Созданные ответы форума
-
Сообщения
-
Да пока не замечено.
Портов раза в три меньше открытых стало.
Комп перестал слать кучу разной инфы по всему миру.
СпасибоСделано — я только не отключал НОД23 — думаю могут из-за этого проблемы могли быть
OTMoveIt3 лог
========== PROCESSES ==========
Unable to kill process: explorer.exe
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{FBC934E6-6F95-4742-B6BC-F6E8D854C25D}\ not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{0a188650-d5e2-11dd-a25f-000c6ec90e9c}\ not found.
========== FILES ==========
File/Folder c:bbjfuf.exe not found.
File/Folder C:WINDOWSsystem32shell31.dll not found.
File/Folder C:WINDOWSmsauc.exe not found.
File/Folder C:WINDOWSsystem32crypts.dll not found.
C:Documents and SettingsAll UsersApplication Datapdalib.dll unregistered successfully.
C:Documents and SettingsAll UsersApplication Datapdalib.dll moved successfully.
========== COMMANDS ==========
File delete failed. C:DOCUME~1AdminLOCALS~1TempWCESLog.log scheduled to be deleted on reboot.
File delete failed. C:DOCUME~1AdminLOCALS~1Temp~DF8B42.tmp scheduled to be deleted on reboot.
User’s Temp folder emptied.
User’s Temporary Internet Files folder emptied.
User’s Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:Documents and SettingsLocalServiceLocal SettingsTemporary Internet FilesContent.IE5index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:WINDOWStemppdk-SYSTEMdac792b3e8ac8e26c5efd9737c8f9639Cwd.dll scheduled to be deleted on reboot.
File delete failed. C:WINDOWStemppdk-SYSTEMa29e0168b01892baa3dc11f312a28635IO.dll scheduled to be deleted on reboot.
File delete failed. C:WINDOWStemppdk-SYSTEM8ffcd21bbd7e0ab5eb5622b83f2964eeSocket.dll scheduled to be deleted on reboot.
File delete failed. C:WINDOWStemppdk-SYSTEM7062f8300f9225b94b1ae32e47872489Win32.dll scheduled to be deleted on reboot.
File delete failed. C:WINDOWStemppdk-SYSTEM295821d39e78d9af8ffdce16f324d6d8Registry.dll scheduled to be deleted on reboot.
File delete failed. C:WINDOWStemppdk-SYSTEM108ba0b84e85359ccda9193f22a83212OLE.dll scheduled to be deleted on reboot.
File delete failed. C:WINDOWStemppdk-SYSTEM 4c44c570c0a502a1b5ecf42f4580a69Fcntl.dll scheduled to be deleted on reboot.
Windows Temp folder emptied.
Temp folders emptied.
Explorer started successfullyOTMoveIt3 by OldTimer — Version 1.0.7.2 log created on 12312008_160830
Files moved on Reboot…
C:DOCUME~1AdminLOCALS~1TempWCESLog.log moved successfully.
C:DOCUME~1AdminLOCALS~1Temp~DF8B42.tmp moved successfully.
C:Documents and SettingsLocalServiceLocal SettingsTemporary Internet FilesContent.IE5index.dat moved successfully.
LoadLibrary failed for C:WINDOWStemppdk-SYSTEMdac792b3e8ac8e26c5efd9737c8f9639Cwd.dll
C:WINDOWStemppdk-SYSTEMdac792b3e8ac8e26c5efd9737c8f9639Cwd.dll NOT unregistered.
C:WINDOWStemppdk-SYSTEMdac792b3e8ac8e26c5efd9737c8f9639Cwd.dll moved successfully.
LoadLibrary failed for C:WINDOWStemppdk-SYSTEMa29e0168b01892baa3dc11f312a28635IO.dll
C:WINDOWStemppdk-SYSTEMa29e0168b01892baa3dc11f312a28635IO.dll NOT unregistered.
C:WINDOWStemppdk-SYSTEMa29e0168b01892baa3dc11f312a28635IO.dll moved successfully.
LoadLibrary failed for C:WINDOWStemppdk-SYSTEM8ffcd21bbd7e0ab5eb5622b83f2964eeSocket.dll
C:WINDOWStemppdk-SYSTEM8ffcd21bbd7e0ab5eb5622b83f2964eeSocket.dll NOT unregistered.
C:WINDOWStemppdk-SYSTEM8ffcd21bbd7e0ab5eb5622b83f2964eeSocket.dll moved successfully.
LoadLibrary failed for C:WINDOWStemppdk-SYSTEM7062f8300f9225b94b1ae32e47872489Win32.dll
C:WINDOWStemppdk-SYSTEM7062f8300f9225b94b1ae32e47872489Win32.dll NOT unregistered.
C:WINDOWStemppdk-SYSTEM7062f8300f9225b94b1ae32e47872489Win32.dll moved successfully.
LoadLibrary failed for C:WINDOWStemppdk-SYSTEM295821d39e78d9af8ffdce16f324d6d8Registry.dll
C:WINDOWStemppdk-SYSTEM295821d39e78d9af8ffdce16f324d6d8Registry.dll NOT unregistered.
C:WINDOWStemppdk-SYSTEM295821d39e78d9af8ffdce16f324d6d8Registry.dll moved successfully.
LoadLibrary failed for C:WINDOWStemppdk-SYSTEM108ba0b84e85359ccda9193f22a83212OLE.dll
C:WINDOWStemppdk-SYSTEM108ba0b84e85359ccda9193f22a83212OLE.dll NOT unregistered.
C:WINDOWStemppdk-SYSTEM108ba0b84e85359ccda9193f22a83212OLE.dll moved successfully.
LoadLibrary failed for C:WINDOWStemppdk-SYSTEM 4c44c570c0a502a1b5ecf42f4580a69Fcntl.dll
C:WINDOWStemppdk-SYSTEM 4c44c570c0a502a1b5ecf42f4580a69Fcntl.dll NOT unregistered.
C:WINDOWStemppdk-SYSTEM 4c44c570c0a502a1b5ecf42f4580a69Fcntl.dll moved successfully.RSIT log
Logfile of random’s system information tool 1.05 (written by random/random)
Run by Admin at 2008-12-31 16:18:43
Microsoft Windows XP Professional Service Pack 2
System drive C: has 518 MB (6%) free of 8 GB
Total RAM: 1535 MB (73% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:19, on 2008-12-31
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20696)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesEsetnod32krn.exe
C:WINDOWSsystem32nod32p.exe
C:Program FilesActiveState Perl Dev Kit 7.2binpdkdebug.exe
C:Program FilesAnalog DevicesSoundMAXSMAgent.exe
C:Program FilesUnlockerUnlockerAssistant.exe
C:Program FilesAnalog DevicesSoundMAXSMax4PNP.exe
C:Program FilesEsetnod32kui.exe
C:Program FilesGhostWallghostwall.exe
C:Program FilesLClocklclock.exe
C:Program FilesMicrosoft ActiveSyncwcescomm.exe
C:PROGRA~1MICROS~3rapimgr.exe
C:Program FilesOperaopera.exe
C:Documents and SettingsAdminРабочий столRSIT.exe
C:Program Filestrend microAdmin.exeR0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.kornet.ru
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_03binssv.dll
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — C:PROGRA~1DOWNLO~1dmiehlp.dll
O4 — HKLM..Run: [VolumeControl] C:program filesVolumeControlvolume.exe
O4 — HKLM..Run: [UnlockerAssistant] «C:Program FilesUnlockerUnlockerAssistant.exe»
O4 — HKLM..Run: [kX Mixer] C:WINDOWSsystem32kxmixer.exe —startup
O4 — HKLM..Run: [SoundMAXPnP] C:Program FilesAnalog DevicesSoundMAXSMax4PNP.exe
O4 — HKLM..Run: [nod32kui] «C:Program FilesEsetnod32kui.exe» /WAITSERVICE
O4 — HKLM..Run: [GhostWall] «C:Program FilesGhostWallghostwall.exe» -minimize
O4 — HKCU..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe
O4 — HKCU..Run: [LClock] C:Program FilesLClocklclock.exe
O4 — HKCU..Run: [H/PC Connection Agent] «C:Program FilesMicrosoft ActiveSyncwcescomm.exe»
O4 — HKUS.DEFAULT..Run: [Punto Switcher] C:Program FilesPunto Switcherps.exe (User ‘Default user’)
O4 — HKUS.DEFAULT..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘Default user’)
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office10EXCEL.EXE/3000
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — C:Program FilesDownload Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — C:Program FilesDownload Masterdmie.htm
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_03binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_03binssv.dll
O9 — Extra button: Create Mobile Favorite — {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} — C:PROGRA~1MICROS~3INetRepl.dll
O9 — Extra button: (no name) — {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} — C:PROGRA~1MICROS~3INetRepl.dll
O9 — Extra ‘Tools’ menuitem: Добавить в избранное мобильного устройства… — {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} — C:PROGRA~1MICROS~3INetRepl.dll
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: (no name) — cmdmapping — (no file) (HKCU)
O17 — HKLMSystemCCSServicesTcpip..{89A09740-EA4A-4EE7-9166-F67FF30597E8}: NameServer = 212.96.104.129 212.96.96.38
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — C:WINDOWSsystem32Ati2evxx.exe
O23 — Service: CbEvtSvc — Unknown owner — C:WINDOWSSystem32CbEvtSvc.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: NOD32 Kernel Service (NOD32krn) — Eset — C:Program FilesEsetnod32krn.exe
O23 — Service: NOD32 Patcher (nod32p) — Unknown owner — C:WINDOWSsystem32nod32p.exe
O23 — Service: PDK Debug Listener (pdkdebug) — ActiveState — C:Program FilesActiveState Perl Dev Kit 7.2binpdkdebug.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) — Analog Devices, Inc. — C:Program FilesAnalog DevicesSoundMAXSMAgent.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe—
End of file — 6402 bytes======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_03binssv.dll [2007-09-25 501136][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — C:PROGRA~1DOWNLO~1dmiehlp.dll [2007-07-20 152064][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«VolumeControl»=C:program filesVolumeControlvolume.exe [2003-09-15 36864]
«UnlockerAssistant»=C:Program FilesUnlockerUnlockerAssistant.exe [2006-09-07 15872]
«kX Mixer»=C:WINDOWSsystem32kxmixer.exe [2007-01-22 494592]
«SoundMAXPnP»=C:Program FilesAnalog DevicesSoundMAXSMax4PNP.exe [2003-05-29 790528]
«nod32kui»=C:Program FilesEsetnod32kui.exe [2008-06-21 949376]
«GhostWall»=C:Program FilesGhostWallghostwall.exe [2005-09-29 217088][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«VistaIcon»=C:Program FilesVistaDriveIconVistaDrv.exe [2007-07-02 132608]
«LClock»=C:Program FilesLClocklclock.exe [2007-12-14 86016]
«H/PC Connection Agent»=C:Program FilesMicrosoft ActiveSyncwcescomm.exe [2006-11-13 1289000][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWSsystem32Ati2evxx.dll [2007-08-22 122880][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32wpdshserviceobj.dll [2007-06-18 133632][HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalpsexesvc]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkpsexesvc]
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveAutoRun»=FFFFFFFF
«NoDriveTypeAutoRun»=36
«NoDrives»=0[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveAutoRun»=
«NoDriveTypeAutoRun»=
«NoDrives»=[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:Program FilesMicrosoft ActiveSyncrapimgr.exe»=»C:Program FilesMicrosoft ActiveSyncrapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager»
«C:Program FilesMicrosoft ActiveSyncwcescomm.exe»=»C:Program FilesMicrosoft ActiveSyncwcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager»
«C:Program FilesMicrosoft ActiveSyncWCESMgr.exe»=»C:Program FilesMicrosoft ActiveSyncWCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:Program FilesMicrosoft ActiveSyncrapimgr.exe»=»C:Program FilesMicrosoft ActiveSyncrapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager»
«C:Program FilesMicrosoft ActiveSyncwcescomm.exe»=»C:Program FilesMicrosoft ActiveSyncwcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager»
«C:Program FilesMicrosoft ActiveSyncWCESMgr.exe»=»C:Program FilesMicrosoft ActiveSyncWCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application»======List of files/folders created in the last 1 months======
2008-12-31 16:08:08 —-D—- C:_OTMoveIt
2008-12-31 16:04:47 —-RASHD—- C:autorun.inf
2008-12-30 20:16:28 —-D—- C:Avenger
2008-12-30 20:16:28 —-A—- C:avenger.txt
2008-12-30 19:41:50 —-D—- C:Program Filestrend micro
2008-12-30 19:41:49 —-D—- C:rsit
2008-12-30 18:54:58 —-D—- C:ComboFix
2008-12-30 18:54:58 —-A—- C:WINDOWSsystem32CF27427.exe
2008-12-30 18:40:38 —-A—- C:WINDOWSPSEXESVC.EXE
2008-12-30 18:37:05 —-A—- C:WINDOWSzip.exe
2008-12-30 18:37:05 —-A—- C:WINDOWSVFIND.exe
2008-12-30 18:37:05 —-A—- C:WINDOWSSWXCACLS.exe
2008-12-30 18:37:05 —-A—- C:WINDOWSSWSC.exe
2008-12-30 18:37:05 —-A—- C:WINDOWSSWREG.exe
2008-12-30 18:37:05 —-A—- C:WINDOWSsed.exe
2008-12-30 18:37:05 —-A—- C:WINDOWSNIRCMD.exe
2008-12-30 18:37:05 —-A—- C:WINDOWSgrep.exe
2008-12-30 18:37:05 —-A—- C:WINDOWSfdsv.exe
2008-12-30 18:36:53 —-D—- C:WINDOWSERDNT
2008-12-30 18:36:53 —-D—- C:Qoobox
2008-12-30 18:29:33 —-D—- C:Program FilesGhostWall
2008-12-07 22:35:11 —-A—- C:WINDOWSsystem32ub.exe
2008-12-02 16:43:52 —-D—- C:WINDOWSMinidump======List of files/folders modified in the last 1 months======
2008-12-31 16:13:00 —-D—- C:WINDOWSTemp
2008-12-31 16:09:24 —-A—- C:WINDOWSSchedLgU.Txt
2008-12-31 16:08:58 —-A—- C:WINDOWSWINCMD.INI
2008-12-31 16:08:14 —-D—- C:WINDOWSsystem32
2008-12-31 16:08:13 —-D—- C:WINDOWS
2008-12-31 15:52:40 —-D—- C:Program FilesAIMP2
2008-12-31 15:38:47 —-A—- C:WINDOWSNeroDigital.ini
2008-12-30 23:00:26 —-SHD—- C:WINDOWSInstaller
2008-12-30 23:00:22 —-D—- C:Program FilesOpera
2008-12-30 21:07:08 —-D—- C:WINDOWSsystem32CatRoot2
2008-12-30 20:24:56 —-A—- C:WINDOWSModemLog_Acorp Sprinter@56k Prime V.92 Modem.txt
2008-12-30 20:16:28 —-D—- C:WINDOWSsystem32drivers
2008-12-30 19:41:50 —-RD—- C:Program Files
2008-12-30 18:57:53 —-A—- C:WINDOWSsystem.ini
2008-12-30 18:56:48 —-D—- C:WINDOWSAppPatch
2008-12-30 18:56:48 —-D—- C:Program FilesCommon Files
2008-12-30 18:52:14 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2008-12-30 18:45:20 —-D—- C:WINDOWSSoftwareDistribution
2008-12-30 18:37:04 —-SHD—- C:System Volume Information
2008-12-30 18:37:04 —-D—- C:WINDOWSsystem32Restore
2008-12-30 18:25:07 —-D—- C:nod_upd
2008-12-25 21:38:50 —-RSHDC—- C:WINDOWSsystem32dllcache
2008-12-24 01:48:34 —-A—- C:WINDOWSModemLog_HTC USB Modem.txt
2008-12-12 21:52:20 —-D—- C:Apache
2008-12-10 10:08:38 —-D—- C:Program FilesQIP Infium======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2007-12-21 40448]
R1 nod32drv;nod32drv; C:WINDOWSsystem32driversnod32drv.sys [2008-06-21 15424]
R1 VD_FileDisk;VD_FileDisk; C:WINDOWSsystem32driversVD_FileDisk.sys [2005-04-16 15232]
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2004-08-18 12032]
R2 AMON;AMON; C:WINDOWSsystem32driversamon.sys [2008-06-21 512096]
R2 EIO;EIO; ??C:WINDOWSsystem32driversEIO.sys []
R2 ghstwall;ghstwall; ??C:WINDOWSsystem32driversghstwall.sys []
R2 mdmxsdk;mdmxsdk; C:WINDOWSsystem32DRIVERSmdmxsdk.sys [2005-05-04 9855]
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2006-12-04 62336]
R3 aeaudio;aeaudio; C:WINDOWSsystem32driversaeaudio.sys [2003-03-13 100224]
R3 Arp1394;Протокол клиента 1394 ARP; C:WINDOWSsystem32DRIVERSarp1394.sys [2007-12-21 60800]
R3 ati2mtag;ati2mtag; C:WINDOWSsystem32DRIVERSati2mtag.sys [2007-08-22 2417664]
R3 EL2000;3Com 3C2000x EtherLink XL Adapter; C:WINDOWSsystem32DRIVERSEL2K_XP.sys [2006-02-26 147456]
R3 kxwdmdrv;kX WDM Driver Service; C:WINDOWSsystem32driverskx.sys [2007-01-22 594944]
R3 MODEMCSA;Устройство фильтрации потока Unimodem; C:WINDOWSsystem32driversMODEMCSA.sys [2001-08-17 16128]
R3 NIC1394;Сетевой драйвер 1394; C:WINDOWSsystem32DRIVERSnic1394.sys [2007-12-21 61824]
R3 Pcatip;Pcatip; C:WINDOWSSystem32DRIVERSPcatip.sys [2008-06-05 68960]
R3 Pcouffin;Low level access layer for CD devices; C:WINDOWSSystem32DriversPcouffin.sys [2008-06-05 35936]
R3 smwdm;smwdm; C:WINDOWSsystem32driverssmwdm.sys [2003-06-02 578304]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2007-12-21 30208]
R3 usbhub;Драйвер стандартного концентратора USB (Microsoft); C:WINDOWSsystem32DRIVERSusbhub.sys [2007-12-22 59392]
R3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2007-12-21 26496]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2007-12-22 20608]
R3 Winachcf;Winachcf; C:WINDOWSsystem32DRIVERSwinachcf.sys [2005-05-04 917988]
S1 FileDisk;FileDisk; C:WINDOWSsystem32driversFileDisk.sys []
S3 catchme;catchme; ??C:ComboFixcatchme.sys []
S3 Dot4;Драйвер MS IEEE-1284.4; C:WINDOWSsystem32DRIVERSDot4.sys [2007-12-21 207360]
S3 Dot4Print;Драйвер класса принтеров для IEEE-1284.4; C:WINDOWSsystem32DRIVERSDot4Prt.sys [2001-08-17 12928]
S3 MidiSyn;MidiSyn; C:WINDOWSsystem32driversMidiSyn.sys [2002-09-20 235100]
S3 usb_rndisx;USB RNDIS Adapter; C:WINDOWSsystem32DRIVERSusb8023x.sys [2005-10-21 12800]
S3 usbser;USB Modem Driver; C:WINDOWSsystem32DRIVERSusbser.sys [2007-12-21 25600]
S3 wceusbsh;Windows CE USB Serial Host Driver; C:WINDOWSsystem32DRIVERSwceusbsh.sys [2006-11-06 28672]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2007-06-18 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2007-06-18 82944]======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSsystem32Ati2evxx.exe [2007-08-22 487424]
R2 NOD32krn;NOD32 Kernel Service; C:Program FilesEsetnod32krn.exe [2008-06-21 552064]
R2 nod32p;NOD32 Patcher; C:WINDOWSsystem32nod32p.exe [2005-04-24 414208]
R2 pdkdebug;PDK Debug Listener; C:Program FilesActiveState Perl Dev Kit 7.2binpdkdebug.exe [2008-03-28 118869]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:Program FilesAnalog DevicesSoundMAXSMAgent.exe [2002-09-20 45056]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2007-10-24 70144]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media Playerwmpnetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2004-08-18 14336]
EOF
