Нет сейчас баннера уже нету , я еще перед установкой програмы Combofix удалила все файлы которые заканчивались на lib. dll .и баннер сам удалился, а потом запустила програму Combofix. Но у меня еще есть одна проблема у меня пару раз компьютер сам выключался и на голубом экране был текст на английсьий языке и я не поняла что это такое или это некое предупреждение Windows.
А на счет системы безопасности у меня после программы Combofix отключилось автоматическое обновление и невозможно включить его, постоянно оповещает система безопасности Windows что нужно включить автоматическое обновление.
Я так поняла что программа Combofix удалила все существующие вирусы которые у меня были, а теперь мне нужно удалить прграму Combofix или нет.
Я ещо раз просканирувала свой компьютер используя программу RSIT,помотрите или все уже нормально или нужно чтото делать.
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Admin at 2009-11-12 01:38:48
Microsoft Windows XP Professional Service Pack 3
System drive C: has 1 GB (5%) free of 30 GB
Total RAM: 511 MB (26% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:39:26, on 12.11.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:Program FilesGoogleUpdateGoogleUpdate.exe
C:Program FilesGoogleUpdate1.2.183.13GoogleCrashHandler.exe
C:program filesVolumeControlvolume.exe
C:Program FilesEsetnod32kui.exe
C:WINDOWSsystem32RUNDLL32.EXE
C:Program FilesDrWebSpIDerAgent.exe
C:Program FilesCommon FilesArcSoftConnection ServiceBinACService.exe
C:Program FilesDrWebspiderml.exe
C:PROGRA~1DrWebspiderui.exe
C:Program FilesCommon FilesDoctor WebScanning Enginedwengine.exe
C:Program FilesuTorrentuTorrent.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:Program FilesNorton AntiVirusEngine17.0.0.136ccSvcHst.exe
C:Program FilesEsetnod32krn.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32HPZipm12.exe
C:WINDOWSsystem32PnkBstrA.exe
C:PROGRA~1DrWebspidernt.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesNorton AntiVirusEngine17.0.0.136ccSvcHst.exe
C:WINDOWSsystem32wscntfy.exe
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:Documents and SettingsAdminРабочий столRSIT.exe
C:Program Filestrend microAdmin.exe
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: Symantec Intrusion Prevention — {6D53EC84-6AAE-4787-AEEE-F4628F01010C} — C:Program FilesNorton AntiVirusEngine17.0.0.136IPSBHO.DLL
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.4.4525.1752swg.dll
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O3 — Toolbar: DAEMON Tools Toolbar — {32099AAC-C132-4136-9E9A-4E364A424E17} — C:Program FilesDAEMON Tools ToolbarDTToolbar.dll
O3 — Toolbar: Google Toolbar — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O4 — HKLM..Run: [VolumeControl] C:program filesVolumeControlvolume.exe
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [nwiz] nwiz.exe /install
O4 — HKLM..Run: [nod32kui] «C:Program FilesEsetnod32kui.exe» /WAITSERVICE
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [SpIDerAgent] «C:Program FilesDrWebSpIDerAgent.exe»
O4 — HKLM..Run: [SpIDerMail] «C:Program FilesDrWebspiderml.exe»
O4 — HKLM..Run: [SpIDerNT] C:PROGRA~1DrWebspiderui.exe /agent
O4 — HKLM..Run: [Malwarebytes Anti-Malware (reboot)] «D:Program FilesMalwarebytes’ Anti-Malwarembam.exe» /runcleanupscript
O4 — HKCU..Run: [ccleaner] «C:Program FilesCCleanerccleaner.exe» /AUTO
O4 — HKCU..Run: [uTorrent] «C:Program FilesuTorrentuTorrent.exe»
O4 — HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [swg] «C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe»
O4 — HKUSS-1-5-18..Run: [LinkDel] linkdel.cmd (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [IE7_011] regsvr32 /s /n /i:u shell32 (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [LinkDel] linkdel.cmd (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [IE7_011] regsvr32 /s /n /i:u shell32 (User ‘Default user’)
O6 — HKCUSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O8 — Extra context menu item: &Експорт до Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: Add to Google Photos Screensa&ver — res://C:WINDOWSsystem32GPhotos.scr/200
O8 — Extra context menu item: Google ВикиКомментарии… — res://C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_en_A54B7D6FB1DA63EA.dll/cmsidewiki.html
O9 — Extra button: Довідкові матеріали — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {c95fe080-8f5d-11d2-a20b-00aa003c157a} — C:WINDOWSsystem32shdocvw.dll
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O16 — DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) — http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1242857821734
O16 — DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) — http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1257611162859
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 — HKLMSystemCCSServicesTcpip..{8CF7EB27-1F95-4E58-A1F4-E28993ADAB5B}: NameServer = 193.27.209.209 217.9.0.2
O17 — HKLMSystemCCSServicesTcpip..{FA95879A-1023-4EC3-9182-7CF3EB012527}: NameServer = 10.25.8.1,193.27.209.209
O23 — Service: ArcSoft Connect Daemon (ACDaemon) — ArcSoft Inc. — C:Program FilesCommon FilesArcSoftConnection ServiceBinACService.exe
O23 — Service: Dr.Web Scanning Engine (DrWebEngine) (DrWebEngine) — Doctor Web, Ltd. — C:Program FilesCommon FilesDoctor WebScanning Enginedwengine.exe
O23 — Service: Symantec Eraser Service (EraserSvc10920) — Symantec Corporation — C:Program FilesNorton AntiVirusEngine17.0.0.136ccSvcHst.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: FLEXnet Licensing Service — Macrovision Europe Ltd. — C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 — Service: Служба Google Update (gupdate1c9fff3b5626992) (gupdate1c9fff3b5626992) — Google Inc. — C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Norton AntiVirus (NAV) — Symantec Corporation — C:Program FilesNorton AntiVirusEngine17.0.0.136ccSvcHst.exe
O23 — Service: NBService — Nero AG — C:Program FilesNeroNero 7Nero BackItUpNBService.exe
O23 — Service: NMIndexingService — Nero AG — C:Program FilesCommon FilesAheadLibNMIndexingService.exe
O23 — Service: NOD32 Kernel Service (NOD32krn) — Eset — C:Program FilesEsetnod32krn.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Pml Driver HPZ12 — HP — C:WINDOWSsystem32HPZipm12.exe
O23 — Service: PnkBstrA — Unknown owner — C:WINDOWSsystem32PnkBstrA.exe
O23 — Service: SpIDer Guard for Windows (SPIDERNT) — Doctor Web, Ltd. — C:PROGRA~1DrWebspidernt.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
—
End of file — 8340 bytes
======Scheduled tasks folder======
C:WINDOWStasksDr.Web Daily scan.job
C:WINDOWStasksDr.Web Update.job
C:WINDOWStasksGoogle Software Updater.job
C:WINDOWStasksGoogleUpdateTaskMachineCore.job
C:WINDOWStasksGoogleUpdateTaskMachineUA.job
C:WINDOWStasksUser_Feed_Synchronization-{86385FE9-C96D-47C7-89D3-7A5DE9D05FB1}.job
C:WINDOWStasksОдним Щелчком.job
======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention — C:Program FilesNorton AntiVirusEngine17.0.0.136IPSBHO.DLL [2009-08-30 79224]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2009-11-07 263280]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier5.4.4525.1752swg.dll [2009-11-07 764912]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2009-03-25 3697952]
{32099AAC-C132-4136-9E9A-4E364A424E17} — DAEMON Tools Toolbar — C:Program FilesDAEMON Tools ToolbarDTToolbar.dll [2009-04-23 937416]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — Google Toolbar — C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll [2009-11-07 263280]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«VolumeControl»=C:program filesVolumeControlvolume.exe [2003-09-15 36864]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2008-05-03 13529088]
«nwiz»=nwiz.exe /install []
«nod32kui»=C:Program FilesEsetnod32kui.exe [2009-05-18 949376]
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2008-05-03 86016]
«SpIDerAgent»=C:Program FilesDrWebSpIDerAgent.exe [2009-06-01 447728]
«SpIDerMail»=C:Program FilesDrWebspiderml.exe [2009-06-30 644336]
«SpIDerNT»=C:PROGRA~1DrWebspiderui.exe [2009-08-17 231840]
«Malwarebytes Anti-Malware (reboot)»=D:Program FilesMalwarebytes’ Anti-Malwarembam.exe [2009-09-10 1312080]
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«ccleaner»=C:Program FilesCCleanerccleaner.exe [2009-05-07 1561840]
«uTorrent»=C:Program FilesuTorrentuTorrent.exe [2009-10-25 289072]
«ctfmon.exe»=C:WINDOWSsystem32ctfmon.exe [2008-04-15 15360]
«swg»=C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2009-07-08 39408]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAdobe Reader Speed Launcher]
C:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2009-02-27 35696]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAlcoholAutomount]
C:Program FilesAlcohol SoftAlcohol 120axcmd.exe [2007-08-01 222592]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregArcSoft Connection Service]
C:Program FilesCommon FilesArcSoftConnection ServiceBinACDaemon.exe [2008-02-22 72192]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregHP Software Update]
C:Program FilesHPHP Software UpdateHPWuSchd2.exe [2005-05-11 49152]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupreghpqSRMon]
C:Program FilesHPDigital ImagingbinhpqSRMon.exe [2008-08-20 150016]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNBKeyScan]
C:Program FilesNeroNero8Nero BackItUpNBKeyScan.exe []
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNeroFilterCheck]
C:Program FilesCommon FilesAheadLibNeroCheck.exe [2007-03-09 153136]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregPunto Switcher]
C:program filespunto switcherps.exe [2008-05-30 722112]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSoundMan]
C:WINDOWSSOUNDMAN.EXE [2005-04-15 77824]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregswg]
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2009-07-08 39408]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregTetatet]
C:Program FilesTetatettetatet.exe auto []
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregWMPNSCFG]
C:Program FilesWindows Media PlayerWMPNSCFG.exe [2006-10-18 204288]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^HP Digital Imaging Monitor.lnk]
C:PROGRA~1HPDIGITA~1binhpqtra08.exe [2005-05-11 282624]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^Быстрый запуск HP Image Zone.lnk]
C:PROGRA~1HPDIGITA~1binhpqthb08.exe [2005-05-11 73728]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2007-06-18 133632]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«InstallVisualStyle»=C:WINDOWSResourcesThemesRoyaleRoyale.msstyles
«InstallTheme»=C:WINDOWSResourcesThemesRoyale.theme
«SynchronousMachineGroupPolicy»=0
«SynchronousUserGroupPolicy»=0
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=323
«NoSMConfigurePrograms»=1
«NoDrives»=0
«NoDriveAutoRun»=67108863
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveAutoRun»=
«NoDriveTypeAutoRun»=
«NoDrives»=
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
======List of files/folders created in the last 1 months======
2009-11-09 22:12:56 —-D—- C:Documents and SettingsAdminApplication DataMalwarebytes
2009-11-09 22:12:00 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2009-11-07 17:30:19 —-A—- C:ComboFix.txt
2009-11-07 17:16:53 —-A—- C:Boot.bak
2009-11-07 17:16:43 —-RASHD—- C:cmdcons
2009-11-07 17:15:46 —-A—- C:WINDOWSNIRCMD.exe
2009-11-07 17:15:46 —-A—- C:WINDOWSMBR.exe
2009-11-07 17:15:45 —-A—- C:WINDOWSzip.exe
2009-11-07 17:15:45 —-A—- C:WINDOWSSWXCACLS.exe
2009-11-07 17:15:45 —-A—- C:WINDOWSSWSC.exe
2009-11-07 17:15:45 —-A—- C:WINDOWSSWREG.exe
2009-11-07 17:15:45 —-A—- C:WINDOWSsed.exe
2009-11-07 17:15:45 —-A—- C:WINDOWSgrep.exe
2009-11-07 17:15:32 —-D—- C:WINDOWSERDNT
2009-11-07 17:09:41 —-D—- C:Qoobox
2009-11-07 16:41:27 —-D—- C:Documents and SettingsAll UsersApplication DataGoogle
2009-11-06 01:37:45 —-D—- C:Program Filestrend micro
2009-11-06 01:37:42 —-D—- C:rsit
2009-11-05 21:21:10 —-A—- C:WINDOWSsystem32S32EVNT1.DLL
2009-11-05 21:21:08 —-D—- C:Program FilesSymantec
2009-11-05 21:21:08 —-D—- C:Program FilesCommon FilesSymantec Shared
2009-11-05 21:19:45 —-D—- C:Program FilesWindows Sidebar
2009-11-05 21:19:30 —-D—- C:Program FilesNorton AntiVirus
2009-11-05 21:19:29 —-D—- C:Documents and SettingsAll UsersApplication DataNorton
2009-11-05 21:19:08 —-D—- C:Program FilesNortonInstaller
2009-11-05 21:19:08 —-D—- C:Documents and SettingsAll UsersApplication DataNortonInstaller
2009-11-04 22:45:24 —-D—- C:Documents and SettingsAll UsersApplication DataKaspersky Lab Setup Files
2009-11-04 02:08:52 —-D—- C:WINDOWSie8updates
2009-11-04 02:06:29 —-HDC—- C:WINDOWSie8
2009-11-04 02:03:11 —-A—- C:WINDOWSsystem32MRT.exe
2009-11-03 21:04:24 —-D—- C:Program FilesCommon FilesDoctor Web
2009-11-03 21:04:24 —-D—- C:Documents and SettingsAll UsersApplication DataDoctor Web
2009-11-03 18:11:16 —-D—- C:Documents and SettingsAll UsersApplication DataAshampoo
2009-11-03 18:11:06 —-D—- C:Documents and SettingsAll UsersApplication Datapage
2009-10-16 20:29:59 —-D—- C:Program FilesDrWeb
======List of files/folders modified in the last 1 months======
2009-11-12 01:39:21 —-D—- C:WINDOWSTemp
2009-11-12 01:38:52 —-D—- C:WINDOWSPrefetch
2009-11-12 01:34:39 —-D—- C:Documents and SettingsAdminApplication DatauTorrent
2009-11-12 00:06:46 —-SD—- C:WINDOWSTasks
2009-11-12 00:04:43 —-AD—- C:WINDOWS
2009-11-12 00:03:43 —-D—- C:WINDOWSsystem32CatRoot2
2009-11-12 00:02:20 —-SHD—- C:System Volume Information
2009-11-11 15:29:27 —-N—- C:WINDOWSSchedLgU.Txt
2009-11-11 12:25:16 —-D—- C:Program FilesMozilla Firefox
2009-11-10 15:10:42 —-D—- C:WINDOWSsystem32CatRoot
2009-11-10 02:32:57 —-A—- C:WINDOWSNeroDigital.ini
2009-11-09 22:12:17 —-D—- C:WINDOWSsystem32drivers
2009-11-09 15:23:52 —-A—- C:WINDOWSDisney.ini
2009-11-09 15:22:44 —-AD—- C:WINDOWSsystem32
2009-11-09 15:19:34 —-AD—- C:Program Files
2009-11-08 20:16:41 —-D—- C:WINDOWSMinidump
2009-11-07 20:28:07 —-D—- C:Program FilesTuneUp Utilities 2007
2009-11-07 19:37:18 —-SD—- C:WINDOWSDownloaded Program Files
2009-11-07 19:31:22 —-HD—- C:WINDOWSinf
2009-11-07 19:26:20 —-D—- C:WINDOWSSoftwareDistribution
2009-11-07 17:35:44 —-SHD—- C:WINDOWSInstaller
2009-11-07 17:27:02 —-A—- C:WINDOWSsystem.ini
2009-11-07 17:26:06 —-AD—- C:Program FilesCommon Files
2009-11-07 17:22:24 —-D—- C:WINDOWSAppPatch
2009-11-07 17:16:53 —-RASH—- C:boot.ini
2009-11-07 16:51:08 —-D—- C:Documents and SettingsAdminApplication DataGoogle
2009-11-07 16:42:07 —-D—- C:Program FilesGoogle
2009-11-07 16:42:03 —-D—- C:Config.Msi
2009-11-05 16:24:24 —-D—- C:WINDOWSrepair
2009-11-05 16:21:08 —-RSHDC—- C:WINDOWSsystem32dllcache
2009-11-05 16:15:52 —-D—- C:Program FilesThe KMPlayer
2009-11-05 16:14:08 —-D—- C:Program FilesOutlook Express
2009-11-05 16:11:54 —-D—- C:totalcmd
2009-11-04 13:31:15 —-A—- C:WINDOWSsystem32PnkBstrB.exe
2009-11-04 02:12:53 —-D—- C:WINDOWSDebug
2009-11-04 02:11:52 —-D—- C:WINDOWSsystem32ru-ru
2009-11-04 02:11:52 —-D—- C:WINDOWSMedia
2009-11-04 02:11:52 —-D—- C:WINDOWSHelp
2009-11-04 02:11:52 —-D—- C:Program FilesInternet Explorer
2009-11-04 02:09:46 —-HD—- C:WINDOWSmsdownld.tmp
2009-11-04 02:09:30 —-HD—- C:WINDOWS$hf_mig$
2009-11-03 18:01:46 —-A—- C:WINDOWSsystem32BASSMOD.dll
2009-10-25 10:01:08 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AmdK8;AMD Processor Driver; C:WINDOWSsystem32DRIVERSAmdK8.sys [2005-03-09 36352]
R1 BHDrvx86;BHDrvx86; ??C:Documents and SettingsAll UsersApplication DataNorton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}NAV_17.0.0.136DefinitionsBASHDefs20091013.001BHDrvx86.sys []
R1 ccHP;Symantec Hash Provider; C:WINDOWSsystem32driversNAV1100000.088ccHPx86.sys [2009-08-25 501888]
R1 eeCtrl;Symantec Eraser Control driver; ??C:Program FilesCommon FilesSymantec SharedEENGINEeeCtrl.sys []
R1 kbdhid;Драйвер клавиатуры HID; C:WINDOWSsystem32DRIVERSkbdhid.sys [2008-04-14 14720]
R1 nod32drv;nod32drv; C:WINDOWSsystem32driversnod32drv.sys [2009-05-18 15424]
R1 SRTSP;Symantec Real Time Storage Protection; C:WINDOWSsystem32driversNAV1100000.088SRTSP.SYS [2009-08-30 325168]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL); C:WINDOWSsystem32driversNAV1100000.088SRTSPX.SYS [2009-08-30 43696]
R1 SymIRON;Symantec Iron Driver; C:WINDOWSsystem32driversNAV1100000.088Ironx86.SYS [2009-08-30 114736]
R1 SYMTDI;Symantec Network Dispatch Driver; C:WINDOWSsystem32driversNAV1100000.088SYMTDI.SYS [2009-08-30 361392]
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2008-04-15 12032]
R2 AMON;AMON; C:WINDOWSsystem32driversamon.sys [2009-05-18 512096]
R2 mdmxsdk;mdmxsdk; C:WINDOWSsystem32DRIVERSmdmxsdk.sys [2004-03-17 13059]
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2008-07-08 62848]
R2 SPIDER;SpIDer Guard File System Monitor; ??C:PROGRA~1DrWebspider.sys []
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:WINDOWSsystem32driversALCXWDM.SYS [2005-04-19 2317504]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; ??C:Program FilesCommon FilesSymantec SharedEENGINEEraserUtilRebootDrv.sys []
R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:WINDOWSsystem32DRIVERSfetnd5b.sys [2004-04-15 42496]
R3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-13 10368]
R3 HSF_DPV;HSF_DPV; C:WINDOWSsystem32DRIVERSHSF_DPV.sys [2005-08-23 1035008]
R3 HSFHWBS2;HSFHWBS2; C:WINDOWSsystem32DRIVERSHSFHWBS2.sys [2005-08-23 244480]
R3 IDSxpx86;IDSxpx86; ??C:Documents and SettingsAll UsersApplication DataNorton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}NAV_17.0.0.136DefinitionsIPSDefs20091105.001IDSxpx86.sys []
R3 MODEMCSA;Устройство фильтрации потока Unimodem; C:WINDOWSsystem32driversMODEMCSA.sys [2001-08-17 16128]
R3 NAVENG;NAVENG; ??C:Documents and SettingsAll UsersApplication DataNorton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}NAV_17.0.0.136DefinitionsVirusDefs20091110.023NAVENG.SYS []
R3 NAVEX15;NAVEX15; ??C:Documents and SettingsAll UsersApplication DataNorton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}NAV_17.0.0.136DefinitionsVirusDefs20091110.023NAVEX15.SYS []
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2008-05-03 6554496]
R3 SymEvent;SymEvent; ??C:WINDOWSsystem32DriversSYMEVENT.SYS []
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-13 32128]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-15 30208]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-15 20608]
R3 winachsf;winachsf; C:WINDOWSsystem32DRIVERSHSF_CNXT.sys [2005-08-23 718464]
S3 ah4vcdj5;ah4vcdj5; C:WINDOWSsystem32driversah4vcdj5.sys []
S3 alcni0yo;alcni0yo; C:WINDOWSsystem32driversalcni0yo.sys []
S3 catchme;catchme; ??C:WINDOWSTEMPcatchme.sys []
S3 cmuda;C-Media WDM Audio Interface; C:WINDOWSsystem32driverscmuda.sys [2004-04-23 818496]
S3 FET5X86V;VIA Rhine-Family Fast-Ethernet Adapter Driver Service; C:WINDOWSsystem32DRIVERSfetnd5bv.sys [2008-09-22 43520]
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet адаптер, драйвер для NT; C:WINDOWSsystem32DRIVERSfetnd5.sys [2001-08-17 27165]
S3 GMSIPCI;GMSIPCI; ??E:INSTALLGMSIPCI.SYS []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:WINDOWSsystem32DRIVERSHPZid412.sys [2005-03-08 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:WINDOWSsystem32DRIVERSHPZipr12.sys [2005-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:WINDOWSsystem32DRIVERSHPZius12.sys [2005-03-08 21744]
S3 HSF_DP;HSF_DP; C:WINDOWSsystem32DRIVERSHSFDPSP2.sys [2008-04-14 1041536]
S3 MSICPL;MSICPL; ??E:install4MSICPL.sys []
S3 NTACCESS;NTACCESS; ??E:NTACCESS.sys []
S3 SetupNTGLM7X;SetupNTGLM7X; ??E:NTGLM7X.sys []
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-13 25856]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-13 15104]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2007-06-18 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2007-06-18 82944]
S4 dwshd;dwshd; C:WINDOWSSystem32driversdwshd.sys []
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ACDaemon;ArcSoft Connect Daemon; C:Program FilesCommon FilesArcSoftConnection ServiceBinACService.exe [2008-02-22 104960]
R2 DrWebEngine;Dr.Web Scanning Engine (DrWebEngine); C:Program FilesCommon FilesDoctor WebScanning Enginedwengine.exe [2009-09-22 869688]
R2 NAV;Norton AntiVirus; C:Program FilesNorton AntiVirusEngine17.0.0.136ccSvcHst.exe [2009-08-25 126392]
R2 NOD32krn;NOD32 Kernel Service; C:Program FilesEsetnod32krn.exe [2009-05-18 552064]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2008-05-03 159812]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:WINDOWSsystem32HPZipm12.exe [2007-08-09 73728]
R2 PnkBstrA;PnkBstrA; C:WINDOWSsystem32PnkBstrA.exe [2009-08-31 66872]
R2 SPIDERNT;SpIDer Guard for Windows; C:PROGRA~1DrWebspidernt.exe [2009-08-17 231328]
R2 UxTuneUp;TuneUp Theme Extension; C:WINDOWSSystem32svchost.exe [2008-04-15 14336]
S2 EraserSvc10920;Symantec Eraser Service; C:Program FilesNorton AntiVirusEngine17.0.0.136ccSvcHst.exe [2009-08-25 126392]
S2 gupdate1c9fff3b5626992;Служба Google Update (gupdate1c9fff3b5626992); C:Program FilesGoogleUpdateGoogleUpdate.exe [2009-07-08 133104]
S2 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-07-08 190448]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe [2009-09-06 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-07-29 881664]
S3 NBService;NBService; C:Program FilesNeroNero 7Nero BackItUpNBService.exe [2007-01-15 774144]
S3 NMIndexingService;NMIndexingService; C:Program FilesCommon FilesAheadLibNMIndexingService.exe [2007-03-12 271920]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media Playerwmpnetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-07-29 132096]
EOF
