Мужицкая утилита-антивирус Combofix

ComboFix 11-11-29.04 - Vlad 29.11.2011 20:39:38.1.2 - x86
Microsoft Windows 7 Максимальная 6.1.7601.1.1251.7.1049.18.2046.598 [GMT 4:00]
Running from: c:\users\Vlad\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Vlad\AppData\Roaming\igfxtray.dat
c:\users\Vlad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartUp\igfxtray.exe
c:\users\Vlad\AppData\Roaming\MicroST
c:\windows\system32\drivers\hwinterface.sys
c:\windows\system32\ieunitdrf.inf
.
.
((((((((((((((((((((((((( Files Created from 2011-10-28 to 2011-11-29 )))))))))))))))))))))))))))))))
.
.
2011-11-29 16:48 . 2011-11-29 16:51 -------- d-----w- c:\users\Vlad\AppData\Local\temp
2011-11-29 16:48 . 2011-11-29 16:48 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-11-29 12:05 . 2011-11-29 15:00 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{F431F50C-B62F-4E9B-A220-43B68C938D33}\offreg.dll
2011-11-28 15:52 . 2011-11-28 15:52 -------- d-----w- C:\2gPzm53eSx1X1lI
2011-11-28 14:03 . 2011-11-28 14:03 -------- d-----w- C:\emXydN2uAUC6saq
2011-11-20 17:23 . 2011-10-15 08:53 61248 ----a-w- c:\windows\system32\OpenCL.dll
2011-11-20 17:23 . 2011-10-15 08:53 18871616 ----a-w- c:\windows\system32\nvoglv32.dll
2011-11-20 17:23 . 2011-10-15 08:53 10327360 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2011-11-20 17:23 . 2011-10-15 08:53 5578560 ----a-w- c:\windows\system32\nvcuda.dll
2011-11-20 17:23 . 2011-10-15 08:53 2401088 ----a-w- c:\windows\system32\nvcuvid.dll
2011-11-20 17:23 . 2011-10-15 08:53 2099520 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-11-20 17:23 . 2011-10-15 08:53 17248576 ----a-w- c:\windows\system32\nvcompiler.dll
2011-11-13 21:38 . 2011-11-13 21:38 -------- d-----w- c:\users\Vlad\AppData\Local\Skyrim
2011-11-12 23:22 . 2011-09-29 16:03 1290608 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-11-12 23:22 . 2011-09-29 03:37 2341888 ----a-w- c:\windows\system32\win32k.sys
2011-11-12 23:22 . 2011-10-01 04:37 708608 ----a-w- c:\program files\Common Files\System\wab32.dll
2011-11-11 01:50 . 2011-11-11 01:50 -------- d-----w- c:\users\Vlad\AppData\Roaming\Mount&Blade Warband
2011-11-05 15:34 . 2011-11-05 15:34 -------- d--h--w- c:\program files\Common Files\EAInstaller
2011-11-05 15:18 . 2011-11-05 15:57 -------- d-----w- c:\users\Vlad\AppData\Local\ESN Sonar
2011-11-05 15:14 . 2011-11-05 15:14 -------- d-----w- c:\program files\Battlelog Web Plugins
2011-11-05 14:51 . 2011-11-05 14:58 -------- d-----w- c:\users\Vlad\AppData\Roaming\Origin
2011-11-05 14:51 . 2011-11-05 14:51 -------- d-----w- c:\users\Vlad\AppData\Local\Origin
2011-11-05 14:48 . 2011-11-05 15:56 -------- d-----w- c:\programdata\Origin
2011-11-05 14:48 . 2011-11-05 15:02 -------- d-----w- c:\program files\Origin Games
2011-11-05 14:48 . 2011-11-10 16:59 -------- d-----w- c:\program files\Origin
2011-11-05 14:30 . 2011-11-26 22:06 -------- d-----w- c:\users\UpdatusUser
2011-11-05 14:29 . 2011-10-15 08:53 6350144 ----a-w- c:\windows\system32\nvcpl.dll
2011-11-05 14:29 . 2011-10-15 08:53 3840320 ----a-w- c:\windows\system32\nvsvc.dll
2011-11-05 14:29 . 2011-10-15 08:53 3074368 ----a-w- c:\windows\system32\nvsvcr.dll
2011-11-05 14:29 . 2011-10-15 08:53 203072 ----a-w- c:\windows\system32\nvmctray.dll
2011-11-05 14:29 . 2011-10-15 08:53 123712 ----a-w- c:\windows\system32\nvshext.dll
2011-11-05 14:29 . 2011-10-15 08:53 1136448 ----a-w- c:\windows\system32\nvvsvc.exe
2011-11-05 14:28 . 2011-10-15 08:53 602432 ----a-w- c:\windows\system32\easyupdatusapiu.dll
2011-11-05 14:28 . 2011-11-05 14:28 -------- d-----w- c:\programdata\NVIDIA Corporation
2011-11-05 14:23 . 2011-10-15 08:53 7041856 ----a-w- c:\windows\system32\nvwgf2um.dll
2011-11-05 14:23 . 2011-10-15 08:53 919872 ----a-w- c:\windows\system32\nvdispco32.dll
2011-11-05 14:23 . 2011-10-15 08:53 877376 ----a-w- c:\windows\system32\nvgenco32.dll
2011-11-05 14:23 . 2011-10-15 08:53 2458432 ----a-w- c:\windows\system32\nvapi.dll
2011-11-05 14:23 . 2011-10-15 08:53 13205312 ----a-w- c:\windows\system32\nvd3dum.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-28 09:54 . 2010-10-17 14:06 140072 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-11-28 09:54 . 2010-10-19 17:35 280904 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-11-28 09:54 . 2010-10-17 14:05 280904 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-11-28 09:52 . 2010-10-17 14:05 280904 ----a-w- c:\windows\system32\PnkBstrB.ex0
2011-11-22 17:23 . 2010-10-17 14:06 138056 ----a-w- c:\users\Vlad\AppData\Roaming\PnkBstrK.sys
2011-11-22 17:23 . 2010-10-17 14:05 75136 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-11-15 06:06 . 2011-05-19 03:49 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-14 20:54 . 2011-10-14 20:54 321856 ----a-w- c:\windows\system32\nvStreaming.exe
2011-09-12 23:14 . 2011-10-18 14:07 7269712 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{F431F50C-B62F-4E9B-A220-43B68C938D33}\mpengine.dll
2011-09-07 18:37 . 2011-09-07 18:37 119808 ----a-r- c:\users\Vlad\AppData\Roaming\Microsoft\Installer\{CCF298AF-9CE1-4B26-B251-486E98A34789}\icons.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{C44D2EA2-FCCE-4CE8-8710-5ED0D33F7677}"= "c:\program files\mediabar Toolbar\rubar.dll" [2011-02-23 1144320]
.
[HKEY_CLASSES_ROOT\clsid\{c44d2ea2-fcce-4ce8-8710-5ed0d33f7677}]
[HKEY_CLASSES_ROOT\iebar.Searcher.1]
[HKEY_CLASSES_ROOT\TypeLib\{C41FAEC8-6123-4F4D-8B1F-426AF5F9A59A}]
[HKEY_CLASSES_ROOT\iebar.Searcher]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C93F72A2-2162-4BBA-A07A-F13663C297A6}]
2011-06-28 10:06 2645832 ----a-w- c:\program files\Yandex\YandexBarIE\fastdial.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{23DD83B5-BDDC-49CE-B77B-514819C6D551}"= "c:\program files\mediabar Toolbar\rubar.dll" [2011-02-23 1144320]
"{91397D20-1446-11D4-8AF4-0040CA1127B6}"= "c:\program files\Yandex\YandexBarIE\yndbar.dll" [2011-06-28 14875464]
.
[HKEY_CLASSES_ROOT\clsid\{23dd83b5-bddc-49ce-b77b-514819c6d551}]
[HKEY_CLASSES_ROOT\iebar.PluginCore.1]
[HKEY_CLASSES_ROOT\TypeLib\{C41FAEC8-6123-4F4D-8B1F-426AF5F9A59A}]
[HKEY_CLASSES_ROOT\iebar.PluginCore]
.
[HKEY_CLASSES_ROOT\clsid\{91397d20-1446-11d4-8af4-0040ca1127b6}]
[HKEY_CLASSES_ROOT\Yandex.Toolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{91397D13-1446-11D4-8AF4-0040CA1127B6}]
[HKEY_CLASSES_ROOT\Yandex.Toolbar]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{91397D20-1446-11D4-8AF4-0040CA1127B6}"= "c:\program files\Yandex\YandexBarIE\yndbar.dll" [2011-06-28 14875464]
.
[HKEY_CLASSES_ROOT\clsid\{91397d20-1446-11d4-8af4-0040ca1127b6}]
[HKEY_CLASSES_ROOT\Yandex.Toolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{91397D13-1446-11D4-8AF4-0040CA1127B6}]
[HKEY_CLASSES_ROOT\Yandex.Toolbar]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MKey"="c:\program files\MKey\MKey.exe" [2010-12-23 2509824]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-08-02 4910912]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-08-12 2215064]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]
.
c:\users\Vlad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartUp\
Punto Switcher.lnk - c:\program files\Yandex\Punto Switcher\punto.exe [2011-6-29 2451304]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverScanner
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\2Gis Update Notifier]
2011-05-31 07:57 4581208 ----a-w- c:\program files\2gis\3.0\2GISTrayNotifier.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
2011-03-15 13:42 499608 ------w- c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5.5ServiceManager]
2011-01-12 03:08 1523360 ----a-w- c:\program files\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
2010-02-22 00:57 406992 ----a-w- c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTDVDDET]
2003-06-17 21:00 45056 ------w- c:\program files\Creative\DVDAudio\CTDVDDET.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2011-08-02 07:33 4910912 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2011-01-27 15:50 136176 ----atw- c:\users\Vlad\AppData\Local\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Infium]
2011-07-18 11:26 6812032 ----a-w- c:\program files\QIP 2010\qip.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
2011-08-15 12:18 1955208 ----a-w- c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Praetorian]
2011-06-28 10:05 1460040 ----a-w- c:\users\Vlad\AppData\Local\Yandex\Updater\praetorian.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSDMonitor]
2010-08-05 04:46 104408 ----a-w- c:\program files\Common Files\PC Tools\sMonitor\SSDMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2011-09-17 16:50 1242448 ----a-w- c:\program files\Steam\Steam.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-10-29 11:49 249064 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
2010-02-19 09:37 517096 ----a-w- c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USBToolTip]
2007-02-20 08:07 199752 ----a-w- c:\progra~1\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\wmagent.exe]
2009-10-19 11:47 210400 ----a-w- c:\program files\WebMoney Agent\wmagent.exe
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Служба Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-01-27 136176]
R3 2GISUpdateService;2GIS UpdateService;c:\program files\2gis\3.0\2GISUpdateService.exe [2011-05-31 874328]
R3 COMMONFX;COMMONFX;c:\windows\system32\drivers\COMMONFX.SYS [2010-03-18 99416]
R3 CTAUDFX;CTAUDFX;c:\windows\system32\drivers\CTAUDFX.SYS [2010-03-18 555096]
R3 CTERFXFX.SYS;CTERFXFX.SYS;c:\windows\System32\drivers\CTERFXFX.SYS [2010-03-18 100952]
R3 CTERFXFX;CTERFXFX;c:\windows\system32\drivers\CTERFXFX.SYS [2010-03-18 100952]
R3 CTSBLFX;CTSBLFX;c:\windows\system32\drivers\CTSBLFX.SYS [2010-03-18 566360]
R3 GGSAFERDriver;GGSAFER Driver;c:\program files\Garena\safedrv.sys [x]
R3 gupdatem;Служба Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-01-27 136176]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [2011-03-09 4302456]
R3 NVIDIAHWAccess;NVIDIAHWAccess;c:\users\Vlad\AppData\Roaming\NVIDIA\HWAccess.sys [x]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R4 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2010-10-17 79360]
R4 Creative Dolby Digital Live Pack Licensing Service;Creative Dolby Digital Live Pack Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\DDLLicensing.exe [2010-10-17 79360]
R4 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service;c:\program files\Common Files\PC Tools\sMonitor\StartManSvc.exe [2010-08-05 583640]
R4 TeamViewer5;TeamViewer 5;c:\program files\TeamViewer\Version5\TeamViewer_Service.exe [2010-10-06 2002728]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-07-29 136632]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-08-12 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2010-07-29 96920]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2011-08-15 1361288]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-10-14 381248]
S2 TunngleService;TunngleService;c:\program files\Tunngle\TnglCtrl.exe [2011-08-09 741224]
S3 CamSpaceBus;CamSpace Virtual Joystick Bus device driver;c:\windows\system32\drivers\CamSpaceBus.sys [2008-08-24 14848]
S3 CamSpaceJoy;CamSpace Virtual Joystick device driver;c:\windows\system32\drivers\CamSpaceJoy.sys [2008-08-24 30464]
S3 COMMONFX.SYS;COMMONFX.SYS;c:\windows\System32\drivers\COMMONFX.SYS [2010-03-18 99416]
S3 CTAUDFX.SYS;CTAUDFX.SYS;c:\windows\System32\drivers\CTAUDFX.SYS [2010-03-18 555096]
S3 CTSBLFX.SYS;CTSBLFX.SYS;c:\windows\System32\drivers\CTSBLFX.SYS [2010-03-18 566360]
S3 nvoclock;NVIDIA Enthusiasts Platform KDM;c:\windows\system32\DRIVERS\nvoclock.sys [2009-09-15 38248]
S3 RTL8167;Драйвер Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [2009-09-16 27136]
.
.
Contents of the 'Scheduled Tasks' folder
.
2011-11-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-27 15:50]
.
2011-11-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-27 15:50]
.
2011-11-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2930842392-2583632446-2799038799-1001Core.job
- c:\users\Vlad\AppData\Local\Google\Update\GoogleUpdate.exe [2011-03-02 15:50]
.
2011-11-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2930842392-2583632446-2799038799-1001UA.job
- c:\users\Vlad\AppData\Local\Google\Update\GoogleUpdate.exe [2011-03-02 15:50]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.yandex.ru/?clid=930634
uDefault_Search_URL = yandex.ru
mSearch Bar = yandex.ru
uInternet Settings,ProxyServer = 49.212.15.191:3128
uSearchAssistant = yandex.ru
IE: &Экспорт в Microsoft Excel - c:\progra~1\Microsoft Office\Office14\EXCEL.EXE/3000
IE: {{7644E42D-B096-457F-8B5B-901238FC81AE} - c:\program files\ICQ7.6\ICQ.exe
FF - ProfilePath - c:\users\Vlad\AppData\Roaming\Mozilla\Firefox\Profiles\lwhpcfx4.default\
FF - prefs.js: network.proxy.http - 125.206.230.233
FF - prefs.js: network.proxy.http_port - 80
FF - prefs.js: network.proxy.ssl - 125.206.230.233
FF - prefs.js: network.proxy.ssl_port - 80
FF - prefs.js: network.proxy.type - 0
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: mediabar: {50a8cc05-f498-4a8a-9eea-bea804e3ed50} - c:\program files\Mozilla Firefox\extensions\{50a8cc05-f498-4a8a-9eea-bea804e3ed50}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Elite Proxy Switcher: eliteproxyswitcher@my-proxy.com - %profile%\extensions\eliteproxyswitcher@my-proxy.com
.
- - - - ORPHANS REMOVED - - - -
.
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
AddRemove-NFSRun_is1 - e:\games\NFSRun\unins000.exe
AddRemove-The Cursed Crusade (c) DTP_is1 - e:\games\The Cursed Crusade\unins000.exe
AddRemove-{0EDC9BA0-016E-406a-86DA-04FC1BE00C21} - c:\program files\Common Files\EAInstaller\Need for Speed(TM) The Run\Cleanup.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\Creative\Shared Files\CTAudSvc.exe
c:\program files\NVIDIA Corporation\Display\nvxdsync.exe
c:\windows\system32\nvvsvc.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\conhost.exe
c:\program files\fraps\fraps.exe
c:\program files\NVIDIA Corporation\System Update\UpdateCenterService.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\WUDFHost.exe
c:\program files\NVIDIA Corporation\Display\nvtray.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\DllHost.exe
c:\windows\system32\sppsvc.exe
.
**************************************************************************
.
Completion time: 2011-11-29 20:56:03 - machine was rebooted
ComboFix-quarantined-files.txt 2011-11-29 16:56
.
Pre-Run: 6 033 534 976 байт свободно
Post-Run: 6 920 179 712 байт свободно
.
- - End Of File - - 1E6E4170514A1BA4A8CBBD3673CB3C5E