[tanjash]

после запуска программы появляется маленькое окошко с индикатором загрузки и все.или после этого для вставки лога нужно запустить снова предыдущую программу? спасибо.

[tanjash]

О!после того,что только что делала сайт открылся!!!!! 😀 спасибо вам огромное!надеюсь больше ошибок нет )))

[tanjash]

Logfile of random’s system information tool 1.07 (written by random/random)
Run by 1 at 2010-05-27 12:14:56
Microsoft Windows XP Professional Service Pack 2
System drive C: has 13 GB (17%) free of 80 GB
Total RAM: 2814 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:15:02, on 27.05.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe
C:WINDOWSsystem32Ati2evxx.exe
C:Program FilesAVGAVG9avgchsvx.exe
C:Program FilesAVGAVG9avgrsx.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSsystem32acs.exe
C:Program FilesAVGAVG9avgcsrvx.exe
C:WINDOWSExplorer.EXE
C:Program FilesAVGAVG9avgwdsvc.exe
C:WINDOWSsystem32HPZipm12.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.exe
C:PROGRA~1LAUNCH~1LManager.exe
C:Program FilesHPHP Software UpdateHPWuSchd2.exe
C:Program FilesApoint2KApoint.exe
C:Program FilesAtherosACU.exe
C:PROGRA~1AVGAVG9avgtray.exe
C:WINDOWSRTHDCPL.EXE
C:Program FilesApoint2KApMsgFwd.exe
C:Program FilesApoint2KApntex.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesYandexOnlineonline.exe
C:Documents and Settings1Local SettingsApplication DataGoogleUpdateGoogleUpdate.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Program FilesATI TechnologiesATI.ACECore-Staticccc.exe
C:Program FilesYandexOnlineyachatyachat.exe
C:Documents and Settings1Мои документыЗагрузкиRSIT.exe
C:Program Filestrend micro1.exe

R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=41128
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: AVG Security Toolbar BHO — {A3BC75A2-1F87-4686-AA43-5347D756017C} — C:Program FilesAVGAVG9ToolbarIEToolbar.dll
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:Program FilesMail.RuAgentMradllnewmrasearch.dll
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: WormRadar.com IESiteBlocker.NavFilter — {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} — C:Program FilesAVGAVG9avgssie.dll
O2 — BHO: AVG Security Toolbar BHO — {A3BC75A2-1F87-4686-AA43-5347D756017C} — C:Program FilesAVGAVG9ToolbarIEToolbar.dll
O3 — Toolbar: AVG Security Toolbar — {CCC7A320-B3CA-4199-B1A6-9F516DD69829} — C:Program FilesAVGAVG9ToolbarIEToolbar.dll
O4 — HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 — HKLM..Run: [StartCCC] «C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe» MSRun
O4 — HKLM..Run: [LManager] C:PROGRA~1LAUNCH~1LManager.exe
O4 — HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe
O4 — HKLM..Run: [AzMixerSel] C:Program FilesRealtekAudioDriversAzMixerSel.exe
O4 — HKLM..Run: [Apoint] C:Program FilesApoint2KApoint.exe
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 8.0ReaderReader_sl.exe»
O4 — HKLM..Run: [Adobe ARM] «C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe»
O4 — HKLM..Run: [ACU] «C:Program FilesAtherosACU.exe» -nogui
O4 — HKLM..Run: [AVG9_TRAY] C:PROGRA~1AVGAVG9avgtray.exe
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [OutpostMonitor] C:PROGRA~1AgnitumOUTPOS~1op_mon.exe /tray /noservice
O4 — HKLM..Run: [OutpostFeedBack] «C:Program FilesAgnitumOutpost Firewallfeedback.exe» /dump:os_startup
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] «C:Program FilesCommon FilesAheadLibNMBgMonitor.exe»
O4 — HKCU..Run: [YandexOnline] «C:Program FilesYandexOnlineonline.exe» -AutoStart
O4 — HKCU..Run: [Google Update] «C:Documents and Settings1Local SettingsApplication DataGoogleUpdateGoogleUpdate.exe» /c
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O8 — Extra context menu item: &Отправить на устройство Bluetooth… — C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie_ctx.htm
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: Google ВикиКомментарии… — res://C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 — Extra button: ICQ7.1 — {71BFC818-0CED-42D6-9C87-5142918957EE} — C:Program FilesICQ7.1ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ7.1 — {71BFC818-0CED-42D6-9C87-5142918957EE} — C:Program FilesICQ7.1ICQ.exe
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: @btrez.dll,-4015 — {CCA281CA-C863-46ef-9331-5C8D4460577F} — C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm
O9 — Extra ‘Tools’ menuitem: @btrez.dll,-12650 — {CCA281CA-C863-46ef-9331-5C8D4460577F} — C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O16 — DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} — http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 — Protocol: avgsecuritytoolbar — {F2DDE6B2-9684-4A55-86D4-E255E237B77C} — C:Program FilesAVGAVG9ToolbarIEToolbar.dll
O18 — Protocol: linkscanner — {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} — C:Program FilesAVGAVG9avgpp.dll
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 — AppInit_DLLs: c:progra~1agnitumoutpos~1wl_hook.dll
O20 — Winlogon Notify: avgrsstarter — avgrsstx.dll (file missing)
O22 — SharedTaskScheduler: Предзагрузчик Browseui — {438755C2-A8BA-11D1-B96B-00A0C90312E1} — C:WINDOWSsystem32browseui.dll
O22 — SharedTaskScheduler: Демон кэша категорий компонентов — {8C7461EF-2B13-11d2-BE35-3078302C2030} — C:WINDOWSsystem32browseui.dll
O23 — Service: Atheros Configuration Service (ACS) — Atheros — C:WINDOWSsystem32acs.exe
O23 — Service: Agnitum Client Security Service (acssrv) — Agnitum Ltd. — C:PROGRA~1AgnitumOUTPOS~1acs.exe
O23 — Service: Ati External Event Utility — ATI Technologies Inc. — C:WINDOWSsystem32Ati2evxx.exe
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — C:WINDOWSsystem32Ati2evxx.exe
O23 — Service: ATI Smart — Unknown owner — C:WINDOWSsystem32ati2sgag.exe
O23 — Service: AVG Security Toolbar Service — Unknown owner — C:Program FilesAVGAVG9ToolbarToolbarBroker.exe
O23 — Service: AVG Free WatchDog (avg9wd) — AVG Technologies CZ, s.r.o. — C:Program FilesAVGAVG9avgwdsvc.exe
O23 — Service: Bluetooth Service (btwdins) — Broadcom Corporation. — C:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: NMIndexingService — Unknown owner — C:Program FilesCommon FilesAheadLibNMIndexingService.exe (file missing)
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Pml Driver HPZ12 — HP — C:WINDOWSsystem32HPZipm12.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 9499 bytes

======Scheduled tasks folder======

C:WINDOWStasksGoogleUpdateTaskUserS-1-5-21-1060284298-1547161642-682003330-1003Core.job
C:WINDOWStasksRealUpgradeLogonTaskS-1-5-21-1060284298-1547161642-682003330-1003.job
C:WINDOWStasksRealUpgradeScheduledTaskS-1-5-21-1060284298-1547161642-682003330-1003.job
C:WINDOWStasksWGASetup.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2010-04-02 61888]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search — C:Program FilesAVGAVG9avgssie.dll [2010-05-14 1615200]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO — C:Program FilesAVGAVG9ToolbarIEToolbar.dll [2010-04-19 2117704]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} — AVG Security Toolbar — C:Program FilesAVGAVG9ToolbarIEToolbar.dll [2010-04-19 2117704]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«SynTPEnh»=C:Program FilesSynapticsSynTPSynTPEnh.exe [2009-03-06 1434920]
«StartCCC»=C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2010-02-11 61440]
«LManager»=C:PROGRA~1LAUNCH~1LManager.exe [2009-01-17 862728]
«HP Software Update»=C:Program FilesHPHP Software UpdateHPWuSchd2.exe [2005-05-11 49152]
«AzMixerSel»=C:Program FilesRealtekAudioDriversAzMixerSel.exe [2009-12-11 59936]
«Apoint»=C:Program FilesApoint2KApoint.exe [2009-02-23 204800]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2010-04-02 40368]
«Adobe ARM»=C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe [2010-03-24 952768]
«ACU»=C:Program FilesAtherosACU.exe [2009-01-05 450648]
«AVG9_TRAY»=C:PROGRA~1AVGAVG9avgtray.exe [2010-05-14 2064736]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2010-03-20 19521056]
«OutpostMonitor»=C:PROGRA~1AgnitumOUTPOS~1op_mon.exe [2009-04-14 2374464]
«OutpostFeedBack»=C:Program FilesAgnitumOutpost Firewallfeedback.exe [2009-04-14 428032]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2004-08-17 15360]
«BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}»=C:Program FilesCommon FilesAheadLibNMBgMonitor.exe []
«YandexOnline»=C:Program FilesYandexOnlineonline.exe [2010-03-15 2561352]
«Google Update»=C:Documents and Settings1Local SettingsApplication DataGoogleUpdateGoogleUpdate.exe [2010-05-25 136176]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAmazing3DAquariumWallpaper]
[]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregEleFunAnimatedWallpaper]
[]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregMAgent]
C:Program FilesMail.RuAgentMAgent.exe [2010-03-26 8746680]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^HP Digital Imaging Monitor.lnk]
C:PROGRA~1HPDIGITA~1binhpqtra08.exe [2005-05-11 282624]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLS»=»c:progra~1agnitumoutpos~1wl_hook.dll»

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWSsystem32Ati2evxx.dll [2010-02-11 155648]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyavgrsstarter]
C:WINDOWSsystem32avgrsstx.dll [2010-05-14 12464]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWdf01000.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWdf01000.sys]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«HonorAutoRunSetting»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesICQ7.1ICQ.exe»=»C:Program FilesICQ7.1ICQ.exe:*:Enabled:ICQ7.1»
«C:Program FilesICQ7.1aolload.exe»=»C:Program FilesICQ7.1aolload.exe:*:Enabled:aolload.exe»
«C:Program FilesOperaopera.exe»=»C:Program FilesOperaopera.exe:*:Enabled:Opera Internet Browser»
«C:Program FilesSkypePlugin ManagerskypePM.exe»=»C:Program FilesSkypePlugin ManagerskypePM.exe:*:Enabled:Skype Extras Manager»
«C:Program FilesMail.RuAgentmagent.exe»=»C:Program FilesMail.RuAgentmagent.exe:*:Enabled:Mail.Ru Агент»
«C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
«C:Program FilesMozilla Firefoxfirefox.exe»=»C:Program FilesMozilla Firefoxfirefox.exe:*:Enabled:Firefox»
«C:Program FilesTurokBinariesTurokGame.exe»=»C:Program FilesTurokBinariesTurokGame.exe:*:Enabled:Turok»
«C:Documents and SettingsAll UsersApplication DataKaspersky Lab Setup FilesKaspersky Anti-Virus 2010 9.0.0.463Russiansetup.exe»=»C:Documents and SettingsAll UsersApplication DataKaspersky Lab Setup FilesKaspersky Anti-Virus 2010 9.0.0.463Russiansetup.exe:*:Enabled:Программа установки Антивируса Касперского 2010»
«C:Program FilesAVGAVG9avgupd.exe»=»C:Program FilesAVGAVG9avgupd.exe:*:Enabled:avgupd.exe»
«C:Program FilesAVGAVG9avgnsx.exe»=»C:Program FilesAVGAVG9avgnsx.exe:*:Enabled:avgnsx.exe»
«C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesICQ7.1ICQ.exe»=»C:Program FilesICQ7.1ICQ.exe:*:Enabled:ICQ7.1»
«C:Program FilesICQ7.1aolload.exe»=»C:Program FilesICQ7.1aolload.exe:*:Enabled:aolload.exe»

======List of files/folders created in the last 1 months======

2010-05-27 11:58:48 —-D—- C:_OTM
2010-05-26 14:57:47 —-D—- C:Documents and Settings1Application DataMedia Player Classic
2010-05-25 17:50:26 —-D—- C:rsit
2010-05-25 13:49:31 —-D—- C:Program FilesTrend Micro
2010-05-24 20:30:33 —-D—- C:Program FilesWarCraftIII — Ancient Instinct
2010-05-20 18:16:18 —-D—- C:Program FilesSTDU Viewer
2010-05-20 18:16:18 —-D—- C:Program FilesCommon FilesSTDUtility
2010-05-20 13:06:44 —-A—- C:WINDOWSHelicon Debug Window.ini
2010-05-20 13:06:23 —-D—- C:Program FilesCommon FilesNikon
2010-05-20 13:06:15 —-D—- C:Program FilesMovie Player ActiveX Control
2010-05-20 13:06:15 —-D—- C:Program FilesAudio Capture ActiveX Control
2010-05-20 13:06:14 —-D—- C:Program FilesHelicon Software
2010-05-20 11:05:32 —-D—- C:WINDOWSsystem32XPSViewer
2010-05-20 11:05:26 —-D—- C:Program FilesMSBuild
2010-05-20 11:05:24 —-D—- C:WINDOWSsystem32en-US
2010-05-20 11:05:01 —-D—- C:Program FilesReference Assemblies
2010-05-20 11:04:08 —-N—- C:WINDOWSsystem32prntvpt.dll
2010-05-20 11:04:07 —-N—- C:WINDOWSsystem32xpssvcs.dll
2010-05-20 11:04:07 —-N—- C:WINDOWSsystem32xpsshhdr.dll
2010-05-17 14:06:32 —-D—- C:Program FilesPCGAME
2010-05-17 12:43:53 —-D—- C:Program FilesMSXML 6.0
2010-05-17 12:34:18 —-D—- C:Program FilesLavalys
2010-05-17 11:49:01 —-D—- C:Program FilesMedal of Honor — Airborne
2010-05-17 09:29:57 —-D—- C:Documents and Settings1Application DataXnView
2010-05-17 09:29:42 —-D—- C:Program FilesXnView
2010-05-16 23:09:29 —-D—- C:Documents and Settings1Application DataDisney Interactive Studios
2010-05-16 22:46:45 —-D—- C:Program FilesCaspian
2010-05-16 19:58:33 —-D—- C:Documents and Settings1Application DataYaChatData
2010-05-16 19:58:24 —-D—- C:Program FilesYandex
2010-05-15 22:36:24 —-A—- C:WINDOWSsystem32unrar.dll
2010-05-15 22:36:24 —-A—- C:WINDOWSavisplitter.ini
2010-05-15 22:36:22 —-A—- C:WINDOWSsystem32yv12vfw.dll
2010-05-15 22:36:22 —-A—- C:WINDOWSsystem32xvidvfw.dll
2010-05-15 22:36:22 —-A—- C:WINDOWSsystem32xvidcore.dll
2010-05-15 22:36:21 —-A—- C:WINDOWSsystem32qt-dx331.dll
2010-05-15 22:36:21 —-A—- C:WINDOWSsystem32dpl100.dll
2010-05-15 22:36:21 —-A—- C:WINDOWSsystem32divx.dll
2010-05-15 22:36:19 —-A—- C:WINDOWSsystem32ff_vfw.dll.manifest
2010-05-15 22:36:19 —-A—- C:WINDOWSsystem32ff_vfw.dll
2010-05-15 22:36:18 —-D—- C:Program FilesK-Lite Codec Pack
2010-05-15 22:32:12 —-D—- C:Documents and SettingsAll UsersApplication Dataashampoo
2010-05-15 22:32:07 —-D—- C:Program FilesAshampoo
2010-05-15 22:26:07 —-D—- C:Program FilesAgnitum
2010-05-15 22:25:45 —-D—- C:Documents and SettingsAll UsersApplication DataAgnitum
2010-05-15 22:19:08 —-A—- C:WINDOWSsystem32RTSUSTORicon.dll
2010-05-15 22:18:55 —-A—- C:WINDOWSsystem32RtsUStor.dll
2010-05-15 21:18:35 —-D—- C:Program FilesIntel
2010-05-15 21:18:15 —-D—- C:Intel
2010-05-15 16:31:44 —-D—- C:WINDOWSie8updates
2010-05-15 16:31:25 —-D—- C:WINDOWSWBEM
2010-05-15 16:30:01 —-HDC—- C:WINDOWSie8
2010-05-15 16:30:01 —-D—- C:WINDOWSsystem32ru-RU
2010-05-15 16:29:43 —-D—- C:WINDOWSsystem32MpEngineStore
2010-05-15 15:46:16 —-A—- C:WINDOWSsystem32MRT.exe
2010-05-15 09:39:24 —-D—- C:WINDOWSsystem32KB905474
2010-05-15 09:37:38 —-D—- C:WINDOWSsystem32CatRoot_bak
2010-05-15 09:27:45 —-D—- C:Temp
2010-05-15 01:07:07 —-D—- C:WINDOWSServicePackFiles
2010-05-15 01:04:52 —-D—- C:Program FilesMSXML 4.0
2010-05-14 21:09:24 —-N—- C:WINDOWSsystem32tzchange.exe
2010-05-14 21:05:43 —-D—- C:WINDOWSsystem32PreInstall
2010-05-14 20:24:32 —-D—- C:WINDOWSsystem32SoftwareDistribution
2010-05-14 15:31:56 —-D—- C:Program FilesOpera
2010-05-14 12:39:28 —-HD—- C:$AVG
2010-05-14 12:32:10 —-A—- C:WINDOWSsystem32avgrsstx.dll
2010-05-14 12:31:50 —-D—- C:Documents and SettingsAll UsersApplication DataAVG Security Toolbar
2010-05-14 12:31:34 —-D—- C:Program FilesAVG
2010-05-14 12:31:33 —-D—- C:Documents and SettingsAll UsersApplication Dataavg9
2010-05-14 10:38:45 —-D—- C:Documents and SettingsAll UsersApplication DataSecTaskMan
2010-05-14 10:38:40 —-D—- C:Program FilesSecurity Task Manager
2010-05-14 09:35:29 —-D—- C:WINDOWSpss
2010-05-13 21:26:34 —-D—- C:Documents and Settings1Application DataTouchstone
2010-05-13 20:42:24 —-A—- C:WINDOWSATICIM.INI
2010-05-13 20:36:47 —-D—- C:WINDOWSsystem32AGEIA
2010-05-13 20:36:46 —-D—- C:Program FilesAGEIA Technologies
2010-05-13 20:36:06 —-D—- C:Program FilesCommon FilesWise Installation Wizard
2010-05-13 19:01:16 —-A—- C:WINDOWSsystem32nhJ4NnV.exe
2010-05-13 08:14:02 —-A—- C:WINDOWSsystem326itG76e.exe
2010-05-12 21:42:22 —-D—- C:Program FilesEnemy
2010-05-12 17:21:19 —-A—- C:WINDOWSsystem32d3dx10_41.dll
2010-05-12 17:21:19 —-A—- C:WINDOWSsystem32D3DCompiler_41.dll
2010-05-12 17:21:15 —-A—- C:WINDOWSsystem32D3DX9_41.dll
2010-05-12 17:21:11 —-A—- C:WINDOWSsystem32XAudio2_4.dll
2010-05-12 17:21:11 —-A—- C:WINDOWSsystem32XAPOFX1_3.dll
2010-05-12 17:21:07 —-A—- C:WINDOWSsystem32xactengine3_4.dll
2010-05-12 17:21:03 —-A—- C:WINDOWSsystem32X3DAudio1_6.dll
2010-05-12 16:59:20 —-D—- C:дир
2010-05-12 16:13:36 —-A—- C:WINDOWSsystem32d3dx10_40.dll
2010-05-12 16:13:36 —-A—- C:WINDOWSsystem32D3DCompiler_40.dll
2010-05-12 16:13:31 —-A—- C:WINDOWSsystem32D3DX9_40.dll
2010-05-12 16:13:25 —-A—- C:WINDOWSsystem32XAudio2_3.dll
2010-05-12 16:13:25 —-A—- C:WINDOWSsystem32XAPOFX1_2.dll
2010-05-12 16:13:20 —-A—- C:WINDOWSsystem32xactengine3_3.dll
2010-05-12 16:13:15 —-A—- C:WINDOWSsystem32X3DAudio1_5.dll
2010-05-12 16:13:09 —-A—- C:WINDOWSsystem32XAudio2_2.dll
2010-05-12 16:13:09 —-A—- C:WINDOWSsystem32XAPOFX1_1.dll
2010-05-12 16:13:04 —-A—- C:WINDOWSsystem32xactengine3_2.dll
2010-05-12 16:12:59 —-A—- C:WINDOWSsystem32d3dx10_39.dll
2010-05-12 16:12:59 —-A—- C:WINDOWSsystem32D3DCompiler_39.dll
2010-05-12 16:12:53 —-A—- C:WINDOWSsystem32D3DX9_39.dll
2010-05-12 16:12:47 —-A—- C:WINDOWSsystem32XAudio2_1.dll
2010-05-12 16:12:47 —-A—- C:WINDOWSsystem32XAPOFX1_0.dll
2010-05-12 16:12:42 —-A—- C:WINDOWSsystem32xactengine3_1.dll
2010-05-12 16:12:37 —-A—- C:WINDOWSsystem32X3DAudio1_4.dll
2010-05-12 16:12:31 —-A—- C:WINDOWSsystem32d3dx10_38.dll
2010-05-12 16:12:31 —-A—- C:WINDOWSsystem32D3DCompiler_38.dll
2010-05-12 16:12:25 —-A—- C:WINDOWSsystem32D3DX9_38.dll
2010-05-12 16:12:20 —-A—- C:WINDOWSsystem32XAudio2_0.dll
2010-05-12 16:12:14 —-A—- C:WINDOWSsystem32xactengine3_0.dll
2010-05-12 16:12:09 —-A—- C:WINDOWSsystem32X3DAudio1_3.dll
2010-05-12 16:12:04 —-A—- C:WINDOWSsystem32d3dx10_37.dll
2010-05-12 16:12:04 —-A—- C:WINDOWSsystem32D3DCompiler_37.dll
2010-05-12 16:11:58 —-A—- C:WINDOWSsystem32D3DX9_37.dll
2010-05-12 16:11:53 —-A—- C:WINDOWSsystem32xactengine2_10.dll
2010-05-12 16:11:42 —-A—- C:WINDOWSsystem32d3dx10_36.dll
2010-05-12 16:11:42 —-A—- C:WINDOWSsystem32D3DCompiler_36.dll
2010-05-12 16:11:37 —-A—- C:WINDOWSsystem32d3dx9_36.dll
2010-05-12 16:11:32 —-A—- C:WINDOWSsystem32xactengine2_9.dll
2010-05-12 16:11:26 —-A—- C:WINDOWSsystem32d3dx10_35.dll
2010-05-12 16:11:26 —-A—- C:WINDOWSsystem32D3DCompiler_35.dll
2010-05-12 16:11:21 —-A—- C:WINDOWSsystem32d3dx9_35.dll
2010-05-12 16:11:16 —-A—- C:WINDOWSsystem32xactengine2_8.dll
2010-05-12 16:11:16 —-A—- C:WINDOWSsystem32X3DAudio1_2.dll
2010-05-12 16:11:11 —-A—- C:WINDOWSsystem32d3dx10_34.dll
2010-05-12 16:11:11 —-A—- C:WINDOWSsystem32D3DCompiler_34.dll
2010-05-12 16:11:07 —-A—- C:WINDOWSsystem32d3dx9_34.dll
2010-05-12 16:11:03 —-A—- C:WINDOWSsystem32xinput1_3.dll
2010-05-12 16:10:59 —-A—- C:WINDOWSsystem32xactengine2_7.dll
2010-05-12 16:10:54 —-A—- C:WINDOWSsystem32d3dx10_33.dll
2010-05-12 16:10:54 —-A—- C:WINDOWSsystem32D3DCompiler_33.dll
2010-05-12 16:10:48 —-A—- C:WINDOWSsystem32d3dx9_33.dll
2010-05-12 16:10:47 —-A—- C:WINDOWSsystem32xactengine2_6.dll
2010-05-12 16:10:46 —-A—- C:WINDOWSsystem32xactengine2_5.dll
2010-05-12 16:10:46 —-A—- C:WINDOWSsystem32d3dx9_32.dll
2010-05-12 16:10:45 —-A—- C:WINDOWSsystem32xactengine2_4.dll
2010-05-12 16:10:45 —-A—- C:WINDOWSsystem32x3daudio1_1.dll
2010-05-12 16:10:45 —-A—- C:WINDOWSsystem32d3dx9_31.dll
2010-05-12 16:10:44 —-A—- C:WINDOWSsystem32xinput1_2.dll
2010-05-12 16:10:44 —-A—- C:WINDOWSsystem32xactengine2_3.dll
2010-05-12 16:10:43 —-A—- C:WINDOWSsystem32xinput1_1.dll
2010-05-12 16:10:43 —-A—- C:WINDOWSsystem32xactengine2_2.dll
2010-05-12 16:10:42 —-A—- C:WINDOWSsystem32xactengine2_1.dll
2010-05-12 16:10:31 —-A—- C:WINDOWSsystem32xactengine2_0.dll
2010-05-12 16:10:31 —-A—- C:WINDOWSsystem32x3daudio1_0.dll
2010-05-12 16:10:30 —-A—- C:WINDOWSsystem32d3dx9_29.dll
2010-05-12 16:10:29 —-A—- C:WINDOWSsystem32xinput9_1_0.dll
2010-05-12 16:10:29 —-A—- C:WINDOWSsystem32d3dx9_28.dll
2010-05-12 16:10:28 —-A—- C:WINDOWSsystem32d3dx9_27.dll
2010-05-12 16:10:27 —-A—- C:WINDOWSsystem32d3dx9_26.dll
2010-05-12 16:10:27 —-A—- C:WINDOWSsystem32d3dx9_25.dll
2010-05-12 16:10:04 —-A—- C:WINDOWSsystem32d3dx9_24.dll
2010-05-12 16:09:16 —-D—- C:WINDOWSLogs
2010-05-12 16:09:15 —-D—- C:Program FilesOpenAL
2010-05-12 16:09:15 —-A—- C:WINDOWSsystem32wrap_oal.dll
2010-05-12 16:09:15 —-A—- C:WINDOWSsystem32OpenAL32.dll
2010-05-05 13:42:02 —-D—- C:Program FilesРНИВЦ
2010-05-05 13:40:54 —-D—- C:Program FilesCommon FilesNalogoplUL416
2010-05-05 13:40:52 —-D—- C:Program FilesНалогоплательщик ЮЛ
2010-05-02 09:19:58 —-D—- C:Program FilesXilisoft
2010-04-28 20:16:55 —-A—- C:WINDOWSIrremote.ini
2010-04-28 20:16:47 —-D—- C:Documents and Settings1Application DataAhead
2010-04-28 19:52:41 —-D—- C:Documents and SettingsAll UsersApplication DataMcAfee
2010-04-28 17:26:10 —-D—- C:Documents and Settings1Application DataHP
2010-04-28 15:41:55 —-D—- C:Program FilesCommon FilesSonic Shared
2010-04-28 15:41:55 —-D—- C:Documents and SettingsAll UsersApplication DataSonic
2010-04-28 15:40:36 —-D—- C:Program FilesCommon FilesHP
2010-04-28 15:39:00 —-D—- C:WINDOWSsystem32URTTEMP
2010-04-28 15:36:55 —-D—- C:Program FilesHewlett-Packard
2010-04-28 15:36:13 —-D—- C:Documents and SettingsAll UsersApplication DataHP
2010-04-28 15:30:49 —-A—- C:WINDOWSsystem32HPZinw12.exe
2010-04-28 15:30:48 —-A—- C:WINDOWSsystem32HPZisn12.dll
2010-04-28 15:30:48 —-A—- C:WINDOWSsystem32HPZipt12.dll
2010-04-28 15:30:48 —-A—- C:WINDOWSsystem32HPZipr12.dll
2010-04-28 15:30:48 —-A—- C:WINDOWSsystem32HPZipm12.exe
2010-04-28 15:30:48 —-A—- C:WINDOWSsystem32HPZidr12.dll
2010-04-28 15:30:44 —-A—- C:WINDOWSIsUninst.exe
2010-04-28 15:14:38 —-D—- C:Program FilesHP
2010-04-28 14:11:59 —-A—- C:WINDOWSsystem32hpz3l3xu.dll
2010-04-28 14:11:47 —-RA—- C:WINDOWSsystem32hpzids01.dll
2010-04-28 14:10:48 —-RA—- C:WINDOWSsystem32HPZc3212.dll

======List of files/folders modified in the last 1 months======

2010-05-27 12:13:39 —-D—- C:WINDOWSsystem32
2010-05-27 12:13:39 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2010-05-27 12:09:34 —-D—- C:WINDOWSsystem32drivers
2010-05-27 12:09:28 —-D—- C:WINDOWSTemp
2010-05-27 11:59:38 —-D—- C:WINDOWS
2010-05-27 11:58:49 —-D—- C:WINDOWSsystem32CatRoot2
2010-05-27 11:48:03 —-D—- C:Documents and Settings1Application DatauTorrent
2010-05-27 11:05:01 —-D—- C:Documents and Settings1Application DataSkype
2010-05-27 10:00:01 —-D—- C:Documents and Settings1Application DataskypePM
2010-05-26 17:53:36 —-SD—- C:Documents and Settings1Application DataMicrosoft
2010-05-26 17:51:17 —-D—- C:Program FilesuTorrent
2010-05-26 08:27:00 —-A—- C:WINDOWSwin.ini
2010-05-25 20:18:54 —-D—- C:Documents and Settings1Application DataICQ
2010-05-25 14:09:37 —-SHD—- C:System Volume Information
2010-05-25 14:09:37 —-D—- C:WINDOWSsystem32Restore
2010-05-25 13:49:33 —-SHD—- C:WINDOWSInstaller
2010-05-25 13:49:31 —-RD—- C:Program Files
2010-05-25 13:20:31 —-D—- C:WINDOWSMinidump
2010-05-24 10:26:33 —-D—- C:VKontakteDJ
2010-05-21 19:55:09 —-HD—- C:WINDOWSinf
2010-05-20 22:21:46 —-RSD—- C:WINDOWSassembly
2010-05-20 22:20:25 —-D—- C:WINDOWSMicrosoft.NET
2010-05-20 18:16:18 —-D—- C:Program FilesCommon Files
2010-05-20 11:14:28 —-D—- C:WINDOWSWinSxS
2010-05-20 11:05:22 —-RSD—- C:WINDOWSFonts
2010-05-20 11:04:29 —-D—- C:WINDOWSsystem32spool
2010-05-20 11:04:22 —-RSHDC—- C:WINDOWSsystem32dllcache
2010-05-19 20:16:23 —-SD—- C:WINDOWSTasks
2010-05-17 14:53:02 —-D—- C:WINDOWSsystem32DirectX
2010-05-17 09:57:14 —-D—- C:Program FilesInternet Explorer
2010-05-16 23:15:39 —-D—- C:WINDOWSsystem32CatRoot
2010-05-16 19:58:51 —-D—- C:Documents and Settings1Application DataYandex
2010-05-16 15:33:59 —-D—- C:Program FilesMozilla Firefox
2010-05-16 14:11:36 —-D—- C:WINDOWSsystem32config
2010-05-16 10:01:37 —-A—- C:WINDOWSimsins.BAK
2010-05-15 22:35:13 —-D—- C:Program FilesReal
2010-05-15 22:35:13 —-D—- C:Program FilesCommon FilesReal
2010-05-15 22:35:12 —-D—- C:Documents and Settings1Application DataReal
2010-05-15 22:33:41 —-A—- C:Program FilesCommon Fileskeylog.txt
2010-05-15 22:19:08 —-D—- C:WINDOWSsystem32sda
2010-05-15 22:18:55 —-D—- C:Program FilesRealtek
2010-05-15 22:02:48 —-D—- C:WINDOWSsystem32RTCOM
2010-05-15 21:18:35 —-HD—- C:Program FilesInstallShield Installation Information
2010-05-15 20:28:03 —-D—- C:WINDOWSHelp
2010-05-15 16:31:16 —-D—- C:WINDOWSMedia
2010-05-15 09:25:00 —-D—- C:WINDOWSAppPatch
2010-05-15 09:24:59 —-D—- C:WINDOWSsystem32wbem
2010-05-15 09:24:59 —-D—- C:WINDOWSsystem32Setup
2010-05-15 01:12:52 —-D—- C:Program FilesMessenger
2010-05-15 01:10:26 —-D—- C:Program FilesMovie Maker
2010-05-15 01:07:34 —-D—- C:Program FilesOutlook Express
2010-05-15 01:06:50 —-D—- C:WINDOWSRegistration
2010-05-14 20:25:03 —-D—- C:WINDOWSSoftwareDistribution
2010-05-14 16:03:41 —-RSH—- C:boot.ini
2010-05-14 16:03:41 —-A—- C:WINDOWSsystem.ini
2010-05-11 08:59:55 —-D—- C:Documents and Settings1Application DataMozilla
2010-05-05 13:45:30 —-D—- C:Documents and Settings1Application DataVso
2010-05-05 13:45:29 —-A—- C:Documents and Settings1Application Datainst.exe
2010-05-05 13:40:28 —-D—- C:Program FilesCommon FilesInstallShield
2010-05-05 09:21:19 —-A—- C:WINDOWSODBC.INI
2010-05-05 09:19:20 —-A—- C:WINDOWSOEWABLog.txt
2010-05-05 09:18:20 —-D—- C:Documents and Settings
2010-05-04 10:18:21 —-D—- C:Music
2010-05-03 14:26:49 —-D—- C:Documents and Settings1Application DataMra
2010-04-29 09:14:21 —-D—- C:Documents and SettingsAll UsersApplication DataNOS
2010-04-28 20:19:08 —-D—- C:Documents and SettingsAll UsersApplication DataNero
2010-04-28 19:40:13 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
2010-04-28 19:28:45 —-D—- C:Program FilesCommon FilesAdobe
2010-04-28 19:28:27 —-D—- C:Program FilesAdobe
2010-04-28 18:12:38 —-D—- C:Documents and Settings1Application DataAdobe
2010-04-28 15:40:05 —-D—- C:WINDOWSsystem32mui
2010-04-28 14:05:29 —-A—- C:WINDOWSNeroDigital.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;Драйвер AMD процессора; C:WINDOWSsystem32DRIVERSAmdK8.sys [2006-07-02 43520]
R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:WINDOWSSystem32Driversavgldx86.sys [2010-05-14 216200]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:WINDOWSSystem32Driversavgmfx86.sys [2010-05-14 29512]
R1 DritekPortIO;Dritek General Port I/O; ??C:PROGRA~1LAUNCH~1DPortIO.sys []
R1 SandBox;SandBox; ??C:WINDOWSsystem32driversSandBox.sys []
R1 WmiAcpi;Интерфейс управления для ACPI Microsoft Windows; C:WINDOWSsystem32DRIVERSwmiacpi.sys [2004-08-04 8832]
R3 afw;Agnitum firewall driver; C:WINDOWSsystem32DRIVERSafw.sys [2009-02-18 31128]
R3 afwcore;afwcore; C:WINDOWSsystem32driversafwcore.sys [2009-02-10 257432]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:WINDOWSsystem32DRIVERSApfiltr.sys [2009-02-22 195120]
R3 ati2mtag;ati2mtag; C:WINDOWSsystem32DRIVERSati2mtag.sys [2010-02-11 3565056]
R3 BCM43XX;Драйвер сетевого адаптера Broadcom 802.11; C:WINDOWSsystem32DRIVERSbcmwl5.sys [2007-09-20 1123328]
R3 btaudio;Аудиоустройство Bluetooth; C:WINDOWSsystem32driversbtaudio.sys [2007-03-23 539072]
R3 BTDriver;Драйвер виртуальной связи Bluetooth; C:WINDOWSsystem32DRIVERSbtport.sys [2007-03-23 37424]
R3 BTKRNL;Нумератор шины Bluetooth; C:WINDOWSsystem32DRIVERSbtkrnl.sys [2007-03-31 876384]
R3 CmBatt;Драйвер батареи с ACPI-управлением (Майкрософт); C:WINDOWSsystem32DRIVERSCmBatt.sys [2004-08-04 14080]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:WINDOWSsystem32DRIVERSDKbFltr.sys [2006-01-20 17408]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2005-01-07 138752]
R3 hidusb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2001-10-20 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2010-03-20 5878816]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller; C:WINDOWSsystem32DRIVERSl1c51x86.sys [2009-02-22 38912]
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-20 12160]
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2004-08-03 31616]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2004-08-03 26624]
R3 usbfilter;AMD USB Filter Driver; C:WINDOWSsystem32DRIVERSusbfilter.sys [2008-05-28 22072]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2004-08-03 57600]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2004-08-03 17024]
R3 usbvideo;USB-видеоустройство (WDM); C:WINDOWSSystem32Driversusbvideo.sys [2004-08-04 78464]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:WINDOWSSystem32Driverswdf01000.sys [2008-03-27 503008]
R3 WSIMD;wsimd Service; C:WINDOWSsystem32DRIVERSwsimd.sys [2008-02-08 57408]
S1 AvgTdiX;AVG Free Network Redirector; C:WINDOWSSystem32Driversavgtdix.sys [2010-05-16 242896]
S1 uthhvmpf;uthhvmpf; ??C:WINDOWSsystem32driversuthhvmpf.sys []
S3 aglrmolm;aglrmolm; C:WINDOWSsystem32driversaglrmolm.sys []
S3 Ambfilt;Ambfilt; C:WINDOWSsystem32driversAmbfilt.sys [2009-11-18 1691480]
S3 atikmdag;atikmdag; C:WINDOWSsystem32DRIVERSatikmdag.sys [2009-01-04 4172288]
S3 BTWDNDIS;Сервер доступа к локальной сети Bluetooth; C:WINDOWSsystem32DRIVERSbtwdndis.sys [2007-03-23 149123]
S3 btwhid;btwhid; C:WINDOWSsystem32DRIVERSbtwhid.sys [2007-03-31 55352]
S3 CCDECODE;Closed Caption декодер; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2004-08-04 17024]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:WINDOWSsystem32DRIVERSHPZid412.sys [2005-03-08 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:WINDOWSsystem32DRIVERSHPZipr12.sys [2005-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:WINDOWSsystem32DRIVERSHPZius12.sys [2005-03-08 21744]
S3 Monfilt;Monfilt; C:WINDOWSsystem32driversMonfilt.sys [2009-11-18 1395800]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2004-08-04 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWSsystem32DRIVERSNdisIP.sys [2004-08-04 10880]
S3 pcouffin;VSO Software pcouffin; C:WINDOWSSystem32Driverspcouffin.sys [2010-04-23 47360]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:WINDOWSSystem32DriversRtsUStor.sys [2009-04-10 165888]
S3 RtsUIR;Realtek IR Driver; C:WINDOWSsystem32DRIVERSRts516xIR.sys []
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2004-08-04 11136]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2004-08-04 15360]
S3 SynTP;Synaptics TouchPad Driver; C:WINDOWSsystem32DRIVERSSynTP.sys [2009-03-06 208304]
S3 USBCCID;Realtek Smartcard Reader Driver; C:WINDOWSsystem32DRIVERSRtsUCcid.sys []
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2004-08-03 25856]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-04 26496]
S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2004-08-04 19328]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []
S4 sfc;sfc; C:WINDOWSsystem32driverssfc.sys []
S4 sr;Драйвер фильтра восстановления системы; C:WINDOWSsystem32DRIVERSsr.sys [2004-08-17 73472]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACS;Atheros Configuration Service; C:WINDOWSsystem32acs.exe [2009-01-05 475220]
R2 acssrv;Agnitum Client Security Service; C:PROGRA~1AgnitumOUTPOS~1acs.exe [2009-04-14 1195008]
R2 Ati External Event Utility;Ati External Event Utility; C:WINDOWSsystem32Ati2evxx.exe [2010-02-11 602112]
R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSsystem32Ati2evxx.exe [2010-02-11 602112]
R2 avg9wd;AVG Free WatchDog; C:Program FilesAVGAVG9avgwdsvc.exe [2010-05-14 308064]
R2 btwdins;Bluetooth Service; C:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe [2007-04-01 273256]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:WINDOWSsystem32HPZipm12.exe [2004-09-29 69632]
R2 UMWdf;Windows User Mode Driver Framework; C:WINDOWSsystem32wdfmgr.exe [2005-01-28 38912]
S2 ATI Smart;ATI Smart; C:WINDOWSsystem32ati2sgag.exe [2010-02-10 593920]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service; C:Program FilesAVGAVG9ToolbarToolbarBroker.exe [2010-04-19 430152]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:Program FilesCommon FilesAheadLibNMIndexingService.exe []
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-07-29 132096]

---

EOF

---

➡ в этот раз появился только один лог

[tanjash]

All processes killed
========== SERVICES/DRIVERS ==========
Error: No service named sfc was found to stop!
No service named sfc was found to delete!
========== COMMANDS ==========

[EMPTYTEMP]

User: 1
->Temp folder emptied: 670010 bytes
->Temporary Internet Files folder emptied: 301115 bytes
->FireFox cache emptied: 8568434 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%System32 .tmp files removed: 0 bytes
%systemroot%System32dllcache .tmp files removed: 0 bytes
%systemroot%System32drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%system32configsystemprofileLocal SettingsTemp folder emptied: 0 bytes
%systemroot%system32configsystemprofileLocal SettingsTemporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 644608 bytes

Total Files Cleaned = 10,00 mb

OTM by OldTimer — Version 3.1.12.0 log created on 05272010_120602

Files moved on Reboot…

Registry entries deleted on Reboot…

[tanjash]

info.txt logfile of random’s system information tool 1.06 2010-05-25 17:50:47

======Uninstall list======

—>MsiExec /X{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
µTorrent—>»C:Program FilesuTorrentuTorrent.exe» /UNINSTALL
Acer Crystal Eye Webcam—>C:Program FilesInstallShield Installation Information{DD1DED37-2486-4F56-8F89-56AA814003F5}setup.exe -runfromtemp -l0x0009 -removeonly
Acer Crystal Eye—>C:Program FilesInstallShield Installation Information{4BB1DCED-84D3-47F9-B718-5947E904593E}setup.exe -runfromtemp -l0x0009 -removeonly
Adobe Flash Player 10 ActiveX—>C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Flash Player 10 Plugin—>C:WINDOWSsystem32MacromedFlashuninstall_plugin.exe
Adobe Help Center 1.0—>MsiExec.exe /I{E9787678-119F-4D52-B551-6739B2B22101}
Adobe Reader 8.2.2—>MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A82000000003}
Adobe Stock Photos 1.0—>MsiExec.exe /I{786C5747-1437-443D-B06E-79A00FE45110}
ALPS Touch Pad Driver—>C:Program FilesApoint2KUninstap.exe ADDREMOVE
AMD Processor Driver—>C:Program FilesInstallShield Installation Information{C151CE54-E7EA-4804-854B-F515368B0798}setup.exe -runfromtemp -l0x0019 -removeonly
AMD USB Audio Driver Filter—>MsiExec.exe /X{A3AB35FA-943E-4799-99DC-46EFD59E998F}
Ashampoo Burning Studio 6 FREE—>»C:Program FilesAshampooAshampoo Burning Studio 6 FREEunins000.exe»
Atheros Client Installation Program—>C:Program FilesInstallShield Installation Information{28006915-2739-4EBE-B5E8-49B25D32EB33}setup.exe -runfromtemp -l0x0009 -removeonly
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver—>»C:Program FilesInstallShield Installation Information{3108C217-BE83-42E4-AE9E-A56A2A92E549}setup.exe» -runfromtemp -l0x0009 -removeonly
ATI — Утилита деинсталляции—>C:Program FilesATI TechnologiesUninstallAllAtiCimUn.exe
ATI Catalyst Control Center—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime91Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{055EE59D-217B-43A7-ABFF-507B966405D8}setup.exe» -l0x0
ATI Display Driver—>rundll32 C:WINDOWSsystem32atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
AVG Free 9.0—>C:Program FilesAVGAVG9setup.exe /UNINSTALL
Broadcom Driver v4.170.25.12_Foxconn Installation Program—>C:Program FilesInstallShield Installation Information{153F839F-0A63-41D8-890F-7324C0E13743}setup.exe -runfromtemp -l0x0009 -removeonly
Catalyst Control Center — Branding—>MsiExec.exe /I{8D7133DE-27D2-47E5-B248-4180278D32AA}
EVEREST Ultimate Edition v5.50—>»C:Program FilesLavalysEVEREST Ultimate Editionunins000.exe»
FEAR 2 v.1.0—>»C:Program FilesPCGAMEFEAR 2unins000.exe»
GTA Vice City — New Age—>»C:Program FilesGTA Vice City — New Ageunins000.exe»
Helicon Filter 4.93.2 Free—>»C:Program FilesHelicon SoftwareHelicon Filterunins000.exe»
High Definition Audio Driver Package — KB888111—>»C:WINDOWS$NtUninstallKB888111WXPSP2$spuninstspuninst.exe»
HiJackThis—>MsiExec.exe /X{45A66726-69BC-466B-A7A4-12FCBA4883D7}
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)—>C:WINDOWSsystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=»»
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)—>C:WINDOWSsystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=»»
HP Deskjet 5900 series—>C:Program FilesHPDigital Imaging{79546A5F-AE7C-4693-8670-A3401B43ABD2}setuphpzscr01.exe -datfile hpfscr05.dat
HP Extended Capabilities 5.0—>C:Program FilesHPDigital ImagingExtCapUninstallhpzscr01.exe -datfile hpqhsc01.dat
HP Image Zone 5.0—>C:Program FilesHPDigital Imaginguninstallhpzscr01.exe -datfile hpqscr01.dat
HP Imaging Device Functions 5.0—>C:Program FilesHPDigital ImagingDigitalImagingMonitorhpzscr01.exe -datfile hpqbud01.dat
HP Software Update—>MsiExec.exe /X{15EE79F4-4ED1-4267-9B0F-351009325D7D}
HP Solution Center & Imaging Support Tools 5.0—>C:Program FilesHPDigital ImagingeSupporthpzscr01.exe -datfile hpqbud05.dat
ICQ7.1—>»C:Program FilesInstallShield Installation Information{71BFC818-0CED-42D6-9C87-5142918957EE}ICQ7.exe» -runfromtemp -l0x0009 -removeonly
Internet Explorer—>MsiExec.exe /I{5AB4024C-BDA4-41FB-80CC-41BD1C63A6AF}
K-Lite Mega Codec Pack 5.9.0—>»C:Program FilesK-Lite Codec Packunins000.exe»
Launch Manager—>C:WINDOWSUnInst32.exe LManager.UNI
Mail.Ru Агент 5.6 (сборка 3278, для всех пользователей)—>C:Program FilesMail.RuAgentmagentsetup.exe -uninstalllm
Medal of Honor — Airborne—>»C:Program FilesMedal of Honor — Airborneunins000.exe»
Microsoft .NET Framework 1.1 Russian Language Pack—>MsiExec.exe /X{2BB372D9-52B4-410A-BC1A-FEAB63181EEF}
Microsoft .NET Framework 1.1 Security Update (KB953297)—>»C:WINDOWSMicrosoft.NETFrameworkv1.1.4322Updateshotfix.exe» «C:WINDOWSMicrosoft.NETFrameworkv1.1.4322UpdatesM953297M953297Uninstall.msp»
Microsoft .NET Framework 1.1—>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1—>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2—>MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2—>MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1—>C:WINDOWSMicrosoft.NETFrameworkv3.5Microsoft .NET Framework 3.5 SP1setup.exe
Microsoft .NET Framework 3.5 SP1—>MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7—>»C:WINDOWS$NtUninstallWdf01007$spuninstspuninst.exe»
Microsoft Office — профессиональный выпуск версии 2003—>MsiExec.exe /I{90110419-6000-11D3-8CFE-0150048383C9}
Microsoft Office Word Viewer 2003—>MsiExec.exe /I{90850419-6000-11D3-8CFE-0150048383C9}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 Redistributable — x86 9.0.30729.17—>MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mozilla Firefox (3.6.3)—>C:Program FilesMozilla Firefoxuninstallhelper.exe
MSXML 4.0 SP2 (KB954430)—>MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)—>MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MSXML 6 Service Pack 2 (KB954459)—>MsiExec.exe /I{1A528690-6A2D-4BC5-B143-8C4AE8D19D96}
neroxml—>MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NVIDIA PhysX—>MsiExec.exe /X{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
OpenAL—>»C:Program FilesOpenALoalinst.exe» /U
Opera 10.53—>MsiExec.exe /X{70312451-0D00-4A84-B9B1-0D59B5180A4F}
Outpost Firewall 2009—>»C:Program FilesAgnitumOutpost Firewallunins000.exe»
Realtek High Definition Audio Driver—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}Setup.exe» -l0x19 -removeonly
Realtek USB 2.0 Card Reader—>C:Program FilesInstallShield Installation Information{DC24971E-1946-445D-8A82-CE685433FA7D}setup.exe -runfromtemp -l0x0019 -removeonly
Security Task Manager 1.7h—>C:Program FilesSecurity Task ManagerUninstal.exe «C:Documents and SettingsAll UsersГлавное менюПрограммыSecurity Task Manager»
Skype™ 4.2—>MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
STDU Viewer version 1.3.82.0—>»C:Program FilesSTDU Viewerunins000.exe»
Synaptics Pointing Device Driver—>rundll32.exe «C:Program FilesSynapticsSynTPSynISDLL.dll»,standAloneUninstall
The Chronicles of Narnia — Prince Caspian—>»C:Program FilesCaspianunins000.exe»
The KMPlayer (remove only)—>»C:Program FilesThe KMPlayeruninstall.exe»
USB2.0 Card Reader Software—>»C:Program FilesInstallShield Installation Information{96AE7E41-E34E-47D0-AC07-1091A8127911}setup.exe» -runfromtemp -l0x0019 -removeonly
Video Web Camera Ver:1.0.4.115—>C:Program FilesInstallShield Installation Information{17C50809-F2E0-4DD8-84D7-55FF74615723}setup.exe -runfromtemp -l0x0009 -removeonly
VKontakteDJ 2.6.1—>»C:VKontakteDJunins000.exe»
WarCraftIII — Ancient Instinct v.1.21—>»C:Program FilesWarCraftIII — Ancient Instinctunins000.exe»
WIDCOMM Bluetooth Software—>MsiExec.exe /X{84814E6B-2581-46EC-926A-823BD1C670F6}
Windows Imaging Component—>»C:WINDOWS$NtUninstallWIC$spuninstspuninst.exe»
Windows Installer 3.1 (KB893803)—>»C:WINDOWS$MSI31Uninstall_KB893803v2$spuninstspuninst.exe»
Windows Internet Explorer 8—>»C:WINDOWSie8spuninstspuninst.exe»
Windows Media Format Runtime—>»C:Program FilesWindows Media Playerwmsetsdk.exe» /UninstallAll
WinRAR archiver—>C:Program FilesWinRARuninstall.exe
XnView 1.97.4—>»C:Program FilesXnViewunins000.exe»
Исправление для Windows XP (KB935448)—>»C:WINDOWS$NtUninstallKB935448$spuninstspuninst.exe»
Исправление для Windows XP (KB952287)—>»C:WINDOWS$NtUninstallKB952287$spuninstspuninst.exe»
Исправление для Windows XP (KB979306)—>»C:WINDOWS$NtUninstallKB979306$spuninstspuninst.exe»
Налогоплательщик ЮЛ—>MsiExec.exe /I{C373950C-08B4-4B0E-B4B6-6EFD7558B6F1}
Обновление безопасности для Windows Internet Explorer 8 (KB971961)—>»C:WINDOWSie8updatesKB971961-IE8spuninstspuninst.exe»
Обновление безопасности для Windows Internet Explorer 8 (KB981332)—>»C:WINDOWSie8updatesKB981332-IE8spuninstspuninst.exe»
Обновление безопасности для Windows XP — (KB941569)—>»C:WINDOWS$NtUninstallKB941569$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB923561)—>»C:WINDOWS$NtUninstallKB923561$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB944338-v2)—>»C:WINDOWS$NtUninstallKB944338-v2$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB946648)—>»C:WINDOWS$NtUninstallKB946648$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB950760)—>»C:WINDOWS$NtUninstallKB950760$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB950762)—>»C:WINDOWS$NtUninstallKB950762$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB950974)—>»C:WINDOWS$NtUninstallKB950974$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB951376-v2)—>»C:WINDOWS$NtUninstallKB951376-v2$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB951748)—>»C:WINDOWS$NtUninstallKB951748$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB952004)—>»C:WINDOWS$NtUninstallKB952004$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB952954)—>»C:WINDOWS$NtUninstallKB952954$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB955069)—>»C:WINDOWS$NtUninstallKB955069$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956572)—>»C:WINDOWS$NtUninstallKB956572$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956802)—>»C:WINDOWS$NtUninstallKB956802$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956803)—>»C:WINDOWS$NtUninstallKB956803$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956844)—>»C:WINDOWS$NtUninstallKB956844$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB958470)—>»C:WINDOWS$NtUninstallKB958470$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB958644)—>»C:WINDOWS$NtUninstallKB958644$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB958869)—>»C:WINDOWS$NtUninstallKB958869$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB959426)—>»C:WINDOWS$NtUninstallKB959426$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB960225)—>»C:WINDOWS$NtUninstallKB960225$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB960803)—>»C:WINDOWS$NtUninstallKB960803$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB960859)—>»C:WINDOWS$NtUninstallKB960859$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB961501)—>»C:WINDOWS$NtUninstallKB961501$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB969059)—>»C:WINDOWS$NtUninstallKB969059$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB969947)—>»C:WINDOWS$NtUninstallKB969947$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB970238)—>»C:WINDOWS$NtUninstallKB970238$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB970430)—>»C:WINDOWS$NtUninstallKB970430$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB971032)—>»C:WINDOWS$NtUninstallKB971032$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB971468)—>»C:WINDOWS$NtUninstallKB971468$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB971657)—>»C:WINDOWS$NtUninstallKB971657$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB971961)—>»C:WINDOWS$NtUninstallKB971961$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB972270)—>»C:WINDOWS$NtUninstallKB972270$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB973507)—>»C:WINDOWS$NtUninstallKB973507$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB973869)—>»C:WINDOWS$NtUninstallKB973869$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB973904)—>»C:WINDOWS$NtUninstallKB973904$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB974112)—>»C:WINDOWS$NtUninstallKB974112$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB974318)—>»C:WINDOWS$NtUninstallKB974318$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB974392)—>»C:WINDOWS$NtUninstallKB974392$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB974571)—>»C:WINDOWS$NtUninstallKB974571$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB975025)—>»C:WINDOWS$NtUninstallKB975025$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB975467)—>»C:WINDOWS$NtUninstallKB975467$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB975560)—>»C:WINDOWS$NtUninstallKB975560$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB975561)—>»C:WINDOWS$NtUninstallKB975561$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB975713)—>»C:WINDOWS$NtUninstallKB975713$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB977816)—>»C:WINDOWS$NtUninstallKB977816$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB977914)—>»C:WINDOWS$NtUninstallKB977914$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB978037)—>»C:WINDOWS$NtUninstallKB978037$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB978262)—>»C:WINDOWS$NtUninstallKB978262$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB978338)—>»C:WINDOWS$NtUninstallKB978338$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB978542)—>»C:WINDOWS$NtUninstallKB978542$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB978601)—>»C:WINDOWS$NtUninstallKB978601$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB978706)—>»C:WINDOWS$NtUninstallKB978706$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB979309)—>»C:WINDOWS$NtUninstallKB979309$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB979683)—>»C:WINDOWS$NtUninstallKB979683$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB980232)—>»C:WINDOWS$NtUninstallKB980232$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB981350)—>»C:WINDOWS$NtUninstallKB981350$spuninstspuninst.exe»
Обновление безопасности для проигрывателя Windows Media — (KB952069)—>»C:WINDOWS$NtUninstallKB952069_WM9$spuninstspuninst.exe»
Обновление безопасности для проигрывателя Windows Media — (KB954155)—>»C:WINDOWS$NtUninstallKB954155_WM9$spuninstspuninst.exe»
Обновление безопасности для проигрывателя Windows Media — (KB968816)—>»C:WINDOWS$NtUninstallKB968816_WM9$spuninstspuninst.exe»
Обновление безопасности для проигрывателя Windows Media — (KB973540)—>»C:WINDOWS$NtUninstallKB973540_WM9L$spuninstspuninst.exe»
Обновление для Windows Internet Explorer 8 (KB976662)—>»C:WINDOWSie8updatesKB976662-IE8spuninstspuninst.exe»
Обновление для Windows Internet Explorer 8 (KB980182)—>»C:WINDOWSie8updatesKB980182-IE8spuninstspuninst.exe»
Обновление для Windows Internet Explorer 8 (KB980302)—>»C:WINDOWSie8updatesKB980302-IE8spuninstspuninst.exe»
Обновление для Windows XP (KB898461)—>»C:WINDOWS$NtUninstallKB898461$spuninstspuninst.exe»
Обновление для Windows XP (KB932823-v3)—>»C:WINDOWS$NtUninstallKB932823-v3$spuninstspuninst.exe»
Обновление для Windows XP (KB955759)—>»C:WINDOWS$NtUninstallKB955759$spuninstspuninst.exe»
Обновление для Windows XP (KB967715)—>»C:WINDOWS$NtUninstallKB967715$spuninstspuninst.exe»
Обновление для Windows XP (KB968389)—>»C:WINDOWS$NtUninstallKB968389$spuninstspuninst.exe»
Обновление для Windows XP (KB971737)—>»C:WINDOWS$NtUninstallKB971737$spuninstspuninst.exe»
Обновление для Windows XP (KB973687)—>»C:WINDOWS$NtUninstallKB973687$spuninstspuninst.exe»
Обновление для Windows XP (KB973815)—>»C:WINDOWS$NtUninstallKB973815$spuninstspuninst.exe»
Обновление для Windows XP (KB980182)—>»C:WINDOWS$NtUninstallKB980182$spuninstspuninst.exe»
Пакет драйверов Windows — Advanced Micro Devices Inc. AMD USB Filter Driver (05/27/2008 1.0.7.0)—>C:PROGRA~1DIFX7B44739871F4D539FA473F57A832EA4B6A59EF06MSIB.tmp /u C:WINDOWSsystem32DRVSTOREusbfilter_6607A779FD179B5ACAF3DF94BA0E63A85971BB19usbfilter.inf
Пакет обеспечения совместимости для выпуска 2007 системы Microsoft Office—>MsiExec.exe /X{90120000-0020-0419-0000-0000000FF1CE}
Печать НД с PDF417 3.0.9 (пакет)—>MsiExec.exe /I{476219D4-168B-4634-9A38-A5286BB3AFB5}
Проигрыватель Windows Media 10—>»C:Program FilesWindows Media PlayerSetup_wm.exe» /Uninstall
Я.Онлайн 3.0.0—>»C:Program FilesYandexOnlineunins000.exe»

======Hosts File======

127.0.0.1 localhost

======Security center information======

AV: AVG Anti-Virus Free
FW: Outpost Firewall

======System event log======

Computer Name: HOME
Event Code: 26
Message: Всплывающее окно приложения: : Machine Check:

Record Number: 5
Source Name: Application Popup
Time Written: 20100519173709.000000+240
Event Type: информация
User:

Computer Name: HOME
Event Code: 26
Message: Всплывающее окно приложения: : Machine Check: Regs

Record Number: 4
Source Name: Application Popup
Time Written: 20100519173709.000000+240
Event Type: информация
User:

Computer Name: HOME
Event Code: 26
Message: Всплывающее окно приложения: : Machine Check:

Record Number: 3
Source Name: Application Popup
Time Written: 20100519173709.000000+240
Event Type: информация
User:

Computer Name: HOME
Event Code: 6005
Message: Запущена служба журнала событий.

Record Number: 2
Source Name: EventLog
Time Written: 20100519173653.000000+240
Event Type: информация
User:

Computer Name: HOME
Event Code: 6009
Message: Microsoft (R) Windows 2000 (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.

Record Number: 1
Source Name: EventLog
Time Written: 20100519173653.000000+240
Event Type: информация
User:

=====Application event log=====

Computer Name: HOME
Event Code: 105
Message: The service was started.

Record Number: 480
Source Name: ATI Smart
Time Written: 20100330210224.000000+240
Event Type: информация
User:

Computer Name: HOME
Event Code: 1
Message:
Record Number: 479
Source Name: ccxroaming
Time Written: 20100330210213.000000+240
Event Type: информация
User:

Computer Name: HOME
Event Code: 1
Message:
Record Number: 478
Source Name: ccxroaming
Time Written: 20100330210213.000000+240
Event Type: информация
User:

Computer Name: HOME
Event Code: 0
Message:
Record Number: 477
Source Name: btwdins
Time Written: 20100330210210.000000+240
Event Type: информация
User:

Computer Name: HOME
Event Code: 1002
Message: Зависшее приложение opera.exe, версия 10.51.3315.0, зависший модуль hungapp, версия 0.0.0.0, адрес 0x00000000.

Record Number: 476
Source Name: Application Hang
Time Written: 20100330183402.000000+240
Event Type: ошибка
User:

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;C:Program FilesATI TechnologiesATI.ACECore-Static
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=15
«PROCESSOR_IDENTIFIER»=x86 Family 15 Model 104 Stepping 2, AuthenticAMD
«PROCESSOR_REVISION»=6802
«NUMBER_OF_PROCESSORS»=2
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP

---

EOF

---

[tanjash]

Logfile of random’s system information tool 1.07 (written by random/random)
Run by 1 at 2010-05-25 17:50:26
Microsoft Windows XP Professional Service Pack 2
System drive C: has 14 GB (18%) free of 80 GB
Total RAM: 2814 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:50:44, on 25.05.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe
C:WINDOWSsystem32Ati2evxx.exe
C:Program FilesAVGAVG9avgchsvx.exe
C:Program FilesAVGAVG9avgrsx.exe
C:Program FilesAVGAVG9avgcsrvx.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSsystem32acs.exe
C:WINDOWSExplorer.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.exe
C:PROGRA~1LAUNCH~1LManager.exe
C:Program FilesHPHP Software UpdateHPWuSchd2.exe
C:Program FilesApoint2KApoint.exe
C:Program FilesAVGAVG9avgwdsvc.exe
C:Program FilesApoint2KApMsgFwd.exe
C:WINDOWSsystem32HPZipm12.exe
C:Program FilesAtherosACU.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesApoint2KApntex.exe
C:PROGRA~1AVGAVG9avgtray.exe
C:WINDOWSRTHDCPL.EXE
C:WINDOWSsystem32ctfmon.exe
C:Program FilesYandexOnlineonline.exe
C:Documents and Settings1Local SettingsApplication DataGoogleUpdateGoogleUpdate.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Program FilesATI TechnologiesATI.ACECore-Staticccc.exe
C:Program FilesYandexOnlineyachatyachat.exe
C:Documents and Settings1Мои документыЗагрузкиRSIT.exe
C:Program Filestrend micro1.exe

R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=41128
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: AVG Security Toolbar BHO — {A3BC75A2-1F87-4686-AA43-5347D756017C} — C:Program FilesAVGAVG9ToolbarIEToolbar.dll
R3 — URLSearchHook: (no name) — {468CD8A9-7C25-45FA-969E-3D925C689DC4} — (no file)
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:Program FilesMail.RuAgentMradllnewmrasearch.dll
F2 — REG:system.ini: Shell=Explorer.exe rundll32.exe thxr.wgo nwfdtx
F2 — REG:system.ini: UserInit=C:WINDOWSsystem32userinit.exe,C:WINDOWSsystem32c247d5f1.exe,\?globalrootsystemrootsystem323fSCfIp.exe,\?globalrootsystemrootsystem32HSF1Q9e.exe,\?globalrootsystemrootsystem32WpxVr1c.exe,
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: WormRadar.com IESiteBlocker.NavFilter — {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} — C:Program FilesAVGAVG9avgssie.dll
O2 — BHO: AVG Security Toolbar BHO — {A3BC75A2-1F87-4686-AA43-5347D756017C} — C:Program FilesAVGAVG9ToolbarIEToolbar.dll
O3 — Toolbar: AVG Security Toolbar — {CCC7A320-B3CA-4199-B1A6-9F516DD69829} — C:Program FilesAVGAVG9ToolbarIEToolbar.dll
O4 — HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 — HKLM..Run: [StartCCC] «C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe» MSRun
O4 — HKLM..Run: [LManager] C:PROGRA~1LAUNCH~1LManager.exe
O4 — HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe
O4 — HKLM..Run: [AzMixerSel] C:Program FilesRealtekAudioDriversAzMixerSel.exe
O4 — HKLM..Run: [Apoint] C:Program FilesApoint2KApoint.exe
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 8.0ReaderReader_sl.exe»
O4 — HKLM..Run: [Adobe ARM] «C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe»
O4 — HKLM..Run: [ACU] «C:Program FilesAtherosACU.exe» -nogui
O4 — HKLM..Run: [AVG9_TRAY] C:PROGRA~1AVGAVG9avgtray.exe
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [OutpostMonitor] C:PROGRA~1AgnitumOUTPOS~1op_mon.exe /tray /noservice
O4 — HKLM..Run: [OutpostFeedBack] «C:Program FilesAgnitumOutpost Firewallfeedback.exe» /dump:os_startup
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] «C:Program FilesCommon FilesAheadLibNMBgMonitor.exe»
O4 — HKCU..Run: [YandexOnline] «C:Program FilesYandexOnlineonline.exe» -AutoStart
O4 — HKCU..Run: [Google Update] «C:Documents and Settings1Local SettingsApplication DataGoogleUpdateGoogleUpdate.exe» /c
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O8 — Extra context menu item: &Отправить на устройство Bluetooth… — C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie_ctx.htm
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: Google ВикиКомментарии… — res://C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 — Extra button: ICQ7.1 — {71BFC818-0CED-42D6-9C87-5142918957EE} — C:Program FilesICQ7.1ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ7.1 — {71BFC818-0CED-42D6-9C87-5142918957EE} — C:Program FilesICQ7.1ICQ.exe
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: @btrez.dll,-4015 — {CCA281CA-C863-46ef-9331-5C8D4460577F} — C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm
O9 — Extra ‘Tools’ menuitem: @btrez.dll,-12650 — {CCA281CA-C863-46ef-9331-5C8D4460577F} — C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O16 — DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} — http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 — Protocol: avgsecuritytoolbar — {F2DDE6B2-9684-4A55-86D4-E255E237B77C} — C:Program FilesAVGAVG9ToolbarIEToolbar.dll
O18 — Protocol: linkscanner — {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} — C:Program FilesAVGAVG9avgpp.dll
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 — AppInit_DLLs: c:progra~1agnitumoutpos~1wl_hook.dll
O20 — Winlogon Notify: avgrsstarter — avgrsstx.dll (file missing)
O22 — SharedTaskScheduler: Предзагрузчик Browseui — {438755C2-A8BA-11D1-B96B-00A0C90312E1} — C:WINDOWSsystem32browseui.dll
O22 — SharedTaskScheduler: Демон кэша категорий компонентов — {8C7461EF-2B13-11d2-BE35-3078302C2030} — C:WINDOWSsystem32browseui.dll
O23 — Service: Atheros Configuration Service (ACS) — Atheros — C:WINDOWSsystem32acs.exe
O23 — Service: Agnitum Client Security Service (acssrv) — Agnitum Ltd. — C:PROGRA~1AgnitumOUTPOS~1acs.exe
O23 — Service: Ati External Event Utility — ATI Technologies Inc. — C:WINDOWSsystem32Ati2evxx.exe
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — C:WINDOWSsystem32Ati2evxx.exe
O23 — Service: ATI Smart — Unknown owner — C:WINDOWSsystem32ati2sgag.exe
O23 — Service: AVG Security Toolbar Service — Unknown owner — C:Program FilesAVGAVG9ToolbarToolbarBroker.exe
O23 — Service: AVG Free WatchDog (avg9wd) — AVG Technologies CZ, s.r.o. — C:Program FilesAVGAVG9avgwdsvc.exe
O23 — Service: Bluetooth Service (btwdins) — Broadcom Corporation. — C:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: NMIndexingService — Unknown owner — C:Program FilesCommon FilesAheadLibNMIndexingService.exe (file missing)
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Pml Driver HPZ12 — HP — C:WINDOWSsystem32HPZipm12.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 9892 bytes

======Scheduled tasks folder======

C:WINDOWStasksGoogleUpdateTaskUserS-1-5-21-1060284298-1547161642-682003330-1003Core.job
C:WINDOWStasksRealUpgradeLogonTaskS-1-5-21-1060284298-1547161642-682003330-1003.job
C:WINDOWStasksRealUpgradeScheduledTaskS-1-5-21-1060284298-1547161642-682003330-1003.job
C:WINDOWStasksWGASetup.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2010-04-02 61888]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search — C:Program FilesAVGAVG9avgssie.dll [2010-05-14 1615200]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO — C:Program FilesAVGAVG9ToolbarIEToolbar.dll [2010-04-19 2117704]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} — AVG Security Toolbar — C:Program FilesAVGAVG9ToolbarIEToolbar.dll [2010-04-19 2117704]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«SynTPEnh»=C:Program FilesSynapticsSynTPSynTPEnh.exe [2009-03-06 1434920]
«StartCCC»=C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2010-02-11 61440]
«LManager»=C:PROGRA~1LAUNCH~1LManager.exe [2009-01-17 862728]
«HP Software Update»=C:Program FilesHPHP Software UpdateHPWuSchd2.exe [2005-05-11 49152]
«AzMixerSel»=C:Program FilesRealtekAudioDriversAzMixerSel.exe [2009-12-11 59936]
«Apoint»=C:Program FilesApoint2KApoint.exe [2009-02-23 204800]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2010-04-02 40368]
«Adobe ARM»=C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe [2010-03-24 952768]
«ACU»=C:Program FilesAtherosACU.exe [2009-01-05 450648]
«AVG9_TRAY»=C:PROGRA~1AVGAVG9avgtray.exe [2010-05-14 2064736]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2010-03-20 19521056]
«OutpostMonitor»=C:PROGRA~1AgnitumOUTPOS~1op_mon.exe [2009-04-14 2374464]
«OutpostFeedBack»=C:Program FilesAgnitumOutpost Firewallfeedback.exe [2009-04-14 428032]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2004-08-17 15360]
«BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}»=C:Program FilesCommon FilesAheadLibNMBgMonitor.exe []
«YandexOnline»=C:Program FilesYandexOnlineonline.exe [2010-03-15 2561352]
«Google Update»=C:Documents and Settings1Local SettingsApplication DataGoogleUpdateGoogleUpdate.exe [2010-05-25 136176]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAmazing3DAquariumWallpaper]
[]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregEleFunAnimatedWallpaper]
[]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregMAgent]
C:Program FilesMail.RuAgentMAgent.exe [2010-03-26 8746680]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^HP Digital Imaging Monitor.lnk]
C:PROGRA~1HPDIGITA~1binhpqtra08.exe [2005-05-11 282624]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLS»=»c:progra~1agnitumoutpos~1wl_hook.dll»

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWSsystem32Ati2evxx.dll [2010-02-11 155648]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyavgrsstarter]
C:WINDOWSsystem32avgrsstx.dll [2010-05-14 12464]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWdf01000.sys]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWdf01000.sys]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«HonorAutoRunSetting»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesICQ7.1ICQ.exe»=»C:Program FilesICQ7.1ICQ.exe:*:Enabled:ICQ7.1»
«C:Program FilesICQ7.1aolload.exe»=»C:Program FilesICQ7.1aolload.exe:*:Enabled:aolload.exe»
«C:Program FilesOperaopera.exe»=»C:Program FilesOperaopera.exe:*:Enabled:Opera Internet Browser»
«C:Program FilesSkypePlugin ManagerskypePM.exe»=»C:Program FilesSkypePlugin ManagerskypePM.exe:*:Enabled:Skype Extras Manager»
«C:Program FilesMail.RuAgentmagent.exe»=»C:Program FilesMail.RuAgentmagent.exe:*:Enabled:Mail.Ru Агент»
«C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
«C:Program FilesMozilla Firefoxfirefox.exe»=»C:Program FilesMozilla Firefoxfirefox.exe:*:Enabled:Firefox»
«C:Program FilesTurokBinariesTurokGame.exe»=»C:Program FilesTurokBinariesTurokGame.exe:*:Enabled:Turok»
«C:Documents and SettingsAll UsersApplication DataKaspersky Lab Setup FilesKaspersky Anti-Virus 2010 9.0.0.463Russiansetup.exe»=»C:Documents and SettingsAll UsersApplication DataKaspersky Lab Setup FilesKaspersky Anti-Virus 2010 9.0.0.463Russiansetup.exe:*:Enabled:Программа установки Антивируса Касперского 2010»
«C:Program FilesAVGAVG9avgupd.exe»=»C:Program FilesAVGAVG9avgupd.exe:*:Enabled:avgupd.exe»
«C:Program FilesAVGAVG9avgnsx.exe»=»C:Program FilesAVGAVG9avgnsx.exe:*:Enabled:avgnsx.exe»
«C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesICQ7.1ICQ.exe»=»C:Program FilesICQ7.1ICQ.exe:*:Enabled:ICQ7.1»
«C:Program FilesICQ7.1aolload.exe»=»C:Program FilesICQ7.1aolload.exe:*:Enabled:aolload.exe»

======List of files/folders created in the last 1 months======

2010-05-25 17:50:26 —-D—- C:rsit
2010-05-25 13:49:31 —-D—- C:Program FilesTrend Micro
2010-05-24 20:30:33 —-D—- C:Program FilesWarCraftIII — Ancient Instinct
2010-05-20 18:16:18 —-D—- C:Program FilesSTDU Viewer
2010-05-20 18:16:18 —-D—- C:Program FilesCommon FilesSTDUtility
2010-05-20 13:06:44 —-A—- C:WINDOWSHelicon Debug Window.ini
2010-05-20 13:06:23 —-D—- C:Program FilesCommon FilesNikon
2010-05-20 13:06:15 —-D—- C:Program FilesMovie Player ActiveX Control
2010-05-20 13:06:15 —-D—- C:Program FilesAudio Capture ActiveX Control
2010-05-20 13:06:14 —-D—- C:Program FilesHelicon Software
2010-05-20 11:05:32 —-D—- C:WINDOWSsystem32XPSViewer
2010-05-20 11:05:26 —-D—- C:Program FilesMSBuild
2010-05-20 11:05:24 —-D—- C:WINDOWSsystem32en-US
2010-05-20 11:05:01 —-D—- C:Program FilesReference Assemblies
2010-05-20 11:04:08 —-N—- C:WINDOWSsystem32prntvpt.dll
2010-05-20 11:04:07 —-N—- C:WINDOWSsystem32xpssvcs.dll
2010-05-20 11:04:07 —-N—- C:WINDOWSsystem32xpsshhdr.dll
2010-05-17 14:06:32 —-D—- C:Program FilesPCGAME
2010-05-17 12:43:53 —-D—- C:Program FilesMSXML 6.0
2010-05-17 12:34:18 —-D—- C:Program FilesLavalys
2010-05-17 11:49:01 —-D—- C:Program FilesMedal of Honor — Airborne
2010-05-17 09:29:57 —-D—- C:Documents and Settings1Application DataXnView
2010-05-17 09:29:42 —-D—- C:Program FilesXnView
2010-05-16 23:09:29 —-D—- C:Documents and Settings1Application DataDisney Interactive Studios
2010-05-16 22:46:45 —-D—- C:Program FilesCaspian
2010-05-16 19:58:33 —-D—- C:Documents and Settings1Application DataYaChatData
2010-05-16 19:58:24 —-D—- C:Program FilesYandex
2010-05-15 22:36:24 —-A—- C:WINDOWSsystem32unrar.dll
2010-05-15 22:36:24 —-A—- C:WINDOWSavisplitter.ini
2010-05-15 22:36:22 —-A—- C:WINDOWSsystem32yv12vfw.dll
2010-05-15 22:36:22 —-A—- C:WINDOWSsystem32xvidvfw.dll
2010-05-15 22:36:22 —-A—- C:WINDOWSsystem32xvidcore.dll
2010-05-15 22:36:21 —-A—- C:WINDOWSsystem32qt-dx331.dll
2010-05-15 22:36:21 —-A—- C:WINDOWSsystem32dpl100.dll
2010-05-15 22:36:21 —-A—- C:WINDOWSsystem32divx.dll
2010-05-15 22:36:19 —-A—- C:WINDOWSsystem32ff_vfw.dll.manifest
2010-05-15 22:36:19 —-A—- C:WINDOWSsystem32ff_vfw.dll
2010-05-15 22:36:18 —-D—- C:Program FilesK-Lite Codec Pack
2010-05-15 22:32:12 —-D—- C:Documents and SettingsAll UsersApplication Dataashampoo
2010-05-15 22:32:07 —-D—- C:Program FilesAshampoo
2010-05-15 22:26:07 —-D—- C:Program FilesAgnitum
2010-05-15 22:25:45 —-D—- C:Documents and SettingsAll UsersApplication DataAgnitum
2010-05-15 22:19:08 —-A—- C:WINDOWSsystem32RTSUSTORicon.dll
2010-05-15 22:18:55 —-A—- C:WINDOWSsystem32RtsUStor.dll
2010-05-15 21:18:35 —-D—- C:Program FilesIntel
2010-05-15 21:18:15 —-D—- C:Intel
2010-05-15 16:31:44 —-D—- C:WINDOWSie8updates
2010-05-15 16:31:25 —-D—- C:WINDOWSWBEM
2010-05-15 16:30:01 —-HDC—- C:WINDOWSie8
2010-05-15 16:30:01 —-D—- C:WINDOWSsystem32ru-RU
2010-05-15 16:29:43 —-D—- C:WINDOWSsystem32MpEngineStore
2010-05-15 15:46:16 —-A—- C:WINDOWSsystem32MRT.exe
2010-05-15 09:39:24 —-D—- C:WINDOWSsystem32KB905474
2010-05-15 09:37:38 —-D—- C:WINDOWSsystem32CatRoot_bak
2010-05-15 09:27:45 —-D—- C:Temp
2010-05-15 01:07:07 —-D—- C:WINDOWSServicePackFiles
2010-05-15 01:04:52 —-D—- C:Program FilesMSXML 4.0
2010-05-14 21:09:24 —-N—- C:WINDOWSsystem32tzchange.exe
2010-05-14 21:05:43 —-D—- C:WINDOWSsystem32PreInstall
2010-05-14 20:24:32 —-D—- C:WINDOWSsystem32SoftwareDistribution
2010-05-14 15:31:56 —-D—- C:Program FilesOpera
2010-05-14 15:28:34 —-RA—- C:WINDOWSsystem32tmp5.tmp
2010-05-14 15:28:34 —-RA—- C:WINDOWSsystem32tmp4.tmp
2010-05-14 12:39:28 —-HD—- C:$AVG
2010-05-14 12:32:10 —-A—- C:WINDOWSsystem32avgrsstx.dll
2010-05-14 12:31:50 —-D—- C:Documents and SettingsAll UsersApplication DataAVG Security Toolbar
2010-05-14 12:31:34 —-D—- C:Program FilesAVG
2010-05-14 12:31:33 —-D—- C:Documents and SettingsAll UsersApplication Dataavg9
2010-05-14 10:38:45 —-D—- C:Documents and SettingsAll UsersApplication DataSecTaskMan
2010-05-14 10:38:40 —-D—- C:Program FilesSecurity Task Manager
2010-05-14 09:35:29 —-D—- C:WINDOWSpss
2010-05-13 21:26:34 —-D—- C:Documents and Settings1Application DataTouchstone
2010-05-13 20:42:24 —-A—- C:WINDOWSATICIM.INI
2010-05-13 20:36:47 —-D—- C:WINDOWSsystem32AGEIA
2010-05-13 20:36:46 —-D—- C:Program FilesAGEIA Technologies
2010-05-13 20:36:06 —-D—- C:Program FilesCommon FilesWise Installation Wizard
2010-05-13 19:01:16 —-A—- C:WINDOWSsystem32nhJ4NnV.exe
2010-05-13 08:14:02 —-A—- C:WINDOWSsystem326itG76e.exe
2010-05-12 21:42:22 —-D—- C:Program FilesEnemy
2010-05-12 17:27:25 —-RA—- C:WINDOWSsystem32tmp3D2.tmp
2010-05-12 17:27:25 —-RA—- C:WINDOWSsystem32tmp3D1.tmp
2010-05-12 17:21:19 —-A—- C:WINDOWSsystem32d3dx10_41.dll
2010-05-12 17:21:19 —-A—- C:WINDOWSsystem32D3DCompiler_41.dll
2010-05-12 17:21:15 —-A—- C:WINDOWSsystem32D3DX9_41.dll
2010-05-12 17:21:11 —-A—- C:WINDOWSsystem32XAudio2_4.dll
2010-05-12 17:21:11 —-A—- C:WINDOWSsystem32XAPOFX1_3.dll
2010-05-12 17:21:07 —-A—- C:WINDOWSsystem32xactengine3_4.dll
2010-05-12 17:21:03 —-A—- C:WINDOWSsystem32X3DAudio1_6.dll
2010-05-12 16:59:20 —-D—- C:дир
2010-05-12 16:28:32 —-RA—- C:WINDOWSsystem32tmp1C4.tmp
2010-05-12 16:28:32 —-RA—- C:WINDOWSsystem32tmp1C3.tmp
2010-05-12 16:17:40 —-RA—- C:WINDOWSsystem32tmp136.tmp
2010-05-12 16:17:40 —-RA—- C:WINDOWSsystem32tmp135.tmp
2010-05-12 16:13:36 —-A—- C:WINDOWSsystem32d3dx10_40.dll
2010-05-12 16:13:36 —-A—- C:WINDOWSsystem32D3DCompiler_40.dll
2010-05-12 16:13:31 —-A—- C:WINDOWSsystem32D3DX9_40.dll
2010-05-12 16:13:25 —-A—- C:WINDOWSsystem32XAudio2_3.dll
2010-05-12 16:13:25 —-A—- C:WINDOWSsystem32XAPOFX1_2.dll
2010-05-12 16:13:20 —-A—- C:WINDOWSsystem32xactengine3_3.dll
2010-05-12 16:13:15 —-A—- C:WINDOWSsystem32X3DAudio1_5.dll
2010-05-12 16:13:09 —-A—- C:WINDOWSsystem32XAudio2_2.dll
2010-05-12 16:13:09 —-A—- C:WINDOWSsystem32XAPOFX1_1.dll
2010-05-12 16:13:04 —-A—- C:WINDOWSsystem32xactengine3_2.dll
2010-05-12 16:12:59 —-A—- C:WINDOWSsystem32d3dx10_39.dll
2010-05-12 16:12:59 —-A—- C:WINDOWSsystem32D3DCompiler_39.dll
2010-05-12 16:12:53 —-A—- C:WINDOWSsystem32D3DX9_39.dll
2010-05-12 16:12:47 —-A—- C:WINDOWSsystem32XAudio2_1.dll
2010-05-12 16:12:47 —-A—- C:WINDOWSsystem32XAPOFX1_0.dll
2010-05-12 16:12:42 —-A—- C:WINDOWSsystem32xactengine3_1.dll
2010-05-12 16:12:37 —-A—- C:WINDOWSsystem32X3DAudio1_4.dll
2010-05-12 16:12:31 —-A—- C:WINDOWSsystem32d3dx10_38.dll
2010-05-12 16:12:31 —-A—- C:WINDOWSsystem32D3DCompiler_38.dll
2010-05-12 16:12:25 —-A—- C:WINDOWSsystem32D3DX9_38.dll
2010-05-12 16:12:20 —-A—- C:WINDOWSsystem32XAudio2_0.dll
2010-05-12 16:12:14 —-A—- C:WINDOWSsystem32xactengine3_0.dll
2010-05-12 16:12:09 —-A—- C:WINDOWSsystem32X3DAudio1_3.dll
2010-05-12 16:12:04 —-A—- C:WINDOWSsystem32d3dx10_37.dll
2010-05-12 16:12:04 —-A—- C:WINDOWSsystem32D3DCompiler_37.dll
2010-05-12 16:11:58 —-A—- C:WINDOWSsystem32D3DX9_37.dll
2010-05-12 16:11:53 —-A—- C:WINDOWSsystem32xactengine2_10.dll
2010-05-12 16:11:42 —-A—- C:WINDOWSsystem32d3dx10_36.dll
2010-05-12 16:11:42 —-A—- C:WINDOWSsystem32D3DCompiler_36.dll
2010-05-12 16:11:37 —-A—- C:WINDOWSsystem32d3dx9_36.dll
2010-05-12 16:11:32 —-A—- C:WINDOWSsystem32xactengine2_9.dll
2010-05-12 16:11:26 —-A—- C:WINDOWSsystem32d3dx10_35.dll
2010-05-12 16:11:26 —-A—- C:WINDOWSsystem32D3DCompiler_35.dll
2010-05-12 16:11:21 —-A—- C:WINDOWSsystem32d3dx9_35.dll
2010-05-12 16:11:16 —-A—- C:WINDOWSsystem32xactengine2_8.dll
2010-05-12 16:11:16 —-A—- C:WINDOWSsystem32X3DAudio1_2.dll
2010-05-12 16:11:11 —-A—- C:WINDOWSsystem32d3dx10_34.dll
2010-05-12 16:11:11 —-A—- C:WINDOWSsystem32D3DCompiler_34.dll
2010-05-12 16:11:07 —-A—- C:WINDOWSsystem32d3dx9_34.dll
2010-05-12 16:11:03 —-A—- C:WINDOWSsystem32xinput1_3.dll
2010-05-12 16:10:59 —-A—- C:WINDOWSsystem32xactengine2_7.dll
2010-05-12 16:10:54 —-A—- C:WINDOWSsystem32d3dx10_33.dll
2010-05-12 16:10:54 —-A—- C:WINDOWSsystem32D3DCompiler_33.dll
2010-05-12 16:10:48 —-A—- C:WINDOWSsystem32d3dx9_33.dll
2010-05-12 16:10:47 —-A—- C:WINDOWSsystem32xactengine2_6.dll
2010-05-12 16:10:46 —-A—- C:WINDOWSsystem32xactengine2_5.dll
2010-05-12 16:10:46 —-A—- C:WINDOWSsystem32d3dx9_32.dll
2010-05-12 16:10:45 —-A—- C:WINDOWSsystem32xactengine2_4.dll
2010-05-12 16:10:45 —-A—- C:WINDOWSsystem32x3daudio1_1.dll
2010-05-12 16:10:45 —-A—- C:WINDOWSsystem32d3dx9_31.dll
2010-05-12 16:10:44 —-A—- C:WINDOWSsystem32xinput1_2.dll
2010-05-12 16:10:44 —-A—- C:WINDOWSsystem32xactengine2_3.dll
2010-05-12 16:10:43 —-A—- C:WINDOWSsystem32xinput1_1.dll
2010-05-12 16:10:43 —-A—- C:WINDOWSsystem32xactengine2_2.dll
2010-05-12 16:10:42 —-A—- C:WINDOWSsystem32xactengine2_1.dll
2010-05-12 16:10:31 —-A—- C:WINDOWSsystem32xactengine2_0.dll
2010-05-12 16:10:31 —-A—- C:WINDOWSsystem32x3daudio1_0.dll
2010-05-12 16:10:30 —-A—- C:WINDOWSsystem32d3dx9_29.dll
2010-05-12 16:10:29 —-A—- C:WINDOWSsystem32xinput9_1_0.dll
2010-05-12 16:10:29 —-A—- C:WINDOWSsystem32d3dx9_28.dll
2010-05-12 16:10:28 —-A—- C:WINDOWSsystem32d3dx9_27.dll
2010-05-12 16:10:27 —-A—- C:WINDOWSsystem32d3dx9_26.dll
2010-05-12 16:10:27 —-A—- C:WINDOWSsystem32d3dx9_25.dll
2010-05-12 16:10:04 —-A—- C:WINDOWSsystem32d3dx9_24.dll
2010-05-12 16:09:16 —-D—- C:WINDOWSLogs
2010-05-12 16:09:15 —-D—- C:Program FilesOpenAL
2010-05-12 16:09:15 —-A—- C:WINDOWSsystem32wrap_oal.dll
2010-05-12 16:09:15 —-A—- C:WINDOWSsystem32OpenAL32.dll
2010-05-12 16:09:14 —-RA—- C:WINDOWSsystem32tmp75.tmp
2010-05-12 16:09:14 —-RA—- C:WINDOWSsystem32tmp74.tmp
2010-05-05 13:42:02 —-D—- C:Program FilesРНИВЦ
2010-05-05 13:40:54 —-D—- C:Program FilesCommon FilesNalogoplUL416
2010-05-05 13:40:52 —-D—- C:Program FilesНалогоплательщик ЮЛ
2010-05-02 09:19:58 —-D—- C:Program FilesXilisoft
2010-04-28 20:16:55 —-A—- C:WINDOWSIrremote.ini
2010-04-28 20:16:47 —-D—- C:Documents and Settings1Application DataAhead
2010-04-28 19:52:41 —-D—- C:Documents and SettingsAll UsersApplication DataMcAfee
2010-04-28 17:26:10 —-D—- C:Documents and Settings1Application DataHP
2010-04-28 15:41:55 —-D—- C:Program FilesCommon FilesSonic Shared
2010-04-28 15:41:55 —-D—- C:Documents and SettingsAll UsersApplication DataSonic
2010-04-28 15:40:36 —-D—- C:Program FilesCommon FilesHP
2010-04-28 15:39:00 —-D—- C:WINDOWSsystem32URTTEMP
2010-04-28 15:36:55 —-D—- C:Program FilesHewlett-Packard
2010-04-28 15:36:13 —-D—- C:Documents and SettingsAll UsersApplication DataHP
2010-04-28 15:30:49 —-A—- C:WINDOWSsystem32HPZinw12.exe
2010-04-28 15:30:48 —-A—- C:WINDOWSsystem32HPZisn12.dll
2010-04-28 15:30:48 —-A—- C:WINDOWSsystem32HPZipt12.dll
2010-04-28 15:30:48 —-A—- C:WINDOWSsystem32HPZipr12.dll
2010-04-28 15:30:48 —-A—- C:WINDOWSsystem32HPZipm12.exe
2010-04-28 15:30:48 —-A—- C:WINDOWSsystem32HPZidr12.dll
2010-04-28 15:30:44 —-A—- C:WINDOWSIsUninst.exe
2010-04-28 15:14:38 —-D—- C:Program FilesHP
2010-04-28 14:11:59 —-A—- C:WINDOWSsystem32hpz3l3xu.dll
2010-04-28 14:11:47 —-RA—- C:WINDOWSsystem32hpzids01.dll
2010-04-28 14:10:48 —-RA—- C:WINDOWSsystem32HPZc3212.dll
2010-04-27 18:09:59 —-D—- C:WINDOWSMinidump
2010-04-27 09:28:25 —-D—- C:Documents and SettingsAll UsersApplication DataESET

======List of files/folders modified in the last 1 months======

2010-05-25 17:50:42 —-D—- C:WINDOWSsystem32CatRoot2
2010-05-25 17:42:12 —-D—- C:WINDOWSsystem32
2010-05-25 17:42:12 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2010-05-25 17:38:10 —-D—- C:WINDOWSsystem32drivers
2010-05-25 14:09:37 —-SHD—- C:System Volume Information
2010-05-25 14:09:37 —-D—- C:WINDOWSsystem32Restore
2010-05-25 13:49:33 —-SHD—- C:WINDOWSInstaller
2010-05-25 13:49:31 —-SD—- C:Documents and Settings1Application DataMicrosoft
2010-05-25 13:49:31 —-RD—- C:Program Files
2010-05-25 13:21:36 —-D—- C:WINDOWSTemp
2010-05-25 13:20:31 —-D—- C:WINDOWS
2010-05-24 10:26:33 —-D—- C:VKontakteDJ
2010-05-22 22:08:51 —-D—- C:Documents and Settings1Application DataSkype
2010-05-21 20:37:43 —-D—- C:Documents and Settings1Application DataskypePM
2010-05-21 20:06:25 —-A—- C:WINDOWSwin.ini
2010-05-21 19:55:09 —-HD—- C:WINDOWSinf
2010-05-20 22:21:46 —-RSD—- C:WINDOWSassembly
2010-05-20 22:20:25 —-D—- C:WINDOWSMicrosoft.NET
2010-05-20 18:16:18 —-D—- C:Program FilesCommon Files
2010-05-20 11:14:28 —-D—- C:WINDOWSWinSxS
2010-05-20 11:05:22 —-RSD—- C:WINDOWSFonts
2010-05-20 11:04:29 —-D—- C:WINDOWSsystem32spool
2010-05-20 11:04:22 —-RSHDC—- C:WINDOWSsystem32dllcache
2010-05-19 20:16:23 —-SD—- C:WINDOWSTasks
2010-05-17 14:53:02 —-D—- C:WINDOWSsystem32DirectX
2010-05-17 09:57:14 —-D—- C:Program FilesInternet Explorer
2010-05-16 23:15:39 —-D—- C:WINDOWSsystem32CatRoot
2010-05-16 19:58:51 —-D—- C:Documents and Settings1Application DataYandex
2010-05-16 18:58:18 —-D—- C:Documents and Settings1Application DataICQ
2010-05-16 15:33:59 —-D—- C:Program FilesMozilla Firefox
2010-05-16 14:11:36 —-D—- C:WINDOWSsystem32config
2010-05-16 10:01:37 —-A—- C:WINDOWSimsins.BAK
2010-05-15 22:35:13 —-D—- C:Program FilesReal
2010-05-15 22:35:13 —-D—- C:Program FilesCommon FilesReal
2010-05-15 22:35:12 —-D—- C:Documents and Settings1Application DataReal
2010-05-15 22:33:41 —-A—- C:Program FilesCommon Fileskeylog.txt
2010-05-15 22:19:08 —-D—- C:WINDOWSsystem32sda
2010-05-15 22:18:55 —-D—- C:Program FilesRealtek
2010-05-15 22:02:48 —-D—- C:WINDOWSsystem32RTCOM
2010-05-15 21:18:35 —-HD—- C:Program FilesInstallShield Installation Information
2010-05-15 20:28:03 —-D—- C:WINDOWSHelp
2010-05-15 16:31:16 —-D—- C:WINDOWSMedia
2010-05-15 09:25:00 —-D—- C:WINDOWSAppPatch
2010-05-15 09:24:59 —-D—- C:WINDOWSsystem32wbem
2010-05-15 09:24:59 —-D—- C:WINDOWSsystem32Setup
2010-05-15 01:12:52 —-D—- C:Program FilesMessenger
2010-05-15 01:10:26 —-D—- C:Program FilesMovie Maker
2010-05-15 01:07:34 —-D—- C:Program FilesOutlook Express
2010-05-15 01:06:50 —-D—- C:WINDOWSRegistration
2010-05-14 20:25:03 —-D—- C:WINDOWSSoftwareDistribution
2010-05-14 16:57:26 —-D—- C:Documents and Settings1Application DatauTorrent
2010-05-14 16:03:41 —-RSH—- C:boot.ini
2010-05-14 16:03:41 —-A—- C:WINDOWSsystem.ini
2010-05-11 08:59:55 —-D—- C:Documents and Settings1Application DataMozilla
2010-05-05 13:45:30 —-D—- C:Documents and Settings1Application DataVso
2010-05-05 13:45:29 —-A—- C:Documents and Settings1Application Datainst.exe
2010-05-05 13:40:28 —-D—- C:Program FilesCommon FilesInstallShield
2010-05-05 09:21:19 —-A—- C:WINDOWSODBC.INI
2010-05-05 09:19:20 —-A—- C:WINDOWSOEWABLog.txt
2010-05-05 09:18:20 —-D—- C:Documents and Settings
2010-05-04 10:18:21 —-D—- C:Music
2010-05-03 14:26:49 —-D—- C:Documents and Settings1Application DataMra
2010-04-29 09:14:21 —-D—- C:Documents and SettingsAll UsersApplication DataNOS
2010-04-28 20:19:08 —-D—- C:Documents and SettingsAll UsersApplication DataNero
2010-04-28 19:40:13 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
2010-04-28 19:28:45 —-D—- C:Program FilesCommon FilesAdobe
2010-04-28 19:28:27 —-D—- C:Program FilesAdobe
2010-04-28 18:12:38 —-D—- C:Documents and Settings1Application DataAdobe
2010-04-28 15:40:05 —-D—- C:WINDOWSsystem32mui
2010-04-28 14:05:29 —-A—- C:WINDOWSNeroDigital.ini
2010-04-27 10:06:47 —-D—- C:Program FilesCommon FilesNero

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;Драйвер AMD процессора; C:WINDOWSsystem32DRIVERSAmdK8.sys [2006-07-02 43520]
R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:WINDOWSSystem32Driversavgldx86.sys [2010-05-14 216200]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:WINDOWSSystem32Driversavgmfx86.sys [2010-05-14 29512]
R1 DritekPortIO;Dritek General Port I/O; ??C:PROGRA~1LAUNCH~1DPortIO.sys []
R1 SandBox;SandBox; ??C:WINDOWSsystem32driversSandBox.sys []
R1 WmiAcpi;Интерфейс управления для ACPI Microsoft Windows; C:WINDOWSsystem32DRIVERSwmiacpi.sys [2004-08-04 8832]
R3 afw;Agnitum firewall driver; C:WINDOWSsystem32DRIVERSafw.sys [2009-02-18 31128]
R3 afwcore;afwcore; C:WINDOWSsystem32driversafwcore.sys [2009-02-10 257432]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:WINDOWSsystem32DRIVERSApfiltr.sys [2009-02-22 195120]
R3 ati2mtag;ati2mtag; C:WINDOWSsystem32DRIVERSati2mtag.sys [2010-02-11 3565056]
R3 BCM43XX;Драйвер сетевого адаптера Broadcom 802.11; C:WINDOWSsystem32DRIVERSbcmwl5.sys [2007-09-20 1123328]
R3 btaudio;Аудиоустройство Bluetooth; C:WINDOWSsystem32driversbtaudio.sys [2007-03-23 539072]
R3 BTDriver;Драйвер виртуальной связи Bluetooth; C:WINDOWSsystem32DRIVERSbtport.sys [2007-03-23 37424]
R3 BTKRNL;Нумератор шины Bluetooth; C:WINDOWSsystem32DRIVERSbtkrnl.sys [2007-03-31 876384]
R3 CmBatt;Драйвер батареи с ACPI-управлением (Майкрософт); C:WINDOWSsystem32DRIVERSCmBatt.sys [2004-08-04 14080]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:WINDOWSsystem32DRIVERSDKbFltr.sys [2006-01-20 17408]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2005-01-07 138752]
R3 hidusb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2001-10-20 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2010-03-20 5878816]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller; C:WINDOWSsystem32DRIVERSl1c51x86.sys [2009-02-22 38912]
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-20 12160]
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2004-08-03 31616]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2004-08-03 26624]
R3 usbfilter;AMD USB Filter Driver; C:WINDOWSsystem32DRIVERSusbfilter.sys [2008-05-28 22072]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2004-08-03 57600]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2004-08-03 17024]
R3 usbvideo;USB-видеоустройство (WDM); C:WINDOWSSystem32Driversusbvideo.sys [2004-08-04 78464]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:WINDOWSSystem32Driverswdf01000.sys [2008-03-27 503008]
R3 WSIMD;wsimd Service; C:WINDOWSsystem32DRIVERSwsimd.sys [2008-02-08 57408]
S1 AvgTdiX;AVG Free Network Redirector; C:WINDOWSSystem32Driversavgtdix.sys [2010-05-16 242896]
S1 uthhvmpf;uthhvmpf; ??C:WINDOWSsystem32driversuthhvmpf.sys []
S3 Ambfilt;Ambfilt; C:WINDOWSsystem32driversAmbfilt.sys [2009-11-18 1691480]
S3 atikmdag;atikmdag; C:WINDOWSsystem32DRIVERSatikmdag.sys [2009-01-04 4172288]
S3 ax9agssz;ax9agssz; C:WINDOWSsystem32driversax9agssz.sys []
S3 BTWDNDIS;Сервер доступа к локальной сети Bluetooth; C:WINDOWSsystem32DRIVERSbtwdndis.sys [2007-03-23 149123]
S3 btwhid;btwhid; C:WINDOWSsystem32DRIVERSbtwhid.sys [2007-03-31 55352]
S3 CCDECODE;Closed Caption декодер; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2004-08-04 17024]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:WINDOWSsystem32DRIVERSHPZid412.sys [2005-03-08 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:WINDOWSsystem32DRIVERSHPZipr12.sys [2005-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:WINDOWSsystem32DRIVERSHPZius12.sys [2005-03-08 21744]
S3 Monfilt;Monfilt; C:WINDOWSsystem32driversMonfilt.sys [2009-11-18 1395800]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2004-08-04 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWSsystem32DRIVERSNdisIP.sys [2004-08-04 10880]
S3 pcouffin;VSO Software pcouffin; C:WINDOWSSystem32Driverspcouffin.sys [2010-04-23 47360]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:WINDOWSSystem32DriversRtsUStor.sys [2009-04-10 165888]
S3 RtsUIR;Realtek IR Driver; C:WINDOWSsystem32DRIVERSRts516xIR.sys []
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2004-08-04 11136]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2004-08-04 15360]
S3 SynTP;Synaptics TouchPad Driver; C:WINDOWSsystem32DRIVERSSynTP.sys [2009-03-06 208304]
S3 USBCCID;Realtek Smartcard Reader Driver; C:WINDOWSsystem32DRIVERSRtsUCcid.sys []
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2004-08-03 25856]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-04 26496]
S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2004-08-04 19328]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []
S4 sfc;sfc; C:WINDOWSsystem32driverssfc.sys []
S4 sr;Драйвер фильтра восстановления системы; C:WINDOWSsystem32DRIVERSsr.sys [2004-08-17 73472]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACS;Atheros Configuration Service; C:WINDOWSsystem32acs.exe [2009-01-05 475220]
R2 acssrv;Agnitum Client Security Service; C:PROGRA~1AgnitumOUTPOS~1acs.exe [2009-04-14 1195008]
R2 Ati External Event Utility;Ati External Event Utility; C:WINDOWSsystem32Ati2evxx.exe [2010-02-11 602112]
R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSsystem32Ati2evxx.exe [2010-02-11 602112]
R2 avg9wd;AVG Free WatchDog; C:Program FilesAVGAVG9avgwdsvc.exe [2010-05-14 308064]
R2 btwdins;Bluetooth Service; C:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe [2007-04-01 273256]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:WINDOWSsystem32HPZipm12.exe [2004-09-29 69632]
R2 UMWdf;Windows User Mode Driver Framework; C:WINDOWSsystem32wdfmgr.exe [2005-01-28 38912]
S2 ATI Smart;ATI Smart; C:WINDOWSsystem32ati2sgag.exe [2010-02-10 593920]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service; C:Program FilesAVGAVG9ToolbarToolbarBroker.exe [2010-04-19 430152]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:Program FilesCommon FilesAheadLibNMIndexingService.exe []
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-07-29 132096]

---

EOF

---

[Автор]

Сообщения