Созданные ответы форума
-
Сообщения
-
Здавствуйте спасибо за помощь.Вообще ноут работает нормально. Только В браузере мазила после первой проверки комбофиксом, окна(пошалим, извращенка, разные лотереи и подобное гамно) стали выскакивать еще чаще и даже на тех сайтах где их раньше не было. Иногда браузер становится вообще не управляемым, выполняется авто переход на сайт извращенка браузер блакируется и всплывает окно с одной кнопкой ОК. Есть предположение что может быть дело в расширениях установленных на мозилу.
Вот список расирений на всякий случай.
Firebug 1.33
Measurelt 0.38
Microsoft.NET Framework Assistant 1.0
ColorZila 2.0.2
Web Deweloper 1.1.6ComboFix 09-04-12.03 — Администрация 2009-04-17 18:24.2 — NTFSx86
Microsoft® Windows Vista™ Home Basic 6.0.6001.1.1251.1.1049.18.501.87 [GMT 4:00]
Running from: d:peopleсашаDesktopComboFix.exe
AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Updated)
.((((((((((((((((((((((((( Files Created from 2009-03-17 to 2009-04-17 )))))))))))))))))))))))))))))))
.2009-04-16 20:38 . 2008-12-06 04:42 376832 —-a-w c:windowssystem32winhttp.dll
2009-04-16 20:38 . 2008-06-06 03:27 562176 —-a-w c:windowssystem32msdtcprx.dll
2009-04-16 20:38 . 2008-06-06 03:27 38912 —-a-w c:windowssystem32xolehlp.dll
2009-04-16 18:13 . 2009-04-16 18:13
d-sha-r C:autorun.inf
2009-04-16 10:17 . 2009-04-16 10:17
d
w c:usersAll UsersWindowsSearch
2009-04-16 10:17 . 2009-04-16 10:17
d
w c:programdataWindowsSearch
2009-04-16 08:36 . 2009-04-16 08:36
d
w c:usersсашаAppDataRoamingMalwarebytes
2009-04-15 19:37 . 2009-04-15 19:37
d
w c:usersАдминистрацияAppDataRoamingMalwarebytes
2009-04-15 19:37 . 2009-04-15 19:37
d
w c:usersAll UsersMalwarebytes
2009-04-15 19:37 . 2009-04-15 19:37
d
w c:programdataMalwarebytes
2009-04-15 19:28 . 2009-04-15 19:29
d
w C:rsit
2009-04-14 16:58 . 2006-03-02 20:42 73728 —-a-w C:pv.exe
2009-04-12 23:14 . 2009-04-17 14:18
d
w c:usersAll UsersSpybot — Search & Destroy
2009-04-12 23:14 . 2009-04-17 14:18
d
w c:programdataSpybot — Search & Destroy
2009-04-12 12:04 . 2009-04-12 12:04
d
w c:usersAll UsersESET
2009-04-12 12:04 . 2009-04-12 12:04
d
w c:programdataESET
2009-04-09 22:55 . 2009-04-11 13:53
d
w c:usersсашамузон №2
2009-04-09 22:55 . 2009-04-11 13:53
d
w c:usersсашамузон №2.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-17 11:51 . 2009-02-05 22:01
d
w c:usersсашаAppDataRoamingAIMP
2009-04-17 04:38 . 2006-11-02 11:18
d
w c:program filesWindows Mail
2009-04-16 19:41 . 2008-01-21 05:59 653312 —-a-w c:windowsSystem32perfh019.dat
2009-04-16 19:41 . 2008-01-21 05:59 125800 —-a-w c:windowsSystem32perfc019.dat
2009-04-16 08:36 . 2009-04-16 08:36
d
w c:usersсашаAppDataRoamingMalwarebytes
2009-04-15 19:37 . 2009-04-15 19:37
d
w c:usersАдминистрацияAppDataRoamingMalwarebytes
2009-04-15 19:29 . 2009-04-15 19:28
d
w c:program filestrend micro
2009-04-13 19:51 . 2009-04-13 19:51
d
w c:program filesSpybot — Search & Destroy
2009-04-12 12:04 . 2009-04-12 12:04
d
w c:program filesESET
2009-04-12 11:23 . 2006-11-02 10:25 51200 —-a-w c:windowsInfinfpub.dat
2009-04-12 11:23 . 2006-11-02 10:25 86016 —-a-w c:windowsInfinfstrng.dat
2009-04-12 11:23 . 2006-11-02 10:25 86016 —-a-w c:windowsInfinfstor.dat
2009-04-04 20:00 . 2009-04-04 20:00
d
w c:program filesSTDU Viewer
2009-04-04 20:00 . 2009-04-04 20:00
d
w c:program filesCommon FilesSTDUtility
2009-03-31 18:20 . 2009-01-06 03:29
d-s—w c:usersАдминистрацияAppDataRoamingMicrosoft
2009-03-31 16:47 . 2009-02-05 21:47
d
w c:usersАдминистрацияAppDataRoamingAIMP
2009-03-30 16:30 . 2009-02-28 13:23
d
w c:program filesOpera
2009-03-29 14:11 . 2009-01-06 15:10
d-s—w c:usersсашаAppDataRoamingMicrosoft
2009-03-28 12:57 . 2009-01-07 14:19
d
w c:usersсашаAppDataRoamingMacromedia
2009-03-25 13:50 . 2009-01-06 04:32
d
w c:program filesCommon FilesInstallShield
2009-03-17 03:38 . 2009-04-16 20:39 40960 —-a-w c:windowsAppPatchapihex86.dll
2009-03-17 03:38 . 2009-04-16 20:39 13824 —-a-w c:windowsSystem32apilogen.dll
2009-03-17 03:38 . 2009-04-16 20:39 24064 —-a-w c:windowsSystem32amxread.dll
2009-03-15 23:11 . 2009-03-15 16:22
d
w c:program filesSWFText
2009-03-14 20:13 . 2009-03-14 20:13 0 —ha-w c:windowssystem32driversMsft_User_WpdRapi_01_00_00.Wdf
2009-03-08 11:34 . 2009-04-08 11:07 914944 —-a-w c:windowsSystem32wininet.dll
2009-03-08 11:34 . 2009-04-08 11:07 43008 —-a-w c:windowsSystem32licmgr10.dll
2009-03-08 11:33 . 2009-04-08 11:07 18944 —-a-w c:windowsSystem32corpol.dll
2009-03-08 11:33 . 2009-04-08 11:07 109056 —-a-w c:windowsSystem32iesysprep.dll
2009-03-08 11:33 . 2009-04-08 11:07 109568 —-a-w c:windowsSystem32PDMSetup.exe
2009-03-08 11:33 . 2009-04-08 11:07 132608 —-a-w c:windowsSystem32ieUnatt.exe
2009-03-08 11:33 . 2009-04-08 11:07 107520 —-a-w c:windowsSystem32RegisterIEPKEYs.exe
2009-03-08 11:33 . 2009-04-08 11:07 107008 —-a-w c:windowsSystem32SetIEInstalledDate.exe
2009-03-08 11:33 . 2009-04-08 11:07 103936 —-a-w c:windowsSystem32SetDepNx.exe
2009-03-08 11:33 . 2009-04-08 11:07 420352 —-a-w c:windowsSystem32vbscript.dll
2009-03-08 11:32 . 2009-04-08 11:07 72704 —-a-w c:windowsSystem32admparse.dll
2009-03-08 11:32 . 2009-04-08 11:07 71680 —-a-w c:windowsSystem32iesetup.dll
2009-03-08 11:32 . 2009-04-08 11:07 66560 —-a-w c:windowsSystem32wextract.exe
2009-03-08 11:32 . 2009-04-08 11:07 169472 —-a-w c:windowsSystem32iexpress.exe
2009-03-08 11:31 . 2009-04-08 11:07 34816 —-a-w c:windowsSystem32imgutil.dll
2009-03-08 11:31 . 2009-04-08 11:07 48128 —-a-w c:windowsSystem32mshtmler.dll
2009-03-08 11:31 . 2009-04-08 11:07 45568 —-a-w c:windowsSystem32mshta.exe
2009-03-08 11:22 . 2009-04-08 11:07 156160 —-a-w c:windowsSystem32msls31.dll
2009-03-03 04:46 . 2009-04-16 20:39 3599328 —-a-w c:windowsSystem32ntkrnlpa.exe
2009-03-03 04:46 . 2009-04-16 20:39 3547632 —-a-w c:windowsSystem32ntoskrnl.exe
2009-03-03 04:39 . 2009-04-16 20:39 183296 —-a-w c:windowsSystem32sdohlp.dll
2009-03-03 04:39 . 2009-04-16 20:39 551424 —-a-w c:windowsSystem32rpcss.dll
2009-03-03 04:39 . 2009-04-16 20:39 26112 —-a-w c:windowsSystem32printfilterpipelineprxy.dll
2009-03-03 04:37 . 2009-04-16 20:39 98304 —-a-w c:windowsSystem32iasrecst.dll
2009-03-03 04:37 . 2009-04-16 20:39 44032 —-a-w c:windowsSystem32iasdatastore.dll
2009-03-03 04:37 . 2009-04-16 20:39 54784 —-a-w c:windowsSystem32iasads.dll
2009-03-03 03:04 . 2009-04-16 20:39 666624 —-a-w c:windowsSystem32printfilterpipelinesvc.exe
2009-03-03 02:38 . 2009-04-16 20:39 17408 —-a-w c:windowsSystem32iashost.exe
2009-03-02 06:38 . 2009-03-02 06:38
d
w c:usersсашаAppDataRoamingOpera
2009-02-28 13:23 . 2009-01-22 04:11
d
w c:usersАдминистрацияAppDataRoamingOpera
2009-02-13 08:49 . 2009-04-16 20:39 72704 —-a-w c:windowsSystem32secur32.dll
2009-02-13 08:49 . 2009-04-16 20:39 1255936 —-a-w c:windowsSystem32lsasrv.dll
2009-02-09 03:10 . 2009-03-11 23:22 2033152 —-a-w c:windowsSystem32win32k.sys
2009-01-23 08:21 . 2009-01-23 08:21 3269 —-a-w C:-20090123.log
2008-01-21 02:57 . 2006-11-02 12:48 174 —sha-w c:program filesdesktop.ini
2009-04-17 14:16 . 2006-11-02 12:45 262144 —sha-w c:windowsServiceProfilesLocalServiceNTUSER.DAT
2009-04-17 14:15 . 2009-04-17 14:15 0 —sha-w c:windowsServiceProfilesLocalServiceAppDataLocallastalive0.dat
2009-04-17 14:15 . 2009-04-17 14:15 0 —sha-w c:windowsServiceProfilesLocalServiceAppDataLocallastalive1.dat
2009-03-19 20:37 . 2009-01-15 20:26 16384 —sha-w c:windowsServiceProfilesLocalServiceAppDataLocalMicrosoftWindowsHistoryHistory.IE5index.dat
2009-03-19 20:37 . 2009-01-15 20:26 32768 —sha-w c:windowsServiceProfilesLocalServiceAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5index.dat
2009-03-19 20:37 . 2009-01-15 20:26 16384 —sha-w c:windowsServiceProfilesLocalServiceAppDataRoamingMicrosoftWindowsCookiesindex.dat
2009-04-17 14:16 . 2006-11-02 12:45 262144 —sha-w c:windowsServiceProfilesNetworkServiceNTUSER.DAT
2009-04-17 04:28 . 2009-01-06 03:22 16384 —sha-w c:windowsSystem32configsystemprofileAppDataLocalMicrosoftWindowsHistoryHistory.IE5index.dat
2009-04-17 04:28 . 2009-01-06 03:22 32768 —sha-w c:windowsSystem32configsystemprofileAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5index.dat
2009-04-17 04:28 . 2009-01-06 03:22 16384 —sha-w c:windowsSystem32configsystemprofileAppDataRoamingMicrosoftWindowsCookiesindex.dat
2009-04-15 08:09 . 2009-02-03 03:48 245760 —sha-w c:windowsSystem32configsystemprofileAppDataRoamingMicrosoftWindowsIETldCacheindex.dat
.((((((((((((((((((((((((((((( SnapShot@2009-04-14_21.08.15,52 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-04-16 20:39 . 2009-03-03 04:32 26112 c:windowswinsxsx86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6001.22389_none_2be9bd5af4bd3b16printfilterpipelineprxy.dll
+ 2009-04-16 20:39 . 2009-03-03 04:39 26112 c:windowswinsxsx86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6001.18226_none_2b9dff39db71a7a1printfilterpipelineprxy.dll
+ 2009-04-16 20:39 . 2009-03-03 04:17 26112 c:windowswinsxsx86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6000.21023_none_2a3e34a2f76b9db7printfilterpipelineprxy.dll
+ 2009-04-16 20:39 . 2009-03-03 04:19 24576 c:windowswinsxsx86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6000.16830_none_29a6eeebde589a97printfilterpipelineprxy.dll
+ 2009-04-16 20:39 . 2009-03-03 02:24 17408 c:windowswinsxsx86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6001.22389_none_d16ab47d4f561502iashost.exe
+ 2009-04-16 20:39 . 2009-03-03 04:28 47104 c:windowswinsxsx86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6001.22389_none_d16ab47d4f561502iasdatastore.dll
+ 2009-04-16 20:39 . 2009-03-03 04:28 57344 c:windowswinsxsx86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6001.22389_none_d16ab47d4f561502iasads.dll
+ 2009-04-16 20:39 . 2009-03-03 04:37 98304 c:windowswinsxsx86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6001.18226_none_d11ef65c360a818diasrecst.dll
+ 2009-04-16 20:39 . 2009-03-03 02:38 17408 c:windowswinsxsx86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6001.18226_none_d11ef65c360a818diashost.exe
+ 2009-04-16 20:39 . 2009-03-03 04:37 44032 c:windowswinsxsx86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6001.18226_none_d11ef65c360a818diasdatastore.dll
+ 2009-04-16 20:39 . 2009-03-03 04:37 54784 c:windowswinsxsx86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6001.18226_none_d11ef65c360a818diasads.dll
+ 2009-04-16 20:39 . 2009-03-03 04:14 97280 c:windowswinsxsx86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6000.21023_none_cfbf2bc5520477a3iasrecst.dll
+ 2009-04-16 20:39 . 2009-03-03 04:14 37888 c:windowswinsxsx86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6000.21023_none_cfbf2bc5520477a3iasdatastore.dll
+ 2009-04-16 20:39 . 2009-03-03 04:14 53248 c:windowswinsxsx86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6000.21023_none_cfbf2bc5520477a3iasads.dll
+ 2009-04-16 20:39 . 2009-03-03 04:16 97280 c:windowswinsxsx86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6000.16830_none_cf27e60e38f17483iasrecst.dll
+ 2009-04-16 20:39 . 2009-03-03 04:16 37888 c:windowswinsxsx86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6000.16830_none_cf27e60e38f17483iasdatastore.dll
+ 2009-04-16 20:39 . 2009-03-03 04:16 53248 c:windowswinsxsx86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6000.16830_none_cf27e60e38f17483iasads.dll
+ 2009-04-16 20:39 . 2009-02-13 08:21 72704 c:windowswinsxsx86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22376_none_a68e7da1761c2defsecur32.dll
+ 2009-04-16 20:39 . 2009-02-13 08:49 72704 c:windowswinsxsx86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18215_none_a644c0145ccecd28secur32.dll
+ 2009-04-16 20:39 . 2009-02-13 07:15 72704 c:windowswinsxsx86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21010_none_a4e2f4e978ca9090secur32.dll
+ 2009-04-16 20:39 . 2009-02-13 07:26 72704 c:windowswinsxsx86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16820_none_a44eb0105fb4d975secur32.dll
+ 2009-04-16 20:38 . 2008-06-06 03:25 38912 c:windowswinsxsx86_microsoft-windows-com-dtc-client_31bf3856ad364e35_6.0.6001.22197_none_4d223d3bd2ae154bxolehlp.dll
+ 2009-04-16 20:38 . 2008-06-06 03:27 38912 c:windowswinsxsx86_microsoft-windows-com-dtc-client_31bf3856ad364e35_6.0.6001.18085_none_4ca16fc8b98a26e2xolehlp.dll
+ 2009-04-16 20:38 . 2008-06-06 03:23 30208 c:windowswinsxsx86_microsoft-windows-com-dtc-client_31bf3856ad364e35_6.0.6000.20852_none_4b623eb9d56b930axolehlp.dll
+ 2009-04-16 20:38 . 2008-06-05 04:50 30208 c:windowswinsxsx86_microsoft-windows-com-dtc-client_31bf3856ad364e35_6.0.6000.16697_none_4ab261cabc69e490xolehlp.dll
+ 2009-04-16 20:39 . 2009-03-21 03:14 13824 c:windowswinsxsx86_microsoft-windows-a..lity-infrastructure_31bf3856ad364e35_6.0.6001.22399_none_7b098a66fa8bd087apilogen.dll
+ 2009-04-16 20:39 . 2009-03-21 03:14 40960 c:windowswinsxsx86_microsoft-windows-a..lity-infrastructure_31bf3856ad364e35_6.0.6001.22399_none_7b098a66fa8bd087apihex86.dll
+ 2009-04-16 20:39 . 2009-03-21 03:14 24064 c:windowswinsxsx86_microsoft-windows-a..lity-infrastructure_31bf3856ad364e35_6.0.6001.22399_none_7b098a66fa8bd087amxread.dll
+ 2009-04-16 20:39 . 2009-03-17 03:38 13824 c:windowswinsxsx86_microsoft-windows-a..lity-infrastructure_31bf3856ad364e35_6.0.6001.18230_none_7ab7ca89e145a508apilogen.dll
+ 2009-04-16 20:39 . 2009-03-17 03:38 40960 c:windowswinsxsx86_microsoft-windows-a..lity-infrastructure_31bf3856ad364e35_6.0.6001.18230_none_7ab7ca89e145a508apihex86.dll
+ 2009-04-16 20:39 . 2009-03-17 03:38 24064 c:windowswinsxsx86_microsoft-windows-a..lity-infrastructure_31bf3856ad364e35_6.0.6001.18230_none_7ab7ca89e145a508amxread.dll
+ 2009-04-16 20:39 . 2009-03-17 03:19 14848 c:windowswinsxsx86_microsoft-windows-a..lity-infrastructure_31bf3856ad364e35_6.0.6000.21029_none_796ed356fd2caf41apilogen.dll
+ 2009-04-16 20:39 . 2009-03-17 03:19 40960 c:windowswinsxsx86_microsoft-windows-a..lity-infrastructure_31bf3856ad364e35_6.0.6000.21029_none_796ed356fd2caf41apihex86.dll
+ 2009-04-16 20:39 . 2009-03-17 03:19 25600 c:windowswinsxsx86_microsoft-windows-a..lity-infrastructure_31bf3856ad364e35_6.0.6000.21029_none_796ed356fd2caf41amxread.dll
+ 2009-04-16 20:39 . 2009-03-17 03:16 14848 c:windowswinsxsx86_microsoft-windows-a..lity-infrastructure_31bf3856ad364e35_6.0.6000.16834_none_78d58d0be41b7973apilogen.dll
+ 2009-04-16 20:39 . 2009-03-17 03:16 40960 c:windowswinsxsx86_microsoft-windows-a..lity-infrastructure_31bf3856ad364e35_6.0.6000.16834_none_78d58d0be41b7973apihex86.dll
+ 2009-04-16 20:39 . 2009-03-17 03:16 25600 c:windowswinsxsx86_microsoft-windows-a..lity-infrastructure_31bf3856ad364e35_6.0.6000.16834_none_78d58d0be41b7973amxread.dll
+ 2009-04-16 20:38 . 2008-06-06 03:27 38912 c:windowsSystem32xolehlp.dll
— 2008-01-21 02:34 . 2008-01-21 02:34 38912 c:windowsSystem32xolehlp.dll
+ 2009-04-16 17:16 . 2009-04-16 17:16 40300 c:windowsSystem32WDISuspendPerformanceDiagnostics_SystemData_S4.bin
+ 2008-01-21 01:58 . 2009-04-17 14:17 40462 c:windowsSystem32WDIShutdownPerformanceDiagnostics_SystemData.bin
+ 2006-11-02 13:02 . 2009-04-17 14:17 68294 c:windowsSystem32WDIBootPerformanceDiagnostics_SystemData.bin
+ 2009-04-17 14:22 . 2006-11-02 09:45 31744 c:windowsSystem32swsc.exe
— 2009-04-14 16:59 . 2006-11-02 09:45 31744 c:windowsSystem32swsc.exe
— 2008-01-21 02:33 . 2008-01-21 02:33 72704 c:windowsSystem32secur32.dll
+ 2009-04-16 20:39 . 2009-02-13 08:49 72704 c:windowsSystem32secur32.dll
— 2008-01-21 02:34 . 2008-01-21 02:34 26112 c:windowsSystem32printfilterpipelineprxy.dll
+ 2009-04-16 20:39 . 2009-03-03 04:39 26112 c:windowsSystem32printfilterpipelineprxy.dll
— 2008-01-21 02:33 . 2008-01-21 02:33 98304 c:windowsSystem32iasrecst.dll
+ 2009-04-16 20:39 . 2009-03-03 04:37 98304 c:windowsSystem32iasrecst.dll
+ 2009-04-16 20:39 . 2009-03-03 02:38 17408 c:windowsSystem32iashost.exe
— 2008-01-21 02:33 . 2008-01-21 02:33 17408 c:windowsSystem32iashost.exe
— 2008-01-21 02:33 . 2008-01-21 02:33 44032 c:windowsSystem32iasdatastore.dll
+ 2009-04-16 20:39 . 2009-03-03 04:37 44032 c:windowsSystem32iasdatastore.dll
— 2008-01-21 02:33 . 2008-01-21 02:33 54784 c:windowsSystem32iasads.dll
+ 2009-04-16 20:39 . 2009-03-03 04:37 54784 c:windowsSystem32iasads.dll
+ 2009-01-06 03:22 . 2009-04-17 04:28 16384 c:windowsSystem32configsystemprofileAppDataRoamingMicrosoftWindowsCookiesindex.dat
— 2009-01-06 03:22 . 2009-04-14 17:00 16384 c:windowsSystem32configsystemprofileAppDataRoamingMicrosoftWindowsCookiesindex.dat
— 2009-01-06 03:22 . 2009-04-14 17:00 32768 c:windowsSystem32configsystemprofileAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5index.dat
+ 2009-01-06 03:22 . 2009-04-17 04:28 32768 c:windowsSystem32configsystemprofileAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5index.dat
+ 2009-01-06 03:22 . 2009-04-17 04:28 16384 c:windowsSystem32configsystemprofileAppDataLocalMicrosoftWindowsHistoryHistory.IE5index.dat
— 2009-01-06 03:22 . 2009-04-14 17:00 16384 c:windowsSystem32configsystemprofileAppDataLocalMicrosoftWindowsHistoryHistory.IE5index.dat
— 2008-01-21 02:34 . 2008-01-21 02:34 13824 c:windowsSystem32apilogen.dll
+ 2009-04-16 20:39 . 2009-03-17 03:38 13824 c:windowsSystem32apilogen.dll
+ 2009-04-16 20:39 . 2009-03-17 03:38 24064 c:windowsSystem32amxread.dll
— 2008-01-21 02:34 . 2008-01-21 02:34 24064 c:windowsSystem32amxread.dll
+ 2009-04-16 20:39 . 2009-03-17 03:38 40960 c:windowsAppPatchapihex86.dll
— 2008-01-21 02:34 . 2008-01-21 02:34 40960 c:windowsAppPatchapihex86.dll
+ 2009-04-16 20:39 . 2009-02-13 08:20 9728 c:windowswinsxsx86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22376_none_a68e7da1761c2deflsass.exe
+ 2008-01-21 02:33 . 2008-01-21 02:33 9728 c:windowswinsxsx86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18215_none_a644c0145ccecd28lsass.exe
+ 2009-04-16 20:39 . 2009-02-13 04:58 7680 c:windowswinsxsx86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21010_none_a4e2f4e978ca9090lsass.exe
+ 2009-04-16 20:39 . 2009-02-13 07:26 7680 c:windowswinsxsx86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16820_none_a44eb0105fb4d975lsass.exe
+ 2009-01-06 15:12 . 2009-04-17 04:44 9812 c:windowsSystem32WDI{86432a0b-3c7d-4ddf-a89c-172faa90485d}S-1-5-21-3430079551-2322447037-2537004244-1001_UserData.bin
+ 2009-01-06 03:41 . 2009-04-17 14:17 6682 c:windowsSystem32WDI{86432a0b-3c7d-4ddf-a89c-172faa90485d}S-1-5-21-3430079551-2322447037-2537004244-1000_UserData.bin
+ 2009-04-16 20:38 . 2008-12-06 04:26 376832 c:windowswinsxsx86_microsoft.windows.winhttp_31bf3856ad364e35_5.1.6001.22323_none_2544fb0bdb4e81f9winhttp.dll
+ 2009-04-16 20:38 . 2008-12-06 04:42 376832 c:windowswinsxsx86_microsoft.windows.winhttp_31bf3856ad364e35_5.1.6001.18178_none_248a4e30c254ef70winhttp.dll
+ 2009-04-16 20:38 . 2008-12-08 04:19 377344 c:windowswinsxsx86_microsoft.windows.winhttp_31bf3856ad364e35_5.1.6000.20971_none_2326ac35de524a0fwinhttp.dll
+ 2009-04-16 20:38 . 2008-12-08 04:34 376832 c:windowswinsxsx86_microsoft.windows.winhttp_31bf3856ad364e35_5.1.6000.16786_none_22973f0ac53847c2winhttp.dll
+ 2009-04-16 20:39 . 2009-03-03 02:03 247296 c:windowswinsxsx86_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_6.0.6001.22389_none_109ee25ca4bb6776WmiPrvSE.exe
+ 2009-04-16 20:39 . 2009-03-03 04:33 499200 c:windowswinsxsx86_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_6.0.6001.22389_none_109ee25ca4bb6776WmiPrvSD.dll
+ 2009-04-16 20:39 . 2009-03-03 04:33 129024 c:windowswinsxsx86_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_6.0.6001.22389_none_109ee25ca4bb6776WmiDcPrv.dll
+ 2009-04-16 20:39 . 2009-03-03 02:16 247296 c:windowswinsxsx86_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_6.0.6001.18226_none_1053243b8b6fd401WmiPrvSE.exe
+ 2009-04-16 20:39 . 2009-03-03 04:40 499200 c:windowswinsxsx86_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_6.0.6001.18226_none_1053243b8b6fd401WmiPrvSD.dll
+ 2009-04-16 20:39 . 2009-03-03 04:40 129024 c:windowswinsxsx86_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_6.0.6001.18226_none_1053243b8b6fd401WmiDcPrv.dll
+ 2009-04-16 20:39 . 2009-03-03 01:57 247296 c:windowswinsxsx86_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_6.0.6000.21023_none_0ef359a4a769ca17WmiPrvSE.exe
+ 2009-04-16 20:39 . 2009-03-03 04:18 501760 c:windowswinsxsx86_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_6.0.6000.21023_none_0ef359a4a769ca17WmiPrvSD.dll
+ 2009-04-16 20:39 . 2009-03-03 04:18 130560 c:windowswinsxsx86_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_6.0.6000.21023_none_0ef359a4a769ca17WmiDcPrv.dll
+ 2009-04-16 20:39 . 2009-03-03 01:59 247296 c:windowswinsxsx86_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_6.0.6000.16830_none_0e5c13ed8e56c6f7WmiPrvSE.exe
+ 2009-04-16 20:39 . 2009-03-03 04:20 501760 c:windowswinsxsx86_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_6.0.6000.16830_none_0e5c13ed8e56c6f7WmiPrvSD.dll
+ 2009-04-16 20:39 . 2009-03-03 04:20 130560 c:windowswinsxsx86_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_6.0.6000.16830_none_0e5c13ed8e56c6f7WmiDcPrv.dll
+ 2009-04-16 20:39 . 2009-03-03 04:28 615424 c:windowswinsxsx86_microsoft-windows-wmi-core-fastprox-dll_31bf3856ad364e35_6.0.6001.22389_none_fb85772b93130197fastprox.dll
+ 2009-04-16 20:39 . 2009-03-03 04:36 615424 c:windowswinsxsx86_microsoft-windows-wmi-core-fastprox-dll_31bf3856ad364e35_6.0.6001.18226_none_fb39b90a79c76e22fastprox.dll
+ 2009-04-16 20:39 . 2009-03-03 04:14 614912 c:windowswinsxsx86_microsoft-windows-wmi-core-fastprox-dll_31bf3856ad364e35_6.0.6000.21023_none_f9d9ee7395c16438fastprox.dll
+ 2009-04-16 20:39 . 2009-03-03 04:16 614912 c:windowswinsxsx86_microsoft-windows-wmi-core-fastprox-dll_31bf3856ad364e35_6.0.6000.16830_none_f942a8bc7cae6118fastprox.dll
+ 2009-04-16 20:39 . 2009-03-03 02:49 666624 c:windowswinsxsx86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6001.22389_none_2be9bd5af4bd3b16printfilterpipelinesvc.exe
+ 2009-04-16 20:39 . 2009-03-03 03:04 666624 c:windowswinsxsx86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6001.18226_none_2b9dff39db71a7a1printfilterpipelinesvc.exe
+ 2009-04-16 20:39 . 2009-03-03 02:37 659456 c:windowswinsxsx86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6000.21023_none_2a3e34a2f76b9db7printfilterpipelinesvc.exe
+ 2009-04-16 20:39 . 2009-03-03 02:40 654336 c:windowswinsxsx86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6000.16830_none_29a6eeebde589a97printfilterpipelinesvc.exe
+ 2009-04-16 20:39 . 2009-03-03 04:32 324608 c:windowswinsxsx86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6001.22389_none_d16ab47d4f561502sdohlp.dll
+ 2009-04-16 20:39 . 2009-03-03 04:28 119296 c:windowswinsxsx86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6001.22389_none_d16ab47d4f561502iasrecst.dll
+ 2009-04-16 20:39 . 2009-03-03 04:39 183296 c:windowswinsxsx86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6001.18226_none_d11ef65c360a818dsdohlp.dll
+ 2009-04-16 20:39 . 2009-03-03 04:17 158720 c:windowswinsxsx86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6000.21023_none_cfbf2bc5520477a3sdohlp.dll
+ 2009-04-16 20:39 . 2009-03-03 04:19 158720 c:windowswinsxsx86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6000.16830_none_cf27e60e38f17483sdohlp.dll
+ 2009-04-16 20:39 . 2009-01-30 00:29 441400 c:windowswinsxsx86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22376_none_a68e7da1761c2defksecdd.sys
+ 2008-01-21 02:33 . 2008-01-21 02:33 441400 c:windowswinsxsx86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18215_none_a644c0145ccecd28ksecdd.sys
+ 2009-04-16 20:39 . 2007-12-13 19:56 407144 c:windowswinsxsx86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21010_none_a4e2f4e978ca9090ksecdd.sys
+ 2009-04-16 20:39 . 2007-12-14 21:35 407144 c:windowswinsxsx86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16820_none_a44eb0105fb4d975ksecdd.sys
+ 2009-04-16 20:39 . 2009-02-13 08:21 890880 c:windowswinsxsx86_microsoft-windows-kernel32_31bf3856ad364e35_6.0.6001.22376_none_9401d8206f9c7e67kernel32.dll
+ 2009-04-16 20:39 . 2009-02-13 08:49 888832 c:windowswinsxsx86_microsoft-windows-kernel32_31bf3856ad364e35_6.0.6001.18215_none_93b81a93564f1da0kernel32.dll
+ 2009-04-16 20:39 . 2009-02-13 07:13 875520 c:windowswinsxsx86_microsoft-windows-kernel32_31bf3856ad364e35_6.0.6000.21010_none_92564f68724ae108kernel32.dll
+ 2009-04-16 20:39 . 2009-02-13 07:26 875520 c:windowswinsxsx86_microsoft-windows-kernel32_31bf3856ad364e35_6.0.6000.16820_none_91c20a8f593529edkernel32.dll
+ 2009-04-16 20:38 . 2008-06-06 03:23 562176 c:windowswinsxsx86_microsoft-windows-com-dtc-client_31bf3856ad364e35_6.0.6001.22197_none_4d223d3bd2ae154bmsdtcprx.dll
+ 2009-04-16 20:38 . 2008-06-06 03:27 562176 c:windowswinsxsx86_microsoft-windows-com-dtc-client_31bf3856ad364e35_6.0.6001.18085_none_4ca16fc8b98a26e2msdtcprx.dll
+ 2009-04-16 20:38 . 2008-06-06 03:21 500736 c:windowswinsxsx86_microsoft-windows-com-dtc-client_31bf3856ad364e35_6.0.6000.20852_none_4b623eb9d56b930amsdtcprx.dll
+ 2009-04-16 20:38 . 2008-06-05 04:50 500736 c:windowswinsxsx86_microsoft-windows-com-dtc-client_31bf3856ad364e35_6.0.6000.16697_none_4ab261cabc69e490msdtcprx.dll
+ 2009-04-16 20:39 . 2009-03-03 04:32 551424 c:windowswinsxsx86_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.0.6001.22389_none_6a06ffcd57365bebrpcss.dll
+ 2009-04-16 20:39 . 2009-03-03 04:39 551424 c:windowswinsxsx86_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.0.6001.18226_none_69bb41ac3deac876rpcss.dll
+ 2009-04-16 20:39 . 2009-03-03 04:17 550400 c:windowswinsxsx86_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.0.6000.21023_none_685b771559e4be8crpcss.dll
+ 2009-04-16 20:39 . 2009-03-03 04:19 549888 c:windowswinsxsx86_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.0.6000.16830_none_67c4315e40d1bb6crpcss.dll
+ 2009-04-16 20:38 . 2008-12-06 04:42 376832 c:windowsSystem32winhttp.dll
— 2008-01-21 02:34 . 2008-01-21 02:34 376832 c:windowsSystem32winhttp.dll
+ 2009-01-06 23:40 . 2009-04-16 10:17 213862 c:windowsSystem32WDISuspendPerformanceDiagnostics_SystemData_S3.bin
+ 2009-04-16 20:39 . 2009-03-03 02:16 247296 c:windowsSystem32wbemWmiPrvSE.exe
+ 2009-04-16 20:39 . 2009-03-03 04:40 499200 c:windowsSystem32wbemWmiPrvSD.dll
+ 2009-04-16 20:39 . 2009-03-03 04:40 129024 c:windowsSystem32wbemWmiDcPrv.dll
+ 2009-04-16 20:39 . 2009-03-03 04:36 615424 c:windowsSystem32wbemfastprox.dll
— 2008-01-21 02:33 . 2008-01-21 02:33 183296 c:windowsSystem32sdohlp.dll
+ 2009-04-16 20:39 . 2009-03-03 04:39 183296 c:windowsSystem32sdohlp.dll
+ 2009-04-16 20:39 . 2009-03-03 04:39 551424 c:windowsSystem32rpcss.dll
+ 2009-04-16 20:39 . 2009-03-03 03:04 666624 c:windowsSystem32printfilterpipelinesvc.exe
— 2008-01-21 05:59 . 2009-04-12 21:03 653312 c:windowsSystem32perfh019.dat
+ 2008-01-21 05:59 . 2009-04-16 19:41 653312 c:windowsSystem32perfh019.dat
— 2006-11-02 10:33 . 2009-04-12 21:03 587178 c:windowsSystem32perfh009.dat
+ 2006-11-02 10:33 . 2009-04-16 19:41 587178 c:windowsSystem32perfh009.dat
+ 2008-01-21 05:59 . 2009-04-16 19:41 125800 c:windowsSystem32perfc019.dat
— 2008-01-21 05:59 . 2009-04-12 21:03 125800 c:windowsSystem32perfc019.dat
+ 2006-11-02 10:33 . 2009-04-16 19:41 101250 c:windowsSystem32perfc009.dat
— 2006-11-02 10:33 . 2009-04-12 21:03 101250 c:windowsSystem32perfc009.dat
+ 2009-04-16 20:38 . 2008-06-06 03:27 562176 c:windowsSystem32msdtcprx.dll
+ 2009-04-16 20:39 . 2009-02-13 08:49 888832 c:windowsSystem32kernel32.dll
— 2009-02-03 03:48 . 2009-04-12 11:02 245760 c:windowsSystem32configsystemprofileAppDataRoamingMicrosoftWindowsIETldCacheindex.dat
+ 2009-02-03 03:48 . 2009-04-15 08:09 245760 c:windowsSystem32configsystemprofileAppDataRoamingMicrosoftWindowsIETldCacheindex.dat
+ 2006-11-02 12:45 . 2009-04-17 14:16 262144 c:windowsServiceProfilesNetworkServiceNTUSER.DAT
— 2006-11-02 12:45 . 2009-04-14 09:22 262144 c:windowsServiceProfilesNetworkServiceNTUSER.DAT
— 2006-11-02 12:45 . 2009-04-14 17:07 262144 c:windowsServiceProfilesLocalServiceNTUSER.DAT
+ 2006-11-02 12:45 . 2009-04-17 14:16 262144 c:windowsServiceProfilesLocalServiceNTUSER.DAT
— 2009-04-14 17:01 . 2005-10-20 16:02 163328 c:windowsERDNTHiv-backupERDNT.EXE
+ 2009-04-17 14:23 . 2005-10-20 16:02 163328 c:windowsERDNTHiv-backupERDNT.EXE
+ 2009-04-16 20:39 . 2009-03-03 04:37 3548656 c:windowswinsxsx86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.22389_none_6c6c8571cd797017ntoskrnl.exe
+ 2009-04-16 20:39 . 2009-03-03 04:37 3600880 c:windowswinsxsx86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.22389_none_6c6c8571cd797017ntkrnlpa.exe
+ 2009-04-16 20:39 . 2009-03-03 04:46 3547632 c:windowswinsxsx86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.18226_none_6c20c750b42ddca2ntoskrnl.exe
+ 2009-04-16 20:39 . 2009-03-03 04:46 3599328 c:windowswinsxsx86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.18226_none_6c20c750b42ddca2ntkrnlpa.exe
+ 2009-04-16 20:39 . 2009-03-03 04:22 3471328 c:windowswinsxsx86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.21023_none_6ac0fcb9d027d2b8ntoskrnl.exe
+ 2009-04-16 20:39 . 2009-03-03 04:22 3505120 c:windowswinsxsx86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.21023_none_6ac0fcb9d027d2b8ntkrnlpa.exe
+ 2009-04-16 20:39 . 2009-03-03 04:24 3469280 c:windowswinsxsx86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16830_none_6a29b702b714cf98ntoskrnl.exe
+ 2009-04-16 20:39 . 2009-03-03 04:24 3503584 c:windowswinsxsx86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16830_none_6a29b702b714cf98ntkrnlpa.exe
+ 2009-04-16 20:39 . 2009-03-13 22:23 2409784 c:windowswinsxsx86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22395_none_f2b56ce184dc676bOESpamFilter.dat
+ 2009-04-16 20:39 . 2009-03-13 22:26 2409784 c:windowswinsxsx86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18229_none_f27b80b26b826966OESpamFilter.dat
+ 2009-04-16 20:39 . 2009-03-13 22:24 2409784 c:windowswinsxsx86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.21027_none_f11cb665877b78d3OESpamFilter.dat
+ 2009-04-16 20:39 . 2009-03-13 22:24 2409784 c:windowswinsxsx86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16833_none_f08470646e695c5cOESpamFilter.dat
+ 2009-04-16 20:39 . 2009-02-13 08:21 1257472 c:windowswinsxsx86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22376_none_a68e7da1761c2deflsasrv.dll
+ 2009-04-16 20:39 . 2009-02-13 08:49 1255936 c:windowswinsxsx86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18215_none_a644c0145ccecd28lsasrv.dll
+ 2009-04-16 20:39 . 2009-02-13 07:13 1234432 c:windowswinsxsx86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21010_none_a4e2f4e978ca9090lsasrv.dll
+ 2009-04-16 20:39 . 2009-02-13 07:26 1233408 c:windowswinsxsx86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16820_none_a44eb0105fb4d975lsasrv.dll
— 2006-11-02 10:22 . 2009-04-08 11:23 6029312 c:windowsSystem32SMIStoreMachineSCHEMA.DAT
+ 2006-11-02 10:22 . 2009-04-17 14:14 6029312 c:windowsSystem32SMIStoreMachineSCHEMA.DAT
+ 2009-04-16 20:39 . 2009-03-03 04:46 3547632 c:windowsSystem32ntoskrnl.exe
+ 2009-04-16 20:39 . 2009-03-03 04:46 3599328 c:windowsSystem32ntkrnlpa.exe
+ 2009-04-16 20:39 . 2009-02-13 08:49 1255936 c:windowsSystem32lsasrv.dll
— 2008-01-21 02:33 . 2008-01-21 02:33 1255936 c:windowsSystem32lsasrv.dll
+ 2006-11-02 10:24 . 2009-04-06 14:57 24921544 c:windowsSystem32mrt.exe
+ 2008-01-21 05:46 . 2009-04-16 20:37 116188874 c:windowswinsxsManifestCache6.0.6001.18000_001c50b5_blobs.bin
.
— Snapshot reset to current date —
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
«ISUSPM Startup»=»c:program filesCommon FilesInstallShieldUpdateServiceISUSPM.exe» [2005-08-11 249856]
«SpybotSD TeaTimer»=»c:program filesSpybot — Search & DestroyTeaTimer.exe» [2009-01-26 2144088][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
«SynTPEnh»=»c:program filesSynapticsSynTPSynTPEnh.exe» [2006-11-16 815104]
«IgfxTray»=»c:windowssystem32igfxtray.exe» [2008-02-11 141848]
«HotKeysCmds»=»c:windowssystem32hkcmd.exe» [2008-02-11 166424]
«Persistence»=»c:windowssystem32igfxpers.exe» [2008-02-11 133656]
«egui»=»c:program filesESETESET NOD32 Antivirusegui.exe» [2008-07-01 1447168]c:usersЂ¤¬ЁЁбва жЁпAppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
Adobe Gamma.lnk — c:program filesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe [2005-03-16 113664]
Create virtual drive for Denwer.lnk — c:webserversdenwerBoot.exe [2009-01-11 6656]c:programdataMicrosoftWindowsStart MenuProgramsStartup
Empowering Technology Launcher.lnk — c:acerEmpowering TechnologyeAPLauncher.exe [2009-01-23 528384][HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionpoliciessystem]
«EnableUIADesktopToggle»= 0 (0x0)[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregeDataSecurity Loader]
—a
2007-01-02 19:58 464168 c:acerEmpowering TechnologyeDataSecurityeDSloader.exe[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregISUSScheduler]
—a
2005-08-11 17:30 81920 c:program filesCommon FilesInstallShieldUpdateServiceissch.exe[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregWindows Mobile-based device management]
—a
2008-01-21 06:32 215552 c:windowsWindowsMobilewmdSync.exe[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregRtHDVCpl]
—a
2006-12-01 09:37 4186112 c:windowsRtHDVCpl.exe[HKLM~servicessharedaccessparametersfirewallpolicyFirewallRules]
«{56034B0D-0BED-498B-AA4B-838097F64E0B}»= UDP:990:LocalSubnet:LocalSubnet|IF={1ACAA9DE-70A2-4E15-BC04-5FB66936FD01}|%SystemRoot%system32svchost.exe|Svc=rapimgr:@%systemroot%WindowsMobilewmdSync.exe,-4001[HKLM~servicessharedaccessparametersfirewallpolicyStandardProfileAuthorizedApplicationsList]
«c:\Acer\Empowering Technology\eDataSecurity\eDSfsu.exe»= c:acerEmpowering TechnologyeDataSecurityeDSfsu.exe:*:Enabled:eDSfsu
«c:\Acer\Empowering Technology\eDataSecurity\encryption.exe»= c:acerEmpowering TechnologyeDataSecurityencryption.exe:*:Enabled:encryption
«c:\Acer\Empowering Technology\eDataSecurity\decryption.exe»= c:acerEmpowering TechnologyeDataSecuritydecryption.exe:*:Enabled:decryptionS1 epfwtdir;epfwtdir;c:windowssystem32DRIVERSepfwtdir.sys [2008-07-01 34312]
S2 ekrn;Eset Service;c:program filesESETESET NOD32 Antivirusekrn.exe [2008-07-01 468224]
S2 SBSDWSCService;SBSD Security Center Service;c:program filesSpybot — Search & DestroySDWinSec.exe [2009-01-26 1153368][HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionsvchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr[HKEY_LOCAL_MACHINEsoftwaremicrosoftactive setupinstalled components>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
«c:windowsSystem32rundll32.exe» «c:windowsSystem32iedkcs32.dll»,BrandIEActiveSetup SIGNUP
.
Contents of the ‘Scheduled Tasks’ folder2009-04-15 c:windowsTasksSpybot — Search & Destroy — Scheduled Task.job
— c:program filesSpybot — Search & DestroySpybotSD.exe [2009-01-26 15:31]2009-04-17 c:windowsTasksUser_Feed_Synchronization-{88072213-9E7B-4119-BAF2-C8D9FF544B61}.job
— c:windowssystem32msfeedssync.exe [2009-03-08 15:31]
.
.
Supplementary Scan
.
IE: &Экспорт в Microsoft Excel — c:progra~1MICROS~2OFFICE11EXCEL.EXE/3000
LSP: c:windowssystem32wpclsp.dll
FF — ProfilePath — c:usersАдминистрацияAppDataRoamingMozillaFirefoxProfilesvw0gz0c5.default
.**************************************************************************
catchme 0.3.1375 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-04-17 18:29
Windows 6.0.6001 Service Pack 1 NTFSscanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0**************************************************************************
.
Completion time: 2009-04-17 18:31
ComboFix-quarantined-files.txt 2009-04-17 14:31Pre-Run: 10 018 095 104 байт свободно
Post-Run: 9,891,393,536 байт свободно350 — E O F — 2009-04-17 04:33
