Logfile of random's system information tool 1.08 (written by random/random)
Run by Семейный at 2010-07-30 16:16:37
Microsoft Windows 7 Максимальная  
System drive C: has 37 GB (59%) free of 63 GB
Total RAM: 2047 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:16:43, on 30.07.2010
Platform: Windows 7  (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\2gis\3.0\2GISTrayNotifier.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Users\Семейный\AppData\Roaming\QipGuard\QipGuard.exe
C:\Users\Семейный\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Семейный\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Семейный\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Семейный\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Семейный\Desktop\Новая папка (2)\avz4\avz4\avz.exe
C:\Users\Семейный\Desktop\Новая папка (2)\RSIT.exe
C:\Program Files\trend micro\Семейный.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yandex.ru/?clid=124990
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\Семейный\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) -  - (no file)
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: IE 4.x-6.x BHO for Download Master - {9961627E-4059-41B4-8E0E-A7D6B3854ADF} - C:\PROGRA~1\DOWNLO~1\dmiehlp.dll
O2 - BHO: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\Семейный\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: DM Bar - {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} - C:\Program Files\Download Master\dmbar.dll
O4 - HKLM\..\Run: [2Gis Update Notifier] C:\Program Files\2gis\3.0\2GISTrayNotifier.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Семейный\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [QIP Internet Guardian] C:\Users\Семейный\AppData\Roaming\QipGuard\QipGuard.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Punto Switcher.lnk = C:\Program Files\Yandex\Punto Switcher\punto.exe
O8 - Extra context menu item: &Отправить в OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: &Экспорт в Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Закачать ВСЕ при помощи Download Master - C:\Program Files\Download Master\dmieall.htm
O8 - Extra context menu item: Закачать при помощи Download Master - C:\Program Files\Download Master\dmie.htm
O8 - Extra context menu item: Передать на удаленную закачку DM - C:\Program Files\Download Master\remdown.htm
O9 - Extra button: Отправить в OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Отправить в OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Связанные заметки OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Связанные заметки OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Download Master - {8DAE90AD-4583-4977-9DD4-4360F7A45C74} - C:\Program Files\Download Master\dmaster.exe
O9 - Extra 'Tools' menuitem: &Download Master - {8DAE90AD-4583-4977-9DD4-4360F7A45C74} - C:\Program Files\Download Master\dmaster.exe
O9 - Extra button: Справочные материалы - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (no file)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: 2GIS UpdateService (2GISUpdateService) - ООО ДубльГИС - C:\Program Files\2gis\3.0\2GISUpdateService.exe
O23 - Service: Acronis OS Selector Reinstall Service (AcronisOSSReinstallSvc) - Unknown owner - C:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: KMService - Unknown owner - C:\Windows\system32\srvany.exe
O23 - Service: Microsoft Office Groove Audit Service - Unknown owner - C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 6965 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1846197370-1646070577-144406292-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1846197370-1646070577-144406292-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master - C:\PROGRA~1\DOWNLO~1\dmiehlp.dll [2009-04-16 158208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class - C:\Users\Семейный\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll [2010-02-18 149968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-28 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0E1230F8-EA50-42A9-983C-D22ABC2EED3C} - DM Bar - C:\Program Files\Download Master\dmbar.dll [2007-11-26 180224]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"2Gis Update Notifier"=C:\Program Files\2gis\3.0\2GISTrayNotifier.exe [2010-06-04 3319640]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2008-06-10 1447168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-05-13 26192168]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2010-05-25 322352]
"Google Update"=C:\Users\Семейный\AppData\Local\Google\Update\GoogleUpdate.exe [2010-02-20 135664]
"QIP Internet Guardian"=C:\Users\Семейный\AppData\Roaming\QipGuard\QipGuard.exe [2010-02-18 181712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-11-11 1451520]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SYS]
C:\Program Files\Download Master\sys.exe []

C:\Users\Семейный\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Punto Switcher.lnk - C:\Program Files\Yandex\Punto Switcher\punto.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=2

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
""=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2010-07-30 16:16:38 ----D---- C:\Program Files\trend micro
2010-07-30 16:16:37 ----D---- C:\rsit
2010-07-30 16:14:34 ----A---- C:\Windows\system32\drivers\ute3otu0.sys
2010-07-30 15:40:19 ----A---- C:\Windows\system32\drivers\uze3otu0.sys
2010-07-30 14:32:26 ----A---- C:\Windows\ntbtlog.txt
2010-07-29 20:05:08 ----D---- C:\Users\Семейный\AppData\Roaming\skypePM
2010-07-29 19:54:47 ----D---- C:\Users\Семейный\AppData\Roaming\Skype
2010-07-29 19:49:29 ----D---- C:\Program Files\Common Files\Skype
2010-07-29 19:49:26 ----RD---- C:\Program Files\Skype
2010-07-29 19:49:25 ----D---- C:\ProgramData\Skype
2010-07-26 18:52:24 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-07-26 18:52:24 ----A---- C:\Windows\system32\PresentationHost.exe
2010-07-26 18:52:24 ----A---- C:\Windows\system32\netfxperf.dll
2010-07-26 18:52:24 ----A---- C:\Windows\system32\mscoree.dll
2010-07-26 18:52:24 ----A---- C:\Windows\system32\dfshim.dll
2010-07-26 18:51:23 ----A---- C:\Windows\system32\ntdll.dll
2010-07-26 18:51:15 ----A---- C:\Windows\system32\win32k.sys
2010-07-26 18:51:07 ----A---- C:\Windows\system32\asycfilt.dll
2010-07-26 18:50:30 ----D---- C:\Eset
2010-07-26 18:50:22 ----A---- C:\Windows\system32\CPFilters.dll
2010-07-26 18:50:20 ----A---- C:\Windows\system32\msdri.dll
2010-07-26 18:50:02 ----A---- C:\Windows\system32\mstime.dll
2010-07-26 18:50:01 ----A---- C:\Windows\system32\wininet.dll
2010-07-26 18:50:01 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-07-26 18:50:01 ----A---- C:\Windows\system32\jsproxy.dll
2010-07-26 18:50:01 ----A---- C:\Windows\system32\iedkcs32.dll
2010-07-26 18:49:59 ----A---- C:\Windows\system32\urlmon.dll
2010-07-26 18:49:59 ----A---- C:\Windows\system32\mshtml.dll
2010-07-26 18:49:59 ----A---- C:\Windows\system32\ieframe.dll
2010-07-26 18:47:44 ----A---- C:\Windows\system32\atmlib.dll
2010-07-26 18:47:44 ----A---- C:\Windows\system32\atmfd.dll
2010-06-27 18:46:19 ----A---- C:\Users\Семейный\AppData\Roaming\summary.txt
2010-06-26 20:53:29 ----A---- C:\Windows\EurekaLog.ini
2010-06-26 20:52:08 ----D---- C:\Program Files\Frigate3
2010-06-26 17:47:13 ----D---- C:\Users\Семейный\AppData\Roaming\EurekaLog
2010-06-26 17:23:56 ----D---- C:\Users\Семейный\AppData\Roaming\Frigate3
2010-06-19 11:18:30 ----D---- C:\Users\Семейный\AppData\Roaming\Cifromig
2010-06-19 11:16:40 ----D---- C:\Users\Семейный\AppData\Roaming\tmp
2010-06-19 11:16:17 ----D---- C:\Program Files\Цифромиг
2010-06-14 14:06:00 ----A---- C:\Windows\system32\srvany.exe
2010-06-14 14:06:00 ----A---- C:\Windows\KMService.exe
2010-06-14 10:01:20 ----D---- C:\Program Files\Common Files\DESIGNER
2010-06-14 09:57:55 ----D---- C:\Program Files\Microsoft Analysis Services
2010-06-07 22:29:04 ----D---- C:\Users\Семейный\AppData\Roaming\CyberLink
2010-06-07 22:28:03 ----D---- C:\ProgramData\CyberLink
2010-06-07 22:27:40 ----D---- C:\Program Files\Common Files\CyberLink
2010-06-07 22:25:51 ----D---- C:\Program Files\CyberLink
2010-06-07 22:25:51 ----A---- C:\Windows\system32\msxml3a.dll
2010-06-07 22:25:20 ----D---- C:\ProgramData\Temp
2010-06-02 23:38:15 ----A---- C:\Windows\system32\inetcomm.dll
2010-06-02 22:36:31 ----D---- C:\Users\Семейный\AppData\Roaming\ImgBurn
2010-06-02 22:35:24 ----D---- C:\Program Files\ImgBurn
2010-05-30 22:26:29 ----D---- C:\Users\Семейный\AppData\Roaming\SpeedProject
2010-05-16 10:38:16 ----D---- C:\Users\Семейный\AppData\Roaming\ESET
2010-05-16 10:37:18 ----D---- C:\ProgramData\ESET
2010-05-16 10:37:18 ----D---- C:\Program Files\ESET
2010-05-12 16:07:25 ----N---- C:\Windows\Setup1.exe
2010-05-12 16:07:24 ----A---- C:\Windows\ST6UNST.EXE
2010-05-09 22:44:57 ----D---- C:\Program Files\Google
2010-05-09 11:32:07 ----A---- C:\Windows\ODBC.INI
2010-05-09 11:32:04 ----A---- C:\Windows\system32\mdimon.dll
2010-05-08 22:50:27 ----D---- C:\Program Files\Microsoft.NET
2010-05-04 22:32:00 ----D---- C:\Windows\Minidump

======List of files/folders modified in the last 3 months======

2010-07-30 16:16:44 ----D---- C:\Windows\Prefetch
2010-07-30 16:16:40 ----D---- C:\Windows\Temp
2010-07-30 16:16:38 ----RD---- C:\Program Files
2010-07-30 16:14:34 ----D---- C:\Windows\system32\drivers
2010-07-30 16:13:14 ----D---- C:\Users\Семейный\AppData\Roaming\uTorrent
2010-07-30 16:02:30 ----AD---- C:\Windows\System32
2010-07-30 16:02:29 ----D---- C:\Windows\inf
2010-07-30 16:02:29 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-07-30 15:56:59 ----D---- C:\Windows\system32\config
2010-07-30 15:31:42 ----D---- C:\Users\Семейный\AppData\Roaming\The Bat! Pwd
2010-07-30 14:32:26 ----D---- C:\Windows
2010-07-29 20:28:31 ----HD---- C:\ProgramData
2010-07-29 19:54:46 ----D---- C:\Windows\system32\Tasks
2010-07-29 19:54:20 ----SHD---- C:\Windows\Installer
2010-07-29 19:49:29 ----AD---- C:\Program Files\Common Files
2010-07-29 14:01:57 ----D---- C:\Windows\Logs
2010-07-27 22:10:30 ----D---- C:\Users\Семейный\AppData\Roaming\AIMP
2010-07-26 21:02:04 ----D---- C:\ProgramData\Microsoft Help
2010-07-26 19:13:09 ----D---- C:\Windows\Microsoft.NET
2010-07-26 19:12:37 ----RSD---- C:\Windows\assembly
2010-07-26 18:55:59 ----D---- C:\Windows\winsxs
2010-07-26 18:54:33 ----D---- C:\Windows\ehome
2010-07-26 18:54:33 ----D---- C:\Program Files\Internet Explorer
2010-07-26 18:54:32 ----D---- C:\Windows\system32\migration
2010-07-26 18:54:31 ----D---- C:\Windows\AppPatch
2010-07-26 18:53:23 ----D---- C:\Windows\system32\catroot
2010-07-26 18:52:39 ----D---- C:\Windows\system32\catroot2
2010-07-26 11:32:03 ----D---- C:\Program Files\Download Master
2010-06-29 16:28:03 ----D---- C:\Users\Семейный\AppData\Roaming\dvdcss
2010-06-27 23:02:42 ----D---- C:\Users\Семейный\AppData\Roaming\vlc
2010-06-26 20:03:13 ----D---- C:\Users\Семейный\AppData\Roaming\Yandex
2010-06-26 20:03:13 ----D---- C:\ProgramData\Yandex
2010-06-26 20:03:13 ----D---- C:\Program Files\Yandex
2010-06-26 17:24:20 ----D---- C:\Windows\Downloaded Program Files
2010-06-26 17:01:03 ----D---- C:\DC++Incomplete
2010-06-26 12:09:42 ----D---- C:\Program Files\AIMP2
2010-06-25 14:36:17 ----D---- C:\Users\Семейный\AppData\Roaming\Nokia
2010-06-19 12:48:41 ----D---- C:\ProgramData\AlawarWrapper
2010-06-15 00:05:06 ----SD---- C:\Users\Семейный\AppData\Roaming\Microsoft
2010-06-14 10:06:21 ----D---- C:\Program Files\Common Files\microsoft shared
2010-06-14 10:05:59 ----D---- C:\Windows\ShellNew
2010-06-14 10:05:42 ----A---- C:\Windows\win.ini
2010-06-14 10:00:45 ----RSD---- C:\Windows\Fonts
2010-06-14 10:00:35 ----D---- C:\Program Files\Microsoft Office
2010-06-14 10:00:34 ----SD---- C:\ProgramData\Microsoft
2010-06-12 17:44:42 ----D---- C:\ProgramData\Kaspersky Lab
2010-06-08 14:20:22 ----D---- C:\Program Files\2gis
2010-06-08 14:20:16 ----A---- C:\Windows\UpdateClientUI.INI
2010-06-07 22:25:19 ----A---- C:\Windows\system32\msvcr71.dll
2010-06-07 22:25:19 ----A---- C:\Windows\system32\msvcp71.dll
2010-06-07 22:13:04 ----D---- C:\Users\Семейный\AppData\Roaming\Download Master
2010-06-02 23:38:18 ----D---- C:\Program Files\Windows Mail
2010-05-30 22:33:14 ----D---- C:\Program Files\The Bat!
2010-05-26 07:35:35 ----D---- C:\Program Files\uTorrent
2010-05-24 21:57:52 ----D---- C:\Program Files\Панель
2010-05-23 20:44:45 ----D---- C:\Windows\ModemLogs
2010-05-23 08:55:05 ----SHD---- C:\System Volume Information
2010-05-21 14:14:28 ----N---- C:\Windows\system32\MpSigStub.exe
2010-05-18 23:27:52 ----D---- C:\Users\Семейный\AppData\Roaming\Nero
2010-05-16 10:37:39 ----D---- C:\Windows\system32\DriverStore
2010-05-09 23:05:24 ----A---- C:\Windows\SignSIS.EXE
2010-05-09 11:11:42 ----D---- C:\Windows\system
2010-05-08 22:47:49 ----D---- C:\Windows\system32\wbem
2010-05-08 22:47:40 ----D---- C:\Program Files\MSBuild

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2010-02-20 114048]
R1 AsIO;AsIO; C:\Windows\system32\drivers\AsIO.sys [2010-04-17 12400]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 easdrv;easdrv; C:\Windows\system32\DRIVERS\easdrv.sys [2008-06-10 53256]
R1 epfwtdi;epfwtdi; C:\Windows\system32\DRIVERS\epfwtdi.sys [2008-06-10 54280]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files\UltraISO\drivers\ISODrive.sys [2010-01-29 82320]
R1 uze3otu0;AVZ-RK Kernel Driver; \??\C:\Windows\system32\Drivers\uze3otu0.sys [2010-07-30 11264]
R2 DgiVecp;DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [2009-03-02 38400]
R2 eamon;EAMON; C:\Windows\system32\DRIVERS\eamon.sys [2008-06-10 39944]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2008-06-10 71688]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2009-03-02 5120]
R3 AtcL001;Драйвер мини-порта NDIS для контроллера Atheros L1 Gigabit Ethernet; C:\Windows\system32\DRIVERS\l160x86.sys [2009-07-14 47104]
R3 BthAvrcp;Профиль Bluetooth AVRCP; C:\Windows\system32\DRIVERS\BthAvrcp.sys [2009-08-13 22528]
R3 BthEnum;Драйвер блока запроса Bluetooth; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Устройства Bluetooth (личной сети); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Драйвер порта USB радиомодуля Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2008-06-10 30728]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2010-04-17 6504]
R3 RFCOMM;Устройство Bluetooth (протокол RFCOMM TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S2 ASInsHelp;ASInsHelp; \??\C:\Windows\system32\drivers\AsInsHelp32.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BTHPORT;Драйвер порта Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2010-01-21 18048]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2009-12-30 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2009-12-30 7936]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-07-14 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2009-12-30 7936]
S3 ute3otu0;AVZ Kernel Driver; \??\C:\Windows\system32\Drivers\ute3otu0.sys [2010-07-30 7168]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;Eset Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2008-06-10 468224]
R2 KMService;KMService; C:\Windows\system32\srvany.exe [2010-06-14 8192]
S2 AcronisOSSReinstallSvc;Acronis OS Selector Reinstall Service; C:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe [2007-03-26 2235448]
S3 2GISUpdateService;2GIS UpdateService; C:\Program Files\2gis\3.0\2GISUpdateService.exe [2010-06-04 775512]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 EhttpSrv;Eset HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2008-06-10 19200]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-12-23 136120]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe []
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office  Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-01-26 652800]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 CscService;Автономные файлы; C:\Windows\System32\svchost.exe [2009-07-14 20992]

-----------------EOF-----------------