Удаление вирусов и троянов. Защита компьютера. › Помощь в удалении вирусов, троянов, рекламы и других зловредов › Помогите проверить комп!!!!
- This topic has 6 ответов, 2 участника, and was last updated 14 years, 7 months назад by alexbox.
-
АвторСообщения
-
28 апреля, 2010 в 5:41 пп #17092
Здравствуйте всем! У меня Windows XP SP3. Помогите его проверить. Заранее спасибо!!!
прилогаю отчёт
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Алексей at 2010-04-28 21:38:12
Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (48%) free of 20 GB
Total RAM: 1023 MB (57% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:38:15, on 28.04.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesAlwil SoftwareAvast5AvastSvc.exe
C:WINDOWSExplorer.exe
C:WINDOWSsystem32RunDll32.exe
C:WINDOWSsystem32RUNDLL32.EXE
D:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:WINDOWSPixArtPAC7302Monitor.exe
C:Program FilesVKSaverVKSaverUpdater.exe
C:PROGRA~1ALWILS~1Avast5avastUI.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesVistaDriveIconVistaDrv.exe
C:Program FilesMcAfee Security Scan2.0.181SSScheduler.exe
C:WINDOWSwsntfy.exe
C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
C:Program FilesBonjourmDNSResponder.exe
d:Program FilesCDBurnerXPNMSAccessU.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesUniblueSpeedUpMyPCsump.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesInternet Exploreriexplore.exe
C:WINDOWSsystem32ctfmon.exe
C:Documents and SettingsАлексейРабочий столRSIT.exe
C:Program Filestrend microАлексей.exe
C:Program FilesSkypeToolbarsSharedSkypeNames2.exeR1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://start.qip.ru/
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://search.qip.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=40316
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://search.qip.ru/ie
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = Root: HKCU; Subkey: SoftwareMicrosoftInternet ExplorerSearchUrl; ValueType: string; ValueName: ‘; ValueData: ‘; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Windows Internet Explorer предоставлен: QIP.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: QIPBHO Class — {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} — C:Program FilesInternet Explorerqipsearchbar.dll
R3 — URLSearchHook: (no name) — — (no file)
F2 — REG:system.ini: Shell=Explorer.exe rundll32.exe
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_06binssv.dll
O2 — BHO: MyAshampoo Toolbar — {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} — C:Program FilesMyAshampootbMyAs.dll
O2 — BHO: QIPBHO — {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} — C:Program FilesInternet Explorerqipsearchbar.dll
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O2 — BHO: SkypeIEPluginBHO — {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.5.4723.1820swg.dll
O2 — BHO: Ask Toolbar BHO — {D4027C7F-154A-4066-A1AD-4243D8127440} — C:Program FilesAsk.comGenericAskToolbar.dll
O3 — Toolbar: Google Toolbar — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O3 — Toolbar: Ask Toolbar — {D4027C7F-154A-4066-A1AD-4243D8127440} — C:Program FilesAsk.comGenericAskToolbar.dll
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O3 — Toolbar: MyAshampoo Toolbar — {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} — C:Program FilesMyAshampootbMyAs.dll
O4 — HKLM..Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd28 апреля, 2010 в 5:54 пп #25684Здравствуйте, добро пожаловать на Spyware-ru форум.
Вы вставили лог не полностью. Попробуйте запустить RSIT снова и получившийся лог вставьте в ваше следующее сообщение.
28 апреля, 2010 в 6:01 пп #25683ЭТО ВСЁ, ЧТО У МЕНЯ ПОЛУЧИЛОСЬ.
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Алексей at 2010-04-28 21:54:45
Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (48%) free of 20 GB
Total RAM: 1023 MB (56% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:54:46, on 28.04.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesAlwil SoftwareAvast5AvastSvc.exe
C:WINDOWSExplorer.exe
C:WINDOWSsystem32RunDll32.exe
C:WINDOWSsystem32RUNDLL32.EXE
D:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:WINDOWSPixArtPAC7302Monitor.exe
C:Program FilesVKSaverVKSaverUpdater.exe
C:PROGRA~1ALWILS~1Avast5avastUI.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesVistaDriveIconVistaDrv.exe
C:Program FilesMcAfee Security Scan2.0.181SSScheduler.exe
C:WINDOWSwsntfy.exe
C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
C:Program FilesBonjourmDNSResponder.exe
d:Program FilesCDBurnerXPNMSAccessU.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesUniblueSpeedUpMyPCsump.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesInternet Exploreriexplore.exe
C:WINDOWSsystem32ctfmon.exe
C:Documents and SettingsАлексейРабочий столRSIT.exe
C:Program Filestrend microАлексей.exeR1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://start.qip.ru/
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://search.qip.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=40316
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://search.qip.ru/ie
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = Root: HKCU; Subkey: SoftwareMicrosoftInternet ExplorerSearchUrl; ValueType: string; ValueName: ‘; ValueData: ‘; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Windows Internet Explorer предоставлен: QIP.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: QIPBHO Class — {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} — C:Program FilesInternet Explorerqipsearchbar.dll
R3 — URLSearchHook: (no name) — — (no file)
F2 — REG:system.ini: Shell=Explorer.exe rundll32.exe
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_06binssv.dll
O2 — BHO: MyAshampoo Toolbar — {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} — C:Program FilesMyAshampootbMyAs.dll
O2 — BHO: QIPBHO — {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} — C:Program FilesInternet Explorerqipsearchbar.dll
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O2 — BHO: SkypeIEPluginBHO — {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.5.4723.1820swg.dll
O2 — BHO: Ask Toolbar BHO — {D4027C7F-154A-4066-A1AD-4243D8127440} — C:Program FilesAsk.comGenericAskToolbar.dll
O3 — Toolbar: Google Toolbar — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O3 — Toolbar: Ask Toolbar — {D4027C7F-154A-4066-A1AD-4243D8127440} — C:Program FilesAsk.comGenericAskToolbar.dll
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O3 — Toolbar: MyAshampoo Toolbar — {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} — C:Program FilesMyAshampootbMyAs.dll
O4 — HKLM..Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [nwiz] nwiz.exe /install
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [RemoteControl] «D:Program FilesCyberLinkPowerDVDPDVDServ.exe»
O4 — HKLM..Run: [PAC7302_Monitor] C:WINDOWSPixArtPAC7302Monitor.exe
O4 — HKLM..Run: [VKSaverUpdater] C:Program FilesVKSaverVKSaverUpdater.exe
O4 — HKLM..Run: [AppleSyncNotifier] C:Program FilesCommon FilesAppleMobile Device SupportAppleSyncNotifier.exe
O4 — HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 — HKLM..Run: [Windows Notify Service] wsntfy.exe
O4 — HKLM..Run: [avast5] C:PROGRA~1ALWILS~1Avast5avastUI.exe /nogui
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe
O4 — HKCU..RunOnce: [SpeedUpMyPC] «C:Program FilesUniblueSpeedUpMyPClauncher.exe» delay 20000
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Global Startup: McAfee Security Scan Plus.lnk = ?
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://D:PROGRA~1MICROS~1OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: Google ВикиКомментарии… — res://C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra button: Skype add-on for Internet Explorer — {898EA8C8-E7FF-479B-8935-AEC46303B9E5} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O9 — Extra ‘Tools’ menuitem: Skype add-on for Internet Explorer — {898EA8C8-E7FF-479B-8935-AEC46303B9E5} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — D:PROGRA~1MICROS~1OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: QIP 2005 — {1EF681F7-A04B-4D6D-9012-A307CCA55610} — d:Program FilesQIPqip.exe (HKCU)
O16 — DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} — http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 — HKLMSystemCCSServicesTcpip..{73184E91-3859-442D-BD7F-381E8ADC94C4}: NameServer = 213.234.192.7 195.14.50.1
O18 — Protocol: skype-ie-addon-data — {91774881-D725-4E58-B298-07617B9B86A8} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 — AppInit_DLLs: C:WINDOWSsystem32vksaver.dll
O22 — SharedTaskScheduler: Windows DreamScene — {E31004D1-A431-41B8-826F-E902F9D95C81} — C:WINDOWSSystem32DreamScene.dll
O23 — Service: Apple Mobile Device — Apple Inc. — C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
O23 — Service: avast! Antivirus — ALWIL Software — C:Program FilesAlwil SoftwareAvast5AvastSvc.exe
O23 — Service: avast! Mail Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast5AvastSvc.exe
O23 — Service: avast! Web Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast5AvastSvc.exe
O23 — Service: Служба Bonjour (Bonjour Service) — Apple Inc. — C:Program FilesBonjourmDNSResponder.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба Google Update (gupdate) (gupdate) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Сервис iPod (iPod Service) — Apple Inc. — C:Program FilesiPodbiniPodService.exe
O23 — Service: McAfee Security Scan Component Host Service (McComponentHostService) — McAfee, Inc. — C:Program FilesMcAfee Security Scan2.0.181McCHSvc.exe
O23 — Service: NMSAccess — Unknown owner — d:Program FilesCDBurnerXPNMSAccessU.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe—
End of file — 10337 bytes======Scheduled tasks folder======
C:WINDOWStasksAppleSoftwareUpdate.job
C:WINDOWStasksGoogleUpdateTaskMachineCore.job
C:WINDOWStasksGoogleUpdateTaskMachineUA.job
C:WINDOWStasksScheduled Update for Ask Toolbar.job
C:WINDOWStasksUser_Feed_Synchronization-{0ACF9482-4895-4506-BAC9-59F52DB7F845}.job
C:WINDOWStasksUser_Feed_Synchronization-{EC548424-45CB-4529-AE4C-5EAE7101C7D4}.job======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2010-04-04 75200][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_06binssv.dll [2008-03-25 509328][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}]
MyAshampoo Toolbar — C:Program FilesMyAshampootbMyAs.dll [2009-12-31 2349080][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class — C:Program FilesInternet Explorerqipsearchbar.dll [2009-07-09 150768][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-03-23 279664][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll [2010-02-08 804136][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier5.5.4723.1820swg.dll [2010-03-23 812528][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar — C:Program FilesAsk.comGenericAskToolbar.dll [2010-01-20 1197448][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-03-23 279664]
{D4027C7F-154A-4066-A1AD-4243D8127440} — Ask Toolbar — C:Program FilesAsk.comGenericAskToolbar.dll [2010-01-20 1197448]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2010-04-14 10318152]
{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} — MyAshampoo Toolbar — C:Program FilesMyAshampootbMyAs.dll [2009-12-31 2349080][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«Cmaudio»=RunDll32 cmicnfg.cpl,CMICtrlWnd []
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2007-12-05 8523776]
«nwiz»=nwiz.exe /install []
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2007-12-05 81920]
«RemoteControl»=D:Program FilesCyberLinkPowerDVDPDVDServ.exe [2003-10-31 32768]
«PAC7302_Monitor»=C:WINDOWSPixArtPAC7302Monitor.exe [2006-11-03 319488]
«VKSaverUpdater»=C:Program FilesVKSaverVKSaverUpdater.exe [2010-03-06 56832]
«AppleSyncNotifier»=C:Program FilesCommon FilesAppleMobile Device SupportAppleSyncNotifier.exe [2010-03-16 47392]
«NeroFilterCheck»=C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
«Windows Notify Service»=C:WINDOWSwsntfy.exe [2010-04-26 56832]
«avast5″=C:PROGRA~1ALWILS~1Avast5avastUI.exe [2010-04-14 2790472]
«Amazing3DAquariumWallpaper»= [][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-25 17408]
«VistaIcon»=C:Program FilesVistaDriveIconVistaDrv.exe [2008-03-23 132096][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOnce]
«SpeedUpMyPC»=C:Program FilesUniblueSpeedUpMyPClauncher.exe [2010-04-14 46376]C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
McAfee Security Scan Plus.lnk — C:Program FilesMcAfee Security Scan2.0.181SSScheduler.exe[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLS»=»C:WINDOWSsystem32vksaver.dll»[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2008-03-21 133632][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionexplorerSharedTaskScheduler]
Windows DreamScene — {E31004D1-A431-41B8-826F-E902F9D95C81} — C:WINDOWSSystem32DreamScene.dll [2009-05-12 233888][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«SynchronousMachineGroupPolicy»=0
«SynchronousUserGroupPolicy»=0
«EnableLUA»=0[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«NoThumbnailCache»=1
«NoSMConfigurePrograms»=1
«NoSMHelp»=1[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»======List of files/folders created in the last 3 months======
2010-04-28 01:22:10 —-HDC—- C:WINDOWSie8
2010-04-28 00:38:48 —-D—- C:Documents and SettingsАлексейApplication DataMedia Player Classic
2010-04-28 00:26:22 —-D—- C:rsit
2010-04-28 00:26:22 —-D—- C:Program Filestrend micro
2010-04-28 00:07:38 —-D—- C:Documents and SettingsАлексейApplication DataMacromedia
2010-04-28 00:07:38 —-D—- C:Documents and SettingsАлексейApplication DataIdentities
2010-04-28 00:07:38 —-D—- C:Documents and SettingsАлексейApplication DataAdobe
2010-04-27 23:21:57 —-D—- C:Documents and SettingsАлексейApplication DataUniblue
2010-04-27 23:04:55 —-D—- C:Documents and SettingsАлексейApplication DataGoogle
2010-04-27 22:30:29 —-ASH—- C:Documents and SettingsАлексейApplication Datadesktop.ini
2010-04-27 22:30:27 —-SD—- C:Documents and SettingsАлексейApplication DataMicrosoft
2010-04-27 22:09:28 —-D—- C:Config.Msi
2010-04-27 21:44:40 —-D—- C:Program Filescandle_1600x1200
2010-04-27 21:34:12 —-D—- C:Program Filesrain_1600x1200
2010-04-27 21:32:44 —-D—- C:Program Fileswave_1600x1200
2010-04-27 20:45:37 —-A—- C:WINDOWSsystem32DreamScene.dll
2010-04-27 01:07:18 —-A—- C:WINDOWSsystem32RtNicProp32.dll
2010-04-27 00:38:01 —-HDC—- C:WINDOWS$NtUninstallKB958644$
2010-04-26 23:03:59 —-D—- C:Program FilesUniblue
2010-04-26 21:58:14 —-A—- C:WINDOWSsystem32aswBoot.exe
2010-04-26 21:07:47 —-RSH—- C:WINDOWSwsntfy.exe
2010-04-26 21:07:42 —-A—- C:WINDOWSsystem32pwn2.exe
2010-04-26 20:54:36 —-D—- C:Program FilesAlwil Software
2010-04-26 20:54:36 —-D—- C:Documents and SettingsAll UsersApplication DataAlwil Software
2010-04-23 00:09:14 —-A—- C:WINDOWSsystem32msxml4r.dll
2010-04-23 00:09:14 —-A—- C:WINDOWSsystem32msxml4a.dll
2010-04-23 00:09:14 —-A—- C:WINDOWSsystem32msxml4.dll
2010-04-22 23:11:31 —-HDC—- C:WINDOWS$NtUninstallKB915865$
2010-04-22 23:07:43 —-D—- C:Documents and SettingsAll UsersApplication DataWindows Genuine Advantage
2010-04-19 00:38:48 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
2010-04-19 00:38:45 —-D—- C:Program FilesCommon FilesAdobe AIR
2010-04-16 21:03:55 —-D—- C:VKontakteDJ
2010-04-14 00:53:28 —-A—- C:WINDOWSNeroDigital.ini
2010-04-11 22:08:36 —-N—- C:WINDOWSsystem32ImagXRA7.dll
2010-04-11 22:08:36 —-N—- C:WINDOWSsystem32ImagXR7.dll
2010-04-11 22:08:36 —-N—- C:WINDOWSsystem32ImagXpr7.dll
2010-04-11 22:08:36 —-N—- C:WINDOWSsystem32ImagX7.dll
2010-04-11 22:08:36 —-D—- C:Program FilesCommon FilesAhead
2010-04-11 22:08:36 —-A—- C:WINDOWSsystem32TwnLib20.dll
2010-04-11 22:08:36 —-A—- C:WINDOWSsystem32NeroCheck.exe
2010-04-11 21:24:21 —-D—- C:Program FilesConduit
2010-04-11 21:24:20 —-D—- C:Program FilesMyAshampoo
2010-04-11 21:24:04 —-D—- C:Documents and SettingsAll UsersApplication Dataashampoo
2010-04-08 10:37:02 —-A—- C:WINDOWSsystem32rmoc3260.dll
2010-04-08 10:37:02 —-A—- C:WINDOWSsystem32pncrt.dll
2010-04-07 01:27:14 —-D—- C:Documents and SettingsAll UsersApplication DataFarmFrenzy3
2010-03-31 22:45:34 —-D—- C:Program FilesiPod
2010-03-31 22:45:23 —-D—- C:Documents and SettingsAll UsersApplication Data{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-03-31 22:40:27 —-D—- C:Program FilesQuickTime
2010-03-31 22:38:11 —-D—- C:WINDOWSSxsCaPendDel
2010-03-31 22:31:51 —-D—- C:Program FilesBonjour
2010-03-30 10:05:47 —-D—- C:Documents and SettingsAll UsersApplication DataCanneverbe Limited
2010-03-28 20:04:57 —-D—- C:Program FilesCommon FilesSkype
2010-03-26 22:11:29 —-D—- C:Documents and SettingsAll UsersApplication DataYandex
2010-03-26 22:11:11 —-D—- C:Program FilesYandex
2010-03-26 22:10:51 —-D—- C:Program FilesVKSaver
2010-03-24 13:29:34 —-D—- C:WINDOWSSun
2010-03-24 00:22:11 —-A—- C:WINDOWSsystem32msvcp71.dll
2010-03-24 00:22:11 —-A—- C:WINDOWSsystem32mfc71.dll
2010-03-24 00:22:00 —-D—- C:WINDOWSAlbum
2010-03-24 00:21:57 —-D—- C:Program FilesKYE
2010-03-24 00:17:59 —-D—- C:WINDOWSPixArt
2010-03-24 00:17:55 —-A—- C:WINDOWSsystem32vfwwdm32.dll
2010-03-24 00:15:19 —-A—- C:WINDOWSsystem32CoInst_071029.dll
2010-03-24 00:15:18 —-D—- C:Program FilesCommon FilesiLook300
2010-03-24 00:15:18 —-A—- C:WINDOWSsystem32SP7302.INI
2010-03-24 00:00:03 —-RD—- C:Program FilesSkype
2010-03-23 23:59:55 —-D—- C:Documents and SettingsAll UsersApplication DataSkype
2010-03-23 22:41:53 —-D—- C:Documents and SettingsAll UsersApplication Data{B14D9CDC-90D5-4BB2-B6CA-DCF6842AEFD0}
2010-03-23 22:06:35 —-HD—- C:WINDOWSmsdownld.tmp
2010-03-23 22:05:28 —-N—- C:WINDOWSsystem32spmsg.dll
2010-03-23 21:48:45 —-D—- C:Program FilesAsk.com
2010-03-23 04:10:01 —-A—- C:WINDOWSsystem32h323log.txt
2010-03-23 04:08:25 —-A—- C:WINDOWSsystem32wshirda.dll
2010-03-23 04:08:24 —-A—- C:WINDOWSsystem32irmon.dll
2010-03-23 04:08:24 —-A—- C:WINDOWSsystem32irftp.exe
2010-03-23 04:07:43 —-A—- C:WINDOWSsystem32nvwrszht.dll
2010-03-23 04:07:43 —-A—- C:WINDOWSsystem32nvwrszhc.dll
2010-03-23 04:07:43 —-A—- C:WINDOWSsystem32nvwrstr.dll
2010-03-23 04:07:43 —-A—- C:WINDOWSsystem32nvwrsth.dll
2010-03-23 04:07:43 —-A—- C:WINDOWSsystem32nvrszht.dll
2010-03-23 04:07:43 —-A—- C:WINDOWSsystem32nvrszhc.dll
2010-03-23 04:07:43 —-A—- C:WINDOWSsystem32nvrstr.dll
2010-03-23 04:07:42 —-A—- C:WINDOWSsystem32nvwrssv.dll
2010-03-23 04:07:42 —-A—- C:WINDOWSsystem32nvwrssl.dll
2010-03-23 04:07:42 —-A—- C:WINDOWSsystem32nvwrssk.dll
2010-03-23 04:07:42 —-A—- C:WINDOWSsystem32nvwrsru.dll
2010-03-23 04:07:42 —-A—- C:WINDOWSsystem32nvwrsptb.dll
2010-03-23 04:07:42 —-A—- C:WINDOWSsystem32nvwrspt.dll
2010-03-23 04:07:42 —-A—- C:WINDOWSsystem32nvwrspl.dll
2010-03-23 04:07:42 —-A—- C:WINDOWSsystem32nvwrsno.dll
2010-03-23 04:07:42 —-A—- C:WINDOWSsystem32nvwrsnl.dll
2010-03-23 04:07:42 —-A—- C:WINDOWSsystem32nvrsth.dll
2010-03-23 04:07:42 —-A—- C:WINDOWSsystem32nvrssv.dll
2010-03-23 04:07:42 —-A—- C:WINDOWSsystem32nvrssl.dll
2010-03-23 04:07:42 —-A—- C:WINDOWSsystem32nvrssk.dll
2010-03-23 04:07:42 —-A—- C:WINDOWSsystem32nvrsru.dll
2010-03-23 04:07:42 —-A—- C:WINDOWSsystem32nvrsptb.dll
2010-03-23 04:07:42 —-A—- C:WINDOWSsystem32nvrspt.dll
2010-03-23 04:07:42 —-A—- C:WINDOWSsystem32nvrspl.dll
2010-03-23 04:07:42 —-A—- C:WINDOWSsystem32nvrsno.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvwrsko.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvwrsja.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvwrsit.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvwrshu.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvwrshe.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvwrsfr.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvwrsfi.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvwrsesm.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvwrses.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvwrseng.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvwrsel.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvrsnl.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvrsko.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvrsja.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvrsit.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvrshu.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvrshe.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvrsfr.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvrsfi.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvrsesm.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvrses.dll
2010-03-23 04:07:41 —-A—- C:WINDOWSsystem32nvrseng.dll
2010-03-23 04:07:40 —-A—- C:WINDOWSsystem32nvwrsde.dll
2010-03-23 04:07:40 —-A—- C:WINDOWSsystem32nvwrsda.dll
2010-03-23 04:07:40 —-A—- C:WINDOWSsystem32nvwrscs.dll
2010-03-23 04:07:40 —-A—- C:WINDOWSsystem32nvwrsar.dll
2010-03-23 04:07:40 —-A—- C:WINDOWSsystem32nvrsel.dll
2010-03-23 04:07:40 —-A—- C:WINDOWSsystem32nvrsde.dll
2010-03-23 04:07:40 —-A—- C:WINDOWSsystem32nvrsda.dll
2010-03-23 04:07:40 —-A—- C:WINDOWSsystem32nvrscs.dll
2010-03-23 04:07:40 —-A—- C:WINDOWSsystem32nvrsar.dll
2010-03-23 04:07:40 —-A—- C:WINDOWSsystem32nvmccsrs.dll
2010-03-23 04:07:40 —-A—- C:WINDOWSsystem32nvexpbar.dll
2010-03-23 04:07:40 —-A—- C:WINDOWSsystem32nvcpluir.dll
2010-03-23 04:07:40 —-A—- C:WINDOWSsystem32nvcplui.exe
2010-03-23 04:07:39 —-D—- C:WINDOWSnview
2010-03-23 04:07:39 —-A—- C:WINDOWSsystem32nwiz.exe
2010-03-23 04:07:39 —-A—- C:WINDOWSsystem32nvwimg.dll
2010-03-23 04:07:39 —-A—- C:WINDOWSsystem32nvwdmcpl.dll
2010-03-23 04:07:39 —-A—- C:WINDOWSsystem32nvuninst.exe
2010-03-23 04:07:39 —-A—- C:WINDOWSsystem32nvudisp.exe
2010-03-23 04:07:39 —-A—- C:WINDOWSsystem32nvshell.dll
2010-03-23 04:07:39 —-A—- C:WINDOWSsystem32nview.dll
2010-03-23 04:07:39 —-A—- C:WINDOWSsystem32nvdspsch.exe
2010-03-23 04:07:39 —-A—- C:WINDOWSsystem32nvcolor.exe
2010-03-23 04:07:39 —-A—- C:WINDOWSsystem32nvappbar.exe
2010-03-23 04:07:39 —-A—- C:WINDOWSsystem32keystone.exe
2010-03-23 04:07:16 —-A—- C:WINDOWSsystem32ksuser.dll
2010-03-23 04:07:06 —-A—- C:WINDOWSsystem32usbui.dll
2010-03-23 04:04:36 —-SHD—- C:WINDOWSInstaller
2010-03-23 04:04:36 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2010-03-23 04:04:34 —-D—- C:Program FilesCommon FilesODBC
2010-03-23 04:04:34 —-A—- C:WINDOWSODBCINST.INI
2010-03-23 04:04:28 —-D—- C:Program FilesCommon FilesSpeechEngines
2010-03-23 04:04:28 —-D—- C:Program FilesCommon FilesMicrosoft Shared
2010-03-23 04:04:27 —-RD—- C:Program Files
2010-03-23 04:04:27 —-D—- C:Program FilesCommon Files
2010-03-23 04:04:23 —-RA—- C:WINDOWSsystem32kbdtuq.dll
2010-03-23 04:04:23 —-RA—- C:WINDOWSsystem32kbdtuf.dll
2010-03-23 04:04:23 —-RA—- C:WINDOWSsystem32kbdazel.dll
2010-03-23 04:04:20 —-RA—- C:WINDOWSsystem32kbdhept.dll
2010-03-23 04:04:20 —-RA—- C:WINDOWSsystem32kbdhela3.dll
2010-03-23 04:04:20 —-RA—- C:WINDOWSsystem32kbdhela2.dll
2010-03-23 04:04:19 —-RA—- C:WINDOWSsystem32kbdhe319.dll
2010-03-23 04:04:19 —-RA—- C:WINDOWSsystem32kbdhe220.dll
2010-03-23 04:04:19 —-RA—- C:WINDOWSsystem32kbdhe.dll
2010-03-23 04:04:19 —-RA—- C:WINDOWSsystem32kbdgkl.dll
2010-03-23 04:04:16 —-RA—- C:WINDOWSsystem32kbdlv1.dll
2010-03-23 04:04:16 —-RA—- C:WINDOWSsystem32kbdlv.dll
2010-03-23 04:04:16 —-RA—- C:WINDOWSsystem32kbdlt1.dll
2010-03-23 04:04:16 —-RA—- C:WINDOWSsystem32kbdlt.dll
2010-03-23 04:04:16 —-RA—- C:WINDOWSsystem32kbdest.dll
2010-03-23 04:04:14 —-RA—- C:WINDOWSsystem32kbdsl1.dll
2010-03-23 04:04:14 —-RA—- C:WINDOWSsystem32kbdsl.dll
2010-03-23 04:04:14 —-RA—- C:WINDOWSsystem32kbdro.dll
2010-03-23 04:04:13 —-RA—- C:WINDOWSsystem32kbdycl.dll
2010-03-23 04:04:13 —-RA—- C:WINDOWSsystem32kbdpl1.dll
2010-03-23 04:04:13 —-RA—- C:WINDOWSsystem32kbdpl.dll
2010-03-23 04:04:13 —-RA—- C:WINDOWSsystem32kbdhu1.dll
2010-03-23 04:04:13 —-RA—- C:WINDOWSsystem32kbdhu.dll
2010-03-23 04:04:13 —-RA—- C:WINDOWSsystem32kbdcz2.dll
2010-03-23 04:04:13 —-RA—- C:WINDOWSsystem32kbdcz1.dll
2010-03-23 04:04:13 —-RA—- C:WINDOWSsystem32kbdcz.dll
2010-03-23 04:04:13 —-RA—- C:WINDOWSsystem32kbdcr.dll
2010-03-23 04:04:13 —-RA—- C:WINDOWSsystem32KBDAL.DLL
2010-03-23 04:04:06 —-A—- C:WINDOWSsystem32kbdtat.dll
2010-03-23 04:04:06 —-A—- C:WINDOWSsystem32kbdmon.dll
2010-03-23 04:04:06 —-A—- C:WINDOWSsystem32kbdkyr.dll
2010-03-23 04:04:06 —-A—- C:WINDOWSsystem32kbdaze.dll
2010-03-23 04:04:05 —-A—- C:WINDOWSsystem32kbdycc.dll
2010-03-23 04:04:05 —-A—- C:WINDOWSsystem32kbduzb.dll
2010-03-23 04:04:05 —-A—- C:WINDOWSsystem32kbdur.dll
2010-03-23 04:04:05 —-A—- C:WINDOWSsystem32kbdkaz.dll
2010-03-23 04:04:05 —-A—- C:WINDOWSsystem32kbdbu.dll
2010-03-23 04:04:05 —-A—- C:WINDOWSsystem32kbdblr.dll
2010-03-23 04:04:03 —-A—- C:WINDOWSsystem32irclass.dll
2010-03-23 04:04:03 —-A—- C:WINDOWSsystem32dgsetup.dll
2010-03-23 04:04:03 —-A—- C:WINDOWSsystem32dgrpsetu.dll
2010-03-23 04:04:02 —-A—- C:WINDOWSsystem32spxcoins.dll
2010-03-23 04:04:02 —-A—- C:WINDOWSsystem32EqnClass.Dll
2010-03-23 04:03:59 —-N—- C:WINDOWSsystem32CONFIG.TMP
2010-03-23 04:03:59 —-A—- C:WINDOWSTASKMAN.EXE
2010-03-23 04:03:58 —-A—- C:WINDOWSsystem32batt.dll
2010-03-23 04:03:57 —-A—- C:WINDOWSNOTEPAD.EXE
2010-03-23 04:03:56 —-A—- C:WINDOWSsystem32storprop.dll
2010-03-23 04:03:43 —-ASH—- C:Documents and SettingsAll UsersApplication Datadesktop.ini
2010-03-23 04:02:24 —-RA—- C:WINDOWSSETAE5.tmp
2010-03-23 04:02:20 —-RA—- C:WINDOWSSETAE1.tmp
2010-03-23 04:02:17 —-RA—- C:WINDOWSSETAE0.tmp
2010-03-23 04:01:20 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
2010-03-23 03:59:20 —-D—- C:WINDOWSsystem32en-US
2010-03-23 03:53:52 —-RA—- C:WINDOWSsystem32udaprop.dll
2010-03-23 03:53:41 —-RA—- C:WINDOWSsystem32cmuda.dll
2010-03-23 03:53:41 —-RA—- C:WINDOWSsystem32cmirmdrv.dll
2010-03-23 03:53:41 —-RA—- C:WINDOWSsystem32Audio3D.dll
2010-03-23 03:53:41 —-RA—- C:WINDOWSsystem32a3d.dll
2010-03-23 03:53:38 —-RA—- C:WINDOWSsystem32cmirmdrv.exe
2010-03-23 03:53:24 —-D—- C:Documents and SettingsAll UsersApplication DataMcAfee
2010-03-23 03:53:23 —-D—- C:Documents and SettingsAll UsersApplication DataMcAfee Security Scan
2010-03-23 03:53:13 —-D—- C:Program FilesMcAfee Security Scan
2010-03-23 03:51:20 —-A—- C:WINDOWSsystem32nvwssr.dll
2010-03-23 03:51:19 —-A—- C:WINDOWSsystem32nvwss.dll
2010-03-23 03:51:17 —-A—- C:WINDOWSsystem32nvwddi.dll
2010-03-23 03:51:12 —-A—- C:WINDOWSsystem32nvvitvsr.dll
2010-03-23 03:51:11 —-A—- C:WINDOWSsystem32nvvitvs.dll
2010-03-23 03:51:09 —-A—- C:WINDOWSsystem32nvoglnt.dll
2010-03-23 03:51:08 —-A—- C:WINDOWSsystem32nvnt4cpl.dll
2010-03-23 03:50:59 —-A—- C:WINDOWSsystem32nvmoblsr.dll
2010-03-23 03:50:58 —-A—- C:WINDOWSsystem32nvmobls.dll
2010-03-23 03:50:58 —-A—- C:WINDOWSsystem32nvmctray.dll
2010-03-23 03:50:58 —-A—- C:WINDOWSsystem32nvmccssr.dll
2010-03-23 03:50:58 —-A—- C:WINDOWSsystem32nvmccss.dll
2010-03-23 03:50:58 —-A—- C:WINDOWSsystem32nvmccs.dll
2010-03-23 03:50:57 —-A—- C:WINDOWSsystem32nvgamesr.dll
2010-03-23 03:50:57 —-A—- C:WINDOWSsystem32nvgames.dll
2010-03-23 03:50:56 —-A—- C:WINDOWSsystem32nvdispsr.dll
2010-03-23 03:50:56 —-A—- C:WINDOWSsystem32nvdisps.dll
2010-03-23 03:50:56 —-A—- C:WINDOWSsystem32nvcuda.dll
2010-03-23 03:50:47 —-A—- C:WINDOWSsystem32nvcpl.dll
2010-03-23 03:50:46 —-A—- C:WINDOWSsystem32nvcodins.dll
2010-03-23 03:50:46 —-A—- C:WINDOWSsystem32nvcod.dll
2010-03-23 03:50:46 —-A—- C:WINDOWSsystem32nvapi.dll
2010-03-23 03:50:45 —-A—- C:WINDOWSsystem32nvsvc32.exe
2010-03-23 03:50:45 —-A—- C:WINDOWSsystem32nv4_disp.dll
2010-03-23 03:48:22 —-D—- C:Program FilesGoogle
2010-03-23 03:48:22 —-D—- C:Documents and SettingsAll UsersApplication DataGoogle
2010-03-23 03:48:05 —-D—- C:WINDOWSsystem32CatRoot2
2010-03-23 03:48:05 —-D—- C:WINDOWSsystem32CatRoot
2010-03-23 03:47:39 —-D—- C:Documents and SettingsAll UsersApplication DataNOS
2010-03-23 03:46:37 —-D—- C:Documents and Settings
2010-03-23 03:45:24 —-SH—- C:boot.ini
2010-03-23 03:42:43 —-SHD—- C:System Volume Information
2010-03-23 03:38:16 —-A—- C:WINDOWSsystem32wmpns.dll
2010-03-23 03:34:30 —-RSHDC—- C:WINDOWSsystem32dllcache
2010-03-23 03:34:30 —-RSD—- C:WINDOWSFonts
2010-03-23 03:34:30 —-HD—- C:WINDOWSinf
2010-03-23 03:34:30 —-D—- C:WINDOWSWinSxS
2010-03-23 03:34:30 —-D—- C:WINDOWSWeb
2010-03-23 03:34:30 —-D—- C:WINDOWStwain_32
2010-03-23 03:34:30 —-D—- C:WINDOWSTemp
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32wins
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32wbem
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32usmt
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32spool
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32ShellExt
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32Setup
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32ru-ru
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32ru
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32ras
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32oobe
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32npp
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32mui
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32inetsrv
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32IME
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32icsxml
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32ias
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32export
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32drivers
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32dhcp
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32config
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem323com_dmi
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem323076
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem322052
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem321054
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem321049
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem321042
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem321041
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem321037
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem321033
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem321031
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem321028
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem321025
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem32
2010-03-23 03:34:30 —-D—- C:WINDOWSsystem
2010-03-23 03:34:30 —-D—- C:WINDOWSsecurity
2010-03-23 03:34:30 —-D—- C:WINDOWSResources
2010-03-23 03:34:30 —-D—- C:WINDOWSrepair
2010-03-23 03:34:30 —-D—- C:WINDOWSProvisioning
2010-03-23 03:34:30 —-D—- C:WINDOWSPeerNet
2010-03-23 03:34:30 —-D—- C:WINDOWSpchealth
2010-03-23 03:34:30 —-D—- C:WINDOWSNetwork Diagnostic
2010-03-23 03:34:30 —-D—- C:WINDOWSmui
2010-03-23 03:34:30 —-D—- C:WINDOWSmsapps
2010-03-23 03:34:30 —-D—- C:WINDOWSmsagent
2010-03-23 03:34:30 —-D—- C:WINDOWSMedia
2010-03-23 03:34:30 —-D—- C:WINDOWSL2Schemas
2010-03-23 03:34:30 —-D—- C:WINDOWSjava
2010-03-23 03:34:30 —-D—- C:WINDOWSime
2010-03-23 03:34:30 —-D—- C:WINDOWSHelp
2010-03-23 03:34:30 —-D—- C:WINDOWSehome
2010-03-23 03:34:30 —-D—- C:WINDOWSDriver Cache
2010-03-23 03:34:30 —-D—- C:WINDOWSDebug
2010-03-23 03:34:30 —-D—- C:WINDOWSCursors
2010-03-23 03:34:30 —-D—- C:WINDOWSConnection Wizard
2010-03-23 03:34:30 —-D—- C:WINDOWSConfig
2010-03-23 03:34:30 —-D—- C:WINDOWSAppPatch
2010-03-23 03:34:30 —-D—- C:WINDOWSaddins
2010-03-23 03:34:30 —-D—- C:WINDOWS
2010-03-23 03:25:57 —-D—- C:Documents and SettingsAll UsersApplication DataApple Computer
2010-03-23 03:25:27 —-D—- C:Program FilesApple Software Update
2010-03-23 03:25:18 —-DC—- C:WINDOWSsystem32DRVSTORE
2010-03-23 03:24:28 —-D—- C:Program FilesCommon FilesApple
2010-03-23 03:24:27 —-D—- C:Documents and SettingsAll UsersApplication DataApple
2010-03-23 03:11:59 —-A—- C:WINDOWSsystem32unrar.dll
2010-03-23 03:11:58 —-A—- C:WINDOWSavisplitter.ini
2010-03-23 03:11:51 —-A—- C:WINDOWSsystem32yv12vfw.dll
2010-03-23 03:11:50 —-A—- C:WINDOWSsystem32xvidvfw.dll
2010-03-23 03:11:50 —-A—- C:WINDOWSsystem32xvidcore.dll
2010-03-23 03:11:48 —-A—- C:WINDOWSsystem32qt-dx331.dll
2010-03-23 03:11:48 —-A—- C:WINDOWSsystem32dpl100.dll
2010-03-23 03:11:48 —-A—- C:WINDOWSsystem32divx.dll
2010-03-23 03:11:44 —-A—- C:WINDOWSsystem32ff_vfw.dll.manifest
2010-03-23 03:11:44 —-A—- C:WINDOWSsystem32ff_vfw.dll
2010-03-23 03:11:40 —-A—- C:WINDOWSsystem32msvcr71.dll
2010-03-23 02:38:00 —-D—- C:Documents and SettingsAll UsersApplication DataKaspersky Lab
2010-03-23 02:04:16 —-D—- C:Documents and SettingsAll UsersApplication DataCyberLink
2010-03-23 02:04:05 —-D—- C:Program FilesCyberLink
2010-03-23 01:59:53 —-A—- C:WINDOWSODBC.INI
2010-03-23 01:59:49 —-A—- C:WINDOWSsystem32mdimon.dll
2010-03-23 01:58:19 —-D—- C:Program FilesCommon FilesDESIGNER
2010-03-23 01:57:59 —-D—- C:WINDOWSSHELLNEW
2010-03-23 01:57:56 —-D—- C:Program FilesMicrosoft.NET
2010-03-23 01:56:37 —-RHD—- C:MSOCache
2010-03-23 01:54:06 —-SHD—- C:RECYCLER
2010-03-23 01:51:50 —-D—- C:WINDOWSProfiles
2010-03-23 01:51:50 —-D—- C:Program FilesCommon FilesAdobe
2010-03-23 01:51:50 —-D—- C:Program FilesAdobe
2010-03-23 01:51:37 —-A—- C:WINDOWSIsUninst.exe
2010-03-23 01:51:02 —-D—- C:Program Filesviewsonic
2010-03-23 01:50:59 —-D—- C:WINDOWSsystem32ReinstallBackups
2010-03-23 01:50:55 —-A—- C:WINDOWSsystem32mon.txt
2010-03-23 01:50:37 —-A—- C:WINDOWSVSWizard.ini
2010-03-23 01:47:50 —-A—- C:WINDOWSCMISETUP.INI
2010-03-23 01:47:50 —-A—- C:WINDOWSCMCDPLAY.INI
2010-03-23 01:47:43 —-A—- C:WINDOWSWininit.ini
2010-03-23 01:47:30 —-A—- C:WINDOWSCMIUninstall.exe
2010-03-23 01:47:29 —-D—- C:Program FilesC-Media 3D Audio
2010-03-23 01:47:29 —-A—- C:WINDOWSCmiRmRedundDir.exe
2010-03-23 01:47:29 —-A—- C:WINDOWSCMIRmDriver.dll
2010-03-23 01:45:32 —-D—- C:WINDOWSOPTIONS
2010-03-23 01:45:31 —-HD—- C:Program FilesInstallShield Installation Information
2010-03-23 01:45:25 —-D—- C:Program FilesCommon FilesInstallShield
2010-03-23 01:42:41 —-D—- C:Program FilesIntel
2010-03-23 01:42:10 —-A—- C:WINDOWSAscd_tmp.ini
2010-03-23 01:38:08 —-HD—- C:Program FilesUninstall Information
2010-03-23 01:35:23 —-RD—- C:WINDOWSOemDrv
2010-03-23 01:34:17 —-D—- C:WINDOWSSoftwareDistribution
2010-03-23 01:34:03 —-D—- C:WINDOWSPrefetch
2010-03-23 01:34:02 —-A—- C:WINDOWSSchedLgU.Txt
2010-03-23 01:28:10 —-D—- C:WINDOWSsystem32xircom
2010-03-23 01:28:10 —-D—- C:Program Filesxerox
2010-03-23 01:28:10 —-D—- C:Program Filesmsn gaming zone
2010-03-23 01:28:10 —-D—- C:Program Filesmicrosoft frontpage
2010-03-23 01:27:41 —-D—- C:Program FilesVistaDriveIcon
2010-03-23 01:27:38 —-A—- C:WINDOWSsystem32hidcon.exe
2010-03-23 01:27:38 —-A—- C:WINDOWSFinish.exe
2010-03-23 01:27:36 —-A—- C:WINDOWSsystem32OEMINFO.INI
2010-03-23 01:27:15 —-A—- C:WINDOWSoemlogo.exe
2010-03-23 01:27:14 —-D—- C:WINDOWSIntel
2010-03-23 01:27:14 —-D—- C:WINDOWSAMD
2010-03-23 01:27:10 —-SD—- C:WINDOWSsystem32Microsoft
2010-03-23 01:27:10 —-A—- C:WINDOWSsystem32javaws.exe
2010-03-23 01:27:10 —-A—- C:WINDOWSsystem32javaw.exe
2010-03-23 01:27:10 —-A—- C:WINDOWSsystem32java.exe
2010-03-23 01:26:34 —-D—- C:Program FilesJava
2010-03-23 01:26:33 —-D—- C:Program FilesCommon FilesJava
2010-03-23 01:24:26 —-RSD—- C:WINDOWSassembly
2010-03-23 01:24:26 —-D—- C:WINDOWSMicrosoft.NET
2010-03-23 01:24:24 —-D—- C:WINDOWSsystem32URTTemp
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32xinput9_1_0.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32xinput1_3.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32xinput1_2.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32xinput1_1.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32XAudio2_0.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32xactengine3_0.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32xactengine2_9.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32xactengine2_8.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32xactengine2_7.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32xactengine2_6.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32xactengine2_5.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32xactengine2_4.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32xactengine2_3.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32xactengine2_2.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32xactengine2_10.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32xactengine2_1.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32xactengine2_0.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32X3DAudio1_3.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32x3daudio1_2.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32x3daudio1_1.dll
2010-03-23 01:23:51 —-A—- C:WINDOWSsystem32x3daudio1_0.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx9_37.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx9_36.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx9_35.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx9_34.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx9_33.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx9_32.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx9_31.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx9_30.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx9_29.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx9_28.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx9_27.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx9_26.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx9_25.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx9_24.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx10_37.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx10_36.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx10_35.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx10_34.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx10_33.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dx10.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32D3DCompiler_37.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dcompiler_36.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dcompiler_35.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dcompiler_34.dll
2010-03-23 01:23:50 —-A—- C:WINDOWSsystem32d3dcompiler_33.dll
2010-03-23 01:23:35 —-D—- C:WINDOWSsystem32Cplicons
2010-03-23 01:23:35 —-A—- C:WINDOWSsystem32wul_lng.ini
2010-03-23 01:23:35 —-A—- C:WINDOWSsystem32wul.exe
2010-03-23 01:23:35 —-A—- C:WINDOWSsystem32TweakUI.exe
2010-03-23 01:23:35 —-A—- C:WINDOWSsystem32pserv2.exe
2010-03-23 01:23:35 —-A—- C:WINDOWSsystem32pkey_lng.ini
2010-03-23 01:23:35 —-A—- C:WINDOWSsystem32MS_Auto.exe
2010-03-23 01:23:35 —-A—- C:WINDOWSsystem32Hoster.exe
2010-03-23 01:23:35 —-A—- C:WINDOWSsystem32bootsafe.exe
2010-03-23 01:23:01 —-HDC—- C:WINDOWS$NtUninstallKB941569$
2010-03-23 01:22:39 —-HDC—- C:WINDOWS$NtUninstallKB929399$
2010-03-23 01:22:18 —-HDC—- C:WINDOWS$NtUninstallMSCompPackV1$
2010-03-23 01:21:53 —-D—- C:Program FilesWindows Media Connect 2
2010-03-23 01:21:46 —-HDC—- C:WINDOWS$NtUninstallwmp11$
2010-03-23 01:21:16 —-HDC—- C:WINDOWS$NtUninstallWMFDist11$
2010-03-23 01:20:58 —-D—- C:WINDOWSsystem32LogFiles
2010-03-23 01:20:55 —-HDC—- C:WINDOWS$NtUninstallWudf01000$
2010-03-23 01:20:41 —-N—- C:WINDOWSsystem32WUDFx.dll
2010-03-23 01:20:41 —-N—- C:WINDOWSsystem32WudfSvc.dll
2010-03-23 01:20:41 —-N—- C:WINDOWSsystem32WudfPlatform.dll
2010-03-23 01:20:41 —-N—- C:WINDOWSsystem32WUDFCoinstaller.dll
2010-03-23 01:20:41 —-N—- C:WINDOWSsystem32wpdsp.dll
2010-03-23 01:20:41 —-N—- C:WINDOWSsystem32WPDShServiceObj.dll
2010-03-23 01:20:41 —-N—- C:WINDOWSsystem32WpdShext.dll
2010-03-23 01:20:41 —-N—- C:WINDOWSsystem32wpdmtpus.dll
2010-03-23 01:20:41 —-N—- C:WINDOWSsystem32wpdmtp.dll
2010-03-23 01:20:41 —-N—- C:WINDOWSsystem32wpdconns.dll
2010-03-23 01:20:41 —-N—- C:WINDOWSsystem32wpd_ci.dll
2010-03-23 01:20:40 —-N—- C:WINDOWSsystem32WMVXENCD.dll
2010-03-23 01:20:40 —-N—- C:WINDOWSsystem32WMVSENCD.dll
2010-03-23 01:20:39 —-N—- C:WINDOWSsystem32WMVSDECD.dll
2010-03-23 01:20:39 —-N—- C:WINDOWSsystem32WMVENCOD.dll
2010-03-23 01:20:39 —-N—- C:WINDOWSsystem32WMVDECOD.dll
2010-03-23 01:20:39 —-N—- C:WINDOWSsystem32WMVADVE.DLL
2010-03-23 01:20:39 —-N—- C:WINDOWSsystem32WMVADVD.dll
2010-03-23 01:20:39 —-N—- C:WINDOWSsystem32wmpsrcwp.dll
2010-03-23 01:20:39 —-N—- C:WINDOWSsystem32wmpps.dll
2010-03-23 01:20:39 —-N—- C:WINDOWSsystem32wmpmde.dll
2010-03-23 01:20:37 —-N—- C:WINDOWSsystem32wmpencen.dll
2010-03-23 01:20:37 —-N—- C:WINDOWSsystem32wmpeffects.dll
2010-03-23 01:20:36 —-N—- C:WINDOWSsystem32WudfHost.exe
2010-03-23 01:20:36 —-N—- C:WINDOWSsystem32wpdshextautoplay.exe
2010-03-23 01:20:36 —-N—- C:WINDOWSsystem32wmdrmsdk.dll
2010-03-23 01:20:36 —-N—- C:WINDOWSsystem32wmdrmnet.dll
2010-03-23 01:20:36 —-N—- C:WINDOWSsystem32wmdrmdev.dll
2010-03-23 01:20:36 —-N—- C:WINDOWSsystem32wdfapi.dll
2010-03-23 01:20:36 —-N—- C:WINDOWSsystem32PortableDeviceWMDRM.dll
2010-03-23 01:20:36 —-N—- C:WINDOWSsystem32PortableDeviceWiaCompat.dll
2010-03-23 01:20:36 —-N—- C:WINDOWSsystem32PortableDeviceTypes.dll
2010-03-23 01:20:36 —-N—- C:WINDOWSsystem32PortableDeviceClassExtension.dll
2010-03-23 01:20:36 —-N—- C:WINDOWSsystem32PortableDeviceApi.dll
2010-03-23 01:20:36 —-N—- C:WINDOWSsystem32msdelta.dll
2010-03-23 01:20:36 —-N—- C:WINDOWSsystem32MPG4DECD.dll
2010-03-23 01:20:36 —-N—- C:WINDOWSsystem32MP4SDECD.dll
2010-03-23 01:20:36 —-N—- C:WINDOWSsystem32MP43DECD.dll
2010-03-23 01:20:36 —-N—- C:WINDOWSsystem32MFPLAT.dll
2010-03-23 01:20:36 —-N—- C:WINDOWSsystem32audiodev.dll
2010-03-23 01:20:35 —-N—- C:WINDOWSsystem32wdfmgr.exe
2010-03-23 01:20:35 —-N—- C:WINDOWSsystem32uwdf.exe
2010-03-23 01:20:34 —-N—- C:WINDOWSsystem32drmupgds.exe
2010-03-23 01:20:12 —-N—- C:WINDOWSsystem32wpdshextres.dll
2010-03-23 01:19:53 —-D—- C:WINDOWSWBEM
2010-03-23 01:19:07 —-HDC—- C:WINDOWSie7
2010-03-23 01:18:52 —-HDC—- C:WINDOWS$NtServicePackUninstallIDNMitigationAPIs$
2010-03-23 01:18:33 —-A—- C:WINDOWSsystem32spupdsvc.exe
2010-03-23 01:18:32 —-HDC—- C:WINDOWS$NtServicePackUninstallNLSDownlevelMapping$
2010-03-23 01:18:16 —-HD—- C:WINDOWS$hf_mig$
2010-03-23 01:18:02 —-A—- C:WINDOWSsystem32msfeedsbs.dll
2010-03-23 01:18:02 —-A—- C:WINDOWSsystem32msfeeds.dll
2010-03-23 01:18:01 —-A—- C:WINDOWSsystem32WinFXDocObj.exe
2010-03-23 01:18:01 —-A—- C:WINDOWSsystem32msfeedssync.exe
2010-03-23 01:18:01 —-A—- C:WINDOWSsystem32ieui.dll
2010-03-23 01:18:01 —-A—- C:WINDOWSsystem32iertutil.dll
2010-03-23 01:18:01 —-A—- C:WINDOWSsystem32ieframe.dll
2010-03-23 01:18:01 —-A—- C:WINDOWSsystem32ieapfltr.dll
2010-03-23 01:18:01 —-A—- C:WINDOWSsystem32icardie.dll
2010-03-23 01:18:00 —-A—- C:WINDOWSsystem32ieudinit.exe
2010-03-23 01:17:55 —-A—- C:WINDOWSsystem32ieframe.dll.mui
2010-03-23 01:17:55 —-A—- C:WINDOWSsystem32advpack.dll.mui
2010-03-23 01:17:25 —-A—- C:WINDOWScontrol.ini
2010-03-23 01:17:25 —-A—- C:AUTOEXEC.BAT
2010-03-23 01:17:06 —-A—- C:WINDOWSsystem32mapi32.dll
2010-03-23 01:15:37 —-SD—- C:WINDOWSDownloaded Program Files
2010-03-23 01:15:37 —-RD—- C:WINDOWSOffline Web Pages
2010-03-23 01:15:36 —-RAH—- C:WINDOWSsystem32logonui.exe.manifest
2010-03-23 01:15:26 —-RAH—- C:WINDOWSsystem32cdplayer.exe.manifest
2010-03-23 01:15:19 —-HD—- C:Program FilesWindowsUpdate
2010-03-23 01:15:15 —-D—- C:Program FilesOnline Services
2010-03-23 01:14:52 —-D—- C:WINDOWSsystem32DirectX
2010-03-23 01:14:44 —-A—- C:WINDOWSsystem32atrace.dll
2010-03-23 01:14:43 —-A—- C:WINDOWSsystem32desktop.ini
2010-03-23 01:14:43 —-A—- C:WINDOWSdesktop.ini
2010-03-23 01:14:33 —-A—- C:WINDOWSsystem32nmevtmsg.dll
2010-03-23 01:14:31 —-A—- C:WINDOWSsystem32acctres.dll
2010-03-23 01:14:30 —-D—- C:Program FilesCommon FilesServices
2010-03-23 01:14:27 —-SD—- C:WINDOWSTasks
2010-03-23 01:14:27 —-A—- C:WINDOWSsystem32icfgnt5.dll
2010-03-23 01:14:26 —-D—- C:Program FilesCommon FilesMSSoap
2010-03-23 01:14:22 —-D—- C:WINDOWSsystem32Macromed
2010-03-23 01:14:22 —-D—- C:WINDOWSsrchasst
2010-03-23 01:14:18 —-A—- C:WINDOWSsystem32wuweb.dll
2010-03-23 01:14:18 —-A—- C:WINDOWSsystem32wups.dll
2010-03-23 01:14:18 —-A—- C:WINDOWSsystem32wucltui.dll
2010-03-23 01:14:18 —-A—- C:WINDOWSsystem32wuauserv.dll
2010-03-23 01:14:18 —-A—- C:WINDOWSsystem32wuaueng1.dll
2010-03-23 01:14:18 —-A—- C:WINDOWSsystem32wuaueng.dll
2010-03-23 01:14:18 —-A—- C:WINDOWSsystem32wuauclt1.exe
2010-03-23 01:14:17 —-A—- C:WINDOWSsystem32wuauclt.exe
2010-03-23 01:14:17 —-A—- C:WINDOWSsystem32wuapi.dll
2010-03-23 01:14:17 —-A—- C:WINDOWSsystem32qmgrprxy.dll
2010-03-23 01:14:17 —-A—- C:WINDOWSsystem32qmgr.dll
2010-03-23 01:14:17 —-A—- C:WINDOWSsystem32bitsprx4.dll
2010-03-23 01:14:17 —-A—- C:WINDOWSsystem32bitsprx3.dll
2010-03-23 01:14:17 —-A—- C:WINDOWSsystem32bitsprx2.dll
2010-03-23 01:14:13 —-D—- C:Program FilesMovie Maker
2010-03-23 01:13:51 —-A—- C:WINDOWSsystem32safrslv.dll
2010-03-23 01:13:51 —-A—- C:WINDOWSsystem32safrdm.dll
2010-03-23 01:13:51 —-A—- C:WINDOWSsystem32safrcdlg.dll
2010-03-23 01:13:51 —-A—- C:WINDOWSsystem32racpldlg.dll
2010-03-23 01:13:47 —-A—- C:WINDOWSsystem32fltlib.dll
2010-03-23 01:13:46 —-D—- C:WINDOWSsystem32Restore
2010-03-23 01:13:46 —-A—- C:WINDOWSsystem32srsvc.dll
2010-03-23 01:13:46 —-A—- C:WINDOWSsystem32srrstr.dll
2010-03-23 01:13:46 —-A—- C:WINDOWSsystem32fltMc.exe
2010-03-23 01:13:45 —-A—- C:WINDOWSsystem32srclient.dll
2010-03-23 01:13:45 —-A—- C:WINDOWSsystem32mnmdd.dll
2010-03-23 01:13:45 —-A—- C:WINDOWSsystem32isrdbg32.dll
2010-03-23 01:13:45 —-A—- C:WINDOWSsystem32ils.dll
2010-03-23 01:13:44 —-A—- C:WINDOWSsystem32nmmkcert.dll
2010-03-23 01:13:44 —-A—- C:WINDOWSsystem32msconf.dll
2010-03-23 01:13:44 —-A—- C:WINDOWSsystem32mnmsrvc.exe
2010-03-23 01:13:40 —-D—- C:Program FilesNetMeeting
2010-03-23 01:13:40 —-A—- C:WINDOWSsystem32msoert2.dll
2010-03-23 01:13:39 —-A—- C:WINDOWSsystem32msoeacct.dll
2010-03-23 01:13:38 —-A—- C:WINDOWSsystem32inetres.dll
2010-03-23 01:13:38 —-A—- C:WINDOWSsystem32inetcomm.dll
2010-03-23 01:13:36 —-D—- C:Program FilesOutlook Express
2010-03-23 01:13:36 —-A—- C:WINDOWSsystem32schedsvc.dll
2010-03-23 01:13:36 —-A—- C:WINDOWSsystem32mstinit.exe
2010-03-23 01:13:36 —-A—- C:WINDOWSsystem32mstask.dll
2010-03-23 01:13:35 —-A—- C:WINDOWSsystem32isign32.dll
2010-03-23 01:13:35 —-A—- C:WINDOWSsystem32inetcfg.dll
2010-03-23 01:13:35 —-A—- C:WINDOWSsystem32icwphbk.dll
2010-03-23 01:13:35 —-A—- C:WINDOWSsystem32icwdial.dll
2010-03-23 01:13:28 —-D—- C:Program FilesCommon FilesSystem
2010-03-23 01:13:26 —-D—- C:Program FilesInternet Explorer
2010-03-23 01:12:38 —-D—- C:Program FilesComPlus Applications
2010-03-23 01:12:36 —-A—- C:WINDOWSvbaddin.ini
2010-03-23 01:12:36 —-A—- C:WINDOWSvb.ini
2010-03-23 01:12:31 —-D—- C:WINDOWSRegistration
2010-03-23 01:12:24 —-D—- C:Program FilesWindows Media Player
2010-03-23 01:12:17 —-A—- C:WINDOWSsystem32write.exe
2010-03-23 01:12:09 —-A—- C:WINDOWSsystem32sndvol32.exe
2010-03-23 01:12:09 —-A—- C:WINDOWSsystem32hticons.dll
2010-03-23 01:12:09 —-A—- C:WINDOWSsystem32avwav.dll
2010-03-23 01:12:09 —-A—- C:WINDOWSsystem32avtapi.dll
2010-03-23 01:12:09 —-A—- C:WINDOWSsystem32avmeter.dll
2010-03-23 01:12:08 —-A—- C:WINDOWSsystem32winchat.exe
2010-03-23 01:12:01 —-A—- C:WINDOWSsystem32getuname.dll
2010-03-23 01:12:01 —-A—- C:WINDOWSsystem32charmap.exe
2010-03-23 01:12:00 —-A—- C:WINDOWSsystem32sol.exe
2010-03-23 01:12:00 —-A—- C:WINDOWSsystem32calc.exe
2010-03-23 01:11:59 —-A—- C:WINDOWSsystem32winmine.exe
2010-03-23 01:11:59 —-A—- C:WINDOWSsystem32reset.exe
2010-03-23 01:11:59 —-A—- C:WINDOWSsystem32mshearts.exe
2010-03-23 01:11:59 —-A—- C:WINDOWSsystem32freecell.exe
2010-03-23 01:11:58 —-A—- C:WINDOWSsystem32usrlogon.cmd
2010-03-23 01:11:58 —-A—- C:WINDOWSsystem32tsshutdn.exe
2010-03-23 01:11:58 —-A—- C:WINDOWSsystem32tslabels.ini
2010-03-23 01:11:58 —-A—- C:WINDOWSsystem32tskill.exe
2010-03-23 01:11:58 —-A—- C:WINDOWSsystem32tsdiscon.exe
2010-03-23 01:11:58 —-A—- C:WINDOWSsystem32tscon.exe
2010-03-23 01:11:58 —-A—- C:WINDOWSsystem32shadow.exe
2010-03-23 01:11:58 —-A—- C:WINDOWSsystem32rwinsta.exe
2010-03-23 01:11:58 —-A—- C:WINDOWSsystem32regini.exe
2010-03-23 01:11:58 —-A—- C:WINDOWSsystem32rdpcfgex.dll
2010-03-23 01:11:58 —-A—- C:WINDOWSsystem32qwinsta.exe
2010-03-23 01:11:58 —-A—- C:WINDOWSsystem32qappsrv.exe
2010-03-23 01:11:57 —-A—- C:WINDOWSsystem32msg.exe
2010-03-23 01:11:57 —-A—- C:WINDOWSsystem32logoff.exe
2010-03-23 01:11:57 —-A—- C:WINDOWSsystem32cdmodem.dll
2010-03-23 01:11:56 —-A—- C:WINDOWSsystem32msdtcprf.ini
2010-03-23 01:11:50 —-A—- C:WINDOWSsystem32wmimgmt.msc
2010-03-23 01:11:49 —-A—- C:WINDOWSsystem32accwiz.exe
2010-03-23 01:11:48 —-A—- C:WINDOWSsystem32sndrec32.exe
2010-03-23 01:11:48 —-A—- C:WINDOWSsystem32mplay32.exe
2010-03-23 01:11:48 —-A—- C:WINDOWSsystem32hypertrm.dll
2010-03-23 01:11:47 —-D—- C:Program FilesWindows NT
2010-03-23 01:11:47 —-A—- C:WINDOWSsystem32mspaint.exe
2010-03-23 01:11:47 —-A—- C:WINDOWSsystem32clipbrd.exe
2010-03-23 01:11:46 —-A—- C:WINDOWSsystem32spider.exe
2010-03-23 01:11:45 —-A—- C:WINDOWSsystem32tsgqec.dll
2010-03-23 01:11:45 —-A—- C:WINDOWSsystem32tscfgwmi.dll
2010-03-23 01:11:45 —-A—- C:WINDOWSsystem32rhttpaa.dll
2010-03-23 01:11:45 —-A—- C:WINDOWSsystem32aaclient.dll
2010-03-23 01:11:44 —-A—- C:WINDOWSsystem32sessmgr.exe
2010-03-23 01:11:44 —-A—- C:WINDOWSsystem32remotepg.dll
2010-03-23 01:11:44 —-A—- C:WINDOWSsystem32rdshost.exe
2010-03-23 01:11:44 —-A—- C:WINDOWSsystem32rdsaddin.exe
2010-03-23 01:11:44 —-A—- C:WINDOWSsystem32mstscax.dll
2010-03-23 01:11:44 —-A—- C:WINDOWSsystem32mstsc.exe
2010-03-23 01:11:43 —-A—- C:WINDOWSsystem32termsrv.dll
2010-03-23 01:11:43 —-A—- C:WINDOWSsystem32rdpwsx.dll
2010-03-23 01:11:43 —-A—- C:WINDOWSsystem32rdpsnd.dll
2010-03-23 01:11:43 —-A—- C:WINDOWSsystem32rdpclip.exe
2010-03-23 01:11:43 —-A—- C:WINDOWSsystem32rdchost.dll
2010-03-23 01:11:43 —-A—- C:WINDOWSsystem32qprocess.exe
2010-03-23 01:11:43 —-A—- C:WINDOWSsystem32icaapi.dll
2010-03-23 01:11:43 —-A—- C:WINDOWSsystem32cfgbkend.dll
2010-03-23 01:11:42 —-D—- C:WINDOWSsystem32MsDtc
2010-03-23 01:11:42 —-A—- C:WINDOWSsystem32xolehlp.dll
2010-03-23 01:11:42 —-A—- C:WINDOWSsystem32mtxoci.dll
2010-03-23 01:11:42 —-A—- C:WINDOWSsystem32msdtcuiu.dll
2010-03-23 01:11:42 —-A—- C:WINDOWSsystem32msdtctm.dll
2010-03-23 01:11:42 —-A—- C:WINDOWSsystem32msdtcprx.dll
2010-03-23 01:11:42 —-A—- C:WINDOWSsystem32msdtclog.dll
2010-03-23 01:11:41 —-A—- C:WINDOWSsystem32mtxlegih.dll
2010-03-23 01:11:41 —-A—- C:WINDOWSsystem32mtxex.dll
2010-03-23 01:11:41 —-A—- C:WINDOWSsystem32msdtc.exe
2010-03-23 01:11:41 —-A—- C:WINDOWSsystem32dcomcnfg.exe
2010-03-23 01:11:40 —-D—- C:WINDOWSsystem32Com
2010-03-23 01:11:40 —-A—- C:WINDOWSsystem32stclient.dll
2010-03-23 01:11:40 —-A—- C:WINDOWSsystem32mtxdm.dll
2010-03-23 01:11:40 —-A—- C:WINDOWSsystem32comrepl.dll
2010-03-23 01:11:40 —-A—- C:WINDOWSsystem32comaddin.dll
2010-03-23 01:11:40 —-A—- C:WINDOWSsystem32colbact.dll
2010-03-23 01:11:40 —-A—- C:WINDOWSsystem32clbcatex.dll
2010-03-23 01:11:40 —-A—- C:WINDOWSsystem32catsrvps.dll
2010-03-23 01:11:39 —-A—- C:WINDOWSsystem32comuid.dll
2010-03-23 01:11:39 —-A—- C:WINDOWSsystem32comsvcs.dll
2010-03-23 01:11:39 —-A—- C:WINDOWSsystem32comsnap.dll
2010-03-23 01:11:39 —-A—- C:WINDOWSsystem32clbcatq.dll
2010-03-23 01:11:39 —-A—- C:WINDOWSsystem32catsrvut.dll
2010-03-23 01:11:39 —-A—- C:WINDOWSsystem32catsrv.dll
2010-03-23 01:11:32 —-A—- C:WINDOWSsystem32servdeps.dll
2010-03-23 01:11:32 —-A—- C:WINDOWSsystem32mmfutil.dll
2010-03-23 01:11:32 —-A—- C:WINDOWSsystem32licwmi.dll
2010-03-23 01:11:32 —-A—- C:WINDOWSsystem32cmprops.dll
2010-03-14 23:14:32 —-A—- C:WINDOWSsystem32vksaver.dll
2010-02-12 11:46:14 —-A—- C:WINDOWSsystem32dns-sd.exe
2010-02-12 11:46:14 —-A—- C:WINDOWSsystem32dnssd.dll28 апреля, 2010 в 6:02 пп #25685======List of files/folders modified in the last 3 months======
2010-04-27 01:08:32 —-A—- C:WINDOWSsystem32streamci.dll
2010-04-15 02:37:21 —-D—- C:cleansweep.exe
2010-03-24 00:18:25 —-A—- C:WINDOWSwin.ini
2010-03-23 04:04:26 —-A—- C:WINDOWSsystem.ini
2010-03-23 01:38:02 —-A—- C:WINDOWSsystem32PreSetup.ini======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:WINDOWSsystem32driversAavmker4.sys [2010-04-14 28880]
R1 aswSP;aswSP; C:WINDOWSsystem32driversaswSP.sys [2010-04-14 162768]
R1 aswTdi;avast! Network Shield Support; C:WINDOWSsystem32driversaswTdi.sys [2010-04-14 46672]
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-15 40704]
R2 aswFsBlk;aswFsBlk; C:WINDOWSsystem32driversaswFsBlk.sys [2010-04-14 19024]
R2 aswMon2;aswMon2; C:WINDOWSsystem32driversaswMon2.sys [2010-04-14 100432]
R2 irda;ИК-протокол IrDA; C:WINDOWSsystem32DRIVERSirda.sys [2008-04-25 88192]
R3 aswRdr;aswRdr; C:WINDOWSsystem32driversaswRdr.sys [2010-04-14 23376]
R3 cmuda;C-Media WDM Audio Interface; C:WINDOWSsystem32driverscmuda.sys [2005-05-12 1332544]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:WINDOWSSystem32DriversGEARAspiWDM.sys [2009-05-18 26600]
R3 hidusb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-15 10368]
R3 irsir;Драйвер для инфракрасного последовательного порта Microsoft; C:WINDOWSsystem32DRIVERSirsir.sys [2001-08-18 18688]
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2008-04-15 12160]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2007-12-05 7435392]
R3 PAC7302;iLook 300; C:WINDOWSsystem32DRIVERSPAC7302.SYS [2007-10-29 458112]
R3 Rasirda;Минипорт WAN (IrDA); C:WINDOWSsystem32DRIVERSrasirda.sys [2001-08-18 19584]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtnicxp.sys [2010-04-27 109952]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-25 30208]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-25 59520]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-25 20608]
S3 CCDECODE;Closed Caption декодер; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2008-04-25 17024]
S3 GVCplDrv;GVCplDrv; C:WINDOWSsystem32driversGVCplDrv.sys [2004-05-02 23040]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2008-04-25 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2008-04-25 85248]
S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWSsystem32DRIVERSNdisIP.sys [2008-04-25 10880]
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2008-04-25 11136]
S3 StarOpen;StarOpen; C:WINDOWSsystem32driversStarOpen.sys [2009-11-12 7168]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2008-04-25 15232]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-25 26368]
S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2008-04-25 19200]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2008-03-21 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2008-03-21 82944]======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Apple Mobile Device;Apple Mobile Device; C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe [2010-03-19 144672]
R2 avast! Antivirus;avast! Antivirus; C:Program FilesAlwil SoftwareAvast5AvastSvc.exe [2010-04-14 40384]
R2 Bonjour Service;Служба Bonjour; C:Program FilesBonjourmDNSResponder.exe [2010-02-12 345376]
R2 Irmon;Монитор инфракрасной связи; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R2 NMSAccess;NMSAccess; d:Program FilesCDBurnerXPNMSAccessU.exe [2010-03-04 71096]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2007-12-05 155716]
R3 avast! Mail Scanner;avast! Mail Scanner; C:Program FilesAlwil SoftwareAvast5AvastSvc.exe [2010-04-14 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:Program FilesAlwil SoftwareAvast5AvastSvc.exe [2010-04-14 40384]
S2 clr_optimization_v4.0.30128_32;Microsoft .NET Framework NGEN v4.0.30128_X86; C:WINDOWSMicrosoft.NETFrameworkv4.0.30128mscorsvw.exe [2010-01-28 130384]
S2 gupdate;Служба Google Update (gupdate); C:Program FilesGoogleUpdateGoogleUpdate.exe [2010-03-23 135664]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv4.0.30128aspnet_state.exe [2010-01-28 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2010-03-23 182768]
S3 iPod Service;Сервис iPod; C:Program FilesiPodbiniPodService.exe [2010-03-26 545576]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:Program FilesMcAfee Security Scan2.0.181McCHSvc.exe [2010-01-15 227232]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2006-11-03 914944]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:WINDOWSMicrosoft.NETFrameworkv4.0.30128WPFWPFFontCache_v0400.exe [2010-01-28 738656]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv4.0.30128SMSvcHost.exe [2010-01-28 124240]
EOF
28 апреля, 2010 в 6:17 пп #25686Запустите HijackThis, для этого кликните Пуск, Выполнить, введите
C:Program Filestrend microАлексей.exe
и нажмите Enter.
Откроется главное меню программы HijackThis.
Кликните по кнопке Do a system scan only.
Далее отметьте галочкой (слева) следующие строки, если они присутствуют:R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: Shell=Explorer.exe rundll32.exe
O4 - HKLM..Run: [Windows Notify Service] wsntfy.exeЗакройте все запущенные программы (включая InternetExplorer) и окна Windows.
Кликните по кнопке Fix checked и подтвердите свои действия выбрав YES.Скачайте OTM by OldTimer кликнув по этой ссылке.
Запустите OTM и в большое поле ввода (заголовок этого поля выделен желтым цветом) скопируйте следующий текст.:reg
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
"Windows Notify Service"=-
:files
C:WINDOWSwsntfy.exe
:Commands
[emptytemp]
[Reboot]Проверьте вставленный скрипт, если слева перед директивами появились пробелы, то удалите их, скрипт должен выглядеть так же как в сообщении. Кликните по кнопке MoveIt!. В процессе работы возможна перезагрузка компьютера.
По-завершении работы программы должен будет показан лог. Если лог не будет показан, то его можно найти в папке C:_OTMMovedFiles.Вставьте в ваше ответное сообщение содержимое этого лога. И приложите свежий RSIT лог.
28 апреля, 2010 в 9:26 пп #25688All processes killed
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun\Windows Notify Service not found.
========== FILES ==========
File/Folder C:WINDOWSwsntfy.exe not found.
========== COMMANDS ==========[EMPTYTEMP]
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytesUser: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytesUser: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytesUser: Администратор
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 0 bytesUser: Алексей
->Temp folder emptied: 82944 bytes
->Temporary Internet Files folder emptied: 1195046 bytes
->Flash cache emptied: 0 bytes%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%System32 .tmp files removed: 0 bytes
%systemroot%System32dllcache .tmp files removed: 0 bytes
%systemroot%System32drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%system32configsystemprofileLocal SettingsTemp folder emptied: 0 bytes
%systemroot%system32configsystemprofileLocal SettingsTemporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytesTotal Files Cleaned = 1,00 mb
OTM by OldTimer — Version 3.1.11.0 log created on 04292010_012352
28 апреля, 2010 в 9:33 пп #25687Logfile of random’s system information tool 1.06 (written by random/random)
Run by Алексей at 2010-04-29 01:29:14
Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (49%) free of 20 GB
Total RAM: 1023 MB (71% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:29:18, on 29.04.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesAlwil SoftwareAvast5AvastSvc.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
C:Program FilesBonjourmDNSResponder.exe
d:Program FilesCDBurnerXPNMSAccessU.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32wuauclt.exe
C:WINDOWSsystem32userinit.exe
C:Program FilesGoogleUpdateGoogleUpdate.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32RunDll32.exe
C:WINDOWSsystem32RUNDLL32.EXE
D:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:WINDOWSPixArtPAC7302Monitor.exe
C:Program FilesVKSaverVKSaverUpdater.exe
C:PROGRA~1ALWILS~1Avast5avastUI.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesVistaDriveIconVistaDrv.exe
C:Program FilesMcAfee Security Scan2.0.181SSScheduler.exe
C:Program FilesUniblueSpeedUpMyPClauncher.exe
C:Documents and SettingsАлексейРабочий столRSIT.exe
C:Program Filestrend microАлексей.exeR1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://start.qip.ru/
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://search.qip.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=40316
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://search.qip.ru/ie
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = Root: HKCU; Subkey: SoftwareMicrosoftInternet ExplorerSearchUrl; ValueType: string; ValueName: ‘; ValueData: ‘; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Windows Internet Explorer предоставлен: QIP.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: QIPBHO Class — {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} — C:Program FilesInternet Explorerqipsearchbar.dll
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_06binssv.dll
O2 — BHO: MyAshampoo Toolbar — {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} — C:Program FilesMyAshampootbMyAs.dll
O2 — BHO: QIPBHO — {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} — C:Program FilesInternet Explorerqipsearchbar.dll
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O2 — BHO: SkypeIEPluginBHO — {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.5.4723.1820swg.dll
O2 — BHO: Ask Toolbar BHO — {D4027C7F-154A-4066-A1AD-4243D8127440} — C:Program FilesAsk.comGenericAskToolbar.dll
O3 — Toolbar: Google Toolbar — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O3 — Toolbar: Ask Toolbar — {D4027C7F-154A-4066-A1AD-4243D8127440} — C:Program FilesAsk.comGenericAskToolbar.dll
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O3 — Toolbar: MyAshampoo Toolbar — {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} — C:Program FilesMyAshampootbMyAs.dll
O4 — HKLM..Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [nwiz] nwiz.exe /install
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [RemoteControl] «D:Program FilesCyberLinkPowerDVDPDVDServ.exe»
O4 — HKLM..Run: [PAC7302_Monitor] C:WINDOWSPixArtPAC7302Monitor.exe
O4 — HKLM..Run: [VKSaverUpdater] C:Program FilesVKSaverVKSaverUpdater.exe
O4 — HKLM..Run: [AppleSyncNotifier] C:Program FilesCommon FilesAppleMobile Device SupportAppleSyncNotifier.exe
O4 — HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 — HKLM..Run: [avast5] C:PROGRA~1ALWILS~1Avast5avastUI.exe /nogui
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Global Startup: McAfee Security Scan Plus.lnk = ?
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://D:PROGRA~1MICROS~1OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: Google ВикиКомментарии… — res://C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra button: Skype add-on for Internet Explorer — {898EA8C8-E7FF-479B-8935-AEC46303B9E5} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O9 — Extra ‘Tools’ menuitem: Skype add-on for Internet Explorer — {898EA8C8-E7FF-479B-8935-AEC46303B9E5} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — D:PROGRA~1MICROS~1OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: QIP 2005 — {1EF681F7-A04B-4D6D-9012-A307CCA55610} — d:Program FilesQIPqip.exe (HKCU)
O16 — DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} — http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 — Protocol: skype-ie-addon-data — {91774881-D725-4E58-B298-07617B9B86A8} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 — AppInit_DLLs: C:WINDOWSsystem32vksaver.dll
O22 — SharedTaskScheduler: Windows DreamScene — {E31004D1-A431-41B8-826F-E902F9D95C81} — C:WINDOWSSystem32DreamScene.dll
O23 — Service: Apple Mobile Device — Apple Inc. — C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
O23 — Service: avast! Antivirus — ALWIL Software — C:Program FilesAlwil SoftwareAvast5AvastSvc.exe
O23 — Service: avast! Mail Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast5AvastSvc.exe
O23 — Service: avast! Web Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast5AvastSvc.exe
O23 — Service: Служба Bonjour (Bonjour Service) — Apple Inc. — C:Program FilesBonjourmDNSResponder.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба Google Update (gupdate) (gupdate) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Сервис iPod (iPod Service) — Apple Inc. — C:Program FilesiPodbiniPodService.exe
O23 — Service: McAfee Security Scan Component Host Service (McComponentHostService) — McAfee, Inc. — C:Program FilesMcAfee Security Scan2.0.181McCHSvc.exe
O23 — Service: NMSAccess — Unknown owner — d:Program FilesCDBurnerXPNMSAccessU.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe—
End of file — 9959 bytes======Scheduled tasks folder======
C:WINDOWStasksAppleSoftwareUpdate.job
C:WINDOWStasksGoogleUpdateTaskMachineCore.job
C:WINDOWStasksGoogleUpdateTaskMachineUA.job
C:WINDOWStasksScheduled Update for Ask Toolbar.job
C:WINDOWStasksUser_Feed_Synchronization-{0ACF9482-4895-4506-BAC9-59F52DB7F845}.job
C:WINDOWStasksUser_Feed_Synchronization-{EC548424-45CB-4529-AE4C-5EAE7101C7D4}.job======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2010-04-04 75200][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_06binssv.dll [2008-03-25 509328][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}]
MyAshampoo Toolbar — C:Program FilesMyAshampootbMyAs.dll [2009-12-31 2349080][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class — C:Program FilesInternet Explorerqipsearchbar.dll [2009-07-09 150768][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-03-23 279664][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll [2010-02-08 804136][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier5.5.4723.1820swg.dll [2010-03-23 812528][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar — C:Program FilesAsk.comGenericAskToolbar.dll [2010-01-20 1197448][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-03-23 279664]
{D4027C7F-154A-4066-A1AD-4243D8127440} — Ask Toolbar — C:Program FilesAsk.comGenericAskToolbar.dll [2010-01-20 1197448]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2010-04-14 10318152]
{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} — MyAshampoo Toolbar — C:Program FilesMyAshampootbMyAs.dll [2009-12-31 2349080][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«Cmaudio»=RunDll32 cmicnfg.cpl,CMICtrlWnd []
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2007-12-05 8523776]
«nwiz»=nwiz.exe /install []
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2007-12-05 81920]
«RemoteControl»=D:Program FilesCyberLinkPowerDVDPDVDServ.exe [2003-10-31 32768]
«PAC7302_Monitor»=C:WINDOWSPixArtPAC7302Monitor.exe [2006-11-03 319488]
«VKSaverUpdater»=C:Program FilesVKSaverVKSaverUpdater.exe [2010-03-06 56832]
«AppleSyncNotifier»=C:Program FilesCommon FilesAppleMobile Device SupportAppleSyncNotifier.exe [2010-03-16 47392]
«NeroFilterCheck»=C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
«avast5″=C:PROGRA~1ALWILS~1Avast5avastUI.exe [2010-04-14 2790472]
«Amazing3DAquariumWallpaper»= [][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-25 17408]
«VistaIcon»=C:Program FilesVistaDriveIconVistaDrv.exe [2008-03-23 132096]C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
McAfee Security Scan Plus.lnk — C:Program FilesMcAfee Security Scan2.0.181SSScheduler.exe[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLS»=»C:WINDOWSsystem32vksaver.dll»[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2008-03-21 133632][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionexplorerSharedTaskScheduler]
Windows DreamScene — {E31004D1-A431-41B8-826F-E902F9D95C81} — C:WINDOWSSystem32DreamScene.dll [2009-05-12 233888][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«SynchronousMachineGroupPolicy»=0
«SynchronousUserGroupPolicy»=0
«EnableLUA»=0[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«NoThumbnailCache»=1
«NoSMConfigurePrograms»=1
«NoSMHelp»=1[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»======List of files/folders created in the last 1 months======
2010-04-28 22:03:12 —-D—- C:Documents and SettingsАлексейApplication DataGaijin Ent
2010-04-28 01:22:10 —-HDC—- C:WINDOWSie8
2010-04-28 00:38:48 —-D—- C:Documents and SettingsАлексейApplication DataMedia Player Classic
2010-04-28 00:26:22 —-D—- C:rsit
2010-04-28 00:26:22 —-D—- C:Program Filestrend micro
2010-04-28 00:07:38 —-D—- C:Documents and SettingsАлексейApplication DataMacromedia
2010-04-28 00:07:38 —-D—- C:Documents and SettingsАлексейApplication DataIdentities
2010-04-28 00:07:38 —-D—- C:Documents and SettingsАлексейApplication DataAdobe
2010-04-27 23:21:57 —-D—- C:Documents and SettingsАлексейApplication DataUniblue
2010-04-27 23:04:55 —-D—- C:Documents and SettingsАлексейApplication DataGoogle
2010-04-27 22:30:29 —-ASH—- C:Documents and SettingsАлексейApplication Datadesktop.ini
2010-04-27 22:30:27 —-SD—- C:Documents and SettingsАлексейApplication DataMicrosoft
2010-04-27 22:09:28 —-D—- C:Config.Msi
2010-04-27 21:44:40 —-D—- C:Program Filescandle_1600x1200
2010-04-27 21:34:12 —-D—- C:Program Filesrain_1600x1200
2010-04-27 21:32:44 —-D—- C:Program Fileswave_1600x1200
2010-04-27 20:45:37 —-A—- C:WINDOWSsystem32DreamScene.dll
2010-04-27 01:07:18 —-A—- C:WINDOWSsystem32RtNicProp32.dll
2010-04-27 00:38:01 —-HDC—- C:WINDOWS$NtUninstallKB958644$
2010-04-26 23:03:59 —-D—- C:Program FilesUniblue
2010-04-26 21:58:14 —-A—- C:WINDOWSsystem32aswBoot.exe
2010-04-26 21:07:42 —-A—- C:WINDOWSsystem32pwn2.exe
2010-04-26 20:54:36 —-D—- C:Program FilesAlwil Software
2010-04-26 20:54:36 —-D—- C:Documents and SettingsAll UsersApplication DataAlwil Software
2010-04-23 00:09:14 —-A—- C:WINDOWSsystem32msxml4r.dll
2010-04-23 00:09:14 —-A—- C:WINDOWSsystem32msxml4a.dll
2010-04-23 00:09:14 —-A—- C:WINDOWSsystem32msxml4.dll
2010-04-22 23:11:31 —-HDC—- C:WINDOWS$NtUninstallKB915865$
2010-04-22 23:07:43 —-D—- C:Documents and SettingsAll UsersApplication DataWindows Genuine Advantage
2010-04-19 00:38:48 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
2010-04-19 00:38:45 —-D—- C:Program FilesCommon FilesAdobe AIR
2010-04-16 21:03:55 —-D—- C:VKontakteDJ
2010-04-14 00:53:28 —-A—- C:WINDOWSNeroDigital.ini
2010-04-11 22:08:36 —-N—- C:WINDOWSsystem32ImagXRA7.dll
2010-04-11 22:08:36 —-N—- C:WINDOWSsystem32ImagXR7.dll
2010-04-11 22:08:36 —-N—- C:WINDOWSsystem32ImagXpr7.dll
2010-04-11 22:08:36 —-N—- C:WINDOWSsystem32ImagX7.dll
2010-04-11 22:08:36 —-D—- C:Program FilesCommon FilesAhead
2010-04-11 22:08:36 —-A—- C:WINDOWSsystem32TwnLib20.dll
2010-04-11 22:08:36 —-A—- C:WINDOWSsystem32NeroCheck.exe
2010-04-11 21:24:21 —-D—- C:Program FilesConduit
2010-04-11 21:24:20 —-D—- C:Program FilesMyAshampoo
2010-04-11 21:24:04 —-D—- C:Documents and SettingsAll UsersApplication Dataashampoo
2010-04-08 10:37:02 —-A—- C:WINDOWSsystem32rmoc3260.dll
2010-04-08 10:37:02 —-A—- C:WINDOWSsystem32pncrt.dll
2010-04-07 01:27:14 —-D—- C:Documents and SettingsAll UsersApplication DataFarmFrenzy3
2010-03-31 22:45:34 —-D—- C:Program FilesiPod
2010-03-31 22:45:23 —-D—- C:Documents and SettingsAll UsersApplication Data{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-03-31 22:40:27 —-D—- C:Program FilesQuickTime
2010-03-31 22:38:11 —-D—- C:WINDOWSSxsCaPendDel
2010-03-31 22:31:51 —-D—- C:Program FilesBonjour
2010-03-30 10:05:47 —-D—- C:Documents and SettingsAll UsersApplication DataCanneverbe Limited======List of files/folders modified in the last 1 months======
2010-04-29 01:29:10 —-D—- C:WINDOWSPrefetch
2010-04-29 01:29:03 —-D—- C:WINDOWSTemp
2010-04-29 01:23:00 —-D—- C:WINDOWSsystem32
2010-04-29 01:23:00 —-D—- C:WINDOWS
2010-04-28 20:56:53 —-A—- C:WINDOWSSchedLgU.Txt
2010-04-28 02:53:28 —-D—- C:WINDOWSsystem32CatRoot2
2010-04-28 01:26:56 —-D—- C:WINDOWSsystem32ru-ru
2010-04-28 01:26:55 —-RSHDC—- C:WINDOWSsystem32dllcache
2010-04-28 01:26:55 —-HD—- C:WINDOWSinf
2010-04-28 01:26:55 —-D—- C:WINDOWSMedia
2010-04-28 01:26:55 —-D—- C:WINDOWSHelp
2010-04-28 01:26:55 —-D—- C:Program FilesInternet Explorer
2010-04-28 00:59:07 —-SHD—- C:WINDOWSInstaller
2010-04-28 00:58:57 —-D—- C:Program FilesCommon FilesAdobe
2010-04-28 00:56:01 —-SD—- C:WINDOWSTasks
2010-04-28 00:52:44 —-A—- C:WINDOWSODBC.INI
2010-04-28 00:52:05 —-D—- C:WINDOWSsystem32CatRoot
2010-04-28 00:26:22 —-RD—- C:Program Files
2010-04-28 00:20:03 —-SHD—- C:RECYCLER
2010-04-28 00:20:03 —-D—- C:Documents and Settings
2010-04-27 20:45:38 —-D—- C:WINDOWSWeb
2010-04-27 20:45:37 —-D—- C:WINDOWSsystem32en-US
2010-04-27 01:14:43 —-D—- C:WINDOWSsystem32config
2010-04-27 01:09:54 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2010-04-27 01:08:51 —-D—- C:WINDOWSsystem32drivers
2010-04-27 01:08:49 —-D—- C:WINDOWSsystem32ReinstallBackups
2010-04-27 01:08:32 —-A—- C:WINDOWSsystem32streamci.dll
2010-04-27 00:37:56 —-HD—- C:WINDOWS$hf_mig$
2010-04-26 23:56:35 —-D—- C:WINDOWSNetwork Diagnostic
2010-04-26 23:20:08 —-SD—- C:WINDOWSDownloaded Program Files
2010-04-26 21:58:23 —-D—- C:WINDOWSWinSxS
2010-04-26 20:49:32 —-D—- C:Documents and SettingsAll UsersApplication DataKaspersky Lab
2010-04-22 22:55:57 —-D—- C:WINDOWSsystem32wbem
2010-04-22 22:55:57 —-D—- C:WINDOWSRegistration
2010-04-22 22:51:00 —-D—- C:WINDOWSsystem32Restore
2010-04-22 22:41:18 —-SHD—- C:System Volume Information
2010-04-19 00:46:29 —-D—- C:Documents and SettingsAll UsersApplication DataNOS
2010-04-19 00:40:02 —-D—- C:Program FilesAdobe
2010-04-19 00:38:45 —-D—- C:Program FilesCommon Files
2010-04-16 20:52:17 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
2010-04-16 20:51:42 —-D—- C:Program FilesVKSaver
2010-04-15 02:37:21 —-D—- C:cleansweep.exe
2010-03-31 22:47:23 —-DC—- C:WINDOWSsystem32DRVSTORE
2010-03-31 22:45:29 —-D—- C:Program FilesCommon FilesApple======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:WINDOWSsystem32driversAavmker4.sys [2010-04-14 28880]
R1 aswSP;aswSP; C:WINDOWSsystem32driversaswSP.sys [2010-04-14 162768]
R1 aswTdi;avast! Network Shield Support; C:WINDOWSsystem32driversaswTdi.sys [2010-04-14 46672]
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-15 40704]
R2 aswFsBlk;aswFsBlk; C:WINDOWSsystem32driversaswFsBlk.sys [2010-04-14 19024]
R2 aswMon2;aswMon2; C:WINDOWSsystem32driversaswMon2.sys [2010-04-14 100432]
R2 irda;ИК-протокол IrDA; C:WINDOWSsystem32DRIVERSirda.sys [2008-04-25 88192]
R3 aswRdr;aswRdr; C:WINDOWSsystem32driversaswRdr.sys [2010-04-14 23376]
R3 cmuda;C-Media WDM Audio Interface; C:WINDOWSsystem32driverscmuda.sys [2005-05-12 1332544]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:WINDOWSSystem32DriversGEARAspiWDM.sys [2009-05-18 26600]
R3 hidusb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-15 10368]
R3 irsir;Драйвер для инфракрасного последовательного порта Microsoft; C:WINDOWSsystem32DRIVERSirsir.sys [2001-08-18 18688]
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2008-04-15 12160]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2007-12-05 7435392]
R3 PAC7302;iLook 300; C:WINDOWSsystem32DRIVERSPAC7302.SYS [2007-10-29 458112]
R3 Rasirda;Минипорт WAN (IrDA); C:WINDOWSsystem32DRIVERSrasirda.sys [2001-08-18 19584]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtnicxp.sys [2010-04-27 109952]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-25 30208]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-25 59520]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-25 20608]
S3 CCDECODE;Closed Caption декодер; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2008-04-25 17024]
S3 GVCplDrv;GVCplDrv; C:WINDOWSsystem32driversGVCplDrv.sys [2004-05-02 23040]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2008-04-25 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2008-04-25 85248]
S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWSsystem32DRIVERSNdisIP.sys [2008-04-25 10880]
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2008-04-25 11136]
S3 StarOpen;StarOpen; C:WINDOWSsystem32driversStarOpen.sys [2009-11-12 7168]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2008-04-25 15232]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-25 26368]
S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2008-04-25 19200]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2008-03-21 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2008-03-21 82944]======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Apple Mobile Device;Apple Mobile Device; C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe [2010-03-19 144672]
R2 avast! Antivirus;avast! Antivirus; C:Program FilesAlwil SoftwareAvast5AvastSvc.exe [2010-04-14 40384]
R2 Bonjour Service;Служба Bonjour; C:Program FilesBonjourmDNSResponder.exe [2010-02-12 345376]
R2 Irmon;Монитор инфракрасной связи; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R2 NMSAccess;NMSAccess; d:Program FilesCDBurnerXPNMSAccessU.exe [2010-03-04 71096]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2007-12-05 155716]
R3 avast! Mail Scanner;avast! Mail Scanner; C:Program FilesAlwil SoftwareAvast5AvastSvc.exe [2010-04-14 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:Program FilesAlwil SoftwareAvast5AvastSvc.exe [2010-04-14 40384]
S2 clr_optimization_v4.0.30128_32;Microsoft .NET Framework NGEN v4.0.30128_X86; C:WINDOWSMicrosoft.NETFrameworkv4.0.30128mscorsvw.exe [2010-01-28 130384]
S2 gupdate;Служба Google Update (gupdate); C:Program FilesGoogleUpdateGoogleUpdate.exe [2010-03-23 135664]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv4.0.30128aspnet_state.exe [2010-01-28 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2010-03-23 182768]
S3 iPod Service;Сервис iPod; C:Program FilesiPodbiniPodService.exe [2010-03-26 545576]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:Program FilesMcAfee Security Scan2.0.181McCHSvc.exe [2010-01-15 227232]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2006-11-03 914944]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:WINDOWSMicrosoft.NETFrameworkv4.0.30128WPFWPFFontCache_v0400.exe [2010-01-28 738656]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv4.0.30128SMSvcHost.exe [2010-01-28 124240]
EOF
-
АвторСообщения
- Для ответа в этой теме необходимо авторизоваться.