 35592]
S3 WmHidLo;Logitech Gaming USB Filter Driver; C:WINDOWSsystem32driversWmHidLo.sys [2009-09-11 31752]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:WINDOWSsystem32driversWmVirHid.sys [2009-09-11 14984]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2008-01-18 83328]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AVP;Kaspersky Internet Security 7.0; C:Program FilesKaspersky LabKaspersky Internet Security 7.0avp.exe [2008-02-08 227856]
R2 Bonjour Service;Служба Bonjour; C:Program FilesBonjourmDNSResponder.exe [2010-02-12 345376]
R2 fsproflt;FSPro Filter Service; C:WINDOWSsystem32fsproflt.exe [2010-01-06 142648]
R2 HDDSvc;HDD Information Service; C:WINDOWSsystem32HDDSvc.exe [2008-02-27 189704]
R2 IJPLMSVC;Inkjet Printer/Scanner Extended Survey Program; C:Program FilesCanonIJPLMIJPLMSVC.EXE [2008-01-22 103808]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-19 322120]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe [2008-09-24 935208]
R2 nvsvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2009-09-27 172100]
R2 PnkBstrA;PnkBstrA; C:WINDOWSsystem32PnkBstrA.exe [2009-12-26 66872]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:Program FilesCyberLinkShared filesRichVideo.exe [2007-02-07 173616]
R2 StarWindServiceAE;StarWind AE Service; C:Program FilesAlcohol 120StarWindStarWindServiceAE.exe [2007-05-28 275968]
R2 VC9SecS;Virtual CD v9 Management Service; C:My progamssVirtual CD v9Systemvc9secs.exe [2007-12-03 132416]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE [2009-03-25 1533824]
R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S3 aspnet_state;Служба состояний ASP.NET; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-07-29 881664]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:Program FilesMicrosoft OfficeOffice14GROOVE.EXE [2009-10-29 30603640]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2009-09-26 149336]
S3 osppsvc;Office Software Protection Platform; C:Program FilesCommon FilesMicrosoft SharedOfficeSoftwareProtectionPlatformOSPPSVC.EXE [2009-09-26 4639136]
S3 ServiceLayer;ServiceLayer; C:Program FilesPC Connectivity SolutionServiceLayer.exe [2009-06-02 637952]
S3 SwitchBoard;SwitchBoard; C:Program FilesCommon FilesAdobeSwitchBoardSwitchBoard.exe [2010-02-19 517096]
S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2008-03-21 914944]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-07-29 132096]

---

EOF

---

Info.txt
info.txt logfile of random’s system information tool 1.06 2010-06-09 09:10:27

======Uninstall list======

—>MsiExec /X{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
3DMark06—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime101Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{7F3AD00A-1819-4B15-BB7D-08B3586336D7}setup.exe» -l0x9 -removeonly
ABBYY FineReader 8.0 Professional Edition—>MsiExec.exe /I{AAF80000-22B9-4CE9-98D6-2CCF359BAC07}
ACDSee Pro 2—>MsiExec.exe /I{4AAC95F4-A30E-4EE5-A086-6F79581D0D70}
Adobe AIR—>C:Program FilesCommon FilesAdobe AIRVersions1.0ResourcesAdobe AIR Updater.exe -arp:uninstall
Adobe AIR—>MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Community Help—>msiexec /qb /x {0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
Adobe Community Help—>MsiExec.exe /I{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
Adobe Flash Player 10 ActiveX—>C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Flash Player 10 Plugin—>C:WINDOWSsystem32MacromedFlashuninstall_plugin.exe
Adobe Media Player—>msiexec /qb /x {DE3A9DC5-9A5D-6485-9662-347162C7E4CA}
Adobe Media Player—>MsiExec.exe /I{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}
Adobe Photoshop CS5—>C:Program FilesCommon FilesAdobeOOBEPDAppcorePDApp.exe —appletID=»DWA_UI» —appletVersion=»1.0″ —mode=»Uninstall» —mediaSignature=»{15FEDA5F-141C-4127-8D7E-B962D1742728}»
Adobe Reader 9.3.1 — Russian—>MsiExec.exe /I{AC76BA86-7AD7-1049-7B44-A93000000001}
AIMP2 MegaPack—>»C:My progamsAIMP2unins000.exe»
Allok Video to FLV Converter 5.1.0925—>»C:My progamsAllok Video to FLV Converterunins000.exe»
Ap PDF Split/Merge—>»C:My progamsAp PDF Split-Mergeunins000.exe»
ArtMoney PRO v7.27—>»C:My progamsArtMoneyUninstallunins000.exe»
Auslogics BoostSpeed—>»C:Program FilesAuslogicsAuslogics BoostSpeedunins000.exe»
AusLogics Disk Defrag—>»C:My progamsAusLogics Disk Defragunins000.exe»
AusLogics Emergency Recovery—>»C:Program FilesAuslogicsAusLogics Emergency Recoveryunins000.exe»
AutoIt v3.2.8.1—>C:Program FilesAutoIt3Uninstall.exe
Bad Crystal 2.60—>C:Program Filesz-drex incBad CrystalUninstall.exe
Becky! Ver.2—>C:Program FilesRimArtsB2B2Setup.exe u
BitMeter—>»C:My progamsBitMeteruninstall.exe»
Bonjour—>MsiExec.exe /X{76BC2442-0002-47FA-9617-43BAD82BEF4C}
Canon MP Navigator EX 2.0—>»C:Program FilesCanonMP Navigator EX 2.0Maint.exe» /UninstallRemove C:Program FilesCanonMP Navigator EX 2.0uninst.ini
Canon MP260 series — регистрация пользователя—>C:Program FilesCanonIJEREGMP260 seriesUNINST.EXE
Canon MP260 series MP Drivers—>»C:WINDOWSsystem32CanonIJ Uninstaller Information{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP260_seriesDelDrv.exe» /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP260_series /L0x0019
Canon Utilities Easy-PhotoPrint EX—>C:Program FilesCanonEasy-PhotoPrint EXuninst.exe uninst.ini
Canon Utilities My Printer—>C:Program FilesCanonMyPrinteruninst.exe uninst.ini
Canon Utilities Solution Menu—>C:Program FilesCanonSolutionMenuuninst.exe uninst.ini
CCleaner (remove only)—>»C:Program FilesCCleaneruninst.exe»
DiRT2—>»C:Program FilesInstallShield Installation Information{52D1D62C-FEAB-4580-849E-1DB624BADBBD}setup.exe» -runfromtemp -l0x0009 -removeonly
Driver Genius Professional Edition 2007—>»C:Program FilesDriver-SoftDriverGeniusunins000.exe»
DVDVideoSoft Toolbar—>C:PROGRA~1DVDVID~1UNWISE.EXE /U C:PROGRA~1DVDVID~1INSTALL.LOG
Everest Ultimate Edition 4.50.1330—>»C:Program FilesLavalysEVEREST Ultimate Editionunins000.exe»
FlylinkDC++ r394 build 3137—>»C:My progamsFlylinkDC++unins000.exe»
FormatFactory 2.20—>C:My progamsFormatFactoryuninst.exe
Fraps (remove only)—>»C:My progamsFraps-3uninstall.exe»
Free Download Manager 3.0—>»C:My progamsFree Download Managerunins000.exe»
Free FLV Converter V 6.7.7—>»C:My progamsFree FLV Converterunins000.exe»
Free Studio version 4.4—>»C:My progamsFree Studiounins000.exe»
Hard Drive Inspector Professional 2.90 build # 467—>C:Program FilesHard Drive InspectorUninst.exe
HashTab 2.1.0—>C:WINDOWSsystem32ShellExthtdel32.bat
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)—>C:WINDOWSsystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=»»
Hotfix for Windows Media Format 11 SDK (KB929399)—>»C:WINDOWS$NtUninstallKB929399$spuninstspuninst.exe»
ICQ6.5—>»C:Program FilesInstallShield Installation Information{60DE4033-9503-48D1-A483-7846BD217CA9}setup.exe» -runfromtemp -l0x0009 -removeonly
Inkjet Printer/Scanner Extended Survey Program—>C:Program FilesCanonIJPLMSETUP.EXE -R
Java(TM) 6 Update 6—>MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160060}
Kaspersky Internet Security 7.0—>MsiExec.exe /I{C774410D-3EF9-4DE7-AC01-332613163ECF}
Kaspersky Internet Security 7.0—>MsiExec.exe /I{C774410D-3EF9-4DE7-AC01-332613163ECF}
K-Lite Mega Codec Pack 5.5.1—>»C:Program FilesK-Lite Codec Packunins000.exe»
Kyodai Mahjongg 2006 v1.42—>»C:Program FilesKyodai Mahjongg 2006unins000.exe»
Logitech Gaming Software 5.08—>MsiExec.exe /X{33BC9D7E-E790-495E-A4EA-CFB160C17A91}
Longman WordWise Dictionary—>C:WINDOWSIsUninst.exe -f»c:program filesUninst.isu»
MATLAB R2010a—>D:Gamesmatlabuninstalluninstall.exe D:Gamesmatlab
Microsoft .NET Framework 1.1 Russian Language Pack—>MsiExec.exe /X{2BB372D9-52B4-410A-BC1A-FEAB63181EEF}
Microsoft .NET Framework 1.1—>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1—>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Language Pack — RUS—>C:WINDOWSMicrosoft.NETFrameworkv2.0.50727Microsoft .NET Framework 2.0 Language Pack — RUSinstall.exe
Microsoft .NET Framework 2.0 Service Pack 2—>MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2—>MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1—>C:WINDOWSMicrosoft.NETFrameworkv3.5Microsoft .NET Framework 3.5 SP1setup.exe
Microsoft .NET Framework 3.5 SP1—>MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Compression Client Pack 1.0 for Windows XP—>»C:WINDOWS$NtUninstallMSCompPackV1$spuninstspuninst.exe»
Microsoft Games for Windows — LIVE Redistributable—>MsiExec.exe /X{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}
Microsoft Games for Windows — LIVE—>MsiExec.exe /X{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7—>»C:WINDOWS$NtUninstallWdf01007$spuninstspuninst.exe»
Microsoft Office — профессиональный выпуск версии 2003—>MsiExec.exe /I{90110419-6000-11D3-8CFE-0150048383C9}
Microsoft Office Access MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-0015-0419-0000-0000000FF1CE}
Microsoft Office Excel MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-0016-0419-0000-0000000FF1CE}
Microsoft Office Groove MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-00BA-0419-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-0044-0419-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-00A1-0419-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-001A-0419-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-0018-0419-0000-0000000FF1CE}
Microsoft Office Professional Plus 2010 (Beta)—>MsiExec.exe /X{20140000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (English) 2010 (Beta)—>MsiExec.exe /X{20140000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2010 (Beta)—>MsiExec.exe /X{20140000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-001F-0419-0000-0000000FF1CE}
Microsoft Office Proof (Ukrainian) 2010 (Beta)—>MsiExec.exe /X{20140000-001F-0422-0000-0000000FF1CE}
Microsoft Office Proofing (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-002C-0419-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-0019-0419-0000-0000000FF1CE}
Microsoft Office Shared MUI (Russian) 2007—>MsiExec.exe /X{90120000-006E-0419-0000-0000000FF1CE}
Microsoft Office Shared MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-006E-0419-0000-0000000FF1CE}
Microsoft Office Word MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-001B-0419-0000-0000000FF1CE}
Microsoft Office профессиональный плюс 2010—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE14Office Setup Controllersetup.exe» /uninstall PROPLUS
Microsoft User-Mode Driver Framework Feature Pack 1.7—>»C:WINDOWS$NtUninstallWudf01007$spuninstspuninst.exe»
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Visual C++ 2008 Redistributable — x86 9.0.30729.17—>MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft_VC80_ATL_x86—>MsiExec.exe /I{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}
Microsoft_VC80_CRT_x86—>MsiExec.exe /I{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}
Microsoft_VC80_MFC_x86—>MsiExec.exe /I{D1A19B02-817E-4296-A45B-07853FD74D57}
Microsoft_VC80_MFCLOC_x86—>MsiExec.exe /I{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}
Microsoft_VC90_ATL_x86—>MsiExec.exe /I{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}
Microsoft_VC90_CRT_x86—>MsiExec.exe /I{08D2E121-7F6A-43EB-97FD-629B44903403}
Microsoft_VC90_MFC_x86—>MsiExec.exe /I{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}
Mozilla Firefox 3.5.3—>C:Program FilesMozilla FirefoxUninstall.exe
MSVC80_x86—>MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27}
MSXML 4.0 SP2 (KB936181)—>MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
Need for Speed Carbon—>»G:Need for Speed Carbonunins000.exe»
Need for Speed™ Most Wanted—>F:My ownMost WantedEAUninstall.exe
Need for Speed™ SHIFT—>MsiExec.exe /X{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}
Nero 8 Micro v8.2.8.0—>»C:Program FilesNerounins000.exe»
Nero 9—>C:Program FilesCommon FilesNeroNero ProductInstaller 4SetupX.exe REMOVESERIALNUMBER=»9M03-01A1-PCX7-K31A-8A94-98PT-KT2E-522A»
neroxml—>MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
Net Speakerphone 4 beta3 build 051219—>»C:My progamsNet Speakerphone 4unins000.exe»
Nokia Connectivity Cable Driver—>MsiExec.exe /I{52D02A2B-03D2-4E34-A358-DC5D951FD296}
Nokia PC Suite—>MsiExec.exe /I{3D39E775-DDDA-4327-B747-0BDC5F191331}
NVIDIA Drivers—>C:Program FilesNVIDIA CorporationUninstallnvuninst.exe UninstallGUI
NVIDIA PhysX—>MsiExec.exe /X{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
OpenAL—>»C:Program FilesOpenALOpenALwEAX.exe» /U
Opera 10.00.1750—>C:Program FilesOperaUninstall.exe
Opera 10.53—>MsiExec.exe /X{1A0D2EFC-C4FC-446A-8BC3-57A54CE5EADD}
Path2Clipboard 1.0.7.67—>C:WINDOWSsystem32ShellExtP2Cdel.bat
PC Connectivity Solution—>MsiExec.exe /I{0C973594-7DDF-4BD0-84ED-3517F7622037}
PDF Settings CS5—>MsiExec.exe /I{A78FE97A-C0C8-49CE-89D0-EDD524A17392}
PDF to BMP JPG TIFF Converter 2.32—>»C:Program FilesBlue Label SoftPDF To BMP JPG TIFF Converter 2.32unins000.exe»
PowerDVD—>»C:Program FilesInstallShield Installation Information{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}Setup.exe» -l0x000409 /z-uninstall
PROMT Expert 8 Giant Try-Buy—>MsiExec.exe /I{A4F761F7-FBC8-49BF-BC37-15550C3EAA85}
QuickTime—>MsiExec.exe /I{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}
Rapture3D 2.3.22 Game—>»C:Program FilesBRSunins000.exe»
Realtek High Definition Audio Driver—>RtlUpd.exe -r -m -nrg2709
Shockwave Player—>MsiExec.exe /X{103906AD-C60E-4E65-BC84-CE980D19CE41}
Shockwave—>C:WINDOWSsystem32MacromedSHOCKW~2UNWISE.EXE C:WINDOWSsystem32MacromedSHOCKW~2Install.log
Skype™ 4.2—>MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
SnagIt 8—>MsiExec.exe /I{DA0BF7AB-88EB-4675-8FA1-531EAD938821}
Spelling Dictionaries Support For Adobe Reader 9—>MsiExec.exe /I{AC76BA86-7AD7-5464-3428-900000000004}
SUPER © Version 2009.bld.36 (June 10, 2009)—>C:MYPROG~1SUPERSetup.exe /remove /q0
Teleport Pro—>C:Program FilesTeleport ProUninstall.exe
Total Commander—>C:Program FilesTotal CommanderUninstall.exe
Ukrainian language for ABBYY FineReader 8.0 Professional Edition—>MsiExec.exe /X{9274109B-3F04-4608-8B3E-4AC55B5DDAF1}
Uninstall 1.0.0.1—>»C:Program FilesCommon FilesDVDVideoSoftunins000.exe»
Uninstall Tool—>»C:Program FilesUninstall Toolunins000.exe»
Universal Document Converter (Demo)—>»C:Program FilesUniversal Document Converterunins000.exe»
USB Safely Remove 3.3—>»C:Program FilesUSB Safely Removeunins000.exe»
Vegas Pro 9.0—>MsiExec.exe /X{6E5AB107-172B-4F17-8ABB-357C59EF1B08}
Virtual CD v9—>C:Program FilesInstallShield Installation Information{98A64C75-BFD6-4212-8746-8BADC7ABA79E}setup.exe -runfromtemp -l0x0009 -removeonly
Vista Drive Icon—>rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFVistaDrv.inf,Uninstall
Vtune 7.6—>»C:Program FilesVtuneunins000.exe»
WinDjView 1.0.3—>C:Program FilesWinDjViewuninstall.exe
Windows Media Format 11 runtime—>»C:Program FilesWindows Media Playerwmsetsdk.exe» /UninstallAll
Windows Media Format 11 runtime—>»C:WINDOWS$NtUninstallWMFDist11$spuninstspuninst.exe»
Windows Media Player 11—>»C:WINDOWS$NtUninstallwmp11$spuninstspuninst.exe»
XFilesDialog—>C:Program FilesXFilesDialogXFilesDialog.EXE -u
Xilisoft HD Video Converter—>C:My progamsHD Video ConverterUninstall.exe
Архиватор WinRAR—>C:Program FilesWinRARuninstall.exe
КОМПАС-3D V10—>MsiExec.exe /I{B3724E1F-F02F-49D3-94DB-C81539A27D9F}
Крестный отец™ II—>MsiExec.exe /X{A1416622-0DDE-45B5-B06C-DFC3ED94C53B}
Обновление безопасности для Windows XP — (KB941569)—>»C:WINDOWS$NtUninstallKB941569$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB958644)—>»C:WINDOWS$NtUninstallKB958644$spuninstspuninst.exe»
Пакет драйверов Windows — Nokia Modem (06/01/2009 4.1)—>C:PROGRA~1DIFX270581355A767BF1dpinst.exe /u C:WINDOWSsystem32DRVSTOREnokia_blue_C08496D7A0050438DFE13C55799AE2D4157A8E7Anokia_bluetooth.inf
Пакет драйверов Windows — Nokia Modem (06/01/2009 7.01.0.3)—>C:PROGRA~1DIFX270581355A767BF1dpinst.exe /u C:WINDOWSsystem32DRVSTOREnokbtmdm_9C48E34C57B7D4AAE5FFF5FB9B476B538394FD30nokbtmdm.inf
Пакет драйверов Windows — Nokia pccsmcfd (08/22/2008 7.0.0.0)—>C:PROGRA~1DIFXB4723E9A0713E5B1dpinst.exe /u C:WINDOWSsystem32DRVSTOREpccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294pccsmcfd.inf
Пакет обеспечения совместимости для выпуска 2007 системы Microsoft Office—>MsiExec.exe /X{90120000-0020-0419-0000-0000000FF1CE}
Проигрыватель Windows Media 11—>»C:Program FilesWindows Media PlayerSetup_wm.exe» /Uninstall
Телефонный Справочник г.Полтава—>MsiExec.exe /X{15F7C918-7587-4F13-B2BC-EE815269D90C}

======Hosts File======

91.216.122.10 vkontakte.ru
91.216.122.10 http://www.vkontakte.ru
91.216.122.10 vkontakte.com
91.216.122.10 http://www.vkontakte.com
91.216.122.10 durov.ru
91.216.122.10 http://www.durov.ru
91.216.122.10 vk.com
91.216.122.10 http://www.vk.com
91.216.122.10 odnoklassniki.ru
91.216.122.10 http://www.odnoklassniki.ru

======Security center information======

AV: Kaspersky Internet Security
FW: Kaspersky Internet Security

======System event log======

Computer Name: MICROSOF-B36B85
Event Code: 8003
Message: Основной обозреватель сети получил с сервера извещение, что компьютер MICROSOF-4E02F0
объявил себя основным обозревателем домена на транспорте NetBT_Tcpip_{24B967C7-9B1.
Основной обозреватель останавливается или объявляются выборы.

Record Number: 11481
Source Name: MRxSmb
Time Written: 20100605213042.000000+180
Event Type: ошибка
User:

Computer Name: MICROSOF-B36B85
Event Code: 8003
Message: Основной обозреватель сети получил с сервера извещение, что компьютер MICROSOF-4E02F0
объявил себя основным обозревателем домена на транспорте NetBT_Tcpip_{24B967C7-9B1.
Основной обозреватель останавливается или объявляются выборы.

Record Number: 11480
Source Name: MRxSmb
Time Written: 20100605201809.000000+180
Event Type: ошибка
User:

Computer Name: MICROSOF-B36B85
Event Code: 6161
Message: Сбой при печати документа Microsoft Word — Питання для екзамену з ФІЗИКИ для студентів 1 курсу інженерно2.docx владельца Администратор на принтере Canon MP260 series Printer. Тип данных: NT EMF 1.008. Размер файла очереди в байтах: 131072. Число напечатанных байтов: 41628. Общее число страниц в документе: 2. Число напечатанных страниц: 0. Клиентский компьютер: \MICROSOF-B36B85. Код ошибки Win32, возвращенной процессором печати: 1 (0x1).

Record Number: 11479
Source Name: Print
Time Written: 20100605195249.000000+180
Event Type: ошибка
User: MICROSOF-B36B85Администратор

Computer Name: MICROSOF-B36B85
Event Code: 7036
Message: Служба «Office Software Protection Platform» перешла в состояние Работает.

Record Number: 11478
Source Name: Service Control Manager
Time Written: 20100605193508.000000+180
Event Type: информация
User:

Computer Name: MICROSOF-B36B85
Event Code: 7035
Message: Служба «Office Software Protection Platform» успешно отправила управляющий элемент «запустить».

Record Number: 11477
Source Name: Service Control Manager
Time Written: 20100605193508.000000+180
Event Type: информация
User: MICROSOF-B36B85Администратор

=====Application event log=====

Computer Name: MICROSOF-B36B85
Event Code: 902
Message: The Software Protection service has started.
14.0.370.400

Record Number: 3153
Source Name: Office Software Protection Platform Service
Time Written: 20100428003927.000000+180
Event Type:
User:

Computer Name: MICROSOF-B36B85
Event Code: 1066
Message: Initialization status for service objects.
C:Program FilesCommon FilesMicrosoft SharedOfficeSoftwareProtectionPlatformOSPPOBJS.DLL, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:Program FilesCommon FilesMicrosoft SharedOfficeSoftwareProtectionPlatformOSPPOBJS.DLL, msft:rm/algorithm/pkey/2005, 0x00000000, 0x00000000
C:Program FilesCommon FilesMicrosoft SharedOfficeSoftwareProtectionPlatformOSPPOBJS.DLL, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:Program FilesCommon FilesMicrosoft SharedOfficeSoftwareProtectionPlatformOSPPOBJS.DLL, msft:spp/volume/services/kms/licenserenewal/1.0, 0x00000000, 0x00000000

Record Number: 3152
Source Name: Office Software Protection Platform Service
Time Written: 20100428003927.000000+180
Event Type: информация
User:

Computer Name: MICROSOF-B36B85
Event Code: 900
Message: The Software Protection service is starting.

Record Number: 3151
Source Name: Office Software Protection Platform Service
Time Written: 20100428003926.000000+180
Event Type: информация
User:

Computer Name: MICROSOF-B36B85
Event Code: 100
Message: 360: ERROR: read_msg errno 10054 (Удаленный хост принудительно разорвал существующее подключение.)

Record Number: 3150
Source Name: Bonjour Service
Time Written: 20100427222228.000000+180
Event Type: ошибка
User:

Computer Name: MICROSOF-B36B85
Event Code: 100
Message: 372: ERROR: read_msg errno 10054 (Удаленный хост принудительно разорвал существующее подключение.)

Record Number: 3149
Source Name: Bonjour Service
Time Written: 20100427222228.000000+180
Event Type: ошибка
User:

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=%CommonProgramFiles%Microsoft SharedWindows Live;C:Program FilesPC Connectivity Solution;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;C:Program FilesQuickTimeQTSystem;D:Gamesmatlabruntimewin32;D:Gamesmatlabbin
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=6
«PROCESSOR_IDENTIFIER»=x86 Family 6 Model 23 Stepping 10, GenuineIntel
«PROCESSOR_REVISION»=170a
«NUMBER_OF_PROCESSORS»=2
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP
«CLASSPATH»=.;C:Program FilesJavajre1.6.0_06libextQTJava.zip
«QTJAVA»=C:Program FilesJavajre1.6.0_06libextQTJava.zip

---

EOF

---

[Jack_Carver]

Проблема решена. У кого такая же — читайте текст красного цвета

[Admin]

Здравствуйте, добро пожаловать на Spyware-ru форум.

Вирус то может и остался где-то?

Пришлите свежий RSIT лог для проверки.

[Jack_Carver]

Вот свежие отчеты

log.txt

Logfile of random’s system information tool 1.07 (written by random/random)
Run by Администратор at 2010-06-09 23:07:48
Microsoft Windows XP Professional Service Pack 3
System drive C: has 7 GB (22%) free of 30 GB
Total RAM: 3071 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:07:54, on 09.06.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20815)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:WINDOWSRTHDCPL.EXE
C:WINDOWSsystem32RUNDLL32.EXE
C:Program FilesHard Drive InspectorHDInspector.exe
C:Program FilesKaspersky LabKaspersky Internet Security 7.0avp.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesVistaDriveIconVistaDrv.exe
C:Program FilesUSB Safely RemoveUSBSafelyRemove.exe
C:Program FilesMicrosoft OfficeOffice14MSOSYNC.EXE
C:My progamsBitMeterBitMeter2.exe
C:My progamsuTorrentutorrent.exe
C:Program FilesKaspersky LabKaspersky Internet Security 7.0avp.exe
C:Program FilesBonjourmDNSResponder.exe
C:WINDOWSsystem32fsproflt.exe
C:WINDOWSsystem32HDDSvc.exe
C:Program FilesCanonIJPLMIJPLMSVC.EXE
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe
C:WINDOWSsystem32PnkBstrA.exe
C:Program FilesCyberLinkShared filesRichVideo.exe
C:Program FilesAlcohol 120StarWindStarWindServiceAE.exe
C:WINDOWSsystem32svchost.exe
C:My progamssVirtual CD v9Systemvc9secs.exe
C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE
C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSvcM.exe
C:Program FilesOperaopera.exe
C:Documents and SettingsАдминистраторРабочий столRSIT.exe
C:Program Filestrend microАдминистратор.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = 127.0.0.1;*.local
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: (no name) — — (no file)
R3 — URLSearchHook: DVDVideoSoftTB Toolbar — {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} — C:Program FilesDVDVideoSofttbDVD1.dll
O2 — BHO: SnagIt Toolbar Loader — {00C6482D-C502-44C8-8409-FCE54AD9C208} — C:Program FilesTechSmithSnagIt 8SnagItBHO.dll
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: Groove GFS Browser Helper — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — C:PROGRA~1MICROS~2Office14GROOVEEX.DLL
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_06binssv.dll
O2 — BHO: Windows Live Sign-in Helper — {9030D464-4C02-4ABF-8ECC-5164760863C6} — C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 — BHO: URLRedirectionBHO — {B4F3A835-0E21-4959-BA22-42B3008E02FF} — C:PROGRA~1MICROS~2Office14URLREDIR.DLL
O2 — BHO: QUICKfind BHO Object — {C08DF07A-3E49-4E25-9AB0-D3882835F153} — C:PROGRA~1TEXTwareQUICKF~1PlugInsIEHelp.dll
O2 — BHO: FDMIECookiesBHO Class — {CC59E0F9-7E43-44FA-9FAA-8377850BF205} — C:My progamsFree Download Manageriefdm2.dll
O2 — BHO: DVDVideoSoftTB Toolbar — {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} — C:Program FilesDVDVideoSofttbDVD1.dll
O3 — Toolbar: SnagIt — {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} — C:Program FilesTechSmithSnagIt 8SnagItIEAddin.dll
O3 — Toolbar: DVDVideoSoftTB Toolbar — {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} — C:Program FilesDVDVideoSofttbDVD1.dll
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [HDInspector.exe] C:Program FilesHard Drive InspectorHDInspector.exe
O4 — HKLM..Run: [AVP] «C:Program FilesKaspersky LabKaspersky Internet Security 7.0avp.exe»
O4 — HKLM..Run: [AdobeAAMUpdater-1.0] «C:Program FilesCommon FilesAdobeOOBEPDAppUWAUpdaterStartupUtility.exe»
O4 — HKLM..Run: [SwitchBoard] C:Program FilesCommon FilesAdobeSwitchBoardSwitchBoard.exe
O4 — HKLM..Run: [AdobeCS5ServiceManager] «C:Program FilesCommon FilesAdobeCS5ServiceManagerCS5ServiceManager.exe» -launchedbylogin
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe
O4 — HKCU..Run: [USB Safely Remove] C:Program FilesUSB Safely RemoveUSBSafelyRemove.exe /startup
O4 — HKCU..Run: [OfficeSyncProcess] C:Program FilesMicrosoft OfficeOffice14MSOSYNC.EXE
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,OnceFirstLogonInstall,0 (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE7_012] rundll32 advpack.dll,LaunchINFSectionEx IE7int.inf,AfterUserStart,,4,N (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,OnceFirstLogonInstall,0 (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘Default user’)
O4 — Startup: µTorrent.lnk = C:My progamsuTorrentutorrent.exe
O4 — Global Startup: Bitmeter2.lnk = C:My progamsBitMeterBitMeter2.exe
O8 — Extra context menu item: &Отправить в OneNote — res:///105
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office14EXCEL.EXE/3000
O8 — Extra context menu item: Добавить в Анти-Баннер — C:Program FilesKaspersky LabKaspersky Internet Security 7.0ie_banner_deny.htm
O8 — Extra context menu item: Закачать все с помощью FDM — file://C:My progamsFree Download Managerdlall.htm
O8 — Extra context menu item: Закачать выбранное с помощью FDM — file://C:My progamsFree Download Managerdlselected.htm
O8 — Extra context menu item: Закачать с помощью FDM — file://C:My progamsFree Download Managerdllink.htm
O8 — Extra context menu item: Скачать видео с Free Download Manager — file://C:My progamsFree Download Managerdlfvideo.htm
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra button: Cтатистика Веб-Антивируса — {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} — C:Program FilesKaspersky LabKaspersky Internet Security 7.0SCIEPlgn.dll
O9 — Extra button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:Program FilesMicrosoft OfficeOffice14ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:Program FilesMicrosoft OfficeOffice14ONBttnIE.dll
O9 — Extra button: &Связанные заметки OneNote — {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} — C:Program FilesMicrosoft OfficeOffice14ONBttnIELinkedNotes.dll
O9 — Extra ‘Tools’ menuitem: &Связанные заметки OneNote — {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} — C:Program FilesMicrosoft OfficeOffice14ONBttnIELinkedNotes.dll
O9 — Extra button: (no name) — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — (no file)
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O18 — Filter hijack: text/xml — {807573E5-5146-11D5-A672-00B0D022E945} — C:Program FilesCommon FilesMicrosoft SharedOFFICE14MSOXMLMF.DLL
O20 — AppInit_DLLs: C:PROGRA~1KASPER~1KASPER~1.0adialhk.dll
O22 — SharedTaskScheduler: Предзагрузчик Browseui — {438755C2-A8BA-11D1-B96B-00A0C90312E1} — C:WINDOWSsystem32browseui.dll
O22 — SharedTaskScheduler: Демон кэша категорий компонентов — {8C7461EF-2B13-11d2-BE35-3078302C2030} — C:WINDOWSsystem32browseui.dll
O23 — Service: Kaspersky Internet Security 7.0 (AVP) — Kaspersky Lab — C:Program FilesKaspersky LabKaspersky Internet Security 7.0avp.exe
O23 — Service: Служба Bonjour (Bonjour Service) — Apple Inc. — C:Program FilesBonjourmDNSResponder.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: FSPro Filter Service (fsproflt) — FSPro Labs — C:WINDOWSsystem32fsproflt.exe
O23 — Service: HDD Information Service (HDDSvc) — AltrixSoft (http://www.altrixsoft.com/) — C:WINDOWSsystem32HDDSvc.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 — Service: Inkjet Printer/Scanner Extended Survey Program (IJPLMSVC) — Unknown owner — C:Program FilesCanonIJPLMIJPLMSVC.EXE
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: Nero BackItUp Scheduler 4.0 — Nero AG — C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe
O23 — Service: NVIDIA Display Driver Service (nvsvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: PnkBstrA — Unknown owner — C:WINDOWSsystem32PnkBstrA.exe
O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — C:Program FilesCyberLinkShared filesRichVideo.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: ServiceLayer — Nokia. — C:Program FilesPC Connectivity SolutionServiceLayer.exe
O23 — Service: StarWind AE Service (StarWindServiceAE) — Rocket Division Software — C:Program FilesAlcohol 120StarWindStarWindServiceAE.exe
O23 — Service: SwitchBoard — Adobe Systems Incorporated — C:Program FilesCommon FilesAdobeSwitchBoardSwitchBoard.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Virtual CD v9 Management Service (VC9SecS) — H+H Software GmbH — C:My progamssVirtual CD v9Systemvc9secs.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 12871 bytes

======Scheduled tasks folder======

C:WINDOWStasksAdobeAAMUpdater-1.0-MICROSOF-B36B85-Администратор.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{00C6482D-C502-44C8-8409-FCE54AD9C208}]
SnagIt Toolbar Loader — C:Program FilesTechSmithSnagIt 8SnagItBHO.dll [2007-05-01 63048]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper — C:PROGRA~1MICROS~2Office14GROOVEEX.DLL [2009-10-29 4150160]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_06binssv.dll [2008-03-25 509328]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper — C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll [2009-03-25 403832]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler — C:PROGRA~1MICROS~2Office14URLREDIR.DLL [2009-11-03 556432]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{C08DF07A-3E49-4E25-9AB0-D3882835F153}]
QUICKfind BHO Object — C:PROGRA~1TEXTwareQUICKF~1PlugInsIEHelp.dll [2001-08-10 388608]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
FDMIECookiesBHO Class — C:My progamsFree Download Manageriefdm2.dll [2008-12-30 98304]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}]
DVDVideoSoftTB Toolbar — C:Program FilesDVDVideoSofttbDVD1.dll [2010-06-09 2736736]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} — SnagIt — C:Program FilesTechSmithSnagIt 8SnagItIEAddin.dll [2007-05-01 161352]
{e9911ec6-1bcc-40b0-9993-e0eea7f6953f} — DVDVideoSoftTB Toolbar — C:Program FilesDVDVideoSofttbDVD1.dll [2010-06-09 2736736]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2008-04-10 16861184]
«Alcmtr»=C:WINDOWSALCMTR.EXE [2005-05-03 69632]
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2009-09-27 86016]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2009-09-27 13918208]
«HDInspector.exe»=C:Program FilesHard Drive InspectorHDInspector.exe [2008-04-14 1006344]
«AVP»=C:Program FilesKaspersky LabKaspersky Internet Security 7.0avp.exe [2008-02-08 227856]
«AdobeAAMUpdater-1.0″=C:Program FilesCommon FilesAdobeOOBEPDAppUWAUpdaterStartupUtility.exe [2010-06-06 500208]
«SwitchBoard»=C:Program FilesCommon FilesAdobeSwitchBoardSwitchBoard.exe [2010-02-19 517096]
«AdobeCS5ServiceManager»=C:Program FilesCommon FilesAdobeCS5ServiceManagerCS5ServiceManager.exe [2010-02-22 406992]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-06-25 17408]
«VistaIcon»=C:Program FilesVistaDriveIconVistaDrv.exe [2008-03-23 132096]
«USB Safely Remove»=C:Program FilesUSB Safely RemoveUSBSafelyRemove.exe [2007-12-20 700928]
«OfficeSyncProcess»=C:Program FilesMicrosoft OfficeOffice14MSOSYNC.EXE [2009-11-03 649072]
«AdobeBridge»= []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAdobe ARM]
C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe [2009-12-11 948672]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAdobe Reader Speed Launcher]
C:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2009-12-22 35760]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAlcoholAutomount]
C:Program FilesAlcohol 120axcmd.exe [2007-12-22 221568]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregBCSSync]
C:Program FilesMicrosoft OfficeOffice14BCSSync.exe [2009-09-27 83312]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregCanonMyPrinter]
C:Program FilesCanonMyPrinterBJMyPrt.exe [2008-03-03 1848648]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregCanonSolutionMenu]
C:Program FilesCanonSolutionMenuCNSLMAIN.exe [2008-03-10 689488]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregLanguageShortcut]
C:Program FilesCyberLinkPowerDVDLanguageLanguage.exe [2007-02-07 54832]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregRemoteControl]
C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2007-02-07 71216]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSteam]
D:GamesHLSteam.exe -silent []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregVC9Player]
C:My progamssVirtual CD v9SystemVC9Play.exe [2007-12-03 202048]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^Администратор^Главное меню^Программы^Автозагрузка^XFilesDialog.LNK]
C:PROGRA~1XFILES~1XFILES~1.EXE [2006-08-31 249856]

C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
Bitmeter2.lnk — C:My progamsBitMeterBitMeter2.exe

C:Documents and SettingsАдминистраторГлавное менюПрограммыАвтозагрузка
µTorrent.lnk — C:My progamsuTorrentutorrent.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLS»=»C:PROGRA~1KASPER~1KASPER~1.0adialhk.dll»

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyklogon]
C:WINDOWSsystem32klogon.dll [2008-02-08 219664]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2008-03-21 133632]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{B5A7F190-DDA6-4420-B3BA-52453494E6CD}»=C:PROGRA~1MICROS~2Office14GROOVEEX.DLL [2009-10-29 4150160]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalfsproflt]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWdf01000.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkfsproflt]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWdf01000.sys]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«SynchronousMachineGroupPolicy»=0
«SynchronousUserGroupPolicy»=0

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«NoThumbnailCache»=1
«NoSMConfigurePrograms»=1
«NoSMHelp»=1

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{93eafab9-0585-11df-867c-00e04c777304}]
shellAutoRuncommand — H:LONG/island.exe
shellopencommand — H:LONG/island.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{b9e1b553-efea-11de-862d-00e04c777304}]
shellAutoRuncommand — H:RECYCLERS-51-9-25-3434476501-1644491933-601013361-1214CzuF.exe
shellopencommand — H:RECYCLERS-51-9-25-3434476501-1644491933-601013361-1214CzuF.exe

======List of files/folders created in the last 1 months======

2010-06-09 09:10:14 —-D—- C:Program Filestrend micro
2010-06-09 09:10:08 —-D—- C:rsit
2010-06-09 02:18:33 —-HD—- C:WINDOWSPIF
2010-06-08 20:56:50 —-D—- C:Documents and SettingsАдминистраторApplication DataPriceGong
2010-06-08 19:40:28 —-D—- C:Documents and SettingsАдминистраторApplication DatadWOwLy
2010-06-06 02:46:55 —-D—- C:Documents and SettingsАдминистраторApplication DataStageManager.BD092818F67280F4B42B04877600987F0111B594.1
2010-06-06 02:46:55 —-D—- C:Documents and SettingsАдминистраторApplication DataAdobe Mini Bridge CS5
2010-06-06 02:30:24 —-D—- C:Documents and SettingsAll UsersApplication Dataregid.1986-12.com.adobe
2010-06-06 02:26:25 —-D—- C:Program FilesAdobe Media Player
2010-06-06 02:24:13 —-D—- C:Program FilesCommon FilesAdobe AIR
2010-06-06 01:51:35 —-D—- C:Documents and SettingsАдминистраторApplication DataUDC Profiles
2010-06-06 01:50:59 —-A—- C:WINDOWSsystem32udcpm.dll
2010-06-06 01:50:54 —-D—- C:Program FilesUniversal Document Converter
2010-06-06 01:33:23 —-A—- C:WINDOWSiltwain.ini
2010-06-06 01:33:19 —-D—- C:Documents and SettingsAll UsersApplication DataBlueLabelSoft
2010-06-06 01:33:18 —-D—- C:Program FilesBlue Label Soft
2010-05-17 20:56:30 —-D—- C:Documents and SettingsАдминистраторApplication DataMathWorks
2010-05-17 19:38:33 —-A—- C:WINDOWSsystem32jit.dll
2010-05-17 19:38:33 —-A—- C:WINDOWSsetdebug.exe
2010-05-17 19:38:32 —-A—- C:WINDOWSsystem32javaee.dll
2010-05-17 19:38:32 —-A—- C:WINDOWSsystem32dx3j.dll
2010-05-17 19:38:26 —-A—- C:WINDOWSsystem32wjview.exe
2010-05-17 19:38:26 —-A—- C:WINDOWSsystem32vmhelper.dll
2010-05-17 19:38:26 —-A—- C:WINDOWSsystem32msjdbc10.dll
2010-05-17 19:38:25 —-A—- C:WINDOWSsystem32msjava.dll
2010-05-17 19:38:25 —-A—- C:WINDOWSsystem32msawt.dll
2010-05-17 19:38:25 —-A—- C:WINDOWSsystem32jview.exe
2010-05-17 19:38:24 —-A—- C:WINDOWSsystem32jdbgmgr.exe
2010-05-17 19:38:24 —-A—- C:WINDOWSsystem32javart.dll
2010-05-17 19:38:24 —-A—- C:WINDOWSsystem32javaprxy.dll
2010-05-17 19:38:23 —-A—- C:WINDOWSsystem32javacypt.dll
2010-05-17 19:38:23 —-A—- C:WINDOWSsystem32clspack.exe
2010-05-12 23:04:13 —-D—- C:Documents and SettingsАдминистраторApplication DataTeamViewer
2010-05-12 22:25:08 —-D—- C:Documents and SettingsАдминистраторApplication DataskypePM
2010-05-12 22:23:55 —-D—- C:Documents and SettingsАдминистраторApplication DataSkype
2010-05-12 22:23:47 —-D—- C:Program FilesCommon FilesSkype
2010-05-12 22:23:38 —-D—- C:Documents and SettingsAll UsersApplication DataSkype

======List of files/folders modified in the last 1 months======

2010-06-09 23:07:51 —-D—- C:WINDOWSTemp
2010-06-09 23:07:17 —-D—- C:Documents and SettingsAll UsersApplication DataBitmeter2
2010-06-09 23:03:14 —-D—- C:WINDOWSsystem32CatRoot2
2010-06-09 23:03:14 —-D—- C:Documents and SettingsAll UsersApplication DataKaspersky Lab
2010-06-09 23:03:01 —-D—- C:Documents and SettingsАдминистраторApplication DatauTorrent
2010-06-09 23:02:28 —-D—- C:WINDOWS
2010-06-09 23:02:09 —-A—- C:WINDOWSSchedLgU.Txt
2010-06-09 11:57:38 —-AD—- C:Documents and SettingsAll UsersApplication DataTEMP
2010-06-09 11:35:12 —-D—- C:WINDOWSPrefetch
2010-06-09 09:10:14 —-RD—- C:Program Files
2010-06-09 02:20:46 —-D—- C:WINDOWSsystem32
2010-06-09 01:59:38 —-D—- C:WINDOWSsystem32config
2010-06-09 01:59:22 —-D—- C:WINDOWSsystem32wbem
2010-06-09 01:59:21 —-D—- C:WINDOWSRegistration
2010-06-08 21:18:05 —-D—- C:WINDOWSsystem32drivers
2010-06-08 20:49:47 —-SHD—- C:WINDOWSInstaller
2010-06-08 20:49:43 —-HD—- C:WINDOWSinf
2010-06-08 20:49:22 —-D—- C:Documents and SettingsAll UsersApplication DataTechSmith
2010-06-08 20:49:20 —-D—- C:Program FilesTechSmith
2010-06-08 20:48:23 —-D—- C:Program FilesCommon FilesWise Installation Wizard
2010-06-08 01:14:52 —-D—- C:Program FilesPowerOff53
2010-06-06 02:39:17 —-D—- C:Program FilesCommon FilesAdobe
2010-06-06 02:34:54 —-SD—- C:WINDOWSTasks
2010-06-06 02:34:47 —-D—- C:Documents and SettingsАдминистраторApplication DataAdobe
2010-06-06 02:30:22 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
2010-06-06 02:29:05 —-D—- C:Program FilesAdobe
2010-06-06 02:27:36 —-RSD—- C:WINDOWSFonts
2010-06-06 02:24:13 —-D—- C:Program FilesCommon Files
2010-06-06 02:22:22 —-D—- C:WINDOWSWinSxS
2010-06-05 14:06:04 —-D—- C:Program FilesRujimCo
2010-06-04 22:35:30 —-D—- C:Documents and SettingsAll UsersApplication DataCanonIJPLM
2010-05-31 22:30:09 —-A—- C:WINDOWSNeroDigital.ini
2010-05-28 23:48:23 —-D—- C:Documents and SettingsAll UsersApplication DataMicrosoft Help
2010-05-27 00:14:42 —-D—- C:Documents and SettingsАдминистраторApplication DataFree Download Manager
2010-05-26 18:43:40 —-D—- C:Program FilesDVDVideoSoft
2010-05-25 23:42:27 —-D—- C:Documents and SettingsАдминистраторApplication DataICQ
2010-05-17 20:13:38 —-RSD—- C:WINDOWSassembly
2010-05-17 19:38:30 —-D—- C:WINDOWSjava
2010-05-14 21:11:44 —-D—- C:WINDOWSsystem32DirectX
2010-05-13 22:13:04 —-D—- C:Documents and SettingsAll UsersApplication DataCanonIJ

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-15 40704]
R1 klif;Klif; ??C:WINDOWSsystem32driversklif.sys []
R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B}; ??C:Program FilesCyberLinkPowerDVD00.fcl []
R2 Hardlock;Hardlock; ??C:WINDOWSsystem32drivershardlock.sys []
R2 Haspnt;Haspnt; ??C:WINDOWSsystem32driversHaspnt.sys []
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2008-06-05 62336]
R2 TBPanel;TBPanel; C:WINDOWSsystem32driversTBPanel.sys [2007-03-16 12256]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-15 144384]
R3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2008-04-17 4707328]
R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:WINDOWSsystem32DRIVERSklim5.sys [2007-12-13 24592]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2009-10-05 7655872]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtnicxp.sys [2007-11-21 104320]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-24 30336]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-14 59520]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-14 20608]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:WINDOWSsystem32driversWmBEnum.sys [2009-09-11 22792]
R3 WmFilter;Logitech Gaming HID Filter Driver; C:WINDOWSsystem32driversWmFilter.sys [2009-09-11 35592]
R3 WmHidLo;Logitech Gaming USB Filter Driver; C:WINDOWSsystem32driversWmHidLo.sys [2009-09-11 31752]
R3 WmXlCore;Logitech Translation Layer Driver; C:WINDOWSsystem32driversWmXlCore.sys [2009-09-11 66056]
S3 ab8otbcm;ab8otbcm; C:WINDOWSsystem32driversab8otbcm.sys []
S3 Cardex;Cardex; ??C:WINDOWSsystem32driversTBPANEL.SYS []
S3 ENTECH;ENTECH; ??C:WINDOWSsystem32DRIVERSENTECH.sys []
S3 HH9Help.sys;HH9Help.sys; ??C:WINDOWSsystem32driversHH9Help.sys []
S3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-19 12160]
S3 nmwcd;Nokia USB Phone Parent; C:WINDOWSsystem32driversccdcmb.sys [2009-02-09 17664]
S3 nmwcdc;Nokia USB Generic; C:WINDOWSsystem32driversccdcmbo.sys [2009-02-09 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:WINDOWSsystem32DRIVERSpccsmcfd.sys [2008-08-26 18816]
S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtenicxp.sys [2008-01-04 105856]
S3 upperdev;upperdev; C:WINDOWSsystem32DRIVERSusbser_lowerflt.sys [2009-02-09 7808]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-22 32384]
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-14 25856]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
S3 usbser;USB Modem Driver; C:WINDOWSsystem32driversusbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:WINDOWSsystem32DRIVERSusbser_lowerfltj.sys [2009-02-09 7808]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:WINDOWSSystem32Driverswdf01000.sys [2008-03-27 503008]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:WINDOWSsystem32driversWmVirHid.sys [2009-09-11 14984]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2008-01-18 83328]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AVP;Kaspersky Internet Security 7.0; C:Program FilesKaspersky LabKaspersky Internet Security 7.0avp.exe [2008-02-08 227856]
R2 Bonjour Service;Служба Bonjour; C:Program FilesBonjourmDNSResponder.exe [2010-02-12 345376]
R2 fsproflt;FSPro Filter Service; C:WINDOWSsystem32fsproflt.exe [2010-01-06 142648]
R2 HDDSvc;HDD Information Service; C:WINDOWSsystem32HDDSvc.exe [2008-02-27 189704]
R2 IJPLMSVC;Inkjet Printer/Scanner Extended Survey Program; C:Program FilesCanonIJPLMIJPLMSVC.EXE [2008-01-22 103808]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-19 322120]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe [2008-09-24 935208]
R2 nvsvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2009-09-27 172100]
R2 PnkBstrA;PnkBstrA; C:WINDOWSsystem32PnkBstrA.exe [2009-12-26 66872]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:Program FilesCyberLinkShared filesRichVideo.exe [2007-02-07 173616]
R2 StarWindServiceAE;StarWind AE Service; C:Program FilesAlcohol 120StarWindStarWindServiceAE.exe [2007-05-28 275968]
R2 VC9SecS;Virtual CD v9 Management Service; C:My progamssVirtual CD v9Systemvc9secs.exe [2007-12-03 132416]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE [2009-03-25 1533824]
R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S3 aspnet_state;Служба состояний ASP.NET; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-07-29 881664]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:Program FilesMicrosoft OfficeOffice14GROOVE.EXE [2009-10-29 30603640]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2009-09-26 149336]
S3 osppsvc;Office Software Protection Platform; C:Program FilesCommon FilesMicrosoft SharedOfficeSoftwareProtectionPlatformOSPPSVC.EXE [2009-09-26 4639136]
S3 ServiceLayer;ServiceLayer; C:Program FilesPC Connectivity SolutionServiceLayer.exe [2009-06-02 637952]
S3 SwitchBoard;SwitchBoard; C:Program FilesCommon FilesAdobeSwitchBoardSwitchBoard.exe [2010-02-19 517096]
S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2008-03-21 914944]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-07-29 132096]

info.txt

info.txt logfile of random’s system information tool 1.06 2010-06-09 23:07:57

======Uninstall list======

—>MsiExec /X{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
3DMark06—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime101Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{7F3AD00A-1819-4B15-BB7D-08B3586336D7}setup.exe» -l0x9 -removeonly
ABBYY FineReader 8.0 Professional Edition—>MsiExec.exe /I{AAF80000-22B9-4CE9-98D6-2CCF359BAC07}
ACDSee Pro 2—>MsiExec.exe /I{4AAC95F4-A30E-4EE5-A086-6F79581D0D70}
Adobe AIR—>C:Program FilesCommon FilesAdobe AIRVersions1.0ResourcesAdobe AIR Updater.exe -arp:uninstall
Adobe AIR—>MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Community Help—>msiexec /qb /x {0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
Adobe Community Help—>MsiExec.exe /I{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
Adobe Flash Player 10 ActiveX—>C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Flash Player 10 Plugin—>C:WINDOWSsystem32MacromedFlashuninstall_plugin.exe
Adobe Media Player—>msiexec /qb /x {DE3A9DC5-9A5D-6485-9662-347162C7E4CA}
Adobe Media Player—>MsiExec.exe /I{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}
Adobe Photoshop CS5—>C:Program FilesCommon FilesAdobeOOBEPDAppcorePDApp.exe —appletID=»DWA_UI» —appletVersion=»1.0″ —mode=»Uninstall» —mediaSignature=»{15FEDA5F-141C-4127-8D7E-B962D1742728}»
Adobe Reader 9.3.1 — Russian—>MsiExec.exe /I{AC76BA86-7AD7-1049-7B44-A93000000001}
AIMP2 MegaPack—>»C:My progamsAIMP2unins000.exe»
Allok Video to FLV Converter 5.1.0925—>»C:My progamsAllok Video to FLV Converterunins000.exe»
Ap PDF Split/Merge—>»C:My progamsAp PDF Split-Mergeunins000.exe»
ArtMoney PRO v7.27—>»C:My progamsArtMoneyUninstallunins000.exe»
Auslogics BoostSpeed—>»C:Program FilesAuslogicsAuslogics BoostSpeedunins000.exe»
AusLogics Disk Defrag—>»C:My progamsAusLogics Disk Defragunins000.exe»
AusLogics Emergency Recovery—>»C:Program FilesAuslogicsAusLogics Emergency Recoveryunins000.exe»
AutoIt v3.2.8.1—>C:Program FilesAutoIt3Uninstall.exe
Bad Crystal 2.60—>C:Program Filesz-drex incBad CrystalUninstall.exe
Becky! Ver.2—>C:Program FilesRimArtsB2B2Setup.exe u
BitMeter—>»C:My progamsBitMeteruninstall.exe»
Bonjour—>MsiExec.exe /X{76BC2442-0002-47FA-9617-43BAD82BEF4C}
Canon MP Navigator EX 2.0—>»C:Program FilesCanonMP Navigator EX 2.0Maint.exe» /UninstallRemove C:Program FilesCanonMP Navigator EX 2.0uninst.ini
Canon MP260 series — регистрация пользователя—>C:Program FilesCanonIJEREGMP260 seriesUNINST.EXE
Canon MP260 series MP Drivers—>»C:WINDOWSsystem32CanonIJ Uninstaller Information{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP260_seriesDelDrv.exe» /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP260_series /L0x0019
Canon Utilities Easy-PhotoPrint EX—>C:Program FilesCanonEasy-PhotoPrint EXuninst.exe uninst.ini
Canon Utilities My Printer—>C:Program FilesCanonMyPrinteruninst.exe uninst.ini
Canon Utilities Solution Menu—>C:Program FilesCanonSolutionMenuuninst.exe uninst.ini
CCleaner (remove only)—>»C:Program FilesCCleaneruninst.exe»
DiRT2—>»C:Program FilesInstallShield Installation Information{52D1D62C-FEAB-4580-849E-1DB624BADBBD}setup.exe» -runfromtemp -l0x0009 -removeonly
Driver Genius Professional Edition 2007—>»C:Program FilesDriver-SoftDriverGeniusunins000.exe»
DVDVideoSoft Toolbar—>C:PROGRA~1DVDVID~1UNWISE.EXE /U C:PROGRA~1DVDVID~1INSTALL.LOG
Everest Ultimate Edition 4.50.1330—>»C:Program FilesLavalysEVEREST Ultimate Editionunins000.exe»
FlylinkDC++ r394 build 3137—>»C:My progamsFlylinkDC++unins000.exe»
FormatFactory 2.20—>C:My progamsFormatFactoryuninst.exe
Fraps (remove only)—>»C:My progamsFraps-3uninstall.exe»
Free Download Manager 3.0—>»C:My progamsFree Download Managerunins000.exe»
Free FLV Converter V 6.7.7—>»C:My progamsFree FLV Converterunins000.exe»
Free Studio version 4.4—>»C:My progamsFree Studiounins000.exe»
Hard Drive Inspector Professional 2.90 build # 467—>C:Program FilesHard Drive InspectorUninst.exe
HashTab 2.1.0—>C:WINDOWSsystem32ShellExthtdel32.bat
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)—>C:WINDOWSsystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=»»
Hotfix for Windows Media Format 11 SDK (KB929399)—>»C:WINDOWS$NtUninstallKB929399$spuninstspuninst.exe»
ICQ6.5—>»C:Program FilesInstallShield Installation Information{60DE4033-9503-48D1-A483-7846BD217CA9}setup.exe» -runfromtemp -l0x0009 -removeonly
Inkjet Printer/Scanner Extended Survey Program—>C:Program FilesCanonIJPLMSETUP.EXE -R
Java(TM) 6 Update 6—>MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160060}
Kaspersky Internet Security 7.0—>MsiExec.exe /I{C774410D-3EF9-4DE7-AC01-332613163ECF}
Kaspersky Internet Security 7.0—>MsiExec.exe /I{C774410D-3EF9-4DE7-AC01-332613163ECF}
K-Lite Mega Codec Pack 5.5.1—>»C:Program FilesK-Lite Codec Packunins000.exe»
Kyodai Mahjongg 2006 v1.42—>»C:Program FilesKyodai Mahjongg 2006unins000.exe»
Logitech Gaming Software 5.08—>MsiExec.exe /X{33BC9D7E-E790-495E-A4EA-CFB160C17A91}
Longman WordWise Dictionary—>C:WINDOWSIsUninst.exe -f»c:program filesUninst.isu»
MATLAB R2010a—>D:Gamesmatlabuninstalluninstall.exe D:Gamesmatlab
Microsoft .NET Framework 1.1 Russian Language Pack—>MsiExec.exe /X{2BB372D9-52B4-410A-BC1A-FEAB63181EEF}
Microsoft .NET Framework 1.1—>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1—>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Language Pack — RUS—>C:WINDOWSMicrosoft.NETFrameworkv2.0.50727Microsoft .NET Framework 2.0 Language Pack — RUSinstall.exe
Microsoft .NET Framework 2.0 Service Pack 2—>MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2—>MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1—>C:WINDOWSMicrosoft.NETFrameworkv3.5Microsoft .NET Framework 3.5 SP1setup.exe
Microsoft .NET Framework 3.5 SP1—>MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Compression Client Pack 1.0 for Windows XP—>»C:WINDOWS$NtUninstallMSCompPackV1$spuninstspuninst.exe»
Microsoft Games for Windows — LIVE Redistributable—>MsiExec.exe /X{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}
Microsoft Games for Windows — LIVE—>MsiExec.exe /X{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7—>»C:WINDOWS$NtUninstallWdf01007$spuninstspuninst.exe»
Microsoft Office — профессиональный выпуск версии 2003—>MsiExec.exe /I{90110419-6000-11D3-8CFE-0150048383C9}
Microsoft Office Access MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-0015-0419-0000-0000000FF1CE}
Microsoft Office Excel MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-0016-0419-0000-0000000FF1CE}
Microsoft Office Groove MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-00BA-0419-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-0044-0419-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-00A1-0419-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-001A-0419-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-0018-0419-0000-0000000FF1CE}
Microsoft Office Professional Plus 2010 (Beta)—>MsiExec.exe /X{20140000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (English) 2010 (Beta)—>MsiExec.exe /X{20140000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2010 (Beta)—>MsiExec.exe /X{20140000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-001F-0419-0000-0000000FF1CE}
Microsoft Office Proof (Ukrainian) 2010 (Beta)—>MsiExec.exe /X{20140000-001F-0422-0000-0000000FF1CE}
Microsoft Office Proofing (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-002C-0419-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-0019-0419-0000-0000000FF1CE}
Microsoft Office Shared MUI (Russian) 2007—>MsiExec.exe /X{90120000-006E-0419-0000-0000000FF1CE}
Microsoft Office Shared MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-006E-0419-0000-0000000FF1CE}
Microsoft Office Word MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-001B-0419-0000-0000000FF1CE}
Microsoft Office профессиональный плюс 2010—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE14Office Setup Controllersetup.exe» /uninstall PROPLUS
Microsoft User-Mode Driver Framework Feature Pack 1.7—>»C:WINDOWS$NtUninstallWudf01007$spuninstspuninst.exe»
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Visual C++ 2008 Redistributable — x86 9.0.30729.17—>MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft_VC80_ATL_x86—>MsiExec.exe /I{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}
Microsoft_VC80_CRT_x86—>MsiExec.exe /I{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}
Microsoft_VC80_MFC_x86—>MsiExec.exe /I{D1A19B02-817E-4296-A45B-07853FD74D57}
Microsoft_VC80_MFCLOC_x86—>MsiExec.exe /I{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}
Microsoft_VC90_ATL_x86—>MsiExec.exe /I{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}
Microsoft_VC90_CRT_x86—>MsiExec.exe /I{08D2E121-7F6A-43EB-97FD-629B44903403}
Microsoft_VC90_MFC_x86—>MsiExec.exe /I{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}
Mozilla Firefox 3.5.3—>C:Program FilesMozilla FirefoxUninstall.exe
MSVC80_x86—>MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27}
MSXML 4.0 SP2 (KB936181)—>MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
Need for Speed Carbon—>»G:Need for Speed Carbonunins000.exe»
Need for Speed™ Most Wanted—>F:My ownMost WantedEAUninstall.exe
Need for Speed™ SHIFT—>MsiExec.exe /X{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}
Nero 8 Micro v8.2.8.0—>»C:Program FilesNerounins000.exe»
Nero 9—>C:Program FilesCommon FilesNeroNero ProductInstaller 4SetupX.exe REMOVESERIALNUMBER=»9M03-01A1-PCX7-K31A-8A94-98PT-KT2E-522A»
neroxml—>MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
Net Speakerphone 4 beta3 build 051219—>»C:My progamsNet Speakerphone 4unins000.exe»
Nokia Connectivity Cable Driver—>MsiExec.exe /I{52D02A2B-03D2-4E34-A358-DC5D951FD296}
Nokia PC Suite—>MsiExec.exe /I{3D39E775-DDDA-4327-B747-0BDC5F191331}
NVIDIA Drivers—>C:Program FilesNVIDIA CorporationUninstallnvuninst.exe UninstallGUI
NVIDIA PhysX—>MsiExec.exe /X{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
OpenAL—>»C:Program FilesOpenALOpenALwEAX.exe» /U
Opera 10.00.1750—>C:Program FilesOperaUninstall.exe
Opera 10.53—>MsiExec.exe /X{1A0D2EFC-C4FC-446A-8BC3-57A54CE5EADD}
Path2Clipboard 1.0.7.67—>C:WINDOWSsystem32ShellExtP2Cdel.bat
PC Connectivity Solution—>MsiExec.exe /I{0C973594-7DDF-4BD0-84ED-3517F7622037}
PDF Settings CS5—>MsiExec.exe /I{A78FE97A-C0C8-49CE-89D0-EDD524A17392}
PDF to BMP JPG TIFF Converter 2.32—>»C:Program FilesBlue Label SoftPDF To BMP JPG TIFF Converter 2.32unins000.exe»
PowerDVD—>»C:Program FilesInstallShield Installation Information{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}Setup.exe» -l0x000409 /z-uninstall
PROMT Expert 8 Giant Try-Buy—>MsiExec.exe /I{A4F761F7-FBC8-49BF-BC37-15550C3EAA85}
QuickTime—>MsiExec.exe /I{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}
Rapture3D 2.3.22 Game—>»C:Program FilesBRSunins000.exe»
Realtek High Definition Audio Driver—>RtlUpd.exe -r -m -nrg2709
Shockwave Player—>MsiExec.exe /X{103906AD-C60E-4E65-BC84-CE980D19CE41}
Shockwave—>C:WINDOWSsystem32MacromedSHOCKW~2UNWISE.EXE C:WINDOWSsystem32MacromedSHOCKW~2Install.log
Skype™ 4.2—>MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
SnagIt 8—>MsiExec.exe /I{DA0BF7AB-88EB-4675-8FA1-531EAD938821}
Spelling Dictionaries Support For Adobe Reader 9—>MsiExec.exe /I{AC76BA86-7AD7-5464-3428-900000000004}
SUPER © Version 2009.bld.36 (June 10, 2009)—>C:MYPROG~1SUPERSetup.exe /remove /q0
Teleport Pro—>C:Program FilesTeleport ProUninstall.exe
Total Commander—>C:Program FilesTotal CommanderUninstall.exe
Ukrainian language for ABBYY FineReader 8.0 Professional Edition—>MsiExec.exe /X{9274109B-3F04-4608-8B3E-4AC55B5DDAF1}
Uninstall 1.0.0.1—>»C:Program FilesCommon FilesDVDVideoSoftunins000.exe»
Uninstall Tool—>»C:Program FilesUninstall Toolunins000.exe»
Universal Document Converter (Demo)—>»C:Program FilesUniversal Document Converterunins000.exe»
USB Safely Remove 3.3—>»C:Program FilesUSB Safely Removeunins000.exe»
Vegas Pro 9.0—>MsiExec.exe /X{6E5AB107-172B-4F17-8ABB-357C59EF1B08}
Virtual CD v9—>C:Program FilesInstallShield Installation Information{98A64C75-BFD6-4212-8746-8BADC7ABA79E}setup.exe -runfromtemp -l0x0009 -removeonly
Vista Drive Icon—>rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFVistaDrv.inf,Uninstall
Vtune 7.6—>»C:Program FilesVtuneunins000.exe»
WinDjView 1.0.3—>C:Program FilesWinDjViewuninstall.exe
Windows Media Format 11 runtime—>»C:Program FilesWindows Media Playerwmsetsdk.exe» /UninstallAll
Windows Media Format 11 runtime—>»C:WINDOWS$NtUninstallWMFDist11$spuninstspuninst.exe»
Windows Media Player 11—>»C:WINDOWS$NtUninstallwmp11$spuninstspuninst.exe»
XFilesDialog—>C:Program FilesXFilesDialogXFilesDialog.EXE -u
Xilisoft HD Video Converter—>C:My progamsHD Video ConverterUninstall.exe
Архиватор WinRAR—>C:Program FilesWinRARuninstall.exe
КОМПАС-3D V10—>MsiExec.exe /I{B3724E1F-F02F-49D3-94DB-C81539A27D9F}
Крестный отец™ II—>MsiExec.exe /X{A1416622-0DDE-45B5-B06C-DFC3ED94C53B}
Обновление безопасности для Windows XP — (KB941569)—>»C:WINDOWS$NtUninstallKB941569$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB958644)—>»C:WINDOWS$NtUninstallKB958644$spuninstspuninst.exe»
Пакет драйверов Windows — Nokia Modem (06/01/2009 4.1)—>C:PROGRA~1DIFX270581355A767BF1dpinst.exe /u C:WINDOWSsystem32DRVSTOREnokia_blue_C08496D7A0050438DFE13C55799AE2D4157A8E7Anokia_bluetooth.inf
Пакет драйверов Windows — Nokia Modem (06/01/2009 7.01.0.3)—>C:PROGRA~1DIFX270581355A767BF1dpinst.exe /u C:WINDOWSsystem32DRVSTOREnokbtmdm_9C48E34C57B7D4AAE5FFF5FB9B476B538394FD30nokbtmdm.inf
Пакет драйверов Windows — Nokia pccsmcfd (08/22/2008 7.0.0.0)—>C:PROGRA~1DIFXB4723E9A0713E5B1dpinst.exe /u C:WINDOWSsystem32DRVSTOREpccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294pccsmcfd.inf
Пакет обеспечения совместимости для выпуска 2007 системы Microsoft Office—>MsiExec.exe /X{90120000-0020-0419-0000-0000000FF1CE}
Проигрыватель Windows Media 11—>»C:Program FilesWindows Media PlayerSetup_wm.exe» /Uninstall
Телефонный Справочник г.Полтава—>MsiExec.exe /X{15F7C918-7587-4F13-B2BC-EE815269D90C}

======Hosts File======

127.0.0.1 localhost

======Security center information======

AV: Kaspersky Internet Security
FW: Kaspersky Internet Security

======System event log======

Computer Name: MICROSOF-B36B85
Event Code: 7036
Message: Служба «Служба COM записи компакт-дисков IMAPI» перешла в состояние Остановлена.

Record Number: 11474
Source Name: Service Control Manager
Time Written: 20100605191053.000000+180
Event Type: информация
User:

Computer Name: MICROSOF-B36B85
Event Code: 7036
Message: Служба «Диспетчер подключений удаленного доступа» перешла в состояние Работает.

Record Number: 11473
Source Name: Service Control Manager
Time Written: 20100605191049.000000+180
Event Type: информация
User:

Computer Name: MICROSOF-B36B85
Event Code: 7035
Message: Служба «Диспетчер подключений удаленного доступа» успешно отправила управляющий элемент «запустить».

Record Number: 11472
Source Name: Service Control Manager
Time Written: 20100605191047.000000+180
Event Type: информация
User: MICROSOF-B36B85Администратор

Computer Name: MICROSOF-B36B85
Event Code: 7036
Message: Служба «Телефония» перешла в состояние Работает.

Record Number: 11471
Source Name: Service Control Manager
Time Written: 20100605191047.000000+180
Event Type: информация
User:

Computer Name: MICROSOF-B36B85
Event Code: 7036
Message: Служба «Служба обнаружения SSDP» перешла в состояние Работает.

Record Number: 11470
Source Name: Service Control Manager
Time Written: 20100605191047.000000+180
Event Type: информация
User:

=====Application event log=====

Computer Name: MICROSOF-B36B85
Event Code: 1904
Message:
Record Number: 3163
Source Name: HHCTRL
Time Written: 20100428021512.000000+180
Event Type: информация
User:

Computer Name: MICROSOF-B36B85
Event Code: 1904
Message:
Record Number: 3162
Source Name: HHCTRL
Time Written: 20100428021512.000000+180
Event Type: информация
User:

Computer Name: MICROSOF-B36B85
Event Code: 1904
Message:
Record Number: 3161
Source Name: HHCTRL
Time Written: 20100428021512.000000+180
Event Type: информация
User:

Computer Name: MICROSOF-B36B85
Event Code: 1904
Message:
Record Number: 3160
Source Name: HHCTRL
Time Written: 20100428021512.000000+180
Event Type: информация
User:

Computer Name: MICROSOF-B36B85
Event Code: 1904
Message:
Record Number: 3159
Source Name: HHCTRL
Time Written: 20100428021512.000000+180
Event Type: информация
User:

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=%CommonProgramFiles%Microsoft SharedWindows Live;C:Program FilesPC Connectivity Solution;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;C:Program FilesQuickTimeQTSystem;D:Gamesmatlabruntimewin32;D:Gamesmatlabbin
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=6
«PROCESSOR_IDENTIFIER»=x86 Family 6 Model 23 Stepping 10, GenuineIntel
«PROCESSOR_REVISION»=170a
«NUMBER_OF_PROCESSORS»=2
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP
«CLASSPATH»=.;C:Program FilesJavajre1.6.0_06libextQTJava.zip
«QTJAVA»=C:Program FilesJavajre1.6.0_06libextQTJava.zip

---

EOF

---

---

EOF

---

[Jack_Carver]

Вот свежие отчеты

log.txt

Logfile of random’s system information tool 1.07 (written by random/random)
Run by Администратор at 2010-06-09 23:07:48
Microsoft Windows XP Professional Service Pack 3
System drive C: has 7 GB (22%) free of 30 GB
Total RAM: 3071 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:07:54, on 09.06.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20815)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:WINDOWSRTHDCPL.EXE
C:WINDOWSsystem32RUNDLL32.EXE
C:Program FilesHard Drive InspectorHDInspector.exe
C:Program FilesKaspersky LabKaspersky Internet Security 7.0avp.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesVistaDriveIconVistaDrv.exe
C:Program FilesUSB Safely RemoveUSBSafelyRemove.exe
C:Program FilesMicrosoft OfficeOffice14MSOSYNC.EXE
C:My progamsBitMeterBitMeter2.exe
C:My progamsuTorrentutorrent.exe
C:Program FilesKaspersky LabKaspersky Internet Security 7.0avp.exe
C:Program FilesBonjourmDNSResponder.exe
C:WINDOWSsystem32fsproflt.exe
C:WINDOWSsystem32HDDSvc.exe
C:Program FilesCanonIJPLMIJPLMSVC.EXE
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe
C:WINDOWSsystem32PnkBstrA.exe
C:Program FilesCyberLinkShared filesRichVideo.exe
C:Program FilesAlcohol 120StarWindStarWindServiceAE.exe
C:WINDOWSsystem32svchost.exe
C:My progamssVirtual CD v9Systemvc9secs.exe
C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE
C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSvcM.exe
C:Program FilesOperaopera.exe
C:Documents and SettingsАдминистраторРабочий столRSIT.exe
C:Program Filestrend microАдминистратор.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = 127.0.0.1;*.local
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: (no name) — — (no file)
R3 — URLSearchHook: DVDVideoSoftTB Toolbar — {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} — C:Program FilesDVDVideoSofttbDVD1.dll
O2 — BHO: SnagIt Toolbar Loader — {00C6482D-C502-44C8-8409-FCE54AD9C208} — C:Program FilesTechSmithSnagIt 8SnagItBHO.dll
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: Groove GFS Browser Helper — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — C:PROGRA~1MICROS~2Office14GROOVEEX.DLL
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_06binssv.dll
O2 — BHO: Windows Live Sign-in Helper — {9030D464-4C02-4ABF-8ECC-5164760863C6} — C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 — BHO: URLRedirectionBHO — {B4F3A835-0E21-4959-BA22-42B3008E02FF} — C:PROGRA~1MICROS~2Office14URLREDIR.DLL
O2 — BHO: QUICKfind BHO Object — {C08DF07A-3E49-4E25-9AB0-D3882835F153} — C:PROGRA~1TEXTwareQUICKF~1PlugInsIEHelp.dll
O2 — BHO: FDMIECookiesBHO Class — {CC59E0F9-7E43-44FA-9FAA-8377850BF205} — C:My progamsFree Download Manageriefdm2.dll
O2 — BHO: DVDVideoSoftTB Toolbar — {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} — C:Program FilesDVDVideoSofttbDVD1.dll
O3 — Toolbar: SnagIt — {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} — C:Program FilesTechSmithSnagIt 8SnagItIEAddin.dll
O3 — Toolbar: DVDVideoSoftTB Toolbar — {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} — C:Program FilesDVDVideoSofttbDVD1.dll
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [HDInspector.exe] C:Program FilesHard Drive InspectorHDInspector.exe
O4 — HKLM..Run: [AVP] «C:Program FilesKaspersky LabKaspersky Internet Security 7.0avp.exe»
O4 — HKLM..Run: [AdobeAAMUpdater-1.0] «C:Program FilesCommon FilesAdobeOOBEPDAppUWAUpdaterStartupUtility.exe»
O4 — HKLM..Run: [SwitchBoard] C:Program FilesCommon FilesAdobeSwitchBoardSwitchBoard.exe
O4 — HKLM..Run: [AdobeCS5ServiceManager] «C:Program FilesCommon FilesAdobeCS5ServiceManagerCS5ServiceManager.exe» -launchedbylogin
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe
O4 — HKCU..Run: [USB Safely Remove] C:Program FilesUSB Safely RemoveUSBSafelyRemove.exe /startup
O4 — HKCU..Run: [OfficeSyncProcess] C:Program FilesMicrosoft OfficeOffice14MSOSYNC.EXE
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,OnceFirstLogonInstall,0 (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE7_012] rundll32 advpack.dll,LaunchINFSectionEx IE7int.inf,AfterUserStart,,4,N (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,OnceFirstLogonInstall,0 (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘Default user’)
O4 — Startup: µTorrent.lnk = C:My progamsuTorrentutorrent.exe
O4 — Global Startup: Bitmeter2.lnk = C:My progamsBitMeterBitMeter2.exe
O8 — Extra context menu item: &Отправить в OneNote — res:///105
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office14EXCEL.EXE/3000
O8 — Extra context menu item: Добавить в Анти-Баннер — C:Program FilesKaspersky LabKaspersky Internet Security 7.0ie_banner_deny.htm
O8 — Extra context menu item: Закачать все с помощью FDM — file://C:My progamsFree Download Managerdlall.htm
O8 — Extra context menu item: Закачать выбранное с помощью FDM — file://C:My progamsFree Download Managerdlselected.htm
O8 — Extra context menu item: Закачать с помощью FDM — file://C:My progamsFree Download Managerdllink.htm
O8 — Extra context menu item: Скачать видео с Free Download Manager — file://C:My progamsFree Download Managerdlfvideo.htm
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra button: Cтатистика Веб-Антивируса — {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} — C:Program FilesKaspersky LabKaspersky Internet Security 7.0SCIEPlgn.dll
O9 — Extra button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:Program FilesMicrosoft OfficeOffice14ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:Program FilesMicrosoft OfficeOffice14ONBttnIE.dll
O9 — Extra button: &Связанные заметки OneNote — {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} — C:Program FilesMicrosoft OfficeOffice14ONBttnIELinkedNotes.dll
O9 — Extra ‘Tools’ menuitem: &Связанные заметки OneNote — {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} — C:Program FilesMicrosoft OfficeOffice14ONBttnIELinkedNotes.dll
O9 — Extra button: (no name) — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — (no file)
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload2.macromedia.com/get/s … wflash.cab
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O18 — Filter hijack: text/xml — {807573E5-5146-11D5-A672-00B0D022E945} — C:Program FilesCommon FilesMicrosoft SharedOFFICE14MSOXMLMF.DLL
O20 — AppInit_DLLs: C:PROGRA~1KASPER~1KASPER~1.0adialhk.dll
O22 — SharedTaskScheduler: Предзагрузчик Browseui — {438755C2-A8BA-11D1-B96B-00A0C90312E1} — C:WINDOWSsystem32browseui.dll
O22 — SharedTaskScheduler: Демон кэша категорий компонентов — {8C7461EF-2B13-11d2-BE35-3078302C2030} — C:WINDOWSsystem32browseui.dll
O23 — Service: Kaspersky Internet Security 7.0 (AVP) — Kaspersky Lab — C:Program FilesKaspersky LabKaspersky Internet Security 7.0avp.exe
O23 — Service: Служба Bonjour (Bonjour Service) — Apple Inc. — C:Program FilesBonjourmDNSResponder.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: FSPro Filter Service (fsproflt) — FSPro Labs — C:WINDOWSsystem32fsproflt.exe
O23 — Service: HDD Information Service (HDDSvc) — AltrixSoft (http://www.altrixsoft.com/) — C:WINDOWSsystem32HDDSvc.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 — Service: Inkjet Printer/Scanner Extended Survey Program (IJPLMSVC) — Unknown owner — C:Program FilesCanonIJPLMIJPLMSVC.EXE
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: Nero BackItUp Scheduler 4.0 — Nero AG — C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe
O23 — Service: NVIDIA Display Driver Service (nvsvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: PnkBstrA — Unknown owner — C:WINDOWSsystem32PnkBstrA.exe
O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — C:Program FilesCyberLinkShared filesRichVideo.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: ServiceLayer — Nokia. — C:Program FilesPC Connectivity SolutionServiceLayer.exe
O23 — Service: StarWind AE Service (StarWindServiceAE) — Rocket Division Software — C:Program FilesAlcohol 120StarWindStarWindServiceAE.exe
O23 — Service: SwitchBoard — Adobe Systems Incorporated — C:Program FilesCommon FilesAdobeSwitchBoardSwitchBoard.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Virtual CD v9 Management Service (VC9SecS) — H+H Software GmbH — C:My progamssVirtual CD v9Systemvc9secs.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 12871 bytes

======Scheduled tasks folder======

C:WINDOWStasksAdobeAAMUpdater-1.0-MICROSOF-B36B85-Администратор.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{00C6482D-C502-44C8-8409-FCE54AD9C208}]
SnagIt Toolbar Loader — C:Program FilesTechSmithSnagIt 8SnagItBHO.dll [2007-05-01 63048]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper — C:PROGRA~1MICROS~2Office14GROOVEEX.DLL [2009-10-29 4150160]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_06binssv.dll [2008-03-25 509328]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper — C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll [2009-03-25 403832]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler — C:PROGRA~1MICROS~2Office14URLREDIR.DLL [2009-11-03 556432]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{C08DF07A-3E49-4E25-9AB0-D3882835F153}]
QUICKfind BHO Object — C:PROGRA~1TEXTwareQUICKF~1PlugInsIEHelp.dll [2001-08-10 388608]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
FDMIECookiesBHO Class — C:My progamsFree Download Manageriefdm2.dll [2008-12-30 98304]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}]
DVDVideoSoftTB Toolbar — C:Program FilesDVDVideoSofttbDVD1.dll [2010-06-09 2736736]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} — SnagIt — C:Program FilesTechSmithSnagIt 8SnagItIEAddin.dll [2007-05-01 161352]
{e9911ec6-1bcc-40b0-9993-e0eea7f6953f} — DVDVideoSoftTB Toolbar — C:Program FilesDVDVideoSofttbDVD1.dll [2010-06-09 2736736]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2008-04-10 16861184]
«Alcmtr»=C:WINDOWSALCMTR.EXE [2005-05-03 69632]
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2009-09-27 86016]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2009-09-27 13918208]
«HDInspector.exe»=C:Program FilesHard Drive InspectorHDInspector.exe [2008-04-14 1006344]
«AVP»=C:Program FilesKaspersky LabKaspersky Internet Security 7.0avp.exe [2008-02-08 227856]
«AdobeAAMUpdater-1.0″=C:Program FilesCommon FilesAdobeOOBEPDAppUWAUpdaterStartupUtility.exe [2010-06-06 500208]
«SwitchBoard»=C:Program FilesCommon FilesAdobeSwitchBoardSwitchBoard.exe [2010-02-19 517096]
«AdobeCS5ServiceManager»=C:Program FilesCommon FilesAdobeCS5ServiceManagerCS5ServiceManager.exe [2010-02-22 406992]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-06-25 17408]
«VistaIcon»=C:Program FilesVistaDriveIconVistaDrv.exe [2008-03-23 132096]
«USB Safely Remove»=C:Program FilesUSB Safely RemoveUSBSafelyRemove.exe [2007-12-20 700928]
«OfficeSyncProcess»=C:Program FilesMicrosoft OfficeOffice14MSOSYNC.EXE [2009-11-03 649072]
«AdobeBridge»= []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAdobe ARM]
C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe [2009-12-11 948672]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAdobe Reader Speed Launcher]
C:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2009-12-22 35760]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAlcoholAutomount]
C:Program FilesAlcohol 120axcmd.exe [2007-12-22 221568]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregBCSSync]
C:Program FilesMicrosoft OfficeOffice14BCSSync.exe [2009-09-27 83312]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregCanonMyPrinter]
C:Program FilesCanonMyPrinterBJMyPrt.exe [2008-03-03 1848648]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregCanonSolutionMenu]
C:Program FilesCanonSolutionMenuCNSLMAIN.exe [2008-03-10 689488]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregLanguageShortcut]
C:Program FilesCyberLinkPowerDVDLanguageLanguage.exe [2007-02-07 54832]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregRemoteControl]
C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2007-02-07 71216]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSteam]
D:GamesHLSteam.exe -silent []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregVC9Player]
C:My progamssVirtual CD v9SystemVC9Play.exe [2007-12-03 202048]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^Администратор^Главное меню^Программы^Автозагрузка^XFilesDialog.LNK]
C:PROGRA~1XFILES~1XFILES~1.EXE [2006-08-31 249856]

C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
Bitmeter2.lnk — C:My progamsBitMeterBitMeter2.exe

C:Documents and SettingsАдминистраторГлавное менюПрограммыАвтозагрузка
µTorrent.lnk — C:My progamsuTorrentutorrent.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLS»=»C:PROGRA~1KASPER~1KASPER~1.0adialhk.dll»

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyklogon]
C:WINDOWSsystem32klogon.dll [2008-02-08 219664]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2008-03-21 133632]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{B5A7F190-DDA6-4420-B3BA-52453494E6CD}»=C:PROGRA~1MICROS~2Office14GROOVEEX.DLL [2009-10-29 4150160]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalfsproflt]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWdf01000.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkfsproflt]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWdf01000.sys]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«SynchronousMachineGroupPolicy»=0
«SynchronousUserGroupPolicy»=0

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«NoThumbnailCache»=1
«NoSMConfigurePrograms»=1
«NoSMHelp»=1

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{93eafab9-0585-11df-867c-00e04c777304}]
shellAutoRuncommand — H:LONG/island.exe
shellopencommand — H:LONG/island.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{b9e1b553-efea-11de-862d-00e04c777304}]
shellAutoRuncommand — H:RECYCLERS-51-9-25-3434476501-1644491933-601013361-1214CzuF.exe
shellopencommand — H:RECYCLERS-51-9-25-3434476501-1644491933-601013361-1214CzuF.exe

======List of files/folders created in the last 1 months======

2010-06-09 09:10:14 —-D—- C:Program Filestrend micro
2010-06-09 09:10:08 —-D—- C:rsit
2010-06-09 02:18:33 —-HD—- C:WINDOWSPIF
2010-06-08 20:56:50 —-D—- C:Documents and SettingsАдминистраторApplication DataPriceGong
2010-06-08 19:40:28 —-D—- C:Documents and SettingsАдминистраторApplication DatadWOwLy
2010-06-06 02:46:55 —-D—- C:Documents and SettingsАдминистраторApplication DataStageManager.BD092818F67280F4B42B04877600987F0111B594.1
2010-06-06 02:46:55 —-D—- C:Documents and SettingsАдминистраторApplication DataAdobe Mini Bridge CS5
2010-06-06 02:30:24 —-D—- C:Documents and SettingsAll UsersApplication Dataregid.1986-12.com.adobe
2010-06-06 02:26:25 —-D—- C:Program FilesAdobe Media Player
2010-06-06 02:24:13 —-D—- C:Program FilesCommon FilesAdobe AIR
2010-06-06 01:51:35 —-D—- C:Documents and SettingsАдминистраторApplication DataUDC Profiles
2010-06-06 01:50:59 —-A—- C:WINDOWSsystem32udcpm.dll
2010-06-06 01:50:54 —-D—- C:Program FilesUniversal Document Converter
2010-06-06 01:33:23 —-A—- C:WINDOWSiltwain.ini
2010-06-06 01:33:19 —-D—- C:Documents and SettingsAll UsersApplication DataBlueLabelSoft
2010-06-06 01:33:18 —-D—- C:Program FilesBlue Label Soft
2010-05-17 20:56:30 —-D—- C:Documents and SettingsАдминистраторApplication DataMathWorks
2010-05-17 19:38:33 —-A—- C:WINDOWSsystem32jit.dll
2010-05-17 19:38:33 —-A—- C:WINDOWSsetdebug.exe
2010-05-17 19:38:32 —-A—- C:WINDOWSsystem32javaee.dll
2010-05-17 19:38:32 —-A—- C:WINDOWSsystem32dx3j.dll
2010-05-17 19:38:26 —-A—- C:WINDOWSsystem32wjview.exe
2010-05-17 19:38:26 —-A—- C:WINDOWSsystem32vmhelper.dll
2010-05-17 19:38:26 —-A—- C:WINDOWSsystem32msjdbc10.dll
2010-05-17 19:38:25 —-A—- C:WINDOWSsystem32msjava.dll
2010-05-17 19:38:25 —-A—- C:WINDOWSsystem32msawt.dll
2010-05-17 19:38:25 —-A—- C:WINDOWSsystem32jview.exe
2010-05-17 19:38:24 —-A—- C:WINDOWSsystem32jdbgmgr.exe
2010-05-17 19:38:24 —-A—- C:WINDOWSsystem32javart.dll
2010-05-17 19:38:24 —-A—- C:WINDOWSsystem32javaprxy.dll
2010-05-17 19:38:23 —-A—- C:WINDOWSsystem32javacypt.dll
2010-05-17 19:38:23 —-A—- C:WINDOWSsystem32clspack.exe
2010-05-12 23:04:13 —-D—- C:Documents and SettingsАдминистраторApplication DataTeamViewer
2010-05-12 22:25:08 —-D—- C:Documents and SettingsАдминистраторApplication DataskypePM
2010-05-12 22:23:55 —-D—- C:Documents and SettingsАдминистраторApplication DataSkype
2010-05-12 22:23:47 —-D—- C:Program FilesCommon FilesSkype
2010-05-12 22:23:38 —-D—- C:Documents and SettingsAll UsersApplication DataSkype

======List of files/folders modified in the last 1 months======

2010-06-09 23:07:51 —-D—- C:WINDOWSTemp
2010-06-09 23:07:17 —-D—- C:Documents and SettingsAll UsersApplication DataBitmeter2
2010-06-09 23:03:14 —-D—- C:WINDOWSsystem32CatRoot2
2010-06-09 23:03:14 —-D—- C:Documents and SettingsAll UsersApplication DataKaspersky Lab
2010-06-09 23:03:01 —-D—- C:Documents and SettingsАдминистраторApplication DatauTorrent
2010-06-09 23:02:28 —-D—- C:WINDOWS
2010-06-09 23:02:09 —-A—- C:WINDOWSSchedLgU.Txt
2010-06-09 11:57:38 —-AD—- C:Documents and SettingsAll UsersApplication DataTEMP
2010-06-09 11:35:12 —-D—- C:WINDOWSPrefetch
2010-06-09 09:10:14 —-RD—- C:Program Files
2010-06-09 02:20:46 —-D—- C:WINDOWSsystem32
2010-06-09 01:59:38 —-D—- C:WINDOWSsystem32config
2010-06-09 01:59:22 —-D—- C:WINDOWSsystem32wbem
2010-06-09 01:59:21 —-D—- C:WINDOWSRegistration
2010-06-08 21:18:05 —-D—- C:WINDOWSsystem32drivers
2010-06-08 20:49:47 —-SHD—- C:WINDOWSInstaller
2010-06-08 20:49:43 —-HD—- C:WINDOWSinf
2010-06-08 20:49:22 —-D—- C:Documents and SettingsAll UsersApplication DataTechSmith
2010-06-08 20:49:20 —-D—- C:Program FilesTechSmith
2010-06-08 20:48:23 —-D—- C:Program FilesCommon FilesWise Installation Wizard
2010-06-08 01:14:52 —-D—- C:Program FilesPowerOff53
2010-06-06 02:39:17 —-D—- C:Program FilesCommon FilesAdobe
2010-06-06 02:34:54 —-SD—- C:WINDOWSTasks
2010-06-06 02:34:47 —-D—- C:Documents and SettingsАдминистраторApplication DataAdobe
2010-06-06 02:30:22 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
2010-06-06 02:29:05 —-D—- C:Program FilesAdobe
2010-06-06 02:27:36 —-RSD—- C:WINDOWSFonts
2010-06-06 02:24:13 —-D—- C:Program FilesCommon Files
2010-06-06 02:22:22 —-D—- C:WINDOWSWinSxS
2010-06-05 14:06:04 —-D—- C:Program FilesRujimCo
2010-06-04 22:35:30 —-D—- C:Documents and SettingsAll UsersApplication DataCanonIJPLM
2010-05-31 22:30:09 —-A—- C:WINDOWSNeroDigital.ini
2010-05-28 23:48:23 —-D—- C:Documents and SettingsAll UsersApplication DataMicrosoft Help
2010-05-27 00:14:42 —-D—- C:Documents and SettingsАдминистраторApplication DataFree Download Manager
2010-05-26 18:43:40 —-D—- C:Program FilesDVDVideoSoft
2010-05-25 23:42:27 —-D—- C:Documents and SettingsАдминистраторApplication DataICQ
2010-05-17 20:13:38 —-RSD—- C:WINDOWSassembly
2010-05-17 19:38:30 —-D—- C:WINDOWSjava
2010-05-14 21:11:44 —-D—- C:WINDOWSsystem32DirectX
2010-05-13 22:13:04 —-D—- C:Documents and SettingsAll UsersApplication DataCanonIJ

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-15 40704]
R1 klif;Klif; ??C:WINDOWSsystem32driversklif.sys []
R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B}; ??C:Program FilesCyberLinkPowerDVD00.fcl []
R2 Hardlock;Hardlock; ??C:WINDOWSsystem32drivershardlock.sys []
R2 Haspnt;Haspnt; ??C:WINDOWSsystem32driversHaspnt.sys []
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2008-06-05 62336]
R2 TBPanel;TBPanel; C:WINDOWSsystem32driversTBPanel.sys [2007-03-16 12256]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-15 144384]
R3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2008-04-17 4707328]
R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:WINDOWSsystem32DRIVERSklim5.sys [2007-12-13 24592]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2009-10-05 7655872]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtnicxp.sys [2007-11-21 104320]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-24 30336]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-14 59520]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-14 20608]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:WINDOWSsystem32driversWmBEnum.sys [2009-09-11 22792]
R3 WmFilter;Logitech Gaming HID Filter Driver; C:WINDOWSsystem32driversWmFilter.sys [2009-09-11 35592]
R3 WmHidLo;Logitech Gaming USB Filter Driver; C:WINDOWSsystem32driversWmHidLo.sys [2009-09-11 31752]
R3 WmXlCore;Logitech Translation Layer Driver; C:WINDOWSsystem32driversWmXlCore.sys [2009-09-11 66056]
S3 ab8otbcm;ab8otbcm; C:WINDOWSsystem32driversab8otbcm.sys []
S3 Cardex;Cardex; ??C:WINDOWSsystem32driversTBPANEL.SYS []
S3 ENTECH;ENTECH; ??C:WINDOWSsystem32DRIVERSENTECH.sys []
S3 HH9Help.sys;HH9Help.sys; ??C:WINDOWSsystem32driversHH9Help.sys []
S3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-19 12160]
S3 nmwcd;Nokia USB Phone Parent; C:WINDOWSsystem32driversccdcmb.sys [2009-02-09 17664]
S3 nmwcdc;Nokia USB Generic; C:WINDOWSsystem32driversccdcmbo.sys [2009-02-09 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:WINDOWSsystem32DRIVERSpccsmcfd.sys [2008-08-26 18816]
S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtenicxp.sys [2008-01-04 105856]
S3 upperdev;upperdev; C:WINDOWSsystem32DRIVERSusbser_lowerflt.sys [2009-02-09 7808]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-22 32384]
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-14 25856]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
S3 usbser;USB Modem Driver; C:WINDOWSsystem32driversusbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:WINDOWSsystem32DRIVERSusbser_lowerfltj.sys [2009-02-09 7808]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:WINDOWSSystem32Driverswdf01000.sys [2008-03-27 503008]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:WINDOWSsystem32driversWmVirHid.sys [2009-09-11 14984]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2008-01-18 83328]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AVP;Kaspersky Internet Security 7.0; C:Program FilesKaspersky LabKaspersky Internet Security 7.0avp.exe [2008-02-08 227856]
R2 Bonjour Service;Служба Bonjour; C:Program FilesBonjourmDNSResponder.exe [2010-02-12 345376]
R2 fsproflt;FSPro Filter Service; C:WINDOWSsystem32fsproflt.exe [2010-01-06 142648]
R2 HDDSvc;HDD Information Service; C:WINDOWSsystem32HDDSvc.exe [2008-02-27 189704]
R2 IJPLMSVC;Inkjet Printer/Scanner Extended Survey Program; C:Program FilesCanonIJPLMIJPLMSVC.EXE [2008-01-22 103808]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-19 322120]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:Program FilesCommon FilesNeroNero BackItUp 4NBService.exe [2008-09-24 935208]
R2 nvsvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2009-09-27 172100]
R2 PnkBstrA;PnkBstrA; C:WINDOWSsystem32PnkBstrA.exe [2009-12-26 66872]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:Program FilesCyberLinkShared filesRichVideo.exe [2007-02-07 173616]
R2 StarWindServiceAE;StarWind AE Service; C:Program FilesAlcohol 120StarWindStarWindServiceAE.exe [2007-05-28 275968]
R2 VC9SecS;Virtual CD v9 Management Service; C:My progamssVirtual CD v9Systemvc9secs.exe [2007-12-03 132416]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE [2009-03-25 1533824]
R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S3 aspnet_state;Служба состояний ASP.NET; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-07-29 881664]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:Program FilesMicrosoft OfficeOffice14GROOVE.EXE [2009-10-29 30603640]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2009-09-26 149336]
S3 osppsvc;Office Software Protection Platform; C:Program FilesCommon FilesMicrosoft SharedOfficeSoftwareProtectionPlatformOSPPSVC.EXE [2009-09-26 4639136]
S3 ServiceLayer;ServiceLayer; C:Program FilesPC Connectivity SolutionServiceLayer.exe [2009-06-02 637952]
S3 SwitchBoard;SwitchBoard; C:Program FilesCommon FilesAdobeSwitchBoardSwitchBoard.exe [2010-02-19 517096]
S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2008-03-21 914944]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-07-29 132096]

info.txt

info.txt logfile of random’s system information tool 1.06 2010-06-09 23:07:57

======Uninstall list======

—>MsiExec /X{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
3DMark06—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime101Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{7F3AD00A-1819-4B15-BB7D-08B3586336D7}setup.exe» -l0x9 -removeonly
ABBYY FineReader 8.0 Professional Edition—>MsiExec.exe /I{AAF80000-22B9-4CE9-98D6-2CCF359BAC07}
ACDSee Pro 2—>MsiExec.exe /I{4AAC95F4-A30E-4EE5-A086-6F79581D0D70}
Adobe AIR—>C:Program FilesCommon FilesAdobe AIRVersions1.0ResourcesAdobe AIR Updater.exe -arp:uninstall
Adobe AIR—>MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Community Help—>msiexec /qb /x {0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
Adobe Community Help—>MsiExec.exe /I{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
Adobe Flash Player 10 ActiveX—>C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Flash Player 10 Plugin—>C:WINDOWSsystem32MacromedFlashuninstall_plugin.exe
Adobe Media Player—>msiexec /qb /x {DE3A9DC5-9A5D-6485-9662-347162C7E4CA}
Adobe Media Player—>MsiExec.exe /I{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}
Adobe Photoshop CS5—>C:Program FilesCommon FilesAdobeOOBEPDAppcorePDApp.exe —appletID=»DWA_UI» —appletVersion=»1.0″ —mode=»Uninstall» —mediaSignature=»{15FEDA5F-141C-4127-8D7E-B962D1742728}»
Adobe Reader 9.3.1 — Russian—>MsiExec.exe /I{AC76BA86-7AD7-1049-7B44-A93000000001}
AIMP2 MegaPack—>»C:My progamsAIMP2unins000.exe»
Allok Video to FLV Converter 5.1.0925—>»C:My progamsAllok Video to FLV Converterunins000.exe»
Ap PDF Split/Merge—>»C:My progamsAp PDF Split-Mergeunins000.exe»
ArtMoney PRO v7.27—>»C:My progamsArtMoneyUninstallunins000.exe»
Auslogics BoostSpeed—>»C:Program FilesAuslogicsAuslogics BoostSpeedunins000.exe»
AusLogics Disk Defrag—>»C:My progamsAusLogics Disk Defragunins000.exe»
AusLogics Emergency Recovery—>»C:Program FilesAuslogicsAusLogics Emergency Recoveryunins000.exe»
AutoIt v3.2.8.1—>C:Program FilesAutoIt3Uninstall.exe
Bad Crystal 2.60—>C:Program Filesz-drex incBad CrystalUninstall.exe
Becky! Ver.2—>C:Program FilesRimArtsB2B2Setup.exe u
BitMeter—>»C:My progamsBitMeteruninstall.exe»
Bonjour—>MsiExec.exe /X{76BC2442-0002-47FA-9617-43BAD82BEF4C}
Canon MP Navigator EX 2.0—>»C:Program FilesCanonMP Navigator EX 2.0Maint.exe» /UninstallRemove C:Program FilesCanonMP Navigator EX 2.0uninst.ini
Canon MP260 series — регистрация пользователя—>C:Program FilesCanonIJEREGMP260 seriesUNINST.EXE
Canon MP260 series MP Drivers—>»C:WINDOWSsystem32CanonIJ Uninstaller Information{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP260_seriesDelDrv.exe» /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP260_series /L0x0019
Canon Utilities Easy-PhotoPrint EX—>C:Program FilesCanonEasy-PhotoPrint EXuninst.exe uninst.ini
Canon Utilities My Printer—>C:Program FilesCanonMyPrinteruninst.exe uninst.ini
Canon Utilities Solution Menu—>C:Program FilesCanonSolutionMenuuninst.exe uninst.ini
CCleaner (remove only)—>»C:Program FilesCCleaneruninst.exe»
DiRT2—>»C:Program FilesInstallShield Installation Information{52D1D62C-FEAB-4580-849E-1DB624BADBBD}setup.exe» -runfromtemp -l0x0009 -removeonly
Driver Genius Professional Edition 2007—>»C:Program FilesDriver-SoftDriverGeniusunins000.exe»
DVDVideoSoft Toolbar—>C:PROGRA~1DVDVID~1UNWISE.EXE /U C:PROGRA~1DVDVID~1INSTALL.LOG
Everest Ultimate Edition 4.50.1330—>»C:Program FilesLavalysEVEREST Ultimate Editionunins000.exe»
FlylinkDC++ r394 build 3137—>»C:My progamsFlylinkDC++unins000.exe»
FormatFactory 2.20—>C:My progamsFormatFactoryuninst.exe
Fraps (remove only)—>»C:My progamsFraps-3uninstall.exe»
Free Download Manager 3.0—>»C:My progamsFree Download Managerunins000.exe»
Free FLV Converter V 6.7.7—>»C:My progamsFree FLV Converterunins000.exe»
Free Studio version 4.4—>»C:My progamsFree Studiounins000.exe»
Hard Drive Inspector Professional 2.90 build # 467—>C:Program FilesHard Drive InspectorUninst.exe
HashTab 2.1.0—>C:WINDOWSsystem32ShellExthtdel32.bat
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)—>C:WINDOWSsystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=»»
Hotfix for Windows Media Format 11 SDK (KB929399)—>»C:WINDOWS$NtUninstallKB929399$spuninstspuninst.exe»
ICQ6.5—>»C:Program FilesInstallShield Installation Information{60DE4033-9503-48D1-A483-7846BD217CA9}setup.exe» -runfromtemp -l0x0009 -removeonly
Inkjet Printer/Scanner Extended Survey Program—>C:Program FilesCanonIJPLMSETUP.EXE -R
Java(TM) 6 Update 6—>MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160060}
Kaspersky Internet Security 7.0—>MsiExec.exe /I{C774410D-3EF9-4DE7-AC01-332613163ECF}
Kaspersky Internet Security 7.0—>MsiExec.exe /I{C774410D-3EF9-4DE7-AC01-332613163ECF}
K-Lite Mega Codec Pack 5.5.1—>»C:Program FilesK-Lite Codec Packunins000.exe»
Kyodai Mahjongg 2006 v1.42—>»C:Program FilesKyodai Mahjongg 2006unins000.exe»
Logitech Gaming Software 5.08—>MsiExec.exe /X{33BC9D7E-E790-495E-A4EA-CFB160C17A91}
Longman WordWise Dictionary—>C:WINDOWSIsUninst.exe -f»c:program filesUninst.isu»
MATLAB R2010a—>D:Gamesmatlabuninstalluninstall.exe D:Gamesmatlab
Microsoft .NET Framework 1.1 Russian Language Pack—>MsiExec.exe /X{2BB372D9-52B4-410A-BC1A-FEAB63181EEF}
Microsoft .NET Framework 1.1—>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1—>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Language Pack — RUS—>C:WINDOWSMicrosoft.NETFrameworkv2.0.50727Microsoft .NET Framework 2.0 Language Pack — RUSinstall.exe
Microsoft .NET Framework 2.0 Service Pack 2—>MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2—>MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1—>C:WINDOWSMicrosoft.NETFrameworkv3.5Microsoft .NET Framework 3.5 SP1setup.exe
Microsoft .NET Framework 3.5 SP1—>MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Compression Client Pack 1.0 for Windows XP—>»C:WINDOWS$NtUninstallMSCompPackV1$spuninstspuninst.exe»
Microsoft Games for Windows — LIVE Redistributable—>MsiExec.exe /X{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}
Microsoft Games for Windows — LIVE—>MsiExec.exe /X{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7—>»C:WINDOWS$NtUninstallWdf01007$spuninstspuninst.exe»
Microsoft Office — профессиональный выпуск версии 2003—>MsiExec.exe /I{90110419-6000-11D3-8CFE-0150048383C9}
Microsoft Office Access MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-0015-0419-0000-0000000FF1CE}
Microsoft Office Excel MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-0016-0419-0000-0000000FF1CE}
Microsoft Office Groove MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-00BA-0419-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-0044-0419-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-00A1-0419-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-001A-0419-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-0018-0419-0000-0000000FF1CE}
Microsoft Office Professional Plus 2010 (Beta)—>MsiExec.exe /X{20140000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (English) 2010 (Beta)—>MsiExec.exe /X{20140000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2010 (Beta)—>MsiExec.exe /X{20140000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-001F-0419-0000-0000000FF1CE}
Microsoft Office Proof (Ukrainian) 2010 (Beta)—>MsiExec.exe /X{20140000-001F-0422-0000-0000000FF1CE}
Microsoft Office Proofing (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-002C-0419-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-0019-0419-0000-0000000FF1CE}
Microsoft Office Shared MUI (Russian) 2007—>MsiExec.exe /X{90120000-006E-0419-0000-0000000FF1CE}
Microsoft Office Shared MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-006E-0419-0000-0000000FF1CE}
Microsoft Office Word MUI (Russian) 2010 (Beta)—>MsiExec.exe /X{20140000-001B-0419-0000-0000000FF1CE}
Microsoft Office профессиональный плюс 2010—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE14Office Setup Controllersetup.exe» /uninstall PROPLUS
Microsoft User-Mode Driver Framework Feature Pack 1.7—>»C:WINDOWS$NtUninstallWudf01007$spuninstspuninst.exe»
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Visual C++ 2008 Redistributable — x86 9.0.30729.17—>MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft_VC80_ATL_x86—>MsiExec.exe /I{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}
Microsoft_VC80_CRT_x86—>MsiExec.exe /I{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}
Microsoft_VC80_MFC_x86—>MsiExec.exe /I{D1A19B02-817E-4296-A45B-07853FD74D57}
Microsoft_VC80_MFCLOC_x86—>MsiExec.exe /I{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}
Microsoft_VC90_ATL_x86—>MsiExec.exe /I{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}
Microsoft_VC90_CRT_x86—>MsiExec.exe /I{08D2E121-7F6A-43EB-97FD-629B44903403}
Microsoft_VC90_MFC_x86—>MsiExec.exe /I{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}
Mozilla Firefox 3.5.3—>C:Program FilesMozilla FirefoxUninstall.exe
MSVC80_x86—>MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27}
MSXML 4.0 SP2 (KB936181)—>MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
Need for Speed Carbon—>»G:Need for Speed Carbonunins000.exe»
Need for Speed™ Most Wanted—>F:My ownMost WantedEAUninstall.exe
Need for Speed™ SHIFT—>MsiExec.exe /X{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}
Nero 8 Micro v8.2.8.0—>»C:Program FilesNerounins000.exe»
Nero 9—>C:Program FilesCommon FilesNeroNero ProductInstaller 4SetupX.exe REMOVESERIALNUMBER=»9M03-01A1-PCX7-K31A-8A94-98PT-KT2E-522A»
neroxml—>MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
Net Speakerphone 4 beta3 build 051219—>»C:My progamsNet Speakerphone 4unins000.exe»
Nokia Connectivity Cable Driver—>MsiExec.exe /I{52D02A2B-03D2-4E34-A358-DC5D951FD296}
Nokia PC Suite—>MsiExec.exe /I{3D39E775-DDDA-4327-B747-0BDC5F191331}
NVIDIA Drivers—>C:Program FilesNVIDIA CorporationUninstallnvuninst.exe UninstallGUI
NVIDIA PhysX—>MsiExec.exe /X{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
OpenAL—>»C:Program FilesOpenALOpenALwEAX.exe» /U
Opera 10.00.1750—>C:Program FilesOperaUninstall.exe
Opera 10.53—>MsiExec.exe /X{1A0D2EFC-C4FC-446A-8BC3-57A54CE5EADD}
Path2Clipboard 1.0.7.67—>C:WINDOWSsystem32ShellExtP2Cdel.bat
PC Connectivity Solution—>MsiExec.exe /I{0C973594-7DDF-4BD0-84ED-3517F7622037}
PDF Settings CS5—>MsiExec.exe /I{A78FE97A-C0C8-49CE-89D0-EDD524A17392}
PDF to BMP JPG TIFF Converter 2.32—>»C:Program FilesBlue Label SoftPDF To BMP JPG TIFF Converter 2.32unins000.exe»
PowerDVD—>»C:Program FilesInstallShield Installation Information{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}Setup.exe» -l0x000409 /z-uninstall
PROMT Expert 8 Giant Try-Buy—>MsiExec.exe /I{A4F761F7-FBC8-49BF-BC37-15550C3EAA85}
QuickTime—>MsiExec.exe /I{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}
Rapture3D 2.3.22 Game—>»C:Program FilesBRSunins000.exe»
Realtek High Definition Audio Driver—>RtlUpd.exe -r -m -nrg2709
Shockwave Player—>MsiExec.exe /X{103906AD-C60E-4E65-BC84-CE980D19CE41}
Shockwave—>C:WINDOWSsystem32MacromedSHOCKW~2UNWISE.EXE C:WINDOWSsystem32MacromedSHOCKW~2Install.log
Skype™ 4.2—>MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
SnagIt 8—>MsiExec.exe /I{DA0BF7AB-88EB-4675-8FA1-531EAD938821}
Spelling Dictionaries Support For Adobe Reader 9—>MsiExec.exe /I{AC76BA86-7AD7-5464-3428-900000000004}
SUPER © Version 2009.bld.36 (June 10, 2009)—>C:MYPROG~1SUPERSetup.exe /remove /q0
Teleport Pro—>C:Program FilesTeleport ProUninstall.exe
Total Commander—>C:Program FilesTotal CommanderUninstall.exe
Ukrainian language for ABBYY FineReader 8.0 Professional Edition—>MsiExec.exe /X{9274109B-3F04-4608-8B3E-4AC55B5DDAF1}
Uninstall 1.0.0.1—>»C:Program FilesCommon FilesDVDVideoSoftunins000.exe»
Uninstall Tool—>»C:Program FilesUninstall Toolunins000.exe»
Universal Document Converter (Demo)—>»C:Program FilesUniversal Document Converterunins000.exe»
USB Safely Remove 3.3—>»C:Program FilesUSB Safely Removeunins000.exe»
Vegas Pro 9.0—>MsiExec.exe /X{6E5AB107-172B-4F17-8ABB-357C59EF1B08}
Virtual CD v9—>C:Program FilesInstallShield Installation Information{98A64C75-BFD6-4212-8746-8BADC7ABA79E}setup.exe -runfromtemp -l0x0009 -removeonly
Vista Drive Icon—>rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFVistaDrv.inf,Uninstall
Vtune 7.6—>»C:Program FilesVtuneunins000.exe»
WinDjView 1.0.3—>C:Program FilesWinDjViewuninstall.exe
Windows Media Format 11 runtime—>»C:Program FilesWindows Media Playerwmsetsdk.exe» /UninstallAll
Windows Media Format 11 runtime—>»C:WINDOWS$NtUninstallWMFDist11$spuninstspuninst.exe»
Windows Media Player 11—>»C:WINDOWS$NtUninstallwmp11$spuninstspuninst.exe»
XFilesDialog—>C:Program FilesXFilesDialogXFilesDialog.EXE -u
Xilisoft HD Video Converter—>C:My progamsHD Video ConverterUninstall.exe
Архиватор WinRAR—>C:Program FilesWinRARuninstall.exe
КОМПАС-3D V10—>MsiExec.exe /I{B3724E1F-F02F-49D3-94DB-C81539A27D9F}
Крестный отец™ II—>MsiExec.exe /X{A1416622-0DDE-45B5-B06C-DFC3ED94C53B}
Обновление безопасности для Windows XP — (KB941569)—>»C:WINDOWS$NtUninstallKB941569$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB958644)—>»C:WINDOWS$NtUninstallKB958644$spuninstspuninst.exe»
Пакет драйверов Windows — Nokia Modem (06/01/2009 4.1)—>C:PROGRA~1DIFX270581355A767BF1dpinst.exe /u C:WINDOWSsystem32DRVSTOREnokia_blue_C08496D7A0050438DFE13C55799AE2D4157A8E7Anokia_bluetooth.inf
Пакет драйверов Windows — Nokia Modem (06/01/2009 7.01.0.3)—>C:PROGRA~1DIFX270581355A767BF1dpinst.exe /u C:WINDOWSsystem32DRVSTOREnokbtmdm_9C48E34C57B7D4AAE5FFF5FB9B476B538394FD30nokbtmdm.inf
Пакет драйверов Windows — Nokia pccsmcfd (08/22/2008 7.0.0.0)—>C:PROGRA~1DIFXB4723E9A0713E5B1dpinst.exe /u C:WINDOWSsystem32DRVSTOREpccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294pccsmcfd.inf
Пакет обеспечения совместимости для выпуска 2007 системы Microsoft Office—>MsiExec.exe /X{90120000-0020-0419-0000-0000000FF1CE}
Проигрыватель Windows Media 11—>»C:Program FilesWindows Media PlayerSetup_wm.exe» /Uninstall
Телефонный Справочник г.Полтава—>MsiExec.exe /X{15F7C918-7587-4F13-B2BC-EE815269D90C}

======Hosts File======

127.0.0.1 localhost

======Security center information======

AV: Kaspersky Internet Security
FW: Kaspersky Internet Security

======System event log======

Computer Name: MICROSOF-B36B85
Event Code: 7036
Message: Служба «Служба COM записи компакт-дисков IMAPI» перешла в состояние Остановлена.

Record Number: 11474
Source Name: Service Control Manager
Time Written: 20100605191053.000000+180
Event Type: информация
User:

Computer Name: MICROSOF-B36B85
Event Code: 7036
Message: Служба «Диспетчер подключений удаленного доступа» перешла в состояние Работает.

Record Number: 11473
Source Name: Service Control Manager
Time Written: 20100605191049.000000+180
Event Type: информация
User:

Computer Name: MICROSOF-B36B85
Event Code: 7035
Message: Служба «Диспетчер подключений удаленного доступа» успешно отправила управляющий элемент «запустить».

Record Number: 11472
Source Name: Service Control Manager
Time Written: 20100605191047.000000+180
Event Type: информация
User: MICROSOF-B36B85Администратор

Computer Name: MICROSOF-B36B85
Event Code: 7036
Message: Служба «Телефония» перешла в состояние Работает.

Record Number: 11471
Source Name: Service Control Manager
Time Written: 20100605191047.000000+180
Event Type: информация
User:

Computer Name: MICROSOF-B36B85
Event Code: 7036
Message: Служба «Служба обнаружения SSDP» перешла в состояние Работает.

Record Number: 11470
Source Name: Service Control Manager
Time Written: 20100605191047.000000+180
Event Type: информация
User:

=====Application event log=====

Computer Name: MICROSOF-B36B85
Event Code: 1904
Message:
Record Number: 3163
Source Name: HHCTRL
Time Written: 20100428021512.000000+180
Event Type: информация
User:

Computer Name: MICROSOF-B36B85
Event Code: 1904
Message:
Record Number: 3162
Source Name: HHCTRL
Time Written: 20100428021512.000000+180
Event Type: информация
User:

Computer Name: MICROSOF-B36B85
Event Code: 1904
Message:
Record Number: 3161
Source Name: HHCTRL
Time Written: 20100428021512.000000+180
Event Type: информация
User:

Computer Name: MICROSOF-B36B85
Event Code: 1904
Message:
Record Number: 3160
Source Name: HHCTRL
Time Written: 20100428021512.000000+180
Event Type: информация
User:

Computer Name: MICROSOF-B36B85
Event Code: 1904
Message:
Record Number: 3159
Source Name: HHCTRL
Time Written: 20100428021512.000000+180
Event Type: информация
User:

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=%CommonProgramFiles%Microsoft SharedWindows Live;C:Program FilesPC Connectivity Solution;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;C:Program FilesQuickTimeQTSystem;D:Gamesmatlabruntimewin32;D:Gamesmatlabbin
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=6
«PROCESSOR_IDENTIFIER»=x86 Family 6 Model 23 Stepping 10, GenuineIntel
«PROCESSOR_REVISION»=170a
«NUMBER_OF_PROCESSORS»=2
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP
«CLASSPATH»=.;C:Program FilesJavajre1.6.0_06libextQTJava.zip
«QTJAVA»=C:Program FilesJavajre1.6.0_06libextQTJava.zip

---

EOF

---

[Автор]

Сообщения