Удаление вирусов и троянов. Защита компьютера. › Помощь в удалении вирусов, троянов, рекламы и других зловредов › Информер требует регистрации
- This topic has 1 ответ, 2 участника, and was last updated 15 years, 11 months назад by Admin. 
- 
		АвторСообщения
- 
		
			
				
6 декабря, 2009 в 8:06 дп #17522Аноним Гость- Темы:532
- Сообщений:1553
- ☆☆☆☆☆
 Столкнулся вот с такой проблемой! Вылазит иформер требует регистрации, в противном случае грозиться повредить комп. Logfile of random’s system information tool 1.06 (written by random/random) 
 Run by Артур at 2009-12-07 13:03:49
 Microsoft Windows XP Professional Service Pack 3
 System drive C: has 86 GB (86%) free of 100 GB
 Total RAM: 1023 MB (45% free)Logfile of Trend Micro HijackThis v2.0.2 
 Scan saved at 13:04:54, on 07.12.2009
 Platform: Windows XP SP3 (WinNT 5.01.2600)
 MSIE: Internet Explorer v7.00 (7.00.6000.20935)
 Boot mode: NormalRunning processes: 
 C:WINDOWSSystem32smss.exe
 C:WINDOWSsystem32winlogon.exe
 C:WINDOWSsystem32services.exe
 C:WINDOWSsystem32lsass.exe
 C:WINDOWSsystem32svchost.exe
 C:WINDOWSSystem32svchost.exe
 C:WINDOWSsystem32spoolsv.exe
 C:WINDOWSExplorer.EXE
 C:Program Files2gisUpdateClientWin32UpdateClientService.exe
 C:PROGRA~1AVGAVG8avgwdsvc.exe
 C:WINDOWSsystem32PnkBstrA.exe
 C:WINDOWSsystem32PnkBstrB.exe
 C:PROGRA~1AVGAVG8avgemc.exe
 C:PROGRA~1AVGAVG8avgrsx.exe
 C:PROGRA~1AVGAVG8avgnsx.exe
 C:Program FilesAVGAVG8avgcsrvx.exe
 C:WINDOWSsystem32svchost.exe
 C:Program FilesMozilla Firefoxfirefox.exe
 C:WINDOWSsystem32ctfmon.exe
 C:Program FilesAVGAVG8avgui.exe
 C:WINDOWSsystem32wuauclt.exe
 C:Program FilesAVGAVG8avgcsrvx.exe
 C:Documents and SettingsАртурМои документыЗагрузкиRSIT.exe
 C:Program Filestrend microАртур.exeR1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 
 R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank
 R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
 R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
 R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
 R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
 R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
 R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
 R1 — HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://go.divx.com/divx/webplayerdemo/en
 R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
 F2 — REG:system.ini: UserInit=C:WINDOWSsystem32userinit.exe,C:TEMPdas1.tmp
 O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
 O2 — BHO: WormRadar.com IESiteBlocker.NavFilter — {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} — C:Program FilesAVGAVG8avgssie.dll
 O4 — HKLM..Run: [SoundMAX] «C:Program FilesAnalog DevicesSoundMAXSmax4.exe» /tray
 O4 — HKLM..Run: [SoundMAXPnP] C:Program FilesAnalog DevicesCoresmax4pnp.exe
 O4 — HKLM..Run: [StartCCC] «C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe» MSRun
 O4 — HKLM..Run: [AVG8_TRAY] C:PROGRA~1AVGAVG8avgtray.exe
 O4 — HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
 O4 — HKLM..Run: [BVRPLiveUpdate] C:Program FilesAvanquest updateEngineSetup.exe -s /PATCH,/SRCUPDATEC:DOCUME~1ALLUSE~1APPLIC~1SONYER~1SONYER~1LIVEUP~1LISTOF~1.DAT
 O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
 O4 — HKCU..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe
 O4 — HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] «C:Program FilesCommon FilesAheadlibNMBgMonitor.exe»
 O4 — HKCU..Run: [Sony Ericsson PC Suite] «C:Program FilesSony EricssonSony Ericsson PC SuiteSEPCSuite.exe» /systray /nologon
 O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
 O4 — HKUSS-1-5-19..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe (User ‘LOCAL SERVICE’)
 O4 — HKUSS-1-5-19..RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User ‘LOCAL SERVICE’)
 O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
 O4 — HKUSS-1-5-20..RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User ‘NETWORK SERVICE’)
 O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
 O4 — HKUSS-1-5-18..RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User ‘SYSTEM’)
 O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
 O4 — HKUS.DEFAULT..RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User ‘Default user’)
 O4 — Global Startup: Adobe Reader Speed Launch.lnk = C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe
 O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~1OFFICE11EXCEL.EXE/3000
 O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~1OFFICE11REFIEBAR.DLL
 O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
 O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
 O10 — Unknown file in Winsock LSP: c:documents and settingsартурcookiesuserlib.dll
 O10 — Unknown file in Winsock LSP: c:documents and settingsартурcookiesuserlib.dll
 O10 — Unknown file in Winsock LSP: c:documents and settingsартурcookiesuserlib.dll
 O10 — Unknown file in Winsock LSP: c:documents and settingsартурcookiesuserlib.dll
 O10 — Unknown file in Winsock LSP: c:documents and settingsартурcookiesuserlib.dll
 O10 — Unknown file in Winsock LSP: c:documents and settingsартурcookiesuserlib.dll
 O10 — Unknown file in Winsock LSP: c:documents and settingsартурcookiesuserlib.dll
 O10 — Unknown file in Winsock LSP: c:documents and settingsартурcookiesuserlib.dll
 O10 — Unknown file in Winsock LSP: c:documents and settingsартурcookiesuserlib.dll
 O10 — Unknown file in Winsock LSP: c:documents and settingsартурcookiesuserlib.dll
 O10 — Unknown file in Winsock LSP: c:documents and settingsартурcookiesuserlib.dll
 O10 — Unknown file in Winsock LSP: c:documents and settingsартурcookiesuserlib.dll
 O10 — Unknown file in Winsock LSP: c:documents and settingsартурcookiesuserlib.dll
 O10 — Unknown file in Winsock LSP: c:documents and settingsартурcookiesuserlib.dll
 O10 — Unknown file in Winsock LSP: c:documents and settingsартурcookiesuserlib.dll
 O10 — Unknown file in Winsock LSP: c:documents and settingsартурcookiesuserlib.dll
 O10 — Unknown file in Winsock LSP: c:documents and settingsартурcookiesuserlib.dll
 O10 — Unknown file in Winsock LSP: c:documents and settingsартурcookiesuserlib.dll
 O17 — HKLMSystemCCSServicesTcpip..{84AC60BB-08BD-40E8-A80E-4BCE2B336AD1}: NameServer = 81.30.199.5 81.30.199.94
 O18 — Protocol: linkscanner — {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} — C:Program FilesAVGAVG8avgpp.dll
 O20 — Winlogon Notify: avgrsstarter — C:WINDOWSSYSTEM32avgrsstx.dll
 O23 — Service: 2GIS UpdateClientService — ДубльГИС — C:Program Files2gisUpdateClientWin32UpdateClientService.exe
 O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — C:WINDOWSsystem32Ati2evxx.exe
 O23 — Service: ATI Smart — Unknown owner — C:WINDOWSsystem32ati2sgag.exe
 O23 — Service: AVG Free8 E-mail Scanner (avg8emc) — AVG Technologies CZ, s.r.o. — C:PROGRA~1AVGAVG8avgemc.exe
 O23 — Service: AVG Free8 WatchDog (avg8wd) — AVG Technologies CZ, s.r.o. — C:PROGRA~1AVGAVG8avgwdsvc.exe
 O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
 O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
 O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
 O23 — Service: PnkBstrA — Unknown owner — C:WINDOWSsystem32PnkBstrA.exe
 O23 — Service: PnkBstrB — Unknown owner — C:WINDOWSsystem32PnkBstrB.exe
 O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
 O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
 O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
 O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
 O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe— 
 End of file — 8496 bytes======Registry dump====== [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] 
 AcroIEHlprObj Class — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll [2004-12-14 63136][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}] 
 AVG Safe Search — C:Program FilesAVGAVG8avgssie.dll [2009-12-03 1111320][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun] 
 «SoundMAX»=C:Program FilesAnalog DevicesSoundMAXSmax4.exe [2006-04-10 729088]
 «SoundMAXPnP»=C:Program FilesAnalog DevicesCoresmax4pnp.exe [2006-05-01 843776]
 «StartCCC»=C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2009-07-14 98304]
 «AVG8_TRAY»=C:PROGRA~1AVGAVG8avgtray.exe [2009-12-03 2029336]
 «NeroFilterCheck»=C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
 «BVRPLiveUpdate»=C:Program FilesAvanquest updateEngineSetup.exe -s /PATCH,/SRCUPDATEC:DOCUME~1ALLUSE~1APPLIC~1SONYER~1SONYER~1LIVEUP~1LISTOF~1.DAT [][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun] 
 «CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-15 15360]
 «VistaIcon»=C:Program FilesVistaDriveIconVistaDrv.exe [2009-01-11 132096]
 «BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}»=C:Program FilesCommon FilesAheadlibNMBgMonitor.exe [2005-11-24 94208]
 «Sony Ericsson PC Suite»=C:Program FilesSony EricssonSony Ericsson PC SuiteSEPCSuite.exe [2008-07-02 393216]C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка 
 Adobe Reader Speed Launch.lnk — C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent] 
 C:WINDOWSsystem32Ati2evxx.dll [2009-07-15 155648][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyavgrsstarter] 
 C:WINDOWSsystem32avgrsstx.dll [2009-12-03 11952][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad] 
 WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32wpdshserviceobj.dll [2007-06-18 133632][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem] 
 «DisableTaskMgr»=1[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem] 
 «dontdisplaylastusername»=0
 «legalnoticecaption»=
 «legalnoticetext»=
 «shutdownwithoutlogon»=1
 «undockwithoutlogon»=1
 «NoInternetOpenWith «=1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer] 
 «NoDriveTypeAutoRun»=145
 «NoSMHelp»=1
 «NoSMConfigurePrograms»=1[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer] 
 «NoDriveTypeAutoRun»=[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist] 
 «%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
 «%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
 «C:Program FilesAVGAVG8avgemc.exe»=»C:Program FilesAVGAVG8avgemc.exe:*:Enabled:avgemc.exe»
 «C:Program FilesAVGAVG8avgupd.exe»=»C:Program FilesAVGAVG8avgupd.exe:*:Enabled:avgupd.exe»
 «C:Program FilesuTorrentuTorrent.exe»=»C:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»
 «D:Call Of Duty — United OffenceCoDUOMP.exe»=»D:Call Of Duty — United OffenceCoDUOMP.exe:*:Disabled:CoDUOMP»
 «D:GamesCallofDuty2CoD2MP_s.exe»=»D:GamesCallofDuty2CoD2MP_s.exe:*:Disabled:CoD2MP_s»
 «C:WINDOWSsystem32PnkBstrA.exe»=»C:WINDOWSsystem32PnkBstrA.exe:*:Enabled:PnkBstrA»
 «C:WINDOWSsystem32PnkBstrB.exe»=»C:WINDOWSsystem32PnkBstrB.exe:*:Enabled:PnkBstrB»
 «C:Program FilesActivisionCall of Duty 4 — Modern Warfareiw3mp.exe»=»C:Program FilesActivisionCall of Duty 4 — Modern Warfareiw3mp.exe:*:Enabled:Call of Duty(R) 4 — Modern Warfare(TM)»
 «C:Program FilesMozilla Firefoxfirefox.exe»=»C:Program FilesMozilla Firefoxfirefox.exe:*:Enabled:Firefox»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist] 
 «%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
 «%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»======List of files/folders created in the last 1 months====== 2009-12-07 13:03:50 —-D—- C:Program Filestrend micro 
 2009-12-07 13:03:49 —-D—- C:rsit
 2009-12-07 12:46:30 —-D—- C:WINDOWSsystem32SoftwareDistribution
 2009-12-07 12:46:29 —-D—- C:WINDOWSLastGood
 2009-12-07 12:32:01 —-A—- C:logit.txt
 2009-12-07 03:30:05 —-AD—- C:Documents and SettingsAll UsersApplication DataTEMP
 2009-12-07 03:29:38 —-D—- C:Program FilesCoreAAC
 2009-12-06 23:19:29 —-D—- C:Program Files2gis
 2009-12-06 23:19:29 —-D—- C:Documents and SettingsAll UsersApplication Data2GIS
 2009-12-06 17:50:47 —-A—- C:WINDOWSPhotoSnapViewer.INI
 2009-12-06 17:22:25 —-D—- C:Program FilesAvanquest update
 2009-12-06 17:22:25 —-D—- C:Documents and SettingsAll UsersApplication DataBVRP Software
 2009-12-06 17:22:01 —-DC—- C:WINDOWSsystem32DRVSTORE
 2009-12-06 17:21:26 —-D—- C:Program FilesSony Ericsson
 2009-12-06 17:21:26 —-D—- C:Documents and SettingsAll UsersApplication DataSony Ericsson
 2009-12-06 17:20:49 —-D—- C:Documents and SettingsАртурApplication DataInstallShield
 2009-12-06 11:18:41 —-D—- C:Documents and SettingsАртурApplication DataAdobeUM
 2009-12-04 20:31:06 —-D—- C:Documents and SettingsАртурApplication DataMedia Player Classic
 2009-12-04 00:05:57 —-A—- C:WINDOWSsystem32PnkBstrB.exe
 2009-12-04 00:05:27 —-D—- C:WINDOWSsystem32LogFiles
 2009-12-04 00:05:27 —-A—- C:WINDOWSsystem32PnkBstrA.exe
 2009-12-04 00:05:21 —-A—- C:WINDOWSgame.ini
 2009-12-03 23:55:49 —-D—- C:Program FilesActivision
 2009-12-03 23:02:12 —-SHD—- C:WINDOWSftpcache
 2009-12-03 22:57:06 —-D—- C:Documents and SettingsАртурApplication DataDivX
 2009-12-03 22:57:03 —-A—- C:WINDOWSNeroDigital.ini
 2009-12-03 21:12:26 —-D—- C:Program FilesДлинные нарды 2.0
 2009-12-03 20:46:51 —-D—- C:Documents and SettingsАртурApplication DataYandex
 2009-12-03 19:51:16 —-D—- C:Program FilesCanon
 2009-12-03 19:50:44 —-HD—- C:WINDOWSsystem32CanonMF Uninstaller Information
 2009-12-03 19:50:29 —-HD—- C:CanonMF
 2009-12-03 19:37:48 —-D—- C:Program FilesPunto Switcher
 2009-12-03 19:32:49 —-D—- C:Program FilesuTorrent
 2009-12-03 19:32:45 —-D—- C:Documents and SettingsАртурApplication DatauTorrent
 2009-12-03 19:27:35 —-D—- C:Documents and SettingsАртурApplication DataMacromedia
 2009-12-03 19:15:55 —-D—- C:Documents and SettingsАртурApplication DataAhead
 2009-12-03 19:14:55 —-D—- C:Program FilesNero
 2009-12-03 19:14:55 —-D—- C:Program FilesCommon FilesAhead
 2009-12-03 19:09:39 —-D—- C:Documents and SettingsАртурApplication DataAdobe
 2009-12-03 18:54:02 —-D—- C:Program FilesCommon FilesAdobe
 2009-12-03 18:54:00 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
 2009-12-03 18:53:59 —-SHD—- C:Config.Msi
 2009-12-03 18:50:40 —-D—- C:Program FilesAdobe
 2009-12-03 18:47:32 —-A—- C:WINDOWSsystem32avgrsstx.dll
 2009-12-03 18:47:25 —-D—- C:Program FilesAVG
 2009-12-03 18:47:25 —-D—- C:Documents and SettingsAll UsersApplication Dataavg8
 2009-12-03 18:42:51 —-D—- C:Documents and SettingsАртурApplication DataMozilla
 2009-12-03 18:38:28 —-N—- C:WINDOWSsystem32vxblock.dll
 2009-12-03 18:38:28 —-N—- C:WINDOWSsystem32pxwave.dll
 2009-12-03 18:38:28 —-N—- C:WINDOWSsystem32pxsfs.dll
 2009-12-03 18:38:28 —-N—- C:WINDOWSsystem32pxmas.dll
 2009-12-03 18:38:28 —-N—- C:WINDOWSsystem32pxinsi64.exe
 2009-12-03 18:38:28 —-N—- C:WINDOWSsystem32pxinsa64.exe
 2009-12-03 18:38:28 —-N—- C:WINDOWSsystem32pxhpinst.exe
 2009-12-03 18:38:28 —-N—- C:WINDOWSsystem32pxdrv.dll
 2009-12-03 18:38:28 —-N—- C:WINDOWSsystem32pxcpyi64.exe
 2009-12-03 18:38:28 —-N—- C:WINDOWSsystem32pxcpya64.exe
 2009-12-03 18:38:28 —-N—- C:WINDOWSsystem32pxafs.dll
 2009-12-03 18:38:28 —-N—- C:WINDOWSsystem32px.dll
 2009-12-03 18:36:42 —-A—- C:WINDOWSsystem32msvcrtnew.dll
 2009-12-03 18:36:42 —-A—- C:WINDOWSsystem32msvcr90.dll
 2009-12-03 18:36:42 —-A—- C:WINDOWSsystem32msvcr80d.dll
 2009-12-03 18:36:42 —-A—- C:WINDOWSsystem32msvcr80.dll
 2009-12-03 18:36:42 —-A—- C:WINDOWSsystem32msvcp90.dll
 2009-12-03 18:36:42 —-A—- C:WINDOWSsystem32msvcp80.dll
 2009-12-03 18:36:42 —-A—- C:WINDOWSsystem32msvcp71.dll
 2009-12-03 18:36:42 —-A—- C:WINDOWSsystem32dxgi.dll
 2009-12-03 18:36:42 —-A—- C:WINDOWSsystem32dwmapi.dll
 2009-12-03 18:36:42 —-A—- C:WINDOWSsystem32d3d10core.dll
 2009-12-03 18:36:42 —-A—- C:WINDOWSsystem32d3d10.dll
 2009-12-03 18:36:41 —-A—- C:WINDOWSsystem32msvcp70.dll
 2009-12-03 18:36:41 —-A—- C:WINDOWSsystem32msvcm90.dll
 2009-12-03 18:36:40 —-A—- C:WINDOWSsystem32Vista.Emulation.dll
 2009-12-03 18:36:40 —-A—- C:WINDOWSsystem32nvapi.dll
 2009-12-03 18:36:40 —-A—- C:WINDOWSsystem32msvcm80.dll
 2009-12-03 18:36:40 —-A—- C:WINDOWSsystem32msjava.dll
 2009-12-03 18:36:40 —-A—- C:WINDOWSsystem32M2000Twn.dll
 2009-12-03 18:36:39 —-A—- C:WINDOWSsystem32D3DX10d_39.dll
 2009-12-03 18:36:38 —-A—- C:WINDOWSsystem32D3D10SDKLayers.DLL
 2009-12-03 18:36:38 —-A—- C:WINDOWSsystem32d2d1.dll
 2009-12-03 18:36:38 —-A—- C:WINDOWSsystem32CompressATI2.dll
 2009-12-03 18:36:38 —-A—- C:WINDOWSsystem32avrt.dll
 2009-12-03 18:36:38 —-A—- C:Program FilesCommon Filesunins000.exe
 2009-12-03 18:33:05 —-D—- C:Documents and SettingsAll UsersApplication DataGRETECH
 2009-12-03 18:32:22 —-D—- C:Documents and SettingsАртурApplication DataGRETECH
 2009-12-03 18:32:16 —-D—- C:Program FilesGRETECH
 2009-12-03 18:31:31 —-D—- C:Program FilesXviD
 2009-12-03 18:30:38 —-A—- C:WINDOWSunvise32.exe
 2009-12-03 18:30:13 —-A—- C:WINDOWSsystem32rmoc3260.dll
 2009-12-03 18:30:13 —-A—- C:WINDOWSsystem32pndx5032.dll
 2009-12-03 18:30:13 —-A—- C:WINDOWSsystem32pndx5016.dll
 2009-12-03 18:30:13 —-A—- C:WINDOWSsystem32pncrt.dll
 2009-12-03 18:30:12 —-A—- C:WINDOWSsystem32unrar.dll
 2009-12-03 18:30:07 —-A—- C:WINDOWSsystem32yv12vfw.dll
 2009-12-03 18:30:07 —-A—- C:WINDOWSsystem32xvidcore.dll
 2009-12-03 18:30:04 —-A—- C:WINDOWSsystem32xvidvfw.dll
 2009-12-03 18:30:03 —-A—- C:WINDOWSsystem32ff_vfw.dll.manifest
 2009-12-03 18:30:03 —-A—- C:WINDOWSsystem32ff_vfw.dll
 2009-12-03 18:30:00 —-D—- C:Program FilesK-Lite Codec Pack
 2009-12-03 18:30:00 —-D—- C:Documents and SettingsАртурApplication DataReal
 2009-12-03 18:30:00 —-D—- C:Documents and SettingsAll UsersApplication DataReal
 2009-12-03 18:30:00 —-A—- C:WINDOWSsystem32msvcr71.dll
 2009-12-03 18:28:51 —-D—- C:Program FilesDivX
 2009-12-03 18:28:22 —-D—- C:Documents and SettingsАртурApplication DataWinRAR
 2009-12-03 18:27:43 —-A—- C:WINDOWSsystem32VCT3216.dll
 2009-12-03 18:24:30 —-A—- C:WINDOWSODBC.INI
 2009-12-03 18:24:26 —-A—- C:WINDOWSsystem32mdimon.dll
 2009-12-03 18:23:51 —-D—- C:Program FilesCommon FilesDESIGNER
 2009-12-03 18:23:46 —-D—- C:WINDOWSSHELLNEW
 2009-12-03 18:23:21 —-D—- C:Program FilesMicrosoft.NET
 2009-12-03 18:23:21 —-D—- C:Program FilesMicrosoft Office
 2009-12-03 18:21:50 —-RHD—- C:MSOCache
 2009-12-03 18:19:05 —-SHD—- C:RECYCLER
 2009-12-03 18:17:36 —-D—- C:Documents and SettingsАртурApplication DataATI
 2009-12-03 18:17:36 —-D—- C:Documents and SettingsAll UsersApplication DataATI
 2009-12-03 18:13:22 —-D—- C:Program FilesCommon FilesATI Technologies
 2009-12-03 18:13:04 —-D—- C:WINDOWSRegisteredPackages
 2009-12-03 18:12:54 —-A—- C:WINDOWSsystem32psisdecd.dll
 2009-12-03 18:12:54 —-A—- C:WINDOWSsystem32dxdllreg.exe
 2009-12-03 18:12:22 —-D—- C:WINDOWSsystem32DirectX
 2009-12-03 18:11:30 —-N—- C:WINDOWSsystem32ati2sgag.exe
 2009-12-03 18:11:28 —-RA—- C:WINDOWSsystem32atiiiexx.dll
 2009-12-03 18:11:18 —-RA—- C:WINDOWSsystem32ATIDEMGX.dll
 2009-12-03 18:10:33 —-D—- C:Program FilesATI Technologies
 2009-12-02 22:15:02 —-ASH—- C:Documents and SettingsAll UsersApplication Datadesktop.ini
 2009-12-02 22:13:14 —-RA—- C:WINDOWSSET67.tmp
 2009-12-02 22:13:12 —-RA—- C:WINDOWSSET5B.tmp
 2009-12-02 22:13:10 —-RA—- C:WINDOWSSET58.tmp
 2009-12-02 22:12:49 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
 2009-12-02 22:12:30 —-D—- C:WINDOWSMinidump
 2009-12-02 22:07:25 —-A—- C:WINDOWSsystem32h323log.txt
 2009-12-02 22:07:01 —-A—- C:WINDOWSsystem32hidserv.dll
 2009-12-02 22:05:28 —-A—- C:WINDOWSsystem32usbui.dll
 2009-12-02 22:04:24 —-A—- C:WINDOWSimsins.BAK
 2009-12-02 22:04:22 —-SHD—- C:WINDOWSInstaller
 2009-12-02 22:04:22 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
 2009-12-02 22:04:21 —-D—- C:Program FilesCommon FilesODBC
 2009-12-02 22:04:21 —-A—- C:WINDOWSODBCINST.INI
 2009-12-02 22:04:19 —-D—- C:Program FilesCommon FilesSpeechEngines
 2009-12-02 22:04:18 —-RD—- C:Program Files
 2009-12-02 22:04:18 —-D—- C:Program FilesCommon FilesMicrosoft Shared
 2009-12-02 22:04:18 —-D—- C:Program FilesCommon Files
 2009-12-02 22:04:15 —-RA—- C:WINDOWSsystem32kbdtuq.dll
 2009-12-02 22:04:15 —-RA—- C:WINDOWSsystem32kbdtuf.dll
 2009-12-02 22:04:15 —-RA—- C:WINDOWSsystem32kbdazel.dll
 2009-12-02 22:04:13 —-RA—- C:WINDOWSsystem32kbdhept.dll
 2009-12-02 22:04:13 —-RA—- C:WINDOWSsystem32kbdhela3.dll
 2009-12-02 22:04:13 —-RA—- C:WINDOWSsystem32kbdhela2.dll
 2009-12-02 22:04:13 —-RA—- C:WINDOWSsystem32kbdhe319.dll
 2009-12-02 22:04:13 —-RA—- C:WINDOWSsystem32kbdhe220.dll
 2009-12-02 22:04:13 —-RA—- C:WINDOWSsystem32kbdhe.dll
 2009-12-02 22:04:13 —-RA—- C:WINDOWSsystem32kbdgkl.dll
 2009-12-02 22:04:11 —-RA—- C:WINDOWSsystem32kbdlv1.dll
 2009-12-02 22:04:11 —-RA—- C:WINDOWSsystem32kbdlv.dll
 2009-12-02 22:04:11 —-RA—- C:WINDOWSsystem32kbdlt1.dll
 2009-12-02 22:04:11 —-RA—- C:WINDOWSsystem32kbdlt.dll
 2009-12-02 22:04:11 —-RA—- C:WINDOWSsystem32kbdest.dll
 2009-12-02 22:04:10 —-RA—- C:WINDOWSsystem32kbdycl.dll
 2009-12-02 22:04:10 —-RA—- C:WINDOWSsystem32kbdsl1.dll
 2009-12-02 22:04:10 —-RA—- C:WINDOWSsystem32kbdsl.dll
 2009-12-02 22:04:10 —-RA—- C:WINDOWSsystem32kbdro.dll
 2009-12-02 22:04:10 —-RA—- C:WINDOWSsystem32kbdpl1.dll
 2009-12-02 22:04:10 —-RA—- C:WINDOWSsystem32kbdpl.dll
 2009-12-02 22:04:10 —-RA—- C:WINDOWSsystem32kbdhu1.dll
 2009-12-02 22:04:10 —-RA—- C:WINDOWSsystem32kbdhu.dll
 2009-12-02 22:04:10 —-RA—- C:WINDOWSsystem32kbdcz2.dll
 2009-12-02 22:04:10 —-RA—- C:WINDOWSsystem32kbdcz1.dll
 2009-12-02 22:04:10 —-RA—- C:WINDOWSsystem32kbdcz.dll
 2009-12-02 22:04:10 —-RA—- C:WINDOWSsystem32kbdcr.dll
 2009-12-02 22:04:10 —-RA—- C:WINDOWSsystem32KBDAL.DLL
 2009-12-02 22:04:05 —-RA—- C:WINDOWSsystem32kbdycc.dll
 2009-12-02 22:04:05 —-RA—- C:WINDOWSsystem32kbduzb.dll
 2009-12-02 22:04:05 —-RA—- C:WINDOWSsystem32kbdur.dll
 2009-12-02 22:04:05 —-RA—- C:WINDOWSsystem32kbdtat.dll
 2009-12-02 22:04:05 —-RA—- C:WINDOWSsystem32kbdmon.dll
 2009-12-02 22:04:05 —-RA—- C:WINDOWSsystem32kbdkyr.dll
 2009-12-02 22:04:05 —-RA—- C:WINDOWSsystem32kbdkaz.dll
 2009-12-02 22:04:05 —-RA—- C:WINDOWSsystem32kbdbu.dll
 2009-12-02 22:04:05 —-RA—- C:WINDOWSsystem32kbdblr.dll
 2009-12-02 22:04:05 —-RA—- C:WINDOWSsystem32kbdaze.dll
 2009-12-02 22:04:04 —-A—- C:WINDOWSsystem32irclass.dll
 2009-12-02 22:04:04 —-A—- C:WINDOWSsystem32dgsetup.dll
 2009-12-02 22:04:04 —-A—- C:WINDOWSsystem32dgrpsetu.dll
 2009-12-02 22:04:03 —-A—- C:WINDOWSsystem32spxcoins.dll
 2009-12-02 22:04:03 —-A—- C:WINDOWSsystem32EqnClass.Dll
 2009-12-02 22:04:01 —-N—- C:WINDOWSsystem32CONFIG.TMP
 2009-12-02 22:04:01 —-A—- C:WINDOWSTASKMAN.EXE
 2009-12-02 22:04:01 —-A—- C:WINDOWSsystem32batt.dll
 2009-12-02 22:04:00 —-A—- C:WINDOWSNOTEPAD.EXE
 2009-12-02 22:03:56 —-A—- C:WINDOWSsystem32storprop.dll
 2009-12-02 22:02:29 —-RA—- C:WINDOWSSET8.tmp
 2009-12-02 22:02:27 —-RA—- C:WINDOWSSET4.tmp
 2009-12-02 22:02:26 —-RA—- C:WINDOWSSET3.tmp
 2009-12-02 22:02:04 —-A—- C:WINDOWSsetuplog.txt
 2009-12-02 22:01:06 —-D—- C:WINDOWSsystem32CatRoot2
 2009-12-02 22:01:06 —-D—- C:WINDOWSsystem32CatRoot
 2009-12-02 21:59:37 —-D—- C:Documents and Settings
 2009-12-02 21:59:36 —-SHD—- C:System Volume Information
 2009-12-02 21:58:55 —-SH—- C:boot.ini
 2009-12-02 21:56:52 —-RSD—- C:WINDOWSFonts
 2009-12-02 21:56:52 —-RD—- C:WINDOWSWeb
 2009-12-02 21:56:52 —-HD—- C:WINDOWSinf
 2009-12-02 21:56:52 —-D—- C:WINDOWSWinSxS
 2009-12-02 21:56:52 —-D—- C:WINDOWStwain_32
 2009-12-02 21:56:52 —-D—- C:WINDOWSTemp
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32wins
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32wbem
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32usmt
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32spool
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32ShellExt
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32Setup
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32ru-ru
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32ru
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32ras
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32oobe
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32npp
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32mui
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32inetsrv
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32IME
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32icsxml
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32ias
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32export
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32drivers
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32dhcp
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32config
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem323com_dmi
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem323076
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem322052
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem321054
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem321049
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem321042
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem321041
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem321037
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem321033
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem321031
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem321028
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem321025
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem32
 2009-12-02 21:56:52 —-D—- C:WINDOWSsystem
 2009-12-02 21:56:52 —-D—- C:WINDOWSsecurity
 2009-12-02 21:56:52 —-D—- C:WINDOWSResources
 2009-12-02 21:56:52 —-D—- C:WINDOWSrepair
 2009-12-02 21:56:52 —-D—- C:WINDOWSProvisioning
 2009-12-02 21:56:52 —-D—- C:WINDOWSPeerNet
 2009-12-02 21:56:52 —-D—- C:WINDOWSpchealth
 2009-12-02 21:56:52 —-D—- C:WINDOWSNetwork Diagnostic
 2009-12-02 21:56:52 —-D—- C:WINDOWSmui
 2009-12-02 21:56:52 —-D—- C:WINDOWSmsapps
 2009-12-02 21:56:52 —-D—- C:WINDOWSmsagent
 2009-12-02 21:56:52 —-D—- C:WINDOWSL2Schemas
 2009-12-02 21:56:52 —-D—- C:WINDOWSjava
 2009-12-02 21:56:52 —-D—- C:WINDOWSime
 2009-12-02 21:56:52 —-D—- C:WINDOWSHelp
 2009-12-02 21:56:52 —-D—- C:WINDOWSDriver Cache
 2009-12-02 21:56:52 —-D—- C:WINDOWSDebug
 2009-12-02 21:56:52 —-D—- C:WINDOWSConnection Wizard
 2009-12-02 21:56:52 —-D—- C:WINDOWSConfig
 2009-12-02 21:56:52 —-D—- C:WINDOWSAppPatch
 2009-12-02 21:56:52 —-D—- C:WINDOWSaddins
 2009-12-02 21:56:52 —-D—- C:WINDOWS
 2009-12-02 17:45:17 —-RA—- C:WINDOWSsystem32a3d.dll
 2009-12-02 17:45:13 —-A—- C:WINDOWSsystem32ksuser.dll
 2009-12-02 17:45:04 —-N—- C:WINDOWSsystem32wdmioctl.dll
 2009-12-02 17:45:02 —-N—- C:WINDOWSsystem32SMMedia.dll
 2009-12-02 17:44:56 —-D—- C:Program FilesAnalog Devices
 2009-12-02 17:44:56 —-A—- C:WINDOWSsystem32DSndUp.exe
 2009-12-02 17:44:55 —-N—- C:WINDOWSsystem32CleanUp.exe
 2009-12-02 17:44:53 —-HD—- C:Program FilesInstallShield Installation Information
 2009-12-02 17:44:45 —-D—- C:Program FilesCommon FilesInstallShield
 2009-12-02 17:43:35 —-D—- C:WINDOWSASUSInstAll
 2009-12-02 17:42:09 —-D—- C:WINDOWSsystem32ReinstallBackups
 2009-12-02 17:42:08 —-D—- C:Program FilesIntel
 2009-12-02 17:41:42 —-A—- C:WINDOWSAS_Debug.txt
 2009-12-02 17:41:09 —-A—- C:WINDOWSAscd_log.ini
 2009-12-02 17:40:50 —-A—- C:WINDOWSAscd_tmp.ini
 2009-12-02 17:33:32 —-D—- C:Documents and SettingsАртурApplication DataIdentities
 2009-12-02 17:33:30 —-HD—- C:Program FilesUninstall Information
 2009-12-02 17:33:19 —-RD—- C:WINDOWSOemDrv
 2009-12-02 17:33:12 —-A—- C:WINDOWSsystem32oeminfo.ini
 2009-12-02 17:33:08 —-D—- C:Program FilesMozilla Firefox
 2009-12-02 17:32:57 —-A—- C:WINDOWSsystem32MRS.exe
 2009-12-02 17:32:46 —-D—- C:Program FilesEVEREST Ultimate
 2009-12-02 17:32:45 —-D—- C:Program Files7-Zip
 2009-12-02 17:32:43 —-D—- C:Program FilesWinRAR
 2009-12-02 17:30:33 —-D—- C:Program FilesReference Assemblies
 2009-12-02 17:30:24 —-HDC—- C:WINDOWS$NtUninstallXPSEPSCLP$
 2009-12-02 17:30:18 —-N—- C:WINDOWSsystem32spmsg2.dll
 2009-12-02 17:30:18 —-A—- C:WINDOWSsystem32spupdsvc.exe
 2009-12-02 17:28:16 —-RSD—- C:WINDOWSassembly
 2009-12-02 17:28:09 —-D—- C:WINDOWSMicrosoft.NET
 2009-12-02 17:28:03 —-D—- C:Program FilesMSXML 6.0
 2009-12-02 17:28:00 —-N—- C:WINDOWSsystem32XpsSvcs.dll
 2009-12-02 17:28:00 —-N—- C:WINDOWSsystem32XPSSHHDR.dll
 2009-12-02 17:27:55 —-N—- C:WINDOWSsystem32prntvpt.dll
 2009-12-02 17:27:42 —-A—- C:WPI_Log.txt
 2009-12-02 17:26:05 —-ASH—- C:Documents and SettingsАртурApplication Datadesktop.ini
 2009-12-02 17:26:04 —-SD—- C:Documents and SettingsАртурApplication DataMicrosoft
 2009-12-02 17:25:40 —-SD—- C:WINDOWSsystem32Microsoft
 2009-12-02 17:25:40 —-D—- C:WINDOWSPrefetch
 2009-12-02 17:25:40 —-A—- C:WINDOWSSchedLgU.Txt
 2009-12-02 17:23:59 —-D—- C:WINDOWSResPatch
 2009-12-02 17:23:54 —-AD—- C:WINDOWSMedia
 2009-12-02 17:23:52 —-AD—- C:WINDOWSCursors
 2009-12-02 17:23:50 —-D—- C:Program FilesVistaDriveIcon
 2009-12-02 17:23:21 —-A—- C:WINDOWScontrol.ini
 2009-12-02 17:23:21 —-A—- C:AUTOEXEC.BAT
 2009-12-02 17:23:13 —-A—- C:WINDOWSOEWABLog.txt
 2009-12-02 17:23:08 —-A—- C:WINDOWSsystem32mapi32.dll
 2009-12-02 17:23:07 —-D—- C:WINDOWSsystem32dllcache
 2009-12-02 17:23:07 —-D—- C:TEMP
 2009-12-02 17:22:19 —-RAH—- C:WINDOWSsystem32logonui.exe.manifest
 2009-12-02 17:22:16 —-RAH—- C:WINDOWSsystem32cdplayer.exe.manifest
 2009-12-02 17:20:22 —-D—- C:WINDOWSRegistration
 2009-12-02 17:11:13 —-HD—- C:Program FilesWindowsUpdate
 2009-12-02 17:11:09 —-D—- C:Program FilesOnline Services
 2009-12-02 17:10:56 —-A—- C:WINDOWSsystem32atrace.dll
 2009-12-02 17:10:55 —-A—- C:WINDOWSsystem32desktop.ini
 2009-12-02 17:10:55 —-A—- C:WINDOWSdesktop.ini
 2009-12-02 17:10:51 —-D—- C:Program FilesCommon FilesServices
 2009-12-02 17:10:51 —-A—- C:WINDOWSsystem32acctres.dll
 2009-12-02 17:10:49 —-SD—- C:WINDOWSTasks
 2009-12-02 17:10:49 —-A—- C:WINDOWSsystem32icfgnt5.dll
 2009-12-02 17:10:47 —-D—- C:Program FilesCommon FilesMSSoap
 2009-12-02 17:10:45 —-D—- C:WINDOWSsrchasst
 2009-12-02 17:10:44 —-D—- C:WINDOWSsystem32Macromed
 2009-12-02 17:10:42 —-A—- C:WINDOWSsystem32wuweb.dll
 2009-12-02 17:10:42 —-A—- C:WINDOWSsystem32wucltui.dll
 2009-12-02 17:10:42 —-A—- C:WINDOWSsystem32wuauserv.dll
 2009-12-02 17:10:42 —-A—- C:WINDOWSsystem32wuaueng1.dll
 2009-12-02 17:10:41 —-A—- C:WINDOWSsystem32wups.dll
 2009-12-02 17:10:41 —-A—- C:WINDOWSsystem32wuaueng.dll.wusetup.1142171.bak
 2009-12-02 17:10:41 —-A—- C:WINDOWSsystem32wuaueng.dll
 2009-12-02 17:10:41 —-A—- C:WINDOWSsystem32wuaucpl.cpl.wusetup.1141937.bak
 2009-12-02 17:10:41 —-A—- C:WINDOWSsystem32wuauclt1.exe
 2009-12-02 17:10:41 —-A—- C:WINDOWSsystem32wuauclt.exe.wusetup.1141890.bak
 2009-12-02 17:10:41 —-A—- C:WINDOWSsystem32wuauclt.exe
 2009-12-02 17:10:41 —-A—- C:WINDOWSsystem32wuapi.dll
 2009-12-02 17:10:41 —-A—- C:WINDOWSsystem32qmgrprxy.dll
 2009-12-02 17:10:41 —-A—- C:WINDOWSsystem32bitsprx4.dll
 2009-12-02 17:10:41 —-A—- C:WINDOWSsystem32bitsprx3.dll
 2009-12-02 17:10:41 —-A—- C:WINDOWSsystem32bitsprx2.dll
 2009-12-02 17:10:40 —-A—- C:WINDOWSsystem32qmgr.dll
 2009-12-02 17:10:38 —-D—- C:Program FilesMovie Maker
 2009-12-02 17:10:20 —-A—- C:WINDOWSsystem32safrslv.dll
 2009-12-02 17:10:20 —-A—- C:WINDOWSsystem32safrdm.dll
 2009-12-02 17:10:20 —-A—- C:WINDOWSsystem32safrcdlg.dll
 2009-12-02 17:10:20 —-A—- C:WINDOWSsystem32racpldlg.dll
 2009-12-02 17:10:17 —-D—- C:WINDOWSsystem32Restore
 2009-12-02 17:10:17 —-A—- C:WINDOWSsystem32srrstr.dll
 2009-12-02 17:10:17 —-A—- C:WINDOWSsystem32fltMc.exe
 2009-12-02 17:10:17 —-A—- C:WINDOWSsystem32fltlib.dll
 2009-12-02 17:10:16 —-A—- C:WINDOWSsystem32srsvc.dll
 2009-12-02 17:10:16 —-A—- C:WINDOWSsystem32srclient.dll
 2009-12-02 17:10:16 —-A—- C:WINDOWSsystem32msoert2.dll
 2009-12-02 17:10:16 —-A—- C:WINDOWSsystem32msoeacct.dll
 2009-12-02 17:10:15 —-A—- C:WINDOWSsystem32inetres.dll
 2009-12-02 17:10:15 —-A—- C:WINDOWSsystem32inetcomm.dll
 2009-12-02 17:10:14 —-D—- C:Program FilesOutlook Express
 2009-12-02 17:10:14 —-A—- C:WINDOWSsystem32schedsvc.dll
 2009-12-02 17:10:13 —-A—- C:WINDOWSsystem32mstinit.exe
 2009-12-02 17:10:13 —-A—- C:WINDOWSsystem32mstask.dll
 2009-12-02 17:10:13 —-A—- C:WINDOWSsystem32isign32.dll
 2009-12-02 17:10:13 —-A—- C:WINDOWSsystem32inetcfg.dll
 2009-12-02 17:10:13 —-A—- C:WINDOWSsystem32icwphbk.dll
 2009-12-02 17:10:13 —-A—- C:WINDOWSsystem32icwdial.dll
 2009-12-02 17:10:08 —-D—- C:Program FilesCommon FilesSystem
 2009-12-02 17:09:30 —-D—- C:Program FilesComPlus Applications
 2009-12-02 17:09:28 —-A—- C:WINDOWSvbaddin.ini
 2009-12-02 17:09:28 —-A—- C:WINDOWSvb.ini
 2009-12-02 17:09:08 —-SD—- C:WINDOWSDownloaded Program Files
 2009-12-02 17:09:08 —-RD—- C:WINDOWSOffline Web Pages
 2009-12-02 17:09:08 —-A—- C:WINDOWSsystem32winfxdocobj.exe
 2009-12-02 17:09:07 —-D—- C:WINDOWSwbem
 2009-12-02 17:09:07 —-A—- C:WINDOWSsystem32msfeedssync.exe
 2009-12-02 17:09:07 —-A—- C:WINDOWSsystem32msfeedsbs.dll
 2009-12-02 17:09:05 —-A—- C:WINDOWSsystem32ieframe.dll.mui
 2009-12-02 17:09:04 —-D—- C:Program FilesInternet Explorer
 2009-12-02 17:09:04 —-A—- C:WINDOWSsystem32advpack.dll.mui
 2009-12-02 17:08:57 —-D—- C:Program FilesWindows Media Player
 2009-12-02 17:08:57 —-D—- C:Program FilesWindows Media Connect 2
 2009-12-02 17:08:56 —-D—- C:WINDOWSsystem32PreInstall
 2009-12-02 17:08:55 —-D—- C:WINDOWSSoftwareDistribution
 2009-12-02 17:08:55 —-A—- C:WINDOWSsystem32muweb.dll
 2009-12-02 17:08:55 —-A—- C:WINDOWSsystem32mucltui.dll.mui
 2009-12-02 17:08:55 —-A—- C:WINDOWSsystem32mucltui.dll
 2009-12-02 17:08:54 —-A—- C:WINDOWSsystem32gpprefcl.dll
 2009-12-02 17:08:51 —-D—- C:Program FilesMSN Gaming Zone
 2009-12-02 17:08:51 —-A—- C:WINDOWSsystem32write.exe
 2009-12-02 17:08:43 —-A—- C:WINDOWSsystem32sndvol32.exe
 2009-12-02 17:08:43 —-A—- C:WINDOWSsystem32hticons.dll
 2009-12-02 17:08:43 —-A—- C:WINDOWSsystem32avwav.dll
 2009-12-02 17:08:43 —-A—- C:WINDOWSsystem32avtapi.dll
 2009-12-02 17:08:43 —-A—- C:WINDOWSsystem32avmeter.dll
 2009-12-02 17:08:42 —-A—- C:WINDOWSsystem32winchat.exe
 2009-12-02 17:08:37 —-A—- C:WINDOWSsystem32winmine.exe
 2009-12-02 17:08:37 —-A—- C:WINDOWSsystem32sol.exe
 2009-12-02 17:08:37 —-A—- C:WINDOWSsystem32getuname.dll
 2009-12-02 17:08:37 —-A—- C:WINDOWSsystem32charmap.exe
 2009-12-02 17:08:37 —-A—- C:WINDOWSsystem32calc.exe
 2009-12-02 17:08:36 —-A—- C:WINDOWSsystem32usrlogon.cmd
 2009-12-02 17:08:36 —-A—- C:WINDOWSsystem32tsshutdn.exe
 2009-12-02 17:08:36 —-A—- C:WINDOWSsystem32tslabels.ini
 2009-12-02 17:08:36 —-A—- C:WINDOWSsystem32tskill.exe
 2009-12-02 17:08:36 —-A—- C:WINDOWSsystem32tsdiscon.exe
 2009-12-02 17:08:36 —-A—- C:WINDOWSsystem32tscon.exe
 2009-12-02 17:08:36 —-A—- C:WINDOWSsystem32shadow.exe
 2009-12-02 17:08:36 —-A—- C:WINDOWSsystem32reset.exe
 2009-12-02 17:08:36 —-A—- C:WINDOWSsystem32mshearts.exe
 2009-12-02 17:08:36 —-A—- C:WINDOWSsystem32freecell.exe
 2009-12-02 17:08:35 —-A—- C:WINDOWSsystem32rwinsta.exe
 2009-12-02 17:08:35 —-A—- C:WINDOWSsystem32regini.exe
 2009-12-02 17:08:35 —-A—- C:WINDOWSsystem32rdpcfgex.dll
 2009-12-02 17:08:35 —-A—- C:WINDOWSsystem32qwinsta.exe
 2009-12-02 17:08:35 —-A—- C:WINDOWSsystem32qappsrv.exe
 2009-12-02 17:08:35 —-A—- C:WINDOWSsystem32msg.exe
 2009-12-02 17:08:35 —-A—- C:WINDOWSsystem32msdtcprf.ini
 2009-12-02 17:08:35 —-A—- C:WINDOWSsystem32logoff.exe
 2009-12-02 17:08:35 —-A—- C:WINDOWSsystem32cdmodem.dll
 2009-12-02 17:08:30 —-A—- C:WINDOWSsystem32wmimgmt.msc
 2009-12-02 17:08:29 —-A—- C:WINDOWSsystem32sndrec32.exe
 2009-12-02 17:08:29 —-A—- C:WINDOWSsystem32mplay32.exe
 2009-12-02 17:08:29 —-A—- C:WINDOWSsystem32accwiz.exe
 2009-12-02 17:08:28 —-D—- C:Program FilesWindows NT
 2009-12-02 17:08:28 —-A—- C:WINDOWSsystem32mspaint.exe
 2009-12-02 17:08:28 —-A—- C:WINDOWSsystem32hypertrm.dll
 2009-12-02 17:08:28 —-A—- C:WINDOWSsystem32clipbrd.exe
 2009-12-02 17:08:27 —-A—- C:WINDOWSsystem32tsgqec.dll
 2009-12-02 17:08:27 —-A—- C:WINDOWSsystem32tscfgwmi.dll
 2009-12-02 17:08:27 —-A—- C:WINDOWSsystem32spider.exe
 2009-12-02 17:08:26 —-A—- C:WINDOWSsystem32rhttpaa.dll
 2009-12-02 17:08:26 —-A—- C:WINDOWSsystem32mstscax.dll
 2009-12-02 17:08:26 —-A—- C:WINDOWSsystem32mstsc.exe
 2009-12-02 17:08:26 —-A—- C:WINDOWSsystem32aaclient.dll
 2009-12-02 17:08:25 —-A—- C:WINDOWSsystem32termsrv.dll
 2009-12-02 17:08:25 —-A—- C:WINDOWSsystem32sessmgr.exe
 2009-12-02 17:08:25 —-A—- C:WINDOWSsystem32remotepg.dll
 2009-12-02 17:08:25 —-A—- C:WINDOWSsystem32rdshost.exe
 2009-12-02 17:08:25 —-A—- C:WINDOWSsystem32rdsaddin.exe
 2009-12-02 17:08:25 —-A—- C:WINDOWSsystem32rdpwsx.dll
 2009-12-02 17:08:25 —-A—- C:WINDOWSsystem32rdpsnd.dll
 2009-12-02 17:08:25 —-A—- C:WINDOWSsystem32rdpclip.exe
 2009-12-02 17:08:25 —-A—- C:WINDOWSsystem32rdchost.dll
 2009-12-02 17:08:25 —-A—- C:WINDOWSsystem32qprocess.exe
 2009-12-02 17:08:25 —-A—- C:WINDOWSsystem32icaapi.dll
 2009-12-02 17:08:25 —-A—- C:WINDOWSsystem32cfgbkend.dll
 2009-12-02 17:08:24 —-D—- C:WINDOWSsystem32MsDtc
 2009-12-02 17:08:24 —-A—- C:WINDOWSsystem32xolehlp.dll
 2009-12-02 17:08:24 —-A—- C:WINDOWSsystem32mtxoci.dll
 2009-12-02 17:08:24 —-A—- C:WINDOWSsystem32msdtcuiu.dll
 2009-12-02 17:08:24 —-A—- C:WINDOWSsystem32msdtctm.dll
 2009-12-02 17:08:24 —-A—- C:WINDOWSsystem32msdtcprx.dll
 2009-12-02 17:08:24 —-A—- C:WINDOWSsystem32msdtclog.dll
 2009-12-02 17:08:24 —-A—- C:WINDOWSsystem32msdtc.exe
 2009-12-02 17:08:23 —-A—- C:WINDOWSsystem32mtxlegih.dll
 2009-12-02 17:08:23 —-A—- C:WINDOWSsystem32mtxex.dll
 2009-12-02 17:08:23 —-A—- C:WINDOWSsystem32mtxdm.dll
 2009-12-02 17:08:23 —-A—- C:WINDOWSsystem32dcomcnfg.exe
 2009-12-02 17:08:22 —-D—- C:WINDOWSsystem32Com
 2009-12-02 17:08:22 —-A—- C:WINDOWSsystem32stclient.dll
 2009-12-02 17:08:22 —-A—- C:WINDOWSsystem32comrepl.dll
 2009-12-02 17:08:22 —-A—- C:WINDOWSsystem32comaddin.dll
 2009-12-02 17:08:22 —-A—- C:WINDOWSsystem32colbact.dll
 2009-12-02 17:08:22 —-A—- C:WINDOWSsystem32clbcatex.dll
 2009-12-02 17:08:22 —-A—- C:WINDOWSsystem32catsrvut.dll
 2009-12-02 17:08:22 —-A—- C:WINDOWSsystem32catsrvps.dll
 2009-12-02 17:08:22 —-A—- C:WINDOWSsystem32catsrv.dll
 2009-12-02 17:08:21 —-A—- C:WINDOWSsystem32comuid.dll
 2009-12-02 17:08:21 —-A—- C:WINDOWSsystem32comsvcs.dll
 2009-12-02 17:08:21 —-A—- C:WINDOWSsystem32comsnap.dll
 2009-12-02 17:08:21 —-A—- C:WINDOWSsystem32clbcatq.dll
 2009-12-02 17:08:17 —-A—- C:WINDOWSsystem32servdeps.dll
 2009-12-02 17:08:16 —-A—- C:WINDOWSsystem32mmfutil.dll
 2009-12-02 17:08:16 —-A—- C:WINDOWSsystem32licwmi.dll
 2009-12-02 17:08:16 —-A—- C:WINDOWSsystem32cmprops.dll======List of files/folders modified in the last 1 months====== 2009-12-03 18:24:15 —-A—- C:WINDOWSwin.ini 
 2009-12-02 22:15:30 —-A—- C:WINDOWSsystem.ini======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:WINDOWSSystem32Driversavgldx86.sys [2009-12-03 335240] 
 R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:WINDOWSSystem32Driversavgmfx86.sys [2009-12-03 27784]
 R1 AvgTdiX;AVG Free8 Network Redirector; C:WINDOWSSystem32Driversavgtdix.sys [2009-12-03 108552]
 R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-15 40704]
 R1 kbdhid;Драйвер клавиатуры HID; C:WINDOWSsystem32DRIVERSkbdhid.sys [2008-04-15 14720]
 R1 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2008-04-15 12032]
 R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2008-10-11 62848]
 R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:WINDOWSsystem32driversADIHdAud.sys [2006-05-02 229376]
 R3 AEAudio;AE Audio Service; C:WINDOWSsystem32driversAEAudio.sys [2006-04-27 93824]
 R3 ati2mtag;ati2mtag; C:WINDOWSsystem32DRIVERSati2mtag.sys [2009-07-15 4407808]
 R3 AtiHdmiService;ATI Function Driver for HDMI Service; C:WINDOWSsystem32driversAtiHdmi.sys [2009-06-02 99856]
 R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-15 144384]
 R3 hidusb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-15 10368]
 R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2009-01-29 12160]
 R3 MTsensor;ATK0110 ACPI UTILITY; C:WINDOWSsystem32DRIVERSASACPI.sys [2004-08-13 5810]
 R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtenicxp.sys [2006-07-27 83712]
 R3 SenFiltService;SenFilt Service; C:WINDOWSsystem32driversSenfilt.sys [2006-03-17 392960]
 R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-15 32128]
 R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-13 30208]
 R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-13 59520]
 R3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-13 26368]
 R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-13 20608]
 S1 InCDPass;InCDPass; C:WINDOWSsystem32driversInCDPass.sys []
 S1 InCDRm;InCD Reader; C:WINDOWSsystem32driversInCDRm.sys []
 S3 s0017bus;Sony Ericsson Device 0017 driver (WDM); C:WINDOWSsystem32DRIVERSs0017bus.sys [2008-05-27 90536]
 S3 s0017mdfl;Sony Ericsson Device 0017 USB WMC Modem Filter; C:WINDOWSsystem32DRIVERSs0017mdfl.sys [2008-05-27 15016]
 S3 s0017mdm;Sony Ericsson Device 0017 USB WMC Modem Driver; C:WINDOWSsystem32DRIVERSs0017mdm.sys [2008-05-27 122152]
 S3 s0017mgmt;Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM); C:WINDOWSsystem32DRIVERSs0017mgmt.sys [2008-05-27 115496]
 S3 s0017nd5;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS); C:WINDOWSsystem32DRIVERSs0017nd5.sys [2008-05-27 25768]
 S3 s0017obex;Sony Ericsson Device 0017 USB WMC OBEX Interface; C:WINDOWSsystem32DRIVERSs0017obex.sys [2008-05-27 111912]
 S3 s0017unic;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM); C:WINDOWSsystem32DRIVERSs0017unic.sys [2008-05-27 117672]
 S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2007-06-18 77568]
 S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2007-06-18 82944]
 S4 InCDFs;InCD File System; C:WINDOWSsystem32driversInCDFs.sys []
 S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 2GIS UpdateClientService;2GIS UpdateClientService; C:Program Files2gisUpdateClientWin32UpdateClientService.exe [2008-09-17 1134592] 
 R2 avg8emc;AVG Free8 E-mail Scanner; C:PROGRA~1AVGAVG8avgemc.exe [2009-12-03 908056]
 R2 avg8wd;AVG Free8 WatchDog; C:PROGRA~1AVGAVG8avgwdsvc.exe [2009-12-03 297752]
 R2 PnkBstrA;PnkBstrA; C:WINDOWSsystem32PnkBstrA.exe [2009-12-04 66872]
 R2 PnkBstrB;PnkBstrB; C:WINDOWSsystem32PnkBstrB.exe [2009-12-04 103736]
 S2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSsystem32Ati2evxx.exe [2009-07-15 602112]
 S2 ATI Smart;ATI Smart; C:WINDOWSsystem32ati2sgag.exe [2009-07-14 593920]
 S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2007-04-13 33632]
 S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2007-04-13 68952]
 S3 idsvc;Windows CardSpace; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2006-10-30 741376]
 S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
 S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media Playerwmpnetwk.exe [2006-10-18 913408]
 S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
 S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2006-10-30 122880]
 EOF
 6 декабря, 2009 в 4:44 пп #27243Здравствуйте, добро пожаловать на Spyware-ru форум. Запустите HijackThis, для этого кликните Пуск, Выполнить, введите C:Program Filestrend microАртур.exeи нажмите Enter. 
 Откроется главное меню программы HijackThis.
 Кликните по кнопке Do a system scan only.
 Далее отметьте галочкой (слева) следующие строки, если они присутствуют:F2 - REG:system.ini: UserInit=C:WINDOWSsystem32userinit.exe,C:TEMPdas1.tmpЗакройте все запущенные программы (включая InternetExplorer) и окна Windows. 
 Кликните по кнопке Fix checked и подтвердите свои действия выбрав YES.
 Перезагрузите компьютер.Прочитайте описание программы Malwarebytes Anti-malware (MBAM). 
 Скачайте и выполните сканирование вашего компьютера. Удалите всё что будет найдено. В конце работы будет показан лог.
 Его содержимое вставьте в ваше следующее сообщение. Так же приложите свежий RSIT лог.
- 
		АвторСообщения
- Для ответа в этой теме необходимо авторизоваться.
