СПАСИБО — ОГРОМНОЕ! Заставка пропала.
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9D64F819-9380-8473-DAB2-702FCB3D7A3E}\ not found.
========== FILES ==========
File/Folder C:Documents and SettingsАдминистраторApplication Databpfeed.dll not found.
========== COMMANDS ==========
User’s Temp folder emptied.
User’s Internet Explorer cache folder emptied.
File delete failed. C:Documents and SettingsАдминистраторLocal SettingsTemporary Internet FilesContent.IE5W5ABS3Q5readmsg[1].htm scheduled to be deleted on reboot.
File delete failed. C:Documents and SettingsАдминистраторLocal SettingsTemporary Internet FilesContent.IE580S2UMEFindex[1].htm scheduled to be deleted on reboot.
File delete failed. C:Documents and SettingsАдминистраторLocal SettingsTemporary Internet FilesContent.IE5R78XATI1sense[1].htm scheduled to be deleted on reboot.
File delete failed. C:Documents and SettingsАдминистраторLocal SettingsTemporary Internet FilesContent.IE5R78XATI1viewtopic[1].php scheduled to be deleted on reboot.
File delete failed. C:Documents and SettingsАдминистраторLocal SettingsTemporary Internet FilesContent.IE5index.dat scheduled to be deleted on reboot.
User’s Temporary Internet Files folder emptied.
Local Service Temp folder emptied.
File delete failed. C:Documents and SettingsLocalServiceLocal SettingsTemporary Internet FilesContent.IE5index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
Network Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Temp folders emptied.
Explorer started successfully
OTMoveIt3 by OldTimer — Version 1.0.11.0 log created on 05072009_191702
Files moved on Reboot…
C:Documents and SettingsАдминистраторLocal SettingsTemporary Internet FilesContent.IE5W5ABS3Q5readmsg[1].htm moved successfully.
C:Documents and SettingsАдминистраторLocal SettingsTemporary Internet FilesContent.IE580S2UMEFindex[1].htm moved successfully.
C:Documents and SettingsАдминистраторLocal SettingsTemporary Internet FilesContent.IE5R78XATI1sense[1].htm moved successfully.
C:Documents and SettingsАдминистраторLocal SettingsTemporary Internet FilesContent.IE5R78XATI1viewtopic[1].php moved successfully.
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Администратор at 2009-05-07 19:31:42
Microsoft Windows XP Professional Service Pack 2
System drive C: has 17 GB (70%) free of 25 GB
Total RAM: 2047 MB (80% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:31:44, on 07.05.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32spoolsv.exe
D:ИгрыСтрелялкиMedal of Honor AirborneMOHAAIRBUnrealEngine3MOHAGamepbPnkBstrA.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32wscntfy.exe
C:WINDOWSnotepad.exe
C:WINDOWSRTHDCPL.EXE
C:Program FilesWinampwinampa.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.EXE
C:Program FilesATI TechnologiesATI.ACECore-Staticccc.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesInternet Exploreriexplore.exe
C:Documents and SettingsАдминистраторРабочий столRSIT.exe
C:Program Filestrend microАдминистратор.exe
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.APEHA.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:Program FilesAgentMradllnewmrasearch.dll (file missing)
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — c:program filesgooglegoogletoolbar1.dll
O3 — Toolbar: &Google — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — c:program filesgooglegoogletoolbar1.dll
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [SkyTel] SkyTel.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [NeroFilterCheck] C:Program FilesCommon FilesAheadLibNeroCheck.exe
O4 — HKLM..Run: [WinampAgent] «C:Program FilesWinampwinampa.exe»
O4 — HKLM..Run: [ISUSPM] «C:Program FilesCommon FilesInstallShieldUpdateServiceISUSPM.exe» -scheduler
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 9.0ReaderReader_sl.exe»
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [StartCCC] C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Startup: Пиринговая сеть.lnk = C:Program FilesApexDCApexDC.exe
O8 — Extra context menu item: &Google Search — res://C:Program FilesGoogleGoogleToolbar1.dll/cmsearch.html
O8 — Extra context menu item: Backward Links — res://C:Program FilesGoogleGoogleToolbar1.dll/cmbacklinks.html
O8 — Extra context menu item: Cached Snapshot of Page — res://C:Program FilesGoogleGoogleToolbar1.dll/cmcache.html
O8 — Extra context menu item: Similar Pages — res://C:Program FilesGoogleGoogleToolbar1.dll/cmsimilar.html
O8 — Extra context menu item: Translate into English — res://C:Program FilesGoogleGoogleToolbar1.dll/cmtrans.html
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O12 — Plugin for .spop: C:Program FilesInternet ExplorerPluginsNPDocBox.dll
O17 — HKLMSystemCCSServicesTcpip..{9461F6EA-4D2A-4E75-9882-77DDCF11FD0E}: NameServer = 88.147.129.15 88.147.128.17
O23 — Service: Application Driver Auto Removal Service (01) (appdrvrem01) — Protection Technology — C:WINDOWSSystem32appdrvrem01.exe
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — C:WINDOWSsystem32Ati2evxx.exe
O23 — Service: ATI Smart — Unknown owner — C:WINDOWSsystem32ati2sgag.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: NBService — Nero AG — C:Program FilesNeroNero 7Nero BackItUpNBService.exe
O23 — Service: NMIndexingService — Nero AG — C:Program FilesCommon FilesAheadLibNMIndexingService.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: PunkBuster (PnkBstrA) — Unknown owner — D:ИгрыСтрелялкиMedal of Honor AirborneMOHAAIRBUnrealEngine3MOHAGamepbPnkBstrA.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe
—
End of file — 5802 bytes
======Scheduled tasks folder======
C:WINDOWStasksAppleSoftwareUpdate.job
======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2008-06-11 61816]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2008-06-11 75128]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — c:program filesgooglegoogletoolbar1.dll [2009-04-12 720896]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — &Google — c:program filesgooglegoogletoolbar1.dll [2009-04-12 720896]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2006-12-19 16062464]
«SkyTel»=C:WINDOWSSkyTel.EXE [2006-05-16 2879488]
«Alcmtr»=C:WINDOWSALCMTR.EXE [2005-05-03 69632]
«NeroFilterCheck»=C:Program FilesCommon FilesAheadLibNeroCheck.exe [2006-01-12 155648]
«WinampAgent»=C:Program FilesWinampwinampa.exe [2009-01-22 36352]
«ISUSPM»=C:Program FilesCommon FilesInstallShieldUpdateServiceISUSPM.exe -scheduler []
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2008-06-12 34672]
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2004-08-18 15360]
«»= []
«StartCCC»=C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2006-11-10 90112]
C:Documents and SettingsАдминистраторГлавное менюПрограммыАвтозагрузка
Пиринговая сеть.lnk — C:Program FilesApexDCApexDC.exe
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWSsystem32Ati2evxx.dll [2007-03-15 114688]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetwork{1a3e09be-1e45-494b-9174-d7385b45bbf5}]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
«C:Program FilesInterVideoDVD8WinDVD.exe»=»C:Program FilesInterVideoDVD8WinDVD.exe:*:Enabled:WinDVD»
«C:Program FilesApexDCApexDC.exe»=»C:Program FilesApexDCApexDC.exe:*:Enabled:ApexDC++»
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{e48fa281-2383-11de-9d4a-806d6172696f}]
shellAutoRuncommand — I:Setup.exe
======List of files/folders created in the last 1 months======
2009-05-07 19:17:02 —-D—- C:_OTMoveIt
2009-05-05 20:34:11 —-A—- C:WINDOWSCastleMalloy.INI
2009-05-05 20:31:45 —-D—- C:WINDOWSProfiles
2009-05-05 20:31:44 —-D—- C:WINDOWSsystem32Adobe
2009-05-05 20:31:44 —-D—- C:Documents and SettingsАдминистраторApplication DataInterTrust
2009-05-05 20:28:18 —-D—- C:Documents and SettingsАдминистраторApplication DataInstallShield
2009-05-04 18:24:14 —-D—- C:rsit
2009-05-04 18:24:14 —-D—- C:Program Filestrend micro
2009-05-04 16:33:21 —-D—- C:Documents and SettingsАдминистраторApplication DataMra
2009-05-04 15:19:25 —-A—- C:WINDOWSWORDPAD.INI
2009-05-04 14:58:01 —-D—- C:Program FilesAgent
2009-04-26 12:56:47 —-D—- C:Program FilesDirectX
2009-04-26 12:56:47 —-A—- C:WINDOWSsystem32ATL80.dll
2009-04-26 12:56:47 —-A—- C:WINDOWSsystem32atl71.dll
2009-04-26 12:56:46 —-A—- C:WINDOWSsystem32mfc80KOR.dll
2009-04-26 12:56:46 —-A—- C:WINDOWSsystem32mfc80JPN.dll
2009-04-26 12:56:46 —-A—- C:WINDOWSsystem32mfc80ITA.dll
2009-04-26 12:56:46 —-A—- C:WINDOWSsystem32mfc80FRA.dll
2009-04-26 12:56:46 —-A—- C:WINDOWSsystem32mfc80ESP.dll
2009-04-26 12:56:46 —-A—- C:WINDOWSsystem32mfc80ENU.dll
2009-04-26 12:56:46 —-A—- C:WINDOWSsystem32mfc80DEU.dll
2009-04-26 12:56:46 —-A—- C:WINDOWSsystem32mfc80CHT.dll
2009-04-26 12:56:46 —-A—- C:WINDOWSsystem32mfc80CHS.dll
2009-04-26 12:56:46 —-A—- C:WINDOWSsystem32mfc80.dll
2009-04-26 12:56:45 —-A—- C:WINDOWSsystem32mfcm80u.dll
2009-04-26 12:56:45 —-A—- C:WINDOWSsystem32mfcm80.dll
2009-04-26 12:56:45 —-A—- C:WINDOWSsystem32mfc80u.dll
2009-04-26 12:56:44 —-A—- C:WINDOWSsystem32OpenALwEAX.exe
2009-04-26 12:56:43 —-A—- C:WINDOWSsystem32vcomp.dll
2009-04-26 12:53:31 —-N—- C:WINDOWSsystem32iyvu9_32.dll
2009-04-26 12:53:31 —-D—- C:Program FilesLigos
2009-04-26 12:53:31 —-A—- C:WINDOWSsystem32iacenc.dll
2009-04-26 10:11:03 —-A—- C:WINDOWSPhotoSnapViewer.INI
2009-04-20 19:31:25 —-A—- C:WINDOWSsystem32zlib1.dll
2009-04-20 19:31:25 —-A—- C:WINDOWSsystem32vorbisfile.dll
2009-04-20 19:31:25 —-A—- C:WINDOWSsystem32vorbis.dll
2009-04-20 19:31:25 —-A—- C:WINDOWSsystem32ogg.dll
2009-04-20 19:31:24 —-A—- C:WINDOWSsystem32ode.dll
2009-04-20 19:31:24 —-A—- C:WINDOWSsystem32libtheora.dll
2009-04-20 19:31:24 —-A—- C:WINDOWSsystem32libpng13.dll
2009-04-20 19:31:24 —-A—- C:WINDOWSsystem32alut.dll
2009-04-16 21:48:14 —-D—- C:WINDOWSMinidump
2009-04-15 16:36:35 —-A—- C:WINDOWSsystem32XAudio2_3.dll
2009-04-15 16:36:35 —-A—- C:WINDOWSsystem32XAPOFX1_2.dll
2009-04-15 16:36:35 —-A—- C:WINDOWSsystem32xactengine3_3.dll
2009-04-15 16:36:35 —-A—- C:WINDOWSsystem32D3DX9_40.dll
2009-04-15 16:36:35 —-A—- C:WINDOWSsystem32d3dx10_40.dll
2009-04-15 16:36:35 —-A—- C:WINDOWSsystem32D3DCompiler_40.dll
2009-04-15 16:36:34 —-A—- C:WINDOWSsystem32X3DAudio1_5.dll
2009-04-14 21:54:56 —-A—- C:WINDOWSIsUninst.exe
2009-04-13 22:40:17 —-D—- C:Documents and SettingsАдминистраторApplication DataPGP
2009-04-12 21:56:00 —-A—- C:WINDOWSsystem32appdrvrem01.exe
2009-04-12 17:56:17 —-D—- C:Documents and SettingsАдминистраторApplication DataAdobe
2009-04-12 17:54:47 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
2009-04-12 17:54:44 —-D—- C:Program FilesCommon FilesAdobe
2009-04-12 17:54:44 —-D—- C:Program FilesAdobe
2009-04-12 17:54:18 —-D—- C:Program FilesXvid
2009-04-12 17:54:18 —-A—- C:WINDOWSsystem32xvidvfw.dll
2009-04-12 17:54:18 —-A—- C:WINDOWSsystem32xvidcore.dll
2009-04-12 17:53:20 —-A—- C:WINDOWSsystem32XAudio2_2.dll
2009-04-12 17:53:20 —-A—- C:WINDOWSsystem32XAPOFX1_1.dll
2009-04-12 17:53:20 —-A—- C:WINDOWSsystem32xactengine3_2.dll
2009-04-12 17:53:20 —-A—- C:WINDOWSsystem32D3DX9_39.dll
2009-04-12 17:53:20 —-A—- C:WINDOWSsystem32d3dx10_39.dll
2009-04-12 17:53:20 —-A—- C:WINDOWSsystem32D3DCompiler_39.dll
2009-04-12 17:53:19 —-A—- C:WINDOWSsystem32XAudio2_1.dll
2009-04-12 17:53:19 —-A—- C:WINDOWSsystem32XAudio2_0.dll
2009-04-12 17:53:19 —-A—- C:WINDOWSsystem32XAPOFX1_0.dll
2009-04-12 17:53:19 —-A—- C:WINDOWSsystem32xactengine3_1.dll
2009-04-12 17:53:19 —-A—- C:WINDOWSsystem32xactengine3_0.dll
2009-04-12 17:53:19 —-A—- C:WINDOWSsystem32X3DAudio1_4.dll
2009-04-12 17:53:19 —-A—- C:WINDOWSsystem32X3DAudio1_3.dll
2009-04-12 17:53:19 —-A—- C:WINDOWSsystem32D3DX9_38.dll
2009-04-12 17:53:19 —-A—- C:WINDOWSsystem32d3dx10_38.dll
2009-04-12 17:53:19 —-A—- C:WINDOWSsystem32d3dx10_37.dll
2009-04-12 17:53:19 —-A—- C:WINDOWSsystem32D3DCompiler_38.dll
2009-04-12 17:53:19 —-A—- C:WINDOWSsystem32D3DCompiler_37.dll
2009-04-12 17:53:18 —-A—- C:WINDOWSsystem32xactengine2_9.dll
2009-04-12 17:53:18 —-A—- C:WINDOWSsystem32xactengine2_10.dll
2009-04-12 17:53:18 —-A—- C:WINDOWSsystem32D3DX9_37.dll
2009-04-12 17:53:18 —-A—- C:WINDOWSsystem32d3dx9_36.dll
2009-04-12 17:53:18 —-A—- C:WINDOWSsystem32d3dx9_35.dll
2009-04-12 17:53:18 —-A—- C:WINDOWSsystem32d3dx10_36.dll
2009-04-12 17:53:18 —-A—- C:WINDOWSsystem32d3dx10_35.dll
2009-04-12 17:53:18 —-A—- C:WINDOWSsystem32D3DCompiler_36.dll
2009-04-12 17:53:18 —-A—- C:WINDOWSsystem32D3DCompiler_35.dll
2009-04-12 17:53:17 —-A—- C:WINDOWSsystem32xinput1_3.dll
2009-04-12 17:53:17 —-A—- C:WINDOWSsystem32xactengine2_8.dll
2009-04-12 17:53:17 —-A—- C:WINDOWSsystem32X3DAudio1_2.dll
2009-04-12 17:53:17 —-A—- C:WINDOWSsystem32d3dx9_34.dll
2009-04-12 17:53:17 —-A—- C:WINDOWSsystem32d3dx10_34.dll
2009-04-12 17:53:17 —-A—- C:WINDOWSsystem32D3DCompiler_34.dll
2009-04-12 17:53:16 —-A—- C:WINDOWSsystem32xactengine2_7.dll
2009-04-12 17:53:16 —-A—- C:WINDOWSsystem32d3dx10_33.dll
2009-04-12 17:53:16 —-A—- C:WINDOWSsystem32D3DCompiler_33.dll
2009-04-12 17:53:15 —-A—- C:WINDOWSsystem32xactengine2_6.dll
2009-04-12 17:53:15 —-A—- C:WINDOWSsystem32xactengine2_5.dll
2009-04-12 17:53:15 —-A—- C:WINDOWSsystem32xactengine2_4.dll
2009-04-12 17:53:15 —-A—- C:WINDOWSsystem32x3daudio1_1.dll
2009-04-12 17:53:15 —-A—- C:WINDOWSsystem32d3dx9_33.dll
2009-04-12 17:53:15 —-A—- C:WINDOWSsystem32d3dx9_32.dll
2009-04-12 17:53:14 —-A—- C:WINDOWSsystem32xinput1_2.dll
2009-04-12 17:53:14 —-A—- C:WINDOWSsystem32xinput1_1.dll
2009-04-12 17:53:14 —-A—- C:WINDOWSsystem32xactengine2_3.dll
2009-04-12 17:53:14 —-A—- C:WINDOWSsystem32xactengine2_2.dll
2009-04-12 17:53:14 —-A—- C:WINDOWSsystem32xactengine2_1.dll
2009-04-12 17:53:14 —-A—- C:WINDOWSsystem32d3dx9_31.dll
2009-04-12 17:53:10 —-A—- C:WINDOWSsystem32xinput9_1_0.dll
2009-04-12 17:53:10 —-A—- C:WINDOWSsystem32xactengine2_0.dll
2009-04-12 17:53:10 —-A—- C:WINDOWSsystem32x3daudio1_0.dll
2009-04-12 17:53:02 —-D—- C:WINDOWSLogs
2009-04-12 17:52:31 —-D—- C:WINDOWSsystem32AGEIA
2009-04-12 17:52:31 —-D—- C:Program FilesAGEIA Technologies
2009-04-12 17:51:56 —-D—- C:Program FilesCommon FilesWise Installation Wizard
2009-04-12 13:13:46 —-RA—- C:WINDOWSsystem32DivXc32f.dll
2009-04-12 13:13:46 —-RA—- C:WINDOWSsystem32DivXc32.dll
2009-04-12 12:57:00 —-D—- C:WINDOWSsystem32appmgmt
2009-04-12 12:53:05 —-D—- C:Documents and SettingsАдминистраторApplication DataInterVideo
2009-04-12 12:51:34 —-D—- C:Program FilesApple Software Update
2009-04-12 12:51:28 —-D—- C:Documents and SettingsAll UsersApplication DataApple Computer
2009-04-12 12:51:04 —-D—- C:Program FilesCommon FilesUlead
2009-04-12 12:50:42 —-D—- C:Documents and SettingsAll UsersApplication DataInstallShield
2009-04-12 12:47:18 —-D—- C:Program FilesSuperDVD Player 5.0
2009-04-12 12:44:21 —-D—- C:Program FilesGoogle
2009-04-12 12:40:56 —-D—- C:WINDOWSDownloaded Installations
2009-04-12 12:31:48 —-D—- C:Program FilesCyberLink
2009-04-12 12:18:12 —-N—- C:WINDOWSsystem32vxblock.dll
2009-04-12 12:18:12 —-N—- C:WINDOWSsystem32pxwave.dll
2009-04-12 12:18:12 —-N—- C:WINDOWSsystem32pxsfs.dll
2009-04-12 12:18:12 —-N—- C:WINDOWSsystem32pxmas.dll
2009-04-12 12:18:12 —-N—- C:WINDOWSsystem32pxinsa64.exe
2009-04-12 12:18:12 —-N—- C:WINDOWSsystem32pxhpinst.exe
2009-04-12 12:18:12 —-N—- C:WINDOWSsystem32pxdrv.dll
2009-04-12 12:18:12 —-N—- C:WINDOWSsystem32pxcpya64.exe
2009-04-12 12:18:12 —-N—- C:WINDOWSsystem32pxafs.dll
2009-04-12 12:18:12 —-N—- C:WINDOWSsystem32px.dll
2009-04-12 12:18:10 —-D—- C:Program FilesWinamp
2009-04-12 12:18:10 —-D—- C:Documents and SettingsАдминистраторApplication DataWinamp
2009-04-12 12:06:11 —-D—- C:Documents and SettingsАдминистраторApplication DataCyberLink
2009-04-12 12:04:34 —-D—- C:Documents and SettingsAll UsersApplication DataCyberLink
2009-04-12 12:04:31 —-D—- C:Program FilesCommon FilesCyberLink
2009-04-12 12:03:53 —-D—- C:Documents and SettingsAll UsersApplication DataTemp
2009-04-11 22:35:20 —-A—- C:WINDOWSNeroDigital.ini
2009-04-11 21:30:31 —-D—- C:Program FilesuTorrent
2009-04-11 21:30:30 —-D—- C:Documents and SettingsАдминистраторApplication DatauTorrent
2009-04-11 21:30:05 —-D—- C:Program FilesApexDC
2009-04-08 07:34:14 —-D—- C:Documents and SettingsАдминистраторApplication DataMacromedia
======List of files/folders modified in the last 1 months======
2009-05-07 19:17:14 —-A—- C:WINDOWSSchedLgU.Txt
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AmdK8;Драйвер AMD процессора; C:WINDOWSsystem32DRIVERSAmdK8.sys [2006-07-01 43520]
R1 appdrv01;Application Driver (01); C:WINDOWSSystem32Driversappdrv01.sys [2009-04-12 2997872]
R2 irda;ИК-протокол IrDA; C:WINDOWSsystem32DRIVERSirda.sys [2004-08-03 87424]
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2006-12-04 62336]
R3 ati2mtag;ati2mtag; C:WINDOWSsystem32DRIVERSati2mtag.sys [2007-03-15 1986560]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2005-12-26 138752]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2006-12-21 4405248]
R3 irsir;Драйвер для инфракрасного последовательного порта Microsoft; C:WINDOWSsystem32DRIVERSirsir.sys [2001-08-17 18688]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:WINDOWSsystem32DRIVERSNVENETFD.sys [2006-09-11 57856]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:WINDOWSsystem32DRIVERSnvnetbus.sys [2006-09-11 19968]
R3 Rasirda;Минипорт WAN (IrDA); C:WINDOWSsystem32DRIVERSrasirda.sys [2001-08-17 19584]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2007-03-28 30208]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2007-03-28 59264]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2007-03-28 17152]
R3 usbstor;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-18 26496]
S3 GMSIPCI;GMSIPCI; ??I:INSTALLGMSIPCI.SYS []
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []
S4 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2004-08-18 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSsystem32Ati2evxx.exe [2007-03-15 450560]
R2 Irmon;Монитор инфракрасной связи; C:WINDOWSsystem32svchost.exe [2004-08-18 14336]
R2 PnkBstrA;PunkBuster; D:ИгрыСтрелялкиMedal of Honor AirborneMOHAAIRBUnrealEngine3MOHAGamepbPnkBstrA.exe [2007-08-15 63040]
S2 appdrvrem01;Application Driver Auto Removal Service (01); C:WINDOWSSystem32appdrvrem01.exe [2009-04-12 316816]
S2 ATI Smart;ATI Smart; C:WINDOWSsystem32ati2sgag.exe [2007-03-22 520192]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 NBService;NBService; C:Program FilesNeroNero 7Nero BackItUpNBService.exe [2007-01-15 774144]
S3 NMIndexingService;NMIndexingService; C:Program FilesCommon FilesAheadLibNMIndexingService.exe [2007-01-15 266240]
S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2006-11-03 914944]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2004-08-18 14336]
EOF
