Показано с 1 по 3 из 3.

URL:MAL + ТРАЯН (заявка № 130852)

  1. #1
    Junior Member Репутация
    Регистрация
    23.01.2013
    Сообщений
    2
    Вес репутации
    41

    URL:MAL + ТРАЯН

    Скрытый текст


    <?xml version="1.0" encoding="windows-1251" ?>
    - <AVZ Version="4.37" LogDate="22.02.2012 22:06:49" WinDir="C:\Windows\" OS_MjVer="6" OS_MiVer="1" OS_Build="7600" BootMode="0" OS_CSDV="" ProfileDir="C:\Users\Админ" Session="" Domain="WORKGROUP" IsWow64="False" IsAdmin="True" Base64Mode="False" IsSRDisabled="False" MainDBDate="22.02.2012" CompHash="D7850C8F1833BC789AC498C30FC5B6E1">
    - <PROCESS>
    <ITEM PID="308" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="372" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="504" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="956" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1488" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1548" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1556" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1572" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1816" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1828" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1876" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1936" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1956" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1996" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2400" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2496" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3136" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3292" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3584" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3708" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3972" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="4048" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2080" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1940" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2504" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3592" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3784" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="4060" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1528" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2124" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2340" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3444" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="824" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3024" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1096" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3424" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="216" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1308" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1844" File="c:\program files\2gis\3.0\2gistraynotifier.exe" CheckResult="0" Descr="Модуль оповещений 2ГИС" LegalCopyright="© ООО «ДубльГИС», 2010-2011" Hidden="0" CmdLine=""C:\Program Files\2gis\3.0\2GISTrayNotifier.exe" -delayed_start" Size="3764064" Attr="rsAh" CreateDate="30.11.2011 00:07:02" ChangeDate="30.11.2011 00:07:02" MD5="7AD6B7B0CF5D26EFBA1AB6D31500C867" Vendor="ООО ДубльГИС" Product="2ГИС" OFN="2GISTrayNotifier.exe" />
    <ITEM PID="1288" File="c:\windows\system32\atieclxx.exe" CheckResult="0" Descr="AMD External Events Client Module" LegalCopyright="Copyright © 2008-2009 AMD" Hidden="0" CmdLine="atieclxx" Size="401408" Attr="rsAh" CreateDate="08.09.2011 22:30:10" ChangeDate="08.09.2011 22:30:10" MD5="81A9656D4E6A540ABDAB6C3319C88454" Vendor="AMD" Product="AMD External Events" OFN="ATIECLXX.EXE" />
    <ITEM PID="932" File="c:\windows\system32\atiesrxx.exe" CheckResult="0" Descr="AMD External Events Service Module" LegalCopyright="Copyright © 2008-2009 AMD" Hidden="0" CmdLine="C:\Windows\system32\atiesrxx.exe" Size="176128" Attr="rsAh" CreateDate="08.09.2011 22:29:46" ChangeDate="08.09.2011 22:29:46" MD5="4B808991F51D50BC6A3A3C8541D52748" Vendor="AMD" Product="AMD External Events" OFN="ATIESRXX.EXE" />
    <ITEM PID="1704" File="c:\program files\alwil software\avast5\avastsvc.exe" CheckResult="0" Descr="avast! Service" LegalCopyright="Copyright (c) 2010 AVAST Software" Hidden="0" CmdLine=""C:\Program Files\Alwil Software\Avast5\AvastSvc.exe"" Size="40384" Attr="rsAh" CreateDate="01.11.2010 12:38:45" ChangeDate="07.09.2010 21:11:59" MD5="ACB544D7254F366DFB48F380BC36CD25" Vendor="AVAST Software" Product="avast! Antivirus" OFN="AvastSvc.exe" />
    <ITEM PID="1796" File="c:\program files\alwil software\avast5\avastui.exe" CheckResult="0" Descr="avast! Antivirus" LegalCopyright="Copyright (c) 2010 AVAST Software" Hidden="0" CmdLine=""C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui" Size="2838912" Attr="rsAh" CreateDate="01.11.2010 12:38:45" ChangeDate="07.09.2010 21:12:02" MD5="6C1B31F5C16E03153F0037AC6C451FFD" Vendor="AVAST Software" Product="avast! Antivirus" OFN="AvastUi.exe" />
    <ITEM PID="1520" File="g:\distrib\antivirus\avz4\avz.exe" CheckResult="0" Descr="Антивирусная утилита AVZ" LegalCopyright="Антивирусная утилита AVZ" Hidden="0" CmdLine=""G:\DISTRIB\Antivirus\avz4\avz.exe"" Size="764416" Attr="rsAh" CreateDate="17.10.2011 16:40:24" ChangeDate="22.02.2012 20:53:52" MD5="B0BC3E0F7161842404BAB77EEA9E965B" Vendor="Лаборатория Касперского, 2007-2011" Product="Антивирусная утилита AVZ" OFN="avz.exe" />
    <ITEM PID="432" File="c:\program files\common files\logishrd\lqcvfx\cocimanager.exe" CheckResult="0" Descr="" LegalCopyright="" Hidden="0" CmdLine=""C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe" -Embedding" Size="560472" Attr="rsAh" CreateDate="14.10.2009 13:34:18" ChangeDate="14.10.2009 13:34:18" MD5="98D472ECFBC0E8ED25A0483E765F42B6" />
    <ITEM PID="1604" File="c:\windows\system32\dwm.exe" CheckResult="0" Descr="Диспетчер окон рабочего стола" LegalCopyright="© Корпорация Майкрософт. все права защищены." Hidden="0" CmdLine=""C:\Windows\system32\Dwm.exe"" Size="92672" Attr="rsAh" CreateDate="14.07.2009 04:24:23" ChangeDate="14.07.2009 06:14:19" MD5="505BF4D1CADEB8D4F8BCD08D944DE25D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="dwm.exe.mui" />
    <ITEM PID="1628" File="c:\windows\explorer.exe" CheckResult="0" Descr="Проводник" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\Explorer.EXE" Size="2613248" Attr="rsAh" CreateDate="14.07.2009 04:41:14" ChangeDate="14.07.2009 06:14:20" MD5="15BC38A7492BEFE831966ADB477CF76F" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="EXPLORER.EXE.MUI" />
    <ITEM PID="2192" File="c:\program files\ati technologies\ati.ace\fuel\fuel.service.exe" CheckResult="0" Descr="???»N??¶?±?° Fusion Utility Service" LegalCopyright="Copyright A© 2009-2010 Advanced Micro Devices, Inc. All Rights Reserved." Hidden="0" CmdLine=""C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService" Size="291840" Attr="rsAh" CreateDate="08.09.2011 13:41:20" ChangeDate="08.09.2011 13:41:20" MD5="65433E648E685B5A9DD69598BFC21ACE" Vendor="Advanced Micro Devices, Inc." Product="FusionUtilityService" OFN="FusionUtilityService.exe.mui" />
    <ITEM PID="2236" File="c:\program files\gene6 ftp server\g6ftpserver.exe" CheckResult="0" Descr="Gene6 File Transfer Protocol Server" LegalCopyright="Copyright ©1998-2007 Gene6, Sarl - All rights reserved" Hidden="0" CmdLine=""C:\Program Files\Gene6 FTP Server\G6FTPSERVER.EXE"" Size="470016" Attr="rsAh" CreateDate="22.10.2007 12:29:30" ChangeDate="22.10.2007 12:29:30" MD5="FBECB43F0062D1EFB0305504D7D7AE2C" Vendor="Gene6" />
    <ITEM PID="1788" File="c:\program files\microsoft office\office12\groovemonitor.exe" CheckResult="0" Descr="GrooveMonitor Utility" LegalCopyright="© 2006 Microsoft Corporation. All rights reserved." Hidden="0" CmdLine=""C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"" Size="31016" Attr="rsAh" CreateDate="27.10.2006 00:47:42" ChangeDate="27.10.2006 00:47:42" MD5="38D198A2DD54A67120040566A38103BA" Vendor="Microsoft Corporation" Product="GrooveMonitor Utility" OFN="GrooveMonitor.exe" />
    <ITEM PID="3528" File="c:\program files\internet explorer\iexplore.exe" CheckResult="0" Descr="Internet Explorer" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine=""C:\Program Files\Internet Explorer\iexplore.exe"" Size="673048" Attr="rsAh" CreateDate="14.07.2009 04:43:32" ChangeDate="14.07.2009 06:17:29" MD5="2C32E3E596CFE660353753EABEFB0540" Vendor="Microsoft Corporation" Product="Windows® Internet Explorer" OFN="IEXPLORE.EXE.MUI" />
    <ITEM PID="1316" File="c:\program files\internet explorer\iexplore.exe" CheckResult="0" Descr="Internet Explorer" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine=""C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:3528 CREDAT:79873" Size="673048" Attr="rsAh" CreateDate="14.07.2009 04:43:32" ChangeDate="14.07.2009 06:17:29" MD5="2C32E3E596CFE660353753EABEFB0540" Vendor="Microsoft Corporation" Product="Windows® Internet Explorer" OFN="IEXPLORE.EXE.MUI" />
    <ITEM PID="1836" File="c:\program files\common files\java\java update\jusched.exe" CheckResult="0" Descr="Java(TM) Update Scheduler" LegalCopyright="Copyright (C) 2004" Hidden="0" CmdLine=""C:\Program Files\Common Files\Java\Java Update\jusched.exe"" Size="254696" Attr="rsAh" CreateDate="09.06.2011 12:06:06" ChangeDate="09.06.2011 12:06:06" MD5="6E3245DF783E58375B3465F03274743E" Vendor="Sun Microsystems, Inc." Product="Java(TM) Platform SE Auto Updater 2 0" OFN="jusched.exe" />
    <ITEM PID="3796" File="c:\programdata\microsoft\windows\start menu\programs\startup\kabauth.exe" CheckResult="-1" Descr="Авторизатор КАБiNET" LegalCopyright="(c) КАБiNET. All rights reserved." Hidden="0" CmdLine=""C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\kabauth.exe"" Size="877568" Attr="rsAh" CreateDate="01.10.2009 19:43:55" ChangeDate="03.03.2011 22:38:48" MD5="26A0D07F0D5120DAD14086A8D9786448" Vendor="КАБiNET" Product="Авторизатор КАБiNET" OFN="kabauth.exe" />
    <ITEM PID="576" File="c:\windows\system32\lsass.exe" CheckResult="0" Descr="Local Security Authority Process" LegalCopyright="© Microsoft Corporation. All rights reserved." Hidden="0" CmdLine="C:\Windows\system32\lsass.exe" Size="22528" Attr="rsAh" CreateDate="14.07.2009 04:11:58" ChangeDate="14.07.2009 06:14:23" MD5="F42309C4191C506B71DB5D1126D26318" Vendor="Microsoft Corporation" Product="Microsoft® Windows® Operating System" OFN="lsass.exe" />
    <ITEM PID="2324" File="c:\program files\common files\logishrd\lvmvfm\lvprcsrv.exe" CheckResult="0" Descr="Logitech LVPrcSrv Module." LegalCopyright="(c) 1996-2009 Logitech. All rights reserved." Hidden="0" CmdLine=""C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe"" Size="154136" Attr="rsAh" CreateDate="07.10.2009 01:47:34" ChangeDate="07.10.2009 01:47:34" MD5="0DDFDCAA92C7F553328DB06BA599BEA9" Vendor="Logitech Inc." Product="Logitech Webcam Software" OFN="LVPrcSrv.exe" />
    <ITEM PID="1852" File="c:\program files\logitech\logitech webcam software\lws.exe" CheckResult="0" Descr="" LegalCopyright="" Hidden="0" CmdLine=""C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide" Size="2793304" Attr="rsAh" CreateDate="14.10.2009 13:36:56" ChangeDate="14.10.2009 13:36:56" MD5="2589FFE360BED8F824CBC6171CB5B874" />
    <ITEM PID="3496" File="c:\program files\pc connectivity solution\transports\nclmsbtsrvex.exe" CheckResult="0" Descr="Microsoft Bluetooth Media Server" LegalCopyright="Copyright (c) 2007-2010 Nokia. All Rights Reserved." Hidden="0" CmdLine="{E6B23043-B4A4-47B7-A9D4-7B08D41C3615}" Size="140288" Attr="rsAh" CreateDate="11.05.2010 10:16:34" ChangeDate="11.05.2010 10:16:34" MD5="871E1E0FAE1EA1D1FCF4DDC8C9CC954D" Vendor="Nokia" Product="PC Connectivity Solution" OFN="MSBTSrv.exe" />
    <ITEM PID="3400" File="c:\program files\pc connectivity solution\transports\nclrssrv.exe" CheckResult="0" Descr="Serial Media Server" LegalCopyright="Copyright (c) 2007 - 2009 Nokia. All Rights Reserved." Hidden="0" CmdLine="{20059EFE-260D-4EA3-BCBB-F6EA04CA4B99}" Size="120832" Attr="rsAh" CreateDate="27.10.2009 09:15:02" ChangeDate="27.10.2009 09:15:02" MD5="46A9D1FCC55EC6A62FE1D2ACE79C6CA8" Vendor="Nokia" Product="PC Connectivity Solution" OFN="NclRSSrv.exe" />
    <ITEM PID="3368" File="c:\program files\pc connectivity solution\transports\nclusbsrv.exe" CheckResult="0" Descr="USB Media Server" LegalCopyright="Copyright (c) 2007-2010 Nokia. All Rights Reserved." Hidden="0" CmdLine="{F3FEBCE8-D86E-417F-8359-54ADEF59006F}" Size="138240" Attr="rsAh" CreateDate="25.05.2010 11:37:12" ChangeDate="25.05.2010 11:37:12" MD5="DB0E77AB54F7B6EBC30081182D37F5A2" Vendor="Nokia" Product="PC Connectivity Solution" OFN="NclUSBSrv.exe" />
    <ITEM PID="1860" File="c:\program files\nokia\nokia pc suite 7\pcsuite.exe" CheckResult="0" Descr="Nokia Launch Application" LegalCopyright="Copyright (C) 2010 Nokia. All Rights Reserved." Hidden="0" CmdLine=""C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray" Size="1479680" Attr="rsAh" CreateDate="14.05.2010 09:32:30" ChangeDate="14.05.2010 09:32:30" MD5="B0A7458308E157ABF2B04555D12ACF4A" Vendor="Nokia" Product="PC Suite" OFN="PCSuite.exe" />
    <ITEM PID="2380" File="c:\program files\common files\protexis\license service\psiservice_2.exe" CheckResult="0" Descr="PsiService PsiService" LegalCopyright="© 2000-2005 Protexis Inc." Hidden="0" CmdLine=""C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe"" Size="189728" Attr="rsAh" CreateDate="10.03.2010 13:26:48" ChangeDate="10.03.2010 13:26:48" MD5="543A4EF0923BF70D126625B034EF25AF" Vendor="Protexis Inc." Product="PsiService System Service" OFN="PSIService.exe" />
    <ITEM PID="3620" File="c:\windows\system32\searchfilterhost.exe" CheckResult="0" Descr="Microsoft Windows Search Filter Host" LegalCopyright="© Microsoft Corporation. All rights reserved." Hidden="0" CmdLine=""C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520" Size="86528" Attr="rsAh" CreateDate="14.07.2009 05:13:15" ChangeDate="14.07.2009 06:14:35" MD5="8A674F9AB20B4937357BF6F5A0938EBF" Vendor="Microsoft Corporation" Product="Windows® Search" OFN="SearchFilterHost.exe" />
    <ITEM PID="2932" File="c:\windows\system32\searchindexer.exe" CheckResult="0" Descr="Индексатор службы Microsoft Windows Search" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\system32\SearchIndexer.exe /Embedding" Size="428032" Attr="rsAh" CreateDate="14.07.2009 05:14:13" ChangeDate="14.07.2009 06:14:35" MD5="622D95520182F6D3D05310D5810CA8B3" Vendor="Microsoft Corporation" Product="Служба Windows® Search" OFN="SearchIndexer.exe.mui" />
    <ITEM PID="3776" File="c:\windows\system32\searchprotocolhost.exe" CheckResult="0" Descr="Microsoft Windows Search Protocol Host" LegalCopyright="© Microsoft Corporation. All rights reserved." Hidden="0" CmdLine=""C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-2737360702-1501656601-632007848-10002_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-2737360702-1501656601-632007848-10002 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"" Size="164352" Attr="rsAh" CreateDate="14.07.2009 05:14:11" ChangeDate="14.07.2009 06:14:35" MD5="89ED7C028A487340B7D93D5A38FDCB54" Vendor="Microsoft Corporation" Product="Windows® Search" OFN="SearchProtocolHost.exe" />
    <ITEM PID="3060" File="c:\program files\pc connectivity solution\servicelayer.exe" CheckResult="0" Descr="ServiceLayer Module" LegalCopyright="Copyright © 2002-2010 Nokia. All Rights Reserved." Hidden="0" CmdLine=""C:\Program Files\PC Connectivity Solution\ServiceLayer.exe"" Size="613888" Attr="rsAh" CreateDate="25.05.2010 11:38:06" ChangeDate="25.05.2010 11:38:06" MD5="5C1858EEADD097912443AE8EFD44DA6B" Vendor="Nokia" Product="PC Connectivity Solution" OFN="ServiceLayer.exe" />
    <ITEM PID="560" File="c:\windows\system32\services.exe" CheckResult="0" Descr="Приложение служб и контроллеров" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\system32\services.exe" Size="259072" Attr="rsAh" CreateDate="14.07.2009 04:11:26" ChangeDate="14.07.2009 06:14:36" MD5="5F1B6A9C35D3D5CA72D6D6FDEF9747D6" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="services.exe.mui" />
    <ITEM PID="1504" File="c:\windows\system32\spoolsv.exe" CheckResult="0" Descr="Диспетчер очереди печати" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\System32\spoolsv.exe" Size="316416" Attr="rsAh" CreateDate="14.07.2009 05:18:36" ChangeDate="14.07.2009 06:14:41" MD5="49B6DD6AB3715B7A67965F17194E98A9" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="spoolsv.exe.mui" />
    <ITEM PID="1072" File="c:\windows\system32\svchost.exe" CheckResult="0" Descr="Хост-процесс для служб Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\system32\svchost.exe -k netsvcs" Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:19:28" ChangeDate="14.07.2009 06:14:41" MD5="54A47F6B5E09A77E61649109C6A08866" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="svchost.exe.mui" />
    <ITEM PID="2912" File="c:\windows\system32\svchost.exe" CheckResult="0" Descr="Хост-процесс для служб Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\system32\svchost.exe -k imgsvc" Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:19:28" ChangeDate="14.07.2009 06:14:41" MD5="54A47F6B5E09A77E61649109C6A08866" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="svchost.exe.mui" />
    <ITEM PID="2052" File="c:\windows\system32\svchost.exe" CheckResult="0" Descr="Хост-процесс для служб Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork" Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:19:28" ChangeDate="14.07.2009 06:14:41" MD5="54A47F6B5E09A77E61649109C6A08866" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="svchost.exe.mui" />
    <ITEM PID="1252" File="c:\windows\system32\svchost.exe" CheckResult="0" Descr="Хост-процесс для служб Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\system32\svchost.exe -k LocalService" Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:19:28" ChangeDate="14.07.2009 06:14:41" MD5="54A47F6B5E09A77E61649109C6A08866" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="svchost.exe.mui" />
    <ITEM PID="864" File="c:\windows\system32\svchost.exe" CheckResult="0" Descr="Хост-процесс для служб Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\system32\svchost.exe -k RPCSS" Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:19:28" ChangeDate="14.07.2009 06:14:41" MD5="54A47F6B5E09A77E61649109C6A08866" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="svchost.exe.mui" />
    <ITEM PID="1368" File="c:\windows\system32\svchost.exe" CheckResult="0" Descr="Хост-процесс для служб Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\system32\svchost.exe -k NetworkService" Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:19:28" ChangeDate="14.07.2009 06:14:41" MD5="54A47F6B5E09A77E61649109C6A08866" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="svchost.exe.mui" />
    <ITEM PID="764" File="c:\windows\system32\svchost.exe" CheckResult="0" Descr="Хост-процесс для служб Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\system32\svchost.exe -k DcomLaunch" Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:19:28" ChangeDate="14.07.2009 06:14:41" MD5="54A47F6B5E09A77E61649109C6A08866" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="svchost.exe.mui" />
    <ITEM PID="1004" File="c:\windows\system32\svchost.exe" CheckResult="0" Descr="Хост-процесс для служб Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted" Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:19:28" ChangeDate="14.07.2009 06:14:41" MD5="54A47F6B5E09A77E61649109C6A08866" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="svchost.exe.mui" />
    <ITEM PID="1040" File="c:\windows\system32\svchost.exe" CheckResult="0" Descr="Хост-процесс для служб Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted" Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:19:28" ChangeDate="14.07.2009 06:14:41" MD5="54A47F6B5E09A77E61649109C6A08866" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="svchost.exe.mui" />
    <ITEM PID="2088" File="c:\windows\system32\taskhost.exe" CheckResult="0" Descr="Хост-процесс для задач Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine=""taskhost.exe"" Size="49152" Attr="rsAh" CreateDate="14.07.2009 04:19:25" ChangeDate="14.07.2009 06:14:42" MD5="8F4F5A5C1BAE72CE6EAEEA1CA3F98CA2" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="taskhost.exe.mui" />
    <ITEM PID="3344" File="c:\program files\total commander\totalcmd.exe" CheckResult="0" Descr="Total Commander 32 bit international version, file manager replacement for Windows" LegalCopyright="Copyright © 1993-2007 Christian Ghisler" Hidden="0" CmdLine=""C:\Program Files\Total Commander\Totalcmd.exe"" Size="1079752" Attr="rsAh" CreateDate="01.10.2009 20:44:49" ChangeDate="06.09.2007 22:00:00" MD5="EA4E9564B41AF2C69DB751288545403D" Vendor="C. Ghisler & Co." Product="Total Commander" />
    <ITEM PID="1804" File="c:\program files\pinnacle\shared files\programs\usbtip\usbtip.exe" CheckResult="0" Descr="Pinnacle USB Tip - for Multi Media eXtensions" LegalCopyright="© 2003-2007 by Pinnacle Systems GmbH" Hidden="0" CmdLine=""C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe"" Size="199752" Attr="rsAh" CreateDate="20.02.2007 11:07:40" ChangeDate="20.02.2007 11:07:40" MD5="F7D68D8E70EA376713A39395664793CA" Vendor="Pinnacle Systems GmbH" Product="Pinnacle USB Tip" OFN="USBTip.exe" />
    <ITEM PID="512" File="c:\windows\system32\wininit.exe" CheckResult="0" Descr="Автозагрузка приложений Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="wininit.exe" Size="96256" Attr="rsAh" CreateDate="14.07.2009 04:36:49" ChangeDate="14.07.2009 06:14:45" MD5="B5C5DCAD3899512020D135600129D665" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="WinInit.exe.mui" />
    <ITEM PID="692" File="c:\windows\system32\winlogon.exe" CheckResult="0" Descr="Программа входа в систему Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="winlogon.exe" Size="285696" Attr="rsAh" CreateDate="14.07.2009 04:37:04" ChangeDate="14.07.2009 06:14:45" MD5="8EC6A4AB12B8F3759E21F8E3A388F2CF" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="WINLOGON.EXE.MUI" />
    <ITEM PID="3852" File="c:\windows\system32\wudfhost.exe" CheckResult="0" Descr="Windows Driver Foundation (WDF) - хост-процесс инфраструктуры драйверов пользовательского режима" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine=""C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-5655b0ba-4ffd-4a34-8daa-5eae8f6db91c -SystemEventPortName:HostProcess-538224da-1a44-49fd-a392-0686f74cbb58 -IoCancelEventPortName:HostProcess-9fe55f23-a6d7-4f0b-9e05-1e85c5b62f31 -NonStateChangingEventPortName:HostProcess-435ed4db-f255-4139-b703-90aea2954fc8 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:92ff1cc6-3db8-4b69-8a2c-fa34170fa87f" Size="195584" Attr="rsAh" CreateDate="14.07.2009 04:50:16" ChangeDate="14.07.2009 06:14:50" MD5="C6E7AB7E798167095987EBCCB76DF61B" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="WUDFHost.exe.mui" />
    </PROCESS>
    - <DLL>
    <ITEM File="C:\Windows\system32\xkgnrjf.dll" CheckResult="-1" Descr="" LegalCopyright="" UsedBy="1844,1288,932,1704,1796,1520,432,1604,1628,2192,2236,1788,3528,1316,1836,3796,576,2324,1852,3496,3400,3368,1860,2380,3620,2932,3776,3060,560,1504,1072,2912,2052,1252,864,1368,764,1004,1040,2088,3344,1804,512,692,3852" Hidden="0" Size="53248" Attr="rsAh" CreateDate="22.02.2012 20:46:45" ChangeDate="22.02.2012 20:46:58" MD5="1A31934DA3BF872E21DF6122834BD48C" />
    <ITEM File="C:\Program Files\Alwil Software\Avast5\defs\12022101\aswScan.dll" CheckResult="-1" Descr="Low level antivirus engine" LegalCopyright="Copyright (c) 2012 AVAST Software" UsedBy="1704" Hidden="0" Size="100912" Attr="rsAh" CreateDate="22.02.2012 08:31:20" ChangeDate="21.02.2012 21:17:46" MD5="5D7FF235FB73511AD27CC84AFFF229D9" Vendor="AVAST Software" Product="avast! Antivirus" OFN="aswScan.dll" />
    <ITEM File="C:\Program Files\Alwil Software\Avast5\defs\12022101\aswFiDb.dll" CheckResult="-1" Descr="File information database access" LegalCopyright="Copyright (c) 2012 AVAST Software" UsedBy="1704" Hidden="0" Size="394968" Attr="rsAh" CreateDate="22.02.2012 08:31:20" ChangeDate="21.02.2012 21:17:47" MD5="EC0897691AA5603C8BC4243266923C73" Vendor="AVAST Software" Product="avast! Antivirus" OFN="aswFiDb.dll" />
    <ITEM File="C:\Program Files\Alwil Software\Avast5\defs\12022101\algo.dll" CheckResult="-1" Descr="" LegalCopyright="" UsedBy="1704" Hidden="0" Size="1714176" Attr="rsAh" CreateDate="22.02.2012 08:31:21" ChangeDate="22.02.2012 02:39:11" MD5="2719AC957DDD25C4B9BBFEA4EBB11C18" />
    <ITEM File="C:\Program Files\UFS Explorer\dndcphp.dll" CheckResult="-1" Descr="dndcphp Module" LegalCopyright="Copyright 2007" UsedBy="1628" Hidden="0" Size="100416" Attr="rsAh" CreateDate="09.12.2011 13:59:29" ChangeDate="15.05.2008 15:21:44" MD5="7173DD477217E8E51B351948119D1EEA" Product="dndcphp Module" OFN="dndcphp.DLL" />
    </DLL>
    - <KERNELOBJ>
    <ITEM File="\Program Files\Alcohol 120\alcoholx.dll" CheckResult="-1" Base="10000000" MemSize="0A7000" Descr="" LegalCopyright="" />
    <ITEM File="C:\Windows\System32\Drivers\dump_atapi.sys" CheckResult="-1" Base="A0EB1000" MemSize="009000" Descr="" LegalCopyright="" />
    <ITEM File="C:\Windows\System32\Drivers\dump_dumpata.sys" CheckResult="-1" Base="A0EA6000" MemSize="00B000" Descr="" LegalCopyright="" />
    <ITEM File="C:\Windows\System32\Drivers\dump_dumpfve.sys" CheckResult="-1" Base="A0EBA000" MemSize="011000" Descr="" LegalCopyright="" />
    <ITEM File="C:\Windows\System32\Drivers\spqb.sys" CheckResult="-1" Base="8C03F000" MemSize="101000" Descr="" LegalCopyright="" />
    <ITEM File="C:\Windows\system32\DRIVERS\winachcf.sys" CheckResult="-1" Base="91AC4000" MemSize="0BB000" Descr="Modem" LegalCopyright="Copyright© Conexant Systems, Inc. 2000" Size="948460" Attr="rsAh" CreateDate="21.05.2011 21:39:50" ChangeDate="11.09.2000 15:55:56" MD5="642DD7C0E1FF226336826F01DA399D30" Vendor="Conexant" Product="Modem" OFN="winachcf.sys" />
    </KERNELOBJ>
    - <Service>
    <ITEM File="C:\Windows\System32\SUPDSvc.exe" Name="Samsung UPD Service" CheckResult="-1" Type="16" State="1" Size="131888" Attr="rsAh" CreateDate="24.08.2011 13:03:16" ChangeDate="09.08.2010 07:04:02" MD5="BD26A150DC292913E48EE2B950372DFD" Vendor="Samsung Electronics CO., LTD." Product="Samsung UPD" OFN="SUPDSvc.exe" />
    </Service>
    - <Drivers>
    <ITEM File="C:\Windows\System32\Drivers\sptd.sys" Name="sptd" CheckResult="-1" Type="1" State="4" Size="721904" Attr="rsAh" CreateDate="18.09.2011 11:08:21" ChangeDate="18.09.2011 11:08:21" MD5="" />
    <ITEM File="C:\Windows\system32\DRIVERS\winachcf.sys" Name="Winachcf" CheckResult="-1" Type="1" State="4" Size="948460" Attr="rsAh" CreateDate="21.05.2011 21:39:50" ChangeDate="11.09.2000 15:55:56" MD5="642DD7C0E1FF226336826F01DA399D30" Vendor="Conexant" Product="Modem" OFN="winachcf.sys" />
    <ITEM File="C:\Windows\system32\Drivers\DgiVecp.sys" Name="DgiVecp" CheckResult="-1" Type="1" State="1" />
    <ITEM File="D:\CDriver.sys" Name="MSICDSetup" CheckResult="-1" Type="1" State="1" />
    </Drivers>
    - <AUTORUN>
    <ITEM File="ACDV.dll" CheckResult="-1" Enabled="1" Type="REG" X1="HKEY_LOCAL_MACHINE" X2="Software\Microsoft\Windows NT\CurrentVersion\Drivers32" X3="VIDC.ACDV" />
    <ITEM File="C:\Program Files\UFS Explorer\dndcphp.dll" CheckResult="-1" Enabled="1" Type="REG" Size="100416" Attr="rsAh" CreateDate="09.12.2011 13:59:29" ChangeDate="15.05.2008 15:21:44" MD5="7173DD477217E8E51B351948119D1EEA" Product="dndcphp Module" OFN="dndcphp.DLL" X1="HKEY_LOCAL_MACHINE" X2="Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved" X3="{2A924BCB-C687-4B2C-998C-6B65A81CD076}" />
    <ITEM File="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\kabauth.exe" CheckResult="-1" Enabled="1" Type="FILE" Size="877568" Attr="rsAh" CreateDate="01.10.2009 19:43:55" ChangeDate="03.03.2011 22:38:48" MD5="26A0D07F0D5120DAD14086A8D9786448" Vendor="КАБiNET" Product="Авторизатор КАБiNET" OFN="kabauth.exe" X1="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\" X2="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\kabauth.exe" X3="" />
    <ITEM File="C:\Windows\system32\psxss.exe" CheckResult="-1" Enabled="-1" Type="REG" X1="HKEY_LOCAL_MACHINE" X2="System\CurrentControlSet\Control\Session Manager\SubSystems" X3="Posix" />
    <ITEM File="C:\Windows\system32\x264vfw.dll" CheckResult="-1" Enabled="1" Type="REG" Size="597504" Attr="rsAh" CreateDate="06.01.2008 01:21:12" ChangeDate="06.01.2008 01:21:12" MD5="B96E89E478E591880A2939B0BC34AE47" X1="HKEY_LOCAL_MACHINE" X2="Software\Microsoft\Windows NT\CurrentVersion\Drivers32" X3="vidc.x264" />
    <ITEM File="C:\Windows\system32\xkgnrjf.dll" CheckResult="-1" Enabled="-1" Type="REG" Size="53248" Attr="rsAh" CreateDate="22.02.2012 20:46:45" ChangeDate="22.02.2012 20:46:58" MD5="1A31934DA3BF872E21DF6122834BD48C" X1="HKEY_LOCAL_MACHINE" X2="Software\Microsoft\Windows NT\CurrentVersion\Windows" X3="AppInit_DLLs" />
    <ITEM File="E:\Program Files\Download Master\dmaster.exe" CheckResult="-1" Enabled="1" Type="REG" X1="HKEY_CURRENT_USER" X2="Software\Microsoft\Windows\CurrentVersion\Run" X3="Download Master" />
    <ITEM File="c:\Program Files\Common Files\Microsoft Shared\DW\DW.EXE" CheckResult="-1" Enabled="-1" Type="REG" X1="HKEY_LOCAL_MACHINE" X2="SYSTEM\CurrentControlSet\Services\Eventlog\Application\Microsoft Visual Studio Tools for Applications" X3="EventMessageFile" />
    <ITEM File="progman.exe" CheckResult="-1" Enabled="1" Type="REG" X1="HKEY_LOCAL_MACHINE" X2="Software\Microsoft\Windows NT\CurrentVersion\WOW\boot" X3="shell" />
    <ITEM File="vgafix.fon" CheckResult="-1" Enabled="1" Type="REG" X1="HKEY_LOCAL_MACHINE" X2="Software\Microsoft\Windows NT\CurrentVersion\WOW\boot" X3="fixedfon.fon" />
    <ITEM File="vgaoem.fon" CheckResult="-1" Enabled="1" Type="REG" X1="HKEY_LOCAL_MACHINE" X2="Software\Microsoft\Windows NT\CurrentVersion\WOW\boot" X3="oemfonts.fon" />
    <ITEM File="vgasys.fon" CheckResult="-1" Enabled="1" Type="REG" X1="HKEY_LOCAL_MACHINE" X2="Software\Microsoft\Windows NT\CurrentVersion\WOW\boot" X3="fonts.fon" />
    </AUTORUN>
    - <BHO>
    <ITEM File="E:\PROGRA~1\DOWNLO~1\dmiehlp.dll" CheckResult="-1" Enabled="1" BHOType="1" RegKey="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" CLSID="{9961627E-4059-41B4-8E0E-A7D6B3854ADF}" Descr="" LegalCopyright="" />
    <ITEM File="" CheckResult="-1" Enabled="1" BHOType="3" RegKey="HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions" CLSID="{2670000A-7350-4f3c-8081-5663EE0C6C49}" Descr="" LegalCopyright="" />
    <ITEM File="" CheckResult="-1" Enabled="1" BHOType="3" RegKey="HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions" CLSID="{92780B25-18CC-41C8-B9BE-3C9C571A8263}" Descr="" LegalCopyright="" />
    </BHO>
    - <ExplorerExt>
    <ITEM File="C:\Program Files\UFS Explorer\dndcphp.dll" CheckResult="-1" Enabled="1" ExtType="1" ExtName="SysDev VirtualDrag Copy Helper" RegKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved" CLSID="{2A924BCB-C687-4B2C-998C-6B65A81CD076}" Descr="dndcphp Module" LegalCopyright="Copyright 2007" Size="100416" Attr="rsAh" CreateDate="09.12.2011 13:59:29" ChangeDate="15.05.2008 15:21:44" MD5="7173DD477217E8E51B351948119D1EEA" Product="dndcphp Module" OFN="dndcphp.DLL" />
    </ExplorerExt>
    <PrintEXT />
    <TaskScheduler />
    - <SPI>
    <ITEM File="C:\Windows\system32\NLAapi.dll" CheckResult="-1" SPIType="1" SPINaim="@%SystemRoot%\system32\nlasvc.dll,-1000" Descr="Network Location Awareness 2" LegalCopyright="© Microsoft Corporation. All rights reserved." Size="51712" Attr="rsAh" CreateDate="14.07.2009 04:53:54" ChangeDate="14.07.2009 06:16:03" MD5="045DB4EAB4FBD23210E85ECC3F464A2E" Vendor="Microsoft Corporation" Product="Microsoft® Windows® Operating System" OFN="nlaapi.dll" />
    <ITEM File="C:\Windows\System32\mswsock.dll" CheckResult="-1" SPIType="1" SPINaim="@%SystemRoot%\system32\wshtcpip.dll,-60103" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\System32\winrnr.dll" CheckResult="-1" SPIType="1" SPINaim="NTDS" Descr="LDAP RnR Provider DLL" LegalCopyright="© Microsoft Corporation. All rights reserved." Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:37:57" ChangeDate="14.07.2009 06:16:19" MD5="5DF5D8CFD9B9573FA3B2C89D9061A240" Vendor="Microsoft Corporation" Product="Microsoft® Windows® Operating System" OFN="winrnr" />
    <ITEM File="C:\Windows\system32\napinsp.dll" CheckResult="-1" SPIType="1" SPINaim="@%SystemRoot%\system32\napinsp.dll,-1000" Descr="Поставщик оболочки совместимости для имен электронной почты" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="52224" Attr="rsAh" CreateDate="14.07.2009 04:54:55" ChangeDate="14.07.2009 06:16:02" MD5="0B7E85364CB878E2AD531DB7B601A9E5" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="napinsp.dll.mui" />
    <ITEM File="C:\Windows\system32\pnrpnsp.dll" CheckResult="-1" SPIType="1" SPINaim="@%SystemRoot%\system32\pnrpnsp.dll,-1000" Descr="Поставщик пространства имен PNRP" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="65024" Attr="rsAh" CreateDate="14.07.2009 04:55:50" ChangeDate="14.07.2009 06:16:12" MD5="5CF640EDDB1E40A5AB1BB743BCDEC610" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="pnrpnsp.dll.mui" />
    <ITEM File="C:\Windows\system32\pnrpnsp.dll" CheckResult="-1" SPIType="1" SPINaim="@%SystemRoot%\system32\pnrpnsp.dll,-1001" Descr="Поставщик пространства имен PNRP" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="65024" Attr="rsAh" CreateDate="14.07.2009 04:55:50" ChangeDate="14.07.2009 06:16:12" MD5="5CF640EDDB1E40A5AB1BB743BCDEC610" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="pnrpnsp.dll.mui" />
    <ITEM File="C:\Windows\system32\wshbth.dll" CheckResult="-1" SPIType="1" SPINaim="Пространство имен Bluetooth" Descr="Windows Sockets Helper DLL" LegalCopyright="© Microsoft Corporation. All rights reserved." Size="35840" Attr="rsAh" CreateDate="14.07.2009 04:51:30" ChangeDate="14.07.2009 06:16:20" MD5="3A2BB97D54A2189C9900A735C0531B59" Vendor="Microsoft Corporation" Product="Microsoft® Windows® Operating System" OFN="wshbth.dll" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wshtcpip.dll,-60100" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wshtcpip.dll,-60101" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wshtcpip.dll,-60102" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wship6.dll,-60100" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wship6.dll,-60101" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wship6.dll,-60102" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wshqos.dll,-100" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wshqos.dll,-101" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wshqos.dll,-102" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wshqos.dll,-103" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD RfComm [Bluetooth]" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{089FA433-DF12-479B-88D3-0FF7D9B77A5E}] SEQPACKET 15" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{089FA433-DF12-479B-88D3-0FF7D9B77A5E}] DATAGRAM 15" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{F8393FB8-2EE1-4F06-8C1F-F3799E7DE1DD}] SEQPACKET 13" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{F8393FB8-2EE1-4F06-8C1F-F3799E7DE1DD}] DATAGRAM 13" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{D0DCE0D0-5ACA-4564-8A03-9CFADE8404C6}] SEQPACKET 10" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{D0DCE0D0-5ACA-4564-8A03-9CFADE8404C6}] DATAGRAM 10" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{5D35FA5D-F7E3-4919-B91A-8C024FB1311A}] SEQPACKET 8" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{5D35FA5D-F7E3-4919-B91A-8C024FB1311A}] DATAGRAM 8" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{CB3B0359-1C44-46FE-8A10-82830D8B7618}] SEQPACKET 5" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{CB3B0359-1C44-46FE-8A10-82830D8B7618}] DATAGRAM 5" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{F04E95CD-E965-47B9-8BA6-1DDB0DF522B5}] SEQPACKET 1" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{F04E95CD-E965-47B9-8BA6-1DDB0DF522B5}] DATAGRAM 1" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{28FBBDEF-54F9-4E06-B742-253C7E16A0D3}] SEQPACKET 12" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{28FBBDEF-54F9-4E06-B742-253C7E16A0D3}] DATAGRAM 12" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{1A691607-ACD2-45BA-AC88-58443D6EBFDA}] SEQPACKET 7" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{1A691607-ACD2-45BA-AC88-58443D6EBFDA}] DATAGRAM 7" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{AD0080CE-31B2-467C-BD0B-1BF8F039F80C}] SEQPACKET 0" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{AD0080CE-31B2-467C-BD0B-1BF8F039F80C}] DATAGRAM 0" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{089FA433-DF12-479B-88D3-0FF7D9B77A5E}] SEQPACKET 16" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{089FA433-DF12-479B-88D3-0FF7D9B77A5E}] DATAGRAM 16" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{F8393FB8-2EE1-4F06-8C1F-F3799E7DE1DD}] SEQPACKET 14" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{F8393FB8-2EE1-4F06-8C1F-F3799E7DE1DD}] DATAGRAM 14" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{8A676430-64FF-4A76-9054-BC7169F8697E}] SEQPACKET 3" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{8A676430-64FF-4A76-9054-BC7169F8697E}] DATAGRAM 3" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{D0DCE0D0-5ACA-4564-8A03-9CFADE8404C6}] SEQPACKET 11" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{D0DCE0D0-5ACA-4564-8A03-9CFADE8404C6}] DATAGRAM 11" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{5D35FA5D-F7E3-4919-B91A-8C024FB1311A}] SEQPACKET 9" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{5D35FA5D-F7E3-4919-B91A-8C024FB1311A}] DATAGRAM 9" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{CB3B0359-1C44-46FE-8A10-82830D8B7618}] SEQPACKET 6" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{CB3B0359-1C44-46FE-8A10-82830D8B7618}] DATAGRAM 6" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{598EF0FB-5126-40BC-BCAA-75EB7B45AF98}] SEQPACKET 4" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{598EF0FB-5126-40BC-BCAA-75EB7B45AF98}] DATAGRAM 4" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{F04E95CD-E965-47B9-8BA6-1DDB0DF522B5}] SEQPACKET 2" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{F04E95CD-E965-47B9-8BA6-1DDB0DF522B5}] DATAGRAM 2" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    </SPI>
    - <DPF>
    <ITEM File="C:\PROGRA~1\MICROS~2\Office12\IEAWSDC.DLL" CheckResult="-1" Enabled="1" RegKey="SOFTWARE\Microsoft\Code Store Database\Distribution Units" CLSID="{02BCC737-B171-4746-94C9-0D8A0B2C0089}" CodeBase="http://office.microsoft.com/sites/production/ieawsdc32.cab" Descr="" LegalCopyright="" Size="190464" Attr="rsAh" CreateDate="14.12.2010 03:18:26" ChangeDate="14.12.2010 03:18:26" MD5="0016403DFC940F6DF21445414B26C044" />
    </DPF>
    <CPL />
    <ActiveSetup />
    <HOSTS />
    - <ProtocolExt>
    <ITEM File="mscoree.dll" CheckResult="-1" Enabled="1" RegKey="SOFTWARE\Classes\PROTOCOLS\Filter\application/octet-stream" CLSID="{1E66F26B-79EE-11D2-8710-00C04F79ED0D}" Descr="Microsoft .NET Runtime Execution Engine" LegalCopyright="© Microsoft Corporation. All rights reserved." />
    <ITEM File="mscoree.dll" CheckResult="-1" Enabled="1" RegKey="SOFTWARE\Classes\PROTOCOLS\Filter\application/x-complus" CLSID="{1E66F26B-79EE-11D2-8710-00C04F79ED0D}" Descr="Microsoft .NET Runtime Execution Engine" LegalCopyright="© Microsoft Corporation. All rights reserved." />
    <ITEM File="mscoree.dll" CheckResult="-1" Enabled="1" RegKey="SOFTWARE\Classes\PROTOCOLS\Filter\application/x-msdownload" CLSID="{1E66F26B-79EE-11D2-8710-00C04F79ED0D}" Descr="Microsoft .NET Runtime Execution Engine" LegalCopyright="© Microsoft Corporation. All rights reserved." />
    </ProtocolExt>
    - <SuspFiles>
    <ITEM File="\SystemRoot\System32\Drivers\aswSP.SYS" VirType="4" Descr="Перехватчик KernelMode" />
    </SuspFiles>
    - <RK_UM>
    <ITEM DLL="ws2_32.dll" FNaim="WSAConnect" FIndx="28" HookPtr="7786BB9B" HookType="2" />
    <ITEM DLL="ws2_32.dll" FNaim="connect" FIndx="135" HookPtr="778648BE" HookType="2" />
    </RK_UM>
    - <RK_KM>
    <ITEM File="\SystemRoot\System32\Drivers\aswSP.SYS" FNaim="NtCreateProcessEx" FIndx="80" HookPtr="83722E52" HookType="2" />
    <ITEM File="\SystemRoot\System32\Drivers\aswSP.SYS" FNaim="NtCreateSection" FIndx="84" HookPtr="83678CE3" HookType="2" />
    <ITEM File="\SystemRoot\System32\Drivers\aswSP.SYS" FNaim="NtLoadDriver" FIndx="155" HookPtr="835E9279" HookType="2" />
    <ITEM File="\SystemRoot\System32\Drivers\aswSP.SYS" FNaim="" FIndx="1076" HookPtr="83473128" HookType="3" />
    <ITEM File="\SystemRoot\System32\Drivers\aswSP.SYS" FNaim="" FIndx="1180" HookPtr="83473128" HookType="3" />
    </RK_KM>
    - <RK_IRP>
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="0" HookPtr="85D451F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="2" HookPtr="85D451F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="4" HookPtr="85D451F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="5" HookPtr="85D451F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="6" HookPtr="85D451F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="7" HookPtr="85D451F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="8" HookPtr="85D451F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="10" HookPtr="85D451F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="11" HookPtr="85D451F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="12" HookPtr="85D451F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="13" HookPtr="85D451F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="14" HookPtr="85D451F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="17" HookPtr="85D451F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="20" HookPtr="85D451F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="21" HookPtr="85D451F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="27" HookPtr="85D451F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="0" HookPtr="885ED1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="2" HookPtr="885ED1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="4" HookPtr="885ED1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="5" HookPtr="885ED1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="6" HookPtr="885ED1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="7" HookPtr="885ED1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="8" HookPtr="885ED1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="10" HookPtr="885ED1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="11" HookPtr="885ED1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="12" HookPtr="885ED1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="13" HookPtr="885ED1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="14" HookPtr="885ED1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="17" HookPtr="885ED1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="27" HookPtr="885ED1F8" />
    </RK_IRP>
    - <IPU>
    <ITEM Code="1" X1="TermService" X2="Службы удаленных рабочих столов" />
    <ITEM Code="1" X1="SSDPSRV" X2="Обнаружение SSDP" />
    <ITEM Code="1" X1="Schedule" X2="Планировщик заданий" />
    <ITEM Code="2" />
    <ITEM Code="3" />
    <ITEM Code="5" />
    <ITEM Code="8" X1="-1" />
    </IPU>
    - <WIZARD-TSW>
    <ITEM ID="58" Level="3" Fixed="0" />
    <ITEM ID="59" Level="3" Fixed="0" />
    <ITEM ID="61" Level="2" Fixed="0" />
    </WIZARD-TSW>
    </AVZ>
    <?xml version="1.0" encoding="windows-1251" ?>
    - <AVZ Version="4.37" LogDate="22.02.2012 22:01:45" WinDir="C:\Windows\" OS_MjVer="6" OS_MiVer="1" OS_Build="7600" BootMode="0" OS_CSDV="" ProfileDir="C:\Users\Админ" Session="Console" Domain="WORKGROUP" IsWow64="False" IsAdmin="True" Base64Mode="False" IsSRDisabled="False" MainDBDate="22.02.2012" CompHash="D7850C8F1833BC789AC498C30FC5B6E1">
    - <PROCESS>
    <ITEM PID="316" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="408" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="500" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1128" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1472" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1548" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1596" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1840" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1856" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="384" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="432" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1528" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2152" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2316" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2328" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2532" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2756" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3124" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3424" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3548" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3748" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3772" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3812" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="4072" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2356" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2592" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1752" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1104" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3820" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3932" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="404" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="928" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="652" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2380" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1064" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2060" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2116" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2020" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3936" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2200" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2340" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3068" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3852" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2352" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1264" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2872" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="400" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1844" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3388" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2112" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2992" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2204" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3504" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3348" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2568" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1432" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3368" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2084" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="220" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="4060" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2824" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3916" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1096" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3460" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3672" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1836" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3896" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3884" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3384" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1332" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3556" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1368" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3940" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="4076" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3660" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2100" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3280" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3408" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1588" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3304" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2580" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2996" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3836" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1584" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1236" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3700" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1500" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2796" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3500" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2604" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2496" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3428" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2404" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="612" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2208" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3924" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2780" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="912" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2400" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2912" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2868" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="4032" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="4048" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1252" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1148" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1460" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2980" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1260" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1224" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1140" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1636" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1820" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2716" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3084" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3220" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2928" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3800" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2224" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3876" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="1832" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3184" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2016" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2768" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="428" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="2620" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3728" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3808" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="3272" File="" CheckResult="-1" Descr="" LegalCopyright="" Hidden="3" CmdLine="" />
    <ITEM PID="756" File="c:\program files\2gis\3.0\2gistraynotifier.exe" CheckResult="0" Descr="Модуль оповещений 2ГИС" LegalCopyright="© ООО «ДубльГИС», 2010-2011" Hidden="0" CmdLine=""C:\Program Files\2gis\3.0\2GISTrayNotifier.exe" -delayed_start" Size="3764064" Attr="rsAh" CreateDate="30.11.2011 00:07:02" ChangeDate="30.11.2011 00:07:02" MD5="7AD6B7B0CF5D26EFBA1AB6D31500C867" Vendor="ООО ДубльГИС" Product="2ГИС" OFN="2GISTrayNotifier.exe" />
    <ITEM PID="1384" File="c:\windows\system32\atieclxx.exe" CheckResult="0" Descr="AMD External Events Client Module" LegalCopyright="Copyright © 2008-2009 AMD" Hidden="0" CmdLine="atieclxx" Size="401408" Attr="rsAh" CreateDate="08.09.2011 22:30:10" ChangeDate="08.09.2011 22:30:10" MD5="81A9656D4E6A540ABDAB6C3319C88454" Vendor="AMD" Product="AMD External Events" OFN="ATIECLXX.EXE" />
    <ITEM PID="836" File="c:\windows\system32\atiesrxx.exe" CheckResult="0" Descr="AMD External Events Service Module" LegalCopyright="Copyright © 2008-2009 AMD" Hidden="0" CmdLine="C:\Windows\system32\atiesrxx.exe" Size="176128" Attr="rsAh" CreateDate="08.09.2011 22:29:46" ChangeDate="08.09.2011 22:29:46" MD5="4B808991F51D50BC6A3A3C8541D52748" Vendor="AMD" Product="AMD External Events" OFN="ATIESRXX.EXE" />
    <ITEM PID="1700" File="c:\program files\alwil software\avast5\avastsvc.exe" CheckResult="0" Descr="avast! Service" LegalCopyright="Copyright (c) 2010 AVAST Software" Hidden="0" CmdLine=""C:\Program Files\Alwil Software\Avast5\AvastSvc.exe"" Size="40384" Attr="rsAh" CreateDate="01.11.2010 12:38:45" ChangeDate="07.09.2010 21:11:59" MD5="ACB544D7254F366DFB48F380BC36CD25" Vendor="AVAST Software" Product="avast! Antivirus" OFN="AvastSvc.exe" />
    <ITEM PID="1796" File="c:\program files\alwil software\avast5\avastui.exe" CheckResult="0" Descr="avast! Antivirus" LegalCopyright="Copyright (c) 2010 AVAST Software" Hidden="0" CmdLine=""C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui" Size="2838912" Attr="rsAh" CreateDate="01.11.2010 12:38:45" ChangeDate="07.09.2010 21:12:02" MD5="6C1B31F5C16E03153F0037AC6C451FFD" Vendor="AVAST Software" Product="avast! Antivirus" OFN="AvastUi.exe" />
    <ITEM PID="2956" File="g:\distrib\antivirus\avz4\avz.exe" CheckResult="0" Descr="Антивирусная утилита AVZ" LegalCopyright="Антивирусная утилита AVZ" Hidden="0" CmdLine=""G:\DISTRIB\Antivirus\avz4\avz.exe"" Size="764416" Attr="rsAh" CreateDate="17.10.2011 16:40:24" ChangeDate="22.02.2012 20:53:52" MD5="B0BC3E0F7161842404BAB77EEA9E965B" Vendor="Лаборатория Касперского, 2007-2011" Product="Антивирусная утилита AVZ" OFN="avz.exe" />
    <ITEM PID="2184" File="c:\program files\common files\logishrd\lqcvfx\cocimanager.exe" CheckResult="0" Descr="" LegalCopyright="" Hidden="0" CmdLine=""C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe" -Embedding" Size="560472" Attr="rsAh" CreateDate="14.10.2009 13:34:18" ChangeDate="14.10.2009 13:34:18" MD5="98D472ECFBC0E8ED25A0483E765F42B6" />
    <ITEM PID="1056" File="c:\windows\system32\ctfmon.exe" CheckResult="0" Descr="CTF-загрузчик" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="ctfmon.exe" Size="8704" Attr="rsAh" CreateDate="14.07.2009 04:26:10" ChangeDate="14.07.2009 06:14:16" MD5="4A3CDCEF8ED41B221F3DBEF5792FB52D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="CTFMON.EXE.MUI" />
    <ITEM PID="656" File="c:\windows\system32\ctfmon.exe" CheckResult="0" Descr="CTF-загрузчик" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="ctfmon.exe" Size="8704" Attr="rsAh" CreateDate="14.07.2009 04:26:10" ChangeDate="14.07.2009 06:14:16" MD5="4A3CDCEF8ED41B221F3DBEF5792FB52D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="CTFMON.EXE.MUI" />
    <ITEM PID="1556" File="c:\windows\system32\dwm.exe" CheckResult="0" Descr="Диспетчер окон рабочего стола" LegalCopyright="© Корпорация Майкрософт. все права защищены." Hidden="0" CmdLine=""C:\Windows\system32\Dwm.exe"" Size="92672" Attr="rsAh" CreateDate="14.07.2009 04:24:23" ChangeDate="14.07.2009 06:14:19" MD5="505BF4D1CADEB8D4F8BCD08D944DE25D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="dwm.exe.mui" />
    <ITEM PID="1576" File="c:\windows\explorer.exe" CheckResult="0" Descr="Проводник" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\Explorer.EXE" Size="2613248" Attr="rsAh" CreateDate="14.07.2009 04:41:14" ChangeDate="14.07.2009 06:14:20" MD5="15BC38A7492BEFE831966ADB477CF76F" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="EXPLORER.EXE.MUI" />
    <ITEM PID="1100" File="c:\program files\ati technologies\ati.ace\fuel\fuel.service.exe" CheckResult="0" Descr="???»N??¶?±?° Fusion Utility Service" LegalCopyright="Copyright A© 2009-2010 Advanced Micro Devices, Inc. All Rights Reserved." Hidden="0" CmdLine=""C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService" Size="291840" Attr="rsAh" CreateDate="08.09.2011 13:41:20" ChangeDate="08.09.2011 13:41:20" MD5="65433E648E685B5A9DD69598BFC21ACE" Vendor="Advanced Micro Devices, Inc." Product="FusionUtilityService" OFN="FusionUtilityService.exe.mui" />
    <ITEM PID="1044" File="c:\program files\gene6 ftp server\g6ftpserver.exe" CheckResult="0" Descr="Gene6 File Transfer Protocol Server" LegalCopyright="Copyright ©1998-2007 Gene6, Sarl - All rights reserved" Hidden="0" CmdLine=""C:\Program Files\Gene6 FTP Server\G6FTPSERVER.EXE"" Size="470016" Attr="rsAh" CreateDate="22.10.2007 12:29:30" ChangeDate="22.10.2007 12:29:30" MD5="FBECB43F0062D1EFB0305504D7D7AE2C" Vendor="Gene6" />
    <ITEM PID="2140" File="c:\program files\gene6 ftp server\g6ftptray.exe" CheckResult="0" Descr="Gene6 FTP Server Tray Monitor" LegalCopyright="Copyright ©1998-2007 Gene6, Sarl - All rights reserved" Hidden="0" CmdLine=""C:\Program Files\Gene6 FTP Server\G6FTPTray.exe"" Size="78336" Attr="rsAh" CreateDate="05.02.2007 00:00:00" ChangeDate="05.02.2007 00:00:00" MD5="C30C5993863E079EB1A4C8A95EB1FB3B" Vendor="Gene6" />
    <ITEM PID="1788" File="c:\program files\microsoft office\office12\groovemonitor.exe" CheckResult="0" Descr="GrooveMonitor Utility" LegalCopyright="© 2006 Microsoft Corporation. All rights reserved." Hidden="0" CmdLine=""C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"" Size="31016" Attr="rsAh" CreateDate="27.10.2006 00:47:42" ChangeDate="27.10.2006 00:47:42" MD5="38D198A2DD54A67120040566A38103BA" Vendor="Microsoft Corporation" Product="GrooveMonitor Utility" OFN="GrooveMonitor.exe" />
    <ITEM PID="2908" File="c:\program files\internet explorer\iexplore.exe" CheckResult="0" Descr="Internet Explorer" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine=""C:\Program Files\Internet Explorer\iexplore.exe"" Size="673048" Attr="rsAh" CreateDate="14.07.2009 04:43:32" ChangeDate="14.07.2009 06:17:29" MD5="2C32E3E596CFE660353753EABEFB0540" Vendor="Microsoft Corporation" Product="Windows® Internet Explorer" OFN="IEXPLORE.EXE.MUI" />
    <ITEM PID="3768" File="c:\program files\internet explorer\iexplore.exe" CheckResult="0" Descr="Internet Explorer" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine=""C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:2908 CREDAT:79873" Size="673048" Attr="rsAh" CreateDate="14.07.2009 04:43:32" ChangeDate="14.07.2009 06:17:29" MD5="2C32E3E596CFE660353753EABEFB0540" Vendor="Microsoft Corporation" Product="Windows® Internet Explorer" OFN="IEXPLORE.EXE.MUI" />
    <ITEM PID="1864" File="c:\program files\common files\java\java update\jusched.exe" CheckResult="0" Descr="Java(TM) Update Scheduler" LegalCopyright="Copyright (C) 2004" Hidden="0" CmdLine=""C:\Program Files\Common Files\Java\Java Update\jusched.exe"" Size="254696" Attr="rsAh" CreateDate="09.06.2011 12:06:06" ChangeDate="09.06.2011 12:06:06" MD5="6E3245DF783E58375B3465F03274743E" Vendor="Sun Microsystems, Inc." Product="Java(TM) Platform SE Auto Updater 2 0" OFN="jusched.exe" />
    <ITEM PID="2216" File="c:\programdata\microsoft\windows\start menu\programs\startup\kabauth.exe" CheckResult="-1" Descr="Авторизатор КАБiNET" LegalCopyright="(c) КАБiNET. All rights reserved." Hidden="0" CmdLine=""C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\kabauth.exe"" Size="877568" Attr="rsAh" CreateDate="01.10.2009 19:43:55" ChangeDate="03.03.2011 22:38:48" MD5="26A0D07F0D5120DAD14086A8D9786448" Vendor="КАБiNET" Product="Авторизатор КАБiNET" OFN="kabauth.exe" />
    <ITEM PID="568" File="c:\windows\system32\lsass.exe" CheckResult="0" Descr="Local Security Authority Process" LegalCopyright="© Microsoft Corporation. All rights reserved." Hidden="0" CmdLine="C:\Windows\system32\lsass.exe" Size="22528" Attr="rsAh" CreateDate="14.07.2009 04:11:58" ChangeDate="14.07.2009 06:14:23" MD5="F42309C4191C506B71DB5D1126D26318" Vendor="Microsoft Corporation" Product="Microsoft® Windows® Operating System" OFN="lsass.exe" />
    <ITEM PID="2300" File="c:\program files\common files\logishrd\lvmvfm\lvprcsrv.exe" CheckResult="0" Descr="Logitech LVPrcSrv Module." LegalCopyright="(c) 1996-2009 Logitech. All rights reserved." Hidden="0" CmdLine=""C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe"" Size="154136" Attr="rsAh" CreateDate="07.10.2009 01:47:34" ChangeDate="07.10.2009 01:47:34" MD5="0DDFDCAA92C7F553328DB06BA599BEA9" Vendor="Logitech Inc." Product="Logitech Webcam Software" OFN="LVPrcSrv.exe" />
    <ITEM PID="1536" File="c:\program files\logitech\logitech webcam software\lws.exe" CheckResult="0" Descr="" LegalCopyright="" Hidden="0" CmdLine=""C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide" Size="2793304" Attr="rsAh" CreateDate="14.10.2009 13:36:56" ChangeDate="14.10.2009 13:36:56" MD5="2589FFE360BED8F824CBC6171CB5B874" />
    <ITEM PID="3652" File="c:\program files\pc connectivity solution\transports\nclmsbtsrvex.exe" CheckResult="0" Descr="Microsoft Bluetooth Media Server" LegalCopyright="Copyright (c) 2007-2010 Nokia. All Rights Reserved." Hidden="0" CmdLine="{ED810070-65B0-4096-8D29-8571D2377FBE}" Size="140288" Attr="rsAh" CreateDate="11.05.2010 10:16:34" ChangeDate="11.05.2010 10:16:34" MD5="871E1E0FAE1EA1D1FCF4DDC8C9CC954D" Vendor="Nokia" Product="PC Connectivity Solution" OFN="MSBTSrv.exe" />
    <ITEM PID="3612" File="c:\program files\pc connectivity solution\transports\nclrssrv.exe" CheckResult="0" Descr="Serial Media Server" LegalCopyright="Copyright (c) 2007 - 2009 Nokia. All Rights Reserved." Hidden="0" CmdLine="{B05B8527-88E0-4866-8A94-06ACBDD368E6}" Size="120832" Attr="rsAh" CreateDate="27.10.2009 09:15:02" ChangeDate="27.10.2009 09:15:02" MD5="46A9D1FCC55EC6A62FE1D2ACE79C6CA8" Vendor="Nokia" Product="PC Connectivity Solution" OFN="NclRSSrv.exe" />
    <ITEM PID="3568" File="c:\program files\pc connectivity solution\transports\nclusbsrv.exe" CheckResult="0" Descr="USB Media Server" LegalCopyright="Copyright (c) 2007-2010 Nokia. All Rights Reserved." Hidden="0" CmdLine="{27BA932A-731E-4656-9CD5-55DB9B31BBEE}" Size="138240" Attr="rsAh" CreateDate="25.05.2010 11:37:12" ChangeDate="25.05.2010 11:37:12" MD5="DB0E77AB54F7B6EBC30081182D37F5A2" Vendor="Nokia" Product="PC Connectivity Solution" OFN="NclUSBSrv.exe" />
    <ITEM PID="2072" File="c:\program files\nokia\nokia pc suite 7\pcsuite.exe" CheckResult="0" Descr="Nokia Launch Application" LegalCopyright="Copyright (C) 2010 Nokia. All Rights Reserved." Hidden="0" CmdLine=""C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray" Size="1479680" Attr="rsAh" CreateDate="14.05.2010 09:32:30" ChangeDate="14.05.2010 09:32:30" MD5="B0A7458308E157ABF2B04555D12ACF4A" Vendor="Nokia" Product="PC Suite" OFN="PCSuite.exe" />
    <ITEM PID="2476" File="c:\program files\common files\protexis\license service\psiservice_2.exe" CheckResult="0" Descr="PsiService PsiService" LegalCopyright="© 2000-2005 Protexis Inc." Hidden="0" CmdLine=""C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe"" Size="189728" Attr="rsAh" CreateDate="10.03.2010 13:26:48" ChangeDate="10.03.2010 13:26:48" MD5="543A4EF0923BF70D126625B034EF25AF" Vendor="Protexis Inc." Product="PsiService System Service" OFN="PSIService.exe" />
    <ITEM PID="3136" File="c:\windows\system32\searchindexer.exe" CheckResult="0" Descr="Индексатор службы Microsoft Windows Search" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\system32\SearchIndexer.exe /Embedding" Size="428032" Attr="rsAh" CreateDate="14.07.2009 05:14:13" ChangeDate="14.07.2009 06:14:35" MD5="622D95520182F6D3D05310D5810CA8B3" Vendor="Microsoft Corporation" Product="Служба Windows® Search" OFN="SearchIndexer.exe.mui" />
    <ITEM PID="3040" File="c:\program files\pc connectivity solution\servicelayer.exe" CheckResult="0" Descr="ServiceLayer Module" LegalCopyright="Copyright © 2002-2010 Nokia. All Rights Reserved." Hidden="0" CmdLine=""C:\Program Files\PC Connectivity Solution\ServiceLayer.exe"" Size="613888" Attr="rsAh" CreateDate="25.05.2010 11:38:06" ChangeDate="25.05.2010 11:38:06" MD5="5C1858EEADD097912443AE8EFD44DA6B" Vendor="Nokia" Product="PC Connectivity Solution" OFN="ServiceLayer.exe" />
    <ITEM PID="556" File="c:\windows\system32\services.exe" CheckResult="0" Descr="Приложение служб и контроллеров" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\system32\services.exe" Size="259072" Attr="rsAh" CreateDate="14.07.2009 04:11:26" ChangeDate="14.07.2009 06:14:36" MD5="5F1B6A9C35D3D5CA72D6D6FDEF9747D6" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="services.exe.mui" />
    <ITEM PID="368" File="c:\windows\system32\spoolsv.exe" CheckResult="0" Descr="Диспетчер очереди печати" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\System32\spoolsv.exe" Size="316416" Attr="rsAh" CreateDate="14.07.2009 05:18:36" ChangeDate="14.07.2009 06:14:41" MD5="49B6DD6AB3715B7A67965F17194E98A9" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="spoolsv.exe.mui" />
    <ITEM PID="1000" File="c:\windows\system32\svchost.exe" CheckResult="0" Descr="Хост-процесс для служб Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\system32\svchost.exe -k netsvcs" Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:19:28" ChangeDate="14.07.2009 06:14:41" MD5="54A47F6B5E09A77E61649109C6A08866" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="svchost.exe.mui" />
    <ITEM PID="1208" File="c:\windows\system32\svchost.exe" CheckResult="0" Descr="Хост-процесс для служб Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\system32\svchost.exe -k LocalService" Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:19:28" ChangeDate="14.07.2009 06:14:41" MD5="54A47F6B5E09A77E61649109C6A08866" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="svchost.exe.mui" />
    <ITEM PID="1312" File="c:\windows\system32\svchost.exe" CheckResult="0" Descr="Хост-процесс для служб Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\system32\svchost.exe -k NetworkService" Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:19:28" ChangeDate="14.07.2009 06:14:41" MD5="54A47F6B5E09A77E61649109C6A08866" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="svchost.exe.mui" />
    <ITEM PID="772" File="c:\windows\system32\svchost.exe" CheckResult="0" Descr="Хост-процесс для служб Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\system32\svchost.exe -k RPCSS" Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:19:28" ChangeDate="14.07.2009 06:14:41" MD5="54A47F6B5E09A77E61649109C6A08866" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="svchost.exe.mui" />
    <ITEM PID="396" File="c:\windows\system32\svchost.exe" CheckResult="0" Descr="Хост-процесс для служб Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork" Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:19:28" ChangeDate="14.07.2009 06:14:41" MD5="54A47F6B5E09A77E61649109C6A08866" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="svchost.exe.mui" />
    <ITEM PID="2916" File="c:\windows\system32\svchost.exe" CheckResult="0" Descr="Хост-процесс для служб Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\system32\svchost.exe -k imgsvc" Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:19:28" ChangeDate="14.07.2009 06:14:41" MD5="54A47F6B5E09A77E61649109C6A08866" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="svchost.exe.mui" />
    <ITEM PID="676" File="c:\windows\system32\svchost.exe" CheckResult="0" Descr="Хост-процесс для служб Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\system32\svchost.exe -k DcomLaunch" Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:19:28" ChangeDate="14.07.2009 06:14:41" MD5="54A47F6B5E09A77E61649109C6A08866" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="svchost.exe.mui" />
    <ITEM PID="940" File="c:\windows\system32\svchost.exe" CheckResult="0" Descr="Хост-процесс для служб Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted" Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:19:28" ChangeDate="14.07.2009 06:14:41" MD5="54A47F6B5E09A77E61649109C6A08866" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="svchost.exe.mui" />
    <ITEM PID="972" File="c:\windows\system32\svchost.exe" CheckResult="0" Descr="Хост-процесс для служб Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted" Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:19:28" ChangeDate="14.07.2009 06:14:41" MD5="54A47F6B5E09A77E61649109C6A08866" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="svchost.exe.mui" />
    <ITEM PID="1176" File="c:\windows\system32\taskhost.exe" CheckResult="0" Descr="Хост-процесс для задач Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine=""taskhost.exe"" Size="49152" Attr="rsAh" CreateDate="14.07.2009 04:19:25" ChangeDate="14.07.2009 06:14:42" MD5="8F4F5A5C1BAE72CE6EAEEA1CA3F98CA2" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="taskhost.exe.mui" />
    <ITEM PID="3092" File="c:\program files\total commander\totalcmd.exe" CheckResult="0" Descr="Total Commander 32 bit international version, file manager replacement for Windows" LegalCopyright="Copyright © 1993-2007 Christian Ghisler" Hidden="0" CmdLine=""C:\Program Files\Total Commander\Totalcmd.exe"" Size="1079752" Attr="rsAh" CreateDate="01.10.2009 20:44:49" ChangeDate="06.09.2007 22:00:00" MD5="EA4E9564B41AF2C69DB751288545403D" Vendor="C. Ghisler & Co." Product="Total Commander" />
    <ITEM PID="1808" File="c:\program files\pinnacle\shared files\programs\usbtip\usbtip.exe" CheckResult="0" Descr="Pinnacle USB Tip - for Multi Media eXtensions" LegalCopyright="© 2003-2007 by Pinnacle Systems GmbH" Hidden="0" CmdLine=""C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe"" Size="199752" Attr="rsAh" CreateDate="20.02.2007 11:07:40" ChangeDate="20.02.2007 11:07:40" MD5="F7D68D8E70EA376713A39395664793CA" Vendor="Pinnacle Systems GmbH" Product="Pinnacle USB Tip" OFN="USBTip.exe" />
    <ITEM PID="508" File="c:\windows\system32\wininit.exe" CheckResult="0" Descr="Автозагрузка приложений Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="wininit.exe" Size="96256" Attr="rsAh" CreateDate="14.07.2009 04:36:49" ChangeDate="14.07.2009 06:14:45" MD5="B5C5DCAD3899512020D135600129D665" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="WinInit.exe.mui" />
    <ITEM PID="892" File="c:\windows\system32\winlogon.exe" CheckResult="0" Descr="Программа входа в систему Windows" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine="winlogon.exe" Size="285696" Attr="rsAh" CreateDate="14.07.2009 04:37:04" ChangeDate="14.07.2009 06:14:45" MD5="8EC6A4AB12B8F3759E21F8E3A388F2CF" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="WINLOGON.EXE.MUI" />
    <ITEM PID="3832" File="c:\program files\microsoft office\office12\winword.exe" CheckResult="0" Descr="Microsoft Office Word" LegalCopyright="© 2006 Microsoft Corporation. All rights reserved." Hidden="0" CmdLine=""C:\Program Files\Microsoft Office\Office12\WINWORD.EXE" /n /dde" Size="347432" Attr="rsAh" CreateDate="27.10.2006 15:23:04" ChangeDate="27.10.2006 15:23:04" MD5="CEAA5817A65E914AA178B28F12359A46" Vendor="Microsoft Corporation" Product="2007 Microsoft Office system" OFN="WinWord.exe" />
    <ITEM PID="3164" File="c:\windows\system32\wudfhost.exe" CheckResult="0" Descr="Windows Driver Foundation (WDF) - хост-процесс инфраструктуры драйверов пользовательского режима" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Hidden="0" CmdLine=""C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-d7f19745-ccd8-4111-9190-d819f5f4b8a5 -SystemEventPortName:HostProcess-a7e895a9-520f-4f54-a48b-b4d582391f0a -IoCancelEventPortName:HostProcess-522a13a0-1bb0-44d0-a198-33a6a3b36fbb -NonStateChangingEventPortName:HostProcess-6f59fa54-3088-4b04-a339-5313c36e18d7 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:1371a3ac-f5fc-4391-b752-98258e0bfc85" Size="195584" Attr="rsAh" CreateDate="14.07.2009 04:50:16" ChangeDate="14.07.2009 06:14:50" MD5="C6E7AB7E798167095987EBCCB76DF61B" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="WUDFHost.exe.mui" />
    </PROCESS>
    - <DLL>
    <ITEM File="C:\Windows\system32\xkgnrjf.dll" CheckResult="-1" Descr="" LegalCopyright="" UsedBy="756,1384,836,1700,1796,2956,2184,1056,656,1556,1576,1100,1044,2140,1788,2908,3768,1864,2216,568,2300,1536,3652,3612,3568,2072,2476,3136,3040,556,368,1000,1208,1312,772,396,2916,676,940,972,1176,3092,1808,508,892,3832,3164" Hidden="0" Size="53248" Attr="rsAh" CreateDate="22.02.2012 20:46:45" ChangeDate="22.02.2012 20:46:58" MD5="1A31934DA3BF872E21DF6122834BD48C" />
    <ITEM File="C:\Program Files\Alwil Software\Avast5\defs\12022101\aswScan.dll" CheckResult="-1" Descr="Low level antivirus engine" LegalCopyright="Copyright (c) 2012 AVAST Software" UsedBy="1700" Hidden="0" Size="100912" Attr="rsAh" CreateDate="22.02.2012 08:31:20" ChangeDate="21.02.2012 21:17:46" MD5="5D7FF235FB73511AD27CC84AFFF229D9" Vendor="AVAST Software" Product="avast! Antivirus" OFN="aswScan.dll" />
    <ITEM File="C:\Program Files\Alwil Software\Avast5\defs\12022101\aswFiDb.dll" CheckResult="-1" Descr="File information database access" LegalCopyright="Copyright (c) 2012 AVAST Software" UsedBy="1700" Hidden="0" Size="394968" Attr="rsAh" CreateDate="22.02.2012 08:31:20" ChangeDate="21.02.2012 21:17:47" MD5="EC0897691AA5603C8BC4243266923C73" Vendor="AVAST Software" Product="avast! Antivirus" OFN="aswFiDb.dll" />
    <ITEM File="C:\Program Files\Alwil Software\Avast5\defs\12022101\algo.dll" CheckResult="-1" Descr="" LegalCopyright="" UsedBy="1700" Hidden="0" Size="1714176" Attr="rsAh" CreateDate="22.02.2012 08:31:21" ChangeDate="22.02.2012 02:39:11" MD5="2719AC957DDD25C4B9BBFEA4EBB11C18" />
    <ITEM File="C:\Program Files\UFS Explorer\dndcphp.dll" CheckResult="-1" Descr="dndcphp Module" LegalCopyright="Copyright 2007" UsedBy="1576" Hidden="0" Size="100416" Attr="rsAh" CreateDate="09.12.2011 13:59:29" ChangeDate="15.05.2008 15:21:44" MD5="7173DD477217E8E51B351948119D1EEA" Product="dndcphp Module" OFN="dndcphp.DLL" />
    <ITEM File="C:\Windows\system32\spool\DRIVERS\W32X86\3\spd__.dll" CheckResult="-1" Descr="PostScript Printer Driver" LegalCopyright="? Microsoft Corporation. All rights reserved." UsedBy="3832" Hidden="0" Size="978944" Attr="rsAh" CreateDate="24.08.2011 13:03:17" ChangeDate="30.09.2010 08:12:13" MD5="BDA8F3BD8CD9C9E210EA005A4E413FFD" Vendor="Windows (R) 2000 DDK provider" Product="Windows (R) 2000 DDK driver" OFN="PSCRIPT.DLL" />
    </DLL>
    - <KERNELOBJ>
    <ITEM File="C:\Windows\System32\Drivers\ahhnjxck.SYS" CheckResult="-1" Base="91F8C000" MemSize="037000" Descr="" LegalCopyright="" />
    <ITEM File="\Program Files\Alcohol 120\alcoholx.dll" CheckResult="-1" Base="10000000" MemSize="0A7000" Descr="" LegalCopyright="" />
    <ITEM File="C:\Windows\System32\Drivers\dump_atapi.sys" CheckResult="-1" Base="9E6D7000" MemSize="009000" Descr="" LegalCopyright="" />
    <ITEM File="C:\Windows\System32\Drivers\dump_dumpata.sys" CheckResult="-1" Base="9E6CC000" MemSize="00B000" Descr="" LegalCopyright="" />
    <ITEM File="C:\Windows\System32\Drivers\dump_dumpfve.sys" CheckResult="-1" Base="9E6E0000" MemSize="011000" Descr="" LegalCopyright="" />
    <ITEM File="C:\Windows\system32\drivers\dwprot.sys" CheckResult="-1" Base="A8F4A000" MemSize="023000" Descr="" LegalCopyright="" />
    <ITEM File="C:\Users\7272~1\AppData\Local\Temp\RYCyHt11.sys" CheckResult="-1" Base="A8F6D000" MemSize="034000" Descr="" LegalCopyright="" />
    <ITEM File="C:\Windows\System32\Drivers\splb.sys" CheckResult="-1" Base="8C033000" MemSize="101000" Descr="" LegalCopyright="" />
    <ITEM File="C:\Windows\system32\DRIVERS\winachcf.sys" CheckResult="-1" Base="91EC4000" MemSize="0BB000" Descr="Modem" LegalCopyright="Copyright© Conexant Systems, Inc. 2000" Size="948460" Attr="rsAh" CreateDate="21.05.2011 21:39:50" ChangeDate="11.09.2000 15:55:56" MD5="642DD7C0E1FF226336826F01DA399D30" Vendor="Conexant" Product="Modem" OFN="winachcf.sys" />
    </KERNELOBJ>
    - <Service>
    <ITEM File="C:\Windows\System32\SUPDSvc.exe" Name="Samsung UPD Service" CheckResult="-1" Type="16" State="1" Size="131888" Attr="rsAh" CreateDate="24.08.2011 13:03:16" ChangeDate="09.08.2010 07:04:02" MD5="BD26A150DC292913E48EE2B950372DFD" Vendor="Samsung Electronics CO., LTD." Product="Samsung UPD" OFN="SUPDSvc.exe" />
    </Service>
    - <Drivers>
    <ITEM File="C:\Windows\System32\Drivers\sptd.sys" Name="sptd" CheckResult="-1" Type="1" State="4" Size="721904" Attr="rsAh" CreateDate="18.09.2011 11:08:21" ChangeDate="18.09.2011 11:08:21" MD5="" />
    <ITEM File="C:\Windows\system32\DRIVERS\winachcf.sys" Name="Winachcf" CheckResult="-1" Type="1" State="4" Size="948460" Attr="rsAh" CreateDate="21.05.2011 21:39:50" ChangeDate="11.09.2000 15:55:56" MD5="642DD7C0E1FF226336826F01DA399D30" Vendor="Conexant" Product="Modem" OFN="winachcf.sys" />
    <ITEM File="C:\Windows\system32\Drivers\DgiVecp.sys" Name="DgiVecp" CheckResult="-1" Type="1" State="1" />
    <ITEM File="D:\CDriver.sys" Name="MSICDSetup" CheckResult="-1" Type="1" State="1" />
    </Drivers>
    - <AUTORUN>
    <ITEM File="ACDV.dll" CheckResult="-1" Enabled="1" Type="REG" X1="HKEY_LOCAL_MACHINE" X2="Software\Microsoft\Windows NT\CurrentVersion\Drivers32" X3="VIDC.ACDV" />
    <ITEM File="C:\Program Files\UFS Explorer\dndcphp.dll" CheckResult="-1" Enabled="1" Type="REG" Size="100416" Attr="rsAh" CreateDate="09.12.2011 13:59:29" ChangeDate="15.05.2008 15:21:44" MD5="7173DD477217E8E51B351948119D1EEA" Product="dndcphp Module" OFN="dndcphp.DLL" X1="HKEY_LOCAL_MACHINE" X2="Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved" X3="{2A924BCB-C687-4B2C-998C-6B65A81CD076}" />
    <ITEM File="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\kabauth.exe" CheckResult="-1" Enabled="1" Type="FILE" Size="877568" Attr="rsAh" CreateDate="01.10.2009 19:43:55" ChangeDate="03.03.2011 22:38:48" MD5="26A0D07F0D5120DAD14086A8D9786448" Vendor="КАБiNET" Product="Авторизатор КАБiNET" OFN="kabauth.exe" X1="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\" X2="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\kabauth.exe" X3="" />
    <ITEM File="C:\Windows\system32\psxss.exe" CheckResult="-1" Enabled="-1" Type="REG" X1="HKEY_LOCAL_MACHINE" X2="System\CurrentControlSet\Control\Session Manager\SubSystems" X3="Posix" />
    <ITEM File="C:\Windows\system32\x264vfw.dll" CheckResult="-1" Enabled="1" Type="REG" Size="597504" Attr="rsAh" CreateDate="06.01.2008 01:21:12" ChangeDate="06.01.2008 01:21:12" MD5="B96E89E478E591880A2939B0BC34AE47" X1="HKEY_LOCAL_MACHINE" X2="Software\Microsoft\Windows NT\CurrentVersion\Drivers32" X3="vidc.x264" />
    <ITEM File="C:\Windows\system32\xkgnrjf.dll" CheckResult="-1" Enabled="-1" Type="REG" Size="53248" Attr="rsAh" CreateDate="22.02.2012 20:46:45" ChangeDate="22.02.2012 20:46:58" MD5="1A31934DA3BF872E21DF6122834BD48C" X1="HKEY_LOCAL_MACHINE" X2="Software\Microsoft\Windows NT\CurrentVersion\Windows" X3="AppInit_DLLs" />
    <ITEM File="E:\Program Files\Download Master\dmaster.exe" CheckResult="-1" Enabled="1" Type="REG" X1="HKEY_CURRENT_USER" X2="Software\Microsoft\Windows\CurrentVersion\Run" X3="Download Master" />
    <ITEM File="c:\Program Files\Common Files\Microsoft Shared\DW\DW.EXE" CheckResult="-1" Enabled="-1" Type="REG" X1="HKEY_LOCAL_MACHINE" X2="SYSTEM\CurrentControlSet\Services\Eventlog\Application\Microsoft Visual Studio Tools for Applications" X3="EventMessageFile" />
    <ITEM File="progman.exe" CheckResult="-1" Enabled="1" Type="REG" X1="HKEY_LOCAL_MACHINE" X2="Software\Microsoft\Windows NT\CurrentVersion\WOW\boot" X3="shell" />
    <ITEM File="vgafix.fon" CheckResult="-1" Enabled="1" Type="REG" X1="HKEY_LOCAL_MACHINE" X2="Software\Microsoft\Windows NT\CurrentVersion\WOW\boot" X3="fixedfon.fon" />
    <ITEM File="vgaoem.fon" CheckResult="-1" Enabled="1" Type="REG" X1="HKEY_LOCAL_MACHINE" X2="Software\Microsoft\Windows NT\CurrentVersion\WOW\boot" X3="oemfonts.fon" />
    <ITEM File="vgasys.fon" CheckResult="-1" Enabled="1" Type="REG" X1="HKEY_LOCAL_MACHINE" X2="Software\Microsoft\Windows NT\CurrentVersion\WOW\boot" X3="fonts.fon" />
    </AUTORUN>
    - <BHO>
    <ITEM File="E:\PROGRA~1\DOWNLO~1\dmiehlp.dll" CheckResult="-1" Enabled="1" BHOType="1" RegKey="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" CLSID="{9961627E-4059-41B4-8E0E-A7D6B3854ADF}" Descr="" LegalCopyright="" />
    <ITEM File="" CheckResult="-1" Enabled="1" BHOType="3" RegKey="HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions" CLSID="{2670000A-7350-4f3c-8081-5663EE0C6C49}" Descr="" LegalCopyright="" />
    <ITEM File="" CheckResult="-1" Enabled="1" BHOType="3" RegKey="HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions" CLSID="{92780B25-18CC-41C8-B9BE-3C9C571A8263}" Descr="" LegalCopyright="" />
    </BHO>
    - <ExplorerExt>
    <ITEM File="C:\Program Files\UFS Explorer\dndcphp.dll" CheckResult="-1" Enabled="1" ExtType="1" ExtName="SysDev VirtualDrag Copy Helper" RegKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved" CLSID="{2A924BCB-C687-4B2C-998C-6B65A81CD076}" Descr="dndcphp Module" LegalCopyright="Copyright 2007" Size="100416" Attr="rsAh" CreateDate="09.12.2011 13:59:29" ChangeDate="15.05.2008 15:21:44" MD5="7173DD477217E8E51B351948119D1EEA" Product="dndcphp Module" OFN="dndcphp.DLL" />
    </ExplorerExt>
    <PrintEXT />
    <TaskScheduler />
    - <SPI>
    <ITEM File="C:\Windows\system32\NLAapi.dll" CheckResult="-1" SPIType="1" SPINaim="@%SystemRoot%\system32\nlasvc.dll,-1000" Descr="Network Location Awareness 2" LegalCopyright="© Microsoft Corporation. All rights reserved." Size="51712" Attr="rsAh" CreateDate="14.07.2009 04:53:54" ChangeDate="14.07.2009 06:16:03" MD5="045DB4EAB4FBD23210E85ECC3F464A2E" Vendor="Microsoft Corporation" Product="Microsoft® Windows® Operating System" OFN="nlaapi.dll" />
    <ITEM File="C:\Windows\System32\mswsock.dll" CheckResult="-1" SPIType="1" SPINaim="@%SystemRoot%\system32\wshtcpip.dll,-60103" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\System32\winrnr.dll" CheckResult="-1" SPIType="1" SPINaim="NTDS" Descr="LDAP RnR Provider DLL" LegalCopyright="© Microsoft Corporation. All rights reserved." Size="20992" Attr="rsAh" CreateDate="14.07.2009 04:37:57" ChangeDate="14.07.2009 06:16:19" MD5="5DF5D8CFD9B9573FA3B2C89D9061A240" Vendor="Microsoft Corporation" Product="Microsoft® Windows® Operating System" OFN="winrnr" />
    <ITEM File="C:\Windows\system32\napinsp.dll" CheckResult="-1" SPIType="1" SPINaim="@%SystemRoot%\system32\napinsp.dll,-1000" Descr="Поставщик оболочки совместимости для имен электронной почты" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="52224" Attr="rsAh" CreateDate="14.07.2009 04:54:55" ChangeDate="14.07.2009 06:16:02" MD5="0B7E85364CB878E2AD531DB7B601A9E5" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="napinsp.dll.mui" />
    <ITEM File="C:\Windows\system32\pnrpnsp.dll" CheckResult="-1" SPIType="1" SPINaim="@%SystemRoot%\system32\pnrpnsp.dll,-1000" Descr="Поставщик пространства имен PNRP" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="65024" Attr="rsAh" CreateDate="14.07.2009 04:55:50" ChangeDate="14.07.2009 06:16:12" MD5="5CF640EDDB1E40A5AB1BB743BCDEC610" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="pnrpnsp.dll.mui" />
    <ITEM File="C:\Windows\system32\pnrpnsp.dll" CheckResult="-1" SPIType="1" SPINaim="@%SystemRoot%\system32\pnrpnsp.dll,-1001" Descr="Поставщик пространства имен PNRP" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="65024" Attr="rsAh" CreateDate="14.07.2009 04:55:50" ChangeDate="14.07.2009 06:16:12" MD5="5CF640EDDB1E40A5AB1BB743BCDEC610" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="pnrpnsp.dll.mui" />
    <ITEM File="C:\Windows\system32\wshbth.dll" CheckResult="-1" SPIType="1" SPINaim="Пространство имен Bluetooth" Descr="Windows Sockets Helper DLL" LegalCopyright="© Microsoft Corporation. All rights reserved." Size="35840" Attr="rsAh" CreateDate="14.07.2009 04:51:30" ChangeDate="14.07.2009 06:16:20" MD5="3A2BB97D54A2189C9900A735C0531B59" Vendor="Microsoft Corporation" Product="Microsoft® Windows® Operating System" OFN="wshbth.dll" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wshtcpip.dll,-60100" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wshtcpip.dll,-60101" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wshtcpip.dll,-60102" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wship6.dll,-60100" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wship6.dll,-60101" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wship6.dll,-60102" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wshqos.dll,-100" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wshqos.dll,-101" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wshqos.dll,-102" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="@%SystemRoot%\System32\wshqos.dll,-103" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD RfComm [Bluetooth]" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{089FA433-DF12-479B-88D3-0FF7D9B77A5E}] SEQPACKET 15" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{089FA433-DF12-479B-88D3-0FF7D9B77A5E}] DATAGRAM 15" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{F8393FB8-2EE1-4F06-8C1F-F3799E7DE1DD}] SEQPACKET 13" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{F8393FB8-2EE1-4F06-8C1F-F3799E7DE1DD}] DATAGRAM 13" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{D0DCE0D0-5ACA-4564-8A03-9CFADE8404C6}] SEQPACKET 10" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{D0DCE0D0-5ACA-4564-8A03-9CFADE8404C6}] DATAGRAM 10" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{5D35FA5D-F7E3-4919-B91A-8C024FB1311A}] SEQPACKET 8" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{5D35FA5D-F7E3-4919-B91A-8C024FB1311A}] DATAGRAM 8" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{CB3B0359-1C44-46FE-8A10-82830D8B7618}] SEQPACKET 5" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{CB3B0359-1C44-46FE-8A10-82830D8B7618}] DATAGRAM 5" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{F04E95CD-E965-47B9-8BA6-1DDB0DF522B5}] SEQPACKET 1" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip_{F04E95CD-E965-47B9-8BA6-1DDB0DF522B5}] DATAGRAM 1" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{28FBBDEF-54F9-4E06-B742-253C7E16A0D3}] SEQPACKET 12" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{28FBBDEF-54F9-4E06-B742-253C7E16A0D3}] DATAGRAM 12" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{1A691607-ACD2-45BA-AC88-58443D6EBFDA}] SEQPACKET 7" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{1A691607-ACD2-45BA-AC88-58443D6EBFDA}] DATAGRAM 7" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{AD0080CE-31B2-467C-BD0B-1BF8F039F80C}] SEQPACKET 0" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{AD0080CE-31B2-467C-BD0B-1BF8F039F80C}] DATAGRAM 0" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{089FA433-DF12-479B-88D3-0FF7D9B77A5E}] SEQPACKET 16" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{089FA433-DF12-479B-88D3-0FF7D9B77A5E}] DATAGRAM 16" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{F8393FB8-2EE1-4F06-8C1F-F3799E7DE1DD}] SEQPACKET 14" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{F8393FB8-2EE1-4F06-8C1F-F3799E7DE1DD}] DATAGRAM 14" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{8A676430-64FF-4A76-9054-BC7169F8697E}] SEQPACKET 3" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{8A676430-64FF-4A76-9054-BC7169F8697E}] DATAGRAM 3" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{D0DCE0D0-5ACA-4564-8A03-9CFADE8404C6}] SEQPACKET 11" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{D0DCE0D0-5ACA-4564-8A03-9CFADE8404C6}] DATAGRAM 11" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{5D35FA5D-F7E3-4919-B91A-8C024FB1311A}] SEQPACKET 9" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{5D35FA5D-F7E3-4919-B91A-8C024FB1311A}] DATAGRAM 9" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{CB3B0359-1C44-46FE-8A10-82830D8B7618}] SEQPACKET 6" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{CB3B0359-1C44-46FE-8A10-82830D8B7618}] DATAGRAM 6" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{598EF0FB-5126-40BC-BCAA-75EB7B45AF98}] SEQPACKET 4" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{598EF0FB-5126-40BC-BCAA-75EB7B45AF98}] DATAGRAM 4" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{F04E95CD-E965-47B9-8BA6-1DDB0DF522B5}] SEQPACKET 2" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    <ITEM File="C:\Windows\system32\mswsock.dll" CheckResult="-1" SPIType="3" SPINaim="MSAFD NetBIOS [\Device\NetBT_Tcpip6_{F04E95CD-E965-47B9-8BA6-1DDB0DF522B5}] DATAGRAM 2" Descr="Расширение поставщика службы API Microsoft Windows Sockets 2.0" LegalCopyright="© Корпорация Майкрософт. Все права защищены." Size="232448" Attr="rsAh" CreateDate="14.07.2009 04:12:34" ChangeDate="14.07.2009 06:15:51" MD5="11A41F17527ED75D6B758FDD7F4FD00D" Vendor="Microsoft Corporation" Product="Операционная система Microsoft® Windows®" OFN="mswsock.dll.mui" />
    </SPI>
    - <DPF>
    <ITEM File="C:\PROGRA~1\MICROS~2\Office12\IEAWSDC.DLL" CheckResult="-1" Enabled="1" RegKey="SOFTWARE\Microsoft\Code Store Database\Distribution Units" CLSID="{02BCC737-B171-4746-94C9-0D8A0B2C0089}" CodeBase="http://office.microsoft.com/sites/production/ieawsdc32.cab" Descr="" LegalCopyright="" Size="190464" Attr="rsAh" CreateDate="14.12.2010 03:18:26" ChangeDate="14.12.2010 03:18:26" MD5="0016403DFC940F6DF21445414B26C044" />
    </DPF>
    <CPL />
    <ActiveSetup />
    <HOSTS />
    - <ProtocolExt>
    <ITEM File="mscoree.dll" CheckResult="-1" Enabled="1" RegKey="SOFTWARE\Classes\PROTOCOLS\Filter\application/octet-stream" CLSID="{1E66F26B-79EE-11D2-8710-00C04F79ED0D}" Descr="Microsoft .NET Runtime Execution Engine" LegalCopyright="© Microsoft Corporation. All rights reserved." />
    <ITEM File="mscoree.dll" CheckResult="-1" Enabled="1" RegKey="SOFTWARE\Classes\PROTOCOLS\Filter\application/x-complus" CLSID="{1E66F26B-79EE-11D2-8710-00C04F79ED0D}" Descr="Microsoft .NET Runtime Execution Engine" LegalCopyright="© Microsoft Corporation. All rights reserved." />
    <ITEM File="mscoree.dll" CheckResult="-1" Enabled="1" RegKey="SOFTWARE\Classes\PROTOCOLS\Filter\application/x-msdownload" CLSID="{1E66F26B-79EE-11D2-8710-00C04F79ED0D}" Descr="Microsoft .NET Runtime Execution Engine" LegalCopyright="© Microsoft Corporation. All rights reserved." />
    </ProtocolExt>
    - <SuspFiles>
    <ITEM File="C:\Windows\system32\drivers\dwprot.sys" VirType="4" Descr="Перехватчик KernelMode" />
    <ITEM File="\SystemRoot\System32\Drivers\aswSP.SYS" VirType="4" Descr="Перехватчик KernelMode" />
    <ITEM File="C:\Windows\Temp\TS_82DE.tmp" VirType="2" Descr="Подозрение на Backdoor.Win32.Canvas.10 ( 1C9F6047 1E621768 004D6E44 004D6E44 180224)" Size="180224" Attr="rsAh" CreateDate="01.10.2009 21:25:42" ChangeDate="01.10.2009 21:25:43" MD5="21C4096B5B3A6351F388ADC828C53B1B" />
    <ITEM File="C:\Windows\Temp\TS_8E0C.tmp" VirType="2" Descr="Подозрение на Trojan.Win32.Agent2.byu ( 1CA1E3B5 1E621768 004D6E44 004D6E44 131072)" Size="131072" Attr="rsAh" CreateDate="01.10.2009 21:25:45" ChangeDate="01.10.2009 21:25:45" MD5="D959BDCA1499A754F14AB1761C74C3D7" />
    </SuspFiles>
    - <RK_UM>
    <ITEM DLL="ws2_32.dll" FNaim="WSAConnect" FIndx="28" HookPtr="7790BB9B" HookType="2" />
    <ITEM DLL="ws2_32.dll" FNaim="connect" FIndx="135" HookPtr="779048BE" HookType="2" />
    </RK_UM>
    - <RK_KM>
    <ITEM File="C:\Windows\system32\drivers\dwprot.sys" FNaim="NtAllocateVirtualMemory" FIndx="19" HookPtr="A8F602D2" HookType="1" />
    <ITEM File="\SystemRoot\System32\Drivers\aswSP.SYS" FNaim="NtCreateProcessEx" FIndx="80" HookPtr="836E2E52" HookType="2" />
    <ITEM File="\SystemRoot\System32\Drivers\aswSP.SYS" FNaim="NtCreateSection" FIndx="84" HookPtr="83638CE3" HookType="2" />
    <ITEM File="C:\Windows\system32\drivers\dwprot.sys" FNaim="NtCreateThread" FIndx="87" HookPtr="A8F61904" HookType="1" />
    <ITEM File="C:\Windows\system32\drivers\dwprot.sys" FNaim="NtCreateThreadEx" FIndx="88" HookPtr="A8F619E0" HookType="1" />
    <ITEM File="C:\Windows\system32\drivers\dwprot.sys" FNaim="NtFreeVirtualMemory" FIndx="131" HookPtr="A8F6055E" HookType="1" />
    <ITEM File="\SystemRoot\System32\Drivers\aswSP.SYS" FNaim="NtLoadDriver" FIndx="155" HookPtr="835A9279" HookType="2" />
    <ITEM File="C:\Windows\system32\drivers\dwprot.sys" FNaim="NtQueueApcThread" FIndx="269" HookPtr="A8F61A0C" HookType="1" />
    <ITEM File="C:\Windows\system32\drivers\dwprot.sys" FNaim="NtQueueApcThreadEx" FIndx="270" HookPtr="A8F61A32" HookType="1" />
    <ITEM File="C:\Windows\system32\drivers\dwprot.sys" FNaim="NtSetContextThread" FIndx="316" HookPtr="A8F61A58" HookType="1" />
    <ITEM File="C:\Windows\system32\drivers\dwprot.sys" FNaim="NtWriteVirtualMemory" FIndx="399" HookPtr="A8F6066E" HookType="1" />
    <ITEM File="\SystemRoot\System32\Drivers\aswSP.SYS" FNaim="" FIndx="1180" HookPtr="83433128" HookType="3" />
    </RK_KM>
    - <RK_IRP>
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="0" HookPtr="85E65E68" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="2" HookPtr="88EE1758" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="4" HookPtr="860D1650" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="5" HookPtr="85D891F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="6" HookPtr="85D891F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="7" HookPtr="85D891F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="8" HookPtr="85D891F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="10" HookPtr="85D891F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="11" HookPtr="85D891F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="12" HookPtr="88E26D48" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="13" HookPtr="87B9C548" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="14" HookPtr="85D891F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="17" HookPtr="85D891F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="20" HookPtr="85D891F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="21" HookPtr="85D891F8" />
    <ITEM File="" DeviceName="\FileSystem\ntfs" IRP="27" HookPtr="85D891F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="0" HookPtr="85D65640" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="2" HookPtr="88E2CFB0" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="4" HookPtr="89450880" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="5" HookPtr="88D1A1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="6" HookPtr="88D1A1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="7" HookPtr="88D1A1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="8" HookPtr="88D1A1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="10" HookPtr="88D1A1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="11" HookPtr="88D1A1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="12" HookPtr="89564B70" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="13" HookPtr="89717A10" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="14" HookPtr="88D1A1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="17" HookPtr="88D1A1F8" />
    <ITEM File="" DeviceName="\FileSystem\FastFat" IRP="27" HookPtr="88D1A1F8" />
    </RK_IRP>
    - <IPU>
    <ITEM Code="1" X1="TermService" X2="Службы удаленных рабочих столов" />
    <ITEM Code="1" X1="SSDPSRV" X2="Обнаружение SSDP" />
    <ITEM Code="1" X1="Schedule" X2="Планировщик заданий" />
    <ITEM Code="2" />
    <ITEM Code="3" />
    <ITEM Code="5" />
    <ITEM Code="8" X1="-1" />
    </IPU>
    - <WIZARD-TSW>
    <ITEM ID="58" Level="3" Fixed="0" />
    <ITEM ID="59" Level="3" Fixed="0" />
    <ITEM ID="61" Level="2" Fixed="0" />
    </WIZARD-TSW>
    </AVZ>
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 22:09:25, on 22.02.2012
    Platform: Unknown Windows (WinNT 6.01.3504)
    MSIE: Internet Explorer v8.00 (8.00.7600.16385)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    C:\Program Files\Alwil Software\Avast5\AvastUI.exe
    C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\Program Files\2gis\3.0\2GISTrayNotifier.exe
    C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
    C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
    C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
    C:\Windows\system32\taskhost.exe
    C:\Program Files\Total Commander\Totalcmd.exe
    C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
    G:\DISTRIB\Antivirus\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir...ie&ar=iesearch
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir...ie&ar=iesearch
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL
    O2 - BHO: IE 4.x-6.x BHO for Download Master - {9961627E-4059-41B4-8E0E-A7D6B3854ADF} - E:\PROGRA~1\DOWNLO~1\dmiehlp.dll (file missing)
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
    O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
    O4 - HKLM\..\Run: [USBToolTip] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    O4 - HKLM\..\Run: [2Gis Update Notifier] "C:\Program Files\2gis\3.0\2GISTrayNotifier.exe" -delayed_start
    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide
    O4 - HKCU\..\Run: [Download Master] E:\Program Files\Download Master\dmaster.exe -autorun
    O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
    O4 - HKCU\..\Run: [G6FTP Server Tray Monitor] "C:\Program Files\Gene6 FTP Server\G6FTPTray.exe"
    O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol 120\axcmd.exe" /automount
    O4 - Global Startup: kabauth.exe
    O8 - Extra context menu item: &Экспорт в Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: Отправить в OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: &Отправить в OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://eic.lgservice.com/DjvuViewer/...trol-6.1.4.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{D0DCE0D0-5ACA-4564-8A03-9CFADE8404C6}: NameServer = 87.224.197.1,87.224.213.1
    O17 - HKLM\System\CCS\Services\Tcpip\..\{F04E95CD-E965-47B9-8BA6-1DDB0DF522B5}: NameServer = 87.224.197.1,87.224.213.1
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GRA32A~1.DLL
    O20 - AppInit_DLLs: C:\Windows\system32\xkgnrjf.dll
    O23 - Service: 2GIS UpdateService (2GISUpdateService) - ООО ДубльГИС - C:\Program Files\2gis\3.0\2GISUpdateService.exe
    O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
    O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
    O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
    O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
    O23 - Service: Gene6 FTP Server (G6FTPServer) - Gene6 - C:\Program Files\Gene6 FTP Server\G6FTPSERVER.EXE
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
    O23 - Service: Radmin Server V3 (RServer3) - Famatech Corp. - C:\Windows\system32\rserver30\RServer3.exe
    O23 - Service: Samsung UPD Service - Samsung Electronics CO., LTD. - C:\Windows\System32\SUPDSvc.exe
    O23 - Service: ScsiAccess - Unknown owner - C:\Program Files\Photodex\ProShowProducer\ScsiAccess.exe
    O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol 120\StarWind\StarWindServiceAE.exe

    --
    End of file - 6447 bytes
    Скрыть
    Последний раз редактировалось Techno; 24.01.2013 в 21:47. Причина: spoiler

  2. Будь в курсе!
    Реклама на VirusInfo

    Надоело быть жертвой? Стань профи по информационной безопасности, получай самую свежую информацию об угрозах и средствах защиты от ведущего российского аналитического центра Anti-Malware.ru:

    Anti-Malware Telegram
     

  3. #2
    Cyber Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Аватар для Info_bot
    Регистрация
    11.05.2011
    Сообщений
    2,287
    Вес репутации
    378
    Уважаемый(ая) vetek95, спасибо за обращение на наш форум!

    Помощь в лечении комьютера на VirusInfo.Info оказывается абсолютно бесплатно. Хелперы, в самое ближайшее время, ответят на Ваш запрос. Для оказания помощи необходимо предоставить логи сканирования утилитами АВЗ и HiJackThis, подробнее можно прочитать в правилах оформления запроса о помощи.

    Если наш сайт окажется полезен Вам и у Вас будет такая возможность - пожалуйста поддержите проект.

  4. #3
    Senior Helper Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Аватар для Techno
    Регистрация
    25.08.2009
    Адрес
    Россия
    Сообщений
    10,965
    Вес репутации
    406
    Сделайте логи по правилам (раздел диагностика п.1-3)

    Как прикреплять вложение читайте тут - http://virusinfo.info/showthread.php?t=121951


  • Уважаемый(ая) vetek95, наши специалисты оказали Вам всю возможную помощь по вашему обращению.

    В целях поддержания безопасности вашего компьютера настоятельно рекомендуем:

     

     

    Чтобы всегда быть в курсе актуальных угроз в области информационной безопасности и сохранять свой компьютер защищенным, рекомендуем следить за последними новостями ИТ-сферы портала Anti-Malware.ru:

     

     

    Anti-Malware VK

     

    Anti-Malware Telegram

     

     

    Надеемся больше никогда не увидеть ваш компьютер зараженным!

     

    Если Вас не затруднит, пополните пожалуйста нашу базу безопасных файлов.

  • Метки для этой темы

    Свернуть/Развернуть Ваши права в разделе

    • Вы не можете создавать новые темы
    • Вы не можете отвечать в темах
    • Вы не можете прикреплять вложения
    • Вы не можете редактировать свои сообщения
    •  
    Page generated in 0.00692 seconds with 15 queries