Здравствуйте.
Проблема возникла после обновления до последней версии.
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Марина at 2010-04-29 08:44:49
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 8 GB (24%) free of 33 GB
Total RAM: 383 MB (18% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:45:13, on 29.04.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSATK0100HControl.exe
C:Program FilesASUSPower4 GearBatteryLife.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe
C:Program FilesABBYY Lingvo 9.0 English-Russian DictionaryLvagent.exe
C:WINDOWSRTHDCPL.EXE
C:Program FilesESETESET Smart Securityegui.exe
C:Program FilesUnlockerUnlockerAssistant.exe
C:Program FilesBillP StudiosWinPatrolwinpatrol.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesLavalysEVEREST Ultimate Editioneverest.exe
C:Program FilesActual Reminder 3.0 Talk + WeatherActual Reminder.exe
C:Program FilesYandexPunto Switcherpunto.exe
C:Program FilesCachemanXPCachemanXP.exe
C:Program FilesESETESET Smart Securityekrn.exe
C:WINDOWSATK0100ATKOSD.exe
C:Program FilesIObitIObit Security 360IS360srv.exe
c:Program FilesCommon FilesLightScribeLSSrvc.exe
C:Program FilesnnCronnncron.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesnnCronnnguard.exe
C:WINDOWSSystem32alg.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:WINDOWSexplorer.exe
C:Documents and SettingsМарина.YOUR-96E5175A20Рабочий столRSIT.exe
C:WINDOWSsystem32wbemwmiprvse.exe
C:Program Filestrend microМарина.exe
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://ru.msn.com
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://search.qip.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://search.qip.ru/ie
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = Root: HKCU; Subkey: SoftwareMicrosoftInternet ExplorerSearchUrl; ValueType: string; ValueName: ‘; ValueData: ‘; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page =
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: QIPBHO Class — {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} — C:Documents and SettingsМарина.YOUR-96E5175A20Application DataMicrosoftInternet Explorerqipsearchbar.dll
R3 — URLSearchHook: (no name) — — (no file)
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: QIPBHO — {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} — C:Documents and SettingsМарина.YOUR-96E5175A20Application DataMicrosoftInternet Explorerqipsearchbar.dll
O4 — HKLM..Run: [HControl] C:WINDOWSATK0100HControl.exe
O4 — HKLM..Run: [Power_Gear] C:Program FilesASUSPower4 GearBatteryLife.exe 1
O4 — HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 — HKLM..Run: [ABLKSR] C:WINDOWSABLKSRABLKSR.exe
O4 — HKLM..Run: [ATIPTA] «C:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe»
O4 — HKLM..Run: [Lingvo Launcher] «C:Program FilesABBYY Lingvo 9.0 English-Russian DictionaryLvagent.exe» /STARTUP
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [egui] «C:Program FilesESETESET Smart Securityegui.exe» /hide /waitservice
O4 — HKLM..Run: [UnlockerAssistant] «C:Program FilesUnlockerUnlockerAssistant.exe»
O4 — HKLM..Run: [WinPatrol Russian v.2] C:Program FilesBillP StudiosWinPatrolwinpatrol.exe -expressboot
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [EVEREST AutoStart] C:Program FilesLavalysEVEREST Ultimate Editioneverest.exe
O4 — HKCU..Run: [AnVir Task Manager] «C:Program FilesAnVir Task ManagerAnVir.exe» Minimized
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — S-1-5-18 Startup: Actual Reminder.lnk = C:Program FilesActual Reminder 3.0 Talk + WeatherActual Reminder.exe (User ‘SYSTEM’)
O4 — S-1-5-18 Startup: Punto Switcher.lnk = C:Program FilesYandexPunto Switcherpunto.exe (User ‘SYSTEM’)
O4 — .DEFAULT Startup: Actual Reminder.lnk = C:Program FilesActual Reminder 3.0 Talk + WeatherActual Reminder.exe (User ‘Default user’)
O4 — .DEFAULT Startup: Punto Switcher.lnk = C:Program FilesYandexPunto Switcherpunto.exe (User ‘Default user’)
O4 — Startup: Actual Reminder.lnk = C:Program FilesActual Reminder 3.0 Talk + WeatherActual Reminder.exe
O4 — Startup: Punto Switcher.lnk = C:Program FilesYandexPunto Switcherpunto.exe
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra button: QIP Infium — {1EF681F7-A04B-4D6D-9012-A307CCA55610} — C:Program FilesQIP Infiuminfium.exe (HKCU)
O14 — IERESET.INF: START_PAGE_URL=http://www.asus.com
O16 — DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) — http://support.asus.com/common/asusTek_sys_ctrl.cab
O16 — DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) — http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1252497189875
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 — DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} — http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 — HKLMSystemCCSServicesTcpip..{0640B481-88FB-4099-BB62-8F25829CC8AB}: NameServer = 193.27.41.10 193.27.41.6
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — C:WINDOWSsystem32Ati2evxx.exe
O23 — Service: Automatic LiveUpdate Scheduler — Unknown owner — C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe (file missing)
O23 — Service: CachemanXP (CachemanXPService) — Outertech — C:Program FilesCachemanXPCachemanXP.exe
O23 — Service: ESET HTTP Server (EhttpSrv) — ESET — C:Program FilesESETESET Smart SecurityEHttpSrv.exe
O23 — Service: ESET Service (ekrn) — ESET — C:Program FilesESETESET Smart Securityekrn.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Сервис iPod (iPod Service) — Apple Inc. — C:Program FilesiPodbiniPodService.exe
O23 — Service: IS360service — IObit — C:Program FilesIObitIObit Security 360IS360srv.exe
O23 — Service: LightScribeService Direct Disc Labeling Service (LightScribeService) — Hewlett-Packard Company — c:Program FilesCommon FilesLightScribeLSSrvc.exe
O23 — Service: LiveUpdate — Unknown owner — C:PROGRA~1SymantecLIVEUP~1LUCOMS~1.EXE (file missing)
O23 — Service: nnCron — nnSoft — C:Program FilesnnCronnncron.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe
—
End of file — 9303 bytes
======Scheduled tasks folder======
C:WINDOWStasksAWC Update.job
C:WINDOWStasksGoogleUpdateTaskUserS-1-5-21-2736068670-3391171467-3012569936-1005Core.job
C:WINDOWStasksGoogleUpdateTaskUserS-1-5-21-2736068670-3391171467-3012569936-1005UA.job
C:WINDOWStasksSLOW-PCfighter.job
C:WINDOWStasksSmartDefrag.job
C:WINDOWStasksUser_Feed_Synchronization-{8B59D41A-515B-4801-93EB-22FBF9F95245}.job
======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class — C:Documents and SettingsМарина.YOUR-96E5175A20Application DataMicrosoftInternet Explorerqipsearchbar.dll [2009-10-05 150768]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«HControl»=C:WINDOWSATK0100HControl.exe [2006-02-23 106496]
«Power_Gear»=C:Program FilesASUSPower4 GearBatteryLife.exe [2006-03-14 90112]
«SynTPEnh»=C:Program FilesSynapticsSynTPSynTPEnh.exe [2005-10-21 761945]
«ABLKSR»=C:WINDOWSABLKSRABLKSR.exe [2006-01-02 61440]
«ATIPTA»=C:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe [2006-03-08 344064]
«Lingvo Launcher»=C:Program FilesABBYY Lingvo 9.0 English-Russian DictionaryLvagent.exe [2004-03-18 118784]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2006-11-14 16270848]
«Alcmtr»=C:WINDOWSALCMTR.EXE [2005-05-03 69632]
«egui»=C:Program FilesESETESET Smart Securityegui.exe [2009-09-11 2054360]
«UnlockerAssistant»=C:Program FilesUnlockerUnlockerAssistant.exe [2010-03-09 15872]
«WinPatrol Russian v.2″=C:Program FilesBillP StudiosWinPatrolwinpatrol.exe [2009-10-11 320832]
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-14 15360]
«EVEREST AutoStart»=C:Program FilesLavalysEVEREST Ultimate Editioneverest.exe [2009-05-25 2389600]
«AnVir Task Manager»=C:Program FilesAnVir Task ManagerAnVir.exe Minimized []
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregBrocopulse]
[]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregccApp]
[]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregIS CfgWiz]
[]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregiTunesHelper]
C:Program FilesiTunesiTunesHelper.exe [2008-09-10 289576]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregMSMSGS]
C:Program FilesMessengermsmsgs.exe [2008-04-14 1695232]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNet4Switch]
C:Program FilesASUSNet4SwitchNet4Switch.exe [2006-03-02 1101824]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSkyTel]
C:WINDOWSSkyTel.EXE [2006-05-16 2879488]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^ASUS ChkMail.lnk]
[]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigservices]
«PDEngine»=3
«PDAgent»=2
«MBAMService»=2
«Bonjour Service»=2
«Apple Mobile Device»=2
C:Documents and SettingsМарина.YOUR-96E5175A20Главное менюПрограммыАвтозагрузка
Actual Reminder.lnk — C:Program FilesActual Reminder 3.0 Talk + WeatherActual Reminder.exe
Punto Switcher.lnk — C:Program FilesYandexPunto Switcherpunto.exe
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWSsystem32Ati2evxx.dll [2006-03-08 61440]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«NoSMBalloonTip»=0
«NoDesktopCleanupWizard»=1
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«HonorAutoRunSetting»=
«NoResolveSearch»=
«NoDriveTypeAutoRun»=
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesBonjourmDNSResponder.exe»=»C:Program FilesBonjourmDNSResponder.exe:*:Enabled:Bonjour»
«C:Program FilesiTunesiTunes.exe»=»C:Program FilesiTunesiTunes.exe:*:Enabled:iTunes»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
«C:Program FilesOperaopera.exe»=»C:Program FilesOperaopera.exe:*:Enabled:Opera Internet Browser»
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
======List of files/folders created in the last 1 months======
2010-04-29 08:44:52 —-D—- C:Program Filestrend micro
2010-04-29 08:44:49 —-D—- C:rsit
2010-04-28 16:30:10 —-D—- C:Documents and SettingsМарина.YOUR-96E5175A20Application DataWinPatrol
2010-04-28 16:00:13 —-D—- C:Program FilesUnlocker
2010-04-26 08:40:48 —-D—- C:Program FilesBillP Studios
2010-04-22 18:39:59 —-D—- C:Сервисы Яндекса
2010-04-22 15:03:50 —-D—- C:Program FilesModTheSims2.com
2010-04-22 09:24:44 —-D—- C:Documents and SettingsМарина.YOUR-96E5175A20Application DataOpera
2010-04-22 09:23:38 —-D—- C:Program FilesOpera
2010-04-18 21:48:23 —-D—- C:Program FilesReviverSoft
2010-04-18 21:47:40 —-D—- C:Documents and SettingsAll UsersApplication DataReviverSoft
2010-04-18 19:45:36 —-D—- C:Documents and SettingsМарина.YOUR-96E5175A20Application DataActual Reminder
2010-04-18 19:45:03 —-D—- C:WINDOWSLhsp
2010-04-18 19:44:34 —-D—- C:WINDOWSspeech
2010-04-18 19:44:18 —-D—- C:Program FilesActual Reminder 3.0 Talk + Weather
2010-04-18 09:40:44 —-D—- C:Documents and SettingsМарина.YOUR-96E5175A20Application DataInstallShield
2010-04-16 20:44:57 —-HDC—- C:WINDOWS$NtUninstallKB978601$
2010-04-16 20:44:37 —-HDC—- C:WINDOWS$NtUninstallKB979402_WM9$
2010-04-16 20:37:34 —-HDC—- C:WINDOWS$NtUninstallKB979683$
2010-04-16 20:36:18 —-HDC—- C:WINDOWS$NtUninstallKB978338$
2010-04-16 20:35:59 —-HDC—- C:WINDOWS$NtUninstallKB979309$
2010-04-16 20:35:27 —-HDC—- C:WINDOWS$NtUninstallKB977816$
2010-04-16 20:35:04 —-HDC—- C:WINDOWS$NtUninstallKB980232$
2010-04-16 19:56:28 —-D—- C:Program FilesCachemanXP
======List of files/folders modified in the last 1 months======
2010-04-29 08:44:54 —-D—- C:WINDOWSTemp
2010-04-29 08:44:52 —-RD—- C:Program Files
2010-04-29 08:44:44 —-D—- C:WINDOWSPrefetch
2010-04-29 08:16:01 —-A—- C:WINDOWSSchedLgU.Txt
2010-04-29 08:00:58 —-D—- C:WINDOWSsystem32drivers
2010-04-29 08:00:26 —-D—- C:Program FilesnnCron
2010-04-28 23:14:00 —-D—- C:Program FilesAnVir Task Manager
2010-04-28 16:53:00 —-D—- C:WINDOWSsystem32CatRoot2
2010-04-28 16:21:46 —-D—- C:Program FilesCommon Files
2010-04-28 15:49:09 —-SHD—- C:WINDOWSInstaller
2010-04-28 15:48:58 —-SHD—- C:Config.Msi
2010-04-26 10:03:01 —-RASH—- C:boot.ini
2010-04-26 10:03:01 —-A—- C:WINDOWSwin.ini
2010-04-26 10:03:01 —-A—- C:WINDOWSsystem.ini
2010-04-26 09:46:53 —-D—- C:Documents and Settings
2010-04-26 09:31:52 —-D—- C:Program FilesRaxco
2010-04-26 09:16:02 —-D—- C:WINDOWSsystem32
2010-04-25 21:40:28 —-D—- C:Documents and SettingsМарина.YOUR-96E5175A20Application DatauTorrent
2010-04-22 10:11:51 —-D—- C:WINDOWSHelp
2010-04-19 12:42:37 —-D—- C:WINDOWSsystem32config
2010-04-19 12:25:51 —-D—- C:Documents and SettingsAll UsersApplication DataAshampoo
2010-04-19 09:47:28 —-SD—- C:WINDOWSTasks
2010-04-18 20:19:58 —-RSHD—- C:WINDOWSsystem32dllcache
2010-04-18 20:19:15 —-HD—- C:WINDOWSinf
2010-04-18 19:54:04 —-D—- C:WINDOWS
2010-04-18 19:45:12 —-RSD—- C:WINDOWSFonts
2010-04-18 11:54:38 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2010-04-18 09:48:29 —-HD—- C:Program FilesInstallShield Installation Information
2010-04-17 08:38:22 —-D—- C:Program FilesInternet Explorer
2010-04-16 20:44:47 —-A—- C:WINDOWSimsins.BAK
2010-04-16 20:37:05 —-HD—- C:WINDOWS$hf_mig$
2010-04-16 20:35:44 —-D—- C:WINDOWSie8updates
2010-04-16 20:19:52 —-D—- C:Program FilesMozilla Firefox
2010-04-16 19:29:45 —-A—- C:WINDOWSNeroDigital.ini
2010-04-06 21:52:54 —-A—- C:WINDOWSsystem32MRT.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 ehdrv;ehdrv; C:WINDOWSsystem32DRIVERSehdrv.sys [2009-09-11 108792]
R1 epfwtdi;epfwtdi; C:WINDOWSsystem32DRIVERSepfwtdi.sys [2009-09-11 55768]
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-14 40704]
R2 DefragFS;DefragFS; C:WINDOWSsystem32driversDefragFS.sys [2009-08-20 73232]
R2 eamon;eamon; C:WINDOWSsystem32DRIVERSeamon.sys [2009-09-11 116008]
R2 epfw;epfw; C:WINDOWSsystem32DRIVERSepfw.sys [2009-09-11 135048]
R2 irda;ИК-протокол IrDA; C:WINDOWSsystem32DRIVERSirda.sys [2008-04-13 88192]
R3 ati2mtag;ati2mtag; C:WINDOWSsystem32DRIVERSati2mtag.sys [2006-03-08 1506816]
R3 CmBatt;Драйвер AC-адаптера блока питания (Майкрософт); C:WINDOWSsystem32DRIVERSCmBatt.sys [2008-04-13 13952]
R3 Epfwndis;Eset Personal Firewall; C:WINDOWSsystem32DRIVERSEpfwndis.sys [2009-06-19 33096]
R3 EverestDriver;Lavalys EVEREST Kernel Driver; ??C:Program FilesLavalysEVEREST Ultimate Editionkerneld.wnt []
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:WINDOWSsystem32DRIVERSGEARAspiWDM.sys [2008-04-17 15464]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2006-11-15 4225920]
R3 irsir;Драйвер для инфракрасного последовательного порта Microsoft; C:WINDOWSsystem32DRIVERSirsir.sys [2001-08-17 18688]
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-19 12160]
R3 MTsensor;ATK0100 ACPI UTILITY; C:WINDOWSsystem32DRIVERSATKACPI.sys [2007-08-28 5760]
R3 Rasirda;Минипорт WAN (IrDA); C:WINDOWSsystem32DRIVERSrasirda.sys [2001-08-17 19584]
R3 rimsptsk;rimsptsk; C:WINDOWSsystem32DRIVERSrimsptsk.sys [2005-07-12 51328]
R3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtnicxp.sys [2006-01-18 80512]
R3 smserial;smserial; C:WINDOWSsystem32DRIVERSsmserial.sys [2006-01-20 862340]
R3 SynTP;Synaptics TouchPad Driver; C:WINDOWSsystem32DRIVERSSynTP.sys [2005-10-21 191936]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-13 30208]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-13 59520]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2008-04-13 17152]
S1 eeCtrl;Symantec Eraser Control driver; ??C:Program FilesCommon FilesSymantec SharedEENGINEeeCtrl.sys []
S1 kbdhid;Драйвер клавиатуры HID; C:WINDOWSsystem32DRIVERSkbdhid.sys [2008-04-14 14720]
S3 ipswuio;ipswuio; C:WINDOWSSystem32DRIVERSipswuio.sys [2006-01-24 34944]
S3 MBAMProtector;MBAMProtector; ??C:WINDOWSsystem32driversmbam.sys []
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet адаптер, драйвер для NT; C:WINDOWSsystem32DRIVERSRTL8139.SYS [2004-08-03 20992]
S3 SONYPVU1;Драйвер Sony USB фильтра (SONYPVU1); C:WINDOWSsystem32DRIVERSSONYPVU1.SYS [2001-08-17 7552]
S3 USBAAPL;Apple Mobile USB Driver; C:WINDOWSSystem32Driversusbaapl.sys [2008-09-10 32000]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-13 32128]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-13 15104]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-13 26368]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSsystem32Ati2evxx.exe [2006-03-08 405504]
R2 CachemanXPService;CachemanXP; C:Program FilesCachemanXPCachemanXP.exe [2009-05-24 316416]
R2 ekrn;ESET Service; C:Program FilesESETESET Smart Securityekrn.exe [2009-09-11 735960]
R2 Irmon;Монитор инфракрасной связи; C:WINDOWSsystem32svchost.exe [2008-04-14 14336]
R2 IS360service;IS360service; C:Program FilesIObitIObit Security 360IS360srv.exe [2009-12-24 311568]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; c:Program FilesCommon FilesLightScribeLSSrvc.exe [2006-04-24 73728]
R2 nnCron;nnCron; C:Program FilesnnCronnncron.exe [2006-03-21 408576]
S2 Automatic LiveUpdate Scheduler;Automatic LiveUpdate Scheduler; C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe []
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:Program FilesESETESET Smart SecurityEHttpSrv.exe [2009-09-11 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-07-29 881664]
S3 iPod Service;Сервис iPod; C:Program FilesiPodbiniPodService.exe [2008-09-10 536872]
S3 LiveUpdate;LiveUpdate; C:PROGRA~1SymantecLIVEUP~1LUCOMS~1.EXE []
S4 Apple Mobile Device;Apple Mobile Device; C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe [2008-09-10 116040]
S4 Bonjour Service;Bonjour Service; C:Program FilesBonjourmDNSResponder.exe [2008-08-29 238888]
S4 MBAMService;MBAMService; C:Program FilesMalwarebytes’ Anti-Malwarembamservice.exe [2010-03-30 303952]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-07-29 132096]
S4 PDAgent;PDAgent; C:Program FilesRaxcoPerfectDisk10PDAgent.exe [2010-01-26 939272]
S4 PDEngine;PDEngine; C:Program FilesRaxcoPerfectDisk10PDEngine.exe [2010-01-26 1033480]
EOF
