Удаление вирусов и троянов. Защита компьютера. › Помощь в удалении вирусов, троянов, рекламы и других зловредов › Нет доступа к жесткому диску! Он виден но неткрывается.
- This topic has 9 ответов, 2 участника, and was last updated 16 years, 4 months назад by
Admin.
-
АвторСообщения
-
4 мая, 2009 в 5:25 пп #16634
Такая проблема: Компьютер видит оба жестких диска. На С: стоит винда, на Е: все остальное. Но диск Е: видит пустым, а когда пытаюсь его открыть то пишет: «Нет доступа к Е:. Файл или папка повреждены.Чтение не возможно.» Такое уже один раз было, я перезагрузил компьютер и все стало нормально. Теперь вот тоже самое, при перезагрузке ничего не помогает! Что делать? Поставил новый шлейф, все тоже самое.
И еще! при восстановлении данных программой Power Data Recovery видит всю структуру папок и файлов, все восстанавливает! Но мне некуда слить 200Гб. информации. Читал про вирус autorun.inf так вот программа Power Data Recovery видит это файл, но удалить я через нее ничего не могу так она только восстанавливает файлы. Что делать? Я уже делал откат системы акронисом, ничего, все в пустую. И все эти программы по удалению файла autorun.inf не понимаю, как они могут стереть его с жесткого диска, если он вообще не открывается!? И еще, я хотел бы узнать — это точно вирус у меня?info.txt
info.txt logfile of random's system information tool 1.06 2009-05-05 01:23:29
======Uninstall list======
#1 DVD Ripper 7.2.5-->C:Program FilesNo1 DVD Ripperuninst.exe
-->msiexec /package {90120000-0015-0000-0000-0000000FF1CE} /uninstall {10B5F4EF-C4DC-47AF-913B-EAF05C69C852}
-->msiexec /package {90120000-0016-0000-0000-0000000FF1CE} /uninstall {C5060182-C90D-4314-9AE9-5C0DCF8FD1EF}
-->msiexec /package {90120000-0018-0000-0000-0000000FF1CE} /uninstall {00E877D5-CDF8-4DDC-9AE0-E541B4BB6487}
-->msiexec /package {90120000-001A-0000-0000-0000000FF1CE} /uninstall {2A33A0C2-2B09-446E-9022-1508A85ECD2D}
-->msiexec /package {90120000-001B-0000-0000-0000000FF1CE} /uninstall {3520B304-0EF8-475D-8C52-47ABCCC75FC6}
-->msiexec /package {90120000-0051-0000-0000-0000000FF1CE} /uninstall {5C395839-FBA5-49C5-923A-787665D5E128}
-->RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup "C:Program FilesInstallShield Installation Information{0B21B14F-403B-442E-86E1-3A912D70033D}Setup.exe" -l0x9
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
7-Zip 4.57-->"C:Program Files7-ZipUninstall.exe"
Acronis True Image Home-->MsiExec.exe /X{37C8899D-FD70-481F-94AA-1F1B08765E22}
Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings-->MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
Adobe Color EU Extra Settings-->MsiExec.exe /I{51846830-E7B2-4218-8968-B77F0FF475B8}
Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
Adobe Color NA Recommended Settings-->MsiExec.exe /I{95655ED4-7CA5-46DF-907F-7144877A32E5}
Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Flash Player ActiveX-->C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop CS3-->C:Program FilesCommon FilesAdobeInstallers719d6f144d0c086a0dfa7ff76bb9ac1Setup.exe
Adobe Photoshop CS3-->MsiExec.exe /I{3D7E3EC9-46CF-4359-9289-39CE01DFB82F}
Adobe Setup-->MsiExec.exe /I{FF11004C-F42A-4A31-9BCF-7F5C8FDBE53C}
Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3-->MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
AmlMaple-->rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFAmlMaple.inf,Uninstall
ATI Display Driver-->rundll32 C:WINDOWSsystem32atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
AVG 8.5-->C:Program FilesAVGAVG8setup.exe /UNINSTALL
Ccleaner 2.07.575-->"C:Program FilesCcleanerunins000.exe"
C-Media WDM Audio Driver-->C:WINDOWSsystem32cmirmdrv.exe
CorelDRAW Graphics Suite X3-->MsiExec.exe /I{7C5123A9-30A8-4C44-89CA-A8C87A1FCC91}
Daemon Tools LIte-->"C:Program FilesDaemon Tools LiteUninst.exe"
Download Master version 5.5.11.1167-->"C:Program FilesDownload Masterunins000.exe"
Everest-->C:Program FilesEverestUninstall.exe
Flash Player Pro-->C:Program FilesFlash Player ProUninstall.exe
Google Toolbar for Internet Explorer-->"C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarManager_BDA1448D3D255554.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
HijackThis 2.0.2-->"C:Program Filestrend microHijackThis.exe" /uninstall
Java(TM) 6 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160060}
K-Lite Mega Codec Pack 3.9.0-->"C:Program FilesK-Lite Codec Packunins000.exe"
LClock-->C:Program FilesLClockUninstall.exe
Microsoft .NET Framework 1.1 Russian Language Pack-->MsiExec.exe /X{2BB372D9-52B4-410A-BC1A-FEAB63181EEF}
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft .NET Framework 3.0 Service Pack 1-->MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
Microsoft .NET Framework 3.5-->C:WINDOWSMicrosoft.NETFrameworkv3.5Microsoft .NET Framework 3.5setup.exe
Microsoft .NET Framework 3.5-->MsiExec.exe /I{2FC099BD-AC9B-33EB-809C-D332E1B27C40}
Microsoft Office Access 2007-->"C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe" /uninstall ACCESS /dll OSETUP.DLL
Microsoft Office Access 2007-->MsiExec.exe /X{90120000-0015-0000-0000-0000000FF1CE}
Microsoft Office Access MUI (Russian) 2007-->MsiExec.exe /X{90120000-0015-0419-0000-0000000FF1CE}
Microsoft Office Excel 2007-->"C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe" /uninstall EXCEL /dll OSETUP.DLL
Microsoft Office Excel 2007-->MsiExec.exe /X{90120000-0016-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Russian) 2007-->MsiExec.exe /X{90120000-0016-0419-0000-0000000FF1CE}
Microsoft Office Outlook 2007-->"C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe" /uninstall OUTLOOK /dll OSETUP.DLL
Microsoft Office Outlook 2007-->MsiExec.exe /X{90120000-001A-0000-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Russian) 2007-->MsiExec.exe /X{90120000-001A-0419-0000-0000000FF1CE}
Microsoft Office PowerPoint 2007-->"C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe" /uninstall POWERPOINT /dll OSETUP.DLL
Microsoft Office PowerPoint 2007-->MsiExec.exe /X{90120000-0018-0000-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Russian) 2007-->MsiExec.exe /X{90120000-0018-0419-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Russian) 2007-->MsiExec.exe /X{90120000-001F-0419-0000-0000000FF1CE}
Microsoft Office Proof (Ukrainian) 2007-->MsiExec.exe /X{90120000-001F-0422-0000-0000000FF1CE}
Microsoft Office Proofing (Russian) 2007-->MsiExec.exe /X{90120000-002C-0419-0000-0000000FF1CE}
Microsoft Office Shared MUI (Russian) 2007-->MsiExec.exe /X{90120000-006E-0419-0000-0000000FF1CE}
Microsoft Office Visio MUI (Russian) 2007-->MsiExec.exe /X{90120000-0054-0419-0000-0000000FF1CE}
Microsoft Office Visio Professional 2007-->MsiExec.exe /X{90120000-0051-0000-0000-0000000FF1CE}
Microsoft Office Visio Профессиональный 2007-->"C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe" /uninstall VISPRO /dll OSETUP.DLL
Microsoft Office Word 2007-->"C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe" /uninstall WORD /dll OSETUP.DLL
Microsoft Office Word 2007-->MsiExec.exe /X{90120000-001B-0000-0000-0000000FF1CE}
Microsoft Office Word MUI (Russian) 2007-->MsiExec.exe /X{90120000-001B-0419-0000-0000000FF1CE}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mozilla Firefox (2.0.0.14)-->C:Program FilesMozilla Firefoxuninstallhelper.exe
MSVC80_x86-->MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
Nero 8 Lite v8.3.2.1-->"C:Program FilesNerounins000.exe"
Nokia Connectivity Cable Driver-->MsiExec.exe /X{15AC0C5D-A6FB-4CE2-8CD0-28179EEB5625}
Nokia PC Suite-->C:Documents and SettingsAll UsersApplication DataInstallations{58FB2F9A-5F2D-40E8-82DF-4987E60AD8BD}Nokia_PC_Suite_7_1_18_0_rus.exe
Nokia PC Suite-->MsiExec.exe /I{58FB2F9A-5F2D-40E8-82DF-4987E60AD8BD}
O&O Defrag Professional Edition-->MsiExec.exe /I{53480330-E1D1-41CA-B8F8-7F78644F7F50}
Paint.NET v3.31-->rundll32.exe advpack.dll,LaunchINFSection PaintDN.inf,Uninstall
PC Connectivity Solution-->MsiExec.exe /I{D848D140-41C3-4A53-86D8-E866A100B4CD}
PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
Power Data Recovery 4.1.1-->C:Program FilesPower Data RecoveryUninstall.exe
Punto Switcher 2.95-->"C:Program FilesPunto Switcherunins000.exe"
QIP.Online-->C:Program FilesQIP.OnlineUninstall.exe
QuickTime Alternative 2.5.1-->"C:Program FilesQuickTime Alternativeunins000.exe"
Real Alternative 1.7.5-->"C:Program FilesReal Alternativeunins000.exe"
RU-->MsiExec.exe /I{01AE68B4-C785-4865-BC7E-78456372BB75}
Samsung ML-1610 Series-->C:WINDOWSSamsungML-1610SETUP.EXE
SMSDV v.1.8.e (14 апреля 2009г.)-->"C:Program FilesSMSDVunins000.exe"
SnagIt 8-->MsiExec.exe /I{DA0BF7AB-88EB-4675-8FA1-531EAD938821}
The KMPlayer-->C:Program FilesThe KMPlayerUninstall.exe
Total Commander-->C:Program FilesTotal CommanderUninstall.exe
Uninstall Tool 2.3.2-->"C:Program FilesUninstall Toolunins000.exe"
VBA-->MsiExec.exe /I{C94E45B0-6AA6-4FB9-9AAE-22085F631880}
Vista Drive Icon-->rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFVistaDrv.inf,Uninstall
VLC-->C:Program FilesVLCUninstall.exe
Winamp-->"C:Program FilesWinampunins000.exe"
WinDjView 0.5-->"C:Program FilesWinDjViewunins000.exe"
XnView 1.93.6-->"C:Program FilesXnViewunins000.exe"
Архиватор WinRAR-->C:Program FilesWinRARuninstall.exe
Пакет драйверов Windows - Nokia Modem (03/05/2008 3.7)-->C:PROGRA~1DIFX270581355A767BF1dpinst.exe /u C:WINDOWSsystem32DRVSTOREnokia_blue_635B28EFCFA9395123BB1C251595CB16129E2560nokia_bluetooth.inf
Пакет драйверов Windows - Nokia Modem (03/13/2008 6.86.0.1)-->C:PROGRA~1DIFX270581355A767BF1dpinst.exe /u C:WINDOWSsystem32DRVSTOREnokbtmdm_28F2EAC406838DA65AFF6C6886FE9FE96AEF5186nokbtmdm.inf
Пакет драйверов Windows - Nokia Modem (10/27/2008 3.9)-->C:PROGRA~1DIFX270581355A767BF1dpinst.exe /u C:WINDOWSsystem32DRVSTOREnokia_blue_79486EC6AA0D1732FB17E5167077C07ECAE1B870nokia_bluetooth.inf
Пакет драйверов Windows - Nokia Modem (10/27/2008 7.01.0.1)-->C:PROGRA~1DIFX270581355A767BF1dpinst.exe /u C:WINDOWSsystem32DRVSTOREnokbtmdm_247189AEBF39EB69A7C75429610DFED2F2EDC1B6nokbtmdm.inf
Пакет драйверов Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)-->C:PROGRA~1DIFX270581355A767BF1dpinst.exe /u C:WINDOWSsystem32DRVSTOREpccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294pccsmcfd.inf
Пакет обеспечения совместимости для выпуска 2007 системы Microsoft Office-->MsiExec.exe /X{90120000-0020-0419-0000-0000000FF1CE}
СОКРАТ Интернет 3.0 Полиглот-->RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1ctor.dll,LaunchSetup "C:Program FilesInstallShield Installation Information{A1CE8874-17FC-4646-81F5-BA704330CD72}setup.exe"
Сократ Персональный 4.1-->RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1ctor.dll,LaunchSetup "C:Program FilesInstallShield Installation Information{9CD789E2-B7CE-11D5-B7E9-00A0C9449F99}setup.exe"
======Security center information======
AV: AVG Anti-Virus
======System event log======
Computer Name: MICROSOF-BD8245
Event Code: 6011
Message: NetBIOS-имя и имя DNS-узла этого компьютера были изменены с "MACHINENAME" на "MICROSOF-BD8245".
Record Number: 5
Source Name: EventLog
Time Written: 20090418201147.000000+240
Event Type: информация
User:
Computer Name: MACHINENAME
Event Code: 2
Message: При проверке, что DeviceSerial0 является последовательным портом, обнаружена и будет использоваться прямая очередь.
Record Number: 4
Source Name: Serial
Time Written: 20090418235933.000000+240
Event Type: информация
User:
Computer Name: MACHINENAME
Event Code: 2
Message: При проверке, что DeviceSerial1 является последовательным портом, обнаружена и будет использоваться прямая очередь.
Record Number: 3
Source Name: Serial
Time Written: 20090418235933.000000+240
Event Type: информация
User:
Computer Name: MACHINENAME
Event Code: 6005
Message: Запущена служба журнала событий.
Record Number: 2
Source Name: EventLog
Time Written: 20090418235917.000000+240
Event Type: информация
User:
Computer Name: MACHINENAME
Event Code: 6009
Message: Microsoft (R) Windows 2000 (R) 5.01. 2600 Service Pack 3 Uniprocessor Free.
Record Number: 1
Source Name: EventLog
Time Written: 20090418235917.000000+240
Event Type: информация
User:
=====Application event log=====
Computer Name: MICROSOF-BD8245
Event Code: 1000
Message: Счетчики производительности для службы MSDTC (MSDTC) загружены успешно.
Данные записи содержат новые значение индекса,
назначенного этой службе.
Record Number: 5
Source Name: LoadPerf
Time Written: 20090418201347.000000+240
Event Type: информация
User:
Computer Name: MICROSOF-BD8245
Event Code: 1000
Message: Счетчики производительности для службы TermService (Службы терминалов) загружены успешно.
Данные записи содержат новые значение индекса,
назначенного этой службе.
Record Number: 4
Source Name: LoadPerf
Time Written: 20090418201341.000000+240
Event Type: информация
User:
Computer Name: MICROSOF-BD8245
Event Code: 1000
Message: Счетчики производительности для службы RemoteAccess (Маршрутизация и удаленный доступ) загружены успешно.
Данные записи содержат новые значение индекса,
назначенного этой службе.
Record Number: 3
Source Name: LoadPerf
Time Written: 20090418201223.000000+240
Event Type: информация
User:
Computer Name: MICROSOF-BD8245
Event Code: 1000
Message: Счетчики производительности для службы PSched (PSched) загружены успешно.
Данные записи содержат новые значение индекса,
назначенного этой службе.
Record Number: 2
Source Name: LoadPerf
Time Written: 20090418201205.000000+240
Event Type: информация
User:
Computer Name: MICROSOF-BD8245
Event Code: 1000
Message: Счетчики производительности для службы RSVP (QoS RSVP) загружены успешно.
Данные записи содержат новые значение индекса,
назначенного этой службе.
Record Number: 1
Source Name: LoadPerf
Time Written: 20090418201154.000000+240
Event Type: информация
User:
======Environment variables======
"ComSpec"=%SystemRoot%system32cmd.exe
"Path"=%systemroot%system32;%systemroot%;%systemroot%system32wbem;C:Program FilesPC Connectivity Solution
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 10 Stepping 0, AuthenticAMD
"PROCESSOR_REVISION"=0a00
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%TEMP
"TMP"=%SystemRoot%TEMP
EOF
4 мая, 2009 в 9:43 пп #23735log.txt
Logfile of random's system information tool 1.06 (written by random/random)
Run by Admin at 2009-05-05 01:23:06
Microsoft Windows XP Professional Service Pack 3
System drive C: has 53 GB (84%) free of 64 GB
Total RAM: 1535 MB (62% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:23:26, on 05.05.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20772)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesCommon FilesAcronisSchedule2schedul2.exe
C:PROGRA~1AVGAVG8avgwdsvc.exe
C:WINDOWSsystem32oodag.exe
C:Program FilesAmlMapleAmlMaple.exe
C:WINDOWSsystem32oodtray.exe
C:PROGRA~1AVGAVG8avgtray.exe
C:Program FilesGoogleQuick Search BoxGoogleQuickSearchBox.exe
C:Program FilesAcronisTrueImageHomeTrueImageMonitor.exe
C:PROGRA~1AVGAVG8avgam.exe
C:Program FilesAcronisTrueImageHomeTimounterMonitor.exe
C:PROGRA~1AVGAVG8avgrsx.exe
C:Program FilesCommon FilesAcronisSchedule2schedhlp.exe
C:WINDOWSSamsungComSMMgrssmmgr.exe
C:PROGRA~1AVGAVG8avgnsx.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesVistaDriveIconVistaDrv.exe
C:Program FilesPunto Switcherps.exe
C:Program FileslouderitLouderIt.exe
C:Program FilesLClockLClock.exe
C:Program FilesDownload Masterdmaster.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:WINDOWSexplorer.exe
C:Program FilesQIP.Onlineqiponline.exe
C:Program FilesQIP Infiuminfium.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Program FilesQIP Infiuminfium.exe
C:DownloadsRSIT.exe
C:Program Filestrend microAdmin.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://start.qip.ru/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://www.kornet.ru/
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:Program FilesTechSmithSnagIt 8SnagItBHO.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:Program FilesAVGAVG8avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_06binssv.dll
O2 - BHO: IE 4.x-6.x BHO for Download Master - {9961627E-4059-41B4-8E0E-A7D6B3854ADF} - C:PROGRA~1DOWNLO~1dmiehlp.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier5.1.1309.3572swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:Program FilesGoogleGoogle ToolbarComponentfastsearch_A8904FB862BD9564.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:Program FilesTechSmithSnagIt 8SnagItIEAddin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
O3 - Toolbar: DM Bar - {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} - C:Program FilesDownload Masterdmbar.dll
O4 - HKLM..Run: [AmlMaple] C:Program FilesAmlMapleAmlMaple.exe
O4 - HKLM..Run: [OODefragTray] C:WINDOWSsystem32oodtray.exe
O4 - HKLM..Run: [AVG8_TRAY] C:PROGRA~1AVGAVG8avgtray.exe
O4 - HKLM..Run: [Google Quick Search Box] "C:Program FilesGoogleQuick Search BoxGoogleQuickSearchBox.exe" /autorun
O4 - HKLM..Run: [TrueImageMonitor.exe] C:Program FilesAcronisTrueImageHomeTrueImageMonitor.exe
O4 - HKLM..Run: [AcronisTimounterMonitor] C:Program FilesAcronisTrueImageHomeTimounterMonitor.exe
O4 - HKLM..Run: [Acronis Scheduler2 Service] "C:Program FilesCommon FilesAcronisSchedule2schedhlp.exe"
O4 - HKLM..Run: [Samsung Common SM] "C:WINDOWSSamsungComSMMgrssmmgr.exe" /autorun
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe
O4 - HKCU..Run: [Punto Switcher] C:Program FilesPunto Switcherps.exe
O4 - HKCU..Run: [louderit.exe] C:Program FileslouderitLouderIt.exe
O4 - HKCU..Run: [LClock] C:Program FilesLClockLClock.exe
O4 - HKCU..Run: [Download Master] C:Program FilesDownload Masterdmaster.exe -autorun
O4 - HKCU..Run: [swg] C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
O4 - HKCU..Run: [QIP.Online] C:Program FilesQIP.Onlineqiponline.exe auto_start
O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM')
O4 - HKUSS-1-5-18..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe (User 'SYSTEM')
O4 - HKUSS-1-5-18..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')
O4 - HKUS.DEFAULT..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User 'Default user')
O8 - Extra context menu item: &Перевести - C:Program FilesArsenal CompanySOCRAT InternetHTMLWSocrat.js
O8 - Extra context menu item: Закачать ВСЕ при помощи Download Master - C:Program FilesDownload Masterdmieall.htm
O8 - Extra context menu item: Закачать при помощи Download Master - C:Program FilesDownload Masterdmie.htm
O8 - Extra context menu item: Передать на удаленную закачку DM - C:Program FilesDownload Masterremdown.htm
O9 - Extra button: (no name) - DctMapping - (no file)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_06binssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_06binssv.dll
O9 - Extra button: СОКРАТ Интернет 3.0 - {17FA5CD6-5737-45c2-B194-74C8A4A7F7E7} - C:Program FilesArsenal CompanySOCRAT InternetSocratInternet.dll
O9 - Extra button: Настройки СОКРАТ Интернет 3.0 - {71F65890-5ED6-11d4-9665-00E02962D81A} - C:Program FilesArsenal CompanySOCRAT InternetSocratInternetT.dll
O9 - Extra button: Download Master - {8DAE90AD-4583-4977-9DD4-4360F7A45C74} - C:Program FilesDownload Masterdmaster.exe
O9 - Extra 'Tools' menuitem: &Download Master - {8DAE90AD-4583-4977-9DD4-4360F7A45C74} - C:Program FilesDownload Masterdmaster.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 - Extra button: Перевести страницу - {DFDC8970-FD66-4385-B8C0-835A4AA1DA00} - C:Program FilesArsenal CompanySOCRAT InternetSocratInternet.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:Program FilesAVGAVG8avgpp.dll
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:Program FilesGoogleGoogle ToolbarComponentfastsearch_A8904FB862BD9564.dll
O20 - Winlogon Notify: avgrsstarter - C:WINDOWSSYSTEM32avgrsstx.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:Program FilesCommon FilesAcronisSchedule2schedul2.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:WINDOWSsystem32Ati2evxx.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:PROGRA~1AVGAVG8avgwdsvc.exe
O23 - Service: Журнал событий (Eventlog) - Корпорация Майкрософт - C:WINDOWSsystem32services.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: Служба COM записи компакт-дисков IMAPI (ImapiService) - Корпорация Майкрософт - C:WINDOWSsystem32imapi.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:WINDOWSsystem32oodag.exe
O23 - Service: Plug and Play (PlugPlay) - Корпорация Майкрософт - C:WINDOWSsystem32services.exe
O23 - Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) - Корпорация Майкрософт - C:WINDOWSsystem32sessmgr.exe
O23 - Service: Смарт-карты (SCardSvr) - Корпорация Майкрософт - C:WINDOWSSystem32SCardSvr.exe
O23 - Service: ServiceLayer - Nokia. - C:Program FilesPC Connectivity SolutionServiceLayer.exe
O23 - Service: Журналы и оповещения производительности (SysmonLog) - Корпорация Майкрософт - C:WINDOWSsystem32smlogsvc.exe
O23 - Service: Теневое копирование тома (VSS) - Корпорация Майкрософт - C:WINDOWSSystem32vssvc.exe
O23 - Service: Адаптер производительности WMI (WmiApSrv) - Корпорация Майкрософт - C:WINDOWSsystem32wbemwmiapsrv.exe
--
End of file - 9768 bytes
======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{00C6482D-C502-44C8-8409-FCE54AD9C208}]
SnagIt Toolbar Loader - C:Program FilesTechSmithSnagIt 8SnagItBHO.dll [2007-05-01 63048]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:Program FilesAVGAVG8avgssie.dll [2009-05-04 1107224]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:Program FilesJavajre1.6.0_06binssv.dll [2008-03-25 509328]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master - C:PROGRA~1DOWNLO~1dmiehlp.dll [2009-04-16 158208]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll [2009-04-18 259696]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:Program FilesGoogleGoogleToolbarNotifier5.1.1309.3572swg.dll [2009-04-18 668656]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:Program FilesGoogleGoogle ToolbarComponentfastsearch_A8904FB862BD9564.dll [2009-04-18 470512]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - SnagIt - C:Program FilesTechSmithSnagIt 8SnagItIEAddin.dll [2007-05-01 161352]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll [2009-04-18 259696]
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} - DM Bar - C:Program FilesDownload Masterdmbar.dll [2007-11-26 180224]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
"AmlMaple"=C:Program FilesAmlMapleAmlMaple.exe [2008-04-25 91648]
"OODefragTray"=C:WINDOWSsystem32oodtray.exe [2007-05-11 2512392]
"AVG8_TRAY"=C:PROGRA~1AVGAVG8avgtray.exe [2009-05-04 1947928]
"Google Quick Search Box"=C:Program FilesGoogleQuick Search BoxGoogleQuickSearchBox.exe [2009-04-18 68592]
"TrueImageMonitor.exe"=C:Program FilesAcronisTrueImageHomeTrueImageMonitor.exe [2008-12-18 4390712]
"AcronisTimounterMonitor"=C:Program FilesAcronisTrueImageHomeTimounterMonitor.exe [2008-12-18 962160]
"Acronis Scheduler2 Service"=C:Program FilesCommon FilesAcronisSchedule2schedhlp.exe [2008-12-18 165144]
"Samsung Common SM"=C:WINDOWSSamsungComSMMgrssmmgr.exe [2004-05-17 360448]
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
"CTFMON.EXE"=C:WINDOWSsystem32ctfmon.exe [2008-05-20 30208]
"VistaIcon"=C:Program FilesVistaDriveIconVistaDrv.exe [2008-01-02 132096]
"Punto Switcher"=C:Program FilesPunto Switcherps.exe [2007-11-14 201728]
"louderit.exe"=C:Program FileslouderitLouderIt.exe [2008-02-19 41472]
"LClock"=C:Program FilesLClockLClock.exe [2007-12-14 86016]
"Download Master"=C:Program FilesDownload Masterdmaster.exe [2009-04-24 3777536]
"swg"=C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2009-04-18 39408]
"QIP.Online"=C:Program FilesQIP.Onlineqiponline.exe [2009-04-17 3393024]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWSsystem32Ati2evxx.dll [2008-02-26 126976]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyavgrsstarter]
C:WINDOWSsystem32avgrsstx.dll [2009-05-04 11952]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:WINDOWSsystem32wpdshserviceobj.dll [2008-03-02 133632]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalprocexp90.Sys]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkprocexp90.Sys]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
"NoDriveTypeAutoRun"=323
"NoSharedDocuments"=1
"NoSMConfigurePrograms"=1
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
"%windir%Network Diagnosticxpnetdiag.exe"="%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%system32sessmgr.exe"="%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
"%windir%Network Diagnosticxpnetdiag.exe"="%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%system32sessmgr.exe"="%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======List of files/folders created in the last 1 months======
2009-05-05 01:23:07 ----D---- C:Program Filestrend micro
2009-05-05 01:23:06 ----D---- C:rsit
2009-05-04 22:21:50 ----SHD---- C:RECYCLER
2009-05-04 16:19:06 ----D---- C:Documents and SettingsAdminApplication DataQIP
2009-05-04 16:18:43 ----D---- C:Documents and SettingsAdminApplication DataQIP.Online
2009-05-04 16:02:40 ----D---- C:Program FilesQIP.Online
2009-05-04 16:01:35 ----D---- C:Program FilesQIP Infium
2009-05-04 13:04:08 ----D---- C:ComboFix
2009-05-04 13:04:08 ----A---- C:WINDOWSsystem32CF22331.exe
2009-05-04 12:51:53 ----A---- C:ComboFix.txt
2009-05-04 12:45:33 ----A---- C:WINDOWSzip.exe
2009-05-04 12:45:33 ----A---- C:WINDOWSvFind.exe
2009-05-04 12:45:33 ----A---- C:WINDOWSSWREG.exe
2009-05-04 12:45:33 ----A---- C:WINDOWSNIRCMD.exe
2009-05-04 12:45:33 ----A---- C:WINDOWSgrep.exe
2009-05-04 12:45:32 ----A---- C:WINDOWSSWXCACLS.exe
2009-05-04 12:45:32 ----A---- C:WINDOWSSWSC.exe
2009-05-04 12:45:32 ----A---- C:WINDOWSsed.exe
2009-05-04 12:45:24 ----D---- C:WINDOWSERDNT
2009-05-04 12:44:43 ----D---- C:Qoobox
2009-05-04 12:30:46 ----A---- C:WINDOWSntbtlog.txt
2009-05-04 12:24:43 ----D---- C:Program FilesSamsung ML-1610 Series
2009-05-04 12:23:53 ----A---- C:WINDOWSsystem32SUGS1LMK.DLL
2009-05-04 12:23:49 ----A---- C:WINDOWSsystem32SSCoInst.exe
2009-05-04 12:23:49 ----A---- C:WINDOWSsystem32SSCoInst.dll
2009-05-04 12:23:39 ----N---- C:WINDOWSsystem32SSRemove.exe
2009-05-04 12:23:39 ----D---- C:WINDOWSSamsung
2009-04-19 00:27:26 ----A---- C:WINDOWSsystem32AutoPartNt.exe
2009-04-19 00:25:01 ----D---- C:Documents and SettingsAdminApplication DataAcronis
2009-04-19 00:22:00 ----SHD---- C:Config.Msi
2009-04-19 00:18:28 ----D---- C:Documents and SettingsAll UsersApplication DataInstallations
2009-04-19 00:13:28 ----D---- C:Documents and SettingsAll UsersApplication DataAcronis
2009-04-19 00:11:41 ----A---- C:WINDOWSsystem32h323log.txt
2009-04-19 00:09:34 ----A---- C:WINDOWSsystem32ksuser.dll
2009-04-19 00:09:26 ----A---- C:WINDOWSsystem32usbui.dll
2009-04-19 00:07:15 ----SHD---- C:WINDOWSInstaller
2009-04-19 00:07:15 ----A---- C:WINDOWSsystem32PerfStringBackup.INI
2009-04-19 00:07:14 ----D---- C:Program FilesCommon FilesODBC
2009-04-19 00:07:14 ----A---- C:WINDOWSODBCINST.INI
2009-04-19 00:07:10 ----RD---- C:Program Files
2009-04-19 00:07:10 ----D---- C:Program FilesCommon FilesSpeechEngines
2009-04-19 00:07:10 ----D---- C:Program FilesCommon FilesMicrosoft Shared
2009-04-19 00:07:10 ----D---- C:Program FilesCommon Files
2009-04-19 00:07:07 ----RA---- C:WINDOWSsystem32kbdtuq.dll
2009-04-19 00:07:07 ----RA---- C:WINDOWSsystem32kbdtuf.dll
2009-04-19 00:07:07 ----RA---- C:WINDOWSsystem32kbdazel.dll
2009-04-19 00:07:06 ----RA---- C:WINDOWSsystem32kbdhept.dll
2009-04-19 00:07:06 ----RA---- C:WINDOWSsystem32kbdhela3.dll
2009-04-19 00:07:06 ----RA---- C:WINDOWSsystem32kbdhela2.dll
2009-04-19 00:07:06 ----RA---- C:WINDOWSsystem32kbdhe319.dll
2009-04-19 00:07:06 ----RA---- C:WINDOWSsystem32kbdhe220.dll
2009-04-19 00:07:06 ----RA---- C:WINDOWSsystem32kbdhe.dll
2009-04-19 00:07:06 ----RA---- C:WINDOWSsystem32kbdgkl.dll
2009-04-19 00:07:05 ----RA---- C:WINDOWSsystem32kbdlv1.dll
2009-04-19 00:07:05 ----RA---- C:WINDOWSsystem32kbdlv.dll
2009-04-19 00:07:05 ----RA---- C:WINDOWSsystem32kbdlt1.dll
2009-04-19 00:07:05 ----RA---- C:WINDOWSsystem32kbdlt.dll
2009-04-19 00:07:05 ----RA---- C:WINDOWSsystem32kbdest.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdycl.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdsl1.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdsl.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdro.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdpl1.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdpl.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdhu1.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdhu.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdcz2.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdcz1.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdcz.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdcr.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32KBDAL.DLL
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbdycc.dll
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbduzb.dll
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbdur.dll
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbdtat.dll
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbdmon.dll
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbdkyr.dll
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbdkaz.dll
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbdbu.dll
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbdblr.dll
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbdaze.dll
2009-04-19 00:07:00 ----A---- C:WINDOWSsystem32spxcoins.dll
2009-04-19 00:07:00 ----A---- C:WINDOWSsystem32irclass.dll
2009-04-19 00:07:00 ----A---- C:WINDOWSsystem32dgsetup.dll
2009-04-19 00:07:00 ----A---- C:WINDOWSsystem32dgrpsetu.dll
2009-04-19 00:06:59 ----A---- C:WINDOWSsystem32EqnClass.Dll
2009-04-19 00:06:58 ----N---- C:WINDOWSsystem32CONFIG.TMP
2009-04-19 00:06:58 ----A---- C:WINDOWSTASKMAN.EXE
2009-04-19 00:06:58 ----A---- C:WINDOWSsystem32batt.dll
2009-04-19 00:06:57 ----A---- C:WINDOWSNOTEPAD.EXE
2009-04-19 00:06:54 ----A---- C:WINDOWSsystem32storprop.dll
2009-04-19 00:06:46 ----ASH---- C:Documents and SettingsAll UsersApplication Datadesktop.ini
2009-04-19 00:05:26 ----RA---- C:WINDOWSSET8.tmp
2009-04-19 00:05:24 ----RA---- C:WINDOWSSET4.tmp
2009-04-19 00:05:22 ----RA---- C:WINDOWSSET3.tmp
2009-04-19 00:05:18 ----SD---- C:Documents and SettingsAll UsersApplication DataMicrosoft
2009-04-19 00:04:47 ----A---- C:WINDOWSsetuplog.txt
2009-04-19 00:04:43 ----D---- C:Program FilesAcronis
2009-04-19 00:04:40 ----D---- C:Program FilesCommon FilesAcronis
2009-04-19 00:03:17 ----A---- C:WINDOWSsystem32udaprop.dll
2009-04-19 00:03:14 ----A---- C:WINDOWSsystem32cmuda.dll
2009-04-19 00:03:14 ----A---- C:WINDOWSsystem32cmirmdrv.dll
2009-04-19 00:03:14 ----A---- C:WINDOWSsystem32Audio3D.dll
2009-04-19 00:03:14 ----A---- C:WINDOWSsystem32a3d.dll
2009-04-19 00:03:12 ----A---- C:WINDOWSsystem32cmirmdrv.exe
2009-04-19 00:01:29 ----A---- C:WINDOWSsystem32Oemdspif.dll
2009-04-19 00:01:29 ----A---- C:WINDOWSsystem32ativvaxx.dll
2009-04-19 00:01:29 ----A---- C:WINDOWSsystem32ativcoxx.dll
2009-04-19 00:01:29 ----A---- C:WINDOWSsystem32atitvo32.dll
2009-04-19 00:01:29 ----A---- C:WINDOWSsystem32atipdlxx.dll
2009-04-19 00:01:29 ----A---- C:WINDOWSsystem32atiok3x2.dll
2009-04-19 00:01:29 ----A---- C:WINDOWSsystem32atioglxx.dll
2009-04-19 00:01:26 ----A---- C:WINDOWSsystem32atioglx2.dll
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32atikvmag.dll
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32atiiiexx.dll
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32ATIDEMGX.dll
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32ATIDDC.DLL
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32ati3duag.dll
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32Ati2mdxx.exe
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32ati2evxx.exe
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32ati2evxx.dll
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32ati2edxx.dll
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32ati2dvag.dll
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32ati2cqag.dll
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32amdpcom32.dll
2009-04-19 00:00:40 ----D---- C:WINDOWSsystem32CatRoot2
2009-04-19 00:00:40 ----D---- C:WINDOWSsystem32CatRoot
2009-04-18 23:59:11 ----D---- C:Documents and Settings
2009-04-18 23:59:10 ----SHD---- C:System Volume Information
2009-04-18 23:58:11 ----SH---- C:boot.ini
2009-04-18 23:53:03 ----RSHDC---- C:WINDOWSsystem32dllcache
2009-04-18 23:53:03 ----RSD---- C:WINDOWSFonts
2009-04-18 23:53:03 ----RD---- C:WINDOWSWeb
2009-04-18 23:53:03 ----HD---- C:WINDOWSinf
2009-04-18 23:53:03 ----D---- C:WINDOWSWinSxS
2009-04-18 23:53:03 ----D---- C:WINDOWStwain_32
2009-04-18 23:53:03 ----D---- C:WINDOWSTemp
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32wins
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32wbem
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32usmt
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32spool
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32ShellExt
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32Setup
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32ru-ru
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32ru
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32ras
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32oobe
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32npp
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32mui
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32inetsrv
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32IME
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32icsxml
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32ias
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32export
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32drivers
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32dhcp
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32config
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem323com_dmi
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem323076
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem322052
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem321054
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem321049
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem321042
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem321041
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem321037
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem321033
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem321031
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem321028
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem321025
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem
2009-04-18 23:53:03 ----D---- C:WINDOWSsecurity
2009-04-18 23:53:03 ----D---- C:WINDOWSResources
2009-04-18 23:53:03 ----D---- C:WINDOWSrepair
2009-04-18 23:53:03 ----D---- C:WINDOWSProvisioning
2009-04-18 23:53:03 ----D---- C:WINDOWSPeerNet
2009-04-18 23:53:03 ----D---- C:WINDOWSpchealth
2009-04-18 23:53:03 ----D---- C:WINDOWSNetwork Diagnostic
2009-04-18 23:53:03 ----D---- C:WINDOWSmui
2009-04-18 23:53:03 ----D---- C:WINDOWSmsapps
2009-04-18 23:53:03 ----D---- C:WINDOWSmsagent
2009-04-18 23:53:03 ----D---- C:WINDOWSMedia
2009-04-18 23:53:03 ----D---- C:WINDOWSL2Schemas
2009-04-18 23:53:03 ----D---- C:WINDOWSjava
2009-04-18 23:53:03 ----D---- C:WINDOWSime
2009-04-18 23:53:03 ----D---- C:WINDOWSHelp
2009-04-18 23:53:03 ----D---- C:WINDOWSehome
2009-04-18 23:53:03 ----D---- C:WINDOWSDriver Cache
2009-04-18 23:53:03 ----D---- C:WINDOWSDebug
2009-04-18 23:53:03 ----D---- C:WINDOWSCursors
2009-04-18 23:53:03 ----D---- C:WINDOWSConnection Wizard
2009-04-18 23:53:03 ----D---- C:WINDOWSConfig
2009-04-18 23:53:03 ----D---- C:WINDOWSAppPatch
2009-04-18 23:53:03 ----D---- C:WINDOWSaddins
2009-04-18 23:53:03 ----D---- C:WINDOWS
2009-04-18 23:40:07 ----D---- C:Documents and SettingsAdminApplication DataDownload Master
2009-04-18 23:35:25 ----D---- C:Documents and SettingsAdminApplication DataMozilla
2009-04-18 23:21:02 ----D---- C:Downloads
2009-04-18 23:04:32 ----D---- C:Documents and SettingsAdminApplication DataWinRAR
2009-04-18 22:41:34 ----D---- C:Documents and SettingsAdminApplication DataGoogle
2009-04-18 22:41:01 ----D---- C:Program FilesGoogle
2009-04-18 22:41:01 ----D---- C:Documents and SettingsAll UsersApplication DataGoogle
2009-04-18 21:55:21 ----HD---- C:$AVG8.VAULT$
2009-04-18 21:52:36 ----A---- C:WINDOWSsystem32avgrsstx.dll
2009-04-18 21:52:22 ----D---- C:Program FilesAVG
2009-04-18 21:52:22 ----D---- C:Documents and SettingsAll UsersApplication Dataavg8
2009-04-18 21:46:14 ----D---- C:Documents and SettingsAdminApplication DataAdobeUM
2009-04-18 21:45:04 ----D---- C:Program FilesCommon FilesSWF Studio
2009-04-18 21:32:25 ----D---- C:WINDOWSsystem32ReinstallBackups
2009-04-18 21:31:53 ----A---- C:WINDOWSIsUninst.exe
2009-04-18 21:23:39 ----D---- C:Documents and SettingsAdminApplication DataMacromedia
2009-04-18 21:04:39 ----A---- C:WINDOWSsystem32wmpns.dll
2009-04-18 21:04:38 ----D---- C:Documents and SettingsAdminApplication DataIdentities
2009-04-18 21:04:34 ----HD---- C:Program FilesUninstall Information
2009-04-18 21:03:17 ----RD---- C:WINDOWSOemDrv
2009-04-18 21:02:55 ----D---- C:Documents and SettingsAll UsersApplication DataPC Suite
2009-04-18 21:02:54 ----D---- C:Documents and SettingsAdminApplication DataPC Suite
2009-04-18 21:02:52 ----D---- C:Documents and SettingsAdminApplication DataNokia
2009-04-18 21:02:35 ----D---- C:Program FilesCommon FilesPCSuite
2009-04-18 21:02:34 ----D---- C:Program FilesCommon FilesNokia
2009-04-18 21:02:22 ----D---- C:Program FilesDIFX
2009-04-18 21:02:17 ----D---- C:Program FilesPC Connectivity Solution
2009-04-18 21:02:13 ----DC---- C:WINDOWSsystem32DRVSTORE
2009-04-18 21:02:12 ----D---- C:Program FilesNokia
2009-04-18 21:02:12 ----A---- C:WINDOWSsystem32nmwcdcls.dll
2009-04-18 21:01:55 ----D---- C:Program FilesDownload Master
2009-04-18 21:01:54 ----D---- C:Program FilesuTorrent
2009-04-18 21:01:52 ----D---- C:Program FilesLClock
2009-04-18 21:01:45 ----D---- C:Program FilesDAEMON Tools Lite
2009-04-18 21:01:41 ----D---- C:Documents and SettingsAdminApplication DataDAEMON Tools
2009-04-18 21:01:29 ----A---- C:WINDOWSsystem32TwnLib4.dll
2009-04-18 21:01:29 ----A---- C:WINDOWSsystem32BCGPOleAcc.dll
2009-04-18 21:01:29 ----A---- C:WINDOWSsystem32BCGCBPRO860u80.dll
2009-04-18 21:01:28 ----A---- C:WINDOWSsystem32imagXRA7.dll
2009-04-18 21:01:28 ----A---- C:WINDOWSsystem32imagXR7.dll
2009-04-18 21:01:28 ----A---- C:WINDOWSsystem32imagXpr7.dll
2009-04-18 21:01:28 ----A---- C:WINDOWSsystem32imagX7.dll
2009-04-18 21:01:27 ----D---- C:Program FilesCommon FilesNero
2009-04-18 21:01:26 ----D---- C:Program FilesNero
2009-04-18 21:00:38 ----D---- C:Program FilesOO Software
2009-04-18 21:00:33 ----D---- C:Program FilesPower Data Recovery
2009-04-18 21:00:29 ----D---- C:Program FilesTotal Commander
2009-04-18 21:00:26 ----D---- C:Program Files7-Zip
2009-04-18 21:00:25 ----D---- C:Program FilesWinRAR
2009-04-18 21:00:23 ----D---- C:Program FilesLouderIt
2009-04-18 21:00:21 ----D---- C:Documents and SettingsAdminApplication DataWinamp
2009-04-18 21:00:21 ----A---- C:WINDOWSsystem32px.dll
2009-04-18 21:00:16 ----D---- C:Program FilesWinamp
2009-04-18 20:58:26 ----D---- C:Program FilesMSBuild
2009-04-18 20:58:22 ----D---- C:WINDOWSsystem32XPSViewer
2009-04-18 20:58:19 ----D---- C:WINDOWSsystem32en-us
2009-04-18 20:58:19 ----D---- C:Program FilesReference Assemblies
2009-04-18 20:58:02 ----N---- C:WINDOWSsystem32spmsg2.dll
2009-04-18 20:58:02 ----A---- C:WINDOWSsystem32spupdsvc.exe
2009-04-18 20:56:56 ----D---- C:Program FilesEverest
2009-04-18 20:56:47 ----D---- C:Program FilesXnView
2009-04-18 20:56:06 ----D---- C:Program FilesCorel
2009-04-18 20:56:06 ----D---- C:Program FilesCommon FilesCorel
2009-04-18 20:54:24 ----D---- C:Program FilesAdobe
2009-04-18 20:54:02 ----D---- C:Documents and SettingsAll UsersApplication DataAdobe
2009-04-18 20:52:48 ----D---- C:Documents and SettingsAdminApplication DataAdobe
2009-04-18 20:48:52 ----D---- C:Program FilesCommon FilesMacrovision Shared
2009-04-18 20:48:27 ----D---- C:Program FilesCommon FilesAdobe
2009-04-18 20:47:25 ----D---- C:Documents and SettingsAll UsersApplication DataTechSmith
2009-04-18 20:47:24 ----D---- C:Program FilesTechSmith
2009-04-18 20:47:08 ----D---- C:Program FilesCommon FilesWise Installation Wizard
2009-04-18 20:47:02 ----D---- C:Program FilesSMSDV
2009-04-18 20:46:55 ----D---- C:Program FilesMozilla Firefox
2009-04-18 20:46:44 ----D---- C:Program FilesCcleaner
2009-04-18 20:46:42 ----D---- C:Program FilesUninstall Tool
2009-04-18 20:46:41 ----D---- C:Program FilesFlash Player Pro
2009-04-18 20:46:39 ----D---- C:Documents and SettingsAll UsersApplication DataApple Computer
2009-04-18 20:46:34 ----D---- C:Program FilesQuickTime Alternative
2009-04-18 20:46:31 ----D---- C:Program FilesReal Alternative
2009-04-18 20:46:25 ----A---- C:WINDOWSsystem32rmoc3260.dll
2009-04-18 20:46:25 ----A---- C:WINDOWSsystem32pndx5032.dll
2009-04-18 20:46:25 ----A---- C:WINDOWSsystem32pndx5016.dll
2009-04-18 20:46:25 ----A---- C:WINDOWSsystem32pncrt.dll
2009-04-18 20:46:24 ----A---- C:WINDOWSsystem32unrar.dll
2009-04-18 20:46:23 ----A---- C:WINDOWSsystem32yv12vfw.dll
2009-04-18 20:46:22 ----A---- C:WINDOWSsystem32qt-dx331.dll
2009-04-18 20:46:22 ----A---- C:WINDOWSsystem32ff_vfw.dll.manifest
2009-04-18 20:46:22 ----A---- C:WINDOWSsystem32ff_vfw.dll
2009-04-18 20:46:22 ----A---- C:WINDOWSsystem32dpl100.dll
2009-04-18 20:46:22 ----A---- C:WINDOWSsystem32divx.dll
2009-04-18 20:46:21 ----D---- C:Program FilesK-Lite Codec Pack
2009-04-18 20:46:21 ----D---- C:Documents and SettingsAll UsersApplication DataReal
2009-04-18 20:46:21 ----D---- C:Documents and SettingsAdminApplication DataReal
2009-04-18 20:46:15 ----D---- C:Program FilesNo1 DVD Ripper
2009-04-18 20:46:09 ----D---- C:Program FilesVLC
2009-04-18 20:46:02 ----D---- C:Program FilesThe KMPlayer
2009-04-18 20:45:51 ----D---- C:Program FilesMSECache
2009-04-18 20:45:23 ----HD---- C:Program FilesInstallShield Installation Information
2009-04-18 20:45:23 ----D---- C:Program FilesCommon FilesArsenal Shared
2009-04-18 20:45:23 ----D---- C:Program FilesArsenal Company
2009-04-18 20:45:21 ----D---- C:Program FilesCommon FilesInstallShield
2009-04-18 20:40:51 ----A---- C:WINDOWSODBC.INI
2009-04-18 20:38:59 ----D---- C:Program FilesMicrosoft Visual Studio
2009-04-18 20:36:14 ----D---- C:WINDOWSSHELLNEW
2009-04-18 20:35:07 ----D---- C:Program FilesMicrosoft Works
2009-04-18 20:34:58 ----D---- C:Program FilesCommon FilesDESIGNER
2009-04-18 20:34:43 ----D---- C:Program FilesMicrosoft.NET
2009-04-18 20:33:37 ----D---- C:Program FilesMicrosoft Office
2009-04-18 20:33:37 ----D---- C:Documents and SettingsAll UsersApplication DataMicrosoft Help
2009-04-18 20:33:22 ----RHD---- C:MSOCache
2009-04-18 20:32:53 ----D---- C:Program FilesWinDjView
2009-04-18 20:32:52 ----D---- C:Program FilesPunto Switcher
2009-04-18 20:32:46 ----A---- C:WINDOWSWPI_Log.txt
2009-04-18 20:27:30 ----ASH---- C:Documents and SettingsAdminApplication Datadesktop.ini
2009-04-18 20:27:29 ----SD---- C:Documents and SettingsAdminApplication DataMicrosoft
2009-04-18 20:26:24 ----A---- C:WINDOWSSchedLgU.Txt
2009-04-18 20:21:20 ----D---- C:WINDOWSsystem32xircom
2009-04-18 20:21:20 ----D---- C:Program Filesxerox
2009-04-18 20:21:20 ----D---- C:Program Filesmsn gaming zone
2009-04-18 20:21:20 ----D---- C:Program Filesmicrosoft frontpage
2009-04-18 20:20:58 ----D---- C:Program FilesVistaDriveIcon
2009-04-18 20:20:47 ----RA---- C:WINDOWSdel.bat
2009-04-18 20:20:47 ----A---- C:WINDOWSinnounp.exe
2009-04-18 20:20:46 ----A---- C:WINDOWSsystem32oeminfo.ini
2009-04-18 20:20:45 ----RA---- C:WINDOWSsystem32OEMINFO.CMD
2009-04-18 20:20:39 ----SD---- C:WINDOWSsystem32Microsoft
2009-04-18 20:20:39 ----A---- C:WINDOWSsystem32javaws.exe
2009-04-18 20:20:39 ----A---- C:WINDOWSsystem32javaw.exe
2009-04-18 20:20:39 ----A---- C:WINDOWSsystem32java.exe
2009-04-18 20:20:18 ----D---- C:Program FilesJava
2009-04-18 20:20:17 ----D---- C:Program FilesCommon FilesJava
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xinput9_1_0.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xinput1_3.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xinput1_2.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xinput1_1.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32XAudio2_0.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine3_0.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_9.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_8.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_7.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_6.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_5.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_4.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_3.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_2.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_10.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_1.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_0.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32X3DAudio1_3.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32x3daudio1_2.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32x3daudio1_1.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32x3daudio1_0.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32d3dx9_37.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32d3dx9_36.dll
2009-04-18 20:20:02 ----A---- C:WINDOWSsystem32d3dx9_35.dll
2009-04-18 20:20:02 ----A---- C:WINDOWSsystem32d3dx9_34.dll
2009-04-18 20:20:02 ----A---- C:WINDOWSsystem32d3dx9_33.dll
2009-04-18 20:20:02 ----A---- C:WINDOWSsystem32d3dx9_32.dll
2009-04-18 20:20:02 ----A---- C:WINDOWSsystem32d3dx9_31.dll
2009-04-18 20:20:02 ----A---- C:WINDOWSsystem32d3dx9_30.dll
2009-04-18 20:20:02 ----A---- C:WINDOWSsystem32d3dx9_29.dll
2009-04-18 20:20:02 ----A---- C:WINDOWSsystem32d3dx9_28.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx9_27.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx9_26.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx9_25.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx9_24.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx10_37.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx10_36.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx10_35.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx10_34.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx10_33.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx10.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32D3DCompiler_37.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dcompiler_36.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dcompiler_35.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dcompiler_34.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dcompiler_33.dll
2009-04-18 20:18:02 ----RSD---- C:WINDOWSassembly
2009-04-18 20:18:02 ----D---- C:WINDOWSMicrosoft.NET
2009-04-18 20:18:01 ----D---- C:WINDOWSsystem32URTTemp
2009-04-18 20:17:28 ----AD---- C:Program FilesAmlMaple
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32wrap_oal.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32wnaspi32.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32Vbrun300.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32vbrun200.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32vbrun100.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32Vb40032.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32Vb40016.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32ssleay32.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32OpenAL32.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32msvcrt10.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32msvcr71.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32msvcr70.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32msvcp71.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MSVCP70.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32msvci70.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MSSTKPRP.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32msstdfmt.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71u.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71KOR.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71JPN.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71ITA.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71FRA.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71ESP.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71ENU.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71DEU.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71CHT.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71CHS.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70u.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70kor.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70jpn.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70ita.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70fra.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70esp.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70enu.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70deu.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70cht.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70chs.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32libssl32.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32libeay32.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32atl71.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32atl70.dll
2009-04-18 20:17:06 ----A---- C:WINDOWScontrol.ini
2009-04-18 20:17:06 ----A---- C:AUTOEXEC.BAT
2009-04-18 20:16:55 ----A---- C:WINDOWSOEWABLog.txt
2009-04-18 20:16:50 ----A---- C:WINDOWSsystem32mapi32.dll
2009-04-18 20:15:51 ----RAH---- C:WINDOWSsystem32logonui.exe.manifest
2009-04-18 20:15:46 ----RAH---- C:WINDOWSsystem32cdplayer.exe.manifest
2009-04-18 20:15:39 ----HD---- C:Program FilesWindowsUpdate
2009-04-18 20:15:36 ----D---- C:Program FilesOnline Services
2009-04-18 20:15:27 ----A---- C:WINDOWSsystem32atrace.dll
2009-04-18 20:15:26 ----A---- C:WINDOWSsystem32desktop.ini
2009-04-18 20:15:26 ----A---- C:WINDOWSdesktop.ini
2009-04-18 20:15:20 ----A---- C:WINDOWSsystem32acctres.dll
2009-04-18 20:15:19 ----D---- C:Program FilesCommon FilesServices
2009-04-18 20:15:17 ----SD---- C:WINDOWSTasks
2009-04-18 20:15:17 ----D---- C:Program FilesCommon FilesMSSoap
2009-04-18 20:15:17 ----A---- C:WINDOWSsystem32icfgnt5.dll
2009-04-18 20:15:14 ----D---- C:WINDOWSsrchasst
2009-04-18 20:15:13 ----D---- C:WINDOWSsystem32Macromed
2009-04-18 20:15:11 ----A---- C:WINDOWSsystem32wuweb.dll
2009-04-18 20:15:11 ----A---- C:WINDOWSsystem32wups.dll
2009-04-18 20:15:11 ----A---- C:WINDOWSsystem32wucltui.dll
2009-04-18 20:15:11 ----A---- C:WINDOWSsystem32wuauserv.dll
2009-04-18 20:15:11 ----A---- C:WINDOWSsystem32wuaueng1.dll
2009-04-18 20:15:11 ----A---- C:WINDOWSsystem32wuaueng.dll
2009-04-18 20:15:10 ----A---- C:WINDOWSsystem32wuauclt1.exe
2009-04-18 20:15:10 ----A---- C:WINDOWSsystem32wuauclt.exe
2009-04-18 20:15:10 ----A---- C:WINDOWSsystem32wuapi.dll
2009-04-18 20:15:10 ----A---- C:WINDOWSsystem32qmgrprxy.dll
2009-04-18 20:15:10 ----A---- C:WINDOWSsystem32qmgr.dll
2009-04-18 20:15:10 ----A---- C:WINDOWSsystem32bitsprx4.dll
2009-04-18 20:15:10 ----A---- C:WINDOWSsystem32bitsprx3.dll
2009-04-18 20:15:10 ----A---- C:WINDOWSsystem32bitsprx2.dll
2009-04-18 20:15:07 ----D---- C:Program FilesMovie Maker
2009-04-18 20:14:55 ----A---- C:WINDOWSsystem32safrslv.dll
2009-04-18 20:14:55 ----A---- C:WINDOWSsystem32safrdm.dll
2009-04-18 20:14:55 ----A---- C:WINDOWSsystem32safrcdlg.dll
2009-04-18 20:14:55 ----A---- C:WINDOWSsystem32racpldlg.dll
2009-04-18 20:14:52 ----D---- C:WINDOWSsystem32Restore
2009-04-18 20:14:52 ----A---- C:WINDOWSsystem32srsvc.dll
2009-04-18 20:14:52 ----A---- C:WINDOWSsystem32srrstr.dll
2009-04-18 20:14:52 ----A---- C:WINDOWSsystem32srclient.dll
2009-04-18 20:14:52 ----A---- C:WINDOWSsystem32fltMc.exe
2009-04-18 20:14:52 ----A---- C:WINDOWSsystem32fltlib.dll
2009-04-18 20:14:51 ----A---- C:WINDOWSsystem32msoert2.dll
2009-04-18 20:14:51 ----A---- C:WINDOWSsystem32msoeacct.dll
2009-04-18 20:14:50 ----A---- C:WINDOWSsystem32inetres.dll
2009-04-18 20:14:50 ----A---- C:WINDOWSsystem32inetcomm.dll
2009-04-18 20:14:48 ----D---- C:Program FilesOutlook Express
2009-04-18 20:14:48 ----A---- C:WINDOWSsystem32schedsvc.dll
2009-04-18 20:14:48 ----A---- C:WINDOWSsystem32mstinit.exe
2009-04-18 20:14:48 ----A---- C:WINDOWSsystem32mstask.dll
2009-04-18 20:14:47 ----A---- C:WINDOWSsystem32isign32.dll
2009-04-18 20:14:47 ----A---- C:WINDOWSsystem32inetcfg.dll
2009-04-18 20:14:47 ----A---- C:WINDOWSsystem32icwphbk.dll
2009-04-18 20:14:47 ----A---- C:WINDOWSsystem32icwdial.dll
2009-04-18 20:14:43 ----D---- C:Program FilesCommon FilesSystem
2009-04-18 20:13:57 ----D---- C:Program FilesComPlus Applications
2009-04-18 20:13:56 ----A---- C:WINDOWSvbaddin.ini
2009-04-18 20:13:56 ----A---- C:WINDOWSvb.ini
2009-04-18 20:13:51 ----D---- C:WINDOWSRegistration
2009-04-18 20:13:30 ----D---- C:Program FilesWindows Media Player
2009-04-18 20:13:30 ----D---- C:Program FilesWindows Media Connect 2
2009-04-18 20:13:28 ----A---- C:WINDOWSsystem32wiaaut.dll
2009-04-18 20:13:24 ----D---- C:Program FilesPaint.NET
2009-04-18 20:13:21 ----SD---- C:WINDOWSDownloaded Program Files
2009-04-18 20:13:21 ----RD---- C:WINDOWSOffline Web Pages
2009-04-18 20:13:21 ----A---- C:WINDOWSsystem32winfxdocobj.exe
2009-04-18 20:13:20 ----D---- C:WINDOWSwbem
2009-04-18 20:13:20 ----A---- C:WINDOWSsystem32msfeedssync.exe
2009-04-18 20:13:20 ----A---- C:WINDOWSsystem32msfeedsbs.dll
2009-04-18 20:13:18 ----A---- C:WINDOWSsystem32ieframe.dll.mui
2009-04-18 20:13:17 ----D---- C:Program FilesInternet Explorer
2009-04-18 20:13:17 ----A---- C:WINDOWSsystem32advpack.dll.mui
2009-04-18 20:13:16 ----A---- C:WINDOWSsystem32wul_lng.ini
2009-04-18 20:13:16 ----A---- C:WINDOWSsystem32wul.exe
2009-04-18 20:13:16 ----A---- C:WINDOWSsystem32TweakUI.exe
2009-04-18 20:13:15 ----D---- C:WINDOWSSoftwareDistribution
2009-04-18 20:13:15 ----A---- C:WINDOWSsystem32muweb.dll
2009-04-18 20:13:14 ----A---- C:WINDOWSsystem32write.exe
2009-04-18 20:13:14 ----A---- C:WINDOWSsystem32gpprefcl.dll
2009-04-18 20:13:00 ----A---- C:WINDOWSsystem32sndvol32.exe
2009-04-18 20:13:00 ----A---- C:WINDOWSsystem32hticons.dll
2009-04-18 20:13:00 ----A---- C:WINDOWSsystem32avwav.dll
2009-04-18 20:13:00 ----A---- C:WINDOWSsystem32avmeter.dll
2009-04-18 20:12:59 ----A---- C:WINDOWSsystem32winchat.exe
2009-04-18 20:12:59 ----A---- C:WINDOWSsystem32avtapi.dll
2009-04-18 20:12:51 ----A---- C:WINDOWSsystem32getuname.dll
2009-04-18 20:12:51 ----A---- C:WINDOWSsystem32charmap.exe
2009-04-18 20:12:50 ----A---- C:WINDOWSsystem32winmine.exe
2009-04-18 20:12:50 ----A---- C:WINDOWSsystem32sol.exe
2009-04-18 20:12:50 ----A---- C:WINDOWSsystem32mshearts.exe
2009-04-18 20:12:50 ----A---- C:WINDOWSsystem32freecell.exe
2009-04-18 20:12:50 ----A---- C:WINDOWSsystem32calc.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32usrlogon.cmd
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32tsshutdn.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32tslabels.ini
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32tskill.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32tsdiscon.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32tscon.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32shadow.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32rwinsta.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32reset.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32regini.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32rdpcfgex.dll
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32qwinsta.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32qappsrv.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32msg.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32logoff.exe
2009-04-18 20:12:48 ----A---- C:WINDOWSsystem32msdtcprf.ini
2009-04-18 20:12:48 ----A---- C:WINDOWSsystem32cdmodem.dll
2009-04-18 20:12:45 ----A---- C:WINDOWSsystem32wmimgmt.msc
2009-04-18 20:12:44 ----A---- C:WINDOWSsystem32accwiz.exe
2009-04-18 20:12:43 ----D---- C:Program FilesWindows NT
2009-04-18 20:12:43 ----A---- C:WINDOWSsystem32spider.exe
2009-04-18 20:12:43 ----A---- C:WINDOWSsystem32sndrec32.exe
2009-04-18 20:12:43 ----A---- C:WINDOWSsystem32mplay32.exe
2009-04-18 20:12:43 ----A---- C:WINDOWSsystem32hypertrm.dll
2009-04-18 20:12:43 ----A---- C:WINDOWSsystem32clipbrd.exe
2009-04-18 20:12:42 ----A---- C:WINDOWSsystem32tsgqec.dll
2009-04-18 20:12:42 ----A---- C:WINDOWSsystem32tscfgwmi.dll
2009-04-18 20:12:42 ----A---- C:WINDOWSsystem32rhttpaa.dll
2009-04-18 20:12:41 ----A---- C:WINDOWSsystem32remotepg.dll
2009-04-18 20:12:41 ----A---- C:WINDOWSsystem32rdshost.exe
2009-04-18 20:12:41 ----A---- C:WINDOWSsystem32rdsaddin.exe
2009-04-18 20:12:41 ----A---- C:WINDOWSsystem32mstscax.dll
2009-04-18 20:12:41 ----A---- C:WINDOWSsystem32mstsc.exe
2009-04-18 20:12:41 ----A---- C:WINDOWSsystem32aaclient.dll
2009-04-18 20:12:40 ----D---- C:WINDOWSsystem32MsDtc
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32termsrv.dll
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32sessmgr.exe
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32rdpwsx.dll
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32rdpsnd.dll
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32rdpclip.exe
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32rdchost.dll
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32qprocess.exe
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32msdtcuiu.dll
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32icaapi.dll
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32cfgbkend.dll
2009-04-18 20:12:39 ----A---- C:WINDOWSsystem32xolehlp.dll
2009-04-18 20:12:39 ----A---- C:WINDOWSsystem32mtxoci.dll
2009-04-18 20:12:39 ----A---- C:WINDOWSsystem32msdtctm.dll
2009-04-18 20:12:39 ----A---- C:WINDOWSsystem32msdtcprx.dll
2009-04-18 20:12:39 ----A---- C:WINDOWSsystem32msdtclog.dll
2009-04-18 20:12:39 ----A---- C:WINDOWSsystem32msdtc.exe
2009-04-18 20:12:38 ----D---- C:WINDOWSsystem32Com
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32stclient.dll
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32mtxlegih.dll
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32mtxex.dll
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32mtxdm.dll
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32dcomcnfg.exe
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32comrepl.dll
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32comaddin.dll
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32colbact.dll
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32clbcatex.dll
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32catsrvps.dll
2009-04-18 20:12:37 ----A---- C:WINDOWSsystem32comuid.dll
2009-04-18 20:12:37 ----A---- C:WINDOWSsystem32comsvcs.dll
2009-04-18 20:12:37 ----A---- C:WINDOWSsystem32comsnap.dll
2009-04-18 20:12:37 ----A---- C:WINDOWSsystem32clbcatq.dll
2009-04-18 20:12:37 ----A---- C:WINDOWSsystem32catsrvut.dll
2009-04-18 20:12:37 ----A---- C:WINDOWSsystem32catsrv.dll
2009-04-18 20:12:32 ----A---- C:WINDOWSsystem32servdeps.dll
2009-04-18 20:12:32 ----A---- C:WINDOWSsystem32mmfutil.dll
2009-04-18 20:12:32 ----A---- C:WINDOWSsystem32licwmi.dll
2009-04-18 20:12:32 ----A---- C:WINDOWSsystem32cmprops.dll
======List of files/folders modified in the last 1 months======
2009-05-04 12:49:34 ----A---- C:WINDOWSsystem.ini
2009-04-18 20:38:08 ----A---- C:WINDOWSwin.ini
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AmdK7;Драйвер AMD K7 процессора; C:WINDOWSsystem32DRIVERSamdk7.sys [2008-05-20 41984]
R1 AvgLdx86;AVG AVI Loader Driver x86; C:WINDOWSSystem32Driversavgldx86.sys [2009-05-04 325896]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:WINDOWSSystem32Driversavgmfx86.sys [2009-05-04 27784]
R1 AvgTdiX;AVG8 Network Redirector; C:WINDOWSSystem32Driversavgtdix.sys [2009-05-04 108552]
R2 DgiVecp;Team MFP Comm Driver; C:WINDOWSSystem32DriversDgiVecp.sys [2004-05-17 41984]
R2 tifsfilter;Acronis True Image FS Filter; C:WINDOWSsystem32DRIVERStifsfilt.sys [2009-04-19 44704]
R3 ati2mtag;ati2mtag; C:WINDOWSsystem32DRIVERSati2mtag.sys [2008-02-26 2863616]
R3 cmuda;C-Media WDM Audio Interface; C:WINDOWSsystem32driverscmuda.sys [2006-06-26 1372992]
R3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet адаптер, драйвер для NT; C:WINDOWSsystem32DRIVERSfetnd5.sys [2001-08-18 27165]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-05-20 30336]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-05-20 25856]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-15 20608]
S3 catchme;catchme; ??C:DOCUME~1AdminLOCALS~1Tempcatchme.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:WINDOWSsystem32DRIVERSpccsmcfd.sys [2008-08-26 18816]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-05-20 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2008-03-02 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2008-03-02 82944]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AcrSch2Svc;Acronis Scheduler2 Service; C:Program FilesCommon FilesAcronisSchedule2schedul2.exe [2008-12-18 554264]
R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSsystem32Ati2evxx.exe [2008-02-26 520192]
R2 avg8wd;AVG8 WatchDog; C:PROGRA~1AVGAVG8avgwdsvc.exe [2009-05-04 298776]
R2 O&O Defrag;O&O Defrag; C:WINDOWSsystem32oodag.exe [2007-05-11 1050120]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2007-10-24 70144]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe [2009-04-18 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2007-10-09 36864]
S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-04-18 182768]
S3 idsvc;Windows CardSpace; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2007-10-11 864256]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:Program FilesPC Connectivity SolutionServiceLayer.exe [2008-11-11 620544]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media Playerwmpnetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2007-10-11 122880]
EOF
6 мая, 2009 в 3:52 пп #23734Здравствуйте, добро пожаловать на Spyware-ru форум.
Возможно диск заражён autorun.inf трояном.
Прочитайте эту инструкцию Flash_Disinfector ещё одно оружие против autorun.inf троянов.* Отключите ваш антивирус.
* Скачайте и запустите Flash_Disinfector.
* По требованию программы вставьте ваш флэш диск или подключите другие внешние устройства хранения информации.Примечание: запускайте программу столько раз, сколько нужно чтобы очистить все ваши подключаемые диски.
В ваш ответ вставьте свежий RSIT лог (только log.txt).
7 мая, 2009 в 11:25 дп #23739К сожалению ничего не помогло, все делал по инструкции несколько раз. Вот файл:
log.txtLogfile of random's system information tool 1.06 (written by random/random)
Run by Admin at 2009-05-07 15:22:22
Microsoft Windows XP Professional Service Pack 3
System drive C: has 51 GB (81%) free of 64 GB
Total RAM: 1535 MB (63% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:22:36, on 07.05.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20772)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesCommon FilesAcronisSchedule2schedul2.exe
C:PROGRA~1AVGAVG8avgwdsvc.exe
C:WINDOWSsystem32oodag.exe
C:Program FilesAmlMapleAmlMaple.exe
C:PROGRA~1AVGAVG8avgam.exe
C:PROGRA~1AVGAVG8avgrsx.exe
C:PROGRA~1AVGAVG8avgnsx.exe
C:WINDOWSsystem32oodtray.exe
C:PROGRA~1AVGAVG8avgtray.exe
C:Program FilesGoogleQuick Search BoxGoogleQuickSearchBox.exe
C:Program FilesAcronisTrueImageHomeTrueImageMonitor.exe
C:Program FilesAcronisTrueImageHomeTimounterMonitor.exe
C:Program FilesCommon FilesAcronisSchedule2schedhlp.exe
C:WINDOWSSamsungComSMMgrssmmgr.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesVistaDriveIconVistaDrv.exe
C:Program FilesPunto Switcherps.exe
C:Program FileslouderitLouderIt.exe
C:Program FilesLClockLClock.exe
C:Program FilesDownload Masterdmaster.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:Program FilesQIP.Onlineqiponline.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Program FilesTotal CommanderTOTALCMD.EXE
C:Documents and SettingsAdminМои документыМои программыУдаление вирусовRSIT.exe
C:Program Filestrend microAdmin.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://start.qip.ru/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://www.kornet.ru/
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:Program FilesTechSmithSnagIt 8SnagItBHO.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:Program FilesAVGAVG8avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_06binssv.dll
O2 - BHO: IE 4.x-6.x BHO for Download Master - {9961627E-4059-41B4-8E0E-A7D6B3854ADF} - C:PROGRA~1DOWNLO~1dmiehlp.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier5.1.1309.3572swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:Program FilesGoogleGoogle ToolbarComponentfastsearch_A8904FB862BD9564.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:Program FilesTechSmithSnagIt 8SnagItIEAddin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
O3 - Toolbar: DM Bar - {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} - C:Program FilesDownload Masterdmbar.dll
O4 - HKLM..Run: [AmlMaple] C:Program FilesAmlMapleAmlMaple.exe
O4 - HKLM..Run: [OODefragTray] C:WINDOWSsystem32oodtray.exe
O4 - HKLM..Run: [AVG8_TRAY] C:PROGRA~1AVGAVG8avgtray.exe
O4 - HKLM..Run: [Google Quick Search Box] "C:Program FilesGoogleQuick Search BoxGoogleQuickSearchBox.exe" /autorun
O4 - HKLM..Run: [TrueImageMonitor.exe] C:Program FilesAcronisTrueImageHomeTrueImageMonitor.exe
O4 - HKLM..Run: [AcronisTimounterMonitor] C:Program FilesAcronisTrueImageHomeTimounterMonitor.exe
O4 - HKLM..Run: [Acronis Scheduler2 Service] "C:Program FilesCommon FilesAcronisSchedule2schedhlp.exe"
O4 - HKLM..Run: [Samsung Common SM] "C:WINDOWSSamsungComSMMgrssmmgr.exe" /autorun
O4 - HKLM..Run: [UnlockerAssistant] "C:Program FilesUnlockerUnlockerAssistant.exe"
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe
O4 - HKCU..Run: [Punto Switcher] C:Program FilesPunto Switcherps.exe
O4 - HKCU..Run: [louderit.exe] C:Program FileslouderitLouderIt.exe
O4 - HKCU..Run: [LClock] C:Program FilesLClockLClock.exe
O4 - HKCU..Run: [Download Master] C:Program FilesDownload Masterdmaster.exe -autorun
O4 - HKCU..Run: [swg] C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
O4 - HKCU..Run: [QIP.Online] C:Program FilesQIP.Onlineqiponline.exe auto_start
O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM')
O4 - HKUSS-1-5-18..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe (User 'SYSTEM')
O4 - HKUSS-1-5-18..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')
O4 - HKUS.DEFAULT..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User 'Default user')
O8 - Extra context menu item: &Перевести - C:Program FilesArsenal CompanySOCRAT InternetHTMLWSocrat.js
O8 - Extra context menu item: &Экспорт в Microsoft Excel - res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O8 - Extra context menu item: Закачать ВСЕ при помощи Download Master - C:Program FilesDownload Masterdmieall.htm
O8 - Extra context menu item: Закачать при помощи Download Master - C:Program FilesDownload Masterdmie.htm
O8 - Extra context menu item: Передать на удаленную закачку DM - C:Program FilesDownload Masterremdown.htm
O9 - Extra button: (no name) - DctMapping - (no file)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_06binssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_06binssv.dll
O9 - Extra button: СОКРАТ Интернет 3.0 - {17FA5CD6-5737-45c2-B194-74C8A4A7F7E7} - C:Program FilesArsenal CompanySOCRAT InternetSocratInternet.dll
O9 - Extra button: Настройки СОКРАТ Интернет 3.0 - {71F65890-5ED6-11d4-9665-00E02962D81A} - C:Program FilesArsenal CompanySOCRAT InternetSocratInternetT.dll
O9 - Extra button: Download Master - {8DAE90AD-4583-4977-9DD4-4360F7A45C74} - C:Program FilesDownload Masterdmaster.exe
O9 - Extra 'Tools' menuitem: &Download Master - {8DAE90AD-4583-4977-9DD4-4360F7A45C74} - C:Program FilesDownload Masterdmaster.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 - Extra button: Перевести страницу - {DFDC8970-FD66-4385-B8C0-835A4AA1DA00} - C:Program FilesArsenal CompanySOCRAT InternetSocratInternet.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:Program FilesAVGAVG8avgpp.dll
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:Program FilesGoogleGoogle ToolbarComponentfastsearch_A8904FB862BD9564.dll
O20 - Winlogon Notify: avgrsstarter - C:WINDOWSSYSTEM32avgrsstx.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:Program FilesCommon FilesAcronisSchedule2schedul2.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:WINDOWSsystem32Ati2evxx.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:PROGRA~1AVGAVG8avgwdsvc.exe
O23 - Service: Журнал событий (Eventlog) - Корпорация Майкрософт - C:WINDOWSsystem32services.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: Служба COM записи компакт-дисков IMAPI (ImapiService) - Корпорация Майкрософт - C:WINDOWSsystem32imapi.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:WINDOWSsystem32oodag.exe
O23 - Service: Plug and Play (PlugPlay) - Корпорация Майкрософт - C:WINDOWSsystem32services.exe
O23 - Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) - Корпорация Майкрософт - C:WINDOWSsystem32sessmgr.exe
O23 - Service: Смарт-карты (SCardSvr) - Корпорация Майкрософт - C:WINDOWSSystem32SCardSvr.exe
O23 - Service: ServiceLayer - Nokia. - C:Program FilesPC Connectivity SolutionServiceLayer.exe
O23 - Service: Журналы и оповещения производительности (SysmonLog) - Корпорация Майкрософт - C:WINDOWSsystem32smlogsvc.exe
O23 - Service: Теневое копирование тома (VSS) - Корпорация Майкрософт - C:WINDOWSSystem32vssvc.exe
O23 - Service: Адаптер производительности WMI (WmiApSrv) - Корпорация Майкрософт - C:WINDOWSsystem32wbemwmiapsrv.exe
--
End of file - 10000 bytes
======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{00C6482D-C502-44C8-8409-FCE54AD9C208}]
SnagIt Toolbar Loader - C:Program FilesTechSmithSnagIt 8SnagItBHO.dll [2007-05-01 63048]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:Program FilesAVGAVG8avgssie.dll [2009-05-04 1107224]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:Program FilesJavajre1.6.0_06binssv.dll [2008-03-25 509328]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master - C:PROGRA~1DOWNLO~1dmiehlp.dll [2009-04-16 158208]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll [2009-04-18 259696]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:Program FilesGoogleGoogleToolbarNotifier5.1.1309.3572swg.dll [2009-04-18 668656]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:Program FilesGoogleGoogle ToolbarComponentfastsearch_A8904FB862BD9564.dll [2009-04-18 470512]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - SnagIt - C:Program FilesTechSmithSnagIt 8SnagItIEAddin.dll [2007-05-01 161352]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll [2009-04-18 259696]
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} - DM Bar - C:Program FilesDownload Masterdmbar.dll [2007-11-26 180224]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
"AmlMaple"=C:Program FilesAmlMapleAmlMaple.exe [2008-04-25 91648]
"OODefragTray"=C:WINDOWSsystem32oodtray.exe [2007-05-11 2512392]
"AVG8_TRAY"=C:PROGRA~1AVGAVG8avgtray.exe [2009-05-04 1947928]
"Google Quick Search Box"=C:Program FilesGoogleQuick Search BoxGoogleQuickSearchBox.exe [2009-04-18 68592]
"TrueImageMonitor.exe"=C:Program FilesAcronisTrueImageHomeTrueImageMonitor.exe [2008-12-18 4390712]
"AcronisTimounterMonitor"=C:Program FilesAcronisTrueImageHomeTimounterMonitor.exe [2008-12-18 962160]
"Acronis Scheduler2 Service"=C:Program FilesCommon FilesAcronisSchedule2schedhlp.exe [2008-12-18 165144]
"Samsung Common SM"=C:WINDOWSSamsungComSMMgrssmmgr.exe [2004-05-17 360448]
"UnlockerAssistant"=C:Program FilesUnlockerUnlockerAssistant.exe []
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
"CTFMON.EXE"=C:WINDOWSsystem32ctfmon.exe [2008-05-20 30208]
"VistaIcon"=C:Program FilesVistaDriveIconVistaDrv.exe [2008-01-02 132096]
"Punto Switcher"=C:Program FilesPunto Switcherps.exe [2007-11-14 201728]
"louderit.exe"=C:Program FileslouderitLouderIt.exe [2008-02-19 41472]
"LClock"=C:Program FilesLClockLClock.exe [2007-12-14 86016]
"Download Master"=C:Program FilesDownload Masterdmaster.exe [2009-04-24 3777536]
"swg"=C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2009-04-18 39408]
"QIP.Online"=C:Program FilesQIP.Onlineqiponline.exe [2009-04-17 3393024]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWSsystem32Ati2evxx.dll [2008-02-26 126976]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyavgrsstarter]
C:WINDOWSsystem32avgrsstx.dll [2009-05-04 11952]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:WINDOWSsystem32wpdshserviceobj.dll [2008-03-02 133632]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalprocexp90.Sys]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkprocexp90.Sys]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
"NoDriveTypeAutoRun"=36
"NoSharedDocuments"=1
"NoSMConfigurePrograms"=1
"NoDriveAutoRun"=FFFFFFFF
"NoDrives"=0
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
"%windir%Network Diagnosticxpnetdiag.exe"="%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%system32sessmgr.exe"="%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
"%windir%Network Diagnosticxpnetdiag.exe"="%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%system32sessmgr.exe"="%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======List of files/folders created in the last 1 months======
2009-05-07 14:05:34 ----RASHD---- C:autorun.inf
2009-05-07 13:29:35 ----D---- C:Восстановление
2009-05-07 12:55:13 ----D---- C:Documents and SettingsAdminApplication DataDesktopicon
2009-05-07 12:55:11 ----D---- C:Program FilesUnlocker
2009-05-05 01:23:07 ----D---- C:Program Filestrend micro
2009-05-05 01:23:06 ----D---- C:rsit
2009-05-04 22:21:50 ----SHD---- C:RECYCLER
2009-05-04 16:19:06 ----D---- C:Documents and SettingsAdminApplication DataQIP
2009-05-04 16:18:43 ----D---- C:Documents and SettingsAdminApplication DataQIP.Online
2009-05-04 16:02:40 ----D---- C:Program FilesQIP.Online
2009-05-04 16:01:35 ----D---- C:Program FilesQIP Infium
2009-05-04 13:04:08 ----D---- C:ComboFix
2009-05-04 13:04:08 ----A---- C:WINDOWSsystem32CF22331.exe
2009-05-04 12:51:53 ----A---- C:ComboFix.txt
2009-05-04 12:45:33 ----A---- C:WINDOWSzip.exe
2009-05-04 12:45:33 ----A---- C:WINDOWSvFind.exe
2009-05-04 12:45:33 ----A---- C:WINDOWSSWREG.exe
2009-05-04 12:45:33 ----A---- C:WINDOWSNIRCMD.exe
2009-05-04 12:45:33 ----A---- C:WINDOWSgrep.exe
2009-05-04 12:45:32 ----A---- C:WINDOWSSWXCACLS.exe
2009-05-04 12:45:32 ----A---- C:WINDOWSSWSC.exe
2009-05-04 12:45:32 ----A---- C:WINDOWSsed.exe
2009-05-04 12:45:24 ----D---- C:WINDOWSERDNT
2009-05-04 12:44:43 ----D---- C:Qoobox
2009-05-04 12:30:46 ----A---- C:WINDOWSntbtlog.txt
2009-05-04 12:24:43 ----D---- C:Program FilesSamsung ML-1610 Series
2009-05-04 12:23:53 ----A---- C:WINDOWSsystem32SUGS1LMK.DLL
2009-05-04 12:23:49 ----A---- C:WINDOWSsystem32SSCoInst.exe
2009-05-04 12:23:49 ----A---- C:WINDOWSsystem32SSCoInst.dll
2009-05-04 12:23:39 ----N---- C:WINDOWSsystem32SSRemove.exe
2009-05-04 12:23:39 ----D---- C:WINDOWSSamsung
2009-04-19 00:27:26 ----A---- C:WINDOWSsystem32AutoPartNt.exe
2009-04-19 00:25:01 ----D---- C:Documents and SettingsAdminApplication DataAcronis
2009-04-19 00:22:00 ----SHD---- C:Config.Msi
2009-04-19 00:18:28 ----D---- C:Documents and SettingsAll UsersApplication DataInstallations
2009-04-19 00:13:28 ----D---- C:Documents and SettingsAll UsersApplication DataAcronis
2009-04-19 00:11:41 ----A---- C:WINDOWSsystem32h323log.txt
2009-04-19 00:09:34 ----A---- C:WINDOWSsystem32ksuser.dll
2009-04-19 00:09:26 ----A---- C:WINDOWSsystem32usbui.dll
2009-04-19 00:07:15 ----SHD---- C:WINDOWSInstaller
2009-04-19 00:07:15 ----A---- C:WINDOWSsystem32PerfStringBackup.INI
2009-04-19 00:07:14 ----D---- C:Program FilesCommon FilesODBC
2009-04-19 00:07:14 ----A---- C:WINDOWSODBCINST.INI
2009-04-19 00:07:10 ----RD---- C:Program Files
2009-04-19 00:07:10 ----D---- C:Program FilesCommon FilesSpeechEngines
2009-04-19 00:07:10 ----D---- C:Program FilesCommon FilesMicrosoft Shared
2009-04-19 00:07:10 ----D---- C:Program FilesCommon Files
2009-04-19 00:07:07 ----RA---- C:WINDOWSsystem32kbdtuq.dll
2009-04-19 00:07:07 ----RA---- C:WINDOWSsystem32kbdtuf.dll
2009-04-19 00:07:07 ----RA---- C:WINDOWSsystem32kbdazel.dll
2009-04-19 00:07:06 ----RA---- C:WINDOWSsystem32kbdhept.dll
2009-04-19 00:07:06 ----RA---- C:WINDOWSsystem32kbdhela3.dll
2009-04-19 00:07:06 ----RA---- C:WINDOWSsystem32kbdhela2.dll
2009-04-19 00:07:06 ----RA---- C:WINDOWSsystem32kbdhe319.dll
2009-04-19 00:07:06 ----RA---- C:WINDOWSsystem32kbdhe220.dll
2009-04-19 00:07:06 ----RA---- C:WINDOWSsystem32kbdhe.dll
2009-04-19 00:07:06 ----RA---- C:WINDOWSsystem32kbdgkl.dll
2009-04-19 00:07:05 ----RA---- C:WINDOWSsystem32kbdlv1.dll
2009-04-19 00:07:05 ----RA---- C:WINDOWSsystem32kbdlv.dll
2009-04-19 00:07:05 ----RA---- C:WINDOWSsystem32kbdlt1.dll
2009-04-19 00:07:05 ----RA---- C:WINDOWSsystem32kbdlt.dll
2009-04-19 00:07:05 ----RA---- C:WINDOWSsystem32kbdest.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdycl.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdsl1.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdsl.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdro.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdpl1.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdpl.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdhu1.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdhu.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdcz2.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdcz1.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdcz.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32kbdcr.dll
2009-04-19 00:07:04 ----RA---- C:WINDOWSsystem32KBDAL.DLL
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbdycc.dll
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbduzb.dll
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbdur.dll
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbdtat.dll
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbdmon.dll
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbdkyr.dll
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbdkaz.dll
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbdbu.dll
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbdblr.dll
2009-04-19 00:07:01 ----A---- C:WINDOWSsystem32kbdaze.dll
2009-04-19 00:07:00 ----A---- C:WINDOWSsystem32spxcoins.dll
2009-04-19 00:07:00 ----A---- C:WINDOWSsystem32irclass.dll
2009-04-19 00:07:00 ----A---- C:WINDOWSsystem32dgsetup.dll
2009-04-19 00:07:00 ----A---- C:WINDOWSsystem32dgrpsetu.dll
2009-04-19 00:06:59 ----A---- C:WINDOWSsystem32EqnClass.Dll
2009-04-19 00:06:58 ----N---- C:WINDOWSsystem32CONFIG.TMP
2009-04-19 00:06:58 ----A---- C:WINDOWSTASKMAN.EXE
2009-04-19 00:06:58 ----A---- C:WINDOWSsystem32batt.dll
2009-04-19 00:06:57 ----A---- C:WINDOWSNOTEPAD.EXE
2009-04-19 00:06:54 ----A---- C:WINDOWSsystem32storprop.dll
2009-04-19 00:06:46 ----ASH---- C:Documents and SettingsAll UsersApplication Datadesktop.ini
2009-04-19 00:05:26 ----RA---- C:WINDOWSSET8.tmp
2009-04-19 00:05:24 ----RA---- C:WINDOWSSET4.tmp
2009-04-19 00:05:22 ----RA---- C:WINDOWSSET3.tmp
2009-04-19 00:05:18 ----SD---- C:Documents and SettingsAll UsersApplication DataMicrosoft
2009-04-19 00:04:47 ----A---- C:WINDOWSsetuplog.txt
2009-04-19 00:04:43 ----D---- C:Program FilesAcronis
2009-04-19 00:04:40 ----D---- C:Program FilesCommon FilesAcronis
2009-04-19 00:03:17 ----A---- C:WINDOWSsystem32udaprop.dll
2009-04-19 00:03:14 ----A---- C:WINDOWSsystem32cmuda.dll
2009-04-19 00:03:14 ----A---- C:WINDOWSsystem32cmirmdrv.dll
2009-04-19 00:03:14 ----A---- C:WINDOWSsystem32Audio3D.dll
2009-04-19 00:03:14 ----A---- C:WINDOWSsystem32a3d.dll
2009-04-19 00:03:12 ----A---- C:WINDOWSsystem32cmirmdrv.exe
2009-04-19 00:01:29 ----A---- C:WINDOWSsystem32Oemdspif.dll
2009-04-19 00:01:29 ----A---- C:WINDOWSsystem32ativvaxx.dll
2009-04-19 00:01:29 ----A---- C:WINDOWSsystem32ativcoxx.dll
2009-04-19 00:01:29 ----A---- C:WINDOWSsystem32atitvo32.dll
2009-04-19 00:01:29 ----A---- C:WINDOWSsystem32atipdlxx.dll
2009-04-19 00:01:29 ----A---- C:WINDOWSsystem32atiok3x2.dll
2009-04-19 00:01:29 ----A---- C:WINDOWSsystem32atioglxx.dll
2009-04-19 00:01:26 ----A---- C:WINDOWSsystem32atioglx2.dll
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32atikvmag.dll
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32atiiiexx.dll
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32ATIDEMGX.dll
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32ATIDDC.DLL
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32ati3duag.dll
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32Ati2mdxx.exe
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32ati2evxx.exe
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32ati2evxx.dll
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32ati2edxx.dll
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32ati2dvag.dll
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32ati2cqag.dll
2009-04-19 00:01:25 ----A---- C:WINDOWSsystem32amdpcom32.dll
2009-04-19 00:00:40 ----D---- C:WINDOWSsystem32CatRoot2
2009-04-19 00:00:40 ----D---- C:WINDOWSsystem32CatRoot
2009-04-18 23:59:11 ----D---- C:Documents and Settings
2009-04-18 23:59:10 ----SHD---- C:System Volume Information
2009-04-18 23:58:11 ----SH---- C:boot.ini
2009-04-18 23:53:03 ----RSHDC---- C:WINDOWSsystem32dllcache
2009-04-18 23:53:03 ----RSD---- C:WINDOWSFonts
2009-04-18 23:53:03 ----RD---- C:WINDOWSWeb
2009-04-18 23:53:03 ----HD---- C:WINDOWSinf
2009-04-18 23:53:03 ----D---- C:WINDOWSWinSxS
2009-04-18 23:53:03 ----D---- C:WINDOWStwain_32
2009-04-18 23:53:03 ----D---- C:WINDOWSTemp
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32wins
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32wbem
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32usmt
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32spool
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32ShellExt
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32Setup
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32ru-ru
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32ru
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32ras
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32oobe
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32npp
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32mui
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32inetsrv
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32IME
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32icsxml
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32ias
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32export
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32drivers
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32dhcp
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32config
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem323com_dmi
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem323076
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem322052
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem321054
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem321049
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem321042
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem321041
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem321037
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem321033
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem321031
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem321028
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem321025
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem32
2009-04-18 23:53:03 ----D---- C:WINDOWSsystem
2009-04-18 23:53:03 ----D---- C:WINDOWSsecurity
2009-04-18 23:53:03 ----D---- C:WINDOWSResources
2009-04-18 23:53:03 ----D---- C:WINDOWSrepair
2009-04-18 23:53:03 ----D---- C:WINDOWSProvisioning
2009-04-18 23:53:03 ----D---- C:WINDOWSPeerNet
2009-04-18 23:53:03 ----D---- C:WINDOWSpchealth
2009-04-18 23:53:03 ----D---- C:WINDOWSNetwork Diagnostic
2009-04-18 23:53:03 ----D---- C:WINDOWSmui
2009-04-18 23:53:03 ----D---- C:WINDOWSmsapps
2009-04-18 23:53:03 ----D---- C:WINDOWSmsagent
2009-04-18 23:53:03 ----D---- C:WINDOWSMedia
2009-04-18 23:53:03 ----D---- C:WINDOWSL2Schemas
2009-04-18 23:53:03 ----D---- C:WINDOWSjava
2009-04-18 23:53:03 ----D---- C:WINDOWSime
2009-04-18 23:53:03 ----D---- C:WINDOWSHelp
2009-04-18 23:53:03 ----D---- C:WINDOWSehome
2009-04-18 23:53:03 ----D---- C:WINDOWSDriver Cache
2009-04-18 23:53:03 ----D---- C:WINDOWSDebug
2009-04-18 23:53:03 ----D---- C:WINDOWSCursors
2009-04-18 23:53:03 ----D---- C:WINDOWSConnection Wizard
2009-04-18 23:53:03 ----D---- C:WINDOWSConfig
2009-04-18 23:53:03 ----D---- C:WINDOWSAppPatch
2009-04-18 23:53:03 ----D---- C:WINDOWSaddins
2009-04-18 23:53:03 ----D---- C:WINDOWS
2009-04-18 23:40:07 ----D---- C:Documents and SettingsAdminApplication DataDownload Master
2009-04-18 23:35:25 ----D---- C:Documents and SettingsAdminApplication DataMozilla
2009-04-18 23:21:02 ----D---- C:Downloads
2009-04-18 23:04:32 ----D---- C:Documents and SettingsAdminApplication DataWinRAR
2009-04-18 22:41:34 ----D---- C:Documents and SettingsAdminApplication DataGoogle
2009-04-18 22:41:01 ----D---- C:Program FilesGoogle
2009-04-18 22:41:01 ----D---- C:Documents and SettingsAll UsersApplication DataGoogle
2009-04-18 21:55:21 ----HD---- C:$AVG8.VAULT$
2009-04-18 21:52:36 ----A---- C:WINDOWSsystem32avgrsstx.dll
2009-04-18 21:52:22 ----D---- C:Program FilesAVG
2009-04-18 21:52:22 ----D---- C:Documents and SettingsAll UsersApplication Dataavg8
2009-04-18 21:46:14 ----D---- C:Documents and SettingsAdminApplication DataAdobeUM
2009-04-18 21:45:04 ----D---- C:Program FilesCommon FilesSWF Studio
2009-04-18 21:32:25 ----D---- C:WINDOWSsystem32ReinstallBackups
2009-04-18 21:31:53 ----A---- C:WINDOWSIsUninst.exe
2009-04-18 21:23:39 ----D---- C:Documents and SettingsAdminApplication DataMacromedia
2009-04-18 21:04:39 ----A---- C:WINDOWSsystem32wmpns.dll
2009-04-18 21:04:38 ----D---- C:Documents and SettingsAdminApplication DataIdentities
2009-04-18 21:04:34 ----HD---- C:Program FilesUninstall Information
2009-04-18 21:03:17 ----RD---- C:WINDOWSOemDrv
2009-04-18 21:02:55 ----D---- C:Documents and SettingsAll UsersApplication DataPC Suite
2009-04-18 21:02:54 ----D---- C:Documents and SettingsAdminApplication DataPC Suite
2009-04-18 21:02:52 ----D---- C:Documents and SettingsAdminApplication DataNokia
2009-04-18 21:02:35 ----D---- C:Program FilesCommon FilesPCSuite
2009-04-18 21:02:34 ----D---- C:Program FilesCommon FilesNokia
2009-04-18 21:02:22 ----D---- C:Program FilesDIFX
2009-04-18 21:02:17 ----D---- C:Program FilesPC Connectivity Solution
2009-04-18 21:02:13 ----DC---- C:WINDOWSsystem32DRVSTORE
2009-04-18 21:02:12 ----D---- C:Program FilesNokia
2009-04-18 21:02:12 ----A---- C:WINDOWSsystem32nmwcdcls.dll
2009-04-18 21:01:55 ----D---- C:Program FilesDownload Master
2009-04-18 21:01:54 ----D---- C:Program FilesuTorrent
2009-04-18 21:01:52 ----D---- C:Program FilesLClock
2009-04-18 21:01:45 ----D---- C:Program FilesDAEMON Tools Lite
2009-04-18 21:01:41 ----D---- C:Documents and SettingsAdminApplication DataDAEMON Tools
2009-04-18 21:01:29 ----A---- C:WINDOWSsystem32TwnLib4.dll
2009-04-18 21:01:29 ----A---- C:WINDOWSsystem32BCGPOleAcc.dll
2009-04-18 21:01:29 ----A---- C:WINDOWSsystem32BCGCBPRO860u80.dll
2009-04-18 21:01:28 ----A---- C:WINDOWSsystem32imagXRA7.dll
2009-04-18 21:01:28 ----A---- C:WINDOWSsystem32imagXR7.dll
2009-04-18 21:01:28 ----A---- C:WINDOWSsystem32imagXpr7.dll
2009-04-18 21:01:28 ----A---- C:WINDOWSsystem32imagX7.dll
2009-04-18 21:01:27 ----D---- C:Program FilesCommon FilesNero
2009-04-18 21:01:26 ----D---- C:Program FilesNero
2009-04-18 21:00:38 ----D---- C:Program FilesOO Software
2009-04-18 21:00:33 ----D---- C:Program FilesPower Data Recovery
2009-04-18 21:00:29 ----D---- C:Program FilesTotal Commander
2009-04-18 21:00:26 ----D---- C:Program Files7-Zip
2009-04-18 21:00:25 ----D---- C:Program FilesWinRAR
2009-04-18 21:00:23 ----D---- C:Program FilesLouderIt
2009-04-18 21:00:21 ----D---- C:Documents and SettingsAdminApplication DataWinamp
2009-04-18 21:00:21 ----A---- C:WINDOWSsystem32px.dll
2009-04-18 21:00:16 ----D---- C:Program FilesWinamp
2009-04-18 20:58:26 ----D---- C:Program FilesMSBuild
2009-04-18 20:58:22 ----D---- C:WINDOWSsystem32XPSViewer
2009-04-18 20:58:19 ----D---- C:WINDOWSsystem32en-us
2009-04-18 20:58:19 ----D---- C:Program FilesReference Assemblies
2009-04-18 20:58:02 ----N---- C:WINDOWSsystem32spmsg2.dll
2009-04-18 20:58:02 ----A---- C:WINDOWSsystem32spupdsvc.exe
2009-04-18 20:56:56 ----D---- C:Program FilesEverest
2009-04-18 20:56:47 ----D---- C:Program FilesXnView
2009-04-18 20:56:06 ----D---- C:Program FilesCorel
2009-04-18 20:56:06 ----D---- C:Program FilesCommon FilesCorel
2009-04-18 20:54:24 ----D---- C:Program FilesAdobe
2009-04-18 20:54:02 ----D---- C:Documents and SettingsAll UsersApplication DataAdobe
2009-04-18 20:52:48 ----D---- C:Documents and SettingsAdminApplication DataAdobe
2009-04-18 20:48:52 ----D---- C:Program FilesCommon FilesMacrovision Shared
2009-04-18 20:48:27 ----D---- C:Program FilesCommon FilesAdobe
2009-04-18 20:47:25 ----D---- C:Documents and SettingsAll UsersApplication DataTechSmith
2009-04-18 20:47:24 ----D---- C:Program FilesTechSmith
2009-04-18 20:47:08 ----D---- C:Program FilesCommon FilesWise Installation Wizard
2009-04-18 20:47:02 ----D---- C:Program FilesSMSDV
2009-04-18 20:46:55 ----D---- C:Program FilesMozilla Firefox
2009-04-18 20:46:44 ----D---- C:Program FilesCcleaner
2009-04-18 20:46:42 ----D---- C:Program FilesUninstall Tool
2009-04-18 20:46:41 ----D---- C:Program FilesFlash Player Pro
2009-04-18 20:46:39 ----D---- C:Documents and SettingsAll UsersApplication DataApple Computer
2009-04-18 20:46:34 ----D---- C:Program FilesQuickTime Alternative
2009-04-18 20:46:31 ----D---- C:Program FilesReal Alternative
2009-04-18 20:46:25 ----A---- C:WINDOWSsystem32rmoc3260.dll
2009-04-18 20:46:25 ----A---- C:WINDOWSsystem32pndx5032.dll
2009-04-18 20:46:25 ----A---- C:WINDOWSsystem32pndx5016.dll
2009-04-18 20:46:25 ----A---- C:WINDOWSsystem32pncrt.dll
2009-04-18 20:46:24 ----A---- C:WINDOWSsystem32unrar.dll
2009-04-18 20:46:23 ----A---- C:WINDOWSsystem32yv12vfw.dll
2009-04-18 20:46:22 ----A---- C:WINDOWSsystem32qt-dx331.dll
2009-04-18 20:46:22 ----A---- C:WINDOWSsystem32ff_vfw.dll.manifest
2009-04-18 20:46:22 ----A---- C:WINDOWSsystem32ff_vfw.dll
2009-04-18 20:46:22 ----A---- C:WINDOWSsystem32dpl100.dll
2009-04-18 20:46:22 ----A---- C:WINDOWSsystem32divx.dll
2009-04-18 20:46:21 ----D---- C:Program FilesK-Lite Codec Pack
2009-04-18 20:46:21 ----D---- C:Documents and SettingsAll UsersApplication DataReal
2009-04-18 20:46:21 ----D---- C:Documents and SettingsAdminApplication DataReal
2009-04-18 20:46:15 ----D---- C:Program FilesNo1 DVD Ripper
2009-04-18 20:46:09 ----D---- C:Program FilesVLC
2009-04-18 20:46:02 ----D---- C:Program FilesThe KMPlayer
2009-04-18 20:45:51 ----D---- C:Program FilesMSECache
2009-04-18 20:45:23 ----HD---- C:Program FilesInstallShield Installation Information
2009-04-18 20:45:23 ----D---- C:Program FilesCommon FilesArsenal Shared
2009-04-18 20:45:23 ----D---- C:Program FilesArsenal Company
2009-04-18 20:45:21 ----D---- C:Program FilesCommon FilesInstallShield
2009-04-18 20:40:51 ----A---- C:WINDOWSODBC.INI
2009-04-18 20:38:59 ----D---- C:Program FilesMicrosoft Visual Studio
2009-04-18 20:36:14 ----D---- C:WINDOWSSHELLNEW
2009-04-18 20:35:07 ----D---- C:Program FilesMicrosoft Works
2009-04-18 20:34:58 ----D---- C:Program FilesCommon FilesDESIGNER
2009-04-18 20:34:43 ----D---- C:Program FilesMicrosoft.NET
2009-04-18 20:33:37 ----D---- C:Program FilesMicrosoft Office
2009-04-18 20:33:37 ----D---- C:Documents and SettingsAll UsersApplication DataMicrosoft Help
2009-04-18 20:33:22 ----RHD---- C:MSOCache
2009-04-18 20:32:53 ----D---- C:Program FilesWinDjView
2009-04-18 20:32:52 ----D---- C:Program FilesPunto Switcher
2009-04-18 20:32:46 ----A---- C:WINDOWSWPI_Log.txt
2009-04-18 20:27:30 ----ASH---- C:Documents and SettingsAdminApplication Datadesktop.ini
2009-04-18 20:27:29 ----SD---- C:Documents and SettingsAdminApplication DataMicrosoft
2009-04-18 20:26:24 ----A---- C:WINDOWSSchedLgU.Txt
2009-04-18 20:21:20 ----D---- C:WINDOWSsystem32xircom
2009-04-18 20:21:20 ----D---- C:Program Filesxerox
2009-04-18 20:21:20 ----D---- C:Program Filesmsn gaming zone
2009-04-18 20:21:20 ----D---- C:Program Filesmicrosoft frontpage
2009-04-18 20:20:58 ----D---- C:Program FilesVistaDriveIcon
2009-04-18 20:20:47 ----RA---- C:WINDOWSdel.bat
2009-04-18 20:20:47 ----A---- C:WINDOWSinnounp.exe
2009-04-18 20:20:46 ----A---- C:WINDOWSsystem32oeminfo.ini
2009-04-18 20:20:45 ----RA---- C:WINDOWSsystem32OEMINFO.CMD
2009-04-18 20:20:39 ----SD---- C:WINDOWSsystem32Microsoft
2009-04-18 20:20:39 ----A---- C:WINDOWSsystem32javaws.exe
2009-04-18 20:20:39 ----A---- C:WINDOWSsystem32javaw.exe
2009-04-18 20:20:39 ----A---- C:WINDOWSsystem32java.exe
2009-04-18 20:20:18 ----D---- C:Program FilesJava
2009-04-18 20:20:17 ----D---- C:Program FilesCommon FilesJava
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xinput9_1_0.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xinput1_3.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xinput1_2.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xinput1_1.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32XAudio2_0.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine3_0.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_9.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_8.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_7.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_6.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_5.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_4.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_3.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_2.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_10.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_1.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32xactengine2_0.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32X3DAudio1_3.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32x3daudio1_2.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32x3daudio1_1.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32x3daudio1_0.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32d3dx9_37.dll
2009-04-18 20:20:03 ----A---- C:WINDOWSsystem32d3dx9_36.dll
2009-04-18 20:20:02 ----A---- C:WINDOWSsystem32d3dx9_35.dll
2009-04-18 20:20:02 ----A---- C:WINDOWSsystem32d3dx9_34.dll
2009-04-18 20:20:02 ----A---- C:WINDOWSsystem32d3dx9_33.dll
2009-04-18 20:20:02 ----A---- C:WINDOWSsystem32d3dx9_32.dll
2009-04-18 20:20:02 ----A---- C:WINDOWSsystem32d3dx9_31.dll
2009-04-18 20:20:02 ----A---- C:WINDOWSsystem32d3dx9_30.dll
2009-04-18 20:20:02 ----A---- C:WINDOWSsystem32d3dx9_29.dll
2009-04-18 20:20:02 ----A---- C:WINDOWSsystem32d3dx9_28.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx9_27.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx9_26.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx9_25.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx9_24.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx10_37.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx10_36.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx10_35.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx10_34.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx10_33.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dx10.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32D3DCompiler_37.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dcompiler_36.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dcompiler_35.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dcompiler_34.dll
2009-04-18 20:20:01 ----A---- C:WINDOWSsystem32d3dcompiler_33.dll
2009-04-18 20:18:02 ----RSD---- C:WINDOWSassembly
2009-04-18 20:18:02 ----D---- C:WINDOWSMicrosoft.NET
2009-04-18 20:18:01 ----D---- C:WINDOWSsystem32URTTemp
2009-04-18 20:17:28 ----AD---- C:Program FilesAmlMaple
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32wrap_oal.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32wnaspi32.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32Vbrun300.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32vbrun200.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32vbrun100.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32Vb40032.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32Vb40016.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32ssleay32.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32OpenAL32.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32msvcrt10.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32msvcr71.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32msvcr70.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32msvcp71.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MSVCP70.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32msvci70.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MSSTKPRP.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32msstdfmt.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71u.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71KOR.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71JPN.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71ITA.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71FRA.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71ESP.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71ENU.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71DEU.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71CHT.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71CHS.DLL
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32MFC71.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70u.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70kor.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70jpn.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70ita.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70fra.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70esp.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70enu.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70deu.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70cht.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70chs.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32mfc70.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32libssl32.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32libeay32.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32atl71.dll
2009-04-18 20:17:23 ----A---- C:WINDOWSsystem32atl70.dll
2009-04-18 20:17:06 ----A---- C:WINDOWScontrol.ini
2009-04-18 20:17:06 ----A---- C:AUTOEXEC.BAT
2009-04-18 20:16:55 ----A---- C:WINDOWSOEWABLog.txt
2009-04-18 20:16:50 ----A---- C:WINDOWSsystem32mapi32.dll
2009-04-18 20:15:51 ----RAH---- C:WINDOWSsystem32logonui.exe.manifest
2009-04-18 20:15:46 ----RAH---- C:WINDOWSsystem32cdplayer.exe.manifest
2009-04-18 20:15:39 ----HD---- C:Program FilesWindowsUpdate
2009-04-18 20:15:36 ----D---- C:Program FilesOnline Services
2009-04-18 20:15:27 ----A---- C:WINDOWSsystem32atrace.dll
2009-04-18 20:15:26 ----A---- C:WINDOWSsystem32desktop.ini
2009-04-18 20:15:26 ----A---- C:WINDOWSdesktop.ini
2009-04-18 20:15:20 ----A---- C:WINDOWSsystem32acctres.dll
2009-04-18 20:15:19 ----D---- C:Program FilesCommon FilesServices
2009-04-18 20:15:17 ----SD---- C:WINDOWSTasks
2009-04-18 20:15:17 ----D---- C:Program FilesCommon FilesMSSoap
2009-04-18 20:15:17 ----A---- C:WINDOWSsystem32icfgnt5.dll
2009-04-18 20:15:14 ----D---- C:WINDOWSsrchasst
2009-04-18 20:15:13 ----D---- C:WINDOWSsystem32Macromed
2009-04-18 20:15:11 ----A---- C:WINDOWSsystem32wuweb.dll
2009-04-18 20:15:11 ----A---- C:WINDOWSsystem32wups.dll
2009-04-18 20:15:11 ----A---- C:WINDOWSsystem32wucltui.dll
2009-04-18 20:15:11 ----A---- C:WINDOWSsystem32wuauserv.dll
2009-04-18 20:15:11 ----A---- C:WINDOWSsystem32wuaueng1.dll
2009-04-18 20:15:11 ----A---- C:WINDOWSsystem32wuaueng.dll
2009-04-18 20:15:10 ----A---- C:WINDOWSsystem32wuauclt1.exe
2009-04-18 20:15:10 ----A---- C:WINDOWSsystem32wuauclt.exe
2009-04-18 20:15:10 ----A---- C:WINDOWSsystem32wuapi.dll
2009-04-18 20:15:10 ----A---- C:WINDOWSsystem32qmgrprxy.dll
2009-04-18 20:15:10 ----A---- C:WINDOWSsystem32qmgr.dll
2009-04-18 20:15:10 ----A---- C:WINDOWSsystem32bitsprx4.dll
2009-04-18 20:15:10 ----A---- C:WINDOWSsystem32bitsprx3.dll
2009-04-18 20:15:10 ----A---- C:WINDOWSsystem32bitsprx2.dll
2009-04-18 20:15:07 ----D---- C:Program FilesMovie Maker
2009-04-18 20:14:55 ----A---- C:WINDOWSsystem32safrslv.dll
2009-04-18 20:14:55 ----A---- C:WINDOWSsystem32safrdm.dll
2009-04-18 20:14:55 ----A---- C:WINDOWSsystem32safrcdlg.dll
2009-04-18 20:14:55 ----A---- C:WINDOWSsystem32racpldlg.dll
2009-04-18 20:14:52 ----D---- C:WINDOWSsystem32Restore
2009-04-18 20:14:52 ----A---- C:WINDOWSsystem32srsvc.dll
2009-04-18 20:14:52 ----A---- C:WINDOWSsystem32srrstr.dll
2009-04-18 20:14:52 ----A---- C:WINDOWSsystem32srclient.dll
2009-04-18 20:14:52 ----A---- C:WINDOWSsystem32fltMc.exe
2009-04-18 20:14:52 ----A---- C:WINDOWSsystem32fltlib.dll
2009-04-18 20:14:51 ----A---- C:WINDOWSsystem32msoert2.dll
2009-04-18 20:14:51 ----A---- C:WINDOWSsystem32msoeacct.dll
2009-04-18 20:14:50 ----A---- C:WINDOWSsystem32inetres.dll
2009-04-18 20:14:50 ----A---- C:WINDOWSsystem32inetcomm.dll
2009-04-18 20:14:48 ----D---- C:Program FilesOutlook Express
2009-04-18 20:14:48 ----A---- C:WINDOWSsystem32schedsvc.dll
2009-04-18 20:14:48 ----A---- C:WINDOWSsystem32mstinit.exe
2009-04-18 20:14:48 ----A---- C:WINDOWSsystem32mstask.dll
2009-04-18 20:14:47 ----A---- C:WINDOWSsystem32isign32.dll
2009-04-18 20:14:47 ----A---- C:WINDOWSsystem32inetcfg.dll
2009-04-18 20:14:47 ----A---- C:WINDOWSsystem32icwphbk.dll
2009-04-18 20:14:47 ----A---- C:WINDOWSsystem32icwdial.dll
2009-04-18 20:14:43 ----D---- C:Program FilesCommon FilesSystem
2009-04-18 20:13:57 ----D---- C:Program FilesComPlus Applications
2009-04-18 20:13:56 ----A---- C:WINDOWSvbaddin.ini
2009-04-18 20:13:56 ----A---- C:WINDOWSvb.ini
2009-04-18 20:13:51 ----D---- C:WINDOWSRegistration
2009-04-18 20:13:30 ----D---- C:Program FilesWindows Media Player
2009-04-18 20:13:30 ----D---- C:Program FilesWindows Media Connect 2
2009-04-18 20:13:28 ----A---- C:WINDOWSsystem32wiaaut.dll
2009-04-18 20:13:24 ----D---- C:Program FilesPaint.NET
2009-04-18 20:13:21 ----SD---- C:WINDOWSDownloaded Program Files
2009-04-18 20:13:21 ----RD---- C:WINDOWSOffline Web Pages
2009-04-18 20:13:21 ----A---- C:WINDOWSsystem32winfxdocobj.exe
2009-04-18 20:13:20 ----D---- C:WINDOWSwbem
2009-04-18 20:13:20 ----A---- C:WINDOWSsystem32msfeedssync.exe
2009-04-18 20:13:20 ----A---- C:WINDOWSsystem32msfeedsbs.dll
2009-04-18 20:13:18 ----A---- C:WINDOWSsystem32ieframe.dll.mui
2009-04-18 20:13:17 ----D---- C:Program FilesInternet Explorer
2009-04-18 20:13:17 ----A---- C:WINDOWSsystem32advpack.dll.mui
2009-04-18 20:13:16 ----A---- C:WINDOWSsystem32wul_lng.ini
2009-04-18 20:13:16 ----A---- C:WINDOWSsystem32wul.exe
2009-04-18 20:13:16 ----A---- C:WINDOWSsystem32TweakUI.exe
2009-04-18 20:13:15 ----D---- C:WINDOWSSoftwareDistribution
2009-04-18 20:13:15 ----A---- C:WINDOWSsystem32muweb.dll
2009-04-18 20:13:14 ----A---- C:WINDOWSsystem32write.exe
2009-04-18 20:13:14 ----A---- C:WINDOWSsystem32gpprefcl.dll
2009-04-18 20:13:00 ----A---- C:WINDOWSsystem32sndvol32.exe
2009-04-18 20:13:00 ----A---- C:WINDOWSsystem32hticons.dll
2009-04-18 20:13:00 ----A---- C:WINDOWSsystem32avwav.dll
2009-04-18 20:13:00 ----A---- C:WINDOWSsystem32avmeter.dll
2009-04-18 20:12:59 ----A---- C:WINDOWSsystem32winchat.exe
2009-04-18 20:12:59 ----A---- C:WINDOWSsystem32avtapi.dll
2009-04-18 20:12:51 ----A---- C:WINDOWSsystem32getuname.dll
2009-04-18 20:12:51 ----A---- C:WINDOWSsystem32charmap.exe
2009-04-18 20:12:50 ----A---- C:WINDOWSsystem32winmine.exe
2009-04-18 20:12:50 ----A---- C:WINDOWSsystem32sol.exe
2009-04-18 20:12:50 ----A---- C:WINDOWSsystem32mshearts.exe
2009-04-18 20:12:50 ----A---- C:WINDOWSsystem32freecell.exe
2009-04-18 20:12:50 ----A---- C:WINDOWSsystem32calc.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32usrlogon.cmd
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32tsshutdn.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32tslabels.ini
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32tskill.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32tsdiscon.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32tscon.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32shadow.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32rwinsta.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32reset.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32regini.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32rdpcfgex.dll
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32qwinsta.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32qappsrv.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32msg.exe
2009-04-18 20:12:49 ----A---- C:WINDOWSsystem32logoff.exe
2009-04-18 20:12:48 ----A---- C:WINDOWSsystem32msdtcprf.ini
2009-04-18 20:12:48 ----A---- C:WINDOWSsystem32cdmodem.dll
2009-04-18 20:12:45 ----A---- C:WINDOWSsystem32wmimgmt.msc
2009-04-18 20:12:44 ----A---- C:WINDOWSsystem32accwiz.exe
2009-04-18 20:12:43 ----D---- C:Program FilesWindows NT
2009-04-18 20:12:43 ----A---- C:WINDOWSsystem32spider.exe
2009-04-18 20:12:43 ----A---- C:WINDOWSsystem32sndrec32.exe
2009-04-18 20:12:43 ----A---- C:WINDOWSsystem32mplay32.exe
2009-04-18 20:12:43 ----A---- C:WINDOWSsystem32hypertrm.dll
2009-04-18 20:12:43 ----A---- C:WINDOWSsystem32clipbrd.exe
2009-04-18 20:12:42 ----A---- C:WINDOWSsystem32tsgqec.dll
2009-04-18 20:12:42 ----A---- C:WINDOWSsystem32tscfgwmi.dll
2009-04-18 20:12:42 ----A---- C:WINDOWSsystem32rhttpaa.dll
2009-04-18 20:12:41 ----A---- C:WINDOWSsystem32remotepg.dll
2009-04-18 20:12:41 ----A---- C:WINDOWSsystem32rdshost.exe
2009-04-18 20:12:41 ----A---- C:WINDOWSsystem32rdsaddin.exe
2009-04-18 20:12:41 ----A---- C:WINDOWSsystem32mstscax.dll
2009-04-18 20:12:41 ----A---- C:WINDOWSsystem32mstsc.exe
2009-04-18 20:12:41 ----A---- C:WINDOWSsystem32aaclient.dll
2009-04-18 20:12:40 ----D---- C:WINDOWSsystem32MsDtc
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32termsrv.dll
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32sessmgr.exe
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32rdpwsx.dll
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32rdpsnd.dll
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32rdpclip.exe
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32rdchost.dll
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32qprocess.exe
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32msdtcuiu.dll
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32icaapi.dll
2009-04-18 20:12:40 ----A---- C:WINDOWSsystem32cfgbkend.dll
2009-04-18 20:12:39 ----A---- C:WINDOWSsystem32xolehlp.dll
2009-04-18 20:12:39 ----A---- C:WINDOWSsystem32mtxoci.dll
2009-04-18 20:12:39 ----A---- C:WINDOWSsystem32msdtctm.dll
2009-04-18 20:12:39 ----A---- C:WINDOWSsystem32msdtcprx.dll
2009-04-18 20:12:39 ----A---- C:WINDOWSsystem32msdtclog.dll
2009-04-18 20:12:39 ----A---- C:WINDOWSsystem32msdtc.exe
2009-04-18 20:12:38 ----D---- C:WINDOWSsystem32Com
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32stclient.dll
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32mtxlegih.dll
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32mtxex.dll
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32mtxdm.dll
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32dcomcnfg.exe
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32comrepl.dll
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32comaddin.dll
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32colbact.dll
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32clbcatex.dll
2009-04-18 20:12:38 ----A---- C:WINDOWSsystem32catsrvps.dll
2009-04-18 20:12:37 ----A---- C:WINDOWSsystem32comuid.dll
2009-04-18 20:12:37 ----A---- C:WINDOWSsystem32comsvcs.dll
2009-04-18 20:12:37 ----A---- C:WINDOWSsystem32comsnap.dll
2009-04-18 20:12:37 ----A---- C:WINDOWSsystem32clbcatq.dll
2009-04-18 20:12:37 ----A---- C:WINDOWSsystem32catsrvut.dll
2009-04-18 20:12:37 ----A---- C:WINDOWSsystem32catsrv.dll
2009-04-18 20:12:32 ----A---- C:WINDOWSsystem32servdeps.dll
2009-04-18 20:12:32 ----A---- C:WINDOWSsystem32mmfutil.dll
2009-04-18 20:12:32 ----A---- C:WINDOWSsystem32licwmi.dll
2009-04-18 20:12:32 ----A---- C:WINDOWSsystem32cmprops.dll
======List of files/folders modified in the last 1 months======
2009-05-04 12:49:34 ----A---- C:WINDOWSsystem.ini
2009-04-18 20:38:08 ----A---- C:WINDOWSwin.ini
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AmdK7;Драйвер AMD K7 процессора; C:WINDOWSsystem32DRIVERSamdk7.sys [2008-05-20 41984]
R1 AvgLdx86;AVG AVI Loader Driver x86; C:WINDOWSSystem32Driversavgldx86.sys [2009-05-04 325896]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:WINDOWSSystem32Driversavgmfx86.sys [2009-05-04 27784]
R1 AvgTdiX;AVG8 Network Redirector; C:WINDOWSSystem32Driversavgtdix.sys [2009-05-04 108552]
R2 DgiVecp;Team MFP Comm Driver; C:WINDOWSSystem32DriversDgiVecp.sys [2004-05-17 41984]
R2 tifsfilter;Acronis True Image FS Filter; C:WINDOWSsystem32DRIVERStifsfilt.sys [2009-04-19 44704]
R3 ati2mtag;ati2mtag; C:WINDOWSsystem32DRIVERSati2mtag.sys [2008-02-26 2863616]
R3 cmuda;C-Media WDM Audio Interface; C:WINDOWSsystem32driverscmuda.sys [2006-06-26 1372992]
R3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet адаптер, драйвер для NT; C:WINDOWSsystem32DRIVERSfetnd5.sys [2001-08-18 27165]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-05-20 30336]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-05-20 25856]
R3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-05-20 26368]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-15 20608]
S3 catchme;catchme; ??C:DOCUME~1AdminLOCALS~1Tempcatchme.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:WINDOWSsystem32DRIVERSpccsmcfd.sys [2008-08-26 18816]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2008-03-02 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2008-03-02 82944]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AcrSch2Svc;Acronis Scheduler2 Service; C:Program FilesCommon FilesAcronisSchedule2schedul2.exe [2008-12-18 554264]
R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSsystem32Ati2evxx.exe [2008-02-26 520192]
R2 avg8wd;AVG8 WatchDog; C:PROGRA~1AVGAVG8avgwdsvc.exe [2009-05-04 298776]
R2 O&O Defrag;O&O Defrag; C:WINDOWSsystem32oodag.exe [2007-05-11 1050120]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2007-10-24 70144]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe [2009-04-18 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2007-10-09 36864]
S3 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-04-18 182768]
S3 idsvc;Windows CardSpace; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2007-10-11 864256]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:Program FilesPC Connectivity SolutionServiceLayer.exe [2008-11-11 620544]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media Playerwmpnetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2007-10-11 122880]
EOF
7 мая, 2009 в 11:30 дп #237407 мая, 2009 в 3:41 пп #23737Судя по приведённому вами скриншоту, диск был заражён autorun.inf трояном, но в данный момент файлы помечены как удалённые.
Возможно троян или какой-то системный сбой повредил информацию на диске описывающую корень диска, поэтому он и не открывается.
Вы пробовали открыть этот диск используя TotalComander для примера ?7 мая, 2009 в 4:42 пп #23738Вы пробовали открыть этот диск используя TotalComander для примера ?
Да! Конечно! Ничего не помогает.
Но на диске Е: с помощью программы Power Data Recovery как был виден файл autorun.inf так он и остался. Может еще есть какие нибудь программы для просмотра и удаления файлов в ручную или это у меня файловая система полетела?8 мая, 2009 в 3:41 пп #23736программы для просмотра и удаления файлов в ручную или это у меня файловая система полетела?
Судя по всему второй вариант, так как Power Data Recovery показывает, что файлы уже удалены, а значит никоим образом не должны влиять на работу диска.
8 мая, 2009 в 6:37 пп #23741Судя по всему второй вариант
А можно как восстановить эту файловую систему, только без форматирования и переноса информации на другой винчестер?
10 мая, 2009 в 3:44 пп #23742Извините, но это уже выходит за рамки этого форума.
Советую обратится на компьютерный форум, где рассматриваются вопросы с подобными проблемами. -
АвторСообщения
- Для ответа в этой теме необходимо авторизоваться.