- This topic has 1 ответ, 2 участника, and was last updated 15 years, 4 months назад by
.
-
Сообщения
-
уже и дату меняла!!и восстанавливать систему пыталась…ну вообще я почти блондинка 😳 но пытаюсь пытаюсь :geek:
Logfile of random’s system information tool 1.06 (written by random/random)
Run by STG at 2010-04-05 23:39:06
Microsoft Windows XP Professional Service Pack 3
System drive C: has 16 GB (61%) free of 26 GB
Total RAM: 1015 MB (22% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:39:43, on 05.04.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesABBYY FineReader 9.0NetworkLicenseServer.exe
C:Program FilesESETESET NOD32 Antivirusekrn.exe
C:Program FilesJavajre6binjqs.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:Documents and SettingsSTGApplication Datanetprotocol.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32WgaTray.exe
C:WINDOWSexplorer.exe
C:WINDOWSsystem32wbemwmiapsrv.exe
C:WINDOWSRTHDCPL.EXE
C:WINDOWSsystem32hkcmd.exe
C:WINDOWSsystem32igfxpers.exe
D:MAgent.exe
C:Program FilesЗоркий ГлазAntivirь.exe
C:Program FilesESETCyberMania.exe
C:Program FilesESETESET NOD32 Antivirusegui.exe
C:Program FilesCyberLinkPowerDVD9PDVD9Serv.exe
C:Program FilesCyberlinkShared Filesbrs.exe
C:Program FilesCommon FilesJavaJava Updatejusched.exe
C:WINDOWSsystem32ctfmon.exe
C:Documents and SettingsAll Userssystems.exe
C:WINDOWSsystem32taskmgr.exe
D:Хламopera.exe
C:Program FilesSkypePhoneSkype.exe
C:Program FilesSkypePlugin ManagerskypePM.exe
C:Program FilesRSIT.exe
C:Program Filestrend microSTG.exeR1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.mail.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=25435
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Windows Internet Explorer предоставлен: Mail.Ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
F2 — REG:system.ini: Shell=explorer.exe
F2 — REG:system.ini: UserInit=C:WINDOWSsystem32userinit.exe,\?globalrootsystemrootsystem32qo2RRvT.exe,\?globalrootsystemrootsystem32E5Q4kT0.exe,\?globalrootsystemrootsystem32KBKWNsv.exe,
O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier5.0.926.3450swg.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 — Toolbar: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O3 — Toolbar: Rambler-Ассистент — {468CD8A9-7C25-45FA-969E-3D925C689DC4} — C:Program FilesRambler AssistantramblertoolbarU5090.dll
O4 — HKLM..Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [SkyTel] SkyTel.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [igfxtray] C:WINDOWSsystem32igfxtray.exe
O4 — HKLM..Run: [igfxhkcmd] C:WINDOWSsystem32hkcmd.exe
O4 — HKLM..Run: [igfxpers] C:WINDOWSsystem32igfxpers.exe
O4 — HKLM..Run: [MAgent] D:MAgent.exe -LM
O4 — HKLM..Run: [FlashAntivir] «C:Program FilesЗоркий ГлазAntivirь.exe»
O4 — HKLM..Run: [OutpostMonitor] «C:PROGRA~1AgnitumOUTPOS~1op_mon.exe» /tray /noservice
O4 — HKLM..Run: [OutpostFeedBack] «C:Program FilesAgnitumOutpost Firewall Profeedback.exe» /dump:os_startup
O4 — HKLM..Run: [CyberMania] C:Program FilesESETCyberMania.exe
O4 — HKLM..Run: [egui] «C:Program FilesESETESET NOD32 Antivirusegui.exe» /hide /waitservice
O4 — HKLM..Run: [RemoteControl9] «C:Program FilesCyberLinkPowerDVD9PDVD9Serv.exe»
O4 — HKLM..Run: [BDRegion] C:Program FilesCyberlinkShared Filesbrs.exe
O4 — HKLM..Run: [SunJavaUpdateSched] «C:Program FilesCommon FilesJavaJava Updatejusched.exe»
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [ICQ] «D:9E9E~1ICQ6.5ICQ.exe» silent
O4 — HKCU..Run: [Shell] C:Documents and SettingsAll Userssystems.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O8 — Extra context menu item: Найти с помощью Рамблера — res://C:Program FilesRambler AssistantramblertoolbarU5090.dll/search.htm
O8 — Extra context menu item: Опубликовать в Дневнике — res://C:Program FilesRambler AssistantramblertoolbarU5090.dll/planet.htm
O8 — Extra context menu item: Перевести с помощью словарей Рамблера — res://C:Program FilesRambler AssistantramblertoolbarU5090.dll/dic.htm
O8 — Extra context menu item: Поиск@Mail.Ru — res://C:Program FilesMail.RuSputnikMailRuSputnik.dll/282
O8 — Extra context menu item: Словари@Mail.Ru — res://C:Program FilesMail.RuSputnikMailRuSputnik.dll/283
O9 — Extra button: Быстрая настройка Outpost Firewall Pro — {44627E97-789B-40d4-B5C2-58BD171129A1} — C:Program FilesAgnitumOutpost Firewall Proie_bar.dll
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — D:magent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — D:magent.exe
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O10 — Unknown file in Winsock LSP: c:windowssystem32nwprovau.dll
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload.adobe.com/pub/shockwave/cabs/flash/swflash.cab
O17 — HKLMSystemCCSServicesTcpip..{EEA0DB7C-F7A9-43DF-A889-34E922FCEC46}: NameServer = 192.168.1.1,192.168.1.2
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O18 — Protocol: solores — {8FA1F4E9-444B-48BF-98CD-B8ECA88E6BA5} — C:PROGRA~1Solo9SoloRes.dll (file missing)
O20 — AppInit_DLLs: c:progra~1agnitumoutpos~1wl_hook.dll
O23 — Service: ABBYY FineReader 9.0 Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) — ABBYY (BIT Software) — C:Program FilesABBYY FineReader 9.0NetworkLicenseServer.exe
O23 — Service: Agnitum Client Security Service (acssrv) — Agnitum Ltd. — C:PROGRA~1AgnitumOUTPOS~1acs.exe
O23 — Service: ESET HTTP Server (EhttpSrv) — ESET — C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe
O23 — Service: ESET Service (ekrn) — ESET — C:Program FilesESETESET NOD32 Antivirusekrn.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Google Software Updater (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — C:Program FilesJavajre6binjqs.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: Network Protocol Driver (Netprotocol) — Unknown owner — C:Documents and SettingsSTGApplication Datanetprotocol.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: SpIDer Guard for Windows (SPIDERNT) — Unknown owner — C:PROGRA~1DrWebspidernt.exe (file missing)
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe—
End of file — 9839 bytes======Scheduled tasks folder======
C:WINDOWStasksGoogle Software Updater.job
C:WINDOWStasksUser_Feed_Synchronization-{38ACA47A-4B0F-48C5-BEB5-FD87CB42AA8D}.job======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll [2005-09-24 63136][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2010-03-06 680624][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier5.0.926.3450swg.dll [2009-10-31 657904][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2010-04-03 41760][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2010-04-03 79648][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2010-03-06 680624]
{468CD8A9-7C25-45FA-969E-3D925C689DC4} — Rambler-Ассистент — C:Program FilesRambler AssistantramblertoolbarU5090.dll [2007-07-30 804336][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«High Definition Audio Property Page Shortcut»=C:WINDOWSsystem32HDAShCut.exe [2005-01-07 61952]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2007-02-26 16125440]
«SkyTel»=C:WINDOWSSkyTel.EXE [2006-05-16 2879488]
«Alcmtr»=C:WINDOWSALCMTR.EXE [2005-05-03 69632]
«igfxtray»=C:WINDOWSsystem32igfxtray.exe [2006-02-07 94208]
«igfxhkcmd»=C:WINDOWSsystem32hkcmd.exe [2006-02-07 77824]
«igfxpers»=C:WINDOWSsystem32igfxpers.exe [2006-02-07 118784]
«MAgent»=D:MAgent.exe [2009-12-21 8746680]
«FlashAntivir»=C:Program FilesЗоркий ГлазAntivirь.exe [2010-02-01 537088]
«OutpostMonitor»=C:PROGRA~1AgnitumOUTPOS~1op_mon.exe [2009-07-21 1260872]
«OutpostFeedBack»=C:Program FilesAgnitumOutpost Firewall Profeedback.exe [2009-07-17 436552]
«CyberMania»=C:Program FilesESETCyberMania.exe [2008-07-04 556175]
«egui»=C:Program FilesESETESET NOD32 Antivirusegui.exe [2009-03-19 2029640]
«RemoteControl9″=C:Program FilesCyberLinkPowerDVD9PDVD9Serv.exe [2009-10-06 87336]
«BDRegion»=C:Program FilesCyberlinkShared Filesbrs.exe [2009-09-01 75048]
«SunJavaUpdateSched»=C:Program FilesCommon FilesJavaJava Updatejusched.exe [2010-02-18 248040][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-14 15360]
«ICQ»=D:9E9E~1ICQ6.5ICQ.exe silent []
«Shell»=C:Documents and SettingsAll Userssystems.exe [2010-05-02 332800][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSpIDerNT]
C:PROGRA~1DrWebspiderui.exe /agent [][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupreguserini]
C:WINDOWSsystem32userini.exe [][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregWinVisKa]
C:WinVisKawinviska.exe [][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^Ускоренный запуск Adobe Reader.lnk]
C:PROGRA~1AdobeACROBA~1.0ReaderREADER~1.EXE [2005-09-24 29696][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLS»=»c:progra~1agnitumoutpos~1wl_hook.dll «[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyigfxcui]
C:WINDOWSsystem32igfxdev.dll [2006-02-07 139264][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWgaLogon]
C:WINDOWSsystem32WgaLogon.dll [2009-03-10 265096][HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa]
«authentication packages»=msv1_0
nwprovau[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworknm]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworknm.sys]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=
«HonorAutoRunSetting»=[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesSkypePlugin ManagerskypePM.exe»=»C:Program FilesSkypePlugin ManagerskypePM.exe:*:Enabled:Skype Extras Manager»
«D:Хламopera.exe»=»D:Хламopera.exe:*:Enabled:Opera Internet Browser»
«C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{05c0faae-ff29-11de-9ab8-eb91b4d1056e}]
shellAutoRuncommand — Rundll32.exe .RECYCLERpadqzk.dll,Setup[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{0f7297c5-25a9-11de-99ab-001320ca64c9}]
shellexplorecommand — F:aqjbakuy.exe
shellopencommand — F:aqjbakuy.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{0fb66a64-1331-11df-9adb-001320ca64c9}]
shellAutoRuncommand — F:QUICKTIMEQ-43234FDHJ-0234567123-887321236-432FEB2.exe
shellopencommand — F:QUICKTIMEQ-43234FDHJ-0234567123-887321236-432FEB2.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{0fb66a65-1331-11df-9adb-001320ca64c9}]
shellAutoRuncommand — G:QUICKTIMEQ-43234FDHJ-0234567123-887321236-432FEB2.exe
shellopencommand — G:QUICKTIMEQ-43234FDHJ-0234567123-887321236-432FEB2.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{3c3cdda3-ef78-11dd-9986-d7b90327fb63}]
shellAutoRuncommand — mjjtxq.exe
shellexplorecommand — mjjtxq.exe
shellopencommand — mjjtxq.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{47f51ee4-7d85-11de-99e2-001320ca64c9}]
shellexplorecommand — aqjbakuy.exe
shellopencommand — aqjbakuy.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{52b9926a-ec66-11de-9a68-001320ca64c9}]
shellAutoRuncommand — F:xAVxReleAsExAVy.exe
shellopencommand — F:xAVxReleAsExAVy.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{5fbe3e26-19c4-11de-999d-001320ca64c9}]
shellexplorecommand — F:aqjbakuy.exe
shellopencommand — F:aqjbakuy.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{611e323c-6392-11de-99cf-001320ca64c9}]
shellexplorecommand — aqjbakuy.exe
shellopencommand — aqjbakuy.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{89304130-183d-11de-999b-001320ca64c9}]
shellexplorecommand — F:aqjbakuy.exe
shellopencommand — F:aqjbakuy.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{9acb7c3a-550d-11de-99c2-001320ca64c9}]
shellexplorecommand — F:aqjbakuy.exe
shellopencommand — F:aqjbakuy.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{9acb7c3b-550d-11de-99c2-001320ca64c9}]
shellexplorecommand — F:aqjbakuy.exe
shellopencommand — F:aqjbakuy.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{b3b74a3a-556c-11de-99c6-001320ca64c9}]
shellexplorecommand — F:aqjbakuy.exe
shellopencommand — F:aqjbakuy.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{c343c03c-13bd-11de-9992-001320ca64c9}]
shellexplorecommand — G:aqjbakuy.exe
shellopencommand — G:aqjbakuy.exe[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{d9c22e7c-6d02-11de-99da-001320ca64c9}]
shellexplorecommand — aqjbakuy.exe
shellopencommand — aqjbakuy.exe======List of files/folders created in the last 1 months======
2010-05-02 21:45:34 —-D—- C:Program Filesa-squared Free
2010-05-02 19:10:26 —-D—- C:Documents and SettingsSTGApplication DataPC Suite
2010-05-02 19:10:19 —-D—- C:Documents and SettingsSTGApplication DataNokia
2010-05-02 19:10:14 —-D—- C:Documents and SettingsAll UsersApplication DataPC Suite
2010-05-02 19:08:38 —-A—- C:WINDOWSsystem32netprotocol.dll
2010-05-02 19:05:12 —-D—- C:Program FilesDIFX
2010-05-02 18:59:35 —-D—- C:Documents and SettingsAll UsersApplication DataInstallations
2010-05-02 18:27:21 —-A—- C:Documents and SettingsSTGApplication Datanetprotocol.exe
2010-05-01 12:07:05 —-A—- C:WINDOWSsystem32KBKWNsv.exe
2010-05-01 12:06:13 —-A—- C:WINDOWSsystem32UFnjwNa.exe
2010-05-01 12:05:58 —-A—- C:WINDOWSsystem32E5Q4kT0.exe
2010-05-01 11:54:50 —-HDC—- C:WINDOWS$NtUninstallWdf01005$
2010-04-27 14:44:43 —-D—- C:Program FilesCommon FilesYandex
2010-04-27 14:07:49 —-D—- C:Documents and SettingsAll UsersApplication DataYandex
2010-04-27 14:07:44 —-D—- C:Program FilesYandex
2010-04-27 14:07:44 —-D—- C:Documents and SettingsSTGApplication DataYandex
2010-04-27 14:07:27 —-D—- C:Documents and SettingsAll UsersApplication DataSolo9
2010-04-19 12:00:22 —-HDC—- C:WINDOWS$NtUninstallKB961118$
2010-04-18 17:06:13 —-D—- C:WINDOWSsystem32XPSViewer
2010-04-18 17:06:09 —-D—- C:Program FilesMSBuild
2010-04-18 17:06:07 —-D—- C:WINDOWSsystem32en-US
2010-04-18 17:06:00 —-D—- C:Program FilesReference Assemblies
2010-04-18 17:05:27 —-N—- C:WINDOWSsystem32prntvpt.dll
2010-04-18 17:05:26 —-N—- C:WINDOWSsystem32xpssvcs.dll
2010-04-18 17:05:26 —-N—- C:WINDOWSsystem32xpsshhdr.dll
2010-04-18 16:27:59 —-HDC—- C:WINDOWS$NtUninstallKB978262$
2010-04-18 16:27:42 —-HDC—- C:WINDOWS$NtUninstallKB971468$
2010-04-18 16:27:24 —-HDC—- C:WINDOWS$NtUninstallKB979683$
2010-04-18 16:26:52 —-HDC—- C:WINDOWS$NtUninstallKB970430$
2010-04-18 16:26:33 —-HDC—- C:WINDOWS$NtUninstallKB980232$
2010-04-18 16:26:16 —-HDC—- C:WINDOWS$NtUninstallKB979402_WM9$
2010-04-18 16:25:57 —-HDC—- C:WINDOWS$NtUninstallKB955759$
2010-04-18 16:24:01 —-A—- C:WINDOWSsystem32MRT.exe
2010-04-18 16:23:36 —-HDC—- C:WINDOWS$NtUninstallKB974318$
2010-04-18 16:23:19 —-HDC—- C:WINDOWS$NtUninstallKB951978$
2010-04-18 16:22:55 —-HDC—- C:WINDOWS$NtUninstallKB978037$
2010-04-18 16:22:39 —-HDC—- C:WINDOWS$NtUninstallKB975713$
2010-04-18 16:22:17 —-HDC—- C:WINDOWS$NtUninstallKB978338$
2010-04-18 16:21:54 —-HDC—- C:WINDOWS$NtUninstallKB972270$
2010-04-18 16:21:37 —-HDC—- C:WINDOWS$NtUninstallKB956744$
2010-04-18 16:21:11 —-HDC—- C:WINDOWS$NtUninstallKB975561$
2010-04-18 16:20:54 —-HDC—- C:WINDOWS$NtUninstallKB975560$
2010-04-18 16:20:34 —-HDC—- C:WINDOWS$NtUninstallKB977816$
2010-04-18 16:20:19 —-HDC—- C:WINDOWS$NtUninstallKB973687$
2010-04-18 16:19:59 —-HDC—- C:WINDOWS$NtUninstallKB978601$
2010-04-18 16:19:43 —-HDC—- C:WINDOWS$NtUninstallKB973904$
2010-04-18 16:19:13 —-HDC—- C:WINDOWS$NtUninstallKB973540_WM9$
2010-04-18 16:19:00 —-HDC—- C:WINDOWS$NtUninstallKB974392$
2010-04-18 16:18:46 —-HDC—- C:WINDOWS$NtUninstallKB954459$
2010-04-18 16:18:16 —-HDC—- C:WINDOWS$NtUninstallKB971737$
2010-04-18 16:17:51 —-HDC—- C:WINDOWS$NtUninstallKB977914$
2010-04-18 16:16:39 —-HDC—- C:WINDOWS$NtUninstallKB979309$
2010-04-18 16:16:20 —-HDC—- C:WINDOWS$NtUninstallKB978706$
2010-04-18 16:16:05 —-D—- C:WINDOWSie8updates
2010-04-18 16:15:48 —-HDC—- C:WINDOWS$NtUninstallKB979306$
2010-04-18 16:15:30 —-HDC—- C:WINDOWS$NtUninstallKB969947$
2010-04-05 23:38:32 —-A—- C:Program FilesRSIT.exe
2010-04-05 18:08:02 —-A—- C:WINDOWSsystem32St14Dwv.exe
2010-04-05 11:29:42 —-A—- C:WINDOWSsystem32QgPFeQ1.exe
2010-04-05 10:44:02 —-A—- C:WINDOWSsystem32hesdyUA.exe
2010-04-05 10:37:59 —-A—- C:WINDOWSsystem32WQLugCy.exe
2010-04-05 10:18:13 —-A—- C:WINDOWSsystem32Uv1DIVX.exe
2010-04-05 10:15:06 —-A—- C:WINDOWSsystem327VAzHG2.exe
2010-04-05 09:42:28 —-A—- C:WINDOWSsystem32fZb5b7v.exe
2010-04-03 22:36:30 —-D—- C:Program FilesCommon FilesJava
2010-04-03 22:35:53 —-A—- C:WINDOWSsystem32javaws.exe
2010-04-03 22:35:53 —-A—- C:WINDOWSsystem32javaw.exe
2010-04-03 22:35:52 —-A—- C:WINDOWSsystem32java.exe
2010-04-03 22:35:26 —-D—- C:Program FilesJava
2010-04-03 21:57:40 —-D—- C:Documents and SettingsAll UsersApplication DataSun
2010-04-03 21:57:10 —-A—- C:WINDOWSsystem32deployJava1.dll
2010-04-03 21:52:20 —-D—- C:Documents and SettingsSTGApplication DataSun
2010-04-03 13:31:30 —-D—- C:Program Filestrend micro
2010-04-03 13:31:10 —-D—- C:rsit
2010-03-29 20:37:49 —-D—- C:Program FilesCommon FilesSkype
2010-03-29 12:07:20 —-A—- C:Program FilesCommon Fileskeylog.txt
2010-03-07 00:46:36 —-D—- C:Documents and SettingsSTGApplication DataCyberLink
2010-03-07 00:10:10 —-D—- C:Documents and SettingsAll UsersApplication DataCyberLink
2010-03-07 00:09:55 —-D—- C:Program FilesCommon FilesCyberLink
2010-03-07 00:08:29 —-D—- C:Program FilesCyberLink
2010-03-07 00:07:56 —-A—- C:WINDOWSsystem32msxml3a.dll
2010-03-06 23:59:37 —-D—- C:Program FilesMSECache
2010-03-06 23:51:55 —-D—- C:Program FilesCommon FilesDESIGNER
2010-03-06 23:51:49 —-D—- C:Program FilesMicrosoft Works
2010-03-06 23:51:19 —-D—- C:WINDOWSSHELLNEW
2010-03-06 23:51:08 —-D—- C:Program FilesMicrosoft.NET
2010-03-06 23:51:08 —-D—- C:Program FilesMicrosoft Office
2010-03-06 23:26:56 —-D—- C:Program FilesESET
2010-03-06 23:13:29 —-D—- C:totalcmd
2010-03-06 23:13:29 —-D—- C:Documents and SettingsSTGApplication DataGHISLER
2010-03-06 23:05:38 —-A—- C:WINDOWSsystem32d3dx10_40.dll
2010-03-06 23:05:38 —-A—- C:WINDOWSsystem32D3DCompiler_40.dll
2010-03-06 23:05:37 —-A—- C:WINDOWSsystem32D3DX9_40.dll
2010-03-06 23:05:36 —-A—- C:WINDOWSsystem32XAudio2_3.dll
2010-03-06 23:05:36 —-A—- C:WINDOWSsystem32XAPOFX1_2.dll
2010-03-06 23:05:36 —-A—- C:WINDOWSsystem32xactengine3_3.dll
2010-03-06 23:05:35 —-A—- C:WINDOWSsystem32XAudio2_2.dll
2010-03-06 23:05:35 —-A—- C:WINDOWSsystem32XAPOFX1_1.dll
2010-03-06 23:05:35 —-A—- C:WINDOWSsystem32X3DAudio1_5.dll
2010-03-06 23:05:34 —-A—- C:WINDOWSsystem32xactengine3_2.dll
2010-03-06 23:05:34 —-A—- C:WINDOWSsystem32d3dx10_39.dll
2010-03-06 23:05:34 —-A—- C:WINDOWSsystem32D3DCompiler_39.dll
2010-03-06 23:05:27 —-A—- C:WINDOWSsystem32XAudio2_1.dll
2010-03-06 23:05:27 —-A—- C:WINDOWSsystem32XAPOFX1_0.dll
2010-03-06 23:05:27 —-A—- C:WINDOWSsystem32D3DX9_39.dll
2010-03-06 23:05:26 —-A—- C:WINDOWSsystem32xactengine3_1.dll
2010-03-06 23:05:26 —-A—- C:WINDOWSsystem32X3DAudio1_4.dll
2010-03-06 23:05:25 —-A—- C:WINDOWSsystem32d3dx10_38.dll
2010-03-06 23:05:25 —-A—- C:WINDOWSsystem32D3DCompiler_38.dll
2010-03-06 23:05:24 —-A—- C:WINDOWSsystem32D3DX9_38.dll
2010-03-06 23:05:23 —-A—- C:WINDOWSsystem32XAudio2_0.dll
2010-03-06 23:05:23 —-A—- C:WINDOWSsystem32xactengine3_0.dll
2010-03-06 23:05:22 —-A—- C:WINDOWSsystem32X3DAudio1_3.dll
2010-03-06 23:05:21 —-A—- C:WINDOWSsystem32d3dx10_37.dll
2010-03-06 23:05:21 —-A—- C:WINDOWSsystem32D3DCompiler_37.dll
2010-03-06 23:05:20 —-A—- C:WINDOWSsystem32xactengine2_10.dll
2010-03-06 23:05:20 —-A—- C:WINDOWSsystem32D3DX9_37.dll
2010-03-06 23:05:18 —-A—- C:WINDOWSsystem32d3dx10_36.dll
2010-03-06 23:05:18 —-A—- C:WINDOWSsystem32D3DCompiler_36.dll
2010-03-06 23:05:17 —-A—- C:WINDOWSsystem32d3dx9_36.dll
2010-03-06 23:05:16 —-A—- C:WINDOWSsystem32xactengine2_9.dll
2010-03-06 23:05:16 —-A—- C:WINDOWSsystem32d3dx10_35.dll
2010-03-06 23:05:16 —-A—- C:WINDOWSsystem32D3DCompiler_35.dll
2010-03-06 23:05:15 —-A—- C:WINDOWSsystem32d3dx9_35.dll
2010-03-06 23:05:14 —-A—- C:WINDOWSsystem32xactengine2_8.dll
2010-03-06 23:05:14 —-A—- C:WINDOWSsystem32X3DAudio1_2.dll
2010-03-06 23:05:14 —-A—- C:WINDOWSsystem32d3dx10_34.dll
2010-03-06 23:05:14 —-A—- C:WINDOWSsystem32D3DCompiler_34.dll
2010-03-06 23:05:13 —-A—- C:WINDOWSsystem32d3dx9_34.dll
2010-03-06 23:05:12 —-A—- C:WINDOWSsystem32xinput1_3.dll
2010-03-06 23:05:10 —-A—- C:WINDOWSsystem32xactengine2_7.dll
2010-03-06 23:05:09 —-A—- C:WINDOWSsystem32d3dx10_33.dll
2010-03-06 23:05:09 —-A—- C:WINDOWSsystem32D3DCompiler_33.dll
2010-03-06 23:05:08 —-A—- C:WINDOWSsystem32d3dx9_33.dll
2010-03-06 23:05:07 —-A—- C:WINDOWSsystem32xactengine2_6.dll
2010-03-06 23:05:07 —-A—- C:WINDOWSsystem32xactengine2_5.dll
2010-03-06 23:05:06 —-A—- C:WINDOWSsystem32xactengine2_4.dll
2010-03-06 23:05:06 —-A—- C:WINDOWSsystem32x3daudio1_1.dll
2010-03-06 23:05:06 —-A—- C:WINDOWSsystem32d3dx9_32.dll
2010-03-06 23:05:05 —-A—- C:WINDOWSsystem32xactengine2_3.dll
2010-03-06 23:05:05 —-A—- C:WINDOWSsystem32d3dx9_31.dll
2010-03-06 23:05:04 —-A—- C:WINDOWSsystem32xinput1_2.dll
2010-03-06 23:05:04 —-A—- C:WINDOWSsystem32xactengine2_2.dll
2010-03-06 23:05:03 —-A—- C:WINDOWSsystem32xinput1_1.dll
2010-03-06 23:05:03 —-A—- C:WINDOWSsystem32xactengine2_1.dll
2010-03-06 23:04:58 —-A—- C:WINDOWSsystem32xactengine2_0.dll
2010-03-06 23:04:58 —-A—- C:WINDOWSsystem32x3daudio1_0.dll
2010-03-06 23:04:58 —-A—- C:WINDOWSsystem32d3dx9_30.dll
2010-03-06 23:04:57 —-A—- C:WINDOWSsystem32d3dx9_29.dll
2010-03-06 23:04:57 —-A—- C:WINDOWSsystem32d3dx9_28.dll
2010-03-06 23:04:56 —-A—- C:WINDOWSsystem32xinput9_1_0.dll
2010-03-06 23:04:56 —-A—- C:WINDOWSsystem32d3dx9_27.dll
2010-03-06 23:04:55 —-A—- C:WINDOWSsystem32d3dx9_26.dll
2010-03-06 23:04:55 —-A—- C:WINDOWSsystem32d3dx9_25.dll
2010-03-06 23:04:54 —-A—- C:WINDOWSsystem32d3dx9_24.dll
2010-03-06 23:04:47 —-D—- C:WINDOWSLogs
2010-03-06 23:03:02 —-N—- C:WINDOWSsystem32vxblock.dll
2010-03-06 23:03:02 —-N—- C:WINDOWSsystem32pxwave.dll
2010-03-06 23:03:02 —-N—- C:WINDOWSsystem32pxsfs.dll
2010-03-06 23:03:02 —-N—- C:WINDOWSsystem32pxmas.dll
2010-03-06 23:03:02 —-N—- C:WINDOWSsystem32pxinsa64.exe
2010-03-06 23:03:02 —-N—- C:WINDOWSsystem32pxhpinst.exe
2010-03-06 23:03:02 —-N—- C:WINDOWSsystem32pxdrv.dll
2010-03-06 23:03:02 —-N—- C:WINDOWSsystem32pxcpya64.exe
2010-03-06 23:03:02 —-N—- C:WINDOWSsystem32pxafs.dll
2010-03-06 23:03:02 —-N—- C:WINDOWSsystem32px.dll
2010-03-06 23:02:59 —-D—- C:Program FilesWinamp
2010-03-06 23:02:59 —-D—- C:Documents and SettingsSTGApplication DataWinamp
2010-03-06 23:02:25 —-D—- C:Program FilesMicrosoft Калькулятор Плюс
2010-03-06 23:00:27 —-HD—- C:WINDOWSmsdownld.tmp
2010-03-06 23:00:08 —-D—- C:WINDOWSWBEM
2010-03-06 22:59:03 —-HDC—- C:WINDOWSie8
2010-03-06 22:58:22 —-D—- C:Documents and SettingsAll UsersApplication DataWindows Genuine Advantage
2010-03-06 22:54:01 —-RSD—- C:WINDOWSassembly
2010-03-06 22:53:34 —-D—- C:WINDOWSMicrosoft.NET
2010-03-06 22:42:55 —-AD—- C:Documents and SettingsAll UsersApplication DataTEMP
2010-03-06 22:36:12 —-D—- C:Documents and SettingsSTGApplication DataWinRAR
2010-03-06 22:35:45 —-D—- C:WINDOWSsystem32Filt
2010-03-06 22:35:45 —-D—- C:Program FilesAgnitum
2010-03-06 22:35:38 —-D—- C:Documents and SettingsAll UsersApplication DataAgnitum
2010-03-06 22:35:07 —-A—- C:WINDOWSsystem32ztvunrar36.dll
2010-03-06 22:35:07 —-A—- C:WINDOWSsystem32ztvunace26.dll
2010-03-06 22:35:07 —-A—- C:WINDOWSsystem32ztvcabinet.dll
2010-03-06 22:35:07 —-A—- C:WINDOWSsystem32UNRAR3.dll
2010-03-06 22:35:07 —-A—- C:WINDOWSsystem32unacev2.dll
2010-03-06 22:35:05 —-D—- C:Program FilesTrojan Remover
2010-03-06 22:35:05 —-D—- C:Documents and SettingsSTGApplication DataSimply Super Software
2010-03-06 22:35:05 —-D—- C:Documents and SettingsAll UsersApplication DataSimply Super Software
2010-03-06 22:32:36 —-D—- C:WINDOWSpss
2010-03-06 22:27:56 —-D—- C:Program FilesЗоркий Глаз
2010-03-06 22:24:18 —-D—- C:Program FilesK-Lite Codec Pack
2010-03-06 22:18:52 —-D—- C:WINDOWSPrefetch
2010-03-06 22:17:36 —-HDC—- C:WINDOWS$NtUninstallKB975467$
2010-03-06 22:17:30 —-HDC—- C:WINDOWS$NtUninstallKB975025$
2010-03-06 22:17:23 —-HDC—- C:WINDOWS$NtUninstallKB974571$
2010-03-06 22:17:16 —-HDC—- C:WINDOWS$NtUninstallKB974455$
2010-03-06 22:17:10 —-HDC—- C:WINDOWS$NtUninstallKB974112$
2010-03-06 22:17:05 —-HDC—- C:WINDOWS$NtUninstallKB973869$
2010-03-06 22:17:00 —-HDC—- C:WINDOWS$NtUninstallKB973815$
2010-03-06 22:16:53 —-HDC—- C:WINDOWS$NtUninstallKB973507$
2010-03-06 22:16:47 —-HDC—- C:WINDOWS$NtUninstallKB973354$
2010-03-06 22:16:42 —-HDC—- C:WINDOWS$NtUninstallKB971657$
2010-03-06 22:16:36 —-HDC—- C:WINDOWS$NtUninstallKB971633$
2010-03-06 22:16:30 —-HDC—- C:WINDOWS$NtUninstallKB971557$
2010-03-06 22:16:23 —-HDC—- C:WINDOWS$NtUninstallKB971486$
2010-03-06 22:16:17 —-HDC—- C:WINDOWS$NtUninstallKB970238$
2010-03-06 22:16:12 —-HDC—- C:WINDOWS$NtUninstallKB969059$
2010-03-06 22:16:06 —-HDC—- C:WINDOWS$NtUninstallKB968537$
2010-03-06 22:16:00 —-HDC—- C:WINDOWS$NtUninstallKB968389$
2010-03-06 22:15:53 —-HDC—- C:WINDOWS$NtUninstallKB967715$
2010-03-06 22:15:47 —-HDC—- C:WINDOWS$NtUninstallKB961501$
2010-03-06 22:15:42 —-HDC—- C:WINDOWS$NtUninstallKB961371-v2$
2010-03-06 22:15:37 —-HDC—- C:WINDOWS$NtUninstallKB960859$
2010-03-06 22:15:31 —-HDC—- C:WINDOWS$NtUninstallKB960803$
2010-03-06 22:15:26 —-HDC—- C:WINDOWS$NtUninstallKB960225$
2010-03-06 22:15:20 —-HDC—- C:WINDOWS$NtUninstallKB959426$
2010-03-06 22:15:15 —-HDC—- C:WINDOWS$NtUninstallKB958687$
2010-03-06 22:15:10 —-HDC—- C:WINDOWS$NtUninstallKB958644$
2010-03-06 22:15:04 —-HDC—- C:WINDOWS$NtUninstallKB957097$
2010-03-06 22:14:58 —-HDC—- C:WINDOWS$NtUninstallKB956844$
2010-03-06 22:14:52 —-HDC—- C:WINDOWS$NtUninstallKB956803$
2010-03-06 22:14:46 —-HDC—- C:WINDOWS$NtUninstallKB956802$
2010-03-06 22:14:38 —-HDC—- C:WINDOWS$NtUninstallKB956572$
2010-03-06 22:14:31 —-HDC—- C:WINDOWS$NtUninstallKB955069$
2010-03-06 22:14:26 —-HDC—- C:WINDOWS$NtUninstallKB952954$
2010-03-06 22:14:20 —-HDC—- C:WINDOWS$NtUninstallKB952287$
2010-03-06 22:14:15 —-HDC—- C:WINDOWS$NtUninstallKB952004$
2010-03-06 22:14:09 —-HDC—- C:WINDOWS$NtUninstallKB951748$
2010-03-06 22:14:03 —-HDC—- C:WINDOWS$NtUninstallKB951376-v2$
2010-03-06 22:13:58 —-HDC—- C:WINDOWS$NtUninstallKB951066$
2010-03-06 22:13:53 —-HDC—- C:WINDOWS$NtUninstallKB950974$
2010-03-06 22:13:47 —-HDC—- C:WINDOWS$NtUninstallKB950762$
2010-03-06 22:13:42 —-HDC—- C:WINDOWS$NtUninstallKB946648$
2010-03-06 22:13:36 —-HDC—- C:WINDOWS$NtUninstallKB923561$
2010-03-06 22:11:52 —-N—- C:WINDOWSsystem32msxml6r.dll
2010-03-06 22:11:52 —-N—- C:WINDOWSsystem32msxml6.dll
2010-03-06 22:11:46 —-N—- C:WINDOWSsystem32smtpapi.dll
2010-03-06 22:11:46 —-N—- C:WINDOWSsystem32rwnh.dll
2010-03-06 22:11:46 —-N—- C:WINDOWSsystem32comsdupd.exe
2010-03-06 22:11:45 —-N—- C:WINDOWSsystem32dot3cfg.dll
2010-03-06 22:11:45 —-N—- C:WINDOWSsystem32dot3api.dll
2010-03-06 22:11:45 —-N—- C:WINDOWSsystem32dimsroam.dll
2010-03-06 22:11:45 —-N—- C:WINDOWSsystem32dimsntfy.dll
2010-03-06 22:11:45 —-N—- C:WINDOWSsystem32dhcpqec.dll
2010-03-06 22:11:45 —-N—- C:WINDOWSsystem32credssp.dll
2010-03-06 22:11:45 —-N—- C:WINDOWSsystem32bitsprx4.dll
2010-03-06 22:11:45 —-N—- C:WINDOWSsystem32azroles.dll
2010-03-06 22:11:45 —-N—- C:WINDOWSsystem32ativvaxx.dll
2010-03-06 22:11:45 —-N—- C:WINDOWSsystem32ativtmxx.dll
2010-03-06 22:11:45 —-N—- C:WINDOWSsystem32ati3duag.dll
2010-03-06 22:11:45 —-N—- C:WINDOWSsystem32ati3d1ag.dll
2010-03-06 22:11:45 —-N—- C:WINDOWSsystem32ati2dvag.dll
2010-03-06 22:11:45 —-N—- C:WINDOWSsystem32ati2dvaa.dll
2010-03-06 22:11:45 —-N—- C:WINDOWSsystem32ati2cqag.dll
2010-03-06 22:11:45 —-N—- C:WINDOWSsystem32aaclient.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32napstat.exe
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32napmontr.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32napipsec.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32mtxparhd.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32msshavmsg.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32mssha.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32mmcperf.exe
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32mmcfxcommon.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32mmcex.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32microsoft.managementconsole.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32mdmxsdk.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32l2gpstore.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32kmsvc.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32kbdpash.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32kbdnepr.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32kbdiultn.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32kbdbhc.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32hsfcisp2.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32eapsvc.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32eapqec.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32eappprxy.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32eapphost.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32eappgnui.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32eappcfg.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32eapp3hst.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32eapolqec.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32dot3ui.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32dot3svc.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32dot3msm.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32dot3gpclnt.dll
2010-03-06 22:11:44 —-N—- C:WINDOWSsystem32dot3dlg.dll
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32wmphoto.dll
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32wlanapi.dll
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32windowscodecsext.dll
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32windowscodecs.dll
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32verclsid.exe
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32tspkg.dll
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32tsgqec.dll
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32slserv.exe
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32slrundll.exe
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32slgen.dll
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32slextspk.dll
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32slcoinst.dll
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32setupn.exe
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32s3gnb.dll
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32rhttpaa.dll
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32rasqec.dll
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32qutil.dll
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32qcliprov.dll
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32qagentrt.dll
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32qagent.dll
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32photometadatahandler.dll
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32onex.dll
2010-03-06 22:11:43 —-N—- C:WINDOWSsystem32nv4_disp.dll
2010-03-06 22:11:42 —-N—- C:WINDOWSslrundll.exe
2010-03-06 22:11:42 —-D—- C:WINDOWSsystem32ru-ru
2010-03-06 22:11:42 —-D—- C:WINDOWSsystem32ru
2010-03-06 22:11:42 —-D—- C:WINDOWSl2schemas
2010-03-06 22:11:42 —-A—- C:WINDOWSsystem32xmllite.dll
2010-03-06 22:11:41 —-D—- C:WINDOWSsystem32bits
2010-03-06 22:09:16 —-D—- C:WINDOWSnetwork diagnostic
2010-03-06 22:08:38 —-A—- C:WINDOWS 02760_.tmp
2010-03-06 22:06:16 —-HDC—- C:WINDOWS$NtServicePackUninstall$
2010-03-06 22:02:45 —-A—- C:WINDOWSimsins.BAK======List of files/folders modified in the last 1 months======
2010-05-02 20:15:57 —-A—- C:WINDOWSSchedLgU.Txt
2010-05-02 19:49:02 —-DC—- C:WINDOWSsystem32DRVSTORE
2010-05-02 19:49:00 —-HD—- C:WINDOWSinf
2010-05-02 19:05:09 —-D—- C:WINDOWSsystem32drivers
2010-05-02 19:02:44 —-D—- C:WINDOWSsystem32CatRoot
2010-05-02 19:00:36 —-D—- C:WINDOWSWinSxS
2010-05-02 15:46:08 —-RSHDC—- C:WINDOWSsystem32dllcache
2010-04-29 21:22:26 —-D—- C:Documents and SettingsSTGApplication DataMra
2010-04-26 21:06:41 —-D—- C:WINDOWSMinidump
2010-04-19 14:44:35 —-SD—- C:WINDOWSDownloaded Program Files
2010-04-19 12:04:30 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2010-04-18 17:06:05 —-RSD—- C:WINDOWSFonts
2010-04-18 17:03:18 —-D—- C:Program FilesInternet Explorer
2010-04-18 16:34:07 —-D—- C:WINDOWSAppPatch
2010-04-18 16:27:58 —-HD—- C:WINDOWS$hf_mig$
2010-04-18 16:21:17 —-D—- C:Program FilesMovie Maker
2010-04-18 14:51:45 —-D—- C:WINDOWSHelp
2010-04-15 13:15:05 —-SD—- C:Documents and SettingsSTGApplication DataMicrosoft
2010-04-13 18:11:17 —-D—- C:WINDOWSsecurity
2010-04-05 23:38:32 —-RD—- C:Program Files
2010-04-05 23:30:19 —-D—- C:Documents and SettingsSTGApplication DataSkype
2010-04-05 18:30:37 —-D—- C:Documents and SettingsSTGApplication DataskypePM
2010-04-05 18:08:02 —-SHD—- C:WINDOWSsystem32
2010-04-05 18:05:35 —-D—- C:WINDOWSTemp
2010-04-05 18:04:06 —-SD—- C:WINDOWSTasks
2010-04-05 14:16:23 —-D—- C:Documents and SettingsAll UsersApplication DataGoogle Updater
2010-04-04 15:17:01 —-D—- C:WINDOWSsystem32CatRoot2
2010-04-03 22:36:31 —-SHD—- C:WINDOWSInstaller
2010-04-03 22:36:30 —-D—- C:Program FilesCommon Files
2010-04-03 10:45:12 —-D—- C:WINDOWS
2010-04-01 14:04:00 —-A—- C:WINDOWSIE4 Error Log.txt
2010-03-28 20:52:17 —-D—- C:WINDOWSsystem32Restore
2010-03-24 22:00:10 —-SHD—- C:System Volume Information
2010-03-19 18:05:50 —-A—- C:WINDOWSsystem32wmp.dll
2010-03-10 12:17:40 —-A—- C:WINDOWSsystem32vbscript.dll
2010-03-07 18:34:16 —-D—- C:WINDOWSsystem32wbem
2010-03-07 00:09:54 —-HD—- C:Program FilesInstallShield Installation Information
2010-03-07 00:07:46 —-A—- C:WINDOWSsystem32msvcp71.dll
2010-03-06 23:59:43 —-D—- C:Program FilesCommon FilesMicrosoft Shared
2010-03-06 23:58:29 —-A—- C:WINDOWSwin.ini
2010-03-06 23:56:46 —-D—- C:WINDOWSpchealth
2010-03-06 23:54:52 —-A—- C:WINDOWSODBC.INI
2010-03-06 23:51:23 —-D—- C:Program FilesCommon FilesSystem
2010-03-06 23:51:08 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
2010-03-06 23:50:37 —-D—- C:WINDOWSsystem
2010-03-06 23:23:41 —-SHD—- C:RECYCLER
2010-03-06 23:04:49 —-D—- C:WINDOWSsystem32DirectX
2010-03-06 23:00:15 —-D—- C:WINDOWSsystem32config
2010-03-06 23:00:02 —-D—- C:WINDOWSMedia
2010-03-06 22:36:24 —-D—- C:Program FilesWinRAR
2010-03-06 22:33:14 —-SH—- C:boot.ini
2010-03-06 22:33:14 —-A—- C:WINDOWSsystem.ini
2010-03-06 22:19:25 —-A—- C:WINDOWSOEWABLog.txt
2010-03-06 22:19:08 —-A—- C:WINDOWSsetuplog.txt
2010-03-06 22:18:27 —-D—- C:WINDOWSsystem32Setup
2010-03-06 22:16:48 —-D—- C:Program FilesOutlook Express
2010-03-06 22:13:43 —-D—- C:Program FilesMessenger
2010-03-06 22:11:52 —-D—- C:Program FilesWindows Media Player
2010-03-06 22:11:46 —-D—- C:WINDOWSsystem32inetsrv
2010-03-06 22:11:46 —-D—- C:WINDOWSime
2010-03-06 22:11:46 —-D—- C:WINDOWSehome
2010-03-06 22:11:42 —-D—- C:WINDOWSsystem32usmt
2010-03-06 22:11:41 —-D—- C:WINDOWSPeerNet
2010-03-06 22:10:23 —-D—- C:WINDOWSsystem32npp
2010-03-06 22:10:23 —-D—- C:WINDOWSsrchasst
2010-03-06 22:10:23 —-D—- C:WINDOWSmsagent
2010-03-06 22:10:22 —-D—- C:WINDOWSsystem32Com
2010-03-06 22:10:22 —-D—- C:Program FilesNetMeeting
2010-03-06 22:10:20 —-D—- C:Program FilesWindows NT
2010-03-06 22:10:07 —-D—- C:WINDOWSsystem32oobe
2010-03-06 22:08:34 —-D—- C:WINDOWSsystem32ReinstallBackups
2010-03-06 21:44:33 —-D—- C:Documents and Settings======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 ehdrv;ehdrv; C:WINDOWSsystem32DRIVERSehdrv.sys [2009-03-19 107256]
R1 epfwtdir;epfwtdir; C:WINDOWSsystem32DRIVERSepfwtdir.sys [2009-03-19 93848]
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-14 40704]
R1 SandBox;SandBox; ??C:WINDOWSsystem32driversSandBox.sys []
R1 Tcpip6;Драйвер протокола IPv6 (Microsoft); C:WINDOWSsystem32DRIVERStcpip6.sys [2010-02-11 226880]
R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2004-08-18 12032]
R2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2010/03/06 23:10:07]; ??C:Program FilesCyberLinkPowerDVD9 00.fcl []
R2 eamon;eamon; C:WINDOWSsystem32DRIVERSeamon.sys [2009-03-19 113960]
R2 NwlnkIpx;NWLink IPX/SPX/NetBIOS-совместимый транспортный протокол; C:WINDOWSsystem32DRIVERSnwlnkipx.sys [2008-04-14 88320]
R2 NwlnkNb;NWLink NetBIOS; C:WINDOWSsystem32DRIVERSnwlnknb.sys [2004-08-18 63232]
R2 NwlnkSpx;Протокол NWLink SPX/SPXII; C:WINDOWSsystem32DRIVERSnwlnkspx.sys [2004-08-18 55936]
R3 afw;Agnitum firewall driver; C:WINDOWSsystem32DRIVERSafw.sys [2009-02-18 31128]
R3 afwcore;afwcore; C:WINDOWSsystem32driversafwcore.sys [2009-07-13 256792]
R3 ASWFilt;ASWFilt; ??C:WINDOWSsystem32FiltASWFilt.dll []
R3 E100B;Intel(R) PRO Network Connection Driver; C:WINDOWSsystem32DRIVERSe100b325.sys [2006-10-31 165760]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:WINDOWSsystem32DRIVERSialmnt5.sys [2006-02-07 1399615]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2007-03-01 4484608]
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-19 12160]
R3 tunmp;Драйвер адаптера минипорта Microsoft Tun; C:WINDOWSsystem32DRIVERStunmp.sys [2008-04-14 12288]
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-14 32128]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-14 30208]
R3 usbhub;Драйвер стандартного концентратора USB (Microsoft); C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-14 59520]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-14 20608]
R3 usbvideo;USB-видеоустройство (WDM); C:WINDOWSSystem32Driversusbvideo.sys [2008-04-14 121984]
S1 kbdhid;Драйвер клавиатуры HID; C:WINDOWSsystem32DRIVERSkbdhid.sys [2008-04-14 14720]
S2 vnynfbrbctqtkr;vnynfbrbctqtkr; ??C:WINDOWSsystem32driverscdrclzkc.sys []
S3 CCDECODE;Closed Caption декодер; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2008-04-14 17024]
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:WINDOWSsystem32driversHdAudio.sys [2005-01-07 145920]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWSsystem32DRIVERSNdisIP.sys [2008-04-14 10880]
S3 nm;Драйвер сетевого монитора; C:WINDOWSsystem32DRIVERSNMnt.sys [2008-04-14 40320]
S3 NWRDR;NetWare Rdr; C:WINDOWSsystem32DRIVERSnwrdr.sys [2008-04-14 163584]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:WINDOWSsystem32DRIVERSpccsmcfd.sys []
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2008-04-14 15232]
S3 usbaudio;Аудио драйвер USB (WDM); C:WINDOWSsystem32driversusbaudio.sys [2008-04-14 60032]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Wdf01000; C:WINDOWSsystem32DRIVERSWdf01000.sys [2006-11-02 492000]
S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2008-04-14 19200]======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 6to4;Служба поддержки IPv6; C:WINDOWSsystem32svchost.exe [2008-04-14 14336]
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 Licensing Service; C:Program FilesABBYY FineReader 9.0NetworkLicenseServer.exe [2007-11-02 566560]
R2 acssrv;Agnitum Client Security Service; C:PROGRA~1AgnitumOUTPOS~1acs.exe [2009-07-17 1299784]
R2 ekrn;ESET Service; C:Program FilesESETESET NOD32 Antivirusekrn.exe [2009-03-19 731840]
R2 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2010-04-03 153376]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-20 322120]
R2 Netprotocol;Network Protocol Driver; C:Documents and SettingsSTGApplication Datanetprotocol.exe [2010-05-03 52224]
S2 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-10-31 182768]
S2 NWCWorkstation;Клиент для сетей NetWare; C:WINDOWSsystem32svchost.exe [2008-04-14 14336]
S2 SPIDERNT;SpIDer Guard for Windows; C:PROGRA~1DrWebspidernt.exe []
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe [2009-03-19 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-29 89136]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-07-29 132096]
EOF
Здравствуйте, добро пожаловать на Spyware-ru форум.
Необходима дополнительная проверка.
Скачайте программу Combofix. Закройте все открытые окна и запустите эту программу.
После выполнения будет создан лог файл, пожалуйста вставьте его в ваш ответ.
- Для ответа в этой теме необходимо авторизоваться.
