[den-johnsen]

info.txt logfile of random’s system information tool 1.08 2011-01-16 21:49:08

======Uninstall list======

—>MsiExec /X{5DB65884-C963-4454-AABA-4CA3089281FA}
«Автошкола МААШ. Подготовка к теоретическому экзамену в ГИБДД»—>MsiExec.exe /X{E5870766-57C8-40C2-8D04-687C8A333A72}
µTorrent—>»C:Program FilesuTorrentuTorrent.exe» /UNINSTALL
Acer Bio Protection

AAV 6.0.00.15—>»C:Program FilesAcerAcer Bio Protectionuninstall.exe»
Acer Crystal Eye Webcam 3.0.6.3—>C:Program FilesInstallShield Installation Information{A77255C4-AFCB-44A3-BF0F-2091A71FFD9E}setup.exe -runfromtemp -l0x0009 -removeonly
Acer eAudio Management—>»C:Program FilesInstallShield Installation Information{57265292-228A-41FA-9AEC-4620CBCC2739}Setup.exe» -uninstall
Acer eDataSecurity Management—>C:Program FilesAcerEmpowering TechnologyeDataSecurityx86eDSnstHelper.exe -Operation UNINSTALL
Acer Empowering Technology—>»C:Program FilesInstallShield Installation Information{8F1B6239-FEA0-450A-A950-B05276CE177C}setup.exe» -runfromtemp -l0x0019 -removeonly
Acer ePower Management—>»C:Program FilesInstallShield Installation Information{58E5844B-7CE2-413D-83D1-99294BF6C74F}setup.exe» -runfromtemp -l0x0019 -removeonly
Acer eRecovery Management—>»C:Program FilesInstallShield Installation Information{7F811A54-5A09-4579-90E1-C93498E230D9}setup.exe» -runfromtemp -l0x0019 -removeonly
Acer eSettings Management—>»C:Program FilesInstallShield Installation Information{13D85C14-2B85-419F-AC41-C7F21E68B25D}setup.exe» -runfromtemp -l0x0019 -removeonly
Acer GridVista—>C:WindowsGVUni.exe GridV.UNI
Acer Mobility Center Plug-In—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{11316260-6666-467B-AC34-183FCB5D4335}setup.exe» -l0x19 -removeonly
Acer ScreenSaver—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}setup.exe» -l0x9 -removeonly
Acer VCM—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{047F790A-7A2A-4B6A-AD02-38092BA63DAC}setup.exe» -l0x9 -removeonly
Acrobat.com—>msiexec /qb /x {6D8D64BE-F500-55B6-705D-DFD08AFE0624}
Acrobat.com—>MsiExec.exe /I{6D8D64BE-F500-55B6-705D-DFD08AFE0624}
Activation Assistant for the 2007 Microsoft Office suites—>»C:ProgramData{174892B1-CBE7-44F5-86FF-AB555EFD73A3}Microsoft Office Activation Assistant.exe» REMOVE=TRUE MODIFY=FALSE
Adobe AIR—>c:Program FilesCommon FilesAdobe AIRVersions1.0ResourcesAdobe AIR Updater.exe -arp:uninstall
Adobe AIR—>MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Anchor Service CS4—>MsiExec.exe /I{1618734A-3957-4ADD-8199-F973763109A8}
Adobe Bridge CS4—>MsiExec.exe /I{83877DB1-8B77-45BC-AB43-2BAC22E093E0}
Adobe CMaps CS4—>MsiExec.exe /I{94D398EB-D2FD-4FD1-B8C4-592635E8A191}
Adobe Color — Photoshop Specific CS4—>MsiExec.exe /I{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}
Adobe Color EU Recommended Settings CS4—>MsiExec.exe /I{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}
Adobe Color JA Extra Settings CS4—>MsiExec.exe /I{0D6013AB-A0C7-41DC-973C-E93129C9A29F}
Adobe Color NA Extra Settings CS4—>MsiExec.exe /I{098A2A49-7CF3-4F08-A38D-FB879117152A}
Adobe Color Video Profiles CS CS4—>MsiExec.exe /I{63C24A08-70F3-4C8E-B9FB-9F21A903801D}
Adobe CSI CS4—>MsiExec.exe /I{0F723FC1-7606-4867-866C-CE80AD292DAF}
Adobe Default Language CS4—>MsiExec.exe /I{C52E3EC1-048C-45E1-8D53-10B0C6509683}
Adobe Device Central CS4—>MsiExec.exe /I{67F0E67A-8E93-4C2C-B29D-47C48262738A}
Adobe Download Manager—>»C:Windowssystem32rundll32.exe» «C:Program FilesNOSbingetPlus_Helper.dll»,Uninstall /Get1
Adobe Drive CS4—>MsiExec.exe /I{16E16F01-2E2D-4248-A42F-76261C147B6C}
Adobe ExtendScript Toolkit CS4—>MsiExec.exe /I{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}
Adobe Extension Manager CS4—>MsiExec.exe /I{054EFA56-2AC1-48F4-A883-0AB89874B972}
Adobe Flash Player 10 ActiveX—>C:Windowssystem32MacromedFlashuninstall_activeX.exe
Adobe Flash Player 10 Plugin—>C:Windowssystem32MacromedFlashFlashUtil10l_Plugin.exe -maintain plugin
Adobe Fonts All—>MsiExec.exe /I{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}
Adobe Linguistics CS4—>MsiExec.exe /I{931AB7EA-3656-4BB7-864D-022B09E3DD67}
Adobe Media Player—>msiexec /qb /x {39F6E2B4-CFE8-C30A-66E8-489651F0F34C}
Adobe Media Player—>MsiExec.exe /I{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}
Adobe Output Module—>MsiExec.exe /I{BB4E33EC-8181-4685-96F7-8554293DEC6A}
Adobe PDF Library Files CS4—>MsiExec.exe /I{F93C84A6-0DC6-42AF-89FA-776F7C377353}
Adobe Photoshop CS4 Support—>MsiExec.exe /I{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}
Adobe Photoshop CS4—>C:Program FilesCommon FilesAdobeInstallersfaf656ef605427ee2f42989c3ad31b8Setup.exe —uninstall=1
Adobe Photoshop CS4—>MsiExec.exe /I{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}
Adobe Photoshop CS4—>MsiExec.exe /I{E4848436-0345-47E2-B648-8B522FCDA623}
Adobe Reader 9.4.1—>MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A94000000001}
Adobe Search for Help—>MsiExec.exe /I{F0E64E2E-3A60-40D8-A55D-92F6831875DA}
Adobe Service Manager Extension—>MsiExec.exe /I{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}
Adobe Setup—>MsiExec.exe /I{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}
Adobe Shockwave Player 11.5—>»C:Windowssystem32AdobeShockwave 11uninstaller.exe»
Adobe Type Support CS4—>MsiExec.exe /I{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}
Adobe Update Manager CS4—>MsiExec.exe /I{05308C4E-7285-4066-BAE3-6B50DA6ED755}
Adobe WinSoft Linguistics Plugin—>MsiExec.exe /I{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}
Adobe XMP Panels CS4—>MsiExec.exe /I{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}
AdobeColorCommonSetCMYK—>MsiExec.exe /I{68243FF8-83CA-466B-B2B8-9F99DA5479C4}
‘Age of Empires 3’—>C:GamesAOE3-WarChiefsUNWISE.EXE C:GamesAOE3-WarChiefsINSTALL.LOG
Age of Empires III — The WarChiefs—>C:GamesAOE3-W~1UNWISE.EXE C:GamesAOE3-W~1INSTALL.LOG
Age of Empires III—>C:PROGRA~1COMMON~1INSTAL~1Driver11INTEL3~1IDriver.exe /M{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}
Agere Systems HDA Modem—>agrsmdel
Aide PDF to DXF Converter 9.5—>»C:Program FilesAide PDF to DXF Converterunins000.exe»
AkelPad—>hidcon.exe cmd /c «Taskkill /f /t /fi «IMAGENAME eq notepad*» /im *&ping -n 6 127.0.0.1&Del /Q /F C:Windowssystem32notepad.exe.manifest&Del /Q /F C:Windowssystem32notepad.exe&Del /Q /F C:Windowsnotepad.exe&Del /Q /F C:Windowssystem32akelpad.ini&rundll32.exe advpack.dll,DelNodeRunDLL32 C:Windowssystem32AkelFiles&Rename C:Windowssystem32notepadorig.exe notepad.exe&Rename C:Windowssystem32dllcachenotepadorig.exe notepad.exe&Rename C:Windowsnotepadorig.exe notepad.exe&Rename C:Windowshelpnotepadorig.chm notepad.chm&Rename C:Windowshelpnotepadorig.hlp notepad.hlp&Reg Delete HKLMSoftwareMicrosoftWindowsCurrentVersionUninstallAkelpad /f»
AlterGeo Magic Scanner—>MsiExec.exe /I{F142376D-C1CC-4F66-9AF2-BECEDC1B3A15}
Apple Application Support—>MsiExec.exe /I{EE6097DD-05F4-4178-9719-D3170BF098E8}
Apple Mobile Device Support—>MsiExec.exe /I{308B6AEA-DE50-4666-996D-0FA461719D6B}
Apple Software Update—>MsiExec.exe /I{C41300B9-185D-475E-BFEC-39EF732F19B1}
ArcSoft TotalMedia Theatre 3—>»C:Program FilesInstallShield Installation Information{B5F47039-9B19-4AC3-9A4A-E1CA3068E59F}setup.exe» -runfromtemp -l0x0419 -removeonly
ArcSoft TotalMedia Theatre 3—>C:Program FilesInstallShield Installation Information{B5F47039-9B19-4AC3-9A4A-E1CA3068E59F}setup.exe
Ask Toolbar—>MsiExec.exe /X{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver—>»C:Program FilesInstallShield Installation Information{3108C217-BE83-42E4-AE9E-A56A2A92E549}setup.exe» -runfromtemp -l0x0009 -removeonly
AutoCAD 2009 — Русский—>C:Program FilesAutoCAD 2009SetupSetup.exe /P {5783F2D7-7001-0419-0002-0060B0CE6BBA} /M ACAD
Autodesk DWF Viewer—>C:PROGRA~1AutodeskAUTODE~1Setup.exe /remove /q0
AVerMedia A309 (MiniCard, DVB-T) 1.0.0.43—>C:Program FilesAVerMediaAVerMedia A309 (MiniCard, DVB-T)uninst.exe
Backspin Billiards—>»C:Program FilesAcer GameZoneBackspin BilliardsUninstall.exe» «C:Program FilesAcer GameZoneBackspin Billiardsinstall.log»
BDEv.5.0.1.22—>C:WINDOWSISUN0419.EXE -f»C:Program FilesBorlandCommon FilesBdeBde.isu» -cC:Windowssystem32Uninst.dll
Bejeweled 2 Deluxe 1.0—>C:Program FilesPopCap GamesBejeweled 2 DeluxePopUninstall.exe «C:Program FilesPopCap GamesBejeweled 2 DeluxeInstall.log»
Big Kahuna Reef—>»C:Program FilesAcer GameZoneBig Kahuna ReefUninstall.exe» «C:Program FilesAcer GameZoneBig Kahuna Reefinstall.log»
Bonjour—>MsiExec.exe /X{2A981294-F14C-4F0F-9627-D793270922F8}
Bookworm Deluxe—>»C:Program FilesAcer GameZoneBookworm DeluxeUninstall.exe» «C:Program FilesAcer GameZoneBookworm Deluxeinstall.log»
Bricks of Egypt—>»C:Program FilesAcer GameZoneBricks of EgyptUninstall.exe» «C:Program FilesAcer GameZoneBricks of Egyptinstall.log»
Cake Mania—>»C:Program FilesAcer GameZoneCake ManiaUninstall.exe» «C:Program FilesAcer GameZoneCake Maniainstall.log»
Call of Duty(R) 4 — Modern Warfare(TM)—>C:Program FilesInstallShield Installation Information{E48469CC-635E-4FD5-A122-1497C286D217}setup.exe -runfromtemp -l0x0419
Canon MP550 series MP Drivers—>»C:Windowssystem32CanonIJ Uninstaller Information{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP550_seriesDelDrv.exe» /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP550_series
CCleaner (remove only)—>»C:Program FilesCCleaneruninst.exe»
Chicken Invaders 3—>»C:Program FilesAcer GameZoneChicken Invaders 3Uninstall.exe» «C:Program FilesAcer GameZoneChicken Invaders 3install.log»
Chuzzle—>»C:Program FilesAcer GameZoneChuzzleUninstall.exe» «C:Program FilesAcer GameZoneChuzzleinstall.log»
Connect—>MsiExec.exe /I{B29AD377-CC12-490A-A480-1452337C618D}
CyberLink PowerDVD 9—>»C:Program FilesInstallShield Installation Information{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}Setup.exe» /z-uninstall
CyberLink PowerDVD 9—>»C:Program FilesInstallShield Installation Information{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}Setup.exe» /z-uninstall
Data Access Objects (DAO) 3.5—>C:WindowsIsUninst.exe -f»C:Program FilesCommon FilesMicrosoft SharedDAOUninst.isu»
Defraggler (remove only)—>»C:Program FilesDefraggleruninst.exe»
Diner Dash Flo on the Go—>»C:Program FilesAcer GameZoneDiner Dash Flo on the GoUninstall.exe» «C:Program FilesAcer GameZoneDiner Dash Flo on the Goinstall.log»
eSobi v2—>C:Program FilesInstallShield Installation Information{15D967B5-A4BE-42AE-9E84-64CD062B25AA}setup.exe -runfromtemp -l0x0409
EVEREST Ultimate Edition v5.02—>»C:Program FilesLavalysEVEREST Ultimate Editionunins000.exe»
Fallout 3 v1.0—>»D:Program FilesBethesda SoftworksFallout 3unins000.exe»
Flip Words 2—>»C:Program FilesAcer GameZoneFlip Words 2Uninstall.exe» «C:Program FilesAcer GameZoneFlip Words 2install.log»
FLV Player—>»C:WindowsFLV Playeruninstall.exe» «/U:C:Program FilesFLV PlayerUninstalluninstall.xml»
Foxit Reader 3.0 Build 1506—>C:Program FilesFoxit ReaderUninstall.exe
GALILEOS Viewer 1.7—>MsiExec.exe /I{F549949F-8364-49B9-8505-33BBD4E66E8B}
Google Chrome—>»C:Program FilesGoogleChromeApplication8.0.552.237Installersetup.exe» —uninstall —system-level
Google Desktop—>C:Program FilesGoogleGoogle Desktop SearchGoogleDesktopSetup.exe -uninstall
Google Gmail Notifier—>»C:Program FilesGoogleGmail NotifierUninstallGmail.exe»
Google Toolbar for Internet Explorer—>»C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarManager_AC0049E063DE2AEA.exe» /uninstall
Google Toolbar for Internet Explorer—>MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper—>MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Guard.Mail.ru—>»C:Program FilesMail.RuGuardGuardMailRu.exe» /uninstall
HashTab 2.3.0—>C:Windowssystem32Uninstall.exe
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)—>C:Windowssystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=»»
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)—>C:Windowssystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=»»
Huge Pine USB to UART Driver —>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1050Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{F06FCDEC-5AB3-4927-A3E7-36AF98A8E05C}setup.exe» -l0x19 -removeonly
Intel PROSet Wireless—>Intel PROSet Wireless
Intel® Matrix Storage Manager—>C:Program FilesIntelIntel Matrix Storage ManagerUninstallimsmudlg.exe -uninstall
ITECIR—>C:Program FilesInstallShield Installation Information{40580068-9B10-40B5-9548-536CE88AB23C}setup.exe -runfromtemp -l0x0019 -removeonly
iTunes—>MsiExec.exe /I{881F5DE8-9367-4B81-A325-E91BBC6472F9}
Java(TM) 6 Update 22—>MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216021FF}
Jewel Quest Solitaire—>»C:Program FilesAcer GameZoneJewel Quest SolitaireUninstall.exe» «C:Program FilesAcer GameZoneJewel Quest Solitaireinstall.log»
JMicron JMB38X Flash Media Controller—>»C:Program FilesInstallShield Installation Information{26604C7E-A313-4D12-867F-7C6E7820BE4C}setup.exe» delpkg
K-Lite Mega Codec Pack 5.8.3—>»C:Program FilesK-Lite Codec Packunins000.exe»
kuler—>MsiExec.exe /I{098727E1-775A-4450-B573-3F441F1CA243}
Launch Manager—>C:WindowsUNINST32.EXE LManager.UNI
Lizardtech DjVu Control—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{105CFC7C-6992-11D5-BD9D-000102C10FD8}Setup.exe» -l0x9
Mahjong Escape Ancient China—>»C:Program FilesAcer GameZoneMahjong Escape Ancient ChinaUninstall.exe» «C:Program FilesAcer GameZoneMahjong Escape Ancient Chinainstall.log»
Mahjongg Artifacts—>»C:Program FilesAcer GameZoneMahjongg ArtifactsUninstall.exe» «C:Program FilesAcer GameZoneMahjongg Artifactsinstall.log»
Mail.Ru Агент 5.7 (сборка 3796, для всех пользователей)—>C:Program FilesMail.RuAgentmagentsetup.exe -uninstalllm
Mail.Ru Спутник 2.3.0.301—>»C:Program FilesMail.RuSputnikmailrusputnik.exe» uninstall
Media Player Classic — Home Cinema v. 1.3.1249.0—>»C:Program FilesMPC HomeCinemaunins000.exe»
Microsoft .NET Framework 3.5 Language Pack SP1 — rus—>MsiExec.exe /I{2744791F-4E7C-32F5-AB40-AEC6A6C86DBF}
Microsoft .NET Framework 3.5 SP1—>C:WindowsMicrosoft.NETFrameworkv3.5Microsoft .NET Framework 3.5 SP1setup.exe
Microsoft .NET Framework 3.5 SP1—>MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Games for Windows — LIVE Redistributable—>MsiExec.exe /X{1FDA5A37-B22D-43FF-B582-B8964050DC13}
Microsoft Games for Windows — LIVE—>MsiExec.exe /X{86A4C6D9-29EE-4719-AFA1-BA3341862B83}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-0016-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-0018-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001B-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-006E-0419-0000-0000000FF1CE} /uninstall {37317C49-30C4-412C-B0B9-D95090F330D8}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-00A1-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office Excel 2007 Help Обновление (KB963678)—>msiexec /package {90120000-0016-0419-0000-0000000FF1CE} /uninstall {420938DB-BF97-4664-BE29-0C68B4802C00}
Microsoft Office Excel MUI (Russian) 2007—>MsiExec.exe /X{90120000-0016-0419-0000-0000000FF1CE}
Microsoft Office Home and Student 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007—>MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Russian) 2007—>MsiExec.exe /X{90120000-00A1-0419-0000-0000000FF1CE}
Microsoft Office Powerpoint 2007 Help Обновление (KB963669)—>msiexec /package {90120000-0018-0419-0000-0000000FF1CE} /uninstall {BD1C2AC7-63F3-4C75-8B44-DE3D700B3BC8}
Microsoft Office PowerPoint MUI (Russian) 2007—>MsiExec.exe /X{90120000-0018-0419-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007—>MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007—>MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Russian) 2007—>MsiExec.exe /X{90120000-001F-0419-0000-0000000FF1CE}
Microsoft Office Proof (Ukrainian) 2007—>MsiExec.exe /X{90120000-001F-0422-0000-0000000FF1CE}
Microsoft Office Proofing (Russian) 2007—>MsiExec.exe /X{90120000-002C-0419-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0419-0000-0000000FF1CE} /uninstall {57A92C5E-E76A-49CC-9EC2-A7B6CE1255EA}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0422-0000-0000000FF1CE} /uninstall {6F177D09-F21D-4F50-9436-353972D1D232}
Microsoft Office Shared MUI (Russian) 2007—>MsiExec.exe /X{90120000-006E-0419-0000-0000000FF1CE}
Microsoft Office Word 2007 Help Обновление (KB963665)—>msiexec /package {90120000-001B-0419-0000-0000000FF1CE} /uninstall {D3A002FB-0F62-4840-80AD-2D2C63F83449}
Microsoft Office Word MUI (Russian) 2007—>MsiExec.exe /X{90120000-001B-0419-0000-0000000FF1CE}
Microsoft Visual C++ 2005 ATL Update kb973923 — x86 8.0.50727.4053—>MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 ATL Update kb973924 — x86 9.0.30729.4148—>MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable — x86 9.0.30729.17—>MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Works—>MsiExec.exe /I{737E2345-2897-4B75-9C9B-D541F7394D6B}
MSXML 4.0 SP2 (KB954430)—>MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)—>MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MSXML 4.0 SP2 Parser and SDK—>MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
Mystery Case Files — Huntsville—>»C:Program FilesAcer GameZoneMystery Case Files — HuntsvilleUninstall.exe» «C:Program FilesAcer GameZoneMystery Case Files — Huntsvilleinstall.log»
Mystery Solitaire — Secret Island—>»C:Program FilesAcer GameZoneMystery Solitaire — Secret IslandUninstall.exe» «C:Program FilesAcer GameZoneMystery Solitaire — Secret Islandinstall.log»
Need for Speed™ SHIFT—>MsiExec.exe /X{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}
Need for Speed™ Undercover—>MsiExec.exe /X{E6D22FE1-AB5F-42CA-9480-6F70B96DDD88}
Nero Burning ROM 10—>MsiExec.exe /I{FE83F463-7E61-4B18-9FA0-B94B90A0B6B9}
Nero Vision Xtra—>C:Program FilesNeroNero 10Nero Visionuninstall.exe
NTI Backup Now 5—>C:Program FilesInstallShield Installation Information{12EFA1A4-AC3B-443C-8143-237EDE760403}setup.exe -runfromtemp -l0x0419
NTI Media Maker 8—>C:Program FilesInstallShield Installation Information{2413930C-8309-47A6-BC61-5EF27A4222BC}setup.exe -runfromtemp -l0x0419
NVIDIA Drivers—>C:Windowssystem32nvuninst.exe UninstallGUI
NVIDIA PhysX—>MsiExec.exe /X{5DB65884-C963-4454-AABA-4CA3089281FA}
OGA Notifier 2.0.0048.0—>MsiExec.exe /I{B2544A03-10D0-4E5E-BA69-0362FFC20D18}
Opera 11.00—>MsiExec.exe /X{1EE88B84-7BE5-4FB5-8DEA-B81D5409D62E}
Opera Search.ini Editor 1.26—>»C:Program FilesOpera ToolsOpsedunins000.exe»
Orion—>MsiExec.exe /X{5B63A470-9334-44D1-AF61-6CE2DB565AE9}
PDF Settings CS4—>MsiExec.exe /I{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}
PhotoNow!—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{D36DD326-7280-11D8-97C8-000129760CBE}Setup.exe» -uninstall
Photoshop Camera Raw—>MsiExec.exe /I{CC75AB5C-2110-4A7F-AF52-708680D22FE8}
PL-2303 USB-to-Serial—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}Setup.exe» -l0x9 Installed
Plane9 v1.5—>C:Program FilesPlane9uninst.exe
PowerDirector—>»C:Program FilesInstallShield Installation Information{CB099890-1D5F-11D5-9EA9-0050BAE317E1}setup.exe» /z-uninstall
QuickTime—>MsiExec.exe /I{57752979-A1C9-4C02-856B-FBB27AC4E02C}
Radio Bar 2 Toolbar—>C:PROGRA~1RADIO_~1UNWISE.EXE /U C:PROGRA~1RADIO_~1INSTALL.LOG
Realtek High Definition Audio Driver—>RtlUpd.exe -r -m -nrg2709
Replay Media Catcher 3.02—>»C:WindowsReplay Media Catcheruninstall.exe» «/U:C:Program FilesReplay Media CatcherUninstalluninstall.xml»
REWARD InterN@tive—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{F1A029E7-0C8C-4170-8308-D25F54FAB617}setup.exe» -uninst
Security Update for 2007 Microsoft Office System (KB2288621)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5C497F0B-2061-4CC9-A61C-6B45B867354D}
Security Update for 2007 Microsoft Office System (KB2288931)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {CD769337-C8AC-46DB-A7DC-643E50089263}
Security Update for 2007 Microsoft Office System (KB2289158)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {210B16C0-CEBD-4DE9-B474-04A7E8735E16}
Security Update for 2007 Microsoft Office System (KB2344875)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {6FC5C4C1-D7AE-44C3-94B7-6424FC3E752F}
Security Update for 2007 Microsoft Office System (KB2345043)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {536FB502-775F-4494-BACE-C02CC90B7A5B}
Security Update for 2007 Microsoft Office System (KB969559)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB976321)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7F207DCA-3399-40CB-A968-6E5991B1421A}
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)—>C:Windowssystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A8894F19-59C8-38D2-8A75-36C0CCE56A5B} /qb+ REBOOTPROMPT=»»
Security Update for Microsoft Office Excel 2007 (KB2345035)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {B23002DD-34EC-4988-B810-A5E2A0BF04F1}
Security Update for Microsoft Office InfoPath 2007 (KB979441)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
Security Update for Microsoft Office PowerPoint 2007 (KB982158)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {F5B70033-E79C-4569-90BF-BC9B4E4F3F46}
Security Update for Microsoft Office PowerPoint Viewer (KB2413381)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {3DED0A62-44C8-4E00-A785-5212F297A9D9}
Security Update for Microsoft Office system 2007 (972581)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
Security Update for Microsoft Office system 2007 (KB974234)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
Security Update for Microsoft Office Word 2007 (KB2344993)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}
SkypeCap—>»C:Program FilesSkypeCapSkypeCapunins000.exe»
Skype™ 5.0—>MsiExec.exe /X{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}
Solid Converter PDF—>C:Program FilesSolid Converter PDFUninstall.exe
Spelling Dictionaries Support For Adobe Reader 9—>MsiExec.exe /I{AC76BA86-7AD7-5464-3428-900000000004}
Spotify—>»C:Program FilesSpotifyuninstall.exe»
Subtitle Workshop 2.51—>»C:Program FilesURUSoftSubtitle Workshopuninstall.exe»
Suite Shared Configuration CS4—>MsiExec.exe /I{842B4B72-9E8F-4962-B3C1-1C422A5C4434}
Synaptics Pointing Device Driver—>rundll32.exe «C:Program FilesSynapticsSynTPSynISDLL.dll»,standAloneUninstall
The Bat! Professional v4.2.10—>MsiExec.exe /I{5E5F4BCA-8064-4A39-83CB-9C086E571535}
Total Commander 7.04 PowerPack—>»C:Program FilesTotal Commanderuninstall.exe»
TuneUp Utilities 2009—>MsiExec.exe /I{55A29068-F2CE-456C-9148-C869879E2357}
Turbo Pizza—>»C:Program FilesAcer GameZoneTurbo PizzaUninstall.exe» «C:Program FilesAcer GameZoneTurbo Pizzainstall.log»
Uniblue RegistryBooster 2010—>»C:Program FilesUniblueRegistryBoosterunins000.exe»
Uninstall Tool 2.7.2.4937—>»C:Program FilesUninstall Toolunins000.exe»
Unlocker—>C:Program FilesUnlockeruninst.exe
Update for 2007 Microsoft Office System (KB967642)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)—>C:Windowssystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=»»
Update for Microsoft Office OneNote 2007 (KB980729)—>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {329050A9-EF80-40F9-B633-74508F54C1FF}
Validity Sensors software—>MsiExec.exe /X{567E8236-C414-4888-8211-3D61608D57AE}
Veoh Web Player Toolbar—>C:PROGRA~1VEOH_W~1UNWISE.EXE /U C:PROGRA~1VEOH_W~1INSTALL.LOG
Veoh Web Player—>»C:Program FilesVeoh NetworksVeohWebPlayeruninst.exe»
VKSaver—>»C:Program FilesVKSaveruninstall.exe»
Vuescan 8.5.12—>C:Program FilesVuescanUninstall.exe
WIDCOMM Bluetooth Software 6.0.1.5000—>MsiExec.exe /X{03D1988F-469F-4843-8E6E-E5FE9D17889D}
Winamp—>»C:Program FilesWinampUninstWA.exe»
WinDjView 0.5—>»C:Program FilesWinDjViewunins000.exe»
WinDjView 1.0.1—>C:Program FilesWinDjViewuninstall.exe
Windows Live ID Sign-in Assistant—>MsiExec.exe /X{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}
Windows Media Player Firefox Plugin—>MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
World of Warcraft—>C:Program FilesCommon FilesBlizzard EntertainmentWorld of WarcraftUninstall.exe
Zuma Deluxe—>»C:Program FilesAcer GameZoneZuma DeluxeUninstall.exe» «C:Program FilesAcer GameZoneZuma Deluxeinstall.log»
Архиватор WinRAR—>C:Program FilesWinRARuninstall.exe
Владимир Высоцкий. 70-е годы—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime90Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{C19BE636-141C-492C-970D-B5A037722494}setup.exe» -l0x19
Длинные нарды 2.0—>»C:Program FilesДлинные нарды 2.0Uninstal.exe»
Конфигуратор для ЮНИТРОНИК—>C:WindowsUnGins.exe «C:Program FilesUNITRONICUTCFGinstall.log»
Соло на Клавиатуре 9—>C:Program FilesSolo9RusEngNumUninstall.exe
Языковой пакет Microsoft .NET Framework 3.5 SP1 — RUS—>C:WindowsMicrosoft.NETFrameworkv3.5Microsoft .NET Framework 3.5 Language Pack SP1 — russetup.exe
Яндекс.Бар 5.0 для Internet Explorer—>MsiExec.exe /X{B1D8E65E-B8A2-48E4-90CF-34151C37EB45}

======Security center information======

AS: Windows Defender

======System event log======

Computer Name: Ден-ПК
Event Code: 7036
Message: Служба «Телефония» перешла в состояние Работает.
Record Number: 128117
Source Name: Service Control Manager
Time Written: 20100703213303.000000-000
Event Type: Сведения
User:

Computer Name: Ден-ПК
Event Code: 7036
Message: Служба «Сетевые подключения» перешла в состояние Работает.
Record Number: 128116
Source Name: Service Control Manager
Time Written: 20100703213303.000000-000
Event Type: Сведения
User:

Computer Name: Ден-ПК
Event Code: 7036
Message: Служба «Хост поставщика функции обнаружения» перешла в состояние Работает.
Record Number: 128115
Source Name: Service Control Manager
Time Written: 20100703213302.000000-000
Event Type: Сведения
User:

Computer Name: Ден-ПК
Event Code: 7036
Message: Служба «Служба SSTP» перешла в состояние Работает.
Record Number: 128114
Source Name: Service Control Manager
Time Written: 20100703213302.000000-000
Event Type: Сведения
User:

Computer Name: Ден-ПК
Event Code: 7036
Message: Служба «Фоновая интеллектуальная служба передачи (BITS)» перешла в состояние Работает.
Record Number: 128113
Source Name: Service Control Manager
Time Written: 20100703213302.000000-000
Event Type: Сведения
User:

=====Application event log=====

Computer Name: Ден-ПК
Event Code: 1
Message: Клиент служб сертификации запущен.
Record Number: 5755
Source Name: Microsoft-Windows-CertificateServicesClient
Time Written: 20090922041928.846016-000
Event Type: Сведения
User: NT AUTHORITYSYSTEM

Computer Name: Ден-ПК
Event Code: 0
Message:
Record Number: 5754
Source Name: gupdate1ca227fe794cc80
Time Written: 20090922041908.000000-000
Event Type: Сведения
User:

Computer Name: Ден-ПК
Event Code: 1003
Message: Служба Windows Search запущена.

Record Number: 5753
Source Name: Microsoft-Windows-Search
Time Written: 20090922041842.000000-000
Event Type: Сведения
User:

Computer Name: Ден-ПК
Event Code: 10
Message: Event filter with query «SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA «Win32_Processor» AND TargetInstance.LoadPercentage > 99″ could not be reactivated in namespace «//./root/CIMV2» because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Record Number: 5752
Source Name: Microsoft-Windows-WMI
Time Written: 20090922041839.000000-000
Event Type: Ошибка
User:

Computer Name: Ден-ПК
Event Code: 7500
Message: RAID-контроллер Intel: Неизвестный контроллер
Число портов Serial ATA: 4

Версия ПЗУ RAID Option: Неизвестный
Версия драйвера: 8.5.0.1032
Версия подключаемого модуля RAID: 8.5.0.1032
Версия файла языкового ресурса подключаемого модуля RAID: Файл не найден
Версия мастера создания тома: 8.5.0.1032
Версия файла языкового ресурса мастера создания тома: Файл не найден
Версия мастера создания тома из существующего диска: 8.5.0.1032
Версия файла языкового ресурса мастера создания тома из существующего жесткого диска: Файл не найден
Версия мастера изменения тома: 8.5.0.1032
Версия файла языкового ресурса мастера изменения тома: Файл не найден
Версия мастера удаления тома: 8.5.0.1032
Версия файла языкового ресурса мастера удаления тома: Файл не найден
Библиотечная версия ISDI: 8.5.0.1032
Версия программы оповещения пользователей монитора событий: 8.5.0.1032
Версия файла языкового ресурса программы оповещения пользователей монитора событий: Файл не найден
Версия программы Монитор событий: 8.5.0.1032

Жесткий диск 0
Использование: Неизвестное использование жесткого диска
Состояние: Нормальное
Порт устройства: 33492296
Расположение порта устройства: Внутренний
Текущий режим передачи последовательного ATA: Поколение 2
Модель: ST9320421AS
Серийный номер: 5TJ06LG2
Микропрограмма: SD13
Выполнение команды поддержки запроса: Да
Системный жесткий диск: Да
Размер: 298 Гб
Размер физического сектора (байты): 512
Размер логического сектора (байты): 512

Жесткий диск 1
Использование: Неизвестное использование жесткого диска
Состояние: Нормальное
Порт устройства: 33492296
Расположение порта устройства: Внутренний
Текущий режим передачи последовательного ATA: Поколение 2
Модель: ST9320421AS
Серийный номер: 5TJ06RP0
Микропрограмма: SD13
Выполнение команды поддержки запроса: Да
Системный жесткий диск: Нет
Размер: 298 Гб
Размер физического сектора (байты): 512
Размер логического сектора (байты): 512

Неиспользуемый порт 0:
Порт устройства: 33491344
Расположение порта устройства: Внешний

Устройство CD/DVD 0
Порт устройства: 33521624
Расположение порта устройства: Внутренний
Текущий режим передачи последовательного ATA: Поколение 1
Модель: HL-DT-ST BDDVDRW CT10N
Серийный номер: K0088LC0421
Микропрограмма: WA02

Record Number: 5751
Source Name: IAANTmon
Time Written: 20090922041838.000000-000
Event Type: Сведения
User:

=====Security event log=====

Computer Name: Ден-ПК
Event Code: 4907
Message: Изменились параметры аудита для объекта.

Предмет:
Идентификатор безопасности: S-1-5-18
Имя учетной записи: ДЕН-ПК$
Домен учетной записи: MONTAG LUKS
Идентификатор входа: 0x3e7

Объект:
Сервер объекта: Security
Тип объекта: File
Имя объекта: C:WindowsFontsupclb.ttf
Идентификатор дескриптора: 0x14

Сведения о процессе:
Идентификатор процесса: 0x1714
Имя процесса: C:Windowswinsxsx86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_0b4ada54c46c45b0poqexec.exe

Параметры аудита:
Исходный дескриптор безопасности: S:AI
Новый дескриптор безопасности:
Record Number: 27274
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100427222211.306937-000
Event Type: Аудит выполнен успешно
User:

Computer Name: Ден-ПК
Event Code: 4907
Message: Изменились параметры аудита для объекта.

Предмет:
Идентификатор безопасности: S-1-5-18
Имя учетной записи: ДЕН-ПК$
Домен учетной записи: MONTAG LUKS
Идентификатор входа: 0x3e7

Объект:
Сервер объекта: Security
Тип объекта: File
Имя объекта: C:WindowsFontsconsolab.ttf
Идентификатор дескриптора: 0x14

Сведения о процессе:
Идентификатор процесса: 0x1714
Имя процесса: C:Windowswinsxsx86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_0b4ada54c46c45b0poqexec.exe

Параметры аудита:
Исходный дескриптор безопасности: S:AI
Новый дескриптор безопасности:
Record Number: 27273
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100427222211.244537-000
Event Type: Аудит выполнен успешно
User:

Computer Name: Ден-ПК
Event Code: 4907
Message: Изменились параметры аудита для объекта.

Предмет:
Идентификатор безопасности: S-1-5-18
Имя учетной записи: ДЕН-ПК$
Домен учетной записи: MONTAG LUKS
Идентификатор входа: 0x3e7

Объект:
Сервер объекта: Security
Тип объекта: File
Имя объекта: C:WindowsFontsverdanab.ttf
Идентификатор дескриптора: 0x14

Сведения о процессе:
Идентификатор процесса: 0x1714
Имя процесса: C:Windowswinsxsx86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_0b4ada54c46c45b0poqexec.exe

Параметры аудита:
Исходный дескриптор безопасности: S:AI
Новый дескриптор безопасности:
Record Number: 27272
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100427222211.182137-000
Event Type: Аудит выполнен успешно
User:

Computer Name: Ден-ПК
Event Code: 4907
Message: Изменились параметры аудита для объекта.

Предмет:
Идентификатор безопасности: S-1-5-18
Имя учетной записи: ДЕН-ПК$
Домен учетной записи: MONTAG LUKS
Идентификатор входа: 0x3e7

Объект:
Сервер объекта: Security
Тип объекта: File
Имя объекта: C:WindowsFontscordiaui.ttf
Идентификатор дескриптора: 0x14

Сведения о процессе:
Идентификатор процесса: 0x1714
Имя процесса: C:Windowswinsxsx86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_0b4ada54c46c45b0poqexec.exe

Параметры аудита:
Исходный дескриптор безопасности: S:AI
Новый дескриптор безопасности:
Record Number: 27271
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100427222211.057337-000
Event Type: Аудит выполнен успешно
User:

Computer Name: Ден-ПК
Event Code: 4907
Message: Изменились параметры аудита для объекта.

Предмет:
Идентификатор безопасности: S-1-5-18
Имя учетной записи: ДЕН-ПК$
Домен учетной записи: MONTAG LUKS
Идентификатор входа: 0x3e7

Объект:
Сервер объекта: Security
Тип объекта: File
Имя объекта: C:WindowsFontscorbeli.ttf
Идентификатор дескриптора: 0x14

Сведения о процессе:
Идентификатор процесса: 0x1714
Имя процесса: C:Windowswinsxsx86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_0b4ada54c46c45b0poqexec.exe

Параметры аудита:
Исходный дескриптор безопасности: S:AI
Новый дескриптор безопасности:
Record Number: 27270
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100427222211.026137-000
Event Type: Аудит выполнен успешно
User:

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«Path»=%CommonProgramFiles%Microsoft SharedWindows Live;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;C:Program FilesIntelWiFibin;C:Program FilesAcerEmpowering TechnologyeDataSecurity;C:Program FilesAcerEmpowering TechnologyeDataSecurityx86;C:Program FilesAcerEmpowering TechnologyeDataSecurityx64;C:Program FilesQuickTimeQTSystem
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
«PROCESSOR_ARCHITECTURE»=x86
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP
«USERNAME»=SYSTEM
«windir»=%SystemRoot%
«PROCESSOR_LEVEL»=6
«PROCESSOR_IDENTIFIER»=x86 Family 6 Model 23 Stepping 6, GenuineIntel
«PROCESSOR_REVISION»=1706
«NUMBER_OF_PROCESSORS»=2
«TRACE_FORMAT_SEARCH_PATH»=\NTREL202.ntdev.corp.microsoft.com4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0TraceFormat
«DFSTRACINGON»=FALSE
«Pathtem»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;C:Program FilesIntelWiFibin;C:Program FilesAcerEmpowering TechnologyeDataSecurity;C:Program FilesAcerEmpowering TechnologyeDataSecurityx86;C:Program FilesAcerEmpowering TechnologyeDataSecurityx64
«NTIPath»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;C:Program FilesIntelWiFibin;C:Program FilesAcerEmpowering TechnologyeDataSecurity;C:Program FilesAcerEmpowering TechnologyeDataSecurityx86;C:Program FilesAcerEmpowering TechnologyeDataSecurityx64;C:Program FilesNewTech InfosystemsNTI Backup Now 5;
«asl.log»=Destination=file
«CLASSPATH»=.;C:Program FilesJavajre6libextQTJava.zip
«QTJAVA»=C:Program FilesJavajre6libextQTJava.zip

---

EOF

---

[den-johnsen]

Logfile of random’s system information tool 1.08 (written by random/random)
Run by Ден at 2011-01-16 21:48:41
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 52 GB (35%) free of 148 GB
Total RAM: 3068 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:48:59, on 16.01.2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18999)
Boot mode: Normal

Running processes:
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Windowssystem32taskeng.exe
C:Program FilesWindows DefenderMSASCui.exe
C:WindowsRtHDVCpl.exe
C:Program FilesCommon FilesJavaJava Updatejusched.exe
C:Program FilesGoogleGmail Notifiergnotify.exe
C:Windowsehomeehtray.exe
C:Program FilesSkypePhoneSkype.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:Windowsehomeehmsas.exe
C:UsersA19C~1AppDataLocalTempRtkBtMnt.exe
C:Program FilesSkypePlugin ManagerskypePM.exe
C:Program FilesOperaopera.exe
C:UsersДенDesktopRSIT.exe
C:Program Filestrend microДен.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.smaxi.net
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2653012
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://ru.intl.acer.yahoo.com
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0419&s=2&o=vp32&d=0809&m=aspire_8930
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
R3 — URLSearchHook: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O1 — Hosts: ::1 localhost
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: Conduit Engine — {30F9B915-B755-4826-820B-08FBA6BD249D} — C:Program FilesConduitEngineConduitEngine.dll
O2 — BHO: Helper_bho — {71E59DF7-D7FC-4ED6-BC1D-D13BE02FE6C5} — (no file)
O2 — BHO: ShowBarObj Class — {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} — C:Program FilesAcerEmpowering TechnologyeDataSecurityx86ActiveToolBand.dll
O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O2 — BHO: Windows Live ID Sign-in Helper — {9030D464-4C02-4ABF-8ECC-5164760863C6} — C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 — BHO: Radio Bar 2 Toolbar — {9bb815eb-3f9f-4e11-9150-cb70e29b40fc} — C:Program FilesRadio_Bar_2tbRad0.dll
O2 — BHO: AlterGeo Magic Scanner — {9BFBA68E-E21B-458E-AE12-FE85E903D2C1} — C:Program FilesAlterGeoAlterGeo Magic Scanner2.8.8.615AlterGeo.BrowserPlugin.dll
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.6.5805.1910swg.dll
O2 — BHO: Veoh Web Player Toolbar — {cd90bf73-20f6-44ef-993d-bb920303bd2e} — C:Program FilesVeoh_Web_PlayertbVeoh.dll
O2 — BHO: Ask Toolbar BHO — {D4027C7F-154A-4066-A1AD-4243D8127440} — C:Program FilesAsk.comGenericAskToolbar.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O3 — Toolbar: Acer eDataSecurity Management — {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} — C:Program FilesAcerEmpowering TechnologyeDataSecurityx86eDStoolbar.dll
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O3 — Toolbar: Radio Bar 2 Toolbar — {9bb815eb-3f9f-4e11-9150-cb70e29b40fc} — C:Program FilesRadio_Bar_2tbRad0.dll
O3 — Toolbar: Google Toolbar — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O3 — Toolbar: (no name) — {D4027C7F-154A-4066-A1AD-4243D8127440} — C:Program FilesAsk.comGenericAskToolbar.dll
O3 — Toolbar: Veoh Web Player Toolbar — {cd90bf73-20f6-44ef-993d-bb920303bd2e} — C:Program FilesVeoh_Web_PlayertbVeoh.dll
O3 — Toolbar: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O4 — HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide
O4 — HKLM..Run: [RtHDVCpl] RtHDVCpl.exe
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:Windowssystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [egui] «C:Program FilesESETESET NOD32 Antivirusegui.exe» /hide /waitservice
O4 — HKLM..Run: [Skytel] Skytel.exe
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 9.0ReaderReader_sl.exe»
O4 — HKLM..Run: [Adobe ARM] «C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe»
O4 — HKLM..Run: [SunJavaUpdateSched] «C:Program FilesCommon FilesJavaJava Updatejusched.exe»
O4 — HKLM..Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:Program FilesGoogleGmail Notifiergnotify.exe
O4 — HKLM..Run: [VKSaverUpdater] C:Program FilesVKSaverVKSaverUpdater.exe
O4 — HKLM..Run: [QuickTime Task] «C:Program FilesQuickTimeQTTask.exe» -atboottime
O4 — HKCU..Run: [ehTray.exe] C:WindowsehomeehTray.exe
O4 — HKCU..Run: [Skype] «C:Program FilesSkypePhoneSkype.exe» /nosplash /minimized
O4 — HKCU..Run: [swg] «C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe»
O4 — HKUSS-1-5-19..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User ‘NETWORK SERVICE’)
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O8 — Extra context menu item: Google ВикиКомментарии… — res://C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
O8 — Extra context menu item: Отправить изображение на &устройство Bluetooth… — C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie_ctx.htm
O8 — Extra context menu item: Отправить страницу на &устройство Bluetooth… — C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm
O9 — Extra button: Quick-Launching Area — {10954C80-4F0F-11d3-B17C-00C0DFE39736} — C:Program FilesAcerAcer Bio ProtectionPwdBank.exe
O9 — Extra ‘Tools’ menuitem: Quick-Launching Area — {10954C80-4F0F-11d3-B17C-00C0DFE39736} — C:Program FilesAcerAcer Bio ProtectionPwdBank.exe
O9 — Extra button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 — Extra button: @btrez.dll,-4015 — {CCA281CA-C863-46ef-9331-5C8D4460577F} — C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm
O9 — Extra ‘Tools’ menuitem: @btrez.dll,-12650 — {CCA281CA-C863-46ef-9331-5C8D4460577F} — C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm
O16 — DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) — http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O18 — Protocol: soloresinternetrusengnum — {1B7043A7-84E1-443A-804F-20A75728892C} — C:PROGRA~1SOLO9R~1SoloRes.dll
O20 — AppInit_DLLs: C:PROGRA~1GoogleGOOGLE~1GOEC62~1.DLL C:Windowssystem32vksaver.dll
O20 — Winlogon Notify: AWinNotifyVitaKey MC3000 — C:Program FilesAcerAcer Bio ProtectionWinNotify.dll
O22 — SharedTaskScheduler: Component Categories cache daemon — {8C7461EF-2B13-11d2-BE35-3078302C2030} — C:Windowssystem32browseui.dll
O23 — Service: Agere Modem Call Progress Audio (AgereModemAudio) — Agere Systems — C:Windowssystem32agrsmsvc.exe
O23 — Service: Application Driver Auto Removal Service (01) (appdrvrem01) — Protection Technology — C:WindowsSystem32appdrvrem01.exe
O23 — Service: Apple Mobile Device — Apple Inc. — C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
O23 — Service: Autodesk Licensing Service — Autodesk — C:Program FilesCommon FilesAutodesk SharedServiceAdskScSrv.exe
O23 — Service: Служба Bonjour (Bonjour Service) — Apple Inc. — C:Program FilesBonjourmDNSResponder.exe
O23 — Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) — NewTech Infosystems, Inc. — C:Program FilesNewTech InfosystemsNTI Backup Now 5ClientAgentsvc.exe
O23 — Service: @dfsrres.dll,-101 (DFSR) — Корпорация Майкрософт — C:Windowssystem32DFSR.exe
O23 — Service: eDataSecurity Service — Egis Incorporated — C:Program FilesAcerEmpowering TechnologyeDataSecurityx86eDSService.exe
O23 — Service: ESET HTTP Server (EhttpSrv) — ESET — C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe
O23 — Service: ESET Service (ekrn) — ESET — C:Program FilesESETESET NOD32 Antivirusekrn.exe
O23 — Service: Empowering Technology Service (ETService) — Unknown owner — C:Program FilesAcerEmpowering TechnologyServiceETService.exe
O23 — Service: Intel® PROSet/Wireless Event Log (EvtEng) — Intel(R) Corporation — C:Program FilesIntelWiFibinEvtEng.exe
O23 — Service: FLEXnet Licensing Service — Acresso Software Inc. — C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 — Service: Диспетчер Google Desktop 5.7.808.7150 (GoogleDesktopManager-080708-050100) — Google — C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe
O23 — Service: Guard.Mail.ru — Unknown owner — C:Program FilesMail.RuGuardGuardMailRu.exe
O23 — Service: Служба Google Update (gupdate1ca227fe794cc80) (gupdate1ca227fe794cc80) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) — Intel Corporation — C:Program FilesIntelIntel Matrix Storage ManagerIAANTMon.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 — Service: iGroupTec Service (IGBASVC) — Unknown owner — C:Program FilesAcerAcer Bio ProtectionBASVC.exe
O23 — Service: Сервис iPod (iPod Service) — Apple Inc. — C:Program FilesiPodbiniPodService.exe
O23 — Service: LightScribeService Direct Disc Labeling Service (LightScribeService) — Hewlett-Packard Company — C:Program FilesCommon FilesLightScribeLSSrvc.exe
O23 — Service: MobilityService — Unknown owner — C:AcerMobility CenterMobilityService.exe
O23 — Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) — NewTech InfoSystems, Inc. — C:Program FilesNewTech InfosystemsNTI Backup Now 5BackupSvc.exe
O23 — Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) — Unknown owner — C:Program FilesNewTech InfosystemsNTI Backup Now 5SchedulerSvc.exe
O23 — Service: NVIDIA Display Driver Service (nvsvc) — NVIDIA Corporation — C:Windowssystem32nvvsvc.exe
O23 — Service: PnkBstrA — Unknown owner — C:Windowssystem32PnkBstrA.exe
O23 — Service: Intel® PROSet/Wireless Registry Service (RegSrvc) — Intel(R) Corporation — C:Program FilesCommon FilesIntelWirelessCommonRegSrvc.exe
O23 — Service: Raw Socket Service (RS_Service) — Acer Incorporated — C:Program FilesAcerAcer VCMRS_Service.exe
O23 — Service: @%SystemRoot%System32TuneUpDefragService.exe,-1 (TuneUp.Defrag) — TuneUp Software — C:WindowsSystem32TuneUpDefragService.exe
O23 — Service: @%SystemRoot%System32TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) — TuneUp Software — C:WindowsSystem32TUProgSt.exe
O23 — Service: Securom User Access for Windows 2000 and Windows XP a technology by Sony DADC (UserAccess) — Unknown owner — C:Program FilesCommon FilesYDPUserAccessManageruseraccess.exe
O23 — Service: Validity Fingerprint Service (vfsFPService) — Validity Sensors, Inc. — C:Windowssystem32vfsFPService.exe

—
End of file — 13138 bytes

======Scheduled tasks folder======

C:Windowstasks1-Click Maintenance.job
C:WindowstasksGoogleUpdateTaskMachineCore.job
C:WindowstasksGoogleUpdateTaskMachineUA.job
C:WindowstasksNorton Security Scan for Ден.job
C:WindowstasksUser_Feed_Synchronization-{022E686F-72DB-4EF1-91B3-E03678F5B3CF}.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine — C:Program FilesConduitEngineConduitEngine.dll [2010-10-18 3908192]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{71E59DF7-D7FC-4ED6-BC1D-D13BE02FE6C5}]
Helper_bho Class

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}]
ShowBarObj Class — C:Program FilesAcerEmpowering TechnologyeDataSecurityx86ActiveToolBand.dll [2008-07-29 312880]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2010-12-31 1243320]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper — C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9bb815eb-3f9f-4e11-9150-cb70e29b40fc}]
Radio Bar 2 Toolbar — C:Program FilesRadio_Bar_2tbRad0.dll [2010-10-18 3908192]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9BFBA68E-E21B-458E-AE12-FE85E903D2C1}]
AlterGeoBHO Class — C:Program FilesAlterGeoAlterGeo Magic Scanner2.8.8.615AlterGeo.BrowserPlugin.dll [2010-08-31 257384]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-10-26 297648]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier5.6.5805.1910swg.dll [2010-10-26 843832]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{cd90bf73-20f6-44ef-993d-bb920303bd2e}]
Veoh Web Player Toolbar — C:Program FilesVeoh_Web_PlayertbVeoh.dll [2010-06-13 2734688]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{D4027C7F-154A-4066-A1AD-4243D8127440}]
C:Program FilesAsk.comGenericAskToolbar.dll [2010-09-28 1400712]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2010-09-15 41760]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} — Acer eDataSecurity Management — C:Program FilesAcerEmpowering TechnologyeDataSecurityx86eDStoolbar.dll [2008-07-29 142896]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2010-06-01 10336584]
{9bb815eb-3f9f-4e11-9150-cb70e29b40fc} — Radio Bar 2 Toolbar — C:Program FilesRadio_Bar_2tbRad0.dll [2010-10-18 3908192]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-10-26 297648]
{D4027C7F-154A-4066-A1AD-4243D8127440} — C:Program FilesAsk.comGenericAskToolbar.dll [2010-09-28 1400712]
{cd90bf73-20f6-44ef-993d-bb920303bd2e} — Veoh Web Player Toolbar — C:Program FilesVeoh_Web_PlayertbVeoh.dll [2010-06-13 2734688]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2010-12-31 1243320]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«Windows Defender»=C:Program FilesWindows DefenderMSASCui.exe [2008-01-21 1008184]
«RtHDVCpl»=C:WindowsRtHDVCpl.exe [2008-05-07 6139904]
«NvCplDaemon»=C:Windowssystem32NvCpl.dll [2008-08-01 13548064]
«egui»=C:Program FilesESETESET NOD32 Antivirusegui.exe [2009-03-19 2029640]
«Skytel»=C:WindowsSkytel.exe [2007-11-20 1826816]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2010-09-23 35760]
«Adobe ARM»=C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe [2010-09-20 932288]
«SunJavaUpdateSched»=C:Program FilesCommon FilesJavaJava Updatejusched.exe [2010-05-14 248552]
«{0228e555-4f9c-4e35-a3ec-b109a192b4c2}»=C:Program FilesGoogleGmail Notifiergnotify.exe [2005-07-15 479232]
«VKSaverUpdater»=C:Program FilesVKSaverVKSaverUpdater.exe [2010-03-06 56832]
«QuickTime Task»=C:Program FilesQuickTimeQTTask.exe [2010-11-29 421888]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«ehTray.exe»=C:WindowsehomeehTray.exe [2008-01-21 125952]
«Skype»=C:Program FilesSkypePhoneSkype.exe [2010-10-11 14940040]
«swg»=C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2009-08-21 68856]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAdobe Reader Speed Launcher]
C:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2010-09-23 35760]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAdobeCS4ServiceManager]
C:Program FilesCommon FilesAdobeCS4ServiceManagerCS4ServiceManager.exe [2008-08-14 611712]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAdobeUpdater]
C:Program FilesCommon FilesAdobeUpdater5AdobeUpdater.exe []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAdVantage]
C:UsersДенAppDataRoamingadvantageAdVantage.exe []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregBkupTray]
C:Program FilesNewTech InfosystemsNTI Backup Now 5BkupTray.exe [2008-04-25 28672]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregDAEMON Tools Lite]
C:Program FilesDAEMON Tools Litedaemon.exe -autorun []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregeAudio]
C:Program FilesAcerEmpowering TechnologyeAudioeAudio.exe [2008-05-30 544768]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregGoogle Desktop Search]
C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe [2009-08-21 24064]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregGuard.Mail.ru.gui]
C:Program FilesMail.RuGuardGuardMailRu.exe [2010-12-31 1041088]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregIAAnotif]
C:Program FilesIntelIntel Matrix Storage Manageriaanotif.exe [2008-07-20 182808]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregISTray]
C:Program FilesSpyware DoctorpctsTray.exe []

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregiTunesHelper]
C:Program FilesiTunesiTunesHelper.exe [2010-12-13 421160]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregMAgent]
C:Program FilesMail.RuAgentmagent.exe [2010-12-31 12319424]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregPDVD9LanguageShortcut]
C:Program FilesCyberLinkPowerDVD9LanguageLanguage.exe [2008-10-13 50472]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregRemoteControl9]
C:Program FilesCyberLinkPowerDVD9PDVD9Serv.exe [2009-02-16 87336]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSkype]
[]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregswg]
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2009-08-21 68856]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSynTPEnh]
C:Program FilesSynapticsSynTPSynTPEnh.exe [2008-04-04 1037608]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregVeohPlugin]
C:Program FilesVeoh NetworksVeohWebPlayerveohwebplayer.exe [2010-07-06 2634048]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregWMPNSCFG]
C:Program FilesWindows Media PlayerWMPNSCFG.exe [2008-01-21 202240]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregZPdtWzdVitaKey MC3000]
C:Program FilesAcerAcer Bio ProtectionPdtWzd.exe [2009-08-21 3719680]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^BTTray.lnk]
C:PROGRA~1WIDCOMMBLUETO~1BTTray.exe [2007-04-24 723760]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan.lnk]
C:PROGRA~1MCAFEE~110BCA1~1.150SSSCHE~1.EXE []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLs»=»C:PROGRA~1GoogleGOOGLE~1GOEC62~1.DLL C:Windowssystem32vksaver.dll»

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAWinNotifyVitaKey MC3000]
C:Program FilesAcerAcer Bio ProtectionWinNotify.dll [2009-08-21 3162624]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa]
«notification packages»=scecli
C:Program FilesAcerAcer Bio ProtectionPwdFilter

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfPf]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfRd]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfSvc]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWudfUsbccidDriver]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«EnableUIADesktopToggle»=0

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«BindDirectlyToPropertySetStorage»=0

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«C:Program FilesAcerEmpowering TechnologyeDataSecurityx86eDSfsu.exe»=»C:Program FilesAcerEmpowering TechnologyeDataSecurityx86eDSfsu.exe:*:Enabled:eDSfsu»
«C:Program FilesAcerEmpowering TechnologyeDataSecurityx86encryption.exe»=»C:Program FilesAcerEmpowering TechnologyeDataSecurityx86encryption.exe:*:Enabled:encryption»
«C:Program FilesAcerEmpowering TechnologyeDataSecurityx86decryption.exe»=»C:Program FilesAcerEmpowering TechnologyeDataSecurityx86decryption.exe:*:Enabled:decryption»
«C:Program FilesAcerEmpowering TechnologyeDataSecurityx86eDSMgr.exe»=»C:Program FilesAcerEmpowering TechnologyeDataSecurityx86eDSMgr.exe:*:Enabled:eDSMgr»
«C:Program FilesAcerEmpowering TechnologyeDataSecurityx86eDStbmngr.exe»=»C:Program FilesAcerEmpowering TechnologyeDataSecurityx86eDStbmngr.exe:*:Enabled:eDStbmngr»
«C:Program FilesAcerEmpowering TechnologyeDataSecurityx64eDSfsu.exe»=»C:Program FilesAcerEmpowering TechnologyeDataSecurityx64eDSfsu.exe:*:Enabled:eDSfsu»
«C:Program FilesAcerEmpowering TechnologyeDataSecurityx64encryption.exe»=»C:Program FilesAcerEmpowering TechnologyeDataSecurityx64encryption.exe:*:Enabled:encryption»
«C:Program FilesAcerEmpowering TechnologyeDataSecurityx64decryption.exe»=»C:Program FilesAcerEmpowering TechnologyeDataSecurityx64decryption.exe:*:Enabled:decryption»
«C:Program FilesAcerEmpowering TechnologyeDataSecurityx64eDSMgr.exe»=»C:Program FilesAcerEmpowering TechnologyeDataSecurityx64eDSMgr.exe:*:Enabled:eDSMgr»
«C:Program FilesAcerEmpowering TechnologyeDataSecurityx64eDStbmngr.exe»=»C:Program FilesAcerEmpowering TechnologyeDataSecurityx64eDStbmngr.exe:*:Enabled:eDStbmngr»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]

======File associations======

.js — edit — C:WindowsSystem32Notepad.exe %1
.js — open — C:WindowsSystem32WScript.exe «%1» %*
.scr — open — C:Windowssystem32notepad.exe «%1»
.scr — install —
.scr — config —

======List of files/folders created in the last 1 months======

2011-01-16 21:48:42 —-D—- C:Program Filestrend micro
2011-01-16 21:48:41 —-D—- C:rsit
2011-01-15 17:51:52 —-ASH—- C:hiberfil.sys
2011-01-15 17:49:11 —-A—- C:Windowsntbtlog.txt
2011-01-13 00:09:46 —-A—- C:WindowsNeroDigital.ini
2011-01-12 23:08:42 —-D—- C:Program FilesNero
2011-01-12 14:46:37 —-A—- C:Windowssystem32odbc32.dll
2011-01-12 14:46:26 —-A—- C:Windowssystem32sdclt.exe
2011-01-08 23:33:01 —-D—- C:UsersДенAppDataRoamingApple Computer
2011-01-08 23:32:27 —-DC—- C:Windowssystem32DRVSTORE
2011-01-08 23:32:27 —-A—- C:Windowssystem32GEARAspi.dll
2011-01-08 23:32:27 —-A—- C:Windowssystem32driversGEARAspiWDM.sys
2011-01-08 23:29:53 —-D—- C:Program FilesiPod
2011-01-08 23:29:49 —-D—- C:ProgramData{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2011-01-08 23:29:49 —-D—- C:Program FilesiTunes
2011-01-08 23:26:43 —-D—- C:Program FilesQuickTime
2011-01-08 23:26:42 —-D—- C:ProgramDataApple Computer
2011-01-08 23:25:20 —-D—- C:Program FilesApple Software Update
2011-01-08 23:22:43 —-D—- C:Program FilesBonjour
2011-01-08 23:22:14 —-D—- C:ProgramDataApple
2011-01-08 23:22:14 —-D—- C:Program FilesCommon FilesApple
2011-01-06 22:22:46 —-D—- C:Program FilesVKSaver
2011-01-03 14:37:27 —-D—- C:ProgramDatakJjDh01804
2011-01-02 22:03:39 —-D—- C:UsersДенAppDataRoamingReal
2010-12-31 14:35:44 —-D—- C:ProgramDataGuard.Mail.Ru
2010-12-31 12:30:50 —-D—- C:Program FilesAlterGeo
2010-12-30 14:21:00 —-D—- C:Program FilesUniblue
2010-12-30 14:18:32 —-D—- C:UsersДенAppDataRoamingOpenCandy
2010-12-30 14:18:25 —-D—- C:Program FilesVeoh_Web_Player
2010-12-30 14:18:13 —-D—- C:Program FilesVeoh Networks
2010-12-24 18:39:24 —-A—- C:Windowssystem32rmoc3260.dll
2010-12-24 18:39:24 —-A—- C:Windowssystem32pndx5032.dll
2010-12-24 18:39:24 —-A—- C:Windowssystem32pndx5016.dll
2010-12-24 18:39:24 —-A—- C:Windowssystem32pncrt.dll
2010-12-24 18:39:20 —-A—- C:Windowsavisplitter.ini
2010-12-24 18:39:16 —-A—- C:Windowssystem32yv12vfw.dll
2010-12-24 18:39:15 —-A—- C:Windowssystem32xvidvfw.dll
2010-12-24 18:39:15 —-A—- C:Windowssystem32xvidcore.dll
2010-12-24 18:39:10 —-A—- C:Windowssystem32qt-dx331.dll
2010-12-24 18:39:10 —-A—- C:Windowssystem32dpl100.dll
2010-12-24 18:38:44 —-A—- C:Windowssystem32ff_vfw.dll.manifest
2010-12-24 18:38:44 —-A—- C:Windowssystem32divx.dll
2010-12-24 18:38:43 —-A—- C:Windowssystem32ff_vfw.dll
2010-12-24 18:38:39 —-D—- C:Program FilesK-Lite Codec Pack
2010-12-24 00:37:12 —-D—- C:UsersДенAppDataRoamingSpotify
2010-12-24 00:37:00 —-D—- C:Program FilesSpotify

======List of files/folders modified in the last 1 months======

2060-08-18 16:40:44 —-N—- C:Windowssystem32Cp3245mt.dll
2011-01-16 21:48:58 —-D—- C:WindowsTemp
2011-01-16 21:48:58 —-D—- C:WindowsPrefetch
2011-01-16 21:48:42 —-D—- C:Program Files
2011-01-16 21:29:34 —-D—- C:UsersДенAppDataRoamingSkype
2011-01-16 21:28:25 —-D—- C:UsersДенAppDataRoamingskypePM
2011-01-16 12:50:59 —-SHD—- C:System Volume Information
2011-01-15 17:50:44 —-D—- C:Windowssystem32catroot2
2011-01-15 17:49:11 —-D—- C:Windows
2011-01-14 17:40:23 —-D—- C:WindowsSystem32
2011-01-14 17:40:22 —-D—- C:Windowsinf
2011-01-14 17:40:22 —-A—- C:Windowssystem32PerfStringBackup.INI
2011-01-13 16:11:31 —-A—- C:Windowssystem32akelpad.ini
2011-01-13 03:01:29 —-A—- C:Windowssystem32mrt.exe
2011-01-13 03:01:22 —-D—- C:Windowswinsxs
2011-01-13 02:15:14 —-D—- C:UsersДенAppDataRoamingNero
2011-01-12 23:08:38 —-D—- C:Program FilesCommon FilesNero
2011-01-12 23:04:51 —-SHD—- C:WindowsInstaller
2011-01-12 22:36:04 —-D—- C:UsersДенAppDataRoaminguTorrent
2011-01-12 14:46:12 —-D—- C:Windowssystem32catroot
2011-01-09 01:55:41 —-D—- C:Windowssystem32drivers
2011-01-08 23:29:49 —-HD—- C:ProgramData
2011-01-08 23:27:51 —-D—- C:Program FilesInternet Explorer
2011-01-08 23:25:48 —-D—- C:Windowssystem32Tasks
2011-01-08 23:22:14 —-D—- C:Program FilesCommon Files
2011-01-08 17:46:09 —-D—- C:WindowsMinidump
2011-01-06 19:58:43 —-D—- C:Program FilesGoogle
2011-01-05 22:20:55 —-D—- C:Windowssystem32spool
2011-01-05 22:20:34 —-D—- C:Windowssystem32Msdtc
2011-01-05 22:20:31 —-D—- C:Windowssystem32wbem
2011-01-05 22:16:10 —-D—- C:Windowssystem32config
2011-01-05 22:15:58 —-D—- C:WindowsTasks
2011-01-05 22:15:58 —-D—- C:UsersДенAppDataRoamingWinamp
2011-01-05 22:15:49 —-D—- C:Program FilesMail.Ru
2011-01-05 22:15:38 —-D—- C:Windowsregistration
2011-01-02 22:03:44 —-D—- C:ProgramDataNero
2010-12-31 12:45:49 —-D—- C:UsersДенAppDataRoamingMra
2010-12-24 11:50:00 —-D—- C:UsersДенAppDataRoamingAdobe
2010-12-19 17:25:37 —-D—- C:Program FilesOpera
2010-12-17 10:48:04 —-D—- C:Program FilesuTorrent

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AlfaFF;AlfaFF File System mini-filter; C:Windowssystem32DriversAlfaFF.sys [2009-08-21 43184]
R0 iaStor;Intel AHCI Controller; C:Windowssystem32DRIVERSiaStor.sys [2008-07-20 324120]
R0 PSDFilter;PSDFilter; C:Windowssystem32DRIVERSpsdfilter.sys [2008-07-29 18992]
R0 sptd;sptd; C:WindowsSystem32Driverssptd.sys [2009-09-21 721904]
R0 UBHelper;UBHelper; C:Windowssystem32driversUBHelper.sys [2008-01-30 13824]
R1 appdrv01;Application Driver (01); C:WindowsSystem32Driversappdrv01.sys [2010-09-02 2624624]
R1 archlp;archlp; C:Windowssystem32driversarchlp.sys [2010-01-13 89728]
R1 DritekPortIO;Dritek General Port I/O; ??C:PROGRA~1LAUNCH~1DPortIO.sys [2006-11-02 20112]
R1 ehdrv;ehdrv; C:Windowssystem32DRIVERSehdrv.sys [2009-03-19 107256]
R2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2009/08/24 20:37:24]; ??C:Program FilesCyberLinkPowerDVD900.fcl [2009-03-30 87536]
R2 adfs;adfs; C:Windowssystem32driversadfs.sys [2008-08-14 74720]
R2 eamon;eamon; C:Windowssystem32DRIVERSeamon.sys [2009-03-19 113960]
R2 epfwwfpr;epfwwfpr; C:Windowssystem32DRIVERSepfwwfpr.sys [2009-03-19 93312]
R2 int15;int15; ??C:Windowssystem32driversint15.sys [2008-06-02 15392]
R2 PSDNServ;PSDNServ; C:Windowssystem32driversPSDNServ.sys [2008-07-29 16944]
R2 psdvdisk;PSDVdisk; C:Windowssystem32driverspsdvdisk.sys [2008-07-29 60464]
R3 AgereSoftModem;Agere Systems Soft Modem; C:Windowssystem32DRIVERSAGRSM.sys [2008-02-29 1202560]
R3 AVerAF15;AVerMedia BDA Digital Tuner; C:WindowsSystem32DriversAVerAF15.sys [2008-03-14 280192]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:Windowssystem32DRIVERSDKbFltr.sys [2006-11-02 21264]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:Windowssystem32DRIVERSGEARAspiWDM.sys [2009-05-18 26600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:Windowssystem32driversRTKVHDA.sys [2008-05-07 2134424]
R3 itecir;ITECIR Infrared Receiver; C:Windowssystem32DRIVERSitecir.sys [2007-12-18 54784]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:Windowssystem32DRIVERSL1E60x86.sys [2008-05-19 47104]
R3 NETw5v32;Драйвер адаптера Intel(R) Wireless WiFi Link для Windows Vista 32 Bit ; C:Windowssystem32DRIVERSNETw5v32.sys [2008-04-27 3658752]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:Windowssystem32driversnvhda32v.sys [2008-06-25 44064]
R3 nvlddmkm;nvlddmkm; C:Windowssystem32DRIVERSnvlddmkm.sys [2008-08-01 7549568]
R3 SynTP;Synaptics TouchPad Driver; C:Windowssystem32DRIVERSSynTP.sys [2008-04-04 196784]
R3 usbvideo;USB-видеоустройство (WDM); C:WindowsSystem32Driversusbvideo.sys [2008-01-21 134016]
R3 vfs101x;vfs101x; C:Windowssystem32driversvfs101x.sys [2008-05-26 40752]
S3 BthEnum;Драйвер блока запроса Bluetooth; C:Windowssystem32DRIVERSBthEnum.sys [2009-04-11 22528]
S3 BthPan;Устройства Bluetooth (личной сети); C:Windowssystem32DRIVERSbthpan.sys [2008-01-21 92160]
S3 BthPort;Драйвер порта Bluetooth; C:WindowsSystem32DriversBTHport.sys [2009-04-11 507904]
S3 BTHUSB;Драйвер порта USB радиомодуля Bluetooth; C:WindowsSystem32DriversBTHUSB.sys [2009-04-11 29696]
S3 btwaudio;Аудиоустройствоi Bluetooth; C:Windowssystem32driversbtwaudio.sys [2007-03-29 79664]
S3 btwavdt;Bluetooth AVDT; C:Windowssystem32driversbtwavdt.sys [2007-02-27 81200]
S3 btwrchid;btwrchid; C:Windowssystem32DRIVERSbtwrchid.sys [2007-02-27 16432]
S3 drmkaud;Звуковой дешифратор DRM ядра системы; C:Windowssystem32driversdrmkaud.sys [2008-01-21 5632]
S3 EverestDriver;Lavalys EVEREST Kernel Driver; ??C:Program FilesLavalysEVEREST Ultimate Editionkerneld.wnt [2009-05-24 26736]
S3 HdAudAddService;Драйвер функции UAA для службы High Definition Audio (Microsoft), версия 1.1; C:Windowssystem32driversHdAudio.sys [2006-11-02 235520]
S3 JMCR;JMCR; C:Windowssystem32DRIVERSjmcr.sys [2008-05-07 85136]
S3 MSKSSRV;Представитель служб потоков Microsoft; C:Windowssystem32driversMSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Посредник синхронизации потоков Microsoft; C:Windowssystem32driversMSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Представитель диспетчера качества потоков Microsoft; C:Windowssystem32driversMSPQM.sys [2008-01-21 5504]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:Windowssystem32driversMSTEE.sys [2008-01-21 6016]
S3 NTIDrvr;Upper Class Filter Driver; C:Windowssystem32DRIVERSNTIDrvr.sys [2008-01-30 14848]
S3 RFCOMM;Устройство Bluetooth (протокол RFCOMM TDI); C:Windowssystem32DRIVERSrfcomm.sys [2009-04-11 148992]
S3 USBAAPL;Apple Mobile USB Driver; C:WindowsSystem32Driversusbaapl.sys [2010-09-28 41984]
S3 usbscan;Драйвер USB-сканера; C:Windowssystem32DRIVERSusbscan.sys [2008-01-21 35328]
S3 usbser;USB RS232 Driver; C:Windowssystem32DRIVERSusbser_xp.sys [2004-08-03 25600]
S3 vsdatant;vsdatant; ??C:Windowssystem32vsdatant.sys [2004-09-22 271344]
S3 WpdUsb;WpdUsb; C:Windowssystem32DRIVERSwpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:Windowssystem32DRIVERSWUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:Windowssystem32driverserrdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:Windowssystem32driversmegasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:Windowssystem32agrsmsvc.exe [2007-12-11 12800]
R2 Apple Mobile Device;Apple Mobile Device; C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe [2010-10-16 37664]
R2 Bonjour Service;Служба Bonjour; C:Program FilesBonjourmDNSResponder.exe [2010-10-07 345376]
R2 BthServ;@%SystemRoot%System32bthserv.dll,-101; C:Windowssystem32svchost.exe [2008-01-21 21504]
R2 BUNAgentSvc;NTI Backup Now 5 Agent Service; C:Program FilesNewTech InfosystemsNTI Backup Now 5ClientAgentsvc.exe [2008-03-03 16384]
R2 eDataSecurity Service;eDataSecurity Service; C:Program FilesAcerEmpowering TechnologyeDataSecurityx86eDSService.exe [2008-07-29 500784]
R2 ekrn;ESET Service; C:Program FilesESETESET NOD32 Antivirusekrn.exe [2009-03-19 731840]
R2 ETService;Empowering Technology Service; C:Program FilesAcerEmpowering TechnologyServiceETService.exe [2008-06-02 24576]
R2 EvtEng;Intel® PROSet/Wireless Event Log; C:Program FilesIntelWiFibinEvtEng.exe [2008-04-30 815104]
R2 Guard.Mail.ru;Guard.Mail.ru; C:Program FilesMail.RuGuardGuardMailRu.exe [2010-12-31 1041088]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:Program FilesIntelIntel Matrix Storage ManagerIAANTMon.exe [2008-07-20 354840]
R2 IGBASVC;iGroupTec Service; C:Program FilesAcerAcer Bio ProtectionBASVC.exe [2009-08-21 3520512]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:Program FilesCommon FilesLightScribeLSSrvc.exe [2007-01-17 61440]
R2 MobilityService;MobilityService; C:AcerMobility CenterMobilityService.exe [2007-12-06 110592]
R2 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:Program FilesNewTech InfosystemsNTI Backup Now 5BackupSvc.exe [2008-04-25 45056]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:Program FilesNewTech InfosystemsNTI Backup Now 5SchedulerSvc.exe [2008-04-25 131072]
R2 nvsvc;NVIDIA Display Driver Service; C:Windowssystem32nvvsvc.exe [2008-08-01 196608]
R2 PnkBstrA;PnkBstrA; C:Windowssystem32PnkBstrA.exe [2010-05-01 66872]
R2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:Program FilesCommon FilesIntelWirelessCommonRegSrvc.exe [2008-04-30 466944]
R2 RS_Service;Raw Socket Service; C:Program FilesAcerAcer VCMRS_Service.exe [2008-01-10 233472]
R2 TuneUp.ProgramStatisticsSvc;@%SystemRoot%System32TUProgSt.exe,-1; C:WindowsSystem32TUProgSt.exe [2009-12-05 604488]
R2 UserAccess;Securom User Access for Windows 2000 and Windows XP a technology by Sony DADC; C:Program FilesCommon FilesYDPUserAccessManageruseraccess.exe [2001-12-21 53248]
R2 UxTuneUp;@%SystemRoot%System32uxtuneup.dll,-4096; C:WindowsSystem32svchost.exe [2008-01-21 21504]
R2 vfsFPService;Validity Fingerprint Service; C:Windowssystem32vfsFPService.exe [2008-05-26 599344]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE [2009-08-18 1529728]
S2 appdrvrem01;Application Driver Auto Removal Service (01); C:WindowsSystem32appdrvrem01.exe [2010-09-02 316816]
S2 gupdate1ca227fe794cc80;Служба Google Update (gupdate1ca227fe794cc80); C:Program FilesGoogleUpdateGoogleUpdate.exe [2009-08-21 133104]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:Program FilesCommon FilesAutodesk SharedServiceAdskScSrv.exe [2009-08-30 85096]
S3 EhttpSrv;ESET HTTP Server; C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe [2009-03-19 20680]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe [2010-08-16 655624]
S3 FontCache;@%systemroot%system32FntCache.dll,-100; C:Windowssystem32svchost.exe [2008-01-21 21504]
S3 getPlusHelper;@C:Program FilesNOSbingetPlus_Helper.dll,-101; C:WindowsSystem32svchost.exe [2008-01-21 21504]
S3 GoogleDesktopManager-080708-050100;Диспетчер Google Desktop 5.7.808.7150; C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe [2009-08-21 24064]
S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-08-22 182768]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-03 69632]
S3 iPod Service;Сервис iPod; C:Program FilesiPodbiniPodService.exe [2010-12-13 820008]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2008-11-03 441712]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 TuneUp.Defrag;@%SystemRoot%System32TuneUpDefragService.exe,-1; C:WindowsSystem32TuneUpDefragService.exe [2009-12-05 361288]

---

EOF

---

[Автор]

Сообщения