SPYWARE-RU.COM

Созданные ответы форума

Просмотр 6 сообщений - с 1 по 6 (из 6 всего)

Автор

Сообщения
1 ноября, 2009 в 3:43 дп в ответ на: опять ничего не выходит! #26621
yabybnb
Participant
- Темы:5
- Сообщений:11
Здравствуйте,спасибо,что откликнулись!
Высылаю как Вы и просили.
info.txt logfile of random’s system information tool 1.06 2009-11-01 13:36:30

======Uninstall list======

—>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
ESET NOD32 Antivirus—>MsiExec.exe /I{3D057AD8-E03B-46D3-88C2-BAE2A8B6261A}
HijackThis 2.0.2—>»C:Program Filestrend microHijackThis.exe» /uninstall
Java(TM) 6 Update 13—>MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
Mail.Ru Агент 5.5 (сборка 2842, для всех пользователей)—>C:Program FilesMail.RuAgentmagentsetup.exe -uninstalllm
Mail.Ru Спутник 2.1.0.4—>c:program filesmail.rusputnikSputnikInstaller.exe -uninstall
Microsoft .NET Framework 1.1 Russian Language Pack—>MsiExec.exe /X{2BB372D9-52B4-410A-BC1A-FEAB63181EEF}
Microsoft .NET Framework 1.1—>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1—>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Language Pack — RUS—>C:WINDOWSMicrosoft.NETFrameworkv2.0.50727Microsoft .NET Framework 2.0 Language Pack — RUSinstall.exe
Microsoft .NET Framework 2.0 Service Pack 1—>MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
MSXML 4.0 SP3 Parser—>MsiExec.exe /I{196467F1-C11F-4F76-858B-5812ADC83B94}
Paint.NET v 3.36—>rundll32.exe advpack.dll,LaunchINFSection PaintDN.inf,Uninstall
Vista Drive Icon—>rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFVistaDrv.inf,Uninstall

======Security center information======

AV: ESET NOD32 Antivirus 3.0

======System event log======

Computer Name: MICROSOF-013250
Event Code: 6011
Message: NetBIOS-имя и имя DNS-узла этого компьютера были изменены с «MACHINENAME» на «MICROSOF-013250».

Record Number: 5
Source Name: EventLog
Time Written: 20091015023945.000000+240
Event Type: информация
User:

Computer Name: MACHINENAME
Event Code: 2
Message: При проверке, что DeviceSerial0 является последовательным портом, обнаружена и будет использоваться прямая очередь.

Record Number: 4
Source Name: Serial
Time Written: 20091015061303.000000+240
Event Type: информация
User:

Computer Name: MACHINENAME
Event Code: 2
Message: При проверке, что DeviceSerial1 является последовательным портом, обнаружена и будет использоваться прямая очередь.

Record Number: 3
Source Name: Serial
Time Written: 20091015061303.000000+240
Event Type: информация
User:

Computer Name: MACHINENAME
Event Code: 6005
Message: Запущена служба журнала событий.

Record Number: 2
Source Name: EventLog
Time Written: 20091015061252.000000+240
Event Type: информация
User:

Computer Name: MACHINENAME
Event Code: 6009
Message: Microsoft (R) Windows 2000 (R) 5.01. 2600 Service Pack 3 Uniprocessor Free.

Record Number: 1
Source Name: EventLog
Time Written: 20091015061252.000000+240
Event Type: информация
User:

=====Application event log=====

Computer Name: MICROSOF-013250
Event Code: 1000
Message: Счетчики производительности для службы MSDTC (MSDTC) загружены успешно.
Данные записи содержат новые значение индекса,
назначенного этой службе.

Record Number: 5
Source Name: LoadPerf
Time Written: 20091015024410.000000+240
Event Type: информация
User:

Computer Name: MICROSOF-013250
Event Code: 1000
Message: Счетчики производительности для службы TermService (Службы терминалов) загружены успешно.
Данные записи содержат новые значение индекса,
назначенного этой службе.

Record Number: 4
Source Name: LoadPerf
Time Written: 20091015024355.000000+240
Event Type: информация
User:

Computer Name: MICROSOF-013250
Event Code: 1000
Message: Счетчики производительности для службы RemoteAccess (Маршрутизация и удаленный доступ) загружены успешно.
Данные записи содержат новые значение индекса,
назначенного этой службе.

Record Number: 3
Source Name: LoadPerf
Time Written: 20091015024101.000000+240
Event Type: информация
User:

Computer Name: MICROSOF-013250
Event Code: 1000
Message: Счетчики производительности для службы PSched (PSched) загружены успешно.
Данные записи содержат новые значение индекса,
назначенного этой службе.

Record Number: 2
Source Name: LoadPerf
Time Written: 20091015024026.000000+240
Event Type: информация
User:

Computer Name: MICROSOF-013250
Event Code: 1000
Message: Счетчики производительности для службы RSVP (QoS RSVP) загружены успешно.
Данные записи содержат новые значение индекса,
назначенного этой службе.

Record Number: 1
Source Name: LoadPerf
Time Written: 20091015024004.000000+240
Event Type: информация
User:

======Environment variables======

«ComSpec»=%SystemRoot%system32cmd.exe
«Path»=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem
«windir»=%SystemRoot%
«FP_NO_HOST_CHECK»=NO
«OS»=Windows_NT
«PROCESSOR_ARCHITECTURE»=x86
«PROCESSOR_LEVEL»=6
«PROCESSOR_IDENTIFIER»=x86 Family 6 Model 7 Stepping 3, GenuineIntel
«PROCESSOR_REVISION»=0703
«NUMBER_OF_PROCESSORS»=1
«PATHEXT»=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
«TEMP»=%SystemRoot%TEMP
«TMP»=%SystemRoot%TEMP

EOF

Logfile of random’s system information tool 1.06 (written by random/random)
Run by Admin at 2009-11-01 13:35:39
Microsoft Windows XP Professional Service Pack 3
System drive C: has 6 GB (74%) free of 9 GB
Total RAM: 256 MB (14% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:36:12, on 01.11.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesESETESET NOD32 Antivirusekrn.exe
C:Program FilesJavajre6binjqs.exe
C:Program FilesMail.RuAgentMAgent.exe
C:Program FilesESETESET NOD32 Antivirusegui.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesVistaDriveIconVistaDrv.exe
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:Documents and SettingsAdminРабочий столRSIT.exe
C:Program Filestrend microAdmin.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.inet123.ru/
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = 10.1.30.35:8080
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — c:program filesmail.rusputnikMailRuSputnik.dll
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:Program FilesMail.RuAgentMradllnewmrasearch.dll
O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — c:program filesmail.rusputnikMailRuSputnik.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll
O2 — BHO: JQSIEStartDetectorImpl — {E7E6F031-17CE-4C07-BC86-EABFE594F69C} — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 — Toolbar: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — c:program filesmail.rusputnikMailRuSputnik.dll
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe -LM
O4 — HKLM..Run: [egui] «C:Program FilesESETESET NOD32 Antivirusegui.exe» /hide /waitservice
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,OnceFirstLogonInstall,0 (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE8_02] rundll32 advpack.dll,LaunchINFSectionEx IE8int.inf,AfterUserStart,,4,N (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,OnceFirstLogonInstall,0 (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%System32rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFcustom.inf,NewUserFirstLogonInstall,0 (User ‘Default user’)
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O17 — HKLMSystemCCSServicesTcpip..{040928C1-82AE-4575-8132-17DCC5E46D87}: NameServer = 10.255.0.1
O17 — HKLMSystemCS1ServicesTcpip..{040928C1-82AE-4575-8132-17DCC5E46D87}: NameServer = 10.255.0.1
O17 — HKLMSystemCS2ServicesTcpip..{040928C1-82AE-4575-8132-17DCC5E46D87}: NameServer = 10.255.0.1
O23 — Service: Eset HTTP Server (EhttpSrv) — ESET — C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe
O23 — Service: Eset Service (ekrn) — ESET — C:Program FilesESETESET NOD32 Antivirusekrn.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: Java Quick Starter (JavaQuickStarterService) — Sun Microsystems, Inc. — C:Program FilesJavajre6binjqs.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 6499 bytes

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — c:program filesmail.rusputnikMailRuSputnik.dll [2009-10-31 826032]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll [2009-10-15 35840]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class — C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2009-10-15 73728]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — c:program filesmail.rusputnikMailRuSputnik.dll [2009-10-31 826032]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«MAgent»=C:Program FilesMail.RuAgentMAgent.exe [2009-10-31 7975608]
«egui»=C:Program FilesESETESET NOD32 Antivirusegui.exe [2008-02-06 1443072]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2009-04-24 30208]
«VistaIcon»=C:Program FilesVistaDriveIconVistaDrv.exe [2008-01-02 132096]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32wpdshserviceobj.dll [2008-05-18 133632]
UPnPMonitor — {e57ce738-33e8-4c51-8354-bb4de9d215d1} — C:WINDOWSsystem32upnpui.dll [2008-04-15 239616]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=145
«NoSharedDocuments»=1
«NoSMConfigurePrograms»=1

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«HonorAutoRunSetting»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:WINDOWSsystem32usmtmigwiz.exe»=»C:WINDOWSsystem32usmtmigwiz.exe:*:Enabled:Мастер переноса файлов и параметров»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»

======List of files/folders created in the last 1 months======

2009-11-01 13:35:39 —-DC—- C:rsit
2009-10-31 03:09:20 —-DC—- C:Program Filestrend micro
2009-10-31 02:39:34 —-C—- C:WINDOWSsystem32spmsg.dll
2009-10-31 02:39:31 —-AC—- C:WINDOWSsystem32spupdsvc.exe
2009-10-31 02:33:44 —-DC—- C:Program FilesESET
2009-10-31 02:33:44 —-DC—- C:Documents and SettingsAll UsersApplication DataESET
2009-10-31 02:10:38 —-DC—- C:WINDOWSSun
2009-10-31 02:06:56 —-DC—- C:Documents and SettingsAdminApplication DataMra
2009-10-31 02:06:44 —-DC—- C:Program FilesMail.Ru
2009-10-31 00:47:34 —-DC—- C:Documents and SettingsAdminApplication DataMacromedia
2009-10-31 00:43:34 —-DC—- C:Documents and SettingsAdminApplication DataAdobe
2009-10-16 17:19:14 —-AC—- C:WINDOWSModemLog_Стандартный модем 9600 bps.txt
2009-10-16 15:51:29 —-SHDC—- C:RECYCLER
2009-10-15 05:39:27 —-AC—- C:WINDOWSsystem32h323log.txt
2009-10-15 05:36:53 —-AC—- C:WINDOWSsystem32ksuser.dll
2009-10-15 05:36:45 —-A—- C:WINDOWSsystem32nv4_disp.dll
2009-10-15 05:35:29 —-AC—- C:WINDOWSsystem32usbui.dll
2009-10-15 05:29:02 —-AC—- C:WINDOWSimsins.BAK
2009-10-15 05:28:56 —-AC—- C:WINDOWSsystem32PerfStringBackup.INI
2009-10-15 05:28:55 —-SHDC—- C:WINDOWSInstaller
2009-10-15 05:28:53 —-DC—- C:Program FilesCommon FilesODBC
2009-10-15 05:28:53 —-AC—- C:WINDOWSODBCINST.INI
2009-10-15 05:28:47 —-DC—- C:Program FilesCommon FilesSpeechEngines
2009-10-15 05:28:46 —-RDC—- C:Program Files
2009-10-15 05:28:46 —-DC—- C:Program FilesCommon FilesMicrosoft Shared
2009-10-15 05:28:46 —-DC—- C:Program FilesCommon Files
2009-10-15 05:28:42 —-RAC—- C:WINDOWSsystem32kbdazel.dll
2009-10-15 05:28:41 —-RAC—- C:WINDOWSsystem32kbdtuq.dll
2009-10-15 05:28:41 —-RAC—- C:WINDOWSsystem32kbdtuf.dll
2009-10-15 05:28:39 —-RAC—- C:WINDOWSsystem32kbdhept.dll
2009-10-15 05:28:39 —-RAC—- C:WINDOWSsystem32kbdhela3.dll
2009-10-15 05:28:39 —-RAC—- C:WINDOWSsystem32kbdhela2.dll
2009-10-15 05:28:39 —-RAC—- C:WINDOWSsystem32kbdhe319.dll
2009-10-15 05:28:39 —-RAC—- C:WINDOWSsystem32kbdhe220.dll
2009-10-15 05:28:39 —-RAC—- C:WINDOWSsystem32kbdhe.dll
2009-10-15 05:28:39 —-RAC—- C:WINDOWSsystem32kbdgkl.dll
2009-10-15 05:28:38 —-RAC—- C:WINDOWSsystem32kbdlt1.dll
2009-10-15 05:28:37 —-RAC—- C:WINDOWSsystem32kbdlv1.dll
2009-10-15 05:28:37 —-RAC—- C:WINDOWSsystem32kbdlv.dll
2009-10-15 05:28:37 —-RAC—- C:WINDOWSsystem32kbdlt.dll
2009-10-15 05:28:37 —-RAC—- C:WINDOWSsystem32kbdest.dll
2009-10-15 05:28:36 —-RAC—- C:WINDOWSsystem32kbdsl1.dll
2009-10-15 05:28:36 —-RAC—- C:WINDOWSsystem32kbdsl.dll
2009-10-15 05:28:36 —-RAC—- C:WINDOWSsystem32kbdro.dll
2009-10-15 05:28:36 —-RAC—- C:WINDOWSsystem32kbdpl1.dll
2009-10-15 05:28:36 —-RAC—- C:WINDOWSsystem32kbdpl.dll
2009-10-15 05:28:36 —-RAC—- C:WINDOWSsystem32kbdhu1.dll
2009-10-15 05:28:36 —-RAC—- C:WINDOWSsystem32kbdhu.dll
2009-10-15 05:28:35 —-RAC—- C:WINDOWSsystem32kbdycl.dll
2009-10-15 05:28:35 —-RAC—- C:WINDOWSsystem32kbdcz2.dll
2009-10-15 05:28:35 —-RAC—- C:WINDOWSsystem32kbdcz1.dll
2009-10-15 05:28:35 —-RAC—- C:WINDOWSsystem32kbdcz.dll
2009-10-15 05:28:35 —-RAC—- C:WINDOWSsystem32kbdcr.dll
2009-10-15 05:28:35 —-RAC—- C:WINDOWSsystem32KBDAL.DLL
2009-10-15 05:28:28 —-AC—- C:WINDOWSsystem32kbduzb.dll
2009-10-15 05:28:28 —-AC—- C:WINDOWSsystem32kbdur.dll
2009-10-15 05:28:28 —-AC—- C:WINDOWSsystem32kbdtat.dll
2009-10-15 05:28:28 —-AC—- C:WINDOWSsystem32kbdmon.dll
2009-10-15 05:28:28 —-AC—- C:WINDOWSsystem32kbdkyr.dll
2009-10-15 05:28:28 —-AC—- C:WINDOWSsystem32kbdkaz.dll
2009-10-15 05:28:28 —-AC—- C:WINDOWSsystem32kbdaze.dll
2009-10-15 05:28:27 —-AC—- C:WINDOWSsystem32kbdycc.dll
2009-10-15 05:28:27 —-AC—- C:WINDOWSsystem32kbdbu.dll
2009-10-15 05:28:27 —-AC—- C:WINDOWSsystem32kbdblr.dll
2009-10-15 05:28:25 —-AC—- C:WINDOWSsystem32irclass.dll
2009-10-15 05:28:25 —-AC—- C:WINDOWSsystem32dgrpsetu.dll
2009-10-15 05:28:24 —-AC—- C:WINDOWSsystem32spxcoins.dll
2009-10-15 05:28:24 —-AC—- C:WINDOWSsystem32EqnClass.Dll
2009-10-15 05:28:24 —-AC—- C:WINDOWSsystem32dgsetup.dll
2009-10-15 05:28:21 —-C—- C:WINDOWSsystem32CONFIG.TMP
2009-10-15 05:28:21 —-AC—- C:WINDOWSTASKMAN.EXE
2009-10-15 05:28:20 —-AC—- C:WINDOWSsystem32batt.dll
2009-10-15 05:28:19 —-AC—- C:WINDOWSsystem32storprop.dll
2009-10-15 05:28:19 —-AC—- C:WINDOWSNOTEPAD.EXE
2009-10-15 05:28:02 —-ASH—- C:Documents and SettingsAll UsersApplication Datadesktop.ini
2009-10-15 05:26:17 —-RAC—- C:WINDOWSSET8.tmp
2009-10-15 05:26:08 —-RAC—- C:WINDOWSSET4.tmp
2009-10-15 05:26:02 —-RAC—- C:WINDOWSSET3.tmp
2009-10-15 05:25:50 —-SDC—- C:Documents and SettingsAll UsersApplication DataMicrosoft
2009-10-15 05:25:17 —-AC—- C:WINDOWSsetuplog.txt
2009-10-15 05:14:59 —-DC—- C:WINDOWSsystem32CatRoot2
2009-10-15 05:14:59 —-DC—- C:WINDOWSsystem32CatRoot
2009-10-15 05:12:40 —-DC—- C:Documents and Settings
2009-10-15 05:12:39 —-SHD—- C:System Volume Information
2009-10-15 05:10:39 —-SHC—- C:boot.ini
2009-10-15 04:57:25 —-RSHDC—- C:WINDOWSsystem32dllcache
2009-10-15 04:57:25 —-RSDC—- C:WINDOWSFonts
2009-10-15 04:57:25 —-RDC—- C:WINDOWSWeb
2009-10-15 04:57:25 —-HDC—- C:WINDOWSinf
2009-10-15 04:57:25 —-DC—- C:WINDOWSWinSxS
2009-10-15 04:57:25 —-DC—- C:WINDOWStwain_32
2009-10-15 04:57:25 —-DC—- C:WINDOWSTemp
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32wins
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32wbem
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32usmt
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32spool
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32ShellExt
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32Setup
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32ru-ru
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32ru
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32ras
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32oobe
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32npp
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32mui
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32inetsrv
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32IME
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32icsxml
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32ias
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32export
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32drivers
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32dhcp
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem32config
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem323com_dmi
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem323076
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem322052
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem321054
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem321049
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem321042
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem321041
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem321037
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem321033
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem321031
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem321028
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem321025
2009-10-15 04:57:25 —-DC—- C:WINDOWSsystem
2009-10-15 04:57:25 —-DC—- C:WINDOWSsecurity
2009-10-15 04:57:25 —-DC—- C:WINDOWSResources
2009-10-15 04:57:25 —-DC—- C:WINDOWSrepair
2009-10-15 04:57:25 —-DC—- C:WINDOWSProvisioning
2009-10-15 04:57:25 —-DC—- C:WINDOWSPeerNet
2009-10-15 04:57:25 —-DC—- C:WINDOWSpchealth
2009-10-15 04:57:25 —-DC—- C:WINDOWSNetwork Diagnostic
2009-10-15 04:57:25 —-DC—- C:WINDOWSmui
2009-10-15 04:57:25 —-DC—- C:WINDOWSmsapps
2009-10-15 04:57:25 —-DC—- C:WINDOWSmsagent
2009-10-15 04:57:25 —-DC—- C:WINDOWSMedia
2009-10-15 04:57:25 —-DC—- C:WINDOWSL2Schemas
2009-10-15 04:57:25 —-DC—- C:WINDOWSjava
2009-10-15 04:57:25 —-DC—- C:WINDOWSime
2009-10-15 04:57:25 —-DC—- C:WINDOWSHelp
2009-10-15 04:57:25 —-DC—- C:WINDOWSehome
2009-10-15 04:57:25 —-DC—- C:WINDOWSDriver Cache
2009-10-15 04:57:25 —-DC—- C:WINDOWSDebug
2009-10-15 04:57:25 —-DC—- C:WINDOWSCursors
2009-10-15 04:57:25 —-DC—- C:WINDOWSConnection Wizard
2009-10-15 04:57:25 —-DC—- C:WINDOWSConfig
2009-10-15 04:57:25 —-DC—- C:WINDOWSAppPatch
2009-10-15 04:57:25 —-DC—- C:WINDOWSaddins
2009-10-15 04:57:25 —-DC—- C:WINDOWS
2009-10-15 04:57:25 —-ADC—- C:WINDOWSsystem32
2009-10-15 02:29:36 —-AC—- C:WINDOWSWPI_Log_2009.10.15_03.29.36.txt
2009-10-15 02:29:36 —-AC—- C:rb_config.js
2009-10-15 02:29:36 —-AC—- C:history.js
2009-10-15 02:27:18 —-AC—- C:WINDOWSsystem32oeminfo.ini
2009-10-15 02:27:12 —-AC—- C:WINDOWSsystem32Reg2Inf.exe
2009-10-15 02:27:09 —-AC—- C:WINDOWSsystem32hidcon.exe
2009-10-15 02:27:08 —-AC—- C:WINDOWSsystem32OEMINFO.CMD
2009-10-15 02:26:23 —-AC—- C:WINDOWSsystem32wmpns.dll
2009-10-15 02:26:13 —-DC—- C:Documents and SettingsAdminApplication DataIdentities
2009-10-15 02:25:50 —-HDC—- C:Program FilesUninstall Information
2009-10-15 02:23:40 —-RDC—- C:WINDOWSOemDrv
2009-10-15 02:23:23 —-ASH—- C:Documents and SettingsAdminApplication Datadesktop.ini
2009-10-15 02:23:22 —-SDC—- C:Documents and SettingsAdminApplication DataMicrosoft
2009-10-15 02:23:22 —-DC—- C:Documents and SettingsAdminApplication DataSun
2009-10-15 02:21:56 —-SDC—- C:WINDOWSsystem32Microsoft
2009-10-15 02:21:56 —-A—- C:WINDOWSSchedLgU.Txt
2009-10-15 02:10:16 —-DC—- C:WINDOWSsystem32xircom
2009-10-15 02:10:15 —-DC—- C:Program Filesmsn gaming zone
2009-10-15 02:07:33 —-DC—- C:Program FilesVistaDriveIcon
2009-10-15 02:07:00 —-ADC—- C:Program FilesPaint.NET
2009-10-15 02:06:58 —-AC—- C:WINDOWSsystem32wiaaut.dll
2009-10-15 02:06:42 —-AC—- C:WINDOWSdelete.bat
2009-10-15 02:06:37 —-AC—- C:WINDOWSinnounp.exe
2009-10-15 02:06:20 —-AC—- C:WINDOWSsystem32javaws.exe
2009-10-15 02:06:20 —-AC—- C:WINDOWSsystem32javaw.exe
2009-10-15 02:06:20 —-AC—- C:WINDOWSsystem32java.exe
2009-10-15 02:06:20 —-AC—- C:WINDOWSsystem32deploytk.dll
2009-10-15 02:05:41 —-DC—- C:Program FilesJava
2009-10-15 01:57:25 —-RSDC—- C:WINDOWSassembly
2009-10-15 01:57:24 —-DC—- C:WINDOWSMicrosoft.NET
2009-10-15 01:57:18 —-DC—- C:WINDOWSsystem32URTTemp
2009-10-15 01:55:19 —-AC—- C:WINDOWSsystem32xinput9_1_0.dll
2009-10-15 01:55:18 —-AC—- C:WINDOWSsystem32xinput1_3.dll
2009-10-15 01:55:18 —-AC—- C:WINDOWSsystem32xinput1_2.dll
2009-10-15 01:55:18 —-AC—- C:WINDOWSsystem32xinput1_1.dll
2009-10-15 01:55:18 —-AC—- C:WINDOWSsystem32XAudio2_4.dll
2009-10-15 01:55:18 —-AC—- C:WINDOWSsystem32XAudio2_3.dll
2009-10-15 01:55:17 —-AC—- C:WINDOWSsystem32XAudio2_2.dll
2009-10-15 01:55:17 —-AC—- C:WINDOWSsystem32XAudio2_1.dll
2009-10-15 01:55:17 —-AC—- C:WINDOWSsystem32XAudio2_0.dll
2009-10-15 01:55:17 —-AC—- C:WINDOWSsystem32XAPOFX1_3.dll
2009-10-15 01:55:16 —-AC—- C:WINDOWSsystem32XAPOFX1_2.dll
2009-10-15 01:55:16 —-AC—- C:WINDOWSsystem32XAPOFX1_1.dll
2009-10-15 01:55:16 —-AC—- C:WINDOWSsystem32XAPOFX1_0.dll
2009-10-15 01:55:16 —-AC—- C:WINDOWSsystem32xactengine3_4.dll
2009-10-15 01:55:16 —-AC—- C:WINDOWSsystem32xactengine3_3.dll
2009-10-15 01:55:16 —-AC—- C:WINDOWSsystem32xactengine3_2.dll
2009-10-15 01:55:16 —-AC—- C:WINDOWSsystem32xactengine3_1.dll
2009-10-15 01:55:16 —-AC—- C:WINDOWSsystem32xactengine3_0.dll
2009-10-15 01:55:15 —-AC—- C:WINDOWSsystem32xactengine2_9.dll
2009-10-15 01:55:15 —-AC—- C:WINDOWSsystem32xactengine2_8.dll
2009-10-15 01:55:15 —-AC—- C:WINDOWSsystem32xactengine2_7.dll
2009-10-15 01:55:15 —-AC—- C:WINDOWSsystem32xactengine2_6.dll
2009-10-15 01:55:15 —-AC—- C:WINDOWSsystem32xactengine2_5.dll
2009-10-15 01:55:15 —-AC—- C:WINDOWSsystem32xactengine2_4.dll
2009-10-15 01:55:15 —-AC—- C:WINDOWSsystem32xactengine2_3.dll
2009-10-15 01:55:15 —-AC—- C:WINDOWSsystem32xactengine2_2.dll
2009-10-15 01:55:15 —-AC—- C:WINDOWSsystem32xactengine2_10.dll
2009-10-15 01:55:15 —-AC—- C:WINDOWSsystem32xactengine2_1.dll
2009-10-15 01:55:15 —-AC—- C:WINDOWSsystem32xactengine2_0.dll
2009-10-15 01:55:15 —-AC—- C:WINDOWSsystem32X3DAudio1_6.dll
2009-10-15 01:55:15 —-AC—- C:WINDOWSsystem32X3DAudio1_5.dll
2009-10-15 01:55:15 —-AC—- C:WINDOWSsystem32X3DAudio1_4.dll
2009-10-15 01:55:15 —-AC—- C:WINDOWSsystem32X3DAudio1_3.dll
2009-10-15 01:55:15 —-AC—- C:WINDOWSsystem32x3daudio1_2.dll
2009-10-15 01:55:15 —-AC—- C:WINDOWSsystem32x3daudio1_1.dll
2009-10-15 01:55:15 —-AC—- C:WINDOWSsystem32x3daudio1_0.dll
2009-10-15 01:55:14 —-AC—- C:WINDOWSsystem32d3dx9_41.dll
2009-10-15 01:55:14 —-AC—- C:WINDOWSsystem32d3dx9_40.dll
2009-10-15 01:55:13 —-AC—- C:WINDOWSsystem32d3dx9_39.dll
2009-10-15 01:55:13 —-AC—- C:WINDOWSsystem32d3dx9_38.dll
2009-10-15 01:55:12 —-AC—- C:WINDOWSsystem32d3dx9_37.dll
2009-10-15 01:55:11 —-AC—- C:WINDOWSsystem32d3dx9_36.dll
2009-10-15 01:55:11 —-AC—- C:WINDOWSsystem32d3dx9_35.dll
2009-10-15 01:55:10 —-AC—- C:WINDOWSsystem32d3dx9_34.dll
2009-10-15 01:55:09 —-AC—- C:WINDOWSsystem32d3dx9_33.dll
2009-10-15 01:55:09 —-AC—- C:WINDOWSsystem32d3dx9_32.dll
2009-10-15 01:55:08 —-AC—- C:WINDOWSsystem32d3dx9_31.dll
2009-10-15 01:55:08 —-AC—- C:WINDOWSsystem32d3dx9_30.dll
2009-10-15 01:55:07 —-AC—- C:WINDOWSsystem32d3dx9_29.dll
2009-10-15 01:55:06 —-AC—- C:WINDOWSsystem32d3dx9_28.dll
2009-10-15 01:55:06 —-AC—- C:WINDOWSsystem32d3dx9_27.dll
2009-10-15 01:55:05 —-AC—- C:WINDOWSsystem32d3dx9_26.dll
2009-10-15 01:55:05 —-AC—- C:WINDOWSsystem32d3dx9_25.dll
2009-10-15 01:55:05 —-AC—- C:WINDOWSsystem32d3dx9_24.dll
2009-10-15 01:55:05 —-AC—- C:WINDOWSsystem32d3dx10_41.dll
2009-10-15 01:55:05 —-AC—- C:WINDOWSsystem32d3dx10_40.dll
2009-10-15 01:55:05 —-AC—- C:WINDOWSsystem32d3dx10_39.dll
2009-10-15 01:55:04 —-AC—- C:WINDOWSsystem32d3dx10_38.dll
2009-10-15 01:55:04 —-AC—- C:WINDOWSsystem32d3dx10_37.dll
2009-10-15 01:55:04 —-AC—- C:WINDOWSsystem32d3dx10_36.dll
2009-10-15 01:55:04 —-AC—- C:WINDOWSsystem32d3dx10_35.dll
2009-10-15 01:55:04 —-AC—- C:WINDOWSsystem32d3dx10_34.dll
2009-10-15 01:55:03 —-AC—- C:WINDOWSsystem32d3dx10_33.dll
2009-10-15 01:55:03 —-AC—- C:WINDOWSsystem32d3dx10.dll
2009-10-15 01:55:03 —-AC—- C:WINDOWSsystem32D3DCompiler_41.dll
2009-10-15 01:55:02 —-AC—- C:WINDOWSsystem32D3DCompiler_40.dll
2009-10-15 01:55:02 —-AC—- C:WINDOWSsystem32D3DCompiler_39.dll
2009-10-15 01:55:02 —-AC—- C:WINDOWSsystem32D3DCompiler_38.dll
2009-10-15 01:55:01 —-AC—- C:WINDOWSsystem32D3DCompiler_37.dll
2009-10-15 01:55:01 —-AC—- C:WINDOWSsystem32d3dcompiler_36.dll
2009-10-15 01:55:00 —-AC—- C:WINDOWSsystem32d3dcompiler_35.dll
2009-10-15 01:55:00 —-AC—- C:WINDOWSsystem32d3dcompiler_34.dll
2009-10-15 01:55:00 —-AC—- C:WINDOWSsystem32d3dcompiler_33.dll
2009-10-15 01:54:20 —-AC—- C:WINDOWSsystem32zlib1.dll
2009-10-15 01:54:20 —-AC—- C:WINDOWSsystem32wrap_oal.dll
2009-10-15 01:54:20 —-AC—- C:WINDOWSsystem32wnaspi32.dll
2009-10-15 01:54:20 —-AC—- C:WINDOWSsystem32Vbrun300.dll
2009-10-15 01:54:20 —-AC—- C:WINDOWSsystem32vbrun200.dll
2009-10-15 01:54:20 —-AC—- C:WINDOWSsystem32vbrun100.dll
2009-10-15 01:54:20 —-AC—- C:WINDOWSsystem32Vb40032.dll
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32Vb40016.dll
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32ssleay32.dll
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32OpenAL32.dll
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32msvcrt10.dll
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32msvcr71.dll
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32msvcr70.dll
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32msvcp71.dll
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32MSVCP70.DLL
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32msvci70.dll
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32MSSTKPRP.DLL
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32msstdfmt.dll
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32MFC71u.dll
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32MFC71KOR.DLL
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32MFC71JPN.DLL
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32MFC71ITA.DLL
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32MFC71FRA.DLL
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32MFC71ESP.DLL
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32MFC71ENU.DLL
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32MFC71DEU.DLL
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32MFC71CHT.DLL
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32MFC71CHS.DLL
2009-10-15 01:54:19 —-AC—- C:WINDOWSsystem32MFC71.dll
2009-10-15 01:54:18 —-AC—- C:WINDOWSsystem32mfc70u.dll
2009-10-15 01:54:18 —-AC—- C:WINDOWSsystem32mfc70kor.dll
2009-10-15 01:54:18 —-AC—- C:WINDOWSsystem32mfc70jpn.dll
2009-10-15 01:54:18 —-AC—- C:WINDOWSsystem32mfc70ita.dll
2009-10-15 01:54:18 —-AC—- C:WINDOWSsystem32mfc70fra.dll
2009-10-15 01:54:18 —-AC—- C:WINDOWSsystem32mfc70esp.dll
2009-10-15 01:54:18 —-AC—- C:WINDOWSsystem32mfc70enu.dll
2009-10-15 01:54:18 —-AC—- C:WINDOWSsystem32mfc70deu.dll
2009-10-15 01:54:18 —-AC—- C:WINDOWSsystem32mfc70cht.dll
2009-10-15 01:54:18 —-AC—- C:WINDOWSsystem32mfc70chs.dll
2009-10-15 01:54:18 —-AC—- C:WINDOWSsystem32mfc70.dll
2009-10-15 01:54:18 —-AC—- C:WINDOWSsystem32libssl32.dll
2009-10-15 01:54:18 —-AC—- C:WINDOWSsystem32libeay32.dll
2009-10-15 01:54:18 —-AC—- C:WINDOWSsystem32atl71.dll
2009-10-15 01:54:18 —-AC—- C:WINDOWSsystem32atl70.dll
2009-10-15 01:53:35 —-AC—- C:WINDOWScontrol.ini
2009-10-15 01:53:35 —-AC—- C:AUTOEXEC.BAT
2009-10-15 01:53:13 —-AC—- C:WINDOWSOEWABLog.txt
2009-10-15 01:53:03 —-AC—- C:WINDOWSsystem32mapi32.dll
2009-10-15 01:49:32 —-RAHC—- C:WINDOWSsystem32logonui.exe.manifest
2009-10-15 01:49:14 —-RAHC—- C:WINDOWSsystem32cdplayer.exe.manifest
2009-10-15 01:48:57 —-HDC—- C:Program FilesWindowsUpdate
2009-10-15 01:48:46 —-DC—- C:Program FilesOnline Services
2009-10-15 01:48:23 —-AC—- C:WINDOWSsystem32atrace.dll
2009-10-15 01:48:21 —-A—- C:WINDOWSsystem32desktop.ini
2009-10-15 01:48:21 —-A—- C:WINDOWSdesktop.ini
2009-10-15 01:48:11 —-AC—- C:WINDOWSsystem32acctres.dll
2009-10-15 01:48:10 —-DC—- C:Program FilesCommon FilesServices
2009-10-15 01:48:04 —-SDC—- C:WINDOWSTasks
2009-10-15 01:48:04 —-AC—- C:WINDOWSsystem32icfgnt5.dll
2009-10-15 01:48:03 —-DC—- C:Program FilesCommon FilesMSSoap
2009-10-15 01:47:57 —-DC—- C:WINDOWSsrchasst
2009-10-15 01:47:56 —-DC—- C:WINDOWSsystem32Macromed
2009-10-15 01:47:52 —-AC—- C:WINDOWSsystem32wuweb.dll
2009-10-15 01:47:51 —-AC—- C:WINDOWSsystem32wucltui.dll
2009-10-15 01:47:51 —-AC—- C:WINDOWSsystem32wuauserv.dll
2009-10-15 01:47:51 —-AC—- C:WINDOWSsystem32wuaueng1.dll
2009-10-15 01:47:50 —-AC—- C:WINDOWSsystem32wups.dll
2009-10-15 01:47:50 —-AC—- C:WINDOWSsystem32wuaueng.dll
2009-10-15 01:47:50 —-AC—- C:WINDOWSsystem32wuauclt1.exe
2009-10-15 01:47:50 —-AC—- C:WINDOWSsystem32wuauclt.exe
2009-10-15 01:47:49 —-AC—- C:WINDOWSsystem32wuapi.dll
2009-10-15 01:47:49 —-AC—- C:WINDOWSsystem32bitsprx4.dll
2009-10-15 01:47:49 —-AC—- C:WINDOWSsystem32bitsprx3.dll
2009-10-15 01:47:49 —-AC—- C:WINDOWSsystem32bitsprx2.dll
2009-10-15 01:47:48 —-AC—- C:WINDOWSsystem32qmgrprxy.dll
2009-10-15 01:47:48 —-AC—- C:WINDOWSsystem32qmgr.dll
2009-10-15 01:47:43 —-DC—- C:Program FilesMovie Maker
2009-10-15 01:47:10 —-AC—- C:WINDOWSsystem32safrslv.dll
2009-10-15 01:47:10 —-AC—- C:WINDOWSsystem32safrdm.dll
2009-10-15 01:47:10 —-AC—- C:WINDOWSsystem32safrcdlg.dll
2009-10-15 01:47:10 —-AC—- C:WINDOWSsystem32racpldlg.dll
2009-10-15 01:47:04 —-AC—- C:WINDOWSsystem32fltMc.exe
2009-10-15 01:47:04 —-AC—- C:WINDOWSsystem32fltlib.dll
2009-10-15 01:47:03 —-DC—- C:WINDOWSsystem32Restore
2009-10-15 01:47:03 —-AC—- C:WINDOWSsystem32srrstr.dll
2009-10-15 01:47:02 —-AC—- C:WINDOWSsystem32srclient.dll
2009-10-15 01:47:02 —-A—- C:WINDOWSsystem32srsvc.dll
2009-10-15 01:47:01 —-AC—- C:WINDOWSsystem32msoert2.dll
2009-10-15 01:47:01 —-AC—- C:WINDOWSsystem32msoeacct.dll
2009-10-15 01:46:58 —-AC—- C:WINDOWSsystem32inetres.dll
2009-10-15 01:46:58 —-AC—- C:WINDOWSsystem32inetcomm.dll
2009-10-15 01:46:55 —-DC—- C:Program FilesOutlook Express
2009-10-15 01:46:55 —-AC—- C:WINDOWSsystem32mstinit.exe
2009-10-15 01:46:55 —-A—- C:WINDOWSsystem32schedsvc.dll
2009-10-15 01:46:54 —-AC—- C:WINDOWSsystem32mstask.dll
2009-10-15 01:46:54 —-AC—- C:WINDOWSsystem32icwphbk.dll
2009-10-15 01:46:54 —-AC—- C:WINDOWSsystem32icwdial.dll
2009-10-15 01:46:53 —-AC—- C:WINDOWSsystem32isign32.dll
2009-10-15 01:46:53 —-AC—- C:WINDOWSsystem32inetcfg.dll
2009-10-15 01:46:41 —-DC—- C:Program FilesCommon FilesSystem
2009-10-15 01:44:35 —-DC—- C:Program FilesComPlus Applications
2009-10-15 01:44:30 —-AC—- C:WINDOWSvbaddin.ini
2009-10-15 01:44:30 —-AC—- C:WINDOWSvb.ini
2009-10-15 01:44:20 —-DC—- C:WINDOWSRegistration
2009-10-15 01:43:31 —-DC—- C:Program FilesWindows Media Player
2009-10-15 01:43:31 —-DC—- C:Program FilesWindows Media Connect 2
2009-10-15 01:43:22 —-AC—- C:WINDOWSsystem32winfxdocobj.exe
2009-10-15 01:43:20 —-AC—- C:WINDOWSsystem32msfeedssync.exe
2009-10-15 01:43:20 —-AC—- C:WINDOWSsystem32msfeedsbs.dll
2009-10-15 01:43:16 —-AC—- C:WINDOWSsystem32ieframe.dll.mui
2009-10-15 01:43:14 —-AC—- C:WINDOWSsystem32advpack.dll.mui
2009-10-15 01:43:09 —-RDC—- C:WINDOWSOffline Web Pages
2009-10-15 01:43:09 —-DC—- C:WINDOWSwbem
2009-10-15 01:43:09 —-DC—- C:Program FilesInternet Explorer
2009-10-15 01:43:07 —-SDC—- C:WINDOWSDownloaded Program Files
2009-10-15 01:43:07 —-AC—- C:WINDOWSsystem32TweakUI.exe
2009-10-15 01:43:05 —-DC—- C:WINDOWSsystem32PreInstall
2009-10-15 01:43:05 —-AC—- C:WINDOWSsystem32muweb.dll
2009-10-15 01:43:05 —-AC—- C:WINDOWSsystem32mucltui.dll.mui
2009-10-15 01:43:04 —-DC—- C:WINDOWSSoftwareDistribution
2009-10-15 01:43:04 —-AC—- C:WINDOWSsystem32mucltui.dll
2009-10-15 01:43:03 —-AC—- C:WINDOWSsystem32gpprefcl.dll
2009-10-15 01:43:02 —-AC—- C:WINDOWSsystem32write.exe
2009-10-15 01:42:28 —-AC—- C:WINDOWSsystem32sndvol32.exe
2009-10-15 01:42:27 —-AC—- C:WINDOWSsystem32hticons.dll
2009-10-15 01:42:27 —-AC—- C:WINDOWSsystem32avwav.dll
2009-10-15 01:42:27 —-AC—- C:WINDOWSsystem32avtapi.dll
2009-10-15 01:42:27 —-AC—- C:WINDOWSsystem32avmeter.dll
2009-10-15 01:42:26 —-AC—- C:WINDOWSsystem32winchat.exe
2009-10-15 01:42:09 —-AC—- C:WINDOWSsystem32getuname.dll
2009-10-15 01:42:08 —-AC—- C:WINDOWSsystem32charmap.exe
2009-10-15 01:42:08 —-AC—- C:WINDOWSsystem32calc.exe
2009-10-15 01:42:07 —-AC—- C:WINDOWSsystem32sol.exe
2009-10-15 01:42:06 —-AC—- C:WINDOWSsystem32winmine.exe
2009-10-15 01:42:06 —-AC—- C:WINDOWSsystem32mshearts.exe
2009-10-15 01:42:05 —-AC—- C:WINDOWSsystem32usrlogon.cmd
2009-10-15 01:42:05 —-AC—- C:WINDOWSsystem32tsshutdn.exe
2009-10-15 01:42:05 —-AC—- C:WINDOWSsystem32tskill.exe
2009-10-15 01:42:05 —-AC—- C:WINDOWSsystem32reset.exe
2009-10-15 01:42:05 —-AC—- C:WINDOWSsystem32freecell.exe
2009-10-15 01:42:04 —-AC—- C:WINDOWSsystem32tslabels.ini
2009-10-15 01:42:04 —-AC—- C:WINDOWSsystem32tsdiscon.exe
2009-10-15 01:42:04 —-AC—- C:WINDOWSsystem32tscon.exe
2009-10-15 01:42:04 —-AC—- C:WINDOWSsystem32shadow.exe
2009-10-15 01:42:04 —-AC—- C:WINDOWSsystem32rwinsta.exe
2009-10-15 01:42:04 —-AC—- C:WINDOWSsystem32regini.exe
2009-10-15 01:42:03 —-AC—- C:WINDOWSsystem32rdpcfgex.dll
2009-10-15 01:42:03 —-AC—- C:WINDOWSsystem32qwinsta.exe
2009-10-15 01:42:03 —-AC—- C:WINDOWSsystem32qappsrv.exe
2009-10-15 01:42:03 —-AC—- C:WINDOWSsystem32msg.exe
2009-10-15 01:42:03 —-AC—- C:WINDOWSsystem32logoff.exe
2009-10-15 01:42:03 —-AC—- C:WINDOWSsystem32cdmodem.dll
2009-10-15 01:42:02 —-AC—- C:WINDOWSsystem32msdtcprf.ini
2009-10-15 01:41:49 —-AC—- C:WINDOWSsystem32wmimgmt.msc
2009-10-15 01:41:48 —-AC—- C:WINDOWSsystem32accwiz.exe
2009-10-15 01:41:47 —-AC—- C:WINDOWSsystem32sndrec32.exe
2009-10-15 01:41:47 —-AC—- C:WINDOWSsystem32mplay32.exe
2009-10-15 01:41:46 —-DC—- C:Program FilesWindows NT
2009-10-15 01:41:46 —-AC—- C:WINDOWSsystem32hypertrm.dll
2009-10-15 01:41:46 —-AC—- C:WINDOWSsystem32clipbrd.exe
2009-10-15 01:41:45 —-AC—- C:WINDOWSsystem32spider.exe
2009-10-15 01:41:44 —-AC—- C:WINDOWSsystem32tsgqec.dll
2009-10-15 01:41:44 —-AC—- C:WINDOWSsystem32tscfgwmi.dll
2009-10-15 01:41:43 —-AC—- C:WINDOWSsystem32rhttpaa.dll
2009-10-15 01:41:43 —-AC—- C:WINDOWSsystem32aaclient.dll
2009-10-15 01:41:42 —-AC—- C:WINDOWSsystem32remotepg.dll
2009-10-15 01:41:42 —-AC—- C:WINDOWSsystem32rdsaddin.exe
2009-10-15 01:41:42 —-AC—- C:WINDOWSsystem32mstscax.dll
2009-10-15 01:41:42 —-AC—- C:WINDOWSsystem32mstsc.exe
2009-10-15 01:41:41 —-AC—- C:WINDOWSsystem32sessmgr.exe
2009-10-15 01:41:41 —-AC—- C:WINDOWSsystem32rdshost.exe
2009-10-15 01:41:41 —-AC—- C:WINDOWSsystem32rdchost.dll
2009-10-15 01:41:41 —-A—- C:WINDOWSsystem32termsrv.dll
2009-10-15 01:41:40 —-AC—- C:WINDOWSsystem32rdpwsx.dll
2009-10-15 01:41:40 —-AC—- C:WINDOWSsystem32rdpsnd.dll
2009-10-15 01:41:40 —-AC—- C:WINDOWSsystem32rdpclip.exe
2009-10-15 01:41:40 —-AC—- C:WINDOWSsystem32qprocess.exe
2009-10-15 01:41:40 —-AC—- C:WINDOWSsystem32cfgbkend.dll
2009-10-15 01:41:40 —-A—- C:WINDOWSsystem32icaapi.dll
2009-10-15 01:41:39 —-DC—- C:WINDOWSsystem32MsDtc
2009-10-15 01:41:39 —-AC—- C:WINDOWSsystem32mtxoci.dll
2009-10-15 01:41:39 —-A—- C:WINDOWSsystem32msdtcuiu.dll
2009-10-15 01:41:39 —-A—- C:WINDOWSsystem32msdtcprx.dll
2009-10-15 01:41:38 —-AC—- C:WINDOWSsystem32xolehlp.dll
2009-10-15 01:41:38 —-AC—- C:WINDOWSsystem32msdtctm.dll
2009-10-15 01:41:38 —-AC—- C:WINDOWSsystem32msdtclog.dll
2009-10-15 01:41:38 —-AC—- C:WINDOWSsystem32msdtc.exe
2009-10-15 01:41:37 —-AC—- C:WINDOWSsystem32mtxlegih.dll
2009-10-15 01:41:37 —-AC—- C:WINDOWSsystem32mtxex.dll
2009-10-15 01:41:37 —-AC—- C:WINDOWSsystem32dcomcnfg.exe
2009-10-15 01:41:36 —-DC—- C:WINDOWSsystem32Com
2009-10-15 01:41:36 —-AC—- C:WINDOWSsystem32mtxdm.dll
2009-10-15 01:41:36 —-AC—- C:WINDOWSsystem32comrepl.dll
2009-10-15 01:41:36 —-AC—- C:WINDOWSsystem32comaddin.dll
2009-10-15 01:41:36 —-A—- C:WINDOWSsystem32colbact.dll
2009-10-15 01:41:35 —-AC—- C:WINDOWSsystem32stclient.dll
2009-10-15 01:41:35 —-AC—- C:WINDOWSsystem32clbcatex.dll
2009-10-15 01:41:35 —-AC—- C:WINDOWSsystem32catsrvps.dll
2009-10-15 01:41:35 —-A—- C:WINDOWSsystem32catsrvut.dll
2009-10-15 01:41:35 —-A—- C:WINDOWSsystem32catsrv.dll
2009-10-15 01:41:34 —-AC—- C:WINDOWSsystem32comuid.dll
2009-10-15 01:41:34 —-AC—- C:WINDOWSsystem32comsnap.dll
2009-10-15 01:41:34 —-A—- C:WINDOWSsystem32comsvcs.dll
2009-10-15 01:41:33 —-A—- C:WINDOWSsystem32clbcatq.dll
2009-10-15 01:41:21 —-AC—- C:WINDOWSsystem32servdeps.dll
2009-10-15 01:41:21 —-AC—- C:WINDOWSsystem32mmfutil.dll
2009-10-15 01:41:21 —-AC—- C:WINDOWSsystem32licwmi.dll
2009-10-15 01:41:21 —-AC—- C:WINDOWSsystem32cmprops.dll

======List of files/folders modified in the last 1 months======

2009-10-15 05:28:44 —-AC—- C:WINDOWSsystem.ini
2009-10-15 01:52:32 —-AC—- C:WINDOWSwin.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 easdrv;easdrv; C:WINDOWSsystem32DRIVERSeasdrv.sys [2008-02-06 29704]
R1 epfwtdir;epfwtdir; C:WINDOWSsystem32DRIVERSepfwtdir.sys [2008-02-06 34312]
R2 eamon;EAMON; C:WINDOWSsystem32DRIVERSeamon.sys [2008-02-06 39944]
R2 exFat;exFat; C:WINDOWSsystem32driversexFat.sys [2009-01-28 133632]
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:WINDOWSsystem32DRIVERSrspndr.sys [2008-10-11 62848]
R3 ess;Аудио драйвер ESS (WDM); C:WINDOWSsystem32driversess.sys [2001-08-17 63360]
R3 nv;nv; C:WINDOWSsystem32DRIVERSnv4_mini.sys [2008-04-14 1897408]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:WINDOWSSystem32DriversRootMdm.sys [2008-04-15 5888]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet адаптер, драйвер для NT; C:WINDOWSsystem32DRIVERSRTL8139.SYS [2008-04-14 20992]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-15 30208]
R3 usbhub;USB2 концентратор; C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-15 59520]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-15 20608]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation — User-mode Driver Framework Platform Driver; C:WINDOWSsystem32DRIVERSWudfPf.sys [2008-05-18 77568]
S3 WudfRd;Windows Driver Foundation — User-mode Driver Framework Reflector; C:WINDOWSsystem32DRIVERSwudfrd.sys [2008-05-18 82944]
S4 ACPI;ACPI; C:WINDOWSsystem32driversACPI.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;Eset Service; C:Program FilesESETESET NOD32 Antivirusekrn.exe [2008-02-06 472320]
R2 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6binjqs.exe [2009-10-15 152984]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2007-10-24 70144]
S3 EhttpSrv;Eset HTTP Server; C:Program FilesESETESET NOD32 AntivirusEHttpSrv.exe [2008-02-06 19200]
S3 WMPNetworkSvc;Служба общих сетевых ресурсов проигрывателя Windows Media; C:Program FilesWindows Media Playerwmpnetwk.exe [2006-11-02 914944]
S3 WudfSvc;Windows Driver Foundation — User-mode Driver Framework; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]

EOF

Заранее спасибо.Эмма
27 марта, 2009 в 8:11 дп в ответ на: Valeri,помогите #23053
yabybnb
Participant
- Темы:5
- Сообщений:11
доброго времени суток. я поняла свою ошибку,т.е. почему Вы молчите. мне ,наверное,надо прислать логи с самого терминала
пропустив через Resit?Я права?в терминалах так же wind xp стоит.что-то стали отвратительно работать. возможно ли мне помочь?спасибо.эмма
26 марта, 2009 в 3:03 дп в ответ на: А ведь сайту недавно год стукнуло!!! #22696
yabybnb
Participant
- Темы:5
- Сообщений:11
я тоже хочу присоединиться к поздравлениям с днем рождения!огромное спасибо,что вы существуете и помогаете!просто ОГРОМНОЕ!дай Бог вам удачи,здоровья,благополучия!эмма
27 января, 2009 в 8:12 дп в ответ на: информер #21493
yabybnb
Participant
- Темы:5
- Сообщений:11
Здравствуйте!
Вы пишите:»Удалите RSIT и другие скачанные вами сканеры и небольшие утилиты, а так же все файлы и каталоги который были созданы в процессе лечения компьютера» — Valeri,Risit я удалила,а где расположено все остальное,где мне искать я совсем не знаю!!Пожалуйста напишите,куда я должна зайти и что удалить,я очень плохо разбираюсь в компьютерах.
И еще у меня на ноутбуке нет точки востановления вообще,т.е. востановление системы есть,но пишет,что не возможно востановление системы,что-то приблизительно так.
Заранее благодарю за ответ.Эмма
26 января, 2009 в 12:13 дп в ответ на: информер #21491
yabybnb
Participant
- Темы:5
- Сообщений:11
Valeri,здравствуйте.Спасибо большое,вроде убралось это окно.Прилагаю Risit лог и другой лог.Скажите,а так ничем страшным я не засорила свой ноутбук?
Вот чтобы мы все делали без этого форума? Спасибо всем создателям и поддержаелям этого форума! СЛАВА ВАМ и ПОЧЕТ! Надо бы вам ,ребята,отдельно сделать окошко:»поблагодарить …такого-то «.Я видела подобное на форуме бесплатных адвокатов.Еще раз спасибо!
Logfile of random’s system information tool 1.05 (written by random/random)
Run by 1 at 2009-01-26 10:00:50
Microsoft Windows XP Professional Service Pack 3
System drive C: has 19 GB (53%) free of 35 GB
Total RAM: 502 MB (14% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:00:57, on 26.01.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0avp.exe
C:WINDOWSsystem32cisvc.exe
C:WINDOWSsystem32eTSrv.exe
C:Program FilesIntelIntel Matrix Storage ManagerIaantmon.exe
C:WINDOWSsystem32inetsrvinetinfo.exe
C:Program FilesCommon FilesLightScribeLSSrvc.exe
C:WINDOWSsystem32HPZipm12.exe
C:Program FilesCyberLinkShared FilesRichVideo.exe
C:WINDOWSsystem32tcpsvcs.exe
C:WINDOWSSystem32snmp.exe
C:WINDOWSsystem32mqsvc.exe
C:WINDOWSsystem32mqtgsvc.exe
C:WINDOWSExplorer.EXE
C:Program FilesIntelIntel Matrix Storage ManagerIaanotif.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSRTHDCPL.EXE
C:WINDOWSsystem32hkcmd.exe
C:WINDOWSsystem32igfxpers.exe
C:WINDOWSsystem32igfxsrvc.exe
C:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:PROGRA~1LAUNCH~1LManager.exe
C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe
C:WINDOWSsystem32eTCrtMng.exe
C:Program FilesWinampwinampa.exe
C:Program FilesMail.RuAgentMAgent.exe
C:Program FilesHPHP Software UpdateHPWuSchd2.exe
C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0avp.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesMessengermsmsgs.exe
C:WINDOWSsystem32igfxext.exe
C:DOCUME~11LOCALS~1TempRtkBtMnt.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:WINDOWSsystem32cidaemon.exe
C:WINDOWSsystem32cidaemon.exe
C:Documents and Settings1Рабочий столRSIT.exe
C:Program Filestrend microHijackThis1.exe

R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://uk.rd.yahoo.com/customize/ycomp/defaults/su/*http://uk.yahoo.com
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:Program FilesMail.RuAgentMradllnewmrasearch.dll
O2 — BHO: Yahoo! Toolbar Helper — {02478D38-C3F9-4EFB-9B51-7695ECA05670} — C:Program FilesYahoo!CompanionInstallscpnyt.dll
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: Groove GFS Browser Helper — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — C:PROGRA~1MICROS~2Office12GRA8E1~1.DLL
O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O2 — BHO: Google Toolbar Helper — {AA58ED58-01DD-4d91-8333-CF10577473F7} — c:program filesgooglegoogletoolbar1.dll
O2 — BHO: Google Toolbar Notifier BHO — {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} — C:Program FilesGoogleGoogleToolbarNotifier3.1.807.1746swg.dll
O2 — BHO: Java(tm) Plug-In 2 SSV Helper — {DBC80044-A445-435b-BC74-9C25C1C588A9} — C:Program FilesJavajre6binjp2ssv.dll (file missing)
O3 — Toolbar: Yahoo! Toolbar — {EF99BD32-C1FB-11D2-892F-0090271D4F88} — C:Program FilesYahoo!CompanionInstallscpnyt.dll
O3 — Toolbar: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O3 — Toolbar: &Google — {2318C2B1-4965-11d4-9B18-009027A5CD4F} — c:program filesgooglegoogletoolbar1.dll
O4 — HKLM..Run: [preload] C:WindowsRUNXMLPL.exe
O4 — HKLM..Run: [IAAnotif] «C:Program FilesIntelIntel Matrix Storage ManagerIaanotif.exe»
O4 — HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [AzMixerSel] C:Program FilesRealtekInstallShieldAzMixerSel.exe
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 8.0ReaderReader_sl.exe»
O4 — HKLM..Run: [IMJPMIG8.1] «C:WINDOWSIMEimjp8_1IMJPMIG.EXE» /Spoil /RemAdvDef /Migration32
O4 — HKLM..Run: [MSPY2002] C:WINDOWSsystem32IMEPINTLGNTImScInst.exe /SYNC
O4 — HKLM..Run: [PHIME2002ASync] C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE /SYNC
O4 — HKLM..Run: [PHIME2002A] C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE /IMEName
O4 — HKLM..Run: [IgfxTray] C:WINDOWSsystem32igfxtray.exe
O4 — HKLM..Run: [HotKeysCmds] C:WINDOWSsystem32hkcmd.exe
O4 — HKLM..Run: [Persistence] C:WINDOWSsystem32igfxpers.exe
O4 — HKLM..Run: [SynTPStart] C:Program FilesSynapticsSynTPSynTPStart.exe
O4 — HKLM..Run: [RemoteControl] «C:Program FilesCyberLinkPowerDVDPDVDServ.exe»
O4 — HKLM..Run: [LanguageShortcut] «C:Program FilesCyberLinkPowerDVDLanguageLanguage.exe»
O4 — HKLM..Run: [LManager] C:PROGRA~1LAUNCH~1LManager.exe
O4 — HKLM..Run: [GrooveMonitor] «C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe»
O4 — HKLM..Run: [eTCertManger] C:WINDOWSsystem32eTCrtMng.exe
O4 — HKLM..Run: [WinampAgent] C:Program FilesWinampwinampa.exe
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe -LM
O4 — HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe
O4 — HKLM..Run: [AVP] «C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0avp.exe»
O4 — HKLM..Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [MSMSGS] «C:Program FilesMessengermsmsgs.exe» /background
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O9 — Extra button: Cтатистика Веб-Антивируса — {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} — C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0SCIEPlgn.dll
O9 — Extra button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O17 — HKLMSystemCCSServicesTcpip..{3847ADC9-E303-4C11-A3B1-957D8438C409}: NameServer = 85.15.64.49,85.15.65.249
O18 — Protocol: grooveLocalGWS — {88FED34C-F0CA-4636-A375-3CB6248B04CD} — C:PROGRA~1MICROS~2Office12GR99D3~1.DLL
O23 — Service: Kaspersky Anti-Virus 7.0 (AVP) — Kaspersky Lab — C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0avp.exe
O23 — Service: Symantec Lic NetConnect service (CLTNetCnService) — Unknown owner — C:Program FilesCommon FilesSymantec SharedccSvcHst.exe (file missing)
O23 — Service: eToken Notification Service (ETOKSRV) — Aladdin Knowledge Systems, Ltd. — C:WINDOWSsystem32eTSrv.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Google Updater Service (gusvc) — Google — C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 — Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) — Intel Corporation — C:Program FilesIntelIntel Matrix Storage ManagerIaantmon.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver1150Intel 32IDriverT.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: LightScribeService Direct Disc Labeling Service (LightScribeService) — Hewlett-Packard Company — C:Program FilesCommon FilesLightScribeLSSrvc.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Pml Driver HPZ12 — HP — C:WINDOWSsystem32HPZipm12.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — C:Program FilesCyberLinkShared FilesRichVideo.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Служба SNMP (SNMP) — Корпорация Майкрософт — C:WINDOWSSystem32snmp.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 10566 bytes

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper — C:Program FilesYahoo!CompanionInstallscpnyt.dll [2006-09-06 439872]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper — C:PROGRA~1MICROS~2Office12GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2008-10-25 667336]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper — c:program filesgooglegoogletoolbar1.dll [2008-12-19 2427968]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO — C:Program FilesGoogleGoogleToolbarNotifier3.1.807.1746swg.dll [2008-12-19 737776]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper — C:Program FilesJavajre6binjp2ssv.dll []

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} — Yahoo! Toolbar — C:Program FilesYahoo!CompanionInstallscpnyt.dll [2006-09-06 439872]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2008-10-25 667336]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} — &Google — c:program filesgooglegoogletoolbar1.dll [2008-12-19 2427968]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«preload»=C:WindowsRUNXMLPL.exe [2007-04-21 20480]
«IAAnotif»=C:Program FilesIntelIntel Matrix Storage ManagerIaanotif.exe [2007-03-21 174872]
«SynTPEnh»=C:Program FilesSynapticsSynTPSynTPEnh.exe [2007-09-08 1015808]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2007-05-28 16132608]
«AzMixerSel»=C:Program FilesRealtekInstallShieldAzMixerSel.exe [2005-06-12 53248]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2007-03-08 40048]
«IMJPMIG8.1″=C:WINDOWSIMEimjp8_1IMJPMIG.EXE [2004-08-19 208952]
«MSPY2002″=C:WINDOWSsystem32IMEPINTLGNTImScInst.exe [2004-08-19 59392]
«PHIME2002ASync»=C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE [2004-08-19 455168]
«PHIME2002A»=C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE [2004-08-19 455168]
«IgfxTray»=C:WINDOWSsystem32igfxtray.exe [2007-06-13 142104]
«HotKeysCmds»=C:WINDOWSsystem32hkcmd.exe [2007-06-13 162584]
«Persistence»=C:WINDOWSsystem32igfxpers.exe [2007-06-13 138008]
«SynTPStart»=C:Program FilesSynapticsSynTPSynTPStart.exe [2007-09-08 102400]
«RemoteControl»=C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2007-01-09 68640]
«LanguageShortcut»=C:Program FilesCyberLinkPowerDVDLanguageLanguage.exe [2007-01-09 52256]
«LManager»=C:PROGRA~1LAUNCH~1LManager.exe [2007-10-18 858632]
«GrooveMonitor»=C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe [2006-10-27 31016]
«eTCertManger»=C:WINDOWSsystem32eTCrtMng.exe [2006-01-25 98304]
«WinampAgent»=C:Program FilesWinampwinampa.exe [2006-11-22 35328]
«MAgent»=C:Program FilesMail.RuAgentMAgent.exe [2008-10-25 4412920]
«HP Software Update»=C:Program FilesHPHP Software UpdateHPWuSchd2.exe [2005-12-15 49152]
«AVP»=C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0avp.exe [2008-02-08 227856]
«MsmqIntCert»=regsvr32 /s mqrt.dll []

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-15 15360]
«MaxAntiSpy»= []
«MSMSGS»=C:Program FilesMessengermsmsgs.exe [2008-04-15 1695232]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyigfxcui]
C:WINDOWSsystem32igfxdev.dll [2007-06-05 204800]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyklogon]
C:WINDOWSsystem32klogon.dll [2008-02-08 219664]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
UPnPMonitor — {e57ce738-33e8-4c51-8354-bb4de9d215d1} — C:WINDOWSsystem32upnpui.dll [2008-04-15 239616]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{B5A7F190-DDA6-4420-B3BA-52453494E6CD}»=C:PROGRA~1MICROS~2Office12GRA8E1~1.DLL [2006-10-27 2210608]
«{16664848-0E00-11D2-8059-000000000000}»= []

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=36
«NoDriveAutoRun»=FFFFFFFF
«NoDrives»=0

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveAutoRun»=
«NoDriveTypeAutoRun»=
«NoDrives»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesCyberLinkPowerDVDPowerDVD.exe»=»C:Program FilesCyberLinkPowerDVDPowerDVD.exe:*:Enabled:CyberLink PowerDVD»
«C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE»=»C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook»
«C:Program FilesMicrosoft OfficeOffice12GROOVE.EXE»=»C:Program FilesMicrosoft OfficeOffice12GROOVE.EXE:*:Enabled:Microsoft Office Groove»
«C:Program FilesMicrosoft OfficeOffice12ONENOTE.EXE»=»C:Program FilesMicrosoft OfficeOffice12ONENOTE.EXE:*:Enabled:Microsoft Office OneNote»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:Program FilesMail.RuAgentmagent.exe»=»C:Program FilesMail.RuAgentmagent.exe:*:Enabled:Mail.Ru Агент»
«C:Program FilesHPDigital Imagingbinhpqtra08.exe»=»C:Program FilesHPDigital Imagingbinhpqtra08.exe:*:Enabled:hpqtra08.exe»
«C:Program FilesHPDigital Imagingbinhpqste08.exe»=»C:Program FilesHPDigital Imagingbinhpqste08.exe:*:Enabled:hpqste08.exe»
«C:Program FilesHPDigital Imagingbinhpofxm08.exe»=»C:Program FilesHPDigital Imagingbinhpofxm08.exe:*:Enabled:hpofxm08.exe»
«C:Program FilesHPDigital Imagingbinhposfx08.exe»=»C:Program FilesHPDigital Imagingbinhposfx08.exe:*:Enabled:hposfx08.exe»
«C:Program FilesHPDigital Imagingbinhposid01.exe»=»C:Program FilesHPDigital Imagingbinhposid01.exe:*:Enabled:hposid01.exe»
«C:Program FilesHPDigital Imagingbinhpqscnvw.exe»=»C:Program FilesHPDigital Imagingbinhpqscnvw.exe:*:Enabled:hpqscnvw.exe»
«C:Program FilesHPDigital Imagingbinhpqkygrp.exe»=»C:Program FilesHPDigital Imagingbinhpqkygrp.exe:*:Enabled:hpqkygrp.exe»
«C:Program FilesHPDigital ImagingbinhpqCopy.exe»=»C:Program FilesHPDigital ImagingbinhpqCopy.exe:*:Enabled:hpqcopy.exe»
«C:Program FilesHPDigital Imagingbinhpfccopy.exe»=»C:Program FilesHPDigital Imagingbinhpfccopy.exe:*:Enabled:hpfccopy.exe»
«C:Program FilesHPDigital Imagingbinhpzwiz01.exe»=»C:Program FilesHPDigital Imagingbinhpzwiz01.exe:*:Enabled:hpzwiz01.exe»
«C:Program FilesHPDigital ImagingUnloadHpqPhUnl.exe»=»C:Program FilesHPDigital ImagingUnloadHpqPhUnl.exe:*:Enabled:hpqphunl.exe»
«C:Program FilesHPDigital ImagingUnloadHpqDIA.exe»=»C:Program FilesHPDigital ImagingUnloadHpqDIA.exe:*:Enabled:hpqdia.exe»
«C:Program FilesHPDigital Imagingbinhpoews01.exe»=»C:Program FilesHPDigital Imagingbinhpoews01.exe:*:Enabled:hpoews01.exe»
«C:Program FilesHPDigital Imagingbinhpqnrs08.exe»=»C:Program FilesHPDigital Imagingbinhpqnrs08.exe:*:Enabled:hpqnrs08.exe»
«C:Program FilesMessengermsmsgs.exe»=»C:Program FilesMessengermsmsgs.exe:*:Enabled:Windows Messenger»
«C:Documents and SettingsAll UsersApplication DataKaspersky Lab Setup FilesKaspersky Anti-Virus 7.0.1.325Russiansetup.exe»=»C:Documents and SettingsAll UsersApplication DataKaspersky Lab Setup FilesKaspersky Anti-Virus 7.0.1.325Russiansetup.exe:*:Enabled:Программа установки Антивируса Касперского 7.0»
«C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0avp.exe»=»C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0avp.exe:*:Enabled:Kaspersky Anti-Virus»
«C:WINDOWSsystem32mqsvc.exe»=»C:WINDOWSsystem32mqsvc.exe:*:Enabled:Message Queuing»
«C:Program FilesFlashGetflashget.exe»=»C:Program FilesFlashGetflashget.exe:*:Enabled:Flashget»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:WINDOWSsystem32mqsvc.exe»=»C:WINDOWSsystem32mqsvc.exe:*:Enabled:Message Queuing»

======List of files/folders created in the last 1 months======

2009-01-23 20:41:00 —-DC—- C:Program FilesДокументы ПУ 5
2009-01-23 00:56:28 —-A—- C:WINDOWSsystem32CF17214.exe
2009-01-23 00:56:21 —-A—- C:WINDOWSsystem32CF17207.exe
2009-01-23 00:56:00 —-DC—- C:32788R22FWJFW
2009-01-22 17:01:34 —-DC—- C:PFXML7
2009-01-21 01:55:52 —-AC—- C:WINDOWSwinamp.ini
2009-01-15 23:42:43 —-HDC—- C:WINDOWS$NtUninstallKB958687$

======List of files/folders modified in the last 1 months======

2009-01-26 09:59:39 —-D—- C:WINDOWSTemp
2009-01-26 09:56:50 —-D—- C:WINDOWSsystem32inetsrv
2009-01-26 09:55:10 —-D—- C:WINDOWSsystem32CatRoot2
2009-01-26 09:55:04 —-DC—- C:Documents and SettingsAll UsersApplication DataKaspersky Lab
2009-01-26 09:51:30 —-A—- C:WINDOWSSchedLgU.Txt
2009-01-26 09:50:50 —-DC—- C:Program FilesДеловой Хабаровск 2008-1
2009-01-26 09:43:39 —-DC—- C:WINDOWSPrefetch
2009-01-25 23:53:13 —-DC—- C:rsit
2009-01-25 22:33:07 —-D—- C:_OTMoveIt
2009-01-25 14:59:47 —-D—- C:WINDOWSRegistration
2009-01-25 09:51:18 —-AC—- C:WINDOWSModemLog_EDGE Modem.txt
2009-01-25 06:46:34 —-D—- C:WINDOWSsystem32drivers
2009-01-25 06:44:03 —-DC—- C:Program Files
2009-01-25 05:53:51 —-D—- C:WINDOWSsystem32NtmsData
2009-01-25 05:53:10 —-D—- C:WINDOWSrepair
2009-01-25 01:02:37 —-SHD—- C:System Volume Information
2009-01-25 00:59:32 —-DC—- C:WINDOWS
2009-01-25 00:59:14 —-AC—- C:WINDOWSimsins.BAK
2009-01-25 00:59:05 —-D—- C:WINDOWSsystem32
2009-01-25 00:59:05 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2009-01-23 00:57:00 —-AC—- C:Bug.txt
2009-01-23 00:56:05 —-A—- C:WINDOWSsystem32cmd.execf
2009-01-22 17:44:54 —-DC—- C:WINDOWSHelp
2009-01-22 17:01:58 —-SHD—- C:WINDOWSInstaller
2009-01-22 17:01:58 —-SDC—- C:Documents and Settings1Application DataMicrosoft
2009-01-21 22:01:58 —-DC—- C:Documents and Settings1Application DataMra
2009-01-20 12:03:40 —-AC—- C:WINDOWSModemLog_HDAUDIO Soft Data Fax Modem with SmartCP.txt
2009-01-18 11:14:51 —-DC—- C:Program FilesLaunch Manager
2009-01-18 11:10:43 —-HDC—- C:Program FilesInstallShield Installation Information
2009-01-18 11:09:18 —-DC—- C:Program FilesWinamp
2009-01-17 18:28:51 —-DC—- C:Program FilesMozilla Firefox
2009-01-17 18:01:49 —-DC—- C:Downloads
2009-01-15 23:42:56 —-HD—- C:WINDOWSinf
2009-01-15 23:42:50 —-RSHD—- C:WINDOWSsystem32dllcache
2009-01-15 23:42:23 —-HDC—- C:WINDOWS$hf_mig$
2009-01-10 14:36:28 —-D—- C:WINDOWSnetwork diagnostic
2009-01-10 11:35:28 —-A—- C:WINDOWSsystem32MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2008-04-15 40704]
R1 klif;Klif; ??C:WINDOWSsystem32driversklif.sys []
R1 Tcpip6;Драйвер протокола IPv6 (Microsoft); C:WINDOWSsystem32DRIVERStcpip6.sys [2008-06-20 225856]
R1 WmiAcpi;Интерфейс управления для ACPI Microsoft Windows; C:WINDOWSsystem32DRIVERSwmiacpi.sys [2008-04-14 8832]
R2 irda;ИК-протокол IrDA; C:WINDOWSsystem32DRIVERSirda.sys [2008-04-14 88192]
R2 mdmxsdk;mdmxsdk; C:WINDOWSsystem32DRIVERSmdmxsdk.sys [2006-06-20 12672]
R3 AKSIFDH;Aladdin IFD Handler; C:WINDOWSsystem32DRIVERSaksifdh.sys [2006-01-22 90346]
R3 AKSUP;AKSUP; C:WINDOWSsystem32driversaksup.sys [2006-01-22 34406]
R3 AR5211;Atheros Wireless Network Adapter Service; C:WINDOWSsystem32DRIVERSar5211.sys [2007-05-03 546976]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:WINDOWSsystem32DRIVERSb57xp32.sys [2007-02-16 160256]
R3 CmBatt;Драйвер батареи с ACPI-управлением (Майкрософт); C:WINDOWSsystem32DRIVERSCmBatt.sys [2008-04-14 13952]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:WINDOWSsystem32DRIVERSDKbFltr.sys [2006-01-21 17408]
R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2008-04-14 10368]
R3 HSF_DPV;HSF_DPV; C:WINDOWSsystem32DRIVERSHSF_DPV.sys [2006-12-23 988800]
R3 HSFHWAZL;HSFHWAZL; C:WINDOWSsystem32DRIVERSHSFHWAZL.sys [2006-12-23 209664]
R3 ialm;ialm; C:WINDOWSsystem32DRIVERSigxpmp32.sys [2007-06-06 5761728]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2007-05-31 4424192]
R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:WINDOWSsystem32DRIVERSklim5.sys [2007-12-13 24592]
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-20 12160]
R3 MQAC;Message Queuing access control; ??C:WINDOWSsystem32driversmqac.sys []
R3 NSCIRDA;Драйвер ИК-устройства NSC; C:WINDOWSsystem32DRIVERSnscirda.sys [2008-04-14 28672]
R3 Rasirda;Минипорт WAN (IrDA); C:WINDOWSsystem32DRIVERSrasirda.sys [2001-08-18 19584]
R3 RMCAST;Reliable Multicast Protocol driver; ??C:WINDOWSsystem32driversRMCast.sys []
R3 sdbus;sdbus; C:WINDOWSsystem32DRIVERSsdbus.sys [2008-04-14 79232]
R3 SynTP;Synaptics TouchPad Driver; C:WINDOWSsystem32DRIVERSSynTP.sys [2007-09-08 215904]
R3 tifm21;tifm21; C:WINDOWSsystem32driverstifm21.sys [2007-05-02 290816]
R3 tunmp;Драйвер адаптера минипорта Microsoft Tun; C:WINDOWSsystem32DRIVERStunmp.sys [2008-04-14 12288]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2008-04-14 30208]
R3 usbhub;Драйвер стандартного концентратора USB (Microsoft); C:WINDOWSsystem32DRIVERSusbhub.sys [2008-04-14 59520]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2008-04-14 20608]
R3 winachsf;winachsf; C:WINDOWSsystem32DRIVERSHSF_CNXT.sys [2006-12-23 730112]
S3 Arp1394;Протокол клиента 1394 ARP; C:WINDOWSsystem32DRIVERSarp1394.sys [2008-04-14 60800]
S3 CCDECODE;Closed Caption декодер; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2008-04-14 17024]
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet адаптер, драйвер для NT; C:WINDOWSsystem32DRIVERSfetnd5.sys [2001-08-18 27165]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:WINDOWSsystem32DRIVERSHPZid412.sys [2005-10-28 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:WINDOWSsystem32DRIVERSHPZipr12.sys [2005-10-28 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:WINDOWSsystem32DRIVERSHPZius12.sys [2005-10-28 21568]
S3 int15.sys;int15.sys; ??C:AcerEmpowering TechnologyeRecoveryint15.sys []
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWSsystem32DRIVERSNdisIP.sys [2008-04-14 10880]
S3 NIC1394;Сетевой драйвер 1394; C:WINDOWSsystem32DRIVERSnic1394.sys [2008-04-14 61824]
S3 NTIDrvr;Upper Class Filter Driver; C:WINDOWSsystem32DRIVERSNTIDrvr.sys [2007-08-22 6144]
S3 psdfbus;Philips Sysol Dragonfly Composite Device driver (WDM); C:WINDOWSsystem32DRIVERSpsdfbus.sys [2005-12-08 66496]
S3 psdfilter;psdfilter; ??C:WINDOWSsystem32Driverspsdfilter.sys []
S3 psdfmdfl;Philips Sysol Dragonfly Modem Filter; C:WINDOWSsystem32DRIVERSpsdfmdfl.sys [2005-12-08 9232]
S3 psdfmdm;Philips Sysol Dragonfly Modem Drivers; C:WINDOWSsystem32DRIVERSpsdfmdm.sys [2005-12-08 99136]
S3 psdvdisk;psdvdisk; ??C:WINDOWSsystem32Driverspsdvdisk.sys []
S3 sffdisk;Драйвер класса SFF Storage; C:WINDOWSsystem32DRIVERSsffdisk.sys [2008-04-14 11904]
S3 sffp_sd;Драйвер протокола SFF Storage для SDBus; C:WINDOWSsystem32DRIVERSsffp_sd.sys [2008-04-14 11008]
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2008-04-14 15232]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2008-04-14 32128]
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2008-04-14 25856]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2008-04-14 15104]
S3 usbstor;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2008-04-14 26368]
S3 usbvideo;USB-видеоустройство (WDM); C:WINDOWSSystem32Driversusbvideo.sys [2008-04-14 121984]
S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2008-04-14 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 6to4;Служба поддержки IPv6; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R2 AVP;Kaspersky Anti-Virus 7.0; C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0avp.exe [2008-02-08 227856]
R2 ETOKSRV;eToken Notification Service; C:WINDOWSsystem32eTSrv.exe [2006-01-25 90112]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:Program FilesIntelIntel Matrix Storage ManagerIaantmon.exe [2007-03-21 355096]
R2 IISADMIN;IIS Admin; C:WINDOWSsystem32inetsrvinetinfo.exe [2008-04-15 15872]
R2 Iprip;Слушатель RIP; C:WINDOWSSystem32svchost.exe [2008-04-15 14336]
R2 Irmon;Монитор инфракрасной связи; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:Program FilesCommon FilesLightScribeLSSrvc.exe [2007-01-17 61440]
R2 MSMQ;Message Queuing; C:WINDOWSsystem32mqsvc.exe [2008-04-15 4608]
R2 MSMQTriggers;Message Queuing Triggers; C:WINDOWSsystem32mqtgsvc.exe [2008-04-15 117248]
R2 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ); C:Program FilesMicrosoft SQL ServerMSSQL.1MSSQLBinnsqlservr.exe [2006-04-14 28933976]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:WINDOWSsystem32HPZipm12.exe [2005-03-14 69632]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:Program FilesCyberLinkShared FilesRichVideo.exe [2007-01-09 171040]
R2 SimpTcp;Простые службы TCP/IP; C:WINDOWSsystem32tcpsvcs.exe [2004-08-19 19456]
R2 SMTPSVC;Simple Mail Transport Protocol (SMTP); C:WINDOWSsystem32inetsrvinetinfo.exe [2008-04-15 15872]
R2 SNMP;Служба SNMP; C:WINDOWSSystem32snmp.exe [2008-04-15 32768]
R2 W3SVC;Веб-публикации; C:WINDOWSsystem32inetsrvinetinfo.exe [2008-04-15 15872]
S2 CLTNetCnService;Symantec Lic NetConnect service; C:Program FilesCommon FilesSymantec SharedccSvcHst.exe /h ccCommon []
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 Fax;Fax; C:WINDOWSsystem32fxssvc.exe [2008-04-15 268288]
S3 gusvc;Google Updater Service; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2008-12-19 138168]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver1150Intel 32IDriverT.exe [2005-11-14 69632]
S3 LPDSVC;Сервер печати TCP/IP; C:WINDOWSsystem32tcpsvcs.exe [2004-08-19 19456]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:Program FilesMicrosoft OfficeOffice12GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2006-10-27 441136]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 p2pgasvc;Одноранговая групповая проверка подлинности; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S3 p2pimsvc;Диспетчер удостоверений для одноранговых сетей; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S3 p2psvc;Службы одноранговой сети; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S3 PNRPSvc;Протокол однорангового разрешения имен; C:WINDOWSsystem32svchost.exe [2008-04-15 14336]
S3 SNMPTRAP;Служба ловушек SNMP; C:WINDOWSSystem32snmptrap.exe [2008-04-15 8704]
S3 SQLWriter;SQL Server VSS Writer; C:Program FilesMicrosoft SQL Server90Sharedsqlwriter.exe [2006-04-14 87840]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:Program FilesMicrosoft SQL Server90Sharedsqladhlp90.exe [2005-10-14 45272]
S4 SQLBrowser;SQL Server Browser; C:Program FilesMicrosoft SQL Server90Sharedsqlbrowser.exe [2006-04-14 240416]

EOF

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{830E0FD7-8EAC-4475-A43F-62944E036DEA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{FFFC57DB-1DE3-4303-B24D-CEE6DCDD3D86}\ deleted successfully.
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun\»MaxAntiSpy»| /E : value set successfully!
Registry key HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{37509b49-c5bf-11dd-8e99-0017c419578e}\ deleted successfully.
========== FILES ==========
C:Documents and SettingsAll UsersApplication Datapbklib.dll unregistered successfully.
C:Documents and SettingsAll UsersApplication Datapbklib.dll moved successfully.
File/Folder C:PROGRA~1MYCENT~1 not found.
File/Folder C:Program FilesMaxAntiSpy not found.
========== COMMANDS ==========
File delete failed. C:DOCUME~11LOCALS~1Temp~DF582F.tmp scheduled to be deleted on reboot.
User’s Temp folder emptied.
User’s Temporary Internet Files folder emptied.
User’s Internet Explorer cache folder emptied.
File delete failed. C:Documents and SettingsLocalServiceLocal SettingsTempTemporary Internet FilesContent.IE5index.dat scheduled to be deleted on reboot.
File delete failed. C:Documents and SettingsLocalServiceLocal SettingsTempHistoryHistory.IE5index.dat scheduled to be deleted on reboot.
File delete failed. C:Documents and SettingsLocalServiceLocal SettingsTempCookiesindex.dat scheduled to be deleted on reboot.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:WINDOWStempcch~13de9d1ec.htp scheduled to be deleted on reboot.
File delete failed. C:WINDOWStempcch~13de9de33.htp scheduled to be deleted on reboot.
File delete failed. C:WINDOWStempPerflib_Perfdata_460.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer — Version 1.0.7.2 log created on 01262009_095031

Files moved on Reboot…
C:DOCUME~11LOCALS~1Temp~DF582F.tmp moved successfully.
File move failed. C:Documents and SettingsLocalServiceLocal SettingsTempTemporary Internet FilesContent.IE5index.dat scheduled to be moved on reboot.
File move failed. C:Documents and SettingsLocalServiceLocal SettingsTempHistoryHistory.IE5index.dat scheduled to be moved on reboot.
File move failed. C:Documents and SettingsLocalServiceLocal SettingsTempCookiesindex.dat scheduled to be moved on reboot.
File C:WINDOWStempcch~13de9d1ec.htp not found!
File C:WINDOWStempcch~13de9de33.htp not found!
C:WINDOWStempPerflib_Perfdata_460.dat moved successfully.
19 декабря, 2008 в 2:46 дп в ответ на: не получается удалить информер #20477
yabybnb
Participant
- Темы:5
- Сообщений:11
Здравствуйте,все.Хочу поблагодарить Pili лично и всех кто создал этот форум за помощь!Вы не представляете как вы помогли мне и сколько нового я узнала о компе!!!Для такого чайника как я этот форум просто клад! Еще раз спасибо большое!!!
А теперь к делу :вы сказала прислать лог от RSIT Logfile of random’s system information tool 1.05 (written by random/random)
Run by 1 at 2008-12-19 12:30:47
Microsoft Windows XP Professional Service Pack 2
System drive C: has 21 GB (60%) free of 35 GB
Total RAM: 502 MB (41% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:30:48, on 19.12.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0avp.exe
C:WINDOWSsystem32eTSrv.exe
C:Program FilesIntelIntel Matrix Storage ManagerIaantmon.exe
C:Program FilesCommon FilesLightScribeLSSrvc.exe
C:WINDOWSsystem32HPZipm12.exe
C:Program FilesCyberLinkShared FilesRichVideo.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSExplorer.EXE
C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:WINDOWSsystem32wuauclt.exe
C:Documents and Settings1Рабочий столRSIT.exe
C:Program Filestrend microHijackThis1.exe

R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.mail.ru
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://uk.rd.yahoo.com/customize/ycomp/defaults/su/*http://uk.yahoo.com
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: (no name) — {83821C2B-32A8-4DD7-B6D4-44309A78E668} — C:Program FilesMail.RuAgentMradllnewmrasearch.dll
R3 — URLSearchHook: Yahoo! Toolbar — {EF99BD32-C1FB-11D2-892F-0090271D4F88} — C:Program FilesYahoo!CompanionInstallscpnyt.dll
R3 — URLSearchHook: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O2 — BHO: Yahoo! Toolbar Helper — {02478D38-C3F9-4EFB-9B51-7695ECA05670} — C:Program FilesYahoo!CompanionInstallscpnyt.dll
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: Groove GFS Browser Helper — {72853161-30C5-4D22-B7F9-0BBC1D38A37E} — C:PROGRA~1MICROS~2Office12GRA8E1~1.DLL
O2 — BHO: Спутник@Mail.Ru — {8984B388-A5BB-4DF7-B274-77B879E179DB} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O3 — Toolbar: Yahoo! Toolbar — {EF99BD32-C1FB-11D2-892F-0090271D4F88} — C:Program FilesYahoo!CompanionInstallscpnyt.dll
O3 — Toolbar: Спутник@Mail.Ru — {09900DE8-1DCA-443F-9243-26FF581438AF} — C:Program FilesMail.RuSputnikMailRuSputnik.dll
O4 — HKLM..Run: [preload] C:WindowsRUNXMLPL.exe
O4 — HKLM..Run: [IAAnotif] «C:Program FilesIntelIntel Matrix Storage ManagerIaanotif.exe»
O4 — HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [AzMixerSel] C:Program FilesRealtekInstallShieldAzMixerSel.exe
O4 — HKLM..Run: [Adobe Reader Speed Launcher] «C:Program FilesAdobeReader 8.0ReaderReader_sl.exe»
O4 — HKLM..Run: [IMJPMIG8.1] «C:WINDOWSIMEimjp8_1IMJPMIG.EXE» /Spoil /RemAdvDef /Migration32
O4 — HKLM..Run: [MSPY2002] C:WINDOWSsystem32IMEPINTLGNTImScInst.exe /SYNC
O4 — HKLM..Run: [PHIME2002ASync] C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE /SYNC
O4 — HKLM..Run: [PHIME2002A] C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE /IMEName
O4 — HKLM..Run: [IgfxTray] C:WINDOWSsystem32igfxtray.exe
O4 — HKLM..Run: [HotKeysCmds] C:WINDOWSsystem32hkcmd.exe
O4 — HKLM..Run: [Persistence] C:WINDOWSsystem32igfxpers.exe
O4 — HKLM..Run: [SynTPStart] C:Program FilesSynapticsSynTPSynTPStart.exe
O4 — HKLM..Run: [RemoteControl] «C:Program FilesCyberLinkPowerDVDPDVDServ.exe»
O4 — HKLM..Run: [LanguageShortcut] «C:Program FilesCyberLinkPowerDVDLanguageLanguage.exe»
O4 — HKLM..Run: [eRecoveryService] C:AcerEmpowering TechnologyeRecoveryeRAgent.exe
O4 — HKLM..Run: [LManager] C:PROGRA~1LAUNCH~1LManager.exe
O4 — HKLM..Run: [GrooveMonitor] «C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe»
O4 — HKLM..Run: [eTCertManger] C:WINDOWSsystem32eTCrtMng.exe
O4 — HKLM..Run: [WinampAgent] C:Program FilesWinampwinampa.exe
O4 — HKLM..Run: [MAgent] C:Program FilesMail.RuAgentMAgent.exe -LM
O4 — HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe
O4 — HKLM..Run: [AVP] «C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0avp.exe»
O4 — HKLM..RunOnce: [Malwarebytes’ Anti-Malware] C:Program FilesMalwarebytes’ Anti-Malwarembamgui.exe /install /silent
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [MSMSGS] «C:Program FilesMessengermsmsgs.exe» /background
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — Startup: Сократ Персональный 4.1.lnk = ?
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O8 — Extra context menu item: Найти в интернете — res://C:Program FilesMail.RuSputnikMailRuSputnik.dll/282
O8 — Extra context menu item: Найти в словарях — res://C:Program FilesMail.RuSputnikMailRuSputnik.dll/283
O9 — Extra button: Cтатистика Веб-Антивируса — {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} — C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0SCIEPlgn.dll
O9 — Extra button: Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra ‘Tools’ menuitem: &Отправить в OneNote — {2670000A-7350-4f3c-8081-5663EE0C6C49} — C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 — Extra button: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra ‘Tools’ menuitem: Mail.Ru Агент — {7558B7E5-7B26-4201-BEDB-00D5FF534523} — C:Program FilesMail.RuAgentmagent.exe
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra button: Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O9 — Extra ‘Tools’ menuitem: Windows Messenger — {FB5F1910-F110-11d2-BB9E-00C04F795683} — C:Program FilesMessengermsmsgs.exe
O17 — HKLMSystemCCSServicesTcpip..{3847ADC9-E303-4C11-A3B1-957D8438C409}: NameServer = 85.15.64.49,85.15.65.249
O18 — Protocol: grooveLocalGWS — {88FED34C-F0CA-4636-A375-3CB6248B04CD} — C:PROGRA~1MICROS~2Office12GR99D3~1.DLL
O23 — Service: Kaspersky Anti-Virus 7.0 (AVP) — Kaspersky Lab — C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0avp.exe
O23 — Service: Symantec Lic NetConnect service (CLTNetCnService) — Unknown owner — C:Program FilesCommon FilesSymantec SharedccSvcHst.exe (file missing)
O23 — Service: eToken Notification Service (ETOKSRV) — Aladdin Knowledge Systems, Ltd. — C:WINDOWSsystem32eTSrv.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) — Intel Corporation — C:Program FilesIntelIntel Matrix Storage ManagerIaantmon.exe
O23 — Service: InstallDriver Table Manager (IDriverT) — Macrovision Corporation — C:Program FilesCommon FilesInstallShieldDriver1150Intel 32IDriverT.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: LightScribeService Direct Disc Labeling Service (LightScribeService) — Hewlett-Packard Company — C:Program FilesCommon FilesLightScribeLSSrvc.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Pml Driver HPZ12 — HP — C:WINDOWSsystem32HPZipm12.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Cyberlink RichVideo Service(CRVS) (RichVideo) — Unknown owner — C:Program FilesCyberLinkShared FilesRichVideo.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe

—
End of file — 9439 bytes

======Scheduled tasks folder======

C:WINDOWStasksWebReg officejet 4300 series.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper — C:Program FilesYahoo!CompanionInstallscpnyt.dll [2006-09-06 439872]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper — C:PROGRA~1MICROS~2Office12GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{8984B388-A5BB-4DF7-B274-77B879E179DB}]
MailRuBHO Class — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2008-10-25 667336]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} — Yahoo! Toolbar — C:Program FilesYahoo!CompanionInstallscpnyt.dll [2006-09-06 439872]
{09900DE8-1DCA-443F-9243-26FF581438AF} — Спутник@Mail.Ru — C:Program FilesMail.RuSputnikMailRuSputnik.dll [2008-10-25 667336]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«preload»=C:WindowsRUNXMLPL.exe [2007-04-21 20480]
«IAAnotif»=C:Program FilesIntelIntel Matrix Storage ManagerIaanotif.exe [2007-03-21 174872]
«SynTPEnh»=C:Program FilesSynapticsSynTPSynTPEnh.exe [2007-09-08 1015808]
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2007-05-28 16132608]
«AzMixerSel»=C:Program FilesRealtekInstallShieldAzMixerSel.exe [2005-06-12 53248]
«Adobe Reader Speed Launcher»=C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2007-03-08 40048]
«IMJPMIG8.1″=C:WINDOWSIMEimjp8_1IMJPMIG.EXE [2004-08-19 208952]
«MSPY2002″=C:WINDOWSsystem32IMEPINTLGNTImScInst.exe [2004-08-19 59392]
«PHIME2002ASync»=C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE [2004-08-19 455168]
«PHIME2002A»=C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE [2004-08-19 455168]
«IgfxTray»=C:WINDOWSsystem32igfxtray.exe [2007-06-13 142104]
«HotKeysCmds»=C:WINDOWSsystem32hkcmd.exe [2007-06-13 162584]
«Persistence»=C:WINDOWSsystem32igfxpers.exe [2007-06-13 138008]
«SynTPStart»=C:Program FilesSynapticsSynTPSynTPStart.exe [2007-09-08 102400]
«RemoteControl»=C:Program FilesCyberLinkPowerDVDPDVDServ.exe [2007-01-09 68640]
«LanguageShortcut»=C:Program FilesCyberLinkPowerDVDLanguageLanguage.exe [2007-01-09 52256]
«eRecoveryService»=C:AcerEmpowering TechnologyeRecoveryeRAgent.exe [2007-07-11 421888]
«LManager»=C:PROGRA~1LAUNCH~1LManager.exe [2007-10-18 858632]
«GrooveMonitor»=C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe [2006-10-27 31016]
«eTCertManger»=C:WINDOWSsystem32eTCrtMng.exe [2006-01-25 98304]
«WinampAgent»=C:Program FilesWinampwinampa.exe [2006-11-22 35328]
«MAgent»=C:Program FilesMail.RuAgentMAgent.exe [2008-10-25 4412920]
«HP Software Update»=C:Program FilesHPHP Software UpdateHPWuSchd2.exe [2005-12-15 49152]
«AVP»=C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0avp.exe [2008-02-08 227856]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunOnce]
«Malwarebytes’ Anti-Malware»=C:Program FilesMalwarebytes’ Anti-Malwarembamgui.exe [2008-12-03 399504]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2004-08-19 15360]
«MSMSGS»=C:Program FilesMessengermsmsgs.exe [2004-08-17 1667584]

C:Documents and Settings1Главное менюПрограммыАвтозагрузка
Сократ Персональный 4.1.lnk — C:Program FilesArsenal CompanyСократ Персональный 4.1spv.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyigfxcui]
C:WINDOWSsystem32igfxdev.dll [2007-06-05 204800]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyklogon]
C:WINDOWSsystem32klogon.dll [2008-02-08 219664]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
«{B5A7F190-DDA6-4420-B3BA-52453494E6CD}»=C:PROGRA~1MICROS~2Office12GRA8E1~1.DLL [2006-10-27 2210608]
«{16664848-0E00-11D2-8059-000000000000}»= []

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=36
«NoDriveAutoRun»=FFFFFFFF
«NoDrives»=0

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveAutoRun»=
«NoDriveTypeAutoRun»=
«NoDrives»=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesCyberLinkPowerDVDPowerDVD.exe»=»C:Program FilesCyberLinkPowerDVDPowerDVD.exe:*:Enabled:CyberLink PowerDVD»
«C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE»=»C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook»
«C:Program FilesMicrosoft OfficeOffice12GROOVE.EXE»=»C:Program FilesMicrosoft OfficeOffice12GROOVE.EXE:*:Enabled:Microsoft Office Groove»
«C:Program FilesMicrosoft OfficeOffice12ONENOTE.EXE»=»C:Program FilesMicrosoft OfficeOffice12ONENOTE.EXE:*:Enabled:Microsoft Office OneNote»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«C:Program FilesMail.RuAgentmagent.exe»=»C:Program FilesMail.RuAgentmagent.exe:*:Enabled:Mail.Ru Агент»
«C:Program FilesHPDigital Imagingbinhpqtra08.exe»=»C:Program FilesHPDigital Imagingbinhpqtra08.exe:*:Enabled:hpqtra08.exe»
«C:Program FilesHPDigital Imagingbinhpqste08.exe»=»C:Program FilesHPDigital Imagingbinhpqste08.exe:*:Enabled:hpqste08.exe»
«C:Program FilesHPDigital Imagingbinhpofxm08.exe»=»C:Program FilesHPDigital Imagingbinhpofxm08.exe:*:Enabled:hpofxm08.exe»
«C:Program FilesHPDigital Imagingbinhposfx08.exe»=»C:Program FilesHPDigital Imagingbinhposfx08.exe:*:Enabled:hposfx08.exe»
«C:Program FilesHPDigital Imagingbinhposid01.exe»=»C:Program FilesHPDigital Imagingbinhposid01.exe:*:Enabled:hposid01.exe»
«C:Program FilesHPDigital Imagingbinhpqscnvw.exe»=»C:Program FilesHPDigital Imagingbinhpqscnvw.exe:*:Enabled:hpqscnvw.exe»
«C:Program FilesHPDigital Imagingbinhpqkygrp.exe»=»C:Program FilesHPDigital Imagingbinhpqkygrp.exe:*:Enabled:hpqkygrp.exe»
«C:Program FilesHPDigital ImagingbinhpqCopy.exe»=»C:Program FilesHPDigital ImagingbinhpqCopy.exe:*:Enabled:hpqcopy.exe»
«C:Program FilesHPDigital Imagingbinhpfccopy.exe»=»C:Program FilesHPDigital Imagingbinhpfccopy.exe:*:Enabled:hpfccopy.exe»
«C:Program FilesHPDigital Imagingbinhpzwiz01.exe»=»C:Program FilesHPDigital Imagingbinhpzwiz01.exe:*:Enabled:hpzwiz01.exe»
«C:Program FilesHPDigital ImagingUnloadHpqPhUnl.exe»=»C:Program FilesHPDigital ImagingUnloadHpqPhUnl.exe:*:Enabled:hpqphunl.exe»
«C:Program FilesHPDigital ImagingUnloadHpqDIA.exe»=»C:Program FilesHPDigital ImagingUnloadHpqDIA.exe:*:Enabled:hpqdia.exe»
«C:Program FilesHPDigital Imagingbinhpoews01.exe»=»C:Program FilesHPDigital Imagingbinhpoews01.exe:*:Enabled:hpoews01.exe»
«C:Program FilesHPDigital Imagingbinhpqnrs08.exe»=»C:Program FilesHPDigital Imagingbinhpqnrs08.exe:*:Enabled:hpqnrs08.exe»
«C:Program FilesMessengermsmsgs.exe»=»C:Program FilesMessengermsmsgs.exe:*:Enabled:Windows Messenger»
«C:Documents and SettingsAll UsersApplication DataKaspersky Lab Setup FilesKaspersky Anti-Virus 7.0.1.325Russiansetup.exe»=»C:Documents and SettingsAll UsersApplication DataKaspersky Lab Setup FilesKaspersky Anti-Virus 7.0.1.325Russiansetup.exe:*:Enabled:Программа установки Антивируса Касперского 7.0»
«C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0avp.exe»=»C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0avp.exe:*:Enabled:Kaspersky Anti-Virus»

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»

======List of files/folders created in the last 1 months======

2008-12-19 11:30:45 —-DC—- C:Documents and Settings1Application DataMalwarebytes
2008-12-19 11:30:39 —-DC—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2008-12-19 11:30:38 —-DC—- C:Program FilesMalwarebytes’ Anti-Malware
2008-12-19 07:17:03 —-DC—- C:НУЖНОЕ
2008-12-19 02:01:10 —-SHDC—- C:Config.Msi
2008-12-19 00:06:56 —-DC—- C:Documents and Settings1Application DataReGet Software
2008-12-19 00:03:09 —-DC—- C:Program FilesCommon FilesReGet Shared
2008-12-18 20:28:39 —-D—- C:_OTMoveIt
2008-12-17 21:38:59 —-RASHDC—- C:autorun.inf
2008-12-17 21:32:25 —-DC—- C:rsit
2008-12-17 21:23:28 —-DC—- C:Program Filestrend micro
2008-12-17 21:12:09 —-SHDC—- C:RECYCLER
2008-12-17 19:55:14 —-AC—- C:WINDOWSzip.exe
2008-12-17 19:55:14 —-AC—- C:WINDOWSVFIND.exe
2008-12-17 19:55:14 —-AC—- C:WINDOWSSWXCACLS.exe
2008-12-17 19:55:14 —-AC—- C:WINDOWSSWSC.exe
2008-12-17 19:55:14 —-AC—- C:WINDOWSSWREG.exe
2008-12-17 19:55:14 —-AC—- C:WINDOWSsed.exe
2008-12-17 19:55:14 —-AC—- C:WINDOWSNIRCMD.exe
2008-12-17 19:55:14 —-AC—- C:WINDOWSgrep.exe
2008-12-17 19:55:14 —-AC—- C:WINDOWSfdsv.exe
2008-12-17 19:55:12 —-DC—- C:WINDOWSERDNT
2008-12-17 19:55:12 —-DC—- C:Qoobox
2008-12-17 16:15:21 —-A—- C:WINDOWSsystem32ImageItEncrypt.exe
2008-12-17 15:57:26 —-D—- C:WINDOWSsystem32autorun
2008-12-17 10:31:27 —-DC—- C:Documents and Settings1Application DataDesktopicon
2008-12-17 10:31:22 —-DC—- C:Program FilesUnlocker
2008-12-17 07:53:04 —-R—- C:WINDOWSsystem32Mraser.dll
2008-12-17 07:53:00 —-DC—- C:Program FilesCommon FilesArsenal Shared
2008-12-17 07:52:57 —-DC—- C:Program FilesArsenal Company
2008-12-16 23:15:52 —-DC—- C:Program FilesMSXML 4.0
2008-12-16 23:15:39 —-HDC—- C:WINDOWS$NtUninstallKB926247$
2008-12-16 15:19:12 —-D—- C:WINDOWSsystem32LogFiles
2008-12-16 15:01:28 —-A—- C:WINDOWSsystem32simptcp.dll
2008-12-16 15:01:25 —-A—- C:WINDOWSsystem32lprmon.dll
2008-12-16 15:01:25 —-A—- C:WINDOWSsystem32lpdsvc.dll
2008-12-15 23:11:48 —-DC—- C:Documents and Settings1Application DataHP
2008-12-15 23:06:12 —-DC—- C:Documents and SettingsAll UsersApplication DataHP
2008-12-15 23:05:38 —-DC—- C:Program FilesCommon FilesHP
2008-12-15 23:02:06 —-DC—- C:Program FilesHewlett-Packard
2008-12-15 23:00:00 —-DC—- C:Program FilesCommon FilesHewlett-Packard
2008-12-15 22:57:52 —-A—- C:WINDOWSsystem32hpzll43a.dll
2008-12-15 22:57:46 —-RA—- C:WINDOWSsystem32hpzids01.dll
2008-12-15 22:52:47 —-A—- C:WINDOWSsystem32HPZisn12.dll
2008-12-15 22:52:47 —-A—- C:WINDOWSsystem32HPZipt12.dll
2008-12-15 22:52:47 —-A—- C:WINDOWSsystem32HPZipr12.dll
2008-12-15 22:52:47 —-A—- C:WINDOWSsystem32HPZipm12.exe
2008-12-15 22:52:47 —-A—- C:WINDOWSsystem32HPZinw12.exe
2008-12-15 22:52:46 —-A—- C:WINDOWSsystem32HPZidr12.dll
2008-12-15 22:49:03 —-DC—- C:Program FilesHP
2008-12-15 21:52:39 —-DC—- C:WINDOWSCache
2008-12-13 02:31:53 —-HDC—- C:WINDOWS$NtUninstallKB952069_WM9$
2008-12-13 02:29:35 —-HDC—- C:WINDOWS$NtUninstallKB956802$
2008-12-13 01:23:15 —-DC—- C:Program FilesCommon FilesNalogoplUL410
2008-12-13 01:11:56 —-D—- C:налог
2008-12-13 01:11:39 —-DC—- C:Program FilesНалог
2008-12-12 15:51:52 —-DC—- C:Program FilesРНИВЦ
2008-12-10 20:21:15 —-HDC—- C:WINDOWS$NtUninstallKB955839$
2008-12-10 20:20:56 —-HDC—- C:WINDOWS$NtUninstallKB954600$
2008-12-10 11:31:39 —-DC—- C:gismeteotray
2008-12-09 20:36:45 —-DC—- C:Program FilesДеловой Хабаровск 2008-1
2008-12-09 20:35:13 —-DC—- C:Gismeteo.Tray 1.07
2008-12-09 20:13:52 —-DC—- C:Program FilesНалогоплательщик ЮЛ
2008-12-09 20:12:37 —-D—- C:Налогоплательщик ЮЛ
2008-12-09 19:57:39 —-DC—- C:Деловой Хабаровск 2008-1
2008-12-09 19:57:08 —-DC—- C:CashFly2
2008-12-09 19:54:35 —-DC—- C:bp6
2008-12-07 00:56:34 —-AC—- C:WINDOWSemsoft.ini
2008-12-05 14:17:21 —-DC—- C:Program FilesMyCentria
2008-12-04 13:54:11 —-DC—- C:Program FilesICQLite
2008-12-04 13:54:03 —-DC—- C:Program FilesQIP
2008-11-20 20:21:26 —-D—- C:WINDOWSsystem32NtmsData

======List of files/folders modified in the last 1 months======

2008-12-19 12:29:21 —-D—- C:WINDOWSTemp
2008-12-19 11:30:42 —-D—- C:WINDOWSsystem32drivers
2008-12-19 11:30:38 —-DC—- C:Program Files
2008-12-19 11:17:41 —-D—- C:WINDOWSsystem32
2008-12-19 11:17:40 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2008-12-19 11:14:41 —-D—- C:WINDOWSsystem32CatRoot2
2008-12-19 11:14:32 —-DC—- C:Documents and SettingsAll UsersApplication DataKaspersky Lab
2008-12-19 11:13:37 —-AC—- C:WINDOWSModemLog_HDAUDIO Soft Data Fax Modem with SmartCP.txt
2008-12-19 11:12:16 —-A—- C:WINDOWSSchedLgU.Txt
2008-12-19 10:29:32 —-DC—- C:WINDOWS
2008-12-19 07:05:26 —-RSHD—- C:WINDOWSsystem32dllcache
2008-12-19 04:48:59 —-DC—- C:WINDOWSHelp
2008-12-19 04:48:54 —-DC—- C:WINDOWSCursors
2008-12-19 04:48:49 —-DC—- C:Program FilesWindows NT
2008-12-19 04:48:39 —-D—- C:WINDOWSsystem32wbem
2008-12-19 04:42:48 —-D—- C:WINDOWSsystem32CatRoot_bak
2008-12-19 04:42:48 —-D—- C:WINDOWSsystem32CatRoot
2008-12-19 04:42:44 —-HD—- C:WINDOWSinf
2008-12-19 02:58:29 —-AC—- C:WINDOWSimsins.BAK
2008-12-19 02:57:58 —-HDC—- C:WINDOWS$hf_mig$
2008-12-19 02:04:34 —-SHD—- C:WINDOWSInstaller
2008-12-19 00:53:25 —-D—- C:WINDOWSrepair
2008-12-19 00:53:17 —-D—- C:WINDOWSRegistration
2008-12-19 00:03:15 —-AC—- C:WINDOWSwin.ini
2008-12-19 00:03:09 —-DC—- C:Program FilesCommon Files
2008-12-18 13:51:35 —-AC—- C:WINDOWSModemLog_EDGE Modem.txt
2008-12-18 11:38:51 —-AC—- C:WINDOWSOEWABLog.txt
2008-12-18 11:38:32 —-DC—- C:Documents and Settings
2008-12-17 21:08:49 —-AC—- C:WINDOWSsystem.ini
2008-12-17 21:07:42 —-DC—- C:WINDOWSAppPatch
2008-12-17 19:45:55 —-D—- C:WINDOWSPrefetch
2008-12-17 14:32:54 —-SDC—- C:Documents and Settings1Application DataMicrosoft
2008-12-17 07:52:57 —-HDC—- C:Program FilesInstallShield Installation Information
2008-12-16 23:35:56 —-D—- C:WINDOWSsystem32ias
2008-12-16 23:15:53 —-D—- C:WINDOWSWinSxS
2008-12-16 16:25:59 —-DC—- C:Documents and Settings1Application DataHelp
2008-12-16 15:57:06 —-D—- C:WINDOWSsecurity
2008-12-16 15:56:11 —-D—- C:WINDOWSsystem32Restore
2008-12-15 23:11:26 —-SD—- C:WINDOWSTasks
2008-12-15 23:01:06 —-D—- C:WINDOWStwain_32
2008-12-15 22:58:06 —-D—- C:WINDOWSsystem32FxsTmp
2008-12-13 17:18:10 —-DC—- C:Documents and Settings1Application DataMra
2008-12-13 16:39:09 —-A—- C:WINDOWSsystem32mshtml.dll
2008-12-13 02:31:35 —-DC—- C:Program FilesInternet Explorer
2008-12-13 01:23:15 —-RSDC—- C:WINDOWSFonts
2008-12-10 09:24:38 —-A—- C:WINDOWSsystem32MRT.exe
2008-12-09 18:15:36 —-DC—- C:Program FilesOnline Services
2008-12-09 18:11:37 —-DC—- C:DOCS
2008-12-08 16:02:20 —-D—- C:WINDOWSMinidump
2008-12-07 09:09:35 —-D—- C:WINDOWSnetwork diagnostic
2008-11-26 23:03:24 —-DC—- C:Documents and SettingsAll UsersApplication DataMicrosoft Help
2008-11-21 16:22:08 —-DC—- C:Documents and Settings1Application DataWildfire

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Драйвер Intel процессора; C:WINDOWSsystem32DRIVERSintelppm.sys [2004-08-19 40448]
R1 klif;Klif; ??C:WINDOWSsystem32driversklif.sys []
R1 WmiAcpi;Интерфейс управления для ACPI Microsoft Windows; C:WINDOWSsystem32DRIVERSwmiacpi.sys [2004-08-04 8832]
R2 irda;ИК-протокол IrDA; C:WINDOWSsystem32DRIVERSirda.sys [2004-08-04 87424]
R2 mdmxsdk;mdmxsdk; C:WINDOWSsystem32DRIVERSmdmxsdk.sys [2006-06-20 12672]
R3 AKSIFDH;Aladdin IFD Handler; C:WINDOWSsystem32DRIVERSaksifdh.sys [2006-01-22 90346]
R3 AR5211;Atheros Wireless Network Adapter Service; C:WINDOWSsystem32DRIVERSar5211.sys [2007-05-03 546976]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:WINDOWSsystem32DRIVERSb57xp32.sys [2007-02-16 160256]
R3 CmBatt;Драйвер батареи с ACPI-управлением (Майкрософт); C:WINDOWSsystem32DRIVERSCmBatt.sys [2004-08-04 14080]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:WINDOWSsystem32DRIVERSDKbFltr.sys [2006-01-21 17408]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:WINDOWSsystem32DRIVERSHDAudBus.sys [2005-01-07 138752]
R3 HidUsb;Драйвер класса HID Microsoft; C:WINDOWSsystem32DRIVERShidusb.sys [2001-08-18 9600]
R3 HSF_DPV;HSF_DPV; C:WINDOWSsystem32DRIVERSHSF_DPV.sys [2006-12-23 988800]
R3 HSFHWAZL;HSFHWAZL; C:WINDOWSsystem32DRIVERSHSFHWAZL.sys [2006-12-23 209664]
R3 ialm;ialm; C:WINDOWSsystem32DRIVERSigxpmp32.sys [2007-06-06 5761728]
R3 int15.sys;int15.sys; ??C:AcerEmpowering TechnologyeRecoveryint15.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:WINDOWSsystem32driversRtkHDAud.sys [2007-05-31 4424192]
R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:WINDOWSsystem32DRIVERSklim5.sys [2007-12-13 24592]
R3 mouhid;Драйвер мыши HID; C:WINDOWSsystem32DRIVERSmouhid.sys [2001-10-20 12160]
R3 NSCIRDA;Драйвер ИК-устройства NSC; C:WINDOWSsystem32DRIVERSnscirda.sys [2004-08-04 28672]
R3 NTIDrvr;Upper Class Filter Driver; C:WINDOWSsystem32DRIVERSNTIDrvr.sys [2007-08-22 6144]
R3 Rasirda;Минипорт WAN (IrDA); C:WINDOWSsystem32DRIVERSrasirda.sys [2001-08-18 19584]
R3 sdbus;sdbus; C:WINDOWSsystem32DRIVERSsdbus.sys [2004-08-19 67584]
R3 SynTP;Synaptics TouchPad Driver; C:WINDOWSsystem32DRIVERSSynTP.sys [2007-09-08 215904]
R3 tifm21;tifm21; C:WINDOWSsystem32driverstifm21.sys [2007-05-02 290816]
R3 usbehci;Драйвер минипорта Microsoft USB 2.0 расширенного хост-контроллера; C:WINDOWSsystem32DRIVERSusbehci.sys [2006-04-19 30080]
R3 usbhub;Драйвер стандартного концентратора USB (Microsoft); C:WINDOWSsystem32DRIVERSusbhub.sys [2006-02-21 58240]
R3 usbuhci;Драйвер минипорта Microsoft USB универсального хост-контроллера; C:WINDOWSsystem32DRIVERSusbuhci.sys [2006-04-19 20608]
R3 winachsf;winachsf; C:WINDOWSsystem32DRIVERSHSF_CNXT.sys [2006-12-23 730112]
S3 AKSUP;AKSUP; C:WINDOWSsystem32driversaksup.sys [2006-01-22 34406]
S3 Arp1394;Протокол клиента 1394 ARP; C:WINDOWSsystem32DRIVERSarp1394.sys [2004-08-19 60800]
S3 CCDECODE;Closed Caption декодер; C:WINDOWSsystem32DRIVERSCCDECODE.sys [2004-08-04 17024]
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet адаптер, драйвер для NT; C:WINDOWSsystem32DRIVERSfetnd5.sys [2001-08-18 27165]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:WINDOWSsystem32DRIVERSHPZid412.sys [2005-10-28 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:WINDOWSsystem32DRIVERSHPZipr12.sys [2005-10-28 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:WINDOWSsystem32DRIVERSHPZius12.sys [2005-10-28 21568]
S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2004-08-04 5504]
S3 NABTSFEC;NABTS/FEC VBI кодек; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft видео или ТВ подключение; C:WINDOWSsystem32DRIVERSNdisIP.sys [2004-08-04 10880]
S3 NIC1394;Сетевой драйвер 1394; C:WINDOWSsystem32DRIVERSnic1394.sys [2004-08-19 61824]
S3 psdfbus;Philips Sysol Dragonfly Composite Device driver (WDM); C:WINDOWSsystem32DRIVERSpsdfbus.sys [2005-12-08 66496]
S3 psdfilter;psdfilter; ??C:WINDOWSsystem32Driverspsdfilter.sys []
S3 psdfmdfl;Philips Sysol Dragonfly Modem Filter; C:WINDOWSsystem32DRIVERSpsdfmdfl.sys [2005-12-08 9232]
S3 psdfmdm;Philips Sysol Dragonfly Modem Drivers; C:WINDOWSsystem32DRIVERSpsdfmdm.sys [2005-12-08 99136]
S3 psdvdisk;psdvdisk; ??C:WINDOWSsystem32Driverspsdvdisk.sys []
S3 sffdisk;Драйвер класса SFF Storage; C:WINDOWSsystem32DRIVERSsffdisk.sys [2004-08-19 11136]
S3 sffp_sd;Драйвер протокола SFF Storage для SDBus; C:WINDOWSsystem32DRIVERSsffp_sd.sys [2004-08-19 10240]
S3 SLIP;BDA Slip De-Framer; C:WINDOWSsystem32DRIVERSSLIP.sys [2004-08-04 11136]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2004-08-04 15360]
S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:WINDOWSsystem32DRIVERSusbccgp.sys [2004-08-04 31616]
S3 usbprint;Класс принтеров Microsoft USB; C:WINDOWSsystem32DRIVERSusbprint.sys [2004-08-03 25856]
S3 usbscan;Драйвер USB-сканера; C:WINDOWSsystem32DRIVERSusbscan.sys [2004-08-03 15104]
S3 usbstor;Драйвер запоминающих устройств для USB; C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-19 26496]
S3 usbvideo;USB-видеоустройство (WDM); C:WINDOWSSystem32Driversusbvideo.sys [2004-08-04 78464]
S3 WSTCODEC;World Standard Teletext кодек; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2004-08-04 19328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AVP;Kaspersky Anti-Virus 7.0; C:Program FilesKaspersky LabKaspersky Anti-Virus 7.0avp.exe [2008-02-08 227856]
R2 ETOKSRV;eToken Notification Service; C:WINDOWSsystem32eTSrv.exe [2006-01-25 90112]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:Program FilesIntelIntel Matrix Storage ManagerIaantmon.exe [2007-03-21 355096]
R2 Irmon;Монитор инфракрасной связи; C:WINDOWSsystem32svchost.exe [2004-08-19 14336]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:Program FilesCommon FilesLightScribeLSSrvc.exe [2007-01-17 61440]
R2 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ); C:Program FilesMicrosoft SQL ServerMSSQL.1MSSQLBinnsqlservr.exe [2006-04-14 28933976]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:WINDOWSsystem32HPZipm12.exe [2005-03-14 69632]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:Program FilesCyberLinkShared FilesRichVideo.exe [2007-01-09 171040]
S2 CLTNetCnService;Symantec Lic NetConnect service; C:Program FilesCommon FilesSymantec SharedccSvcHst.exe /h ccCommon []
S2 Fax;Fax; C:WINDOWSsystem32fxssvc.exe [2004-08-19 268288]
S3 aspnet_state;ASP.NET State Service; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:WINDOWSMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe [2005-09-23 66240]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver1150Intel 32IDriverT.exe [2005-11-14 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:Program FilesMicrosoft OfficeOffice12GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:Program FilesCommon FilesMicrosoft SharedOFFICE12ODSERV.EXE [2006-10-27 441136]
S3 ose;Office Source Engine; C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2006-10-26 145184]
S3 SQLWriter;SQL Server VSS Writer; C:Program FilesMicrosoft SQL Server90Sharedsqlwriter.exe [2006-04-14 87840]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:Program FilesMicrosoft SQL Server90Sharedsqladhlp90.exe [2005-10-14 45272]
S4 SQLBrowser;SQL Server Browser; C:Program FilesMicrosoft SQL Server90Sharedsqlbrowser.exe [2006-04-14 240416]

EOF
Автор

Сообщения

Просмотр 6 сообщений - с 1 по 6 (из 6 всего)

yabybnb

Созданные ответы форума

Добро пожаловать

Поиск

Важные инструкции

Как удалить рекламный вирус в браузере (Chrome, Opera, Firefox, Internet Explorer, Edge)

Как удалить вредоносные программы, лучшие утилиты

Рекламный вирус в Планировщике заданий

Этот параметр включен администратором

Какой лучший антивирус ? Как выбрать антивирус ?

СПАЙВАРЕ РУ

Нужна помощь?

Ссылки