Logfile of random’s system information tool 1.08 (written by random/random)
Run by Moto-moto$Sten at 2011-01-15 18:16:55
Microsoft Windows 7 Корпоративная
System drive C: has 4 GB (13%) free of 30 GB
Total RAM: 2047 MB (61% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:17:24, on 15.01.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal
Running processes:
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Program FilesESETESET Smart Securityegui.exe
C:Program FilesRealtekAudioHDARtHDVCpl.exe
C:Program FilesDAEMON Tools LiteDTLite.exe
C:Program FilesWindows Sidebarsidebar.exe
C:WindowsSystem32ctfmon.exe
C:Program FilesYandexPunto Switcherpunto.exe
C:Windowssystem32wuauclt.exe
C:Program FilesOperaopera.exe
C:UsersMoto-moto$StenDesktopRSIT.exe
C:Windowssystem32SearchFilterHost.exe
C:Program Filestrend microMoto-moto$Sten.exe
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://search.qip.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://search.qip.ru/ie
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://search.qip.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://qip.ru
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://search.qip.ru/ie
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
R3 — URLSearchHook: QIPBHO Class — {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} — C:UsersMoto-moto$StenAppDataRoamingMicrosoftInternet Explorerqipsearchbar.dll
R3 — URLSearchHook: (no name) — — (no file)
O2 — BHO: AcroIEHelperStub — {18DF081C-E8AD-4283-A596-FA578C2EBDC3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 — BHO: QipLI — {6B5863A0-C43F-4C0A-982B-CC0E9125783F} — C:UsersMoto-moto$StenAppDataRoamingMicrosoftInternet Explorerqstatsrv.dll
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — C:PROGRA~1DOWNLO~1dmiehlp.dll
O2 — BHO: QIPBHO — {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} — C:UsersMoto-moto$StenAppDataRoamingMicrosoftInternet Explorerqipsearchbar.dll
O4 — HKLM..Run: [egui] «C:Program FilesESETESET Smart Securityegui.exe» /hide /waitservice
O4 — HKLM..Run: [RtHDVCpl] C:Program FilesRealtekAudioHDARtHDVCpl.exe -s
O4 — HKCU..Run: [DAEMON Tools Lite] «C:Program FilesDAEMON Tools LiteDTLite.exe» -autorun
O4 — HKCU..Run: [Sidebar] C:Program FilesWindows Sidebarsidebar.exe /autoRun
O4 — HKCU..Run: [CTFMON.EXE] C:Windowssystem32ctfmon.exe
O4 — HKUSS-1-5-19..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /autoRun (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [mctadmin] C:WindowsSystem32mctadmin.exe (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /autoRun (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [mctadmin] C:WindowsSystem32mctadmin.exe (User ‘NETWORK SERVICE’)
O4 — Startup: Punto Switcher.lnk = C:Program FilesYandexPunto Switcherpunto.exe
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~1OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — C:Program FilesDownload Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — C:Program FilesDownload Masterdmie.htm
O8 — Extra context menu item: Передать на удаленную закачку DM — C:Program FilesDownload Masterremdown.htm
O9 — Extra button: @C:WindowsWindowsMobileINetRepl.dll,-222 — {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} — C:WindowsWindowsMobileINetRepl.dll
O9 — Extra button: (no name) — {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} — C:WindowsWindowsMobileINetRepl.dll
O9 — Extra ‘Tools’ menuitem: @C:WindowsWindowsMobileINetRepl.dll,-223 — {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} — C:WindowsWindowsMobileINetRepl.dll
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~1OFFICE11REFIEBAR.DLL
O16 — DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) — http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
O16 — DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) — http://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O23 — Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) — Apple Computer, Inc. — C:Program FilesBonjourmDNSResponder.exe
O23 — Service: ESET HTTP Server (EhttpSrv) — ESET — C:Program FilesESETESET Smart SecurityEHttpSrv.exe
O23 — Service: ESET Service (ekrn) — ESET — C:Program FilesESETESET Smart Securityekrn.exe
O23 — Service: FLEXnet Licensing Service — Macrovision Europe Ltd. — C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 — Service: ServiceLayer — Nokia — C:Program FilesPC Connectivity SolutionServiceLayer.exe
O23 — Service: Steam Client Service — Valve Corporation — C:Program FilesCommon FilesSteamSteamService.exe
—
End of file — 6243 bytes
======Scheduled tasks folder======
C:WindowstasksGoogleUpdateTaskMachineCore.job
C:WindowstasksGoogleUpdateTaskMachineUA.job
C:WindowstasksSmartDefrag.job
======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll [2010-09-22 75200]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{6B5863A0-C43F-4C0A-982B-CC0E9125783F}]
QipLI Class — C:UsersMoto-moto$StenAppDataRoamingMicrosoftInternet Explorerqstatsrv.dll [2010-12-23 48512]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — C:PROGRA~1DOWNLO~1dmiehlp.dll [2010-07-01 165184]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class — C:UsersMoto-moto$StenAppDataRoamingMicrosoftInternet Explorerqipsearchbar.dll [2009-07-14 150768]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«egui»=C:Program FilesESETESET Smart Securityegui.exe [2009-05-14 2029640]
«RtHDVCpl»=C:Program FilesRealtekAudioHDARtHDVCpl.exe [2010-11-02 9808488]
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«DAEMON Tools Lite»=C:Program FilesDAEMON Tools LiteDTLite.exe [2010-04-01 357696]
«Sidebar»=C:Program FilesWindows Sidebarsidebar.exe [2009-07-14 1173504]
«»= []
«CTFMON.EXE»=C:Windowssystem32ctfmon.exe [2009-07-14 8704]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAdobe ARM]
C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe [2010-09-20 932288]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregAdobe Reader Speed Launcher]
C:Program FilesAdobeReader 9.0ReaderReader_sl.exe [2010-09-23 35760]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregDAEMON Tools]
[]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregDAEMON Tools Lite]
C:Program FilesDAEMON Tools LiteDTLite.exe [2010-04-01 357696]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregDownload Master]
C:Program FilesDownload Masterdmaster.exe [2010-12-15 3902272]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregGoogle Update]
C:UsersMoto-moto$StenAppDataLocalGoogleUpdateGoogleUpdate.exe /c []
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregICQ]
C:Program FilesICQ7.2ICQ.exe silent loginmode=4 []
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregIndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:Program FilesCommon FilesNeroLibNMIndexStoreSvr.exe [2008-06-24 1840424]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNBKeyScan]
C:Program FilesNeroNero8Nero BackItUpNBKeyScan.exe [2008-06-08 2221352]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNokia FastStart]
[]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNokiaMServer]
C:Program FilesCommon FilesNokiaMPlatformNokiaMServer /watchfiles startup []
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNokiaOviSuite2]
C:Program FilesNokiaNokia Ovi SuiteNokiaOviSuite.exe [2010-12-20 697856]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregPC Suite Tray]
C:Program FilesNokiaNokia PC Suite 7PCSuite.exe [2010-05-14 1479680]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregQIP Internet Guardian]
C:UsersMoto-moto$StenAppDataRoamingQipGuardQipGuard.exe [2010-12-23 191360]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSkype]
C:Program FilesSkypePhoneSkype.exe [2010-10-11 14940040]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSteam]
C:Program FilesSteamSteam.exe [2010-12-24 1242448]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregUniblue RegistryBooster 2]
c:program filesuniblueregistrybooster 2StartRegistryBooster.exe []
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregWindows Mobile Device Center]
C:WindowsWindowsMobilewmdc.exe [2007-05-31 648072]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WinZip Quick Pick.lnk]
[]
[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Users^Moto-moto$Sten^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Xfire.lnk]
C:PROGRA~1Xfirexfire.exe [2007-11-15 2836304]
C:UsersMoto-moto$StenAppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
Punto Switcher.lnk — C:Program FilesYandexPunto Switcherpunto.exe
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WebCheck — {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetcontrolsecurityproviders]
«SecurityProviders»=credssp.dll
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkAFD]
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«DisableCMD»=0
«DisableTaskMgr»=0
«DisableRegedit»=0
«NoDispScrSavPage»=0
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«ConsentPromptBehaviorAdmin»=0
«ConsentPromptBehaviorUser»=3
«EnableLUA»=0
«EnableUIADesktopToggle»=0
«PromptOnSecureDesktop»=0
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«DisableRegedit»=0
«DisableTaskMgr»=0
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoClose»=0
«NoFolderOptions»=0
«NoBandCustomize»=0
«NoMovingBands»=0
«NoCloseDragDropBands»=0
«NoActiveDesktop»=0
«NoDriveTypeAutoRun»=145
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoFolderOptions»=0
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
======File associations======
.js — edit — C:WindowsSystem32Notepad.exe %1
.js — open — C:WindowsSystem32WScript.exe «%1» %*
.txt — open — NOTEPAD.EXE %1
======List of files/folders created in the last 1 months======
2011-01-15 18:16:57 —-D—- C:Program Filestrend micro
2011-01-15 18:16:55 —-D—- C:rsit
2011-01-15 16:25:45 —-D—- C:ProgramDataBombinaSoft
2011-01-14 22:40:59 —-A—- C:Windowsntbtlog.txt
2011-01-14 22:21:12 —-D—- C:Program Files7-Zip
2011-01-12 12:14:28 —-A—- C:Windowssystem32odbc32.dll
2011-01-12 12:14:01 —-A—- C:Windowssystem32d3d10warp.dll
2011-01-12 12:14:00 —-A—- C:Windowssystem32DWrite.dll
2011-01-12 12:14:00 —-A—- C:Windowssystem32d2d1.dll
2011-01-12 12:13:59 —-A—- C:Windowssystem32XpsPrint.dll
2011-01-12 12:13:59 —-A—- C:Windowssystem32mf.dll
2011-01-12 12:13:59 —-A—- C:Windowssystem32FntCache.dll
2011-01-12 12:13:58 —-A—- C:Windowssystem32XpsGdiConverter.dll
2011-01-12 12:13:58 —-A—- C:Windowssystem32WMVDECOD.DLL
2011-01-12 12:13:58 —-A—- C:Windowssystem32driversdxgkrnl.sys
2011-01-12 12:13:58 —-A—- C:Windowssystem32d3d10_1core.dll
2011-01-12 12:13:58 —-A—- C:Windowssystem32cdd.dll
2011-01-12 12:13:57 —-A—- C:Windowssystem32XpsRasterService.dll
2011-01-12 12:13:57 —-A—- C:Windowssystem32mfreadwrite.dll
2011-01-12 12:13:57 —-A—- C:Windowssystem32ExplorerFrame.dll
2011-01-12 12:13:57 —-A—- C:Windowssystem32driversdxgmms1.sys
2011-01-12 12:13:57 —-A—- C:Windowssystem32d3d10_1.dll
2011-01-08 05:30:40 —-D—- C:Program FilesMicrosoft Silverlight
2011-01-08 02:22:41 —-ASH—- C:pagefile.sys
2010-12-27 02:32:33 —-D—- C:UsersMoto-moto$StenAppDataRoamingNokia Ovi Suite
2010-12-27 01:01:19 —-D—- C:ProgramDataNokia
2010-12-27 00:48:48 —-D—- C:Program FilesPC Connectivity Solution
2010-12-27 00:47:28 —-D—- C:ProgramDataNokiaInstallerCache
2010-12-27 00:20:25 —-D—- C:ProgramDataOviInstallerCache
2010-12-24 13:23:13 —-D—- C:Program FilesCommon FilesSteam
2010-12-24 13:23:06 —-D—- C:Program FilesSteam
2010-12-23 14:33:04 —-D—- C:UsersMoto-moto$StenAppDataRoamingOpera
2010-12-23 14:32:47 —-D—- C:Program FilesOpera
2010-12-18 00:41:14 —-A—- C:Windowssystem32tzres.dll
2010-12-18 00:41:09 —-A—- C:Windowssystem32iertutil.dll
2010-12-18 00:41:08 —-A—- C:Windowssystem32mstime.dll
2010-12-18 00:41:07 —-A—- C:Windowssystem32mshtml.dll
2010-12-18 00:41:05 —-A—- C:Windowssystem32ieframe.dll
2010-12-18 00:41:04 —-A—- C:Windowssystem32wininet.dll
2010-12-18 00:41:04 —-A—- C:Windowssystem32urlmon.dll
2010-12-18 00:41:04 —-A—- C:Windowssystem32msfeeds.dll
2010-12-18 00:41:03 —-A—- C:Windowssystem32mshtmled.dll
2010-12-18 00:41:03 —-A—- C:Windowssystem32msfeedssync.exe
2010-12-18 00:41:03 —-A—- C:Windowssystem32msfeedsbs.dll
2010-12-18 00:41:03 —-A—- C:Windowssystem32licmgr10.dll
2010-12-18 00:41:03 —-A—- C:Windowssystem32jsproxy.dll
2010-12-18 00:41:03 —-A—- C:Windowssystem32ieui.dll
2010-12-18 00:41:03 —-A—- C:Windowssystem32iepeers.dll
2010-12-18 00:41:03 —-A—- C:Windowssystem32iedkcs32.dll
2010-12-18 00:41:01 —-A—- C:Windowssystem32taskschd.dll
2010-12-18 00:41:01 —-A—- C:Windowssystem32schedsvc.dll
2010-12-18 00:41:00 —-A—- C:Windowssystem32wmicmiplugin.dll
2010-12-18 00:41:00 —-A—- C:Windowssystem32taskeng.exe
2010-12-18 00:41:00 —-A—- C:Windowssystem32taskcomp.dll
2010-12-18 00:41:00 —-A—- C:Windowssystem32schtasks.exe
2010-12-18 00:40:51 —-A—- C:Windowssystem32webio.dll
2010-12-18 00:40:50 —-A—- C:Windowssystem32atmlib.dll
2010-12-18 00:40:50 —-A—- C:Windowssystem32atmfd.dll
2010-12-18 00:40:37 —-A—- C:Windowssystem32win32k.sys
2010-12-18 00:40:32 —-A—- C:Windowssystem32consent.exe
======List of files/folders modified in the last 1 months======
2011-01-15 18:17:13 —-D—- C:WindowsPrefetch
2011-01-15 18:17:03 —-D—- C:WindowsTemp
2011-01-15 18:16:57 —-RD—- C:Program Files
2011-01-15 17:21:22 —-D—- C:Windowssystem32config
2011-01-15 16:25:45 —-HD—- C:ProgramData
2011-01-15 15:22:47 —-D—- C:Program FilesQIP Infium
2011-01-15 14:49:37 —-D—- C:UsersMoto-moto$StenAppDataRoamingAIMP
2011-01-15 13:13:24 —-A—- C:WindowsNeroDigital.ini
2011-01-15 13:00:46 —-SH—- C:Program Filesdesktop.ini
2011-01-15 13:00:46 —-RD—- C:Users
2011-01-14 22:46:52 —-D—- C:WindowsSystem32
2011-01-14 22:40:59 —-D—- C:Windows
2011-01-14 21:34:16 —-D—- C:Windowssystem32drivers
2011-01-14 18:26:11 —-D—- C:Windowssystem32driversetc
2011-01-14 12:56:52 —-SHD—- C:System Volume Information
2011-01-12 14:58:36 —-D—- C:Windowswinsxs
2011-01-12 12:15:09 —-A—- C:Windowssystem32MRT.exe
2011-01-12 12:14:22 —-D—- C:Windowssystem32catroot
2011-01-12 12:14:21 —-D—- C:Windowssystem32catroot2
2011-01-11 00:31:06 —-D—- C:Windowsinf
2011-01-11 00:31:06 —-A—- C:Windowssystem32PerfStringBackup.INI
2011-01-08 05:31:13 —-SHD—- C:WindowsInstaller
2011-01-08 05:31:12 —-SD—- C:ProgramDataMicrosoft
2011-01-08 05:25:34 —-D—- C:Windowssystem32DriverStore
2011-01-08 03:37:28 —-D—- C:Program FilesCommon Filesmicrosoft shared
2011-01-08 03:31:15 —-D—- C:WindowsPCHEALTH
2011-01-08 00:53:45 —-D—- C:UsersMoto-moto$StenAppDataRoamingNokia
2011-01-06 22:54:15 —-RSD—- C:Windowsassembly
2011-01-06 22:54:15 —-D—- C:WindowsMicrosoft.NET
2011-01-06 22:37:29 —-D—- C:Windowssystem32NDF
2011-01-06 22:33:48 —-D—- C:Program FilesAdobe
2011-01-06 22:22:22 —-D—- C:UsersMoto-moto$StenAppDataRoamingAdobe
2011-01-05 23:43:06 —-D—- C:WindowsSoftwareDistribution
2011-01-01 21:39:12 —-D—- C:Downloads
2010-12-28 01:26:10 —-D—- C:UsersMoto-moto$StenAppDataRoamingQipGuard
2010-12-27 02:31:43 —-D—- C:UsersMoto-moto$StenAppDataRoamingPC Suite
2010-12-27 00:49:59 —-D—- C:Program FilesCommon FilesNokia
2010-12-27 00:48:53 —-DC—- C:Windowssystem32DRVSTORE
2010-12-27 00:48:10 —-D—- C:Program FilesNokia
2010-12-25 13:42:27 —-D—- C:ProgramDataFLEXnet
2010-12-24 13:23:13 —-D—- C:Program FilesCommon Files
2010-12-23 13:38:21 —-D—- C:Program FilesDownload Master
2010-12-18 00:44:30 —-D—- C:Windowssystem32ru-RU
2010-12-18 00:44:30 —-D—- C:Windowssystem32en-US
2010-12-18 00:44:30 —-D—- C:Program FilesWindows Mail
2010-12-18 00:44:30 —-D—- C:Program FilesInternet Explorer
2010-12-18 00:44:29 —-D—- C:Windowssystem32migration
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 nvstor32;nvstor32; C:Windowssystem32DRIVERSnvstor32.sys [2009-08-04 213024]
R0 pciide;pciide; C:Windowssystem32DRIVERSpciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:WindowsSystem32driversrdyboost.sys [2009-07-14 173648]
R0 SI3112r;Silicon Image SiI 3512 SATARaid Controller; C:Windowssystem32DRIVERSSI3112r.sys [2007-08-29 116264]
R0 SiFilter;SATALink driver accelerator; C:Windowssystem32DRIVERSSiWinAcc.sys [2007-08-29 19240]
R0 sptd;sptd; C:WindowsSystem32Driverssptd.sys [2010-10-26 436792]
R1 CSC;@%systemroot%system32cscsvc.dll,-202; C:Windowssystem32driverscsc.sys [2009-07-14 387584]
R1 ehdrv;ehdrv; C:Windowssystem32DRIVERSehdrv.sys [2009-05-14 107256]
R2 eamon;eamon; C:Windowssystem32DRIVERSeamon.sys [2009-05-14 114472]
R2 epfw;epfw; C:Windowssystem32DRIVERSepfw.sys [2009-05-14 133000]
R2 epfwwfp;epfwwfp; C:Windowssystem32DRIVERSepfwwfp.sys [2009-05-14 38240]
R2 Parvdm;Parvdm; C:Windowssystem32DRIVERSparvdm.sys [2009-07-14 8704]
R2 RMCAST;@%SystemRoot%system32wshrm.dll,-102; C:Windowssystem32DRIVERSRMCAST.sys [2009-07-14 117248]
R3 Epfwndis;Eset Personal Firewall; C:Windowssystem32DRIVERSEpfwndis.sys [2009-05-14 33096]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:Windowssystem32driversRTKVHDA.sys [2010-11-02 3228712]
R3 MTsensor;ATK0110 ACPI UTILITY; C:Windowssystem32DRIVERSASACPI.sys [2004-08-13 5810]
R3 NVNET;NVIDIA nForce Ethernet Driver; C:Windowssystem32DRIVERSnvmf6232.sys [2010-08-12 298216]
S3 aic78xx;aic78xx; C:Windowssystem32DRIVERSdjsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:Windowssystem32DRIVERSamdagp.sys [2009-07-14 53312]
S3 atmbqmjh;atmbqmjh; C:Windowssystem32driversatmbqmjh.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet — NDIS 6.0; C:Windowssystem32DRIVERSb57nd60x.sys [2009-07-14 229888]
S3 BthEnum;Служба перечислителя Bluetooth; C:Windowssystem32DRIVERSBthEnum.sys [2009-07-14 34816]
S3 BthPan;Устройства Bluetooth (личной сети); C:Windowssystem32DRIVERSbthpan.sys [2009-07-14 93696]
S3 BTHPORT;Драйвер порта Bluetooth; C:WindowsSystem32DriversBTHport.sys [2009-07-14 392704]
S3 BTHUSB;Драйвер порта USB радиомодуля Bluetooth; C:WindowsSystem32DriversBTHUSB.sys [2009-07-14 58880]
S3 GarenaPEngine;GarenaPEngine; ??C:UsersMOTO-M~1AppDataLocalTempLDK4BF0.tmp []
S3 GGSAFERDriver;GGSAFER Driver; ??D:Program FilesGarenapluginsUIsafedrv.sys []
S3 GT680x;BearPaw 2448CS Plus Usb Scanner; C:WindowsSystem32DriversGt680x.sys [2003-02-18 17504]
S3 hamachi;Hamachi Network Interface; C:Windowssystem32DRIVERShamachi.sys [2010-02-03 26176]
S3 ivusb;Initio Driver for USB Default Controller; C:Windowssystem32DRIVERSivusb.sys [2010-03-10 25112]
S3 nmwcd;Nokia USB Phone Parent Driver; C:Windowssystem32driversccdcmb.sys [2010-07-30 18048]
S3 nmwcdc;Nokia USB Communication Driver; C:Windowssystem32driversccdcmbo.sys [2010-07-30 23040]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:Windowssystem32driversnmwcdnsu.sys [2010-07-26 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:Windowssystem32driversnmwcdnsuc.sys [2010-07-26 8576]
S3 nv;nv; C:Windowssystem32DRIVERSnv4_mini.sys [2006-10-31 3964256]
S3 NVENETFD;Драйвер сетевого контроллера NVIDIA nForce; C:Windowssystem32DRIVERSnvm62x32.sys [2009-07-14 347264]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:Windowssystem32DRIVERSpccsmcfd.sys [2008-08-26 18816]
S3 RDPDR;Terminal Server Device Redirector Driver; C:WindowsSystem32driversrdpdr.sys [2009-07-14 133120]
S3 RFCOMM;Устройство Bluetooth (протокол RFCOMM TDI); C:Windowssystem32DRIVERSrfcomm.sys [2009-07-14 129536]
S3 s3cap;s3cap; C:Windowssystem32DRIVERSvms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:Windowssystem32DRIVERSsisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:Windowssystem32DRIVERSstorvsc.sys [2009-07-14 28224]
S3 upperdev;upperdev; C:Windowssystem32DRIVERSusbser_lowerflt.sys [2010-07-30 8192]
S3 usbser;USB Modem Driver; C:Windowssystem32driversusbser.sys [2009-07-14 27648]
S3 UsbserFilt;UsbserFilt; C:Windowssystem32DRIVERSusbser_lowerfltj.sys [2010-07-30 8192]
S3 viaagp;VIA AGP Bus Filter; C:Windowssystem32DRIVERSviaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:Windowssystem32DRIVERSviac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%system32vmbusres.dll,-1000; C:Windowssystem32DRIVERSvmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:Windowssystem32DRIVERSVMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb драйвер; C:Windowssystem32DRIVERSWinUsb.sys [2009-07-14 34944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:Program FilesBonjourmDNSResponder.exe [2006-02-28 229376]
R2 CscService;@%systemroot%system32cscsvc.dll,-200; C:WindowsSystem32svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:Program FilesESETESET Smart Securityekrn.exe [2009-05-14 731840]
R2 RapiMgr;@%windir%WindowsMobilerapimgr.dll,-104; C:Windowssystem32svchost.exe [2009-07-14 20992]
R2 WcesComm;@%windir%WindowsMobilewcescomm.dll,-40079; C:Windowssystem32svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe [2010-03-18 130384]
S3 AppMgmt;@appmgmts.dll,-3250; C:Windowssystem32svchost.exe [2009-07-14 20992]
S3 aspnet_state;Служба состояний ASP.NET; C:WindowsMicrosoft.NETFrameworkv4.0.30319aspnet_state.exe [2010-03-18 35160]
S3 EhttpSrv;ESET HTTP Server; C:Program FilesESETESET Smart SecurityEHttpSrv.exe [2009-05-14 20680]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe [2010-02-25 654848]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 PeerDistSvc;@%SystemRoot%system32peerdistsvc.dll,-9000; C:WindowsSystem32svchost.exe [2009-07-14 20992]
S3 ServiceLayer;ServiceLayer; C:Program FilesPC Connectivity SolutionServiceLayer.exe [2010-12-08 628736]
S3 Steam Client Service;Steam Client Service; C:Program FilesCommon FilesSteamSteamService.exe [2010-09-10 411432]
S3 StorSvc;@%SystemRoot%System32StorSvc.dll,-100; C:WindowsSystem32svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%system32umrdp.dll,-1000; C:WindowsSystem32svchost.exe [2009-07-14 20992]
S4 gupdate1cad1cbac2e1948;Google Update Service (gupdate1cad1cbac2e1948); C:Program FilesGoogleUpdateGoogleUpdate.exe [2010-04-01 133104]
S4 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-03 69632]
S4 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:Program FilesNeroNero8Nero BackItUpNBService.exe [2008-06-08 877864]
S4 NetMsmqActivator;@C:WindowsMicrosoft.NETFrameworkv4.0.30319\ServiceModelInstallRC.dll,-8195; C:WindowsMicrosoft.NETFrameworkv4.0.30319SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:WindowsMicrosoft.NETFrameworkv4.0.30319\ServiceModelInstallRC.dll,-8197; C:WindowsMicrosoft.NETFrameworkv4.0.30319SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:WindowsMicrosoft.NETFrameworkv4.0.30319\ServiceModelInstallRC.dll,-8199; C:WindowsMicrosoft.NETFrameworkv4.0.30319SMSvcHost.exe [2010-03-18 124240]
S4 NMIndexingService;NMIndexingService; C:Program FilesCommon FilesNeroLibNMIndexingService.exe [2008-06-24 537896]
S4 nvsvc;NVIDIA Display Driver Service; C:Windowssystem32nvsvc32.exe [2006-10-31 155715]
S4 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:Windowssystem32IoctlSvc.exe [2006-12-19 81920]
EOF
