Logfile of random’s system information tool 1.06 (written by random/random)
Run by Дом at 2010-04-24 16:03:42
Microsoft Windows XP Professional Service Pack 2
System drive E: has 1 GB (13%) free of 11 GB
Total RAM: 1023 MB (60% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:03:49, on 24.04.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
E:WINDOWSSystem32smss.exe
E:WINDOWSsystem32winlogon.exe
E:WINDOWSsystem32services.exe
E:WINDOWSsystem32lsass.exe
E:WINDOWSsystem32nvsvc32.exe
E:WINDOWSsystem32svchost.exe
E:WINDOWSSystem32svchost.exe
E:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
E:Program FilesAlwil SoftwareAvast4ashServ.exe
E:WINDOWSsystem32spoolsv.exe
E:WINDOWSExplorer.EXE
E:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe
E:PROGRA~1ALWILS~1Avast4ashDisp.exe
E:WINDOWSsystem32RUNDLL32.EXE
E:WINDOWSRTHDCPL.EXE
E:WINDOWSsystem32ctfmon.exe
E:Program Files2gisUpdateClientWin32UpdateClientService.exe
E:Program FilesBonjourmDNSResponder.exe
C:Program FilesAlcohol 120StarWindStarWindService.exe
E:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
E:Program FilesAlwil SoftwareAvast4ashWebSv.exe
E:WINDOWSsystem32wscntfy.exe
E:Program FilesInternet Exploreriexplore.exe
E:WINDOWSsystem32wuauclt.exe
E:Program FilesInternet Exploreriexplore.exe
E:Program FilesInternet Exploreriexplore.exe
E:Documents and SettingsДомРабочий столRSIT.exe
E:Program Filestrend microДом.exe
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://www.slizone.com/
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
F2 — REG:system.ini: UserInit=E:WINDOWSsystem32userinit.exe,E:WINDOWSsystem32b40732a3.exe,\?globalrootsystemrootsystem32M1XlVfJ.exe,
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — E:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: PROMT — {1F13CE11-4FAC-49A9-8155-D4F3F0F91A33} — D:Program FilesPRMT9PRMTIEprmtie.dll
O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — (no file)
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program Filesbinjp2ssv.dll (file missing)
O3 — Toolbar: Переводчик PROMT — {C7DDDD27-F303-42A5-B979-51559F7DC0F0} — D:Program FilesPRMT9PRMTIEprmtie.dll
O4 — HKLM..Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 — HKLM..Run: [ISUSPM Startup] «E:Program FilesCommon FilesInstallShieldUpdateServiceisuspm.exe» -startup
O4 — HKLM..Run: [ISUSScheduler] «E:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe» -start
O4 — HKLM..Run: [avast!] E:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobRider9.0ReaderReader_sl.exe»
O4 — HKLM..Run: [nwiz] E:Program FilesNVIDIA CorporationnViewnwiz.exe /install
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE E:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE E:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [UserFaultCheck] %systemroot%system32dumprep 0 -u
O4 — HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 — HKCU..Run: [ctfmon.exe] E:WINDOWSsystem32ctfmon.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] E:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] E:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] E:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] E:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Startup: Adobe Gamma.lnk = E:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://D:PROGRA~1MICROS~1OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: Настроить параметры перевода — D:Program FilesPRMT9PRMTIEoptions.htm
O8 — Extra context menu item: Перевести всю страницу — D:Program FilesPRMT9PRMTIEpage.htm
O8 — Extra context menu item: Перевести выделенный текст — D:Program FilesPRMT9PRMTIEtranslat.htm
O8 — Extra context menu item: Перевести поисковый запрос — D:Program FilesPRMT9PRMTIEsearch.htm
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — D:PROGRA~1MICROS~1OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — E:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — E:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — E:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — E:Program FilesMessengermsmsgs.exe
O17 — HKLMSystemCCSServicesTcpip..{3BB837E6-771B-416C-8AE3-E491A7D08621}: NameServer = 85.113.62.227 85.113.63.252
O17 — HKLMSystemCS1ServicesTcpip..{3BB837E6-771B-416C-8AE3-E491A7D08621}: NameServer = 85.113.62.227 85.113.63.252
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — E:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O23 — Service: 2GIS UpdateClientService — ДубльГИС — E:Program Files2gisUpdateClientWin32UpdateClientService.exe
O23 — Service: Adobe LM Service — Adobe Systems — E:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe
O23 — Service: Application Driver Auto Removal Service (01) (appdrvrem01) — Protection Technology — E:WINDOWSSystem32appdrvrem01.exe
O23 — Service: avast! iAVS4 Control Service (aswUpdSv) — ALWIL Software — E:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 — Service: avast! Antivirus — ALWIL Software — E:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 — Service: avast! Mail Scanner — ALWIL Software — E:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 — Service: avast! Web Scanner — ALWIL Software — E:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 — Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) — Apple Computer, Inc. — E:Program FilesBonjourmDNSResponder.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — E:WINDOWSsystem32services.exe
O23 — Service: FLEXnet Licensing Service — Macrovision Europe Ltd. — E:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — E:WINDOWSsystem32imapi.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — E:WINDOWSsystem32mnmsrvc.exe
O23 — Service: NVIDIA Display Driver Service (nvsvc) — NVIDIA Corporation — E:WINDOWSsystem32nvsvc32.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — E:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — E:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — E:WINDOWSSystem32SCardSvr.exe
O23 — Service: StarWind iSCSI Service (StarWindService) — Rocket Division Software — C:Program FilesAlcohol 120StarWindStarWindService.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — E:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — E:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — E:WINDOWSsystem32wbemwmiapsrv.exe
—
End of file — 8272 bytes
======Scheduled tasks folder======
E:WINDOWStasksUser_Feed_Synchronization-{69C096C9-3137-48E7-BD0D-6C3970780652}.job
======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — E:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{1F13CE11-4FAC-49A9-8155-D4F3F0F91A33}]
Promt IE Helper — D:Program FilesPRMT9PRMTIEprmtie.dll [2010-01-12 1136008]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program Filesbinjp2ssv.dll []
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{C7DDDD27-F303-42A5-B979-51559F7DC0F0} — Переводчик PROMT — D:Program FilesPRMT9PRMTIEprmtie.dll [2010-01-12 1136008]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«High Definition Audio Property Page Shortcut»=E:WINDOWSsystem32HDAShCut.exe [2005-01-07 61952]
«ISUSPM Startup»=E:Program FilesCommon FilesInstallShieldUpdateServiceisuspm.exe [2005-08-11 249856]
«ISUSScheduler»=E:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe [2005-08-11 81920]
«avast!»=E:PROGRA~1ALWILS~1Avast4ashDisp.exe [2009-11-25 81000]
«Adobe Reader Speed Launcher»=C:Program FilesAdobRider9.0ReaderReader_sl.exe [2009-02-27 35696]
«nwiz»=E:Program FilesNVIDIA CorporationnViewnwiz.exe [2009-07-09 1657376]
«NvCplDaemon»=E:WINDOWSsystem32NvCpl.dll [2009-07-14 13877248]
«NvMediaCenter»=E:WINDOWSsystem32NvMcTray.dll [2009-07-14 86016]
«RTHDCPL»=E:WINDOWSRTHDCPL.EXE [2005-09-22 14854144]
«Alcmtr»=E:WINDOWSALCMTR.EXE [2005-05-03 69632]
«UserFaultCheck»=E:WINDOWSsystem32dumprep 0 -u []
«KernelFaultCheck»=E:WINDOWSsystem32dumprep 0 -k []
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«ctfmon.exe»=E:WINDOWSsystem32ctfmon.exe [2004-08-18 15360]
E:Documents and SettingsДомГлавное менюПрограммыАвтозагрузка
Adobe Gamma.lnk — E:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«DisableTaskMgr»=0
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«HonorAutoRunSetting»=
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«E:Program FilesuTorrentuTorrent.exe»=»E:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
«D:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbinxrEngine.exe»=»D:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbinxrEngine.exe:*:Enabled:С.Т.А.Л.К.Е.Р. — Чистое Небо (CLI)»
«D:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbindedicatedxrEngine.exe»=»D:Program FilesGSC World PublishingС.Т.А.Л.К.Е.Р. — Чистое НебоbindedicatedxrEngine.exe:*:Enabled:С.Т.А.Л.К.Е.Р. — Чистое Небо (SRV)»
«D:Program FilesGSC World PublishingS.T.A.L.K.E.R. — Зов ПрипятиbinxrEngine.exe»=»D:Program FilesGSC World PublishingS.T.A.L.K.E.R. — Зов ПрипятиbinxrEngine.exe:*:Enabled:S.T.A.L.K.E.R. — Зов Припяти (CLI)»
«D:Program FilesGSC World PublishingS.T.A.L.K.E.R. — Зов ПрипятиbindedicatedxrEngine.exe»=»D:Program FilesGSC World PublishingS.T.A.L.K.E.R. — Зов ПрипятиbindedicatedxrEngine.exe:*:Enabled:S.T.A.L.K.E.R. — Зов Припяти (SRV)»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«E:Program FilesSharemanShareman.exe»=»E:Program FilesSharemanShareman.exe:*:Enabled:Shareman»
«E:Program FilesBonjourmDNSResponder.exe»=»E:Program FilesBonjourmDNSResponder.exe:*:Enabled:Bonjour»
«D:CyberSant-AKTIVATORSharemanShareman.exe»=»D:CyberSant-AKTIVATORSharemanShareman.exe:*:Enabled:Shareman»
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{c34c7d8a-e72a-11de-b09f-0013d3dad564}]
shellAutoRuncommand — ZolanderPolandabox.exe
shellopencommand — ZolanderPolandabox.exe
======List of files/folders created in the last 1 months======
2010-04-24 15:11:04 —-A—- E:WINDOWSsystem32u8X3vO6.exe
2010-04-23 22:28:36 —-A—- E:WINDOWSsystem32mdimon.dll
2010-04-23 22:27:19 —-D—- E:WINDOWSSHELLNEW
2010-04-23 22:27:15 —-D—- E:Program FilesMicrosoft.NET
2010-04-23 18:22:00 —-A—- E:WINDOWSsystem32OurrWhh.exe
2010-04-23 12:53:26 —-A—- E:WINDOWSsystem3295pJVEH.exe
2010-04-22 17:44:06 —-A—- E:WINDOWSsystem32LG9GdWh.exe
2010-04-22 16:29:08 —-A—- E:WINDOWSsystem329XQEpI7.exe
2010-04-21 13:02:16 —-A—- E:WINDOWSsystem32S4stsQ0.exe
2010-04-20 13:48:10 —-A—- E:WINDOWSsystem32ZeuAKOX.exe
2010-04-19 12:54:49 —-A—- E:WINDOWSsystem32TKsrc89.exe
2010-04-18 13:04:50 —-A—- E:WINDOWSsystem32PEzyyzU.exe
2010-04-17 16:29:19 —-D—- E:Program Filestrend micro
2010-04-17 16:29:18 —-D—- E:rsit
2010-04-17 13:27:49 —-A—- E:WINDOWSsystem32dD4NXqa.exe
2010-04-16 16:50:54 —-A—- E:WINDOWSsystem32YsNnuVH.exe
2010-04-15 20:18:16 —-A—- E:WINDOWSsystem32kV1OCFY.exe
2010-04-15 01:47:23 —-A—- E:WINDOWSsystem32U0BsGN5.exe
2010-04-14 18:21:08 —-A—- E:WINDOWSsystem32meZskJN.exe
2010-04-14 01:14:15 —-HDC—- E:WINDOWS$NtUninstallKB979683$
2010-04-14 01:14:08 —-HDC—- E:WINDOWS$NtUninstallKB980232$
2010-04-14 01:12:45 —-HDC—- E:WINDOWS$NtUninstallKB978338$
2010-04-14 01:12:41 —-HDC—- E:WINDOWS$NtUninstallKB977816$
2010-04-14 01:12:36 —-HDC—- E:WINDOWS$NtUninstallKB978601$
2010-04-14 01:12:16 —-HDC—- E:WINDOWS$NtUninstallKB979309$
2010-04-14 01:11:52 —-HDC—- E:WINDOWS$NtUninstallKB979402_WM9L$
2010-04-13 19:06:36 —-A—- E:WINDOWSsystem324z04JN7.exe
2010-04-12 20:22:15 —-A—- E:WINDOWSsystem32VHQp1MC.exe
2010-04-11 13:00:40 —-A—- E:WINDOWSsystem32mmJw3QK.exe
2010-04-11 12:52:41 —-A—- E:WINDOWSntbtlog.txt
2010-04-11 12:32:04 —-A—- E:WINDOWSsystem3218CEyDB.exe
2010-04-11 00:08:44 —-D—- E:Documents and SettingsAll UsersApplication DataMalwarebytes
2010-04-10 14:37:00 —-D—- E:Documents and SettingsAll UsersApplication DataKaspersky Lab Setup Files
2010-04-10 14:31:32 —-A—- E:WINDOWSsystem32LfvP0JS.exe
2010-04-10 14:09:25 —-A—- E:WINDOWSsystem32sno86J5.exe
2010-04-10 13:13:59 —-A—- E:WINDOWSsystem32kbKqqsd.exe
2010-04-10 00:49:28 —-A—- E:WINDOWSsystem32zjgH0Vu.exe
2010-04-09 21:50:35 —-A—- E:WINDOWSsystem32uUk3b0d.exe
2010-04-09 20:49:13 —-A—- E:WINDOWSsystem32ljA0nWG.exe
2010-04-09 17:58:47 —-A—- E:WINDOWSsystem32ar6E7t0.exe
2010-04-09 13:12:50 —-A—- E:WINDOWSsystem32DwByPiM.exe
2010-04-08 16:16:31 —-A—- E:WINDOWSsystem32grMShvP.exe
2010-04-08 16:11:46 —-D—- E:Documents and SettingsДомApplication DataPRMT
2010-04-08 16:04:42 —-D—- E:Documents and SettingsДомApplication DataPROMT
2010-04-08 16:02:11 —-D—- E:WINDOWSspeech
2010-04-08 16:00:27 —-D—- E:Program FilesCommon FilesSkype
2010-04-08 16:00:01 —-D—- E:WINDOWSLhsp
2010-04-08 16:00:01 —-D—- E:Documents and SettingsAll UsersApplication DataPROMT
2010-04-08 13:05:13 —-A—- E:WINDOWSsystem32vEG1eM7.exe
2010-04-07 22:00:49 —-A—- E:WINDOWSsystem32jq06pwP.exe
2010-04-07 18:57:30 —-A—- E:WINDOWSsystem32P1NSreD.exe
2010-04-07 17:16:52 —-A—- E:WINDOWSsystem32TXGcTM8.exe
2010-04-07 11:56:39 —-A—- E:WINDOWSsystem32tZweXVl.exe
2010-04-07 03:18:07 —-A—- E:WINDOWSsystem32bi4H3WG.exe
2010-04-06 14:50:53 —-A—- E:WINDOWSsystem323vJFcZX.exe
2010-04-05 12:46:36 —-A—- E:WINDOWSsystem32hBYHpPi.exe
2010-04-04 14:47:44 —-A—- E:WINDOWSsystem32YG4krqT.exe
2010-04-04 03:23:14 —-A—- E:WINDOWSsystem32xERYsGw.exe
2010-04-04 03:22:49 —-A—- E:WINDOWSsystem32M1XlVfJ.exe
2010-04-03 21:55:17 —-A—- E:WINDOWSsystem32b40732a3.exe
2010-03-25 17:11:10 —-D—- E:Program FilesCommon FilesCorel
======List of files/folders modified in the last 1 months======
2010-04-24 15:15:40 —-AC—- E:Program FilesCommon Fileskeylog.txt
2010-04-24 15:11:04 —-D—- E:WINDOWSsystem32
2010-04-24 15:10:13 —-D—- E:WINDOWSTemp
2010-04-24 14:02:46 —-D—- E:WINDOWSPrefetch
2010-04-24 01:36:19 —-A—- E:WINDOWSSchedLgU.Txt
2010-04-23 22:28:42 —-SHD—- E:WINDOWSInstaller
2010-04-23 22:28:41 —-SHD—- E:Config.Msi
2010-04-23 22:28:40 —-AC—- E:WINDOWSODBC.INI
2010-04-23 22:28:31 —-RSD—- E:WINDOWSassembly
2010-04-23 22:28:24 —-A—- E:WINDOWSwin.ini
2010-04-23 22:28:12 —-D—- E:Program FilesCommon FilesMicrosoft Shared
2010-04-23 22:28:10 —-RSD—- E:WINDOWSFonts
2010-04-23 22:27:35 —-HD—- E:WINDOWSinf
2010-04-23 22:27:20 —-D—- E:Program FilesCommon FilesSystem
2010-04-23 22:27:19 —-D—- E:WINDOWS
2010-04-23 22:27:15 —-RD—- E:Program Files
2010-04-23 22:19:35 —-D—- E:WINDOWSsystem
2010-04-23 18:05:58 —-D—- E:WINDOWSsystem32Lang
2010-04-23 18:00:18 —-D—- E:Program FilesCommon FilesDesigner
2010-04-22 20:20:46 —-D—- E:WINDOWSsystem32CatRoot2
2010-04-21 02:27:30 —-D—- E:Documents and SettingsДомApplication DatauTorrent
2010-04-20 11:01:40 —-D—- E:Program FilesuTorrent
2010-04-14 01:14:19 —-RSHDC—- E:WINDOWSsystem32dllcache
2010-04-14 01:14:12 —-HD—- E:WINDOWS$hf_mig$
2010-04-14 01:14:10 —-D—- E:WINDOWSsystem32drivers
2010-04-14 01:14:10 —-A—- E:WINDOWSimsins.BAK
2010-04-11 12:30:18 —-SD—- E:WINDOWSTasks
2010-04-10 00:38:19 —-D—- E:WINDOWSsystem32CatRoot
2010-04-10 00:38:03 —-D—- E:WINDOWSsystem32CatRoot_bak
2010-04-08 16:02:04 —-D—- E:WINDOWSmsagent
2010-04-08 16:02:04 —-D—- E:WINDOWSHelp
2010-04-08 16:00:27 —-D—- E:Program FilesCommon Files
2010-04-06 21:52:54 —-A—- E:WINDOWSsystem32MRT.exe
2010-04-04 12:10:18 —-SHD—- E:System Volume Information
2010-04-04 12:10:18 —-D—- E:WINDOWSsystem32Restore
2010-03-31 02:15:52 —-D—- E:Program FilesInternet Explorer
2010-03-28 12:33:01 —-AC—- E:WINDOWSsystem32PerfStringBackup.INI
2010-03-26 19:28:37 —-D—- E:Program FilesWindows Media Player
2010-03-25 17:12:55 —-D—- E:WINDOWSWinSxS
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; E:WINDOWSsystem32driversAavmker4.sys [2009-11-25 27408]
R1 AmdK8;Драйвер AMD процессора; E:WINDOWSsystem32DRIVERSAmdK8.sys [2006-07-01 43520]
R1 appdrv01;Application Driver (01); E:WINDOWSSystem32Driversappdrv01.sys [2009-10-25 3069040]
R1 aswSP;avast! Self Protection; E:WINDOWSsystem32driversaswSP.sys [2009-11-25 114768]
R1 aswTdi;avast! Network Shield Support; E:WINDOWSsystem32driversaswTdi.sys [2009-11-25 48560]
R2 aswFsBlk;aswFsBlk; E:WINDOWSsystem32DRIVERSaswFsBlk.sys [2009-11-25 20560]
R2 aswMon2;avast! Standard Shield Support; E:WINDOWSsystem32driversaswMon2.sys [2009-11-25 94160]
R3 aswRdr;aswRdr; E:WINDOWSsystem32driversaswRdr.sys [2009-11-25 23120]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; E:WINDOWSsystem32DRIVERSHDAudBus.sys [2005-01-07 138752]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); E:WINDOWSsystem32driversRtkHDAud.sys [2005-09-23 3966976]
R3 nv;nv; E:WINDOWSsystem32DRIVERSnv4_mini.sys [2009-07-14 7741664]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet адаптер, драйвер для NT; E:WINDOWSsystem32DRIVERSRTL8139.SYS [2004-08-04 20992]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; E:WINDOWSsystem32DRIVERSusbehci.sys [2004-08-18 26624]
R3 usbhub;USB2 концентратор; E:WINDOWSsystem32DRIVERSusbhub.sys [2004-08-18 57600]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; E:WINDOWSsystem32DRIVERSusbohci.sys [2004-08-18 17024]
R3 vaxscsi;vaxscsi; E:WINDOWSSystem32Driversvaxscsi.sys [2009-12-03 223128]
S3 GMSIPCI;GMSIPCI; ??F:INSTALLGMSIPCI.SYS []
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; E:WINDOWSsystem32driversHdAudio.sys [2005-01-07 145920]
S3 USBSTOR;Драйвер запоминающих устройств для USB; E:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-04 26496]
S4 IntelIde;IntelIde; E:WINDOWSsystem32driversIntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 2GIS UpdateClientService;2GIS UpdateClientService; E:Program Files2gisUpdateClientWin32UpdateClientService.exe [2008-09-17 1134592]
R2 aswUpdSv;avast! iAVS4 Control Service; E:Program FilesAlwil SoftwareAvast4aswUpdSv.exe [2009-11-25 18752]
R2 avast! Antivirus;avast! Antivirus; E:Program FilesAlwil SoftwareAvast4ashServ.exe [2009-11-25 138680]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; E:Program FilesBonjourmDNSResponder.exe [2006-02-28 229376]
R2 nvsvc;NVIDIA Display Driver Service; E:WINDOWSsystem32nvsvc32.exe [2009-07-14 168004]
R2 StarWindService;StarWind iSCSI Service; C:Program FilesAlcohol 120StarWindStarWindService.exe [2005-04-02 217600]
R3 avast! Mail Scanner;avast! Mail Scanner; E:Program FilesAlwil SoftwareAvast4ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; E:Program FilesAlwil SoftwareAvast4ashWebSv.exe [2009-11-25 352920]
S2 appdrvrem01;Application Driver Auto Removal Service (01); E:WINDOWSSystem32appdrvrem01.exe [2009-10-25 316816]
S3 Adobe LM Service;Adobe LM Service; E:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe [2009-08-09 72704]
S3 aspnet_state;Служба состояний ASP.NET; E:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; E:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; E:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe [2010-01-26 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; E:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; E:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; E:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S4 NetTcpPortSharing;Служба общего доступа к портам Net.Tcp; E:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-07-29 132096]
EOF
