[beauty_svetik]

All processes killed
========== REGISTRY ==========
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{0d5a9da0-ce75-11dd-b759-001f3aeae673} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{0d5a9da0-ce75-11dd-b759-001f3aeae673} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{2d205478-7b6e-11df-99fe-d1a5ac5f22ae} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{2d205478-7b6e-11df-99fe-d1a5ac5f22ae} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{429b3372-e166-11dd-8d7c-001f3aeae673} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{429b3372-e166-11dd-8d7c-001f3aeae673} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{4dda6901-e13e-11dd-8f01-001f3aeae673} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{4dda6901-e13e-11dd-8f01-001f3aeae673} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{52b48a4c-4c33-11de-a44e-d7fb59860216} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{52b48a4c-4c33-11de-a44e-d7fb59860216} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{631fc7f6-e210-11dd-ab39-001f3aeae673} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{631fc7f6-e210-11dd-ab39-001f3aeae673} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{7b95f358-5e25-11dd-8570-001f3aeae673} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{7b95f358-5e25-11dd-8570-001f3aeae673} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{7c963f8c-457f-11df-bd55-de6ca025830d} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{7c963f8c-457f-11df-bd55-de6ca025830d} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{7defeea2-d01c-11dd-ba55-001f3aeae673} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{7defeea2-d01c-11dd-ba55-001f3aeae673} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{b466380d-1c87-11df-87ef-9dcca56d8dc7} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{b466380d-1c87-11df-87ef-9dcca56d8dc7} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{cc02937c-7dc0-11dd-a614-001f3aeae673} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{cc02937c-7dc0-11dd-a614-001f3aeae673} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{e4e76afb-e5ed-11dd-9c53-001f3aeae673} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{e4e76afb-e5ed-11dd-9c53-001f3aeae673} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{e4e76b06-e5ed-11dd-9c53-001f3aeae673} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{e4e76b06-e5ed-11dd-9c53-001f3aeae673} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{e4e76b0c-e5ed-11dd-9c53-001f3aeae673} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{e4e76b0c-e5ed-11dd-9c53-001f3aeae673} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{f4425a51-1b7b-11df-bb72-e849879bb33e} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{f4425a51-1b7b-11df-bb72-e849879bb33e} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{f4906d20-d583-11dd-8224-001f3aeae673} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{f4906d20-d583-11dd-8224-001f3aeae673} not found.
========== FILES ==========
File/Folder C:Windowssystem32e4302868.exe not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: 1
->Temp folder emptied: 501595 bytes
->Java cache emptied: 0 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 3797 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

Logfile of random’s system information tool 1.07 (written by random/random)
Run by 1 at 2010-06-30 18:27:44
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 12 GB (11%) free of 115 GB
Total RAM: 2045 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:27:54, on 30.06.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Windowssystem32taskeng.exe
C:Program FilesSamsungSamsung Magic DoctorMagicDoctorKbdHk.exe
C:Windowssystem32taskeng.exe
C:Program FilesSamsungEBMEasyBatteryMgr3.exe
C:Program FilesSAMSUNGEasySpeedUpManagerEasySpeedUpManager.exe
C:Program FilesSamsungEasy Display Managerdmhkcore.exe
C:Windowsnotepad.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.EXE
C:WindowsRtHDVCpl.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesCyberLinkPowerDVDPDVDServ.exe
D:SoftQuickTimeqttask.exe
C:Program FilesSony EricssonMobile2Application LauncherApplication Launcher.exe
C:Program FilesWebMoney Agentwmagent.exe
C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe
C:Program FilesDrWebspiderml.exe
C:Program FilesDrWebspidergate.exe
C:Program FilesDrWebspideragent.exe
C:Program FilesWindows Sidebarsidebar.exe
C:Program FilesDAEMON Tools LiteDTLite.exe
C:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticCCC.exe
C:Program FilesWIDCOMMBluetooth SoftwareBtStackServer.exe
C:Windowssystem32SearchFilterHost.exe
C:Program FilesCommon FilesTeleca SharedGeneric.exe
C:Program FilesSony EricssonMobile2Mobile Phone Monitorepmworker.exe
C:Program FilesOperaopera.exe
C:Users1DesktopRSIT.exe
C:Program Filestrend micro1.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=41128
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http:\www.samsungcomputer.com
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
R3 — URLSearchHook: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
O1 — Hosts: ::1 localhost
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: WormRadar.com IESiteBlocker.NavFilter — {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} — C:Program FilesAVGAVG8avgssie.dll (file missing)
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.5.0_06binssv.dll
O2 — BHO: TBSB03223 — {B4806C1A-FE8A-4008-9DA3-8CEDB6E82C10} — C:Program FilesWebMoney Advisorwmadvisor.dll
O3 — Toolbar: WebMoney Advisor — {3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840} — C:Program FilesWebMoney Advisorwmadvisor.dll
O3 — Toolbar: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
O4 — HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide
O4 — HKLM..Run: [StartCCC] C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe
O4 — HKLM..Run: [RtHDVCpl] RtHDVCpl.exe
O4 — HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 — HKLM..Run: [RemoteControl] «C:Program FilesCyberLinkPowerDVDPDVDServ.exe»
O4 — HKLM..Run: [LanguageShortcut] «C:Program FilesCyberLinkPowerDVDLanguageLanguage.exe»
O4 — HKLM..Run: [QuickTime Task] «D:SoftQuickTimeqttask.exe» -atboottime
O4 — HKLM..Run: [Sony Ericsson PC Suite] «C:Program FilesSony EricssonMobile2Application LauncherApplication Launcher.exe» /startoptions
O4 — HKLM..Run: [WinampAgent] «C:Program FilesWinampwinampa.exe»
O4 — HKLM..Run: [wmagent.exe] «C:Program FilesWebMoney Agentwmagent.exe»
O4 — HKLM..Run: [NeroFilterCheck] C:Windowssystem32NeroCheck.exe
O4 — HKLM..Run: [ISUSScheduler] «C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe» -start
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 9.0ReaderReader_sl.exe»
O4 — HKLM..Run: [SpIDerMail] «C:Program FilesDrWebspiderml.exe» -autorun
O4 — HKLM..Run: [SpIDerGate] «C:Program FilesDrWebspidergate.exe» -autorun
O4 — HKLM..Run: [SpIDerAgent] «C:Program FilesDrWebSpIDerAgent.exe»
O4 — HKCU..Run: [Sidebar] C:Program FilesWindows Sidebarsidebar.exe /autoRun
O4 — HKCU..Run: [ISUSPM Startup] «C:Program FilesCommon FilesInstallShieldUpdateServiceISUSPM.exe» -startup
O4 — HKCU..Run: [AlcoholAutomount] «C:Program FilesAlcohol SoftAlcohol 120axcmd.exe» /automount
O4 — HKCU..Run: [AdobeUpdater] «C:Program FilesCommon FilesAdobeUpdater5AdobeUpdater.exe»
O4 — HKCU..Run: [GameShadow] C:Program FilesGameShadowGameShadow.exe /q
O4 — HKCU..Run: [DAEMON Tools Lite] «C:Program FilesDAEMON Tools LiteDTLite.exe» -autorun
O4 — HKUSS-1-5-19..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User ‘NETWORK SERVICE’)
O4 — Startup: Be Admired.lnk = C:Program FilesBe AdmiredBe Admired.exe
O4 — Global Startup: Adobe Gamma Loader.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe
O4 — Global Startup: BTTray.lnk = ?
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: Отправить изображение на &устройство Bluetooth… — C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie_ctx.htm
O8 — Extra context menu item: Отправить страницу на &устройство Bluetooth… — C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.5.0_06binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.5.0_06binssv.dll
O9 — Extra button: WebMoney Advisor — {3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840} — C:Program FilesWebMoney Advisorwmadvisor.dll
O9 — Extra ‘Tools’ menuitem: WebMoney Advisor — {3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840} — C:Program FilesWebMoney Advisorwmadvisor.dll
O9 — Extra button: @btrez.dll,-4015 — {CCA281CA-C863-46ef-9331-5C8D4460577F} — C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm
O9 — Extra ‘Tools’ menuitem: @btrez.dll,-12650 — {CCA281CA-C863-46ef-9331-5C8D4460577F} — C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O17 — HKLMSystemCCSServicesTcpip..{A0515A33-FAA1-4869-A728-4C1F96A9BCB8}: NameServer = 85.113.62.227 85.113.63.252
O22 — SharedTaskScheduler: Component Categories cache daemon — {8C7461EF-2B13-11d2-BE35-3078302C2030} — C:Windowssystem32browseui.dll
O23 — Service: Agere Modem Call Progress Audio (AgereModemAudio) — Agere Systems — C:Windowssystem32agrsmsvc.exe
O23 — Service: Application Driver Auto Removal Service (01) (appdrvrem01) — Protection Technology — C:WindowsSystem32appdrvrem01.exe
O23 — Service: Ati External Event Utility — ATI Technologies Inc. — C:Windowssystem32Ati2evxx.exe
O23 — Service: Autodesk Licensing Service — Autodesk — C:Program FilesCommon FilesAutodesk SharedServiceAdskScSrv.exe
O23 — Service: @dfsrres.dll,-101 (DFSR) — Корпорация Майкрософт — C:Windowssystem32DFSR.exe
O23 — Service: Dr.Web Scanning Engine (DrWebEngine) (DrWebEngine) — Doctor Web, Ltd. — C:Program FilesCommon FilesDoctor WebScanning Enginedwengine.exe
O23 — Service: HASP License Manager (hasplms) — Aladdin Knowledge Systems Ltd. — C:Windowssystem32hasplms.exe
O23 — Service: ICQ Service — Unknown owner — C:Program FilesICQ6ToolbarICQ Service.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 — Service: NMSAccessU — Unknown owner — C:Program FilesBurnAware Freenmsaccessu.exe
O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — C:Program FilesCyberLinkShared FilesRichVideo.exe
O23 — Service: Samsung Update Plus — Unknown owner — C:Program FilesSamsungSamsung Update PlusSLUBackgroundService.exe

—
End of file — 9165 bytes

======Scheduled tasks folder======

C:WindowstasksDr.Web Daily scan.job
C:WindowstasksDr.Web Update.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search — C:Program FilesAVGAVG8avgssie.dll []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.5.0_06binssv.dll [2005-11-10 184423]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{B4806C1A-FE8A-4008-9DA3-8CEDB6E82C10}]
TBSB03223 Class — C:Program FilesWebMoney Advisorwmadvisor.dll [2008-09-05 2409472]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840} — WebMoney Advisor — C:Program FilesWebMoney Advisorwmadvisor.dll [2008-09-05 2409472]
{855F3B16-6D32-4fe6-8A56-BBB695989046} — ICQToolBar — C:Program FilesICQ6ToolbarICQToolBar.dll [2008-06-12 958712]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«Windows Defender»=C:Program FilesWindows DefenderMSASCui.exe [2008-01-19 1008184]
«StartCCC»=C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2006-11-10 90112]
«RtHDVCpl»=C:WindowsRtHDVCpl.exe [2007-06-14 4489216]
«SynTPEnh»=C:Program FilesSynapticsSynTPSynTPEnh.exe [2007-02-07 839680]
«RemoteControl»=C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2007-01-08 68640]
«LanguageShortcut»=C:Program FilesCyberLinkPowerDVDLanguageLanguage.exe [2007-01-08 52256]
«QuickTime Task»=D:SoftQuickTimeqttask.exe [2008-09-22 155648]
«Sony Ericsson PC Suite»=C:Program FilesSony EricssonMobile2Application LauncherApplication Launcher.exe [2007-05-28 528384]
«WinampAgent»=C:Program FilesWinampwinampa.exe []
«wmagent.exe»=C:Program FilesWebMoney Agentwmagent.exe [2009-06-16 209376]
«NeroFilterCheck»=C:Windowssystem32NeroCheck.exe [2001-07-09 155648]
«ISUSScheduler»=C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe [2005-08-11 81920]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2008-06-12 34672]
«SpIDerMail»=C:Program FilesDrWebspiderml.exe [2010-06-03 1541360]
«SpIDerGate»=C:Program FilesDrWebspidergate.exe [2010-03-15 2121968]
«SpIDerAgent»=C:Program FilesDrWebSpIDerAgent.exe [2010-03-15 1314032]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«Sidebar»=C:Program FilesWindows Sidebarsidebar.exe [2009-04-11 1233920]
«ISUSPM Startup»=C:Program FilesCommon FilesInstallShieldUpdateServiceISUSPM.exe [2005-08-11 249856]
«AlcoholAutomount»=C:Program FilesAlcohol SoftAlcohol 120axcmd.exe [2009-04-24 203928]
«AdobeUpdater»=C:Program FilesCommon FilesAdobeUpdater5AdobeUpdater.exe []
«GameShadow»=C:Program FilesGameShadowGameShadow.exe /q []
«DAEMON Tools Lite»=C:Program FilesDAEMON Tools LiteDTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregOrb]
C:Program FilesWinamp RemotebinOrbTray.exe /background []

C:ProgramDataMicrosoftWindowsStart MenuProgramsStartup
Adobe Gamma Loader.lnk — C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe
BTTray.lnk — C:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe

C:Users1AppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
Be Admired.lnk — C:Program FilesBe AdmiredBe Admired.exe

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfPf]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfRd]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfSvc]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfUsbccidDriver]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«NoHotStart»=0
«EnableUIADesktopToggle»=0

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«BindDirectlyToPropertySetStorage»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]

======File associations======

.scr — open — «C:Windowssystem32NOTEPAD.EXE» «%1»
.scr — install —
.scr — config —

======List of files/folders created in the last 1 months======

2010-06-25 09:58:40 —-D—- C:rsit
2010-06-25 09:58:40 —-D—- C:Program Filestrend micro
2010-06-25 03:00:35 —-A—- C:Windowssystem32PresentationHostProxy.dll
2010-06-25 03:00:34 —-A—- C:Windowssystem32PresentationHost.exe
2010-06-25 03:00:34 —-A—- C:Windowssystem32netfxperf.dll
2010-06-25 03:00:34 —-A—- C:Windowssystem32mscoree.dll
2010-06-25 03:00:34 —-A—- C:Windowssystem32dfshim.dll
2010-06-24 12:27:35 —-D—- C:ProgramDataDoctor Web
2010-06-24 12:27:35 —-D—- C:Program FilesDrWeb
2010-06-24 12:27:35 —-D—- C:Program FilesCommon FilesDoctor Web
2010-06-24 11:43:37 —-A—- C:Windowssystem32GameUXLegacyGDFs.dll
2010-06-24 11:43:37 —-A—- C:Windowssystem32Apphlpdm.dll
2010-06-23 23:15:09 —-D—- C:Users1AppDataRoamingSonic Foundry
2010-06-23 15:30:20 —-A—- C:Windowssystem32appdrvrem01.exe
2010-06-23 11:18:34 —-D—- C:ProgramDataDivinity 2
2010-06-23 10:49:16 —-D—- C:Program Filessnowball.ru
2010-06-22 10:34:17 —-D—- C:Users1AppDataRoamingUbisoft
2010-06-22 00:12:12 —-D—- C:Program FilesUbisoft
2010-06-20 12:36:41 —-A—- C:Windowssystem32avgrep.txt
2010-06-20 10:19:30 —-HD—- C:WindowsPIF
2010-06-20 02:18:06 —-D—- C:Program FilesCommon FilesICQ
2010-06-19 10:40:32 —-D—- C:Users1AppDataRoamingYandex
2010-06-19 10:39:20 —-D—- C:Program FilesDAEMON Tools Lite
2010-06-19 10:38:56 —-D—- C:Users1AppDataRoamingDAEMON Tools Lite
2010-06-19 10:38:35 —-D—- C:ProgramDataDAEMON Tools Lite
2010-06-19 10:15:43 —-D—- C:ProgramDataMedia Center Programs
2010-06-18 15:31:07 —-D—- C:Users1AppDataRoamingShareman
2010-06-18 15:30:16 —-D—- C:Program FilesShareman
2010-06-14 20:12:54 —-D—- C:Users1AppDataRoamingSoftland
2010-06-14 20:12:50 —-D—- C:Program FilesSoftland
2010-06-12 01:30:48 —-D—- C:WindowsSun
2010-06-12 01:30:48 —-D—- C:Users1AppDataRoamingSun
2010-06-11 13:03:24 —-A—- C:WindowsPROTOCOL.INI
2010-06-11 13:03:07 —-A—- C:Windowsuninst.exe
2010-06-11 12:45:47 —-A—- C:Windowsmysmeta.INI
2010-06-11 12:24:13 —-D—- C:Program FilesCommon FilesIntuit
2010-06-11 12:19:59 —-A—- C:Windowssystem32asycfilt.dll
2010-06-11 12:19:58 —-A—- C:Windowssystem32atmlib.dll
2010-06-11 12:19:58 —-A—- C:Windowssystem32atmfd.dll
2010-06-11 12:19:52 —-A—- C:Windowssystem32wininet.dll
2010-06-11 12:19:52 —-A—- C:Windowssystem32mshtml.dll
2010-06-11 12:19:51 —-A—- C:Windowssystem32urlmon.dll
2010-06-11 12:19:51 —-A—- C:Windowssystem32ieframe.dll
2010-06-11 12:19:50 —-A—- C:Windowssystem32mshtmled.dll
2010-06-11 12:19:50 —-A—- C:Windowssystem32ieui.dll
2010-06-11 12:19:49 —-A—- C:Windowssystem32iepeers.dll
2010-06-11 12:19:49 —-A—- C:Windowssystem32ieencode.dll
2010-06-11 12:19:49 —-A—- C:Windowssystem32ieapfltr.dll
2010-06-05 12:17:19 —-A—- C:Windowssystem32IDUNINST.DLL
2010-06-05 12:15:48 —-D—- C:Program FilesTile3D_51
2010-06-04 10:31:34 —-D—- C:Users1AppDataRoamingGrym
2010-06-04 10:29:45 —-D—- C:ProgramData2GIS
2010-06-04 10:29:45 —-D—- C:Program Files2gis
2010-06-03 15:10:58 —-D—- C:Users1AppDataRoamingBeAdmired
2010-06-03 15:10:39 —-D—- C:Program FilesCommon FilesAdobe AIR

======List of files/folders modified in the last 1 months======

2010-06-30 18:27:39 —-D—- C:WindowsTemp
2010-06-30 18:22:14 —-D—- C:WindowsPrefetch
2010-06-28 21:44:05 —-D—- C:Windowssystem32catroot2
2010-06-28 13:58:13 —-D—- C:Windowssystem32drivers
2010-06-28 13:31:25 —-SHD—- C:System Volume Information
2010-06-25 09:58:40 —-RD—- C:Program Files
2010-06-25 09:40:04 —-SHD—- C:WindowsInstaller
2010-06-25 09:39:59 —-D—- C:Windows
2010-06-25 04:21:51 —-D—- C:Program FilesWebMoney
2010-06-25 04:19:50 —-D—- C:WindowsSystem32
2010-06-25 03:33:42 —-D—- C:WindowsMicrosoft.NET
2010-06-25 03:33:29 —-RSD—- C:Windowsassembly
2010-06-25 03:18:42 —-D—- C:Windowsehome
2010-06-25 03:18:42 —-D—- C:WindowsAppPatch
2010-06-25 03:02:50 —-D—- C:Windowswinsxs
2010-06-25 03:02:22 —-D—- C:Windowssystem32catroot
2010-06-24 12:28:35 —-D—- C:WindowsTasks
2010-06-24 12:28:35 —-D—- C:Windowssystem32Tasks
2010-06-24 12:27:35 —-HD—- C:ProgramData
2010-06-24 12:27:35 —-D—- C:Program FilesCommon Files
2010-06-24 12:18:22 —-SD—- C:Users1AppDataRoamingMicrosoft
2010-06-24 12:18:21 —-D—- C:ProgramDataavg8
2010-06-24 11:55:55 —-HD—- C:$AVG8.VAULT$
2010-06-24 11:01:57 —-D—- C:Program FilesOpera
2010-06-23 23:15:35 —-A—- C:Windowssystem32PerfStringBackup.INI
2010-06-23 23:15:34 —-D—- C:Windowsinf
2010-06-23 11:26:56 —-D—- C:Program FilesCommon FilesWise Installation Wizard
2010-06-23 11:26:33 —-D—- C:Program FilesAGEIA Technologies
2010-06-23 11:25:03 —-D—- C:WindowsLogs
2010-06-22 00:12:12 —-HD—- C:Program FilesInstallShield Installation Information
2010-06-22 00:05:10 —-D—- C:Program FilesВедьмак
2010-06-20 12:34:14 —-A—- C:Windowsntbtlog.txt
2010-06-20 10:24:27 —-HD—- C:Windowssystem32GroupPolicy
2010-06-19 10:59:57 —-A—- C:WindowsNeroDigital.ini
2010-06-19 10:25:35 —-D—- C:Program FilesCommon Filesmicrosoft shared
2010-06-18 15:20:36 —-D—- C:на д
2010-06-16 08:28:10 —-D—- C:Program FilesAVG
2010-06-14 20:53:42 —-A—- C:Users1AppDataRoamingburnaware.ini
2010-06-12 12:09:42 —-D—- C:Program FilesWindows Mail
2010-06-12 12:09:40 —-D—- C:Windowssystem32wbem
2010-06-03 15:10:55 —-D—- C:ProgramDataAdobe
2010-06-03 15:07:06 —-D—- C:Users1AppDataRoamingAdobe
2010-06-01 20:59:50 —-AD—- C:ProgramDataTEMP

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 appdrv01;Application Driver (01); C:WindowsSystem32Driversappdrv01.sys [2010-06-23 3033200]
R2 aksfridge;aksfridge; ??C:Windowssystem32driversaksfridge.sys [2009-01-16 352256]
R2 atksgt;atksgt; C:Windowssystem32DRIVERSatksgt.sys [2009-10-26 278984]
R2 hardlock;hardlock; ??C:Windowssystem32drivershardlock.sys [2006-11-22 693760]
R2 Haspnt;Haspnt; ??C:Windowssystem32driversHaspnt.sys [2010-05-07 47616]
R2 KMDFMEMIO;SAMSUNG Kernel Driver; C:Windowssystem32DRIVERSkmdfmemio.sys [2006-11-14 13312]
R2 LIRA;LIRA Virtual USB Dongle; C:Windowssystem32DRIVERSLIRA.sys [2010-01-13 51584]
R2 lirsgt;lirsgt; C:Windowssystem32DRIVERSlirsgt.sys [2009-10-26 25416]
R2 vusbbus;Virtual Usb Bus Enumerator; C:Windowssystem32DRIVERSvusbbus.sys [2009-09-14 228352]
R3 AgereSoftModem;Agere Systems Soft Modem; C:Windowssystem32DRIVERSAGRSM.sys [2006-11-29 1161888]
R3 akshasp;Aladdin HASP Key; C:Windowssystem32DRIVERSakshasp.sys [2009-03-13 238208]
R3 aksusb;Aladdin USB Key; C:Windowssystem32DRIVERSaksusb.sys [2009-06-22 16384]
R3 athr;Atheros Extensible Wireless LAN device driver; C:Windowssystem32DRIVERSathr.sys [2008-12-29 952832]
R3 atikmdag;atikmdag; C:Windowssystem32DRIVERSatikmdag.sys [2007-08-07 2601472]
R3 BthEnum;Служба перечислителя Bluetooth; C:Windowssystem32DRIVERSBthEnum.sys [2009-04-11 22528]
R3 BthPan;Устройства Bluetooth (личной сети); C:Windowssystem32DRIVERSbthpan.sys [2008-01-19 92160]
R3 BTHUSB;Драйвер порта USB радиомодуля Bluetooth; C:WindowsSystem32DriversBTHUSB.sys [2009-04-11 29696]
R3 btwaudio;Аудиоустройствоi Bluetooth; C:Windowssystem32driversbtwaudio.sys [2007-03-30 79664]
R3 btwavdt;Bluetooth AVDT; C:Windowssystem32driversbtwavdt.sys [2007-02-28 81200]
R3 btwrchid;btwrchid; C:Windowssystem32DRIVERSbtwrchid.sys [2007-02-28 16432]
R3 CmBatt;Драйвер батареи с ACPI-управлением (Microsoft); C:Windowssystem32DRIVERSCmBatt.sys [2008-01-19 14208]
R3 GrdKey;Guardant LPT Dongle Service; C:Windowssystem32DRIVERSgrdkey.sys [2008-09-26 1137152]
R3 GrdUsb;Guardant USB Dongle Service; C:Windowssystem32DRIVERSgrdusb.sys [2008-09-26 1172352]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:Windowssystem32driversRTKVHDA.sys [2007-06-12 1787816]
R3 RFCOMM;Устройство Bluetooth (протокол RFCOMM TDI); C:Windowssystem32DRIVERSrfcomm.sys [2009-04-11 148992]
R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:Windowssystem32DRIVERSRtnicxp.sys [2007-01-27 50688]
R3 SynTP;Synaptics TouchPad Driver; C:Windowssystem32DRIVERSSynTP.sys [2007-02-10 182456]
R3 WUDFRd;WUDFRd; C:Windowssystem32DRIVERSWUDFRd.sys [2008-01-19 83328]
S2 grandemu;grandemu; C:Windowssystem32driversgrandemu.sys []
S2 haspflt;haspflt; ??C:WindowsSystem32Drivershaspflt.sys [2009-07-07 29024]
S2 Sentinel;Sentinel; C:WindowsSystem32DriversSENTINEL.SYS [1997-06-27 64512]
S3 apxy9aao;apxy9aao; C:Windowssystem32driversapxy9aao.sys []
S3 BTHPORT;Драйвер порта Bluetooth; C:WindowsSystem32DriversBTHport.sys [2009-04-11 507904]
S3 drmkaud;Звуковой дешифратор DRM ядра системы; C:Windowssystem32driversdrmkaud.sys [2008-01-19 5632]
S3 HdAudAddService;Драйвер функции UAA для службы High Definition Audio (Microsoft), версия 1.1; C:Windowssystem32driversHdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Представитель служб потоков Microsoft; C:Windowssystem32driversMSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Посредник синхронизации потоков Microsoft; C:Windowssystem32driversMSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Представитель диспетчера качества потоков Microsoft; C:Windowssystem32driversMSPQM.sys [2008-01-19 5504]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:Windowssystem32driversMSTEE.sys [2008-01-19 6016]
S3 NETw2v32;Intel(R) PRO/Wireless 2915ABG Network Connection Driver for Windows Vista; C:Windowssystem32DRIVERSNETw2v32.sys [2006-11-02 2589184]
S3 R300;R300; C:Windowssystem32DRIVERSatikmdag.sys [2007-08-07 2601472]
S3 s116bus;Sony Ericsson Device 116 driver (WDM); C:Windowssystem32DRIVERSs116bus.sys [2007-04-03 83336]
S3 s116mdfl;Sony Ericsson Device 116 USB WMC Modem Filter; C:Windowssystem32DRIVERSs116mdfl.sys [2007-04-03 15112]
S3 s116mdm;Sony Ericsson Device 116 USB WMC Modem Driver; C:Windowssystem32DRIVERSs116mdm.sys [2007-04-03 108680]
S3 s116mgmt;Sony Ericsson Device 116 USB WMC Device Management Drivers (WDM); C:Windowssystem32DRIVERSs116mgmt.sys [2007-04-03 100488]
S3 s116nd5;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS); C:Windowssystem32DRIVERSs116nd5.sys [2007-04-03 23176]
S3 s116obex;Sony Ericsson Device 116 USB WMC OBEX Interface; C:Windowssystem32DRIVERSs116obex.sys [2007-04-03 98696]
S3 s116unic;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM); C:Windowssystem32DRIVERSs116unic.sys [2007-04-03 99080]
S3 s716bus;Sony Ericsson Device 716 driver (WDM); C:Windowssystem32DRIVERSs716bus.sys [2007-04-04 83208]
S3 s716mdfl;Sony Ericsson Device 716 USB WMC Modem Filter; C:Windowssystem32DRIVERSs716mdfl.sys [2007-04-04 15112]
S3 s716mdm;Sony Ericsson Device 716 USB WMC Modem Driver; C:Windowssystem32DRIVERSs716mdm.sys [2007-04-04 108552]
S3 s716mgmt;Sony Ericsson Device 716 USB WMC Device Management Drivers (WDM); C:Windowssystem32DRIVERSs716mgmt.sys [2007-04-04 100360]
S3 s716nd5;Sony Ericsson Device 716 USB Ethernet Emulation SEMC716 (NDIS); C:Windowssystem32DRIVERSs716nd5.sys [2007-04-04 23176]
S3 s716obex;Sony Ericsson Device 716 USB WMC OBEX Interface; C:Windowssystem32DRIVERSs716obex.sys [2007-04-04 98568]
S3 s716unic;Sony Ericsson Device 716 USB Ethernet Emulation SEMC716 (WDM); C:Windowssystem32DRIVERSs716unic.sys [2007-04-04 98952]
S3 WpdUsb;WpdUsb; C:Windowssystem32DRIVERSwpdusb.sys [2009-10-01 40448]
S4 sdbus;sdbus; C:Windowssystem32DRIVERSsdbus.sys [2006-11-02 82432]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:Windowssystem32driverswmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:Windowssystem32agrsmsvc.exe [2006-10-06 9216]
R2 Ati External Event Utility;Ati External Event Utility; C:Windowssystem32Ati2evxx.exe [2007-08-07 606208]
R2 BthServ;@%SystemRoot%System32bthserv.dll,-101; C:Windowssystem32svchost.exe [2008-01-19 21504]
R2 DrWebEngine;Dr.Web Scanning Engine (DrWebEngine); C:Program FilesCommon FilesDoctor WebScanning Enginedwengine.exe [2010-06-28 1628504]
R2 hasplms;HASP License Manager; C:Windowssystem32hasplms.exe [2009-04-21 2869760]
R2 ICQ Service;ICQ Service; C:Program FilesICQ6ToolbarICQ Service.exe [2008-06-10 222456]
R2 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ); C:Program FilesMicrosoft SQL ServerMSSQL.1MSSQLBinnsqlservr.exe [2006-04-14 28933976]
R2 NMSAccessU;NMSAccessU; C:Program FilesBurnAware Freenmsaccessu.exe [2008-05-03 71096]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:Program FilesCyberLinkShared FilesRichVideo.exe [2007-01-09 171040]
R2 Samsung Update Plus;Samsung Update Plus; C:Program FilesSamsungSamsung Update PlusSLUBackgroundService.exe [2007-06-28 73728]
S2 appdrvrem01;Application Driver Auto Removal Service (01); C:WindowsSystem32appdrvrem01.exe [2010-06-23 316816]
S3 aspnet_state;Служба состояний ASP.NET; C:WindowsMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2009-03-30 31048]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:Program FilesCommon FilesAutodesk SharedServiceAdskScSrv.exe [2008-10-27 85096]
S3 FontCache;@%systemroot%system32FntCache.dll,-100; C:Windowssystem32svchost.exe [2008-01-19 21504]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-04 69632]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 SQLWriter;SQL Server VSS Writer; C:Program FilesMicrosoft SQL Server90Sharedsqlwriter.exe [2006-04-14 87840]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:Program FilesMicrosoft SQL Server90Sharedsqladhlp90.exe [2005-10-13 45272]
S4 SQLBrowser;SQL Server Browser; C:Program FilesMicrosoft SQL Server90Sharedsqlbrowser.exe [2006-04-14 240416]

---

EOF

---

С удалением вирусов с флешки так и не смогла разобраться

[beauty_svetik]

спасибо за ответ! но у меня почему-то не получается воспользоваться Flash_Disinfector. Сначала он писал, что программа установлена не правильно,я нажала, что программа установлена правильно. Потом при двойном клике вобще не реагирует никак компьютер, программа не открывается. удалила и еще раз утсановила Flash_Disinfector. Теперь вообще не выдал сообщение о том, что установлено не правильно, а сразу не реагирует на двойной клик.
У меня Vista,может это она что-то блокирует…

очистку с помощью HijackThis провела. Запущу OTM и вышлю информацию после решения проблемы с Flash_Disinfector, так как не знаю связаны ли все эти пошаговые инструкцие, высланные вами.
Еще раз огромное спасибо за внимание к моей проблеме!

[Автор]

Сообщения