2-я часть OTListIt.txt :
NetSvcs: 6to4 — File not found
NetSvcs: AppMgmt — C:WINDOWSsystem32appmgmts.dll (Корпорация Майкрософт)
NetSvcs: DMServer — C:WINDOWSsystem32dmserver.dll (Корпорация Майкрософт)
NetSvcs: DHCP — C:WINDOWSsystem32dhcpcsvc.dll (Корпорация Майкрософт)
NetSvcs: FastUserSwitchingCompatibility — C:WINDOWSsystem32shsvcs.dll (Корпорация Майкрософт)
NetSvcs: Ias — C:WINDOWSsystem32ias [2009.01.06 17:39:59 | 00,000,000 | —D | M]
NetSvcs: Iprip — File not found
NetSvcs: Irmon — File not found
NetSvcs: Netman — C:WINDOWSsystem32netman.dll (Корпорация Майкрософт)
NetSvcs: Nla — C:WINDOWSsystem32mswsock.dll (Корпорация Майкрософт)
NetSvcs: Ntmssvc — C:WINDOWSsystem32ntmssvc.dll (Корпорация Майкрософт)
NetSvcs: NWCWorkstation — File not found
NetSvcs: Nwsapagent — File not found
NetSvcs: Schedule — C:WINDOWSsystem32schedsvc.dll (Корпорация Майкрософт)
NetSvcs: Seclogon — C:WINDOWSsystem32seclogon.dll (Корпорация Майкрософт)
NetSvcs: Sharedaccess — C:WINDOWSsystem32ipnathlp.dll (Корпорация Майкрософт)
NetSvcs: SRService — C:WINDOWSsystem32srsvc.dll (Корпорация Майкрософт)
NetSvcs: Tapisrv — C:WINDOWSsystem32tapisrv.dll (Корпорация Майкрософт)
NetSvcs: Themes — C:WINDOWSsystem32shsvcs.dll (Корпорация Майкрософт)
NetSvcs: W32Time — C:WINDOWSsystem32w32time.dll (Корпорация Майкрософт)
NetSvcs: WZCSVC — C:WINDOWSsystem32wzcsvc.dll (Корпорация Майкрософт)
NetSvcs: Wmi — C:WINDOWSsystem32advapi32.dll (Корпорация Майкрософт)
NetSvcs: WmdmPmSp — File not found
NetSvcs: winmgmt — C:WINDOWSsystem32wbemwmisvc.dll (Корпорация Майкрософт)
NetSvcs: BITS — C:WINDOWSsystem32qmgr.dll (Корпорация Майкрософт)
NetSvcs: ShellHWDetection — C:WINDOWSsystem32shsvcs.dll (Корпорация Майкрософт)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (53765169410473984)
========== Files/Folders — Created Within 30 Days ==========
[2009.12.18 15:09:30 | 00,000,000 | —D | C] — C:Documents and SettingsAdminDoctorWeb
[2009.12.18 03:51:01 | 25,490,880 | —- | C] (Doctor Web, Ltd.) — C:Documents and SettingsAdminРабочий столd8tgh6me.exe
[2009.12.18 00:36:16 | 00,538,112 | —- | C] (OldTimer Tools) — C:Documents and SettingsAdminРабочий столOTL.exe
[2009.12.15 16:02:57 | 00,000,000 | RH-D | C] — C:Documents and SettingsAdminRecent
[2009.12.15 06:15:23 | 00,000,000 | —D | C] — C:Program FilesKaspersky Lab
[2009.12.15 06:15:23 | 00,000,000 | —D | C] — C:Documents and SettingsAll UsersApplication DataKaspersky Lab
[2009.12.15 06:15:07 | 00,315,408 | —- | C] (Kaspersky Lab) — C:WINDOWSSystem32driversklif.sys
[2009.12.15 05:06:08 | 00,000,000 | —D | C] — C:Documents and SettingsAll UsersApplication DataXoftSpySE
[2009.12.15 05:06:06 | 00,000,000 | —D | C] — C:Program FilesXoftSpySE6
[2009.12.14 15:12:08 | 00,000,000 | —D | M] — C:Documents and SettingsLocalServiceLocal SettingsApplication DataAdobe
[2009.12.14 07:35:48 | 00,000,000 | —D | C] — C:Documents and SettingsAdminLocal SettingsApplication DataChemTable Software
[2009.12.14 06:12:37 | 00,000,000 | —D | C] — C:Documents and SettingsAdminApplication DataChemTable Software
[2009.12.14 06:09:45 | 00,000,000 | —D | C] — C:Program FilesReg Organizer
[2009.12.14 04:41:08 | 00,038,224 | —- | C] (Malwarebytes Corporation) — C:WINDOWSSystem32driversmbamswissarmy.sys
[2009.12.14 04:41:02 | 00,019,160 | —- | C] (Malwarebytes Corporation) — C:WINDOWSSystem32driversmbam.sys
[2009.12.14 04:41:02 | 00,000,000 | —D | C] — C:Program FilesMalwarebytes’ Anti-Malware
[2009.12.14 01:37:53 | 00,000,000 | —D | C] — C:Documents and SettingsAll UsersApplication DataSUPERAntiSpyware.com
[2009.12.14 01:37:39 | 00,000,000 | —D | C] — C:Documents and SettingsAdminApplication DataSUPERAntiSpyware.com
[2009.12.14 01:37:39 | 00,000,000 | —D | C] — C:Program FilesSUPERAntiSpyware
[2009.12.12 10:20:20 | 00,000,000 | —D | C] — C:Program Filestrend micro
[2009.12.12 10:20:19 | 00,000,000 | —D | C] — C:rsit
[2009.12.12 10:14:18 | 00,000,000 | —D | C] — C:Program FilesAhnLab
[2009.12.12 09:41:07 | 00,000,000 | —D | C] — C:Program FilesAdobe
[2009.12.12 07:11:28 | 00,149,280 | —- | C] (Sun Microsystems, Inc.) — C:WINDOWSSystem32javaws.exe
[2009.12.12 07:11:28 | 00,145,184 | —- | C] (Sun Microsystems, Inc.) — C:WINDOWSSystem32javaw.exe
[2009.12.12 07:11:28 | 00,145,184 | —- | C] (Sun Microsystems, Inc.) — C:WINDOWSSystem32java.exe
[2009.12.12 07:11:28 | 00,073,728 | —- | C] (Sun Microsystems, Inc.) — C:WINDOWSSystem32javacpl.cpl
[2009.12.12 07:11:13 | 00,000,000 | —D | C] — C:Program FilesJava
[2009.12.11 13:02:48 | 00,000,000 | —D | C] — C:Program FilesPanda Security
[2009.11.29 12:29:09 | 00,000,000 | —D | C] — C:Documents and SettingsAdminМои документыUpdater5
[2009.02.16 19:41:50 | 00,000,000 | —D | M] — C:Documents and SettingsNetworkServiceApplication DataIntel
[2009.02.16 19:41:50 | 00,000,000 | —D | M] — C:Documents and SettingsLocalServiceApplication DataIntel
[2009.01.18 22:10:44 | 00,000,000 | —D | M] — C:Documents and SettingsLocalServiceLocal SettingsApplication DataESET
[2009.01.06 18:09:28 | 00,195,112 | —- | C] ( ) — C:WINDOWSSystem32csnp2uvc.dll
[2009.01.06 18:09:25 | 00,186,920 | —- | C] ( ) — C:WINDOWSSystem32rsnp2uvc.dll
[2009.01.06 14:59:53 | 00,000,000 | —SD | M] — C:Documents and SettingsLocalServiceLocal SettingsApplication DataMicrosoft
[2009.01.06 14:59:53 | 00,000,000 | —SD | M] — C:Documents and SettingsLocalServiceApplication DataMicrosoft
[2009.01.06 14:59:32 | 00,000,000 | —SD | M] — C:Documents and SettingsNetworkServiceLocal SettingsApplication DataMicrosoft
[2009.01.06 14:59:32 | 00,000,000 | —SD | M] — C:Documents and SettingsNetworkServiceApplication DataMicrosoft
[4 C:WINDOWS*.tmp files -> C:WINDOWS*.tmp -> ]
========== Files — Modified Within 30 Days ==========
[2009.12.18 22:45:28 | 04,718,592 | —- | M] () — C:Documents and SettingsAdminNTUSER.DAT
[2009.12.18 22:43:07 | 00,000,006 | -H— | M] () — C:WINDOWStasksSA.DAT
[2009.12.18 22:43:01 | 00,002,048 | —S- | M] () — C:WINDOWSbootstat.dat
[2009.12.18 22:42:53 | 21,425,15200 | -HS- | M] () — C:hiberfil.sys
[2009.12.18 22:28:33 | 00,000,444 | -H— | M] () — C:WINDOWStasksUser_Feed_Synchronization-{624B8C49-E8CD-4455-A64A-A2A774462E72}.job
[2009.12.18 22:25:01 | 01,110,460 | —- | M] () — C:WINDOWSSystem32PerfStringBackup.INI
[2009.12.18 22:25:01 | 00,501,616 | —- | M] () — C:WINDOWSSystem32perfh019.dat
[2009.12.18 22:25:01 | 00,435,594 | —- | M] () — C:WINDOWSSystem32perfh009.dat
[2009.12.18 22:25:01 | 00,090,864 | —- | M] () — C:WINDOWSSystem32perfc019.dat
[2009.12.18 22:25:01 | 00,068,490 | —- | M] () — C:WINDOWSSystem32perfc009.dat
[2009.12.18 22:22:14 | 00,000,178 | -HS- | M] () — C:Documents and SettingsAdminntuser.ini
[2009.12.18 22:21:57 | 00,004,988 | —- | M] () — C:WINDOWSSystem32akelpad.ini
[2009.12.18 21:34:30 | 00,000,664 | —- | M] () — C:WINDOWSSystem32d3d9caps.dat
[2009.12.18 15:07:25 | 00,000,000 | —- | M] () — C:WINDOWSMEMORY.DMP
[2009.12.18 03:55:19 | 00,000,162 | -H— | M] () — C:Documents and SettingsAdminРабочий стол~$оверим компьютер.docx
[2009.12.18 03:43:58 | 25,490,880 | —- | M] (Doctor Web, Ltd.) — C:Documents and SettingsAdminРабочий столd8tgh6me.exe
[2009.12.18 00:40:40 | 00,012,441 | —- | M] () — C:Documents and SettingsAdminРабочий столПроверим компьютер.docx
[2009.12.18 00:32:30 | 00,538,112 | —- | M] (OldTimer Tools) — C:Documents and SettingsAdminРабочий столOTL.exe
[2009.12.18 00:19:34 | 00,002,206 | —- | M] () — C:WINDOWSSystem32wpa.dbl
[2009.12.15 11:24:48 | 00,293,376 | —- | M] () — C:Documents and SettingsAdminРабочий столgim-er.exe
[2009.12.15 06:23:36 | 00,315,408 | —- | M] (Kaspersky Lab) — C:WINDOWSSystem32driversklif.sys
[2009.12.15 06:16:02 | 00,108,059 | —- | M] () — C:WINDOWSSystem32driversklin.dat
[2009.12.15 06:16:02 | 00,095,259 | —- | M] () — C:WINDOWSSystem32driversklick.dat
[2009.12.14 06:09:59 | 00,000,675 | —- | M] () — C:Documents and SettingsAdminРабочий столReg Organizer — инструмент для ускорения работы системы.lnk
[2009.12.14 05:55:08 | 00,000,036 | —- | M] () — C:Documents and SettingsAdminLocal SettingsApplication Datahousecall.guid.cache
[2009.12.12 07:11:18 | 00,411,368 | —- | M] (Sun Microsystems, Inc.) — C:WINDOWSSystem32deploytk.dll
[2009.12.12 07:11:18 | 00,149,280 | —- | M] (Sun Microsystems, Inc.) — C:WINDOWSSystem32javaws.exe
[2009.12.12 07:11:18 | 00,145,184 | —- | M] (Sun Microsystems, Inc.) — C:WINDOWSSystem32javaw.exe
[2009.12.12 07:11:18 | 00,145,184 | —- | M] (Sun Microsystems, Inc.) — C:WINDOWSSystem32java.exe
[2009.12.12 07:11:18 | 00,073,728 | —- | M] (Sun Microsystems, Inc.) — C:WINDOWSSystem32javacpl.cpl
[2009.12.11 01:27:44 | 00,125,952 | —- | M] () — C:Documents and SettingsAdminLocal SettingsApplication DataDCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.12.10 21:56:02 | 00,002,583 | —- | M] () — C:Documents and SettingsAll UsersРабочий столACDSee Pro 3.lnk
[2009.12.03 16:14:06 | 00,038,224 | —- | M] (Malwarebytes Corporation) — C:WINDOWSSystem32driversmbamswissarmy.sys
[2009.12.03 16:13:56 | 00,019,160 | —- | M] (Malwarebytes Corporation) — C:WINDOWSSystem32driversmbam.sys
[2009.12.02 23:07:36 | 00,000,093 | —- | M] () — C:Documents and SettingsAdmindefault.pls
[2009.12.02 23:07:33 | 00,000,069 | —- | M] () — C:WINDOWSNeroDigital.ini
[4 C:WINDOWS*.tmp files -> C:WINDOWS*.tmp -> ]
========== Files Created — No Company Name ==========
[2009.12.18 22:22:50 | 21,425,15200 | -HS- | C] () — C:hiberfil.sys
[2009.12.18 03:55:19 | 00,000,162 | -H— | C] () — C:Documents and SettingsAdminРабочий стол~$оверим компьютер.docx
[2009.12.18 00:40:39 | 00,012,441 | —- | C] () — C:Documents and SettingsAdminРабочий столПроверим компьютер.docx
[2009.12.18 00:36:53 | 00,293,376 | —- | C] () — C:Documents and SettingsAdminРабочий столgim-er.exe
[2009.12.15 06:16:02 | 00,108,059 | —- | C] () — C:WINDOWSSystem32driversklin.dat
[2009.12.15 06:16:02 | 00,095,259 | —- | C] () — C:WINDOWSSystem32driversklick.dat
[2009.12.14 06:09:59 | 00,000,675 | —- | C] () — C:Documents and SettingsAdminРабочий столReg Organizer — инструмент для ускорения работы системы.lnk
[2009.12.14 05:55:08 | 00,000,036 | —- | C] () — C:Documents and SettingsAdminLocal SettingsApplication Datahousecall.guid.cache
[2009.08.18 21:13:26 | 00,000,000 | —- | C] () — C:Documents and SettingsAdminLocal SettingsApplication DataFnF4.txt
[2009.06.12 20:09:25 | 00,000,069 | —- | C] () — C:WINDOWSNeroDigital.ini
[2009.05.12 01:01:41 | 00,454,992 | —- | C] () — C:Documents and SettingsLocalServiceLocal SettingsApplication DataFontCache3.0.0.0.dat
[2009.05.10 21:37:46 | 00,000,173 | —- | C] () — C:WINDOWSSumitSoft.ini
[2009.05.04 20:58:25 | 00,000,208 | —- | C] () — C:WINDOWSUpdateClientUI.INI
[2009.04.13 20:15:58 | 00,000,192 | —- | C] () — C:Documents and SettingsAdminApplication Datadefault.rss
[2009.04.13 20:15:58 | 00,000,000 | —- | C] () — C:Documents and SettingsAdminApplication Datadownloads.m3u
[2009.04.10 13:15:23 | 00,004,767 | —- | C] () — C:WINDOWSIrremote.ini
[2009.04.10 09:59:44 | 00,057,344 | —- | C] () — C:WINDOWSSystem32Md_iblib.dll
[2009.03.08 20:29:07 | 00,000,589 | —- | C] () — C:WINDOWSCD_Books.INI
[2009.03.06 21:54:02 | 03,596,288 | —- | C] () — C:WINDOWSSystem32qt-dx331.dll
[2009.03.06 21:54:02 | 02,255,360 | —- | C] () — C:WINDOWSSystem32x264vfw.dll
[2009.03.06 21:54:02 | 00,795,648 | —- | C] () — C:WINDOWSSystem32xvidcore.dll
[2009.03.06 21:54:02 | 00,130,048 | —- | C] () — C:WINDOWSSystem32xvidvfw.dll
[2009.03.06 21:53:56 | 00,067,584 | —- | C] () — C:WINDOWSSystem32ff_vfw.dll
[2009.03.06 21:53:56 | 00,000,547 | —- | C] () — C:WINDOWSSystem32ff_vfw.dll.manifest
[2009.02.17 00:23:02 | 00,002,816 | —- | C] () — C:WINDOWSSystem32driversport_nt.sys
[2009.02.15 00:06:37 | 00,004,988 | —- | C] () — C:WINDOWSSystem32akelpad.ini
[2009.02.05 18:38:14 | 00,000,000 | —- | C] () — C:Documents and SettingsAdminLocal SettingsApplication DataQSwitch.txt
[2009.02.05 18:38:14 | 00,000,000 | —- | C] () — C:Documents and SettingsAdminLocal SettingsApplication DataDSwitch.txt
[2009.02.05 18:38:14 | 00,000,000 | —- | C] () — C:Documents and SettingsAdminLocal SettingsApplication DataAtStart.txt
[2009.02.03 22:00:03 | 00,354,816 | —- | C] () — C:WINDOWSSystem32psisdecd.dll
[2009.01.21 18:01:38 | 00,204,800 | —- | C] () — C:WINDOWSSystem32IVIresizeW7.dll
[2009.01.21 18:01:38 | 00,200,704 | —- | C] () — C:WINDOWSSystem32IVIresizeA6.dll
[2009.01.21 18:01:38 | 00,192,512 | —- | C] () — C:WINDOWSSystem32IVIresizeP6.dll
[2009.01.21 18:01:38 | 00,192,512 | —- | C] () — C:WINDOWSSystem32IVIresizeM6.dll
[2009.01.21 18:01:38 | 00,188,416 | —- | C] () — C:WINDOWSSystem32IVIresizePX.dll
[2009.01.21 18:01:38 | 00,020,480 | —- | C] () — C:WINDOWSSystem32IVIresize.dll
[2009.01.06 18:39:44 | 00,125,952 | —- | C] () — C:Documents and SettingsAdminLocal SettingsApplication DataDCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.01.06 18:23:11 | 00,000,880 | —- | C] () — C:WINDOWSHBCIKRNL.INI
[2009.01.06 18:09:28 | 01,810,856 | —- | C] () — C:WINDOWSSystem32driverssnp2uvc.sys
[2009.01.06 18:09:28 | 00,034,856 | —- | C] () — C:WINDOWSSystem32driverssncduvc.sys
[2009.01.06 18:09:28 | 00,015,497 | —- | C] () — C:WINDOWSsnp2uvc.ini
[2009.01.06 15:30:48 | 00,000,824 | —- | C] () — C:WINDOWSSystem32oeminfo.ini
[2009.01.06 15:28:11 | 00,164,352 | —- | C] () — C:WINDOWSSystem32unrar.dll
[2009.01.06 14:57:02 | 00,717,296 | —- | C] () — C:WINDOWSSystem32driverssptd.sys
[2009.01.06 14:54:41 | 00,271,264 | —- | C] () — C:WINDOWSSystem32vbrun100.dll
[2009.01.06 14:54:41 | 00,210,944 | —- | C] () — C:WINDOWSSystem32msvcrt10.dll
[2009.01.06 14:54:41 | 00,059,904 | —- | C] () — C:WINDOWSSystem32zlib1.dll
[2008.05.26 22:22:26 | 00,016,666 | —- | C] () — C:WINDOWSSystem32gthrctr.ini
[2008.05.26 22:22:22 | 00,023,560 | —- | C] () — C:WINDOWSSystem32idxcntrs.ini
[2008.05.26 22:22:20 | 00,016,258 | —- | C] () — C:WINDOWSSystem32gsrvctr.ini
[2008.03.31 13:30:34 | 02,842,624 | —- | C] () — C:WINDOWSSystem32btwicons.dll
[2007.01.25 17:45:02 | 00,006,784 | —- | C] () — C:WINDOWSSystem32driverswhfltr2k.sys
[2005.02.17 11:41:32 | 00,000,603 | —- | C] () — C:WINDOWSSystem32BTNeighborhood.dll.manifest
[2005.02.17 11:41:30 | 00,000,593 | —- | C] () — C:WINDOWSSystem32btcss.dll.manifest
[2004.04.26 02:38:20 | 00,006,885 | —- | C] () — C:WINDOWSSystem32driverswhmice2k.sys
[2001.11.14 12:56:00 | 01,802,240 | —- | C] () — C:WINDOWSSystem32lcppn21.dll
[2001.09.17 12:20:02 | 00,009,216 | —- | C] () — C:WINDOWSSystem32cpuinf32.dll
========== Custom Scans ==========
[2008.04.15 15:00:00 | 00,056,320 | —- | M] (Корпорация Майкрософт) MD5=239622CC309B9650B345893D54C4D74E — C:WINDOWSsystem32eventlog.dll
[2008.04.15 15:00:00 | 00,056,320 | —- | M] (Корпорация Майкрософт) MD5=239622CC309B9650B345893D54C4D74E — C:WINDOWSsystem32dllcacheeventlog.dll
[2008.04.15 15:00:00 | 00,184,832 | —- | M] (Корпорация Майкрософт) MD5=04423B01963ECF4BEEC4BD26A740D809 — C:WINDOWSsystem32scecli.dll
[2008.04.15 15:00:00 | 00,184,832 | —- | M] (Корпорация Майкрософт) MD5=04423B01963ECF4BEEC4BD26A740D809 — C:WINDOWSsystem32dllcachescecli.dll
[2008.12.25 20:51:44 | 00,407,040 | —- | M] (Microsoft Corporation) MD5=74B60F0876C60CD0CA32DDE56A297EA6 — C:WINDOWSsystem32netlogon.dll
[2008.12.25 20:51:44 | 00,407,040 | —- | M] (Microsoft Corporation) MD5=74B60F0876C60CD0CA32DDE56A297EA6 — C:WINDOWSsystem32dllcachenetlogon.dll
[2008.12.04 11:34:52 | 00,328,728 | —- | M] (Intel Corporation) MD5=BAABB0301949774A66B955C65319635A — C:Program FilesIntelIntel Matrix Storage ManagerdriverIaStor.sys
[2008.12.04 11:48:52 | 00,407,064 | —- | M] (Intel Corporation) MD5=8EACF469269FB1509561961A3188F670 — C:Program FilesIntelIntel Matrix Storage Managerdriver64IaStor.sys
[2008.12.04 11:34:52 | 00,328,728 | —- | M] (Intel Corporation) MD5=BAABB0301949774A66B955C65319635A — C:SwSetupSP42162WinallDriverIaStor.sys
[2008.12.04 11:48:52 | 00,407,064 | —- | M] (Intel Corporation) MD5=8EACF469269FB1509561961A3188F670 — C:SwSetupSP42162WinallDriver64IaStor.sys
[2008.09.12 12:32:56 | 00,327,192 | —- | M] (Intel Corporation) MD5=8EF427C54497C5F8A7A645990E4278C7 — C:WINDOWSOemDrvMI4IaStor.sys
[2008.12.04 11:34:52 | 00,328,728 | —- | M] (Intel Corporation) MD5=BAABB0301949774A66B955C65319635A — C:WINDOWSsystem32driversiaStor.sys
[2008.12.04 11:34:52 | 00,328,728 | —- | M] (Intel Corporation) MD5=BAABB0301949774A66B955C65319635A — C:WINDOWSsystem32DRVSTOREiaAHCI_3FBCED07C01BEA1C4A8318A0FFFDA90F9C50474DiaStor.sys
[2008.04.15 15:00:00 | 00,096,512 | —- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 — C:WINDOWSsystem32driversatapi.sys
========== Alternate Data Streams ==========
@Alternate Data Stream — 153 bytes -> C:Documents and SettingsAll UsersApplication DataTEMP:6DFF1A8A
