Созданные ответы форума
-
Сообщения
-
Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.comPlatform: Windows XP
*******************
Script file opened successfully.
Script file read successfully.Backups directory opened successfully at C:Avenger
*******************
Beginning to process script file:
Rootkit scan active.
No rootkits found!File «C:WINDOWSsystem32acnlib.dll» deleted successfully.
File «C:WINDOWSsystem32vdllib.dll» deleted successfully.
Registry key «HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{2F618221-8B2E-4C31-863A-FAA3160B99DA}» deleted successfully.
Registry key «HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{F57F96E7-2192-46BF-B459-97494D0862AD}» deleted successfully.Completed script processing.
*******************
Finished! Terminate.
Logfile of random’s system information tool 1.05 (written by random/random)
Run by Mihail at 2009-01-17 23:15:39
Microsoft Windows XP Professional Service Pack 3
System drive C: has 19 GB (64%) free of 30 GB
Total RAM: 503 MB (53% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:15:47, on 17.01.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20861)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesJavajre6binjqs.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:Program FilesCyberLinkShared filesRichVideo.exe
C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindService.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32CAP3RSK.EXE
C:Program FilesNeoSmart TechnologiesToolTipFixerToolTipFixer.exe
C:WINDOWSSYSTEM32SPOOLDRIVERSW32X863CAP3SWK.EXE
C:Program FilesUPHCleanuphclean.exe
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
C:WINDOWSExplorer.EXE
C:PROGRA~1ALWILS~1Avast4ashDisp.exe
C:WINDOWSsystem32igfxtray.exe
C:WINDOWSsystem32hkcmd.exe
C:WINDOWSsystem32igfxpers.exe
C:Program FilesCommon FilesAheadLibNMBgMonitor.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesTrident SoftwarePragmapragma.exe
C:Program FilesMYiE2 RUMyIE.exe
C:Documents and SettingsMihailРабочий столRSIT.exe
C:Program Filestrend microMihail.exeR0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,First Home Page = http://go.microsoft.com/fwlink/?LinkId=54843
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: Java(tm) Plug-In SSV Helper — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre6binssv.dll
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — D:PROGRA~1DOWNLO~1dmiehlp.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl Class — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 — Toolbar: DM Bar — {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — D:Program FilesDownload Masterdmbar.dll
O4 — HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 — HKLM..Run: [igfxtray] C:WINDOWSsystem32igfxtray.exe
O4 — HKLM..Run: [igfxhkcmd] C:WINDOWSsystem32hkcmd.exe
O4 — HKLM..Run: [igfxpers] C:WINDOWSsystem32igfxpers.exe
O4 — HKLM..Run: [Pragma5] C:Program FilesTrident SoftwarePragmaprestart.exe
O4 — HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] «C:Program FilesCommon FilesAheadLibNMBgMonitor.exe»
O4 — HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE7_011] regsvr32 /s /n /i:u shell32 (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [IE7_011] regsvr32 /s /n /i:u shell32 (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [IE7_011] regsvr32 /s /n /i:u shell32 (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [IE7_011] regsvr32 /s /n /i:u shell32 (User ‘Default user’)
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — D:Program FilesDownload Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — D:Program FilesDownload Masterdmie.htm
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — D:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — D:Program FilesDownload Masterdmaster.exe
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O10 — Unknown file in Winsock LSP: c:windowssystem32nwprovau.dll
O16 — DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) — http://www.kaspersky.com/kos/russian/partner/rus/kavwebscan_unicode.cab
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 — HKLMSystemCCSServicesTcpip..{FB59B546-9AB3-42DF-8291-15923B7A200B}: NameServer = 193.151.13.5
O23 — Service: avast! iAVS4 Control Service (aswUpdSv) — ALWIL Software — C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 — Service: avast! Antivirus — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 — Service: avast! Mail Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 — Service: avast! Web Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — C:Program FilesJavajre6binjqs.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: PsViatau (PTsup5) — Trident Software — C:Program FilesTrident SoftwarePragmaptsup5.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — C:Program FilesCyberLinkShared filesRichVideo.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: ServiceLayer — Nokia. — C:Program FilesPC Connectivity SolutionServiceLayer.exe
O23 — Service: StarWind iSCSI Service (StarWindService) — Rocket Division Software — C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindService.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: NST ToolTipFixer (TTFixerService) — NeoSmart Technologies — C:Program FilesNeoSmart TechnologiesToolTipFixerToolTipFixer.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe—
End of file — 8080 bytes======Scheduled tasks folder======
C:WINDOWStasks20081229_205100_Mihail.job
======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-23 62080][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper — C:Program FilesJavajre6binssv.dll [2008-10-26 320920][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — D:PROGRA~1DOWNLO~1dmiehlp.dll [2008-10-24 157696][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2008-10-26 34816][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2008-10-26 73728][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — DM Bar — D:Program FilesDownload Masterdmbar.dll [2007-11-26 180224][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«avast!»=C:PROGRA~1ALWILS~1Avast4ashDisp.exe [2008-11-26 81000]
«igfxtray»=C:WINDOWSsystem32igfxtray.exe [2006-02-07 94208]
«igfxhkcmd»=C:WINDOWSsystem32hkcmd.exe [2006-02-07 77824]
«igfxpers»=C:WINDOWSsystem32igfxpers.exe [2006-02-07 118784]
«Pragma5″=C:Program FilesTrident SoftwarePragmaprestart.exe [2008-02-04 40960][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}»=C:Program FilesCommon FilesAheadLibNMBgMonitor.exe [2005-11-24 94208]
«ctfmon.exe»=C:WINDOWSsystem32ctfmon.exe [2008-04-15 15360][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregALCalendar]
C:PROGRA~1F495~1Calendar.exe [2005-01-16 1003520][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNeroFilterCheck]
C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregPC Suite Tray]
C:Program FilesNokiaNokia PC Suite 7PCSuite.exe [2008-12-03 1205760][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregQIP2005]
C:Program FilesQIPqip.exe [2008-07-01 3256320][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSafonov DuTraffic]
C:Program FilesSafHouseDUTrafficDUTraffic.exe [2004-10-02 1393664][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSkype]
C:Program FilesSkypePhoneSkype.exe /nosplash /minimized [][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregYupdate!]
C:Program FilesCommon FilesYandexYupdateyupdate.exe [][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^Adobe Reader Speed Launch.lnk]
C:PROGRA~1AdobeREADER~1.0ReaderREADER~1.EXE [2006-10-23 40048][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^Adobe Reader Synchronizer.lnk]
C:PROGRA~1AdobeREADER~1.0ReaderADOBEC~1.EXE [2006-10-23 734872][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^Окно состояния Canon LASER SHOT LBP-1120.LNK]
C:WINDOWSsystem32spooldriversw32x863CAP3LAK.EXE [2002-07-29 30720][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyigfxcui]
C:WINDOWSsystem32igfxdev.dll [2006-02-07 139264][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32wpdshserviceobj.dll [2007-06-18 133632]
UPnPMonitor — {e57ce738-33e8-4c51-8354-bb4de9d215d1} — C:WINDOWSsystem32upnpui.dll [2008-04-15 239616][HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa]
«authentication packages»=msv1_0
nwprovau[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWdf01000.sys]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWdf01000.sys]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:Program FilesCommon FilesNokiaService LayerAnsl_host_process.exe»=»C:Program FilesCommon FilesNokiaService LayerAnsl_host_process.exe:*:Disabled:Nokia Service Layer Host Process «
«C:Program FilesNokiaNokia Software Updaternsu_ui_client.exe»=»C:Program FilesNokiaNokia Software Updaternsu_ui_client.exe:*:Disabled:Nokia Software Updater»
«C:WINDOWSsystem32sessmgr.exe»=»C:WINDOWSsystem32sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019»
«C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype. The whole world can talk for free.»
«C:Program FilesNeroNero8Nero ShowTimeShowTime.exe»=»C:Program FilesNeroNero8Nero ShowTimeShowTime.exe:*:Disabled:Nero ShowTime»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesTCWLUtilitesInternetManiac.exe»=»C:Program FilesTCWLUtilitesInternetManiac.exe:*:Disabled:Internet Maniac»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»======List of files/folders created in the last 1 months======
2009-01-17 23:15:20 —-D—- C:Новая папка
2009-01-17 22:56:11 —-D—- C:Avenger
2009-01-17 22:56:11 —-A—- C:avenger.txt
2009-01-17 22:35:43 —-D—- C:Documents and SettingsAll UsersApplication DataKaspersky Lab
2009-01-17 22:35:42 —-D—- C:WINDOWSsystem32Kaspersky Lab
2009-01-16 00:01:31 —-A—- C:WINDOWSPragma Uninstaller.exe
2009-01-16 00:01:30 —-D—- C:Program FilesTrident Software
2009-01-15 10:36:56 —-D—- C:Program Filestrend micro
2009-01-15 10:36:54 —-D—- C:rsit
2009-01-14 23:30:17 —-A—- C:instLog.txt
2009-01-14 11:51:35 —-N—- C:WINDOWSsystem32spmsgXP_2k3.dll
2009-01-14 11:51:28 —-HDC—- C:WINDOWS$NtUninstallWdf01007$
2009-01-14 11:48:01 —-A—- C:Log.txt
2009-01-14 11:45:29 —-D—- C:Program FilesCommon FilesPCSuite
2009-01-14 11:45:19 —-D—- C:Program FilesCommon FilesNokia
2009-01-14 11:43:35 —-D—- C:Program FilesPC Connectivity Solution
2009-01-14 11:42:40 —-SHD—- C:Config.Msi
2009-01-14 11:42:13 —-A—- C:WINDOWSsystem32wdfcoinstaller01007.dll
2009-01-13 23:45:30 —-D—- C:Program FilesNokia
2009-01-13 23:33:29 —-A—- C:WINDOWSsystem32wshirda.dll
2009-01-13 23:33:29 —-A—- C:WINDOWSsystem32irmon.dll
2009-01-13 23:33:28 —-A—- C:WINDOWSsystem32irftp.exe
2009-01-13 21:46:16 —-A—- C:rez1.txt
2009-01-08 23:19:51 —-RSD—- C:Program FilesMYiE2 RU
2009-01-06 01:05:27 —-D—- C:Documents and SettingsAll UsersApplication DataVistaCodecs
2009-01-05 22:54:03 —-D—- C:Program FilesWEBaby
2009-01-04 10:44:08 —-A—- C:WINDOWSsystem32ptpusb.dll
2009-01-04 10:44:06 —-A—- C:WINDOWSsystem32ptpusd.dll
2008-12-28 03:05:27 —-D—- C:Documents and SettingsMihailApplication DataObsidium
2008-12-28 01:12:37 —-A—- C:WINDOWSsystem32igfxres.dll
2008-12-28 01:10:01 —-D—- C:WINDOWSPrefetch
2008-12-28 01:01:49 —-A—- C:WINDOWSOEWABLog.txt
2008-12-28 01:00:38 —-RAH—- C:WINDOWSsystem32logonui.exe.manifest
2008-12-28 01:00:23 —-HD—- C:Program FilesWindowsUpdate
2008-12-28 00:58:11 —-D—- C:Program FilesComPlus Applications
2008-12-28 00:45:48 —-A—- C:WINDOWSsystem32spxcoins.dll
2008-12-28 00:45:48 —-A—- C:WINDOWSsystem32irclass.dll
2008-12-28 00:44:15 —-A—- C:WINDOWSsetuplog.txt
2008-12-28 00:06:42 —-D—- C:Program FilesABBYY Lingvo X3 ME
2008-12-27 19:31:59 —-D—- C:WINDOWSsetup.pss
2008-12-27 18:13:17 —-D—- C:Documents and SettingsAll UsersApplication DataWindows Genuine Advantage
2008-12-26 04:21:37 —-D—- C:Documents and SettingsAll UsersApplication DataABBYY
2008-12-26 00:02:47 —-D—- C:Program FilesElaborate Bytes
2008-12-23 16:25:51 —-A—- C:WINDOWSUPGRADE.TXT
2008-12-21 22:23:00 —-D—- C:Documents and SettingsAll UsersApplication DataDVD X Studios
2008-12-21 19:21:05 —-D—- C:Documents and SettingsMihailApplication DataXilisoft Corporation
2008-12-21 02:08:56 —-D—- C:Documents and SettingsMihailApplication DataURSoft
2008-12-21 02:08:55 —-AD—- C:Documents and SettingsAll UsersApplication DataTEMP
2008-12-21 02:08:48 —-D—- C:Program FilesYour Uninstaller 2008
2008-12-20 18:11:15 —-A—- C:WINDOWSsystem32msvcr80.dll
2008-12-20 18:11:15 —-A—- C:WINDOWSsystem32msvcp80.dll
2008-12-20 15:19:29 —-D—- C:Program FilesNorton WinDoctor======List of files/folders modified in the last 1 months======
2009-01-17 23:15:42 —-D—- C:Temp
2009-01-17 23:12:40 —-D—- C:WINDOWSTemp
2009-01-17 23:09:54 —-AD—- C:WINDOWS
2009-01-17 22:56:43 —-D—- C:WINDOWSsystem32drivers
2009-01-17 22:56:11 —-D—- C:WINDOWSsystem32
2009-01-17 22:55:45 —-D—- C:WINDOWSsystem32CatRoot2
2009-01-17 22:35:43 —-SD—- C:WINDOWSDownloaded Program Files
2009-01-17 22:35:41 —-HD—- C:WINDOWSinf
2009-01-17 20:13:51 —-A—- C:WINDOWSSchedLgU.Txt
2009-01-17 20:13:24 —-SH—- C:boot.ini
2009-01-17 20:13:24 —-A—- C:WINDOWSwin.ini
2009-01-17 20:13:24 —-A—- C:WINDOWSsystem.ini
2009-01-17 20:06:41 —-D—- C:Documents and SettingsMihailApplication DataThe Bat!
2009-01-16 00:01:30 —-AD—- C:Program Files
2009-01-15 19:04:08 —-D—- C:Documents and SettingsMihailApplication DataWildfire
2009-01-15 00:47:51 —-D—- C:Downloads
2009-01-14 12:07:05 —-AD—- C:Program FilesKMPlayer
2009-01-14 11:53:10 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2009-01-14 11:51:41 —-A—- C:WINDOWSimsins.BAK
2009-01-14 11:46:00 —-SHD—- C:WINDOWSInstaller
2009-01-14 11:46:00 —-DC—- C:WINDOWSsystem32DRVSTORE
2009-01-14 11:45:29 —-AD—- C:Program FilesCommon Files
2009-01-14 11:41:44 —-D—- C:Documents and SettingsAll UsersApplication DataInstallations
2009-01-13 23:33:30 —-D—- C:WINDOWSMedia
2009-01-13 19:21:29 —-A—- C:WINDOWSNeroDigital.ini
2009-01-13 01:12:17 —-D—- C:Documents and SettingsMihailApplication DataYandex
2009-01-12 23:59:20 —-D—- C:WINDOWSsystem32config
2009-01-12 23:47:55 —-D—- C:Program FilesThe Bat!
2009-01-12 23:09:50 —-D—- C:Documents and Settings
2009-01-12 20:44:05 —-D—- C:WINDOWSHelp
2009-01-06 19:52:35 —-D—- C:Program FilesK-Lite Codec Pack
2009-01-06 02:15:45 —-D—- C:Documents and SettingsMihailApplication DataXnView
2009-01-06 01:33:01 —-A—- C:WINDOWSSumitSoft.ini
2008-12-29 21:39:28 —-D—- C:Documents and SettingsMihailApplication DataAhead
2008-12-29 20:57:06 —-D—- C:WINDOWSrepair
2008-12-29 20:56:43 —-D—- C:WINDOWSRegistration
2008-12-29 20:56:06 —-SD—- C:WINDOWSTasks
2008-12-28 15:48:06 —-D—- C:Program FilesDownload Master
2008-12-28 02:41:44 —-D—- C:WINDOWSsystem
2008-12-28 02:41:43 —-D—- C:WINDOWSsystem32Setup
2008-12-28 02:41:35 —-D—- C:WINDOWSL2Schemas
2008-12-28 02:41:34 —-D—- C:WINDOWSsystem32usmt
2008-12-28 02:41:26 —-D—- C:WINDOWSAppPatch
2008-12-28 02:41:14 —-D—- C:WINDOWSehome
2008-12-28 02:41:13 —-D—- C:WINDOWSime
2008-12-28 02:41:11 —-D—- C:WINDOWSNetwork Diagnostic
2008-12-28 02:41:00 —-D—- C:WINDOWSPeerNet
2008-12-28 02:40:48 —-D—- C:WINDOWSsystem32npp
2008-12-28 02:40:42 —-D—- C:WINDOWSmsagent
2008-12-28 02:40:38 —-D—- C:WINDOWSsystem32ru
2008-12-28 02:39:00 —-D—- C:WINDOWSsystem321049
2008-12-28 02:38:53 —-D—- C:WINDOWStwain_32
2008-12-28 02:38:39 —-D—- C:WINDOWSsystem32icsxml
2008-12-28 02:38:14 —-D—- C:WINDOWSsystem321033
2008-12-28 02:37:20 —-D—- C:WINDOWSDriver Cache
2008-12-28 02:37:19 —-D—- C:WINDOWSWinSxS
2008-12-28 01:10:31 —-SHD—- C:System Volume Information
2008-12-28 01:10:31 —-D—- C:WINDOWSsystem32Restore
2008-12-28 01:09:17 —-RSHDC—- C:WINDOWSsystem32dllcache
2008-12-28 01:03:48 —-D—- C:WINDOWSsecurity
2008-12-28 01:03:34 —-D—- C:WINDOWSCursors
2008-12-28 01:02:42 —-AD—- C:Program FilesCommon FilesMicrosoft Shared
2008-12-28 01:02:38 —-RSD—- C:WINDOWSFonts
2008-12-28 01:01:42 —-A—- C:WINDOWSODBCINST.INI
2008-12-28 01:01:11 —-D—- C:WINDOWSsystem32ias
2008-12-28 01:00:40 —-RD—- C:WINDOWSWeb
2008-12-28 01:00:31 —-RAH—- C:WINDOWSsystem32cdplayer.exe.manifest
2008-12-28 01:00:12 —-D—- C:WINDOWSsrchasst
2008-12-28 01:00:08 —-D—- C:Program FilesWindows Media Player
2008-12-28 01:00:07 —-D—- C:Program FilesNetMeeting
2008-12-28 01:00:06 —-D—- C:Program FilesCommon FilesServices
2008-12-28 01:00:02 —-D—- C:Program FilesOutlook Express
2008-12-28 00:59:48 —-D—- C:Program FilesMovie Maker
2008-12-28 00:59:32 —-D—- C:WINDOWSsystem32oobe
2008-12-28 00:59:17 —-D—- C:Program FilesCommon FilesSystem
2008-12-28 00:59:04 —-D—- C:Program FilesInternet Explorer
2008-12-28 00:58:22 —-D—- C:WINDOWSsystem32Com
2008-12-28 00:57:48 —-D—- C:WINDOWSsystem32ru-ru
2008-12-28 00:57:47 —-RD—- C:WINDOWSOffline Web Pages
2008-12-28 00:57:46 —-D—- C:WINDOWSwbem
2008-12-28 00:57:38 —-D—- C:Program FilesWindows Media Connect 2
2008-12-28 00:57:32 —-D—- C:WINDOWSsystem32wbem
2008-12-28 00:57:31 —-D—- C:Program FilesMessenger
2008-12-28 00:57:17 —-D—- C:Program FilesWindows NT
2008-12-28 00:47:48 —-D—- C:WINDOWSsystem32CatRoot
2008-12-28 00:45:39 —-ASH—- C:Documents and SettingsAll UsersApplication Datadesktop.ini
2008-12-27 23:22:49 —-A—- C:WINDOWSsystem32akelpad.ini
2008-12-21 19:20:16 —-D—- C:Program FilesXilisoft
2008-12-21 02:45:26 —-D—- C:Program FilesCommon FilesYandex
2008-12-21 02:42:05 —-RSD—- C:WINDOWSassembly
2008-12-21 02:16:17 —-D—- C:Program FilesSkype======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:WINDOWSsystem32driversAavmker4.sys [2008-11-26 26944]
R1 aswSP;avast! Self Protection; C:WINDOWSsystem32driversaswSP.sys [2008-11-26 111184]
R1 aswTdi;avast! Network Shield Support; C:WINDOWSsystem32driversaswTdi.sys [2008-11-26 50864]
R1 ElbyCDIO;ElbyCDIO Driver; C:WINDOWSSystem32DriversElbyCDIO.sys [2008-07-21 24392]
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-15 40704]
R1 PQNTDrv;PQNTDrv; C:WINDOWSsystem32driversPQNTDrv.sys [2002-09-16 4228]
R1 VD_FileDisk;VD_FileDisk; C:WINDOWSsystem32driversVD_FileDisk.sys [2006-01-13 15872]
R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B}; ??C:Program FilesCyberLinkPowerDVD 00.fcl []
R2 aswFsBlk;aswFsBlk; C:WINDOWSsystem32DRIVERSaswFsBlk.sys [2008-11-26 20560]
R2 aswMon2;avast! Standard Shield Support; C:WINDOWSsystem32driversaswMon2.sys [2008-11-26 94032]
R2 irda;ИК-протокол IrDA; C:WINDOWSsystem32DRIVERSirda.sys [2008-04-14 88192]
R2 NwlnkIpx;NWLink IPX/SPX/NetBIOS-совместимый транспортный протокол; C:WINDOWSsystem32DRIVERSnwlnkipx.sys [2008-04-15 88320]
R2 NwlnkNb;NWLink NetBIOS; C:WINDOWSsystem32DRIVERSnwlnknb.sys [2008-04-15 63232]
R2 NwlnkSpx;Протокол NWLink SPX/SPXII; C:WINDOWSsystem32DRIVERSnwlnkspx.sys [2008-04-15 55936]
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2008-07-08 62848]
R3 aswRdr;aswRdr; C:WINDOWSsystem32driversaswRdr.sys [2008-11-26 23152]
R3 ElbyDelay;ElbyDelay; C:WINDOWSSystem32DriversElbyDelay.sys [2007-02-16 11984]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-15 144384]
R3 ialm;ialm; C:WINDOWSsystem32DRIVERSialmnt5.sys [2006-02-07 1399615]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2008-09-09 4813824]
R3 NWRDR;NetWare Rdr; C:WINDOWSsystem32DRIVERSnwrdr.sys [2008-04-15 163584]
R3 Rasirda;Минипорт WAN (IrDA); C:WINDOWSsystem32DRIVERSrasirda.sys [2001-08-17 19584]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet адаптер, драйвер для NT; C:WINDOWSsystem32DRIVERSRTL8139.SYS [2008-04-13 20992]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-15 30208]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-14 25856]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-15 20608]
S1 InCDPass;InCDPass; C:WINDOWSsystem32driversInCDPass.sys []
S1 InCDRm;InCD Reader; C:WINDOWSsystem32driversInCDRm.sys []
S3 MA-620;Mobile Action MA-620 USB Infrared Adapter; C:WINDOWSsystem32DRIVERSMA-620.sys [2003-03-25 27136]
S3 MSIRCOMM;Microsoft IR Communications Driver; C:WINDOWSsystem32DRIVERSMSIRCOMM.sys [2008-04-14 22016]
S3 nmwcd;Nokia USB Phone Parent; C:WINDOWSsystem32driversccdcmb.sys [2008-09-15 17664]
S3 nmwcdc;Nokia USB Generic; C:WINDOWSsystem32driversccdcmbo.sys [2008-09-15 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:WINDOWSsystem32DRIVERSpccsmcfd.sys [2008-08-26 18816]
S3 upperdev;upperdev; C:WINDOWSsystem32DRIVERSusbser_lowerflt.sys [2008-09-15 8064]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
S3 usbser;USB Modem Driver; C:WINDOWSsystem32driversusbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:WINDOWSsystem32DRIVERSusbser_lowerfltj.sys [2008-09-15 8064]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-15 26368]
S3 Wdf01000;Wdf01000; C:WINDOWSsystem32DRIVERSWdf01000.sys [2008-03-27 503008]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-15 82688]
S4 InCDFs;InCD File System; C:WINDOWSsystem32driversInCDFs.sys []
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aswUpdSv;avast! iAVS4 Control Service; C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe [2008-11-26 18752]
R2 avast! Antivirus;avast! Antivirus; C:Program FilesAlwil SoftwareAvast4ashServ.exe [2008-11-26 155160]
R2 Irmon;Монитор инфракрасной связи; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2008-10-26 147456]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-18 322120]
R2 NWCWorkstation;Клиент для сетей NetWare; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:Program FilesCyberLinkShared filesRichVideo.exe [2007-02-07 173616]
R2 StarWindService;StarWind iSCSI Service; C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindService.exe [2005-04-02 217600]
R2 TTFixerService;NST ToolTipFixer; C:Program FilesNeoSmart TechnologiesToolTipFixerToolTipFixer.exe [2007-06-27 10240]
R2 UPHClean;User Profile Hive Cleanup; C:Program FilesUPHCleanuphclean.exe [2005-04-27 241725]
R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe [2008-11-26 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:Program FilesAlwil SoftwareAvast4ashWebSv.exe [2008-11-26 352920]
S2 PTsup5;PsViatau; C:Program FilesTrident SoftwarePragmaptsup5.exe [2008-02-04 77824]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2006-10-20 36864]
S3 idsvc;Windows CardSpace; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2006-10-30 741376]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-27 89136]
S3 ServiceLayer;ServiceLayer; C:Program FilesPC Connectivity SolutionServiceLayer.exe [2008-11-11 620544]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media Playerwmpnetwk.exe [2006-10-18 913408]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2006-10-30 122880]
EOF
@sml wrote:
Некоторые программы обращаются в NET при помощи IE6, хотя я обычно пользуюсь MyIE2. Но IE6 подцепил порно-информер, который не могу удалить. Скачал программы RSIT и Flash_Desinfector. Получил файл: log. Подскажите как действовать дальше. Файл привожу ниже:
Logfile of random’s system information tool 1.05 (written by random/random)
Run by Mihail at 2009-01-16 02:13:18
Microsoft Windows XP Professional Service Pack 3
System drive C: has 19 GB (64%) free of 30 GB
Total RAM: 503 MB (40% free)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:13:28, on 16.01.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20861)
Boot mode: NormalRunning processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesJavajre6binjqs.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:Program FilesCyberLinkShared filesRichVideo.exe
C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindService.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32CAP3RSK.EXE
C:Program FilesNeoSmart TechnologiesToolTipFixerToolTipFixer.exe
C:WINDOWSSYSTEM32SPOOLDRIVERSW32X863CAP3SWK.EXE
C:WINDOWSExplorer.EXE
C:Program FilesUPHCleanuphclean.exe
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
C:PROGRA~1ALWILS~1Avast4ashDisp.exe
C:WINDOWSsystem32igfxtray.exe
C:WINDOWSsystem32hkcmd.exe
C:WINDOWSsystem32igfxpers.exe
C:Program FilesCommon FilesAheadLibNMBgMonitor.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesNokiaNokia PC Suite 7PCSuite.exe
C:Program FilesPC Connectivity SolutionServiceLayer.exe
C:Program FilesPC Connectivity SolutionTransportsNclUSBSrv.exe
C:Program FilesPC Connectivity SolutionTransportsNclRSSrv.exe
C:Program FilesTrident SoftwarePragmapragma.exe
D:Program FilesDownload Masterdmaster.exe
C:Program FilesMYiE2 RUMyIE.exe
C:Documents and SettingsMihailРабочий столRSIT.exe
C:Program Filestrend microMihail.exeR0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,First Home Page = http://go.microsoft.com/fwlink/?LinkId=54843
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
R3 — Default URLSearchHook is missing
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: vdllibP — {2F618221-8B2E-4C31-863A-FAA3160B99DA} — C:WINDOWSsystem32vdllib.dll
O2 — BHO: Java(tm) Plug-In SSV Helper — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre6binssv.dll
O2 — BHO: IE 4.x-6.x BHO for Download Master — {9961627E-4059-41B4-8E0E-A7D6B3854ADF} — D:PROGRA~1DOWNLO~1dmiehlp.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl Class — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O2 — BHO: acnlibP — {F57F96E7-2192-46BF-B459-97494D0862AD} — C:WINDOWSsystem32acnlib.dll
O3 — Toolbar: DM Bar — {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — D:Program FilesDownload Masterdmbar.dll
O4 — HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 — HKLM..Run: [igfxtray] C:WINDOWSsystem32igfxtray.exe
O4 — HKLM..Run: [igfxhkcmd] C:WINDOWSsystem32hkcmd.exe
O4 — HKLM..Run: [igfxpers] C:WINDOWSsystem32igfxpers.exe
O4 — HKLM..Run: [Pragma5] C:Program FilesTrident SoftwarePragmaprestart.exe
O4 — HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] «C:Program FilesCommon FilesAheadLibNMBgMonitor.exe»
O4 — HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [PC Suite Tray] «C:Program FilesNokiaNokia PC Suite 7PCSuite.exe» -onlytray
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE7_011] regsvr32 /s /n /i:u shell32 (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [IE7_011] regsvr32 /s /n /i:u shell32 (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [IE7_011] regsvr32 /s /n /i:u shell32 (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [IE7_011] regsvr32 /s /n /i:u shell32 (User ‘Default user’)
O8 — Extra context menu item: Закачать ВСЕ при помощи Download Master — D:Program FilesDownload Masterdmieall.htm
O8 — Extra context menu item: Закачать при помощи Download Master — D:Program FilesDownload Masterdmie.htm
O9 — Extra button: Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — D:Program FilesDownload Masterdmaster.exe
O9 — Extra ‘Tools’ menuitem: &Download Master — {8DAE90AD-4583-4977-9DD4-4360F7A45C74} — D:Program FilesDownload Masterdmaster.exe
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O10 — Unknown file in Winsock LSP: c:windowssystem32nwprovau.dll
O16 — DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) — http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 — HKLMSystemCCSServicesTcpip..{FB59B546-9AB3-42DF-8291-15923B7A200B}: NameServer = 193.151.13.5
O23 — Service: avast! iAVS4 Control Service (aswUpdSv) — ALWIL Software — C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 — Service: avast! Antivirus — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 — Service: avast! Mail Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 — Service: avast! Web Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — C:Program FilesJavajre6binjqs.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: PsViatau (PTsup5) — Trident Software — C:Program FilesTrident SoftwarePragmaptsup5.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — C:Program FilesCyberLinkShared filesRichVideo.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: ServiceLayer — Nokia. — C:Program FilesPC Connectivity SolutionServiceLayer.exe
O23 — Service: StarWind iSCSI Service (StarWindService) — Rocket Division Software — C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindService.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: NST ToolTipFixer (TTFixerService) — NeoSmart Technologies — C:Program FilesNeoSmart TechnologiesToolTipFixerToolTipFixer.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe—
End of file — 8551 bytes======Scheduled tasks folder======
C:WINDOWStasks20081229_205100_Mihail.job
======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-23 62080][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{2F618221-8B2E-4C31-863A-FAA3160B99DA}]
TTA Video Decoder — C:WINDOWSsystem32vdllib.dll [2008-12-05 317952][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper — C:Program FilesJavajre6binssv.dll [2008-10-26 320920][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master — D:PROGRA~1DOWNLO~1dmiehlp.dll [2008-10-24 157696][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2008-10-26 34816][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2008-10-26 73728][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{F57F96E7-2192-46BF-B459-97494D0862AD}]
WV Data Feeder — C:WINDOWSsystem32acnlib.dll [2008-12-05 315904][HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} — DM Bar — D:Program FilesDownload Masterdmbar.dll [2007-11-26 180224][HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«avast!»=C:PROGRA~1ALWILS~1Avast4ashDisp.exe [2008-11-26 81000]
«igfxtray»=C:WINDOWSsystem32igfxtray.exe [2006-02-07 94208]
«igfxhkcmd»=C:WINDOWSsystem32hkcmd.exe [2006-02-07 77824]
«igfxpers»=C:WINDOWSsystem32igfxpers.exe [2006-02-07 118784]
«Pragma5″=C:Program FilesTrident SoftwarePragmaprestart.exe [2008-02-04 40960][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}»=C:Program FilesCommon FilesAheadLibNMBgMonitor.exe [2005-11-24 94208]
«ctfmon.exe»=C:WINDOWSsystem32ctfmon.exe [2008-04-15 15360]
«PC Suite Tray»=C:Program FilesNokiaNokia PC Suite 7PCSuite.exe [2008-12-03 1205760][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregALCalendar]
C:PROGRA~1F495~1Calendar.exe [2005-01-16 1003520][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNeroFilterCheck]
C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregPC Suite Tray]
C:Program FilesNokiaNokia PC Suite 7PCSuite.exe [2008-12-03 1205760][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregQIP2005]
C:Program FilesQIPqip.exe [2008-07-01 3256320][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSafonov DuTraffic]
C:Program FilesSafHouseDUTrafficDUTraffic.exe [2004-10-02 1393664][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSkype]
C:Program FilesSkypePhoneSkype.exe /nosplash /minimized [][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregYupdate!]
C:Program FilesCommon FilesYandexYupdateyupdate.exe [][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^Adobe Reader Speed Launch.lnk]
C:PROGRA~1AdobeREADER~1.0ReaderREADER~1.EXE [2006-10-23 40048][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^Adobe Reader Synchronizer.lnk]
C:PROGRA~1AdobeREADER~1.0ReaderADOBEC~1.EXE [2006-10-23 734872][HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^Окно состояния Canon LASER SHOT LBP-1120.LNK]
C:WINDOWSsystem32spooldriversw32x863CAP3LAK.EXE [2002-07-29 30720][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyigfxcui]
C:WINDOWSsystem32igfxdev.dll [2006-02-07 139264][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32wpdshserviceobj.dll [2007-06-18 133632]
UPnPMonitor — {e57ce738-33e8-4c51-8354-bb4de9d215d1} — C:WINDOWSsystem32upnpui.dll [2008-04-15 239616][HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa]
«authentication packages»=msv1_0
nwprovau[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWdf01000.sys]
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootnetworkWdf01000.sys]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:Program FilesCommon FilesNokiaService LayerAnsl_host_process.exe»=»C:Program FilesCommon FilesNokiaService LayerAnsl_host_process.exe:*:Disabled:Nokia Service Layer Host Process «
«C:Program FilesNokiaNokia Software Updaternsu_ui_client.exe»=»C:Program FilesNokiaNokia Software Updaternsu_ui_client.exe:*:Disabled:Nokia Software Updater»
«C:WINDOWSsystem32sessmgr.exe»=»C:WINDOWSsystem32sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019»
«C:Program FilesSkypePhoneSkype.exe»=»C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype. The whole world can talk for free.»
«C:Program FilesNeroNero8Nero ShowTimeShowTime.exe»=»C:Program FilesNeroNero8Nero ShowTimeShowTime.exe:*:Disabled:Nero ShowTime»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesTCWLUtilitesInternetManiac.exe»=»C:Program FilesTCWLUtilitesInternetManiac.exe:*:Disabled:Internet Maniac»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»======List of files/folders created in the last 1 months======
2009-01-16 00:01:31 —-A—- C:WINDOWSPragma Uninstaller.exe
2009-01-16 00:01:30 —-D—- C:Program FilesTrident Software
2009-01-15 10:36:56 —-D—- C:Program Filestrend micro
2009-01-15 10:36:54 —-D—- C:rsit
2009-01-14 23:30:17 —-A—- C:instLog.txt
2009-01-14 11:51:35 —-N—- C:WINDOWSsystem32spmsgXP_2k3.dll
2009-01-14 11:51:28 —-HDC—- C:WINDOWS$NtUninstallWdf01007$
2009-01-14 11:48:01 —-A—- C:Log.txt
2009-01-14 11:45:29 —-D—- C:Program FilesCommon FilesPCSuite
2009-01-14 11:45:19 —-D—- C:Program FilesCommon FilesNokia
2009-01-14 11:43:35 —-D—- C:Program FilesPC Connectivity Solution
2009-01-14 11:42:40 —-SHD—- C:Config.Msi
2009-01-14 11:42:13 —-A—- C:WINDOWSsystem32wdfcoinstaller01007.dll
2009-01-13 23:45:30 —-D—- C:Program FilesNokia
2009-01-13 23:33:29 —-A—- C:WINDOWSsystem32wshirda.dll
2009-01-13 23:33:29 —-A—- C:WINDOWSsystem32irmon.dll
2009-01-13 23:33:28 —-A—- C:WINDOWSsystem32irftp.exe
2009-01-13 21:46:16 —-A—- C:rez1.txt
2009-01-08 23:19:51 —-RSD—- C:Program FilesMYiE2 RU
2009-01-06 01:05:27 —-D—- C:Documents and SettingsAll UsersApplication DataVistaCodecs
2009-01-05 22:54:03 —-D—- C:Program FilesWEBaby
2009-01-04 10:44:08 —-A—- C:WINDOWSsystem32ptpusb.dll
2009-01-04 10:44:06 —-A—- C:WINDOWSsystem32ptpusd.dll
2008-12-29 02:21:06 —-A—- C:Documents and SettingsMihailApplication Dataex_log.txt
2008-12-28 03:05:27 —-D—- C:Documents and SettingsMihailApplication DataObsidium
2008-12-28 01:12:37 —-A—- C:WINDOWSsystem32igfxres.dll
2008-12-28 01:10:01 —-D—- C:WINDOWSPrefetch
2008-12-28 01:01:49 —-A—- C:WINDOWSOEWABLog.txt
2008-12-28 01:00:38 —-RAH—- C:WINDOWSsystem32logonui.exe.manifest
2008-12-28 01:00:23 —-HD—- C:Program FilesWindowsUpdate
2008-12-28 00:58:11 —-D—- C:Program FilesComPlus Applications
2008-12-28 00:45:48 —-A—- C:WINDOWSsystem32spxcoins.dll
2008-12-28 00:45:48 —-A—- C:WINDOWSsystem32irclass.dll
2008-12-28 00:44:15 —-A—- C:WINDOWSsetuplog.txt
2008-12-28 00:06:42 —-D—- C:Program FilesABBYY Lingvo X3 ME
2008-12-27 19:31:59 —-D—- C:WINDOWSsetup.pss
2008-12-27 18:13:17 —-D—- C:Documents and SettingsAll UsersApplication DataWindows Genuine Advantage
2008-12-26 04:21:37 —-D—- C:Documents and SettingsAll UsersApplication DataABBYY
2008-12-26 00:02:47 —-D—- C:Program FilesElaborate Bytes
2008-12-23 16:25:51 —-A—- C:WINDOWSUPGRADE.TXT
2008-12-21 22:23:00 —-D—- C:Documents and SettingsAll UsersApplication DataDVD X Studios
2008-12-21 19:21:05 —-D—- C:Documents and SettingsMihailApplication DataXilisoft Corporation
2008-12-21 02:08:56 —-D—- C:Documents and SettingsMihailApplication DataURSoft
2008-12-21 02:08:55 —-AD—- C:Documents and SettingsAll UsersApplication DataTEMP
2008-12-21 02:08:48 —-D—- C:Program FilesYour Uninstaller 2008
2008-12-20 18:11:15 —-A—- C:WINDOWSsystem32msvcr80.dll
2008-12-20 18:11:15 —-A—- C:WINDOWSsystem32msvcp80.dll
2008-12-20 15:19:29 —-D—- C:Program FilesNorton WinDoctor======List of files/folders modified in the last 1 months======
2009-01-16 02:13:22 —-D—- C:Temp
2009-01-16 00:56:47 —-D—- C:WINDOWSTemp
2009-01-16 00:02:54 —-D—- C:WINDOWSsystem32drivers
2009-01-16 00:02:28 —-AD—- C:WINDOWS
2009-01-16 00:01:59 —-A—- C:WINDOWSSchedLgU.Txt
2009-01-16 00:01:30 —-AD—- C:Program Files
2009-01-15 23:27:08 —-D—- C:WINDOWSsystem32CatRoot2
2009-01-15 19:04:08 —-D—- C:Documents and SettingsMihailApplication DataWildfire
2009-01-15 09:26:57 —-D—- C:Documents and SettingsMihailApplication DataThe Bat!
2009-01-15 00:47:51 —-D—- C:Downloads
2009-01-14 12:07:05 —-AD—- C:Program FilesKMPlayer
2009-01-14 11:53:10 —-D—- C:WINDOWSsystem32
2009-01-14 11:53:10 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2009-01-14 11:51:41 —-HD—- C:WINDOWSinf
2009-01-14 11:51:41 —-A—- C:WINDOWSimsins.BAK
2009-01-14 11:46:00 —-SHD—- C:WINDOWSInstaller
2009-01-14 11:46:00 —-DC—- C:WINDOWSsystem32DRVSTORE
2009-01-14 11:45:29 —-AD—- C:Program FilesCommon Files
2009-01-14 11:41:44 —-D—- C:Documents and SettingsAll UsersApplication DataInstallations
2009-01-13 23:33:30 —-D—- C:WINDOWSMedia
2009-01-13 19:21:29 —-A—- C:WINDOWSNeroDigital.ini
2009-01-13 01:12:17 —-D—- C:Documents and SettingsMihailApplication DataYandex
2009-01-12 23:59:20 —-D—- C:WINDOWSsystem32config
2009-01-12 23:47:55 —-D—- C:Program FilesThe Bat!
2009-01-12 23:09:50 —-D—- C:Documents and Settings
2009-01-12 20:44:05 —-D—- C:WINDOWSHelp
2009-01-06 19:52:35 —-D—- C:Program FilesK-Lite Codec Pack
2009-01-06 02:15:45 —-D—- C:Documents and SettingsMihailApplication DataXnView
2009-01-06 01:33:01 —-A—- C:WINDOWSSumitSoft.ini
2008-12-29 21:39:28 —-D—- C:Documents and SettingsMihailApplication DataAhead
2008-12-29 20:57:06 —-D—- C:WINDOWSrepair
2008-12-29 20:56:43 —-D—- C:WINDOWSRegistration
2008-12-29 20:56:06 —-SD—- C:WINDOWSTasks
2008-12-28 15:48:06 —-D—- C:Program FilesDownload Master
2008-12-28 03:58:47 —-A—- C:WINDOWSwin.ini
2008-12-28 03:39:57 —-A—- C:WINDOWSsystem.ini
2008-12-28 03:08:49 —-SD—- C:WINDOWSDownloaded Program Files
2008-12-28 02:41:44 —-D—- C:WINDOWSsystem
2008-12-28 02:41:43 —-D—- C:WINDOWSsystem32Setup
2008-12-28 02:41:35 —-D—- C:WINDOWSL2Schemas
2008-12-28 02:41:34 —-D—- C:WINDOWSsystem32usmt
2008-12-28 02:41:26 —-D—- C:WINDOWSAppPatch
2008-12-28 02:41:14 —-D—- C:WINDOWSehome
2008-12-28 02:41:13 —-D—- C:WINDOWSime
2008-12-28 02:41:11 —-D—- C:WINDOWSNetwork Diagnostic
2008-12-28 02:41:00 —-D—- C:WINDOWSPeerNet
2008-12-28 02:40:48 —-D—- C:WINDOWSsystem32npp
2008-12-28 02:40:42 —-D—- C:WINDOWSmsagent
2008-12-28 02:40:38 —-D—- C:WINDOWSsystem32ru
2008-12-28 02:39:00 —-D—- C:WINDOWSsystem321049
2008-12-28 02:38:53 —-D—- C:WINDOWStwain_32
2008-12-28 02:38:39 —-D—- C:WINDOWSsystem32icsxml
2008-12-28 02:38:14 —-D—- C:WINDOWSsystem321033
2008-12-28 02:37:20 —-D—- C:WINDOWSDriver Cache
2008-12-28 02:37:19 —-D—- C:WINDOWSWinSxS
2008-12-28 01:10:31 —-SHD—- C:System Volume Information
2008-12-28 01:10:31 —-D—- C:WINDOWSsystem32Restore
2008-12-28 01:09:17 —-RSHDC—- C:WINDOWSsystem32dllcache
2008-12-28 01:03:48 —-D—- C:WINDOWSsecurity
2008-12-28 01:03:34 —-D—- C:WINDOWSCursors
2008-12-28 01:02:42 —-AD—- C:Program FilesCommon FilesMicrosoft Shared
2008-12-28 01:02:38 —-RSD—- C:WINDOWSFonts
2008-12-28 01:01:42 —-A—- C:WINDOWSODBCINST.INI
2008-12-28 01:01:11 —-D—- C:WINDOWSsystem32ias
2008-12-28 01:00:40 —-RD—- C:WINDOWSWeb
2008-12-28 01:00:31 —-RAH—- C:WINDOWSsystem32cdplayer.exe.manifest
2008-12-28 01:00:12 —-D—- C:WINDOWSsrchasst
2008-12-28 01:00:08 —-D—- C:Program FilesWindows Media Player
2008-12-28 01:00:07 —-D—- C:Program FilesNetMeeting
2008-12-28 01:00:06 —-D—- C:Program FilesCommon FilesServices
2008-12-28 01:00:02 —-D—- C:Program FilesOutlook Express
2008-12-28 00:59:48 —-D—- C:Program FilesMovie Maker
2008-12-28 00:59:32 —-D—- C:WINDOWSsystem32oobe
2008-12-28 00:59:17 —-D—- C:Program FilesCommon FilesSystem
2008-12-28 00:59:04 —-D—- C:Program FilesInternet Explorer
2008-12-28 00:58:22 —-D—- C:WINDOWSsystem32Com
2008-12-28 00:57:48 —-D—- C:WINDOWSsystem32ru-ru
2008-12-28 00:57:47 —-RD—- C:WINDOWSOffline Web Pages
2008-12-28 00:57:46 —-D—- C:WINDOWSwbem
2008-12-28 00:57:38 —-D—- C:Program FilesWindows Media Connect 2
2008-12-28 00:57:32 —-D—- C:WINDOWSsystem32wbem
2008-12-28 00:57:31 —-D—- C:Program FilesMessenger
2008-12-28 00:57:17 —-D—- C:Program FilesWindows NT
2008-12-28 00:56:00 —-SH—- C:boot.ini
2008-12-28 00:47:48 —-D—- C:WINDOWSsystem32CatRoot
2008-12-28 00:45:39 —-ASH—- C:Documents and SettingsAll UsersApplication Datadesktop.ini
2008-12-27 23:22:49 —-A—- C:WINDOWSsystem32akelpad.ini
2008-12-21 19:20:16 —-D—- C:Program FilesXilisoft
2008-12-21 02:45:26 —-D—- C:Program FilesCommon FilesYandex
2008-12-21 02:42:05 —-RSD—- C:WINDOWSassembly
2008-12-21 02:16:17 —-D—- C:Program FilesSkype======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:WINDOWSsystem32driversAavmker4.sys [2008-11-26 26944]
R1 aswSP;avast! Self Protection; C:WINDOWSsystem32driversaswSP.sys [2008-11-26 111184]
R1 aswTdi;avast! Network Shield Support; C:WINDOWSsystem32driversaswTdi.sys [2008-11-26 50864]
R1 ElbyCDIO;ElbyCDIO Driver; C:WINDOWSSystem32DriversElbyCDIO.sys [2008-07-21 24392]
R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-15 40704]
R1 PQNTDrv;PQNTDrv; C:WINDOWSsystem32driversPQNTDrv.sys [2002-09-16 4228]
R1 VD_FileDisk;VD_FileDisk; C:WINDOWSsystem32driversVD_FileDisk.sys [2006-01-13 15872]
R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B}; ??C:Program FilesCyberLinkPowerDVD 00.fcl []
R2 aswFsBlk;aswFsBlk; C:WINDOWSsystem32DRIVERSaswFsBlk.sys [2008-11-26 20560]
R2 aswMon2;avast! Standard Shield Support; C:WINDOWSsystem32driversaswMon2.sys [2008-11-26 94032]
R2 irda;ИК-протокол IrDA; C:WINDOWSsystem32DRIVERSirda.sys [2008-04-14 88192]
R2 NwlnkIpx;NWLink IPX/SPX/NetBIOS-совместимый транспортный протокол; C:WINDOWSsystem32DRIVERSnwlnkipx.sys [2008-04-15 88320]
R2 NwlnkNb;NWLink NetBIOS; C:WINDOWSsystem32DRIVERSnwlnknb.sys [2008-04-15 63232]
R2 NwlnkSpx;Протокол NWLink SPX/SPXII; C:WINDOWSsystem32DRIVERSnwlnkspx.sys [2008-04-15 55936]
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2008-07-08 62848]
R3 aswRdr;aswRdr; C:WINDOWSsystem32driversaswRdr.sys [2008-11-26 23152]
R3 ElbyDelay;ElbyDelay; C:WINDOWSSystem32DriversElbyDelay.sys [2007-02-16 11984]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-15 144384]
R3 ialm;ialm; C:WINDOWSsystem32DRIVERSialmnt5.sys [2006-02-07 1399615]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2008-09-09 4813824]
R3 NWRDR;NetWare Rdr; C:WINDOWSsystem32DRIVERSnwrdr.sys [2008-04-15 163584]
R3 Rasirda;Минипорт WAN (IrDA); C:WINDOWSsystem32DRIVERSrasirda.sys [2001-08-17 19584]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet адаптер, драйвер для NT; C:WINDOWSsystem32DRIVERSRTL8139.SYS [2008-04-13 20992]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-15 30208]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-15 20608]
S1 InCDPass;InCDPass; C:WINDOWSsystem32driversInCDPass.sys []
S1 InCDRm;InCD Reader; C:WINDOWSsystem32driversInCDRm.sys []
S3 MA-620;Mobile Action MA-620 USB Infrared Adapter; C:WINDOWSsystem32DRIVERSMA-620.sys [2003-03-25 27136]
S3 MSIRCOMM;Microsoft IR Communications Driver; C:WINDOWSsystem32DRIVERSMSIRCOMM.sys [2008-04-14 22016]
S3 nmwcd;Nokia USB Phone Parent; C:WINDOWSsystem32driversccdcmb.sys [2008-09-15 17664]
S3 nmwcdc;Nokia USB Generic; C:WINDOWSsystem32driversccdcmbo.sys [2008-09-15 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:WINDOWSsystem32DRIVERSpccsmcfd.sys [2008-08-26 18816]
S3 upperdev;upperdev; C:WINDOWSsystem32DRIVERSusbser_lowerflt.sys [2008-09-15 8064]
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-14 25856]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
S3 usbser;USB Modem Driver; C:WINDOWSsystem32driversusbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:WINDOWSsystem32DRIVERSusbser_lowerfltj.sys [2008-09-15 8064]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-15 26368]
S3 Wdf01000;Wdf01000; C:WINDOWSsystem32DRIVERSWdf01000.sys [2008-03-27 503008]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2006-09-15 82688]
S4 InCDFs;InCD File System; C:WINDOWSsystem32driversInCDFs.sys []
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aswUpdSv;avast! iAVS4 Control Service; C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe [2008-11-26 18752]
R2 avast! Antivirus;avast! Antivirus; C:Program FilesAlwil SoftwareAvast4ashServ.exe [2008-11-26 155160]
R2 Irmon;Монитор инфракрасной связи; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2008-10-26 147456]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE [2003-06-18 322120]
R2 NWCWorkstation;Клиент для сетей NetWare; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:Program FilesCyberLinkShared filesRichVideo.exe [2007-02-07 173616]
R2 StarWindService;StarWind iSCSI Service; C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindService.exe [2005-04-02 217600]
R2 TTFixerService;NST ToolTipFixer; C:Program FilesNeoSmart TechnologiesToolTipFixerToolTipFixer.exe [2007-06-27 10240]
R2 UPHClean;User Profile Hive Cleanup; C:Program FilesUPHCleanuphclean.exe [2005-04-27 241725]
R2 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe [2008-11-26 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:Program FilesAlwil SoftwareAvast4ashWebSv.exe [2008-11-26 352920]
R3 ServiceLayer;ServiceLayer; C:Program FilesPC Connectivity SolutionServiceLayer.exe [2008-11-11 620544]
S2 PTsup5;PsViatau; C:Program FilesTrident SoftwarePragmaptsup5.exe [2008-02-04 77824]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:WINDOWSMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe [2006-10-20 36864]
S3 idsvc;Windows CardSpace; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe [2006-10-30 741376]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2003-07-27 89136]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:Program FilesWindows Media Playerwmpnetwk.exe [2006-10-18 913408]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMSvcHost.exe [2006-10-30 122880]
EOF
