Лог утилиты random's system information tool 1.08 (автор: random/random)
Run by ХХХ at 2011-11-02 14:23:03
Microsoft Windows XP Professional Service Pack 3
Системный раздел C: размер 36 GB (70%) Свободно 51 GB
Total RAM: 2047 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:23:14, on 02.11.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\WebMoney Agent\wmagent.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Hard Drive Inspector\HDInspector.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ICQ7.6\ICQ.exe
C:\Program Files\IObit\Advanced SystemCare 4\Suo10_SmartRAM.exe
C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe
C:\Program Files\Yandex\Punto Switcher\punto.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\Program Files\Common Files\AltrixSoft\HDDInfoService\HDDSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Opera\opera.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\ХХХ\Рабочий стол\RSIT.exe
C:\Program Files\trend micro\ХХХ.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mail.ru/cnt/7829
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Ссылки
R3 - Default URLSearchHook is missing
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Спутник@Mail.Ru - {8984B388-A5BB-4DF7-B274-77B879E179DB} - (no file)
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: WebMoneyAdvisor BHO - {E7D2CB77-6E2D-4C1F-B485-D50506B9FA6B} - C:\Program Files\WebMoney Advisor\2.2.4\wmadvisor.dll
O3 - Toolbar: WebMoney Advisor - {405DFEAE-1D2F-4649-BE08-C92313C3E1CE} - C:\Program Files\WebMoney Advisor\2.2.4\wmadvisor.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [wmagent.exe] "C:\Program Files\WebMoney Agent\wmagent.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HDInspector.exe] C:\Program Files\Hard Drive Inspector\HDInspector.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.6\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [SmartRAM] "C:\Program Files\IObit\Advanced SystemCare 4\Suo10_SmartRAM.exe" /m
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Punto Switcher.lnk = C:\Program Files\Yandex\Punto Switcher\punto.exe
O8 - Extra context menu item: &Экспорт в Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Отправить в OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Отправить в OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{4FC2AF6A-0EDA-4729-8539-8F0872FBFF3D}: NameServer = 195.46.116.1 195.46.96.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{7305D3AB-A24B-4775-BC67-B031434152CB}: NameServer = 195.46.116.1,195.46.96.1
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Предзагрузчик Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Демон кэша категорий компонентов - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: 2GIS UpdateService (2GISUpdateService) - ООО ДубльГИС - C:\Program Files\2gis\3.0\2GISUpdateService.exe
O23 - Service: Advanced SystemCare Service (AdvancedSystemCareService) - IObit - C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Журнал событий (Eventlog) - Корпорация Майкрософт - C:\WINDOWS\system32\services.exe
O23 - Service: Служба Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Служба Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: HDD Information Service (HDDSvc) - AltrixSoft (http://www.altrixsoft.com/) - C:\Program Files\Common Files\AltrixSoft\HDDInfoService\HDDSvc.exe
O23 - Service: Служба COM записи компакт-дисков IMAPI (ImapiService) - Корпорация Майкрософт - C:\WINDOWS\system32\imapi.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: Plug and Play (PlugPlay) - Корпорация Майкрософт - C:\WINDOWS\system32\services.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Журналы и оповещения производительности (SysmonLog) - Корпорация Майкрософт - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Теневое копирование тома (VSS) - Корпорация Майкрософт - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Адаптер производительности WMI (WmiApSrv) - Корпорация Майкрософт - C:\WINDOWS\system32\wbem\wmiapsrv.exe

--
End of file - 7685 bytes

======Папка назначеных зданий======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Резервная копия реестра.job

======Снимок реестра======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8984B388-A5BB-4DF7-B274-77B879E179DB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10 3834016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7D2CB77-6E2D-4C1F-B485-D50506B9FA6B}]
WebMoneyAdvisorBHO - C:\Program Files\WebMoney Advisor\2.2.4\wmadvisor.dll [2011-07-21 288224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{405DFEAE-1D2F-4649-BE08-C92313C3E1CE} - WebMoney Advisor - C:\Program Files\WebMoney Advisor\2.2.4\wmadvisor.dll [2011-07-21 288224]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2007-04-16 577536]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2011-09-16 3080264]
"wmagent.exe"=C:\Program Files\WebMoney Agent\wmagent.exe [2009-10-19 210400]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-10 61440]
"HDInspector.exe"=C:\Program Files\Hard Drive Inspector\HDInspector.exe [2011-10-09 3158016]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-15 15360]
"ICQ"=C:\Program Files\ICQ7.6\ICQ.exe [2011-10-11 127040]
"SmartRAM"=C:\Program Files\IObit\Advanced SystemCare 4\Suo10_SmartRAM.exe [2011-05-28 512400]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\2Gis Update Notifier]
C:\Program Files\2gis\3.0\2GISTrayNotifier.exe [2011-09-29 3760480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSpeedUp]
C:\Program Files\PC Speed Up\PCSpeedUp.lnk [2011-09-27 2003]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Главное меню^Программы^Автозагрузка^Total Commander.lnk]
C:\PROGRA~1\TOTALC~1\Totalcmd.exe [2011-06-12 3707808]

C:\Documents and Settings\ХХХ\Главное меню\Программы\Автозагрузка
Punto Switcher.lnk - C:\Program Files\Yandex\Punto Switcher\punto.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-02-11 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"InstallTheme"=%WinDir%\Resources\Themes\OpusOS.Theme
"InstallVisualStyle"=%WinDir%\Resources\Themes\OpusOS\OpusOS.msstyles
"EnableLUA"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\ICQ7.6\ICQ.exe"="C:\Program Files\ICQ7.6\ICQ.exe:*:Enabled:ICQ7.6"
"C:\Program Files\PES 2009 Российская Премьер-Лига\pes2009.exe"="C:\Program Files\PES 2009 Российская Премьер-Лига\pes2009.exe:*:Enabled:Pro Evolution Soccer 2009"
"D:\ПРОГИ\EverestPortable\App\EverestCorporate\everest.exe"="D:\ПРОГИ\EverestPortable\App\EverestCorporate\everest.exe:*:Enabled:EverestCorporate"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.6\ICQ.exe"="C:\Program Files\ICQ7.6\ICQ.exe:*:Enabled:ICQ7.6"
"D:\ПРОГИ\EverestPortable\App\EverestCorporate\everest.exe"="D:\ПРОГИ\EverestPortable\App\EverestCorporate\everest.exe:*:Enabled:EverestCorporate"

======Список файлов и папок, созданных за последние 1 месяц======

2012-09-30 10:24:00 ----A---- C:\WINDOWS\system32\h323log.txt
2012-09-30 10:17:39 ----AC---- C:\WINDOWS\system32\drivers\audstub.sys
2012-09-30 10:17:07 ----AC---- C:\WINDOWS\system32\drivers\redbook.sys
2012-09-30 10:16:41 ----AC---- C:\WINDOWS\system32\irftp.exe
2012-09-30 10:16:41 ----AC---- C:\WINDOWS\system32\drivers\rasirda.sys
2012-09-30 10:16:41 ----A---- C:\WINDOWS\system32\wshirda.dll
2012-09-30 10:16:41 ----A---- C:\WINDOWS\system32\irmon.dll
2012-09-30 10:16:40 ----AC---- C:\WINDOWS\system32\drivers\irda.sys
2012-09-30 10:16:39 ----AC---- C:\WINDOWS\system32\drivers\irsir.sys
2012-09-30 10:16:19 ----AC---- C:\WINDOWS\system32\usbui.dll
2012-09-30 10:15:23 ----SHDC---- C:\WINDOWS\Installer
2012-09-30 10:15:23 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-09-30 10:15:22 ----DC---- C:\Program Files\Common Files\ODBC
2012-09-30 10:15:20 ----DC---- C:\Program Files\Common Files\SpeechEngines
2012-09-30 10:15:19 ----RDC---- C:\Program Files
2012-09-30 10:15:19 ----DC---- C:\Program Files\Common Files\Microsoft Shared
2012-09-30 10:15:19 ----DC---- C:\Program Files\Common Files
2012-09-30 10:15:16 ----RAC---- C:\WINDOWS\system32\kbdtuq.dll
2012-09-30 10:15:16 ----RAC---- C:\WINDOWS\system32\kbdtuf.dll
2012-09-30 10:15:16 ----RAC---- C:\WINDOWS\system32\kbdazel.dll
2012-09-30 10:15:15 ----RAC---- C:\WINDOWS\system32\kbdhept.dll
2012-09-30 10:15:15 ----RAC---- C:\WINDOWS\system32\kbdhela3.dll
2012-09-30 10:15:15 ----RAC---- C:\WINDOWS\system32\kbdhela2.dll
2012-09-30 10:15:15 ----RAC---- C:\WINDOWS\system32\kbdhe319.dll
2012-09-30 10:15:15 ----RAC---- C:\WINDOWS\system32\kbdhe220.dll
2012-09-30 10:15:15 ----RAC---- C:\WINDOWS\system32\kbdhe.dll
2012-09-30 10:15:15 ----RAC---- C:\WINDOWS\system32\kbdgkl.dll
2012-09-30 10:15:14 ----RAC---- C:\WINDOWS\system32\kbdlv1.dll
2012-09-30 10:15:14 ----RAC---- C:\WINDOWS\system32\kbdlv.dll
2012-09-30 10:15:14 ----RAC---- C:\WINDOWS\system32\kbdlt1.dll
2012-09-30 10:15:14 ----RAC---- C:\WINDOWS\system32\kbdlt.dll
2012-09-30 10:15:14 ----RAC---- C:\WINDOWS\system32\kbdest.dll
2012-09-30 10:15:13 ----RAC---- C:\WINDOWS\system32\kbdycl.dll
2012-09-30 10:15:13 ----RAC---- C:\WINDOWS\system32\kbdsl1.dll
2012-09-30 10:15:13 ----RAC---- C:\WINDOWS\system32\kbdsl.dll
2012-09-30 10:15:13 ----RAC---- C:\WINDOWS\system32\kbdro.dll
2012-09-30 10:15:13 ----RAC---- C:\WINDOWS\system32\kbdpl1.dll
2012-09-30 10:15:13 ----RAC---- C:\WINDOWS\system32\kbdpl.dll
2012-09-30 10:15:13 ----RAC---- C:\WINDOWS\system32\kbdhu1.dll
2012-09-30 10:15:13 ----RAC---- C:\WINDOWS\system32\kbdhu.dll
2012-09-30 10:15:13 ----RAC---- C:\WINDOWS\system32\kbdcz2.dll
2012-09-30 10:15:13 ----RAC---- C:\WINDOWS\system32\kbdcz1.dll
2012-09-30 10:15:13 ----RAC---- C:\WINDOWS\system32\kbdcz.dll
2012-09-30 10:15:13 ----RAC---- C:\WINDOWS\system32\kbdcr.dll
2012-09-30 10:15:13 ----RAC---- C:\WINDOWS\system32\KBDAL.DLL
2012-09-30 10:15:11 ----AC---- C:\WINDOWS\system32\kbdycc.dll
2012-09-30 10:15:11 ----AC---- C:\WINDOWS\system32\kbduzb.dll
2012-09-30 10:15:11 ----AC---- C:\WINDOWS\system32\kbdur.dll
2012-09-30 10:15:11 ----AC---- C:\WINDOWS\system32\kbdtat.dll
2012-09-30 10:15:11 ----AC---- C:\WINDOWS\system32\kbdmon.dll
2012-09-30 10:15:11 ----AC---- C:\WINDOWS\system32\kbdkyr.dll
2012-09-30 10:15:11 ----AC---- C:\WINDOWS\system32\kbdkaz.dll
2012-09-30 10:15:11 ----AC---- C:\WINDOWS\system32\kbdbu.dll
2012-09-30 10:15:11 ----AC---- C:\WINDOWS\system32\kbdaze.dll
2012-09-30 10:15:10 ----AC---- C:\WINDOWS\system32\kbdblr.dll
2012-09-30 10:15:10 ----AC---- C:\WINDOWS\system32\irclass.dll
2012-09-30 10:15:10 ----AC---- C:\WINDOWS\system32\dgsetup.dll
2012-09-30 10:15:10 ----AC---- C:\WINDOWS\system32\dgrpsetu.dll
2012-09-30 10:15:09 ----AC---- C:\WINDOWS\system32\spxcoins.dll
2012-09-30 10:15:09 ----AC---- C:\WINDOWS\system32\EqnClass.Dll
2012-09-30 10:15:08 ----AC---- C:\WINDOWS\system32\drivers\irenum.sys
2012-09-30 10:15:07 ----C---- C:\WINDOWS\system32\batt.dll
2012-09-30 10:15:07 ----AC---- C:\WINDOWS\system32\storprop.dll
2012-09-30 10:15:00 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2012-09-30 10:14:45 ----DC---- C:\WINDOWS\system32\CatRoot2
2012-09-30 10:14:45 ----DC---- C:\WINDOWS\system32\CatRoot
2012-09-30 10:14:40 ----SDC---- C:\Documents and Settings\All Users\Application Data\Microsoft
2012-09-30 10:14:21 ----RDC---- C:\Documents and Settings
2012-09-30 10:14:20 ----SHD---- C:\System Volume Information
2012-09-30 10:11:47 ----DC---- C:\Documents and Settings\ХХХ\Application Data\ICQ
2012-09-30 10:11:39 ----DC---- C:\Program Files\ICQ7.6
2012-09-30 10:10:40 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-09-30 10:10:40 ----RSDC---- C:\WINDOWS\Fonts
2012-09-30 10:10:40 ----RDC---- C:\WINDOWS\Web
2012-09-30 10:10:40 ----RDC---- C:\WINDOWS
2012-09-30 10:10:40 ----HDC---- C:\WINDOWS\inf
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\WinSxS
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\twain_32
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\Temp
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\wins
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\wbem
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\usmt
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\spool
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\ShellExt
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\Setup
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\ru-ru
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\ru
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\ras
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\oobe
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\npp
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\mui
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\inetsrv
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\IME
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\icsxml
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\ias
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\export
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\drivers\etc
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\drivers\disdn
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\drivers
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\dhcp
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\config
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\3com_dmi
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\3076
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\2052
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\1054
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\1049
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\1042
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\1041
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\1037
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\1033
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\1031
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\1028
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32\1025
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system32
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\system
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\security
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\Resources
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\repair
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\Provisioning
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\PeerNet
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\pchealth
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\Network Diagnostic
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\mui
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\msapps
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\msagent
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\Media
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\L2Schemas
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\java
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\ime
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\Help
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\ehome
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\Driver Cache
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\Debug
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\Cursors
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\Connection Wizard
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\Config
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\AppPatch
2012-09-30 10:10:40 ----DC---- C:\WINDOWS\addins
2012-09-30 10:10:40 ----ASH---- C:\pagefile.sys
2012-09-30 10:06:46 ----DC---- C:\Program Files\Evil Player
2012-09-30 10:03:42 ----DC---- C:\Documents and Settings\All Users\Application Data\Yandex
2012-09-30 10:03:41 ----DC---- C:\Program Files\Yandex
2012-09-30 10:03:41 ----DC---- C:\Documents and Settings\ХХХ\Application Data\Yandex
2012-09-30 09:12:39 ----DC---- C:\Documents and Settings\ХХХ\Application Data\Macromedia
2012-09-30 09:12:27 ----DC---- C:\Documents and Settings\ХХХ\Application Data\Opera
2012-09-30 09:12:23 ----DC---- C:\Program Files\Opera
2012-09-30 09:11:17 ----DC---- C:\Documents and Settings\ХХХ\Application Data\Adobe
2012-09-30 07:56:57 ----DC---- C:\Documents and Settings\ХХХ\Application Data\WinRAR
2012-09-30 07:56:56 ----AC---- C:\WINDOWS\system32\ChCfg.exe
2012-09-30 07:56:53 ----AC---- C:\WINDOWS\system32\drivers\wdmaud.sys
2012-09-30 07:56:53 ----AC---- C:\WINDOWS\system32\drivers\splitter.sys
2012-09-30 07:56:52 ----AC---- C:\WINDOWS\system32\drivers\swmidi.sys
2012-09-30 07:56:52 ----AC---- C:\WINDOWS\system32\drivers\DMusic.sys
2012-09-30 07:56:51 ----AC---- C:\WINDOWS\system32\drivers\aec.sys
2012-09-30 07:56:50 ----AC---- C:\WINDOWS\system32\drivers\sysaudio.sys
2012-09-30 07:56:50 ----AC---- C:\WINDOWS\system32\drivers\kmixer.sys
2012-09-30 07:56:50 ----AC---- C:\WINDOWS\system32\drivers\drmkaud.sys
2012-09-30 07:56:49 ----AC---- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2012-09-30 07:56:48 ----AC---- C:\WINDOWS\system32\drivers\MSPQM.sys
2012-09-30 07:56:48 ----AC---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2012-09-30 07:56:46 ----RAC---- C:\WINDOWS\system32\drivers\alcxwdm.sys
2012-09-30 07:56:45 ----AC---- C:\WINDOWS\system32\drivers\portcls.sys
2012-09-30 07:56:45 ----A---- C:\WINDOWS\system32\ksuser.dll
2012-09-30 07:56:44 ----AC---- C:\WINDOWS\system32\drivers\drmk.sys
2012-09-30 07:56:41 ----DC---- C:\Program Files\Realtek AC97
2012-09-30 07:56:40 ----AC---- C:\WINDOWS\system32\RTLCPL.exe
2012-09-30 07:56:40 ----A---- C:\WINDOWS\soundman.exe
2012-09-30 07:56:39 ----AC---- C:\WINDOWS\system32\RtlCPAPI.dll
2012-09-30 07:53:41 ----DC---- C:\Documents and Settings\ХХХ\Application Data\ATI
2012-09-30 07:51:46 ----DC---- C:\Program Files\ATI Technologies
2012-09-30 07:51:18 ----DC---- C:\ATI
2012-09-30 07:50:14 ----AC---- C:\WINDOWS\system32\unrar.dll
2012-09-30 07:50:09 ----DC---- C:\Program Files\K-Lite Codec Pack
2012-09-30 07:49:04 ----DC---- C:\Program Files\WinRAR
2012-09-30 07:36:23 ----AC---- C:\WINDOWS\system32\nvuide.exe
2012-09-30 07:36:11 ----AC---- C:\WINDOWS\system32\nvunrm.exe
2012-09-30 07:36:10 ----AC---- C:\WINDOWS\system32\nvusmb.exe
2012-09-30 07:36:10 ----AC---- C:\WINDOWS\system32\NVUNINST.EXE
2012-09-30 07:36:08 ----AC---- C:\WINDOWS\system32\nvugart.exe
2012-09-30 07:36:07 ----DC---- C:\WINDOWS\system32\ReinstallBackups
2012-09-30 07:35:41 ----HDC---- C:\Program Files\InstallShield Installation Information
2012-09-30 07:35:30 ----DC---- C:\Program Files\NVIDIA Corporation
2012-09-30 07:35:19 ----DC---- C:\Program Files\Common Files\InstallShield
2012-09-30 07:35:05 ----DC---- C:\Program Files\NVIDIA nTune Performance Application
2012-09-30 07:30:03 ----SH---- C:\Program Files\Desktop.ini
2012-09-30 01:54:02 ----DC---- C:\Documents and Settings\ХХХ\Application Data\Identities
2012-09-30 01:54:00 ----HDC---- C:\Program Files\Uninstall Information
2012-09-30 01:53:55 ----SDC---- C:\Documents and Settings\ХХХ\Application Data\Microsoft
2012-09-30 01:53:55 ----ASH---- C:\Documents and Settings\ХХХ\Application Data\desktop.ini
2012-09-30 01:33:07 ----DC---- C:\WINDOWS\Prefetch
2012-09-30 01:33:07 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-09-30 01:30:24 ----DC---- C:\WINDOWS\system32\xircom
2012-09-30 01:30:09 ----SDC---- C:\WINDOWS\system32\Microsoft
2012-09-30 01:30:03 ----DC---- C:\WINDOWS\ERDNT
2012-09-30 01:30:02 ----AC---- C:\WINDOWS\system32\Oeminfo.ini
2012-09-30 01:29:24 ----RSDC---- C:\WINDOWS\assembly
2012-09-30 01:29:22 ----DC---- C:\WINDOWS\Microsoft.NET
2012-09-30 01:28:51 ----AC---- C:\WINDOWS\system32\mapi32.dll
2012-09-30 01:27:59 ----SDC---- C:\WINDOWS\Downloaded Program Files
2012-09-30 01:27:59 ----RDC---- C:\WINDOWS\Offline Web Pages
2012-09-30 01:27:59 ----RAHC---- C:\WINDOWS\system32\logonui.exe.manifest
2012-09-30 01:27:53 ----RAHC---- C:\WINDOWS\system32\cdplayer.exe.manifest
2012-09-30 01:27:49 ----HDC---- C:\Program Files\WindowsUpdate
2012-09-30 01:27:45 ----DC---- C:\Program Files\Online Services
2012-09-30 01:27:32 ----DC---- C:\WINDOWS\system32\DirectX
2012-09-30 01:27:28 ----AC---- C:\WINDOWS\system32\atrace.dll
2012-09-30 01:27:26 ----A---- C:\WINDOWS\system32\desktop.ini
2012-09-30 01:27:21 ----AC---- C:\WINDOWS\system32\nmevtmsg.dll
2012-09-30 01:27:20 ----DC---- C:\Program Files\Common Files\Services
2012-09-30 01:27:20 ----AC---- C:\WINDOWS\system32\acctres.dll
2012-09-30 01:27:18 ----SDC---- C:\WINDOWS\Tasks
2012-09-30 01:27:18 ----AC---- C:\WINDOWS\system32\icfgnt5.dll
2012-09-30 01:27:17 ----DC---- C:\Program Files\Common Files\MSSoap
2012-09-30 01:27:14 ----DC---- C:\WINDOWS\system32\Macromed
2012-09-30 01:27:14 ----DC---- C:\WINDOWS\srchasst
2012-09-30 01:27:11 ----AC---- C:\WINDOWS\system32\wuweb.dll
2012-09-30 01:27:11 ----AC---- C:\WINDOWS\system32\wucltui.dll
2012-09-30 01:27:11 ----AC---- C:\WINDOWS\system32\wuaueng1.dll
2012-09-30 01:27:11 ----A---- C:\WINDOWS\system32\wuauserv.dll
2012-09-30 01:27:10 ----AC---- C:\WINDOWS\system32\wups.dll
2012-09-30 01:27:10 ----AC---- C:\WINDOWS\system32\wuauclt1.exe
2012-09-30 01:27:10 ----AC---- C:\WINDOWS\system32\wuauclt.exe
2012-09-30 01:27:10 ----AC---- C:\WINDOWS\system32\wuapi.dll
2012-09-30 01:27:10 ----AC---- C:\WINDOWS\system32\qmgrprxy.dll
2012-09-30 01:27:10 ----AC---- C:\WINDOWS\system32\bitsprx4.dll
2012-09-30 01:27:10 ----AC---- C:\WINDOWS\system32\bitsprx3.dll
2012-09-30 01:27:10 ----AC---- C:\WINDOWS\system32\bitsprx2.dll
2012-09-30 01:27:10 ----A---- C:\WINDOWS\system32\wuaueng.dll
2012-09-30 01:27:09 ----A---- C:\WINDOWS\system32\qmgr.dll
2012-09-30 01:27:07 ----DC---- C:\Program Files\Movie Maker
2012-09-30 01:26:56 ----AC---- C:\WINDOWS\system32\safrslv.dll
2012-09-30 01:26:56 ----AC---- C:\WINDOWS\system32\safrdm.dll
2012-09-30 01:26:56 ----AC---- C:\WINDOWS\system32\safrcdlg.dll
2012-09-30 01:26:56 ----AC---- C:\WINDOWS\system32\racpldlg.dll
2012-09-30 01:26:53 ----DC---- C:\WINDOWS\system32\Restore
2012-09-30 01:26:53 ----AC---- C:\WINDOWS\system32\srsvc.dll
2012-09-30 01:26:53 ----AC---- C:\WINDOWS\system32\srrstr.dll
2012-09-30 01:26:53 ----AC---- C:\WINDOWS\system32\srclient.dll
2012-09-30 01:26:53 ----AC---- C:\WINDOWS\system32\fltMc.exe
2012-09-30 01:26:53 ----AC---- C:\WINDOWS\system32\fltlib.dll
2012-09-30 01:26:53 ----AC---- C:\WINDOWS\system32\drivers\sr.sys
2012-09-30 01:26:53 ----AC---- C:\WINDOWS\system32\drivers\fltMgr.sys
2012-09-30 01:26:52 ----AC---- C:\WINDOWS\system32\nmmkcert.dll
2012-09-30 01:26:52 ----AC---- C:\WINDOWS\system32\msconf.dll
2012-09-30 01:26:52 ----AC---- C:\WINDOWS\system32\mnmsrvc.exe
2012-09-30 01:26:52 ----AC---- C:\WINDOWS\system32\mnmdd.dll
2012-09-30 01:26:52 ----AC---- C:\WINDOWS\system32\isrdbg32.dll
2012-09-30 01:26:52 ----AC---- C:\WINDOWS\system32\ils.dll
2012-09-30 01:26:50 ----DC---- C:\Program Files\NetMeeting
2012-09-30 01:26:50 ----AC---- C:\WINDOWS\system32\msoert2.dll
2012-09-30 01:26:50 ----AC---- C:\WINDOWS\system32\msoeacct.dll
2012-09-30 01:26:49 ----AC---- C:\WINDOWS\system32\inetres.dll
2012-09-30 01:26:49 ----AC---- C:\WINDOWS\system32\inetcomm.dll
2012-09-30 01:26:48 ----DC---- C:\Program Files\Outlook Express
2012-09-30 01:26:48 ----AC---- C:\WINDOWS\system32\mstinit.exe
2012-09-30 01:26:48 ----AC---- C:\WINDOWS\system32\mstask.dll
2012-09-30 01:26:48 ----AC---- C:\WINDOWS\system32\icwphbk.dll
2012-09-30 01:26:48 ----AC---- C:\WINDOWS\system32\icwdial.dll
2012-09-30 01:26:48 ----A---- C:\WINDOWS\system32\schedsvc.dll
2012-09-30 01:26:47 ----AC---- C:\WINDOWS\system32\isign32.dll
2012-09-30 01:26:47 ----AC---- C:\WINDOWS\system32\inetcfg.dll
2012-09-30 01:26:43 ----DC---- C:\Program Files\Common Files\System
2012-09-30 01:26:42 ----DC---- C:\Program Files\Internet Explorer
2012-09-30 01:26:07 ----DC---- C:\Program Files\ComPlus Applications
2012-09-30 01:26:01 ----DC---- C:\WINDOWS\Registration
2012-09-30 01:25:48 ----AC---- C:\WINDOWS\system32\wdfmgr.exe
2012-09-30 01:25:48 ----AC---- C:\WINDOWS\system32\uwdf.exe
2012-09-30 01:25:48 ----AC---- C:\WINDOWS\system32\drivers\wpdusb.sys
2012-09-30 01:25:47 ----N---- C:\WINDOWS\system32\audiodev.dll
2012-09-30 01:25:47 ----DC---- C:\Program Files\Windows Media Player
2012-09-30 01:25:47 ----AC---- C:\WINDOWS\system32\wpdtrace.dll
2012-09-30 01:25:47 ----AC---- C:\WINDOWS\system32\wpdsp.dll
2012-09-30 01:25:47 ----AC---- C:\WINDOWS\system32\wpdmtpus.dll
2012-09-30 01:25:47 ----AC---- C:\WINDOWS\system32\wpdmtpdr.dll
2012-09-30 01:25:47 ----AC---- C:\WINDOWS\system32\wpdmtp.dll
2012-09-30 01:25:47 ----AC---- C:\WINDOWS\system32\wpdconns.dll
2012-09-30 01:25:47 ----AC---- C:\WINDOWS\system32\wpd_ci.dll
2012-09-30 01:25:47 ----AC---- C:\WINDOWS\system32\WMVADVE.DLL
2012-09-30 01:25:47 ----AC---- C:\WINDOWS\system32\WMVADVD.dll
2012-09-30 01:25:47 ----AC---- C:\WINDOWS\system32\wmpsrcwp.dll
2012-09-30 01:25:47 ----AC---- C:\WINDOWS\system32\WMPEncEn.dll
2012-09-30 01:25:47 ----AC---- C:\WINDOWS\system32\wmdrmnet.dll
2012-09-30 01:25:47 ----AC---- C:\WINDOWS\system32\wmdrmdev.dll
2012-09-30 01:25:47 ----AC---- C:\WINDOWS\system32\wdfapi.dll
2012-09-30 01:25:46 ----DC---- C:\WINDOWS\system32\PreInstall
2012-09-30 01:25:45 ----DC---- C:\WINDOWS\SoftwareDistribution
2012-09-30 01:25:45 ----AC---- C:\WINDOWS\system32\muweb.dll
2012-09-30 01:25:45 ----AC---- C:\WINDOWS\system32\mucltui.dll.mui
2012-09-30 01:25:45 ----AC---- C:\WINDOWS\system32\mucltui.dll
2012-09-30 01:25:44 ----AC---- C:\WINDOWS\system32\gpprefcl.dll
2012-09-30 01:25:42 ----DC---- C:\Program Files\MSN Gaming Zone
2012-09-30 01:25:42 ----AC---- C:\WINDOWS\system32\write.exe
2012-09-30 01:25:36 ----AC---- C:\WINDOWS\system32\sndvol32.exe
2012-09-30 01:25:36 ----AC---- C:\WINDOWS\system32\hticons.dll
2012-09-30 01:25:36 ----AC---- C:\WINDOWS\system32\avwav.dll
2012-09-30 01:25:35 ----AC---- C:\WINDOWS\system32\winchat.exe
2012-09-30 01:25:35 ----AC---- C:\WINDOWS\system32\avtapi.dll
2012-09-30 01:25:35 ----AC---- C:\WINDOWS\system32\avmeter.dll
2012-09-30 01:25:31 ----AC---- C:\WINDOWS\system32\getuname.dll
2012-09-30 01:25:31 ----AC---- C:\WINDOWS\system32\charmap.exe
2012-09-30 01:25:31 ----AC---- C:\WINDOWS\system32\calc.exe
2012-09-30 01:25:30 ----AC---- C:\WINDOWS\system32\winmine.exe
2012-09-30 01:25:30 ----AC---- C:\WINDOWS\system32\usrlogon.cmd
2012-09-30 01:25:30 ----AC---- C:\WINDOWS\system32\tsshutdn.exe
2012-09-30 01:25:30 ----AC---- C:\WINDOWS\system32\tslabels.ini
2012-09-30 01:25:30 ----AC---- C:\WINDOWS\system32\tskill.exe
2012-09-30 01:25:30 ----AC---- C:\WINDOWS\system32\tsdiscon.exe
2012-09-30 01:25:30 ----AC---- C:\WINDOWS\system32\tscon.exe
2012-09-30 01:25:30 ----AC---- C:\WINDOWS\system32\sol.exe
2012-09-30 01:25:30 ----AC---- C:\WINDOWS\system32\reset.exe
2012-09-30 01:25:30 ----AC---- C:\WINDOWS\system32\mshearts.exe
2012-09-30 01:25:30 ----AC---- C:\WINDOWS\system32\freecell.exe
2012-09-30 01:25:29 ----AC---- C:\WINDOWS\system32\shadow.exe
2012-09-30 01:25:29 ----AC---- C:\WINDOWS\system32\rwinsta.exe
2012-09-30 01:25:29 ----AC---- C:\WINDOWS\system32\regini.exe
2012-09-30 01:25:29 ----AC---- C:\WINDOWS\system32\rdpcfgex.dll
2012-09-30 01:25:29 ----AC---- C:\WINDOWS\system32\qwinsta.exe
2012-09-30 01:25:29 ----AC---- C:\WINDOWS\system32\qappsrv.exe
2012-09-30 01:25:29 ----AC---- C:\WINDOWS\system32\msg.exe
2012-09-30 01:25:29 ----AC---- C:\WINDOWS\system32\msdtcprf.ini
2012-09-30 01:25:29 ----AC---- C:\WINDOWS\system32\logoff.exe
2012-09-30 01:25:29 ----AC---- C:\WINDOWS\system32\cdmodem.dll
2012-09-30 01:25:25 ----AC---- C:\WINDOWS\system32\wmimgmt.msc
2012-09-30 01:25:24 ----DC---- C:\Program Files\Windows NT
2012-09-30 01:25:24 ----AC---- C:\WINDOWS\system32\sndrec32.exe
2012-09-30 01:25:24 ----AC---- C:\WINDOWS\system32\mspaint.exe
2012-09-30 01:25:24 ----AC---- C:\WINDOWS\system32\mplay32.exe
2012-09-30 01:25:24 ----AC---- C:\WINDOWS\system32\hypertrm.dll
2012-09-30 01:25:24 ----AC---- C:\WINDOWS\system32\accwiz.exe
2012-09-30 01:25:23 ----AC---- C:\WINDOWS\system32\tsgqec.dll
2012-09-30 01:25:23 ----AC---- C:\WINDOWS\system32\tscfgwmi.dll
2012-09-30 01:25:23 ----AC---- C:\WINDOWS\system32\spider.exe
2012-09-30 01:25:23 ----AC---- C:\WINDOWS\system32\drivers\tdtcp.sys
2012-09-30 01:25:23 ----AC---- C:\WINDOWS\system32\drivers\tdpipe.sys
2012-09-30 01:25:23 ----AC---- C:\WINDOWS\system32\drivers\rdpwd.sys
2012-09-30 01:25:23 ----AC---- C:\WINDOWS\system32\clipbrd.exe
2012-09-30 01:25:22 ----AC---- C:\WINDOWS\system32\rhttpaa.dll
2012-09-30 01:25:22 ----AC---- C:\WINDOWS\system32\remotepg.dll
2012-09-30 01:25:22 ----AC---- C:\WINDOWS\system32\mstscax.dll
2012-09-30 01:25:22 ----AC---- C:\WINDOWS\system32\mstsc.exe
2012-09-30 01:25:22 ----AC---- C:\WINDOWS\system32\aaclient.dll
2012-09-30 01:25:21 ----DC---- C:\WINDOWS\system32\MsDtc
2012-09-30 01:25:21 ----AC---- C:\WINDOWS\system32\sessmgr.exe
2012-09-30 01:25:21 ----AC---- C:\WINDOWS\system32\rdshost.exe
2012-09-30 01:25:21 ----AC---- C:\WINDOWS\system32\rdsaddin.exe
2012-09-30 01:25:21 ----AC---- C:\WINDOWS\system32\rdpwsx.dll
2012-09-30 01:25:21 ----AC---- C:\WINDOWS\system32\rdpsnd.dll
2012-09-30 01:25:21 ----AC---- C:\WINDOWS\system32\rdpclip.exe
2012-09-30 01:25:21 ----AC---- C:\WINDOWS\system32\rdchost.dll
2012-09-30 01:25:21 ----AC---- C:\WINDOWS\system32\qprocess.exe
2012-09-30 01:25:21 ----AC---- C:\WINDOWS\system32\cfgbkend.dll
2012-09-30 01:25:21 ----A---- C:\WINDOWS\system32\termsrv.dll
2012-09-30 01:25:21 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2012-09-30 01:25:21 ----A---- C:\WINDOWS\system32\icaapi.dll
2012-09-30 01:25:20 ----AC---- C:\WINDOWS\system32\xolehlp.dll
2012-09-30 01:25:20 ----AC---- C:\WINDOWS\system32\mtxoci.dll
2012-09-30 01:25:20 ----AC---- C:\WINDOWS\system32\msdtctm.dll
2012-09-30 01:25:20 ----AC---- C:\WINDOWS\system32\msdtclog.dll
2012-09-30 01:25:20 ----AC---- C:\WINDOWS\system32\msdtc.exe
2012-09-30 01:25:20 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2012-09-30 01:25:19 ----DC---- C:\WINDOWS\system32\Com
2012-09-30 01:25:19 ----AC---- C:\WINDOWS\system32\stclient.dll
2012-09-30 01:25:19 ----AC---- C:\WINDOWS\system32\mtxlegih.dll
2012-09-30 01:25:19 ----AC---- C:\WINDOWS\system32\mtxex.dll
2012-09-30 01:25:19 ----AC---- C:\WINDOWS\system32\mtxdm.dll
2012-09-30 01:25:19 ----AC---- C:\WINDOWS\system32\dcomcnfg.exe
2012-09-30 01:25:19 ----AC---- C:\WINDOWS\system32\comrepl.dll
2012-09-30 01:25:19 ----AC---- C:\WINDOWS\system32\comaddin.dll
2012-09-30 01:25:19 ----AC---- C:\WINDOWS\system32\clbcatex.dll
2012-09-30 01:25:19 ----AC---- C:\WINDOWS\system32\catsrvut.dll
2012-09-30 01:25:19 ----AC---- C:\WINDOWS\system32\catsrvps.dll
2012-09-30 01:25:19 ----A---- C:\WINDOWS\system32\colbact.dll
2012-09-30 01:25:18 ----AC---- C:\WINDOWS\system32\comuid.dll
2012-09-30 01:25:18 ----AC---- C:\WINDOWS\system32\comsnap.dll
2012-09-30 01:25:18 ----AC---- C:\WINDOWS\system32\catsrv.dll
2012-09-30 01:25:18 ----A---- C:\WINDOWS\system32\comsvcs.dll
2012-09-30 01:25:18 ----A---- C:\WINDOWS\system32\clbcatq.dll
2012-09-30 01:25:14 ----AC---- C:\WINDOWS\system32\servdeps.dll
2012-09-30 01:25:13 ----AC---- C:\WINDOWS\system32\mmfutil.dll
2012-09-30 01:25:13 ----AC---- C:\WINDOWS\system32\licwmi.dll
2012-09-30 01:25:13 ----AC---- C:\WINDOWS\system32\cmprops.dll
2012-09-30 01:25:08 ----AC---- C:\WINDOWS\system32\drivers\rdpdr.sys
2012-09-30 01:25:07 ----AC---- C:\WINDOWS\system32\drivers\termdd.sys
2011-11-02 14:20:58 ----DC---- C:\rsit
2011-11-02 14:20:58 ----DC---- C:\Program Files\trend micro
2011-10-29 18:39:07 ----DC---- C:\Ravnovesie
2011-10-29 18:39:01 ----AC---- C:\WINDOWS\IsUn0419.exe
2011-10-25 10:18:33 ----DC---- C:\Documents and Settings\ХХХ\Application Data\Google
2011-10-25 10:14:14 ----DC---- C:\Program Files\Google
2011-10-24 11:18:28 ----DC---- C:\Documents and Settings\ХХХ\Application Data\Mozilla
2011-10-24 11:18:01 ----DC---- C:\Program Files\Mozilla Firefox
2011-10-19 12:12:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2492386$
2011-10-19 12:11:55 ----DC---- C:\WINDOWS\system32\WindowsPowerShell
2011-10-19 12:11:53 ----HDC---- C:\WINDOWS\system32\GroupPolicy
2011-10-19 12:11:53 ----DC---- C:\WINDOWS\system32\winrm
2011-10-19 12:11:40 ----HDC---- C:\WINDOWS\$968930Uinstall_KB968930$
2011-10-19 12:11:38 ----DC---- C:\WINDOWS\$NtUninstallKB968930$
2011-10-19 12:10:54 ----C---- C:\WINDOWS\system32\spmsg2.dll
2011-10-19 12:10:49 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2011-10-17 17:51:57 ----DC---- C:\Program Files\PanteraPro
2011-10-17 16:29:13 ----AC---- C:\WINDOWS\avisplitter.ini
2011-10-17 16:29:02 ----AC---- C:\WINDOWS\system32\xvidcore.dll
2011-10-17 16:29:01 ----AC---- C:\WINDOWS\system32\xvidvfw.dll
2011-10-17 16:29:01 ----AC---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2011-10-17 16:29:01 ----AC---- C:\WINDOWS\system32\ff_vfw.dll
2011-10-17 16:11:58 ----DC---- C:\Documents and Settings\ХХХ\Application Data\Media Player Classic
2011-10-17 13:52:26 ----DC---- C:\Documents and Settings\ХХХ\Application Data\IObit
2011-10-17 13:52:17 ----DC---- C:\Program Files\IObit
2011-10-16 15:06:18 ----DC---- C:\WINDOWS\pss
2011-10-16 14:34:48 ----DC---- C:\Program Files\Total Commander
2011-10-16 12:21:27 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2011-10-16 12:21:05 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2011-10-16 12:21:00 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2011-10-16 12:20:34 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2011-10-15 16:56:44 ----DC---- C:\Program Files\uTorrent
2011-10-15 16:56:04 ----DC---- C:\Documents and Settings\ХХХ\Application Data\uTorrent
2011-10-14 20:31:15 ----DC---- C:\Documents and Settings\ХХХ\Application Data\Skype
2011-10-14 20:31:07 ----RDC---- C:\Program Files\Skype
2011-10-14 20:31:01 ----DC---- C:\Documents and Settings\All Users\Application Data\Skype
2011-10-14 03:13:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2011-10-14 03:00:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2567053$
2011-10-14 03:00:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2011-10-14 02:58:37 ----C---- C:\WINDOWS\system32\spmsg.dll
2011-10-14 02:58:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2586448$
2011-10-13 19:06:06 ----AC---- C:\WINDOWS\system32\drivers\usbser.sys
2011-10-13 19:05:50 ----C---- C:\WINDOWS\system32\spmsgXP_2k3.dll
2011-10-13 19:05:49 ----HDC---- C:\WINDOWS\$NtUninstallWdf01009$
2011-10-13 18:43:32 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2011-10-13 18:43:05 ----DC---- C:\WINDOWS\system32\LogFiles
2011-10-13 18:43:05 ----DC---- C:\WINDOWS\system32\drivers\UMDF
2011-10-13 18:43:03 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2011-10-13 18:32:13 ----DC---- C:\Program Files\Nokia
2011-10-13 18:32:13 ----DC---- C:\Documents and Settings\All Users\Application Data\NokiaInstallerCache
2011-10-11 23:57:06 ----DC---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2011-10-11 19:35:08 ----DC---- C:\Documents and Settings\ХХХ\Application Data\Nokia
2011-10-11 19:35:07 ----DC---- C:\Documents and Settings\ХХХ\Application Data\PC Suite
2011-10-11 19:35:06 ----DC---- C:\Documents and Settings\All Users\Application Data\PC Suite
2011-10-11 19:34:46 ----DC---- C:\Program Files\Common Files\PCSuite
2011-10-11 19:34:41 ----DC---- C:\Program Files\Common Files\Nokia
2011-10-11 19:34:33 ----DC---- C:\Program Files\DIFX
2011-10-11 19:34:33 ----AC---- C:\WINDOWS\system32\drivers\pccsmcfd.sys
2011-10-11 19:34:23 ----DC---- C:\Program Files\PC Connectivity Solution
2011-10-11 19:34:17 ----AC---- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys
2011-10-11 19:34:14 ----AC---- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys
2011-10-11 19:34:10 ----AC---- C:\WINDOWS\system32\drivers\ccdcmbo.sys
2011-10-11 19:34:07 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-10-11 19:34:07 ----AC---- C:\WINDOWS\system32\wdfcoinstaller01009.dll
2011-10-11 19:34:07 ----AC---- C:\WINDOWS\system32\nmwcdcocls.dll
2011-10-11 19:34:07 ----AC---- C:\WINDOWS\system32\drivers\ccdcmb.sys
2011-10-11 19:34:07 ----AC---- C:\WINDOWS\system32\ccdcmbwu.dll
2011-10-11 19:34:06 ----AC---- C:\WINDOWS\system32\nmwcdcls.dll
2011-10-11 19:32:49 ----DC---- C:\Documents and Settings\All Users\Application Data\Installations
2011-10-11 19:32:49 ----AC---- C:\WINDOWS\system32\out.txt
2011-10-09 21:03:44 ----DC---- C:\Documents and Settings\All Users\Application Data\AltrixSoft
2011-10-09 21:02:16 ----DC---- C:\Program Files\Hard Drive Inspector
2011-10-09 21:02:15 ----DC---- C:\Program Files\Common Files\AltrixSoft
2011-10-09 17:51:14 ----AC---- C:\WINDOWS\system32\mdimon.dll
2011-10-09 17:51:00 ----AC---- C:\WINDOWS\system32\msonpmon.dll
2011-10-09 17:48:48 ----DC---- C:\Program Files\Microsoft Works
2011-10-09 17:48:05 ----DC---- C:\Program Files\Microsoft Visual Studio
2011-10-09 17:48:05 ----DC---- C:\Program Files\Common Files\DESIGNER
2011-10-09 17:47:15 ----DC---- C:\Program Files\Microsoft.NET
2011-10-09 17:44:49 ----DC---- C:\Program Files\Microsoft Visual Studio 8
2011-10-09 17:43:57 ----DC---- C:\WINDOWS\SHELLNEW
2011-10-09 17:43:37 ----DC---- C:\Program Files\Microsoft Office
2011-10-09 17:43:36 ----DC---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2011-10-09 17:43:16 ----RHDC---- C:\MSOCache
2011-10-09 01:39:12 ----DC---- C:\Documents and Settings\All Users\Application Data\ATI
2011-10-09 01:37:08 ----C---- C:\WINDOWS\system32\ati2sgag.exe
2011-10-08 21:56:04 ----AC---- C:\WINDOWS\WININIT.INI
2011-10-07 19:03:02 ----DC---- C:\Program Files\STDU Viewer
2011-10-07 19:03:02 ----DC---- C:\Program Files\Common Files\STDUtility
2011-10-05 23:53:52 ----DC---- C:\WINDOWS\Minidump
2011-10-05 20:34:38 ----DC---- C:\Documents and Settings\ХХХ\Application Data\WebMoney
2011-10-05 20:32:56 ----DC---- C:\Program Files\WebMoney Advisor
2011-10-05 20:32:56 ----DC---- C:\Documents and Settings\ХХХ\Application Data\WebMoneyAdvisor
2011-10-05 20:32:43 ----DC---- C:\Program Files\WebMoney Agent
2011-10-05 20:32:39 ----SHC---- C:\CONFIG.SYS
2011-10-05 20:32:39 ----SHC---- C:\boot.ini
2011-10-05 20:32:39 ----SHC---- C:\AUTOEXEC.BAT
2011-10-05 20:32:39 ----RASHC---- C:\MSDOS.SYS
2011-10-05 20:32:39 ----RASHC---- C:\IO.SYS
2011-10-05 20:32:38 ----AC---- C:\WINDOWS\vbaddin.ini
2011-10-05 20:32:38 ----AC---- C:\WINDOWS\vb.ini
2011-10-05 20:32:37 ----AC---- C:\WINDOWS\TASKMAN.EXE
2011-10-05 20:32:37 ----AC---- C:\WINDOWS\ODBCINST.INI
2011-10-05 20:32:36 ----SH---- C:\WINDOWS\desktop.ini
2011-10-05 20:32:36 ----AC---- C:\WINDOWS\NOTEPAD.EXE
2011-10-05 20:32:36 ----AC---- C:\WINDOWS\control.ini
2011-10-05 20:32:35 ----ADC---- C:\Documents and Settings\All Users\Application Data\TEMP
2011-10-05 20:32:35 ----AC---- C:\WINDOWS\alcupd.exe
2011-10-05 20:32:35 ----AC---- C:\WINDOWS\Alcrmv.exe
2011-10-05 20:32:18 ----DC---- C:\Program Files\WebMoney
2011-10-04 01:07:02 ----AC---- C:\WINDOWS\system32\drivers\USBSTOR.SYS

======Список файлов и папок, измененных за последние 1 месяц======

2012-09-30 01:28:34 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2011-10-19 12:12:36 ----HDC---- C:\WINDOWS\$hf_mig$
2011-10-17 13:58:02 ----DC---- C:\WINDOWS\Downloaded Installations
2011-10-17 09:57:43 ----AC---- C:\WINDOWS\win.ini
2011-10-17 09:57:43 ----AC---- C:\WINDOWS\system.ini
2011-10-14 03:01:28 ----AC---- C:\WINDOWS\system32\MRT.exe
2011-10-09 17:48:30 ----DC---- C:\Program Files\MSBuild
2011-10-07 23:40:39 ----DC---- C:\Program Files\Ray Adams

======Список драйверов (тип запуска: R=Запущен, S=остановлен, 0=Загрузочный, 1=Системный, 2=Автоматически, 3=Вручную, 4=Отключено)======

R0 nv_agp;NVIDIA nForce AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\nv_agp.sys [2003-10-29 21120]
R0 nvatabus;nvatabus; C:\WINDOWS\system32\DRIVERS\nvatabus.sys [2004-06-03 79360]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2011-08-04 118104]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2011-08-04 61936]
R1 ISODrive;ISO CD-ROM Device Driver; \??\C:\Program Files\UltraISO\drivers\ISODrive.sys []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2011-08-09 154136]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2011-08-04 147480]
R2 exFat;exFat; C:\WINDOWS\system32\drivers\exFat.sys [2008-04-15 133632]
R2 irda;ИК-протокол IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-14 88192]
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:\WINDOWS\system32\DRIVERS\rspndr.sys [2008-04-15 62848]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2007-10-26 4124352]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-11 3565056]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2011-08-04 39824]
R3 irsir;Драйвер для инфракрасного последовательного порта Microsoft; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-18 18688]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2004-05-17 33280]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2004-05-17 12928]
R3 NVR0Dev;NVR0Dev; \??\C:\WINDOWS\nvoclock.sys []
R3 Rasirda;Минипорт WAN (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-18 19584]
S3 atidgllk;atidgllk; \??\D:\ПРОГИ\ДРОВА\биос\прошивальщик видео\atidgllk.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2011-05-18 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-05-18 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 RadProbe;Radeon Probe Driver; C:\WINDOWS\system32\DRIVERS\RadProbe.sys []
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2011-05-18 8192]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2011-05-18 8192]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 dwshd;dwshd; C:\WINDOWS\System32\drivers\dwshd.sys []

======Список служб (тип запуска: R=Запущена, S=остановлена, 0=Загрузочная, 1=Системная, 2=Автоматически, 3=Вручную, 4=Отключено)======

R2 AdvancedSystemCareService;Advanced SystemCare Service; C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe [2011-05-28 353168]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-02-11 602112]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2011-09-16 974944]
R2 Irmon;Монитор инфракрасной связи; C:\WINDOWS\system32\svchost.exe [2008-04-15 14336]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 nTuneService;nTune Service; C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe [2007-09-04 131072]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-15 14336]
R3 HDDSvc;HDD Information Service; C:\Program Files\Common Files\AltrixSoft\HDDInfoService\HDDSvc.exe [2011-08-04 479232]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2010-02-10 593920]
S2 gupdate;Служба Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-10-25 136176]
S3 2GISUpdateService;2GIS UpdateService; C:\Program Files\2gis\3.0\2GISUpdateService.exe [2011-09-29 874848]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Служба Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-10-25 136176]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2011-06-08 633856]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2008-04-15 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------