Лог утилиты random's system information tool 1.08 (автор: random/random) Run by Администратор at 2011-06-25 00:40:22 Microsoft Windows XP Professional Service Pack 3 Системный раздел C: размер 57 GB (24%) Свободно 238 GB Total RAM: 2046 MB (61% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 0:40:23, on 25.06.2011 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Norton Utilities 15\Tools\Disk Doctor\DiskDoctorSrv.exe C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE C:\WINDOWS\system32\PnkBstrA.exe C:\Program Files\Norton Utilities 15\Tools\SpeedDisk\SpeedDiskSrv.exe C:\WINDOWS\update.5.0\svchost.exe C:\WINDOWS\update.2\svchost.exe C:\WINDOWS\update.5.0\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\miner2.exe C:\WINDOWS\sysdriver32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\update.1\svchost.exe C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe C:\Program Files\iTunes\iTunesHelper.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\update.tray-2-0\svchost.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\l1rezerv.exe C:\WINDOWS\systemup.exe C:\Documents and Settings\Администратор\Local Settings\Application Data\Yandex\Updater\praetorian.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\EXPERTool\TBPanel.exe C:\Documents and Settings\Администратор\Application Data\Transcend\SJelite3\SJelite3Launch.exe C:\Documents and Settings\All Users\Application Data\VKSaver\VKSaver.exe C:\WINDOWS\update.2\svchost.exe C:\Program Files\Norton Utilities 15\Tools\Disk Doctor\DiskDoctorSrvProxy.exe C:\Program Files\Norton Utilities 15\Tools\SpeedDisk\SpeedDiskSrvProxy.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\Program Files\iPod\bin\iPodService.exe C:\Documents and Settings\Администратор\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Администратор\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Администратор\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Администратор\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Администратор\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Администратор\Local Settings\Application Data\Google\Chrome\Application\chrome.exe D:\Новая папка\sdc241-32\StrongDC.exe C:\WINDOWS\update.tray-2-0-lnk\svchost.exe C:\Documents and Settings\Администратор\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Администратор\Мои документы\Downloads\HiJackThis.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\WINDOWS\system32\NOTEPAD.EXE C:\WINDOWS\system32\NOTEPAD.EXE C:\Documents and Settings\Администратор\Мои документы\Downloads\ATF-Cleaner.exe C:\Documents and Settings\Администратор\Мои документы\Downloads\RSIT.exe C:\WINDOWS\system32\taskmgr.exe C:\Documents and Settings\Администратор\Рабочий стол\avz4\avz4\avz.exe C:\Documents and Settings\Администратор\Мои документы\Downloads\RSIT.exe C:\Program Files\trend micro\Администратор.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yandex.ru/?clid=44290 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yandex.ru/?clid=44290 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer предоставлен: Яндекс R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Ссылки R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\apppatch\aejslao.dat, O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O2 - BHO: CStat - {DD92DE22-ED91-4560-B788-DEE2B26612E6} - C:\Program Files\DeviceVM\Browser Configuration Utility\IEHelper.dll O2 - BHO: Cooliris Plug-In for Internet Explorer - {EAEE5C74-6D0D-4aca-9232-0DA4A7B866BA} - C:\Program Files\PicLensIE\cooliris.dll O3 - Toolbar: Яндекс.Бар - {91397D20-1446-11D4-8AF4-0040CA1127B6} - C:\Program Files\Yandex\YandexBarIE\yndbar.dll O3 - Toolbar: PandoraTV Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [wxpdrv] C:\WINDOWS\services32.exe O4 - HKLM\..\Run: [tray_ico0] C:\WINDOWS\update.tray-2-0\svchost.exe O4 - HKLM\..\Run: [sysdriver32.exe] "C:\WINDOWS\sysdriver32.exe" rezerv O4 - HKLM\..\Run: [sysdriver32_.exe] "C:\WINDOWS\sysdriver32_.exe" rezerv O4 - HKLM\..\Run: [l1rezerv.exe] "C:\WINDOWS\l1rezerv.exe" O4 - HKLM\..\Run: [systemup] "C:\WINDOWS\systemup.exe" stand O4 - HKCU\..\Run: [Praetorian] C:\Documents and Settings\Администратор\Local Settings\Application Data\Yandex\Updater\praetorian.exe O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe /A O4 - HKCU\..\Run: [RGSC] C:\GAMES\GTA4\Rockstar Games Social Club\RGSCLauncher.exe /silent O4 - HKCU\..\Run: [SJelite3Launch] C:\Documents and Settings\Администратор\Application Data\Transcend\SJelite3\SJelite3Launch.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\RunOnce: [VF0415Inst] RunDll32.exe C:\WINDOWS\system32\V0415Pin.dll,RunDLL32EP 515 (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [VF0415Inst] RunDll32.exe C:\WINDOWS\system32\V0415Pin.dll,RunDLL32EP 515 (User 'Default user') O4 - Global Startup: VKSaver.lnk = ? O8 - Extra context menu item: Google ВикиКомментарии... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html O9 - Extra button: Launch Cooliris - {3437D640-C91A-458f-89F5-B9095EA4C28B} - C:\Program Files\PicLensIE\cooliris.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{65AA4599-BE7C-4070-8700-CF9E7F4431EA}: NameServer = 192.168.248.21 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll O20 - AppInit_DLLs: C:\DOCUME~1\ALLUSE~1\APPLIC~1\VKSaver\vksaver3.dll O22 - SharedTaskScheduler: Предзагрузчик Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Демон кэша категорий компонентов - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Nalpeiron Licensing Service (ASTSRV) - Nalpeiron Ltd. - C:\WINDOWS\system32\ASTSRV.EXE O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe O23 - Service: Служба Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Norton Disk Doctor Service (DiskDoctorService) - Symantec Corporation - C:\Program Files\Norton Utilities 15\Tools\Disk Doctor\DiskDoctorSrv.exe O23 - Service: ESET HTTP Server (EhttpSrv) - Unknown owner - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe (file missing) O23 - Service: ESET Service (ekrn) - Unknown owner - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (file missing) O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE O23 - Service: Журнал событий (Eventlog) - Корпорация Майкрософт - C:\WINDOWS\system32\services.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Служба Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Служба Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Служба COM записи компакт-дисков IMAPI (ImapiService) - Корпорация Майкрософт - C:\WINDOWS\system32\imapi.exe O23 - Service: Сервис iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - Unknown owner - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe (file missing) O23 - Service: NetMeeting Remote Desktop Sharing (mnmsrvc) - Корпорация Майкрософт - C:\WINDOWS\system32\mnmsrvc.exe O23 - Service: Norton Internet Security - Unknown owner - C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Plug and Play (PlugPlay) - Корпорация Майкрософт - C:\WINDOWS\system32\services.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Norton SpeedDisk Service (SpeedDiskService) - Symantec Corporation - C:\Program Files\Norton Utilities 15\Tools\SpeedDisk\SpeedDiskSrv.exe O23 - Service: srvbtcclient - Unknown owner - C:\WINDOWS\update.5.0\svchost.exe O23 - Service: srviecheck - Unknown owner - C:\WINDOWS\update.2\svchost.exe O23 - Service: srvsysdriver32 - Unknown owner - C:\WINDOWS\sysdriver32.exe O23 - Service: Журналы и оповещения производительности (SysmonLog) - Корпорация Майкрософт - C:\WINDOWS\system32\smlogsvc.exe O23 - Service: Теневое копирование тома (VSS) - Корпорация Майкрософт - C:\WINDOWS\System32\vssvc.exe O23 - Service: Адаптер производительности WMI (WmiApSrv) - Корпорация Майкрософт - C:\WINDOWS\system32\wbem\wmiapsrv.exe O23 - Service: wxpdrivers - Unknown owner - C:\WINDOWS\update.1\svchost.exe -- End of file - 13542 bytes ======Папка назначеных зданий====== C:\WINDOWS\tasks\AppleSoftwareUpdate.job C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-413027322-839522115-500Core.job C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-413027322-839522115-500UA.job C:\WINDOWS\tasks\NUSchedule.job C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job C:\WINDOWS\tasks\WGASetup.job ======Снимок реестра====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-02-25 298160] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll [2011-02-25 848952] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}] PandoraTV Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-02-01 1487240] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DD92DE22-ED91-4560-B788-DEE2B26612E6}] BHO Class - C:\Program Files\DeviceVM\Browser Configuration Utility\IEHelper.dll [2009-06-22 335104] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EAEE5C74-6D0D-4aca-9232-0DA4A7B866BA}] C:\Program Files\PicLensIE\cooliris.dll [2010-02-25 4655064] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {91397D20-1446-11D4-8AF4-0040CA1127B6} - Яндекс.Бар - C:\Program Files\Yandex\YandexBarIE\yndbar.dll [2010-10-07 10971976] {D4027C7F-154A-4066-A1AD-4243D8127440} - PandoraTV Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-02-01 1487240] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-02-25 298160] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792] "KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k [] ""= [] "PCSuiteTrayApplication"=C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe [2007-03-23 227328] "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-11-29 421888] "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2011-01-25 421160] "nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2009-08-05 1657376] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-08-06 13877248] "NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-08-06 86016] "wxpdrv"=C:\WINDOWS\services32.exe [2011-06-20 802304] "tray_ico"= [] "tray_ico0"=C:\WINDOWS\update.tray-2-0\svchost.exe [2011-06-20 802304] "tray_ico1"= [] "tray_ico2"= [] "tray_ico3"= [] "tray_ico4"= [] "sysdriver32.exe"=C:\WINDOWS\sysdriver32.exe [2011-06-20 224768] "sysdriver32_.exe"=C:\WINDOWS\sysdriver32_.exe [2011-06-20 224768] "l1rezerv.exe"=C:\WINDOWS\l1rezerv.exe [2011-06-20 110592] "systemup"=C:\WINDOWS\systemup.exe [2011-06-20 114176] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Praetorian"=C:\Documents and Settings\Администратор\Local Settings\Application Data\Yandex\Updater\praetorian.exe [2010-10-21 798024] "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-01-04 39408] "GAINWARD"=C:\Program Files\EXPERTool\TBPanel.exe [2009-08-19 2181672] "RGSC"=C:\GAMES\GTA4\Rockstar Games Social Club\RGSCLauncher.exe [2008-11-14 305064] "SJelite3Launch"=C:\Documents and Settings\Администратор\Application Data\Transcend\SJelite3\SJelite3Launch.exe [2010-06-28 180224] C:\Documents and Settings\All Users\Главное меню\Программы\Автозагрузка VKSaver.lnk - C:\Documents and Settings\All Users\Application Data\VKSaver\VKSaver.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="C:\DOCUME~1\ALLUSE~1\APPLIC~1\VKSaver\vksaver3.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wxpdrivers] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\wxpdrivers] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableLUA"=0 "EnableSecureUIAPaths"=0 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "HonorAutoRunSetting"=1 "NoDriveTypeAutoRun"=24 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA" "C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB" "C:\Program Files\Gigabyte\EasySaver\UpdExe.exe"="C:\Program Files\Gigabyte\EasySaver\UpdExe.exe:*:Enabled:Exe File" "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4" "C:\Program Files\FlylinkDC++\FlylinkDC.exe"="C:\Program Files\FlylinkDC++\FlylinkDC.exe:*:Enabled:FlylinkDC++" "C:\GAMES\Steam\Steam.exe"="C:\GAMES\Steam\Steam.exe:*:Enabled:Steam" "C:\Program Files\BabylonPortable\App\Babylon\Babylon.exe"="C:\Program Files\BabylonPortable\App\Babylon\Babylon.exe:*:Disabled:Babylon" "C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager" "C:\GAMES\BAD COMPANY\BFBC2Updater.exe"="C:\GAMES\BAD COMPANY\BFBC2Updater.exe:*:Enabled:Battlefield: Bad Company™ 2" "C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser" "C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour" "C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes" "E:\Binaries\APB.exe"="E:\Binaries\APB.exe:*:Enabled:APB: APB.exe" "E:\Binaries\VIVOXVOICESERVICE.EXE"="E:\Binaries\VIVOXVOICESERVICE.EXE:*:Enabled:APB: VivoxVoiceService.exe" "C:\GAMES\War Inc Battlezone\WarInc.exe"="C:\GAMES\War Inc Battlezone\WarInc.exe:*:Enabled:War Inc. Battle Zone" "C:\GAMES\GTA4\Rockstar Games Social Club\RGSCLauncher.exe"="C:\GAMES\GTA4\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club" "C:\GAMES\GTA4\Grand Theft Auto IV\LaunchGTAIV.exe"="C:\GAMES\GTA4\Grand Theft Auto IV\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype" "C:\GAMES\Steam\SteamApps\common\call of duty black ops\BlackOps.exe"="C:\GAMES\Steam\SteamApps\common\call of duty black ops\BlackOps.exe:*:Enabled:Call of Duty: Black Ops" "C:\Documents and Settings\Администратор\Мои документы\Downloads\Flash-Player.exe"="C:\Documents and Settings\Администратор\Мои документы\Downloads\Flash-Player.exe:*:Enabled:C:\Documents and Settings\Администратор\Мои документы\Downloads\Flash-Player.exe" "C:\WINDOWS\update.1\svchost.exe"="C:\WINDOWS\update.1\svchost.exe:*:Enabled:C:\WINDOWS\update.1\svchost.exe" "C:\WINDOWS\services32.exe"="C:\WINDOWS\services32.exe:*:Enabled:C:\WINDOWS\services32.exe" "C:\WINDOWS\update.tray-2-0\svchost.exe"="C:\WINDOWS\update.tray-2-0\svchost.exe:*:Enabled:C:\WINDOWS\update.tray-2-0\svchost.exe" "C:\WINDOWS\update.2\svchost.exe"="C:\WINDOWS\update.2\svchost.exe:*:Enabled:C:\WINDOWS\update.2\svchost.exe" "C:\GAMES\Steam\SteamApps\common\call of duty black ops\BlackOpsMP.exe"="C:\GAMES\Steam\SteamApps\common\call of duty black ops\BlackOpsMP.exe:*:Enabled:Call of Duty: Black Ops - Multiplayer" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" ======Список файлов и папок, созданных за последние 3 месяца====== 2011-06-25 00:30:11 ----D---- C:\rsit 2011-06-25 00:30:11 ----D---- C:\Program Files\trend micro 2011-06-25 00:02:40 ----A---- C:\WINDOWS\miner2.exe 2011-06-25 00:02:24 ----A---- C:\WINDOWS\btc_client_iplist.txt 2011-06-25 00:02:01 ----HD---- C:\WINDOWS\update.5.0 2011-06-24 23:54:23 ----D---- C:\Documents and Settings\Администратор\Application Data\Norton Utilities 2011-06-24 23:49:44 ----D---- C:\Documents and Settings\All Users\Application Data\Norton Installer 2011-06-24 23:49:14 ----A---- C:\WINDOWS\system32\msxml4a.dll 2011-06-24 23:49:12 ----D---- C:\Program Files\Common Files\Symantec 2011-06-24 23:49:12 ----A---- C:\WINDOWS\system32\drivers\SymSpeedDisk.sys 2011-06-24 23:49:12 ----A---- C:\WINDOWS\system32\drivers\SymDSMon.sys 2011-06-24 23:49:11 ----A---- C:\WINDOWS\system32\CleanMFT32.exe 2011-06-24 23:49:06 ----D---- C:\Program Files\Norton Utilities 15 2011-06-24 23:49:06 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec 2011-06-23 12:50:30 ----D---- C:\Documents and Settings\Администратор\Application Data\Transcend 2011-06-20 11:21:02 ----A---- C:\WINDOWS\ddh_iplist.txt 2011-06-20 11:20:57 ----A---- C:\WINDOWS\iecheck_iplist.txt 2011-06-20 11:20:38 ----A---- C:\WINDOWS\systemup.exe 2011-06-20 11:20:38 ----A---- C:\WINDOWS\l1rezerv.exe 2011-06-20 11:20:33 ----HD---- C:\WINDOWS\update.2 2011-06-20 11:20:22 ----A---- C:\WINDOWS\loader2.exe_ok 2011-06-20 11:20:21 ----A---- C:\WINDOWS\iplist.txt 2011-06-20 11:20:20 ----A---- C:\WINDOWS\sysdriver32_.exe 2011-06-20 11:20:06 ----A---- C:\WINDOWS\sysdriver32.exe 2011-06-20 11:19:48 ----A---- C:\WINDOWS\front_ip_list.txt 2011-06-20 11:19:45 ----D---- C:\WINDOWS\av_ico 2011-06-20 11:19:27 ----ASH---- C:\hiberfil.sys 2011-06-20 11:15:57 ----HD---- C:\WINDOWS\update.1 2011-06-20 11:15:45 ----HD---- C:\WINDOWS\update.tray-2-0-lnk 2011-06-20 11:15:45 ----HD---- C:\WINDOWS\update.tray-2-0 2011-06-20 11:05:03 ----A---- C:\WINDOWS\winlog-ids.txt 2011-06-20 11:05:03 ----A---- C:\WINDOWS\winlog-dirs.txt 2011-06-20 11:04:59 ----H---- C:\WINDOWS\services32.exe 2011-05-31 23:54:45 ----D---- C:\Documents and Settings\All Users\Application Data\YoGen 2011-05-31 23:54:27 ----D---- C:\Program Files\YoGen Vocoder 1.4.0 2011-05-31 23:49:58 ----D---- C:\Documents and Settings\All Users\Application Data\AVS4YOU 2011-05-31 23:47:44 ----A---- C:\WINDOWS\system32\libmfxsw32.dll 2011-05-31 23:47:43 ----A---- C:\WINDOWS\system32\libmfxhw32.dll 2011-05-31 23:47:39 ----A---- C:\WINDOWS\system32\GdiPlus.dll 2011-05-31 23:47:38 ----A---- C:\WINDOWS\system32\msxml3a.dll 2011-05-31 23:47:36 ----D---- C:\Program Files\AVS4YOU 2011-05-31 23:47:24 ----D---- C:\Program Files\Common Files\AVSMedia 2011-05-02 01:56:26 ----D---- C:\Documents and Settings\Администратор\Application Data\AKVIS 2011-04-28 06:56:00 ----D---- C:\Program Files\Insofta 3D Text Commander 2011-04-28 01:10:54 ----D---- C:\Program Files\AKVIS 2011-04-21 22:37:35 ----HD---- C:\WINDOWS\PIF 2011-04-18 01:36:38 ----D---- C:\Documents and Settings\Администратор\Application Data\BoneTown 2011-04-18 00:52:36 ----A---- C:\WINDOWS\system32\CmdLineExt.dll 2011-04-15 00:02:04 ----A---- C:\WINDOWS\system32\sfcfiles.dll 2011-04-12 12:40:28 ----A---- C:\WINDOWS\system32\operaprefs_fixed.ini 2011-04-12 12:40:27 ----D---- C:\Documents and Settings\All Users\Application Data\VKSaver 2011-04-11 00:12:25 ----RA---- C:\WINDOWS\system32\nvcohda.dll 2011-04-11 00:12:25 ----A---- C:\WINDOWS\system32\nvuhda.exe 2011-04-11 00:12:24 ----RA---- C:\WINDOWS\system32\nvhdap32.dll 2011-04-11 00:12:24 ----RA---- C:\WINDOWS\system32\drivers\nvhda32.sys 2011-04-11 00:11:07 ----D---- C:\WINDOWS\C5C1C0F0D62F4DBF81D4D7EF397C228B.TMP 2011-04-11 00:07:14 ----A---- C:\WINDOWS\system32\drivers\TBPanel.sys 2011-04-11 00:07:13 ----D---- C:\Program Files\EXPERTool 2011-04-03 12:52:26 ----A---- C:\WINDOWS\system32\drivers\uzk0mtm2.sys ======Список файлов и папок, измененных за последние 3 месяца====== 2011-06-25 00:37:30 ----D---- C:\WINDOWS\Prefetch 2011-06-25 00:31:49 ----D---- C:\WINDOWS\Temp 2011-06-25 00:30:11 ----D---- C:\Program Files 2011-06-25 00:23:16 ----SHD---- C:\WINDOWS\Installer 2011-06-25 00:19:38 ----D---- C:\СЕТКА 2011-06-25 00:18:41 ----D---- C:\WINDOWS\system32 2011-06-25 00:18:41 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2011-06-25 00:14:57 ----D---- C:\WINDOWS\system32\drivers\etc 2011-06-25 00:13:23 ----A---- C:\WINDOWS\SchedLgU.Txt 2011-06-25 00:12:08 ----D---- C:\WINDOWS\system32\config 2011-06-25 00:11:29 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP 2011-06-25 00:02:40 ----AD---- C:\WINDOWS 2011-06-24 23:54:10 ----SD---- C:\WINDOWS\Downloaded Program Files 2011-06-24 23:53:47 ----SD---- C:\Documents and Settings\Администратор\Application Data\Microsoft 2011-06-24 23:50:28 ----SD---- C:\WINDOWS\Tasks 2011-06-24 23:49:22 ----D---- C:\Program Files\Mozilla Firefox 2011-06-24 23:49:12 ----D---- C:\WINDOWS\system32\drivers 2011-06-24 23:49:12 ----D---- C:\Program Files\Common Files 2011-06-24 10:26:47 ----A---- C:\WINDOWS\NeroDigital.ini 2011-06-23 15:53:05 ----D---- C:\WINDOWS\Minidump 2011-06-23 02:32:02 ----D---- C:\Documents and Settings\Администратор\Application Data\uTorrent 2011-06-21 22:11:19 ----D---- C:\WINDOWS\system32\CatRoot2 2011-06-21 18:52:10 ----D---- C:\WINDOWS\system32\DirectX 2011-06-21 18:52:09 ----HD---- C:\WINDOWS\inf 2011-06-21 18:51:52 ----RSD---- C:\WINDOWS\assembly 2011-06-21 18:49:57 ----SHD---- C:\Config.Msi 2011-06-21 18:38:17 ----D---- C:\GAMES 2011-06-21 16:26:29 ----A---- C:\WINDOWS\system32\PnkBstrB.exe 2011-06-20 11:21:13 ----SHD---- C:\System Volume Information 2011-06-20 11:21:13 ----D---- C:\WINDOWS\system32\Restore 2011-06-20 11:18:28 ----A---- C:\boot.ini 2011-06-16 01:35:00 ----D---- C:\Documents and Settings\Администратор\Application Data\Skype 2011-06-16 01:19:29 ----D---- C:\Documents and Settings\Администратор\Application Data\skypePM 2011-06-10 04:05:50 ----D---- C:\Program Files\Opera 2011-06-04 06:46:46 ----D---- C:\Documents and Settings\Администратор\Application Data\Nokia Multimedia Player 2011-05-23 00:31:07 ----D---- C:\Documents and Settings\All Users\Application Data\Apple 2011-05-18 15:11:15 ----HD---- C:\Program Files\InstallShield Installation Information 2011-05-15 20:52:03 ----D---- C:\WINDOWS\system32\CatRoot 2011-05-05 08:56:57 ----D---- C:\WINDOWS\Debug 2011-04-27 23:21:49 ----D---- C:\WINDOWS\AppPatch 2011-04-15 00:04:37 ----D---- C:\Program Files\Windows NT 2011-04-12 13:20:33 ----D---- C:\Program Files\Adobe 2011-04-12 13:20:30 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe 2011-04-12 13:20:29 ----D---- C:\Program Files\Common Files\Adobe 2011-04-12 13:18:05 ----D---- C:\Documents and Settings\Администратор\Application Data\Adobe 2011-04-11 00:11:43 ----D---- C:\WINDOWS\Help 2011-04-11 00:11:04 ----D---- C:\Program Files\Common Files\Wise Installation Wizard 2011-04-10 23:30:32 ----D---- C:\Documents and Settings\Администратор\Application Data\IP-TV Player 2011-04-10 23:04:52 ----D---- C:\Program Files\VKLife 2011-04-03 14:57:36 ----RSD---- C:\WINDOWS\Fonts 2011-03-28 23:01:21 ----D---- C:\Program Files\Ask.com ======Список драйверов (тип запуска: R=Запущен, S=остановлен, 0=Загрузочный, 1=Системный, 2=Автоматически, 3=Вручную, 4=Отключено)====== R0 ohci1394;Texas Instruments OHCI-совместимый IEEE 1394 хост-контроллер; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696] R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-17 44944] R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-01-19 691696] R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568] R1 AmdPPM;Драйвер AMD HwPState процессора; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792] R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-11-16 108792] R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-11-16 96408] R1 uzk0mtm2;AVZ-RK Kernel Driver; \??\C:\WINDOWS\system32\Drivers\uzk0mtm2.sys [] R1 WmiAcpi;Интерфейс управления для ACPI Microsoft Windows; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832] R2 dvdmmg;dvdmmg; \??\C:\WINDOWS\system32\drivers\dvdmmg.sys [] R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-11-16 116520] R2 PfModNT;PfModNT; \??\C:\WINDOWS\system32\drivers\PfModNT.sys [] R2 TBPanel;TBPanel; C:\WINDOWS\system32\drivers\TBPanel.sys [2007-03-16 12256] R3 Arp1394;Протокол клиента 1394 ARP; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800] R3 ctac32k;Creative AC3 Software Decoder; C:\WINDOWS\system32\drivers\ctac32k.sys [2005-06-18 501760] R3 ctaud2k;Creative Audio Driver (WDM); C:\WINDOWS\system32\drivers\ctaud2k.sys [2005-06-18 438784] R3 ctprxy2k;Creative Proxy Driver; C:\WINDOWS\system32\drivers\ctprxy2k.sys [2005-06-18 7168] R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\drivers\ctsfm2k.sys [2005-06-18 142336] R3 emupia;E-mu Plug-in Architecture Driver; C:\WINDOWS\system32\drivers\emupia2k.sys [2005-06-18 77824] R3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys [] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600] R3 ha10kx2k;Creative Hardware Abstract Layer Driver; C:\WINDOWS\system32\drivers\ha10kx2k.sys [2005-06-18 751104] R3 hap17v2k;Creative P17V HAL Driver; C:\WINDOWS\system32\drivers\hap17v2k.sys [2005-06-18 178688] R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384] R3 hidusb;Драйвер класса HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368] R3 mouhid;Драйвер мыши HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-18 12160] R3 NIC1394;Сетевой драйвер 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-09-01 7753888] R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2009-09-01 56992] R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2005-06-18 114688] R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2005-11-03 10368] R3 RLDesignVirtualAudioCableWdm;Live! Cam Virtual; C:\WINDOWS\system32\DRIVERS\livecamv.sys [2007-01-15 31616] R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-04-24 141568] S1 kbdhid;Драйвер клавиатуры HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720] S1 SRTSP;SRTSP; \??\C:\WINDOWS\system32\drivers\NIS\1000000.07D\SRTSP.SYS [] S1 SRTSPX;SRTSPX; \??\C:\WINDOWS\system32\drivers\NIS\1000000.07D\SRTSPX.SYS [] S3 azxykvhz;azxykvhz; C:\WINDOWS\system32\drivers\azxykvhz.sys [] S3 BthEnum;Служба Bluetooth Enumerator; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024] S3 BTHMODEM;Драйвер для устройства связи по последовательному каналу Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-14 37888] S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120] S3 BTHPORT;Драйвер порта Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272512] S3 BTHUSB;Драйвер порта USB радиомодуля Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944] S3 Cardex;Cardex; \??\C:\WINDOWS\system32\drivers\TBPANEL.SYS [] S3 CCDECODE;Closed Caption декодер; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024] S3 CtClsFlt;Creative Camera Class Upper Filter Driver; C:\WINDOWS\system32\DRIVERS\CtClsFlt.sys [2008-08-12 135616] S3 ctdvda2k;Creative DVD-Audio Device Driver; C:\WINDOWS\system32\drivers\ctdvda2k.sys [2005-06-07 340176] S3 EagleNT;EagleNT; \??\C:\DOCUME~1\9335~1\LOCALS~1\Temp\EagleNT.sys [] S3 hap16v2k;Creative P16V HAL Driver; C:\WINDOWS\system32\drivers\hap16v2k.sys [2005-06-18 153088] S3 MSTEE;Преобразователь потоков Tee/Sink-to-Sink Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504] S3 NABTSFEC;NABTS/FEC VBI кодек; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248] S3 NAVENG;NAVENG; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20080829.024\NAVENG.SYS [] S3 NAVEX15;NAVEX15; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20080829.024\NAVEX15.SYS [] S3 NdisIP;Microsoft видео или ТВ подключение; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880] S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2007-02-22 137216] S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2007-02-22 8320] S3 nmwcdcj;Nokia USB Port; C:\WINDOWS\system32\drivers\nmwcdcj.sys [2007-02-22 12288] S3 nmwcdcm;Nokia USB Modem; C:\WINDOWS\system32\drivers\nmwcdcm.sys [2007-02-22 12288] S3 NTIDrvr;NTIDrvr; \??\C:\Program Files\muvee Technologies\muvee autoProducer 6.1\mvBurnerDll\NTIDrvr.sys [] S3 RFCOMM;Устройство Bluetooth (протокол RFCOMM TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136] S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232] S3 SymDSMon;SymDSMon; \??\C:\WINDOWS\system32\drivers\SymDSMon.sys [] S3 SYMSpeedDisk;SYMSpeedDisk; \??\C:\WINDOWS\system32\drivers\SymSpeedDisk.sys [] S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2010-12-14 41984] S3 usbaudio;Аудио драйвер USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032] S3 usbccgp;Драйвер универсального родительского устройства USB (Microsoft); C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128] S3 usbscan;Драйвер USB-сканера; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104] S3 USBSTOR;Драйвер запоминающих устройств для USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368] S3 V0415Afx;Creative Camera VF0415 Audio Effects Driver; C:\WINDOWS\system32\DRIVERS\V0415Afx.sys [2008-04-30 160768] S3 V0415Vid;Creative Live! Cam Video IM Ultra Driver; C:\WINDOWS\system32\DRIVERS\V0415Vid.sys [2008-08-14 282464] S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528] S3 WSTCODEC;World Standard Teletext кодек; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944] S4 sfc;sfc; C:\WINDOWS\system32\drivers\sfc.sys [] ======Список служб (тип запуска: R=Запущена, S=остановлена, 0=Загрузочная, 1=Системная, 2=Автоматически, 3=Вручную, 4=Отключено)====== R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2011-01-05 37664] R2 BCUService;Browser Configuration Utility Service; C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe [2009-06-22 212232] R2 Bonjour Service;Служба Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2010-10-07 345376] R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] R2 DiskDoctorService;Norton Disk Doctor Service; C:\Program Files\Norton Utilities 15\Tools\Disk Doctor\DiskDoctorSrv.exe [2010-11-30 1029480] R2 ES lite Service;ES lite Service for program management.; C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [2009-03-02 68136] R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-08-06 168004] R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-12-19 75136] R2 SpeedDiskService;Norton SpeedDisk Service; C:\Program Files\Norton Utilities 15\Tools\SpeedDisk\SpeedDiskSrv.exe [2010-11-30 1037672] R2 srvbtcclient;srvbtcclient; C:\WINDOWS\update.5.0\svchost.exe [2011-06-25 338432] R2 srviecheck;srviecheck; C:\WINDOWS\update.2\svchost.exe [2011-06-20 482816] R2 srvsysdriver32;srvsysdriver32; C:\WINDOWS\sysdriver32.exe [2011-06-20 224768] R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] R2 wxpdrivers;wxpdrivers; C:\WINDOWS\update.1\svchost.exe [2011-06-20 802304] R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104] R3 iPod Service;Сервис iPod; C:\Program Files\iPod\bin\iPodService.exe [2011-01-25 820008] R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2007-03-26 292864] S2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [] S2 gupdate;Служба Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-29 135664] S2 Norton Internet Security;Norton Internet Security; C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe /s Norton Internet Security /m C:\Program Files\Norton Internet Security\Engine\16.0.0.125\diMaster.dll /prefetch:1 [] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312] S3 ASTSRV;Nalpeiron Licensing Service; C:\WINDOWS\system32\ASTSRV.EXE [2008-05-19 57344] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632] S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [] S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-03-02 655624] S3 gupdatem;Служба Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-29 135664] S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-01-04 182768] S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664] S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe [] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096] -----------------EOF-----------------