Win32/Conficker/x червь

This topic has 5 ответов, 2 участника, and was last updated 16 years, 3 months назад by Admin.

Просмотр 6 сообщений - с 1 по 6 (из 6 всего)

Автор

Сообщения
14 января, 2009 в 4:28 дп #16129
som
Participant
- Темы:1
- Сообщений:4
У меня тоже есть этот червь на двух компах. На них стоят 2 разных антивирусника НОД и Касперский, но находить вирус они отказываются. Хотя находят его если вставить флешку, вирус записывается на неё. Утилита BitDefender Removal Tool говорит что система чиста, хотя точно знаю что комп заражон, Если вставить флешку на ней появляется вирус в корзине и файл авторан для запуска вируса. Из за него комп зависает так же служба nethost ест 50% ресурсов процессора
14 января, 2009 в 11:53 дп #21135
Admin
Keymaster
- Темы:40
- Сообщений:5676
Здравствуйте, добро пожаловать на Spyware-ru форум.

Скачайте сканер RSIT кликнув по этой ссылке и сохраните файл на вашем рабочем столе.

Дважды кликните по скачанному файлу.
Кликните по кнопке Continue.
Когда программа закончит работу, будут показаны два лога (log.txt и info.txt).

Вставьте оба RSIT лога в ваш ответ.
И ещё, вы установили патч MS08-67 http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx ?
14 января, 2009 в 6:40 пп #21136
som
Participant
- Темы:1
- Сообщений:4
Logfile of random’s system information tool 1.05 (written by random/random)
Run by Администратор at 2009-01-14 23:40:21
Microsoft Windows XP Professional Service Pack 3
System drive C: has 18 GB (46%) free of 39 GB
Total RAM: 511 MB (41% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:40:23, on 14.01.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20815)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesOlympus NOD32 Antivirusekrn.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSExplorer.EXE
C:WINDOWSSOUNDMAN.EXE
C:WINDOWSsystem32RUNDLL32.EXE
C:Program FilesUnlockerUnlockerAssistant.exe
C:Program FilesOlympus NOD32 Antivirusegui.exe
C:WINDOWSsystem32CTHELPER.EXE
C:Program FilesCommon FilesACD SystemsENDevDetect.exe
C:Program FilesSyncroSoftPosH2Ocledx.exe
C:Program FilesVistaDriveIconVistaDrv.exe
C:Program FilesLouderItLouderIt.exe
C:Program FilesPunto Switcherpunto.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesQIP Infiuminfium.exe
C:Program FilesOlympus P2POlympusp2p.exe
C:Program FilesOlympus WinTraywintray.exe
C:Program FilesUserGate4control_panel.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesOperaopera.exe
C:Documents and SettingsАдминистраторРабочий столRSIT.exe
C:Program Filestrend microАдминистратор.exe
14 января, 2009 в 6:40 пп #21137
som
Participant
- Темы:1
- Сообщений:4
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://xtreme.ws/
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
O2 — BHO: AskBar BHO — {201f27d4-3704-41d6-89c1-aa35e39143ed} — C:Program FilesAskBarDisbarbinaskBar.dll
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_06binssv.dll
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — C:PROGRA~1DOWNLO~1dmiehlp.dll
O3 — Toolbar: Ask Toolbar — {3041d03e-fd4b-44e0-b742-2d9b88305f98} — C:Program FilesAskBarDisbarbinaskBar.dll
O4 — HKLM..Run: [SoundMan] SOUNDMAN.EXE
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [nwiz] nwiz.exe /install
O4 — HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 — HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 — HKLM..Run: [UnlockerAssistant] «C:Program FilesUnlockerUnlockerAssistant.exe»
O4 — HKLM..Run: [egui] «C:Program FilesOlympus NOD32 Antivirusegui.exe» /hide /waitservice
O4 — HKLM..Run: [WINDVDPatch] CTHELPER.EXE
O4 — HKLM..Run: [UpdReg] C:WINDOWSUpdReg.EXE
O4 — HKLM..Run: [Jet Detection] «C:Program FilesCreativeSBLivePROGRAMADGJDet.exe»
O4 — HKLM..Run: [Device Detector] DevDetect.exe -autorun
O4 — HKLM..Run: [H2O] C:Program FilesSyncroSoftPosH2Ocledx.exe
O4 — HKCU..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe
O4 — HKCU..Run: [LouderIt.exe] C:Program FilesLouderItLouderIt.exe
O4 — HKCU..Run: [Punto Switcher] C:Program FilesPunto Switcherpunto.exe
O4 — HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [Infium] «C:Program FilesQIP Infiuminfium.exe»
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,OnceFirstLogonInstall,0 (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE7_012] rundll32 advpack.dll,LaunchINFSectionEx IE7int.inf,AfterUserStart,,4,N (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,OnceFirstLogonInstall,0 (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘Default user’)
O4 — Startup: Adobe Gamma.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe
O4 — Startup: UserGate Agent.lnk = C:Program FilesUserGate4control_panel.exe
O4 — Global Startup: Olympus P2P.lnk = C:Program FilesOlympus P2POlympusp2p.exe
O4 — Global Startup: Olympus Wintray.lnk = C:Program FilesOlympus WinTraywintray.exe
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — C:Program FilesDownload Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — C:Program FilesDownload Masterdmie.htm
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — C:Program FilesDownload Masterdmaster.exe
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O17 — HKLMSystemCCSServicesTcpip..{0AA705A0-E079-480A-8FCC-57E76A797C4B}: NameServer = 217.76.183.36 217.76.183.38
O17 — HKLMSystemCCSServicesTcpip..{F8D8BE32-43E8-4619-9DC4-9274A61F1AD1}: Domain = olympus.ru
O17 — HKLMSystemCCSServicesTcpip..{F8D8BE32-43E8-4619-9DC4-9274A61F1AD1}: NameServer = 10.0.0.1,10.0.0.2
O17 — HKLMSystemCS1ServicesTcpip..{0AA705A0-E079-480A-8FCC-57E76A797C4B}: NameServer = 217.76.183.36 217.76.183.38
O17 — HKLMSystemCS2ServicesTcpip..{0AA705A0-E079-480A-8FCC-57E76A797C4B}: NameServer = 217.76.183.36 217.76.183.38
O23 — Service: Adobe LM Service — Adobe Systems — C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe
O23 — Service: Eset HTTP Server (EhttpSrv) — ESET — C:Program FilesOlympus NOD32 AntivirusEHttpSrv.exe
O23 — Service: Eset Service (ekrn) — ESET — C:Program FilesOlympus NOD32 Antivirusekrn.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 8615 bytes

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO — C:Program FilesAskBarDisbarbinaskBar.dll [2008-11-18 333192]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_06binssv.dll [2008-03-25 509328]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — C:PROGRA~1DOWNLO~1dmiehlp.dll [2007-07-20 152064]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} — Ask Toolbar — C:Program FilesAskBarDisbarbinaskBar.dll [2008-11-18 333192]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«SoundMan»=C:WINDOWSSOUNDMAN.EXE [2007-04-16 577536]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2007-12-05 8523776]
«nwiz»=nwiz.exe /install []
«NvMediaCenter»=C:WINDOWSsystem32NvMcTray.dll [2007-12-05 81920]
«NeroFilterCheck»=C:WINDOWSsystem32NeroCheck.exe [2006-01-12 155648]
«UnlockerAssistant»=C:Program FilesUnlockerUnlockerAssistant.exe [2008-05-02 15872]
«egui»=C:Program FilesOlympus NOD32 Antivirusegui.exe [2008-02-06 1443072]
«WINDVDPatch»=C:WINDOWSsystem32CTHELPER.EXE [2002-07-02 24576]
«UpdReg»=C:WINDOWSUpdReg.EXE [2000-05-11 90112]
«Jet Detection»=C:Program FilesCreativeSBLivePROGRAMADGJDet.exe [2001-11-29 28672]
«Device Detector»=DevDetect.exe -autorun []
«H2O»=C:Program FilesSyncroSoftPosH2Ocledx.exe [2005-10-23 385024]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«VistaIcon»=C:Program FilesVistaDriveIconVistaDrv.exe [2008-03-23 132096]
«LouderIt.exe»=C:Program FilesLouderItLouderIt.exe [2008-02-19 41472]
«Punto Switcher»=C:Program FilesPunto Switcherpunto.exe [2008-10-16 735016]
«ctfmon.exe»=C:WINDOWSsystem32ctfmon.exe [2008-06-25 17408]
«Infium»=C:Program FilesQIP Infiuminfium.exe [2008-12-09 5062144]

C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
Olympus P2P.lnk — C:Program FilesOlympus P2POlympusp2p.exe
Olympus Wintray.lnk — C:Program FilesOlympus WinTraywintray.exe

C:Documents and SettingsАдминистраторГлавное менюПрограммыАвтозагрузка
Adobe Gamma.lnk — C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe
UserGate Agent.lnk — C:Program FilesUserGate4control_panel.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32WPDShServiceObj.dll [2008-03-21 133632]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«SynchronousMachineGroupPolicy»=0
«SynchronousUserGroupPolicy»=0

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«NoThumbnailCache»=1
«NoSMConfigurePrograms»=1
«NoSMHelp»=1

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

======List of files/folders created in the last 1 months======

2009-01-14 23:29:13 —-HDC—- C:WINDOWS$NtUninstallKB958644$
2009-01-14 23:29:13 —-HD—- C:WINDOWS$hf_mig$
2009-01-14 23:27:41 —-D—- C:Program Filestrend micro
2009-01-14 23:27:34 —-D—- C:rsit
2009-01-14 15:35:47 —-A—- C:WINDOWSNeroDigital.ini
2009-01-14 15:10:30 —-D—- C:Школа своего дела Морозов
2009-01-14 14:54:32 —-D—- C:Documents and SettingsАдминистраторApplication DatauTorrent
2009-01-12 22:34:50 —-D—- C:Program FilesРаскраска
2009-01-12 19:54:45 —-D—- C:Program FilesAlcohol Soft
2009-01-11 14:34:34 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe Systems
2009-01-11 14:34:30 —-D—- C:Program FilesCommon FilesAdobe Systems Shared
2009-01-11 14:33:53 —-D—- C:Program FilesCommon FilesAdobe
2009-01-11 14:33:53 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
2009-01-11 14:33:43 —-D—- C:Program FilesAdobe
2009-01-10 16:08:49 —-D—- C:Documents and SettingsАдминистраторApplication DataGrym
2009-01-10 16:00:33 —-D—- C:Program Files2gis
2009-01-10 16:00:33 —-D—- C:Documents and SettingsAll UsersApplication Data2GIS
2009-01-10 14:15:33 —-A—- C:WINDOWSsystem32REX Shared Library.dll
2009-01-10 14:05:52 —-D—- C:Program FilesSteinberg
2009-01-10 14:03:44 —-A—- C:WINDOWSsystem32Synsopos.exe
2009-01-10 14:03:41 —-A—- C:WINDOWSsystem32SynsoLChk.dll
2009-01-10 14:03:41 —-A—- C:WINDOWSsystem32SYNSOACC.dll
2009-01-10 12:13:11 —-D—- C:Documents and SettingsAll UsersApplication DataACD Systems
2009-01-10 12:13:08 —-D—- C:Program FilesCommon FilesACD Systems
2009-01-10 12:13:08 —-D—- C:Program FilesACD Systems
2009-01-10 12:11:54 —-D—- C:WINDOWSDownloaded Installations
2009-01-09 22:58:02 —-A—- C:WINDOWSsystem32rmbe3260.dll
2009-01-09 22:58:02 —-A—- C:WINDOWSsystem32ra32sipr.dll
2009-01-09 22:58:02 —-A—- C:WINDOWSsystem32ra32dnet.dll
2009-01-09 22:58:02 —-A—- C:WINDOWSsystem32ra3228_8.dll
2009-01-09 22:58:02 —-A—- C:WINDOWSsystem32ra3214_4.dll
2009-01-09 22:58:02 —-A—- C:WINDOWSsystem32msvcr70.dll
2009-01-09 22:58:02 —-A—- C:WINDOWSsystem32msvcp70.dll
2009-01-09 22:58:01 —-A—- C:WINDOWSsystem32pngu3263.dll
2009-01-09 22:58:01 —-A—- C:WINDOWSsystem32pneng50.dll
2009-01-09 22:58:01 —-A—- C:WINDOWSsystem32pnc3250.dll
2009-01-09 22:58:01 —-A—- C:WINDOWSsystem32encdnet.dll
2009-01-09 22:58:01 —-A—- C:WINDOWSsystem32decdnet.dll
2009-01-09 21:08:25 —-D—- C:Program FilesQIP Infium
2009-01-09 18:18:21 —-D—- C:Documents and SettingsАдминистраторApplication DataMacromedia
2009-01-09 18:18:21 —-D—- C:Documents and SettingsАдминистраторApplication DataAdobe
2009-01-09 15:30:43 —-A—- C:WINDOWSODBC.INI
2009-01-09 15:30:34 —-D—- C:Program FilesUserGate4
2009-01-09 12:52:28 —-D—- C:Documents and SettingsАдминистраторApplication Data1C
2009-01-09 11:53:18 —-D—- C:WINDOWSsystem32appmgmt
2009-01-09 11:33:22 —-D—- C:Program Files1C8_Emul_small
2009-01-09 11:32:27 —-A—- C:WINDOWSsystem32haspvdd.dll
2009-01-09 11:31:39 —-D—- C:Program Files1cv81
2009-01-09 11:14:42 —-D—- C:Program FilesRoX
2009-01-09 10:58:08 —-D—- C:Program FilesRaize
2009-01-08 23:59:16 —-SHD—- C:RECYCLER
2009-01-08 23:33:21 —-A—- C:WINDOWS{00000002-00000000-00000002-00001102-00000002-00201102}.BAK
2009-01-08 23:26:13 —-D—- C:Program FilesNative Instruments
2009-01-08 23:18:53 —-HD—- C:Offline Registration
2009-01-08 23:06:36 —-N—- C:WINDOWSUpdreg.EXE
2009-01-08 23:06:36 —-A—- C:WINDOWSSBWIN.INI
2009-01-08 23:06:35 —-N—- C:WINDOWSsystem32SFCVRT32.DLL
2009-01-08 23:06:35 —-N—- C:WINDOWSsystem32MFCUIA32.DLL
2009-01-08 23:06:35 —-N—- C:WINDOWSsystem32MFCANS32.DLL
2009-01-08 23:06:35 —-N—- C:WINDOWSsystem32INETWH32.DLL
2009-01-08 23:06:35 —-N—- C:WINDOWSsystem32CTWFLT32.DLL
2009-01-08 23:06:35 —-N—- C:WINDOWSsystem32CTL3D.DLL
2009-01-08 23:06:35 —-N—- C:WINDOWSCTRES.DLL
2009-01-08 23:06:35 —-N—- C:WINDOWSCTCCW.DLL
2009-01-08 23:06:35 —-N—- C:WINDOWSAC3API.INI
2009-01-08 23:06:34 —-D—- C:WINDOWSsystem32Defaults
2009-01-08 23:06:09 —-D—- C:WINDOWSsystem32ReinstallBackups
2009-01-08 23:05:53 —-D—- C:WINDOWSsystem32Data
2009-01-08 23:05:53 —-A—- C:WINDOWSsystem32Emu10kx.ini
2009-01-08 23:05:53 —-A—- C:WINDOWSsystem32ctzapxx.ini
2009-01-08 23:05:53 —-A—- C:WINDOWSINRES.DLL
2009-01-08 23:05:52 —-A—- C:WINDOWSsystem32SFMS32.DLL
2009-01-08 23:05:52 —-A—- C:WINDOWSsystem32REGPLIB.EXE
2009-01-08 23:05:52 —-A—- C:WINDOWSsystem32PIAPROXY.DLL
2009-01-08 23:05:52 —-A—- C:WINDOWSsystem32OPENAL32.DLL
2009-01-08 23:05:52 —-A—- C:WINDOWSsystem32KILLAPPS.EXE
2009-01-08 23:05:52 —-A—- C:WINDOWSsystem32KILL.INI
2009-01-08 23:05:52 —-A—- C:WINDOWSsystem32EAXAC3.DLL
2009-01-08 23:05:52 —-A—- C:WINDOWSsystem32CTSPKHLP.DLL
2009-01-08 23:05:52 —-A—- C:WINDOWSsystem32CTSBLFX.DLL
2009-01-08 23:05:52 —-A—- C:WINDOWSsystem32CTOSUSER.DLL
2009-01-08 23:05:52 —-A—- C:WINDOWSsystem32CTHELPER.EXE
2009-01-08 23:05:52 —-A—- C:WINDOWSsystem32CTEMUPIA.DLL
2009-01-08 23:05:52 —-A—- C:WINDOWSREADREG.EXE
2009-01-08 23:05:52 —-A—- C:WINDOWSPSCONV.EXE
2009-01-08 23:05:52 —-A—- C:WINDOWSMIDIDEF.EXE
2009-01-08 23:05:52 —-A—- C:WINDOWSDEVREG.DLL
2009-01-08 23:05:52 —-A—- C:WINDOWSCTDCRES.DLL
2009-01-08 23:05:51 —-A—- C:WINDOWSsystem32CTDPROXY.DLL
2009-01-08 23:05:51 —-A—- C:WINDOWSsystem32CTDEVCON.DLL
2009-01-08 23:05:51 —-A—- C:WINDOWSsystem32CTASIO.DLL
2009-01-08 23:05:51 —-A—- C:WINDOWSsystem32CTAGENT.DLL
2009-01-08 23:05:51 —-A—- C:WINDOWSsystem32COMMONFX.DLL
2009-01-08 23:05:51 —-A—- C:WINDOWSsystem32AC3API.DLL
2009-01-08 23:05:51 —-A—- C:WINDOWSsystem32a3d.dll
2009-01-08 23:05:45 —-A—- C:WINDOWSsystem32AHQCpURes.dll
2009-01-08 23:05:44 —-HD—- C:Program FilesInstallShield Installation Information
2009-01-08 23:05:11 —-D—- C:Program FilesCreative
2009-01-08 23:05:07 —-D—- C:Program FilesCommon FilesInstallShield
2009-01-08 22:36:39 —-D—- C:Program FilesMozilla Firefox
2009-01-08 22:36:39 —-D—- C:Program FilesAskBarDis
2009-01-08 22:36:39 —-D—- C:Documents and SettingsАдминистраторApplication DataMozilla
2009-01-08 22:36:24 —-D—- C:Program FilesFoxit Software
2009-01-08 22:36:24 —-D—- C:Documents and SettingsАдминистраторApplication DataFoxit
2009-01-08 22:24:32 —-D—- C:Program FilesCommon FilesSteinberg
2009-01-08 22:15:30 —-D—- C:Documents and SettingsАдминистраторApplication DataWinRAR
2009-01-08 22:12:09 —-D—- C:Program FilesSyncrosoft
2009-01-08 22:09:10 —-D—- C:Documents and SettingsАдминистраторApplication DataSteinberg
2009-01-08 16:34:20 —-A—- C:WINDOWSsystem32h323log.txt
2009-01-08 16:32:27 —-A—- C:WINDOWSsystem32sfman32.dll
2009-01-08 16:32:27 —-A—- C:WINDOWSsystem32sblfx.dll
2009-01-08 16:32:27 —-A—- C:WINDOWSsystem32devldr32.exe
2009-01-08 16:32:27 —-A—- C:WINDOWSsystem32devcon32.dll
2009-01-08 16:32:27 —-A—- C:WINDOWSsystem32ctwdm32.dll
2009-01-08 16:32:14 —-A—- C:WINDOWSsystem32nvwrszht.dll
2009-01-08 16:32:14 —-A—- C:WINDOWSsystem32nvwrszhc.dll
2009-01-08 16:32:14 —-A—- C:WINDOWSsystem32nvwrstr.dll
2009-01-08 16:32:14 —-A—- C:WINDOWSsystem32nvrszht.dll
2009-01-08 16:32:14 —-A—- C:WINDOWSsystem32nvrszhc.dll
2009-01-08 16:32:14 —-A—- C:WINDOWSsystem32nvrstr.dll
2009-01-08 16:32:13 —-A—- C:WINDOWSsystem32nvwrsth.dll
2009-01-08 16:32:13 —-A—- C:WINDOWSsystem32nvwrssv.dll
2009-01-08 16:32:13 —-A—- C:WINDOWSsystem32nvwrssl.dll
2009-01-08 16:32:13 —-A—- C:WINDOWSsystem32nvwrssk.dll
2009-01-08 16:32:13 —-A—- C:WINDOWSsystem32nvrsth.dll
2009-01-08 16:32:13 —-A—- C:WINDOWSsystem32nvrssv.dll
2009-01-08 16:32:13 —-A—- C:WINDOWSsystem32nvrssl.dll
2009-01-08 16:32:13 —-A—- C:WINDOWSsystem32nvrssk.dll
2009-01-08 16:32:12 —-A—- C:WINDOWSsystem32nvwrsru.dll
2009-01-08 16:32:12 —-A—- C:WINDOWSsystem32nvwrsptb.dll
2009-01-08 16:32:12 —-A—- C:WINDOWSsystem32nvwrspt.dll
2009-01-08 16:32:12 —-A—- C:WINDOWSsystem32nvwrspl.dll
2009-01-08 16:32:12 —-A—- C:WINDOWSsystem32nvwrsno.dll
2009-01-08 16:32:12 —-A—- C:WINDOWSsystem32nvwrsnl.dll
2009-01-08 16:32:12 —-A—- C:WINDOWSsystem32nvwrsko.dll
2009-01-08 16:32:12 —-A—- C:WINDOWSsystem32nvrsru.dll
2009-01-08 16:32:12 —-A—- C:WINDOWSsystem32nvrsptb.dll
2009-01-08 16:32:12 —-A—- C:WINDOWSsystem32nvrspt.dll
2009-01-08 16:32:12 —-A—- C:WINDOWSsystem32nvrspl.dll
2009-01-08 16:32:12 —-A—- C:WINDOWSsystem32nvrsno.dll
2009-01-08 16:32:12 —-A—- C:WINDOWSsystem32nvrsnl.dll
2009-01-08 16:32:12 —-A—- C:WINDOWSsystem32nvrsko.dll
2009-01-08 16:32:11 —-A—- C:WINDOWSsystem32nvwrsja.dll
2009-01-08 16:32:11 —-A—- C:WINDOWSsystem32nvwrsit.dll
2009-01-08 16:32:11 —-A—- C:WINDOWSsystem32nvwrshu.dll
2009-01-08 16:32:11 —-A—- C:WINDOWSsystem32nvwrshe.dll
2009-01-08 16:32:11 —-A—- C:WINDOWSsystem32nvwrsfr.dll
2009-01-08 16:32:11 —-A—- C:WINDOWSsystem32nvrsja.dll
2009-01-08 16:32:11 —-A—- C:WINDOWSsystem32nvrsit.dll
2009-01-08 16:32:11 —-A—- C:WINDOWSsystem32nvrshu.dll
2009-01-08 16:32:11 —-A—- C:WINDOWSsystem32nvrshe.dll
2009-01-08 16:32:11 —-A—- C:WINDOWSsystem32nvrsfr.dll
2009-01-08 16:32:10 —-A—- C:WINDOWSsystem32nvwrsfi.dll
2009-01-08 16:32:10 —-A—- C:WINDOWSsystem32nvwrsesm.dll
2009-01-08 16:32:10 —-A—- C:WINDOWSsystem32nvwrses.dll
2009-01-08 16:32:10 —-A—- C:WINDOWSsystem32nvwrseng.dll
2009-01-08 16:32:10 —-A—- C:WINDOWSsystem32nvwrsel.dll
2009-01-08 16:32:10 —-A—- C:WINDOWSsystem32nvwrsde.dll
2009-01-08 16:32:10 —-A—- C:WINDOWSsystem32nvwrsda.dll
2009-01-08 16:32:10 —-A—- C:WINDOWSsystem32nvrsfi.dll
2009-01-08 16:32:10 —-A—- C:WINDOWSsystem32nvrsesm.dll
2009-01-08 16:32:10 —-A—- C:WINDOWSsystem32nvrses.dll
2009-01-08 16:32:10 —-A—- C:WINDOWSsystem32nvrseng.dll
2009-01-08 16:32:10 —-A—- C:WINDOWSsystem32nvrsel.dll
2009-01-08 16:32:10 —-A—- C:WINDOWSsystem32nvrsde.dll
2009-01-08 16:32:10 —-A—- C:WINDOWSsystem32nvrsda.dll
2009-01-08 16:32:09 —-A—- C:WINDOWSsystem32nwiz.exe
2009-01-08 16:32:09 —-A—- C:WINDOWSsystem32nvwrscs.dll
2009-01-08 16:32:09 —-A—- C:WINDOWSsystem32nvwrsar.dll
2009-01-08 16:32:09 —-A—- C:WINDOWSsystem32nvwimg.dll
2009-01-08 16:32:09 —-A—- C:WINDOWSsystem32nvwdmcpl.dll
2009-01-08 16:32:09 —-A—- C:WINDOWSsystem32nvshell.dll
2009-01-08 16:32:09 —-A—- C:WINDOWSsystem32nvrscs.dll
2009-01-08 16:32:09 —-A—- C:WINDOWSsystem32nvrsar.dll
2009-01-08 16:32:09 —-A—- C:WINDOWSsystem32nvmccsrs.dll
2009-01-08 16:32:09 —-A—- C:WINDOWSsystem32nview.dll
2009-01-08 16:32:09 —-A—- C:WINDOWSsystem32nvexpbar.dll
2009-01-08 16:32:09 —-A—- C:WINDOWSsystem32nvcpluir.dll
2009-01-08 16:32:09 —-A—- C:WINDOWSsystem32nvcplui.exe
2009-01-08 16:32:08 —-D—- C:WINDOWSnview
2009-01-08 16:32:08 —-D—- C:WINDOWSNV11961656.TMP
2009-01-08 16:32:08 —-A—- C:WINDOWSsystem32nvuninst.exe
2009-01-08 16:32:08 —-A—- C:WINDOWSsystem32nvudisp.exe
2009-01-08 16:32:08 —-A—- C:WINDOWSsystem32nvdspsch.exe
2009-01-08 16:32:08 —-A—- C:WINDOWSsystem32nvcolor.exe
2009-01-08 16:32:08 —-A—- C:WINDOWSsystem32nvappbar.exe
2009-01-08 16:32:08 —-A—- C:WINDOWSsystem32keystone.exe
2009-01-08 16:31:32 —-A—- C:WINDOWSsystem32usbui.dll
2009-01-08 16:31:23 —-A—- C:WINDOWSsystem32ksuser.dll
2009-01-08 16:27:02 —-A—- C:WINDOWSimsins.BAK
2009-01-08 16:26:58 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2009-01-08 16:26:57 —-SHD—- C:WINDOWSInstaller
2009-01-08 16:26:56 —-D—- C:Program FilesCommon FilesODBC
2009-01-08 16:26:56 —-A—- C:WINDOWSODBCINST.INI
2009-01-08 16:26:50 —-D—- C:Program FilesCommon FilesSpeechEngines
2009-01-08 16:26:50 —-D—- C:Program FilesCommon FilesMicrosoft Shared
2009-01-08 16:26:49 —-RD—- C:Program Files
2009-01-08 16:26:49 —-D—- C:Program FilesCommon Files
2009-01-08 16:26:46 —-RA—- C:WINDOWSsystem32kbdtuq.dll
2009-01-08 16:26:46 —-RA—- C:WINDOWSsystem32kbdtuf.dll
2009-01-08 16:26:46 —-RA—- C:WINDOWSsystem32kbdazel.dll
2009-01-08 16:26:44 —-RA—- C:WINDOWSsystem32kbdhept.dll
2009-01-08 16:26:44 —-RA—- C:WINDOWSsystem32kbdhela3.dll
2009-01-08 16:26:44 —-RA—- C:WINDOWSsystem32kbdhela2.dll
2009-01-08 16:26:44 —-RA—- C:WINDOWSsystem32kbdhe319.dll
2009-01-08 16:26:43 —-RA—- C:WINDOWSsystem32kbdhe220.dll
2009-01-08 16:26:43 —-RA—- C:WINDOWSsystem32kbdhe.dll
2009-01-08 16:26:43 —-RA—- C:WINDOWSsystem32kbdgkl.dll
2009-01-08 16:26:42 —-RA—- C:WINDOWSsystem32kbdlt1.dll
2009-01-08 16:26:42 —-RA—- C:WINDOWSsystem32kbdlt.dll
2009-01-08 16:26:41 —-RA—- C:WINDOWSsystem32kbdlv1.dll
2009-01-08 16:26:41 —-RA—- C:WINDOWSsystem32kbdlv.dll
2009-01-08 16:26:41 —-RA—- C:WINDOWSsystem32kbdest.dll
2009-01-08 16:26:40 —-RA—- C:WINDOWSsystem32kbdsl1.dll
2009-01-08 16:26:40 —-RA—- C:WINDOWSsystem32kbdsl.dll
2009-01-08 16:26:40 —-RA—- C:WINDOWSsystem32kbdro.dll
2009-01-08 16:26:40 —-RA—- C:WINDOWSsystem32kbdpl.dll
2009-01-08 16:26:39 —-RA—- C:WINDOWSsystem32kbdycl.dll
2009-01-08 16:26:39 —-RA—- C:WINDOWSsystem32kbdpl1.dll
2009-01-08 16:26:39 —-RA—- C:WINDOWSsystem32kbdhu1.dll
2009-01-08 16:26:39 —-RA—- C:WINDOWSsystem32kbdhu.dll
2009-01-08 16:26:39 —-RA—- C:WINDOWSsystem32kbdcz2.dll
2009-01-08 16:26:39 —-RA—- C:WINDOWSsystem32kbdcz1.dll
2009-01-08 16:26:39 —-RA—- C:WINDOWSsystem32kbdcz.dll
2009-01-08 16:26:39 —-RA—- C:WINDOWSsystem32kbdcr.dll
2009-01-08 16:26:39 —-RA—- C:WINDOWSsystem32KBDAL.DLL
2009-01-08 16:26:33 —-A—- C:WINDOWSsystem32kbdycc.dll
2009-01-08 16:26:33 —-A—- C:WINDOWSsystem32kbduzb.dll
2009-01-08 16:26:33 —-A—- C:WINDOWSsystem32kbdur.dll
2009-01-08 16:26:33 —-A—- C:WINDOWSsystem32kbdtat.dll
2009-01-08 16:26:33 —-A—- C:WINDOWSsystem32kbdmon.dll
2009-01-08 16:26:33 —-A—- C:WINDOWSsystem32kbdkyr.dll
2009-01-08 16:26:33 —-A—- C:WINDOWSsystem32kbdkaz.dll
2009-01-08 16:26:33 —-A—- C:WINDOWSsystem32kbdbu.dll
2009-01-08 16:26:33 —-A—- C:WINDOWSsystem32kbdblr.dll
2009-01-08 16:26:33 —-A—- C:WINDOWSsystem32kbdaze.dll
2009-01-08 16:26:31 —-A—- C:WINDOWSsystem32irclass.dll
2009-01-08 16:26:31 —-A—- C:WINDOWSsystem32dgsetup.dll
2009-01-08 16:26:31 —-A—- C:WINDOWSsystem32dgrpsetu.dll
2009-01-08 16:26:30 —-A—- C:WINDOWSsystem32spxcoins.dll
2009-01-08 16:26:30 —-A—- C:WINDOWSsystem32EqnClass.Dll
2009-01-08 16:26:28 —-A—- C:WINDOWSTASKMAN.EXE
2009-01-08 16:26:27 —-N—- C:WINDOWSsystem32CONFIG.TMP
2009-01-08 16:26:27 —-A—- C:WINDOWSsystem32batt.dll
2009-01-08 16:26:26 —-A—- C:WINDOWSsystem32storprop.dll
2009-01-08 16:26:26 —-A—- C:WINDOWSNOTEPAD.EXE
2009-01-08 16:26:13 —-ASH—- C:Documents and SettingsAll UsersApplication Datadesktop.ini
2009-01-08 16:26:03 —-RA—- C:WINDOWSSET8.tmp
2009-01-08 16:25:59 —-RA—- C:WINDOWSSET4.tmp
2009-01-08 16:25:56 —-RA—- C:WINDOWSSET3.tmp
2009-01-08 16:25:50 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
2009-01-08 16:25:23 —-A—- C:WINDOWSsetuplog.txt
2009-01-08 16:24:20 —-A—- C:WINDOWSsystem32RTLCPAPI.dll
2009-01-08 16:24:20 —-A—- C:WINDOWSSOUNDMAN.EXE
2009-01-08 16:24:19 —-A—- C:WINDOWSsystem32RTLCPL.EXE
2009-01-08 16:24:18 —-A—- C:WINDOWSAlcrmv.exe
2009-01-08 16:19:53 —-A—- C:WINDOWSsystem32nvwssr.dll
2009-01-08 16:19:52 —-A—- C:WINDOWSsystem32nvwss.dll
2009-01-08 16:19:50 —-A—- C:WINDOWSsystem32nvwddi.dll
2009-01-08 16:19:43 —-A—- C:WINDOWSsystem32nvvitvsr.dll
2009-01-08 16:19:43 —-A—- C:WINDOWSsystem32nvvitvs.dll
2009-01-08 16:19:40 —-A—- C:WINDOWSsystem32nvoglnt.dll
2009-01-08 16:19:39 —-A—- C:WINDOWSsystem32nvnt4cpl.dll
2009-01-08 16:19:25 —-A—- C:WINDOWSsystem32nvmoblsr.dll
2009-01-08 16:19:24 —-A—- C:WINDOWSsystem32nvmobls.dll
2009-01-08 16:19:24 —-A—- C:WINDOWSsystem32nvmctray.dll
2009-01-08 16:19:24 —-A—- C:WINDOWSsystem32nvmccssr.dll
2009-01-08 16:19:24 —-A—- C:WINDOWSsystem32nvmccss.dll
2009-01-08 16:19:24 —-A—- C:WINDOWSsystem32nvmccs.dll
2009-01-08 16:19:23 —-A—- C:WINDOWSsystem32nvgamesr.dll
2009-01-08 16:19:23 —-A—- C:WINDOWSsystem32nvgames.dll
2009-01-08 16:19:22 —-A—- C:WINDOWSsystem32nvdispsr.dll
2009-01-08 16:19:22 —-A—- C:WINDOWSsystem32nvdisps.dll
2009-01-08 16:19:22 —-A—- C:WINDOWSsystem32nvcuda.dll
2009-01-08 16:19:09 —-A—- C:WINDOWSsystem32nvcpl.dll
2009-01-08 16:19:08 —-A—- C:WINDOWSsystem32nvcodins.dll
2009-01-08 16:19:08 —-A—- C:WINDOWSsystem32nvcod.dll
2009-01-08 16:19:08 —-A—- C:WINDOWSsystem32nvapi.dll
2009-01-08 16:19:08 —-A—- C:WINDOWSsystem32nv4_disp.dll
2009-01-08 16:19:07 —-A—- C:WINDOWSsystem32nvsvc32.exe
2009-01-08 16:13:01 —-D—- C:WINDOWSsystem32CatRoot2
2009-01-08 16:13:01 —-D—- C:WINDOWSsystem32CatRoot
2009-01-08 16:12:48 —-D—- C:Documents and Settings
2009-01-08 16:11:30 —-SH—- C:boot.ini
2009-01-08 16:10:33 —-SHD—- C:System Volume Information
2009-01-08 16:04:03 —-RSHDC—- C:WINDOWSsystem32dllcache
2009-01-08 16:04:03 —-RSD—- C:WINDOWSFonts
2009-01-08 16:04:03 —-HD—- C:WINDOWSinf
2009-01-08 16:04:03 —-D—- C:WINDOWSWinSxS
2009-01-08 16:04:03 —-D—- C:WINDOWSWeb
2009-01-08 16:04:03 —-D—- C:WINDOWStwain_32
2009-01-08 16:04:03 —-D—- C:WINDOWSTemp
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32wins
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32wbem
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32usmt
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32spool
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32ShellExt
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32Setup
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32ru-ru
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32ru
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32ras
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32oobe
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32npp
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32mui
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32inetsrv
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32IME
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32icsxml
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32ias
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32export
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32drivers
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32dhcp
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32config
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem323com_dmi
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem323076
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem322052
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem321054
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem321049
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem321042
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem321041
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem321037
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem321033
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem321031
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem321028
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem321025
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem32
2009-01-08 16:04:03 —-D—- C:WINDOWSsystem
2009-01-08 16:04:03 —-D—- C:WINDOWSsecurity
2009-01-08 16:04:03 —-D—- C:WINDOWSResources
2009-01-08 16:04:03 —-D—- C:WINDOWSrepair
2009-01-08 16:04:03 —-D—- C:WINDOWSProvisioning
2009-01-08 16:04:03 —-D—- C:WINDOWSPeerNet
2009-01-08 16:04:03 —-D—- C:WINDOWSpchealth
2009-01-08 16:04:03 —-D—- C:WINDOWSNetwork Diagnostic
2009-01-08 16:04:03 —-D—- C:WINDOWSmui
2009-01-08 16:04:03 —-D—- C:WINDOWSmsapps
2009-01-08 16:04:03 —-D—- C:WINDOWSmsagent
2009-01-08 16:04:03 —-D—- C:WINDOWSMedia
2009-01-08 16:04:03 —-D—- C:WINDOWSL2Schemas
2009-01-08 16:04:03 —-D—- C:WINDOWSjava
2009-01-08 16:04:03 —-D—- C:WINDOWSime
2009-01-08 16:04:03 —-D—- C:WINDOWSHelp
2009-01-08 16:04:03 —-D—- C:WINDOWSehome
2009-01-08 16:04:03 —-D—- C:WINDOWSDriver Cache
2009-01-08 16:04:03 —-D—- C:WINDOWSDebug
2009-01-08 16:04:03 —-D—- C:WINDOWSCursors
2009-01-08 16:04:03 —-D—- C:WINDOWSConnection Wizard
2009-01-08 16:04:03 —-D—- C:WINDOWSConfig
2009-01-08 16:04:03 —-D—- C:WINDOWSAppPatch
2009-01-08 16:04:03 —-D—- C:WINDOWSaddins
2009-01-08 16:04:03 —-D—- C:WINDOWS
2009-01-08 15:36:34 —-D—- C:Program FilesPunto Switcher
2009-01-08 15:36:34 —-D—- C:Documents and SettingsАдминистраторApplication DataYandex
2009-01-08 15:16:22 —-D—- C:Documents and SettingsAll UsersApplication DataESET
2009-01-08 15:15:50 —-D—- C:Program FilesOlympus NOD32 Antivirus
2009-01-08 15:15:45 —-D—- C:Program FilesOlympus P2P
2009-01-08 15:15:44 —-D—- C:Program FilesOlympus WinTray
2009-01-08 15:14:44 —-D—- C:Program FilesOlympus Configurator
2009-01-08 15:12:37 —-D—- C:Documents and SettingsАдминистраторApplication DataOpera
2009-01-08 15:06:17 —-D—- C:Documents and SettingsАдминистраторApplication DataIdentities
2009-01-08 15:06:12 —-HD—- C:Program FilesUninstall Information
2009-01-08 15:04:40 —-RD—- C:WINDOWSOemDrv
2009-01-08 15:04:35 —-A—- C:WINDOWSsystem32engine.dll
2009-01-08 15:04:29 —-D—- C:Program FilesDownload Master
2009-01-08 15:04:27 —-D—- C:Program FilesuTorrent
2009-01-08 15:04:22 —-N—- C:WINDOWSsystem32pncrt.dll
2009-01-08 15:04:22 —-A—- C:WINDOWSsystem32rmoc3260.dll
2009-01-08 15:04:22 —-A—- C:WINDOWSsystem32pndx5032.dll
2009-01-08 15:04:22 —-A—- C:WINDOWSsystem32pndx5016.dll
2009-01-08 15:04:21 —-A—- C:WINDOWSsystem32unrar.dll
2009-01-08 15:04:18 —-A—- C:WINDOWSsystem32yv12vfw.dll
2009-01-08 15:04:18 —-A—- C:WINDOWSsystem32xvidvfw.dll
2009-01-08 15:04:18 —-A—- C:WINDOWSsystem32xvidcore.dll
2009-01-08 15:04:17 —-A—- C:WINDOWSsystem32qt-dx331.dll
2009-01-08 15:04:17 —-A—- C:WINDOWSsystem32dpl100.dll
2009-01-08 15:04:17 —-A—- C:WINDOWSsystem32divx.dll
2009-01-08 15:04:16 —-A—- C:WINDOWSsystem32ff_vfw.dll.manifest
2009-01-08 15:04:16 —-A—- C:WINDOWSsystem32ff_vfw.dll
2009-01-08 15:04:15 —-D—- C:Program FilesK-Lite Codec Pack
2009-01-08 15:04:15 —-D—- C:Documents and SettingsАдминистраторApplication DataReal
2009-01-08 15:04:15 —-D—- C:Documents and SettingsAll UsersApplication DataReal
2009-01-08 15:04:15 —-A—- C:WINDOWSsystem32msvcr71.dll
2009-01-08 15:04:15 —-A—- C:WINDOWSsystem32msvcp71.dll
2009-01-08 15:04:12 —-D—- C:Program FilesWinRAR
2009-01-08 15:04:03 —-D—- C:Program FilesUninstall Tool
2009-01-08 15:04:00 —-D—- C:Program FilesFastStone Capture
2009-01-08 15:03:57 —-D—- C:Program FilesFastStone Image Viewer
2009-01-08 15:03:56 —-D—- C:Program FilesLouderIt
2009-01-08 15:03:53 —-D—- C:Program FilesOpera
2009-01-08 15:03:52 —-A—- C:WINDOWSsystem32RestoratorContextMenu.dll
2009-01-08 15:03:51 —-D—- C:Program FilesRestorator 2007
2009-01-08 15:03:48 —-D—- C:Program FilesTotal Commander
2009-01-08 15:03:45 —-D—- C:Program FilesUnlocker
2009-01-08 15:03:45 —-D—- C:Documents and SettingsАдминистраторApplication DataDesktopicon
2009-01-08 15:03:43 —-D—- C:Program FilesCpu-z
2009-01-08 14:19:44 —-A—- C:WINDOWSsystem32BASSMOD.dll
2009-01-08 14:19:39 —-D—- C:Program FilesAlcohol 120
2009-01-08 14:18:14 —-N—- C:WINDOWSsystem32TwnLib4.dll
2009-01-08 14:18:14 —-A—- C:WINDOWSsystem32TwnLib20.dll
2009-01-08 14:18:13 —-N—- C:WINDOWSsystem32ImagXRA7.dll
2009-01-08 14:18:13 —-N—- C:WINDOWSsystem32ImagXR7.dll
2009-01-08 14:18:13 —-N—- C:WINDOWSsystem32ImagXpr7.dll
2009-01-08 14:18:13 —-N—- C:WINDOWSsystem32ImagX7.dll
2009-01-08 14:18:13 —-D—- C:Program FilesCommon FilesAhead
2009-01-08 14:18:13 —-A—- C:WINDOWSsystem32NeroCheck.exe
2009-01-08 14:18:12 —-D—- C:Program FilesAhead
2009-01-08 14:17:24 —-D—- C:WINDOWSwinamp
2009-01-08 14:17:10 —-N—- C:WINDOWSsystem32vxblock.dll
2009-01-08 14:17:10 —-N—- C:WINDOWSsystem32pxwave.dll
2009-01-08 14:17:10 —-N—- C:WINDOWSsystem32pxsfs.dll
2009-01-08 14:17:10 —-N—- C:WINDOWSsystem32pxmas.dll
2009-01-08 14:17:10 —-N—- C:WINDOWSsystem32pxinsa64.exe
2009-01-08 14:17:10 —-N—- C:WINDOWSsystem32pxhpinst.exe
2009-01-08 14:17:10 —-N—- C:WINDOWSsystem32pxdrv.dll
2009-01-08 14:17:10 —-N—- C:WINDOWSsystem32pxcpya64.exe
2009-01-08 14:17:10 —-N—- C:WINDOWSsystem32pxafs.dll
2009-01-08 14:17:10 —-N—- C:WINDOWSsystem32px.dll
2009-01-08 14:17:04 —-D—- C:Program FilesWinamp
2009-01-08 14:16:52 —-D—- C:Program FilesVitSoft
2009-01-08 14:14:46 —-D—- C:Program FilesMSBuild
2009-01-08 14:14:38 —-D—- C:WINDOWSsystem32XPSViewer
2009-01-08 14:14:34 —-D—- C:WINDOWSsystem32en-us
2009-01-08 14:14:33 —-D—- C:Program FilesReference Assemblies
2009-01-08 14:14:02 —-N—- C:WINDOWSsystem32spmsg2.dll
2009-01-08 14:10:42 —-A—- C:WINDOWSWPI_Log.txt
2009-01-08 14:00:18 —-SD—- C:Documents and SettingsАдминистраторApplication DataMicrosoft
2009-01-08 14:00:18 —-ASH—- C:Documents and SettingsАдминистраторApplication Datadesktop.ini
2009-01-08 13:58:51 —-D—- C:WINDOWSPrefetch
2009-01-08 13:58:50 —-A—- C:WINDOWSSchedLgU.Txt
2009-01-08 13:52:06 —-D—- C:WINDOWSsystem32xircom
2009-01-08 13:52:06 —-D—- C:Program Filesxerox
2009-01-08 13:52:06 —-D—- C:Program Filesmicrosoft frontpage
2009-01-08 13:51:43 —-D—- C:Program FilesVistaDriveIcon
2009-01-08 13:51:40 —-A—- C:WINDOWSsystem32hidcon.exe
2009-01-08 13:51:40 —-A—- C:WINDOWSFinish.exe
2009-01-08 13:51:37 —-A—- C:WINDOWSsystem32OEMINFO.INI
2009-01-08 13:50:56 —-SD—- C:WINDOWSsystem32Microsoft
2009-01-08 13:50:56 —-A—- C:WINDOWSsystem32javaws.exe
2009-01-08 13:50:56 —-A—- C:WINDOWSsystem32javaw.exe
2009-01-08 13:50:56 —-A—- C:WINDOWSsystem32java.exe
2009-01-08 13:50:17 —-D—- C:Program FilesJava
2009-01-08 13:50:16 —-D—- C:Program FilesCommon FilesJava
2009-01-08 13:47:58 —-D—- C:WINDOWSsystem32URTTemp
2009-01-08 13:47:15 —-A—- C:WINDOWSsystem32vfp9t.dll
2009-01-08 13:47:15 —-A—- C:WINDOWSsystem32vfp9rrus.dll
2009-01-08 13:47:15 —-A—- C:WINDOWSsystem32VFP9RENU.DLL
2009-01-08 13:47:15 —-A—- C:WINDOWSsystem32vfp9r.dll
2009-01-08 13:47:15 —-A—- C:WINDOWSsystem32VFP9ENU.DLL
2009-01-08 13:47:14 —-A—- C:WINDOWSsystem32vfp8t.dll
2009-01-08 13:47:14 —-A—- C:WINDOWSsystem32vfp8rrus.dll
2009-01-08 13:47:14 —-A—- C:WINDOWSsystem32VFP8RENU.DLL
2009-01-08 13:47:14 —-A—- C:WINDOWSsystem32vfp8r.dll
2009-01-08 13:47:14 —-A—- C:WINDOWSsystem32vfp8enu.dll
2009-01-08 13:47:14 —-A—- C:WINDOWSsystem32vfp7t.dll
2009-01-08 13:47:14 —-A—- C:WINDOWSsystem32VFP7RENU.DLL
2009-01-08 13:47:13 —-A—- C:WINDOWSsystem32vfp7r.dll
2009-01-08 13:47:13 —-A—- C:WINDOWSsystem32VFP6T.DLL
2009-01-08 13:47:13 —-A—- C:WINDOWSsystem32VFP6RENU.DLL
2009-01-08 13:47:13 —-A—- C:WINDOWSsystem32VFP6R.DLL
2009-01-08 13:46:53 —-RSD—- C:WINDOWSassembly
2009-01-08 13:46:49 —-D—- C:WINDOWSMicrosoft.NET
2009-01-08 13:46:27 —-D—- C:WINDOWSsystem32Cplicons
2009-01-08 13:46:27 —-A—- C:WINDOWSsystem32wul_lng.ini
2009-01-08 13:46:27 —-A—- C:WINDOWSsystem32wul.exe
2009-01-08 13:46:27 —-A—- C:WINDOWSsystem32TweakUI.exe
2009-01-08 13:46:27 —-A—- C:WINDOWSsystem32pserv2.exe
2009-01-08 13:46:27 —-A—- C:WINDOWSsystem32pkey_lng.ini
2009-01-08 13:46:27 —-A—- C:WINDOWSsystem32PKey.exe
2009-01-08 13:46:27 —-A—- C:WINDOWSsystem32MS_Auto.exe
2009-01-08 13:46:27 —-A—- C:WINDOWSsystem32Hoster.exe
2009-01-08 13:46:27 —-A—- C:WINDOWSsystem32bootsafe.exe
2009-01-08 13:46:15 —-HDC—- C:WINDOWS$NtUninstallKB941569$
2009-01-08 13:45:49 —-HDC—- C:WINDOWS$NtUninstallKB929399$
2009-01-08 13:45:25 —-N—- C:WINDOWSsystem32spmsg.dll
2009-01-08 13:45:24 —-HDC—- C:WINDOWS$NtUninstallMSCompPackV1$
2009-01-08 13:45:01 —-D—- C:Program FilesWindows Media Connect 2
2009-01-08 13:44:55 —-HDC—- C:WINDOWS$NtUninstallwmp11$
2009-01-08 13:44:18 —-HDC—- C:WINDOWS$NtUninstallWMFDist11$
2009-01-08 13:43:55 —-D—- C:WINDOWSsystem32LogFiles
2009-01-08 13:43:54 —-A—- C:WINDOWSsystem32spupdsvc.exe
2009-01-08 13:43:52 —-HDC—- C:WINDOWS$NtUninstallWudf01000$
2009-01-08 13:43:33 —-N—- C:WINDOWSsystem32WUDFx.dll
2009-01-08 13:43:33 —-N—- C:WINDOWSsystem32WudfSvc.dll
2009-01-08 13:43:33 —-N—- C:WINDOWSsystem32WudfPlatform.dll
2009-01-08 13:43:33 —-N—- C:WINDOWSsystem32WUDFCoinstaller.dll
2009-01-08 13:43:33 —-N—- C:WINDOWSsystem32wpdsp.dll
2009-01-08 13:43:33 —-N—- C:WINDOWSsystem32WPDShServiceObj.dll
2009-01-08 13:43:33 —-N—- C:WINDOWSsystem32WpdShext.dll
2009-01-08 13:43:33 —-N—- C:WINDOWSsystem32wpdmtpus.dll
2009-01-08 13:43:33 —-N—- C:WINDOWSsystem32wpdmtp.dll
2009-01-08 13:43:33 —-N—- C:WINDOWSsystem32wpdconns.dll
2009-01-08 13:43:33 —-N—- C:WINDOWSsystem32wpd_ci.dll
2009-01-08 13:43:32 —-N—- C:WINDOWSsystem32WMVXENCD.dll
2009-01-08 13:43:32 —-N—- C:WINDOWSsystem32WMVSENCD.dll
2009-01-08 13:43:32 —-N—- C:WINDOWSsystem32WMVSDECD.dll
2009-01-08 13:43:32 —-N—- C:WINDOWSsystem32WMVENCOD.dll
2009-01-08 13:43:31 —-N—- C:WINDOWSsystem32WMVDECOD.dll
2009-01-08 13:43:31 —-N—- C:WINDOWSsystem32WMVADVE.DLL
2009-01-08 13:43:31 —-N—- C:WINDOWSsystem32WMVADVD.dll
2009-01-08 13:43:31 —-N—- C:WINDOWSsystem32wmpsrcwp.dll
2009-01-08 13:43:31 —-N—- C:WINDOWSsystem32wmpps.dll
2009-01-08 13:43:31 —-N—- C:WINDOWSsystem32wmpmde.dll
2009-01-08 13:43:29 —-N—- C:WINDOWSsystem32wmpencen.dll
2009-01-08 13:43:29 —-N—- C:WINDOWSsystem32wmpeffects.dll
2009-01-08 13:43:28 —-N—- C:WINDOWSsystem32wmdrmsdk.dll
2009-01-08 13:43:28 —-N—- C:WINDOWSsystem32wmdrmnet.dll
2009-01-08 13:43:28 —-N—- C:WINDOWSsystem32wmdrmdev.dll
2009-01-08 13:43:28 —-N—- C:WINDOWSsystem32wdfapi.dll
2009-01-08 13:43:28 —-N—- C:WINDOWSsystem32PortableDeviceWMDRM.dll
2009-01-08 13:43:28 —-N—- C:WINDOWSsystem32PortableDeviceWiaCompat.dll
2009-01-08 13:43:28 —-N—- C:WINDOWSsystem32PortableDeviceTypes.dll
2009-01-08 13:43:28 —-N—- C:WINDOWSsystem32PortableDeviceClassExtension.dll
2009-01-08 13:43:28 —-N—- C:WINDOWSsystem32PortableDeviceApi.dll
2009-01-08 13:43:27 —-N—- C:WINDOWSsystem32WudfHost.exe
2009-01-08 13:43:27 —-N—- C:WINDOWSsystem32wpdshextautoplay.exe
2009-01-08 13:43:27 —-N—- C:WINDOWSsystem32wdfmgr.exe
2009-01-08 13:43:27 —-N—- C:WINDOWSsystem32uwdf.exe
2009-01-08 13:43:27 —-N—- C:WINDOWSsystem32msdelta.dll
2009-01-08 13:43:27 —-N—- C:WINDOWSsystem32MPG4DECD.dll
2009-01-08 13:43:27 —-N—- C:WINDOWSsystem32MP4SDECD.dll
2009-01-08 13:43:27 —-N—- C:WINDOWSsystem32MP43DECD.dll
2009-01-08 13:43:27 —-N—- C:WINDOWSsystem32MFPLAT.dll
2009-01-08 13:43:27 —-N—- C:WINDOWSsystem32audiodev.dll
2009-01-08 13:43:26 —-N—- C:WINDOWSsystem32drmupgds.exe
2009-01-08 13:42:51 —-N—- C:WINDOWSsystem32wpdshextres.dll
2009-01-08 13:42:23 —-A—- C:WINDOWScontrol.ini
2009-01-08 13:42:23 —-A—- C:AUTOEXEC.BAT
2009-01-08 13:42:04 —-A—- C:WINDOWSOEWABLog.txt
2009-01-08 13:42:00 —-A—- C:WINDOWSsystem32mapi32.dll
2009-01-08 13:40:18 —-RAH—- C:WINDOWSsystem32logonui.exe.manifest
2009-01-08 13:40:10 —-RAH—- C:WINDOWSsystem32cdplayer.exe.manifest
2009-01-08 13:40:02 —-HD—- C:Program FilesWindowsUpdate
2009-01-08 13:39:59 —-D—- C:Program FilesOnline Services
2009-01-08 13:39:32 —-D—- C:WINDOWSsystem32DirectX
2009-01-08 13:39:22 —-A—- C:WINDOWSsystem32desktop.ini
2009-01-08 13:39:22 —-A—- C:WINDOWSsystem32atrace.dll
2009-01-08 13:39:22 —-A—- C:WINDOWSdesktop.ini
2009-01-08 13:39:10 —-A—- C:WINDOWSsystem32nmevtmsg.dll
2009-01-08 13:39:09 —-A—- C:WINDOWSsystem32acctres.dll
2009-01-08 13:39:08 —-D—- C:Program FilesCommon FilesServices
2009-01-08 13:39:06 —-SD—- C:WINDOWSTasks
2009-01-08 13:39:06 —-A—- C:WINDOWSsystem32icfgnt5.dll
2009-01-08 13:39:05 —-D—- C:Program FilesCommon FilesMSSoap
2009-01-08 13:39:00 —-D—- C:WINDOWSsrchasst
2009-01-08 13:38:59 —-D—- C:WINDOWSsystem32Macromed
2009-01-08 13:38:56 —-A—- C:WINDOWSsystem32wuweb.dll
2009-01-08 13:38:56 —-A—- C:WINDOWSsystem32wucltui.dll
2009-01-08 13:38:55 —-A—- C:WINDOWSsystem32wuauserv.dll
2009-01-08 13:38:55 —-A—- C:WINDOWSsystem32wuaueng1.dll
2009-01-08 13:38:55 —-A—- C:WINDOWSsystem32wuaueng.dll
2009-01-08 13:38:54 —-A—- C:WINDOWSsystem32wups.dll
2009-01-08 13:38:54 —-A—- C:WINDOWSsystem32wuauclt1.exe
2009-01-08 13:38:54 —-A—- C:WINDOWSsystem32wuauclt.exe
2009-01-08 13:38:54 —-A—- C:WINDOWSsystem32wuapi.dll
2009-01-08 13:38:53 —-A—- C:WINDOWSsystem32qmgrprxy.dll
2009-01-08 13:38:53 —-A—- C:WINDOWSsystem32qmgr.dll
2009-01-08 13:38:53 —-A—- C:WINDOWSsystem32bitsprx4.dll
2009-01-08 13:38:53 —-A—- C:WINDOWSsystem32bitsprx3.dll
2009-01-08 13:38:53 —-A—- C:WINDOWSsystem32bitsprx2.dll
2009-01-08 13:38:47 —-D—- C:Program FilesMovie Maker
2009-01-08 13:38:27 —-A—- C:WINDOWSsystem32safrslv.dll
2009-01-08 13:38:26 —-A—- C:WINDOWSsystem32safrdm.dll
2009-01-08 13:38:26 —-A—- C:WINDOWSsystem32safrcdlg.dll
2009-01-08 13:38:26 —-A—- C:WINDOWSsystem32racpldlg.dll
2009-01-08 13:38:21 —-A—- C:WINDOWSsystem32fltlib.dll
2009-01-08 13:38:20 —-D—- C:WINDOWSsystem32Restore
2009-01-08 13:38:20 —-A—- C:WINDOWSsystem32srsvc.dll
2009-01-08 13:38:20 —-A—- C:WINDOWSsystem32srrstr.dll
2009-01-08 13:38:20 —-A—- C:WINDOWSsystem32fltMc.exe
2009-01-08 13:38:19 —-A—- C:WINDOWSsystem32srclient.dll
2009-01-08 13:38:19 —-A—- C:WINDOWSsystem32mnmdd.dll
2009-01-08 13:38:19 —-A—- C:WINDOWSsystem32isrdbg32.dll
2009-01-08 13:38:19 —-A—- C:WINDOWSsystem32ils.dll
2009-01-08 13:38:18 —-A—- C:WINDOWSsystem32nmmkcert.dll
2009-01-08 13:38:18 —-A—- C:WINDOWSsystem32msconf.dll
2009-01-08 13:38:18 —-A—- C:WINDOWSsystem32mnmsrvc.exe
2009-01-08 13:38:16 —-D—- C:Program FilesNetMeeting
2009-01-08 13:38:15 —-A—- C:WINDOWSsystem32msoert2.dll
2009-01-08 13:38:15 —-A—- C:WINDOWSsystem32msoeacct.dll
2009-01-08 13:38:14 —-A—- C:WINDOWSsystem32inetres.dll
2009-01-08 13:38:13 —-A—- C:WINDOWSsystem32inetcomm.dll
2009-01-08 13:38:10 —-D—- C:Program FilesOutlook Express
2009-01-08 13:38:10 —-A—- C:WINDOWSsystem32schedsvc.dll
2009-01-08 13:38:10 —-A—- C:WINDOWSsystem32mstinit.exe
2009-01-08 13:38:10 —-A—- C:WINDOWSsystem32mstask.dll
2009-01-08 13:38:10 —-A—- C:WINDOWSsystem32icwphbk.dll
2009-01-08 13:38:10 —-A—- C:WINDOWSsystem32icwdial.dll
2009-01-08 13:38:09 —-A—- C:WINDOWSsystem32isign32.dll
2009-01-08 13:38:09 —-A—- C:WINDOWSsystem32inetcfg.dll
2009-01-08 13:38:03 —-D—- C:Program FilesCommon FilesSystem
2009-01-08 13:37:01 —-D—- C:Program FilesComPlus Applications
2009-01-08 13:37:00 —-A—- C:WINDOWSvbaddin.ini
2009-01-08 13:37:00 —-A—- C:WINDOWSvb.ini
2009-01-08 13:36:56 —-D—- C:WINDOWSRegistration
2009-01-08 13:36:50 —-D—- C:Program FilesWindows Media Player
2009-01-08 13:36:39 —-RD—- C:WINDOWSOffline Web Pages
2009-01-08 13:36:39 —-A—- C:WINDOWSsystem32winfxdocobj.exe
2009-01-08 13:36:38 —-SD—- C:WINDOWSDownloaded Program Files
2009-01-08 13:36:38 —-D—- C:WINDOWSwbem
2009-01-08 13:36:38 —-A—- C:WINDOWSsystem32msfeedssync.exe
2009-01-08 13:36:38 —-A—- C:WINDOWSsystem32msfeedsbs.dll
2009-01-08 13:36:37 —-A—- C:WINDOWSsystem32ieframe.dll.mui
2009-01-08 13:36:36 —-D—- C:Program FilesInternet Explorer
2009-01-08 13:36:36 —-A—- C:WINDOWSsystem32advpack.dll.mui
2009-01-08 13:36:33 —-D—- C:WINDOWSsystem32PreInstall
2009-01-08 13:36:33 —-D—- C:WINDOWSSoftwareDistribution
2009-01-08 13:36:33 —-A—- C:WINDOWSsystem32muweb.dll
2009-01-08 13:36:32 —-A—- C:WINDOWSsystem32write.exe
2009-01-08 13:36:32 —-A—- C:WINDOWSsystem32gpprefcl.dll
2009-01-08 13:36:26 —-A—- C:WINDOWSsystem32sndvol32.exe
2009-01-08 13:36:25 —-A—- C:WINDOWSsystem32winchat.exe
2009-01-08 13:36:25 —-A—- C:WINDOWSsystem32hticons.dll
2009-01-08 13:36:25 —-A—- C:WINDOWSsystem32avwav.dll
2009-01-08 13:36:25 —-A—- C:WINDOWSsystem32avtapi.dll
2009-01-08 13:36:25 —-A—- C:WINDOWSsystem32avmeter.dll
2009-01-08 13:36:20 —-A—- C:WINDOWSsystem32getuname.dll
2009-01-08 13:36:19 —-A—- C:WINDOWSsystem32sol.exe
2009-01-08 13:36:19 —-A—- C:WINDOWSsystem32charmap.exe
2009-01-08 13:36:19 —-A—- C:WINDOWSsystem32calc.exe
2009-01-08 13:36:18 —-A—- C:WINDOWSsystem32winmine.exe
2009-01-08 13:36:18 —-A—- C:WINDOWSsystem32usrlogon.cmd
2009-01-08 13:36:18 —-A—- C:WINDOWSsystem32tsshutdn.exe
2009-01-08 13:36:18 —-A—- C:WINDOWSsystem32tslabels.ini
2009-01-08 13:36:18 —-A—- C:WINDOWSsystem32tskill.exe
2009-01-08 13:36:18 —-A—- C:WINDOWSsystem32reset.exe
2009-01-08 13:36:18 —-A—- C:WINDOWSsystem32mshearts.exe
2009-01-08 13:36:18 —-A—- C:WINDOWSsystem32freecell.exe
2009-01-08 13:36:17 —-A—- C:WINDOWSsystem32tsdiscon.exe
2009-01-08 13:36:17 —-A—- C:WINDOWSsystem32tscon.exe
2009-01-08 13:36:17 —-A—- C:WINDOWSsystem32shadow.exe
2009-01-08 13:36:17 —-A—- C:WINDOWSsystem32rwinsta.exe
2009-01-08 13:36:17 —-A—- C:WINDOWSsystem32regini.exe
2009-01-08 13:36:17 —-A—- C:WINDOWSsystem32rdpcfgex.dll
2009-01-08 13:36:17 —-A—- C:WINDOWSsystem32qwinsta.exe
2009-01-08 13:36:17 —-A—- C:WINDOWSsystem32qappsrv.exe
2009-01-08 13:36:17 —-A—- C:WINDOWSsystem32msg.exe
2009-01-08 13:36:17 —-A—- C:WINDOWSsystem32msdtcprf.ini
2009-01-08 13:36:17 —-A—- C:WINDOWSsystem32logoff.exe
2009-01-08 13:36:17 —-A—- C:WINDOWSsystem32cdmodem.dll
2009-01-08 13:36:11 —-A—- C:WINDOWSsystem32wmimgmt.msc
2009-01-08 13:36:10 —-A—- C:WINDOWSsystem32accwiz.exe
2009-01-08 13:36:09 —-D—- C:Program FilesWindows NT
2009-01-08 13:36:09 —-A—- C:WINDOWSsystem32sndrec32.exe
2009-01-08 13:36:09 —-A—- C:WINDOWSsystem32mplay32.exe
2009-01-08 13:36:09 —-A—- C:WINDOWSsystem32hypertrm.dll
2009-01-08 13:36:08 —-A—- C:WINDOWSsystem32spider.exe
2009-01-08 13:36:08 —-A—- C:WINDOWSsystem32mspaint.exe
2009-01-08 13:36:08 —-A—- C:WINDOWSsystem32clipbrd.exe
2009-01-08 13:36:07 —-A—- C:WINDOWSsystem32tsgqec.dll
2009-01-08 13:36:07 —-A—- C:WINDOWSsystem32tscfgwmi.dll
2009-01-08 13:36:06 —-A—- C:WINDOWSsystem32rhttpaa.dll
2009-01-08 13:36:06 —-A—- C:WINDOWSsystem32aaclient.dll
2009-01-08 13:36:05 —-A—- C:WINDOWSsystem32sessmgr.exe
2009-01-08 13:36:05 —-A—- C:WINDOWSsystem32remotepg.dll
2009-01-08 13:36:05 —-A—- C:WINDOWSsystem32rdshost.exe
2009-01-08 13:36:05 —-A—- C:WINDOWSsystem32rdsaddin.exe
2009-01-08 13:36:05 —-A—- C:WINDOWSsystem32rdchost.dll
2009-01-08 13:36:05 —-A—- C:WINDOWSsystem32mstscax.dll
2009-01-08 13:36:05 —-A—- C:WINDOWSsystem32mstsc.exe
2009-01-08 13:36:04 —-D—- C:WINDOWSsystem32MsDtc
2009-01-08 13:36:04 —-A—- C:WINDOWSsystem32termsrv.dll
2009-01-08 13:36:04 —-A—- C:WINDOWSsystem32rdpwsx.dll
2009-01-08 13:36:04 —-A—- C:WINDOWSsystem32rdpsnd.dll
2009-01-08 13:36:04 —-A—- C:WINDOWSsystem32rdpclip.exe
2009-01-08 13:36:04 —-A—- C:WINDOWSsystem32qprocess.exe
2009-01-08 13:36:04 —-A—- C:WINDOWSsystem32msdtcuiu.dll
2009-01-08 13:36:04 —-A—- C:WINDOWSsystem32icaapi.dll
2009-01-08 13:36:04 —-A—- C:WINDOWSsystem32cfgbkend.dll
2009-01-08 13:36:03 —-A—- C:WINDOWSsystem32xolehlp.dll
2009-01-08 13:36:03 —-A—- C:WINDOWSsystem32mtxoci.dll
2009-01-08 13:36:03 —-A—- C:WINDOWSsystem32msdtctm.dll
2009-01-08 13:36:03 —-A—- C:WINDOWSsystem32msdtcprx.dll
2009-01-08 13:36:03 —-A—- C:WINDOWSsystem32msdtclog.dll
2009-01-08 13:36:03 —-A—- C:WINDOWSsystem32msdtc.exe
2009-01-08 13:36:02 —-D—- C:WINDOWSsystem32Com
2009-01-08 13:36:02 —-A—- C:WINDOWSsystem32mtxlegih.dll
2009-01-08 13:36:02 —-A—- C:WINDOWSsystem32mtxex.dll
2009-01-08 13:36:02 —-A—- C:WINDOWSsystem32mtxdm.dll
2009-01-08 13:36:02 —-A—- C:WINDOWSsystem32dcomcnfg.exe
2009-01-08 13:36:02 —-A—- C:WINDOWSsystem32colbact.dll
2009-01-08 13:36:01 —-A—- C:WINDOWSsystem32stclient.dll
2009-01-08 13:36:01 —-A—- C:WINDOWSsystem32comrepl.dll
2009-01-08 13:36:01 —-A—- C:WINDOWSsystem32comaddin.dll
2009-01-08 13:36:01 —-A—- C:WINDOWSsystem32clbcatex.dll
2009-01-08 13:36:01 —-A—- C:WINDOWSsystem32catsrvut.dll
2009-01-08 13:36:01 —-A—- C:WINDOWSsystem32catsrvps.dll
2009-01-08 13:36:01 —-A—- C:WINDOWSsystem32catsrv.dll
2009-01-08 13:36:00 —-A—- C:WINDOWSsystem32comuid.dll
2009-01-08 13:36:00 —-A—- C:WINDOWSsystem32comsvcs.dll
2009-01-08 13:36:00 —-A—- C:WINDOWSsystem32comsnap.dll
2009-01-08 13:35:59 —-A—- C:WINDOWSsystem32clbcatq.dll
2009-01-08 13:35:50 —-A—- C:WINDOWSsystem32servdeps.dll
2009-01-08 13:35:50 —-A—- C:WINDOWSsystem32mmfutil.dll
2009-01-08 13:35:50 —-A—- C:WINDOWSsystem32licwmi.dll
2009-01-08 13:35:50 —-A—- C:WINDOWSsystem32cmprops.dll

======List of files/folders modified in the last 1 months======

2009-01-08 16:26:49 —-A—- C:WINDOWSsystem.ini
2009-01-08 13:45:09 —-A—- C:WINDOWSwin.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 easdrv;easdrv; C:WINDOWSsystem32DRIVERSeasdrv.sys [2008-02-06 29704]
R1 epfwtdir;epfwtdir; C:WINDOWSsystem32DRIVERSepfwtdir.sys [2008-02-06 34312]
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-15 40704]
R2 eamon;EAMON; C:WINDOWSsystem32DRIVERSeamon.sys [2008-02-06 39944]
R2 Hardlock;Hardlock; ??C:WINDOWSsystem32drivershardlock.sys []
R2 haspflt;haspflt; ??C:WINDOWSsystem32drivershaspflt.sys []
R2 Haspnt;Haspnt; ??C:WINDOWSsystem32driversHaspnt.sys []
R2 PfModNT;PfModNT; ??C:WINDOWSsystem32PfModNT.sys []
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2008-06-05 62336]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:WINDOWSsystem32driversALCXWDM.SYS [2008-01-25 4127488]
R3 CLEDX;Team H2O CLEDX service; C:WINDOWSsystem32DRIVERScledx.sys [2005-05-09 33792]
R3 ctac32k;Creative AC3 Software Decoder; C:WINDOWSSystem32driversctac32k.sys [2002-07-19 127948]
R3 ctaud2k;Creative Audio Driver (WDM); C:WINDOWSsystem32driversctaud2k.sys [2002-07-19 837548]
R3 ctprxy2k;Creative Proxy Driver; C:WINDOWSSystem32driversctprxy2k.sys [2002-07-19 11068]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:WINDOWSSystem32driversctsfm2k.sys [2002-07-19 213860]
R3 emupia;E-mu Plug-in Architecture Driver; C:WINDOWSSystem32driversemupia2k.sys [2002-07-19 156604]
R3 ha10kx2k;Creative Hardware Abstract Layer Driver; C:WINDOWSsystem32driversha10kx2k.sys [2002-07-24 998004]
R3 LsNat;UserGate NAT Kernel Mode Service Miniport; C:WINDOWSsystem32DRIVERSlsnat.sys [2007-06-13 106496]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2007-12-05 7435392]
R3 ossrv;Creative OS Services Driver; C:WINDOWSsystem32driversctoss2k.sys [2002-07-19 195432]
R3 pfc;Padus ASPI Shell; C:WINDOWSsystem32driverspfc.sys [2009-01-10 10368]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtnicxp.sys [2007-11-21 104320]
R3 usbaudio;Аудио драйвер USB (WDM); C:WINDOWSsystem32driversusbaudio.sys [2008-04-14 60032]
R3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-22 32384]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-24 30336]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-14 59520]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-15 20608]
S3 emu10k;Creative SB Live! (WDM); C:WINDOWSsystem32driversemu10k1m.sys [2001-08-17 283904]
S3 emu10k1;Драйвер Creative Interface Manager (WDM); C:WINDOWSsystem32driversctlfacem.sys [2001-08-17 6912]
S3 sfman;Драйвер Creative SoundFont Manager (WDM); C:WINDOWSsystem32driverssfmanm.sys [2001-08-17 36480]
S3 usbstor;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-15 26368]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2008-03-21 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2008-03-21 82944]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;Eset Service; C:Program FilesOlympus NOD32 Antivirusekrn.exe [2008-02-06 472320]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSsystem32nvsvc32.exe [2007-12-05 155716]
S3 Adobe LM Service;Adobe LM Service; C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe [2009-01-11 72704]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2007-10-24 70144]
S3 EhttpSrv;Eset HTTP Server; C:Program FilesOlympus NOD32 AntivirusEHttpSrv.exe [2008-02-06 19200]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2007-10-09 36864]
S3 idsvc;Windows CardSpace; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2007-10-11 864256]
S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media PlayerWMPNetwk.exe [2008-03-21 914944]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2007-10-11 122880]

EOF
14 января, 2009 в 6:42 пп #21138
som
Participant
- Темы:1
- Сообщений:4
возвращает только один лог, комп пропачил
15 января, 2009 в 4:46 пп #21139
Admin
Keymaster
- Темы:40
- Сообщений:5676
Проверьте компьютер следующей бесплатной утилитой, кликните по этой ссылке и сохраните её на вашем рабочем столе.
Распакуйте.
Зайдите в папку в которую вы распаковали файл и кликните дважды по файлу Anti-Downadup-graphics.
В открывшемся окне кликните по кнопке Scan.

Сообщите о результате.
Автор

Сообщения

Просмотр 6 сообщений - с 1 по 6 (из 6 всего)

Для ответа в этой теме необходимо авторизоваться.

Win32/Conficker/x червь

Добро пожаловать

Поиск

Последние темы

СПАЙВАРЕ РУ

Нужна помощь?

Ссылки