Лог утилиты random's system information tool 1.08 (автор: random/random) Run by Admin at 2012-02-07 18:26:21 Microsoft Windows XP Professional Service Pack 3 Системный раздел C: размер 93 GB (93%) Свободно 100 GB Total RAM: 2046 MB (67% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 18:26:27, on 07.02.2012 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Vtune\TBPanel.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\RTHDCPL.EXE C:\Program Files\ESET\ESET Smart Security\egui.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\VistaDriveIcon\VistaDrv.exe C:\Program Files\ESET\ESET Smart Security\ekrn.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\CMMON32.EXE C:\Program Files\Windows Media Player\wmplayer.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Program Files\avz4\RSIT\RSIT.exe C:\Program Files\trend micro\Admin.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Ссылки O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O4 - HKLM\..\Run: [Gainward] C:\Program Files\Vtune\TBPanel.exe /A O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [VistaIcon] C:\Program Files\VistaDriveIcon\VistaDrv.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [VistaIcon] C:\Program Files\VistaDriveIcon\VistaDrv.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%\System32\rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\custom.inf,OnceFirstLogonInstall,0 (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [IE8_02] rundll32 advpack.dll,LaunchINFSectionEx IE8int.inf,AfterUserStart,,4,N (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%\System32\rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\custom.inf,OnceFirstLogonInstall,0 (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%\System32\rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\custom.inf,NewUserFirstLogonInstall,0 (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%\System32\rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\custom.inf,NewUserFirstLogonInstall,0 (User 'Default user') O8 - Extra context menu item: &Экспорт в Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Справочные материалы - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{698684B9-5C83-4772-8AD3-6CCE6BA3518C}: NameServer = 213.234.192.7 85.21.192.5 O22 - SharedTaskScheduler: Предзагрузчик Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Демон кэша категорий компонентов - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe O23 - Service: Служба Acronis Nonstop Backup (afcdpsrv) - Acronis - C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe O23 - Service: Журнал событий (Eventlog) - Корпорация Майкрософт - C:\WINDOWS\system32\services.exe O23 - Service: Служба COM записи компакт-дисков IMAPI (ImapiService) - Корпорация Майкрософт - C:\WINDOWS\system32\imapi.exe O23 - Service: NMSAccess - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Plug and Play (PlugPlay) - Корпорация Майкрософт - C:\WINDOWS\system32\services.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe O23 - Service: Смарт-карты (SCardSvr) - Корпорация Майкрософт - C:\WINDOWS\System32\SCardSvr.exe O23 - Service: Журналы и оповещения производительности (SysmonLog) - Корпорация Майкрософт - C:\WINDOWS\system32\smlogsvc.exe O23 - Service: Теневое копирование тома (VSS) - Корпорация Майкрософт - C:\WINDOWS\System32\vssvc.exe O23 - Service: Адаптер производительности WMI (WmiApSrv) - Корпорация Майкрософт - C:\WINDOWS\system32\wbem\wmiapsrv.exe -- End of file - 6488 bytes ======Папка назначеных зданий====== C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1606980848-1644491937-682003330-500Core.job C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1606980848-1644491937-682003330-500UA.job ======Снимок реестра====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2011-11-10 325408] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-11-10 42272] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Gainward"=C:\Program Files\Vtune\TBPanel.exe [2007-06-26 2158592] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-05-11 8429568] "nwiz"=nwiz.exe /install [] "NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-05-11 81920] "RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-06-13 16239616] "Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632] "egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2011-10-12 3084384] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2009-04-30 37376] "VistaIcon"=C:\Program Files\VistaDriveIcon\VistaDrv.exe [2009-01-11 132096] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service] C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [2010-12-20 390800] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2011-09-27 59240] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update] C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2012-02-04 136176] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Program Files\QuickTime\QTTask.exe [2011-10-24 421888] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SAOB Monitor] C:\Program Files\Acronis\TrueImageHome\OnlineBackupStandalone\TrueImageMonitor.exe [2010-11-16 2536752] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [2010-12-20 5582240] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2007-06-18 133632] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableLinkedConnections"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 "NoSMConfigurePrograms"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "HonorAutoRunSetting"=1 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" ======Список файлов и папок, созданных за последние 3 месяца====== 2012-02-07 18:26:21 ----D---- C:\rsit 2012-02-06 10:10:06 ----D---- C:\Program Files\SimpleTV 2012-02-05 19:21:50 ----D---- C:\Documents and Settings\Admin\Application Data\Foxit Software 2012-02-05 09:01:33 ----D---- C:\Documents and Settings\Admin\Application Data\DonationCoder 2012-02-05 08:59:28 ----D---- C:\Program Files\WinPcap 2012-02-05 08:59:08 ----D---- C:\Program Files\URLSnooper2 2012-02-05 08:59:08 ----D---- C:\Documents and Settings\All Users\Application Data\DonationCoder 2012-02-03 11:44:16 ----D---- C:\Documents and Settings\Admin\Application Data\Apple Computer 2012-02-03 09:20:25 ----D---- C:\Program Files\QuickTime 2012-02-03 09:20:25 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer 2012-02-03 09:20:10 ----D---- C:\Program Files\Common Files\Apple 2012-02-03 09:20:02 ----D---- C:\Program Files\Apple Software Update 2012-02-03 09:20:02 ----D---- C:\Documents and Settings\All Users\Application Data\Apple 2012-02-01 22:41:24 ----D---- C:\Program Files\uTorrent 2012-02-01 22:40:09 ----D---- C:\Documents and Settings\Admin\Application Data\uTorrent 2012-01-31 17:06:40 ----D---- C:\Program Files\Common Files\Java 2012-01-31 17:06:40 ----D---- C:\Documents and Settings\All Users\Application Data\Sun 2012-01-31 17:06:27 ----A---- C:\WINDOWS\system32\javaws.exe 2012-01-31 17:06:27 ----A---- C:\WINDOWS\system32\javaw.exe 2012-01-31 17:06:27 ----A---- C:\WINDOWS\system32\java.exe 2012-01-31 17:06:27 ----A---- C:\WINDOWS\system32\deployJava1.dll 2012-01-31 16:48:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$ 2012-01-31 16:45:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$ 2012-01-31 16:43:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2639417$ 2012-01-31 16:42:09 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$ 2012-01-31 16:40:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$ 2012-01-31 16:39:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$ 2012-01-31 16:37:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$ 2012-01-31 16:36:21 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$ 2012-01-31 16:36:07 ----HD---- C:\WINDOWS\$hf_mig$ 2012-01-31 15:42:59 ----D---- C:\Documents and Settings\Admin\Application Data\Malwarebytes 2012-01-31 13:35:45 ----D---- C:\Program Files\trend micro 2012-01-31 11:00:08 ----D---- C:\Documents and Settings\Admin\Application Data\ImgBurn 2012-01-31 10:58:34 ----D---- C:\Program Files\ImgBurn 2012-01-30 23:51:44 ----D---- C:\Documents and Settings\All Users\Application Data\Canneverbe Limited 2012-01-30 23:51:44 ----D---- C:\Documents and Settings\Admin\Application Data\Canneverbe Limited 2012-01-30 22:09:28 ----D---- C:\Program Files\Foxit Software 2012-01-30 22:03:24 ----D---- C:\Program Files\VS Revo Group 2012-01-29 19:57:58 ----A---- C:\WINDOWS\system32\drivers\afcdp.sys 2012-01-29 19:57:55 ----A---- C:\WINDOWS\system32\drivers\tdrpm273.sys 2012-01-29 19:57:54 ----A---- C:\WINDOWS\system32\drivers\timntr.sys 2012-01-29 19:57:51 ----A---- C:\WINDOWS\system32\drivers\snapman.sys 2012-01-29 19:57:29 ----D---- C:\Program Files\Acronis 2012-01-29 19:57:27 ----D---- C:\Program Files\Common Files\Acronis 2012-01-29 19:55:28 ----D---- C:\Documents and Settings\Admin\Application Data\Acronis 2012-01-29 19:55:27 ----D---- C:\Documents and Settings\All Users\Application Data\Acronis 2012-01-29 11:17:30 ----A---- C:\WINDOWS\system32\drivers\StarOpen.sys 2012-01-29 11:17:29 ----D---- C:\Program Files\CDBurnerXP 2012-01-29 10:53:01 ----D---- C:\Program Files\Common Files\Adobe 2012-01-28 20:36:38 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2012-01-28 14:57:38 ----A---- C:\WINDOWS\system32\xvidvfw.dll 2012-01-28 14:57:38 ----A---- C:\WINDOWS\system32\xvidcore.dll 2012-01-28 14:57:31 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest 2012-01-28 14:57:30 ----A---- C:\WINDOWS\system32\ff_vfw.dll 2012-01-28 14:57:26 ----D---- C:\Program Files\K-Lite Codec Pack 2012-01-28 13:54:54 ----D---- C:\Documents and Settings\Admin\Application Data\ESET 2012-01-28 13:54:02 ----D---- C:\Program Files\ESET 2012-01-28 13:54:02 ----D---- C:\Documents and Settings\All Users\Application Data\ESET 2012-01-28 11:14:18 ----D---- C:\Program Files\avz4 2012-01-28 07:24:05 ----D---- C:\Program Files\Dr.Web CureIt! 2012-01-27 14:12:32 ----D---- C:\Program Files\Paint.NET 2012-01-27 14:03:13 ----N---- C:\WINDOWS\system32\spmsg2.dll 2012-01-27 14:03:09 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$ 2012-01-27 14:01:02 ----D---- C:\WINDOWS\system32\XPSViewer 2012-01-27 14:00:59 ----D---- C:\Program Files\MSBuild 2012-01-27 14:00:58 ----D---- C:\WINDOWS\system32\en-US 2012-01-27 14:00:54 ----D---- C:\Program Files\Reference Assemblies 2012-01-27 14:00:32 ----N---- C:\WINDOWS\system32\spmsg.dll 2012-01-27 14:00:28 ----A---- C:\WINDOWS\system32\spupdsvc.exe 2012-01-27 14:00:25 ----N---- C:\WINDOWS\system32\xpssvcs.dll 2012-01-27 14:00:25 ----N---- C:\WINDOWS\system32\xpsshhdr.dll 2012-01-27 14:00:25 ----N---- C:\WINDOWS\system32\prntvpt.dll 2012-01-27 13:58:14 ----RHD---- C:\AHCache 2012-01-27 08:41:07 ----D---- C:\Documents and Settings\Admin\Application Data\Mozilla 2012-01-27 08:41:02 ----D---- C:\Program Files\Mozilla Firefox 2012-01-26 14:33:05 ----D---- C:\Program Files\Totalcmd 2012-01-26 14:33:05 ----D---- C:\Documents and Settings\Admin\Application Data\GHISLER 2012-01-26 14:33:05 ----A---- C:\WINDOWS\UC.PIF 2012-01-26 14:33:05 ----A---- C:\WINDOWS\RAR.PIF 2012-01-26 14:33:05 ----A---- C:\WINDOWS\PKZIP.PIF 2012-01-26 14:33:05 ----A---- C:\WINDOWS\PKUNZIP.PIF 2012-01-26 14:33:05 ----A---- C:\WINDOWS\NOCLOSE.PIF 2012-01-26 14:33:05 ----A---- C:\WINDOWS\LHA.PIF 2012-01-26 14:33:05 ----A---- C:\WINDOWS\ARJ.PIF 2012-01-26 13:03:53 ----HD---- C:\WINDOWS\PIF 2012-01-26 12:48:52 ----D---- C:\Program Files\EVEREST Ultimate Edition 2012-01-26 12:01:45 ----D---- C:\WINDOWS\Sun 2012-01-26 12:01:44 ----D---- C:\Documents and Settings\Admin\Application Data\Sun 2012-01-26 10:59:16 ----D---- C:\Program Files\CCleaner 2012-01-26 10:14:57 ----D---- C:\WINDOWS\pss 2012-01-26 09:53:11 ----A---- C:\WINDOWS\system32\cmdcsr.dll 2012-01-25 22:59:25 ----D---- C:\Documents and Settings\Admin\Application Data\Macromedia 2012-01-25 22:59:24 ----D---- C:\Documents and Settings\Admin\Application Data\Adobe 2012-01-25 22:31:47 ----A---- C:\WINDOWS\system32\h323log.txt 2012-01-25 22:31:42 ----A---- C:\WINDOWS\system32\drivers\audstub.sys 2012-01-25 22:31:14 ----A---- C:\WINDOWS\system32\drivers\redbook.sys 2012-01-25 22:30:35 ----A---- C:\WINDOWS\system32\usbui.dll 2012-01-25 22:29:47 ----SHD---- C:\WINDOWS\Installer 2012-01-25 22:29:47 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2012-01-25 22:29:46 ----D---- C:\Program Files\Common Files\ODBC 2012-01-25 22:29:46 ----A---- C:\WINDOWS\ODBCINST.INI 2012-01-25 22:29:44 ----D---- C:\Program Files\Common Files\SpeechEngines 2012-01-25 22:29:43 ----RD---- C:\Program Files 2012-01-25 22:29:43 ----D---- C:\Program Files\Common Files\Microsoft Shared 2012-01-25 22:29:43 ----D---- C:\Program Files\Common Files 2012-01-25 22:29:41 ----RA---- C:\WINDOWS\system32\kbdtuq.dll 2012-01-25 22:29:41 ----RA---- C:\WINDOWS\system32\kbdtuf.dll 2012-01-25 22:29:41 ----RA---- C:\WINDOWS\system32\kbdazel.dll 2012-01-25 22:29:40 ----RA---- C:\WINDOWS\system32\kbdhept.dll 2012-01-25 22:29:40 ----RA---- C:\WINDOWS\system32\kbdhela3.dll 2012-01-25 22:29:40 ----RA---- C:\WINDOWS\system32\kbdhela2.dll 2012-01-25 22:29:40 ----RA---- C:\WINDOWS\system32\kbdhe319.dll 2012-01-25 22:29:40 ----RA---- C:\WINDOWS\system32\kbdhe220.dll 2012-01-25 22:29:40 ----RA---- C:\WINDOWS\system32\kbdhe.dll 2012-01-25 22:29:40 ----RA---- C:\WINDOWS\system32\kbdgkl.dll 2012-01-25 22:29:39 ----RA---- C:\WINDOWS\system32\kbdlv1.dll 2012-01-25 22:29:39 ----RA---- C:\WINDOWS\system32\kbdlv.dll 2012-01-25 22:29:39 ----RA---- C:\WINDOWS\system32\kbdlt1.dll 2012-01-25 22:29:39 ----RA---- C:\WINDOWS\system32\kbdlt.dll 2012-01-25 22:29:39 ----RA---- C:\WINDOWS\system32\kbdest.dll 2012-01-25 22:29:38 ----RA---- C:\WINDOWS\system32\kbdycl.dll 2012-01-25 22:29:38 ----RA---- C:\WINDOWS\system32\kbdsl1.dll 2012-01-25 22:29:38 ----RA---- C:\WINDOWS\system32\kbdsl.dll 2012-01-25 22:29:38 ----RA---- C:\WINDOWS\system32\kbdro.dll 2012-01-25 22:29:38 ----RA---- C:\WINDOWS\system32\kbdpl1.dll 2012-01-25 22:29:38 ----RA---- C:\WINDOWS\system32\kbdpl.dll 2012-01-25 22:29:38 ----RA---- C:\WINDOWS\system32\kbdhu1.dll 2012-01-25 22:29:38 ----RA---- C:\WINDOWS\system32\kbdhu.dll 2012-01-25 22:29:38 ----RA---- C:\WINDOWS\system32\kbdcz2.dll 2012-01-25 22:29:38 ----RA---- C:\WINDOWS\system32\kbdcz1.dll 2012-01-25 22:29:38 ----RA---- C:\WINDOWS\system32\kbdcz.dll 2012-01-25 22:29:38 ----RA---- C:\WINDOWS\system32\kbdcr.dll 2012-01-25 22:29:38 ----RA---- C:\WINDOWS\system32\KBDAL.DLL 2012-01-25 22:29:36 ----A---- C:\WINDOWS\system32\kbdmon.dll 2012-01-25 22:29:36 ----A---- C:\WINDOWS\system32\kbdkyr.dll 2012-01-25 22:29:35 ----A---- C:\WINDOWS\system32\kbdycc.dll 2012-01-25 22:29:35 ----A---- C:\WINDOWS\system32\kbduzb.dll 2012-01-25 22:29:35 ----A---- C:\WINDOWS\system32\kbdur.dll 2012-01-25 22:29:35 ----A---- C:\WINDOWS\system32\kbdtat.dll 2012-01-25 22:29:35 ----A---- C:\WINDOWS\system32\kbdkaz.dll 2012-01-25 22:29:35 ----A---- C:\WINDOWS\system32\kbdbu.dll 2012-01-25 22:29:35 ----A---- C:\WINDOWS\system32\kbdblr.dll 2012-01-25 22:29:35 ----A---- C:\WINDOWS\system32\kbdaze.dll 2012-01-25 22:29:34 ----A---- C:\WINDOWS\system32\spxcoins.dll 2012-01-25 22:29:34 ----A---- C:\WINDOWS\system32\irclass.dll 2012-01-25 22:29:34 ----A---- C:\WINDOWS\system32\EqnClass.Dll 2012-01-25 22:29:34 ----A---- C:\WINDOWS\system32\dgsetup.dll 2012-01-25 22:29:34 ----A---- C:\WINDOWS\system32\dgrpsetu.dll 2012-01-25 22:29:33 ----N---- C:\WINDOWS\system32\CONFIG.TMP 2012-01-25 22:29:33 ----A---- C:\WINDOWS\TASKMAN.EXE 2012-01-25 22:29:33 ----A---- C:\WINDOWS\system32\drivers\irenum.sys 2012-01-25 22:29:32 ----A---- C:\WINDOWS\system32\batt.dll 2012-01-25 22:29:32 ----A---- C:\WINDOWS\NOTEPAD.EXE 2012-01-25 22:29:28 ----A---- C:\WINDOWS\system32\storprop.dll 2012-01-25 22:29:22 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini 2012-01-25 22:27:11 ----RA---- C:\WINDOWS\SET8.tmp 2012-01-25 22:27:09 ----RA---- C:\WINDOWS\SET4.tmp 2012-01-25 22:27:08 ----RA---- C:\WINDOWS\SET3.tmp 2012-01-25 22:27:04 ----D---- C:\WINDOWS\system32\CatRoot2 2012-01-25 22:27:04 ----D---- C:\WINDOWS\system32\CatRoot 2012-01-25 22:26:59 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft 2012-01-25 22:26:24 ----D---- C:\Documents and Settings 2012-01-25 22:26:23 ----SHD---- C:\System Volume Information 2012-01-25 22:25:45 ----SH---- C:\boot.ini 2012-01-25 22:20:30 ----RSHDC---- C:\WINDOWS\system32\dllcache 2012-01-25 22:20:30 ----HD---- C:\WINDOWS\inf 2012-01-25 22:20:30 ----D---- C:\WINDOWS\WinSxS 2012-01-25 22:20:30 ----D---- C:\WINDOWS\Web 2012-01-25 22:20:30 ----D---- C:\WINDOWS\twain_32 2012-01-25 22:20:30 ----D---- C:\WINDOWS\Temp 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\wins 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\wbem 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\usmt 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\spool 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\ShellExt 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\Setup 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\ru-ru 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\ru 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\ras 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\oobe 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\npp 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\mui 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\inetsrv 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\IME 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\icsxml 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\ias 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\export 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\drivers\UMDF 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\drivers\etc 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\drivers\disdn 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\drivers 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\dhcp 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\config 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\3com_dmi 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\3076 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\2052 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\1054 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\1049 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\1042 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\1041 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\1037 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\1033 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\1031 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\1028 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32\1025 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system32 2012-01-25 22:20:30 ----D---- C:\WINDOWS\system 2012-01-25 22:20:30 ----D---- C:\WINDOWS\security 2012-01-25 22:20:30 ----D---- C:\WINDOWS\Resources 2012-01-25 22:20:30 ----D---- C:\WINDOWS\repair 2012-01-25 22:20:30 ----D---- C:\WINDOWS\Provisioning 2012-01-25 22:20:30 ----D---- C:\WINDOWS\PeerNet 2012-01-25 22:20:30 ----D---- C:\WINDOWS\pchealth 2012-01-25 22:20:30 ----D---- C:\WINDOWS\Network Diagnostic 2012-01-25 22:20:30 ----D---- C:\WINDOWS\mui 2012-01-25 22:20:30 ----D---- C:\WINDOWS\msapps 2012-01-25 22:20:30 ----D---- C:\WINDOWS\msagent 2012-01-25 22:20:30 ----D---- C:\WINDOWS\Media 2012-01-25 22:20:30 ----D---- C:\WINDOWS\L2Schemas 2012-01-25 22:20:30 ----D---- C:\WINDOWS\java 2012-01-25 22:20:30 ----D---- C:\WINDOWS\ime 2012-01-25 22:20:30 ----D---- C:\WINDOWS\Help 2012-01-25 22:20:30 ----D---- C:\WINDOWS\Fonts 2012-01-25 22:20:30 ----D---- C:\WINDOWS\ehome 2012-01-25 22:20:30 ----D---- C:\WINDOWS\Driver Cache 2012-01-25 22:20:30 ----D---- C:\WINDOWS\Debug 2012-01-25 22:20:30 ----D---- C:\WINDOWS\Connection Wizard 2012-01-25 22:20:30 ----D---- C:\WINDOWS\Config 2012-01-25 22:20:30 ----D---- C:\WINDOWS\AppPatch 2012-01-25 22:20:30 ----D---- C:\WINDOWS\addins 2012-01-25 22:20:30 ----D---- C:\WINDOWS 2012-01-25 22:20:30 ----ASH---- C:\pagefile.sys 2012-01-25 22:09:37 ----SHD---- C:\RECYCLER 2012-01-25 20:29:12 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS 2012-01-25 20:00:14 ----D---- C:\WINDOWS\system32\Lang 2012-01-25 19:58:24 ----D---- C:\Documents and Settings\Admin\Application Data\Opera 2012-01-25 19:58:21 ----D---- C:\Program Files\Opera 2012-01-25 19:58:08 ----A---- C:\WINDOWS\system32\unrar.dll 2012-01-25 19:57:49 ----D---- C:\Documents and Settings\Admin\Application Data\WinRAR 2012-01-25 19:57:48 ----D---- C:\Program Files\WinRAR 2012-01-25 19:56:51 ----A---- C:\WINDOWS\ODBC.INI 2012-01-25 19:56:49 ----A---- C:\WINDOWS\system32\mdimon.dll 2012-01-25 19:56:33 ----D---- C:\Program Files\Common Files\DESIGNER 2012-01-25 19:56:28 ----D---- C:\WINDOWS\SHELLNEW 2012-01-25 19:56:28 ----D---- C:\Program Files\Microsoft.NET 2012-01-25 19:56:28 ----D---- C:\Program Files\Microsoft Office 2012-01-25 19:53:01 ----R---- C:\WINDOWS\system32\RtlCPAPI.dll 2012-01-25 19:53:01 ----R---- C:\WINDOWS\system32\ChCfg.exe 2012-01-25 19:53:01 ----R---- C:\WINDOWS\SkyTel.exe 2012-01-25 19:53:00 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys 2012-01-25 19:53:00 ----A---- C:\WINDOWS\system32\drivers\splitter.sys 2012-01-25 19:53:00 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys 2012-01-25 19:52:59 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys 2012-01-25 19:52:59 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys 2012-01-25 19:52:59 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys 2012-01-25 19:52:59 ----A---- C:\WINDOWS\system32\drivers\aec.sys 2012-01-25 19:52:58 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys 2012-01-25 19:52:58 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys 2012-01-25 19:52:58 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys 2012-01-25 19:52:57 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2012-01-25 19:52:53 ----D---- C:\WINDOWS\system32\RTCOM 2012-01-25 19:52:52 ----A---- C:\WINDOWS\system32\ksuser.dll 2012-01-25 19:52:52 ----A---- C:\WINDOWS\system32\drivers\portcls.sys 2012-01-25 19:52:51 ----A---- C:\WINDOWS\system32\drivers\drmk.sys 2012-01-25 19:52:48 ----R---- C:\WINDOWS\SoundMan.exe 2012-01-25 19:52:47 ----R---- C:\WINDOWS\RtlUpd.exe 2012-01-25 19:52:46 ----R---- C:\WINDOWS\system32\drivers\RtkHDAud.Sys 2012-01-25 19:52:44 ----R---- C:\WINDOWS\RTLCPL.exe 2012-01-25 19:52:39 ----R---- C:\WINDOWS\RTHDCPL.exe 2012-01-25 19:52:38 ----R---- C:\WINDOWS\MicCal.exe 2012-01-25 19:52:37 ----R---- C:\WINDOWS\Alcmtr.exe 2012-01-25 19:52:36 ----R---- C:\WINDOWS\alcwzrd.exe 2012-01-25 19:52:35 ----D---- C:\Program Files\Realtek 2012-01-25 19:52:34 ----HD---- C:\Program Files\InstallShield Installation Information 2012-01-25 19:52:32 ----R---- C:\WINDOWS\RtlExUpd.dll 2012-01-25 19:50:04 ----RA---- C:\WINDOWS\system32\fdco1ins.dll 2012-01-25 19:50:04 ----RA---- C:\WINDOWS\system32\fdco1.dll 2012-01-25 19:50:04 ----RA---- C:\WINDOWS\system32\drivers\nvtcp.sys 2012-01-25 19:50:04 ----RA---- C:\WINDOWS\system32\drivers\NVENETFD.sys 2012-01-25 19:50:03 ----RA---- C:\WINDOWS\system32\nvconrm.dll 2012-01-25 19:50:03 ----RA---- C:\WINDOWS\system32\drivers\nvsnpu.sys 2012-01-25 19:50:03 ----RA---- C:\WINDOWS\system32\bdco1ins.dll 2012-01-25 19:50:03 ----RA---- C:\WINDOWS\system32\bdco1.dll 2012-01-25 19:50:03 ----D---- C:\WINDOWS\NV264268.TMP 2012-01-25 19:50:03 ----A---- C:\WINDOWS\system32\nvunrm.exe 2012-01-25 19:50:02 ----RA---- C:\WINDOWS\system32\drivers\nvnrm.sys 2012-01-25 19:50:02 ----RA---- C:\WINDOWS\system32\drivers\nvnetbus.sys 2012-01-25 19:49:52 ----A---- C:\WINDOWS\DFC.INI 2012-01-25 19:48:41 ----RA---- C:\WINDOWS\system32\NVCOI.DLL 2012-01-25 19:48:41 ----RA---- C:\WINDOWS\system32\idecoiins.dll 2012-01-25 19:48:41 ----RA---- C:\WINDOWS\system32\idecoi.dll 2012-01-25 19:48:41 ----N---- C:\WINDOWS\system32\nvuide.exe 2012-01-25 19:48:40 ----RA---- C:\WINDOWS\system32\drivers\nvata.sys 2012-01-25 19:48:40 ----D---- C:\WINDOWS\system32\ReinstallBackups 2012-01-25 19:47:56 ----D---- C:\WINDOWS\system32\Tools 2012-01-25 19:47:32 ----RA---- C:\DBI.EXE 2012-01-25 19:46:09 ----D---- C:\WINDOWS\nview 2012-01-25 19:46:09 ----A---- C:\WINDOWS\system32\nvudisp.exe 2012-01-25 19:46:03 ----A---- C:\WINDOWS\system32\NVUNINST.EXE 2012-01-25 19:45:56 ----D---- C:\Program Files\Common Files\InstallShield 2012-01-25 19:45:56 ----A---- C:\WINDOWS\system32\drivers\nv4_mini.sys 2012-01-25 19:45:55 ----A---- C:\WINDOWS\system32\nwiz.exe 2012-01-25 19:45:55 ----A---- C:\WINDOWS\system32\nvwssr.dll 2012-01-25 19:45:55 ----A---- C:\WINDOWS\system32\nvsvc32.exe 2012-01-25 19:45:55 ----A---- C:\WINDOWS\system32\nvdspsch.exe 2012-01-25 19:45:55 ----A---- C:\WINDOWS\system32\nvcplui.exe 2012-01-25 19:45:55 ----A---- C:\WINDOWS\system32\nvcolor.exe 2012-01-25 19:45:55 ----A---- C:\WINDOWS\system32\nvappbar.exe 2012-01-25 19:45:55 ----A---- C:\WINDOWS\system32\keystone.exe 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwss.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrszht.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrszhc.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrstr.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrssv.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrssl.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrssk.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrsru.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrsptb.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrspt.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrspl.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrsno.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrsnl.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrsko.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrsja.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrsit.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrshu.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrshe.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrsfr.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrsfi.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrsesm.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrses.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrseng.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrsel.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrsde.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrsda.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrscs.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwrsar.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwimg.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwdmcpl.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvwddi.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvvitvsr.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvvitvs.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvshell.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrszht.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrszhc.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrstr.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrssv.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrssl.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrssk.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrsru.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrsptb.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrspt.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrspl.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrsno.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrsnl.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrsko.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrsja.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrsit.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrshu.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrshe.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrsfr.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrsfi.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrsesm.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrses.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrseng.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrsel.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrsde.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrsda.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrscs.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvrsar.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvoglnt.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvnt4cpl.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvmoblsr.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvmobls.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvmctray.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvmccssr.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvmccss.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvmccsrs.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvmccs.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nview.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvgamesr.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvgames.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvexpbar.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvdispsr.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvdisps.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvcpluir.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvcpl.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvcodins.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvcod.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nvapi.dll 2012-01-25 19:45:54 ----A---- C:\WINDOWS\system32\nv4_disp.dll 2012-01-25 19:45:08 ----D---- C:\WINDOWS\system32\DirectX 2012-01-25 19:44:29 ----D---- C:\Program Files\Vtune 2012-01-25 19:44:29 ----A---- C:\WINDOWS\system32\drivers\TBPanel.sys 2012-01-25 19:42:33 ----A---- C:\WINDOWS\system32\wmpns.dll 2012-01-25 19:42:32 ----D---- C:\Documents and Settings\Admin\Application Data\Identities 2012-01-25 19:42:28 ----HD---- C:\Program Files\Uninstall Information 2012-01-25 19:42:16 ----RD---- C:\WINDOWS\OemDrv 2012-01-25 19:42:16 ----A---- C:\WINDOWS\presetup.ini 2012-01-25 19:42:12 ----SD---- C:\Documents and Settings\Admin\Application Data\Microsoft 2012-01-25 19:42:12 ----ASH---- C:\Documents and Settings\Admin\Application Data\desktop.ini 2012-01-25 19:41:52 ----D---- C:\WINDOWS\Prefetch 2012-01-25 19:41:52 ----A---- C:\WINDOWS\SchedLgU.Txt 2012-01-25 19:39:11 ----D---- C:\WINDOWS\system32\xircom 2012-01-25 19:39:11 ----D---- C:\Program Files\xerox 2012-01-25 19:39:11 ----D---- C:\Program Files\microsoft frontpage 2012-01-25 19:38:57 ----AD---- C:\WINDOWS\Cursors 2012-01-25 19:38:53 ----D---- C:\Program Files\VistaDriveIcon 2012-01-25 19:38:51 ----D---- C:\Program Files\VitSoft 2012-01-25 19:38:50 ----A---- C:\WINDOWS\system32\engine.dll 2012-01-25 19:38:50 ----A---- C:\WINDOWS\Cleanup.exe 2012-01-25 19:38:43 ----A---- C:\WINDOWS\system32\drivers\sptd.sys 2012-01-25 19:38:40 ----A---- C:\WINDOWS\system32\oeminfo.ini 2012-01-25 19:38:37 ----SD---- C:\WINDOWS\system32\Microsoft 2012-01-25 19:38:31 ----D---- C:\Program Files\Java 2012-01-25 19:37:05 ----RSD---- C:\WINDOWS\assembly 2012-01-25 19:37:05 ----D---- C:\WINDOWS\Microsoft.NET 2012-01-25 19:37:04 ----D---- C:\WINDOWS\system32\URTTemp 2012-01-25 19:36:38 ----A---- C:\WINDOWS\system32\zlib1.dll 2012-01-25 19:36:38 ----A---- C:\WINDOWS\system32\wrap_oal.dll 2012-01-25 19:36:38 ----A---- C:\WINDOWS\system32\wnaspi32.dll 2012-01-25 19:36:38 ----A---- C:\WINDOWS\system32\Vbrun300.dll 2012-01-25 19:36:38 ----A---- C:\WINDOWS\system32\vbrun200.dll 2012-01-25 19:36:38 ----A---- C:\WINDOWS\system32\vbrun100.dll 2012-01-25 19:36:38 ----A---- C:\WINDOWS\system32\Vb40032.dll 2012-01-25 19:36:38 ----A---- C:\WINDOWS\system32\Vb40016.dll 2012-01-25 19:36:38 ----A---- C:\WINDOWS\system32\ssleay32.dll 2012-01-25 19:36:38 ----A---- C:\WINDOWS\system32\OpenAL32.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\msvcrt10.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\msvcr71.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\msvcr70.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\msvcp71.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\MSVCP70.DLL 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\msvci70.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\MSSTKPRP.DLL 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\msstdfmt.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\MFC71u.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\MFC71KOR.DLL 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\MFC71JPN.DLL 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\MFC71ITA.DLL 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\MFC71FRA.DLL 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\MFC71ESP.DLL 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\MFC71ENU.DLL 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\MFC71DEU.DLL 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\MFC71CHT.DLL 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\MFC71CHS.DLL 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\MFC71.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\mfc70u.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\mfc70kor.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\mfc70jpn.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\mfc70ita.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\mfc70fra.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\mfc70esp.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\mfc70enu.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\mfc70deu.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\mfc70cht.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\mfc70chs.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\mfc70.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\libssl32.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\libeay32.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\atl71.dll 2012-01-25 19:36:37 ----A---- C:\WINDOWS\system32\atl70.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xinput1_3.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xinput1_2.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xinput1_1.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\XAudio2_4.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\XAudio2_3.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\XAudio2_2.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\XAudio2_1.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\XAudio2_0.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xactengine3_4.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xactengine3_3.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xactengine3_2.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xactengine3_1.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xactengine3_0.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xactengine2_9.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xactengine2_8.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xactengine2_7.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xactengine2_6.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xactengine2_5.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xactengine2_4.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xactengine2_3.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xactengine2_2.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xactengine2_10.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xactengine2_1.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\xactengine2_0.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\x3daudio1_2.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll 2012-01-25 19:36:34 ----A---- C:\WINDOWS\system32\d3dx9_41.dll 2012-01-25 19:36:33 ----A---- C:\WINDOWS\system32\d3dx9_40.dll 2012-01-25 19:36:33 ----A---- C:\WINDOWS\system32\d3dx9_39.dll 2012-01-25 19:36:33 ----A---- C:\WINDOWS\system32\d3dx9_38.dll 2012-01-25 19:36:33 ----A---- C:\WINDOWS\system32\d3dx9_37.dll 2012-01-25 19:36:33 ----A---- C:\WINDOWS\system32\d3dx9_36.dll 2012-01-25 19:36:33 ----A---- C:\WINDOWS\system32\d3dx9_35.dll 2012-01-25 19:36:33 ----A---- C:\WINDOWS\system32\d3dx9_34.dll 2012-01-25 19:36:33 ----A---- C:\WINDOWS\system32\d3dx9_33.dll 2012-01-25 19:36:33 ----A---- C:\WINDOWS\system32\d3dx9_32.dll 2012-01-25 19:36:33 ----A---- C:\WINDOWS\system32\d3dx9_31.dll 2012-01-25 19:36:33 ----A---- C:\WINDOWS\system32\d3dx9_30.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\d3dx9_29.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\d3dx9_28.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\d3dx9_27.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\d3dx9_26.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\d3dx9_25.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\d3dx9_24.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\d3dx10_41.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\d3dx10_40.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\d3dx10_39.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\d3dx10_38.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\d3dx10_37.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\d3dx10_36.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\d3dx10_35.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\d3dx10_34.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\d3dx10_33.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\d3dx10.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\d3dcompiler_36.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\d3dcompiler_35.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\d3dcompiler_34.dll 2012-01-25 19:36:32 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll 2012-01-25 19:36:25 ----D---- C:\WINDOWS\system32\CPLDAPU 2012-01-25 19:36:07 ----RASH---- C:\MSDOS.SYS 2012-01-25 19:36:07 ----RASH---- C:\IO.SYS 2012-01-25 19:36:07 ----A---- C:\WINDOWS\control.ini 2012-01-25 19:36:07 ----A---- C:\CONFIG.SYS 2012-01-25 19:36:07 ----A---- C:\AUTOEXEC.BAT 2012-01-25 19:35:57 ----A---- C:\WINDOWS\system32\mapi32.dll 2012-01-25 19:35:14 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest 2012-01-25 19:35:10 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest 2012-01-25 19:35:06 ----HD---- C:\Program Files\WindowsUpdate 2012-01-25 19:35:03 ----D---- C:\Program Files\Online Services 2012-01-25 19:34:55 ----A---- C:\WINDOWS\system32\atrace.dll 2012-01-25 19:34:54 ----A---- C:\WINDOWS\system32\desktop.ini 2012-01-25 19:34:54 ----A---- C:\WINDOWS\desktop.ini 2012-01-25 19:34:46 ----A---- C:\WINDOWS\system32\nmevtmsg.dll 2012-01-25 19:34:45 ----D---- C:\Program Files\Common Files\Services 2012-01-25 19:34:45 ----A---- C:\WINDOWS\system32\acctres.dll 2012-01-25 19:34:43 ----SD---- C:\WINDOWS\Tasks 2012-01-25 19:34:43 ----A---- C:\WINDOWS\system32\icfgnt5.dll 2012-01-25 19:34:42 ----D---- C:\Program Files\Common Files\MSSoap 2012-01-25 19:34:39 ----D---- C:\WINDOWS\system32\Macromed 2012-01-25 19:34:39 ----D---- C:\WINDOWS\srchasst 2012-01-25 19:34:37 ----A---- C:\WINDOWS\system32\wuweb.dll 2012-01-25 19:34:37 ----A---- C:\WINDOWS\system32\wups.dll 2012-01-25 19:34:37 ----A---- C:\WINDOWS\system32\wucltui.dll 2012-01-25 19:34:37 ----A---- C:\WINDOWS\system32\wuauserv.dll 2012-01-25 19:34:37 ----A---- C:\WINDOWS\system32\wuaueng1.dll 2012-01-25 19:34:37 ----A---- C:\WINDOWS\system32\wuaueng.dll 2012-01-25 19:34:36 ----A---- C:\WINDOWS\system32\wuauclt1.exe 2012-01-25 19:34:36 ----A---- C:\WINDOWS\system32\wuauclt.exe 2012-01-25 19:34:36 ----A---- C:\WINDOWS\system32\wuapi.dll 2012-01-25 19:34:36 ----A---- C:\WINDOWS\system32\qmgrprxy.dll 2012-01-25 19:34:36 ----A---- C:\WINDOWS\system32\qmgr.dll 2012-01-25 19:34:36 ----A---- C:\WINDOWS\system32\bitsprx4.dll 2012-01-25 19:34:36 ----A---- C:\WINDOWS\system32\bitsprx3.dll 2012-01-25 19:34:36 ----A---- C:\WINDOWS\system32\bitsprx2.dll 2012-01-25 19:34:33 ----D---- C:\Program Files\Movie Maker 2012-01-25 19:34:19 ----A---- C:\WINDOWS\system32\safrslv.dll 2012-01-25 19:34:19 ----A---- C:\WINDOWS\system32\safrdm.dll 2012-01-25 19:34:19 ----A---- C:\WINDOWS\system32\safrcdlg.dll 2012-01-25 19:34:19 ----A---- C:\WINDOWS\system32\racpldlg.dll 2012-01-25 19:34:16 ----A---- C:\WINDOWS\system32\fltMc.exe 2012-01-25 19:34:16 ----A---- C:\WINDOWS\system32\fltlib.dll 2012-01-25 19:34:16 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys 2012-01-25 19:34:15 ----D---- C:\WINDOWS\system32\Restore 2012-01-25 19:34:15 ----A---- C:\WINDOWS\system32\srsvc.dll 2012-01-25 19:34:15 ----A---- C:\WINDOWS\system32\srrstr.dll 2012-01-25 19:34:15 ----A---- C:\WINDOWS\system32\srclient.dll 2012-01-25 19:34:15 ----A---- C:\WINDOWS\system32\mnmdd.dll 2012-01-25 19:34:15 ----A---- C:\WINDOWS\system32\isrdbg32.dll 2012-01-25 19:34:15 ----A---- C:\WINDOWS\system32\ils.dll 2012-01-25 19:34:15 ----A---- C:\WINDOWS\system32\drivers\sr.sys 2012-01-25 19:34:14 ----A---- C:\WINDOWS\system32\nmmkcert.dll 2012-01-25 19:34:14 ----A---- C:\WINDOWS\system32\msconf.dll 2012-01-25 19:34:14 ----A---- C:\WINDOWS\system32\mnmsrvc.exe 2012-01-25 19:34:12 ----D---- C:\Program Files\NetMeeting 2012-01-25 19:34:12 ----A---- C:\WINDOWS\system32\msoert2.dll 2012-01-25 19:34:12 ----A---- C:\WINDOWS\system32\msoeacct.dll 2012-01-25 19:34:11 ----A---- C:\WINDOWS\system32\inetres.dll 2012-01-25 19:34:11 ----A---- C:\WINDOWS\system32\inetcomm.dll 2012-01-25 19:34:09 ----D---- C:\Program Files\Outlook Express 2012-01-25 19:34:09 ----A---- C:\WINDOWS\system32\schedsvc.dll 2012-01-25 19:34:09 ----A---- C:\WINDOWS\system32\mstinit.exe 2012-01-25 19:34:08 ----A---- C:\WINDOWS\system32\mstask.dll 2012-01-25 19:34:08 ----A---- C:\WINDOWS\system32\isign32.dll 2012-01-25 19:34:08 ----A---- C:\WINDOWS\system32\inetcfg.dll 2012-01-25 19:34:08 ----A---- C:\WINDOWS\system32\icwphbk.dll 2012-01-25 19:34:08 ----A---- C:\WINDOWS\system32\icwdial.dll 2012-01-25 19:34:03 ----D---- C:\Program Files\Common Files\System 2012-01-25 19:33:31 ----D---- C:\Program Files\ComPlus Applications 2012-01-25 19:33:29 ----A---- C:\WINDOWS\vbaddin.ini 2012-01-25 19:33:29 ----A---- C:\WINDOWS\vb.ini 2012-01-25 19:33:25 ----D---- C:\WINDOWS\Registration 2012-01-25 19:33:14 ----A---- C:\WINDOWS\system32\ieframe.dll.mui 2012-01-25 19:33:12 ----A---- C:\WINDOWS\system32\advpack.dll.mui 2012-01-25 19:33:11 ----A---- C:\WINDOWS\system32\winfxdocobj.exe 2012-01-25 19:33:11 ----A---- C:\WINDOWS\system32\msfeedssync.exe 2012-01-25 19:33:08 ----A---- C:\WINDOWS\system32\msfeedsbs.dll 2012-01-25 19:33:06 ----D---- C:\WINDOWS\wbem 2012-01-25 19:33:06 ----D---- C:\Program Files\Internet Explorer 2012-01-25 19:33:05 ----SD---- C:\WINDOWS\Downloaded Program Files 2012-01-25 19:33:05 ----RD---- C:\WINDOWS\Offline Web Pages 2012-01-25 19:33:00 ----D---- C:\Program Files\Windows Media Player 2012-01-25 19:33:00 ----D---- C:\Program Files\Windows Media Connect 2 2012-01-25 19:32:59 ----D---- C:\WINDOWS\system32\PreInstall 2012-01-25 19:32:59 ----A---- C:\WINDOWS\system32\muweb.dll 2012-01-25 19:32:59 ----A---- C:\WINDOWS\system32\mucltui.dll.mui 2012-01-25 19:32:58 ----D---- C:\WINDOWS\SoftwareDistribution 2012-01-25 19:32:58 ----A---- C:\WINDOWS\system32\mucltui.dll 2012-01-25 19:32:58 ----A---- C:\WINDOWS\system32\gpprefcl.dll 2012-01-25 19:32:57 ----A---- C:\WINDOWS\system32\write.exe 2012-01-25 19:32:54 ----A---- C:\WINDOWS\system32\sndvol32.exe 2012-01-25 19:32:53 ----A---- C:\WINDOWS\system32\hticons.dll 2012-01-25 19:32:53 ----A---- C:\WINDOWS\system32\avwav.dll 2012-01-25 19:32:53 ----A---- C:\WINDOWS\system32\avtapi.dll 2012-01-25 19:32:53 ----A---- C:\WINDOWS\system32\avmeter.dll 2012-01-25 19:32:52 ----A---- C:\WINDOWS\system32\winchat.exe 2012-01-25 19:32:49 ----A---- C:\WINDOWS\system32\getuname.dll 2012-01-25 19:32:49 ----A---- C:\WINDOWS\system32\charmap.exe 2012-01-25 19:32:48 ----A---- C:\WINDOWS\system32\winmine.exe 2012-01-25 19:32:48 ----A---- C:\WINDOWS\system32\sol.exe 2012-01-25 19:32:48 ----A---- C:\WINDOWS\system32\calc.exe 2012-01-25 19:32:47 ----A---- C:\WINDOWS\system32\usrlogon.cmd 2012-01-25 19:32:47 ----A---- C:\WINDOWS\system32\tsshutdn.exe 2012-01-25 19:32:47 ----A---- C:\WINDOWS\system32\tslabels.ini 2012-01-25 19:32:47 ----A---- C:\WINDOWS\system32\tskill.exe 2012-01-25 19:32:47 ----A---- C:\WINDOWS\system32\tsdiscon.exe 2012-01-25 19:32:47 ----A---- C:\WINDOWS\system32\tscon.exe 2012-01-25 19:32:47 ----A---- C:\WINDOWS\system32\shadow.exe 2012-01-25 19:32:47 ----A---- C:\WINDOWS\system32\rwinsta.exe 2012-01-25 19:32:47 ----A---- C:\WINDOWS\system32\reset.exe 2012-01-25 19:32:47 ----A---- C:\WINDOWS\system32\regini.exe 2012-01-25 19:32:47 ----A---- C:\WINDOWS\system32\rdpcfgex.dll 2012-01-25 19:32:47 ----A---- C:\WINDOWS\system32\qwinsta.exe 2012-01-25 19:32:47 ----A---- C:\WINDOWS\system32\mshearts.exe 2012-01-25 19:32:47 ----A---- C:\WINDOWS\system32\freecell.exe 2012-01-25 19:32:46 ----A---- C:\WINDOWS\system32\qappsrv.exe 2012-01-25 19:32:46 ----A---- C:\WINDOWS\system32\msg.exe 2012-01-25 19:32:46 ----A---- C:\WINDOWS\system32\msdtcprf.ini 2012-01-25 19:32:46 ----A---- C:\WINDOWS\system32\logoff.exe 2012-01-25 19:32:46 ----A---- C:\WINDOWS\system32\cdmodem.dll 2012-01-25 19:32:42 ----A---- C:\WINDOWS\system32\wmimgmt.msc 2012-01-25 19:32:41 ----A---- C:\WINDOWS\system32\sndrec32.exe 2012-01-25 19:32:41 ----A---- C:\WINDOWS\system32\mplay32.exe 2012-01-25 19:32:41 ----A---- C:\WINDOWS\system32\hypertrm.dll 2012-01-25 19:32:41 ----A---- C:\WINDOWS\system32\accwiz.exe 2012-01-25 19:32:40 ----D---- C:\Program Files\Windows NT 2012-01-25 19:32:40 ----A---- C:\WINDOWS\system32\spider.exe 2012-01-25 19:32:40 ----A---- C:\WINDOWS\system32\mspaint.exe 2012-01-25 19:32:40 ----A---- C:\WINDOWS\system32\clipbrd.exe 2012-01-25 19:32:39 ----A---- C:\WINDOWS\system32\tsgqec.dll 2012-01-25 19:32:39 ----A---- C:\WINDOWS\system32\tscfgwmi.dll 2012-01-25 19:32:39 ----A---- C:\WINDOWS\system32\rhttpaa.dll 2012-01-25 19:32:39 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys 2012-01-25 19:32:39 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys 2012-01-25 19:32:39 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys 2012-01-25 19:32:39 ----A---- C:\WINDOWS\system32\aaclient.dll 2012-01-25 19:32:38 ----A---- C:\WINDOWS\system32\sessmgr.exe 2012-01-25 19:32:38 ----A---- C:\WINDOWS\system32\remotepg.dll 2012-01-25 19:32:38 ----A---- C:\WINDOWS\system32\rdshost.exe 2012-01-25 19:32:38 ----A---- C:\WINDOWS\system32\rdsaddin.exe 2012-01-25 19:32:38 ----A---- C:\WINDOWS\system32\mstscax.dll 2012-01-25 19:32:38 ----A---- C:\WINDOWS\system32\mstsc.exe 2012-01-25 19:32:37 ----D---- C:\WINDOWS\system32\MsDtc 2012-01-25 19:32:37 ----A---- C:\WINDOWS\system32\termsrv.dll 2012-01-25 19:32:37 ----A---- C:\WINDOWS\system32\rdpwsx.dll 2012-01-25 19:32:37 ----A---- C:\WINDOWS\system32\rdpsnd.dll 2012-01-25 19:32:37 ----A---- C:\WINDOWS\system32\rdpclip.exe 2012-01-25 19:32:37 ----A---- C:\WINDOWS\system32\rdchost.dll 2012-01-25 19:32:37 ----A---- C:\WINDOWS\system32\qprocess.exe 2012-01-25 19:32:37 ----A---- C:\WINDOWS\system32\mtxoci.dll 2012-01-25 19:32:37 ----A---- C:\WINDOWS\system32\msdtcuiu.dll 2012-01-25 19:32:37 ----A---- C:\WINDOWS\system32\icaapi.dll 2012-01-25 19:32:37 ----A---- C:\WINDOWS\system32\cfgbkend.dll 2012-01-25 19:32:36 ----A---- C:\WINDOWS\system32\xolehlp.dll 2012-01-25 19:32:36 ----A---- C:\WINDOWS\system32\msdtctm.dll 2012-01-25 19:32:36 ----A---- C:\WINDOWS\system32\msdtcprx.dll 2012-01-25 19:32:36 ----A---- C:\WINDOWS\system32\msdtclog.dll 2012-01-25 19:32:36 ----A---- C:\WINDOWS\system32\msdtc.exe 2012-01-25 19:32:36 ----A---- C:\WINDOWS\system32\dcomcnfg.exe 2012-01-25 19:32:35 ----D---- C:\WINDOWS\system32\Com 2012-01-25 19:32:35 ----A---- C:\WINDOWS\system32\stclient.dll 2012-01-25 19:32:35 ----A---- C:\WINDOWS\system32\mtxlegih.dll 2012-01-25 19:32:35 ----A---- C:\WINDOWS\system32\mtxex.dll 2012-01-25 19:32:35 ----A---- C:\WINDOWS\system32\mtxdm.dll 2012-01-25 19:32:35 ----A---- C:\WINDOWS\system32\comrepl.dll 2012-01-25 19:32:35 ----A---- C:\WINDOWS\system32\comaddin.dll 2012-01-25 19:32:35 ----A---- C:\WINDOWS\system32\colbact.dll 2012-01-25 19:32:35 ----A---- C:\WINDOWS\system32\clbcatex.dll 2012-01-25 19:32:35 ----A---- C:\WINDOWS\system32\catsrvut.dll 2012-01-25 19:32:35 ----A---- C:\WINDOWS\system32\catsrvps.dll 2012-01-25 19:32:35 ----A---- C:\WINDOWS\system32\catsrv.dll 2012-01-25 19:32:34 ----A---- C:\WINDOWS\system32\comuid.dll 2012-01-25 19:32:34 ----A---- C:\WINDOWS\system32\comsvcs.dll 2012-01-25 19:32:34 ----A---- C:\WINDOWS\system32\comsnap.dll 2012-01-25 19:32:34 ----A---- C:\WINDOWS\system32\clbcatq.dll 2012-01-25 19:32:30 ----A---- C:\WINDOWS\system32\servdeps.dll 2012-01-25 19:32:29 ----A---- C:\WINDOWS\system32\mmfutil.dll 2012-01-25 19:32:29 ----A---- C:\WINDOWS\system32\licwmi.dll 2012-01-25 19:32:29 ----A---- C:\WINDOWS\system32\cmprops.dll 2012-01-25 19:32:25 ----A---- C:\WINDOWS\system32\drivers\termdd.sys 2012-01-25 19:32:25 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys ======Список файлов и папок, измененных за последние 3 месяца====== 2012-02-06 21:58:44 ----A---- C:\WINDOWS\win.ini 2012-02-06 21:58:44 ----A---- C:\WINDOWS\system.ini 2012-01-25 19:35:42 ----ASH---- C:\WINDOWS\fonts\desktop.ini 2011-12-19 21:58:55 ----A---- C:\WINDOWS\system32\guard32.dll ======Список драйверов (тип запуска: R=Запущен, S=остановлен, 0=Загрузочный, 1=Системный, 2=Автоматически, 3=Вручную, 4=Отключено)====== R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2006-06-28 105088] R0 snapman;Acronis Snapshots Manager; C:\WINDOWS\system32\DRIVERS\snapman.sys [2012-01-29 170528] R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2012-01-25 721904] R0 tdrpman273;Acronis Try&Decide and Restore Points filter (build 273); C:\WINDOWS\system32\DRIVERS\tdrpm273.sys [2012-01-29 752128] R0 timounter;Acronis Backup Archive Explorer; C:\WINDOWS\system32\DRIVERS\timntr.sys [2012-01-29 600928] R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2011-08-04 118104] R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2011-08-04 61936] R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2011-08-09 154136] R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2011-08-04 147480] R2 exFat;exFat; C:\WINDOWS\system32\drivers\exFat.sys [2009-01-28 133632] R2 NPF;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2010-06-25 35088] R2 rspndr;Ответчик обнаружения топологии уровня связи; C:\WINDOWS\system32\DRIVERS\rspndr.sys [2008-10-11 62848] R2 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2009-11-12 5504] R2 TBPanel;TBPanel; C:\WINDOWS\system32\drivers\TBPanel.sys [2007-03-16 12256] R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2011-08-04 39824] R3 HDAudBus;Драйвер шины Microsoft UAA для High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-15 144384] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-06-14 4299264] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-05-11 6738432] R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-07-11 57856] R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-07-11 20480] S3 afcdp;afcdp; C:\WINDOWS\system32\DRIVERS\afcdp.sys [2012-01-29 167968] S3 Cardex;Cardex; \??\C:\WINDOWS\system32\drivers\TBPANEL.SYS [] S3 USBSTOR;Драйвер запоминающих устройств для USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368] S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2007-06-18 77568] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2007-06-18 82944] ======Список служб (тип запуска: R=Запущена, S=остановлена, 0=Загрузочная, 1=Системная, 2=Автоматически, 3=Вручную, 4=Отключено)====== R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2011-10-12 974944] R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-05-11 163908] S3 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [2010-12-20 804608] S3 afcdpsrv;Служба Acronis Nonstop Backup; C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe [2012-01-29 3246040] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104] S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664] S3 NMSAccess;NMSAccess; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2010-03-04 71096] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136] S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2010-06-25 117264] S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\wmpnetwk.exe [2006-10-18 913408] S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-15 14336] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096] -----------------EOF-----------------