Spy.Ursnif.A virus

This topic has 9 ответов, 2 участника, and was last updated 15 years, 12 months назад by Admin.

Просмотр 10 сообщений - с 1 по 10 (из 10 всего)

Автор

Сообщения
19 октября, 2009 в 6:49 пп #17278
Аноним
Гость
- Темы:532
- Сообщений:1553
ДОБРОГО ВРЕМЕЧКА!
ВЫ — МОЯ ПОСЛЕДНЯЯ НАДЕЖДА… 🙂
Короче, ребяты, сутуация такая:
Переустановил Винду с диска, который дали в специализированом (железо и комплектуюющие, ремонт) магазине. Виндой доволен, НО
НОД32 палит при сканировании такую вот хрень…

При попытке лечить пишет о невозможности, а при попытке удалить пишет:

при повторить — тот же хрен, а при отменить — получаю вот что:

Пробовал уже и утилитой от Dr. Web, та же хрень…
Вот, такая картинка по адресу расположения: (полез, выдало ещё одно окно…

В итоге:

Кто может подсказать, что за зверь такой? Я только понял, что это сниффер какой-то, видимо сами хренки из магазина и раскидывают спецом…
В безопасном режиме тоже сканил… Всё то-же…
19 октября, 2009 в 7:02 пп #26434
Аноним
Гость
- Темы:532
- Сообщений:1553
Вот логи:

Logfile of random’s system information tool 1.06 (written by random/random)
Run by Плюшка 8) at 2009-10-19 21:56:39
Microsoft Windows XP Professional Service Pack 3
System drive C: has 16 GB (53%) free of 30 GB
Total RAM: 2047 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:56:41, on 19.10.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.21115)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:Program FilesUSB Safely RemoveUSBSRService.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSSOUNDMAN.EXE
C:WINDOWSsystem32RUNDLL32.EXE
C:WINDOWSLTMSG.exe
C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe
C:Program FilesAcronisTrueImageHomeTrueImageMonitor.exe
C:Program FilesAcronisTrueImageHomeTimounterMonitor.exe
C:Program FilesCommon FilesAcronisSchedule2schedhlp.exe
C:Program FilesAshampooAshampoo AntiSpyWare 2AntiSpyWare2Guard.exe
C:Program FilesWinampwinampa.exe
C:WINDOWSsystem32rundll32.exe
C:Program FilesWindows Sidebarsidebar.exe
C:Program FilesPunto Switcherpunto.exe
C:Program FilesCommon FilesYandexYupdateyupdate.exe
C:Program FilesTaskSwitchXPTaskSwitchXP.exe
C:Program FilesVisualTaskTipsVisualTaskTips.exe
C:Program FilesAlfaClock Free EditionAlfaClock.exe
C:Program FilesDAEMON Tools Litedaemon.exe
C:Program FilesUSB Safely RemoveUSBSafelyRemove.exe
C:Program FilesDownload Masterdmaster.exe
C:Program FilesAshampooAshampoo AntiSpyWare 2AntiSpyWareService.exe
C:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe
C:Program FilesCommon FilesAcronisSchedule2schedul2.exe
C:Program FilesBonjourmDNSResponder.exe
C:Program FilesESETESET NOD32 Antivirusekrn.exe
C:Program FilesICQ6ToolbarICQ Service.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe
C:Program FilesMicrosoft LifeCamMSCamS32.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32locator.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesToolTipFixerToolTipFixer.exe
C:WINDOWSSystem32TUProgSt.exe
C:Program FilesWindows Sidebarsidebar.exe
C:WINDOWSSystem32alg.exe
C:Program FilesPROWiSePROWiSe.exe
C:WINDOWSexplorer.exe
C:Program FilesSkypePhoneSkype.exe
C:Program FilesSkypePlugin ManagerskypePM.exe
C:Program FilesESETESET NOD32 Antivirusegui.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Documents and SettingsПлюшка 8)Рабочий столRSIT.exe
C:WINDOWSsystem32wbemwmiprvse.exe
C:Program Filestrend microПлюшка 8).exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = about:blank
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://google.ru
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://www.google.ru
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = about:blank
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://www.google.ru
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://TUT.by
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Вся Беларусь 2009 DVD Windows XP 2009 SP3 Sambuild Gold
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
R3 — URLSearchHook: (no name) — — (no file)
R3 — URLSearchHook: ICQToolBar — {855F3B16-6D32-4fe6-8A56-BBB695989046} — C:Program FilesICQ6ToolbarICQToolBar.dll
O2 — BHO: Skype add-on (mastermind) — {22BF413B-C6D2-4d91-82A9-A0F997BA588C} — C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O2 — BHO: Groove GFS Browser Helper — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll
O2 — BHO: Java(tm) Plug-In SSV Helper — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre6binssv.dll
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — C:PROGRA~1DOWNLO~1dmiehlp.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 — Toolbar: DM Bar — {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — C:Program FilesDownload Masterdmbar.dll
O3 — Toolbar: DAEMON Tools Toolbar — {32099AAC-C132-4136-9E9A-4E364A424E17} — C:Program FilesDAEMON Tools ToolbarDTToolbar.dll
O3 — Toolbar: EPSON Web-To-Page — {EE5D279F-081B-4404-994D-C6B60AAEBA6D} — C:Program FilesEPSONEPSON Web-To-PageEPSON Web-To-Page.dll
O4 — HKLM..Run: [SoundMan] SOUNDMAN.EXE
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [nwiz] nwiz.exe /install
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [LTMSG] LTMSG.exe 7
O4 — HKLM..Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 — HKLM..Run: [GrooveMonitor] «C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe»
O4 — HKLM..Run: [TrueImageMonitor.exe] C:Program FilesAcronisTrueImageHomeTrueImageMonitor.exe
O4 — HKLM..Run: [AcronisTimounterMonitor] C:Program FilesAcronisTrueImageHomeTimounterMonitor.exe
O4 — HKLM..Run: [Acronis Scheduler2 Service] «C:Program FilesCommon FilesAcronisSchedule2schedhlp.exe»
O4 — HKLM..Run: [egui] «C:Program FilesESETESET NOD32 Antivirusegui.exe» /hide /waitservice
O4 — HKLM..Run: C:Program FilesAshampooAshampoo AntiSpyWare 2AntiSpyWare2Guard.exe
O4 — HKLM..Run: [WinampAgent] «C:Program FilesWinampwinampa.exe»
O4 — HKLM..Run: [LifeCam] «C:Program FilesMicrosoft LifeCamLifeExp.exe»
O4 — HKLM..RunOnce: [Malwarebytes’ Anti-Malware] C:Program FilesMalwarebytes’ Anti-Malwarembamgui.exe /install /silent
O4 — HKCU..Run: [Sidebar] C:Program FilesWindows Sidebarsidebar.exe /autoRun
O4 — HKCU..Run: [Punto Switcher] C:Program FilesPunto Switcherpunto.exe
O4 — HKCU..Run: [Yupdate!] «C:Program FilesCommon FilesYandexYupdateyupdate.exe»
O4 — HKCU..Run: [TaskSwitchXP] «C:Program FilesTaskSwitchXPTaskSwitchXP.exe»
O4 — HKCU..Run: [VisualTaskTips] C:Program FilesVisualTaskTipsVisualTaskTips.exe noTrayIcon
O4 — HKCU..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe
O4 — HKCU..Run: [AlfaClock Classic] «C:Program FilesAlfaClock Free EditionAlfaClock.exe» /startup
O4 — HKCU..Run: [AlcoholAutomount] «C:Program FilesAlcohol SoftAlcohol 120axcmd.exe» /automount
O4 — HKCU..Run: [DAEMON Tools Lite] «C:Program FilesDAEMON Tools Litedaemon.exe» -autorun
O4 — HKCU..Run: [AnyDVD] C:Program FilesSlySoftAnyDVDAnyDVDtray.exe
O4 — HKCU..Run: [USB Safely Remove] C:Program FilesUSB Safely RemoveUSBSafelyRemove.exe /startup
O4 — HKCU..Run: [EPSON Stylus DX4400 Series] C:WINDOWSSystem32spoolDRIVERSW32X863E_FATICAE.EXE /FU «C:WINDOWSTEMPE_S1E18.tmp» /EF «HKCU»
O4 — HKCU..Run: [Download Master] C:Program FilesDownload Masterdmaster.exe -autorun
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [Rebuild Icon Cache] REBUILDI.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE7_011] regsvr32 /s /n /i:u shell32 (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE7_012] rundll32 advpack.dll,LaunchINFSectionEx IE7int.inf,AfterUserStart,,4,N (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [Rebuild Icon Cache] REBUILDI.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [VisualTaskTips] C:Program FilesVisualTaskTipsVisualTaskTips.exe noTrayIcon (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [Rebuild Icon Cache] REBUILDI.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [VisualTaskTips] C:Program FilesVisualTaskTipsVisualTaskTips.exe noTrayIcon (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [Rebuild Icon Cache] REBUILDI.EXE (User ‘Default user’)
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O8 — Extra context menu item: Добавить страницу в URL-Album — C:Program FilesURL-Albumua.htm
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — C:Program FilesDownload Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — C:Program FilesDownload Masterdmie.htm
O9 — Extra button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra button: Skype — {77BF5300-1474-4EC7-9980-D32B190E9B07} — C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O9 — Extra button: Microsoft Knowledge Base — {8B2D996F-B7D1-4961-A929-414D9CF5BA7B} — http://support.microsoft.com/default.aspx?scid=FH;EN-US;KBHOWTO (file missing)
O9 — Extra ‘Tools’ menuitem: Microsoft Knowledge Base — {8B2D996F-B7D1-4961-A929-414D9CF5BA7B} — http://support.microsoft.com/default.aspx?scid=FH;EN-US;KBHOWTO (file missing)
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O9 — Extra ‘Tools’ menuitem: ICQ6 — {E59EB121-F339-4851-A3BA-FE49C35617C2} — C:Program FilesICQ6.5ICQ.exe
O9 — Extra button: Добавить страницу в URL-Album — {4D9BEE60-F894-11D4-9B21-AD4030B75053} — C:Program FilesURL-Albumua.htm (HKCU)
O9 — Extra button: (no name) — {4D9BEE60-F894-11D4-9B21-AD4030B75054} — C:Program FilesURL-Albumurlalbum.exe (HKCU)
O9 — Extra ‘Tools’ menuitem: Открыть URL-Album — {4D9BEE60-F894-11D4-9B21-AD4030B75054} — C:Program FilesURL-Albumurlalbum.exe (HKCU)
O17 — HKLMSystemCCSServicesTcpip..{EE87BBB1-FBCC-4813-8014-EAA6FC2EA088}: NameServer = 82.209.240.241 82.209.243.241
O18 — Protocol: grooveLocalGWS — {88FED34C-F0CA-4636-A375-3CB6248B04CD} — C:Program FilesMicrosoft OfficeOffice12GrooveSystemServices.dll
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O23 — Service: Ashampoo AntiSpyWare 2 Service (AASW2_Service) — Unknown owner — C:Program FilesAshampooAshampoo AntiSpyWare 2AntiSpyWareService.exe
O23 — Service: ABBYY FineReader 9.0 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) — ABBYY (BIT Software) — C:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe
O23 — Service: Acronis Scheduler2 Service (AcrSch2Svc) — Acronis — C:Program FilesCommon FilesAcronisSchedule2schedul2.exe
O23 — Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) — Apple Computer, Inc. — C:Program FilesBonjourmDNSResponder.exe
O23 — Service: Eset HTTP Server (EhttpSrv) — ESET — C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe
O23 — Service: Eset Service (ekrn) — ESET — C:Program FilesESETESET NOD32 Antivirusekrn.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: FLEXnet Licensing Service — Macrovision Europe Ltd. — C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 — Service: ICQ Service — Unknown owner — C:Program FilesICQ6ToolbarICQ Service.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: StarWind AE Service (StarWindServiceAE) — Rocket Division Software — C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: NST ToolTipFixer (TTFixerService) — NeoSmart Technologies — C:Program FilesToolTipFixerToolTipFixer.exe
O23 — Service: TuneUp Drive Defrag Service (TuneUp.Defrag) — TuneUp Software — C:WINDOWSSystem32TuneUpDefragService.exe
O23 — Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) — TuneUp Software — C:WINDOWSSystem32TUProgSt.exe
O23 — Service: USB Safely Remove Assistant (USBSafelyRemoveService) — Unknown owner — C:Program FilesUSB Safely RemoveUSBSRService.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 14332 bytes

======Scheduled tasks folder======

C:WINDOWStasks1-Click Maintenance.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) — C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll [2008-12-08 1088296]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper — C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll [2007-08-24 2212224]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper — C:Program FilesJavajre6binssv.dll [2009-10-17 320920]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — C:PROGRA~1DOWNLO~1dmiehlp.dll [2008-10-24 157696]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2009-10-17 34816]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2009-10-17 73728]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — DM Bar — C:Program FilesDownload Masterdmbar.dll [2007-11-26 180224]
{32099AAC-C132-4136-9E9A-4E364A424E17} — DAEMON Tools Toolbar — C:Program FilesDAEMON Tools ToolbarDTToolbar.dll [2008-12-10 929224]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} — EPSON Web-To-Page — C:Program FilesEPSONEPSON Web-To-PageEPSON Web-To-Page.dll [2005-02-22 368640]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«SoundMan»=C:WINDOWSSOUNDMAN.EXE [2007-04-16 577536]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2008-10-07 13574144]
«nwiz»=nwiz.exe /install []
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2008-10-07 86016]
«LTMSG»=LTMSG.exe 7 []
«Kernel and Hardware Abstraction Layer»=C:WINDOWSKHALMNPR.EXE [2008-02-29 242192]
«GrooveMonitor»=C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe [2007-08-24 33648]
«TrueImageMonitor.exe»=C:Program FilesAcronisTrueImageHomeTrueImageMonitor.exe [2008-12-18 4390712]
«AcronisTimounterMonitor»=C:Program FilesAcronisTrueImageHomeTimounterMonitor.exe [2008-12-18 962160]
«Acronis Scheduler2 Service»=C:Program FilesCommon FilesAcronisSchedule2schedhlp.exe [2008-12-18 165144]
«egui»=C:Program FilesESETESET NOD32 Antivirusegui.exe [2008-10-24 1451264]
«‘Ashampoo AntiSpyWare 2 Guard'»=C:Program FilesAshampooAshampoo AntiSpyWare 2AntiSpyWare2Guard.exe [2008-03-13 2316632]
«WinampAgent»=C:Program FilesWinampwinampa.exe [2008-08-04 36352]
«LifeCam»=C:Program FilesMicrosoft LifeCamLifeExp.exe [2008-08-04 160800]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunOnce]
«Malwarebytes’ Anti-Malware»=C:Program FilesMalwarebytes’ Anti-Malwarembamgui.exe [2009-09-10 420176]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«Sidebar»=C:Program FilesWindows Sidebarsidebar.exe [2008-05-12 1272320]
«Punto Switcher»=C:Program FilesPunto Switcherpunto.exe [2008-10-30 734504]
«Yupdate!»=C:Program FilesCommon FilesYandexYupdateyupdate.exe [2008-10-20 479496]
«TaskSwitchXP»=C:Program FilesTaskSwitchXPTaskSwitchXP.exe [2007-05-09 106904]
«VisualTaskTips»=C:Program FilesVisualTaskTipsVisualTaskTips.exe [2008-06-23 65536]
«VistaIcon»=C:Program FilesVistaDriveIconVistaDrv.exe [2008-01-02 132096]
«AlfaClock Classic»=C:Program FilesAlfaClock Free EditionAlfaClock.exe [2005-07-13 405504]
«AlcoholAutomount»=C:Program FilesAlcohol SoftAlcohol 120axcmd.exe [2008-11-23 203720]
«DAEMON Tools Lite»=C:Program FilesDAEMON Tools Litedaemon.exe [2008-12-29 687560]
«AnyDVD»=C:Program FilesSlySoftAnyDVDAnyDVDtray.exe [2008-12-31 2489280]
«USB Safely Remove»=C:Program FilesUSB Safely RemoveUSBSafelyRemove.exe [2008-12-06 1107728]
«EPSON Stylus DX4400 Series»=C:WINDOWSSystem32spoolDRIVERSW32X863E_FATICAE.EXE [2007-03-01 180736]
«Download Master»=C:Program FilesDownload Masterdmaster.exe [2008-11-18 3297280]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWgaLogon]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2007-06-18 133632]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{B5A7F190-DDA6-4420-B3BA-52453494E6CD}»=C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll [2007-08-24 2212224]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«ForceClassicControlPanel»=1
«NoSMConfigurePrograms»=1

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE»=»C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook»
«C:Program FilesMicrosoft OfficeOffice12GROOVE.EXE»=»C:Program FilesMicrosoft OfficeOffice12GROOVE.EXE:*:Enabled:Microsoft Office Groove»
«C:Program FilesMicrosoft OfficeOffice12ONENOTE.EXE»=»C:Program FilesMicrosoft OfficeOffice12ONENOTE.EXE:*:Enabled:Microsoft Office OneNote»
«C:Program FilesBonjourmDNSResponder.exe»=»C:Program FilesBonjourmDNSResponder.exe:*:Enabled:Bonjour»
«C:Program FilesICQ6.5ICQ.exe»=»C:Program FilesICQ6.5ICQ.exe:*:Enabled:ICQ6»
«C:Program FilesMicrosoft LifeCamLifeCam.exe»=»C:Program FilesMicrosoft LifeCamLifeCam.exe:*:Enabled:LifeCam.exe»
«C:Program FilesMicrosoft LifeCamLifeEnC2.exe»=»C:Program FilesMicrosoft LifeCamLifeEnC2.exe:*:Enabled:LifeEnC2.exe»
«C:Program FilesMicrosoft LifeCamLifeExp.exe»=»C:Program FilesMicrosoft LifeCamLifeExp.exe:*:Enabled:LifeExp.exe»
«C:Program FilesMicrosoft LifeCamLifeTray.exe»=»C:Program FilesMicrosoft LifeCamLifeTray.exe:*:Enabled:LifeTray.exe»
«C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

======List of files/folders created in the last 1 months======

2009-10-19 21:54:42 —-D—- C:rsit
2009-10-19 21:54:42 —-D—- C:Program Filestrend micro
2009-10-19 17:31:16 —-D—- C:Documents and SettingsПлюшка 8)Application DataMalwarebytes
2009-10-19 17:30:35 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2009-10-19 17:30:34 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2009-10-19 17:29:16 —-D—- C:Program FilesMalwarebytesPortable
2009-10-19 17:27:08 —-D—- C:Documents and SettingsПлюшка 8)Application DataWinRAR
2009-10-19 13:26:23 —-A—- C:WINDOWSsystem32ptpusb.dll
2009-10-19 13:26:22 —-A—- C:WINDOWSsystem32ptpusd.dll
2009-10-18 20:24:19 —-A—- C:WINDOWSntbtlog.txt
2009-10-18 14:52:36 —-HDC—- C:WINDOWS$NtUninstallKB959426$
2009-10-18 14:52:30 —-HDC—- C:WINDOWS$NtUninstallKB960859$
2009-10-18 14:50:59 —-HDC—- C:WINDOWS$NtUninstallKB958869$
2009-10-18 14:50:26 —-HDC—- C:WINDOWS$NtUninstallKB969059$
2009-10-18 14:50:20 —-HDC—- C:WINDOWS$NtUninstallKB968816_WM9$
2009-10-18 14:50:15 —-HDC—- C:WINDOWS$NtUninstallKB961371-v2$
2009-10-18 14:49:40 —-HDC—- C:WINDOWS$NtUninstallKB971657$
2009-10-18 14:49:32 —-HDC—- C:WINDOWS$NtUninstallKB961118$
2009-10-18 14:49:26 —-HDC—- C:WINDOWS$NtUninstallKB971557$
2009-10-18 14:49:21 —-HDC—- C:WINDOWS$NtUninstallKB954155_WM9$
2009-10-18 14:49:17 —-HDC—- C:WINDOWS$NtUninstallKB960225$
2009-10-18 14:48:13 —-HDC—- C:WINDOWS$NtUninstallKB956744$
2009-10-18 14:46:08 —-HDC—- C:WINDOWS$NtUninstallKB974112$
2009-10-18 14:46:04 —-D—- C:Program FilesMicrosoft CAPICOM 2.1.0.2
2009-10-18 14:45:55 —-HDC—- C:WINDOWS$NtUninstallKB956572$
2009-10-18 14:45:46 —-HDC—- C:WINDOWS$NtUninstallKB956844$
2009-10-18 14:45:25 —-HDC—- C:WINDOWS$NtUninstallKB961501$
2009-10-18 14:45:20 —-HDC—- C:WINDOWS$NtUninstallKB971633$
2009-10-18 14:45:09 —-HDC—- C:WINDOWS$NtUninstallKB973869$
2009-10-18 14:45:04 —-HDC—- C:WINDOWS$NtUninstallKB975025$
2009-10-18 14:44:30 —-D—- C:WINDOWSie7updates
2009-10-18 14:44:18 —-HDC—- C:WINDOWS$NtUninstallKB952004$
2009-10-18 14:44:13 —-HDC—- C:WINDOWS$NtUninstallKB974571$
2009-10-18 14:44:08 —-HDC—- C:WINDOWS$NtUninstallKB973507$
2009-10-18 14:42:38 —-HDC—- C:WINDOWS$NtUninstallKB958687$
2009-10-18 14:42:33 —-HDC—- C:WINDOWS$NtUninstallKB973354$
2009-10-18 14:42:30 —-A—- C:WINDOWSsystem32wmpns.dll
2009-10-18 14:42:26 —-HDC—- C:WINDOWS$NtUninstallKB973540_WM9$
2009-10-18 14:40:38 —-HDC—- C:WINDOWS$NtUninstallKB970238$
2009-10-18 14:40:32 —-HDC—- C:WINDOWS$NtUninstallKB971486$
2009-10-18 14:40:27 —-HDC—- C:WINDOWS$NtUninstallKB960803$
2009-10-18 14:40:22 —-HDC—- C:WINDOWS$NtUninstallKB973815$
2009-10-18 14:40:17 —-HDC—- C:WINDOWS$NtUninstallKB968537$
2009-10-18 14:40:12 —-HDC—- C:WINDOWS$NtUninstallKB973525$
2009-10-18 14:39:06 —-HDC—- C:WINDOWS$NtUninstallKB975467$
2009-10-18 14:39:00 —-N—- C:WINDOWSsystem32spmsg.dll
2009-10-18 14:38:59 —-HDC—- C:WINDOWS$NtUninstallKB968389$
2009-10-18 14:28:49 —-A—- C:WINDOWSsystem32LCCoin20.dll
2009-10-18 14:28:48 —-DC—- C:WINDOWSsystem32DRVSTORE
2009-10-18 14:28:41 —-D—- C:Program FilesMicrosoft LifeCam
2009-10-18 14:28:10 —-SHD—- C:Config.Msi
2009-10-18 09:15:26 —-HDC—- C:WINDOWS$NtUninstallKB923561$
2009-10-18 09:15:21 —-HDC—- C:WINDOWS$NtUninstallKB971961$
2009-10-18 09:15:21 —-HD—- C:WINDOWS$hf_mig$
2009-10-18 09:04:41 —-HDC—- C:WINDOWS$NtUninstallKB970653-v3$
2009-10-18 08:33:16 —-D—- C:Documents and SettingsПлюшка 8)Application DataImagenomic
2009-10-17 23:16:33 —-D—- C:Documents and SettingsAll UsersApplication DatanView_Profiles
2009-10-17 22:52:05 —-D—- C:TEMP
2009-10-17 21:49:50 —-D—- C:WINDOWSCorel
2009-10-17 21:48:32 —-A—- C:WINDOWSIsUninst.exe
2009-10-17 21:41:01 —-D—- C:Downloads
2009-10-17 21:40:33 —-D—- C:Documents and SettingsПлюшка 8)Application DataDownload Master
2009-10-17 21:17:55 —-A—- C:WINDOWSsystem32Remover.ini
2009-10-17 21:17:55 —-A—- C:WINDOWSsystem32Remove.exe
2009-10-17 21:17:51 —-A—- C:WINDOWSsystem32GUCI_AVS.ini
2009-10-17 21:17:49 —-A—- C:WINDOWSsystem32GUCI_AVS.dll
2009-10-17 21:17:48 —-D—- C:WINDOWSPixArt
2009-10-17 21:17:48 —-D—- C:Program FilesCommon FilesPAP7501
2009-10-17 20:56:20 —-A—- C:WINDOWSsystem32vfwwdm32.dll
2009-10-17 20:36:34 —-D—- C:Documents and SettingsAll UsersApplication DataUDL
2009-10-17 20:35:00 —-D—- C:Program FilesCommon FilesInstallShield
2009-10-17 20:32:51 —-A—- C:WINDOWSsystem32PICSDK2.dll
2009-10-17 20:32:51 —-A—- C:WINDOWSsystem32PICSDK.ini
2009-10-17 20:32:51 —-A—- C:WINDOWSsystem32PICSDK.dll
2009-10-17 20:32:51 —-A—- C:WINDOWSsystem32PICEntry.dll
2009-10-17 20:32:51 —-A—- C:WINDOWSsystem32EpPicPrt.dll
2009-10-17 20:32:51 —-A—- C:WINDOWSsystem32EPPicMgr.dll
2009-10-17 20:32:48 —-D—- C:Documents and SettingsПлюшка 8)Application DataInstallShield
2009-10-17 20:32:10 —-D—- C:Program Filesepson
2009-10-17 20:31:51 —-A—- C:WINDOWSCDE DX4400DEFGIPS.ini
2009-10-17 20:31:09 —-D—- C:Documents and SettingsAll UsersApplication DataEPSON
2009-10-17 20:31:06 —-A—- C:WINDOWSsystem32E_DCINST.DLL
2009-10-17 20:31:01 —-A—- C:WINDOWSsystem32E_FLBCAE.DLL
2009-10-17 20:31:01 —-A—- C:WINDOWSsystem32E_FD4BCAE.DLL
2009-10-17 20:29:50 —-A—- C:WINDOWSsystem32eswiaml.dll
2009-10-17 20:29:50 —-A—- C:WINDOWSsystem32eswia7e.dll
2009-10-17 20:29:50 —-A—- C:WINDOWSsystem32esint7e.dll
2009-10-17 17:21:09 —-D—- C:Program FilesAshampoo
2009-10-17 17:17:58 —-A—- C:WINDOWSsystem32TUProgSt.exe
2009-10-17 17:17:57 —-A—- C:WINDOWSsystem32uxtuneup.dll
2009-10-17 17:17:57 —-A—- C:WINDOWSsystem32TuneUpDefragService.exe
2009-10-17 17:16:49 —-D—- C:Documents and SettingsПлюшка 8)Application DataTuneUp Software
2009-10-17 17:16:37 —-D—- C:Documents and SettingsAll UsersApplication DataTuneUp Software
2009-10-17 17:16:36 —-D—- C:Program FilesTuneUp Utilities 2009
2009-10-17 17:16:22 —-SHD—- C:Documents and SettingsAll UsersApplication Data{55A29068-F2CE-456C-9148-C869879E2357}
2009-10-17 17:05:34 —-D—- C:Program FilesICQ6Toolbar
2009-10-17 17:05:33 —-HD—- C:Program FilesInstallShield Installation Information
2009-10-17 17:05:32 —-D—- C:Documents and SettingsAll UsersApplication DataICQ
2009-10-17 17:04:52 —-D—- C:Documents and SettingsПлюшка 8)Application DataICQ
2009-10-17 17:04:23 —-D—- C:Program FilesICQ6.5
2009-10-17 16:27:33 —-A—- C:WINDOWSsystem32h323log.txt
2009-10-17 16:21:18 —-D—- C:WINDOWSnview
2009-10-17 16:21:18 —-A—- C:WINDOWSsystem32nwiz.exe
2009-10-17 16:21:18 —-A—- C:WINDOWSsystem32nvwrsru.dll
2009-10-17 16:21:18 —-A—- C:WINDOWSsystem32nvwrseng.dll
2009-10-17 16:21:18 —-A—- C:WINDOWSsystem32nvwimg.dll
2009-10-17 16:21:18 —-A—- C:WINDOWSsystem32nvwdmcpl.dll
2009-10-17 16:21:18 —-A—- C:WINDOWSsystem32nvudisp.exe
2009-10-17 16:21:18 —-A—- C:WINDOWSsystem32nvshell.dll
2009-10-17 16:21:18 —-A—- C:WINDOWSsystem32nvrsru.dll
2009-10-17 16:21:18 —-A—- C:WINDOWSsystem32nvrseng.dll
2009-10-17 16:21:18 —-A—- C:WINDOWSsystem32nvmccsrs.dll
2009-10-17 16:21:18 —-A—- C:WINDOWSsystem32nview.dll
2009-10-17 16:21:18 —-A—- C:WINDOWSsystem32nvdspsch.exe
2009-10-17 16:21:18 —-A—- C:WINDOWSsystem32nvcpluir.dll
2009-10-17 16:21:18 —-A—- C:WINDOWSsystem32nvcplui.exe
2009-10-17 16:21:18 —-A—- C:WINDOWSsystem32nvcolor.exe
2009-10-17 16:21:18 —-A—- C:WINDOWSsystem32nvappbar.exe
2009-10-17 16:21:18 —-A—- C:WINDOWSsystem32keystone.exe
2009-10-17 16:21:04 —-A—- C:WINDOWSsystem32nvuninst.exe
2009-10-17 16:20:57 —-A—- C:WINDOWSsystem32nvuide.exe
2009-10-17 16:20:52 —-A—- C:WINDOWSsystem32ksuser.dll
2009-10-17 16:20:49 —-A—- C:WINDOWSsystem32usbui.dll
2009-10-17 16:19:59 —-A—- C:WINDOWSimsins.BAK
2009-10-17 16:19:56 —-SHD—- C:WINDOWSInstaller
2009-10-17 16:19:56 —-D—- C:Program FilesCommon FilesODBC
2009-10-17 16:19:56 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2009-10-17 16:19:56 —-A—- C:WINDOWSODBCINST.INI
2009-10-17 16:19:54 —-D—- C:Program FilesCommon FilesSpeechEngines
2009-10-17 16:19:54 —-AD—- C:Program FilesCommon FilesMicrosoft Shared
2009-10-17 16:19:53 —-AD—- C:Program FilesCommon Files
2009-10-17 16:19:53 —-AD—- C:Program Files
2009-10-17 16:19:52 —-RA—- C:WINDOWSsystem32kbdtuq.dll
2009-10-17 16:19:52 —-RA—- C:WINDOWSsystem32kbdtuf.dll
2009-10-17 16:19:52 —-RA—- C:WINDOWSsystem32kbdazel.dll
2009-10-17 16:19:51 —-RA—- C:WINDOWSsystem32kbdhept.dll
2009-10-17 16:19:51 —-RA—- C:WINDOWSsystem32kbdhela3.dll
2009-10-17 16:19:51 —-RA—- C:WINDOWSsystem32kbdhela2.dll
2009-10-17 16:19:51 —-RA—- C:WINDOWSsystem32kbdhe319.dll
2009-10-17 16:19:51 —-RA—- C:WINDOWSsystem32kbdhe220.dll
2009-10-17 16:19:51 —-RA—- C:WINDOWSsystem32kbdhe.dll
2009-10-17 16:19:51 —-RA—- C:WINDOWSsystem32kbdgkl.dll
2009-10-17 16:19:50 —-RA—- C:WINDOWSsystem32kbdlv1.dll
2009-10-17 16:19:50 —-RA—- C:WINDOWSsystem32kbdlv.dll
2009-10-17 16:19:50 —-RA—- C:WINDOWSsystem32kbdlt1.dll
2009-10-17 16:19:50 —-RA—- C:WINDOWSsystem32kbdlt.dll
2009-10-17 16:19:50 —-RA—- C:WINDOWSsystem32kbdest.dll
2009-10-17 16:19:49 —-RA—- C:WINDOWSsystem32kbdycl.dll
2009-10-17 16:19:49 —-RA—- C:WINDOWSsystem32kbdsl1.dll
2009-10-17 16:19:49 —-RA—- C:WINDOWSsystem32kbdsl.dll
2009-10-17 16:19:49 —-RA—- C:WINDOWSsystem32kbdro.dll
2009-10-17 16:19:49 —-RA—- C:WINDOWSsystem32kbdpl1.dll
2009-10-17 16:19:49 —-RA—- C:WINDOWSsystem32kbdpl.dll
2009-10-17 16:19:49 —-RA—- C:WINDOWSsystem32kbdhu1.dll
2009-10-17 16:19:49 —-RA—- C:WINDOWSsystem32kbdhu.dll
2009-10-17 16:19:49 —-RA—- C:WINDOWSsystem32kbdcz2.dll
2009-10-17 16:19:49 —-RA—- C:WINDOWSsystem32kbdcz1.dll
2009-10-17 16:19:49 —-RA—- C:WINDOWSsystem32kbdcz.dll
2009-10-17 16:19:49 —-RA—- C:WINDOWSsystem32kbdcr.dll
2009-10-17 16:19:49 —-RA—- C:WINDOWSsystem32KBDAL.DLL
2009-10-17 16:19:47 —-A—- C:WINDOWSsystem32kbdycc.dll
2009-10-17 16:19:47 —-A—- C:WINDOWSsystem32kbduzb.dll
2009-10-17 16:19:47 —-A—- C:WINDOWSsystem32kbdur.dll
2009-10-17 16:19:47 —-A—- C:WINDOWSsystem32kbdtat.dll
2009-10-17 16:19:47 —-A—- C:WINDOWSsystem32kbdmon.dll
2009-10-17 16:19:47 —-A—- C:WINDOWSsystem32kbdkyr.dll
2009-10-17 16:19:47 —-A—- C:WINDOWSsystem32kbdkaz.dll
2009-10-17 16:19:47 —-A—- C:WINDOWSsystem32kbdbu.dll
2009-10-17 16:19:47 —-A—- C:WINDOWSsystem32kbdblr.dll
2009-10-17 16:19:47 —-A—- C:WINDOWSsystem32kbdaze.dll
2009-10-17 16:19:46 —-A—- C:WINDOWSsystem32irclass.dll
2009-10-17 16:19:45 —-N—- C:WINDOWSsystem32CONFIG.TMP
2009-10-17 16:19:45 —-A—- C:WINDOWSTASKMAN.EXE
2009-10-17 16:19:44 —-A—- C:WINDOWSsystem32batt.dll
2009-10-17 16:19:44 —-A—- C:WINDOWSNOTEPAD.EXE
2009-10-17 16:19:43 —-A—- C:WINDOWSsystem32storprop.dll
2009-10-17 16:19:40 —-ASH—- C:Documents and SettingsAll UsersApplication Datadesktop.ini
2009-10-17 16:19:34 —-RA—- C:WINDOWSSET8.tmp
2009-10-17 16:19:33 —-RA—- C:WINDOWSSET4.tmp
2009-10-17 16:19:32 —-RA—- C:WINDOWSSET3.tmp
2009-10-17 16:19:28 —-D—- C:WINDOWSsystem32CatRoot2
2009-10-17 16:19:28 —-D—- C:WINDOWSsystem32CatRoot
2009-10-17 16:19:23 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
2009-10-17 16:19:04 —-A—- C:WINDOWSsetuplog.txt
2009-10-17 16:17:28 —-D—- C:Documents and SettingsПлюшка 8)Application DataskypePM
2009-10-17 16:16:48 —-A—- C:WINDOWSsystem32nvwssr.dll
2009-10-17 16:16:48 —-A—- C:WINDOWSsystem32nvwss.dll
2009-10-17 16:16:48 —-A—- C:WINDOWSsystem32nvwddi.dll
2009-10-17 16:16:47 —-A—- C:WINDOWSsystem32nvvitvsr.dll
2009-10-17 16:16:47 —-A—- C:WINDOWSsystem32nvvitvs.dll
2009-10-17 16:16:47 —-A—- C:WINDOWSsystem32nvoglnt.dll
2009-10-17 16:16:47 —-A—- C:WINDOWSsystem32nvnt4cpl.dll
2009-10-17 16:16:47 —-A—- C:WINDOWSsystem32nvmoblsr.dll
2009-10-17 16:16:47 —-A—- C:WINDOWSsystem32nvmobls.dll
2009-10-17 16:16:47 —-A—- C:WINDOWSsystem32nvmctray.dll
2009-10-17 16:16:47 —-A—- C:WINDOWSsystem32nvmccssr.dll
2009-10-17 16:16:47 —-A—- C:WINDOWSsystem32nvmccss.dll
2009-10-17 16:16:47 —-A—- C:WINDOWSsystem32nvmccs.dll
2009-10-17 16:16:44 —-A—- C:WINDOWSsystem32nvgamesr.dll
19 октября, 2009 в 7:02 пп #26435
Аноним
Гость
- Темы:532
- Сообщений:1553
2009-10-17 16:16:44 —-A—- C:WINDOWSsystem32nvgames.dll
2009-10-17 16:16:43 —-A—- C:WINDOWSsystem32nvdispsr.dll
2009-10-17 16:16:43 —-A—- C:WINDOWSsystem32nvdisps.dll
2009-10-17 16:16:43 —-A—- C:WINDOWSsystem32nvcuda.dll
2009-10-17 16:16:41 —-A—- C:WINDOWSsystem32nvsvc32.exe
2009-10-17 16:16:41 —-A—- C:WINDOWSsystem32nvcpl.dll
2009-10-17 16:16:41 —-A—- C:WINDOWSsystem32nvcodins.dll
2009-10-17 16:16:41 —-A—- C:WINDOWSsystem32nvcod.dll
2009-10-17 16:16:41 —-A—- C:WINDOWSsystem32nvapi.dll
2009-10-17 16:16:41 —-A—- C:WINDOWSsystem32nv4_disp.dll
2009-10-17 16:16:15 —-A—- C:WINDOWSsystem32RTLCPAPI.dll
2009-10-17 16:16:15 —-A—- C:WINDOWSSOUNDMAN.EXE
2009-10-17 16:16:14 —-A—- C:WINDOWSsystem32RTLCPL.EXE
2009-10-17 16:16:13 —-A—- C:WINDOWSAlcrmv.exe
2009-10-17 16:16:04 —-N—- C:WINDOWSsystem32idecoiins.dll
2009-10-17 16:16:04 —-A—- C:WINDOWSsystem32NVCOI.DLL
2009-10-17 16:16:04 —-A—- C:WINDOWSsystem32idecoi5.dll
2009-10-17 16:16:04 —-A—- C:WINDOWSsystem32idecoi.dll
2009-10-17 16:16:01 —-A—- C:DriverPack_MassStorage_Changelog.txt
2009-10-17 16:15:59 —-A—- C:WINDOWSsystem32vuins32.dll
2009-10-17 16:15:59 —-A—- C:WINDOWSsystem32difxapi.dll
2009-10-17 16:15:55 —-A—- C:WINDOWSsystem32nvusmb.exe
2009-10-17 16:15:55 —-A—- C:WINDOWSsystem32NVCOSMB.DLL
2009-10-17 16:15:55 —-A—- C:DriverPack_LAN_wnt5_x86-32.txt
2009-10-17 16:15:48 —-SHD—- C:System Volume Information
2009-10-17 16:15:48 —-D—- C:Documents and Settings
2009-10-17 16:04:23 —-ASH—- C:boot.ini
2009-10-17 16:02:34 —-RSHDC—- C:WINDOWSsystem32dllcache
2009-10-17 16:02:34 —-RSD—- C:WINDOWSFonts
2009-10-17 16:02:34 —-RD—- C:WINDOWSWeb
2009-10-17 16:02:34 —-HD—- C:WINDOWSinf
2009-10-17 16:02:34 —-D—- C:WINDOWSWinSxS
2009-10-17 16:02:34 —-D—- C:WINDOWStwain_32
2009-10-17 16:02:34 —-D—- C:WINDOWSTemp
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32wins
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32wbem
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32usmt
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32spool
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32ShellExt
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32Setup
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32ru-ru
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32ru
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32ras
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32oobe
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32npp
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32mui
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32inetsrv
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32IME
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32icsxml
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32ias
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32export
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32drivers
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32dhcp
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem32config
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem323com_dmi
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem323076
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem322052
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem321054
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem321049
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem321042
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem321041
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem321037
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem321033
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem321031
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem321028
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem321025
2009-10-17 16:02:34 —-D—- C:WINDOWSsystem
2009-10-17 16:02:34 —-D—- C:WINDOWSsecurity
2009-10-17 16:02:34 —-D—- C:WINDOWSResources
2009-10-17 16:02:34 —-D—- C:WINDOWSrepair
2009-10-17 16:02:34 —-D—- C:WINDOWSProvisioning
2009-10-17 16:02:34 —-D—- C:WINDOWSPeerNet
2009-10-17 16:02:34 —-D—- C:WINDOWSpchealth
2009-10-17 16:02:34 —-D—- C:WINDOWSNetwork Diagnostic
2009-10-17 16:02:34 —-D—- C:WINDOWSmui
2009-10-17 16:02:34 —-D—- C:WINDOWSmsapps
2009-10-17 16:02:34 —-D—- C:WINDOWSmsagent
2009-10-17 16:02:34 —-D—- C:WINDOWSMedia
2009-10-17 16:02:34 —-D—- C:WINDOWSL2Schemas
2009-10-17 16:02:34 —-D—- C:WINDOWSjava
2009-10-17 16:02:34 —-D—- C:WINDOWSime
2009-10-17 16:02:34 —-D—- C:WINDOWSHelp
2009-10-17 16:02:34 —-D—- C:WINDOWSehome
2009-10-17 16:02:34 —-D—- C:WINDOWSDriver Cache
2009-10-17 16:02:34 —-D—- C:WINDOWSDebug
2009-10-17 16:02:34 —-D—- C:WINDOWSConnection Wizard
2009-10-17 16:02:34 —-D—- C:WINDOWSConfig
2009-10-17 16:02:34 —-D—- C:WINDOWSAppPatch
2009-10-17 16:02:34 —-D—- C:WINDOWSaddins
2009-10-17 16:02:34 —-D—- C:WINDOWS
2009-10-17 16:02:34 —-AD—- C:WINDOWSsystem32
2009-10-17 16:01:02 —-D—- C:Documents and SettingsПлюшка 8)Application DataMacromedia
2009-10-17 15:27:26 —-D—- C:Documents and SettingsПлюшка 8)Application DataUSBSafelyRemove
2009-10-17 15:22:54 —-SHD—- C:RECYCLER
2009-10-17 15:15:01 —-D—- C:Documents and SettingsПлюшка 8)Application DataACD Systems
2009-10-17 15:14:28 —-D—- C:Documents and SettingsПлюшка 8)Application DataFastStone
2009-10-17 15:13:48 —-D—- C:Documents and SettingsПлюшка 8)Application DataAcronis
2009-10-17 15:08:35 —-D—- C:Documents and SettingsПлюшка 8)Application DataDAEMON Tools Pro
2009-10-17 15:08:35 —-D—- C:Documents and SettingsПлюшка 8)Application DataDAEMON Tools
2009-10-17 15:07:56 —-D—- C:Documents and SettingsПлюшка 8)Application DataSkype
2009-10-17 15:07:44 —-D—- C:Documents and SettingsAll UsersApplication DataSlySoft
2009-10-17 15:07:35 —-D—- C:Documents and SettingsAll UsersApplication DataAcronis
2009-10-17 15:04:31 —-D—- C:Program FilesESET
2009-10-17 15:04:31 —-D—- C:Documents and SettingsAll UsersApplication DataESET
2009-10-17 15:04:13 —-D—- C:Program FilesТелефоны Беларуси 2007
2009-10-17 15:04:07 —-D—- C:Program FilesCityInfo
2009-10-17 15:04:01 —-D—- C:Program FilesTotal Commander
2009-10-17 15:03:44 —-D—- C:Program FilesSlySoft
2009-10-17 15:03:38 —-D—- C:Documents and SettingsAll UsersApplication DataDAEMON Tools Lite
2009-10-17 15:03:36 —-D—- C:Program FilesDAEMON Tools Toolbar
2009-10-17 15:03:21 —-D—- C:Documents and SettingsПлюшка 8)Application DataDAEMON Tools Lite
2009-10-17 15:03:20 —-D—- C:Program FilesDAEMON Tools Lite
2009-10-17 15:03:13 —-D—- C:Program FilesCommon FilesNero
2009-10-17 15:03:13 —-A—- C:WINDOWSsystem32imagXpr7.dll
2009-10-17 15:03:12 —-A—- C:WINDOWSsystem32imagX7.dll
2009-10-17 15:03:06 —-D—- C:Program FilesNero 9 Micro
2009-10-17 15:02:57 —-D—- C:Program FilesAlcohol Soft
2009-10-17 15:02:46 —-D—- C:Program FilesUnlocker
2009-10-17 15:02:41 —-D—- C:Program FilesToolTipFixer
2009-10-17 15:02:40 —-A—- C:WINDOWSsystem32htdel.bat
2009-10-17 15:02:40 —-A—- C:WINDOWSsystem32HashTab.dll
2009-10-17 15:02:38 —-D—- C:Program FilesFileMenu Tools
2009-10-17 15:02:37 —-D—- C:Program FilesPROWiSe
2009-10-17 15:02:35 —-D—- C:WINDOWSsystem32CPLDAPU
2009-10-17 15:02:33 —-D—- C:Program FilesAlfaClock Free Edition
2009-10-17 15:02:32 —-D—- C:Program FilesTarget
2009-10-17 15:02:32 —-A—- C:WINDOWSsystem32Target.dll
2009-10-17 15:02:16 —-D—- C:Program FilesVistaDriveIcon
2009-10-17 15:02:06 —-D—- C:Program FilesVisualTaskTips
2009-10-17 15:02:05 —-D—- C:Program FilesTaskSwitchXP
2009-10-17 15:01:54 —-AD—- C:WINDOWSCursors
2009-10-17 15:01:50 —-D—- C:Program FilesXP Tweaker
2009-10-17 15:01:49 —-AD—- C:Program FilesDefraggler
2009-10-17 15:01:47 —-D—- C:Documents and SettingsAll UsersApplication DataUSBSRService
2009-10-17 15:01:46 —-D—- C:Program FilesUSB Safely Remove
2009-10-17 15:01:43 —-D—- C:Program FilesPC Wizard 2008
2009-10-17 15:01:42 —-D—- C:Program FilesHWMonitor
2009-10-17 15:01:24 —-D—- C:Documents and SettingsПлюшка 8)Application DataURSoft
2009-10-17 15:01:17 —-D—- C:Program FilesYour Uninstaller 2008
2009-10-17 15:00:55 —-D—- C:Program FilesAcronis
2009-10-17 15:00:54 —-D—- C:Program FilesCommon FilesAcronis
2009-10-17 15:00:29 —-D—- C:Program FilesGetData
2009-10-17 15:00:28 —-AD—- C:Documents and SettingsAll UsersApplication DataTEMP
2009-10-17 15:00:16 —-AD—- C:Program FilesRecuva
2009-10-17 15:00:13 —-D—- C:Program FilesURL-Album
2009-10-17 15:00:11 —-D—- C:Program FilesCodebox
2009-10-17 15:00:11 —-D—- C:Documents and SettingsПлюшка 8)Application DataBitmeter2
2009-10-17 15:00:11 —-D—- C:Documents and SettingsAll UsersApplication DataBitmeter2
2009-10-17 15:00:03 —-D—- C:Program FilesYandex
2009-10-17 15:00:03 —-D—- C:Program FilesCommon FilesYandex
2009-10-17 15:00:03 —-D—- C:Documents and SettingsПлюшка 8)Application DataMozilla
2009-10-17 15:00:01 —-D—- C:Program FilesDownload Master
2009-10-17 14:59:36 —-RD—- C:Program FilesSkype
2009-10-17 14:59:36 —-D—- C:Program FilesCommon FilesSkype
2009-10-17 14:57:57 —-D—- C:Documents and SettingsAll UsersApplication DataSkype
2009-10-17 14:57:52 —-D—- C:Program FilesMozilla Firefox
2009-10-17 14:57:44 —-D—- C:Documents and SettingsAll UsersApplication DataApple Computer
2009-10-17 14:57:41 —-D—- C:Program FilesQuickTime Alternative
2009-10-17 14:57:34 —-A—- C:WINDOWSsystem32unrar.dll
2009-10-17 14:57:34 —-A—- C:WINDOWSsystem32rmoc3260.dll
2009-10-17 14:57:34 —-A—- C:WINDOWSsystem32pndx5032.dll
2009-10-17 14:57:34 —-A—- C:WINDOWSsystem32pndx5016.dll
2009-10-17 14:57:34 —-A—- C:WINDOWSsystem32pncrt.dll
2009-10-17 14:57:32 —-A—- C:WINDOWSsystem32yv12vfw.dll
2009-10-17 14:57:32 —-A—- C:WINDOWSsystem32xvidvfw.dll
2009-10-17 14:57:32 —-A—- C:WINDOWSsystem32xvidcore.dll
2009-10-17 14:57:32 —-A—- C:WINDOWSsystem32qt-dx331.dll
2009-10-17 14:57:32 —-A—- C:WINDOWSsystem32dpl100.dll
2009-10-17 14:57:31 —-A—- C:WINDOWSsystem32ff_vfw.dll.manifest
2009-10-17 14:57:31 —-A—- C:WINDOWSsystem32ff_vfw.dll
2009-10-17 14:57:31 —-A—- C:WINDOWSsystem32divx.dll
2009-10-17 14:57:30 —-D—- C:Program FilesK-Lite Codec Pack
2009-10-17 14:57:30 —-D—- C:Documents and SettingsПлюшка 8)Application DataReal
2009-10-17 14:57:30 —-D—- C:Documents and SettingsAll UsersApplication DataReal
2009-10-17 14:57:17 —-D—- C:Program FilesLight Alloy
2009-10-17 14:56:30 —-N—- C:WINDOWSsystem32vxblock.dll
2009-10-17 14:56:30 —-N—- C:WINDOWSsystem32pxwave.dll
2009-10-17 14:56:30 —-N—- C:WINDOWSsystem32pxsfs.dll
2009-10-17 14:56:30 —-N—- C:WINDOWSsystem32pxmas.dll
2009-10-17 14:56:30 —-N—- C:WINDOWSsystem32pxinsa64.exe
2009-10-17 14:56:30 —-N—- C:WINDOWSsystem32pxhpinst.exe
2009-10-17 14:56:30 —-N—- C:WINDOWSsystem32pxdrv.dll
2009-10-17 14:56:30 —-N—- C:WINDOWSsystem32pxcpya64.exe
2009-10-17 14:56:30 —-N—- C:WINDOWSsystem32pxafs.dll
2009-10-17 14:56:30 —-N—- C:WINDOWSsystem32px.dll
2009-10-17 14:56:29 —-D—- C:Program FilesWinamp
2009-10-17 14:56:29 —-D—- C:Documents and SettingsПлюшка 8)Application DataWinamp
2009-10-17 14:56:18 —-D—- C:Program FilesKMPlayer
2009-10-17 14:56:16 —-D—- C:Program FilesAIMP2
2009-10-17 14:56:01 —-D—- C:Documents and SettingsAll UsersApplication DataACD Systems
2009-10-17 14:55:59 —-D—- C:Program FilesCommon FilesACD Systems
2009-10-17 14:55:59 —-D—- C:Program FilesACD Systems
2009-10-17 14:55:37 —-D—- C:Program FilesFastStone Image Viewer
2009-10-17 14:54:43 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
2009-10-17 14:54:14 —-D—- C:Program FilesBonjour
2009-10-17 14:50:41 —-D—- C:Program FilesAdobe
2009-10-17 14:50:19 —-D—- C:Program FilesCommon FilesMacrovision Shared
2009-10-17 14:50:01 —-D—- C:Program FilesCommon FilesAdobe
2009-10-17 14:48:29 —-D—- C:Program FilesPaint.NET
2009-10-17 14:48:28 —-A—- C:WINDOWSsystem32wiaaut.dll
2009-10-17 14:47:27 —-D—- C:Program FilesCommon FilesABBYY
2009-10-17 14:47:20 —-D—- C:Program FilesABBYY FineReader 9.0
2009-10-17 14:47:20 —-D—- C:Documents and SettingsAll UsersApplication DataABBYY
2009-10-17 14:46:24 —-N—- C:WINDOWSsystem32fpres632.dll
2009-10-17 14:46:24 —-N—- C:WINDOWSsystem32fpmon6.dll
2009-10-17 14:46:13 —-D—- C:Program FilesPunto Switcher
2009-10-17 14:46:13 —-AD—- C:Documents and SettingsПлюшка 8)Application DataYandex
2009-10-17 14:46:12 —-AD—- C:Program FilesWinDjView
2009-10-17 14:46:09 —-D—- C:Program FilesSTDU Viewer
2009-10-17 14:46:09 —-D—- C:Program FilesCommon FilesSTDUtility
2009-10-17 14:46:06 —-D—- C:Program FilesNotepad++
2009-10-17 14:46:06 —-D—- C:Documents and SettingsПлюшка 8)Application DataNotepad++
2009-10-17 14:45:28 —-A—- C:WINDOWSsystem32msonpmon.dll
2009-10-17 14:43:14 —-D—- C:IDE
2009-10-17 14:43:11 —-D—- C:Program FilesMicrosoft Visual Studio 8
2009-10-17 14:40:39 —-A—- C:WINDOWSsystem32mdimon.dll
2009-10-17 14:40:05 —-D—- C:Program FilesMicrosoft Works
2009-10-17 14:39:55 —-D—- C:Program FilesMicrosoft Visual Studio
2009-10-17 14:39:55 —-D—- C:Program FilesCommon FilesDESIGNER
2009-10-17 14:39:43 —-D—- C:Program FilesMicrosoft.NET
2009-10-17 14:38:01 —-D—- C:WINDOWSSHELLNEW
2009-10-17 14:37:54 —-D—- C:Program FilesMicrosoft Office
2009-10-17 14:37:54 —-D—- C:Documents and SettingsAll UsersApplication DataMicrosoft Help
2009-10-17 14:37:42 —-RHD—- C:MSOCache
2009-10-17 14:35:11 —-D—- C:Program FilesWinRAR
2009-10-17 14:35:09 —-D—- C:Program Files7-Zip
2009-10-17 14:30:53 —-D—- C:WINDOWSsystem32XPSViewer
2009-10-17 14:30:51 —-D—- C:Program FilesMSBuild
2009-10-17 14:30:50 —-D—- C:WINDOWSsystem32en-US
2009-10-17 14:30:47 —-D—- C:Program FilesReference Assemblies
2009-10-17 14:30:20 —-N—- C:WINDOWSsystem32xpssvcs.dll
2009-10-17 14:30:20 —-N—- C:WINDOWSsystem32xpsshhdr.dll
2009-10-17 14:30:20 —-N—- C:WINDOWSsystem32prntvpt.dll
2009-10-17 14:26:37 —-D—- C:Program FilesMicrosoft Silverlight
2009-10-17 14:26:16 —-A—- C:WINDOWSsystem32javaws.exe
2009-10-17 14:26:16 —-A—- C:WINDOWSsystem32javaw.exe
2009-10-17 14:26:16 —-A—- C:WINDOWSsystem32java.exe
2009-10-17 14:26:16 —-A—- C:WINDOWSsystem32deploytk.dll
2009-10-17 14:26:07 —-D—- C:Program FilesJava
2009-10-17 14:25:59 —-D—- C:WINDOWSsystem32Adobe
2009-10-17 14:25:59 —-D—- C:Documents and SettingsПлюшка 8)Application DataAdobe
2009-10-17 14:25:53 —-A—- C:WINDOWSsystem32d3dx10_40.dll
2009-10-17 14:25:53 —-A—- C:WINDOWSsystem32D3DCompiler_40.dll
2009-10-17 14:25:38 —-A—- C:WINDOWSsystem32XAudio2_3.dll
2009-10-17 14:25:38 —-A—- C:WINDOWSsystem32XAudio2_2.dll
2009-10-17 14:25:38 —-A—- C:WINDOWSsystem32XAPOFX1_2.dll
2009-10-17 14:25:38 —-A—- C:WINDOWSsystem32XAPOFX1_1.dll
2009-10-17 14:25:38 —-A—- C:WINDOWSsystem32xactengine3_3.dll
2009-10-17 14:25:38 —-A—- C:WINDOWSsystem32xactengine3_2.dll
2009-10-17 14:25:38 —-A—- C:WINDOWSsystem32X3DAudio1_5.dll
2009-10-17 14:25:38 —-A—- C:WINDOWSsystem32D3DX9_40.dll
2009-10-17 14:25:38 —-A—- C:WINDOWSsystem32d3dx10_39.dll
2009-10-17 14:25:38 —-A—- C:WINDOWSsystem32D3DCompiler_39.dll
2009-10-17 14:25:37 —-A—- C:WINDOWSsystem32XAudio2_1.dll
2009-10-17 14:25:37 —-A—- C:WINDOWSsystem32XAudio2_0.dll
2009-10-17 14:25:37 —-A—- C:WINDOWSsystem32XAPOFX1_0.dll
2009-10-17 14:25:37 —-A—- C:WINDOWSsystem32xactengine3_1.dll
2009-10-17 14:25:37 —-A—- C:WINDOWSsystem32X3DAudio1_4.dll
2009-10-17 14:25:37 —-A—- C:WINDOWSsystem32D3DX9_39.dll
2009-10-17 14:25:37 —-A—- C:WINDOWSsystem32D3DX9_38.dll
2009-10-17 14:25:37 —-A—- C:WINDOWSsystem32d3dx10_38.dll
2009-10-17 14:25:37 —-A—- C:WINDOWSsystem32D3DCompiler_38.dll
2009-10-17 14:25:36 —-A—- C:WINDOWSsystem32xactengine3_0.dll
2009-10-17 14:25:36 —-A—- C:WINDOWSsystem32xactengine2_10.dll
2009-10-17 14:25:36 —-A—- C:WINDOWSsystem32X3DAudio1_3.dll
2009-10-17 14:25:36 —-A—- C:WINDOWSsystem32D3DX9_37.dll
2009-10-17 14:25:36 —-A—- C:WINDOWSsystem32d3dx9_36.dll
2009-10-17 14:25:36 —-A—- C:WINDOWSsystem32d3dx10_37.dll
2009-10-17 14:25:36 —-A—- C:WINDOWSsystem32d3dx10_36.dll
2009-10-17 14:25:36 —-A—- C:WINDOWSsystem32D3DCompiler_37.dll
2009-10-17 14:25:36 —-A—- C:WINDOWSsystem32D3DCompiler_36.dll
2009-10-17 14:25:35 —-A—- C:WINDOWSsystem32xactengine2_9.dll
2009-10-17 14:25:35 —-A—- C:WINDOWSsystem32xactengine2_8.dll
2009-10-17 14:25:35 —-A—- C:WINDOWSsystem32X3DAudio1_2.dll
2009-10-17 14:25:35 —-A—- C:WINDOWSsystem32d3dx9_35.dll
2009-10-17 14:25:35 —-A—- C:WINDOWSsystem32d3dx10_35.dll
2009-10-17 14:25:35 —-A—- C:WINDOWSsystem32d3dx10_34.dll
2009-10-17 14:25:35 —-A—- C:WINDOWSsystem32D3DCompiler_35.dll
2009-10-17 14:25:35 —-A—- C:WINDOWSsystem32D3DCompiler_34.dll
2009-10-17 14:25:34 —-A—- C:WINDOWSsystem32xinput1_3.dll
2009-10-17 14:25:34 —-A—- C:WINDOWSsystem32xactengine2_7.dll
2009-10-17 14:25:34 —-A—- C:WINDOWSsystem32d3dx9_34.dll
2009-10-17 14:25:34 —-A—- C:WINDOWSsystem32d3dx10_33.dll
2009-10-17 14:25:34 —-A—- C:WINDOWSsystem32D3DCompiler_33.dll
2009-10-17 14:25:33 —-A—- C:WINDOWSsystem32xactengine2_6.dll
2009-10-17 14:25:33 —-A—- C:WINDOWSsystem32d3dx9_33.dll
2009-10-17 14:25:32 —-A—- C:WINDOWSsystem32xinput1_2.dll
2009-10-17 14:25:32 —-A—- C:WINDOWSsystem32xactengine2_5.dll
2009-10-17 14:25:32 —-A—- C:WINDOWSsystem32xactengine2_4.dll
2009-10-17 14:25:32 —-A—- C:WINDOWSsystem32xactengine2_3.dll
2009-10-17 14:25:32 —-A—- C:WINDOWSsystem32x3daudio1_1.dll
2009-10-17 14:25:32 —-A—- C:WINDOWSsystem32d3dx9_32.dll
2009-10-17 14:25:32 —-A—- C:WINDOWSsystem32d3dx9_31.dll
2009-10-17 14:25:31 —-A—- C:WINDOWSsystem32xinput1_1.dll
2009-10-17 14:25:31 —-A—- C:WINDOWSsystem32xactengine2_2.dll
2009-10-17 14:25:31 —-A—- C:WINDOWSsystem32xactengine2_1.dll
2009-10-17 14:25:28 —-A—- C:WINDOWSsystem32xinput9_1_0.dll
2009-10-17 14:25:28 —-A—- C:WINDOWSsystem32xactengine2_0.dll
2009-10-17 14:25:28 —-A—- C:WINDOWSsystem32x3daudio1_0.dll
2009-10-17 14:25:28 —-A—- C:WINDOWSsystem32d3dx9_30.dll
2009-10-17 14:25:28 —-A—- C:WINDOWSsystem32d3dx9_29.dll
2009-10-17 14:25:28 —-A—- C:WINDOWSsystem32d3dx9_28.dll
2009-10-17 14:25:27 —-A—- C:WINDOWSsystem32d3dx9_27.dll
2009-10-17 14:25:27 —-A—- C:WINDOWSsystem32d3dx9_26.dll
2009-10-17 14:25:27 —-A—- C:WINDOWSsystem32d3dx9_25.dll
2009-10-17 14:25:26 —-A—- C:WINDOWSsystem32d3dx9_24.dll
2009-10-17 14:25:08 —-D—- C:WINDOWSsystem32DirectX
2009-10-17 14:25:07 —-D—- C:WINDOWSLogs
2009-10-17 14:20:20 —-A—- C:WINDOWSsystem32WdfCoInstaller01005.dll
2009-10-17 14:20:18 —-A—- C:WINDOWSKHALMNPR.Exe
2009-10-17 14:15:45 —-A—- C:WINDOWSltmsg.exe
2009-10-17 14:10:49 —-D—- C:WINDOWSsystem32ReinstallBackups
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoZht.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoZhc.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoTr.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoTh.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoSv.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoSl.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoSk.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoRu.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoPtb.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoPt.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoPl.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoNo.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoNl.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoKo.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoJa.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoIt.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoHu.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoHe.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoFr.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoFi.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoEsm.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoEs.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoENU.dll
2009-10-17 14:10:21 —-A—- C:WINDOWSsystem32NvRCoEng.dll
2009-10-17 14:10:20 —-A—- C:WINDOWSsystem32NvRCoEl.dll
2009-10-17 14:10:20 —-A—- C:WINDOWSsystem32NvRCoDe.dll
2009-10-17 14:10:20 —-A—- C:WINDOWSsystem32NvRCoDa.dll
2009-10-17 14:10:20 —-A—- C:WINDOWSsystem32NvRCoCs.dll
2009-10-17 14:10:20 —-A—- C:WINDOWSsystem32NvRCoAr.dll
2009-10-17 14:10:20 —-A—- C:WINDOWSsystem32nvraiins.dll
2009-10-17 14:10:20 —-A—- C:WINDOWSsystem32nvraidco.dll
2009-10-17 13:58:28 —-A—- C:WINDOWSsystem32vfp9t.dll
2009-10-17 13:58:28 —-A—- C:WINDOWSsystem32vfp9rrus.dll
2009-10-17 13:58:28 —-A—- C:WINDOWSsystem32VFP9RENU.DLL
2009-10-17 13:58:28 —-A—- C:WINDOWSsystem32vfp9r.dll
2009-10-17 13:58:28 —-A—- C:WINDOWSsystem32VFP9ENU.DLL
2009-10-17 13:58:28 —-A—- C:WINDOWSsystem32vfp8t.dll
2009-10-17 13:58:28 —-A—- C:WINDOWSsystem32vfp8rrus.dll
2009-10-17 13:58:28 —-A—- C:WINDOWSsystem32VFP8RENU.DLL
2009-10-17 13:58:28 —-A—- C:WINDOWSsystem32vfp8r.dll
2009-10-17 13:58:28 —-A—- C:WINDOWSsystem32vfp8enu.dll
2009-10-17 13:58:28 —-A—- C:WINDOWSsystem32vfp7t.dll
2009-10-17 13:58:28 —-A—- C:WINDOWSsystem32VFP7RENU.DLL
2009-10-17 13:58:28 —-A—- C:WINDOWSsystem32vfp7r.dll
2009-10-17 13:58:27 —-A—- C:WINDOWSsystem32VFP6T.DLL
2009-10-17 13:58:27 —-A—- C:WINDOWSsystem32VFP6RENU.DLL
2009-10-17 13:58:27 —-A—- C:WINDOWSsystem32VFP6R.DLL
2009-10-17 13:58:21 —-A—- C:WINDOWSsystem32zlib1.dll
2009-10-17 13:58:21 —-A—- C:WINDOWSsystem32wrap_oal.dll
2009-10-17 13:58:21 —-A—- C:WINDOWSsystem32wnaspi32.dll
2009-10-17 13:58:21 —-A—- C:WINDOWSsystem32Vbrun300.dll
2009-10-17 13:58:21 —-A—- C:WINDOWSsystem32vbrun200.dll
2009-10-17 13:58:21 —-A—- C:WINDOWSsystem32vbrun100.dll
2009-10-17 13:58:21 —-A—- C:WINDOWSsystem32Vb40032.dll
2009-10-17 13:58:21 —-A—- C:WINDOWSsystem32Vb40016.dll
2009-10-17 13:58:21 —-A—- C:WINDOWSsystem32ssleay32.dll
2009-10-17 13:58:21 —-A—- C:WINDOWSsystem32OpenAL32.dll
2009-10-17 13:58:21 —-A—- C:WINDOWSsystem32msvcrt10.dll
2009-10-17 13:58:21 —-A—- C:WINDOWSsystem32msvcr71.dll
2009-10-17 13:58:21 —-A—- C:WINDOWSsystem32msvcr70.dll
2009-10-17 13:58:21 —-A—- C:WINDOWSsystem32msvcp71.dll
2009-10-17 13:58:21 —-A—- C:WINDOWSsystem32MSVCP70.DLL
2009-10-17 13:58:21 —-A—- C:WINDOWSsystem32msvci70.dll
2009-10-17 13:58:21 —-A—- C:WINDOWSsystem32MSSTKPRP.DLL
2009-10-17 13:58:21 —-A—- C:WINDOWSsystem32msstdfmt.dll
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32MFC71u.dll
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32MFC71KOR.DLL
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32MFC71JPN.DLL
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32MFC71ITA.DLL
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32MFC71FRA.DLL
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32MFC71ESP.DLL
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32MFC71ENU.DLL
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32MFC71DEU.DLL
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32MFC71CHT.DLL
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32MFC71CHS.DLL
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32MFC71.dll
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32mfc70u.dll
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32mfc70kor.dll
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32mfc70jpn.dll
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32mfc70ita.dll
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32mfc70fra.dll
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32mfc70esp.dll
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32mfc70enu.dll
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32mfc70deu.dll
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32mfc70cht.dll
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32mfc70chs.dll
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32mfc70.dll
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32libssl32.dll
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32libeay32.dll
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32atl71.dll
2009-10-17 13:58:20 —-A—- C:WINDOWSsystem32atl70.dll
2009-10-17 13:39:38 —-D—- C:WINDOWSInstall
2009-10-17 13:38:10 —-D—- C:Documents and SettingsПлюшка 8)Application DataIdentities
2009-10-17 13:38:06 —-HD—- C:Program FilesUninstall Information
2009-10-17 13:37:50 —-SD—- C:Documents and SettingsПлюшка 8)Application DataMicrosoft
2009-10-17 13:37:50 —-ASH—- C:Documents and SettingsПлюшка 8)Application Datadesktop.ini
2009-10-17 13:34:49 —-SD—- C:WINDOWSsystem32Microsoft
2009-10-17 13:34:49 —-D—- C:WINDOWSPrefetch
2009-10-17 13:34:49 —-A—- C:WINDOWSSchedLgU.Txt
2009-10-17 13:32:13 —-RSD—- C:WINDOWSassembly
2009-10-17 13:32:13 —-D—- C:WINDOWSMicrosoft.NET
2009-10-17 13:32:12 —-D—- C:WINDOWSsystem32URTTemp
2009-10-17 13:31:34 —-A—- C:WINDOWSsystem32spupdsvc.exe
2009-10-17 13:31:33 —-HDC—- C:WINDOWS$NtServicePackUninstallNLSDownlevelMapping$
2009-10-17 13:31:27 —-D—- C:Program FilesAlky for Applications
2009-10-17 13:31:20 —-A—- C:WINDOWScontrol.ini
2009-10-17 13:31:20 —-A—- C:AUTOEXEC.BAT
2009-10-17 13:31:15 —-A—- C:WINDOWSOEWABLog.txt
2009-10-17 13:31:13 —-A—- C:WINDOWSsystem32mapi32.dll
2009-10-17 13:30:16 —-RAH—- C:WINDOWSsystem32logonui.exe.manifest
2009-10-17 13:30:13 —-RAH—- C:WINDOWSsystem32cdplayer.exe.manifest
2009-10-17 13:30:10 —-HD—- C:Program FilesWindowsUpdate
2009-10-17 13:30:09 —-D—- C:Program FilesOnline Services
2009-10-17 13:30:04 —-A—- C:WINDOWSsystem32atrace.dll
2009-10-17 13:30:02 —-A—- C:WINDOWSsystem32desktop.ini
2009-10-17 13:30:02 —-A—- C:WINDOWSdesktop.ini
2009-10-17 13:29:59 —-A—- C:WINDOWSsystem32nmevtmsg.dll
2009-10-17 13:29:58 —-D—- C:Program FilesCommon FilesServices
2009-10-17 13:29:58 —-A—- C:WINDOWSsystem32acctres.dll
2009-10-17 13:29:56 —-SD—- C:WINDOWSTasks
2009-10-17 13:29:56 —-A—- C:WINDOWSsystem32icfgnt5.dll
2009-10-17 13:29:55 —-D—- C:Program FilesCommon FilesMSSoap
2009-10-17 13:29:53 —-D—- C:WINDOWSsystem32Macromed
2009-10-17 13:29:52 —-A—- C:WINDOWSsystem32wuweb.dll
2009-10-17 13:29:52 —-A—- C:WINDOWSsystem32wucltui.dll
2009-10-17 13:29:52 —-A—- C:WINDOWSsystem32wuauserv.dll
2009-10-17 13:29:52 —-A—- C:WINDOWSsystem32wuaueng1.dll
2009-10-17 13:29:51 —-A—- C:WINDOWSsystem32wups.dll
2009-10-17 13:29:51 —-A—- C:WINDOWSsystem32wuaueng.dll
2009-10-17 13:29:51 —-A—- C:WINDOWSsystem32wuauclt1.exe
2009-10-17 13:29:51 —-A—- C:WINDOWSsystem32wuauclt.exe
2009-10-17 13:29:51 —-A—- C:WINDOWSsystem32wuapi.dll
2009-10-17 13:29:51 —-A—- C:WINDOWSsystem32qmgrprxy.dll
2009-10-17 13:29:51 —-A—- C:WINDOWSsystem32qmgr.dll
2009-10-17 13:29:51 —-A—- C:WINDOWSsystem32bitsprx4.dll
2009-10-17 13:29:51 —-A—- C:WINDOWSsystem32bitsprx3.dll
2009-10-17 13:29:51 —-A—- C:WINDOWSsystem32bitsprx2.dll
2009-10-17 13:29:48 —-D—- C:Program FilesMovie Maker
2009-10-17 13:29:37 —-A—- C:WINDOWSsystem32safrslv.dll
2009-10-17 13:29:37 —-A—- C:WINDOWSsystem32safrdm.dll
2009-10-17 13:29:37 —-A—- C:WINDOWSsystem32safrcdlg.dll
2009-10-17 13:29:37 —-A—- C:WINDOWSsystem32racpldlg.dll
2009-10-17 13:29:35 —-A—- C:WINDOWSsystem32fltMc.exe
2009-10-17 13:29:35 —-A—- C:WINDOWSsystem32fltlib.dll
2009-10-17 13:29:34 —-D—- C:WINDOWSsystem32Restore
2009-10-17 13:29:34 —-A—- C:WINDOWSsystem32srsvc.dll
2009-10-17 13:29:34 —-A—- C:WINDOWSsystem32srrstr.dll
2009-10-17 13:29:34 —-A—- C:WINDOWSsystem32srclient.dll
2009-10-17 13:29:34 —-A—- C:WINDOWSsystem32nmmkcert.dll
2009-10-17 13:29:34 —-A—- C:WINDOWSsystem32mnmsrvc.exe
2009-10-17 13:29:34 —-A—- C:WINDOWSsystem32mnmdd.dll
2009-10-17 13:29:34 —-A—- C:WINDOWSsystem32isrdbg32.dll
2009-10-17 13:29:34 —-A—- C:WINDOWSsystem32ils.dll
2009-10-17 13:29:33 —-A—- C:WINDOWSsystem32msconf.dll
2009-10-17 13:29:32 —-D—- C:Program FilesNetMeeting
2009-10-17 13:29:31 —-A—- C:WINDOWSsystem32msoert2.dll
2009-10-17 13:29:31 —-A—- C:WINDOWSsystem32msoeacct.dll
2009-10-17 13:29:31 —-A—- C:WINDOWSsystem32inetres.dll
2009-10-17 13:29:30 —-A—- C:WINDOWSsystem32inetcomm.dll
2009-10-17 13:29:29 —-D—- C:Program FilesOutlook Express
2009-10-17 13:29:29 —-A—- C:WINDOWSsystem32schedsvc.dll
2009-10-17 13:29:29 —-A—- C:WINDOWSsystem32mstinit.exe
2009-10-17 13:29:29 —-A—- C:WINDOWSsystem32mstask.dll
2009-10-17 13:29:29 —-A—- C:WINDOWSsystem32icwphbk.dll
2009-10-17 13:29:29 —-A—- C:WINDOWSsystem32icwdial.dll
2009-10-17 13:29:28 —-A—- C:WINDOWSsystem32isign32.dll
2009-10-17 13:29:28 —-A—- C:WINDOWSsystem32inetcfg.dll
2009-10-17 13:29:25 —-D—- C:Program FilesCommon FilesSystem
2009-10-17 13:29:02 —-D—- C:Program FilesComPlus Applications
2009-10-17 13:29:01 —-A—- C:WINDOWSvbaddin.ini
2009-10-17 13:29:01 —-A—- C:WINDOWSvb.ini
2009-10-17 13:29:00 —-D—- C:WINDOWSRegistration
2009-10-17 13:28:49 —-A—- C:WINDOWSsystem32lcid.exe
2009-10-17 13:28:41 —-D—- C:Program FilesWindows Sidebar
2009-10-17 13:28:41 —-A—- C:WINDOWSsystem32REBUILDI.EXE
2009-10-17 13:28:41 —-A—- C:WINDOWSsystem32DLLINFO.DLL
2009-10-17 13:28:40 —-D—- C:Program FilesWindows Media Player
2009-10-17 13:28:40 —-D—- C:Program FilesWindows Media Connect 2
2009-10-17 13:28:38 —-SD—- C:WINDOWSDownloaded Program Files
2009-10-17 13:28:38 —-RD—- C:WINDOWSOffline Web Pages
2009-10-17 13:28:38 —-D—- C:WINDOWSwbem
2009-10-17 13:28:38 —-D—- C:Program FilesInternet Explorer
2009-10-17 13:28:38 —-A—- C:WINDOWSsystem32winfxdocobj.exe
2009-10-17 13:28:38 —-A—- C:WINDOWSsystem32msfeedssync.exe
2009-10-17 13:28:38 —-A—- C:WINDOWSsystem32msfeedsbs.dll
2009-10-17 13:28:38 —-A—- C:WINDOWSsystem32ieframe.dll.mui
2009-10-17 13:28:38 —-A—- C:WINDOWSsystem32advpack.dll.mui
2009-10-17 13:28:37 —-D—- C:WINDOWSsystem32PreInstall
2009-10-17 13:28:37 —-D—- C:WINDOWSSoftwareDistribution
2009-10-17 13:28:37 —-A—- C:WINDOWSsystem32write.exe
2009-10-17 13:28:37 —-A—- C:WINDOWSsystem32muweb.dll
2009-10-17 13:28:37 —-A—- C:WINDOWSsystem32mucltui.dll.mui
2009-10-17 13:28:37 —-A—- C:WINDOWSsystem32mucltui.dll
2009-10-17 13:28:37 —-A—- C:WINDOWSsystem32gpprefcl.dll
2009-10-17 13:28:33 —-A—- C:WINDOWSsystem32sndvol32.exe
2009-10-17 13:28:33 —-A—- C:WINDOWSsystem32hticons.dll
2009-10-17 13:28:33 —-A—- C:WINDOWSsystem32avwav.dll
2009-10-17 13:28:33 —-A—- C:WINDOWSsystem32avtapi.dll
2009-10-17 13:28:33 —-A—- C:WINDOWSsystem32avmeter.dll
2009-10-17 13:28:32 —-A—- C:WINDOWSsystem32winchat.exe
2009-10-17 13:28:29 —-A—- C:WINDOWSsystem32getuname.dll
2009-10-17 13:28:28 —-A—- C:WINDOWSsystem32winmine.exe
2009-10-17 13:28:28 —-A—- C:WINDOWSsystem32sol.exe
2009-10-17 13:28:28 —-A—- C:WINDOWSsystem32mshearts.exe
2009-10-17 13:28:28 —-A—- C:WINDOWSsystem32freecell.exe
2009-10-17 13:28:28 —-A—- C:WINDOWSsystem32charmap.exe
2009-10-17 13:28:28 —-A—- C:WINDOWSsystem32calc.exe
2009-10-17 13:28:27 —-A—- C:WINDOWSsystem32usrlogon.cmd
2009-10-17 13:28:27 —-A—- C:WINDOWSsystem32tsshutdn.exe
2009-10-17 13:28:27 —-A—- C:WINDOWSsystem32tslabels.ini
2009-10-17 13:28:27 —-A—- C:WINDOWSsystem32tskill.exe
2009-10-17 13:28:27 —-A—- C:WINDOWSsystem32tsdiscon.exe
2009-10-17 13:28:27 —-A—- C:WINDOWSsystem32tscon.exe
2009-10-17 13:28:27 —-A—- C:WINDOWSsystem32shadow.exe
2009-10-17 13:28:27 —-A—- C:WINDOWSsystem32rwinsta.exe
2009-10-17 13:28:27 —-A—- C:WINDOWSsystem32reset.exe
2009-10-17 13:28:27 —-A—- C:WINDOWSsystem32regini.exe
2009-10-17 13:28:27 —-A—- C:WINDOWSsystem32rdpcfgex.dll
2009-10-17 13:28:27 —-A—- C:WINDOWSsystem32qwinsta.exe
2009-10-17 13:28:27 —-A—- C:WINDOWSsystem32qappsrv.exe
2009-10-17 13:28:27 —-A—- C:WINDOWSsystem32msg.exe
2009-10-17 13:28:27 —-A—- C:WINDOWSsystem32msdtcprf.ini
2009-10-17 13:28:27 —-A—- C:WINDOWSsystem32logoff.exe
2009-10-17 13:28:27 —-A—- C:WINDOWSsystem32cdmodem.dll
2009-10-17 13:28:23 —-A—- C:WINDOWSsystem32wmimgmt.msc
2009-10-17 13:28:23 —-A—- C:WINDOWSsystem32sndrec32.exe
2009-10-17 13:28:23 —-A—- C:WINDOWSsystem32accwiz.exe
2009-10-17 13:28:22 —-D—- C:Program FilesWindows NT
2009-10-17 13:28:22 —-A—- C:WINDOWSsystem32spider.exe
2009-10-17 13:28:22 —-A—- C:WINDOWSsystem32mspaint.exe
2009-10-17 13:28:22 —-A—- C:WINDOWSsystem32mplay32.exe
2009-10-17 13:28:22 —-A—- C:WINDOWSsystem32hypertrm.dll
2009-10-17 13:28:22 —-A—- C:WINDOWSsystem32clipbrd.exe
2009-10-17 13:28:21 —-A—- C:WINDOWSsystem32tsgqec.dll
2009-10-17 13:28:21 —-A—- C:WINDOWSsystem32tscfgwmi.dll
2009-10-17 13:28:21 —-A—- C:WINDOWSsystem32rhttpaa.dll
2009-10-17 13:28:21 —-A—- C:WINDOWSsystem32mstscax.dll
2009-10-17 13:28:21 —-A—- C:WINDOWSsystem32mstsc.exe
2009-10-17 13:28:21 —-A—- C:WINDOWSsystem32aaclient.dll
2009-10-17 13:28:20 —-D—- C:WINDOWSsystem32MsDtc
2009-10-17 13:28:20 —-A—- C:WINDOWSsystem32termsrv.dll
2009-10-17 13:28:20 —-A—- C:WINDOWSsystem32sessmgr.exe
2009-10-17 13:28:20 —-A—- C:WINDOWSsystem32remotepg.dll
2009-10-17 13:28:20 —-A—- C:WINDOWSsystem32rdshost.exe
2009-10-17 13:28:20 —-A—- C:WINDOWSsystem32rdsaddin.exe
2009-10-17 13:28:20 —-A—- C:WINDOWSsystem32rdpwsx.dll
2009-10-17 13:28:20 —-A—- C:WINDOWSsystem32rdpsnd.dll
2009-10-17 13:28:20 —-A—- C:WINDOWSsystem32rdpclip.exe
2009-10-17 13:28:20 —-A—- C:WINDOWSsystem32rdchost.dll
2009-10-17 13:28:20 —-A—- C:WINDOWSsystem32qprocess.exe
2009-10-17 13:28:20 —-A—- C:WINDOWSsystem32mtxoci.dll
2009-10-17 13:28:20 —-A—- C:WINDOWSsystem32msdtcuiu.dll
2009-10-17 13:28:20 —-A—- C:WINDOWSsystem32icaapi.dll
2009-10-17 13:28:20 —-A—- C:WINDOWSsystem32cfgbkend.dll
2009-10-17 13:28:19 —-A—- C:WINDOWSsystem32xolehlp.dll
2009-10-17 13:28:19 —-A—- C:WINDOWSsystem32mtxlegih.dll
2009-10-17 13:28:19 —-A—- C:WINDOWSsystem32mtxex.dll
2009-10-17 13:28:19 —-A—- C:WINDOWSsystem32mtxdm.dll
2009-10-17 13:28:19 —-A—- C:WINDOWSsystem32msdtctm.dll
2009-10-17 13:28:19 —-A—- C:WINDOWSsystem32msdtcprx.dll
2009-10-17 13:28:19 —-A—- C:WINDOWSsystem32msdtclog.dll
2009-10-17 13:28:19 —-A—- C:WINDOWSsystem32msdtc.exe
2009-10-17 13:28:19 —-A—- C:WINDOWSsystem32dcomcnfg.exe
2009-10-17 13:28:18 —-D—- C:WINDOWSsystem32Com
2009-10-17 13:28:18 —-A—- C:WINDOWSsystem32stclient.dll
2009-10-17 13:28:18 —-A—- C:WINDOWSsystem32comuid.dll
2009-10-17 13:28:18 —-A—- C:WINDOWSsystem32comsvcs.dll
2009-10-17 13:28:18 —-A—- C:WINDOWSsystem32comsnap.dll
2009-10-17 13:28:18 —-A—- C:WINDOWSsystem32comrepl.dll
2009-10-17 13:28:18 —-A—- C:WINDOWSsystem32comaddin.dll
2009-10-17 13:28:18 —-A—- C:WINDOWSsystem32colbact.dll
2009-10-17 13:28:18 —-A—- C:WINDOWSsystem32clbcatq.dll
2009-10-17 13:28:18 —-A—- C:WINDOWSsystem32clbcatex.dll
2009-10-17 13:28:18 —-A—- C:WINDOWSsystem32catsrvut.dll
2009-10-17 13:28:18 —-A—- C:WINDOWSsystem32catsrvps.dll
2009-10-17 13:28:18 —-A—- C:WINDOWSsystem32catsrv.dll
2009-10-17 13:28:14 —-A—- C:WINDOWSsystem32servdeps.dll
2009-10-17 13:28:14 —-A—- C:WINDOWSsystem32mmfutil.dll
2009-10-17 13:28:14 —-A—- C:WINDOWSsystem32licwmi.dll
2009-10-17 13:28:14 —-A—- C:WINDOWSsystem32cmprops.dll

======List of files/folders modified in the last 1 months======

2009-10-18 17:22:59 —-A—- C:WINDOWSwin.ini
2009-10-17 16:19:53 —-A—- C:WINDOWSsystem.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;AMD Processor Driver; C:WINDOWSsystem32DRIVERSAmdK8.sys [2006-07-02 36864]
R1 easdrv;easdrv; C:WINDOWSsystem32DRIVERSeasdrv.sys [2008-10-24 53256]
R1 ElbyCDIO;ElbyCDIO Driver; C:WINDOWSSystem32DriversElbyCDIO.sys [2008-12-31 24872]
R1 epfwtdir;epfwtdir; C:WINDOWSsystem32DRIVERSepfwtdir.sys [2008-10-24 34824]
R2 eamon;EAMON; C:WINDOWSsystem32DRIVERSeamon.sys [2008-10-24 39944]
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2008-10-11 62848]
R2 tifsfilter;Acronis True Image FS Filter; C:WINDOWSsystem32DRIVERStifsfilt.sys [2009-10-17 44704]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:WINDOWSsystem32driversALCXWDM.SYS [2008-09-24 4122368]
R3 AnyDVD;AnyDVD; C:WINDOWSSystem32DriversAnyDVD.sys [2008-12-31 103360]
R3 FET5X86V;VIA Rhine-Family Fast-Ethernet Adapter Driver Service; C:WINDOWSsystem32DRIVERSfetnd5bv.sys [2008-09-22 43520]
R3 hidusb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-14 10368]
R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:WINDOWSsystem32DRIVERSL8042Kbd.sys [2006-07-19 13568]
R3 ltmodem5;Agere Modem Driver; C:WINDOWSsystem32DRIVERSltmdmnt.sys [2003-12-12 652689]
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-19 12160]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2008-10-07 6133856]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-15 30208]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2008-04-15 17152]
S3 ap7qyp6j;ap7qyp6j; C:WINDOWSsystem32driversap7qyp6j.sys []
S3 CCDECODE;Closed Caption декодер; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2008-04-14 17024]
S3 MSHUSBVideo;NX6000/NX3000/VX5000/VX5500/VX7000 Filter Driver; C:WINDOWSSystem32Driversnx6000.sys [2008-08-04 33808]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWSsystem32DRIVERSNdisIP.sys [2008-04-14 10880]
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2008-04-14 15232]
S3 usbaudio;Аудио драйвер USB (WDM); C:WINDOWSsystem32driversusbaudio.sys [2008-04-14 60032]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-14 32128]
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-14 25856]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-14 26368]
S3 usbvideo;USB Video Device (WDM); C:WINDOWSSystem32Driversusbvideo.sys [2008-04-14 121984]
S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2007-06-18 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2007-06-18 82944]
S4 atapi;Стандартный контроллер жестких дисков IDE/ESDI; C:WINDOWSsystem32driversatapi.sys [2008-04-15 96512]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AASW2_Service;Ashampoo AntiSpyWare 2 Service; C:Program FilesAshampooAshampoo AntiSpyWare 2AntiSpyWareService.exe [2008-03-13 730968]
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service; C:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe [2007-12-06 660768]
R2 AcrSch2Svc;Acronis Scheduler2 Service; C:Program FilesCommon FilesAcronisSchedule2schedul2.exe [2008-12-18 554264]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:Program FilesBonjourmDNSResponder.exe [2006-02-28 229376]
R2 ekrn;Eset Service; C:Program FilesESETESET NOD32 Antivirusekrn.exe [2008-10-24 468224]
R2 ICQ Service;ICQ Service; C:Program FilesICQ6ToolbarICQ Service.exe [2009-08-16 222968]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe [2006-10-26 335872]
R2 MSCamSvc;MSCamSvc; C:Program FilesMicrosoft LifeCamMSCamS32.exe [2008-08-04 164896]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2008-10-07 163908]
R2 TTFixerService;NST ToolTipFixer; C:Program FilesToolTipFixerToolTipFixer.exe [2007-06-27 10240]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service; C:WINDOWSSystem32TUProgSt.exe [2009-10-17 604488]
R2 USBSafelyRemoveService;USB Safely Remove Assistant; C:Program FilesUSB Safely RemoveUSBSRService.exe [2008-12-06 206608]
R2 UxTuneUp;TuneUp Theme Extension; C:WINDOWSSystem32svchost.exe [2008-04-15 14336]
S2 StarWindServiceAE;StarWind AE Service; C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe [2007-05-28 275968]
S3 aspnet_state;Служба состояний ASP.NET; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;Eset HTTP Server; C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe [2008-10-24 19200]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe [2009-10-17 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:WINDOWSMicrosoft.NETFrameworkv3.0WPFPresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:Program FilesMicrosoft OfficeOffice12GrooveAuditService.exe [2007-08-24 68464]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:WINDOWSSystem32TuneUpDefragService.exe [2009-10-17 361288]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media Playerwmpnetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S4 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2009-10-17 152984]
S4 NetTcpPortSharing;Служба общего доступа к портам Net.Tcp; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2008-07-29 132096]

EOF
20 октября, 2009 в 6:19 дп #26436
Аноним
Гость
- Темы:532
- Сообщений:1553
info.txt logfile of random’s system information tool 1.06 2009-10-19 21:54:59

======Uninstall list======

—>msiexec /package {90120000-0015-0419-0000-0000000FF1CE} /uninstall {9C602C1F-5F70-45AB-ADF7-8F1B28168D81}
—>msiexec /package {90120000-0016-0419-0000-0000000FF1CE} /uninstall {9C602C1F-5F70-45AB-ADF7-8F1B28168D81}
—>msiexec /package {90120000-0018-0419-0000-0000000FF1CE} /uninstall {9C602C1F-5F70-45AB-ADF7-8F1B28168D81}
—>msiexec /package {90120000-0019-0419-0000-0000000FF1CE} /uninstall {9C602C1F-5F70-45AB-ADF7-8F1B28168D81}
—>msiexec /package {90120000-001A-0419-0000-0000000FF1CE} /uninstall {9C602C1F-5F70-45AB-ADF7-8F1B28168D81}
—>msiexec /package {90120000-001B-0419-0000-0000000FF1CE} /uninstall {9C602C1F-5F70-45AB-ADF7-8F1B28168D81}
—>msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {9C602C1F-5F70-45AB-ADF7-8F1B28168D81}
—>msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {9C602C1F-5F70-45AB-ADF7-8F1B28168D81}
—>msiexec /package {90120000-001F-0419-0000-0000000FF1CE} /uninstall {9C602C1F-5F70-45AB-ADF7-8F1B28168D81}
—>msiexec /package {90120000-001F-0422-0000-0000000FF1CE} /uninstall {9C602C1F-5F70-45AB-ADF7-8F1B28168D81}
—>msiexec /package {90120000-0044-0419-0000-0000000FF1CE} /uninstall {9C602C1F-5F70-45AB-ADF7-8F1B28168D81}
—>msiexec /package {90120000-006E-0419-0000-0000000FF1CE} /uninstall {9C602C1F-5F70-45AB-ADF7-8F1B28168D81}
—>msiexec /package {90120000-00A1-0419-0000-0000000FF1CE} /uninstall {9C602C1F-5F70-45AB-ADF7-8F1B28168D81}
—>msiexec /package {90120000-00BA-0419-0000-0000000FF1CE} /uninstall {9C602C1F-5F70-45AB-ADF7-8F1B28168D81}
—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-0015-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-0016-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-0018-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-0019-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-001A-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-001B-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-001F-0419-0000-0000000FF1CE} /uninstall {D7CE14BC-96D9-41C5-822D-F5B1C2C35AA2}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-001F-0422-0000-0000000FF1CE} /uninstall {DC154E48-5278-423A-80A1-B93247E38A1A}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-0044-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-006E-0419-0000-0000000FF1CE} /uninstall {23653CA5-BFB5-4B52-B2DA-045D7ABEB874}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-00A1-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
2007 Microsoft Office Suite Service Pack 1 (SP1)—>msiexec /package {90120000-00BA-0419-0000-0000000FF1CE} /uninstall {1AD50F4A-04F7-4944-BD47-4421532548F5}
7-Zip 4.64—>»C:Program Files7-ZipUninstall.exe»
ABBYY FineReader 9.0 Professional Edition—>MsiExec.exe /I{F9000000-0001-0000-0000-074957833700}
ACDSee Pro 2.5 RUS from http://WWW.ZHMAK.INFO—>MsiExec.exe /I{2D95950E-6D76-43E7-94A5-D9DBA2FD29E4}
Acronis True Image Home—>MsiExec.exe /X{37C8899D-FD70-481F-94AA-1F1B08765E22}
Adobe Anchor Service CS3—>MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3—>MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Bridge CS3—>MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting—>MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe Camera Raw 4.0—>MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps—>MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color — Photoshop Specific—>MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings—>MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
Adobe Color EU Recommended Settings—>MsiExec.exe /I{BD087F50-46B2-43E4-BD73-5DB3DC20B47C}
Adobe Color JA Extra Settings—>MsiExec.exe /I{D92B72E2-C854-4738-8ED6-4C3661CC17AE}
Adobe Color NA Extra Settings—>MsiExec.exe /I{6179A7D2-A668-4F1D-BC9A-DCC6A10C7871}
Adobe Default Language CS3—>MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Device Central CS3—>MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe ExtendScript Toolkit 2—>MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}
Adobe Flash Player 10 ActiveX—>C:WINDOWSsystem32MacromedFlashuninstall_activeX.exe
Adobe Flash Player 10 Plugin—>C:WINDOWSsystem32MacromedFlashuninstall_plugin.exe
Adobe Fonts All—>MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Help Viewer CS3—>MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
Adobe Linguistics CS3—>MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe PDF Library Files—>MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop CS3—>C:Program FilesCommon FilesAdobeInstallersd5fe1f44895aadff2baacf24fe1402Setup.exe
Adobe Photoshop CS3—>MsiExec.exe /I{FD0399AC-A38B-4D4B-8164-D7B73AC24030}
Adobe Setup—>MsiExec.exe /I{30981FCD-4150-4AB4-BAC5-75C9E914347D}
Adobe Stock Photos CS3—>MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
Adobe Type Support—>MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3—>MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client—>MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WinSoft Linguistics Plugin—>MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3—>MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
AIMP2—>C:Program FilesAIMP2Uninstall.exe
Alky for Applications (Windows XP)—>MsiExec.exe /X{BB05D173-9681-4812-A7FA-BD4042A3DA00}
AnyDVD—>»C:Program FilesSlySoftAnyDVDAnyDVD-uninst.exe» /D=»C:Program FilesSlySoftAnyDVD»
Ashampoo AntiSpyWare 2.02—>»C:Program FilesAshampooAshampoo AntiSpyWare 2unins000.exe»
BitMeter—>»C:Program FilesCodeboxBitMeteruninstall.exe»
Camera RAW Plug-In for EPSON Creativity Suite—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime701Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{8DAC1AE4-33D1-4A78-8A42-00E09EDECC3E}SETUP.EXE» -l0x9 UNINST
CityInfo 2.7—>»C:Program FilesCityInfounins000.exe»
CX4300_5500_DX4400 manual—>C:Program FilesEPSONTPMANUALCX4300_5500_DX4400ENGUSE_GDOCUNINS.EXE
DAEMON Tools Toolbar—>C:Program FilesDAEMON Tools Toolbaruninst.exe
Defraggler 1.4.98—>rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFDefraggler.inf,Uninstall
Download Master version 5.5.7.1145—>»C:Program FilesDownload Masterunins000.exe»
EPSON Attach To Email—>C:Program FilesCommon FilesInstallShieldDriver8Intel 32IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG
EPSON Copy Utility 3—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime701Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{67EDD823-135A-4D59-87BD-950616D6E857}SETUP.EXE» -l0x19 -UnInstall
EPSON Easy Photo Print—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime701Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{B66E665A-DF96-4C38-9422-C7F74BC1B4E5}SETUP.EXE» -l0x19 UNINST
EPSON File Manager—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime701Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{2EB81825-E9EE-44F4-8F51-1240C3898DC6}Setup.exe» -l0x9 UNINST
EPSON Scan Assistant—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime701Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}Setup.exe» -l0x19 -u
EPSON Scan—>C:Program Filesepsonescndvsetupsetup.exe /r
EPSON Web-To-Page—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}SETUP.EXE» -l0x9 -anything
EPSON-Drucker-Software—>C:WINDOWSSystem32spoolDRIVERSW32X863EPUPDATE.EXE /R
ESET NOD32 Antivirus—>MsiExec.exe /I{4EAE8F8E-0C2E-4814-9A04-635AFB9050AA}
FastStone Image Viewer 3.6—>C:Program FilesFastStone Image Vieweruninst.exe
FileMenu Tools 5.4.1—>»C:Program FilesFileMenu Toolsunins000.exe»
FinePrint—>C:WINDOWSSystem32spoolDRIVERSW32X863fpinst6.exe /uninstall
HashTab 1.14—>C:WINDOWSsystem32htdel.bat
HijackThis 2.0.2—>»C:Program Filestrend microHijackThis.exe» /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)—>C:WINDOWSsystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=»»
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)—>C:WINDOWSsystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=»»
ICQ Toolbar—>C:Program FilesICQ6ToolbarICQUnToolbar.exe
ICQ6.5—>»C:Program FilesInstallShield Installation Information{60DE4033-9503-48D1-A483-7846BD217CA9}setup.exe» -runfromtemp -l0x0009 -removeonly
Java(TM) 6 Update 11—>MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
K-Lite Mega Codec Pack 4.4.5—>»C:Program FilesK-Lite Codec Packunins000.exe»
KMPlayer 2.9.4.1433—>»C:Program FilesKMPlayerunins000.exe»
KnockOut 2—>C:WINDOWSIsUninst.exe -f»C:WINDOWSCorelKnockOut 2UninstKO.isu»
Light Alloy 4.3 (build 717)—>C:Program FilesLight Alloyuninst.exe
Malwarebytes’ Anti-Malware—>»C:Program FilesMalwarebytes’ Anti-Malwareunins000.exe»
Microsoft .NET Framework 1.1 Russian Language Pack—>MsiExec.exe /X{2BB372D9-52B4-410A-BC1A-FEAB63181EEF}
Microsoft .NET Framework 1.1 Security Update (KB953297)—>»C:WINDOWSMicrosoft.NETFrameworkv1.1.4322Updateshotfix.exe» «C:WINDOWSMicrosoft.NETFrameworkv1.1.4322UpdatesM953297M953297Uninstall.msp»
Microsoft .NET Framework 1.1—>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1—>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1 Language Pack — RUS—>MsiExec.exe /I{34AB2437-1B34-3E2D-9DE8-3E2D35335B3F}
Microsoft .NET Framework 2.0 Service Pack 2—>MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 1 Language Pack — RUS—>MsiExec.exe /I{CFF15B94-E062-3701-869A-4CDF4590461E}
Microsoft .NET Framework 3.0 Service Pack 2—>MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1—>C:WINDOWSMicrosoft.NETFrameworkv3.5Microsoft .NET Framework 3.5 SP1setup.exe
Microsoft .NET Framework 3.5 SP1—>MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Corporation—>MsiExec.exe /I{7B08D306-7266-4647-A926-2F78817ED1E0}
Microsoft LifeCam—>MsiExec.exe /X{6BCB7EAA-598C-4836-B7EA-3642E41AA222}
Microsoft National Language Support Downlevel APIs—>»C:WINDOWS$NtServicePackUninstallNLSDownlevelMapping$spuninstspuninst.exe»
Microsoft Office Access MUI (Russian) 2007—>MsiExec.exe /X{90120000-0015-0419-0000-0000000FF1CE}
Microsoft Office Enterprise 2007—>»C:Program FilesCommon FilesMicrosoft SharedOFFICE12Office Setup Controllersetup.exe» /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007—>MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Russian) 2007—>MsiExec.exe /X{90120000-0016-0419-0000-0000000FF1CE}
Microsoft Office Groove MUI (Russian) 2007—>MsiExec.exe /X{90120000-00BA-0419-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Russian) 2007—>MsiExec.exe /X{90120000-0044-0419-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Russian) 2007—>MsiExec.exe /X{90120000-00A1-0419-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Russian) 2007—>MsiExec.exe /X{90120000-001A-0419-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Russian) 2007—>MsiExec.exe /X{90120000-0018-0419-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007—>MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007—>MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Russian) 2007—>MsiExec.exe /X{90120000-001F-0419-0000-0000000FF1CE}
Microsoft Office Proof (Ukrainian) 2007—>MsiExec.exe /X{90120000-001F-0422-0000-0000000FF1CE}
Microsoft Office Proofing (Russian) 2007—>MsiExec.exe /X{90120000-002C-0419-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Russian) 2007—>MsiExec.exe /X{90120000-0019-0419-0000-0000000FF1CE}
Microsoft Office Shared MUI (Russian) 2007—>MsiExec.exe /X{90120000-006E-0419-0000-0000000FF1CE}
Microsoft Office Word MUI (Russian) 2007—>MsiExec.exe /X{90120000-001B-0419-0000-0000000FF1CE}
Microsoft Silverlight—>MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 ATL Update kb973923 — x86 8.0.50727.4053—>MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable—>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mozilla Firefox (3.0.5)—>C:Program FilesMozilla Firefoxuninstallhelper.exe
MSXML 4.0 SP2 (KB954430)—>MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Nero 9.2.6.0 Micro—>»C:Program FilesNero 9 Microunins000.exe»
Notepad++—>C:Program FilesNotepad++uninstall.exe
NVIDIA Drivers—>C:WINDOWSsystem32nvuninst.exe UninstallGUI
Paint.NET v3.35—>rundll32.exe advpack.dll,LaunchINFSection PaintDN.inf,Uninstall
PDF Settings—>MsiExec.exe /I{293D5729-7C01-4FA4-A4DE-BB6A1587BBB9}
PROWiSe Manager—>C:Program FilesPROWiSeUninstall.exe
QuickTime Alternative 2.7.0—>»C:Program FilesQuickTime Alternativeunins000.exe»
Realtek AC’97 Audio—>Alcrmv.exe -r -m
Recover My Files—>»C:Program FilesGetDataRecover My Filesunins000.exe»
Recuva 1.20.361—>rundll32.exe advpack.dll,LaunchINFSection Recuva.inf,Uninstall
Security Update for 2007 Microsoft Office System (KB951944)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for 2007 Microsoft Office System (KB969559)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB969679)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
Security Update for CAPICOM (KB931906)—>MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)—>MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Microsoft Office Excel 2007 (KB969682)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}
Security Update for Microsoft Office Outlook 2007 (KB972363)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {120BE9A0-9B09-4855-9E0C-7DEE45CB03C0}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office Publisher 2007 (KB969693)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {7BE67088-1EB3-4569-8E75-DDAFBF61BC4E}
Security Update for Microsoft Office system 2007 (972581)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
Security Update for Microsoft Office system 2007 (KB969613)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office system 2007 (KB974234)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
Security Update for Microsoft Office Word 2007 (KB969604)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
Skype™ Beta 4.0—>MsiExec.exe /X{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}
STDU Viewer—>»C:Program FilesSTDU Viewerunins000.exe»
Target v1.2.0.0—>»C:Program FilesTargetunins000.exe»
ToolTipFixer 1.0.1—>C:Program Files\ToolTipFixeruninstall.exe
Total Commander 7.04 PowerPack—>»C:Program FilesTotal Commanderuninstall.exe»
TuneUp Utilities 2009—>MsiExec.exe /I{55A29068-F2CE-456C-9148-C869879E2357}
Unlocker 1.8.7—>C:Program FilesUnlockeruninst.exe
Update for 2007 Microsoft Office System (KB967642)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)—>C:WINDOWSsystem32msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=»»
Update for Outlook 2007 Junk Email Filter (KB974810)—>msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C05FBAD5-A211-4E86-BB51-7E07B80C9233}
URL-Album 1.4.1.120—>»C:Program FilesURL-Albumunins000.exe»
USB Safely Remove 4.0—>»C:Program FilesUSB Safely Removeunins000.exe»
UVC USB2.0 PC Camrea Driver—>RunDll32 C:PROGRA~1COMMON~1INSTAL~1PROFES~1RunTime1150Intel32Ctor.dll,LaunchSetup «C:Program FilesInstallShield Installation Information{A59AB961-BE82-41E0-B0FB-648DFA6DDEA4}setup.exe» -l0x9 -removeonly
VIA Rhine-Family Fast-Ethernet Adapter—>Rundll32.exe vuins32.dll,vuins32Ex $Rhine $VIA
Vista Drive Icon—>rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFVistaDrv.inf,Uninstall
Visual Task Tips—>rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFVTTips3.inf,Uninstall
Winamp—>»C:Program FilesWinampUninstWA.exe»
WinDjView 0.5—>rundll32.exe advpack.dll,LaunchINFSection WinDjView.inf,Uninstall
Windows Media Format 11 runtime—>»C:Program FilesWindows Media Playerwmsetsdk.exe» /UninstallAll
Windows Sidebar—>RUNDLL32 advpack.dll,LaunchINFSection Sidebar.inf,UnInstall
Your Uninstaller! 2008 Version 6.2—>»C:Program FilesYour Uninstaller 2008unins000.exe»
Архиватор WinRAR—>C:Program FilesWinRARuninstall.exe
Дополнительные апплеты—>»C:WINDOWSsystem32CPLDAPUunins000.exe»
Исправление для Windows XP (KB961118)—>»C:WINDOWS$NtUninstallKB961118$spuninstspuninst.exe»
Исправление для Windows XP (KB970653-v3)—>»C:WINDOWS$NtUninstallKB970653-v3$spuninstspuninst.exe»
Обновление безопасности для Windows Internet Explorer 7 (KB974455)—>»C:WINDOWSie7updatesKB974455-IE7spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB923561)—>»C:WINDOWS$NtUninstallKB923561$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB952004)—>»C:WINDOWS$NtUninstallKB952004$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956572)—>»C:WINDOWS$NtUninstallKB956572$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956744)—>»C:WINDOWS$NtUninstallKB956744$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB956844)—>»C:WINDOWS$NtUninstallKB956844$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB958687)—>»C:WINDOWS$NtUninstallKB958687$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB958869)—>»C:WINDOWS$NtUninstallKB958869$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB959426)—>»C:WINDOWS$NtUninstallKB959426$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB960225)—>»C:WINDOWS$NtUninstallKB960225$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB960803)—>»C:WINDOWS$NtUninstallKB960803$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB960859)—>»C:WINDOWS$NtUninstallKB960859$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB961371-v2)—>»C:WINDOWS$NtUninstallKB961371-v2$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB961501)—>»C:WINDOWS$NtUninstallKB961501$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB968537)—>»C:WINDOWS$NtUninstallKB968537$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB969059)—>»C:WINDOWS$NtUninstallKB969059$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB970238)—>»C:WINDOWS$NtUninstallKB970238$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB971486)—>»C:WINDOWS$NtUninstallKB971486$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB971557)—>»C:WINDOWS$NtUninstallKB971557$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB971633)—>»C:WINDOWS$NtUninstallKB971633$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB971657)—>»C:WINDOWS$NtUninstallKB971657$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB971961)—>»C:WINDOWS$NtUninstallKB971961$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB973354)—>»C:WINDOWS$NtUninstallKB973354$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB973507)—>»C:WINDOWS$NtUninstallKB973507$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB973525)—>»C:WINDOWS$NtUninstallKB973525$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB973869)—>»C:WINDOWS$NtUninstallKB973869$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB974112)—>»C:WINDOWS$NtUninstallKB974112$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB974571)—>»C:WINDOWS$NtUninstallKB974571$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB975025)—>»C:WINDOWS$NtUninstallKB975025$spuninstspuninst.exe»
Обновление безопасности для Windows XP (KB975467)—>»C:WINDOWS$NtUninstallKB975467$spuninstspuninst.exe»
Обновление безопасности для проигрывателя Windows Media — (KB954155)—>»C:WINDOWS$NtUninstallKB954155_WM9$spuninstspuninst.exe»
Обновление безопасности для проигрывателя Windows Media — (KB968816)—>»C:WINDOWS$NtUninstallKB968816_WM9$spuninstspuninst.exe»
Обновление безопасности для проигрывателя Windows Media — (KB973540)—>»C:WINDOWS$NtUninstallKB973540_WM9$spuninstspuninst.exe»
Обновление для Windows XP (KB968389)—>»C:WINDOWS$NtUninstallKB968389$spuninstspuninst.exe»
Обновление для Windows XP (KB973815)—>»C:WINDOWS$NtUninstallKB973815$spuninstspuninst.exe»
Яндекс.Бар для Internet Explorer 3.5.4—>»C:Program FilesYandexYandexBarIEunins000.exe»

======Hosts File======

127.0.0.1 localhost

======Security center information======

AV: ESET NOD32 Antivirus 3.0

======System event log======

Computer Name: MACHINENAME
Event Code: 2
Message: При проверке, что DeviceSerial0 является последовательным портом, обнаружена и будет использоваться прямая очередь.

Record Number: 5
Source Name: Serial
Time Written: 20091017161603.000000+180
Event Type: информация
User:

Computer Name: MACHINENAME
Event Code: 2
Message: Device identified.

Record Number: 4
Source Name: nvatabus
Time Written: 20091017161603.000000+180
Event Type: информация
User:

Computer Name: MACHINENAME
Event Code: 2
Message: Device identified.

Record Number: 3
Source Name: nvatabus
Time Written: 20091017161603.000000+180
Event Type: информация
User:

Computer Name: MACHINENAME
Event Code: 6005
Message: Запущена служба журнала событий.

Record Number: 2
Source Name: EventLog
Time Written: 20091017161552.000000+180
Event Type: информация
User:

Computer Name: MACHINENAME
Event Code: 6009
Message: Microsoft (R) Windows 2000 (R) 5.01. 2600 Service Pack 3 Uniprocessor Free.

Record Number: 1
Source Name: EventLog
Time Written: 20091017161552.000000+180
Event Type: информация
User:

=====Application event log=====

Computer Name: ДОМАШНИЙ
Event Code: 1000
Message: Счетчики производительности для службы MSDTC (MSDTC) загружены успешно.
Данные записи содержат новые значение индекса,
назначенного этой службе.

Record Number: 5
Source Name: LoadPerf
Time Written: 20091017132859.000000+180
Event Type: информация
User:

Computer Name: ДОМАШНИЙ
Event Code: 1000
Message: Счетчики производительности для службы TermService (Службы терминалов) загружены успешно.
Данные записи содержат новые значение индекса,
назначенного этой службе.

Record Number: 4
Source Name: LoadPerf
Time Written: 20091017132856.000000+180
Event Type: информация
User:

Computer Name: ДОМАШНИЙ
Event Code: 1000
Message: Счетчики производительности для службы RemoteAccess (Маршрутизация и удаленный доступ) загружены успешно.
Данные записи содержат новые значение индекса,
назначенного этой службе.

Record Number: 3
Source Name: LoadPerf
Time Written: 20091017132748.000000+180
Event Type: информация
User:

Computer Name: ДОМАШНИЙ
Event Code: 1000
Message: Счетчики производительности для службы PSched (PSched) загружены успешно.
Данные записи содержат новые значение индекса,
назначенного этой службе.

Record Number: 2
Source Name: LoadPerf
Time Written: 20091017132746.000000+180
Event Type: информация
User:

Computer Name: ДОМАШНИЙ
Event Code: 1000
Message: Счетчики производительности для службы RSVP (QoS RSVP) загружены успешно.
Данные записи содержат новые значение индекса,
назначенного этой службе.

Record Number: 1
Source Name: LoadPerf
Time Written: 20091017132735.000000+180
Event Type: информация
User:

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;C:Program FilesAlky for ApplicationsLibraries
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=15
«PROCESSOR_IDENTIFIER»=x86 Family 15 Model 47 Stepping 2, AuthenticAMD
«PROCESSOR_REVISION»=2f02
«NUMBER_OF_PROCESSORS»=1
«SrcDosPath»=F:
«SrcDosDrive»=F:
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP
«DEVMGR_SHOW_DETAILS»=1
«DEVMGR_SHOW_NONPRESENT_DEVICES»=1

EOF
20 октября, 2009 в 4:35 пп #26437
Admin
Keymaster
- Темы:40
- Сообщений:5676
Здравствуйте, добро пожаловать на Spyware-ru форум.

Проверьте этот файл, что NOD определяет как заражённый на сайте VirusTotal.

В поле Отправить файл кликните по кнопке Browse/Обзор.
Выберите этот подозрительный файл.
Кликните по кнопке Отправить файл.

Результат сканирования вставьте в ваше ответное сообщение.
21 октября, 2009 в 3:14 пп #26438
Аноним
Гость
- Темы:532
- Сообщений:1553
@Valeri wrote:

Здравствуйте, добро пожаловать на Spyware-ru форум.

Проверьте этот файл, что NOD определяет как заражённый на сайте VirusTotal.

В поле Отправить файл кликните по кнопке Browse/Обзор.
Выберите этот подозрительный файл.
Кликните по кнопке Отправить файл.

Результат сканирования вставьте в ваше ответное сообщение.

И Вам здравствовать!
Спасибо, что обратили внимание на мою проблему!

К сожалению, отправить не удаётся… Пишет:
0 bytes size received / Se ha recibido un archivo vacio

Хотя, может это тоже какой-то результат?

P.S.: Когда захожу в папку с этим файлом — сразу же НОД32 начинает ругаться на него.

P.S.S.: Решил, на всякий случай, отправить с почтового ящика…

При попытке присоединить файл с TUT.BY «Мазила» завершал аварийно работу (сварачивались все окна).
Отправил с POCHTA.RU. Жду ответа.
23 октября, 2009 в 12:54 пп #26439
Аноним
Гость
- Темы:532
- Сообщений:1553
Уже два письма им отправил… Ответа не поступает. 🙁

При попытке куда-нибудь его передать показывает размер — 0, хотя на самом деле вот:
26 октября, 2009 в 3:39 пп #26441
Admin
Keymaster
- Темы:40
- Сообщений:5676
Этот файл не отсылается видно по причине того, что доступ к нему запрещён антвирусом.
Отключите временно NOD, а потом попробуйте снова проверить файл на сервисе VirusTotal.
26 октября, 2009 в 4:56 пп #26440
Аноним
Гость
- Темы:532
- Сообщений:1553
Спасибо за подсказку! 🙂

Вот:
MD5: cdb13f1e48540e19f4b961e77904f168
First received: 2009.05.05 09:40:42 UTC
Дата: 2009.10.26 14:54:44 UTC [<1D]
Результаты: 13/41
Permalink: analisis/1d716c779a7524d1f1523c55903cb773de7c62437291474bb1dd619441ab0068-1256568884

___________________________________
___________________________________

Файл termsrv.dll получен 2009.10.26 14:54:44 (UTC)
Текущий статус: закончено
Результат: 13/41 (31.71%)
Форматированные Форматированные
Печать результатов Печать результатов
Антивирус Версия Обновление Результат
a-squared 4.5.0.41 2009.10.26 Riskware.Win32.Ursnif!IK
AhnLab-V3 5.0.0.2 2009.10.23 —
AntiVir 7.9.1.44 2009.10.26 —
Antiy-AVL 2.0.3.7 2009.10.26 —
Authentium 5.1.2.4 2009.10.26 —
Avast 4.8.1351.0 2009.10.25 —
AVG 8.5.0.423 2009.10.26 —
BitDefender 7.2 2009.10.26 Application.Generic.248059
CAT-QuickHeal 10.00 2009.10.26 —
ClamAV 0.94.1 2009.10.26 —
Comodo 2739 2009.10.26 UnclassifiedMalware
DrWeb 5.0.0.12182 2009.10.26 —
eSafe 7.0.17.0 2009.10.25 —
eTrust-Vet 35.1.7083 2009.10.26 —
F-Prot 4.5.1.85 2009.10.26 —
F-Secure 9.0.15370.0 2009.10.22 Application.Generic.248059
Fortinet 3.120.0.0 2009.10.26 W32/Patched.E!tr
GData 19 2009.10.26 Application.Generic.248059
Ikarus T3.1.1.72.0 2009.10.26 VirTool.Win32.Ursnif
Jiangmin 11.0.800 2009.10.26 —
K7AntiVirus 7.10.879 2009.10.24 Trojan.Win32.Malware.1
Kaspersky 7.0.0.125 2009.10.26 —
McAfee 5782 2009.10.25 potentially unwanted program Patched Termsrv
McAfee+Artemis 5782 2009.10.25 potentially unwanted program Patched Termsrv
McAfee-GW-Edition 6.8.5 2009.10.26 —
Microsoft 1.5202 2009.10.26 VirTool:Win32/Ursnif.B
NOD32 4544 2009.10.26 Win32/Spy.Ursnif.A
Norman 6.03.02 2009.10.23 —
nProtect 2009.1.8.0 2009.10.26 —
Panda 10.0.2.2 2009.10.26 Trj/CI.A
PCTools 4.4.2.0 2009.10.19 —
Prevx 3.0 2009.10.26 —
Rising 21.53.04.00 2009.10.26 —
Sophos 4.46.0 2009.10.26 —
Sunbelt 3.2.1858.2 2009.10.25 —
Symantec 1.4.4.12 2009.10.26 —
TheHacker 6.5.0.2.053 2009.10.24 —
TrendMicro 8.950.0.1094 2009.10.26 —
VBA32 3.12.10.11 2009.10.23 —
ViRobot 2009.10.26.2005 2009.10.26 —
VirusBuster 4.6.5.0 2009.10.25 —
Дополнительная информация
File size: 295936 bytes
MD5 : cdb13f1e48540e19f4b961e77904f168
SHA1 : c9da870e74b7caf003ff3672a7c3227cd332befa
SHA256: 1d716c779a7524d1f1523c55903cb773de7c62437291474bb1dd619441ab0068
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x219FD
timedatestamp…..: 0x480381E3 (Mon Apr 14 18:10:11 2008)
machinetype…….: 0x14C (Intel I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x3F7CA 0x3F800 6.62 3b17550ec0b93633ac198889c1011bf6
.data 0x41000 0x9838 0x1200 5.40 5d65a3663dd1e46550c681e04de1361f
.rsrc 0x4B000 0x40D4 0x4200 3.98 c31aca52a9a4ad92327931e329286723
.reloc 0x50000 0x32EE 0x3400 6.19 c59c84e9cda7289330e30d991fa19248

( 17 imports )

> advapi32.dll: GetSidSubAuthorityCount, GetSidSubAuthority, AccessCheckAndAuditAlarmW, AllocateAndInitializeSid, SetEntriesInAclW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, RegEnumKeyW, DeregisterEventSource, CryptAcquireContextW, CryptCreateHash, CryptImportKey, CryptVerifySignatureW, CryptDestroyKey, CryptDestroyHash, CryptReleaseContext, AddAce, GetAce, GetAclInformation, GetUserNameA, CryptHashData, RegisterServiceCtrlHandlerW, GetSidIdentifierAuthority, IsValidSid, GetTokenInformation, EqualSid, LookupAccountSidW, RegSetValueExW, CryptGenRandom, RegisterEventSourceW, ReportEventW, SetServiceBits, RegOpenKeyW, GetUserNameW, SetServiceStatus, RegOpenKeyExW, GetSecurityDescriptorDacl, LsaDelete, LsaSetSecret, LsaClose, LsaOpenSecret, LsaCreateSecret, LsaOpenPolicy, LsaFreeMemory, LsaQuerySecret, GetEventLogInformation, LsaQueryInformationPolicy, RegQueryValueExW, RegCloseKey, LogonUserW, AddAccessAllowedAce, InitializeAcl, GetLengthSid, OpenThreadToken, CheckTokenMembership, MakeSelfRelativeSD, MakeAbsoluteSD, IsValidSecurityDescriptor, ElfReportEventW, ElfRegisterEventSourceW, I_ScSendTSMessage, RegNotifyChangeKeyValue, RegCreateKeyExW, RegQueryValueExA, RegOpenKeyExA, GetCurrentHwProfileA, RegEnumKeyExA, RegEnumKeyExW, LsaStorePrivateData, LsaNtStatusToWinError, LsaRetrievePrivateData, RegDeleteValueW, OpenProcessToken
> authz.dll: AuthzFreeResourceManager, AuthziAllocateAuditParams, AuthziInitializeAuditParamsWithRM, AuthziInitializeAuditEvent, AuthziLogAuditEvent, AuthzFreeAuditEvent, AuthziFreeAuditParams, AuthzInitializeResourceManager, AuthziInitializeAuditEventType, AuthziFreeAuditEventType
> crypt32.dll: CertCloseStore, CertCreateCertificateContext, CertOpenStore, CertDuplicateCertificateContext, CertFreeCertificateContext, CertGetIssuerCertificateFromStore, CertVerifySubjectCertificateContext, CryptExportPublicKeyInfo, CertEnumCertificatesInStore, CertFindExtension, CertVerifyCertificateChainPolicy, CertComparePublicKeyInfo, CryptDecodeObject, CryptVerifyCertificateSignature, CryptBinaryToStringW
> icaapi.dll: IcaOpen, IcaStackCallback, IcaStackConnectionWait, IcaStackConnectionRequest, IcaStackConnectionAccept, _IcaStackIoControl, IcaStackUnlock, IcaStackReconnect, IcaStackTerminate, IcaChannelClose, IcaStackIoControl, IcaPushConsoleStack, IcaChannelOpen, IcaChannelIoControl, IcaStackConnectionClose, IcaStackClose, IcaClose, IcaIoControl, IcaStackOpen, IcaStackDisconnect
> kernel32.dll: GetLocalTime, GetDiskFreeSpaceA, GetDateFormatW, FileTimeToSystemTime, InitializeCriticalSection, GetVersion, CreateMutexW, GetModuleHandleA, InterlockedExchange, OutputDebugStringA, GetProcessAffinityMask, SetThreadAffinityMask, ResumeThread, GetExitCodeThread, GetSystemInfo, GetLogicalDriveStringsA, GetDriveTypeA, GetVolumeInformationW, GetVolumeInformationA, GlobalMemoryStatus, lstrlenA, lstrcpyA, GetFileSize, WriteFile, SetFilePointer, ReadFile, CreateFileA, HeapAlloc, HeapFree, CompareFileTime, CreateWaitableTimerW, SetWaitableTimer, FormatMessageW, LeaveCriticalSection, GetSystemDefaultLCID, SystemTimeToFileTime, LoadLibraryExA, GetVersionExA, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, GetCurrentThreadId, QueryPerformanceCounter, LoadLibraryA, InterlockedCompareExchange, DelayLoadFailureHook, lstrcpynW, GetACP, MultiByteToWideChar, SetLastError, lstrlenW, LocalFree, LocalAlloc, GetProcessHeap, DisableThreadLibraryCalls, DebugBreak, Sleep, CloseHandle, CreateProcessW, GetCurrentProcessId, IsDebuggerPresent, GetVersionExW, ResetEvent, SetEvent, VerifyVersionInfoW, CreateEventW, GetLastError, ReleaseMutex, UnmapViewOfFile, MapViewOfFile, OpenFileMappingW, WaitForMultipleObjects, OpenEventW, OpenMutexW, InterlockedDecrement, CreateThread, CreateFileW, GetSystemDirectoryW, GetSystemTime, GetComputerNameA, GetSystemTimeAsFileTime, UnregisterWait, WaitForSingleObject, InterlockedIncrement, lstrcpyW, ExitThread, QueryDosDeviceW, ProcessIdToSessionId, IsBadReadPtr, IsBadWritePtr, OpenProcess, GetComputerNameW, FreeLibrary, GetProcAddress, LoadLibraryW, GetProfileStringW, GetTickCount, RegisterWaitForSingleObject, lstrcatW, lstrcmpiW, GetProfileIntW, GetWindowsDirectoryW, SetThreadPriority, GetCurrentThread, LocalSize, GetCurrentProcess, PulseEvent, GetComputerNameExW, WideCharToMultiByte, InitializeCriticalSectionAndSpinCount, EnterCriticalSection, DeleteCriticalSection
> mstlsapi.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, —
> msvcrt.dll: wcscpy, wcscmp, _except_handler3, _wcsnicmp, wcscat, swscanf, wcsncpy, wcslen, wcsncat, swprintf, wcsrchr, memmove, _snwprintf, wcschr, sprintf, qsort, strncpy, gmtime, time, mktime, _mbslen, mbstowcs, __3@YAXPAX@Z, __2@YAPAXI@Z, free, _initterm, malloc, _adjust_fdiv, _ftol, _snprintf, strncmp, iswdigit, _wcsupr, wcstok, _wtol, _stricmp, __CxxFrameHandler, _purecall, _wcsicmp
> ntdll.dll: NtOpenProcessToken, NtQueryInformationToken, RtlLengthSid, RtlCopySid, NtAllocateVirtualMemory, NtFreeVirtualMemory, RtlAcquireResourceShared, NtDelayExecution, DbgBreakPoint, RtlPrefixUnicodeString, NtResetEvent, NtWaitForMultipleObjects, RtlInitializeGenericTable, RtlDeleteCriticalSection, NtOpenProcess, NtQueryVirtualMemory, RtlLookupElementGenericTable, RtlCompareMemory, RtlInsertElementGenericTable, RtlDeleteElementGenericTable, RtlInitializeResource, NtCreateEvent, NtDuplicateObject, NtQuerySystemTime, RtlEqualSid, RtlAdjustPrivilege, RtlInitializeCriticalSection, NtTerminateProcess, RtlLengthRequiredSid, NtReleaseMutant, NtWaitForSingleObject, NtCreateMutant, NtQueryInformationProcess, NtDuplicateToken, NtSetInformationThread, RtlpNtEnumerateSubKey, NtRequestPort, NtConnectPort, NtSetEvent, RtlEnterCriticalSection, RtlAllocateHeap, NtOpenThreadToken, NtReplyPort, NtCompleteConnectPort, NtAcceptConnectPort, NtCreateSection, NtReplyWaitReceivePort, RtlFreeUnicodeString, NtCreatePort, RtlAnsiStringToUnicodeString, RtlInitAnsiString, RtlQueryRegistryValues, NtDeviceIoControlFile, RtlExtendedLargeIntegerDivide, RtlConvertExclusiveToShared, RtlConvertSharedToExclusive, RtlDeleteResource, NtRequestWaitReplyPort, RtlFreeHeap, RtlLeaveCriticalSection, RtlAcquireResourceExclusive, RtlReleaseResource, RtlInitUnicodeString, NtOpenKey, NtQueryValueKey, NtClose, VerSetConditionMask, RtlCreateEnvironment, RtlSetProcessIsCritical, DbgPrint, NtQuerySystemInformation, NtSetTimer, NtCreateTimer, RtlCopySecurityDescriptor, RtlNtStatusToDosError, RtlDeleteAce, RtlGetAce, RtlQueryInformationAcl, RtlGetDaclSecurityDescriptor, RtlMapGenericMask, RtlSubAuthoritySid, RtlInitializeSid, RtlCreateUserSecurityObject, RtlSetDaclSecurityDescriptor, RtlAddAccessAllowedAce, RtlCreateAcl, RtlCreateSecurityDescriptor, RtlWriteRegistryValue, RtlCreateRegistryKey, RtlLengthSecurityDescriptor, RtlSetGroupSecurityDescriptor, RtlGetGroupSecurityDescriptor, RtlGetOwnerSecurityDescriptor, NtSetSecurityObject, NtQuerySecurityObject, NtOpenSymbolicLinkObject, NtQueryDirectoryObject, NtCreateDirectoryObject, RtlFreeSid, RtlAllocateAndInitializeSid, RtlIntegerToUnicodeString, RtlAppendUnicodeToString, NtQueryMutant
> oleaut32.dll: -, -, -, -, -, -, -, -, -, —
> rpcrt4.dll: RpcServerInqDefaultPrincNameW, RpcServerRegisterAuthInfoW, RpcServerRegisterIfEx, RpcBindingToStringBindingW, RpcServerListen, RpcImpersonateClient, I_RpcBindingIsClientLocal, RpcRevertToSelf, RpcServerUseProtseqEpW, I_RpcBindingInqLocalClientPID, RpcStringFreeW, RpcRaiseException, RpcSsContextLockExclusive, NdrServerCall2, RpcServerRegisterIf, RpcStringBindingParseW
> secur32.dll: GetUserNameExW
> setupapi.dll: SetupDiGetDeviceRegistryPropertyA, SetupDiGetClassDevsA, SetupDiEnumDeviceInfo, SetupDiDestroyDeviceInfoList
> shell32.dll: SHGetFolderPathA
> shlwapi.dll: PathAppendA
> user32.dll: GetCursorPos, wvsprintfA, BroadcastSystemMessageA, wsprintfA, GetSystemMetrics, wsprintfW, ExitWindowsEx, LoadStringW, MessageBeep, GetMessageTime
> wintrust.dll: CryptCATAdminCalcHashFromFileHandle, CryptCATAdminEnumCatalogFromHash, CryptCATCatalogInfoFromContext, CryptCATAdminReleaseCatalogContext, CryptCATAdminReleaseContext, WTHelperProvDataFromStateData, WTHelperGetProvSignerFromChain, CryptCATAdminAcquireContext, WinVerifyTrust
> ws2_32.dll: -, -, -, getaddrinfo, -, —

( 1 exports )

> ServiceMain
TrID : File type identification
Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
ssdeep: 6144:nc51EYcaOzaJ9cBIGxIK7zjL38kY0caPQ/6JnS3f2LntmNwTrAM:nc70aOza4xIOjLbPQiJnRtcU
PEiD : —
RDS : NSRL Reference Data Set
—
31 октября, 2009 в 5:45 пп #26442
Admin
Keymaster
- Темы:40
- Сообщений:5676
Кликните Пуск -> Выполнить
В строке ввода введите notepad и нажмите Enter.
Вствавьте в блокнот следующий текст:
```
dir termsrv.dll /a h /s > File.txt
```
Кликните Файл, Сохранить как.
Смените тип файла на: Все файлы.
Введите имя файла find_file.bat и кликните Ok.
Сохраните файл на ваш рабочий стол.
Закройте блокнот.
Дважды кликните по созданному нами файлу find_file.bat.
По-завершению работы на рабочем столе появится файл File.txt, вставьте его содержимое в ваш ответ.
Автор

Сообщения