Вирус — банер в середине экран просит отправить sms

This topic has 2 ответа, 2 участника, and was last updated 15 years, 4 months назад by natashkins.

Просмотр 3 сообщений - с 1 по 3 (из 3 всего)

Автор

Сообщения
28 апреля, 2010 в 6:27 пп #17551
natashkins
Participant
- Темы:1
- Сообщений:2
Добрый день!
Помогите решить роблему. На компьютере стоит авира, но все рвно прокрался вирус(( Банер в середине экрана просит отправить смс на номер 3378223 с кодом 5121. На форуме нашла код для удаления 6789246356, ввела и банер исчез, но вирус же остался(( Что делать дальше? SOS!!
Запустила программу RSIT, но у меня выдался только 1 файл — log.

Logfile of random’s system information tool 1.06 (written by random/random)
Run by Администратор at 2010-04-28 22:27:18
Microsoft Windows XP Professional Service Pack 3
System drive C: has 21 GB (33%) free of 64 GB
Total RAM: 2047 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:27:19, on 28.04.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20815)
Boot mode: Normal

Running processes:
C:WINDOWS.1System32smss.exe
C:WINDOWS.1system32winlogon.exe
C:WINDOWS.1system32services.exe
C:WINDOWS.1system32lsass.exe
C:WINDOWS.1system32Ati2evxx.exe
C:WINDOWS.1system32svchost.exe
C:WINDOWS.1System32svchost.exe
C:WINDOWS.1system32Ati2evxx.exe
C:WINDOWS.1system32spoolsv.exe
C:WINDOWS.1system32svchost.exe
C:Program FilesAviraAntiVir Desktopsched.exe
C:WINDOWS.1Explorer.exe
C:WINDOWS.1ATK0100HControl.exe
C:Program FilesMotorolaSMSERIALsm56hlpr.exe
C:WINDOWS.1RTHDCPL.EXE
C:Program FilesAviraAntiVir Desktopavgnt.exe
C:WINDOWS.1system32ctfmon.exe
C:WINDOWS.1system32ASUSTPE.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.EXE
C:Program FilesATI TechnologiesATI.ACECore-Staticccc.exe
C:WINDOWS.1system32taskmgr.exe
C:Program FilesAviraAntiVir Desktopavguard.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:WINDOWS.1system32svchost.exe
C:WINDOWS.1ATK0100ATKOSD.exe
C:Program FilesNeoSmart TechnologiesToolTipFixerToolTipFixer.exe
C:WINDOWS.1system32svchost.exe
C:Documents and SettingsАдминистраторApplication DataMail.RuAgentmagent.exe
C:Program FilesSkypePhoneSkype.exe
C:Program FilesSkypePlugin ManagerskypePM.exe
C:WINDOWS.1system32wbemwmiapsrv.exe
C:Program FilesOperaopera.exe
C:Program FilesInternet Exploreriexplore.exe
C:Documents and SettingsАдминистраторРабочий столRSIT.exe
C:Program Filestrend microАдминистратор.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:Documents and SettingsАдминистраторApplication DataMail.RuAgentMradllnewmrasearch.dll
F2 — REG:system.ini: Shell=Explorer.exe rundll32.exe thxr.wgo nwfdtx
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_06binssv.dll
O4 — HKLM..Run: [HControl] C:WINDOWS.1ATK0100HControl.exe
O4 — HKLM..Run: [SMSERIAL] C:Program FilesMotorolaSMSERIALsm56hlpr.exe
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [SkyTel] SkyTel.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [avgnt] «C:Program FilesAviraAntiVir Desktopavgnt.exe» /min
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWS.1system32ctfmon.exe
O4 — HKCU..Run: [ASUSTPE] C:WINDOWS.1system32ASUSTPE.exe
O4 — HKCU..Run: [StartCCC] C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe
O4 — HKCU..PoliciesExplorerRun: [Dr.Watson] C:WINDOWS.1system32drwat32.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWS.1system32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWS.1INFcustom.inf,OnceFirstLogonInstall,0 (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE7_011] regsvr32 /s /n /i:u shell32 (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE7_012] rundll32 advpack.dll,LaunchINFSectionEx IE7int.inf,AfterUserStart,,4,N (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWS.1system32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWS.1INFcustom.inf,OnceFirstLogonInstall,0 (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWS.1system32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWS.1INFcustom.inf,NewUserFirstLogonInstall,0 (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWS.1system32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWS.1INFcustom.inf,NewUserFirstLogonInstall,0 (User ‘Default user’)
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWS.1Network Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWS.1Network Diagnosticxpnetdiag.exe
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Documents and SettingsАдминистраторApplication DataMail.RuAgentmagent.exe (HKCU)
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Documents and SettingsАдминистраторApplication DataMail.RuAgentmagent.exe (HKCU)
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 — HKLMSystemCCSServicesTcpip..{8C3BE4CA-8A53-4185-B71F-AE61F4F4EBE1}: NameServer = 195.34.224.1,195.34.224.2
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 — Winlogon Notify: cpcsp — C:Program FilesCrypto ProCSPcpcspi.dll
O23 — Service: Avira AntiVir Планировщик (AntiVirSchedulerService) — Avira GmbH — C:Program FilesAviraAntiVir Desktopsched.exe
O23 — Service: Avira AntiVir Guard (AntiVirService) — Avira GmbH — C:Program FilesAviraAntiVir Desktopavguard.exe
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — C:WINDOWS.1system32Ati2evxx.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWS.1system32services.exe
O23 — Service: FLEXnet Licensing Service — Macrovision Europe Ltd. — C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWS.1system32imapi.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWS.1system32mnmsrvc.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWS.1system32services.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWS.1System32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWS.1system32smlogsvc.exe
O23 — Service: NST ToolTipFixer (TTFixerService) — NeoSmart Technologies — C:Program FilesNeoSmart TechnologiesToolTipFixerToolTipFixer.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWS.1System32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWS.1system32wbemwmiapsrv.exe

—
End of file — 8406 bytes

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_06binssv.dll [2008-03-25 509328]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«HControl»=C:WINDOWS.1ATK0100HControl.exe [2006-10-14 110592]
«SMSERIAL»=C:Program FilesMotorolaSMSERIALsm56hlpr.exe [2006-11-22 630784]
«RTHDCPL»=C:WINDOWS.1RTHDCPL.EXE [2006-11-14 16270848]
«SkyTel»=C:WINDOWS.1SkyTel.EXE [2006-05-16 2879488]
«Alcmtr»=C:WINDOWS.1ALCMTR.EXE [2005-05-03 69632]
«avgnt»=C:Program FilesAviraAntiVir Desktopavgnt.exe [2009-03-02 209153]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWS.1system32ctfmon.exe [2008-06-25 17408]
«ASUSTPE»=C:WINDOWS.1system32ASUSTPE.exe [2006-10-14 69632]
«»= []
«StartCCC»=C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2006-11-10 90112]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerRun]
«Dr.Watson»=C:WINDOWS.1system32drwat32.exe []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWS.1system32Ati2evxx.dll [2007-03-06 110592]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifycpcsp]
C:Program FilesCrypto ProCSPcpcspi.dll [2009-07-29 717824]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWS.1system32WPDShServiceObj.dll [2008-03-21 133632]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«SynchronousMachineGroupPolicy»=0
«SynchronousUserGroupPolicy»=0

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«NoThumbnailCache»=1
«NoSMConfigurePrograms»=1
«NoSMHelp»=1

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:WINDOWS.1system32svchost.exe»=»C:WINDOWS.1system32svchost.exe:*:Enabled:Dr.Watson»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

======List of files/folders created in the last 1 months======

2010-04-28 22:14:45 —-D—- C:Program Filestrend micro
2010-04-28 22:14:44 —-D—- C:rsit
2010-04-28 22:05:26 —-D—- C:Documents and SettingsАдминистраторApplication DataAuslogics
2010-04-28 21:55:12 —-SHD—- C:WINDOWS.1CSC
2010-04-28 21:55:05 —-A—- C:WINDOWS.1ntbtlog.txt
2010-04-28 21:37:49 —-D—- C:Documents and SettingsАдминистраторApplication DataACD Systems
2010-04-25 17:06:38 —-D—- C:Program FilesCommon FilesSkype
2010-04-25 17:06:36 —-RD—- C:Program FilesSkype
2010-04-25 16:23:57 —-D—- C:WINDOWS.1Sun
2010-04-25 16:23:57 —-D—- C:Documents and SettingsАдминистраторApplication DataSun
2010-04-24 08:25:30 —-D—- C:Documents and SettingsАдминистраторApplication DataCrystal Player
2010-04-24 08:25:30 —-A—- C:audiodec.txt
2010-04-23 20:51:18 —-A—- C:WINDOWS.1system32fjhdyfhsn.bat
2010-04-19 14:29:16 —-D—- C:Documents and SettingsАдминистраторApplication DataGRETECH
2010-04-19 12:29:59 —-D—- C:Documents and SettingsАдминистраторApplication DatauTorrent
2010-04-19 11:32:59 —-D—- C:Program FilesFull Tilt Poker
2010-04-19 11:10:48 —-D—- C:Documents and SettingsАдминистраторApplication DataPRMT
2010-04-19 11:02:37 —-D—- C:Documents and SettingsAll UsersApplication DataFLEXnet
2010-04-19 10:05:21 —-D—- C:с диска
2010-04-19 09:37:02 —-D—- C:Program FilesThe Bat!
2010-04-19 09:06:31 —-RD—- C:НЛМК
2010-04-19 09:02:25 —-D—- C:Program FilesGamblerJ
2010-04-19 08:37:17 —-D—- C:Documents and SettingsАдминистраторApplication DataCrypto Pro
2010-04-19 08:24:45 —-RD—- C:Program FilesAlfaDirect
2010-04-19 08:22:32 —-D—- C:WINDOWS.1system32GroupPolicy
2010-04-19 08:22:32 —-D—- C:Program FilesCommon FilesCrypto Pro
2010-04-19 08:22:31 —-D—- C:Program FilesCrypto Pro
2010-04-19 08:22:12 —-DC—- C:WINDOWS.1system32DRVSTORE
2010-04-19 08:21:34 —-D—- C:WINDOWS.1system32Aktiv Co
2010-04-19 08:19:21 —-D—- C:Documents and SettingsАдминистраторApplication DataOpera
2010-04-19 08:18:36 —-D—- C:Program FilesOpera
2010-04-19 08:17:04 —-D—- C:Documents and SettingsАдминистраторApplication DataATI
2010-04-19 02:42:44 —-A—- C:WINDOWS.1system32h323log.txt
2010-04-19 02:41:51 —-D—- C:WINDOWS.1system32RTCOM
2010-04-19 02:41:49 —-A—- C:WINDOWS.1system32ksuser.dll
2010-04-19 02:39:53 —-A—- C:WINDOWS.1system32usbui.dll
2010-04-19 02:39:45 —-D—- C:WINDOWS.1ATK0100
2010-04-19 02:36:56 —-A—- C:WINDOWS.1system32PerfStringBackup.INI
2010-04-19 02:36:55 —-SHD—- C:WINDOWS.1Installer
2010-04-19 02:36:54 —-D—- C:Program FilesCommon FilesODBC
2010-04-19 02:36:54 —-A—- C:WINDOWS.1ODBCINST.INI
2010-04-19 02:36:50 —-RD—- C:Program Files
2010-04-19 02:36:50 —-D—- C:Program FilesCommon FilesSpeechEngines
2010-04-19 02:36:50 —-D—- C:Program FilesCommon FilesMicrosoft Shared
2010-04-19 02:36:50 —-D—- C:Program FilesCommon Files
2010-04-19 02:36:46 —-RA—- C:WINDOWS.1system32kbdtuq.dll
2010-04-19 02:36:46 —-RA—- C:WINDOWS.1system32kbdtuf.dll
2010-04-19 02:36:46 —-RA—- C:WINDOWS.1system32kbdazel.dll
2010-04-19 02:36:43 —-RA—- C:WINDOWS.1system32kbdhept.dll
2010-04-19 02:36:43 —-RA—- C:WINDOWS.1system32kbdhela3.dll
2010-04-19 02:36:43 —-RA—- C:WINDOWS.1system32kbdhela2.dll
2010-04-19 02:36:43 —-RA—- C:WINDOWS.1system32kbdhe319.dll
2010-04-19 02:36:43 —-RA—- C:WINDOWS.1system32kbdhe220.dll
2010-04-19 02:36:43 —-RA—- C:WINDOWS.1system32kbdhe.dll
2010-04-19 02:36:43 —-RA—- C:WINDOWS.1system32kbdgkl.dll
2010-04-19 02:36:41 —-RA—- C:WINDOWS.1system32kbdlv1.dll
2010-04-19 02:36:41 —-RA—- C:WINDOWS.1system32kbdlv.dll
2010-04-19 02:36:41 —-RA—- C:WINDOWS.1system32kbdlt1.dll
2010-04-19 02:36:41 —-RA—- C:WINDOWS.1system32kbdlt.dll
2010-04-19 02:36:41 —-RA—- C:WINDOWS.1system32kbdest.dll
2010-04-19 02:36:40 —-RA—- C:WINDOWS.1system32kbdsl1.dll
2010-04-19 02:36:40 —-RA—- C:WINDOWS.1system32kbdsl.dll
2010-04-19 02:36:40 —-RA—- C:WINDOWS.1system32kbdro.dll
2010-04-19 02:36:40 —-RA—- C:WINDOWS.1system32kbdpl.dll
2010-04-19 02:36:39 —-RA—- C:WINDOWS.1system32kbdycl.dll
2010-04-19 02:36:39 —-RA—- C:WINDOWS.1system32kbdpl1.dll
2010-04-19 02:36:39 —-RA—- C:WINDOWS.1system32kbdhu1.dll
2010-04-19 02:36:39 —-RA—- C:WINDOWS.1system32kbdhu.dll
2010-04-19 02:36:39 —-RA—- C:WINDOWS.1system32kbdcz2.dll
2010-04-19 02:36:39 —-RA—- C:WINDOWS.1system32kbdcz1.dll
2010-04-19 02:36:39 —-RA—- C:WINDOWS.1system32kbdcz.dll
2010-04-19 02:36:39 —-RA—- C:WINDOWS.1system32kbdcr.dll
2010-04-19 02:36:39 —-RA—- C:WINDOWS.1system32KBDAL.DLL
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbdycc.dll
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbduzb.dll
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbdur.dll
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbdtat.dll
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbdmon.dll
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbdkyr.dll
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbdkaz.dll
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbdbu.dll
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbdblr.dll
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbdaze.dll
2010-04-19 02:36:33 —-A—- C:WINDOWS.1system32spxcoins.dll
2010-04-19 02:36:33 —-A—- C:WINDOWS.1system32irclass.dll
2010-04-19 02:36:33 —-A—- C:WINDOWS.1system32EqnClass.Dll
2010-04-19 02:36:33 —-A—- C:WINDOWS.1system32dgsetup.dll
2010-04-19 02:36:33 —-A—- C:WINDOWS.1system32dgrpsetu.dll
2010-04-19 02:36:30 —-N—- C:WINDOWS.1system32CONFIG.TMP
2010-04-19 02:36:30 —-A—- C:WINDOWS.1TASKMAN.EXE
2010-04-19 02:36:29 —-A—- C:WINDOWS.1system32batt.dll
2010-04-19 02:36:29 —-A—- C:WINDOWS.1NOTEPAD.EXE
2010-04-19 02:36:28 —-A—- C:WINDOWS.1system32storprop.dll
2010-04-19 02:36:18 —-ASH—- C:Documents and SettingsAll UsersApplication Datadesktop.ini
2010-04-19 02:36:13 —-RA—- C:WINDOWS.1SET8.tmp
2010-04-19 02:36:10 —-RA—- C:WINDOWS.1SET4.tmp
2010-04-19 02:36:08 —-RA—- C:WINDOWS.1SET3.tmp
2010-04-19 02:36:03 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
2010-04-19 02:35:40 —-A—- C:WINDOWS.1setuplog.txt
2010-04-19 02:35:09 —-A—- C:WINDOWS.1SoundMan.exe
2010-04-19 02:35:09 —-A—- C:WINDOWS.1SkyTel.exe
2010-04-19 02:35:09 —-A—- C:WINDOWS.1RtlUpd.exe
2010-04-19 02:35:09 —-A—- C:WINDOWS.1RTLCPL.exe
2010-04-19 02:35:08 —-A—- C:WINDOWS.1RTHDCPL.exe
2010-04-19 02:35:08 —-A—- C:WINDOWS.1MicCal.exe
2010-04-19 02:35:08 —-A—- C:WINDOWS.1alcwzrd.exe
2010-04-19 02:35:08 —-A—- C:WINDOWS.1Alcmtr.exe
2010-04-19 02:31:08 —-A—- C:WINDOWS.1system32Oemdspif.dll
2010-04-19 02:31:07 —-A—- C:WINDOWS.1system32ativvaxx.dll
2010-04-19 02:31:07 —-A—- C:WINDOWS.1system32atitvo32.dll
2010-04-19 02:31:07 —-A—- C:WINDOWS.1system32atipdlxx.dll
2010-04-19 02:31:07 —-A—- C:WINDOWS.1system32atiok3x2.dll
2010-04-19 02:31:04 —-A—- C:WINDOWS.1system32atioglxx.dll
2010-04-19 02:31:03 —-A—- C:WINDOWS.1system32atioglx2.dll
2010-04-19 02:31:02 —-A—- C:WINDOWS.1system32atikvmag.dll
2010-04-19 02:31:02 —-A—- C:WINDOWS.1system32atiiiexx.dll
2010-04-19 02:31:01 —-A—- C:WINDOWS.1system32ATIDEMGX.dll
2010-04-19 02:31:01 —-A—- C:WINDOWS.1system32ATIDDC.DLL
2010-04-19 02:31:01 —-A—- C:WINDOWS.1system32ati3duag.dll
2010-04-19 02:31:01 —-A—- C:WINDOWS.1system32ati2evxx.dll
2010-04-19 02:31:01 —-A—- C:WINDOWS.1system32ati2edxx.dll
2010-04-19 02:31:01 —-A—- C:WINDOWS.1system32ati2dvag.dll
2010-04-19 02:30:54 —-A—- C:WINDOWS.1system32ati2cqag.dll
2010-04-19 02:30:54 —-A—- C:WINDOWS.1system32amdpcom32.dll
2010-04-19 02:30:51 —-A—- C:WINDOWS.1system32Ati2mdxx.exe
2010-04-19 02:30:51 —-A—- C:WINDOWS.1system32ati2evxx.exe
2010-04-19 02:29:36 —-D—- C:WINDOWS.1system32CatRoot2
2010-04-19 02:29:36 —-D—- C:WINDOWS.1system32CatRoot
2010-04-19 02:29:19 —-SHD—- C:System Volume Information
2010-04-19 02:29:19 —-D—- C:Documents and Settings
2010-04-19 02:24:12 —-RSHDC—- C:WINDOWS.1system32dllcache
2010-04-19 02:24:12 —-RSD—- C:WINDOWS.1Fonts
2010-04-19 02:24:12 —-HD—- C:WINDOWS.1inf
2010-04-19 02:24:12 —-D—- C:WINDOWS.1WinSxS
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Web
2010-04-19 02:24:12 —-D—- C:WINDOWS.1twain_32
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Temp
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32wins
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32wbem
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32usmt
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32spool
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32ShellExt
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32Setup
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32ru-ru
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32ru
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32ras
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32oobe
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32npp
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32mui
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32inetsrv
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32IME
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32icsxml
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32ias
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32export
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32drivers
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32dhcp
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32config
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system323com_dmi
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system323076
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system322052
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system321054
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system321049
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system321042
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system321041
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system321037
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system321033
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system321031
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system321028
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system321025
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system
2010-04-19 02:24:12 —-D—- C:WINDOWS.1security
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Resources
2010-04-19 02:24:12 —-D—- C:WINDOWS.1repair
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Provisioning
2010-04-19 02:24:12 —-D—- C:WINDOWS.1PeerNet
2010-04-19 02:24:12 —-D—- C:WINDOWS.1pchealth
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Network Diagnostic
2010-04-19 02:24:12 —-D—- C:WINDOWS.1mui
2010-04-19 02:24:12 —-D—- C:WINDOWS.1msapps
2010-04-19 02:24:12 —-D—- C:WINDOWS.1msagent
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Media
2010-04-19 02:24:12 —-D—- C:WINDOWS.1L2Schemas
2010-04-19 02:24:12 —-D—- C:WINDOWS.1java
2010-04-19 02:24:12 —-D—- C:WINDOWS.1ime
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Help
2010-04-19 02:24:12 —-D—- C:WINDOWS.1ehome
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Driver Cache
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Debug
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Cursors
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Connection Wizard
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Config
2010-04-19 02:24:12 —-D—- C:WINDOWS.1AppPatch
2010-04-19 02:24:12 —-D—- C:WINDOWS.1addins
2010-04-19 02:24:12 —-D—- C:WINDOWS.1
2010-04-19 02:15:07 —-D—- C:WINDOWS.0
2010-04-19 02:10:15 —-SH—- C:boot.ini
2010-04-19 02:06:16 —-D—- C:WINDOWS
2010-04-19 00:31:17 —-D—- C:Program FilesABBYY FineReader 8.0 Professional Edition
2010-04-19 00:28:02 —-D—- C:Program FilesFoxit Software
2010-04-19 00:27:43 —-A—- C:WINDOWS.1ODBC.INI
2010-04-19 00:27:33 —-A—- C:WINDOWS.1system32mdimon.dll
2010-04-19 00:25:59 —-D—- C:Program FilesMicrosoft Works
2010-04-19 00:25:54 —-D—- C:Program FilesMicrosoft Visual Studio
2010-04-19 00:25:45 —-D—- C:WINDOWS.1SHELLNEW
2010-04-19 00:25:42 —-D—- C:Program FilesMicrosoft.NET
2010-04-19 00:25:42 —-D—- C:Program FilesMicrosoft Office
2010-04-19 00:19:57 —-D—- C:WINDOWS.1Lhsp
2010-04-19 00:19:57 —-D—- C:Program FilesPRMT8
2010-04-19 00:19:57 —-D—- C:Documents and SettingsAll UsersApplication DataPRMT
2010-04-19 00:18:50 —-D—- C:Program FilesuTorrent
2010-04-19 00:18:39 —-D—- C:Program FilesCommon FilesDesigner
2010-04-19 00:18:31 —-A—- C:WINDOWS.1system32rmoc3260.dll
2010-04-19 00:18:31 —-A—- C:WINDOWS.1system32pndx5032.dll
2010-04-19 00:18:31 —-A—- C:WINDOWS.1system32pndx5016.dll
2010-04-19 00:18:31 —-A—- C:WINDOWS.1system32pncrt.dll
2010-04-19 00:18:29 —-A—- C:WINDOWS.1system32unrar.dll
2010-04-19 00:18:21 —-A—- C:WINDOWS.1system32yv12vfw.dll
2010-04-19 00:18:20 —-A—- C:WINDOWS.1system32xvidvfw.dll
2010-04-19 00:18:20 —-A—- C:WINDOWS.1system32xvidcore.dll
2010-04-19 00:18:20 —-A—- C:WINDOWS.1system32qt-dx331.dll
2010-04-19 00:18:20 —-A—- C:WINDOWS.1system32dpl100.dll
2010-04-19 00:18:19 —-A—- C:WINDOWS.1system32divx.dll
2010-04-19 00:18:17 —-A—- C:WINDOWS.1system32ff_vfw.dll.manifest
2010-04-19 00:18:17 —-A—- C:WINDOWS.1system32ff_vfw.dll
2010-04-19 00:18:12 —-D—- C:Program FilesK-Lite Codec Pack
2010-04-19 00:18:12 —-D—- C:Documents and SettingsАдминистраторApplication DataReal
2010-04-19 00:18:12 —-D—- C:Documents and SettingsAll UsersApplication DataReal
2010-04-19 00:17:27 —-D—- C:Program FilesCorel
2010-04-19 00:17:27 —-D—- C:Program FilesCommon FilesCorel
2010-04-19 00:15:48 —-D—- C:Documents and SettingsAll UsersApplication DataACD Systems
2010-04-19 00:15:45 —-D—- C:Program FilesCommon FilesACD Systems
2010-04-19 00:15:45 —-D—- C:Program FilesACD Systems
2010-04-19 00:13:55 —-D—- C:Program FilesAdobe
2010-04-19 00:13:37 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
2010-04-19 00:12:51 —-D—- C:Program Filesxxx
2010-04-19 00:08:12 —-D—- C:Documents and SettingsАдминистраторApplication DataskypePM
2010-04-19 00:07:16 —-D—- C:Program FilesCommon FilesMacrovision Shared
2010-04-19 00:07:06 —-D—- C:Documents and SettingsАдминистраторApplication DataSkype
2010-04-19 00:06:41 —-D—- C:Program FilesCommon FilesAdobe
2010-04-19 00:05:16 —-D—- C:Documents and SettingsAll UsersApplication DataSkype
2010-04-18 23:59:37 —-D—- C:Program FilesAvira
2010-04-18 23:59:37 —-D—- C:Documents and SettingsAll UsersApplication DataAvira
2010-04-18 23:58:15 —-A—- C:WINDOWS.1NeroDigital.ini
2010-04-18 23:57:43 —-D—- C:Program FilesUltraISO
2010-04-18 23:57:43 —-D—- C:Program FilesCommon FilesEZB Systems
2010-04-18 23:57:05 —-N—- C:WINDOWS.1system32TwnLib4.dll
2010-04-18 23:57:05 —-N—- C:WINDOWS.1system32ImagXRA7.dll
2010-04-18 23:57:05 —-N—- C:WINDOWS.1system32ImagXR7.dll
2010-04-18 23:57:05 —-N—- C:WINDOWS.1system32ImagXpr7.dll
2010-04-18 23:57:05 —-N—- C:WINDOWS.1system32ImagX7.dll
2010-04-18 23:57:05 —-D—- C:Program FilesCommon FilesAhead
2010-04-18 23:57:05 —-A—- C:WINDOWS.1system32TwnLib20.dll
2010-04-18 23:57:05 —-A—- C:WINDOWS.1system32NeroCheck.exe
2010-04-18 23:57:04 —-D—- C:Program FilesAhead
2010-04-18 23:56:39 —-D—- C:Program FilesCrystal Player
2010-04-18 23:56:29 —-D—- C:Program FilesGRETECH
2010-04-18 23:56:16 —-D—- C:Program FilesThe KMPlayer
2010-04-18 23:56:14 —-D—- C:Program FilesDVD X Studios
2010-04-18 23:56:01 —-D—- C:Program FilesLight Alloy
2010-04-18 23:55:57 —-D—- C:Program FilesAuslogics
2010-04-18 23:53:18 —-A—- C:WINDOWS.1system32ChCfg.exe
2010-04-18 23:52:49 —-D—- C:Program FilesRealtek
2010-04-18 23:52:47 —-A—- C:WINDOWS.1RtlExUpd.dll
2010-04-18 23:49:25 —-D—- C:Documents and SettingsАдминистраторApplication DataMra
2010-04-18 23:49:24 —-D—- C:Documents and SettingsАдминистраторApplication DataMail.Ru
2010-04-18 23:49:14 —-D—- C:Program FilesMail.Ru
2010-04-18 23:48:14 —-SHD—- C:RECYCLER
2010-04-18 23:39:20 —-D—- C:Documents and SettingsАдминистраторApplication DataMacromedia
2010-04-18 23:39:20 —-D—- C:Documents and SettingsАдминистраторApplication DataAdobe
2010-04-18 23:38:32 —-D—- C:Program FilesATI Technologies
2010-04-18 23:37:36 —-A—- C:WINDOWS.1system32ativcoxx.dll
2010-04-18 23:35:56 —-D—- C:Program FilesMotorola
2010-04-18 23:35:49 —-A—- C:WINDOWS.1system32sm56co6a.dll
2010-04-18 23:35:32 —-D—- C:WINDOWS.1system32ReinstallBackups
2010-04-18 23:34:49 —-A—- C:WINDOWS.1system32vfwwdm32.dll
2010-04-18 23:34:26 —-A—- C:WINDOWS.1system32StkCWIA.dll
2010-04-18 23:34:26 —-A—- C:WINDOWS.1StkUnist.exe
2010-04-18 23:33:57 —-A—- C:WINDOWS.1system32TPESetting.dll
2010-04-18 23:33:57 —-A—- C:WINDOWS.1system32SynCtrl.dll
2010-04-18 23:33:57 —-A—- C:WINDOWS.1system32SynCom.dll
2010-04-18 23:33:57 —-A—- C:WINDOWS.1system32ASUSTPE.exe
2010-04-18 23:32:41 —-D—- C:temp
2010-04-18 23:32:40 —-D—- C:Documents and SettingsАдминистраторApplication DataInstallShield
2010-04-18 23:32:29 —-D—- C:Documents and SettingsАдминистраторApplication DataWinRAR
2010-04-18 23:32:12 —-HD—- C:Program FilesInstallShield Installation Information
2010-04-18 23:32:11 —-D—- C:Program FilesCommon FilesInstallShield
2010-04-18 23:10:28 —-D—- C:WINDOWS.1system32Lang
2010-04-18 23:10:04 —-D—- C:Documents and SettingsАдминистраторApplication DataIdentities
2010-04-18 23:10:00 —-HD—- C:Program FilesUninstall Information
2010-04-18 23:09:10 —-RD—- C:WINDOWS.1OemDrv
2010-04-18 23:09:02 —-D—- C:Program FilesWinRAR
2010-04-18 23:08:58 —-D—- C:Program FilesAnVir Task Manager
2010-04-18 23:08:55 —-D—- C:Program FilesLavalys
2010-04-18 23:08:49 —-D—- C:Program FilesNeoSmart Technologies
2010-04-18 23:07:04 —-D—- C:Program FilesMSBuild
2010-04-18 23:07:01 —-D—- C:WINDOWS.1system32XPSViewer
2010-04-18 23:06:57 —-D—- C:WINDOWS.1system32en-us
2010-04-18 23:06:56 —-D—- C:Program FilesReference Assemblies
2010-04-18 23:06:39 —-N—- C:WINDOWS.1system32spmsg2.dll
2010-04-18 23:04:12 —-A—- C:WINDOWS.1WPI_Log.txt
2010-04-18 22:59:13 —-SD—- C:Documents and SettingsАдминистраторApplication DataMicrosoft
2010-04-18 22:59:13 —-ASH—- C:Documents and SettingsАдминистраторApplication Datadesktop.ini
2010-04-18 22:58:59 —-D—- C:WINDOWS.1Prefetch
2010-04-18 22:58:57 —-A—- C:WINDOWS.1SchedLgU.Txt
2010-04-18 22:55:34 —-D—- C:WINDOWS.1system32xircom
2010-04-18 22:55:34 —-D—- C:Program Filesxerox
2010-04-18 22:55:34 —-D—- C:Program Filesmicrosoft frontpage
2010-04-18 22:55:19 —-A—- C:WINDOWS.1system32hidcon.exe
2010-04-18 22:55:19 —-A—- C:WINDOWS.1Finish.exe
2010-04-18 22:55:17 —-A—- C:WINDOWS.1system32OEMINFO.INI
2010-04-18 22:54:55 —-SD—- C:WINDOWS.1system32Microsoft
2010-04-18 22:54:55 —-A—- C:WINDOWS.1system32javaws.exe
2010-04-18 22:54:55 —-A—- C:WINDOWS.1system32javaw.exe
2010-04-18 22:54:55 —-A—- C:WINDOWS.1system32java.exe
2010-04-18 22:54:32 —-D—- C:Program FilesJava
2010-04-18 22:54:31 —-D—- C:Program FilesCommon FilesJava
2010-04-18 22:53:17 —-D—- C:WINDOWS.1system32URTTemp
2010-04-18 22:52:52 —-A—- C:WINDOWS.1system32vfp9t.dll
2010-04-18 22:52:52 —-A—- C:WINDOWS.1system32vfp9rrus.dll
2010-04-18 22:52:52 —-A—- C:WINDOWS.1system32VFP9RENU.DLL
2010-04-18 22:52:52 —-A—- C:WINDOWS.1system32vfp9r.dll
2010-04-18 22:52:52 —-A—- C:WINDOWS.1system32VFP9ENU.DLL
2010-04-18 22:52:52 —-A—- C:WINDOWS.1system32vfp8t.dll
2010-04-18 22:52:52 —-A—- C:WINDOWS.1system32vfp8rrus.dll
2010-04-18 22:52:52 —-A—- C:WINDOWS.1system32VFP8RENU.DLL
2010-04-18 22:52:51 —-A—- C:WINDOWS.1system32vfp8r.dll
2010-04-18 22:52:51 —-A—- C:WINDOWS.1system32vfp8enu.dll
2010-04-18 22:52:51 —-A—- C:WINDOWS.1system32vfp7t.dll
2010-04-18 22:52:51 —-A—- C:WINDOWS.1system32VFP7RENU.DLL
2010-04-18 22:52:51 —-A—- C:WINDOWS.1system32vfp7r.dll
2010-04-18 22:52:51 —-A—- C:WINDOWS.1system32VFP6T.DLL
2010-04-18 22:52:51 —-A—- C:WINDOWS.1system32VFP6RENU.DLL
2010-04-18 22:52:51 —-A—- C:WINDOWS.1system32VFP6R.DLL
2010-04-18 22:52:36 —-RSD—- C:WINDOWS.1assembly
2010-04-18 22:52:33 —-D—- C:WINDOWS.1Microsoft.NET
2010-04-18 22:52:22 —-D—- C:WINDOWS.1system32Cplicons
2010-04-18 22:52:22 —-A—- C:WINDOWS.1system32wul_lng.ini
2010-04-18 22:52:22 —-A—- C:WINDOWS.1system32wul.exe
2010-04-18 22:52:22 —-A—- C:WINDOWS.1system32TweakUI.exe
2010-04-18 22:52:22 —-A—- C:WINDOWS.1system32pserv2.exe
2010-04-18 22:52:22 —-A—- C:WINDOWS.1system32pkey_lng.ini
2010-04-18 22:52:22 —-A—- C:WINDOWS.1system32PKey.exe
2010-04-18 22:52:22 —-A—- C:WINDOWS.1system32MS_Auto.exe
2010-04-18 22:52:22 —-A—- C:WINDOWS.1system32Hoster.exe
2010-04-18 22:52:22 —-A—- C:WINDOWS.1system32bootsafe.exe
2010-04-18 22:52:13 —-HDC—- C:WINDOWS.1$NtUninstallKB941569$
2010-04-18 22:52:05 —-HDC—- C:WINDOWS.1$NtUninstallKB929399$
2010-04-18 22:51:57 —-N—- C:WINDOWS.1system32spmsg.dll
2010-04-18 22:51:56 —-HDC—- C:WINDOWS.1$NtUninstallMSCompPackV1$
2010-04-18 22:51:44 —-D—- C:Program FilesWindows Media Connect 2
2010-04-18 22:51:36 —-HDC—- C:WINDOWS.1$NtUninstallwmp11$
2010-04-18 22:51:20 —-HDC—- C:WINDOWS.1$NtUninstallWMFDist11$
2010-04-18 22:51:14 —-D—- C:WINDOWS.1system32LogFiles
2010-04-18 22:51:11 —-A—- C:WINDOWS.1system32spupdsvc.exe
2010-04-18 22:51:10 —-HDC—- C:WINDOWS.1$NtUninstallWudf01000$
2010-04-18 22:51:06 —-N—- C:WINDOWS.1system32WUDFx.dll
2010-04-18 22:51:06 —-N—- C:WINDOWS.1system32WudfSvc.dll
2010-04-18 22:51:06 —-N—- C:WINDOWS.1system32WudfPlatform.dll
2010-04-18 22:51:06 —-N—- C:WINDOWS.1system32WUDFCoinstaller.dll
2010-04-18 22:51:06 —-N—- C:WINDOWS.1system32wpdsp.dll
2010-04-18 22:51:06 —-N—- C:WINDOWS.1system32WPDShServiceObj.dll
2010-04-18 22:51:06 —-N—- C:WINDOWS.1system32wpd_ci.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32WpdShext.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32wpdmtpus.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32wpdmtp.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32wpdconns.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32WMVXENCD.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32WMVSENCD.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32WMVSDECD.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32WMVENCOD.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32WMVDECOD.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32WMVADVE.DLL
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32WMVADVD.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32wmpsrcwp.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32wmpps.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32wmpmde.dll
2010-04-18 22:51:02 —-N—- C:WINDOWS.1system32wmpencen.dll
2010-04-18 22:51:02 —-N—- C:WINDOWS.1system32wmpeffects.dll
2010-04-18 22:51:02 —-N—- C:WINDOWS.1system32wmdrmsdk.dll
2010-04-18 22:51:02 —-N—- C:WINDOWS.1system32wmdrmnet.dll
2010-04-18 22:51:02 —-N—- C:WINDOWS.1system32wmdrmdev.dll
2010-04-18 22:51:02 —-N—- C:WINDOWS.1system32wdfapi.dll
2010-04-18 22:51:02 —-N—- C:WINDOWS.1system32PortableDeviceWMDRM.dll
2010-04-18 22:51:02 —-N—- C:WINDOWS.1system32PortableDeviceWiaCompat.dll
2010-04-18 22:51:02 —-N—- C:WINDOWS.1system32PortableDeviceTypes.dll
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32WudfHost.exe
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32wpdshextautoplay.exe
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32wdfmgr.exe
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32uwdf.exe
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32PortableDeviceClassExtension.dll
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32PortableDeviceApi.dll
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32msdelta.dll
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32MPG4DECD.dll
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32MP4SDECD.dll
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32MP43DECD.dll
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32MFPLAT.dll
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32drmupgds.exe
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32audiodev.dll
2010-04-18 22:50:44 —-N—- C:WINDOWS.1system32wpdshextres.dll
2010-04-18 22:50:18 —-A—- C:WINDOWS.1control.ini
2010-04-18 22:50:18 —-A—- C:AUTOEXEC.BAT
2010-04-18 22:50:06 —-A—- C:WINDOWS.1OEWABLog.txt
2010-04-18 22:50:00 —-A—- C:WINDOWS.1system32mapi32.dll
2010-04-18 22:49:00 —-RAH—- C:WINDOWS.1system32logonui.exe.manifest
2010-04-18 22:48:54 —-RAH—- C:WINDOWS.1system32cdplayer.exe.manifest
2010-04-18 22:48:47 —-HD—- C:Program FilesWindowsUpdate
2010-04-18 22:48:42 —-D—- C:Program FilesOnline Services
2010-04-18 22:48:23 —-D—- C:WINDOWS.1system32DirectX
2010-04-18 22:48:14 —-A—- C:WINDOWS.1system32atrace.dll
2010-04-18 22:48:13 —-A—- C:WINDOWS.1system32desktop.ini
2010-04-18 22:48:13 —-A—- C:WINDOWS.1desktop.ini
2010-04-18 22:47:59 —-A—- C:WINDOWS.1system32nmevtmsg.dll
2010-04-18 22:47:58 —-A—- C:WINDOWS.1system32acctres.dll
2010-04-18 22:47:57 —-D—- C:Program FilesCommon FilesServices
2010-04-18 22:47:54 —-SD—- C:WINDOWS.1Tasks
2010-04-18 22:47:54 —-A—- C:WINDOWS.1system32icfgnt5.dll
2010-04-18 22:47:53 —-D—- C:Program FilesCommon FilesMSSoap
2010-04-18 22:47:49 —-D—- C:WINDOWS.1srchasst
2010-04-18 22:47:48 —-D—- C:WINDOWS.1system32Macromed
2010-04-18 22:47:44 —-A—- C:WINDOWS.1system32wuweb.dll
2010-04-18 22:47:44 —-A—- C:WINDOWS.1system32wups.dll
2010-04-18 22:47:44 —-A—- C:WINDOWS.1system32wucltui.dll
2010-04-18 22:47:44 —-A—- C:WINDOWS.1system32wuauserv.dll
2010-04-18 22:47:44 —-A—- C:WINDOWS.1system32wuaueng1.dll
2010-04-18 22:47:44 —-A—- C:WINDOWS.1system32wuaueng.dll
2010-04-18 22:47:43 —-A—- C:WINDOWS.1system32wuauclt1.exe
2010-04-18 22:47:43 —-A—- C:WINDOWS.1system32wuauclt.exe
2010-04-18 22:47:43 —-A—- C:WINDOWS.1system32wuapi.dll
2010-04-18 22:47:43 —-A—- C:WINDOWS.1system32bitsprx4.dll
2010-04-18 22:47:43 —-A—- C:WINDOWS.1system32bitsprx3.dll
2010-04-18 22:47:43 —-A—- C:WINDOWS.1system32bitsprx2.dll
2010-04-18 22:47:42 —-A—- C:WINDOWS.1system32qmgrprxy.dll
2010-04-18 22:47:42 —-A—- C:WINDOWS.1system32qmgr.dll
2010-04-18 22:47:38 —-D—- C:Program FilesMovie Maker
2010-04-18 22:47:16 —-A—- C:WINDOWS.1system32safrslv.dll
2010-04-18 22:47:16 —-A—- C:WINDOWS.1system32safrdm.dll
2010-04-18 22:47:16 —-A—- C:WINDOWS.1system32safrcdlg.dll
2010-04-18 22:47:16 —-A—- C:WINDOWS.1system32racpldlg.dll
2010-04-18 22:47:12 —-A—- C:WINDOWS.1system32fltlib.dll
2010-04-18 22:47:11 —-D—- C:WINDOWS.1system32Restore
2010-04-18 22:47:11 —-A—- C:WINDOWS.1system32fltMc.exe
2010-04-18 22:47:10 —-A—- C:WINDOWS.1system32srsvc.dll
2010-04-18 22:47:10 —-A—- C:WINDOWS.1system32srrstr.dll
2010-04-18 22:47:10 —-A—- C:WINDOWS.1system32srclient.dll
2010-04-18 22:47:09 —-A—- C:WINDOWS.1system32nmmkcert.dll
2010-04-18 22:47:09 —-A—- C:WINDOWS.1system32mnmdd.dll
2010-04-18 22:47:09 —-A—- C:WINDOWS.1system32isrdbg32.dll
2010-04-18 22:47:09 —-A—- C:WINDOWS.1system32ils.dll
2010-04-18 22:47:08 —-A—- C:WINDOWS.1system32msconf.dll
2010-04-18 22:47:08 —-A—- C:WINDOWS.1system32mnmsrvc.exe
2010-04-18 22:47:05 —-D—- C:Program FilesNetMeeting
2010-04-18 22:47:05 —-A—- C:WINDOWS.1system32msoert2.dll
2010-04-18 22:47:05 —-A—- C:WINDOWS.1system32msoeacct.dll
2010-04-18 22:47:03 —-A—- C:WINDOWS.1system32inetres.dll
2010-04-18 22:47:02 —-A—- C:WINDOWS.1system32inetcomm.dll
2010-04-18 22:47:00 —-D—- C:Program FilesOutlook Express
2010-04-18 22:47:00 —-A—- C:WINDOWS.1system32schedsvc.dll
2010-04-18 22:47:00 —-A—- C:WINDOWS.1system32mstinit.exe
2010-04-18 22:47:00 —-A—- C:WINDOWS.1system32mstask.dll
2010-04-18 22:46:59 —-A—- C:WINDOWS.1system32isign32.dll
2010-04-18 22:46:59 —-A—- C:WINDOWS.1system32inetcfg.dll
2010-04-18 22:46:59 —-A—- C:WINDOWS.1system32icwphbk.dll
2010-04-18 22:46:59 —-A—- C:WINDOWS.1system32icwdial.dll
2010-04-18 22:46:52 —-D—- C:Program FilesCommon FilesSystem
2010-04-18 22:46:02 —-D—- C:Program FilesComPlus Applications
2010-04-18 22:46:00 —-A—- C:WINDOWS.1vbaddin.ini
2010-04-18 22:46:00 —-A—- C:WINDOWS.1vb.ini
2010-04-18 22:45:54 —-D—- C:WINDOWS.1Registration
2010-04-18 22:45:45 —-D—- C:Program FilesWindows Media Player
2010-04-18 22:45:34 —-RD—- C:WINDOWS.1Offline Web Pages
2010-04-18 22:45:34 —-A—- C:WINDOWS.1system32winfxdocobj.exe
2010-04-18 22:45:33 —-SD—- C:WINDOWS.1Downloaded Program Files
2010-04-18 22:45:32 —-D—- C:WINDOWS.1wbem
2010-04-18 22:45:32 —-A—- C:WINDOWS.1system32msfeedssync.exe
2010-04-18 22:45:32 —-A—- C:WINDOWS.1system32msfeedsbs.dll
2010-04-18 22:45:30 —-A—- C:WINDOWS.1system32ieframe.dll.mui
2010-04-18 22:45:28 —-D—- C:Program FilesInternet Explorer
2010-04-18 22:45:28 —-A—- C:WINDOWS.1system32advpack.dll.mui
2010-04-18 22:45:26 —-D—- C:WINDOWS.1system32PreInstall
2010-04-18 22:45:25 —-D—- C:WINDOWS.1SoftwareDistribution
2010-04-18 22:45:25 —-A—- C:WINDOWS.1system32muweb.dll
2010-04-18 22:45:24 —-A—- C:WINDOWS.1system32write.exe
2010-04-18 22:45:24 —-A—- C:WINDOWS.1system32gpprefcl.dll
2010-04-18 22:45:17 —-A—- C:WINDOWS.1system32sndvol32.exe
2010-04-18 22:45:17 —-A—- C:WINDOWS.1system32hticons.dll
2010-04-18 22:45:16 —-A—- C:WINDOWS.1system32avwav.dll
2010-04-18 22:45:16 —-A—- C:WINDOWS.1system32avtapi.dll
2010-04-18 22:45:16 —-A—- C:WINDOWS.1system32avmeter.dll
2010-04-18 22:45:15 —-A—- C:WINDOWS.1system32winchat.exe
2010-04-18 22:45:09 —-A—- C:WINDOWS.1system32getuname.dll
2010-04-18 22:45:08 —-A—- C:WINDOWS.1system32charmap.exe
2010-04-18 22:45:08 —-A—- C:WINDOWS.1system32calc.exe
2010-04-18 22:45:07 —-A—- C:WINDOWS.1system32winmine.exe
2010-04-18 22:45:07 —-A—- C:WINDOWS.1system32sol.exe
2010-04-18 22:45:07 —-A—- C:WINDOWS.1system32mshearts.exe
2010-04-18 22:45:06 —-A—- C:WINDOWS.1system32usrlogon.cmd
2010-04-18 22:45:06 —-A—- C:WINDOWS.1system32tsshutdn.exe
2010-04-18 22:45:06 —-A—- C:WINDOWS.1system32tskill.exe
2010-04-18 22:45:06 —-A—- C:WINDOWS.1system32reset.exe
2010-04-18 22:45:06 —-A—- C:WINDOWS.1system32freecell.exe
2010-04-18 22:45:05 —-A—- C:WINDOWS.1system32tslabels.ini
2010-04-18 22:45:05 —-A—- C:WINDOWS.1system32tsdiscon.exe
2010-04-18 22:45:05 —-A—- C:WINDOWS.1system32tscon.exe
2010-04-18 22:45:05 —-A—- C:WINDOWS.1system32shadow.exe
2010-04-18 22:45:05 —-A—- C:WINDOWS.1system32rwinsta.exe
2010-04-18 22:45:05 —-A—- C:WINDOWS.1system32regini.exe
2010-04-18 22:45:05 —-A—- C:WINDOWS.1system32rdpcfgex.dll
2010-04-18 22:45:05 —-A—- C:WINDOWS.1system32qwinsta.exe
2010-04-18 22:45:05 —-A—- C:WINDOWS.1system32qappsrv.exe
2010-04-18 22:45:04 —-A—- C:WINDOWS.1system32msg.exe
2010-04-18 22:45:04 —-A—- C:WINDOWS.1system32msdtcprf.ini
2010-04-18 22:45:04 —-A—- C:WINDOWS.1system32logoff.exe
2010-04-18 22:45:04 —-A—- C:WINDOWS.1system32cdmodem.dll
2010-04-18 22:44:57 —-A—- C:WINDOWS.1system32wmimgmt.msc
2010-04-18 22:44:56 —-A—- C:WINDOWS.1system32sndrec32.exe
2010-04-18 22:44:56 —-A—- C:WINDOWS.1system32mplay32.exe
2010-04-18 22:44:56 —-A—- C:WINDOWS.1system32accwiz.exe
2010-04-18 22:44:55 —-D—- C:Program FilesWindows NT
2010-04-18 22:44:55 —-A—- C:WINDOWS.1system32hypertrm.dll
2010-04-18 22:44:54 —-A—- C:WINDOWS.1system32mspaint.exe
2010-04-18 22:44:54 —-A—- C:WINDOWS.1system32clipbrd.exe
2010-04-18 22:44:53 —-A—- C:WINDOWS.1system32spider.exe
2010-04-18 22:44:52 —-A—- C:WINDOWS.1system32tsgqec.dll
2010-04-18 22:44:52 —-A—- C:WINDOWS.1system32tscfgwmi.dll
2010-04-18 22:44:52 —-A—- C:WINDOWS.1system32rhttpaa.dll
2010-04-18 22:44:52 —-A—- C:WINDOWS.1system32aaclient.dll
2010-04-18 22:44:51 —-A—- C:WINDOWS.1system32remotepg.dll
2010-04-18 22:44:51 —-A—- C:WINDOWS.1system32mstscax.dll
2010-04-18 22:44:51 —-A—- C:WINDOWS.1system32mstsc.exe
2010-04-18 22:44:50 —-A—- C:WINDOWS.1system32termsrv.dll
2010-04-18 22:44:50 —-A—- C:WINDOWS.1system32sessmgr.exe
2010-04-18 22:44:50 —-A—- C:WINDOWS.1system32rdshost.exe
2010-04-18 22:44:50 —-A—- C:WINDOWS.1system32rdsaddin.exe
2010-04-18 22:44:50 —-A—- C:WINDOWS.1system32rdpwsx.dll
2010-04-18 22:44:50 —-A—- C:WINDOWS.1system32rdpsnd.dll
2010-04-18 22:44:50 —-A—- C:WINDOWS.1system32rdpclip.exe
2010-04-18 22:44:50 —-A—- C:WINDOWS.1system32rdchost.dll
2010-04-18 22:44:49 —-D—- C:WINDOWS.1system32MsDtc
2010-04-18 22:44:49 —-A—- C:WINDOWS.1system32qprocess.exe
2010-04-18 22:44:49 —-A—- C:WINDOWS.1system32mtxoci.dll
2010-04-18 22:44:49 —-A—- C:WINDOWS.1system32msdtcuiu.dll
2010-04-18 22:44:49 —-A—- C:WINDOWS.1system32icaapi.dll
2010-04-18 22:44:49 —-A—- C:WINDOWS.1system32cfgbkend.dll
2010-04-18 22:44:48 —-A—- C:WINDOWS.1system32xolehlp.dll
2010-04-18 22:44:48 —-A—- C:WINDOWS.1system32msdtctm.dll
2010-04-18 22:44:48 —-A—- C:WINDOWS.1system32msdtcprx.dll
2010-04-18 22:44:48 —-A—- C:WINDOWS.1system32msdtclog.dll
2010-04-18 22:44:47 —-A—- C:WINDOWS.1system32msdtc.exe
2010-04-18 22:44:47 —-A—- C:WINDOWS.1system32dcomcnfg.exe
2010-04-18 22:44:46 —-D—- C:WINDOWS.1system32Com
2010-04-18 22:44:46 —-A—- C:WINDOWS.1system32stclient.dll
2010-04-18 22:44:46 —-A—- C:WINDOWS.1system32mtxlegih.dll
2010-04-18 22:44:46 —-A—- C:WINDOWS.1system32mtxex.dll
2010-04-18 22:44:46 —-A—- C:WINDOWS.1system32mtxdm.dll
2010-04-18 22:44:46 —-A—- C:WINDOWS.1system32comrepl.dll
2010-04-18 22:44:46 —-A—- C:WINDOWS.1system32comaddin.dll
2010-04-18 22:44:46 —-A—- C:WINDOWS.1system32colbact.dll
2010-04-18 22:44:46 —-A—- C:WINDOWS.1system32catsrvps.dll
2010-04-18 22:44:45 —-A—- C:WINDOWS.1system32comsvcs.dll
2010-04-18 22:44:45 —-A—- C:WINDOWS.1system32clbcatex.dll
2010-04-18 22:44:45 —-A—- C:WINDOWS.1system32catsrvut.dll
2010-04-18 22:44:45 —-A—- C:WINDOWS.1system32catsrv.dll
2010-04-18 22:44:44 —-A—- C:WINDOWS.1system32comuid.dll
2010-04-18 22:44:44 —-A—- C:WINDOWS.1system32comsnap.dll
2010-04-18 22:44:44 —-A—- C:WINDOWS.1system32clbcatq.dll
2010-04-18 22:44:37 —-A—- C:WINDOWS.1system32servdeps.dll
2010-04-18 22:44:37 —-A—- C:WINDOWS.1system32mmfutil.dll
2010-04-18 22:44:37 —-A—- C:WINDOWS.1system32licwmi.dll
2010-04-18 22:44:37 —-A—- C:WINDOWS.1system32cmprops.dll

======List of files/folders modified in the last 1 months======

2010-04-28 21:48:13 —-A—- C:WINDOWS.1win.ini
2010-04-19 02:36:48 —-A—- C:WINDOWS.1system.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; ??C:Program FilesAviraAntiVir Desktopavgio.sys []
R1 avipbb;avipbb; C:WINDOWS.1system32DRIVERSavipbb.sys [2009-03-30 96104]
R1 CProCtrl;КриптоПро CSP драйвер; C:WINDOWS.1system32DRIVERSCProCtrl.sys [2009-04-23 54536]
R1 intelppm;Драйвер Intel процессора; C:WINDOWS.1system32DRIVERSintelppm.sys [2008-04-15 40704]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; ??C:Program FilesUltraISOdriversISODrive.sys []
R1 ssmdrv;ssmdrv; C:WINDOWS.1system32DRIVERSssmdrv.sys [2009-05-11 28520]
R2 avgntflt;avgntflt; C:WINDOWS.1system32DRIVERSavgntflt.sys [2009-11-25 56816]
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWS.1system32DRIVERSrspndr.sys [2008-06-05 62336]
R3 AR5211;Atheros Wireless Network Adapter Service; C:WINDOWS.1system32DRIVERSar5211.sys [2007-12-13 547904]
R3 ati2mtag;ati2mtag; C:WINDOWS.1system32DRIVERSati2mtag.sys [2007-03-06 1972736]
R3 CmBatt;Драйвер батареи с ACPI-управлением (Майкрософт); C:WINDOWS.1system32DRIVERSCmBatt.sys [2008-04-14 13952]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWS.1system32DRIVERSHDAudBus.sys [2008-04-15 144384]
R3 hidusb;Драйвер класса HID Microsoft; C:WINDOWS.1system32DRIVERShidusb.sys [2008-04-15 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWS.1system32driversRtkHDAud.sys [2006-11-15 4225920]
R3 kbfiltr;Keyboard Filter; C:WINDOWS.1system32DRIVERSkbfiltr.sys [2007-01-24 5632]
R3 MODEMCSA;Устройство фильтрации потока Unimodem; C:WINDOWS.1system32driversMODEMCSA.sys [2001-08-17 16128]
R3 mouhid;Драйвер мыши HID; C:WINDOWS.1system32DRIVERSmouhid.sys [2008-06-25 12160]
R3 MTsensor;ATK0100 ACPI UTILITY; C:WINDOWS.1system32DRIVERSATKACPI.sys [2006-12-17 7680]
R3 RTIFDH;RTIFDH; C:WINDOWS.1system32DRIVERSrtIFDH.sys [2009-07-01 13312]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:WINDOWS.1system32DRIVERSRtnicxp.sys [2007-11-21 104320]
R3 RTSTOR;USB Mass Stroage Device; C:WINDOWS.1system32driversRTSTOR.SYS [2007-09-18 44032]
R3 smserial;smserial; C:WINDOWS.1system32DRIVERSsmserial.sys [2006-11-22 982272]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWS.1system32DRIVERSusbehci.sys [2008-06-25 30336]
R3 usbhub;USB2 концентратор; C:WINDOWS.1system32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWS.1system32DRIVERSusbohci.sys [2008-06-25 17152]
S3 CCDECODE;Closed Caption декодер; C:WINDOWS.1system32DRIVERSCCDECODE.sys [2008-04-14 17024]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWS.1system32driversMSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWS.1system32DRIVERSNABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWS.1system32DRIVERSNdisIP.sys [2008-04-14 10880]
S3 SLIP;BDA Slip De-Framer; C:WINDOWS.1system32DRIVERSSLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:WINDOWS.1system32DRIVERSStreamIP.sys [2008-04-14 15232]
S3 usbstor;Драйвер запоминающих устройств для USB; C:WINDOWS.1system32DRIVERSUSBSTOR.SYS [2008-04-15 26368]
S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWS.1system32DRIVERSWSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWS.1system32DRIVERSWudfPf.sys [2008-03-21 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWS.1system32DRIVERSwudfrd.sys [2008-03-21 82944]
S4 IntelIde;IntelIde; C:WINDOWS.1system32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira AntiVir Планировщик; C:Program FilesAviraAntiVir Desktopsched.exe [2009-05-13 108289]
R2 AntiVirService;Avira AntiVir Guard; C:Program FilesAviraAntiVir Desktopavguard.exe [2009-07-21 185089]
R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWS.1system32Ati2evxx.exe [2007-03-06 446464]
R2 cpcsp1;КриптоПро CSP KC1; C:WINDOWS.1system32svchost.exe [2008-04-15 14336]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-20 322120]
R2 TTFixerService;NST ToolTipFixer; C:Program FilesNeoSmart TechnologiesToolTipFixerToolTipFixer.exe [2007-06-27 10240]
S3 aspnet_state;ASP.NET State Service; C:WINDOWS.1Microsoft.NETFrameworkv2.0.50727aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:WINDOWS.1Microsoft.NETFrameworkv2.0.50727mscorsvw.exe [2007-10-24 70144]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe [2010-04-19 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:WINDOWS.1Microsoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2007-10-09 36864]
S3 idsvc;Windows CardSpace; c:WINDOWS.1Microsoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2007-10-11 864256]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2008-03-21 914944]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWS.1system32svchost.exe [2008-04-15 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:WINDOWS.1Microsoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2007-10-11 122880]

EOF
28 апреля, 2010 в 7:09 пп #27321
Admin
Keymaster
- Темы:40
- Сообщений:5676
Здравствуйте, добро пожаловать на Spyware-ru форум.

Запустите HijackThis, для этого кликните Пуск, Выполнить, введите
```
C:Program Filestrend microАдминистратор.exe
```
и нажмите Enter.
Откроется главное меню программы HijackThis.
Кликните по кнопке Do a system scan only.
Далее отметьте галочкой (слева) следующие строки, если они присутствуют:
```
F2 - REG:system.ini: Shell=Explorer.exe rundll32.exe thxr.wgo nwfdtx

O4 - HKCU..PoliciesExplorerRun: [Dr.Watson] C:WINDOWS.1system32drwat32.exe
```
Закройте все запущенные программы (включая InternetExplorer) и окна Windows.
Кликните по кнопке Fix checked и подтвердите свои действия выбрав YES.
Перезагрузите компьютер.

Жду от вас свежий RSIT лог.
11 мая, 2010 в 5:21 дп #27322
natashkins
Participant
- Темы:1
- Сообщений:2
Добрый день! Спасибо за ответ и помощь! Вирус повторно никак себя не проявлял до вчерашнего дня.. вчера заметила странность — сайты одноклассники и в контакте вроде как заблокированы и выводится сообщение:
«Уважаемый пользатель! Ваш аккаунт был заблокирован за рассылку спам сообщений по Вашему контакт листу. Для разблокировки Вашего аккаунта Вам необходимо отправить SMS с текстом 1583260 на номер 5121. Напоминаем Вам, что заблокированные аккаунты удаляются в течении 2х недель с дня блокировки»
С другого компа доступ на сайты нормальный.. видимо вирус не удалился.. Наверно придется переставлять виндоуз уже раз пятый((((( все форматирую, проверяю вебом.. стоит авира в данный момент.. но бесполезно.. лезет откуда-то..

Вот новый лог:

Logfile of random’s system information tool 1.07 (written by random/random)
Run by Администратор at 2010-05-11 09:22:37
Microsoft Windows XP Professional Service Pack 3
System drive C: has 11 GB (17%) free of 64 GB
Total RAM: 2047 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:22:43, on 11.05.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20815)
Boot mode: Normal

Running processes:
C:WINDOWS.1System32smss.exe
C:WINDOWS.1system32winlogon.exe
C:WINDOWS.1system32services.exe
C:WINDOWS.1system32lsass.exe
C:WINDOWS.1system32Ati2evxx.exe
C:WINDOWS.1system32svchost.exe
C:WINDOWS.1System32svchost.exe
C:WINDOWS.1system32Ati2evxx.exe
C:WINDOWS.1system32spoolsv.exe
C:WINDOWS.1system32svchost.exe
C:Program FilesAviraAntiVir Desktopsched.exe
C:WINDOWS.1Explorer.EXE
C:WINDOWS.1ATK0100HControl.exe
C:Program FilesMotorolaSMSERIALsm56hlpr.exe
C:WINDOWS.1RTHDCPL.EXE
C:Program FilesAviraAntiVir Desktopavgnt.exe
C:Program FilesASUSATK MediaDMEDIA.EXE
C:WINDOWS.1system32ctfmon.exe
C:WINDOWS.1system32ASUSTPE.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.EXE
C:Program FilesATI TechnologiesATI.ACECore-Staticccc.exe
C:WINDOWS.1ATK0100ATKOSD.exe
C:Program FilesAviraAntiVir Desktopavguard.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:WINDOWS.1system32svchost.exe
C:Program FilesNeoSmart TechnologiesToolTipFixerToolTipFixer.exe
C:WINDOWS.1System32StkCSrv.exe
C:Program FilesOperaopera.exe
C:Program FilesAviraAntiVir Desktopupdate.exe
C:Program FilesInternet Exploreriexplore.exe
C:Documents and SettingsАдминистраторРабочий столRSIT.exe
C:Program Filestrend microАдминистратор.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:Documents and SettingsАдминистраторApplication DataMail.RuAgentMradllnewmrasearch.dll
F2 — REG:system.ini: UserInit=C:WINDOWS.1system32userinit.exe,\?globalrootsystemrootsystem32B2MY3Hz.exe,
O1 — Hosts: 69.10.53.230 odnoklassniki.ru
O1 — Hosts: 69.10.53.230 http://www.odnoklassniki.ru
O1 — Hosts: 69.10.53.230 vkontakte.ru
O1 — Hosts: 69.10.53.230 http://www.vkontakte.ru
O1 — Hosts: 69.10.53.230 vk.com
O1 — Hosts: 69.10.53.230 http://www.vk.com
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_06binssv.dll
O4 — HKLM..Run: [HControl] C:WINDOWS.1ATK0100HControl.exe
O4 — HKLM..Run: [SMSERIAL] C:Program FilesMotorolaSMSERIALsm56hlpr.exe
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [SkyTel] SkyTel.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [avgnt] «C:Program FilesAviraAntiVir Desktopavgnt.exe» /min
O4 — HKLM..Run: [ATKMEDIA] C:Program FilesASUSATK MediaDMEDIA.EXE
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWS.1system32ctfmon.exe
O4 — HKCU..Run: [ASUSTPE] C:WINDOWS.1system32ASUSTPE.exe
O4 — HKCU..Run: [StartCCC] C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWS.1system32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWS.1INFcustom.inf,OnceFirstLogonInstall,0 (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE7_011] regsvr32 /s /n /i:u shell32 (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE7_012] rundll32 advpack.dll,LaunchINFSectionEx IE7int.inf,AfterUserStart,,4,N (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWS.1system32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWS.1INFcustom.inf,OnceFirstLogonInstall,0 (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWS.1system32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWS.1INFcustom.inf,NewUserFirstLogonInstall,0 (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWS.1system32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWS.1INFcustom.inf,NewUserFirstLogonInstall,0 (User ‘Default user’)
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWS.1Network Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWS.1Network Diagnosticxpnetdiag.exe
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Documents and SettingsАдминистраторApplication DataMail.RuAgentmagent.exe (HKCU)
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Documents and SettingsАдминистраторApplication DataMail.RuAgentmagent.exe (HKCU)
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 — HKLMSystemCCSServicesTcpip..{8C3BE4CA-8A53-4185-B71F-AE61F4F4EBE1}: NameServer = 195.34.224.1,195.34.224.2
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 — Winlogon Notify: cpcsp — C:Program FilesCrypto ProCSPcpcspi.dll
O22 — SharedTaskScheduler: Предзагрузчик Browseui — {438755C2-A8BA-11D1-B96B-00A0C90312E1} — C:WINDOWS.1system32browseui.dll
O22 — SharedTaskScheduler: Демон кэша категорий компонентов — {8C7461EF-2B13-11d2-BE35-3078302C2030} — C:WINDOWS.1system32browseui.dll
O23 — Service: Avira AntiVir Планировщик (AntiVirSchedulerService) — Avira GmbH — C:Program FilesAviraAntiVir Desktopsched.exe
O23 — Service: Avira AntiVir Guard (AntiVirService) — Avira GmbH — C:Program FilesAviraAntiVir Desktopavguard.exe
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — C:WINDOWS.1system32Ati2evxx.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWS.1system32services.exe
O23 — Service: FLEXnet Licensing Service — Macrovision Europe Ltd. — C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWS.1system32imapi.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWS.1system32mnmsrvc.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWS.1system32services.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWS.1System32SCardSvr.exe
O23 — Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) — Syntek America Inc. — C:WINDOWS.1System32StkCSrv.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWS.1system32smlogsvc.exe
O23 — Service: NST ToolTipFixer (TTFixerService) — NeoSmart Technologies — C:Program FilesNeoSmart TechnologiesToolTipFixerToolTipFixer.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWS.1System32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWS.1system32wbemwmiapsrv.exe

—
End of file — 8916 bytes

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_06binssv.dll [2008-03-25 509328]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«HControl»=C:WINDOWS.1ATK0100HControl.exe [2006-10-14 110592]
«SMSERIAL»=C:Program FilesMotorolaSMSERIALsm56hlpr.exe [2006-11-22 630784]
«RTHDCPL»=C:WINDOWS.1RTHDCPL.EXE [2006-11-14 16270848]
«SkyTel»=C:WINDOWS.1SkyTel.EXE [2006-05-16 2879488]
«Alcmtr»=C:WINDOWS.1ALCMTR.EXE [2005-05-03 69632]
«avgnt»=C:Program FilesAviraAntiVir Desktopavgnt.exe [2009-03-02 209153]
«ATKMEDIA»=C:Program FilesASUSATK MediaDMEDIA.EXE [2006-06-08 53248]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWS.1system32ctfmon.exe [2008-06-25 17408]
«ASUSTPE»=C:WINDOWS.1system32ASUSTPE.exe [2006-10-14 69632]
«»= []
«StartCCC»=C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2006-11-10 90112]
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []
«»= []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWS.1system32Ati2evxx.dll [2007-03-06 110592]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifycpcsp]
C:Program FilesCrypto ProCSPcpcspi.dll [2009-07-29 717824]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWS.1system32WPDShServiceObj.dll [2008-03-21 133632]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«SynchronousMachineGroupPolicy»=0
«SynchronousUserGroupPolicy»=0

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«NoThumbnailCache»=1
«NoSMConfigurePrograms»=1
«NoSMHelp»=1

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:WINDOWS.1system32svchost.exe»=»C:WINDOWS.1system32svchost.exe:*:Enabled:Dr.Watson»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

======List of files/folders created in the last 1 months======

2010-05-07 18:37:03 —-A—- C:WINDOWS.1system32B2MY3Hz.exe
2010-04-28 23:08:46 —-D—- C:Program FilesASUS
2010-04-28 22:14:45 —-D—- C:Program Filestrend micro
2010-04-28 22:14:44 —-D—- C:rsit
2010-04-28 22:05:26 —-D—- C:Documents and SettingsАдминистраторApplication DataAuslogics
2010-04-28 21:55:12 —-SHD—- C:WINDOWS.1CSC
2010-04-28 21:55:05 —-A—- C:WINDOWS.1ntbtlog.txt
2010-04-28 21:46:12 —-A—- C:WINDOWS.1VideoView.exe
2010-04-28 21:46:12 —-A—- C:WINDOWS.1system32StkSSrv.dll
2010-04-28 21:46:12 —-A—- C:WINDOWS.1system32StkCWIA.dll
2010-04-28 21:46:12 —-A—- C:WINDOWS.1system32StkCSrv.exe
2010-04-28 21:46:12 —-A—- C:WINDOWS.1StkC112X.exe
2010-04-28 21:37:49 —-D—- C:Documents and SettingsАдминистраторApplication DataACD Systems
2010-04-25 17:06:38 —-D—- C:Program FilesCommon FilesSkype
2010-04-25 17:06:36 —-RD—- C:Program FilesSkype
2010-04-25 16:23:57 —-D—- C:WINDOWS.1Sun
2010-04-25 16:23:57 —-D—- C:Documents and SettingsАдминистраторApplication DataSun
2010-04-24 08:25:30 —-D—- C:Documents and SettingsАдминистраторApplication DataCrystal Player
2010-04-24 08:25:30 —-A—- C:audiodec.txt
2010-04-23 20:51:18 —-A—- C:WINDOWS.1system32fjhdyfhsn.bat
2010-04-19 14:29:16 —-D—- C:Documents and SettingsАдминистраторApplication DataGRETECH
2010-04-19 12:29:59 —-D—- C:Documents and SettingsАдминистраторApplication DatauTorrent
2010-04-19 11:32:59 —-D—- C:Program FilesFull Tilt Poker
2010-04-19 11:10:48 —-D—- C:Documents and SettingsАдминистраторApplication DataPRMT
2010-04-19 11:02:37 —-D—- C:Documents and SettingsAll UsersApplication DataFLEXnet
2010-04-19 10:05:21 —-D—- C:с диска
2010-04-19 09:37:02 —-D—- C:Program FilesThe Bat!
2010-04-19 09:06:31 —-RD—- C:НЛМК
2010-04-19 09:02:25 —-D—- C:Program FilesGamblerJ
2010-04-19 08:37:17 —-D—- C:Documents and SettingsАдминистраторApplication DataCrypto Pro
2010-04-19 08:24:45 —-RD—- C:Program FilesAlfaDirect
2010-04-19 08:22:32 —-D—- C:WINDOWS.1system32GroupPolicy
2010-04-19 08:22:32 —-D—- C:Program FilesCommon FilesCrypto Pro
2010-04-19 08:22:31 —-D—- C:Program FilesCrypto Pro
2010-04-19 08:22:12 —-DC—- C:WINDOWS.1system32DRVSTORE
2010-04-19 08:21:34 —-D—- C:WINDOWS.1system32Aktiv Co
2010-04-19 08:19:21 —-D—- C:Documents and SettingsАдминистраторApplication DataOpera
2010-04-19 08:18:36 —-D—- C:Program FilesOpera
2010-04-19 08:17:04 —-D—- C:Documents and SettingsАдминистраторApplication DataATI
2010-04-19 02:42:44 —-A—- C:WINDOWS.1system32h323log.txt
2010-04-19 02:41:51 —-D—- C:WINDOWS.1system32RTCOM
2010-04-19 02:41:49 —-A—- C:WINDOWS.1system32ksuser.dll
2010-04-19 02:39:53 —-A—- C:WINDOWS.1system32usbui.dll
2010-04-19 02:39:45 —-D—- C:WINDOWS.1ATK0100
2010-04-19 02:36:56 —-A—- C:WINDOWS.1system32PerfStringBackup.INI
2010-04-19 02:36:55 —-SHD—- C:WINDOWS.1Installer
2010-04-19 02:36:54 —-D—- C:Program FilesCommon FilesODBC
2010-04-19 02:36:54 —-A—- C:WINDOWS.1ODBCINST.INI
2010-04-19 02:36:50 —-RD—- C:Program Files
2010-04-19 02:36:50 —-D—- C:Program FilesCommon FilesSpeechEngines
2010-04-19 02:36:50 —-D—- C:Program FilesCommon FilesMicrosoft Shared
2010-04-19 02:36:50 —-D—- C:Program FilesCommon Files
2010-04-19 02:36:46 —-RA—- C:WINDOWS.1system32kbdtuq.dll
2010-04-19 02:36:46 —-RA—- C:WINDOWS.1system32kbdtuf.dll
2010-04-19 02:36:46 —-RA—- C:WINDOWS.1system32kbdazel.dll
2010-04-19 02:36:43 —-RA—- C:WINDOWS.1system32kbdhept.dll
2010-04-19 02:36:43 —-RA—- C:WINDOWS.1system32kbdhela3.dll
2010-04-19 02:36:43 —-RA—- C:WINDOWS.1system32kbdhela2.dll
2010-04-19 02:36:43 —-RA—- C:WINDOWS.1system32kbdhe319.dll
2010-04-19 02:36:43 —-RA—- C:WINDOWS.1system32kbdhe220.dll
2010-04-19 02:36:43 —-RA—- C:WINDOWS.1system32kbdhe.dll
2010-04-19 02:36:43 —-RA—- C:WINDOWS.1system32kbdgkl.dll
2010-04-19 02:36:41 —-RA—- C:WINDOWS.1system32kbdlv1.dll
2010-04-19 02:36:41 —-RA—- C:WINDOWS.1system32kbdlv.dll
2010-04-19 02:36:41 —-RA—- C:WINDOWS.1system32kbdlt1.dll
2010-04-19 02:36:41 —-RA—- C:WINDOWS.1system32kbdlt.dll
2010-04-19 02:36:41 —-RA—- C:WINDOWS.1system32kbdest.dll
2010-04-19 02:36:40 —-RA—- C:WINDOWS.1system32kbdsl1.dll
2010-04-19 02:36:40 —-RA—- C:WINDOWS.1system32kbdsl.dll
2010-04-19 02:36:40 —-RA—- C:WINDOWS.1system32kbdro.dll
2010-04-19 02:36:40 —-RA—- C:WINDOWS.1system32kbdpl.dll
2010-04-19 02:36:39 —-RA—- C:WINDOWS.1system32kbdycl.dll
2010-04-19 02:36:39 —-RA—- C:WINDOWS.1system32kbdpl1.dll
2010-04-19 02:36:39 —-RA—- C:WINDOWS.1system32kbdhu1.dll
2010-04-19 02:36:39 —-RA—- C:WINDOWS.1system32kbdhu.dll
2010-04-19 02:36:39 —-RA—- C:WINDOWS.1system32kbdcz2.dll
2010-04-19 02:36:39 —-RA—- C:WINDOWS.1system32kbdcz1.dll
2010-04-19 02:36:39 —-RA—- C:WINDOWS.1system32kbdcz.dll
2010-04-19 02:36:39 —-RA—- C:WINDOWS.1system32kbdcr.dll
2010-04-19 02:36:39 —-RA—- C:WINDOWS.1system32KBDAL.DLL
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbdycc.dll
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbduzb.dll
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbdur.dll
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbdtat.dll
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbdmon.dll
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbdkyr.dll
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbdkaz.dll
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbdbu.dll
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbdblr.dll
2010-04-19 02:36:35 —-A—- C:WINDOWS.1system32kbdaze.dll
2010-04-19 02:36:33 —-A—- C:WINDOWS.1system32spxcoins.dll
2010-04-19 02:36:33 —-A—- C:WINDOWS.1system32irclass.dll
2010-04-19 02:36:33 —-A—- C:WINDOWS.1system32EqnClass.Dll
2010-04-19 02:36:33 —-A—- C:WINDOWS.1system32dgsetup.dll
2010-04-19 02:36:33 —-A—- C:WINDOWS.1system32dgrpsetu.dll
2010-04-19 02:36:30 —-N—- C:WINDOWS.1system32CONFIG.TMP
2010-04-19 02:36:30 —-A—- C:WINDOWS.1TASKMAN.EXE
2010-04-19 02:36:29 —-A—- C:WINDOWS.1system32batt.dll
2010-04-19 02:36:29 —-A—- C:WINDOWS.1NOTEPAD.EXE
2010-04-19 02:36:28 —-A—- C:WINDOWS.1system32storprop.dll
2010-04-19 02:36:18 —-ASH—- C:Documents and SettingsAll UsersApplication Datadesktop.ini
2010-04-19 02:36:13 —-RA—- C:WINDOWS.1SET8.tmp
2010-04-19 02:36:10 —-RA—- C:WINDOWS.1SET4.tmp
2010-04-19 02:36:08 —-RA—- C:WINDOWS.1SET3.tmp
2010-04-19 02:36:03 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
2010-04-19 02:35:40 —-A—- C:WINDOWS.1setuplog.txt
2010-04-19 02:35:09 —-A—- C:WINDOWS.1SoundMan.exe
2010-04-19 02:35:09 —-A—- C:WINDOWS.1SkyTel.exe
2010-04-19 02:35:09 —-A—- C:WINDOWS.1RtlUpd.exe
2010-04-19 02:35:09 —-A—- C:WINDOWS.1RTLCPL.exe
2010-04-19 02:35:08 —-A—- C:WINDOWS.1RTHDCPL.exe
2010-04-19 02:35:08 —-A—- C:WINDOWS.1MicCal.exe
2010-04-19 02:35:08 —-A—- C:WINDOWS.1alcwzrd.exe
2010-04-19 02:35:08 —-A—- C:WINDOWS.1Alcmtr.exe
2010-04-19 02:31:08 —-A—- C:WINDOWS.1system32Oemdspif.dll
2010-04-19 02:31:07 —-A—- C:WINDOWS.1system32ativvaxx.dll
2010-04-19 02:31:07 —-A—- C:WINDOWS.1system32atitvo32.dll
2010-04-19 02:31:07 —-A—- C:WINDOWS.1system32atipdlxx.dll
2010-04-19 02:31:07 —-A—- C:WINDOWS.1system32atiok3x2.dll
2010-04-19 02:31:04 —-A—- C:WINDOWS.1system32atioglxx.dll
2010-04-19 02:31:03 —-A—- C:WINDOWS.1system32atioglx2.dll
2010-04-19 02:31:02 —-A—- C:WINDOWS.1system32atikvmag.dll
2010-04-19 02:31:02 —-A—- C:WINDOWS.1system32atiiiexx.dll
2010-04-19 02:31:01 —-A—- C:WINDOWS.1system32ATIDEMGX.dll
2010-04-19 02:31:01 —-A—- C:WINDOWS.1system32ATIDDC.DLL
2010-04-19 02:31:01 —-A—- C:WINDOWS.1system32ati3duag.dll
2010-04-19 02:31:01 —-A—- C:WINDOWS.1system32ati2evxx.dll
2010-04-19 02:31:01 —-A—- C:WINDOWS.1system32ati2edxx.dll
2010-04-19 02:31:01 —-A—- C:WINDOWS.1system32ati2dvag.dll
2010-04-19 02:30:54 —-A—- C:WINDOWS.1system32ati2cqag.dll
2010-04-19 02:30:54 —-A—- C:WINDOWS.1system32amdpcom32.dll
2010-04-19 02:30:51 —-A—- C:WINDOWS.1system32Ati2mdxx.exe
2010-04-19 02:30:51 —-A—- C:WINDOWS.1system32ati2evxx.exe
2010-04-19 02:29:36 —-D—- C:WINDOWS.1system32CatRoot2
2010-04-19 02:29:36 —-D—- C:WINDOWS.1system32CatRoot
2010-04-19 02:29:19 —-SHD—- C:System Volume Information
2010-04-19 02:29:19 —-D—- C:Documents and Settings
2010-04-19 02:24:12 —-RSHDC—- C:WINDOWS.1system32dllcache
2010-04-19 02:24:12 —-RSD—- C:WINDOWS.1Fonts
2010-04-19 02:24:12 —-HD—- C:WINDOWS.1inf
2010-04-19 02:24:12 —-D—- C:WINDOWS.1WinSxS
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Web
2010-04-19 02:24:12 —-D—- C:WINDOWS.1twain_32
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Temp
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32wins
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32wbem
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32usmt
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32spool
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32ShellExt
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32Setup
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32ru-ru
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32ru
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32ras
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32oobe
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32npp
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32mui
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32inetsrv
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32IME
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32icsxml
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32ias
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32export
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32drivers
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32dhcp
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32config
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system323com_dmi
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system323076
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system322052
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system321054
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system321049
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system321042
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system321041
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system321037
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system321033
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system321031
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system321028
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system321025
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system32
2010-04-19 02:24:12 —-D—- C:WINDOWS.1system
2010-04-19 02:24:12 —-D—- C:WINDOWS.1security
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Resources
2010-04-19 02:24:12 —-D—- C:WINDOWS.1repair
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Provisioning
2010-04-19 02:24:12 —-D—- C:WINDOWS.1PeerNet
2010-04-19 02:24:12 —-D—- C:WINDOWS.1pchealth
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Network Diagnostic
2010-04-19 02:24:12 —-D—- C:WINDOWS.1mui
2010-04-19 02:24:12 —-D—- C:WINDOWS.1msapps
2010-04-19 02:24:12 —-D—- C:WINDOWS.1msagent
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Media
2010-04-19 02:24:12 —-D—- C:WINDOWS.1L2Schemas
2010-04-19 02:24:12 —-D—- C:WINDOWS.1java
2010-04-19 02:24:12 —-D—- C:WINDOWS.1ime
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Help
2010-04-19 02:24:12 —-D—- C:WINDOWS.1ehome
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Driver Cache
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Debug
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Cursors
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Connection Wizard
2010-04-19 02:24:12 —-D—- C:WINDOWS.1Config
2010-04-19 02:24:12 —-D—- C:WINDOWS.1AppPatch
2010-04-19 02:24:12 —-D—- C:WINDOWS.1addins
2010-04-19 02:24:12 —-D—- C:WINDOWS.1
2010-04-19 02:15:07 —-D—- C:WINDOWS.0
2010-04-19 02:10:15 —-SH—- C:boot.ini
2010-04-19 02:06:16 —-D—- C:WINDOWS
2010-04-19 00:31:17 —-D—- C:Program FilesABBYY FineReader 8.0 Professional Edition
2010-04-19 00:28:02 —-D—- C:Program FilesFoxit Software
2010-04-19 00:27:43 —-A—- C:WINDOWS.1ODBC.INI
2010-04-19 00:27:33 —-A—- C:WINDOWS.1system32mdimon.dll
2010-04-19 00:25:59 —-D—- C:Program FilesMicrosoft Works
2010-04-19 00:25:54 —-D—- C:Program FilesMicrosoft Visual Studio
2010-04-19 00:25:45 —-D—- C:WINDOWS.1SHELLNEW
2010-04-19 00:25:42 —-D—- C:Program FilesMicrosoft.NET
2010-04-19 00:25:42 —-D—- C:Program FilesMicrosoft Office
2010-04-19 00:19:57 —-D—- C:WINDOWS.1Lhsp
2010-04-19 00:19:57 —-D—- C:Program FilesPRMT8
2010-04-19 00:19:57 —-D—- C:Documents and SettingsAll UsersApplication DataPRMT
2010-04-19 00:18:50 —-D—- C:Program FilesuTorrent
2010-04-19 00:18:39 —-D—- C:Program FilesCommon FilesDesigner
2010-04-19 00:18:31 —-A—- C:WINDOWS.1system32rmoc3260.dll
2010-04-19 00:18:31 —-A—- C:WINDOWS.1system32pndx5032.dll
2010-04-19 00:18:31 —-A—- C:WINDOWS.1system32pndx5016.dll
2010-04-19 00:18:31 —-A—- C:WINDOWS.1system32pncrt.dll
2010-04-19 00:18:29 —-A—- C:WINDOWS.1system32unrar.dll
2010-04-19 00:18:21 —-A—- C:WINDOWS.1system32yv12vfw.dll
2010-04-19 00:18:20 —-A—- C:WINDOWS.1system32xvidvfw.dll
2010-04-19 00:18:20 —-A—- C:WINDOWS.1system32xvidcore.dll
2010-04-19 00:18:20 —-A—- C:WINDOWS.1system32qt-dx331.dll
2010-04-19 00:18:20 —-A—- C:WINDOWS.1system32dpl100.dll
2010-04-19 00:18:19 —-A—- C:WINDOWS.1system32divx.dll
2010-04-19 00:18:17 —-A—- C:WINDOWS.1system32ff_vfw.dll.manifest
2010-04-19 00:18:17 —-A—- C:WINDOWS.1system32ff_vfw.dll
2010-04-19 00:18:12 —-D—- C:Program FilesK-Lite Codec Pack
2010-04-19 00:18:12 —-D—- C:Documents and SettingsАдминистраторApplication DataReal
2010-04-19 00:18:12 —-D—- C:Documents and SettingsAll UsersApplication DataReal
2010-04-19 00:17:27 —-D—- C:Program FilesCorel
2010-04-19 00:17:27 —-D—- C:Program FilesCommon FilesCorel
2010-04-19 00:15:48 —-D—- C:Documents and SettingsAll UsersApplication DataACD Systems
2010-04-19 00:15:45 —-D—- C:Program FilesCommon FilesACD Systems
2010-04-19 00:15:45 —-D—- C:Program FilesACD Systems
2010-04-19 00:13:55 —-D—- C:Program FilesAdobe
2010-04-19 00:13:37 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
2010-04-19 00:12:51 —-D—- C:Program Filesxxx
2010-04-19 00:08:12 —-D—- C:Documents and SettingsАдминистраторApplication DataskypePM
2010-04-19 00:07:16 —-D—- C:Program FilesCommon FilesMacrovision Shared
2010-04-19 00:07:06 —-D—- C:Documents and SettingsАдминистраторApplication DataSkype
2010-04-19 00:06:41 —-D—- C:Program FilesCommon FilesAdobe
2010-04-19 00:05:16 —-D—- C:Documents and SettingsAll UsersApplication DataSkype
2010-04-18 23:59:37 —-D—- C:Program FilesAvira
2010-04-18 23:59:37 —-D—- C:Documents and SettingsAll UsersApplication DataAvira
2010-04-18 23:58:15 —-A—- C:WINDOWS.1NeroDigital.ini
2010-04-18 23:57:43 —-D—- C:Program FilesUltraISO
2010-04-18 23:57:43 —-D—- C:Program FilesCommon FilesEZB Systems
2010-04-18 23:57:05 —-N—- C:WINDOWS.1system32TwnLib4.dll
2010-04-18 23:57:05 —-N—- C:WINDOWS.1system32ImagXRA7.dll
2010-04-18 23:57:05 —-N—- C:WINDOWS.1system32ImagXR7.dll
2010-04-18 23:57:05 —-N—- C:WINDOWS.1system32ImagXpr7.dll
2010-04-18 23:57:05 —-N—- C:WINDOWS.1system32ImagX7.dll
2010-04-18 23:57:05 —-D—- C:Program FilesCommon FilesAhead
2010-04-18 23:57:05 —-A—- C:WINDOWS.1system32TwnLib20.dll
2010-04-18 23:57:05 —-A—- C:WINDOWS.1system32NeroCheck.exe
2010-04-18 23:57:04 —-D—- C:Program FilesAhead
2010-04-18 23:56:39 —-D—- C:Program FilesCrystal Player
2010-04-18 23:56:29 —-D—- C:Program FilesGRETECH
2010-04-18 23:56:16 —-D—- C:Program FilesThe KMPlayer
2010-04-18 23:56:14 —-D—- C:Program FilesDVD X Studios
2010-04-18 23:56:01 —-D—- C:Program FilesLight Alloy
2010-04-18 23:55:57 —-D—- C:Program FilesAuslogics
2010-04-18 23:53:18 —-A—- C:WINDOWS.1system32ChCfg.exe
2010-04-18 23:52:49 —-D—- C:Program FilesRealtek
2010-04-18 23:52:47 —-A—- C:WINDOWS.1RtlExUpd.dll
2010-04-18 23:49:25 —-D—- C:Documents and SettingsАдминистраторApplication DataMra
2010-04-18 23:49:24 —-D—- C:Documents and SettingsАдминистраторApplication DataMail.Ru
2010-04-18 23:49:14 —-D—- C:Program FilesMail.Ru
2010-04-18 23:48:14 —-SHD—- C:RECYCLER
2010-04-18 23:39:20 —-D—- C:Documents and SettingsАдминистраторApplication DataMacromedia
2010-04-18 23:39:20 —-D—- C:Documents and SettingsАдминистраторApplication DataAdobe
2010-04-18 23:38:32 —-D—- C:Program FilesATI Technologies
2010-04-18 23:37:36 —-A—- C:WINDOWS.1system32ativcoxx.dll
2010-04-18 23:35:56 —-D—- C:Program FilesMotorola
2010-04-18 23:35:49 —-A—- C:WINDOWS.1system32sm56co6a.dll
2010-04-18 23:35:32 —-D—- C:WINDOWS.1system32ReinstallBackups
2010-04-18 23:34:49 —-A—- C:WINDOWS.1system32vfwwdm32.dll
2010-04-18 23:34:26 —-A—- C:WINDOWS.1StkUnist.exe
2010-04-18 23:33:57 —-A—- C:WINDOWS.1system32TPESetting.dll
2010-04-18 23:33:57 —-A—- C:WINDOWS.1system32SynCtrl.dll
2010-04-18 23:33:57 —-A—- C:WINDOWS.1system32SynCom.dll
2010-04-18 23:33:57 —-A—- C:WINDOWS.1system32ASUSTPE.exe
2010-04-18 23:32:41 —-D—- C:temp
2010-04-18 23:32:40 —-D—- C:Documents and SettingsАдминистраторApplication DataInstallShield
2010-04-18 23:32:29 —-D—- C:Documents and SettingsАдминистраторApplication DataWinRAR
2010-04-18 23:32:12 —-HD—- C:Program FilesInstallShield Installation Information
2010-04-18 23:32:11 —-D—- C:Program FilesCommon FilesInstallShield
2010-04-18 23:10:28 —-D—- C:WINDOWS.1system32Lang
2010-04-18 23:10:04 —-D—- C:Documents and SettingsАдминистраторApplication DataIdentities
2010-04-18 23:10:00 —-HD—- C:Program FilesUninstall Information
2010-04-18 23:09:10 —-RD—- C:WINDOWS.1OemDrv
2010-04-18 23:09:02 —-D—- C:Program FilesWinRAR
2010-04-18 23:08:58 —-D—- C:Program FilesAnVir Task Manager
2010-04-18 23:08:55 —-D—- C:Program FilesLavalys
2010-04-18 23:08:49 —-D—- C:Program FilesNeoSmart Technologies
2010-04-18 23:07:04 —-D—- C:Program FilesMSBuild
2010-04-18 23:07:01 —-D—- C:WINDOWS.1system32XPSViewer
2010-04-18 23:06:57 —-D—- C:WINDOWS.1system32en-us
2010-04-18 23:06:56 —-D—- C:Program FilesReference Assemblies
2010-04-18 23:06:39 —-N—- C:WINDOWS.1system32spmsg2.dll
2010-04-18 23:04:12 —-A—- C:WINDOWS.1WPI_Log.txt
2010-04-18 22:59:13 —-SD—- C:Documents and SettingsАдминистраторApplication DataMicrosoft
2010-04-18 22:59:13 —-ASH—- C:Documents and SettingsАдминистраторApplication Datadesktop.ini
2010-04-18 22:58:59 —-D—- C:WINDOWS.1Prefetch
2010-04-18 22:58:57 —-A—- C:WINDOWS.1SchedLgU.Txt
2010-04-18 22:55:34 —-D—- C:WINDOWS.1system32xircom
2010-04-18 22:55:34 —-D—- C:Program Filesxerox
2010-04-18 22:55:34 —-D—- C:Program Filesmicrosoft frontpage
2010-04-18 22:55:19 —-A—- C:WINDOWS.1system32hidcon.exe
2010-04-18 22:55:19 —-A—- C:WINDOWS.1Finish.exe
2010-04-18 22:55:17 —-A—- C:WINDOWS.1system32OEMINFO.INI
2010-04-18 22:54:55 —-SD—- C:WINDOWS.1system32Microsoft
2010-04-18 22:54:55 —-A—- C:WINDOWS.1system32javaws.exe
2010-04-18 22:54:55 —-A—- C:WINDOWS.1system32javaw.exe
2010-04-18 22:54:55 —-A—- C:WINDOWS.1system32java.exe
2010-04-18 22:54:32 —-D—- C:Program FilesJava
2010-04-18 22:54:31 —-D—- C:Program FilesCommon FilesJava
2010-04-18 22:53:17 —-D—- C:WINDOWS.1system32URTTemp
2010-04-18 22:52:52 —-A—- C:WINDOWS.1system32vfp9t.dll
2010-04-18 22:52:52 —-A—- C:WINDOWS.1system32vfp9rrus.dll
2010-04-18 22:52:52 —-A—- C:WINDOWS.1system32VFP9RENU.DLL
2010-04-18 22:52:52 —-A—- C:WINDOWS.1system32vfp9r.dll
2010-04-18 22:52:52 —-A—- C:WINDOWS.1system32VFP9ENU.DLL
2010-04-18 22:52:52 —-A—- C:WINDOWS.1system32vfp8t.dll
2010-04-18 22:52:52 —-A—- C:WINDOWS.1system32vfp8rrus.dll
2010-04-18 22:52:52 —-A—- C:WINDOWS.1system32VFP8RENU.DLL
2010-04-18 22:52:51 —-A—- C:WINDOWS.1system32vfp8r.dll
2010-04-18 22:52:51 —-A—- C:WINDOWS.1system32vfp8enu.dll
2010-04-18 22:52:51 —-A—- C:WINDOWS.1system32vfp7t.dll
2010-04-18 22:52:51 —-A—- C:WINDOWS.1system32VFP7RENU.DLL
2010-04-18 22:52:51 —-A—- C:WINDOWS.1system32vfp7r.dll
2010-04-18 22:52:51 —-A—- C:WINDOWS.1system32VFP6T.DLL
2010-04-18 22:52:51 —-A—- C:WINDOWS.1system32VFP6RENU.DLL
2010-04-18 22:52:51 —-A—- C:WINDOWS.1system32VFP6R.DLL
2010-04-18 22:52:36 —-RSD—- C:WINDOWS.1assembly
2010-04-18 22:52:33 —-D—- C:WINDOWS.1Microsoft.NET
2010-04-18 22:52:22 —-D—- C:WINDOWS.1system32Cplicons
2010-04-18 22:52:22 —-A—- C:WINDOWS.1system32wul_lng.ini
2010-04-18 22:52:22 —-A—- C:WINDOWS.1system32wul.exe
2010-04-18 22:52:22 —-A—- C:WINDOWS.1system32TweakUI.exe
2010-04-18 22:52:22 —-A—- C:WINDOWS.1system32pserv2.exe
2010-04-18 22:52:22 —-A—- C:WINDOWS.1system32pkey_lng.ini
2010-04-18 22:52:22 —-A—- C:WINDOWS.1system32PKey.exe
2010-04-18 22:52:22 —-A—- C:WINDOWS.1system32MS_Auto.exe
2010-04-18 22:52:22 —-A—- C:WINDOWS.1system32Hoster.exe
2010-04-18 22:52:22 —-A—- C:WINDOWS.1system32bootsafe.exe
2010-04-18 22:52:13 —-HDC—- C:WINDOWS.1$NtUninstallKB941569$
2010-04-18 22:52:05 —-HDC—- C:WINDOWS.1$NtUninstallKB929399$
2010-04-18 22:51:57 —-N—- C:WINDOWS.1system32spmsg.dll
2010-04-18 22:51:56 —-HDC—- C:WINDOWS.1$NtUninstallMSCompPackV1$
2010-04-18 22:51:44 —-D—- C:Program FilesWindows Media Connect 2
2010-04-18 22:51:36 —-HDC—- C:WINDOWS.1$NtUninstallwmp11$
2010-04-18 22:51:20 —-HDC—- C:WINDOWS.1$NtUninstallWMFDist11$
2010-04-18 22:51:14 —-D—- C:WINDOWS.1system32LogFiles
2010-04-18 22:51:11 —-A—- C:WINDOWS.1system32spupdsvc.exe
2010-04-18 22:51:10 —-HDC—- C:WINDOWS.1$NtUninstallWudf01000$
2010-04-18 22:51:06 —-N—- C:WINDOWS.1system32WUDFx.dll
2010-04-18 22:51:06 —-N—- C:WINDOWS.1system32WudfSvc.dll
2010-04-18 22:51:06 —-N—- C:WINDOWS.1system32WudfPlatform.dll
2010-04-18 22:51:06 —-N—- C:WINDOWS.1system32WUDFCoinstaller.dll
2010-04-18 22:51:06 —-N—- C:WINDOWS.1system32wpdsp.dll
2010-04-18 22:51:06 —-N—- C:WINDOWS.1system32WPDShServiceObj.dll
2010-04-18 22:51:06 —-N—- C:WINDOWS.1system32wpd_ci.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32WpdShext.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32wpdmtpus.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32wpdmtp.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32wpdconns.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32WMVXENCD.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32WMVSENCD.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32WMVSDECD.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32WMVENCOD.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32WMVDECOD.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32WMVADVE.DLL
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32WMVADVD.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32wmpsrcwp.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32wmpps.dll
2010-04-18 22:51:05 —-N—- C:WINDOWS.1system32wmpmde.dll
2010-04-18 22:51:02 —-N—- C:WINDOWS.1system32wmpencen.dll
2010-04-18 22:51:02 —-N—- C:WINDOWS.1system32wmpeffects.dll
2010-04-18 22:51:02 —-N—- C:WINDOWS.1system32wmdrmsdk.dll
2010-04-18 22:51:02 —-N—- C:WINDOWS.1system32wmdrmnet.dll
2010-04-18 22:51:02 —-N—- C:WINDOWS.1system32wmdrmdev.dll
2010-04-18 22:51:02 —-N—- C:WINDOWS.1system32wdfapi.dll
2010-04-18 22:51:02 —-N—- C:WINDOWS.1system32PortableDeviceWMDRM.dll
2010-04-18 22:51:02 —-N—- C:WINDOWS.1system32PortableDeviceWiaCompat.dll
2010-04-18 22:51:02 —-N—- C:WINDOWS.1system32PortableDeviceTypes.dll
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32WudfHost.exe
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32wpdshextautoplay.exe
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32wdfmgr.exe
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32uwdf.exe
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32PortableDeviceClassExtension.dll
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32PortableDeviceApi.dll
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32msdelta.dll
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32MPG4DECD.dll
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32MP4SDECD.dll
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32MP43DECD.dll
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32MFPLAT.dll
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32drmupgds.exe
2010-04-18 22:51:01 —-N—- C:WINDOWS.1system32audiodev.dll
2010-04-18 22:50:44 —-N—- C:WINDOWS.1system32wpdshextres.dll
2010-04-18 22:50:18 —-A—- C:WINDOWS.1control.ini
2010-04-18 22:50:18 —-A—- C:AUTOEXEC.BAT
2010-04-18 22:50:06 —-A—- C:WINDOWS.1OEWABLog.txt
2010-04-18 22:50:00 —-A—- C:WINDOWS.1system32mapi32.dll
2010-04-18 22:49:00 —-RAH—- C:WINDOWS.1system32logonui.exe.manifest
2010-04-18 22:48:54 —-RAH—- C:WINDOWS.1system32cdplayer.exe.manifest
2010-04-18 22:48:47 —-HD—- C:Program FilesWindowsUpdate
2010-04-18 22:48:42 —-D—- C:Program FilesOnline Services
2010-04-18 22:48:23 —-D—- C:WINDOWS.1system32DirectX
2010-04-18 22:48:14 —-A—- C:WINDOWS.1system32atrace.dll
2010-04-18 22:48:13 —-A—- C:WINDOWS.1system32desktop.ini
2010-04-18 22:48:13 —-A—- C:WINDOWS.1desktop.ini
2010-04-18 22:47:59 —-A—- C:WINDOWS.1system32nmevtmsg.dll
2010-04-18 22:47:58 —-A—- C:WINDOWS.1system32acctres.dll
2010-04-18 22:47:57 —-D—- C:Program FilesCommon FilesServices
2010-04-18 22:47:54 —-SD—- C:WINDOWS.1Tasks
2010-04-18 22:47:54 —-A—- C:WINDOWS.1system32icfgnt5.dll
2010-04-18 22:47:53 —-D—- C:Program FilesCommon FilesMSSoap
2010-04-18 22:47:49 —-D—- C:WINDOWS.1srchasst
2010-04-18 22:47:48 —-D—- C:WINDOWS.1system32Macromed
2010-04-18 22:47:44 —-A—- C:WINDOWS.1system32wuweb.dll
2010-04-18 22:47:44 —-A—- C:WINDOWS.1system32wups.dll
2010-04-18 22:47:44 —-A—- C:WINDOWS.1system32wucltui.dll
2010-04-18 22:47:44 —-A—- C:WINDOWS.1system32wuauserv.dll
2010-04-18 22:47:44 —-A—- C:WINDOWS.1system32wuaueng1.dll
2010-04-18 22:47:44 —-A—- C:WINDOWS.1system32wuaueng.dll
2010-04-18 22:47:43 —-A—- C:WINDOWS.1system32wuauclt1.exe
2010-04-18 22:47:43 —-A—- C:WINDOWS.1system32wuauclt.exe
2010-04-18 22:47:43 —-A—- C:WINDOWS.1system32wuapi.dll
2010-04-18 22:47:43 —-A—- C:WINDOWS.1system32bitsprx4.dll
2010-04-18 22:47:43 —-A—- C:WINDOWS.1system32bitsprx3.dll
2010-04-18 22:47:43 —-A—- C:WINDOWS.1system32bitsprx2.dll
2010-04-18 22:47:42 —-A—- C:WINDOWS.1system32qmgrprxy.dll
2010-04-18 22:47:42 —-A—- C:WINDOWS.1system32qmgr.dll
2010-04-18 22:47:38 —-D—- C:Program FilesMovie Maker
2010-04-18 22:47:16 —-A—- C:WINDOWS.1system32safrslv.dll
2010-04-18 22:47:16 —-A—- C:WINDOWS.1system32safrdm.dll
2010-04-18 22:47:16 —-A—- C:WINDOWS.1system32safrcdlg.dll
2010-04-18 22:47:16 —-A—- C:WINDOWS.1system32racpldlg.dll
2010-04-18 22:47:12 —-A—- C:WINDOWS.1system32fltlib.dll
2010-04-18 22:47:11 —-D—- C:WINDOWS.1system32Restore
2010-04-18 22:47:11 —-A—- C:WINDOWS.1system32fltMc.exe
2010-04-18 22:47:10 —-A—- C:WINDOWS.1system32srsvc.dll
2010-04-18 22:47:10 —-A—- C:WINDOWS.1system32srrstr.dll
2010-04-18 22:47:10 —-A—- C:WINDOWS.1system32srclient.dll
2010-04-18 22:47:09 —-A—- C:WINDOWS.1system32nmmkcert.dll
2010-04-18 22:47:09 —-A—- C:WINDOWS.1system32mnmdd.dll
2010-04-18 22:47:09 —-A—- C:WINDOWS.1system32isrdbg32.dll
2010-04-18 22:47:09 —-A—- C:WINDOWS.1system32ils.dll
2010-04-18 22:47:08 —-A—- C:WINDOWS.1system32msconf.dll
2010-04-18 22:47:08 —-A—- C:WINDOWS.1system32mnmsrvc.exe
2010-04-18 22:47:05 —-D—- C:Program FilesNetMeeting
2010-04-18 22:47:05 —-A—- C:WINDOWS.1system32msoert2.dll
2010-04-18 22:47:05 —-A—- C:WINDOWS.1system32msoeacct.dll
2010-04-18 22:47:03 —-A—- C:WINDOWS.1system32inetres.dll
2010-04-18 22:47:02 —-A—- C:WINDOWS.1system32inetcomm.dll
2010-04-18 22:47:00 —-D—- C:Program FilesOutlook Express
2010-04-18 22:47:00 —-A—- C:WINDOWS.1system32schedsvc.dll
2010-04-18 22:47:00 —-A—- C:WINDOWS.1system32mstinit.exe
2010-04-18 22:47:00 —-A—- C:WINDOWS.1system32mstask.dll
2010-04-18 22:46:59 —-A—- C:WINDOWS.1system32isign32.dll
2010-04-18 22:46:59 —-A—- C:WINDOWS.1system32inetcfg.dll
2010-04-18 22:46:59 —-A—- C:WINDOWS.1system32icwphbk.dll
2010-04-18 22:46:59 —-A—- C:WINDOWS.1system32icwdial.dll
2010-04-18 22:46:52 —-D—- C:Program FilesCommon FilesSystem
2010-04-18 22:46:02 —-D—- C:Program FilesComPlus Applications
2010-04-18 22:46:00 —-A—- C:WINDOWS.1vbaddin.ini
2010-04-18 22:46:00 —-A—- C:WINDOWS.1vb.ini
2010-04-18 22:45:54 —-D—- C:WINDOWS.1Registration
2010-04-18 22:45:45 —-D—- C:Program FilesWindows Media Player
2010-04-18 22:45:34 —-RD—- C:WINDOWS.1Offline Web Pages
2010-04-18 22:45:34 —-A—- C:WINDOWS.1system32winfxdocobj.exe
2010-04-18 22:45:33 —-SD—- C:WINDOWS.1Downloaded Program Files
2010-04-18 22:45:32 —-D—- C:WINDOWS.1wbem
2010-04-18 22:45:32 —-A—- C:WINDOWS.1system32msfeedssync.exe
2010-04-18 22:45:32 —-A—- C:WINDOWS.1system32msfeedsbs.dll
2010-04-18 22:45:30 —-A—- C:WINDOWS.1system32ieframe.dll.mui
2010-04-18 22:45:28 —-D—- C:Program FilesInternet Explorer
2010-04-18 22:45:28 —-A—- C:WINDOWS.1system32advpack.dll.mui
2010-04-18 22:45:26 —-D—- C:WINDOWS.1system32PreInstall
2010-04-18 22:45:25 —-D—- C:WINDOWS.1SoftwareDistribution
2010-04-18 22:45:25 —-A—- C:WINDOWS.1system32muweb.dll
2010-04-18 22:45:24 —-A—- C:WINDOWS.1system32write.exe
2010-04-18 22:45:24 —-A—- C:WINDOWS.1system32gpprefcl.dll
2010-04-18 22:45:17 —-A—- C:WINDOWS.1system32sndvol32.exe
2010-04-18 22:45:17 —-A—- C:WINDOWS.1system32hticons.dll
2010-04-18 22:45:16 —-A—- C:WINDOWS.1system32avwav.dll
2010-04-18 22:45:16 —-A—- C:WINDOWS.1system32avtapi.dll
2010-04-18 22:45:16 —-A—- C:WINDOWS.1system32avmeter.dll
2010-04-18 22:45:15 —-A—- C:WINDOWS.1system32winchat.exe
2010-04-18 22:45:09 —-A—- C:WINDOWS.1system32getuname.dll
2010-04-18 22:45:08 —-A—- C:WINDOWS.1system32charmap.exe
2010-04-18 22:45:08 —-A—- C:WINDOWS.1system32calc.exe
2010-04-18 22:45:07 —-A—- C:WINDOWS.1system32winmine.exe
2010-04-18 22:45:07 —-A—- C:WINDOWS.1system32sol.exe
2010-04-18 22:45:07 —-A—- C:WINDOWS.1system32mshearts.exe
2010-04-18 22:45:06 —-A—- C:WINDOWS.1system32usrlogon.cmd
2010-04-18 22:45:06 —-A—- C:WINDOWS.1system32tsshutdn.exe
2010-04-18 22:45:06 —-A—- C:WINDOWS.1system32tskill.exe
2010-04-18 22:45:06 —-A—- C:WINDOWS.1system32reset.exe
2010-04-18 22:45:06 —-A—- C:WINDOWS.1system32freecell.exe
2010-04-18 22:45:05 —-A—- C:WINDOWS.1system32tslabels.ini
2010-04-18 22:45:05 —-A—- C:WINDOWS.1system32tsdiscon.exe
2010-04-18 22:45:05 —-A—- C:WINDOWS.1system32tscon.exe
2010-04-18 22:45:05 —-A—- C:WINDOWS.1system32shadow.exe
2010-04-18 22:45:05 —-A—- C:WINDOWS.1system32rwinsta.exe
2010-04-18 22:45:05 —-A—- C:WINDOWS.1system32regini.exe
2010-04-18 22:45:05 —-A—- C:WINDOWS.1system32rdpcfgex.dll
2010-04-18 22:45:05 —-A—- C:WINDOWS.1system32qwinsta.exe
2010-04-18 22:45:05 —-A—- C:WINDOWS.1system32qappsrv.exe
2010-04-18 22:45:04 —-A—- C:WINDOWS.1system32msg.exe
2010-04-18 22:45:04 —-A—- C:WINDOWS.1system32msdtcprf.ini
2010-04-18 22:45:04 —-A—- C:WINDOWS.1system32logoff.exe
2010-04-18 22:45:04 —-A—- C:WINDOWS.1system32cdmodem.dll
2010-04-18 22:44:57 —-A—- C:WINDOWS.1system32wmimgmt.msc
2010-04-18 22:44:56 —-A—- C:WINDOWS.1system32sndrec32.exe
2010-04-18 22:44:56 —-A—- C:WINDOWS.1system32mplay32.exe
2010-04-18 22:44:56 —-A—- C:WINDOWS.1system32accwiz.exe
2010-04-18 22:44:55 —-D—- C:Program FilesWindows NT
2010-04-18 22:44:55 —-A—- C:WINDOWS.1system32hypertrm.dll
2010-04-18 22:44:54 —-A—- C:WINDOWS.1system32mspaint.exe
2010-04-18 22:44:54 —-A—- C:WINDOWS.1system32clipbrd.exe
2010-04-18 22:44:53 —-A—- C:WINDOWS.1system32spider.exe
2010-04-18 22:44:52 —-A—- C:WINDOWS.1system32tsgqec.dll
2010-04-18 22:44:52 —-A—- C:WINDOWS.1system32tscfgwmi.dll
2010-04-18 22:44:52 —-A—- C:WINDOWS.1system32rhttpaa.dll
2010-04-18 22:44:52 —-A—- C:WINDOWS.1system32aaclient.dll
2010-04-18 22:44:51 —-A—- C:WINDOWS.1system32remotepg.dll
2010-04-18 22:44:51 —-A—- C:WINDOWS.1system32mstscax.dll
2010-04-18 22:44:51 —-A—- C:WINDOWS.1system32mstsc.exe
2010-04-18 22:44:50 —-A—- C:WINDOWS.1system32termsrv.dll
2010-04-18 22:44:50 —-A—- C:WINDOWS.1system32sessmgr.exe
2010-04-18 22:44:50 —-A—- C:WINDOWS.1system32rdshost.exe
2010-04-18 22:44:50 —-A—- C:WINDOWS.1system32rdsaddin.exe
2010-04-18 22:44:50 —-A—- C:WINDOWS.1system32rdpwsx.dll
2010-04-18 22:44:50 —-A—- C:WINDOWS.1system32rdpsnd.dll
2010-04-18 22:44:50 —-A—- C:WINDOWS.1system32rdpclip.exe
2010-04-18 22:44:50 —-A—- C:WINDOWS.1system32rdchost.dll
2010-04-18 22:44:49 —-D—- C:WINDOWS.1system32MsDtc
2010-04-18 22:44:49 —-A—- C:WINDOWS.1system32qprocess.exe
2010-04-18 22:44:49 —-A—- C:WINDOWS.1system32mtxoci.dll
2010-04-18 22:44:49 —-A—- C:WINDOWS.1system32msdtcuiu.dll
2010-04-18 22:44:49 —-A—- C:WINDOWS.1system32icaapi.dll
2010-04-18 22:44:49 —-A—- C:WINDOWS.1system32cfgbkend.dll
2010-04-18 22:44:48 —-A—- C:WINDOWS.1system32xolehlp.dll
2010-04-18 22:44:48 —-A—- C:WINDOWS.1system32msdtctm.dll
2010-04-18 22:44:48 —-A—- C:WINDOWS.1system32msdtcprx.dll
2010-04-18 22:44:48 —-A—- C:WINDOWS.1system32msdtclog.dll
2010-04-18 22:44:47 —-A—- C:WINDOWS.1system32msdtc.exe
2010-04-18 22:44:47 —-A—- C:WINDOWS.1system32dcomcnfg.exe
2010-04-18 22:44:46 —-D—- C:WINDOWS.1system32Com
2010-04-18 22:44:46 —-A—- C:WINDOWS.1system32stclient.dll
2010-04-18 22:44:46 —-A—- C:WINDOWS.1system32mtxlegih.dll
2010-04-18 22:44:46 —-A—- C:WINDOWS.1system32mtxex.dll
2010-04-18 22:44:46 —-A—- C:WINDOWS.1system32mtxdm.dll
2010-04-18 22:44:46 —-A—- C:WINDOWS.1system32comrepl.dll
2010-04-18 22:44:46 —-A—- C:WINDOWS.1system32comaddin.dll
2010-04-18 22:44:46 —-A—- C:WINDOWS.1system32colbact.dll
2010-04-18 22:44:46 —-A—- C:WINDOWS.1system32catsrvps.dll
2010-04-18 22:44:45 —-A—- C:WINDOWS.1system32comsvcs.dll
2010-04-18 22:44:45 —-A—- C:WINDOWS.1system32clbcatex.dll
2010-04-18 22:44:45 —-A—- C:WINDOWS.1system32catsrvut.dll
2010-04-18 22:44:45 —-A—- C:WINDOWS.1system32catsrv.dll
2010-04-18 22:44:44 —-A—- C:WINDOWS.1system32comuid.dll
2010-04-18 22:44:44 —-A—- C:WINDOWS.1system32comsnap.dll
2010-04-18 22:44:44 —-A—- C:WINDOWS.1system32clbcatq.dll
2010-04-18 22:44:37 —-A—- C:WINDOWS.1system32servdeps.dll
2010-04-18 22:44:37 —-A—- C:WINDOWS.1system32mmfutil.dll
2010-04-18 22:44:37 —-A—- C:WINDOWS.1system32licwmi.dll
2010-04-18 22:44:37 —-A—- C:WINDOWS.1system32cmprops.dll

======List of files/folders modified in the last 1 months======

2010-04-28 23:36:25 —-A—- C:WINDOWS.1win.ini
2010-04-19 02:36:48 —-A—- C:WINDOWS.1system.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; ??C:Program FilesAviraAntiVir Desktopavgio.sys []
R1 avipbb;avipbb; C:WINDOWS.1system32DRIVERSavipbb.sys [2009-03-30 96104]
R1 CProCtrl;КриптоПро CSP драйвер; C:WINDOWS.1system32DRIVERSCProCtrl.sys [2009-04-23 54536]
R1 intelppm;Драйвер Intel процессора; C:WINDOWS.1system32DRIVERSintelppm.sys [2008-04-15 40704]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; ??C:Program FilesUltraISOdriversISODrive.sys []
R1 ssmdrv;ssmdrv; C:WINDOWS.1system32DRIVERSssmdrv.sys [2009-05-11 28520]
R2 avgntflt;avgntflt; C:WINDOWS.1system32DRIVERSavgntflt.sys [2009-11-25 56816]
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWS.1system32DRIVERSrspndr.sys [2008-06-05 62336]
R3 AR5211;Atheros Wireless Network Adapter Service; C:WINDOWS.1system32DRIVERSar5211.sys [2007-12-13 547904]
R3 ati2mtag;ati2mtag; C:WINDOWS.1system32DRIVERSati2mtag.sys [2007-03-06 1972736]
R3 CmBatt;Драйвер батареи с ACPI-управлением (Майкрософт); C:WINDOWS.1system32DRIVERSCmBatt.sys [2008-04-14 13952]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWS.1system32DRIVERSHDAudBus.sys [2008-04-15 144384]
R3 hidusb;Драйвер класса HID Microsoft; C:WINDOWS.1system32DRIVERShidusb.sys [2008-04-15 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWS.1system32driversRtkHDAud.sys [2006-11-15 4225920]
R3 kbfiltr;Keyboard Filter; C:WINDOWS.1system32DRIVERSkbfiltr.sys [2007-01-24 5632]
R3 MODEMCSA;Устройство фильтрации потока Unimodem; C:WINDOWS.1system32driversMODEMCSA.sys [2001-08-17 16128]
R3 mouhid;Драйвер мыши HID; C:WINDOWS.1system32DRIVERSmouhid.sys [2008-06-25 12160]
R3 MTsensor;ATK0100 ACPI UTILITY; C:WINDOWS.1system32DRIVERSATKACPI.sys [2006-12-17 7680]
R3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWS.1system32DRIVERSNdisIP.sys [2008-04-14 10880]
R3 RTIFDH;RTIFDH; C:WINDOWS.1system32DRIVERSrtIFDH.sys [2009-07-01 13312]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:WINDOWS.1system32DRIVERSRtnicxp.sys [2007-11-21 104320]
R3 RTSTOR;USB Mass Stroage Device; C:WINDOWS.1system32driversRTSTOR.SYS [2007-09-18 44032]
R3 smserial;smserial; C:WINDOWS.1system32DRIVERSsmserial.sys [2006-11-22 982272]
R3 StkCMini;Syntek AVStream USB2.0 1.3M WebCam; C:WINDOWS.1System32DriversStkCMini.sys [2007-06-06 1260672]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWS.1system32DRIVERSusbehci.sys [2008-06-25 30336]
R3 usbhub;USB2 концентратор; C:WINDOWS.1system32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWS.1system32DRIVERSusbohci.sys [2008-06-25 17152]
S3 CCDECODE;Closed Caption декодер; C:WINDOWS.1system32DRIVERSCCDECODE.sys [2008-04-14 17024]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWS.1system32driversMSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWS.1system32DRIVERSNABTSFEC.sys [2008-04-14 85248]
S3 SLIP;BDA Slip De-Framer; C:WINDOWS.1system32DRIVERSSLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:WINDOWS.1system32DRIVERSStreamIP.sys [2008-04-14 15232]
S3 usbstor;Драйвер запоминающих устройств для USB; C:WINDOWS.1system32DRIVERSUSBSTOR.SYS [2008-04-15 26368]
S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWS.1system32DRIVERSWSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWS.1system32DRIVERSWudfPf.sys [2008-03-21 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWS.1system32DRIVERSwudfrd.sys [2008-03-21 82944]
S4 IntelIde;IntelIde; C:WINDOWS.1system32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira AntiVir Планировщик; C:Program FilesAviraAntiVir Desktopsched.exe [2009-05-13 108289]
R2 AntiVirService;Avira AntiVir Guard; C:Program FilesAviraAntiVir Desktopavguard.exe [2009-07-21 185089]
R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWS.1system32Ati2evxx.exe [2007-03-06 446464]
R2 cpcsp1;КриптоПро CSP KC1; C:WINDOWS.1system32svchost.exe [2008-04-15 14336]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-20 322120]
R2 StkSSrv;Syntek AVStream USB2.0 WebCam Service; C:WINDOWS.1System32StkCSrv.exe [2007-04-19 24576]
R2 TTFixerService;NST ToolTipFixer; C:Program FilesNeoSmart TechnologiesToolTipFixerToolTipFixer.exe [2007-06-27 10240]
S3 aspnet_state;ASP.NET State Service; C:WINDOWS.1Microsoft.NETFrameworkv2.0.50727aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:WINDOWS.1Microsoft.NETFrameworkv2.0.50727mscorsvw.exe [2007-10-24 70144]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe [2010-04-19 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:WINDOWS.1Microsoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2007-10-09 36864]
S3 idsvc;Windows CardSpace; c:WINDOWS.1Microsoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2007-10-11 864256]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2008-03-21 914944]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWS.1system32svchost.exe [2008-04-15 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:WINDOWS.1Microsoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2007-10-11 122880]

EOF
Автор

Сообщения

Просмотр 3 сообщений - с 1 по 3 (из 3 всего)

Для ответа в этой теме необходимо авторизоваться.

Вирус — банер в середине экран просит отправить sms

Добро пожаловать

Поиск

Последние темы

СПАЙВАРЕ РУ

Нужна помощь?

Ссылки