Re: Re: Помогите проверить комп!!!!

28 апреля, 2010 в 9:33 пп #25687

Participant

Темы:1
Сообщений:7

☆

Logfile of random’s system information tool 1.06 (written by random/random)
Run by Алексей at 2010-04-29 01:29:14
Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (49%) free of 20 GB
Total RAM: 1023 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:29:18, on 29.04.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesAlwil SoftwareAvast5AvastSvc.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
C:Program FilesBonjourmDNSResponder.exe
d:Program FilesCDBurnerXPNMSAccessU.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32wuauclt.exe
C:WINDOWSsystem32userinit.exe
C:Program FilesGoogleUpdateGoogleUpdate.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32RunDll32.exe
C:WINDOWSsystem32RUNDLL32.EXE
D:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:WINDOWSPixArtPAC7302Monitor.exe
C:Program FilesVKSaverVKSaverUpdater.exe
C:PROGRA~1ALWILS~1Avast5avastUI.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesVistaDriveIconVistaDrv.exe
C:Program FilesMcAfee Security Scan2.0.181SSScheduler.exe
C:Program FilesUniblueSpeedUpMyPClauncher.exe
C:Documents and SettingsАлексейРабочий столRSIT.exe
C:Program Filestrend microАлексей.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://start.qip.ru/
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://search.qip.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=40316
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://search.qip.ru/ie
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = Root: HKCU; Subkey: SoftwareMicrosoftInternet ExplorerSearchUrl; ValueType: string; ValueName: ‘; ValueData: ‘; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Windows Internet Explorer предоставлен: QIP.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: QIPBHO Class — {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} — C:Program FilesInternet Explorerqipsearchbar.dll
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_06binssv.dll
O2 — BHO: MyAshampoo Toolbar — {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} — C:Program FilesMyAshampootbMyAs.dll
O2 — BHO: QIPBHO — {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} — C:Program FilesInternet Explorerqipsearchbar.dll
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O2 — BHO: SkypeIEPluginBHO — {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.5.4723.1820swg.dll
O2 — BHO: Ask Toolbar BHO — {D4027C7F-154A-4066-A1AD-4243D8127440} — C:Program FilesAsk.comGenericAskToolbar.dll
O3 — Toolbar: Google Toolbar — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O3 — Toolbar: Ask Toolbar — {D4027C7F-154A-4066-A1AD-4243D8127440} — C:Program FilesAsk.comGenericAskToolbar.dll
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O3 — Toolbar: MyAshampoo Toolbar — {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} — C:Program FilesMyAshampootbMyAs.dll
O4 — HKLM..Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [nwiz] nwiz.exe /install
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [RemoteControl] «D:Program FilesCyberLinkPowerDVDPDVDServ.exe»
O4 — HKLM..Run: [PAC7302_Monitor] C:WINDOWSPixArtPAC7302Monitor.exe
O4 — HKLM..Run: [VKSaverUpdater] C:Program FilesVKSaverVKSaverUpdater.exe
O4 — HKLM..Run: [AppleSyncNotifier] C:Program FilesCommon FilesAppleMobile Device SupportAppleSyncNotifier.exe
O4 — HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 — HKLM..Run: [avast5] C:PROGRA~1ALWILS~1Avast5avastUI.exe /nogui
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Global Startup: McAfee Security Scan Plus.lnk = ?
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://D:PROGRA~1MICROS~1OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: Google ВикиКомментарии… — res://C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra button: Skype add-on for Internet Explorer — {898EA8C8-E7FF-479B-8935-AEC46303B9E5} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O9 — Extra ‘Tools’ menuitem: Skype add-on for Internet Explorer — {898EA8C8-E7FF-479B-8935-AEC46303B9E5} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — D:PROGRA~1MICROS~1OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: QIP 2005 — {1EF681F7-A04B-4D6D-9012-A307CCA55610} — d:Program FilesQIPqip.exe (HKCU)
O16 — DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} — http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 — Protocol: skype-ie-addon-data — {91774881-D725-4E58-B298-07617B9B86A8} — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 — AppInit_DLLs: C:WINDOWSsystem32vksaver.dll
O22 — SharedTaskScheduler: Windows DreamScene — {E31004D1-A431-41B8-826F-E902F9D95C81} — C:WINDOWSSystem32DreamScene.dll
O23 — Service: Apple Mobile Device — Apple Inc. — C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
O23 — Service: avast! Antivirus — ALWIL Software — C:Program FilesAlwil SoftwareAvast5AvastSvc.exe
O23 — Service: avast! Mail Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast5AvastSvc.exe
O23 — Service: avast! Web Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast5AvastSvc.exe
O23 — Service: Служба Bonjour (Bonjour Service) — Apple Inc. — C:Program FilesBonjourmDNSResponder.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба Google Update (gupdate) (gupdate) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Сервис iPod (iPod Service) — Apple Inc. — C:Program FilesiPodbiniPodService.exe
O23 — Service: McAfee Security Scan Component Host Service (McComponentHostService) — McAfee, Inc. — C:Program FilesMcAfee Security Scan2.0.181McCHSvc.exe
O23 — Service: NMSAccess — Unknown owner — d:Program FilesCDBurnerXPNMSAccessU.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 9959 bytes

======Scheduled tasks folder======

C:WINDOWStasksAppleSoftwareUpdate.job
C:WINDOWStasksGoogleUpdateTaskMachineCore.job
C:WINDOWStasksGoogleUpdateTaskMachineUA.job
C:WINDOWStasksScheduled Update for Ask Toolbar.job
C:WINDOWStasksUser_Feed_Synchronization-{0ACF9482-4895-4506-BAC9-59F52DB7F845}.job
C:WINDOWStasksUser_Feed_Synchronization-{EC548424-45CB-4529-AE4C-5EAE7101C7D4}.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_06binssv.dll [2008-03-25 509328]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}]
MyAshampoo Toolbar — C:Program FilesMyAshampootbMyAs.dll [2009-12-31 2349080]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class — C:Program FilesInternet Explorerqipsearchbar.dll [2009-07-09 150768]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-03-23 279664]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer — C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier5.5.4723.1820swg.dll [2010-03-23 812528]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar — C:Program FilesAsk.comGenericAskToolbar.dll [2010-01-20 1197448]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2010-03-23 279664]
{D4027C7F-154A-4066-A1AD-4243D8127440} — Ask Toolbar — C:Program FilesAsk.comGenericAskToolbar.dll [2010-01-20 1197448]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2010-04-14 10318152]
{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} — MyAshampoo Toolbar — C:Program FilesMyAshampootbMyAs.dll [2009-12-31 2349080]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«Cmaudio»=RunDll32 cmicnfg.cpl,CMICtrlWnd []
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2007-12-05 8523776]
«nwiz»=nwiz.exe /install []
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2007-12-05 81920]
«RemoteControl»=D:Program FilesCyberLinkPowerDVDPDVDServ.exe [2003-10-31 32768]
«PAC7302_Monitor»=C:WINDOWSPixArtPAC7302Monitor.exe [2006-11-03 319488]
«VKSaverUpdater»=C:Program FilesVKSaverVKSaverUpdater.exe [2010-03-06 56832]
«AppleSyncNotifier»=C:Program FilesCommon FilesAppleMobile Device SupportAppleSyncNotifier.exe [2010-03-16 47392]
«NeroFilterCheck»=C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
«avast5″=C:PROGRA~1ALWILS~1Avast5avastUI.exe [2010-04-14 2790472]
«Amazing3DAquariumWallpaper»= []

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-25 17408]
«VistaIcon»=C:Program FilesVistaDriveIconVistaDrv.exe [2008-03-23 132096]

C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
McAfee Security Scan Plus.lnk — C:Program FilesMcAfee Security Scan2.0.181SSScheduler.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLS»=»C:WINDOWSsystem32vksaver.dll»

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2008-03-21 133632]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionexplorerSharedTaskScheduler]
Windows DreamScene — {E31004D1-A431-41B8-826F-E902F9D95C81} — C:WINDOWSSystem32DreamScene.dll [2009-05-12 233888]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«SynchronousMachineGroupPolicy»=0
«SynchronousUserGroupPolicy»=0
«EnableLUA»=0

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«NoThumbnailCache»=1
«NoSMConfigurePrograms»=1
«NoSMHelp»=1

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

======List of files/folders created in the last 1 months======

2010-04-28 22:03:12 —-D—- C:Documents and SettingsАлексейApplication DataGaijin Ent
2010-04-28 01:22:10 —-HDC—- C:WINDOWSie8
2010-04-28 00:38:48 —-D—- C:Documents and SettingsАлексейApplication DataMedia Player Classic
2010-04-28 00:26:22 —-D—- C:rsit
2010-04-28 00:26:22 —-D—- C:Program Filestrend micro
2010-04-28 00:07:38 —-D—- C:Documents and SettingsАлексейApplication DataMacromedia
2010-04-28 00:07:38 —-D—- C:Documents and SettingsАлексейApplication DataIdentities
2010-04-28 00:07:38 —-D—- C:Documents and SettingsАлексейApplication DataAdobe
2010-04-27 23:21:57 —-D—- C:Documents and SettingsАлексейApplication DataUniblue
2010-04-27 23:04:55 —-D—- C:Documents and SettingsАлексейApplication DataGoogle
2010-04-27 22:30:29 —-ASH—- C:Documents and SettingsАлексейApplication Datadesktop.ini
2010-04-27 22:30:27 —-SD—- C:Documents and SettingsАлексейApplication DataMicrosoft
2010-04-27 22:09:28 —-D—- C:Config.Msi
2010-04-27 21:44:40 —-D—- C:Program Filescandle_1600x1200
2010-04-27 21:34:12 —-D—- C:Program Filesrain_1600x1200
2010-04-27 21:32:44 —-D—- C:Program Fileswave_1600x1200
2010-04-27 20:45:37 —-A—- C:WINDOWSsystem32DreamScene.dll
2010-04-27 01:07:18 —-A—- C:WINDOWSsystem32RtNicProp32.dll
2010-04-27 00:38:01 —-HDC—- C:WINDOWS$NtUninstallKB958644$
2010-04-26 23:03:59 —-D—- C:Program FilesUniblue
2010-04-26 21:58:14 —-A—- C:WINDOWSsystem32aswBoot.exe
2010-04-26 21:07:42 —-A—- C:WINDOWSsystem32pwn2.exe
2010-04-26 20:54:36 —-D—- C:Program FilesAlwil Software
2010-04-26 20:54:36 —-D—- C:Documents and SettingsAll UsersApplication DataAlwil Software
2010-04-23 00:09:14 —-A—- C:WINDOWSsystem32msxml4r.dll
2010-04-23 00:09:14 —-A—- C:WINDOWSsystem32msxml4a.dll
2010-04-23 00:09:14 —-A—- C:WINDOWSsystem32msxml4.dll
2010-04-22 23:11:31 —-HDC—- C:WINDOWS$NtUninstallKB915865$
2010-04-22 23:07:43 —-D—- C:Documents and SettingsAll UsersApplication DataWindows Genuine Advantage
2010-04-19 00:38:48 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
2010-04-19 00:38:45 —-D—- C:Program FilesCommon FilesAdobe AIR
2010-04-16 21:03:55 —-D—- C:VKontakteDJ
2010-04-14 00:53:28 —-A—- C:WINDOWSNeroDigital.ini
2010-04-11 22:08:36 —-N—- C:WINDOWSsystem32ImagXRA7.dll
2010-04-11 22:08:36 —-N—- C:WINDOWSsystem32ImagXR7.dll
2010-04-11 22:08:36 —-N—- C:WINDOWSsystem32ImagXpr7.dll
2010-04-11 22:08:36 —-N—- C:WINDOWSsystem32ImagX7.dll
2010-04-11 22:08:36 —-D—- C:Program FilesCommon FilesAhead
2010-04-11 22:08:36 —-A—- C:WINDOWSsystem32TwnLib20.dll
2010-04-11 22:08:36 —-A—- C:WINDOWSsystem32NeroCheck.exe
2010-04-11 21:24:21 —-D—- C:Program FilesConduit
2010-04-11 21:24:20 —-D—- C:Program FilesMyAshampoo
2010-04-11 21:24:04 —-D—- C:Documents and SettingsAll UsersApplication Dataashampoo
2010-04-08 10:37:02 —-A—- C:WINDOWSsystem32rmoc3260.dll
2010-04-08 10:37:02 —-A—- C:WINDOWSsystem32pncrt.dll
2010-04-07 01:27:14 —-D—- C:Documents and SettingsAll UsersApplication DataFarmFrenzy3
2010-03-31 22:45:34 —-D—- C:Program FilesiPod
2010-03-31 22:45:23 —-D—- C:Documents and SettingsAll UsersApplication Data{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-03-31 22:40:27 —-D—- C:Program FilesQuickTime
2010-03-31 22:38:11 —-D—- C:WINDOWSSxsCaPendDel
2010-03-31 22:31:51 —-D—- C:Program FilesBonjour
2010-03-30 10:05:47 —-D—- C:Documents and SettingsAll UsersApplication DataCanneverbe Limited

======List of files/folders modified in the last 1 months======

2010-04-29 01:29:10 —-D—- C:WINDOWSPrefetch
2010-04-29 01:29:03 —-D—- C:WINDOWSTemp
2010-04-29 01:23:00 —-D—- C:WINDOWSsystem32
2010-04-29 01:23:00 —-D—- C:WINDOWS
2010-04-28 20:56:53 —-A—- C:WINDOWSSchedLgU.Txt
2010-04-28 02:53:28 —-D—- C:WINDOWSsystem32CatRoot2
2010-04-28 01:26:56 —-D—- C:WINDOWSsystem32ru-ru
2010-04-28 01:26:55 —-RSHDC—- C:WINDOWSsystem32dllcache
2010-04-28 01:26:55 —-HD—- C:WINDOWSinf
2010-04-28 01:26:55 —-D—- C:WINDOWSMedia
2010-04-28 01:26:55 —-D—- C:WINDOWSHelp
2010-04-28 01:26:55 —-D—- C:Program FilesInternet Explorer
2010-04-28 00:59:07 —-SHD—- C:WINDOWSInstaller
2010-04-28 00:58:57 —-D—- C:Program FilesCommon FilesAdobe
2010-04-28 00:56:01 —-SD—- C:WINDOWSTasks
2010-04-28 00:52:44 —-A—- C:WINDOWSODBC.INI
2010-04-28 00:52:05 —-D—- C:WINDOWSsystem32CatRoot
2010-04-28 00:26:22 —-RD—- C:Program Files
2010-04-28 00:20:03 —-SHD—- C:RECYCLER
2010-04-28 00:20:03 —-D—- C:Documents and Settings
2010-04-27 20:45:38 —-D—- C:WINDOWSWeb
2010-04-27 20:45:37 —-D—- C:WINDOWSsystem32en-US
2010-04-27 01:14:43 —-D—- C:WINDOWSsystem32config
2010-04-27 01:09:54 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2010-04-27 01:08:51 —-D—- C:WINDOWSsystem32drivers
2010-04-27 01:08:49 —-D—- C:WINDOWSsystem32ReinstallBackups
2010-04-27 01:08:32 —-A—- C:WINDOWSsystem32streamci.dll
2010-04-27 00:37:56 —-HD—- C:WINDOWS$hf_mig$
2010-04-26 23:56:35 —-D—- C:WINDOWSNetwork Diagnostic
2010-04-26 23:20:08 —-SD—- C:WINDOWSDownloaded Program Files
2010-04-26 21:58:23 —-D—- C:WINDOWSWinSxS
2010-04-26 20:49:32 —-D—- C:Documents and SettingsAll UsersApplication DataKaspersky Lab
2010-04-22 22:55:57 —-D—- C:WINDOWSsystem32wbem
2010-04-22 22:55:57 —-D—- C:WINDOWSRegistration
2010-04-22 22:51:00 —-D—- C:WINDOWSsystem32Restore
2010-04-22 22:41:18 —-SHD—- C:System Volume Information
2010-04-19 00:46:29 —-D—- C:Documents and SettingsAll UsersApplication DataNOS
2010-04-19 00:40:02 —-D—- C:Program FilesAdobe
2010-04-19 00:38:45 —-D—- C:Program FilesCommon Files
2010-04-16 20:52:17 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
2010-04-16 20:51:42 —-D—- C:Program FilesVKSaver
2010-04-15 02:37:21 —-D—- C:cleansweep.exe
2010-03-31 22:47:23 —-DC—- C:WINDOWSsystem32DRVSTORE
2010-03-31 22:45:29 —-D—- C:Program FilesCommon FilesApple

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:WINDOWSsystem32driversAavmker4.sys [2010-04-14 28880]
R1 aswSP;aswSP; C:WINDOWSsystem32driversaswSP.sys [2010-04-14 162768]
R1 aswTdi;avast! Network Shield Support; C:WINDOWSsystem32driversaswTdi.sys [2010-04-14 46672]
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-15 40704]
R2 aswFsBlk;aswFsBlk; C:WINDOWSsystem32driversaswFsBlk.sys [2010-04-14 19024]
R2 aswMon2;aswMon2; C:WINDOWSsystem32driversaswMon2.sys [2010-04-14 100432]
R2 irda;ИК-протокол IrDA; C:WINDOWSsystem32DRIVERSirda.sys [2008-04-25 88192]
R3 aswRdr;aswRdr; C:WINDOWSsystem32driversaswRdr.sys [2010-04-14 23376]
R3 cmuda;C-Media WDM Audio Interface; C:WINDOWSsystem32driverscmuda.sys [2005-05-12 1332544]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:WINDOWSSystem32DriversGEARAspiWDM.sys [2009-05-18 26600]
R3 hidusb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-15 10368]
R3 irsir;Драйвер для инфракрасного последовательного порта Microsoft; C:WINDOWSsystem32DRIVERSirsir.sys [2001-08-18 18688]
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2008-04-15 12160]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2007-12-05 7435392]
R3 PAC7302;iLook 300; C:WINDOWSsystem32DRIVERSPAC7302.SYS [2007-10-29 458112]
R3 Rasirda;Минипорт WAN (IrDA); C:WINDOWSsystem32DRIVERSrasirda.sys [2001-08-18 19584]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtnicxp.sys [2010-04-27 109952]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-25 30208]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-25 59520]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-25 20608]
S3 CCDECODE;Closed Caption декодер; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2008-04-25 17024]
S3 GVCplDrv;GVCplDrv; C:WINDOWSsystem32driversGVCplDrv.sys [2004-05-02 23040]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2008-04-25 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2008-04-25 85248]
S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWSsystem32DRIVERSNdisIP.sys [2008-04-25 10880]
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2008-04-25 11136]
S3 StarOpen;StarOpen; C:WINDOWSsystem32driversStarOpen.sys [2009-11-12 7168]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2008-04-25 15232]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-25 26368]
S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2008-04-25 19200]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2008-03-21 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2008-03-21 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe [2010-03-19 144672]
R2 avast! Antivirus;avast! Antivirus; C:Program FilesAlwil SoftwareAvast5AvastSvc.exe [2010-04-14 40384]
R2 Bonjour Service;Служба Bonjour; C:Program FilesBonjourmDNSResponder.exe [2010-02-12 345376]
R2 Irmon;Монитор инфракрасной связи; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R2 NMSAccess;NMSAccess; d:Program FilesCDBurnerXPNMSAccessU.exe [2010-03-04 71096]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2007-12-05 155716]
R3 avast! Mail Scanner;avast! Mail Scanner; C:Program FilesAlwil SoftwareAvast5AvastSvc.exe [2010-04-14 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:Program FilesAlwil SoftwareAvast5AvastSvc.exe [2010-04-14 40384]
S2 clr_optimization_v4.0.30128_32;Microsoft .NET Framework NGEN v4.0.30128_X86; C:WINDOWSMicrosoft.NETFrameworkv4.0.30128mscorsvw.exe [2010-01-28 130384]
S2 gupdate;Служба Google Update (gupdate); C:Program FilesGoogleUpdateGoogleUpdate.exe [2010-03-23 135664]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv4.0.30128aspnet_state.exe [2010-01-28 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2010-03-23 182768]
S3 iPod Service;Сервис iPod; C:Program FilesiPodbiniPodService.exe [2010-03-26 545576]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:Program FilesMcAfee Security Scan2.0.181McCHSvc.exe [2010-01-15 227232]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2006-11-03 914944]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:WINDOWSMicrosoft.NETFrameworkv4.0.30128WPFWPFFontCache_v0400.exe [2010-01-28 738656]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv4.0.30128SMSvcHost.exe [2010-01-28 124240]