порно баннер

This topic has 6 ответов, 3 участника, and was last updated 15 years, 9 months назад by Liberty.

Просмотр 7 сообщений - с 1 по 7 (из 7 всего)

Автор

Сообщения
14 января, 2010 в 5:47 пп #17755
Аноним
Гость
- Темы:532
- Сообщений:1553
Logfile of random’s system information tool 1.06 (written by random/random)
Run by 111 at 2010-01-14 20:37:40
Microsoft Windows XP Professional Service Pack 2
System drive D: has 2 GB (2%) free of 94 GB
Total RAM: 766 MB (41% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:40:54, on 14.01.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
D:WIN01System32smss.exe
D:WIN01system32winlogon.exe
D:WIN01system32services.exe
D:WIN01system32lsass.exe
D:WIN01system32Ati2evxx.exe
D:WIN01system32svchost.exe
D:WIN01System32svchost.exe
D:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe
D:WIN01system32Ati2evxx.exe
D:WIN01Explorer.EXE
D:WIN01system32spoolsv.exe
D:WIN01system32svchost.exe
D:WIN01system32wscntfy.exe
D:WIN01RTHDCPL.EXE
D:Program FilesSamsungSamsung EDSEDSAgent.exe
D:WIN01AGRSMMSG.exe
D:Program FilesWinampwinampa.exe
D:Program FilesATI TechnologiesATI.ACECore-StaticMOM.EXE
D:WIN01system32ctfmon.exe
D:Program FilesATI TechnologiesATI.ACECore-Staticccc.exe
D:Program FilesMessengermsmsgs.exe
D:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe
D:Program FilesPhoTags ExpressPhotags AutoDetect.exe
D:DOCUME~1111LOCALS~1Tempsynsql.exe
D:Program FilesMicrosoft SQL Server80ToolsBinnsqlmangr.exe
D:DOCUME~1111LOCALS~1Tempsynsql.exe
D:Documents and Settings111Рабочий столVirus Removal Tool1setup_9.0.0.722_13.01.2010_13-29(2)setup_9.0.0.722_13.01.2010_13-29(2).exe
D:Program FilesMozilla Firefoxfirefox.exe
D:WIN01system32wuauclt.exe
D:Documents and Settings111Мои документыЗагрузкиRSIT.exe
D:Program Filestrend micro111.exe

R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.mail.ru/
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — D:Program FilesYandexYandexBarIEyndbar.dll
O4 — HKLM..Run: [StartCCC] D:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [EDS] D:Program FilesSamsungSamsung EDSEDSAgent.exe
O4 — HKLM..Run: [AGRSMMSG] AGRSMMSG.exe
O4 — HKLM..Run: [WinampAgent] «D:Program FilesWinampwinampa.exe»
O4 — HKCU..Run: [CTFMON.EXE] D:WIN01system32ctfmon.exe
O4 — HKCU..Run: [synsql] D:DOCUME~1111LOCALS~1Tempsynsql.exe
O4 — HKCU..Run: [MSMSGS] «D:Program FilesMessengermsmsgs.exe» /background
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] D:WIN01system32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] D:WIN01system32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] D:WIN01system32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] D:WIN01system32CTFMON.EXE (User ‘Default user’)
O4 — Startup: BTTray.lnk = ?
O4 — Startup: Microsoft Office.lnk = D:Program FilesMicrosoft OfficeOffice10OSA.EXE
O4 — Startup: Photags AutoDetect.lnk = D:Program FilesPhoTags ExpressPhotags AutoDetect.exe
O4 — Startup: Service Manager.lnk = D:Program FilesMicrosoft SQL Server80ToolsBinnsqlmangr.exe
O4 — Startup: setup_9.0.0.722_13.01.2010_13-29(2).lnk = ?
O4 — Startup: _uninst_setup_9.0.0.722_02.01.2010_11-09.exe.lnk = D:Documents and Settings111Local SettingsTemp_uninst_setup_9.0.0.722_02.01.2010_11-09.exe.bat
O8 — Extra context menu item: &Отправить на устройство Bluetooth… — D:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie_ctx.htm
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — D:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — D:Program FilesMessengermsmsgs.exe
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — D:WIN01system32Ati2evxx.exe
O23 — Service: Bluetooth Service (btwdins) — Broadcom Corporation. — D:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — D:WIN01system32services.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — D:WIN01system32imapi.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — D:WIN01system32mnmsrvc.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — D:WIN01system32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — D:WIN01system32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — D:WIN01System32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — D:WIN01system32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — D:WIN01System32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — D:WIN01system32wbemwmiapsrv.exe

—
End of file — 4964 bytes

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — D:Program FilesYandexYandexBarIEyndbar.dll [2009-12-24 8729864]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«StartCCC»=D:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2006-11-10 90112]
«RTHDCPL»=D:WIN01RTHDCPL.EXE [2007-07-05 16380416]
«Alcmtr»=D:WIN01ALCMTR.EXE [2005-05-03 69632]
«»= []
«EDS»=D:Program FilesSamsungSamsung EDSEDSAgent.exe [2007-09-20 634880]
«AGRSMMSG»=D:WIN01AGRSMMSG.exe [2006-08-30 89542]
«WinampAgent»=D:Program FilesWinampwinampa.exe [2009-03-09 37888]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=D:WIN01system32ctfmon.exe [2003-08-18 15360]
«synsql»=D:DOCUME~1111LOCALS~1Tempsynsql.exe [2010-01-12 249856]
«MSMSGS»=D:Program FilesMessengermsmsgs.exe [2004-08-17 1667584]

D:новые программыАвтозагрузка
BTTray.lnk — D:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe
Microsoft Office.lnk — D:Program FilesMicrosoft OfficeOffice10OSA.EXE
Photags AutoDetect.lnk — D:Program FilesPhoTags ExpressPhotags AutoDetect.exe
Service Manager.lnk — D:Program FilesMicrosoft SQL Server80ToolsBinnsqlmangr.exe
setup_9.0.0.722_13.01.2010_13-29(2).lnk — D:Documents and Settings111Рабочий столVirus Removal Tool1setup_9.0.0.722_13.01.2010_13-29(2)startup.exe
_uninst_setup_9.0.0.722_02.01.2010_11-09.exe.lnk — D:Documents and Settings111Local SettingsTemp_uninst_setup_9.0.0.722_02.01.2010_11-09.exe.bat

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
D:WIN01system32Ati2evxx.dll [2007-08-27 118784]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«D:Program FilesuTorrentuTorrent.exe»=»D:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{dfaa535a-ff9c-11de-9f97-001aad5157a8}]
shellAutoRuncommand — RESTORES-1-5-21-1482476501-1644491937-682003330-1013lin32.exe
shellopencommand — RESTORES-1-5-21-1482476501-1644491937-682003330-1013lin32.exe

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{dfaa535b-ff9c-11de-9f97-001aad5157a8}]
shellAutoRuncommand — RESTORES-1-5-21-1482476501-1644491937-682003330-1013lin32.exe
shellopencommand — RESTORES-1-5-21-1482476501-1644491937-682003330-1013lin32.exe

======List of files/folders created in the last 1 months======

2010-01-14 20:37:40 —-DC—- D:rsit
2010-01-14 02:27:57 —-DC—- D:WIN01Minidump
2010-01-12 20:30:09 —-D—- D:Documents and Settings111Application DataLavasoft
2010-01-12 20:28:31 —-D—- D:Documents and Settings111Application DataICQ
2010-01-12 20:25:06 —-D—- D:Documents and Settings111Application DataWinamp
2010-01-12 20:11:43 —-D—- D:Documents and Settings111Application DataMacromedia
2010-01-12 20:11:43 —-D—- D:Documents and Settings111Application DataAdobe
2010-01-11 21:37:16 —-D—- D:Documents and Settings111Application DataWinRAR
2010-01-11 21:03:17 —-DC—- D:важное
2010-01-11 20:52:32 —-D—- D:фильмы
2010-01-11 20:42:05 —-D—- D:Documents and SettingsAll Users.WIN01Application DataYandex
2010-01-11 20:41:55 —-D—- D:Program FilesYandex
2010-01-11 20:41:55 —-D—- D:Documents and Settings111Application DataYandex
2010-01-11 20:41:55 —-D—- D:Documents and Settings111Application DataOpera
2010-01-11 20:41:55 —-D—- D:Documents and Settings111Application DataMozilla
2010-01-11 20:39:36 —-D—- D:Documents and Settings111Application DatauTorrent
2010-01-11 09:30:54 —-SHD—- D:found.000
2010-01-10 18:17:14 —-AC—- D:WIN01system32h323log.txt
2010-01-10 18:14:40 —-AC—- D:WIN01system32vfwwdm32.dll
2010-01-10 18:14:40 —-AC—- D:WIN01system32ksuser.dll
2010-01-10 18:13:10 —-AC—- D:WIN01system32usbui.dll
2010-01-10 18:08:07 —-SHDC—- D:WIN01Installer
2010-01-10 18:08:07 —-AC—- D:WIN01system32PerfStringBackup.INI
2010-01-10 18:08:05 —-AC—- D:WIN01ODBCINST.INI
2010-01-10 18:07:59 —-RAC—- D:WIN01system32kbdtuq.dll
2010-01-10 18:07:59 —-RAC—- D:WIN01system32kbdtuf.dll
2010-01-10 18:07:59 —-RAC—- D:WIN01system32kbdazel.dll
2010-01-10 18:07:57 —-RAC—- D:WIN01system32kbdhept.dll
2010-01-10 18:07:57 —-RAC—- D:WIN01system32kbdhela3.dll
2010-01-10 18:07:57 —-RAC—- D:WIN01system32kbdhela2.dll
2010-01-10 18:07:57 —-RAC—- D:WIN01system32kbdhe319.dll
2010-01-10 18:07:57 —-RAC—- D:WIN01system32kbdhe220.dll
2010-01-10 18:07:57 —-RAC—- D:WIN01system32kbdhe.dll
2010-01-10 18:07:57 —-RAC—- D:WIN01system32kbdgkl.dll
2010-01-10 18:07:56 —-RAC—- D:WIN01system32kbdlv1.dll
2010-01-10 18:07:56 —-RAC—- D:WIN01system32kbdlv.dll
2010-01-10 18:07:56 —-RAC—- D:WIN01system32kbdlt1.dll
2010-01-10 18:07:56 —-RAC—- D:WIN01system32kbdlt.dll
2010-01-10 18:07:56 —-RAC—- D:WIN01system32kbdest.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdycl.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdsl1.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdsl.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdro.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdpl1.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdpl.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdhu1.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdhu.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdcz2.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdcz1.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdcz.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdcr.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32KBDAL.DLL
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbdycc.dll
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbduzb.dll
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbdur.dll
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbdtat.dll
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbdmon.dll
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbdkyr.dll
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbdkaz.dll
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbdbu.dll
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbdblr.dll
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbdaze.dll
2010-01-10 18:07:49 —-AC—- D:WIN01system32irclass.dll
2010-01-10 18:07:48 —-AC—- D:WIN01system32spxcoins.dll
2010-01-10 18:07:48 —-AC—- D:WIN01system32EqnClass.Dll
2010-01-10 18:07:48 —-AC—- D:WIN01system32dgsetup.dll
2010-01-10 18:07:48 —-AC—- D:WIN01system32dgrpsetu.dll
2010-01-10 18:07:46 —-C—- D:WIN01system32CONFIG.TMP
2010-01-10 18:07:46 —-AC—- D:WIN01TASKMAN.EXE
2010-01-10 18:07:45 —-AC—- D:WIN01system32batt.dll
2010-01-10 18:07:45 —-AC—- D:WIN01NOTEPAD.EXE
2010-01-10 18:07:44 —-AC—- D:WIN01system32storprop.dll
2010-01-10 18:07:30 —-ASH—- D:Documents and SettingsAll Users.WIN01Application Datadesktop.ini
2010-01-10 18:07:27 —-RAC—- D:WIN01SET8.tmp
2010-01-10 18:07:24 —-RAC—- D:WIN01SET4.tmp
2010-01-10 18:07:21 —-RAC—- D:WIN01SET3.tmp
2010-01-10 18:07:14 —-DC—- D:WIN01system32CatRoot2
2010-01-10 18:07:14 —-DC—- D:WIN01system32CatRoot
2010-01-10 18:07:08 —-SD—- D:Documents and SettingsAll Users.WIN01Application DataMicrosoft
2010-01-10 17:59:19 —-RSDC—- D:WIN01Fonts
2010-01-10 17:59:19 —-RDC—- D:WIN01Web
2010-01-10 17:59:19 —-HDC—- D:WIN01inf
2010-01-10 17:59:19 —-DC—- D:WIN01WinSxS
2010-01-10 17:59:19 —-DC—- D:WIN01twain_32
2010-01-10 17:59:19 —-DC—- D:WIN01Temp
2010-01-10 17:59:19 —-DC—- D:WIN01system32wins
2010-01-10 17:59:19 —-DC—- D:WIN01system32wbem
2010-01-10 17:59:19 —-DC—- D:WIN01system32usmt
2010-01-10 17:59:19 —-DC—- D:WIN01system32spool
2010-01-10 17:59:19 —-DC—- D:WIN01system32ShellExt
2010-01-10 17:59:19 —-DC—- D:WIN01system32Setup
2010-01-10 17:59:19 —-DC—- D:WIN01system32ras
2010-01-10 17:59:19 —-DC—- D:WIN01system32oobe
2010-01-10 17:59:19 —-DC—- D:WIN01system32npp
2010-01-10 17:59:19 —-DC—- D:WIN01system32mui
2010-01-10 17:59:19 —-DC—- D:WIN01system32inetsrv
2010-01-10 17:59:19 —-DC—- D:WIN01system32IME
2010-01-10 17:59:19 —-DC—- D:WIN01system32icsxml
2010-01-10 17:59:19 —-DC—- D:WIN01system32ias
2010-01-10 17:59:19 —-DC—- D:WIN01system32export
2010-01-10 17:59:19 —-DC—- D:WIN01system32drivers
2010-01-10 17:59:19 —-DC—- D:WIN01system32dllcache
2010-01-10 17:59:19 —-DC—- D:WIN01system32dhcp
2010-01-10 17:59:19 —-DC—- D:WIN01system32config
2010-01-10 17:59:19 —-DC—- D:WIN01system323com_dmi
2010-01-10 17:59:19 —-DC—- D:WIN01system323076
2010-01-10 17:59:19 —-DC—- D:WIN01system322052
2010-01-10 17:59:19 —-DC—- D:WIN01system321054
2010-01-10 17:59:19 —-DC—- D:WIN01system321049
2010-01-10 17:59:19 —-DC—- D:WIN01system321042
2010-01-10 17:59:19 —-DC—- D:WIN01system321041
2010-01-10 17:59:19 —-DC—- D:WIN01system321037
2010-01-10 17:59:19 —-DC—- D:WIN01system321033
2010-01-10 17:59:19 —-DC—- D:WIN01system321031
2010-01-10 17:59:19 —-DC—- D:WIN01system321028
2010-01-10 17:59:19 —-DC—- D:WIN01system321025
2010-01-10 17:59:19 —-DC—- D:WIN01system32
2010-01-10 17:59:19 —-DC—- D:WIN01system
2010-01-10 17:59:19 —-DC—- D:WIN01security
2010-01-10 17:59:19 —-DC—- D:WIN01Resources
2010-01-10 17:59:19 —-DC—- D:WIN01repair
2010-01-10 17:59:19 —-DC—- D:WIN01Provisioning
2010-01-10 17:59:19 —-DC—- D:WIN01PeerNet
2010-01-10 17:59:19 —-DC—- D:WIN01pchealth
2010-01-10 17:59:19 —-DC—- D:WIN01mui
2010-01-10 17:59:19 —-DC—- D:WIN01msapps
2010-01-10 17:59:19 —-DC—- D:WIN01msagent
2010-01-10 17:59:19 —-DC—- D:WIN01Media
2010-01-10 17:59:19 —-DC—- D:WIN01java
2010-01-10 17:59:19 —-DC—- D:WIN01ime
2010-01-10 17:59:19 —-DC—- D:WIN01Help
2010-01-10 17:59:19 —-DC—- D:WIN01ehome
2010-01-10 17:59:19 —-DC—- D:WIN01Driver Cache
2010-01-10 17:59:19 —-DC—- D:WIN01Debug
2010-01-10 17:59:19 —-DC—- D:WIN01Cursors
2010-01-10 17:59:19 —-DC—- D:WIN01Connection Wizard
2010-01-10 17:59:19 —-DC—- D:WIN01Config
2010-01-10 17:59:19 —-DC—- D:WIN01AppPatch
2010-01-10 17:59:19 —-DC—- D:WIN01addins
2010-01-10 17:59:19 —-DC—- D:WIN01
2010-01-10 17:53:42 —-D—- D:Documents and Settings111Application DataMedia Player Classic
2010-01-10 17:53:04 —-AC—- D:WIN01system32unrar.dll
2010-01-10 17:53:04 —-AC—- D:WIN01avisplitter.ini
2010-01-10 17:53:03 —-AC—- D:WIN01system32yv12vfw.dll
2010-01-10 17:53:03 —-AC—- D:WIN01system32xvidvfw.dll
2010-01-10 17:53:03 —-AC—- D:WIN01system32xvidcore.dll
2010-01-10 17:53:02 —-AC—- D:WIN01system32ff_vfw.dll.manifest
2010-01-10 17:53:02 —-AC—- D:WIN01system32ff_vfw.dll
2010-01-10 17:53:01 —-AC—- D:WIN01system32msvcr71.dll
2010-01-10 17:22:56 —-DC—- D:WIN01system32Lang
2010-01-10 17:07:12 —-D—- D:Documents and SettingsAll Users.WIN01Application DataWLAN
2010-01-10 17:07:11 —-D—- D:Documents and Settings111Application DataInstallShield
2010-01-10 17:00:57 —-AC—- D:WIN01system32ChCfg.exe
2010-01-10 17:00:39 —-DC—- D:WIN01system32RTCOM
2010-01-10 17:00:01 —-AC—- D:WIN01system32spupdsvc.exe
2010-01-10 17:00:00 —-HDC—- D:WIN01$NtUninstallKB888111WXPSP2$
2010-01-10 16:59:56 —-AC—- D:WIN01SoundMan.exe
2010-01-10 16:59:55 —-AC—- D:WIN01SkyTel.exe
2010-01-10 16:59:55 —-AC—- D:WIN01RtlUpd.exe
2010-01-10 16:59:53 —-AC—- D:WIN01RTLCPL.exe
2010-01-10 16:59:50 —-AC—- D:WIN01RTHDCPL.exe
2010-01-10 16:59:48 —-AC—- D:WIN01MicCal.exe
2010-01-10 16:59:45 —-AC—- D:WIN01alcwzrd.exe
2010-01-10 16:59:45 —-AC—- D:WIN01Alcmtr.exe
2010-01-10 16:59:38 —-AC—- D:WIN01RtlExUpd.dll
2010-01-10 16:59:38 —-AC—- D:WIN01HideWin.exe
2010-01-10 16:46:48 —-D—- D:Documents and SettingsAll Users.WIN01Application DataATI
2010-01-10 16:46:48 —-D—- D:Documents and Settings111Application DataATI
2010-01-10 16:36:52 —-RSDC—- D:WIN01assembly
2010-01-10 16:36:21 —-DC—- D:WIN01Microsoft.NET
2010-01-10 16:35:38 —-DC—- D:WIN01system32ReinstallBackups
2010-01-10 16:31:03 —-D—- D:Documents and Settings111Application DataIdentities
2010-01-10 16:30:50 —-ASH—- D:Documents and Settings111Application Datadesktop.ini
2010-01-10 16:30:49 —-SD—- D:Documents and Settings111Application DataMicrosoft
2010-01-10 16:30:04 —-DC—- D:WIN01SoftwareDistribution
2010-01-10 16:30:02 —-DC—- D:WIN01Prefetch
2010-01-10 16:30:01 —-SDC—- D:WIN01system32Microsoft
2010-01-10 16:30:01 —-AC—- D:WIN01SchedLgU.Txt
2010-01-10 16:24:57 —-DC—- D:WIN01system32xircom
2010-01-10 16:24:26 —-AC—- D:WIN01control.ini
2010-01-10 16:23:56 —-AC—- D:WIN01system32mapi32.dll
2010-01-10 16:22:47 —-SDC—- D:WIN01Downloaded Program Files
2010-01-10 16:22:47 —-RDC—- D:WIN01Offline Web Pages
2010-01-10 16:22:47 —-RAHC—- D:WIN01system32logonui.exe.manifest
2010-01-10 16:22:38 —-RAHC—- D:WIN01system32cdplayer.exe.manifest
2010-01-10 16:22:00 —-DC—- D:WIN01system32DirectX
2010-01-10 16:21:37 —-AC—- D:WIN01system32atrace.dll
2010-01-10 16:21:34 —-AC—- D:WIN01system32desktop.ini
2010-01-10 16:21:34 —-AC—- D:WIN01desktop.ini
2010-01-10 16:21:28 —-AC—- D:WIN01system32nmevtmsg.dll
2010-01-10 16:21:27 —-SDC—- D:WIN01Tasks
2010-01-10 16:21:27 —-AC—- D:WIN01system32icfgnt5.dll
2010-01-10 16:21:27 —-AC—- D:WIN01system32acctres.dll
2010-01-10 16:21:22 —-DC—- D:WIN01srchasst
2010-01-10 16:21:21 —-DC—- D:WIN01system32Macromed
2010-01-10 16:21:21 —-AC—- D:WIN01system32wuweb.dll
2010-01-10 16:21:20 —-AC—- D:WIN01system32wups.dll
2010-01-10 16:21:20 —-AC—- D:WIN01system32wucltui.dll
2010-01-10 16:21:20 —-AC—- D:WIN01system32wuauserv.dll
2010-01-10 16:21:20 —-AC—- D:WIN01system32wuaueng1.dll
2010-01-10 16:21:20 —-AC—- D:WIN01system32wuaueng.dll
2010-01-10 16:21:20 —-AC—- D:WIN01system32wuauclt1.exe
2010-01-10 16:21:20 —-AC—- D:WIN01system32wuauclt.exe
2010-01-10 16:21:19 —-AC—- D:WIN01system32wuapi.dll
2010-01-10 16:21:19 —-AC—- D:WIN01system32qmgrprxy.dll
2010-01-10 16:21:19 —-AC—- D:WIN01system32qmgr.dll
2010-01-10 16:21:19 —-AC—- D:WIN01system32bitsprx3.dll
2010-01-10 16:21:19 —-AC—- D:WIN01system32bitsprx2.dll
2010-01-10 16:21:15 —-AC—- D:WIN01system32safrslv.dll
2010-01-10 16:21:15 —-AC—- D:WIN01system32safrdm.dll
2010-01-10 16:21:15 —-AC—- D:WIN01system32safrcdlg.dll
2010-01-10 16:21:15 —-AC—- D:WIN01system32racpldlg.dll
2010-01-10 16:21:10 —-DC—- D:WIN01system32Restore
2010-01-10 16:21:10 —-AC—- D:WIN01system32srsvc.dll
2010-01-10 16:21:10 —-AC—- D:WIN01system32srrstr.dll
2010-01-10 16:21:10 —-AC—- D:WIN01system32fltMc.exe
2010-01-10 16:21:10 —-AC—- D:WIN01system32fltlib.dll
2010-01-10 16:21:09 —-AC—- D:WIN01system32srclient.dll
2010-01-10 16:21:09 —-AC—- D:WIN01system32mnmdd.dll
2010-01-10 16:21:09 —-AC—- D:WIN01system32isrdbg32.dll
2010-01-10 16:21:09 —-AC—- D:WIN01system32ils.dll
2010-01-10 16:21:08 —-AC—- D:WIN01system32nmmkcert.dll
2010-01-10 16:21:08 —-AC—- D:WIN01system32msoert2.dll
2010-01-10 16:21:08 —-AC—- D:WIN01system32msoeacct.dll
2010-01-10 16:21:08 —-AC—- D:WIN01system32msconf.dll
2010-01-10 16:21:08 —-AC—- D:WIN01system32mnmsrvc.exe
2010-01-10 16:21:08 —-AC—- D:WIN01system32inetres.dll
2010-01-10 16:21:07 —-AC—- D:WIN01system32inetcomm.dll
2010-01-10 16:21:06 —-AC—- D:WIN01system32schedsvc.dll
2010-01-10 16:21:06 —-AC—- D:WIN01system32mstinit.exe
2010-01-10 16:21:06 —-AC—- D:WIN01system32mstask.dll
2010-01-10 16:21:05 —-AC—- D:WIN01system32isign32.dll
2010-01-10 16:21:05 —-AC—- D:WIN01system32inetcfg.dll
2010-01-10 16:21:05 —-AC—- D:WIN01system32icwphbk.dll
2010-01-10 16:21:05 —-AC—- D:WIN01system32icwdial.dll
2010-01-10 16:20:01 —-AC—- D:WIN01vbaddin.ini
2010-01-10 16:20:01 —-AC—- D:WIN01vb.ini
2010-01-10 16:19:51 —-DC—- D:WIN01Registration
2010-01-10 16:19:26 —-AC—- D:WIN01system32write.exe
2010-01-10 16:19:21 —-AC—- D:WIN01system32sndvol32.exe
2010-01-10 16:19:20 —-AC—- D:WIN01system32winchat.exe
2010-01-10 16:19:20 —-AC—- D:WIN01system32hticons.dll
2010-01-10 16:19:20 —-AC—- D:WIN01system32avwav.dll
2010-01-10 16:19:20 —-AC—- D:WIN01system32avtapi.dll
2010-01-10 16:19:20 —-AC—- D:WIN01system32avmeter.dll
2010-01-10 16:19:13 —-AC—- D:WIN01system32sol.exe
2010-01-10 16:19:13 —-AC—- D:WIN01system32getuname.dll
2010-01-10 16:19:13 —-AC—- D:WIN01system32charmap.exe
2010-01-10 16:19:13 —-AC—- D:WIN01system32calc.exe
2010-01-10 16:19:12 —-AC—- D:WIN01system32winmine.exe
2010-01-10 16:19:12 —-AC—- D:WIN01system32usrlogon.cmd
2010-01-10 16:19:12 —-AC—- D:WIN01system32tskill.exe
2010-01-10 16:19:12 —-AC—- D:WIN01system32reset.exe
2010-01-10 16:19:12 —-AC—- D:WIN01system32mshearts.exe
2010-01-10 16:19:12 —-AC—- D:WIN01system32freecell.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32tsshutdn.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32tslabels.ini
2010-01-10 16:19:11 —-AC—- D:WIN01system32tsdiscon.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32tscon.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32shadow.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32rwinsta.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32regini.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32rdpcfgex.dll
2010-01-10 16:19:11 —-AC—- D:WIN01system32qwinsta.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32qappsrv.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32msg.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32logoff.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32cdmodem.dll
2010-01-10 16:19:10 —-AC—- D:WIN01system32mtxlegih.dll
2010-01-10 16:19:10 —-AC—- D:WIN01system32mtxex.dll
2010-01-10 16:19:10 —-AC—- D:WIN01system32msdtcprf.ini
2010-01-10 16:19:10 —-AC—- D:WIN01system32dcomcnfg.exe
2010-01-10 16:19:09 —-AC—- D:WIN01system32stclient.dll
2010-01-10 16:19:09 —-AC—- D:WIN01system32mtxdm.dll
2010-01-10 16:19:09 —-AC—- D:WIN01system32comsnap.dll
2010-01-10 16:19:09 —-AC—- D:WIN01system32comrepl.dll
2010-01-10 16:19:09 —-AC—- D:WIN01system32comaddin.dll
2010-01-10 16:19:04 —-AC—- D:WIN01system32wmimgmt.msc
2010-01-10 16:19:03 —-AC—- D:WIN01system32accwiz.exe
2010-01-10 16:19:02 —-AC—- D:WIN01system32sndrec32.exe
2010-01-10 16:19:02 —-AC—- D:WIN01system32mspaint.exe
2010-01-10 16:19:02 —-AC—- D:WIN01system32mplay32.exe
2010-01-10 16:19:02 —-AC—- D:WIN01system32hypertrm.dll
2010-01-10 16:19:02 —-AC—- D:WIN01system32clipbrd.exe
2010-01-10 16:19:01 —-AC—- D:WIN01system32tscfgwmi.dll
2010-01-10 16:19:01 —-AC—- D:WIN01system32spider.exe
2010-01-10 16:19:00 —-AC—- D:WIN01system32sessmgr.exe
2010-01-10 16:19:00 —-AC—- D:WIN01system32remotepg.dll
2010-01-10 16:19:00 —-AC—- D:WIN01system32rdshost.exe
2010-01-10 16:19:00 —-AC—- D:WIN01system32rdsaddin.exe
2010-01-10 16:19:00 —-AC—- D:WIN01system32rdchost.dll
2010-01-10 16:19:00 —-AC—- D:WIN01system32mstscax.dll
2010-01-10 16:19:00 —-AC—- D:WIN01system32mstsc.exe
2010-01-10 16:18:59 —-AC—- D:WIN01system32tscupgrd.exe
2010-01-10 16:18:59 —-AC—- D:WIN01system32termsrv.dll
2010-01-10 16:18:59 —-AC—- D:WIN01system32rdpwsx.dll
2010-01-10 16:18:59 —-AC—- D:WIN01system32rdpsnd.dll
2010-01-10 16:18:59 —-AC—- D:WIN01system32rdpclip.exe
2010-01-10 16:18:59 —-AC—- D:WIN01system32qprocess.exe
2010-01-10 16:18:59 —-AC—- D:WIN01system32icaapi.dll
2010-01-10 16:18:59 —-AC—- D:WIN01system32cfgbkend.dll
2010-01-10 16:18:58 —-DC—- D:WIN01system32MsDtc
2010-01-10 16:18:58 —-AC—- D:WIN01system32mtxoci.dll
2010-01-10 16:18:58 —-AC—- D:WIN01system32msdtcuiu.dll
2010-01-10 16:18:58 —-AC—- D:WIN01system32msdtctm.dll
2010-01-10 16:18:58 —-AC—- D:WIN01system32msdtcprx.dll
2010-01-10 16:18:57 —-AC—- D:WIN01system32xolehlp.dll
2010-01-10 16:18:57 —-AC—- D:WIN01system32msdtclog.dll
2010-01-10 16:18:57 —-AC—- D:WIN01system32msdtc.exe
2010-01-10 16:18:56 —-DC—- D:WIN01system32Com
2010-01-10 16:18:56 —-AC—- D:WIN01system32colbact.dll
2010-01-10 16:18:56 —-AC—- D:WIN01system32clbcatex.dll
2010-01-10 16:18:56 —-AC—- D:WIN01system32catsrvut.dll
2010-01-10 16:18:56 —-AC—- D:WIN01system32catsrvps.dll
2010-01-10 16:18:56 —-AC—- D:WIN01system32catsrv.dll
2010-01-10 16:18:55 —-AC—- D:WIN01system32comuid.dll
2010-01-10 16:18:55 —-AC—- D:WIN01system32comsvcs.dll
2010-01-10 16:18:54 —-AC—- D:WIN01system32clbcatq.dll
2010-01-10 16:18:48 —-AC—- D:WIN01system32servdeps.dll
2010-01-10 16:18:47 —-AC—- D:WIN01system32mmfutil.dll
2010-01-10 16:18:47 —-AC—- D:WIN01system32licwmi.dll
2010-01-10 16:18:47 —-AC—- D:WIN01system32cmprops.dll
2010-01-02 18:22:49 —-DC—- D:торренты
2009-12-30 19:26:33 —-D—- D:Program FilesSims2_Emmanuelle
2009-12-30 19:21:59 —-RA—- D:Program Filessetup.EXE
2009-12-30 19:21:59 —-RA—- D:Program Filesautorun.exe
2009-12-30 19:21:55 —-RD—- D:Program FilesTools
2009-12-30 19:21:52 —-RD—- D:Program FilesSoundtrack
2009-12-30 19:20:48 —-RD—- D:Program FilesSetup

======List of files/folders modified in the last 1 months======

2010-01-14 20:40:51 —-D—- D:Program Filestrend micro
2010-01-14 20:28:44 —-D—- D:Program FilesMozilla Firefox
2010-01-13 22:53:09 —-D—- D:новые программы
2010-01-13 21:31:23 —-SHD—- D:System Volume Information
2010-01-12 20:27:13 —-RD—- D:Program Files
2010-01-11 20:40:12 —-D—- D:Program FilesuTorrent
2010-01-11 20:39:02 —-D—- D:EA Games
2010-01-11 20:30:26 —-D—- D:Documents and Settings
2010-01-11 20:16:29 —-D—- D:Program FilesK-Lite Codec Pack
2010-01-10 18:08:01 —-AC—- D:WIN01system.ini
2010-01-10 17:36:25 —-SHD—- D:RECYCLER
2010-01-10 16:59:45 —-D—- D:Program FilesRealtek
2010-01-10 16:24:26 —-AC—- D:WIN01win.ini
2010-01-10 16:21:07 —-D—- D:Program FilesOutlook Express
2010-01-10 16:21:02 —-D—- D:Program FilesInternet Explorer
2010-01-10 16:19:28 —-D—- D:Program FilesMessenger
2010-01-08 15:07:48 —-D—- D:Program FilesICQ6.5
2009-12-29 16:28:51 —-D—- D:Program FilesCommon Files
2009-12-26 20:57:47 —-RD—- D:Моя музыка
2009-12-15 18:36:03 —-D—- D:Program FilesThe Sims 2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 12593551;12593551; D:WIN01system32DRIVERS12593551.sys [2009-09-25 128016]
R1 intelppm;Драйвер Intel процессора; D:WIN01system32DRIVERSintelppm.sys [2003-08-18 40448]
R1 setup_9.0.0.722_13.01.2010_13-29(2)drv;setup_9.0.0.722_13.01.2010_13-29(2)drv; D:WIN01system32DRIVERS1259355.sys [2009-10-09 315408]
R3 AgereSoftModem;Agere Systems Soft Modem; D:WIN01system32DRIVERSAGRSM.sys [2006-08-30 1161152]
R3 AR5211;Atheros Wireless Network Adapter Service; D:WIN01system32DRIVERSar5211.sys [2007-07-26 547904]
R3 ati2mtag;ati2mtag; D:WIN01system32DRIVERSati2mtag.sys [2007-08-27 2372096]
R3 BTKRNL;Нумератор шины Bluetooth; D:WIN01system32DRIVERSbtkrnl.sys [2007-03-31 876384]
R3 CmBatt;Драйвер батареи с ACPI-управлением (Майкрософт); D:WIN01system32DRIVERSCmBatt.sys [2004-08-04 14080]
R3 DNSeFilter;DNSeFilter; D:WIN01system32driversSamsungEDS.sys [2007-09-19 29184]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; D:WIN01system32DRIVERSHDAudBus.sys [2005-01-07 138752]
R3 hidusb;Драйвер класса HID Microsoft; D:WIN01system32DRIVERShidusb.sys [2003-08-18 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); D:WIN01system32driversRtkHDAud.sys [2007-07-09 4449280]
R3 mouhid;Драйвер мыши HID; D:WIN01system32DRIVERSmouhid.sys [2003-08-18 12160]
R3 ndiscm;Motorola SURFboard USB Cable Modem Windows Driver; D:WIN01system32DRIVERSNetMotCM.sys [2004-09-29 15360]
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); D:WIN01system32DRIVERSusbccgp.sys [2003-08-18 31616]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; D:WIN01system32DRIVERSusbehci.sys [2003-08-18 26624]
R3 usbhub;USB2 концентратор; D:WIN01system32DRIVERSusbhub.sys [2003-08-18 57600]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; D:WIN01system32DRIVERSusbohci.sys [2003-08-18 17024]
R3 usbvideo;USB-видеоустройство (WDM); D:WIN01System32Driversusbvideo.sys [2004-08-04 78464]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; D:WIN01system32DRIVERSyk51x86.sys [2006-08-25 249856]
S3 CCDECODE;Closed Caption декодер; D:WIN01system32DRIVERSCCDECODE.sys [2004-08-04 17024]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; D:WIN01system32driversMSTEE.sys [2004-08-04 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; D:WIN01system32DRIVERSNABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft видео или ТВ подключение; D:WIN01system32DRIVERSNdisIP.sys [2004-08-04 10880]
S3 SLIP;BDA Slip De-Framer; D:WIN01system32DRIVERSSLIP.sys [2004-08-04 11136]
S3 streamip;BDA IPSink; D:WIN01system32DRIVERSStreamIP.sys [2004-08-04 15360]
S3 USBSTOR;Драйвер запоминающих устройств для USB; D:WIN01system32DRIVERSUSBSTOR.SYS [2004-08-03 26496]
S3 WSTCODEC;World Standard Teletext кодек; D:WIN01system32DRIVERSWSTCODEC.SYS [2004-08-04 19328]
S4 IntelIde;IntelIde; D:WIN01system32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; D:WIN01system32Ati2evxx.exe [2007-08-27 483328]
R2 btwdins;Bluetooth Service; D:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe [2007-04-01 273256]
S3 aspnet_state;ASP.NET State Service; D:WIN01Microsoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; D:WIN01Microsoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]

EOF
14 января, 2010 в 6:04 пп #27874
Аноним
Гость
- Темы:532
- Сообщений:1553
info.txt logfile of random’s system information tool 1.06 2010-01-14 20:40:57

======Uninstall list======

—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 D:WIN01INFPCHealth.inf
µTorrent—>»D:Program FilesuTorrentuTorrent.exe» /UNINSTALL
Adobe Flash Player 10 Plugin—>D:WIN01system32MacromedFlashuninstall_plugin.exe
Adobe Flash Player ActiveX—>D:WIN01system32MacromedFlashuninstall_activeX.exe
Agere Systems HDA Modem—>agrsmdel
Atheros WLAN Client—>D:Program FilesInstallShield Installation Information{F4F41D14-E0DD-4FB4-AA09-A14225C769BD}setup.exe -runfromtemp -l0x0019 -removeonly
ATI — Утилита деинсталляции—>D:Program FilesATI TechnologiesUninstallAllAtiCimUn.exe
ATI Catalyst Control Center—>RunDll32 D:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime91Intel32Ctor.dll,LaunchSetup «D:Program FilesInstallShield Installation Information{055EE59D-217B-43A7-ABFF-507B966405D8}setup.exe» -l0x0
ATI Display Driver—>rundll32 D:WIN01system32atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
High Definition Audio — KB888111—>»D:WIN01$NtUninstallKB888111WXPSP2$spuninstspuninst.exe»
HijackThis 2.0.2—>»D:Program Filestrend microHijackThis.exe» /uninstall
K-Lite Codec Pack 4.2.5 (Corporate)—>»D:Program FilesK-Lite Codec Packunins000.exe»
Microsoft .NET Framework 2.0—>D:WIN01Microsoft.NETFrameworkv2.0.50727Microsoft .NET Framework 2.0install.exe
Mozilla Firefox (3.5.7)—>D:Program FilesMozilla Firefoxuninstallhelper.exe
Realtek High Definition Audio Driver—>RunDll32 D:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «D:Program FilesInstallShield Installation Information{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}setup.exe» -l0x19 -removeonly
Samsung EDS—>MsiExec.exe /X{ABB14904-A11B-4F42-996C-80FD608A0F17}
WIDCOMM Bluetooth Software—>MsiExec.exe /X{84814E6B-2581-46EC-926A-823BD1C670F6}
Яндекс.Бар 4.3 для Internet Explorer—>MsiExec.exe /X{2B9C002D-F3C1-4F8A-B29A-7F9E9B473D4D}

======System event log======

Computer Name: 222-26655C1E3C7
Event Code: 60054
Message: Программа успешно установила Windows сборки 2600.
Record Number: 5
Source Name: Setup
Time Written: 20100110162806.000000+180
Event Type: информация
User:

Computer Name: 222-26655C1E3C7
Event Code: 15007
Message: Резервирование пространства имен URL с префиксом «http://*:2869/» было добавлено успешно.

Record Number: 4
Source Name: HTTP
Time Written: 20100110162225.000000+180
Event Type: информация
User:

Computer Name: 222-26655C1E3C7
Event Code: 6011
Message: NetBIOS-имя и имя DNS-узла этого компьютера были изменены с «MACHINENAME» на «222-26655C1E3C7».

Record Number: 3
Source Name: EventLog
Time Written: 20100110161724.000000+180
Event Type: информация
User:

Computer Name: MACHINENAME
Event Code: 6005
Message: Запущена служба журнала событий.

Record Number: 2
Source Name: EventLog
Time Written: 20100110180639.000000+180
Event Type: информация
User:

Computer Name: MACHINENAME
Event Code: 6009
Message: Microsoft (R) Windows 2000 (R) 5.01. 2600 Service Pack 2 Uniprocessor Free.

Record Number: 1
Source Name: EventLog
Time Written: 20100110180639.000000+180
Event Type: информация
User:

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;D:Program FilesATI TechnologiesATI.ACECore-Static
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=6
«PROCESSOR_IDENTIFIER»=x86 Family 6 Model 22 Stepping 1, GenuineIntel
«PROCESSOR_REVISION»=1601
«NUMBER_OF_PROCESSORS»=1
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP

EOF
15 января, 2010 в 7:39 пп #27872
Admin
Keymaster
- Темы:40
- Сообщений:5676
Здравствуйте, добро пожаловать на Spyware-ru форум.

Скачайте OTM by OldTimer кликнув по этой ссылке.
Запустите OTM и в большое поле ввода (заголовок этого поля выделен желтым цветом) скопируйте следующий текст.
```
:services

12593551

setup_9.0.0.722_13.01.2010_13-29(2)drv



:reg

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]

"synsql"=-



[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{dfaa535a-ff9c-11de-9f97-001aad5157a8}]

[-HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{dfaa535b-ff9c-11de-9f97-001aad5157a8}]



:Commands

[emptytemp]

[Reboot]
```
Проверьте вставленный скрипт, если слева перед директивами появились пробелы, то удалите их, скрипт должен выглядеть так же как в сообщении. Кликните по кнопке MoveIt!. В процессе работы возможна перезагрузка компьютера.
По-завершении работы программы должен будет показан лог. Если лог не будет показан, то его можно найти в папке C:_OTMMovedFiles.

Вставьте в ваше ответное сообщение содержимое этого лога. И приложите свежий RSIT лог.
15 января, 2010 в 9:04 пп #27873
Аноним
Гость
- Темы:532
- Сообщений:1553
All processes killed
========== SERVICES/DRIVERS ==========
Error: No service named 12593551 was found to stop!
No service named 12593551 was found to delete!
Error: No service named setup_9.0.0.722_13.01.2010_13-29(2)drv was found to stop!
No service named setup_9.0.0.722_13.01.2010_13-29(2)drv was found to delete!
========== REGISTRY ==========
Registry value HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun\synsql deleted successfully.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{dfaa535a-ff9c-11de-9f97-001aad5157a8} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{dfaa535a-ff9c-11de-9f97-001aad5157a8} not found.
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{dfaa535b-ff9c-11de-9f97-001aad5157a8} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{dfaa535b-ff9c-11de-9f97-001aad5157a8} not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: 111
->Temp folder emptied: 987837396 bytes
->Temporary Internet Files folder emptied: 8351568 bytes
->FireFox cache emptied: 84822574 bytes

User: All Users.WIN01

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User.WIN01
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User.WINDOWS
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService.NT AUTHORITY
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService.NT AUTHORITY.000
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService.NT AUTHORITY
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService.NT AUTHORITY.000
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 402 bytes

User: Noutbook

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2114294 bytes
%systemroot%System32 .tmp files removed: 5709 bytes
%systemroot%System32dllcache .tmp files removed: 0 bytes
%systemroot%System32drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 4 bytes
%systemroot%system32configsystemprofileLocal SettingsTemp folder emptied: 0 bytes
%systemroot%system32configsystemprofileLocal SettingsTemporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 1 033,00 mb

OTM by OldTimer — Version 3.1.5.0 log created on 01152010_234307

Files moved on Reboot…

Registry entries deleted on Reboot…
15 января, 2010 в 9:05 пп #27875
Аноним
Гость
- Темы:532
- Сообщений:1553
свежий лог

Logfile of random’s system information tool 1.06 (written by random/random)
Run by 111 at 2010-01-15 23:50:21
Microsoft Windows XP Professional Service Pack 2
System drive D: has 8 GB (9%) free of 94 GB
Total RAM: 766 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:50:34, on 15.01.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
D:WIN01System32smss.exe
D:WIN01system32winlogon.exe
D:WIN01system32services.exe
D:WIN01system32lsass.exe
D:WIN01system32Ati2evxx.exe
D:WIN01system32svchost.exe
D:WIN01System32svchost.exe
D:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe
D:WIN01system32Ati2evxx.exe
D:WIN01Explorer.EXE
D:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
D:Program FilesAlwil SoftwareAvast4ashServ.exe
D:WIN01system32spoolsv.exe
D:WIN01system32svchost.exe
D:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
D:WIN01system32wscntfy.exe
D:Program FilesAlwil SoftwareAvast4ashWebSv.exe
D:Program FilesATI TechnologiesATI.ACECore-StaticMOM.EXE
D:WIN01RTHDCPL.EXE
D:Program FilesSamsungSamsung EDSEDSAgent.exe
D:WIN01AGRSMMSG.exe
D:Program FilesWinampwinampa.exe
D:PROGRA~1ALWILS~1Avast4ashDisp.exe
D:WIN01system32ctfmon.exe
D:Program FilesMessengermsmsgs.exe
D:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe
D:Program FilesMicrosoft SQL Server80ToolsBinnsqlmangr.exe
D:Program FilesATI TechnologiesATI.ACECore-Staticccc.exe
D:Documents and Settings111Рабочий столVirus Removal Tool1setup_9.0.0.722_13.01.2010_13-29(2)setup_9.0.0.722_13.01.2010_13-29(2).exe
D:WIN01system32wuauclt.exe
D:Program FilesAlwil SoftwareAvast4setupavast.setup
D:WIN01system32wuauclt.exe
D:WIN01notepad.exe
D:Program FilesMozilla Firefoxfirefox.exe
D:Documents and Settings111Мои документыЗагрузкиRSIT.exe
D:Program FilesMozilla Firefoxfirefox.exe
D:Program Filestrend micro111.exe
D:Program FilesMozilla Firefoxfirefox.exe

R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.mail.ru/
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — D:Program FilesYandexYandexBarIEyndbar.dll
O4 — HKLM..Run: [StartCCC] D:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [EDS] D:Program FilesSamsungSamsung EDSEDSAgent.exe
O4 — HKLM..Run: [AGRSMMSG] AGRSMMSG.exe
O4 — HKLM..Run: [WinampAgent] «D:Program FilesWinampwinampa.exe»
O4 — HKLM..Run: [OutpostMonitor] D:PROGRA~1AgnitumOUTPOS~1op_mon.exe /tray /noservice
O4 — HKLM..Run: [OutpostFeedBack] «D:Program FilesAgnitumOutpost Firewall Profeedback.exe» /dump:os_startup
O4 — HKLM..Run: [avast!] D:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 — HKCU..Run: [CTFMON.EXE] D:WIN01system32ctfmon.exe
O4 — HKCU..Run: [MSMSGS] «D:Program FilesMessengermsmsgs.exe» /background
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] D:WIN01system32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] D:WIN01system32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] D:WIN01system32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] D:WIN01system32CTFMON.EXE (User ‘Default user’)
O4 — Startup: BTTray.lnk = ?
O4 — Startup: Microsoft Office.lnk = D:Program FilesMicrosoft OfficeOffice10OSA.EXE
O4 — Startup: Photags AutoDetect.lnk = D:Program FilesPhoTags ExpressPhotags AutoDetect.exe
O4 — Startup: Service Manager.lnk = D:Program FilesMicrosoft SQL Server80ToolsBinnsqlmangr.exe
O4 — Startup: setup_9.0.0.722_13.01.2010_13-29(2).lnk = ?
O4 — Startup: _uninst_setup_9.0.0.722_02.01.2010_11-09.exe.lnk = D:Documents and Settings111Local SettingsTemp_uninst_setup_9.0.0.722_02.01.2010_11-09.exe.bat
O8 — Extra context menu item: &Отправить на устройство Bluetooth… — D:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie_ctx.htm
O9 — Extra button: Быстрая настройка Outpost Firewall Pro — {44627E97-789B-40d4-B5C2-58BD171129A1} — D:Program FilesAgnitumOutpost Firewall Proie_bar.dll
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — D:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — D:Program FilesMessengermsmsgs.exe
O20 — AppInit_DLLs: d:progra~1agnitumoutpos~1wl_hook.dll
O23 — Service: Agnitum Client Security Service (acssrv) — Agnitum Ltd. — D:PROGRA~1AgnitumOUTPOS~1acs.exe
O23 — Service: avast! iAVS4 Control Service (aswUpdSv) — ALWIL Software — D:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — D:WIN01system32Ati2evxx.exe
O23 — Service: avast! Antivirus — ALWIL Software — D:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 — Service: avast! Mail Scanner — ALWIL Software — D:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 — Service: avast! Web Scanner — ALWIL Software — D:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 — Service: Bluetooth Service (btwdins) — Broadcom Corporation. — D:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — D:WIN01system32services.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — D:WIN01system32imapi.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — D:WIN01system32mnmsrvc.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — D:WIN01system32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — D:WIN01system32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — D:WIN01System32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — D:WIN01system32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — D:WIN01System32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — D:WIN01system32wbemwmiapsrv.exe

—
End of file — 6260 bytes

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — D:Program FilesYandexYandexBarIEyndbar.dll [2009-12-24 8729864]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«StartCCC»=D:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2006-11-10 90112]
«RTHDCPL»=D:WIN01RTHDCPL.EXE [2007-07-05 16380416]
«Alcmtr»=D:WIN01ALCMTR.EXE [2005-05-03 69632]
«»= []
«EDS»=D:Program FilesSamsungSamsung EDSEDSAgent.exe [2007-09-20 634880]
«AGRSMMSG»=D:WIN01AGRSMMSG.exe [2006-08-30 89542]
«WinampAgent»=D:Program FilesWinampwinampa.exe [2009-03-09 37888]
«OutpostMonitor»=D:PROGRA~1AgnitumOUTPOS~1op_mon.exe [2008-07-15 1153352]
«OutpostFeedBack»=D:Program FilesAgnitumOutpost Firewall Profeedback.exe [2008-07-15 435528]
«avast!»=D:PROGRA~1ALWILS~1Avast4ashDisp.exe [2009-11-25 81000]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=D:WIN01system32ctfmon.exe [2003-08-18 15360]
«MSMSGS»=D:Program FilesMessengermsmsgs.exe [2004-08-17 1667584]

D:новые программыАвтозагрузка
BTTray.lnk — D:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe
Microsoft Office.lnk — D:Program FilesMicrosoft OfficeOffice10OSA.EXE
Photags AutoDetect.lnk — D:Program FilesPhoTags ExpressPhotags AutoDetect.exe
Service Manager.lnk — D:Program FilesMicrosoft SQL Server80ToolsBinnsqlmangr.exe
setup_9.0.0.722_13.01.2010_13-29(2).lnk — D:Documents and Settings111Рабочий столVirus Removal Tool1setup_9.0.0.722_13.01.2010_13-29(2)startup.exe
_uninst_setup_9.0.0.722_02.01.2010_11-09.exe.lnk — D:Documents and Settings111Local SettingsTemp_uninst_setup_9.0.0.722_02.01.2010_11-09.exe.bat

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLS»=»d:progra~1agnitumoutpos~1wl_hook.dll»

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
D:WIN01system32Ati2evxx.dll [2007-08-27 118784]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«D:Program FilesuTorrentuTorrent.exe»=»D:Program FilesuTorrentuTorrent.exe:*:Enabled:µTorrent»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

======List of files/folders created in the last 1 months======

2010-01-15 23:43:09 —-DC—- D:_OTM
2010-01-15 23:35:18 —-A—- D:WIN01system32MSVCP71.dll
2010-01-15 23:35:18 —-A—- D:WIN01system32MFC71.dll
2010-01-15 23:35:18 —-A—- D:WIN01system32aswBoot.exe
2010-01-15 21:31:56 —-DC—- D:WIN01system32Filt
2010-01-15 21:31:56 —-D—- D:Program FilesAgnitum
2010-01-15 21:31:42 —-D—- D:Documents and SettingsAll Users.WIN01Application DataAgnitum
2010-01-14 20:37:40 —-DC—- D:rsit
2010-01-14 02:27:57 —-DC—- D:WIN01Minidump
2010-01-12 20:30:09 —-D—- D:Documents and Settings111Application DataLavasoft
2010-01-12 20:28:31 —-D—- D:Documents and Settings111Application DataICQ
2010-01-12 20:25:06 —-D—- D:Documents and Settings111Application DataWinamp
2010-01-12 20:11:43 —-D—- D:Documents and Settings111Application DataMacromedia
2010-01-12 20:11:43 —-D—- D:Documents and Settings111Application DataAdobe
2010-01-11 21:37:16 —-D—- D:Documents and Settings111Application DataWinRAR
2010-01-11 21:03:17 —-DC—- D:важное
2010-01-11 20:52:32 —-D—- D:фильмы
2010-01-11 20:42:05 —-D—- D:Documents and SettingsAll Users.WIN01Application DataYandex
2010-01-11 20:41:55 —-D—- D:Program FilesYandex
2010-01-11 20:41:55 —-D—- D:Documents and Settings111Application DataYandex
2010-01-11 20:41:55 —-D—- D:Documents and Settings111Application DataOpera
2010-01-11 20:41:55 —-D—- D:Documents and Settings111Application DataMozilla
2010-01-11 20:39:36 —-D—- D:Documents and Settings111Application DatauTorrent
2010-01-11 09:30:54 —-SHD—- D:found.000
2010-01-10 18:17:14 —-AC—- D:WIN01system32h323log.txt
2010-01-10 18:14:40 —-AC—- D:WIN01system32vfwwdm32.dll
2010-01-10 18:14:40 —-AC—- D:WIN01system32ksuser.dll
2010-01-10 18:13:10 —-AC—- D:WIN01system32usbui.dll
2010-01-10 18:08:07 —-SHDC—- D:WIN01Installer
2010-01-10 18:08:07 —-AC—- D:WIN01system32PerfStringBackup.INI
2010-01-10 18:08:05 —-AC—- D:WIN01ODBCINST.INI
2010-01-10 18:07:59 —-RAC—- D:WIN01system32kbdtuq.dll
2010-01-10 18:07:59 —-RAC—- D:WIN01system32kbdtuf.dll
2010-01-10 18:07:59 —-RAC—- D:WIN01system32kbdazel.dll
2010-01-10 18:07:57 —-RAC—- D:WIN01system32kbdhept.dll
2010-01-10 18:07:57 —-RAC—- D:WIN01system32kbdhela3.dll
2010-01-10 18:07:57 —-RAC—- D:WIN01system32kbdhela2.dll
2010-01-10 18:07:57 —-RAC—- D:WIN01system32kbdhe319.dll
2010-01-10 18:07:57 —-RAC—- D:WIN01system32kbdhe220.dll
2010-01-10 18:07:57 —-RAC—- D:WIN01system32kbdhe.dll
2010-01-10 18:07:57 —-RAC—- D:WIN01system32kbdgkl.dll
2010-01-10 18:07:56 —-RAC—- D:WIN01system32kbdlv1.dll
2010-01-10 18:07:56 —-RAC—- D:WIN01system32kbdlv.dll
2010-01-10 18:07:56 —-RAC—- D:WIN01system32kbdlt1.dll
2010-01-10 18:07:56 —-RAC—- D:WIN01system32kbdlt.dll
2010-01-10 18:07:56 —-RAC—- D:WIN01system32kbdest.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdycl.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdsl1.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdsl.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdro.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdpl1.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdpl.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdhu1.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdhu.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdcz2.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdcz1.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdcz.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32kbdcr.dll
2010-01-10 18:07:54 —-RAC—- D:WIN01system32KBDAL.DLL
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbdycc.dll
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbduzb.dll
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbdur.dll
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbdtat.dll
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbdmon.dll
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbdkyr.dll
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbdkaz.dll
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbdbu.dll
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbdblr.dll
2010-01-10 18:07:50 —-AC—- D:WIN01system32kbdaze.dll
2010-01-10 18:07:49 —-AC—- D:WIN01system32irclass.dll
2010-01-10 18:07:48 —-AC—- D:WIN01system32spxcoins.dll
2010-01-10 18:07:48 —-AC—- D:WIN01system32EqnClass.Dll
2010-01-10 18:07:48 —-AC—- D:WIN01system32dgsetup.dll
2010-01-10 18:07:48 —-AC—- D:WIN01system32dgrpsetu.dll
2010-01-10 18:07:46 —-AC—- D:WIN01TASKMAN.EXE
2010-01-10 18:07:45 —-AC—- D:WIN01system32batt.dll
2010-01-10 18:07:45 —-AC—- D:WIN01NOTEPAD.EXE
2010-01-10 18:07:44 —-AC—- D:WIN01system32storprop.dll
2010-01-10 18:07:30 —-ASH—- D:Documents and SettingsAll Users.WIN01Application Datadesktop.ini
2010-01-10 18:07:14 —-DC—- D:WIN01system32CatRoot2
2010-01-10 18:07:14 —-DC—- D:WIN01system32CatRoot
2010-01-10 18:07:08 —-SD—- D:Documents and SettingsAll Users.WIN01Application DataMicrosoft
2010-01-10 17:59:19 —-RSDC—- D:WIN01Fonts
2010-01-10 17:59:19 —-RDC—- D:WIN01Web
2010-01-10 17:59:19 —-HDC—- D:WIN01inf
2010-01-10 17:59:19 —-DC—- D:WIN01WinSxS
2010-01-10 17:59:19 —-DC—- D:WIN01twain_32
2010-01-10 17:59:19 —-DC—- D:WIN01Temp
2010-01-10 17:59:19 —-DC—- D:WIN01system32wins
2010-01-10 17:59:19 —-DC—- D:WIN01system32wbem
2010-01-10 17:59:19 —-DC—- D:WIN01system32usmt
2010-01-10 17:59:19 —-DC—- D:WIN01system32spool
2010-01-10 17:59:19 —-DC—- D:WIN01system32ShellExt
2010-01-10 17:59:19 —-DC—- D:WIN01system32Setup
2010-01-10 17:59:19 —-DC—- D:WIN01system32ras
2010-01-10 17:59:19 —-DC—- D:WIN01system32oobe
2010-01-10 17:59:19 —-DC—- D:WIN01system32npp
2010-01-10 17:59:19 —-DC—- D:WIN01system32mui
2010-01-10 17:59:19 —-DC—- D:WIN01system32inetsrv
2010-01-10 17:59:19 —-DC—- D:WIN01system32IME
2010-01-10 17:59:19 —-DC—- D:WIN01system32icsxml
2010-01-10 17:59:19 —-DC—- D:WIN01system32ias
2010-01-10 17:59:19 —-DC—- D:WIN01system32export
2010-01-10 17:59:19 —-DC—- D:WIN01system32drivers
2010-01-10 17:59:19 —-DC—- D:WIN01system32dllcache
2010-01-10 17:59:19 —-DC—- D:WIN01system32dhcp
2010-01-10 17:59:19 —-DC—- D:WIN01system32config
2010-01-10 17:59:19 —-DC—- D:WIN01system323com_dmi
2010-01-10 17:59:19 —-DC—- D:WIN01system323076
2010-01-10 17:59:19 —-DC—- D:WIN01system322052
2010-01-10 17:59:19 —-DC—- D:WIN01system321054
2010-01-10 17:59:19 —-DC—- D:WIN01system321049
2010-01-10 17:59:19 —-DC—- D:WIN01system321042
2010-01-10 17:59:19 —-DC—- D:WIN01system321041
2010-01-10 17:59:19 —-DC—- D:WIN01system321037
2010-01-10 17:59:19 —-DC—- D:WIN01system321033
2010-01-10 17:59:19 —-DC—- D:WIN01system321031
2010-01-10 17:59:19 —-DC—- D:WIN01system321028
2010-01-10 17:59:19 —-DC—- D:WIN01system321025
2010-01-10 17:59:19 —-DC—- D:WIN01system32
2010-01-10 17:59:19 —-DC—- D:WIN01system
2010-01-10 17:59:19 —-DC—- D:WIN01security
2010-01-10 17:59:19 —-DC—- D:WIN01Resources
2010-01-10 17:59:19 —-DC—- D:WIN01repair
2010-01-10 17:59:19 —-DC—- D:WIN01Provisioning
2010-01-10 17:59:19 —-DC—- D:WIN01PeerNet
2010-01-10 17:59:19 —-DC—- D:WIN01pchealth
2010-01-10 17:59:19 —-DC—- D:WIN01mui
2010-01-10 17:59:19 —-DC—- D:WIN01msapps
2010-01-10 17:59:19 —-DC—- D:WIN01msagent
2010-01-10 17:59:19 —-DC—- D:WIN01Media
2010-01-10 17:59:19 —-DC—- D:WIN01java
2010-01-10 17:59:19 —-DC—- D:WIN01ime
2010-01-10 17:59:19 —-DC—- D:WIN01Help
2010-01-10 17:59:19 —-DC—- D:WIN01ehome
2010-01-10 17:59:19 —-DC—- D:WIN01Driver Cache
2010-01-10 17:59:19 —-DC—- D:WIN01Debug
2010-01-10 17:59:19 —-DC—- D:WIN01Cursors
2010-01-10 17:59:19 —-DC—- D:WIN01Connection Wizard
2010-01-10 17:59:19 —-DC—- D:WIN01Config
2010-01-10 17:59:19 —-DC—- D:WIN01AppPatch
2010-01-10 17:59:19 —-DC—- D:WIN01addins
2010-01-10 17:59:19 —-DC—- D:WIN01
2010-01-10 17:53:42 —-D—- D:Documents and Settings111Application DataMedia Player Classic
2010-01-10 17:53:04 —-AC—- D:WIN01system32unrar.dll
2010-01-10 17:53:04 —-AC—- D:WIN01avisplitter.ini
2010-01-10 17:53:03 —-AC—- D:WIN01system32yv12vfw.dll
2010-01-10 17:53:03 —-AC—- D:WIN01system32xvidvfw.dll
2010-01-10 17:53:03 —-AC—- D:WIN01system32xvidcore.dll
2010-01-10 17:53:02 —-AC—- D:WIN01system32ff_vfw.dll.manifest
2010-01-10 17:53:02 —-AC—- D:WIN01system32ff_vfw.dll
2010-01-10 17:53:01 —-AC—- D:WIN01system32msvcr71.dll
2010-01-10 17:22:56 —-DC—- D:WIN01system32Lang
2010-01-10 17:07:12 —-D—- D:Documents and SettingsAll Users.WIN01Application DataWLAN
2010-01-10 17:07:11 —-D—- D:Documents and Settings111Application DataInstallShield
2010-01-10 17:00:57 —-AC—- D:WIN01system32ChCfg.exe
2010-01-10 17:00:39 —-DC—- D:WIN01system32RTCOM
2010-01-10 17:00:01 —-AC—- D:WIN01system32spupdsvc.exe
2010-01-10 17:00:00 —-HDC—- D:WIN01$NtUninstallKB888111WXPSP2$
2010-01-10 16:59:56 —-AC—- D:WIN01SoundMan.exe
2010-01-10 16:59:55 —-AC—- D:WIN01SkyTel.exe
2010-01-10 16:59:55 —-AC—- D:WIN01RtlUpd.exe
2010-01-10 16:59:53 —-AC—- D:WIN01RTLCPL.exe
2010-01-10 16:59:50 —-AC—- D:WIN01RTHDCPL.exe
2010-01-10 16:59:48 —-AC—- D:WIN01MicCal.exe
2010-01-10 16:59:45 —-AC—- D:WIN01alcwzrd.exe
2010-01-10 16:59:45 —-AC—- D:WIN01Alcmtr.exe
2010-01-10 16:59:38 —-AC—- D:WIN01RtlExUpd.dll
2010-01-10 16:59:38 —-AC—- D:WIN01HideWin.exe
2010-01-10 16:46:48 —-D—- D:Documents and SettingsAll Users.WIN01Application DataATI
2010-01-10 16:46:48 —-D—- D:Documents and Settings111Application DataATI
2010-01-10 16:36:52 —-RSDC—- D:WIN01assembly
2010-01-10 16:36:21 —-DC—- D:WIN01Microsoft.NET
2010-01-10 16:35:38 —-DC—- D:WIN01system32ReinstallBackups
2010-01-10 16:31:03 —-D—- D:Documents and Settings111Application DataIdentities
2010-01-10 16:30:50 —-ASH—- D:Documents and Settings111Application Datadesktop.ini
2010-01-10 16:30:49 —-SD—- D:Documents and Settings111Application DataMicrosoft
2010-01-10 16:30:04 —-DC—- D:WIN01SoftwareDistribution
2010-01-10 16:30:02 —-DC—- D:WIN01Prefetch
2010-01-10 16:30:01 —-SDC—- D:WIN01system32Microsoft
2010-01-10 16:30:01 —-AC—- D:WIN01SchedLgU.Txt
2010-01-10 16:24:57 —-DC—- D:WIN01system32xircom
2010-01-10 16:24:26 —-AC—- D:WIN01control.ini
2010-01-10 16:23:56 —-AC—- D:WIN01system32mapi32.dll
2010-01-10 16:22:47 —-SDC—- D:WIN01Downloaded Program Files
2010-01-10 16:22:47 —-RDC—- D:WIN01Offline Web Pages
2010-01-10 16:22:47 —-RAHC—- D:WIN01system32logonui.exe.manifest
2010-01-10 16:22:38 —-RAHC—- D:WIN01system32cdplayer.exe.manifest
2010-01-10 16:22:00 —-DC—- D:WIN01system32DirectX
2010-01-10 16:21:37 —-AC—- D:WIN01system32atrace.dll
2010-01-10 16:21:34 —-AC—- D:WIN01system32desktop.ini
2010-01-10 16:21:34 —-AC—- D:WIN01desktop.ini
2010-01-10 16:21:28 —-AC—- D:WIN01system32nmevtmsg.dll
2010-01-10 16:21:27 —-SDC—- D:WIN01Tasks
2010-01-10 16:21:27 —-AC—- D:WIN01system32icfgnt5.dll
2010-01-10 16:21:27 —-AC—- D:WIN01system32acctres.dll
2010-01-10 16:21:22 —-DC—- D:WIN01srchasst
2010-01-10 16:21:21 —-DC—- D:WIN01system32Macromed
2010-01-10 16:21:21 —-AC—- D:WIN01system32wuweb.dll
2010-01-10 16:21:20 —-AC—- D:WIN01system32wups.dll
2010-01-10 16:21:20 —-AC—- D:WIN01system32wucltui.dll
2010-01-10 16:21:20 —-AC—- D:WIN01system32wuauserv.dll
2010-01-10 16:21:20 —-AC—- D:WIN01system32wuaueng1.dll
2010-01-10 16:21:20 —-AC—- D:WIN01system32wuaueng.dll
2010-01-10 16:21:20 —-AC—- D:WIN01system32wuauclt1.exe
2010-01-10 16:21:20 —-AC—- D:WIN01system32wuauclt.exe
2010-01-10 16:21:19 —-AC—- D:WIN01system32wuapi.dll
2010-01-10 16:21:19 —-AC—- D:WIN01system32qmgrprxy.dll
2010-01-10 16:21:19 —-AC—- D:WIN01system32qmgr.dll
2010-01-10 16:21:19 —-AC—- D:WIN01system32bitsprx3.dll
2010-01-10 16:21:19 —-AC—- D:WIN01system32bitsprx2.dll
2010-01-10 16:21:15 —-AC—- D:WIN01system32safrslv.dll
2010-01-10 16:21:15 —-AC—- D:WIN01system32safrdm.dll
2010-01-10 16:21:15 —-AC—- D:WIN01system32safrcdlg.dll
2010-01-10 16:21:15 —-AC—- D:WIN01system32racpldlg.dll
2010-01-10 16:21:10 —-DC—- D:WIN01system32Restore
2010-01-10 16:21:10 —-AC—- D:WIN01system32srsvc.dll
2010-01-10 16:21:10 —-AC—- D:WIN01system32srrstr.dll
2010-01-10 16:21:10 —-AC—- D:WIN01system32fltMc.exe
2010-01-10 16:21:10 —-AC—- D:WIN01system32fltlib.dll
2010-01-10 16:21:09 —-AC—- D:WIN01system32srclient.dll
2010-01-10 16:21:09 —-AC—- D:WIN01system32mnmdd.dll
2010-01-10 16:21:09 —-AC—- D:WIN01system32isrdbg32.dll
2010-01-10 16:21:09 —-AC—- D:WIN01system32ils.dll
2010-01-10 16:21:08 —-AC—- D:WIN01system32nmmkcert.dll
2010-01-10 16:21:08 —-AC—- D:WIN01system32msoert2.dll
2010-01-10 16:21:08 —-AC—- D:WIN01system32msoeacct.dll
2010-01-10 16:21:08 —-AC—- D:WIN01system32msconf.dll
2010-01-10 16:21:08 —-AC—- D:WIN01system32mnmsrvc.exe
2010-01-10 16:21:08 —-AC—- D:WIN01system32inetres.dll
2010-01-10 16:21:07 —-AC—- D:WIN01system32inetcomm.dll
2010-01-10 16:21:06 —-AC—- D:WIN01system32schedsvc.dll
2010-01-10 16:21:06 —-AC—- D:WIN01system32mstinit.exe
2010-01-10 16:21:06 —-AC—- D:WIN01system32mstask.dll
2010-01-10 16:21:05 —-AC—- D:WIN01system32isign32.dll
2010-01-10 16:21:05 —-AC—- D:WIN01system32inetcfg.dll
2010-01-10 16:21:05 —-AC—- D:WIN01system32icwphbk.dll
2010-01-10 16:21:05 —-AC—- D:WIN01system32icwdial.dll
2010-01-10 16:20:01 —-AC—- D:WIN01vbaddin.ini
2010-01-10 16:20:01 —-AC—- D:WIN01vb.ini
2010-01-10 16:19:51 —-DC—- D:WIN01Registration
2010-01-10 16:19:26 —-AC—- D:WIN01system32write.exe
2010-01-10 16:19:21 —-AC—- D:WIN01system32sndvol32.exe
2010-01-10 16:19:20 —-AC—- D:WIN01system32winchat.exe
2010-01-10 16:19:20 —-AC—- D:WIN01system32hticons.dll
2010-01-10 16:19:20 —-AC—- D:WIN01system32avwav.dll
2010-01-10 16:19:20 —-AC—- D:WIN01system32avtapi.dll
2010-01-10 16:19:20 —-AC—- D:WIN01system32avmeter.dll
2010-01-10 16:19:13 —-AC—- D:WIN01system32sol.exe
2010-01-10 16:19:13 —-AC—- D:WIN01system32getuname.dll
2010-01-10 16:19:13 —-AC—- D:WIN01system32charmap.exe
2010-01-10 16:19:13 —-AC—- D:WIN01system32calc.exe
2010-01-10 16:19:12 —-AC—- D:WIN01system32winmine.exe
2010-01-10 16:19:12 —-AC—- D:WIN01system32usrlogon.cmd
2010-01-10 16:19:12 —-AC—- D:WIN01system32tskill.exe
2010-01-10 16:19:12 —-AC—- D:WIN01system32reset.exe
2010-01-10 16:19:12 —-AC—- D:WIN01system32mshearts.exe
2010-01-10 16:19:12 —-AC—- D:WIN01system32freecell.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32tsshutdn.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32tslabels.ini
2010-01-10 16:19:11 —-AC—- D:WIN01system32tsdiscon.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32tscon.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32shadow.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32rwinsta.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32regini.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32rdpcfgex.dll
2010-01-10 16:19:11 —-AC—- D:WIN01system32qwinsta.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32qappsrv.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32msg.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32logoff.exe
2010-01-10 16:19:11 —-AC—- D:WIN01system32cdmodem.dll
2010-01-10 16:19:10 —-AC—- D:WIN01system32mtxlegih.dll
2010-01-10 16:19:10 —-AC—- D:WIN01system32mtxex.dll
2010-01-10 16:19:10 —-AC—- D:WIN01system32msdtcprf.ini
2010-01-10 16:19:10 —-AC—- D:WIN01system32dcomcnfg.exe
2010-01-10 16:19:09 —-AC—- D:WIN01system32stclient.dll
2010-01-10 16:19:09 —-AC—- D:WIN01system32mtxdm.dll
2010-01-10 16:19:09 —-AC—- D:WIN01system32comsnap.dll
2010-01-10 16:19:09 —-AC—- D:WIN01system32comrepl.dll
2010-01-10 16:19:09 —-AC—- D:WIN01system32comaddin.dll
2010-01-10 16:19:04 —-AC—- D:WIN01system32wmimgmt.msc
2010-01-10 16:19:03 —-AC—- D:WIN01system32accwiz.exe
2010-01-10 16:19:02 —-AC—- D:WIN01system32sndrec32.exe
2010-01-10 16:19:02 —-AC—- D:WIN01system32mspaint.exe
2010-01-10 16:19:02 —-AC—- D:WIN01system32mplay32.exe
2010-01-10 16:19:02 —-AC—- D:WIN01system32hypertrm.dll
2010-01-10 16:19:02 —-AC—- D:WIN01system32clipbrd.exe
2010-01-10 16:19:01 —-AC—- D:WIN01system32tscfgwmi.dll
2010-01-10 16:19:01 —-AC—- D:WIN01system32spider.exe
2010-01-10 16:19:00 —-AC—- D:WIN01system32sessmgr.exe
2010-01-10 16:19:00 —-AC—- D:WIN01system32remotepg.dll
2010-01-10 16:19:00 —-AC—- D:WIN01system32rdshost.exe
2010-01-10 16:19:00 —-AC—- D:WIN01system32rdsaddin.exe
2010-01-10 16:19:00 —-AC—- D:WIN01system32rdchost.dll
2010-01-10 16:19:00 —-AC—- D:WIN01system32mstscax.dll
2010-01-10 16:19:00 —-AC—- D:WIN01system32mstsc.exe
2010-01-10 16:18:59 —-AC—- D:WIN01system32tscupgrd.exe
2010-01-10 16:18:59 —-AC—- D:WIN01system32termsrv.dll
2010-01-10 16:18:59 —-AC—- D:WIN01system32rdpwsx.dll
2010-01-10 16:18:59 —-AC—- D:WIN01system32rdpsnd.dll
2010-01-10 16:18:59 —-AC—- D:WIN01system32rdpclip.exe
2010-01-10 16:18:59 —-AC—- D:WIN01system32qprocess.exe
2010-01-10 16:18:59 —-AC—- D:WIN01system32icaapi.dll
2010-01-10 16:18:59 —-AC—- D:WIN01system32cfgbkend.dll
2010-01-10 16:18:58 —-DC—- D:WIN01system32MsDtc
2010-01-10 16:18:58 —-AC—- D:WIN01system32mtxoci.dll
2010-01-10 16:18:58 —-AC—- D:WIN01system32msdtcuiu.dll
2010-01-10 16:18:58 —-AC—- D:WIN01system32msdtctm.dll
2010-01-10 16:18:58 —-AC—- D:WIN01system32msdtcprx.dll
2010-01-10 16:18:57 —-AC—- D:WIN01system32xolehlp.dll
2010-01-10 16:18:57 —-AC—- D:WIN01system32msdtclog.dll
2010-01-10 16:18:57 —-AC—- D:WIN01system32msdtc.exe
2010-01-10 16:18:56 —-DC—- D:WIN01system32Com
2010-01-10 16:18:56 —-AC—- D:WIN01system32colbact.dll
2010-01-10 16:18:56 —-AC—- D:WIN01system32clbcatex.dll
2010-01-10 16:18:56 —-AC—- D:WIN01system32catsrvut.dll
2010-01-10 16:18:56 —-AC—- D:WIN01system32catsrvps.dll
2010-01-10 16:18:56 —-AC—- D:WIN01system32catsrv.dll
2010-01-10 16:18:55 —-AC—- D:WIN01system32comuid.dll
2010-01-10 16:18:55 —-AC—- D:WIN01system32comsvcs.dll
2010-01-10 16:18:54 —-AC—- D:WIN01system32clbcatq.dll
2010-01-10 16:18:48 —-AC—- D:WIN01system32servdeps.dll
2010-01-10 16:18:47 —-AC—- D:WIN01system32mmfutil.dll
2010-01-10 16:18:47 —-AC—- D:WIN01system32licwmi.dll
2010-01-10 16:18:47 —-AC—- D:WIN01system32cmprops.dll
2010-01-02 18:22:49 —-DC—- D:торренты
2009-12-30 19:26:33 —-D—- D:Program FilesSims2_Emmanuelle
2009-12-30 19:21:59 —-RA—- D:Program Filessetup.EXE
2009-12-30 19:21:59 —-RA—- D:Program Filesautorun.exe
2009-12-30 19:21:55 —-RD—- D:Program FilesTools
2009-12-30 19:21:52 —-RD—- D:Program FilesSoundtrack
2009-12-30 19:20:48 —-RD—- D:Program FilesSetup

======List of files/folders modified in the last 1 months======

2010-01-15 23:50:25 —-D—- D:Program Filestrend micro
2010-01-15 22:44:01 —-D—- D:Program FilesMozilla Firefox
2010-01-15 22:23:16 —-D—- D:новые программы
2010-01-15 21:31:56 —-RD—- D:Program Files
2010-01-13 21:31:23 —-SHD—- D:System Volume Information
2010-01-11 20:40:12 —-D—- D:Program FilesuTorrent
2010-01-11 20:39:02 —-D—- D:EA Games
2010-01-11 20:30:26 —-D—- D:Documents and Settings
2010-01-11 20:16:29 —-D—- D:Program FilesK-Lite Codec Pack
2010-01-10 18:08:01 —-AC—- D:WIN01system.ini
2010-01-10 17:36:25 —-SHD—- D:RECYCLER
2010-01-10 16:59:45 —-D—- D:Program FilesRealtek
2010-01-10 16:24:26 —-AC—- D:WIN01win.ini
2010-01-10 16:21:07 —-D—- D:Program FilesOutlook Express
2010-01-10 16:21:02 —-D—- D:Program FilesInternet Explorer
2010-01-10 16:19:28 —-D—- D:Program FilesMessenger
2010-01-08 15:07:48 —-D—- D:Program FilesICQ6.5
2009-12-29 16:28:51 —-D—- D:Program FilesCommon Files
2009-12-26 20:57:47 —-RD—- D:Моя музыка

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 12593551;12593551; D:WIN01system32DRIVERS12593551.sys [2009-09-25 128016]
R1 Aavmker4;avast! Asynchronous Virus Monitor; D:WIN01system32driversAavmker4.sys [2009-11-25 27408]
R1 aswSP;avast! Self Protection; D:WIN01system32driversaswSP.sys [2009-11-25 114768]
R1 aswTdi;avast! Network Shield Support; D:WIN01system32driversaswTdi.sys [2009-11-25 48560]
R1 intelppm;Драйвер Intel процессора; D:WIN01system32DRIVERSintelppm.sys [2003-08-18 40448]
R1 SandBox;SandBox; D:WIN01system32DRIVERSSandBox.sys [2008-07-11 673920]
R1 setup_9.0.0.722_13.01.2010_13-29(2)drv;setup_9.0.0.722_13.01.2010_13-29(2)drv; D:WIN01system32DRIVERS1259355.sys [2009-10-09 315408]
R2 aswFsBlk;aswFsBlk; D:WIN01system32DRIVERSaswFsBlk.sys [2009-11-25 20560]
R2 aswMon2;avast! Standard Shield Support; D:WIN01system32driversaswMon2.sys [2009-11-25 94160]
R3 afw;Agnitum firewall driver; D:WIN01system32DRIVERSafw.sys [2008-06-30 30864]
R3 afwcore;afwcore; D:WIN01system32driversafwcore.sys [2008-06-30 234640]
R3 AgereSoftModem;Agere Systems Soft Modem; D:WIN01system32DRIVERSAGRSM.sys [2006-08-30 1161152]
R3 AR5211;Atheros Wireless Network Adapter Service; D:WIN01system32DRIVERSar5211.sys [2007-07-26 547904]
R3 ASWFilt;ASWFilt; D:WIN01system32FiltASWFilt.dll [2008-07-11 33408]
R3 aswRdr;aswRdr; D:WIN01system32driversaswRdr.sys [2009-11-25 23120]
R3 ati2mtag;ati2mtag; D:WIN01system32DRIVERSati2mtag.sys [2007-08-27 2372096]
R3 BTKRNL;Нумератор шины Bluetooth; D:WIN01system32DRIVERSbtkrnl.sys [2007-03-31 876384]
R3 CmBatt;Драйвер батареи с ACPI-управлением (Майкрософт); D:WIN01system32DRIVERSCmBatt.sys [2004-08-04 14080]
R3 DNSeFilter;DNSeFilter; D:WIN01system32driversSamsungEDS.sys [2007-09-19 29184]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; D:WIN01system32DRIVERSHDAudBus.sys [2005-01-07 138752]
R3 hidusb;Драйвер класса HID Microsoft; D:WIN01system32DRIVERShidusb.sys [2003-08-18 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); D:WIN01system32driversRtkHDAud.sys [2007-07-09 4449280]
R3 mouhid;Драйвер мыши HID; D:WIN01system32DRIVERSmouhid.sys [2003-08-18 12160]
R3 ndiscm;Motorola SURFboard USB Cable Modem Windows Driver; D:WIN01system32DRIVERSNetMotCM.sys [2004-09-29 15360]
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); D:WIN01system32DRIVERSusbccgp.sys [2003-08-18 31616]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; D:WIN01system32DRIVERSusbehci.sys [2003-08-18 26624]
R3 usbhub;USB2 концентратор; D:WIN01system32DRIVERSusbhub.sys [2003-08-18 57600]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; D:WIN01system32DRIVERSusbohci.sys [2003-08-18 17024]
R3 USBSTOR;Драйвер запоминающих устройств для USB; D:WIN01system32DRIVERSUSBSTOR.SYS [2004-08-03 26496]
R3 usbvideo;USB-видеоустройство (WDM); D:WIN01System32Driversusbvideo.sys [2004-08-04 78464]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; D:WIN01system32DRIVERSyk51x86.sys [2006-08-25 249856]
S3 CCDECODE;Closed Caption декодер; D:WIN01system32DRIVERSCCDECODE.sys [2004-08-04 17024]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; D:WIN01system32driversMSTEE.sys [2004-08-04 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; D:WIN01system32DRIVERSNABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft видео или ТВ подключение; D:WIN01system32DRIVERSNdisIP.sys [2004-08-04 10880]
S3 SLIP;BDA Slip De-Framer; D:WIN01system32DRIVERSSLIP.sys [2004-08-04 11136]
S3 streamip;BDA IPSink; D:WIN01system32DRIVERSStreamIP.sys [2004-08-04 15360]
S3 WSTCODEC;World Standard Teletext кодек; D:WIN01system32DRIVERSWSTCODEC.SYS [2004-08-04 19328]
S4 IntelIde;IntelIde; D:WIN01system32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 acssrv;Agnitum Client Security Service; D:PROGRA~1AgnitumOUTPOS~1acs.exe [2008-07-15 1238344]
R2 aswUpdSv;avast! iAVS4 Control Service; D:Program FilesAlwil SoftwareAvast4aswUpdSv.exe [2009-11-25 18752]
R2 Ati HotKey Poller;Ati HotKey Poller; D:WIN01system32Ati2evxx.exe [2007-08-27 483328]
R2 avast! Antivirus;avast! Antivirus; D:Program FilesAlwil SoftwareAvast4ashServ.exe [2009-11-25 138680]
R2 btwdins;Bluetooth Service; D:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe [2007-04-01 273256]
R3 avast! Mail Scanner;avast! Mail Scanner; D:Program FilesAlwil SoftwareAvast4ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; D:Program FilesAlwil SoftwareAvast4ashWebSv.exe [2009-11-25 352920]
S3 aspnet_state;ASP.NET State Service; D:WIN01Microsoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; D:WIN01Microsoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]

EOF
16 января, 2010 в 12:55 пп #27876
Liberty
Participant
- Темы:0
- Сообщений:2
Logfile of random’s system information tool 1.06 (written by random/random)
Run by ххх at 2010-01-16 18:14:46
Microsoft® Windows Vista™ Home Premium
System drive C: has 7 GB (12%) free of 57 GB
Total RAM: 1023 MB (37% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:16:13, on 16.01.2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16945)
Boot mode: Normal

Running processes:
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Windowssystem32taskeng.exe
C:Program FilesWindows DefenderMSASCui.exe
C:Program FilesMotorolaSMSERIALsm56hlpr.exe
C:Program FilesNeroNero 7InCDInCD.exe
C:WindowsRtHDVCpl.exe
C:Program FilesCommon FilesSymantec SharedccApp.exe
C:Program FilesASUSATK MediaDMedia.exe
C:Program FilesApoint2KApoint.exe
C:Program FilesPowerForPhonePowerForPhone.exe
C:WindowsASScrPro.exe
C:Program FilesWinampwinampa.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.EXE
C:Program FilesNokiaNokia PC Suite 6LaunchApplication.exe
C:Program FilesWindows Sidebarsidebar.exe
C:Windowsehomeehtray.exe
C:Program FilesNokiaNokia PC Suite 6PcSync2.exe
C:Program FilesQIP.Onlineqiponline.exe
C:Program FilesSkypePhoneSkype.exe
C:Program FilesApoint2KApMsgFwd.exe
C:Program FilesElectronic ArtsEADMCore.exe
C:Program FilesWindows Media Playerwmpnscfg.exe
C:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe
C:Program FilesApoint2KHidFind.exe
C:Windowsehomeehmsas.exe
C:Program FilesApoint2KApvfb.exe
C:Program FilesApoint2KApntex.exe
C:Program FilesCommon FilesNokiaMPAPIMPAPI3s.exe
C:Program FilesASUSAsus MultiFrameMultiFrame.exe
C:Program FilesASUSASUS Live UpdateALU.exe
C:Program FilesSkypePlugin ManagerskypePM.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticCCC.exe
C:Program FilesOperaopera.exe
C:Windowssystem32wuauclt.exe
C:WindowsSystem32rstrui.exe
C:UsersхххDesktopRSIT.exe
C:Program Filestrend microххх.exe
C:Windowssystem32SearchFilterHost.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.asus.com
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.asus.com
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.asus.com
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.asus.com
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:Program FilesMail.RuAgentMradllnewmrasearch.dll
O1 — Hosts: ::1 localhost
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: (no name) — {1E8A6170-7264-4D0F-BEAE-D42A53123C75} — C:Program FilesCommon FilesSymantec SharedcoSharedBrowser1.5NppBho.dll
O2 — BHO: Burn4Free Toolbar Helper — {60BF5EE3-0105-4858-AD98-17C19F86B042} — C:Program FilesBurn4Free Toolbarv3.3.0.0Burn4Free_Toolbar.dll
O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O3 — Toolbar: Show Norton Toolbar — {90222687-F593-4738-B738-FBEE9C7B26DF} — C:Program FilesCommon FilesSymantec SharedcoSharedBrowser1.5UIBHO.dll
O3 — Toolbar: Burn4Free Toolbar — {55FAF0F2-44D4-425F-B5F5-6B275B621EAB} — C:Program FilesBurn4Free Toolbarv3.3.0.0Burn4Free_Toolbar.dll
O3 — Toolbar: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
O3 — Toolbar: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O4 — HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide
O4 — HKLM..Run: [SMSERIAL] C:Program FilesMotorolaSMSERIALsm56hlpr.exe
O4 — HKLM..Run: [NeroFilterCheck] C:Program FilesCommon FilesAheadLibNeroCheck.exe
O4 — HKLM..Run: [InCD] C:Program FilesNeroNero 7InCDInCD.exe
O4 — HKLM..Run: [StartCCC] C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe
O4 — HKLM..Run: [RtHDVCpl] RtHDVCpl.exe
O4 — HKLM..Run: [ccApp] «C:Program FilesCommon FilesSymantec SharedccApp.exe»
O4 — HKLM..Run: [ATKMEDIA] C:Program FilesASUSATK MediaDMEDIA.EXE
O4 — HKLM..Run: [Apoint] C:Program FilesApoint2KApoint.exe
O4 — HKLM..Run: [PowerForPhone] C:Program FilesPowerForPhonePowerForPhone.exe
O4 — HKLM..Run: [ASUS Screen Saver Protector] C:WindowsASScrPro.exe
O4 — HKLM..Run: [ASUS Camera ScreenSaver] C:WindowsASScrProlog.exe
O4 — HKLM..Run: [WinampAgent] C:Program FilesWinampwinampa.exe
O4 — HKLM..Run: [PCSuiteTrayApplication] C:PROGRA~1NokiaNOKIAP~1LAUNCH~1.EXE -startup
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe -LM
O4 — HKLM..Run: [Symantec PIF AlertEng] «C:Program FilesCommon FilesSymantec SharedPIF{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}PIFSvc.exe» /a /m «C:Program FilesCommon FilesSymantec SharedPIF{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}AlertEng.dll»
O4 — HKCU..Run: [Sidebar] C:Program FilesWindows Sidebarsidebar.exe /autoRun
O4 — HKCU..Run: [ehTray.exe] C:WindowsehomeehTray.exe
O4 — HKCU..Run: [PcSync] C:Program FilesNokiaNokia PC Suite 6PcSync2.exe /NoDialog
O4 — HKCU..Run: [QIP.Online] C:Program FilesQIP.Onlineqiponline.exe auto_start
O4 — HKCU..Run: [Skype] «C:Program FilesSkypePhoneSkype.exe» /nosplash /minimized
O4 — HKCU..Run: [RGSC] C:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe /silent
O4 — HKCU..Run: [EA Core] «C:Program FilesElectronic ArtsEADMCore.exe» -silent
O4 — HKCU..Run: [WMPNSCFG] C:Program FilesWindows Media PlayerWMPNSCFG.exe
O4 — HKUSS-1-5-19..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User ‘NETWORK SERVICE’)
O4 — Global Startup: Adobe Reader Speed Launch.lnk = C:Program FilesAdobeReader 8.0Readerreader_sl.exe
O4 — Global Startup: Adobe Reader Synchronizer.lnk = C:Program FilesAdobeReader 8.0ReaderAdobeCollabSync.exe
O4 — Global Startup: BTTray.lnk = ?
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O13 — Gopher Prefix:
O17 — HKLMSystemCCSServicesTcpip..{6AD79A4C-4201-4D87-9E94-0D0C2B315D09}: NameServer = 91.144.180.3 91.144.182.3
O17 — HKLMSystemCCSServicesTcpip..{9CD47663-642C-45AE-8400-F736A77E9BE9}: NameServer = 213.228.92.161
O17 — HKLMSystemCCSServicesTcpip..{EF7852CA-6FB9-47C9-ACF5-E0EE719FC4BD}: NameServer = 91.144.180.3 91.144.182.3
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O23 — Service: ADSM Service (ADSMService) — Unknown owner — C:Program FilesASUSASUS Data Security ManagerADSMSrv.exe
O23 — Service: ASLDR Service (ASLDRService) — Unknown owner — C:Program FilesATK HotkeyASLDRSrv.exe
O23 — Service: Ati External Event Utility — ATI Technologies Inc. — C:Windowssystem32Ati2evxx.exe
O23 — Service: ATKGFNEX Service (ATKGFNEXSrv) — Unknown owner — C:Program FilesATKGFNEXGFNEXSrv.exe
O23 — Service: Automatic LiveUpdate Scheduler — Symantec Corporation — C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe
O23 — Service: Symantec Event Manager (ccEvtMgr) — Symantec Corporation — C:Program FilesCommon FilesSymantec SharedccSvcHst.exe
O23 — Service: Symantec Settings Manager (ccSetMgr) — Symantec Corporation — C:Program FilesCommon FilesSymantec SharedccSvcHst.exe
O23 — Service: Symantec Lic NetConnect service (CLTNetCnService) — Symantec Corporation — C:Program FilesCommon FilesSymantec SharedccSvcHst.exe
O23 — Service: COM Host (comHost) — Symantec Corporation — C:Program FilesCommon FilesSymantec SharedVAScannercomHost.exe
O23 — Service: InCD Helper (InCDsrv) — Nero AG — C:Program FilesNeroNero 7InCDInCDsrv.exe
O23 — Service: Symantec IS Password Validation (ISPwdSvc) — Symantec Corporation — C:Program FilesNorton Internet SecurityisPwdSvc.exe
O23 — Service: LightScribeService Direct Disc Labeling Service (LightScribeService) — Hewlett-Packard Company — C:Program FilesCommon FilesLightScribeLSSrvc.exe
O23 — Service: LiveUpdate — Symantec Corporation — C:PROGRA~1SymantecLIVEUP~1LUCOMS~1.EXE
O23 — Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) — Symantec Corporation — C:Program FilesCommon FilesSymantec SharedccSvcHst.exe
O23 — Service: LiveUpdate Notice Service — Symantec Corporation — C:Program FilesCommon FilesSymantec SharedPIF{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}PIFSvc.exe
O23 — Service: NBService — Nero AG — C:Program FilesNeroNero 7Nero BackItUpNBService.exe
O23 — Service: ServiceLayer — Nokia. — C:Program FilesCommon FilesPCSuiteServicesServiceLayer.exe
O23 — Service: FrontLine Drivers Auto Removal (v2) (sfrem02) — Protection Technology (StarForce) — C:Windowssystem32sfrem02.exe
O23 — Service: spmgr — Unknown owner — C:Program FilesASUSNB ProbeSPMspmgr.exe
O23 — Service: Symantec Core LC — Symantec Corporation — C:Program FilesCommon FilesSymantec SharedCCPD-LCsymlcsvc.exe
O23 — Service: Symantec AppCore Service (SymAppCore) — Symantec Corporation — C:Program FilesCommon FilesSymantec SharedAppCoreAppSvc32.exe
O23 — Service: @%systemroot%system32SearchIndexer.exe,-103 (WSearch) — Корпорация Майкрософт — C:Windowssystem32SearchIndexer.exe

—
End of file — 10589 bytes

======Scheduled tasks folder======

C:WindowstasksNorton Internet Security — Run Full System Scan — ххх.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{1E8A6170-7264-4D0F-BEAE-D42A53123C75}]
C:Program FilesCommon FilesSymantec SharedcoSharedBrowser1.5NppBho.dll [2007-01-12 96936]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{60BF5EE3-0105-4858-AD98-17C19F86B042}]
Burn4Free Toolbar Helper — C:Program FilesBurn4Free Toolbarv3.3.0.0Burn4Free_Toolbar.dll [2008-08-02 827392]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2008-11-24 667336]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{90222687-F593-4738-B738-FBEE9C7B26DF} — Show Norton Toolbar — C:Program FilesCommon FilesSymantec SharedcoSharedBrowser1.5UIBHO.dll [2007-01-12 607888]
{55FAF0F2-44D4-425F-B5F5-6B275B621EAB} — Burn4Free Toolbar — C:Program FilesBurn4Free Toolbarv3.3.0.0Burn4Free_Toolbar.dll [2008-08-02 827392]
{855F3B16-6D32-4fe6-8A56-BBB695989046} — ICQToolBar — C:Program FilesICQ6ToolbarICQToolBar.dll [2008-06-12 958712]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2008-11-24 667336]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«Windows Defender»=C:Program FilesWindows DefenderMSASCui.exe [2007-07-31 1006264]
«SMSERIAL»=C:Program FilesMotorolaSMSERIALsm56hlpr.exe [2006-11-22 630784]
«NeroFilterCheck»=C:Program FilesCommon FilesAheadLibNeroCheck.exe [2007-03-26 161328]
«InCD»=C:Program FilesNeroNero 7InCDInCD.exe [2007-03-26 1057328]
«StartCCC»=C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2006-11-10 90112]
«RtHDVCpl»=C:WindowsRtHDVCpl.exe [2007-02-15 4390912]
«ccApp»=C:Program FilesCommon FilesSymantec SharedccApp.exe [2007-01-10 115816]
«ATKMEDIA»=C:Program FilesASUSATK MediaDMEDIA.EXE [2006-11-02 61440]
«Apoint»=C:Program FilesApoint2KApoint.exe [2006-09-12 155648]
«PowerForPhone»=C:Program FilesPowerForPhonePowerForPhone.exe [2007-06-26 778240]
«ASUS Screen Saver Protector»=C:WindowsASScrPro.exe [2007-07-31 33136]
«ASUS Camera ScreenSaver»=C:WindowsASScrProlog.exe [2007-07-31 37232]
«WinampAgent»=C:Program FilesWinampwinampa.exe [2003-12-13 33792]
«PCSuiteTrayApplication»=C:PROGRA~1NokiaNOKIAP~1LAUNCH~1.EXE [2006-06-15 229376]
«MAgent»=C:Program FilesMail.RuAgentMAgent.exe [2008-11-24 4412920]
«Symantec PIF AlertEng»=C:Program FilesCommon FilesSymantec SharedPIF{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}PIFSvc.exe [2008-01-29 583048]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«Sidebar»=C:Program FilesWindows Sidebarsidebar.exe [2008-11-25 1232896]
«ehTray.exe»=C:WindowsehomeehTray.exe [2006-11-02 125440]
«PcSync»=C:Program FilesNokiaNokia PC Suite 6PcSync2.exe [2006-06-27 1449984]
«QIP.Online»=C:Program FilesQIP.Onlineqiponline.exe [2009-10-26 3393024]
«Skype»=C:Program FilesSkypePhoneSkype.exe [2009-03-16 24095528]
«RGSC»=C:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe /silent []
«EA Core»=C:Program FilesElectronic ArtsEADMCore.exe [2009-03-29 3325952]
«WMPNSCFG»=C:Program FilesWindows Media PlayerWMPNSCFG.exe [2006-11-02 201728]

C:ProgramDataMicrosoftWindowsStart MenuProgramsStartup
Adobe Reader Speed Launch.lnk — C:Program FilesAdobeReader 8.0Readerreader_sl.exe
Adobe Reader Synchronizer.lnk — C:Program FilesAdobeReader 8.0ReaderAdobeCollabSync.exe
BTTray.lnk — C:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«EnableLUA»=0
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=149

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{0b79351e-e192-11de-87f3-001bfcfda02b}]
shellAutoRuncommand — F:usdeiect.com
shellexplorecommand — F:usdeiect.com
shellopencommand — F:usdeiect.com

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{976c6365-abd7-11dc-b318-001bfcfda02b}]
shellAutoRuncommand — WD_Windows_Toolssetup.exe

======List of files/folders created in the last 1 months======

2010-01-16 18:14:49 —-D—- C:Program Filestrend micro
2010-01-16 18:14:46 —-D—- C:rsit
2010-01-12 22:08:12 —-A—- C:avira_antivir_premium_ru.exe
2010-01-11 03:06:12 —-SHD—- C:Config.Msi
2010-01-10 08:13:51 —-A—- C:Windowssystem32tzres.dll
2010-01-08 08:19:58 —-A—- C:Windowssystem32nshhttp.dll
2010-01-08 08:19:51 —-A—- C:Windowssystem32httpapi.dll
2010-01-08 08:02:07 —-A—- C:Windowssystem32infocardapi.dll
2010-01-08 08:02:05 —-A—- C:Windowssystem32PresentationCFFRasterizerNative_v0300.dll
2010-01-08 08:02:02 —-A—- C:Windowssystem32PresentationHostProxy.dll
2010-01-08 08:02:02 —-A—- C:Windowssystem32icardres.dll
2010-01-08 08:02:02 —-A—- C:Windowssystem32icardagt.exe
2010-01-08 08:01:56 —-A—- C:Windowssystem32PresentationNative_v0300.dll
2010-01-08 08:01:50 —-A—- C:Windowssystem32PresentationHost.exe
2010-01-08 07:44:20 —-A—- C:Windowssystem32dfshim.dll
2010-01-08 07:44:15 —-A—- C:Windowssystem32mscoree.dll
2010-01-08 07:44:13 —-A—- C:Windowssystem32netfxperf.dll
2010-01-08 07:43:52 —-A—- C:Windowssystem32mscorier.dll
2010-01-08 07:43:41 —-A—- C:Windowssystem32mscories.dll
2010-01-08 07:37:23 —-A—- C:Windowssystem32d3dx10_42.dll
2010-01-08 07:37:20 —-A—- C:Windowssystem32D3DX9_42.dll
2010-01-07 19:19:57 —-A—- C:Windowssystem32gameux.dll
2010-01-07 19:19:57 —-A—- C:Windowssystem32Apphlpdm.dll
2010-01-07 19:19:54 —-A—- C:Windowssystem32GameUXLegacyGDFs.dll
2010-01-07 19:19:18 —-A—- C:Windowssystem32netiohlp.dll
2010-01-07 19:19:17 —-A—- C:Windowssystem32tcpipcfg.dll
2010-01-07 19:19:15 —-A—- C:Windowssystem32TCPSVCS.EXE
2010-01-07 19:19:15 —-A—- C:Windowssystem32ROUTE.EXE
2010-01-07 19:19:15 —-A—- C:Windowssystem32NETSTAT.EXE
2010-01-07 19:19:15 —-A—- C:Windowssystem32netiougc.exe
2010-01-07 19:19:15 —-A—- C:Windowssystem32MRINFO.EXE
2010-01-07 19:19:15 —-A—- C:Windowssystem32HOSTNAME.EXE
2010-01-07 19:19:15 —-A—- C:Windowssystem32finger.exe
2010-01-07 19:19:15 —-A—- C:Windowssystem32ARP.EXE
2010-01-07 19:19:14 —-A—- C:Windowssystem32netevent.dll
2010-01-07 19:17:45 —-A—- C:Windowssystem32wlansec.dll
2010-01-07 19:17:45 —-A—- C:Windowssystem32wlanmsm.dll
2010-01-07 19:17:45 —-A—- C:Windowssystem32L2SecHC.dll
2010-01-07 19:17:44 —-A—- C:Windowssystem32wlansvc.dll
2010-01-07 19:17:44 —-A—- C:Windowssystem32wlanhlp.dll
2010-01-07 19:17:44 —-A—- C:Windowssystem32wlanapi.dll
2010-01-07 19:16:29 —-A—- C:Windowssystem32msxml6.dll
2010-01-07 19:16:28 —-A—- C:Windowssystem32msxml6r.dll
2010-01-07 19:16:28 —-A—- C:Windowssystem32msxml3r.dll
2010-01-07 19:16:28 —-A—- C:Windowssystem32msxml3.dll
2010-01-07 19:16:20 —-A—- C:Windowssystem32msv1_0.dll
2010-01-07 19:16:19 —-A—- C:Windowssystem32wdigest.dll
2010-01-07 19:16:19 —-A—- C:Windowssystem32lsasrv.dll
2010-01-07 19:16:18 —-A—- C:Windowssystem32secur32.dll
2010-01-07 19:16:18 —-A—- C:Windowssystem32lsass.exe
2010-01-07 19:16:06 —-A—- C:Windowssystem32WMVCORE.DLL
2010-01-07 19:16:05 —-A—- C:Windowssystem32mf.dll
2010-01-07 19:16:04 —-A—- C:Windowssystem32rrinstaller.exe
2010-01-07 19:16:04 —-A—- C:Windowssystem32mfps.dll
2010-01-07 19:16:04 —-A—- C:Windowssystem32mfpmp.exe
2010-01-07 19:16:04 —-A—- C:Windowssystem32mferror.dll
2010-01-07 19:15:51 —-A—- C:Windowssystem32wkssvc.dll
2010-01-07 19:12:10 —-A—- C:Windowssystem32msasn1.dll
2010-01-07 19:11:53 —-A—- C:Windowssystem32wmpdxm.dll
2010-01-07 19:03:13 —-A—- C:Windowssystem32atl.dll
2010-01-07 19:02:59 —-A—- C:Windowssystem32ntoskrnl.exe
2010-01-07 19:02:58 —-A—- C:Windowssystem32ntkrnlpa.exe
2010-01-07 19:02:38 —-A—- C:Windowssystem32mshtml.dll
2010-01-07 19:02:36 —-A—- C:Windowssystem32wininet.dll
2010-01-07 19:02:35 —-A—- C:Windowssystem32urlmon.dll
2010-01-07 19:02:34 —-A—- C:Windowssystem32ieframe.dll
2010-01-07 19:02:30 —-A—- C:Windowssystem32mstime.dll
2010-01-07 19:02:29 —-A—- C:Windowssystem32iedkcs32.dll
2010-01-07 19:02:29 —-A—- C:Windowssystem32ieapfltr.dll
2010-01-07 19:02:28 —-A—- C:Windowssystem32occache.dll
2010-01-07 19:02:28 —-A—- C:Windowssystem32msfeeds.dll
2010-01-07 19:02:28 —-A—- C:Windowssystem32iertutil.dll
2010-01-07 19:02:28 —-A—- C:Windowssystem32dxtmsft.dll
2010-01-07 19:02:27 —-A—- C:Windowssystem32mshtmled.dll
2010-01-07 19:02:27 —-A—- C:Windowssystem32ieaksie.dll
2010-01-07 19:02:27 —-A—- C:Windowssystem32icardie.dll
2010-01-07 19:02:26 —-A—- C:Windowssystem32ieencode.dll
2010-01-07 19:02:26 —-A—- C:Windowssystem32dxtrans.dll
2010-01-07 19:02:25 —-A—- C:Windowssystem32jsproxy.dll
2010-01-07 19:02:25 —-A—- C:Windowssystem32admparse.dll
2010-01-07 19:02:24 —-A—- C:Windowssystem32ieui.dll
2010-01-07 19:02:24 —-A—- C:Windowssystem32iesetup.dll
2010-01-07 19:02:24 —-A—- C:Windowssystem32iernonce.dll
2010-01-07 19:02:24 —-A—- C:Windowssystem32advpack.dll
2010-01-07 19:02:23 —-A—- C:Windowssystem32pngfilt.dll
2010-01-07 19:02:23 —-A—- C:Windowssystem32ie4uinit.exe
2010-01-07 19:02:22 —-A—- C:Windowssystem32mshtmler.dll
2010-01-07 19:02:22 —-A—- C:Windowssystem32ieUnatt.exe
2010-01-07 19:02:22 —-A—- C:Windowssystem32ieakui.dll
2010-01-07 18:59:09 —-A—- C:Windowssystem32mstscax.dll
2010-01-07 18:59:08 —-A—- C:Windowssystem32tsgqec.dll
2010-01-07 18:59:08 —-A—- C:Windowssystem32aaclient.dll
2010-01-07 18:58:44 —-A—- C:Windowssystem32rastls.dll
2010-01-07 18:58:44 —-A—- C:Windowssystem32raschap.dll
2010-01-07 18:58:22 —-A—- C:Windowssystem32msvfw32.dll
2010-01-07 18:58:22 —-A—- C:Windowssystem32mciavi32.dll
2010-01-07 18:58:22 —-A—- C:Windowssystem32avifil32.dll
2010-01-07 18:58:22 —-A—- C:Windowssystem32avicap32.dll
2010-01-07 18:58:21 —-A—- C:Windowssystem32msvidc32.dll
2010-01-07 18:58:20 —-A—- C:Windowssystem32msrle32.dll
2010-01-07 18:58:12 —-A—- C:Windowssystem32jscript.dll
2010-01-07 18:57:45 —-A—- C:Windowssystem32EncDec.dll
2010-01-07 18:57:44 —-A—- C:Windowssystem32psisdecd.dll
2010-01-07 18:57:38 —-A—- C:Windowssystem32mcmde.dll
2010-01-07 02:34:52 —-A—- C:Windowssystem32WSDApi.dll
2010-01-07 02:32:21 —-A—- C:Windowssystem32WMSPDMOD.DLL
2010-01-07 02:24:46 —-N—- C:Windowssystem32MpSigStub.exe
2010-01-07 02:18:18 —-A—- C:Windowssystem32wmp.dll
2010-01-07 02:18:11 —-A—- C:Windowssystem32unregmp2.exe
2010-01-07 02:18:08 —-A—- C:Windowssystem32spwmp.dll
2010-01-07 02:18:06 —-A—- C:Windowssystem32dxmasf.dll
2010-01-07 02:18:04 —-A—- C:Windowssystem32wmploc.DLL
2010-01-06 13:46:26 —-A—- C:Windowssystem32wups2.dll
2010-01-06 13:46:26 —-A—- C:Windowssystem32wucltux.dll
2010-01-06 13:46:26 —-A—- C:Windowssystem32wuauclt.exe
2010-01-06 13:46:25 —-A—- C:Windowssystem32wuaueng.dll
2010-01-06 13:45:48 —-A—- C:Windowssystem32wups.dll
2010-01-06 13:45:47 —-A—- C:Windowssystem32wudriver.dll
2010-01-06 13:45:47 —-A—- C:Windowssystem32wuapi.dll
2010-01-06 13:45:07 —-A—- C:Windowssystem32wuwebv.dll
2010-01-06 13:45:06 —-A—- C:Windowssystem32wuapp.exe
2009-12-23 10:23:37 —-D—- C:ProgramDataElectronic Arts
2009-12-21 14:31:48 —-A—- C:Windowssystem32XAudio2_2.dll
2009-12-21 14:31:48 —-A—- C:Windowssystem32XAPOFX1_1.dll
2009-12-21 14:31:47 —-A—- C:Windowssystem32xactengine3_2.dll
2009-12-21 14:31:46 —-A—- C:Windowssystem32d3dx10_39.dll
2009-12-21 14:31:46 —-A—- C:Windowssystem32D3DCompiler_39.dll
2009-12-21 14:31:44 —-A—- C:Windowssystem32D3DX9_39.dll
2009-12-21 14:31:42 —-A—- C:Windowssystem32XAudio2_1.dll
2009-12-21 14:31:42 —-A—- C:Windowssystem32XAPOFX1_0.dll
2009-12-21 14:31:41 —-A—- C:Windowssystem32xactengine3_1.dll
2009-12-21 14:31:40 —-A—- C:Windowssystem32X3DAudio1_4.dll
2009-12-21 14:31:39 —-A—- C:Windowssystem32d3dx10_38.dll
2009-12-21 14:31:39 —-A—- C:Windowssystem32D3DCompiler_38.dll
2009-12-21 14:31:37 —-A—- C:Windowssystem32D3DX9_38.dll
2009-12-21 14:31:35 —-A—- C:Windowssystem32XAudio2_0.dll
2009-12-21 14:31:35 —-A—- C:Windowssystem32xactengine3_0.dll
2009-12-21 14:31:34 —-A—- C:Windowssystem32X3DAudio1_3.dll
2009-12-21 14:30:45 —-A—- C:Windowssystem32d3dx9_30.dll
2009-12-21 14:30:42 —-A—- C:Windowssystem32d3dx9_29.dll
2009-12-21 14:30:39 —-A—- C:Windowssystem32d3dx9_27.dll
2009-12-21 14:30:37 —-A—- C:Windowssystem32d3dx9_26.dll
2009-12-21 14:26:21 —-A—- C:Windowssystem32d3dx10_37.dll
2009-12-21 14:26:21 —-A—- C:Windowssystem32D3DCompiler_37.dll
2009-12-21 14:26:17 —-A—- C:Windowssystem32D3DX9_37.dll
2009-12-21 14:25:54 —-D—- C:Windowssystem32xlive
2009-12-21 14:25:48 —-D—- C:Program FilesMicrosoft Games for Windows — LIVE
2009-12-20 16:19:31 —-D—- C:Program FilesMicrosoft WSE
2009-12-20 15:56:30 —-D—- C:Program FilesElectronic Arts

======List of files/folders modified in the last 1 months======

2010-01-16 18:15:18 —-D—- C:WindowsPrefetch
2010-01-16 18:15:12 —-D—- C:WindowsTemp
2010-01-16 18:14:49 —-RD—- C:Program Files
2010-01-16 18:06:28 —-D—- C:UsersхххAppDataRoamingQIP.Online
2010-01-16 18:00:12 —-D—- C:UsersхххAppDataRoamingSkype
2010-01-16 16:01:55 —-D—- C:UsersхххAppDataRoamingskypePM
2010-01-16 14:48:29 —-A—- C:Windowswinamp.ini
2010-01-16 11:31:05 —-D—- C:Windowswinsxs
2010-01-16 11:30:48 —-SHD—- C:WindowsInstaller
2010-01-16 11:30:48 —-D—- C:ProgramDataMicrosoft Help
2010-01-16 11:28:37 —-D—- C:Windowssystem32catroot
2010-01-16 11:28:35 —-D—- C:Windowssystem32catroot2
2010-01-16 11:28:29 —-D—- C:Program FilesWindows Mail
2010-01-16 11:23:54 —-RSD—- C:Windowsassembly
2010-01-16 11:19:09 —-RSD—- C:WindowsFonts
2010-01-16 11:18:58 —-D—- C:Program FilesCommon Filesmicrosoft shared
2010-01-16 11:18:15 —-D—- C:Program FilesMicrosoft Works
2010-01-16 11:14:54 —-A—- C:Windowswin.ini
2010-01-16 11:14:53 —-D—- C:Program FilesCommon FilesSystem
2010-01-16 11:09:50 —-D—- C:WindowsSystem32
2010-01-16 11:06:29 —-SHD—- C:System Volume Information
2010-01-16 11:00:41 —-D—- C:Windowssystem32drivers
2010-01-15 19:50:10 —-A—- C:Windowssystem32PerfStringBackup.INI
2010-01-15 19:50:09 —-D—- C:Windowsinf
2010-01-13 11:23:30 —-D—- C:Games
2010-01-13 11:13:28 —-A—- C:WindowsNeroDigital.ini
2010-01-12 17:53:01 —-D—- C:Program FilesOpera
2010-01-12 10:45:18 —-A—- C:Windowssystem32acovcnt.exe
2010-01-11 11:21:28 —-D—- C:WindowsMicrosoft.NET
2010-01-11 11:01:12 —-D—- C:ProgramDataSkype
2010-01-11 10:52:28 —-D—- C:Windowssystem32ru-RU
2010-01-11 10:52:28 —-D—- C:Windowssystem32en-US
2010-01-11 10:52:26 —-D—- C:Windowssystem32migration
2010-01-11 10:52:19 —-D—- C:Program FilesInternet Explorer
2010-01-11 10:52:17 —-D—- C:WindowsAppPatch
2010-01-09 20:19:59 —-D—- C:Windows
2010-01-09 14:43:44 —-SD—- C:UsersхххAppDataRoamingMicrosoft
2010-01-09 12:14:53 —-D—- C:Program FilesMozilla Firefox
2010-01-09 10:38:38 —-D—- C:Windowssystem32WDI
2010-01-09 10:32:42 —-D—- C:Windowsehome
2010-01-09 10:32:29 —-D—- C:Windowssystem32XPSViewer
2010-01-09 10:32:29 —-D—- C:Windowssystem32wbem
2010-01-09 10:32:07 —-A—- C:Windowsntbtlog.txt
2010-01-07 17:36:29 —-SD—- C:WindowsDownloaded Program Files
2010-01-07 08:32:12 —-D—- C:Program FilesWindows Media Player
2010-01-07 00:03:28 —-D—- C:Program FilesQIP.Online
2010-01-05 03:17:46 —-A—- C:Windowssystem32mrt.exe
2010-01-03 15:20:51 —-HD—- C:Program FilesInstallShield Installation Information
2010-01-03 15:20:51 —-D—- C:Program FilesНовый Диск
2009-12-23 10:23:37 —-HD—- C:ProgramData
2009-12-21 14:53:51 —-D—- C:Program FilesRockstar Games
2009-12-20 16:19:48 —-D—- C:WindowsLogs

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 eeCtrl;Symantec Eraser Control driver; ??C:Program FilesCommon FilesSymantec SharedEENGINEeeCtrl.sys [2009-03-13 371248]
R1 IDSvix86;Symantec Intrusion Prevention Driver; ??C:PROGRA~2SymantecDEFINI~1SymcDataidsdefs20090325.001IDSvix86.sys [2009-02-10 272432]
R1 InCDPass;InCDPass; C:Windowssystem32driversInCDPass.sys [2007-03-26 37040]
R1 incdrm;InCD Reader; C:Windowssystem32driversInCDRm.sys [2007-03-26 39472]
R1 SPBBCDrv;SPBBCDrv; ??C:Program FilesCommon FilesSymantec SharedSPBBCSPBBCDrv.sys [2007-01-03 417592]
R1 SRTSPX;SRTSPX; C:WindowsSystem32DriversSRTSPX.SYS [2007-01-11 25400]
R1 SYMTDI;SYMTDI; C:WindowsSystem32DriversSYMTDI.SYS [2007-01-09 191544]
R2 ASMMAP;ASMMAP; ??C:Program FilesATKGFNEXASMMAP.sys [2007-02-05 11632]
R2 atksgt;atksgt; C:Windowssystem32DRIVERSatksgt.sys [2009-04-08 278728]
R2 lirsgt;lirsgt; C:Windowssystem32DRIVERSlirsgt.sys [2009-04-08 25416]
R2 rimmptsk;rimmptsk; C:Windowssystem32DRIVERSrimmptsk.sys [2007-02-24 39936]
R2 rimsptsk;rimsptsk; C:Windowssystem32DRIVERSrimsptsk.sys [2007-01-23 42496]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:Windowssystem32DRIVERSrixdptsk.sys [2007-03-21 37376]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:Windowssystem32DRIVERSApfiltr.sys [2006-08-30 140800]
R3 athr;Atheros Extensible Wireless LAN device driver; C:Windowssystem32DRIVERSathr.sys [2007-02-28 694784]
R3 atikmdag;atikmdag; C:Windowssystem32DRIVERSatikmdag.sys [2007-05-24 2609152]
R3 CmBatt;Драйвер батареи с ACPI-управлением (Microsoft); C:Windowssystem32DRIVERSCmBatt.sys [2008-11-25 14208]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; ??C:Program FilesCommon FilesSymantec SharedEENGINEEraserUtilRebootDrv.sys [2009-03-13 101936]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:Windowssystem32driversRTKVHDA.sys [2007-02-14 1740904]
R3 kbfiltr;Keyboard Filter; C:Windowssystem32DRIVERSkbfiltr.sys [2007-01-24 5632]
R3 MODEMCSA;Устройство фильтрации потока Unimodem; C:Windowssystem32driversMODEMCSA.sys [2006-11-02 18432]
R3 MTsensor;ATK0100 ACPI UTILITY; C:Windowssystem32DRIVERSATKACPI.sys [2006-12-14 7680]
R3 NAVENG;NAVENG; ??C:PROGRA~2SymantecDEFINI~1VIRUSD~120090404.003NAVENG.SYS [2009-03-13 89104]
R3 NAVEX15;NAVEX15; ??C:PROGRA~2SymantecDEFINI~1VIRUSD~120090404.003NAVEX15.SYS [2009-03-13 876144]
R3 RTL8169;Realtek 8169 NT Driver; C:Windowssystem32DRIVERSRtlh86.sys [2007-03-05 76288]
R3 sdbus;sdbus; C:Windowssystem32DRIVERSsdbus.sys [2007-07-31 82432]
R3 smserial;smserial; C:Windowssystem32DRIVERSsmserial.sys [2006-11-22 982272]
R3 SRTSP;SRTSP; C:WindowsSystem32DriversSRTSP.SYS [2007-01-11 247608]
R3 SYMDNS;SYMDNS; C:WindowsSystem32DriversSYMDNS.SYS [2007-01-09 12984]
R3 SymEvent;SymEvent; ??C:Windowssystem32DriversSYMEVENT.SYS [2007-07-31 115000]
R3 SYMFW;SYMFW; C:WindowsSystem32DriversSYMFW.SYS [2007-01-09 145976]
R3 SYMIDS;SYMIDS; C:WindowsSystem32DriversSYMIDS.SYS [2007-01-09 40120]
R3 SYMNDISV;SYMNDISV; C:WindowsSystem32DriversSYMNDISV.SYS [2007-01-09 38200]
R3 SYMREDRV;SYMREDRV; C:WindowsSystem32DriversSYMREDRV.SYS [2007-01-09 27576]
R4 InCDfs;InCD File System; C:Windowssystem32driversInCDFs.sys [2007-03-26 108592]
S2 ghaio;ghaio; ??C:Program FilesASUSNB ProbeSPMghaio.sys [2006-11-16 15216]
S3 BthEnum;Драйвер блока запроса Bluetooth; C:Windowssystem32DRIVERSBthEnum.sys [2008-11-25 19456]
S3 BthPan;Устройства Bluetooth (личной сети); C:Windowssystem32DRIVERSbthpan.sys [2006-11-02 92160]
S3 BTHPORT;Драйвер порта Bluetooth; C:WindowsSystem32DriversBTHport.sys [2008-11-25 220160]
S3 BTHUSB;Драйвер порта USB радиомодуля Bluetooth; C:WindowsSystem32DriversBTHUSB.sys [2008-11-25 29184]
S3 btwaudio;Аудиоустройствоi Bluetooth; C:Windowssystem32driversbtwaudio.sys [2007-08-08 80936]
S3 btwavdt;Bluetooth AVDT Service; C:Windowssystem32driversbtwavdt.sys [2007-08-08 98608]
S3 btwl2cap;Bluetooth L2CAP Service; C:Windowssystem32DRIVERSbtwl2cap.sys [2007-08-08 28464]
S3 btwrchid;btwrchid; C:Windowssystem32DRIVERSbtwrchid.sys [2007-08-08 17712]
S3 drmkaud;Звуковой дешифратор DRM ядра системы; C:Windowssystem32driversdrmkaud.sys [2006-11-02 5632]
S3 HdAudAddService;Драйвер функции UAA для службы High Definition Audio (Microsoft), версия 1.1; C:Windowssystem32driversHdAudio.sys [2006-11-02 235520]
S3 ialm;ialm; C:Windowssystem32DRIVERSigdkmd32.sys [2006-10-19 1380864]
S3 MSKSSRV;Представитель служб потоков Microsoft; C:Windowssystem32driversMSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Посредник синхронизации потоков Microsoft; C:Windowssystem32driversMSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Представитель диспетчера качества потоков Microsoft; C:Windowssystem32driversMSPQM.sys [2006-11-02 5504]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:Windowssystem32driversMSTEE.sys [2006-11-02 6016]
S3 NETw3v32;Драйвер адаптера беспроводной сети Intel(R) PRO/Wireless 3945ABG для 32-разрядной Windows Vista; C:Windowssystem32DRIVERSNETw3v32.sys [2006-11-02 1781760]
S3 RFCOMM;Устройство Bluetooth (протокол RFCOMM TDI); C:Windowssystem32DRIVERSrfcomm.sys [2006-11-02 49664]
S3 SRTSPL;SRTSPL; C:WindowsSystem32DriversSRTSPL.SYS [2007-01-11 276792]
S3 TPM;TPM; C:Windowssystem32driverstpm.sys [2006-11-02 41064]
S3 WpdUsb;WpdUsb; C:Windowssystem32DRIVERSwpdusb.sys [2006-11-02 39936]
S3 WUDFRd;WUDFRd; C:Windowssystem32DRIVERSWUDFRd.sys [2006-11-02 82560]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:Windowssystem32driverswmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ADSMService;ADSM Service; C:Program FilesASUSASUS Data Security ManagerADSMSrv.exe [2007-05-18 73728]
R2 ASLDRService;ASLDR Service; C:Program FilesATK HotkeyASLDRSrv.exe [2007-02-05 94208]
R2 Ati External Event Utility;Ati External Event Utility; C:Windowssystem32Ati2evxx.exe [2007-05-24 602112]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:Program FilesATKGFNEXGFNEXSrv.exe [2007-05-15 94208]
R2 Automatic LiveUpdate Scheduler;Automatic LiveUpdate Scheduler; C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe [2007-09-12 554352]
R2 BthServ;@%SystemRoot%System32bthserv.dll,-101; C:Windowssystem32svchost.exe [2006-11-02 22016]
R2 ccEvtMgr;Symantec Event Manager; C:Program FilesCommon FilesSymantec SharedccSvcHst.exe [2007-01-10 108648]
R2 ccSetMgr;Symantec Settings Manager; C:Program FilesCommon FilesSymantec SharedccSvcHst.exe [2007-01-10 108648]
R2 CLTNetCnService;Symantec Lic NetConnect service; C:Program FilesCommon FilesSymantec SharedccSvcHst.exe [2007-01-10 108648]
R2 InCDsrv;InCD Helper; C:Program FilesNeroNero 7InCDInCDsrv.exe [2007-03-26 864816]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:Program FilesCommon FilesLightScribeLSSrvc.exe [2007-01-17 61440]
R2 LiveUpdate Notice Ex;LiveUpdate Notice Service Ex; C:Program FilesCommon FilesSymantec SharedccSvcHst.exe [2007-01-10 108648]
R2 spmgr;spmgr; C:Program FilesASUSNB ProbeSPMspmgr.exe [2006-12-28 123248]
R2 SymAppCore;Symantec AppCore Service; C:Program FilesCommon FilesSymantec SharedAppCoreAppSvc32.exe [2007-01-05 47712]
R3 ServiceLayer;ServiceLayer; C:Program FilesCommon FilesPCSuiteServicesServiceLayer.exe [2006-06-05 174080]
R3 Symantec Core LC;Symantec Core LC; C:Program FilesCommon FilesSymantec SharedCCPD-LCsymlcsvc.exe [2007-07-31 1174664]
S2 LiveUpdate Notice Service;LiveUpdate Notice Service; C:Program FilesCommon FilesSymantec SharedPIF{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}PIFSvc.exe [2008-01-29 583048]
S2 sfrem02;FrontLine Drivers Auto Removal (v2); C:Windowssystem32sfrem02.exe [2006-05-11 358008]
S3 comHost;COM Host; C:Program FilesCommon FilesSymantec SharedVAScannercomHost.exe [2007-01-12 49248]
S3 ISPwdSvc;Symantec IS Password Validation; C:Program FilesNorton Internet SecurityisPwdSvc.exe [2007-01-14 80504]
S3 LiveUpdate;LiveUpdate; C:PROGRA~1SymantecLIVEUP~1LUCOMS~1.EXE [2007-09-12 2999664]
S3 NBService;NBService; C:Program FilesNeroNero 7Nero BackItUpNBService.exe [2007-03-26 779824]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S4 NMIndexingService;NMIndexingService; C:Program FilesCommon FilesAheadLibNMIndexingService.exe [2007-03-26 267824]

EOF
16 января, 2010 в 12:57 пп #27877
Liberty
Participant
- Темы:0
- Сообщений:2
info.txt logfile of random’s system information tool 1.06 2010-01-16 18:16:32

======Uninstall list======

—>C:Program FilesDivXDivXConverterUninstall.exe /CONVERTER
—>C:Program FilesNeroNero 7nerouninstallUNNERO.exe /UNINSTALL
—>C:WindowsNuNInst.exe /UNINSTALL
—>C:WindowsUNNeroBackItUp.exe /UNINSTALL
—>C:WindowsUNRecode.exe /UNINSTALL
—>MsiExec /X{82D8304F-73D7-4EE6-8472-D0684BAA2865}
1.2—>»C:GTA Бой с тенью 2unins000.exe»
2007 Microsoft Office system—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall PROHYBRIDR /dll OSETUP.DLL
Activation Assistant for the 2007 Microsoft Office suites—>»C:ProgramData{623D32E9-0C62-4453-AD44-98B31F52A5E1}Microsoft Office Activation Assistant.exe» REMOVE=TRUE MODIFY=FALSE
Adobe Acrobat 5.0—>C:WINDOWSISUNINST.EXE -f»C:Program FilesCommon FilesAdobeAcrobat 5.0NTUninst.isu» -c»C:Program FilesCommon FilesAdobeAcrobat 5.0NTUninst.dll»
Adobe Flash Player 10 ActiveX—>C:Windowssystem32MacromedFlashuninstall_activeX.exe
Adobe Flash Player 10 Plugin—>C:Windowssystem32MacromedFlashuninstall_plugin.exe
Adobe Reader 8—>MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A80000000002}
AGEIA PhysX v7.05.06—>MsiExec.exe /X{82D8304F-73D7-4EE6-8472-D0684BAA2865}
ALPS Touch Pad Driver—>C:Program FilesApoint2KUninstap.exe ADDREMOVE
ApexDC++ 1.2.0—>C:Program FilesApexDC++uninst.exe
AppCore—>MsiExec.exe /I{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}
ASUS Data Security Manager—>C:Program FilesInstallShield Installation Information{1C8521E5-5A7B-4A4E-A9CD-AD53116EAEE0}SETUP.exe -runfromtemp -l0x0019 -removeonly
ASUS InstantFun—>MsiExec.exe /I{57B15AD4-8C9D-4164-82BB-E33D8644E757}
ASUS Live Update—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}setup.exe» -l0x9
ASUS MultiFrame—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{9D48531D-2135-49FC-BC29-ACCDA5396A76}setup.EXE» -l0x9
ASUS Splendid Video Enhancement Technology—>C:Program FilesInstallShield Installation Information{C0FC1C14-4824-4A73-87A6-9E888C9C3102}SETUP.exe -runfromtemp -l0x0019 -removeonly
Asus_Camera_ScreenSaver—>»C:WindowsASUS Camera ScreenSaver Uninstaller.exe»
Atheros Driver Installation Program—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{28006915-2739-4EBE-B5E8-49B25D32EB33}SETUP.exe» -l0x19 -removeonly
ATK Generic Function Service—>C:Program FilesInstallShield Installation Information{D3D54F3E-C5C3-443D-978F-87A72E5616E8}SETUP.exe -runfromtemp -l0x0009 -removeonly
ATK Hotkey—>C:Program FilesInstallShield Installation Information{3912D529-02BC-4CA8-B5ED-0D0C20EB6003}SETUP.exe -runfromtemp -l0x0019 -removeonly
ATK Media—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{139B0FFA-187E-4BA1-BCA6-6B56B2B6AB8C}SETUP.EXE» -l0x9
ATKOSD2—>C:Program FilesInstallShield Installation Information{5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}SETUP.exe -runfromtemp -l0x0009 -removeonly
AV—>MsiExec.exe /I{F4DB525F-A986-4249-B98B-42A8066251CA}
Belief and Betrayal—>C:PROGRA~1BELIEF~1UNWISE.EXE C:PROGRA~1BELIEF~1INSTALL.LOG
Burn4Free CD and DVD—>»C:Program FilesBurn4Freeuninstall.exe»
Burn4Free Toolbar—>»C:WindowsBurn4Free_Toolbar_Uninstaller_-7170.exe» _?=C:Program FilesBurn4Free Toolbar
ccCommon—>MsiExec.exe /I{3CCAD2EF-CFF2-4637-82AA-AABF370282D3}
Codec 8.1 build 14—>»C:Program FilesCodecUninstallunins000.exe»
Combined Community Codec Pack 2007-07-22—>»C:Program FilesCombined Community Codec Packunins000.exe»
DivX Content Uploader—>C:Program FilesDivXDivXContentUploaderUninstall.exe /CUPLOADER
DivX Converter—>C:Program FilesDivXDivXConverterUninstall.exe /CONVERTER
DivX Player—>C:Program FilesDivXDivXPlayerUninstall.exe /PLAYER
DivX Web Player—>C:Program FilesDivXDivXWebPlayerUninstall.exe /PLUGIN
EA Download Manager—>C:Program FilesElectronic ArtsEADMUninstall.exe
ffdshow [rev 1512] [2007-10-07]—>»C:Program FilesK-Lite Codec Packffdshowunins000.exe»
GermaniX Transcoder LX v4.0—>»C:Program FilesGermaniX Transcoderunins000.exe»
HijackThis 2.0.2—>»C:Program Filestrend microHijackThis.exe» /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)—>C:Windowssystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=»»
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)—>C:Windowssystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=»»
ICQ Toolbar—>C:Program FilesICQ6ToolbarICQUnToolbar.exe
ICQ6.5—>»C:Program FilesInstallShield Installation Information{60DE4033-9503-48D1-A483-7846BD217CA9}setup.exe» -runfromtemp -l0x0009 -removeonly
K-Lite Mega Codec Pack 3.4.5—>»C:Program FilesK-Lite Codec Packunins000.exe»
LiveUpdate 3.2 (Symantec Corporation)—>»C:Program FilesSymantecLiveUpdateLSETUP.EXE» /U
LiveUpdate Notice (Symantec Corporation)—>MsiExec.exe /X{DBA4DB9D-EE51-4944-A419-98AB1F1249C8}
Mail.Ru Агент 5.2 (сборка 2405, для всех пользователей)—>C:Program FilesMail.RuAgentmagentsetup.exe -uninstalllm
Mail.Ru Спутник 2.0.1.31—>C:Program FilesMail.RuSputnikSputnikInstaller.exe -uninstall
Microsoft .NET Framework 3.5 Language Pack SP1 — rus—>MsiExec.exe /I{2744791F-4E7C-32F5-AB40-AEC6A6C86DBF}
Microsoft .NET Framework 3.5 SP1—>C:WindowsMicrosoft.NETFrameworkv3.5Microsoft .NET Framework 3.5 SP1setup.exe
Microsoft .NET Framework 3.5 SP1—>MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Games for Windows — LIVE Redistributable—>MsiExec.exe /X{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}
Microsoft Games for Windows — LIVE—>MsiExec.exe /X{A1C962E2-2426-49C6-A38B-9A07E40D607C}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-0015-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-0016-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-0018-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-0019-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001A-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001B-0419-0000-0000000FF1CE} /uninstall {DCB382C1-7F1B-42B2-9D47-EDC4262E832F}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-006E-0419-0000-0000000FF1CE} /uninstall {37317C49-30C4-412C-B0B9-D95090F330D8}
Microsoft Office 2007 Service Pack 2 (SP2)—>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office Access MUI (Russian) 2007—>MsiExec.exe /X{90120000-0015-0419-0000-0000000FF1CE}
Microsoft Office Excel 2007 Help Обновление (KB963678)—>msiexec /package {90120000-0016-0419-0000-0000000FF1CE} /uninstall {420938DB-BF97-4664-BE29-0C68B4802C00}
Microsoft Office Excel MUI (Russian) 2007—>MsiExec.exe /X{90120000-0016-0419-0000-0000000FF1CE}
Microsoft Office Outlook 2007 Help Обновление (KB963677)—>msiexec /package {90120000-001A-0419-0000-0000000FF1CE} /uninstall {E9D6C0F9-9879-4FC4-8E13-BF0D3953E0E6}
Microsoft Office Outlook MUI (Russian) 2007—>MsiExec.exe /X{90120000-001A-0419-0000-0000000FF1CE}
Microsoft Office Powerpoint 2007 Help Обновление (KB963669)—>msiexec /package {90120000-0018-0419-0000-0000000FF1CE} /uninstall {BD1C2AC7-63F3-4C75-8B44-DE3D700B3BC8}
Microsoft Office PowerPoint MUI (Russian) 2007—>MsiExec.exe /X{90120000-0018-0419-0000-0000000FF1CE}
Microsoft Office Professional Hybrid 2007—>MsiExec.exe /X{91120000-0031-0000-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007—>MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007—>MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Russian) 2007—>MsiExec.exe /X{90120000-001F-0419-0000-0000000FF1CE}
Microsoft Office Proof (Ukrainian) 2007—>MsiExec.exe /X{90120000-001F-0422-0000-0000000FF1CE}
Microsoft Office Proofing (Russian) 2007—>MsiExec.exe /X{90120000-002C-0419-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0419-0000-0000000FF1CE} /uninstall {57A92C5E-E76A-49CC-9EC2-A7B6CE1255EA}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)—>msiexec /package {90120000-001F-0422-0000-0000000FF1CE} /uninstall {6F177D09-F21D-4F50-9436-353972D1D232}
Microsoft Office Publisher MUI (Russian) 2007—>MsiExec.exe /X{90120000-0019-0419-0000-0000000FF1CE}
Microsoft Office Shared MUI (Russian) 2007—>MsiExec.exe /X{90120000-006E-0419-0000-0000000FF1CE}
Microsoft Office Word 2007 Help Обновление (KB963665)—>msiexec /package {90120000-001B-0419-0000-0000000FF1CE} /uninstall {D3A002FB-0F62-4840-80AD-2D2C63F83449}
Microsoft Office Word MUI (Russian) 2007—>MsiExec.exe /X{90120000-001B-0419-0000-0000000FF1CE}
Microsoft Visual C++ 2005 ATL Update kb973923 — x86 8.0.50727.4053—>MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft WSE 3.0 Runtime—>MsiExec.exe /X{E3E71D07-CD27-46CB-8448-16D4FB29AA13}
MirCyber 2.01.1—>»C:Program FilesGPSMirCyberunins000.exe»
Motorola SM56 Speakerphone Modem—>rundll32.exe sm56co6a.dll,SM56UnInstaller
Mozilla Firefox (2.0.0.2)—>C:Program FilesMozilla Firefoxuninstallhelper.exe
MSRedist—>MsiExec.exe /I{B7C61755-DB48-4003-948F-3D34DB8EAF69}
MSXML 4.0 SP2 (KB927978)—>MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB954430)—>MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)—>MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Nancy Drew — Danger by Design—>C:PROGRA~1NANCYD~1UNWISE.EXE C:PROGRA~1NANCYD~1INSTALL.LOG
NB Probe—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{6324A1EF-CEF4-43E3-8BCD-9EF3F67317FD}setup.exe» -l0x9
Need for Russia. Сделано в СССР—>C:Program FilesInstallShield Installation Information{F1D69447-8FAA-433D-A247-B67570E7A758}setup.exe -runfromtemp -l0x0019 -removeonly
Nero 7 Essentials—>MsiExec.exe /X{97F32DF8-D66E-446A-A425-C1D7B45C1049}
Nokia Lifeblog 2.1—>MsiExec.exe /I{EE565795-2776-415A-B31C-EB3A8D7C6FA4}
Nokia MTP driver—>MsiExec.exe /I{59359B3D-ABE7-46BF-AB55-43B67A64DC68}
Nokia N73 highlights—>MsiExec.exe /I{02B71D92-A84B-4DFB-9A10-D12BB01AC1F2}
Nokia Nseries Skin for Microsoft Windows Media Player—>MsiExec.exe /I{73E30715-9EC4-4DAE-BE67-64500AEB8012}
Nokia PC Connectivity Solution—>MsiExec.exe /I{0D80391C-0A72-43BB-9BC2-143F63CC111D}
Nokia PC Suite—>MsiExec.exe /I{531317A5-586A-4E36-87C1-CA823447B375}
Nokia themes for your device—>MsiExec.exe /I{77F5816C-64A6-4FBE-BBE5-52EFE5EB84E8}
Norton AntiVirus—>MsiExec.exe /X{830D8CBD-C668-49e2-A969-C2C2106332E0}
Norton Confidential Browser Component—>MsiExec.exe /I{4843B611-8FCB-4428-8C23-31D0A5EAE164}
Norton Confidential Web Protection Component—>MsiExec.exe /I{D353CC51-430D-4C6F-9B7E-52003DA1E05A}
Norton Internet Security (Symantec Corporation)—>»C:Program FilesCommon FilesSymantec SharedSymSetup{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}_10_2_0_30{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}.exe» /X
Norton Internet Security—>MsiExec.exe /I{3672B097-EA69-4bfe-B92F-29AE6D9D2B34}
Norton Internet Security—>MsiExec.exe /I{48185814-A224-447A-81DA-71BD20580E1B}
Norton Internet Security—>MsiExec.exe /I{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}
Norton Internet Security—>MsiExec.exe /I{E3EFA461-EB83-4C3B-9C47-2C1D58A01555}
Norton Internet Security—>MsiExec.exe /I{E5EE9939-259F-4DE2-8023-5C49E16A4F43}
Norton Protection Center—>MsiExec.exe /I{9A129ABC-A53A-4209-A21E-D5DEDFB7CCA8}
OpenAL—>»C:Program FilesOpenALoalinst.exe» /U
Opera 9.64—>MsiExec.exe /X{A2A60894-E3ED-46FE-9A6A-7CF7A87572A0}
Opera 9.64—>MsiExec.exe /X{E1BBBAC5-2857-4155-82A6-54492CE88620}
Power4Gear eXtreme—>C:Program FilesInstallShield Installation Information{8CFEBE9C-F29F-4C49-80E0-7106970F8734}SETUP.exe -runfromtemp -l0x0019 -removeonly
PowerForPhone—>C:Program FilesInstallShield Installation Information{FC3D290D-79BE-44B7-ABF9-FDD110925930}setup.exe -runfromtemp -l0x0009 -removeonly
QIP Infium 2.0.9018 RC3—>»C:Program FilesQIP Infiumunins000.exe»
QIP.Online—>C:Program FilesQIP.OnlineUninstall.exe
Race — The WTCC Game—>»C:GamesRace — The WTCC Gameunins000.exe»
Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista—>C:Program FilesInstallShield Installation Information{8833FFB6-5B0C-4764-81AA-06DFEED9A476}SETUP.exe -runfromtemp -l0x0019 -removeonly
Realtek High Definition Audio Driver—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}SETUP.exe» -l0x19 -removeonly
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime701Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{59F6A514-9813-47A3-948C-8A155460CC2A}SETUP.EXE» -l0x19 anything
SAMSUNG CDMA Modem Driver Set—>C:Windowssystem32Samsung_USB_Drivers3SSCDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software—>C:Windowssystem32Samsung_USB_Drivers1SS_Uninstall.exe
Samsung Mobile USB Modem Software—>C:Windowssystem32Samsung_USB_Drivers2SSM_Uninstall.exe
Samsung PC Studio 3 USB Driver Installer—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1050Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}setup.exe» -l0x19 -removeonly
Security Update for 2007 Microsoft Office System (KB969559)—>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB973704)—>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {E626DC89-A787-4553-9BB3-DC2EC7E1593F}
Security Update for Microsoft Office Excel 2007 (KB973593)—>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {7D6255E3-3423-4D8B-A328-F6F8D28DD5FE}
Security Update for Microsoft Office Outlook 2007 (KB972363)—>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {120BE9A0-9B09-4855-9E0C-7DEE45CB03C0}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)—>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office Publisher 2007 (KB969693)—>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {7BE67088-1EB3-4569-8E75-DDAFBF61BC4E}
Security Update for Microsoft Office system 2007 (972581)—>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
Security Update for Microsoft Office system 2007 (KB969613)—>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office system 2007 (KB974234)—>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)—>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
Skype™ 4.0—>MsiExec.exe /X{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}
Sony Vegas Pro 8.0—>MsiExec.exe /X{0F31532A-16F1-4812-8B7B-D321A4CE91A6}
SPBBC 32bit—>MsiExec.exe /I{77772678-817F-4401-9301-ED1D01A8DA56}
Symantec Real Time Storage Protection Component—>MsiExec.exe /I{D6E6FA4A-5445-4850-8365-CF216C1CBB7A}
SymNet—>MsiExec.exe /I{2DA85B02-13C0-4E6D-9A76-22E6B3DD0CB2}
TDA-Speak.Mobile 1.0—>»C:Program Filestda-speakenunins000.exe»
The Sims 3—>»C:Program FilesInstallShield Installation Information{965D1C90-07D2-4749-B183-5FD47834131C}setup.exe» -runfromtemp -l0x0419 -removeonly
The Sims 3—>MsiExec.exe /I{965D1C90-07D2-4749-B183-5FD47834131C}
Update for 2007 Microsoft Office System (KB967642)—>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)—>C:Windowssystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=»»
Update for Microsoft Office InfoPath 2007 (KB976416)—>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {432C5EE4-8096-4FF1-95E1-65219365DFF7}
Update for Microsoft Office Word 2007 (KB974561)—>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {0CDDBAA2-2111-4A0E-A1B0-76C40C635331}
Update for Outlook 2007 Junk Email Filter (kb977839)—>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {C568005C-5FC6-4C81-A664-BD136610A931}
Vista Audio Pack—>MsiExec.exe /X{03D1988F-469F-4843-8E6E-E5FE9D17889D}
Winamp (remove only)—>»C:Program FilesWinampUninstWA.exe»
WinFlash—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{DE10AB76-4756-4913-BE25-55D1C1051F9A}setup.exe» -l0x9
Wireless Console 2—>C:Program FilesInstallShield Installation Information{83F73CB1-7705-49D1-9852-84D839CA2A45}setup.EXE -runfromtemp -l0x0009 -removeonly
X Codec Pack—>C:Program FilesRecode MediaX Codec Pack v2Uninstall.exe
Журнал «РИЦ»—>C:PROGRA~1ricentrUNWISE.EXE C:PROGRA~1ricentrINSTALL.LOG
Как достать соседа 3 — В офисе—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime701Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{070779FF-5054-4001-A71F-FEC339CE8262}setup.exe» -l0x19
Тюнинг автомобилей. Персональная студия—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime91Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{623C9E14-8AB1-427F-99B2-4D66C3A3E493}setup.exe» -l0x19
Херабора 1.0.722.4999—>C:Program Filesheraborauninst.exe
Языковой пакет Microsoft .NET Framework 3.5 SP1 — RUS—>C:WindowsMicrosoft.NETFrameworkv3.5Microsoft .NET Framework 3.5 Language Pack SP1 — russetup.exe

======Security center information======

AV: Norton Internet Security (outdated)
FW: Norton Internet Security
AS: Защитник Windows
AS: Norton Internet Security

======System event log======

Computer Name: ххх-ПК
Event Code: 10029
Message: DCOM запустил службу VSS с аргументами «», чтобы запустить сервер:
{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}
Record Number: 134557
Source Name: Microsoft-Windows-DistributedCOM
Time Written: 20100116143140.000000-000
Event Type: Сведения
User:

Computer Name: ххх-ПК
Event Code: 7036
Message: Служба «Теневое копирование тома» перешла в состояние Работает.
Record Number: 134558
Source Name: Service Control Manager
Time Written: 20100116143140.000000-000
Event Type: Сведения
User:

Computer Name: ххх-ПК
Event Code: 7036
Message: Служба «Программный поставщик теневого копирования (Microsoft)» перешла в состояние Работает.
Record Number: 134559
Source Name: Service Control Manager
Time Written: 20100116143141.000000-000
Event Type: Сведения
User:

Computer Name: ххх-ПК
Event Code: 7036
Message: Служба «Теневое копирование тома» перешла в состояние Остановлена.
Record Number: 134560
Source Name: Service Control Manager
Time Written: 20100116143441.000000-000
Event Type: Сведения
User:

Computer Name: ххх-ПК
Event Code: 7036
Message: Служба «Программный поставщик теневого копирования (Microsoft)» перешла в состояние Остановлена.
Record Number: 134561
Source Name: Service Control Manager
Time Written: 20100116143741.000000-000
Event Type: Сведения
User:

=====Application event log=====

Computer Name: ххх-ПК
Event Code: 101
Message: Information Level: success

Scheduler launched Automatic LiveUpdate.
Record Number: 37940
Source Name: Automatic LiveUpdate Scheduler
Time Written: 20100116142732.000000-000
Event Type: Сведения
User: NT AUTHORITYSYSTEM

Computer Name: ххх-ПК
Event Code: 101
Message: Information Level: success

Automatic LiveUpdate has terminated.
Record Number: 37941
Source Name: Automatic LiveUpdate Scheduler
Time Written: 20100116142820.000000-000
Event Type: Сведения
User: NT AUTHORITYSYSTEM

Computer Name: ххх-ПК
Event Code: 101
Message: Information Level: success

The next run has been scheduled to occur at approximately 6:33 PM.
Record Number: 37942
Source Name: Automatic LiveUpdate Scheduler
Time Written: 20100116142820.000000-000
Event Type: Сведения
User: NT AUTHORITYSYSTEM

Computer Name: ххх-ПК
Event Code: 8224
Message: Служба VSS выключается из-за тайм-аута простоя.
Record Number: 37943
Source Name: VSS
Time Written: 20100116143441.000000-000
Event Type: Сведения
User:

Computer Name: ххх-ПК
Event Code: 5
Message: Unsupported service control request (see data below)
Record Number: 37944
Source Name: LightScribeService
Time Written: 20100116151628.000000-000
Event Type: Сведения
User:

=====Security event log=====

Computer Name: ххх-ПК
Event Code: 4634
Message: Выполнен выход учетной записи из системы.

Субъект:
ИД безопасности: S-1-5-7
Имя учетной записи: АНОНИМНЫЙ ВХОД
Домен учетной записи: NT AUTHORITY
Код входа: 0x1cb8bdf

Тип входа: 3

Данное событие возникает при уничтожении сеанса входа. Его можно однозначно связать с событием входа с помощью значения «Код входа». Коды входа остаются уникальными после перезагрузки, но они уникальны только на одном компьютере.
Record Number: 26022
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20081213073222.504400-000
Event Type: Аудит выполнен успешно
User:

Computer Name: ххх-ПК
Event Code: 4624
Message: Вход с учетной записью выполнен успешно.

Субъект:
ИД безопасности: S-1-0-0
Имя учетной записи: —
Домен учетной записи: —
Код входа: 0x0

Тип входа: 3

Новый вход:
ИД безопасности: S-1-5-7
Имя учетной записи: АНОНИМНЫЙ ВХОД
Домен учетной записи: NT AUTHORITY
Код входа: 0x1cbe8c8
GUID входа: {00000000-0000-0000-0000-000000000000}

Сведения о процессе:
Идентификатор процесса: 0x0
Имя процесса: —

Сведения о сети:
Имя рабочей станции: W12LL06T
Сетевой адрес источника: 10.58.2.148
Порт источника: 4572

Сведения о проверке подлинности:
Процесс входа: NtLmSsp
Пакет проверки подлинности: NTLM
Промежуточные службы: —
Имя пакета (только NTLM): NTLM V1
Длина ключа: 0

Данное событие возникает при создании сеанса входа. Оно создается в системе, вход в которую выполнен.

Поля «Субъект» указывают на учетную запись локальной системы, запросившую вход. Обычно это служба, например служба «Сервер», или локальный процесс, такой как Winlogon.exe или Services.exe.

В поле «Тип входа» указан тип выполненного входа. Самыми распространенными являются типы 2 (интерактивный) и 3 (сетевой).

Поля «Новый вход» указывают на учетную запись, для которой создан новый сеанс входа, то есть на учетную запись, с которой выполнен вход.

В полях, которые относятся к сети, указан источник запроса на удаленный вход. Имя рабочей станции доступно не всегда, и в некоторых случаях это поле может оставаться незаполненным.

Поля сведений о проверке подлинности содержат подробные данные о конкретном запросе на вход.
— GUID входа — это уникальный идентификатор, который позволяет сопоставить данное событие с событием KDC.
— В поле «Промежуточные службы» указано, какие промежуточные службы участвовали в данном запросе на вход.
— Поле «Имя пакета» указывает на подпротокол, использованный с протоколами NTLM.
— Поле «Длина ключа» содержит длину созданного ключа сеанса. Это поле может иметь значение «0», если ключ сеанса не запрашивался.
Record Number: 26023
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20081213073453.566400-000
Event Type: Аудит выполнен успешно
User:

Computer Name: ххх-ПК
Event Code: 4634
Message: Выполнен выход учетной записи из системы.

Субъект:
ИД безопасности: S-1-5-7
Имя учетной записи: АНОНИМНЫЙ ВХОД
Домен учетной записи: NT AUTHORITY
Код входа: 0x1cbe8c8

Тип входа: 3

Данное событие возникает при уничтожении сеанса входа. Его можно однозначно связать с событием входа с помощью значения «Код входа». Коды входа остаются уникальными после перезагрузки, но они уникальны только на одном компьютере.
Record Number: 26024
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20081213073453.571400-000
Event Type: Аудит выполнен успешно
User:

Computer Name: ххх-ПК
Event Code: 4624
Message: Вход с учетной записью выполнен успешно.

Субъект:
ИД безопасности: S-1-0-0
Имя учетной записи: —
Домен учетной записи: —
Код входа: 0x0

Тип входа: 3

Новый вход:
ИД безопасности: S-1-5-7
Имя учетной записи: АНОНИМНЫЙ ВХОД
Домен учетной записи: NT AUTHORITY
Код входа: 0x1cc760f
GUID входа: {00000000-0000-0000-0000-000000000000}

Сведения о процессе:
Идентификатор процесса: 0x0
Имя процесса: —

Сведения о сети:
Имя рабочей станции: MICROSOF-27769F
Сетевой адрес источника: 10.58.2.168
Порт источника: 1038

Сведения о проверке подлинности:
Процесс входа: NtLmSsp
Пакет проверки подлинности: NTLM
Промежуточные службы: —
Имя пакета (только NTLM): NTLM V1
Длина ключа: 0

Данное событие возникает при создании сеанса входа. Оно создается в системе, вход в которую выполнен.

Поля «Субъект» указывают на учетную запись локальной системы, запросившую вход. Обычно это служба, например служба «Сервер», или локальный процесс, такой как Winlogon.exe или Services.exe.

В поле «Тип входа» указан тип выполненного входа. Самыми распространенными являются типы 2 (интерактивный) и 3 (сетевой).

Поля «Новый вход» указывают на учетную запись, для которой создан новый сеанс входа, то есть на учетную запись, с которой выполнен вход.

В полях, которые относятся к сети, указан источник запроса на удаленный вход. Имя рабочей станции доступно не всегда, и в некоторых случаях это поле может оставаться незаполненным.

Поля сведений о проверке подлинности содержат подробные данные о конкретном запросе на вход.
— GUID входа — это уникальный идентификатор, который позволяет сопоставить данное событие с событием KDC.
— В поле «Промежуточные службы» указано, какие промежуточные службы участвовали в данном запросе на вход.
— Поле «Имя пакета» указывает на подпротокол, использованный с протоколами NTLM.
— Поле «Длина ключа» содержит длину созданного ключа сеанса. Это поле может иметь значение «0», если ключ сеанса не запрашивался.
Record Number: 26025
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20081213073618.903000-000
Event Type: Аудит выполнен успешно
User:

Computer Name: ххх-ПК
Event Code: 4634
Message: Выполнен выход учетной записи из системы.

Субъект:
ИД безопасности: S-1-5-7
Имя учетной записи: АНОНИМНЫЙ ВХОД
Домен учетной записи: NT AUTHORITY
Код входа: 0x1cc760f

Тип входа: 3

Данное событие возникает при уничтожении сеанса входа. Его можно однозначно связать с событием входа с помощью значения «Код входа». Коды входа остаются уникальными после перезагрузки, но они уникальны только на одном компьютере.
Record Number: 26026
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20081213073619.043400-000
Event Type: Аудит выполнен успешно
User:

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«Path»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;C:Program FilesATI TechnologiesATI.ACECore-Static
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
«PROCESSOR_ARCHITECTURE»=x86
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP
«USERNAME»=SYSTEM
«windir»=%SystemRoot%
«PROCESSOR_LEVEL»=15
«PROCESSOR_IDENTIFIER»=x86 Family 15 Model 104 Stepping 1, AuthenticAMD
«PROCESSOR_REVISION»=6801
«NUMBER_OF_PROCESSORS»=2
«configsetroot»=%SystemRoot%ConfigSetRoot

EOF
Автор

Сообщения