SPYWARE-RU.COM

Созданные ответы форума

Просмотр 1 сообщения - с 1 по 1 (всего 1)

Автор

Сообщения
28 марта, 2009 в 12:56 пп в ответ на: Вирус — программа-хамелеон #22984
verba
Participant
- Темы:1
- Сообщений:2
Здравствуйте! Спасибо за внимание к моей проблеме! Сделано все, как Вы написали, однако на флэшку продолжают «прыгать» те же вирусы — чистим флэшку на другом компьютере NODом.
Лог программы :
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========

ServiceDriver dac970nt deleted successfully.
========== REGISTRY ==========
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem\»DisableTaskMgr»|0 /E : value set successfully!
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem\»DisableRegistryTools»|0 /E : value set successfully!
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{37223c06-11f5-11de-ab3e-0016360cfc12}\ deleted successfully.
========== FILES ==========
File/Folder F:nkiijt.pif not found.
========== COMMANDS ==========
User’s Temp folder emptied.
User’s Temporary Internet Files folder emptied.
User’s Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:Documents and SettingsLocalServiceLocal SettingsTemporary Internet FilesContent.IE5index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer — Version 1.0.9.0 log created on 03282009_192812

Files moved on Reboot…
File move failed. C:Documents and SettingsLocalServiceLocal SettingsTemporary Internet FilesContent.IE5index.dat scheduled to be moved on reboot.

Свежий RSIT лог:
Logfile of random’s system information tool 1.06 (written by random/random)
Run by 1 at 2009-03-28 19:37:27
Microsoft Windows XP Professional Service Pack 2
System drive C: has 5 GB (47%) free of 10 GB
Total RAM: 190 MB (19% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:37:39, on 28.03.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32wltrysvc.exe
C:WINDOWSSystem32bcmwltry.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:AcereManageranbmServ.exe
C:Program FilesWIDCOMMПрограммное обеспечение Bluetoothbinbtwdins.exe
C:WINDOWSsystem32cisvc.exe
C:Program FilesCommon FilesMicrosoft SharedVS7Debugmdm.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32CNAB4RPK.EXE
C:WINDOWSsystem32wuauclt.exe
C:WINDOWSnotepad.exe
C:Program FilesArcadePCMService.exe
C:WINDOWSSOUNDMAN.EXE
C:Program FilesLaunch ManagerQtZgAcer.EXE
C:WINDOWSAGRSMMSG.exe
C:WINDOWSsystem32Rundll32.exe
C:WINDOWSsystem32keyhook.exe
C:Program FilesLexmark 3300 Serieslxccmon.exe
C:WINDOWSSamsungPanelMgrssmmgr.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesCommon FilesAheadlibNMBgMonitor.exe
C:Program FilesMessengermsmsgs.exe
C:WINDOWSsystem32lxcccoms.exe
C:Program FilesInternet Exploreriexplore.exe
C:Documents and Settings1Рабочий столRSIT.exe
C:Program Filestrend micro1.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://google.com/
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yandex.ru/
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
R1 — HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://www.finereader.com/sprint?Lang=1049&GUID={8C83856F-6ED4-1A45-8040-C75FB93AAFDF}&Part=416_11&Build=6.0.0.1368&Registered=0&Context=196612
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — D:Adobe ReaderReaderActiveXAcroIEHelper.dll
O4 — HKLM..Run: [PCMService] «C:Program FilesArcadePCMService.exe»
O4 — HKLM..Run: [SoundMan] SOUNDMAN.EXE
O4 — HKLM..Run: [LManager] C:Program FilesLaunch ManagerQtZgAcer.EXE
O4 — HKLM..Run: [AGRSMMSG] AGRSMMSG.exe
O4 — HKLM..Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 — HKLM..Run: [SiS Windows KeyHook] C:WINDOWSsystem32keyhook.exe
O4 — HKLM..Run: [FaxCenterServer] «C:Program FilesLexmark Fax Solutionsfm3032.exe» /s
O4 — HKLM..Run: [CorelDRAW Graphics Suite 11b] C:Program FilesCorelCorel Graphics 12LanguagesENProgramsRegistration.exe /title=»CorelDRAW Graphics Suite 12″ /date=040709 serial=DR12WCF-7639015-WME lang=EN
O4 — HKLM..Run: [lxccmon.exe] «C:Program FilesLexmark 3300 Serieslxccmon.exe»
O4 — HKLM..Run: [LXCCCATS] rundll32 C:WINDOWSSystem32spoolDRIVERSW32X863LXCCtime.dll,_RunDLLEntry@16
O4 — HKLM..Run: [Samsung PanelMgr] C:WINDOWSSamsungPanelMgrssmmgr.exe /autorun
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] «C:Program FilesCommon FilesAheadlibNMBgMonitor.exe»
O4 — HKCU..Run: [MSMSGS] «C:Program FilesMessengermsmsgs.exe» /background
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOffice10OSA.EXE
O7 — HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem, DisableRegedit=1
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office10EXCEL.EXE/3000
O8 — Extra context menu item: Отправить через &Bluetooth — C:Program FilesWIDCOMMПрограммное обеспечение Bluetoothbtsendto_ie_ctx.htm
O9 — Extra button: @btrez.dll,-4015 — {CCA281CA-C863-46ef-9331-5C8D4460577F} — C:Program FilesWIDCOMMПрограммное обеспечение Bluetoothbtsendto_ie.htm
O9 — Extra ‘Tools’ menuitem: @btrez.dll,-4017 — {CCA281CA-C863-46ef-9331-5C8D4460577F} — C:Program FilesWIDCOMMПрограммное обеспечение Bluetoothbtsendto_ie.htm
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O17 — HKLMSystemCCSServicesTcpip..{0C2ECA4A-0D98-4847-A7D9-47573DC81AB1}: NameServer = 10.10.12.1
O23 — Service: Notebook Manager Service (anbmService) — OSA Technologies Inc. — C:AcereManageranbmServ.exe
O23 — Service: Bluetooth Service (btwdins) — Broadcom Corporation. — C:Program FilesWIDCOMMПрограммное обеспечение Bluetoothbinbtwdins.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: lxcc_device — Lexmark International, Inc. — C:WINDOWSsystem32lxcccoms.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Broadcom Wireless LAN Tray Service (wltrysvc) — Unknown owner — C:WINDOWSSystem32wltrysvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 6349 bytes

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class — D:Adobe ReaderReaderActiveXAcroIEHelper.dll [2003-05-15 50376]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«PCMService»=C:Program FilesArcadePCMService.exe [2005-03-09 126976]
«SoundMan»=C:WINDOWSSOUNDMAN.EXE [2005-02-23 147456]
«LManager»=C:Program FilesLaunch ManagerQtZgAcer.EXE [2005-03-28 385024]
«AGRSMMSG»=C:WINDOWSAGRSMMSG.exe [2004-10-08 166187]
«SiSPower»=SiSPower.dll,ModeAgent []
«SiS Windows KeyHook»=C:WINDOWSsystem32keyhook.exe [2005-03-04 106496]
«FaxCenterServer»=C:Program FilesLexmark Fax Solutionsfm3032.exe [2005-01-20 524288]
«CorelDRAW Graphics Suite 11b»=C:Program FilesCorelCorel Graphics 12LanguagesENProgramsRegistration.exe [2003-11-25 970752]
«lxccmon.exe»=C:Program FilesLexmark 3300 Serieslxccmon.exe [2005-02-21 192512]
«LXCCCATS»=rundll32 C:WINDOWSSystem32spoolDRIVERSW32X863LXCCtime.dll,_RunDLLEntry@16 []
«Samsung PanelMgr»=C:WINDOWSSamsungPanelMgrssmmgr.exe [2006-08-16 503808]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2004-08-17 15360]
«BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}»=C:Program FilesCommon FilesAheadlibNMBgMonitor.exe [2006-03-01 237568]
«MSMSGS»=C:Program FilesMessengermsmsgs.exe [2004-08-17 1667584]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregNeroFilterCheck]
C:Program FilesCommon FilesAheadLibNeroCheck.exe [2006-01-12 303104]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSynTPEnh]
C:Program FilesSynapticsSynTPSynTPEnh.exe [2004-10-08 835674]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregSynTPLpr]
C:Program FilesSynapticsSynTPSynTPLpr.exe [2004-10-08 249946]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^1^Главное меню^Программы^Автозагрузка^Total Commander.lnk]
C:PROGRA~1TOTALC~1Totalcmd.exe [2004-07-28 757796]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^BTTray.lnk]
C:PROGRA~1WIDCOMMBLUETO~1BTTray.exe [2005-09-19 733245]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^Utility Tray.lnk]
C:WINDOWSsystem32sistray.exe [2005-01-04 331776]

C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
Microsoft Office.lnk — C:Program FilesMicrosoft OfficeOffice10OSA.EXE

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«DisableTaskMgr»=1
«DisableRegistryTools»=1

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«EnableLUA»=0

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=36
«NoDriveAutoRun»=FFFFFFFF

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«C:WINDOWSsystem32CNAB4RPK.EXE»=»C:WINDOWSsystem32CNAB4RPK.EXE:*:Enabled:Canon LBP2900 RPC Server Process»
«C:WINDOWSsystem32sessmgr.exe»=»C:WINDOWSsystem32sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019»
«F:swfs.pif»=»F:swfs.pif:*:Enabled:ipsec»
«C:WINDOWSExplorer.EXE»=»C:WINDOWSexplorer.exe:*:Enabled:ipsec»
«C:Program FilesCorelCorel Graphics 12LanguagesENProgramsRegistration.exe»=»C:Program FilesCorelCorel Graphics 12LanguagesENProgramsRegistration.exe:*:Enabled:ipsec»
«C:Program FilesArcadePCMService.exe»=»C:Program FilesArcadePCMService.exe:*:Enabled:ipsec»
«C:Program FilesLexmark Fax Solutionsfm3032.exe»=»C:Program FilesLexmark Fax Solutionsfm3032.exe:*:Enabled:ipsec»
«C:Program FilesLaunch ManagerQtZgAcer.EXE»=»C:Program FilesLaunch ManagerQtZgAcer.EXE:*:Enabled:ipsec»
«C:WINDOWSsystem32ctfmon.exe»=»C:WINDOWSsystem32ctfmon.exe:*:Enabled:ipsec»
«C:WINDOWSsystem32netsh.exe»=»C:WINDOWSsystem32netsh.exe:*:Enabled:ipsec»
«C:Program FilesMicrosoft OfficeOffice10OSA.EXE»=»C:Program FilesMicrosoft OfficeOffice10OSA.EXE:*:Enabled:ipsec»
«C:Program FilesCommon FilesAheadlibNMIndexStoreSvr.exe»=»C:Program FilesCommon FilesAheadlibNMIndexStoreSvr.exe:*:Enabled:ipsec»
«C:Program FilesKaspersky LabKaspersky Anti-Virus 6.0avp.exe»=»C:Program FilesKaspersky LabKaspersky Anti-Virus 6.0avp.exe:*:Enabled:ipsec»
«C:WINDOWSsystem32lxcccoms.exe»=»C:WINDOWSsystem32lxcccoms.exe:*:Enabled:3300 Series Server»
«C:WINDOWSsystem32spooldriversw32x863lxccPSWX.EXE»=»C:WINDOWSsystem32spooldriversw32x863lxccPSWX.EXE:*:Enabled:3300 Series Printer Status»
«C:WINDOWSSOUNDMAN.EXE»=»C:WINDOWSSOUNDMAN.EXE:*:Enabled:ipsec»
«C:Program FilesLexmark 3300 Serieslxccmon.exe»=»C:Program FilesLexmark 3300 Serieslxccmon.exe:*:Enabled:ipsec»
«C:Program FilesMessengermsmsgs.exe»=»C:Program FilesMessengermsmsgs.exe:*:Enabled:ipsec»
«C:WINDOWSsystem32Rundll32.exe»=»C:WINDOWSsystem32Rundll32.exe:*:Enabled:ipsec»
«C:WINDOWSsystem32keyhook.exe»=»C:WINDOWSsystem32keyhook.exe:*:Enabled:ipsec»
«C:Program FilesSAMSUNGSamsung SCX-4200 SeriesSPanelssmsrvc.exe»=»C:Program FilesSAMSUNGSamsung SCX-4200 SeriesSPanelssmsrvc.exe:*:Enabled:ipsec»
«C:Program FilesMicrosoft OfficeOffice10WINWORD.EXE»=»C:Program FilesMicrosoft OfficeOffice10WINWORD.EXE:*:Enabled:ipsec»
«C:Program Files1Cv77BIN1cv7.exe»=»C:Program Files1Cv77BIN1cv7.exe:*:Enabled:ipsec»
«C:Program FilesCommon FilesAheadlibNMBgMonitor.exe»=»C:Program FilesCommon FilesAheadlibNMBgMonitor.exe:*:Enabled:ipsec»
«C:Program FilesMicrosoft OfficeOffice10EXCEL.EXE»=»C:Program FilesMicrosoft OfficeOffice10EXCEL.EXE:*:Enabled:ipsec»
«F:kxvf.exe»=»F:kxvf.exe:*:Enabled:ipsec»
«C:WINDOWSAGRSMMSG.exe»=»C:WINDOWSAGRSMMSG.exe:*:Enabled:ipsec»
«G:pqfy.exe»=»G:pqfy.exe:*:Enabled:ipsec»
«C:WINDOWSsystem32userinit.exe»=»C:WINDOWSsystem32userinit.exe:*:Enabled:ipsec»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

======List of files/folders created in the last 3 months======

2009-03-28 19:28:12 —-D—- C:_OTMoveIt
2009-03-28 19:22:47 —-RASHD—- C:autorun.inf
2009-03-26 11:54:04 —-D—- C:Program FilesESET
2009-03-24 12:46:03 —-D—- C:Program Filestrend micro
2009-03-24 12:45:49 —-D—- C:rsit
2009-03-24 12:10:40 —-D—- C:VundoFix Backups
2009-03-24 12:10:40 —-A—- C:VundoFix.txt
2009-02-25 18:53:28 —-A—- C:WINDOWSsystem32an_adr2006r1.dll
2009-02-16 19:51:07 —-D—- C:Documents and Settings1Application DataWinRAR
2009-02-16 19:48:11 —-D—- C:Program FilesWinRAR
2009-02-02 10:12:33 —-HDC—- C:WINDOWS$NtServicePackUninstallIDNMitigationAPIs$
2009-02-02 10:11:07 —-HDC—- C:WINDOWS$NtServicePackUninstallNLSDownlevelMapping$
2009-02-02 10:08:49 —-HDC—- C:WINDOWS$NtUninstallKB915865$
2009-02-02 10:08:21 —-N—- C:WINDOWSsystem32xmllite.dll
2009-02-02 09:54:43 —-A—- C:WINDOWSsystem32MRT.exe
2009-01-29 12:00:23 —-HDC—- C:WINDOWS$NtUninstallKB950974$
2009-01-29 12:00:12 —-HDC—- C:WINDOWS$NtUninstallKB951698$
2009-01-29 11:59:59 —-HDC—- C:WINDOWS$NtUninstallKB954211$
2009-01-29 11:59:16 —-HDC—- C:WINDOWS$NtUninstallKB956841$
2009-01-29 11:58:55 —-HDC—- C:WINDOWS$NtUninstallKB960714$
2009-01-29 11:58:42 —-HDC—- C:WINDOWS$NtUninstallKB952069_WM9$
2009-01-29 11:58:33 —-HDC—- C:WINDOWS$NtUninstallKB950762$
2009-01-29 11:58:24 —-HDC—- C:WINDOWS$NtUninstallKB957097$
2009-01-29 11:58:16 —-HDC—- C:WINDOWS$NtUninstallKB958687$
2009-01-29 11:58:04 —-HDC—- C:WINDOWS$NtUninstallKB952287$
2009-01-29 11:57:52 —-HDC—- C:WINDOWS$NtUninstallKB951066$
2009-01-29 11:57:40 —-HDC—- C:WINDOWS$NtUninstallKB951748$
2009-01-29 11:57:27 —-HDC—- C:WINDOWS$NtUninstallKB885884$
2009-01-29 11:57:05 —-HDC—- C:WINDOWS$NtUninstallKB938464$
2009-01-29 11:56:57 —-HDC—- C:WINDOWS$NtUninstallKB954600$
2009-01-29 11:56:48 —-HDC—- C:WINDOWS$NtUninstallKB958644$
2009-01-29 11:56:37 —-HDC—- C:WINDOWS$NtUninstallKB955069$
2009-01-29 11:56:20 —-HDC—- C:WINDOWS$NtUninstallKB956802$
2009-01-29 11:56:05 —-D—- C:Program FilesMSXML 4.0
2009-01-29 11:55:10 —-HDC—- C:WINDOWS$NtUninstallKB944338-v2$
2009-01-29 10:34:40 —-D—- C:WINDOWSsystem32CatRoot_bak
2009-01-29 10:09:54 —-D—- C:WINDOWSsystem32PreInstall
2009-01-29 10:09:53 —-N—- C:WINDOWSsystem32spmsg.dll
2009-01-29 10:09:53 —-A—- C:WINDOWSsystem32spupdsvc.exe
2009-01-29 10:09:51 —-HDC—- C:WINDOWS$NtUninstallKB898461$
2009-01-29 10:09:51 —-HD—- C:WINDOWS$hf_mig$
2009-01-28 16:56:01 —-D—- C:WINDOWSsystem32SoftwareDistribution
2009-01-11 12:54:18 —-D—- C:Documents and Settings1Application DataSmarThru4
2009-01-11 12:54:05 —-N—- C:WINDOWSsystem32SecSNMP.dll
2009-01-11 12:53:42 —-A—- C:WINDOWSsystem32LTRPR13n.DLL
2009-01-11 12:53:42 —-A—- C:WINDOWSsystem32LTRIO13N.DLL
2009-01-11 12:53:42 —-A—- C:WINDOWSsystem32LTR13N.DLL
2009-01-11 12:53:42 —-A—- C:WINDOWSsystem32lfpsd13s.dll
2009-01-11 12:53:42 —-A—- C:WINDOWSsystem32LFPNM13s.dll
2009-01-11 12:53:42 —-A—- C:WINDOWSsystem32Lfpng13s.dll
2009-01-11 12:53:42 —-A—- C:WINDOWSsystem32lfpcx13s.dll
2009-01-11 12:53:42 —-A—- C:WINDOWSsystem32lfpcd13s.dll
2009-01-11 12:53:42 —-A—- C:WINDOWSsystem32lfmsp13s.dll
2009-01-11 12:53:42 —-A—- C:WINDOWSsystem32lfitg13s.dll
2009-01-11 12:53:42 —-A—- C:WINDOWSsystem32lfitg13n.dll
2009-01-11 12:53:42 —-A—- C:WINDOWSsystem32lfimg13s.dll
2009-01-11 12:53:42 —-A—- C:WINDOWSsystem32lfimg13n.dll
2009-01-11 12:53:42 —-A—- C:WINDOWSsystem32lfiff13s.dll
2009-01-11 12:53:42 —-A—- C:WINDOWSsystem32lfiff13n.dll
2009-01-11 12:53:42 —-A—- C:WINDOWSsystem32lffax13s.dll
2009-01-11 12:53:42 —-A—- C:WINDOWSsystem32lffax13n.dll
2009-01-11 12:53:41 —-A—- C:WINDOWSsystem32lttwn13n.dll
2009-01-11 12:53:41 —-A—- C:WINDOWSsystem32LTCLR13n.dll
2009-01-11 12:53:41 —-A—- C:WINDOWSsystem32lftif13s.dll
2009-01-11 12:53:41 —-A—- C:WINDOWSsystem32lfpcx13n.dll
2009-01-11 12:53:41 —-A—- C:WINDOWSsystem32lfjbg13s.dll
2009-01-11 12:53:41 —-A—- C:WINDOWSsystem32LFJ2K13s.dll
2009-01-11 12:53:41 —-A—- C:WINDOWSsystem32lfeps13s.dll
2009-01-11 12:53:41 —-A—- C:WINDOWSsystem32LFCMP13s.DLL
2009-01-11 12:53:41 —-A—- C:WINDOWSsystem32lfclp13s.dll
2009-01-11 12:53:41 —-A—- C:WINDOWSsystem32lfbmp13s.dll
2009-01-11 12:53:41 —-A—- C:WINDOWSsystem32lfavi13s.dll
2009-01-11 12:53:41 —-A—- C:WINDOWSsystem32lfani13s.dll
2009-01-11 12:53:39 —-A—- C:WINDOWSsystem32LTTLB13n.dll
2009-01-11 12:53:39 —-A—- C:WINDOWSsystem32Ltpnt13n.dll
2009-01-11 12:53:39 —-A—- C:WINDOWSsystem32ltpdg13n.dll
2009-01-11 12:53:39 —-A—- C:WINDOWSsystem32LTOCR13n.dll
2009-01-11 12:53:39 —-A—- C:WINDOWSsystem32ltefx13n.dll
2009-01-11 12:53:39 —-A—- C:WINDOWSsystem32ltbar13n.dll
2009-01-11 12:53:39 —-A—- C:WINDOWSsystem32Lfpng13n.dll
2009-01-11 12:53:39 —-A—- C:WINDOWSsystem32lfpcd13n.dll
2009-01-11 12:53:39 —-A—- C:WINDOWSsystem32LFJ2K13n.dll
2009-01-11 12:53:39 —-A—- C:WINDOWSsystem32lfeps13n.dll
2009-01-11 12:53:39 —-A—- C:WINDOWSsystem32lfclp13n.dll
2009-01-11 12:53:39 —-A—- C:WINDOWSsystem32lfavi13n.dll
2009-01-11 12:53:39 —-A—- C:WINDOWSsystem32lfani13n.dll
2009-01-11 12:53:38 —-A—- C:WINDOWSsystem32lttmb13n.dll
2009-01-11 12:53:38 —-A—- C:WINDOWSsystem32ltlst13n.dll
2009-01-11 12:53:38 —-A—- C:WINDOWSsystem32ltkrn13n.dll
2009-01-11 12:53:38 —-A—- C:WINDOWSsystem32ltimg13n.dll
2009-01-11 12:53:38 —-A—- C:WINDOWSsystem32ltfil13n.DLL
2009-01-11 12:53:38 —-A—- C:WINDOWSsystem32ltdlg13n.dll
2009-01-11 12:53:38 —-A—- C:WINDOWSsystem32LTDIS13n.dll
2009-01-11 12:53:38 —-A—- C:WINDOWSsystem32lftif13n.dll
2009-01-11 12:53:38 —-A—- C:WINDOWSsystem32lfpsd13n.dll
2009-01-11 12:53:38 —-A—- C:WINDOWSsystem32LFPNM13n.dll
2009-01-11 12:53:38 —-A—- C:WINDOWSsystem32lfmsp13n.dll
2009-01-11 12:53:38 —-A—- C:WINDOWSsystem32lfjbg13n.dll
2009-01-11 12:53:38 —-A—- C:WINDOWSsystem32LFCMP13n.DLL
2009-01-11 12:53:38 —-A—- C:WINDOWSsystem32lfbmp13n.dll
2009-01-11 12:53:37 —-A—- C:WINDOWSsystem32Mfcoleui.dll
2009-01-11 12:53:37 —-A—- C:WINDOWSsystem32Ltwvc13n.dll
2009-01-11 12:53:35 —-D—- C:Program FilesCommon FilesSRC Shared
2009-01-11 12:53:14 —-A—- C:WINDOWSReadiris.ini
2009-01-11 12:53:08 —-A—- C:WINDOWSsystem32irisco32.dll
2009-01-11 12:51:53 —-D—- C:Program FilesReadiris10
2009-01-11 12:51:25 —-D—- C:Program FilesSmarThru 4
2009-01-11 12:50:39 —-A—- C:WINDOWSssndii.exe
2009-01-11 12:50:32 —-D—- C:WINDOWSSamsung
2009-01-11 12:47:24 —-RA—- C:WINDOWSWiaInst.exe
2009-01-11 12:45:47 —-D—- C:Program FilesSAMSUNG
2009-01-11 12:45:23 —-A—- C:WINDOWSsystem32SUGE1CI.exe
2009-01-11 12:45:22 —-A—- C:WINDOWSsystem32SUGE1LMK.DLL
2009-01-11 12:45:22 —-A—- C:WINDOWSsystem32SUGE1CI.dll
2009-01-11 12:44:28 —-RA—- C:WINDOWSsystem32Ssusbpn.dll
2009-01-11 12:44:28 —-RA—- C:WINDOWSsystem32Ssuiext.dll
2009-01-11 12:44:28 —-RA—- C:WINDOWSsystem32Ssdevm.dll
2009-01-11 12:44:28 —-A—- C:WINDOWSsystem32WIASTIIO.dll
2009-01-11 12:44:28 —-A—- C:WINDOWSsystem32WIAIPH.dll
2009-01-11 12:44:28 —-A—- C:WINDOWSsystem32WIAEH.dll
2009-01-11 12:44:28 —-A—- C:WINDOWSsystem32Sswiadrv.dll
2009-01-03 21:27:43 —-D—- C:Program FilesTVBrowserLITE

======List of files/folders modified in the last 3 months======

2009-03-28 19:37:39 —-D—- C:WINDOWSPrefetch
2009-03-28 19:35:31 —-D—- C:WINDOWSTemp
2009-03-28 19:33:50 —-D—- C:WINDOWSsystem32drivers
2009-03-28 19:33:37 —-D—- C:WINDOWSsystem32
2009-03-28 19:32:13 —-D—- C:WINDOWS
2009-03-28 19:30:02 —-A—- C:WINDOWSSchedLgU.Txt
2009-03-28 19:11:47 —-A—- C:WINDOWSwin.ini
2009-03-28 13:20:59 —-A—- C:WINDOWSModemLog_Agere Systems AC’97 Modem.txt
2009-03-26 11:54:04 —-RD—- C:Program Files
2009-03-25 12:07:19 —-SHD—- C:Config.Msi
2009-03-25 12:03:38 —-SHD—- C:WINDOWSInstaller
2009-03-24 12:32:26 —-D—- C:WINDOWSsystem32CatRoot2
2009-03-24 10:26:02 —-D—- C:WINDOWSSoftwareDistribution
2009-03-23 17:51:26 —-SD—- C:Documents and Settings1Application DataMicrosoft
2009-03-22 09:28:35 —-AC—- C:WINDOWSNeroDigital.ini
2009-03-16 13:04:33 —-D—- C:WINDOWSsystem32CatRoot
2009-03-12 12:11:19 —-D—- C:Program FilesLx_cats
2009-03-12 12:08:42 —-D—- C:WINDOWSsystem32config
2009-03-12 12:07:58 —-D—- C:WINDOWSsystem32wbem
2009-03-12 12:07:54 —-D—- C:WINDOWSRegistration
2009-03-11 16:34:36 —-HD—- C:WINDOWSinf
2009-02-14 14:24:10 —-AC—- C:WINDOWScncscore.ini
2009-02-10 13:09:10 —-RSHDC—- C:WINDOWSsystem32dllcache
2009-02-03 17:51:46 —-AC—- C:WINDOWSWincmd.ini
2009-02-02 15:11:39 —-D—- C:WINDOWSehome
2009-02-02 14:39:19 —-D—- C:WINDOWSMinidump
2009-02-02 10:11:18 —-A—- C:WINDOWSimsins.BAK
2009-02-02 09:55:08 —-D—- C:WINDOWSDebug
2009-01-29 12:45:39 —-D—- C:Documents and Settings1Application DataGrym
2009-01-29 11:57:07 —-D—- C:WINDOWSWinSxS
2009-01-28 16:57:38 —-D—- C:WINDOWSHelp
2009-01-27 17:05:42 —-D—- C:WINDOWSsystem32ReinstallBackups
2009-01-27 12:48:55 —-D—- C:WINDOWSsystem32Restore
2009-01-11 12:53:35 —-D—- C:Program FilesCommon Files
2009-01-11 12:52:07 —-HD—- C:Program FilesInstallShield Installation Information
2009-01-11 12:44:23 —-D—- C:WINDOWStwain_32

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 SiSkp;SiSkp; C:WINDOWSsystem32DRIVERSsrvkp.sys [2005-02-25 13312]
R1 UBHelper;UBHelper; C:WINDOWSsystem32driversUBHelper.sys [2004-12-17 13952]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.2.0.3; C:WINDOWSsystem32DRIVERSAegisP.sys [2007-08-13 17801]
R2 BTSERIAL;Bluetooth Serial Driver; ??C:WINDOWSsystem32driversbtserial.sys []
R2 BTSLBCSP;Bluetooth Port Client Driver; ??C:WINDOWSsystem32driversbtslbcsp.sys []
R2 osaio;osaio; ??C:WINDOWSsystem32driversosaio.sys []
R2 osanbm;osanbm; ??C:WINDOWSsystem32driversosanbm.sys []
R3 AgereSoftModem;Agere Systems Soft Modem; C:WINDOWSsystem32DRIVERSAGRSM.sys [2004-10-08 1270540]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:WINDOWSsystem32driversALCXWDM.SYS [2005-02-24 2311680]
R3 BTKRNL;Нумератор шины Bluetooth; C:WINDOWSsystem32DRIVERSbtkrnl.sys [2005-09-20 1342122]
R3 CmBatt;Драйвер батареи с ACPI-управлением (Майкрософт); C:WINDOWSsystem32DRIVERSCmBatt.sys [2004-08-04 14080]
R3 dac970nt;dac970nt; ??C:WINDOWSsystem32drivers.sys []
R3 DKbFltr;Dritek HotKey Keyboard Filter Driver; C:WINDOWSSystem32DriversDKbFltr.sys [2004-12-08 16896]
R3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2001-08-17 9600]
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-19 12160]
R3 NTIDrvr;Upper Class Filter Driver; C:WINDOWSsystem32DRIVERSNTIDrvr.sys [2007-08-13 6144]
R3 pfc;Padus ASPI Shell; C:WINDOWSsystem32driverspfc.sys [2007-08-15 9856]
R3 SiS315;SiS315; C:WINDOWSsystem32DRIVERSsisgrp.sys [2005-03-01 240640]
R3 SISNICXP;SiS PCI Fast Ethernet Adapter Driver for NDIS51; C:WINDOWSsystem32DRIVERSsisnicxp.sys [2004-11-05 32768]
R3 SynTP;Synaptics TouchPad Driver; C:WINDOWSsystem32DRIVERSSynTP.sys [2004-10-08 185824]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2004-08-04 26624]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2004-08-04 57600]
R3 usbohci;Драйвер минипорта Microsoft USB открытого хост-контроллера; C:WINDOWSsystem32DRIVERSusbohci.sys [2004-08-04 17024]
S2 DgiVecp;DgiVecp; ??C:WINDOWSsystem32DriversDgiVecp.sys []
S3 btaudio;Аудиоустройство Bluetooth; C:WINDOWSsystem32driversbtaudio.sys [2005-09-20 401664]
S3 BTDriver;Драйвер виртуальной связи Bluetooth; C:WINDOWSsystem32DRIVERSbtport.sys [2005-09-19 30363]
S3 BTWDNDIS;Сервер доступа к локальной сети Bluetooth; C:WINDOWSsystem32DRIVERSbtwdndis.sys [2005-09-19 148040]
S3 SISNIC;SiS PCI Fast Ethernet адаптер, драйвер; C:WINDOWSsystem32DRIVERSsisnic.sys [2004-08-04 32768]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2004-08-03 31616]
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2004-08-03 25856]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2004-08-03 15104]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-03 26496]
S4 IntelIde;IntelIde; C:WINDOWSsystem32driversIntelIde.sys []
S4 WS2IFSL;Среда Windows Socket 2.0 поддержки поставщиков не-IFS служб; C:WINDOWSSystem32driversws2ifsl.sys [2001-10-20 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 anbmService;Notebook Manager Service; C:AcereManageranbmServ.exe [2005-06-06 1273344]
R2 btwdins;Bluetooth Service; C:Program FilesWIDCOMMПрограммное обеспечение Bluetoothbinbtwdins.exe [2005-09-19 258103]
R2 MDM;Machine Debug Manager; C:Program FilesCommon FilesMicrosoft SharedVS7Debugmdm.exe [2001-02-23 270336]
R2 wltrysvc;Broadcom Wireless LAN Tray Service; C:WINDOWSSystem32wltrysvc.exe [2004-12-22 65536]
R3 lxcc_device;lxcc_device; C:WINDOWSsystem32lxcccoms.exe [2005-02-25 466944]

EOF
Автор

Сообщения