Созданные ответы форума
-
Сообщения
-
читал статью про удаление комбо много раз, но только сейчас заметил букву u после / 😀
Наконец удалил комбо. Большое спасибо!!!
Советом про удаление точек восстановления не смог воспользоваться т.к. не нашёл эту функцию ни через свойства, ни через служебные. Перевернул весь комп, похоже у меня нет «восстановления системы»
У меня стоит Vista ultimate SP1 light. похоже с целью облегчения из неё вырезали всё что смогли.
Ещё раз большое спасибо. Если чем смогу помочь, буду рад. (например по баннерам пробежаться и т.д) 😀нет от информера избавился. ни как не могу удалить combo. в установленных программах его нет. системное время на час назад стало. в принципе кроме этого недостатков больше не нашел, но осознание что прога гдето там висит не даёт покоя, и так много барахла всякого навешано 🙂 подскажите пожалуйста как мне её удалить.
Пробовал через «выполнить» вводил combofix / и combofix.exe / Программа просто перезапускается и сканирует по новой, а удаляться никак не хочет.Прошлый ComboFix.exe удалил в ручную, сейчас скачал новый и запустил.
ComboFix 08-12-26.03 — Администратор 2008-12-27 18:58:51.5 — NTFSx86
Microsoft® Windows Vista™ Ultimate 6.0.6001.1.1251.1.1049.18.3326.2440 [GMT 3:00]
Running from: c:usersАдминистраторDesktopComboFix.exe
AV: Panda Antivirus + Firewall 2008 *On-access scanning disabled* (Outdated)
FW: Panda Antivirus 2008 Personal Firewall *disabled*
FW: Outpost Firewall Pro *disabled*
.((((((((((((((((((((((((( Files Created from 2008-11-27 to 2008-12-27 )))))))))))))))))))))))))))))))
.2008-12-27 18:31 . 2008-12-27 18:31 251,281,723 —a
c:windowsMEMORY.DMP
2008-12-27 17:15 . 2008-12-27 17:15d
c:usersAll UserseSellerate
2008-12-27 17:15 . 2008-12-27 17:15d
c:programdataeSellerate
2008-12-27 14:44 . 2008-12-27 14:47d
c:program filesGameGain
2008-12-27 02:14 . 2008-12-27 02:14dr
c:usersPublicMusic
2008-12-27 01:01 . 2008-12-27 01:01d
c:program filesRivaTuner v2.21
2008-12-27 00:28 . 2008-12-27 00:30d
c:program filesSysTool
2008-12-27 00:17 . 2008-12-27 18:12d
c:program filesOCCT
2008-12-26 23:21 . 2008-12-27 00:59d
c:program filesRivaTuner v2.10
2008-12-26 23:02 . 2008-12-26 23:02 3,100,776 —a
c:windowsSystem32driversappdrv01.sys
2008-12-26 23:02 . 2008-12-26 23:02 304,528 —a
c:windowsSystem32appdrvrem01.exe
2008-12-26 21:43 . 2008-12-26 21:43d
c:usersАдминистраторAppDataRoamingUniblue
2008-12-26 21:42 . 2008-12-26 22:15d
c:usersAll UsersWinZip
2008-12-26 21:42 . 2008-12-26 22:15d
c:programdataWinZip
2008-12-26 21:41 . 2008-12-26 21:41d
c:usersАдминистраторAppDataRoamingWinRAR
2008-12-26 21:03 . 2008-12-26 21:03d
C:NVIDIA
2008-12-26 16:24 . 2008-12-26 16:24 69 —a
c:windowsNeroDigital.ini
2008-12-26 16:20 . 2008-12-26 16:21d
c:usersАдминистраторAppDataRoamingNero
2008-12-26 16:07 . 2008-12-26 16:07 4,767 —a
c:windowsIrremote.ini
2008-12-26 15:59 . 2008-12-26 16:03d
c:usersAll UsersNero
2008-12-26 15:59 . 2008-12-26 16:03d
c:programdataNero
2008-12-26 15:59 . 2008-12-26 16:16d
c:program filesCommon FilesNero
2008-12-25 23:00 . 2008-12-25 23:00d
c:program filesK-Lite Codec Pack
2008-12-25 23:00 . 2008-09-20 00:57 3,596,288 —a
c:windowsSystem32qt-dx331.dll
2008-12-25 23:00 . 2008-09-24 21:41 839,680 —a
c:windowsSystem32lameACM.acm
2008-12-25 23:00 . 2008-12-07 21:08 795,648 —a
c:windowsSystem32xvidcore.dll
2008-12-25 23:00 . 2008-10-29 01:35 684,032 —a
c:windowsSystem32divx.dll
2008-12-25 23:00 . 2004-01-25 19:18 217,088 —a
c:windowsSystem32yv12vfw.dll
2008-12-25 23:00 . 2008-12-07 21:08 130,048 —a
c:windowsSystem32xvidvfw.dll
2008-12-25 23:00 . 2007-09-21 03:52 118,784 —a
c:windowsSystem32ac3acm.acm
2008-12-25 23:00 . 2008-09-25 11:03 81,920 —a
c:windowsSystem32dpl100.dll
2008-12-25 23:00 . 2008-12-08 14:53 57,344 —a
c:windowsSystem32ff_vfw.dll
2008-12-25 23:00 . 2007-07-10 19:10 547 —a
c:windowsSystem32ff_vfw.dll.manifest
2008-12-25 23:00 . 2008-10-03 15:30 414 —a
c:windowsSystem32lame_acm.xml
2008-12-25 23:00 . 2008-07-30 22:09 38 —a
c:windowsavisplitter.ini
2008-12-25 22:25 . 2008-12-25 22:25d
c:usersАдминистраторAppDataRoamingYandex
2008-12-25 22:25 . 2008-12-25 22:25d
c:usersАдминистраторAppDataRoamingMozilla
2008-12-25 22:25 . 2008-12-25 22:25 0 —a
c:windowsnsreg.dat
2008-12-25 22:03 . 2008-12-25 22:03d
C:Downloads
2008-12-25 22:01 . 2008-12-25 22:01d
c:program filesCheMaxRus
2008-12-25 20:12 . 2008-12-25 20:12d
c:program filesCCleaner
2008-12-25 19:12 . 2008-12-25 19:13d
C:rsit
2008-12-25 19:12 . 2008-12-25 19:12d
c:program filestrend micro
2008-12-25 17:58 . 2008-12-25 17:58d
c:usersAll Userssentinel
2008-12-25 17:58 . 2008-12-25 17:58d
c:programdatasentinel
2008-12-25 17:58 . 2008-12-27 18:31 174,484 —a
c:windowsSystem32driversAPPFCONT.DAT.bck
2008-12-25 17:58 . 2008-12-27 18:57 1,204 —a
c:windowsSystem32driversAPPFLTR.CFG.bck
2008-12-25 17:55 . 2007-10-25 17:27 292,144 —a
c:windowsSystem32PavSHook.dll
2008-12-25 17:55 . 2007-10-16 15:37 161,072 —a
c:windowsSystem32TpUtil.dll
2008-12-25 17:55 . 2007-11-19 13:01 143,160 —a
c:windowsSystem32driversnetimflt.sys
2008-12-25 17:55 . 2006-06-27 18:36 101,888 —a
c:windowsSystem32SYSTOOLS.DLL
2008-12-25 17:55 . 2007-02-28 17:04 63,024 —a
c:windowsSystem32pavipc.dll
2008-12-25 17:55 . 2007-02-15 19:02 50,736 —a
c:windowsSystem32avldr.dll
2008-12-25 17:55 . 2007-06-08 07:44 24,760 —a
c:windowsSystem32driverscpoint.sys
2008-12-25 17:55 . 2007-11-19 12:51 2,048 —a
c:windowsSystem32driversnet_m32.inf
2008-12-25 17:54 . 2008-12-25 17:54d
c:program filesPanda Security
2008-12-25 17:52 . 2008-12-25 17:52d
c:program filesCommon FilesPanda Software
2008-12-25 17:52 . 2007-07-12 17:49 178,872 -ra
c:windowsSystem32driversPavProc.sys
2008-12-25 17:52 . 2007-05-23 19:40 38,968 -ra
c:windowsSystem32driversShlDrv51.sys
2008-12-25 17:42 . 2008-06-30 17:13 242,704 —a
c:windowsSystem32driversafwcore.sys
2008-12-25 17:41 . 2008-12-26 16:53d
c:windowsSystem32Filt
2008-12-25 17:41 . 2008-12-25 17:41d
c:usersAll UsersAgnitum
2008-12-25 17:41 . 2008-12-25 17:41d
c:programdataAgnitum
2008-12-25 17:41 . 2008-12-25 17:41d
c:program filesAgnitum
2008-12-25 17:41 . 2008-07-11 15:41 673,920 —a
c:windowsSystem32driversSandBox.sys
2008-12-25 17:41 . 2008-06-30 17:13 28,688 —a
c:windowsSystem32driversafw.sys
2008-12-25 17:41 . 2007-10-25 19:17 49 —a
c:windowstransp.gif
2008-12-24 21:02 . 2008-12-24 21:02d
c:program filesWebMoney Advisor
2008-12-24 21:01 . 2008-12-24 21:01d
c:program filesWebMoney Agent
2008-12-24 20:57 . 2008-12-24 21:05d
c:usersАдминистраторAppDataRoamingWebMoney
2008-12-24 20:56 . 2008-12-25 15:37d-a
c:usersAll UsersTEMP
2008-12-24 20:56 . 2008-12-25 15:37d-a
c:programdataTEMP
2008-12-24 20:56 . 2008-12-24 21:22d
c:program filesWebMoney
2008-12-24 18:30 . 2008-12-24 18:30d
c:windowsSystem32Macromed
2008-12-24 18:30 . 2008-12-24 18:30d
c:usersАдминистраторAppDataRoamingMacromedia
2008-12-24 18:02 . 2008-12-24 18:34d
c:usersАдминистраторAppDataRoamingDownload Master
2008-12-24 18:01 . 2008-12-24 22:54d
c:program filesDownload Master
2008-12-19 22:46 . 2008-12-27 18:31d
c:program filesGoTView
2008-12-18 22:27 . 2008-12-18 22:27d
c:usersАдминистраторAppDataRoamingOpera
2008-12-18 22:27 . 2008-12-25 15:47d
c:program filesOpera
2008-12-17 15:40 . 2008-12-17 15:40d
C:ess_rus
2008-12-17 15:36 . 2008-12-17 15:36d
c:usersAll UsersESET
2008-12-17 15:36 . 2008-12-17 15:36d
c:programdataESET
2008-12-17 15:28 . 2008-12-17 15:28d
c:program filesESET
2008-12-14 03:57 . 2008-12-14 03:57d
c:usersАдминистраторAppDataRoamingCDBurnerXP_Soft
2008-12-14 03:47 . 2008-12-14 03:47d
c:program filesAlcohol Soft
2008-12-14 03:46 . 2008-12-14 03:46 715,248 —a
c:windowsSystem32driverssptd.sys
2008-12-13 18:42 . 2008-12-19 11:23 183,112 —a
c:windowsSystem32PnkBstrB.exe
2008-12-13 18:42 . 2008-12-19 11:23 138,184 —a
c:windowsSystem32driversPnkBstrK.sys
2008-12-13 18:41 . 2008-12-13 18:41d
c:usersАдминистраторAppDataRoamingLeadertech
2008-12-13 18:41 . 2008-12-13 18:41 66,872 —a
c:windowsSystem32PnkBstrA.exe
2008-12-13 18:36 . 2008-12-13 18:36d
c:program filesPCGAME
2008-12-13 16:39 . 2008-12-13 16:39d
c:usersАдминистраторAppDataRoamingSony Corporation
2008-12-13 16:37 . 2008-12-13 16:37d
c:program filesSony
2008-12-12 15:23 . 2008-12-12 15:23d
c:usersАдминистраторAppDataRoamingPeerNetworking
2008-12-10 23:37 . 2008-12-10 23:40d
c:usersАдминистраторAppDataRoamingMedia Player Classic
2008-12-09 17:17 . 2008-12-09 17:17 40 —a
C:Auth.prof
2008-12-09 17:06 . 2008-12-09 17:06d
c:program filesInterVideo
2008-12-09 17:06 . 2001-12-10 17:42 204,800 —a
c:windowsSystem32IVIresizeW7.dll
2008-12-09 17:06 . 2001-12-10 17:42 200,704 —a
c:windowsSystem32IVIresizeA6.dll
2008-12-09 17:06 . 2001-12-10 17:42 192,512 —a
c:windowsSystem32IVIresizeP6.dll
2008-12-09 17:06 . 2001-12-10 17:42 192,512 —a
c:windowsSystem32IVIresizeM6.dll
2008-12-09 17:06 . 2001-12-10 17:42 188,416 —a
c:windowsSystem32IVIresizePX.dll
2008-12-09 17:06 . 2001-12-10 17:42 20,480 —a
c:windowsSystem32IVIresize.dll
2008-12-09 16:58 . 2008-12-09 16:58 0 —ah
c:windowsSystem32driversMsft_User_WpdMtpDr_01_00_00.Wdf
2008-12-05 01:11 . 2008-12-05 01:11dr
c:windowsSystem32configsystemprofileVideos
2008-12-05 01:11 . 2008-12-05 01:11dr
c:windowsSystem32configsystemprofileSearches
2008-12-05 01:11 . 2008-12-05 01:11dr
c:windowsSystem32configsystemprofileSaved Games
2008-12-05 01:11 . 2008-12-05 01:11dr
c:windowsSystem32configsystemprofilePictures
2008-12-05 01:11 . 2008-12-05 01:11dr
c:windowsSystem32configsystemprofileMusic
2008-12-05 01:11 . 2008-12-05 01:11dr
c:windowsSystem32configsystemprofileLinks
2008-12-05 01:11 . 2008-12-05 01:11dr
c:windowsSystem32configsystemprofileDownloads
2008-12-05 01:11 . 2008-12-05 01:11dr
c:windowsSystem32configsystemprofileDocuments
2008-12-05 01:11 . 2008-12-05 01:11dr
c:windowsSystem32configsystemprofileContacts
2008-12-05 00:06 . 2003-06-23 02:44 1,415,680 —a
c:windowsSystem32WMV9VCM.dll
2008-12-05 00:06 . 2006-02-03 10:00 348,160 —a
c:windowsSystem32MSVCR71.DLL
2008-12-05 00:06 . 2002-01-05 13:37 344,064 —a
c:windowsSystem32msvcr70.dll
2008-12-05 00:06 . 2003-04-21 15:09 245,408 —a
c:windowsSystem32unicows.dll
2008-12-05 00:06 . 2004-01-22 19:06 157,696 —a
c:windowsSystem32unrar.dll
2008-12-05 00:06 . 2001-09-17 13:20 19,968 —a
c:windowsSystem32cpuinf32.dll
2008-12-04 23:03 . 2008-12-26 16:07d
c:program filesNero
2008-12-04 23:03 . 2008-12-04 23:03d
c:program filesCommon FilesAhead
2008-12-04 22:59 . 2008-12-04 22:59d
c:usersAll UsersCyberLink
2008-12-04 22:59 . 2008-12-04 22:59d
c:programdataCyberLink
2008-12-04 22:58 . 2008-12-04 22:58d
c:program filesCyberLink.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-27 16:00 1,310,720 —sha-w c:usersАдминистраторNTUSER.DAT
2008-12-27 16:00 1,310,720 —sha-w c:usersАдминистраторNTUSER.DAT
2008-12-27 15:57 1,204 —-a-w c:windowssystem32driversAPPFLTR.CFG
2008-12-27 15:31 174,484 —-a-w c:windowssystem32driversAPPFCONT.DAT
2008-12-26 18:43
d
w c:usersАдминистраторAppDataRoamingUniblue
2008-12-26 18:41
d
w c:usersАдминистраторAppDataRoamingWinRAR
2008-12-26 13:21
d
w c:usersАдминистраторAppDataRoamingNero
2008-12-25 19:25
d
w c:usersАдминистраторAppDataRoamingYandex
2008-12-25 19:25
d
w c:usersАдминистраторAppDataRoamingMozilla
2008-12-25 14:56 13,880 —-a-w c:windowssystem32driversCOMFiltr.sys
2008-12-24 18:05
d
w c:usersАдминистраторAppDataRoamingWebMoney
2008-12-24 15:42
d
w c:usersАдминистраторAppDataRoamingGoTView
2008-12-24 15:34
d
w c:usersАдминистраторAppDataRoamingDownload Master
2008-12-24 15:33
d-s—w c:usersАдминистраторAppDataRoamingMicrosoft
2008-12-24 15:30
d
w c:usersАдминистраторAppDataRoamingMacromedia
2008-12-19 16:54
d
w c:usersАдминистраторAppDataRoamingAdobe
2008-12-18 19:27
d
w c:usersАдминистраторAppDataRoamingOpera
2008-12-14 00:57
d
w c:usersАдминистраторAppDataRoamingCDBurnerXP_Soft
2008-12-13 15:41
d
w c:usersАдминистраторAppDataRoamingLeadertech
2008-12-13 13:39
d
w c:usersАдминистраторAppDataRoamingSony Corporation
2008-12-12 12:23
d
w c:usersАдминистраторAppDataRoamingPeerNetworking
2008-12-10 20:40
d
w c:usersАдминистраторAppDataRoamingMedia Player Classic
2008-12-01 11:27
d
w c:usersАдминистраторAppDataRoamingXRay Engine
2008-12-01 09:25
d
w c:usersАдминистраторAppDataRoamingInstallShield
2008-12-01 09:25
d
w c:usersАдминистраторAppDataRoamingIdentities
2008-12-01 09:25
d
w c:usersАдминистраторAppDataRoamingDataCast
2008-12-01 09:25
d
w c:usersАдминистраторAppDataRoamingCyberLink
2008-12-01 09:09 319,456 —-a-w c:windowsDIFxAPI.dll
2008-12-01 09:09 315,392 —-a-w c:windowsHideWin.exe
2008-12-01 08:51
d-sh—w c:programdataШаблоны
2008-12-01 08:51
d-sh—w c:programdataРабочий стол
2008-12-01 08:51
d-sh—w c:programdataГлавное меню
2008-12-01 08:51
d-sh—w c:programdataИзбранное
2008-12-01 08:51
d-sh—w c:programdataДокументы
2008-11-30 03:03
d
w c:usersАдминистраторAppDataRoamingReal
2008-01-21 02:41 174 —sha-w c:program filesdesktop.ini
.((((((((((((((((((((((((((((( snapshot@2008-12-25_16.08.12,91 )))))))))))))))))))))))))))))))))))))))))
.
— 2008-12-22 14:55:47 53,248 —-a-w c:windowsassemblyGACMicrosoft.DirectX.AudioVideoPlayback1.0.2902.0__31bf3856ad364e35Microsoft.DirectX.AudioVideoPlayback.dll
+ 2008-12-26 16:20:25 53,248 —-a-w c:windowsassemblyGACMicrosoft.DirectX.AudioVideoPlayback1.0.2902.0__31bf3856ad364e35Microsoft.DirectX.AudioVideoPlayback.dll
— 2008-12-22 14:55:47 12,800 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Diagnostics1.0.2902.0__31bf3856ad364e35Microsoft.DirectX.Diagnostics.dll
+ 2008-12-26 16:20:25 12,800 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Diagnostics1.0.2902.0__31bf3856ad364e35Microsoft.DirectX.Diagnostics.dll
— 2008-12-22 14:55:47 473,600 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3D1.0.2902.0__31bf3856ad364e35Microsoft.DirectX.Direct3D.dll
+ 2008-12-26 16:20:25 473,600 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3D1.0.2902.0__31bf3856ad364e35Microsoft.DirectX.Direct3D.dll
— 2008-12-22 14:55:45 2,676,224 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2902.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
+ 2008-12-26 16:20:23 2,676,224 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2902.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
— 2008-12-22 14:55:46 2,846,720 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2903.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
+ 2008-12-26 16:20:23 2,846,720 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2903.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
— 2008-12-22 14:55:46 563,712 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2904.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
+ 2008-12-26 16:20:24 563,712 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2904.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
— 2008-12-22 14:55:46 567,296 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2905.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
+ 2008-12-26 16:20:24 567,296 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2905.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
— 2008-12-22 14:55:46 576,000 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2906.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
+ 2008-12-26 16:20:24 576,000 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2906.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
— 2008-12-22 14:55:46 577,024 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2907.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
+ 2008-12-26 16:20:24 577,024 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2907.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
— 2008-12-22 14:55:46 577,536 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2908.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
+ 2008-12-26 16:20:24 577,536 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2908.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
— 2008-12-22 14:55:47 577,536 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2909.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
+ 2008-12-26 16:20:24 577,536 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2909.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
— 2008-12-22 14:55:47 578,560 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2910.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
+ 2008-12-26 16:20:25 578,560 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2910.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
— 2008-12-22 14:55:47 578,560 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2911.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
+ 2008-12-26 16:20:25 578,560 —-a-w c:windowsassemblyGACMicrosoft.DirectX.Direct3DX1.0.2911.0__31bf3856ad364e35Microsoft.DirectX.Direct3DX.dll
— 2008-12-22 14:55:47 145,920 —-a-w c:windowsassemblyGACMicrosoft.DirectX.DirectDraw1.0.2902.0__31bf3856ad364e35Microsoft.DirectX.DirectDraw.dll
+ 2008-12-26 16:20:25 145,920 —-a-w c:windowsassemblyGACMicrosoft.DirectX.DirectDraw1.0.2902.0__31bf3856ad364e35Microsoft.DirectX.DirectDraw.dll
— 2008-12-22 14:55:47 159,232 —-a-w c:windowsassemblyGACMicrosoft.DirectX.DirectInput1.0.2902.0__31bf3856ad364e35Microsoft.DirectX.DirectInput.dll
+ 2008-12-26 16:20:25 159,232 —-a-w c:windowsassemblyGACMicrosoft.DirectX.DirectInput1.0.2902.0__31bf3856ad364e35Microsoft.DirectX.DirectInput.dll
— 2008-12-22 14:55:47 364,544 —-a-w c:windowsassemblyGACMicrosoft.DirectX.DirectPlay1.0.2902.0__31bf3856ad364e35Microsoft.DirectX.DirectPlay.dll
+ 2008-12-26 16:20:25 364,544 —-a-w c:windowsassemblyGACMicrosoft.DirectX.DirectPlay1.0.2902.0__31bf3856ad364e35Microsoft.DirectX.DirectPlay.dll
— 2008-12-22 14:55:47 178,176 —-a-w c:windowsassemblyGACMicrosoft.DirectX.DirectSound1.0.2902.0__31bf3856ad364e35Microsoft.DirectX.DirectSound.dll
+ 2008-12-26 16:20:26 178,176 —-a-w c:windowsassemblyGACMicrosoft.DirectX.DirectSound1.0.2902.0__31bf3856ad364e35Microsoft.DirectX.DirectSound.dll
— 2008-12-22 14:55:47 223,232 —-a-w c:windowsassemblyGACMicrosoft.DirectX1.0.2902.0__31bf3856ad364e35Microsoft.DirectX.dll
+ 2008-12-26 16:20:25 223,232 —-a-w c:windowsassemblyGACMicrosoft.DirectX1.0.2902.0__31bf3856ad364e35Microsoft.DirectX.dll
— 2008-12-13 13:37:43 51,200 —-a-w c:windowsinfinfpub.dat
+ 2008-12-26 21:40:54 51,200 —-a-w c:windowsinfinfpub.dat
— 2008-12-13 13:37:43 86,016 —-a-w c:windowsinfinfstor.dat
+ 2008-12-26 21:40:54 86,016 —-a-w c:windowsinfinfstor.dat
— 2008-12-13 13:37:43 86,016 —-a-w c:windowsinfinfstrng.dat
+ 2008-12-26 21:40:54 86,016 —-a-w c:windowsinfinfstrng.dat
+ 2008-12-26 22:09:44 102,112 —-a-w c:windowsServiceProfilesLocalServiceAppDataLocalFontCache3.0.0.0.dat
— 2008-12-22 14:43:06 2,048 —sha-w c:windowsServiceProfilesLocalServiceAppDataLocallastalive0.dat
+ 2008-12-27 15:31:12 2,048 —sha-w c:windowsServiceProfilesLocalServiceAppDataLocallastalive0.dat
— 2008-12-22 14:44:22 262,144 —sha-w c:windowsServiceProfilesLocalServiceNTUSER.DAT
+ 2008-12-27 16:00:33 262,144 —sha-w c:windowsServiceProfilesLocalServiceNTUSER.DAT
+ 2008-12-27 16:00:33 262,144 —ha-w c:windowsServiceProfilesLocalServicentuser.dat.LOG1
— 2008-12-24 14:47:51 262,144 —sha-w c:windowsServiceProfilesNetworkServiceNTUSER.DAT
+ 2008-12-27 16:00:28 262,144 —sha-w c:windowsServiceProfilesNetworkServiceNTUSER.DAT
+ 2008-12-27 16:00:28 262,144 —ha-w c:windowsServiceProfilesNetworkServicentuser.dat.LOG1
— 2008-12-25 12:34:33 16,384 —sha-w c:windowsSystem32configsystemprofileAppDataLocalMicrosoftWindowsHistoryHistory.IE5index.dat
+ 2008-12-27 15:55:12 16,384 —sha-w c:windowsSystem32configsystemprofileAppDataLocalMicrosoftWindowsHistoryHistory.IE5index.dat
— 2008-12-25 12:34:33 32,768 —sha-w c:windowsSystem32configsystemprofileAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5index.dat
+ 2008-12-27 15:55:12 32,768 —sha-w c:windowsSystem32configsystemprofileAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5index.dat
— 2008-12-25 12:34:33 16,384 —sha-w c:windowsSystem32configsystemprofileAppDataRoamingMicrosoftWindowsCookiesindex.dat
+ 2008-12-27 15:55:12 16,384 —sha-w c:windowsSystem32configsystemprofileAppDataRoamingMicrosoftWindowsCookiesindex.dat
— 2008-12-25 13:07:48 262,144 —-a-w c:windowsSystem32configsystemprofilentuser.dat
+ 2008-12-27 15:58:38 262,144 —-a-w c:windowsSystem32configsystemprofilentuser.dat
+ 2008-12-27 15:58:38 262,144 —ha-w c:windowsSystem32configsystemprofilentuser.dat.LOG1
+ 2007-09-28 14:24:20 46,648 —-a-w c:windowsSystem32driversamm8660.sys
+ 2007-09-28 10:05:40 71,608 —-a-w c:windowsSystem32driversAPPFLT.SYS
+ 2006-11-10 13:08:50 24,064 —-a-w c:windowsSystem32driversATITool.sys
+ 2007-05-11 05:33:06 51,256 —-a-w c:windowsSystem32driversdsaflt.sys
+ 2007-11-14 14:48:22 21,816 —-a-w c:windowsSystem32driversfnetmon.sys
+ 2007-07-11 07:39:48 191,672 —-a-w c:windowsSystem32driversidsflt.sys
+ 2007-10-25 05:50:32 132,664 —-a-w c:windowsSystem32driversNETFLTDI.SYS
— 2008-07-09 11:02:00 6,956,064 —-a-w c:windowsSystem32driversnvlddmkm.sys
+ 2008-11-12 11:54:00 7,611,360 —-a-w c:windowsSystem32driversnvlddmkm.sys
+ 2007-05-11 05:33:32 37,304 —-a-w c:windowsSystem32driverssmsflt.sys
+ 2006-11-10 13:08:50 24,064 —-a-w c:windowsSystem32driversSysTool.sys
+ 2007-05-11 05:33:34 30,648 —-a-w c:windowsSystem32driverswnmflt.sys
+ 2006-11-10 13:08:50 24,064 —-a-w c:windowsSystem32DriverStoreFileRepositoryatitool.inf_b855649aATITool.sys
+ 2007-11-19 10:01:50 143,160 —-a-w c:windowsSystem32DriverStoreFileRepositorynetflt32.inf_31dfb22cnetimflt.sys
+ 2008-11-12 11:54:00 795,104 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26dpinst.exe
+ 2008-11-12 11:54:00 602,112 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvapi.dll
+ 2008-11-12 11:54:00 122,880 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvcod.dll
+ 2008-11-12 11:54:00 13,675,040 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvcpl.dll
+ 2008-11-12 11:54:00 801,312 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvcplui.exe
+ 2008-11-12 11:54:00 1,560,576 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvcuda.dll
+ 2008-11-12 11:54:00 6,017,024 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvd3dum.dll
+ 2008-11-12 11:54:00 4,712,992 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvdisps.dll
+ 2008-11-12 11:54:00 3,492,384 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvgames.dll
+ 2008-11-12 11:54:00 7,611,360 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvlddmkm.sys
+ 2008-11-12 11:54:00 236,064 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvmccs.dll
+ 2008-11-12 11:54:00 45,056 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvmccsrs.dll
+ 2008-11-12 11:54:00 195,104 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvmccss.dll
+ 2008-11-12 11:54:00 92,704 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvmctray.dll
+ 2008-11-12 11:54:00 1,292,832 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvmobls.dll
+ 2008-11-12 11:54:00 9,601,024 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvoglv32.dll
+ 2008-11-12 11:54:00 637,472 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvsvc.dll
+ 2008-11-12 11:54:00 1,286,144 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvsvs.dll
+ 2008-11-12 11:54:00 453,152 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvudisp.exe
+ 2008-11-12 11:54:00 3,803,680 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvvitvs.dll
+ 2008-11-12 11:54:00 207,392 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvvsvc.exe
+ 2008-11-12 11:54:00 2,688,000 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvwgf2um.dll
+ 2008-11-12 11:54:00 2,751,008 —-a-w c:windowsSystem32DriverStoreFileRepositorynv_disp.inf_4a38cb26nvwss.dll
+ 2006-11-10 13:08:50 24,064 —-a-w c:windowsSystem32DriverStoreFileRepositorysystool.inf_4b491a14SysTool.sys
+ 2008-07-11 12:42:08 33,408 —-a-w c:windowsSystem32FiltASWFilt.dll
— 2004-07-26 14:16:10 1,568,768 —-a-w c:windowsSystem32imagX7.dll
+ 2008-07-04 07:23:36 1,757,184 —-a-w c:windowsSystem32imagX7.dll
— 2004-07-26 14:16:10 476,320 —-a-w c:windowsSystem32imagXpr7.dll
+ 2008-07-04 07:23:38 497,296 —-a-w c:windowsSystem32imagXpr7.dll
— 2004-07-26 14:16:10 262,144 —-a-w c:windowsSystem32imagXR7.dll
+ 2008-07-04 07:23:42 258,048 —-a-w c:windowsSystem32imagXR7.dll
— 2004-07-26 14:16:10 471,040 —-a-w c:windowsSystem32imagXRA7.dll
+ 2008-07-04 07:23:46 802,816 —-a-w c:windowsSystem32imagXRA7.dll
+ 2006-02-03 07:00:00 499,712 —-a-w c:windowsSystem32MSVCP71.DLL
— 2008-07-09 11:02:00 466,944 —-a-w c:windowsSystem32nvapi.dll
+ 2008-11-12 11:54:00 602,112 —-a-w c:windowsSystem32nvapi.dll
— 2008-07-09 11:02:00 118,784 —-a-w c:windowsSystem32nvcod.dll
+ 2008-11-12 11:54:00 122,880 —-a-w c:windowsSystem32nvcod.dll
+ 2008-11-12 11:54:00 122,880 —-a-w c:windowsSystem32nvcod135.dll
— 2008-07-09 11:02:00 13,535,776 —-a-w c:windowsSystem32nvcpl.dll
+ 2008-11-12 11:54:00 13,675,040 —-a-w c:windowsSystem32nvcpl.dll
— 2008-07-09 11:02:00 854,560 —-a-w c:windowsSystem32nvcplui.exe
+ 2008-11-12 11:54:00 801,312 —-a-w c:windowsSystem32nvcplui.exe
— 2008-07-09 11:02:00 1,449,984 —-a-w c:windowsSystem32nvcuda.dll
+ 2008-11-12 11:54:00 1,560,576 —-a-w c:windowsSystem32nvcuda.dll
— 2008-07-09 11:02:00 5,570,560 —-a-w c:windowsSystem32nvd3dum.dll
+ 2008-11-12 11:54:00 6,017,024 —-a-w c:windowsSystem32nvd3dum.dll
— 2008-07-09 11:02:00 6,568,480 —-a-w c:windowsSystem32nvdisps.dll
+ 2008-11-12 11:54:00 4,712,992 —-a-w c:windowsSystem32nvdisps.dll
— 2008-07-09 11:02:00 3,447,328 —-a-w c:windowsSystem32nvgames.dll
+ 2008-11-12 11:54:00 3,492,384 —-a-w c:windowsSystem32nvgames.dll
— 2008-07-09 11:02:00 236,064 —-a-w c:windowsSystem32nvmccs.dll
+ 2008-11-12 11:54:00 236,064 —-a-w c:windowsSystem32nvmccs.dll
— 2008-07-09 11:02:00 45,056 —-a-w c:windowsSystem32nvmccsrs.dll
+ 2008-11-12 11:54:00 45,056 —-a-w c:windowsSystem32nvmccsrs.dll
— 2008-07-09 11:02:00 195,104 —-a-w c:windowsSystem32nvmccss.dll
+ 2008-11-12 11:54:00 195,104 —-a-w c:windowsSystem32nvmccss.dll
— 2008-07-09 11:02:00 92,704 —-a-w c:windowsSystem32nvmctray.dll
+ 2008-11-12 11:54:00 92,704 —-a-w c:windowsSystem32nvmctray.dll
— 2008-07-09 11:02:00 1,280,544 —-a-w c:windowsSystem32nvmobls.dll
+ 2008-11-12 11:54:00 1,292,832 —-a-w c:windowsSystem32nvmobls.dll
— 2008-07-09 11:02:00 8,871,936 —-a-w c:windowsSystem32nvoglv32.dll
+ 2008-11-12 11:54:00 9,601,024 —-a-w c:windowsSystem32nvoglv32.dll
— 2008-07-09 11:02:00 551,456 —-a-w c:windowsSystem32nvsvc.dll
+ 2008-11-12 11:54:00 637,472 —-a-w c:windowsSystem32nvsvc.dll
+ 2008-11-12 11:54:00 1,286,144 —-a-w c:windowsSystem32nvsvs.dll
— 2008-07-09 11:02:00 446,464 —-a-w c:windowsSystem32nvudisp.exe
+ 2008-11-12 11:54:00 453,152 —-a-w c:windowsSystem32nvudisp.exe
— 2008-07-09 12:59:30 446,464 —-a-w c:windowsSystem32NVUNINST.EXE
+ 2008-11-12 10:45:46 453,152 —-a-w c:windowsSystem32NVUNINST.EXE
— 2008-07-09 11:02:00 3,775,008 —-a-w c:windowsSystem32nvvitvs.dll
+ 2008-11-12 11:54:00 3,803,680 —-a-w c:windowsSystem32nvvitvs.dll
— 2008-07-09 11:02:00 122,880 —-a-w c:windowsSystem32nvvsvc.exe
+ 2008-11-12 11:54:00 207,392 —-a-w c:windowsSystem32nvvsvc.exe
— 2008-07-09 11:02:00 2,427,904 —-a-w c:windowsSystem32nvwgf2um.dll
+ 2008-11-12 11:54:00 2,688,000 —-a-w c:windowsSystem32nvwgf2um.dll
— 2008-07-09 11:02:00 2,697,760 —-a-w c:windowsSystem32nvwss.dll
+ 2008-11-12 11:54:00 2,751,008 —-a-w c:windowsSystem32nvwss.dll
— 2008-12-24 13:46:20 101,052 —-a-w c:windowsSystem32perfc009.dat
+ 2008-12-27 15:37:36 101,052 —-a-w c:windowsSystem32perfc009.dat
— 2008-12-24 13:46:20 125,594 —-a-w c:windowsSystem32perfc019.dat
+ 2008-12-27 15:37:36 125,594 —-a-w c:windowsSystem32perfc019.dat
— 2008-12-24 13:46:20 586,980 —-a-w c:windowsSystem32perfh009.dat
+ 2008-12-27 15:37:36 586,980 —-a-w c:windowsSystem32perfh009.dat
— 2008-12-24 13:46:20 653,074 —-a-w c:windowsSystem32perfh019.dat
+ 2008-12-27 15:37:36 653,074 —-a-w c:windowsSystem32perfh019.dat
— 2008-12-17 11:56:08 6,291,456 —-a-w c:windowsSystem32SMIStoreMachineSCHEMA.DAT
+ 2008-12-25 14:48:09 6,291,456 —-a-w c:windowsSystem32SMIStoreMachineSCHEMA.DAT
— 2004-07-09 06:43:56 364,544 —-a-w c:windowsSystem32TwnLib4.dll
+ 2006-03-17 12:49:46 368,640 —-a-w c:windowsSystem32twnlib4.dll
— 2008-12-22 14:44:42 4,672 —-a-w c:windowsSystem32WDI{86432a0b-3c7d-4ddf-a89c-172faa90485d}S-1-5-21-3165601783-2953090004-2925255804-500_UserData.bin
+ 2008-12-27 15:33:02 6,788 —-a-w c:windowsSystem32WDI{86432a0b-3c7d-4ddf-a89c-172faa90485d}S-1-5-21-3165601783-2953090004-2925255804-500_UserData.bin
— 2008-12-22 14:44:42 59,676 —-a-w c:windowsSystem32WDIBootPerformanceDiagnostics_SystemData.bin
+ 2008-12-27 15:33:02 75,246 —-a-w c:windowsSystem32WDIBootPerformanceDiagnostics_SystemData.bin
— 2008-12-22 14:44:42 25,656 —-a-w c:windowsSystem32WDIShutdownPerformanceDiagnostics_SystemData.bin
+ 2008-12-27 13:33:44 33,786 —-a-w c:windowsSystem32WDIShutdownPerformanceDiagnostics_SystemData.bin
— 2008-12-25 12:34:30 218,368 —-a-w c:windowsSystem32WDISuspendPerformanceDiagnostics_SystemData_S4.bin
+ 2008-12-27 15:08:12 229,082 —-a-w c:windowsSystem32WDISuspendPerformanceDiagnostics_SystemData_S4.bin
— 2008-12-16 16:00:19 194,186 —-a-w c:windowswinsxsManifestCache6.0.6001.18000_001c50b5_blobs.bin
+ 2008-12-25 14:42:09 210,198 —-a-w c:windowswinsxsManifestCache6.0.6001.18000_001c50b5_blobs.bin
+ 2008-12-25 14:42:00 96,256 —-a-w c:windowswinsxsx86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.762_none_11ecb0ab9b2caf3cATL80.dll
+ 2008-12-25 14:42:01 479,232 —-a-w c:windowswinsxsx86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_none_10b2f55f9bffb8f8msvcm80.dll
+ 2008-12-25 14:42:01 548,864 —-a-w c:windowswinsxsx86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_none_10b2f55f9bffb8f8msvcp80.dll
+ 2008-12-25 14:42:01 626,688 —-a-w c:windowswinsxsx86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_none_10b2f55f9bffb8f8msvcr80.dll
+ 2008-12-25 14:42:02 1,101,824 —-a-w c:windowswinsxsx86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7edmfc80.dll
+ 2008-12-25 14:42:02 1,093,120 —-a-w c:windowswinsxsx86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7edmfc80u.dll
+ 2008-12-25 14:42:02 69,632 —-a-w c:windowswinsxsx86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7edmfcm80.dll
+ 2008-12-25 14:42:02 57,856 —-a-w c:windowswinsxsx86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7edmfcm80u.dll
+ 2008-12-25 14:42:03 40,960 —-a-w c:windowswinsxsx86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131mfc80CHS.dll
+ 2008-12-25 14:42:03 45,056 —-a-w c:windowswinsxsx86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131mfc80CHT.dll
+ 2008-12-25 14:42:03 65,536 —-a-w c:windowswinsxsx86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131mfc80DEU.dll
+ 2008-12-25 14:42:03 57,344 —-a-w c:windowswinsxsx86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131mfc80ENU.dll
+ 2008-12-25 14:42:03 61,440 —-a-w c:windowswinsxsx86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131mfc80ESP.dll
+ 2008-12-25 14:42:03 61,440 —-a-w c:windowswinsxsx86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131mfc80FRA.dll
+ 2008-12-25 14:42:03 61,440 —-a-w c:windowswinsxsx86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131mfc80ITA.dll
+ 2008-12-25 14:42:03 49,152 —-a-w c:windowswinsxsx86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131mfc80JPN.dll
+ 2008-12-25 14:42:03 49,152 —-a-w c:windowswinsxsx86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131mfc80KOR.dll
+ 2008-12-25 14:42:04 65,536 —-a-w c:windowswinsxsx86_microsoft.vc80.openmp_1fc8b3b9a1e18e3b_8.0.50727.762_none_7b33aa7d218504d2vcomp.dll
.
— Snapshot reset to current date —
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4[HKEY_LOCAL_MACHINE~Browser Helper Objects{B4806C1A-FE8A-4008-9DA3-8CEDB6E82C10}]
2008-09-05 15:42 2409472 —a
c:program filesWebMoney Advisorwmadvisor.dll[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
«{3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840}»= «c:program filesWebMoney Advisorwmadvisor.dll» [2008-09-05 2409472][HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerToolbarWebbrowser]
«{3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840}»= «c:program filesWebMoney Advisorwmadvisor.dll» [2008-09-05 2409472][HKEY_CLASSES_ROOTclsid{3affd7f7-fd3d-4c9d-8f83-03296a1a8840}]
[HKEY_CLASSES_ROOTTBSB03223.TBSB03223.3]
[HKEY_CLASSES_ROOTTypeLib{77AA25E8-6083-4949-A831-9CB11861DC10}]
[HKEY_CLASSES_ROOTTBSB03223.TBSB03223][HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
«Sidebar»=»c:program filesWindows Sidebarsidebar.exe» [2008-01-21 1233920]
«OscarEditor»=»c:program filesOSCAR EditorOscarEditor.exe» [2008-04-21 2493952]
«AlcoholAutomount»=»c:program filesAlcohol SoftAlcohol 120axcmd.exe» [2007-12-22 221568]
«Download Master»=»c:program filesDownload Masterdmaster.exe» [2008-11-18 3297280]
«WMPNSCFG»=»c:program filesWindows Media PlayerWMPNSCFG.exe» [2008-01-21 202240][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
«9051H»=»c:progra~1Cheetah9051H9051HKb.exe» [2008-02-05 1006088]
«wmagent.exe»=»c:program filesWebMoney Agentwmagent.exe» [2008-10-01 209376]
«OutpostMonitor»=»c:progra~1AgnitumOUTPOS~1op_mon.exe» [2008-07-15 1153352]
«OutpostFeedBack»=»c:program filesAgnitumOutpost Firewall Profeedback.exe» [2008-07-15 435528]
«APVXDWIN»=»c:program filesPanda SecurityPanda Antivirus + Firewall 2008APVXDWIN.EXE» [2007-10-04 455984]
«NvCplDaemon»=»c:windowssystem32NvCpl.dll» [2008-11-12 13675040]
«NvMediaCenter»=»c:windowssystem32NvMcTray.dll» [2008-11-12 92704]
«RivaTunerStartupDaemon»=»c:program filesRivaTuner v2.21RivaTunerWrapper.exe» [2008-12-10 24576]
«RtHDVCpl»=»RtHDVCpl.exe» [2008-05-20 c:windowsRtHDVCpl.exe]c:usersЂ¤¬ЁЁбва в®аAppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
Remote.lnk — c:program filesGoTViewremote.exe [2008-04-10 26112][HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionpoliciessystem]
«ConsentPromptBehaviorAdmin»= 0 (0x0)
«ConsentPromptBehaviorUser»= 0 (0x0)
«EnableInstallerDetection»= 0 (0x0)
«EnableLUA»= 0 (0x0)[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionwinlogonnotifyavldr]
2007-02-15 19:02 50736 c:windowsSystem32avldr.dll[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionwindows]
«AppInit_DLLs»=c:progra~1agnitumoutpos~1wl_hook.dll[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalPskSvcRetail]
@=»Service»[HKLM~servicessharedaccessparametersfirewallpolicyFirewallRules]
«{54027FBF-0F4E-4C91-9B41-CE5453DA8499}»= UDP:d:игрысталкерS.T.A.L.K.E.RbinXR_3DA.exe:S.T.A.L.K.E.R. (CLI)
«{6FB6EC87-7E5F-4CB5-A226-CFD4D056AEE3}»= TCP:d:игрысталкерS.T.A.L.K.E.RbinXR_3DA.exe:S.T.A.L.K.E.R. (CLI)
«{861B2F82-99CD-4583-A8D4-B493C846CAD0}»= UDP:d:игрысталкерS.T.A.L.K.E.RbindedicatedXR_3DA.exe:S.T.A.L.K.E.R. (SRV)
«{11DBF061-5CC6-4B44-9693-9A9B1E230816}»= TCP:d:игрысталкерS.T.A.L.K.E.RbindedicatedXR_3DA.exe:S.T.A.L.K.E.R. (SRV)
«TCP Query User{80BF6511-9515-4CAD-A2D5-27912FA8E805}c:\program files\webmoney\webmoney.exe»= UDP:c:program fileswebmoneywebmoney.exe:WebMoney Keeper Classic Runner Module
«UDP Query User{A716F0EC-6BDD-4257-915E-F10C9CDD38B7}c:\program files\webmoney\webmoney.exe»= TCP:c:program fileswebmoneywebmoney.exe:WebMoney Keeper Classic Runner Module
«{118CC6EA-E608-441E-B631-D35C0ED94442}»= UDP:d:gscworldpublishingCSbinxrEngine.exe:С.Т.А.Л.К.Е.Р. — Чистое Небо (CLI)
«{7CCDD4E3-BB06-420B-AA7B-5EA2F72DFBFD}»= TCP:d:gscworldpublishingCSbinxrEngine.exe:С.Т.А.Л.К.Е.Р. — Чистое Небо (CLI)
«{300DD703-DFA8-4CB1-BF3F-1A7872C108D8}»= UDP:d:gscworldpublishingCSbindedicatedxrEngine.exe:С.Т.А.Л.К.Е.Р. — Чистое Небо (SRV)
«{A1149088-A07E-4ECD-B265-EC21E695AEE2}»= TCP:d:gscworldpublishingCSbindedicatedxrEngine.exe:С.Т.А.Л.К.Е.Р. — Чистое Небо (SRV)[HKLM~servicessharedaccessparametersfirewallpolicyPublicProfile]
«EnableFirewall»= 0 (0x0)
«DoNotAllowExceptions»= 1 (0x1)R0 mv61xx;mv61xx;c:windowssystem32DRIVERSmv61xx.sys [2008-06-24 150568]
R0 pe3ajtsc;Stalker (Pro) Environment Driver (pe3ajtsc);c:windowssystem32driverspe3ajtsc.sys [2007-03-23 64896]
R0 ps6ajtsc;Stalker (Pro) Synchronization Driver (ps6ajtsc);c:windowssystem32driversps6ajtsc.sys [2007-03-23 52104]
R1 afw;Agnitum Firewall Driver;c:windowssystem32DRIVERSafw.sys [2008-12-25 28688]
R1 appdrv01;Application Driver (01);c:windowssystem32Driversappdrv01.sys [2008-12-26 3100776]
R1 APPFLT;App Filter Plugin;??c:windowssystem32DriversAPPFLT.SYS [2008-12-25 71608]
R1 DSAFLT;DSA Filter Plugin;??c:windowssystem32DriversDSAFLT.SYS [2008-12-25 51256]
R1 FNETMON;NetMon Filter Plugin;??c:windowssystem32Driversfnetmon.SYS [2008-12-25 21816]
R1 IDSFLT;Ids Filter Plugin;??c:windowssystem32DriversIDSFLT.SYS [2008-12-25 191672]
R1 NETFLTDI;Panda Net Driver [TDI Layer];??c:windowssystem32DriversNETFLTDI.SYS [2008-12-25 17:56:08 132664]
R1 SandBox;SandBox;c:windowssystem32DRIVERSSandBox.sys [2008-12-25 673920]
R1 ShldDrv;Panda File Shield Driver;c:windowssystem32DRIVERSShlDrv51.sys [2008-12-25 38968]
R1 SMSFLT;SMS Filter Plugin;??c:windowssystem32DriversSMSFLT.SYS [2008-12-25 37304]
R1 WNMFLT;Wifi Monitor Filter Plugin;??c:windowssystem32DriversWNMFLT.SYS [2008-12-25 30648]
R2 AmFSM;AmFSM;c:windowssystem32DRIVERSamm8660.sys [2008-12-25 46648]
R2 ComFiltr;Panda Anti-Dialer;??c:windowssystem32DRIVERSCOMFiltr.sys [2008-12-25 13880]
R2 cpoint;Panda CPoint Driver;c:windowssystem32Driverscpoint.sys [2008-12-25 24760]
R2 hid9051h;9051H Gaming Keyboard USB HID Device Filter Driver;c:windowssystem32DRIVERShid9051h.sys [2007-10-04 29576]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0;c:program filesCommon FilesNeroNero BackItUp 4NBService.exe [2008-12-05 935208]
R2 PavProc;Panda Process Protection Driver;??c:windowssystem32DRIVERSPavProc.sys [2008-12-25 178872]
R2 PskSvcRetail;Panda PSK service;»c:program filesPanda SecurityPanda Antivirus + Firewall 2008PskSvc.exe» [2008-12-25 27696]
R3 afwcore;afwcore;c:windowssystem32driversafwcore.sys [2008-12-25 242704]
R3 ASWFilt;ASWFilt;c:windowssystem32FiltASWFilt.dll [2008-12-25 33408]
R3 GTVCX;GOTVIEW Video Capture driver;c:windowssystem32driverscxavsvid.sys [2008-12-01 201248]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller;c:windowssystem32DRIVERSL1E60x86.sys [2008-12-01 47616]
R3 NETIMFLT01050097;PANDA NDIS IM Filter Miniport v1.5.0.97;c:windowssystem32DRIVERSnetimflt.sys [2008-12-25 143160]
S1 SysTool;SysTool Overclocking Utility;c:windowssystem32DRIVERSSysTool.sys [2006-11-10 24064]
S2 acssrv;Agnitum Client Security Service;c:progra~1AgnitumOUTPOS~1acs.exe [2008-12-25 1238344]
S2 appdrvrem01;Application Driver Auto Removal Service (01);c:windowsSystem32appdrvrem01.exe svc []
S2 pr2ajtsc;Stalker (Pro) Drivers Auto Removal (pr2ajtsc);c:windowssystem32pr2ajtsc.exe svc [][HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionsvchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{30624183-bf84-11dd-bd61-806e6f6e6963}]
shellAutoRuncommand — E:setup.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{c26b5a6c-c978-11dd-9582-002215ae31fe}]
shellAutoRuncommand — F:Launch.exe*Newly Created Service* — CATCHME
.
Contents of the ‘Scheduled Tasks’ folder2008-12-26 c:windowsTasksNeroLiveEpgUpdate-GAME-2008_Администратор.job
— c:program filesNeroNero 9Nero LiveNeroLive.exe [2008-10-27 09:59]
.
.
Supplementary Scan
.
IE: Закачать ВСЕ при помощи Download Master — c:program filesDownload Masterdmieall.htm
IE: Закачать при помощи Download Master — c:program filesDownload Masterdmie.htm
IE: {{8DAE90AD-4583-4977-9DD4-4360F7A45C74} — c:program filesDownload Masterdmaster.exe
IE: {{3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840} — {3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840} — c:program filesWebMoney Advisorwmadvisor.dll
LSP: c:program filesPanda SecurityPanda Antivirus + Firewall 2008pavlsp.dll
TCP: {02BF54EE-899A-4467-B52E-C6DB9DADA851} = 62.213.7.190,62.213.0.12
FF — ProfilePath — c:usersАдминистраторAppDataRoamingMozillaFirefoxProfilesfx52o2x2.default
FF — plugin: c:program filesOperaprogrampluginsnpdm.dll
.**************************************************************************
catchme 0.3.1367 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-27 19:00:36
Windows 6.0.6001 Service Pack 1 NTFSscanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0**************************************************************************
.
Completion time: 2008-12-27 19:01:38
ComboFix-quarantined-files.txt 2008-12-27 16:01:35
ComboFix2.txt 2008-12-25 13:52:36
ComboFix3.txt 2008-12-25 13:47:27
ComboFix4.txt 2008-12-25 13:39:12
ComboFix5.txt 2008-12-27 15:58:20Pre-Run: 78 915 153 920 байт свободно
Post-Run: 80,905,310,208 байт свободно502
