SPYWARE-RU.COM

Созданные ответы форума

Просмотр 2 сообщений - с 1 по 2 (из 2 всего)

Автор

Сообщения
13 августа, 2010 в 7:19 дп в ответ на: Браузер блокирует передачу данных #30696
Alex-kum
Participant
- Темы:1
- Сообщений:3
Да, кстати, сейчас проверил, заходит на сайт др-веба и другие то-же, сейчас установлю антивирус касперского. Ваша помощь мне сейчас уже не понадобится? Спасибо.
13 августа, 2010 в 7:10 дп в ответ на: Браузер блокирует передачу данных #30695
Alex-kum
Participant
- Темы:1
- Сообщений:3
Добрый день Valeri!
Прикладываю результаты сканирования и свежий лог.
Жду Вашего ответа. Спасибо.
All processes killed
========== SERVICES/DRIVERS ==========
Error: No service named dwshd was found to stop!
No service named dwshd was found to delete!
Error: No service named acbbvze1 was found to stop!
No service named acbbvze1 was found to delete!
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: All Users.WINDOWS

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User.WINDOWS
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService.NT AUTHORITY
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService.NT AUTHORITY
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 82496 bytes

User: Администратор
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Opera cache emptied: 25160 bytes

User: Александр
->Temp folder emptied: 3284318673 bytes
->Temporary Internet Files folder emptied: 153966354 bytes
->Java cache emptied: 0 bytes
->Opera cache emptied: 24925966 bytes
->Flash cache emptied: 2607418 bytes

User: Леша
->Temp folder emptied: 9927751365 bytes
->Temporary Internet Files folder emptied: 1299150 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 1071 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2314998 bytes
%systemroot%System32 .tmp files removed: 3243693 bytes
%systemroot%System32dllcache .tmp files removed: 0 bytes
%systemroot%System32drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 5835117430 bytes
%systemroot%system32configsystemprofileLocal SettingsTemp folder emptied: 44399848 bytes
%systemroot%system32configsystemprofileLocal SettingsTemporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 65568637 bytes

Total Files Cleaned = 18 450,00 mb

C:WINDOWSSystem32driversetcHosts moved successfully.
HOSTS file reset successfully

OTM by OldTimer — Version 3.1.15.0 log created on 08132010_175627

Files moved on Reboot…

Registry entries deleted on Reboot…

Лог

Logfile of random’s system information tool 1.08 (written by random/random)
Run by Александр at 2010-08-13 18:05:19
Microsoft Windows XP Professional Service Pack 2
System drive C: has 25 GB (21%) free of 117 GB
Total RAM: 2047 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:05:27, on 13.08.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesVIAVIAudioiHDADeckHDeck.exe
C:Program FilesWinampwinampa.exe
C:Program FilesCommon FilesJavaJava Updatejusched.exe
C:WINDOWSsystem32ctfmon.exe
C:PROGRA~1DAEMON~1daemon.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.exe
C:Program FilesATI TechnologiesATI.ACECore-Staticccc.exe
C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe
C:Program FilesJavajre6binjqs.exe
C:WINDOWSsystem32wuauclt.exe
C:WINDOWSsystem32wbemwmiapsrv.exe
C:Documents and SettingsАлександрРабочий столRSIT.exe
C:Program Filestrend microАлександр.exe

R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/?clid=143106
R1 — HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://www.cheatsmaximal.net/cheats/S/
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
O1 — Hosts: яю127.0.0.1 localhost
O1 — Hosts: ::1 localhost
O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 5.0ReaderActiveXAcroIEHelper.ocx
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 — Toolbar: Яндекс.Бар — {91397D20-1446-11D4-8AF4-0040CA1127B6} — C:Program FilesYandexYandexBarIEyndbar.dll
O3 — Toolbar: DAEMON Tools Toolbar — {32099AAC-C132-4136-9E9A-4E364A424E17} — C:Program FilesDAEMON Tools ToolbarDTToolbar.dll
O4 — HKLM..Run: [Six Engine] «C:Program FilesASUSEPU-4 EngineFourEngine.exe» -b
O4 — HKLM..Run: [HDAudDeck] C:Program FilesVIAVIAudioiHDADeckHDeck.exe 1
O4 — HKLM..Run: [StartCCC] «C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe» MSRun
O4 — HKLM..Run: [amd_dc_opt] C:Program FilesAMDDual-Core Optimizeramd_dc_opt.exe
O4 — HKLM..Run: [WinampAgent] C:Program FilesWinampwinampa.exe
O4 — HKLM..Run: [SunJavaUpdateSched] «C:Program FilesCommon FilesJavaJava Updatejusched.exe»
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [Steam] «C:GamesJust cause2Steam.exe» -silent
O4 — HKCU..Run: [DAEMON Tools Lite] «C:PROGRA~1DAEMON~1daemon.exe» -autorun
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOfficeOSA9.EXE
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O12 — Plugin for .spop: C:Program FilesInternet ExplorerPluginsNPDocBox.dll
O22 — SharedTaskScheduler: Предзагрузчик Browseui — {438755C2-A8BA-11D1-B96B-00A0C90312E1} — C:WINDOWSsystem32browseui.dll
O22 — SharedTaskScheduler: Демон кэша категорий компонентов — {8C7461EF-2B13-11d2-BE35-3078302C2030} — C:WINDOWSsystem32browseui.dll
O23 — Service: Ati HotKey Poller — ATI Technologies Inc. — C:WINDOWSsystem32Ati2evxx.exe
O23 — Service: Dragon Age: Origins — Content Updater (DAUpdaterSvc) — Unknown owner — C:GamesDragon Age.Origins And Awakening.v 1.03Dragon Age.Origins And Awakening.v 1.03bin_shipDAUpdaterSvc.Service.exe (file missing)
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — C:Program FilesJavajre6binjqs.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 5626 bytes

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class — C:Program FilesAdobeAcrobat 5.0ReaderActiveXAcroIEHelper.ocx [2001-03-02 37808]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2010-08-12 41760]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2010-08-12 79648]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{91397D20-1446-11D4-8AF4-0040CA1127B6} — Яндекс.Бар — C:Program FilesYandexYandexBarIEyndbar.dll [2009-12-24 8729864]
{32099AAC-C132-4136-9E9A-4E364A424E17} — DAEMON Tools Toolbar — C:Program FilesDAEMON Tools ToolbarDTToolbar.dll [2009-04-24 937416]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«Six Engine»=C:Program FilesASUSEPU-4 EngineFourEngine.exe [2009-08-21 5782528]
«HDAudDeck»=C:Program FilesVIAVIAudioiHDADeckHDeck.exe [2009-08-28 33673216]
«StartCCC»=C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2009-11-10 98304]
«amd_dc_opt»=C:Program FilesAMDDual-Core Optimizeramd_dc_opt.exe [2008-07-22 77824]
«WinampAgent»=C:Program FilesWinampwinampa.exe [2006-09-27 35328]
«SunJavaUpdateSched»=C:Program FilesCommon FilesJavaJava Updatejusched.exe [2010-05-14 248552]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2004-08-17 15360]
«Steam»=C:GamesJust cause2Steam.exe -silent []
«DAEMON Tools Lite»=C:PROGRA~1DAEMON~1daemon.exe [2009-04-24 691656]

C:Documents and SettingsAll Users.WINDOWSГлавное менюПрограммыАвтозагрузка
Microsoft Office.lnk — C:Program FilesMicrosoft OfficeOfficeOSA9.EXE

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyAtiExtEvent]
C:WINDOWSsystem32Ati2evxx.dll [2009-11-11 155648]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«HonorAutoRunSetting»=1

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:GamesJust cause2Steam.exe»=»C:GamesJust cause2Steam.exe:*:Enabled:Steam»
«C:GamesAssassins creed 2Assassin’s Creed IIserverserver.exe»=»C:GamesAssassins creed 2Assassin’s Creed IIserverserver.exe:*:Enabled:server»
«C:GamesDRAGON AGEDragon Age — Originsbin_shipdaorigins.exe»=»C:GamesDRAGON AGEDragon Age — Originsbin_shipdaorigins.exe:*:Disabled:Dragon Age: Origins»
«C:GamesWheelmanBinariesWheelman.exe»=»C:GamesWheelmanBinariesWheelman.exe:*:Disabled:Wheelman»
«C:GamesDragon Age.Origins And Awakening.v 1.03Dragon Age.Origins And Awakening.v 1.03bin_shipdaorigins.exe»=»C:GamesDragon Age.Origins And Awakening.v 1.03Dragon Age.Origins And Awakening.v 1.03bin_shipdaorigins.exe:*:Disabled:Dragon Age: Origins»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

======List of files/folders created in the last 1 months======

2010-08-13 17:56:27 —-D—- C:_OTM
2010-08-12 23:13:52 —-SHD—- C:Config.Msi
2010-08-12 23:12:52 —-HDC—- C:WINDOWS$NtUninstallKB970430$
2010-08-12 23:12:29 —-HDC—- C:WINDOWS$NtUninstallKB956572$
2010-08-12 23:12:05 —-HDC—- C:WINDOWS$NtUninstallKB975561$
2010-08-12 23:11:58 —-HDC—- C:WINDOWS$NtUninstallKB925720$
2010-08-12 23:11:52 —-HDC—- C:WINDOWS$NtUninstallKB952069_WM9$
2010-08-12 23:11:51 —-RA—- C:WINDOWSsystem32wmpns.dll
2010-08-12 23:11:45 —-HDC—- C:WINDOWS$NtUninstallKB973540_WM9L$
2010-08-12 23:11:42 —-HDC—- C:WINDOWS$NtUninstallKB971737$
2010-08-12 23:09:20 —-HDC—- C:WINDOWS$NtUninstallKB982381$
2010-08-12 22:23:02 —-D—- C:Program Filestrend micro
2010-08-12 22:23:01 —-D—- C:rsit
2010-08-12 22:08:29 —-D—- C:WINDOWSCSC
2010-08-12 22:08:22 —-A—- C:WINDOWSntbtlog.txt
2010-08-12 21:30:47 —-D—- C:Documents and SettingsAll Users.WINDOWSApplication DataSun
2010-08-12 21:30:21 —-A—- C:WINDOWSsystem32javaws.exe
2010-08-12 21:30:21 —-A—- C:WINDOWSsystem32javaw.exe
2010-08-12 21:30:21 —-A—- C:WINDOWSsystem32java.exe
2010-08-12 21:30:21 —-A—- C:WINDOWSsystem32deployJava1.dll
2010-08-12 21:12:17 —-D—- C:Documents and SettingsАлександрApplication DataSun
2010-08-12 21:02:31 —-D—- C:Program FilesOpera
2010-08-12 21:01:33 —-A—- C:Program FilesOpera_962_ru_Setup.exe
2010-08-12 18:50:44 —-D—- C:Documents and SettingsАлександрApplication DataActivision
2010-08-11 15:09:13 —-D—- C:Program FilesCommon FilesBlizzard Entertainment
2010-08-11 02:18:25 —-HDC—- C:WINDOWS$NtUninstallKB980218$
2010-08-11 02:18:22 —-HDC—- C:WINDOWS$NtUninstallKB951376-v2$
2010-08-11 02:18:14 —-HDC—- C:WINDOWS$NtUninstallKB952954$
2010-08-11 02:18:06 —-HDC—- C:WINDOWS$NtUninstallKB959426$
2010-08-11 02:17:58 —-HDC—- C:WINDOWS$NtUninstallKB946648$
2010-08-11 02:17:52 —-HDC—- C:WINDOWS$NtUninstallKB956803$
2010-08-11 02:17:45 —-HDC—- C:WINDOWS$NtUninstallKB960859$
2010-08-11 02:17:33 —-HDC—- C:WINDOWS$NtUninstallKB971468$
2010-08-11 02:17:03 —-HDC—- C:WINDOWS$NtUninstallKB979683$
2010-08-11 02:16:55 —-HDC—- C:WINDOWS$NtUninstallKB981350$
2010-08-11 02:16:48 —-HDC—- C:WINDOWS$NtUninstallKB974318$
2010-08-11 02:16:36 —-HDC—- C:WINDOWS$NtUninstallKB969059$
2010-08-11 02:15:59 —-HDC—- C:WINDOWS$NtUninstallKB2229593$
2010-08-11 02:15:52 —-HDC—- C:WINDOWS$NtUninstallKB950974$
2010-08-11 02:15:44 —-HDC—- C:WINDOWS$NtUninstallKB978037$
2010-08-11 02:15:36 —-HDC—- C:WINDOWS$NtUninstallKB975713$
2010-08-11 02:15:29 —-HDC—- C:WINDOWS$NtUninstallKB971657$
2010-08-11 02:15:21 —-HDC—- C:WINDOWS$NtUninstallKB978338$
2010-08-11 02:15:15 —-HDC—- C:WINDOWS$NtUninstallKB960225$
2010-08-11 02:15:08 —-HDC—- C:WINDOWS$NtUninstallKB961501$
2010-08-11 02:12:48 —-HDC—- C:WINDOWS$NtUninstallKB975025$
2010-08-11 02:12:41 —-HDC—- C:WINDOWS$NtUninstallKB970238$
2010-08-11 02:12:33 —-HDC—- C:WINDOWS$NtUninstallKB978695_WM9$
2010-08-11 02:12:30 —-HDC—- C:WINDOWS$NtUninstallKB956802$
2010-08-11 02:12:20 —-HDC—- C:WINDOWS$NtUninstallKB944338-v2$
2010-08-11 02:12:16 —-HDC—- C:WINDOWS$NtUninstallKB975467$
2010-08-11 02:11:45 —-HDC—- C:WINDOWS$NtUninstallKB968389$
2010-08-10 22:03:03 —-D—- C:Program FilesMSBuild
2010-08-10 22:03:00 —-D—- C:WINDOWSsystem32XPSViewer
2010-08-10 22:02:56 —-D—- C:WINDOWSsystem32en-us
2010-08-10 22:02:55 —-D—- C:Program FilesReference Assemblies
2010-08-10 22:02:23 —-N—- C:WINDOWSsystem32spmsg2.dll
2010-08-10 22:02:04 —-HDC—- C:WINDOWS$NtUninstallWIC$
2010-08-10 22:01:58 —-D—- C:Program FilesMSXML 6.0
2010-08-10 20:06:48 —-N—- C:WINDOWSsystem32driversbthport.sys
2010-08-10 11:44:11 —-HDC—- C:WINDOWS$NtUninstallKB974112$
2010-08-10 11:43:25 —-HDC—- C:WINDOWS$NtUninstallKB952004$
2010-08-10 11:42:55 —-HDC—- C:WINDOWS$NtUninstallKB974571$
2010-08-10 11:42:08 —-HDC—- C:WINDOWS$NtUninstallKB975560$
2010-08-10 11:41:52 —-HDC—- C:WINDOWS$NtUninstallKB973507$
2010-08-10 11:41:39 —-HDC—- C:WINDOWS$NtUninstallKB977816$
2010-08-10 11:40:44 —-HDC—- C:WINDOWS$NtUninstallKB973687$
2010-08-10 11:40:22 —-HDC—- C:WINDOWS$NtUninstallKB979559$
2010-08-10 11:39:47 —-HDC—- C:WINDOWS$NtUninstallKB967715$
2010-08-10 11:39:36 —-HDC—- C:WINDOWS$NtUninstallKB960803$
2010-08-10 11:39:20 —-HDC—- C:WINDOWS$NtUninstallKB973815$
2010-08-10 11:38:27 —-HDC—- C:WINDOWS$NtUninstallKB975562$
2010-08-10 11:37:20 —-HDC—- C:WINDOWS$NtUninstallKB971032$
2010-08-09 22:38:56 —-HDC—- C:WINDOWS$NtUninstallKB958869$
2010-08-09 22:38:38 —-HDC—- C:WINDOWS$NtUninstallKB954155_WM9$
2010-08-09 22:38:05 —-HDC—- C:WINDOWS$NtUninstallKB980195$
2010-08-09 22:37:29 —-HDC—- C:WINDOWS$NtUninstallKB980232$
2010-08-09 22:37:07 —-HDC—- C:WINDOWS$NtUninstallKB955759$
2010-08-09 22:36:28 —-HDC—- C:WINDOWS$NtUninstallKB972270$
2010-08-09 22:35:11 —-HDC—- C:WINDOWS$NtUninstallKB956844$
2010-08-09 22:34:51 —-HDC—- C:WINDOWS$NtUninstallKB973869$
2010-08-09 22:34:36 —-HDC—- C:WINDOWS$NtUninstallKB950762$
2010-08-09 22:34:26 —-HDC—- C:WINDOWS$NtUninstallKB981793$
2010-08-09 22:33:50 —-HDC—- C:WINDOWS$NtUninstallKB978601$
2010-08-09 22:33:11 —-HDC—- C:WINDOWS$NtUninstallKB952287$
2010-08-09 22:32:28 —-HDC—- C:WINDOWS$NtUninstallKB973904$
2010-08-09 22:32:17 —-HDC—- C:WINDOWS$NtUninstallKB950760$
2010-08-09 22:31:56 —-HDC—- C:WINDOWS$NtUninstallKB974392$
2010-08-09 22:30:42 —-HDC—- C:WINDOWS$NtUninstallKB977914$
2010-08-09 22:29:52 —-HDC—- C:WINDOWS$NtUninstallKB951748$
2010-08-09 22:29:37 —-HDC—- C:WINDOWS$NtUninstallKB971961$
2010-08-09 22:28:46 —-HDC—- C:WINDOWS$NtUninstallKB978542$
2010-08-09 22:28:27 —-HDC—- C:WINDOWS$NtUninstallKB979309$
2010-08-09 22:27:42 —-HDC—- C:WINDOWS$NtUninstallKB979482$
2010-08-09 22:27:36 —-HDC—- C:WINDOWS$NtUninstallKB978706$
2010-08-09 22:27:00 —-D—- C:WINDOWSServicePackFiles
2010-08-09 22:26:57 —-HDC—- C:WINDOWS$NtUninstallKB958470$
2010-08-09 22:26:49 —-HDC—- C:WINDOWS$NtUninstallKB958644$
2010-08-09 22:26:03 —-HDC—- C:WINDOWS$NtUninstallKB955069$
2010-08-09 22:25:31 —-HDC—- C:WINDOWS$NtUninstallKB979402_WM9L$
2010-08-09 22:19:45 —-HDC—- C:WINDOWS$NtUninstallKB923561$
2010-08-09 20:14:31 —-N—- C:WINDOWSsystem32tzchange.exe
2010-08-09 17:04:52 —-HDC—- C:WINDOWS$NtUninstallKB898461$
2010-08-09 17:04:52 —-HD—- C:WINDOWS$hf_mig$
2010-08-09 16:27:24 —-D—- C:WINDOWSsystem32SoftwareDistribution
2010-08-09 13:48:07 —-A—- C:WINDOWSIE4 Error Log.txt
2010-08-08 20:58:31 —-D—- C:Documents and SettingsAll Users.WINDOWSApplication DataHipSoft
2010-08-08 19:41:07 —-A—- C:WINDOWSgame.ini
2010-08-06 18:31:13 —-D—- C:Program FilesActivision
2010-08-02 21:18:04 —-D—- C:Documents and SettingsАлександрApplication DataAtari

======List of files/folders modified in the last 1 months======

2010-08-13 17:57:22 —-D—- C:WINDOWSsystem32driversetc
2010-08-13 17:57:18 —-D—- C:WINDOWSTemp
2010-08-13 17:57:17 —-D—- C:WINDOWSsystem32
2010-08-13 17:57:17 —-D—- C:WINDOWS
2010-08-13 17:52:31 —-D—- C:WINDOWSPrefetch
2010-08-13 17:05:18 —-D—- C:WINDOWSMicrosoft.NET
2010-08-13 17:05:04 —-RSD—- C:WINDOWSassembly
2010-08-13 12:33:24 —-D—- C:WINDOWSsystem32wbem
2010-08-13 12:33:24 —-D—- C:WINDOWSsystem32drivers
2010-08-12 23:15:04 —-A—- C:WINDOWSSchedLgU.Txt
2010-08-12 23:14:50 —-SHD—- C:WINDOWSInstaller
2010-08-12 23:14:43 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2010-08-12 23:14:25 —-D—- C:WINDOWSWinSxS
2010-08-12 23:12:56 —-HD—- C:WINDOWSinf
2010-08-12 23:12:55 —-RSHDC—- C:WINDOWSsystem32dllcache
2010-08-12 23:12:42 —-A—- C:WINDOWSimsins.BAK
2010-08-12 23:12:07 —-D—- C:Program FilesMovie Maker
2010-08-12 23:09:28 —-D—- C:Program FilesInternet Explorer
2010-08-12 23:09:25 —-D—- C:WINDOWSsystem32CatRoot2
2010-08-12 22:23:02 —-RD—- C:Program Files
2010-08-12 22:08:38 —-D—- C:Documents and Settings
2010-08-12 20:59:17 —-SD—- C:WINDOWSTasks
2010-08-12 18:19:18 —-D—- C:Games
2010-08-11 15:18:48 —-SD—- C:Documents and SettingsАлександрApplication DataMicrosoft
2010-08-11 15:09:13 —-D—- C:Program FilesCommon Files
2010-08-11 02:17:59 —-D—- C:Program FilesMessenger
2010-08-10 22:03:02 —-RSD—- C:WINDOWSFonts
2010-08-10 22:02:30 —-D—- C:WINDOWSsystem32spool
2010-08-10 21:53:25 —-D—- C:WINDOWSsystem32DirectX
2010-08-10 14:10:47 —-D—- C:WINDOWSsystem32Setup
2010-08-10 10:51:44 —-D—- C:WINDOWSAppPatch
2010-08-09 22:28:48 —-D—- C:Program FilesOutlook Express
2010-08-09 16:27:56 —-D—- C:WINDOWSSoftwareDistribution
2010-08-09 16:27:53 —-D—- C:WINDOWSHelp
2010-08-09 13:47:53 —-D—- C:Documents and SettingsАлександрApplication DataAdobe
2010-08-08 20:57:52 —-D—- C:Program FilesAlawar.ru
2010-08-01 12:44:03 —-HD—- C:Program FilesInstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; C:WINDOWSSystem32DriversPxHelp20.sys [2006-08-25 36528]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:WINDOWSSystem32driverssfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:WINDOWSSystem32driverssfhlp02.sys [2005-05-17 6656]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:WINDOWSSystem32driverssfsync02.sys [2004-12-03 20544]
R0 sfsync04;StarForce Protection Synchronization Driver (version 4.x); C:WINDOWSSystem32driverssfsync04.sys [2005-12-13 49664]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:WINDOWSSystem32driverssfvfs02.sys [2005-11-04 63488]
R0 sptd;sptd; C:WINDOWSSystem32Driverssptd.sys [2010-05-09 721904]
R1 AmdPPM;Драйвер AMD HwPState процессора; C:WINDOWSsystem32DRIVERSAmdPPM.sys [2007-04-17 33792]
R1 AsIO;AsIO; C:WINDOWSsystem32driversAsIO.sys [2007-12-17 12400]
R1 WmiAcpi;Интерфейс управления для ACPI Microsoft Windows; C:WINDOWSsystem32DRIVERSwmiacpi.sys [2004-08-04 8832]
R2 ASInsHelp;ASInsHelp; ??C:WINDOWSsystem32driversAsInsHelp32.sys []
R2 atksgt;atksgt; C:WINDOWSsystem32DRIVERSatksgt.sys [2010-05-09 281760]
R2 lirsgt;lirsgt; C:WINDOWSsystem32DRIVERSlirsgt.sys [2010-05-09 25888]
R3 AmdLLD;AMD Low Level Device Driver; C:WINDOWSsystem32DRIVERSAmdLLD.sys [2007-06-29 34304]
R3 ati2mtag;ati2mtag; C:WINDOWSsystem32DRIVERSati2mtag.sys [2009-11-11 4425216]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2005-01-08 138752]
R3 hidusb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2001-10-20 9600]
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-20 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:WINDOWSsystem32DRIVERSASACPI.sys [2004-08-13 5810]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:WINDOWSsystem32DRIVERSRtenicxp.sys [2009-07-28 143360]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:WINDOWSsystem32driversviahduaa.sys [2009-08-17 1390976]
S0 DwProt;DrWeb Protection; C:WINDOWSsystem32driversdwprot.sys []
S1 kbdhid;Драйвер клавиатуры HID; C:WINDOWSsystem32DRIVERSkbdhid.sys [2004-08-17 14848]
S3 a79uigbh;a79uigbh; C:WINDOWSsystem32driversa79uigbh.sys []
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2004-08-04 31616]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-04 26496]
S4 dwshd;dwshd; C:WINDOWSSystem32driversdwshd.sys []
S4 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2001-10-20 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:WINDOWSsystem32Ati2evxx.exe [2009-11-11 602112]
R2 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2008-07-25 69632]
R2 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2010-08-12 153376]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2008-07-25 34312]
S3 DAUpdaterSvc;Dragon Age: Origins — Content Updater; C:GamesDragon Age.Origins And Awakening.v 1.03Dragon Age.Origins And Awakening.v 1.03bin_shipDAUpdaterSvc.Service.exe []
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2007-10-09 36864]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2007-10-11 864256]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2007-10-11 122880]

EOF
Автор

Сообщения