Лог утилиты random's system information tool 1.09 (автор: random/random) Run by Армен at 2012-12-15 15:31:28 Microsoft Windows 7 Домашняя расширенная Системный раздел C: размер 30 GB (10%) Свободно 294 GB Total RAM: 2990 MB (36% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 15:31:31, on 15.12.2012 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v9.00 (9.00.8112.16457) Boot mode: Normal Running processes: C:\Program Files (x86)\Mail.Ru\Guard\GuardMailRu.exe C:\ProgramData\eType Manager\2.4.897.176\{16cdff19-861d-48e3-a751-d99a27784753}\etypemngr.exe C:\Users\Romain\AppData\Local\Yandex\Updater\praetorian.exe C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe C:\Windows\SysWOW64\SupportAppXL\AutoDect.exe C:\Program Files\Sony\VAIO Care\listener.exe C:\Program Files (x86)\Skype\Phone\Skype.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files\trend micro\Romain.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://rambler.ru/r/home?&rpid=self.internal&appid=ie9 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer предоставлен: Rambler R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 86.62.81.52:3128 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.3.8\bh\BabylonToolbar.dll O2 - BHO: uTorrentControl2 - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll O2 - BHO: Спутник@Mail.Ru - {8984B388-A5BB-4DF7-B274-77B879E179DB} - C:\Program Files (x86)\Mail.Ru\Sputnik\MailRuSputnik.dll O2 - BHO: Помощник по входу с помощью идентификатора Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\SEARCH~1\Datamngr\ToolBar\searchqudtx.dll O2 - BHO: AlterGeo Magic Scanner - {9BFBA68E-E21B-458E-AE12-FE85E903D2C1} - C:\Program Files (x86)\AlterGeo\AlterGeo Magic Scanner\2.8.8.615\AlterGeo.BrowserPlugin.dll O2 - BHO: DataMngr - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\PROGRA~2\SEARCH~1\Datamngr\BROWSE~1.DLL O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll O2 - BHO: DataMngr - {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} - C:\PROGRA~2\SEARCH~2\Datamngr\BROWSE~1.DLL O2 - BHO: Визуальные закладки - {C93F72A2-2162-4BBA-A07A-F13663C297A6} - C:\Program Files (x86)\Yandex\YandexBarIE\fastdial.dll O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing) O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O2 - BHO: Search-Results Toolbar - {f34c9277-6577-4dff-b2d7-7d58092f272f} - C:\PROGRA~2\SEARCH~2\Datamngr\SRTOOL~1\searchresultsDx.dll O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll O3 - Toolbar: Яндекс.Бар - {91397D20-1446-11D4-8AF4-0040CA1127B6} - C:\Program Files (x86)\Yandex\YandexBarIE\yndbar.dll O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing) O3 - Toolbar: Rambler-Ассистент - {468CD8A9-7C25-45FA-969E-3D925C689DC4} - C:\Program Files (x86)\Rambler Assistant\ramblertoolbarU5972.dll O3 - Toolbar: Спутник@Mail.Ru - {09900DE8-1DCA-443F-9243-26FF581438AF} - C:\Program Files (x86)\Mail.Ru\Sputnik\MailRuSputnik.dll O3 - Toolbar: uTorrentControl2 Toolbar - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll O3 - Toolbar: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\SEARCH~1\Datamngr\ToolBar\searchqudtx.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O3 - Toolbar: Search-Results Toolbar - {f34c9277-6577-4dff-b2d7-7d58092f272f} - C:\PROGRA~2\SEARCH~2\Datamngr\SRTOOL~1\searchresultsDx.dll O3 - Toolbar: (no name) - {D0F4A166-B8D4-48b8-9D63-80849FE137CB} - (no file) O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" O4 - HKLM\..\Run: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe O4 - HKLM\..\Run: [autodetect] C:\Windows\SysWOW64\SupportAppXL\AutoDect.exe O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~2\SEARCH~2\Datamngr\DATAMN~1.EXE O4 - HKLM\..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe O4 - HKCU\..\Run: [RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent O4 - HKCU\..\Run: [Praetorian] C:\Users\Romain\AppData\Local\Yandex\Updater\praetorian.exe O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Startup: adobe_flash_player.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: Atomic Email Hunter - C:\Program Files (x86)\AtomPark\ePochta Extractor\ie.htm O8 - Extra context menu item: Google ВикиКомментарии... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html O8 - Extra context menu item: Добавить в Rambler-Закладки - res://C:\Program Files (x86)\Rambler Assistant\ramblertoolbarU5972.dll/zakladki.htm O8 - Extra context menu item: Найти с помощью Рамблера - res://C:\Program Files (x86)\Rambler Assistant\ramblertoolbarU5972.dll/search.htm O8 - Extra context menu item: Перевести с помощью словарей Рамблера - res://C:\Program Files (x86)\Rambler Assistant\ramblertoolbarU5972.dll/dic.htm O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Mail.Ru Агент - {7558B7E5-7B26-4201-BEDB-00D5FF534523} - C:\Program Files (x86)\Mail.Ru\Agent\magent.exe O9 - Extra 'Tools' menuitem: Mail.Ru Агент - {7558B7E5-7B26-4201-BEDB-00D5FF534523} - C:\Program Files (x86)\Mail.Ru\Agent\magent.exe O9 - Extra button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra button: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll O9 - Extra 'Tools' menuitem: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll O9 - Extra button: ePochta Extractor - {491A6C2B-1046-486b-8A8F-7D26BCB79A9B} - C:\Program Files (x86)\AtomPark\ePochta Extractor\ie.htm (HKCU) O9 - Extra 'Tools' menuitem: ePochta Extractor - {491A6C2B-1046-486b-8A8F-7D26BCB79A9B} - C:\Program Files (x86)\AtomPark\ePochta Extractor\ie.htm (HKCU) O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O20 - AppInit_DLLs: c:\progra~3\etypem~1\24897~1.176\{16cdf~1\etypem~1.dll O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: eType Manager - Unknown owner - C:\ProgramData\eType Manager\2.4.897.176\{16cdff19-861d-48e3-a751-d99a27784753}\etypemngr.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Guard.Mail.ru - Unknown owner - C:\Program Files (x86)\Mail.Ru\Guard\GuardMailRu.exe O23 - Service: Служба Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Служба Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: Updater Service (IBUpdaterService) - Unknown owner - C:\ProgramData\IBUpdaterService\ibsvc.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: LoviOtvet Service (LoviOtvetUpService) - iTVa Co. Ltd - C:\Program Files (x86)\LoviOtvet\LoviOtvetService.exe O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe O23 - Service: PMBDeviceInfoProvider - Sony Corporation - C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: VAIO Care Performance Service (SampleCollector) - Sony Corporation - C:\Program Files\Sony\VAIO Care\VCPerfService.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: SolidConverterPDFReadSpool (SCPDFReadSpool) - Solid Documents, LLC - C:\Program Files (x86)\SolidDocuments\Solid Converter PDF\SCPDF\SolidConverterPDFServicex64.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: VAIO Media plus Content Importer (SOHCImp) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe O23 - Service: VAIO Media plus Digital Media Server (SOHDms) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe O23 - Service: VAIO Media plus Device Searcher (SOHDs) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe O23 - Service: VAIO Entertainment Common Service (SpfService) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: TicnoSearch - Unknown owner - C:\PROGRA~2\Ticno\Multibar\SearchService.exe O23 - Service: CamMonitor (uCamMonitor) - ArcSoft, Inc. - C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe O23 - Service: VAIO Power Management - Sony Corporation - C:\Program Files\Sony\VAIO Power Management\SPMService.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: VAIO Content Folder Watcher (VCFw) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe O23 - Service: VAIO Content Metadata Intelligent Network Service Manager (VcmINSMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe O23 - Service: VCService - Sony Corporation - C:\Program Files\Sony\VAIO Care\VCService.exe O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: VSNService - Sony Corporation - C:\Program Files\Sony\VAIO Smart Network\VSNService.exe O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: VUAgent - Sony Corporation - C:\Program Files\Sony\VAIO Update Common\VUAgent.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 20069 bytes ======Список процессов====== \SystemRoot\System32\smss.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 winlogon.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\system32\atiesrxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService atieclxx C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe" "C:\ProgramData\eType Manager\2.4.897.176\{16cdff19-861d-48e3-a751-d99a27784753}\etypemngr.exe" "taskhost.exe" taskeng.exe {7C33F70E-5A2F-44C4-85B3-14F004ABA8B1} "C:\Windows\system32\Dwm.exe" C:\Windows\Explorer.EXE taskeng.exe {B9A12FF7-159D-4ED7-92CB-920CA1C8C002} "C:\Program Files (x86)\Mail.Ru\Guard\GuardMailRu.exe" "C:\Program Files (x86)\Mail.Ru\Guard\GuardMailRu.exe" "C:\ProgramData\eType Manager\2.4.897.176\{16cdff19-861d-48e3-a751-d99a27784753}\etypemngr.exe" /PROTECT "C:\Program Files\Sony\VAIO Power Management\SPMgr.exe" /Start "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE3 "C:\ProgramData\IBUpdaterService\ibsvc.exe" /SERVICE "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe" "C:\Program Files (x86)\LoviOtvet\LoviOtvetService.exe" "C:\Program Files\Apoint\Apoint.exe" "C:\Users\Romain\AppData\Local\Yandex\Updater\praetorian.exe" "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" "C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe" "C:\Windows\SysWOW64\SupportAppXL\AutoDect.exe" "C:\Program Files (x86)\Search Results Toolbar\Datamngr\datamngrUI.exe" "C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" "C:\Program Files\TortoiseSVN\bin\TSVNCache.exe" "C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe" C:\Windows\SysWOW64\PnkBstrA.exe "C:\Program Files (x86)\SolidDocuments\Solid Converter PDF\SCPDF\SolidConverterPDFServicex64.exe" "C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE" "C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe" "c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe" "C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe" C:\Windows\system32\svchost.exe -k imgsvc "C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe" "C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe" "C:\Program Files\Sony\VAIO Smart Network\VSNService.exe" "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" "C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe" /Device:000000a1 WLIDSvcM.exe 3472 "C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe" C:\Windows\system32\wbem\wmiprvse.exe "C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE" C:\Windows\system32\SearchIndexer.exe /Embedding C:\Windows\system32\svchost.exe -k bthsvcs C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted "C:\Program Files\Apoint\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113} "C:\Program Files\Apoint\Apvfb.exe" "Apntex.exe" \??\C:\Windows\system32\conhost.exe "-20632975621662303352-1109001250-744713162-719237822-656904244-261655966-235458122 "C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe" /Stationary "C:\Program Files\Sony\VAIO Update Common\VUAgent.exe" C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe" "C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE "C:\Program Files\Sony\VAIO Care\VCPerfService.exe" "/service" "/sstates" "/sampleinterval=5000" "/procinterval=5" "/dllinterval=120" "/counter=\Processor(_Total)\% Processor Time:1/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1" "/counter=\Network Interface(*)\Bytes Total/sec:1" "/expandcounter=\Processor Information(*)\Processor Frequency:1" "/expandcounter=\Processor(*)\% Idle Time:1" "/expandcounter=\Processor(*)\% C1 Time:1" "/expandcounter=\Processor(*)\% C2 Time:1" "/expandcounter=\Processor(*)\% C3 Time:1" "/expandcounter=\Processor(*)\% Processor Time:1" "/directory=C:\ProgramData\Sony Corporation\VAIO Care\inteldata" C:\Program Files\Sony\VAIO Care/listener.exe /silent /slot=0 "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe" "C:\Program Files\Sony\VAIO Power Management\SPMService.exe" C:\Windows\System32\svchost.exe -k secsvcs "C:\Program Files\Windows Media Player\wmpnetwk.exe" "C:\Program Files (x86)\Skype\Phone\Skype.exe" "C:\Program Files\Sony\VAIO Care\VCsystray.exe" "C:\Program Files\Sony\VAIO Care\VCService.exe" taskeng.exe {93E0A090-9C2F-4306-B4B0-8782A8C93326} "C:\Program Files\Windows Sidebar\sidebar.exe" /showGadgets StartVC*SelfHeal*silence+EU\ru-RU "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=ru --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_26/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/last_accessed_socket/ --renderer-print-preview --channel="5948.0.1527340510\848340594" /prefetch:3 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5948.2.337062880\928990500" --gpu-vendor-id=0x1002 --gpu-device-id=0x68c1 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=8.901.2.0 --ignored=" --type=renderer " /prefetch:12 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=ru --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_26/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/last_accessed_socket/ --extension-process --renderer-print-preview --channel="5948.3.535960606\981697149" /prefetch:3 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=ru --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_26/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/last_accessed_socket/ --extension-process --renderer-print-preview --channel="5948.4.987342337\1521179716" /prefetch:3 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=ru --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_26/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/last_accessed_socket/ --extension-process --renderer-print-preview --channel="5948.5.1310177121\310872876" /prefetch:3 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Romain\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.40.135.1_0\McChPlg.dll" --lang=ru --channel="5948.6.1769298703\1148812650" /prefetch:4 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Romain\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph\1.0_0\spext.dll" --lang=ru --channel="5948.7.1056866618\681770209" /prefetch:4 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="5948.8.922854443\1333076588" --lang=ru --ignored=" --type=renderer " /prefetch:13 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=ru --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_26/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/last_accessed_socket/ --renderer-print-preview --channel="5948.14.1345958034\2070844726" /prefetch:3 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=ru --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_26/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/last_accessed_socket/ --renderer-print-preview --channel="5948.16.216604122\1334059791" /prefetch:3 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=ru --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_26/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/last_accessed_socket/ --renderer-print-preview --channel="5948.17.908668748\341732617" /prefetch:3 C:\Windows\system32\wbem\wmiprvse.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=ru --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_26/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/last_accessed_socket/ --renderer-print-preview --channel="5948.20.1415456860\238079828" /prefetch:3 "C:\Users\Romain\Desktop\Новая папка\RSITx64.exe" ======Папка назначеных зданий====== C:\Windows\tasks\Adobe Flash Player Updater.job C:\Windows\tasks\GoogleUpdateTaskMachineCore.job C:\Windows\tasks\GoogleUpdateTaskMachineUA.job ======Снимок реестра====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8984B388-A5BB-4DF7-B274-77B879E179DB}] MailRuBHO Class - C:\Program Files (x86)\Mail.Ru\Sputnik\MailRuSputnik_x64.dll [2011-04-15 1702072] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4f12-8568-69135F087DB0}] DataMngr - C:\PROGRA~2\SEARCH~1\Datamngr\x64\BROWSE~1.DLL [2012-10-22 103864] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-09-20 253584] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}] McAfee SiteAdvisor BHO - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll [2011-08-11 317336] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1ED9DA0-AFD0-4b90-AC6A-D3874F591014}] DataMngr - C:\PROGRA~2\SEARCH~2\Datamngr\x64\BROWSE~1.DLL [2012-10-22 103864] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-11-02 43520] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}] Babylon toolbar helper - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.3.8\bh\BabylonToolbar.dll [2012-10-14 242176] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{687578b9-7132-4a7a-80e4-30ee31099e03}] uTorrentControl2 Toolbar - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll [2011-05-09 176936] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8984B388-A5BB-4DF7-B274-77B879E179DB}] MailRuBHO Class - C:\Program Files (x86)\Mail.Ru\Sputnik\MailRuSputnik.dll [2012-04-03 1601600] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Помощник по входу с помощью идентификатора Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079a25-328f-4bd4-be04-00955acaa0a7}] Searchqu Toolbar - C:\PROGRA~2\SEARCH~1\Datamngr\ToolBar\searchqudtx.dll [2012-02-27 88976] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9BFBA68E-E21B-458E-AE12-FE85E903D2C1}] AlterGeoBHO Class - C:\Program Files (x86)\AlterGeo\AlterGeo Magic Scanner\2.8.8.615\AlterGeo.BrowserPlugin.dll [2010-08-31 257384] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4f12-8568-69135F087DB0}] DataMngr - C:\PROGRA~2\SEARCH~1\Datamngr\BROWSE~1.DLL [2012-10-22 89016] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}] Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10 393600] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-09-20 192144] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-04-15 1164680] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}] McAfee SiteAdvisor BHO - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll [2011-08-11 258120] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1ED9DA0-AFD0-4b90-AC6A-D3874F591014}] DataMngr - C:\PROGRA~2\SEARCH~2\Datamngr\BROWSE~1.DLL [2012-10-22 89016] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C93F72A2-2162-4BBA-A07A-F13663C297A6}] Визуальные закладки - C:\Program Files (x86)\Yandex\YandexBarIE\fastdial.dll [2012-06-04 2771768] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}] Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-02-28 1089288] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-11-10 42272] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f34c9277-6577-4dff-b2d7-7d58092f272f}] Search-Results Toolbar - C:\PROGRA~2\SEARCH~2\Datamngr\SRTOOL~1\searchresultsDx.dll [2012-09-25 89288] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll [2011-08-11 317336] {09900DE8-1DCA-443F-9243-26FF581438AF} - Спутник@Mail.Ru - C:\Program Files (x86)\Mail.Ru\Sputnik\MailRuSputnik_x64.dll [2011-04-15 1702072] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-09-20 253584] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll [2011-08-11 258120] {91397D20-1446-11D4-8AF4-0040CA1127B6} - Яндекс.Бар - C:\Program Files (x86)\Yandex\YandexBarIE\yndbar.dll [2012-06-04 8921912] {8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-02-28 1089288] {468CD8A9-7C25-45FA-969E-3D925C689DC4} - Rambler-Ассистент - C:\Program Files (x86)\Rambler Assistant\ramblertoolbarU5972.dll [2011-01-24 1234008] {09900DE8-1DCA-443F-9243-26FF581438AF} - Спутник@Mail.Ru - C:\Program Files (x86)\Mail.Ru\Sputnik\MailRuSputnik.dll [2012-04-03 1601600] {687578b9-7132-4a7a-80e4-30ee31099e03} - uTorrentControl2 Toolbar - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll [2011-05-09 176936] {99079a25-328f-4bd4-be04-00955acaa0a7} - Searchqu Toolbar - C:\PROGRA~2\SEARCH~1\Datamngr\ToolBar\searchqudtx.dll [2012-02-27 88976] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-09-20 192144] {f34c9277-6577-4dff-b2d7-7d58092f272f} - Search-Results Toolbar - C:\PROGRA~2\SEARCH~2\Datamngr\SRTOOL~1\searchresultsDx.dll [2012-09-25 89288] {98889811-442D-49dd-99D7-DC866BE87DBC} - Babylon Toolbar - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.3.8\BabylonToolbarTlbr.dll [2012-10-14 314368] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-06-01 10775584] "RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2010-06-01 2040352] "Apoint"=C:\Program Files\Apoint\Apoint.exe [2010-06-01 212480] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "RGSC"=C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent [] "Praetorian"=C:\Users\Romain\AppData\Local\Yandex\Updater\praetorian.exe [2012-06-04 1582976] "swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-11-02 39408] "DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912] "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount] C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe -automount [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\bcc5ed67fc1fe1bcccd7d239e86d7a4043bae821] iexplore.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DS3 Tool] C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe [2012-06-27 104768] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM] C:\Program Files (x86)\Electronic Arts\EADM\EADMUI.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GameXN] C:\ProgramData\GameXN\GameXNGO.exe [2012-03-15 347008] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GameXN (news)] C:\ProgramData\GameXN\GameXNGO.exe [2012-03-15 347008] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GameXN (update)] C:\ProgramData\GameXN\GameXNGO.exe [2012-03-15 347008] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Guard.Mail.ru.gui] C:\Program Files (x86)\Mail.Ru\Guard\GuardMailRu.exe [2012-11-14 2259560] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HFALoader] C:\Program Files (x86)\Hamster Soft\Hamster Lite Archiver\HamsterArc.exe -loader [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ] C:\Program Files (x86)\ICQ7.7\ICQ.exe [2011-12-31 127040] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MAgent] C:\Program Files (x86)\Mail.Ru\Agent\magent.exe [2011-04-15 12263616] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MediaGet2] C:\Users\Romain\AppData\Local\MediaGet2\mediaget.exe --minimized [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\multibar.exe] C:\Program Files (x86)\Ticno\Multibar\multibar.exe [2012-01-26 510976] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Praetorian] C:\Users\Romain\AppData\Local\Yandex\Updater\praetorian.exe [2012-06-04 1582976] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-11-02 39408] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\wmagent.exe] C:\Program Files (x86)\WebMoney Agent\wmagent.exe [2009-10-19 210400] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^BDARemote.lnk] C:\PROGRA~2\USBTV~1\EM28XX\BDAREM~1.EXE [2007-06-26 81997] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk] C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe [2010-06-09 1128224] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Tabs.lnk] C:\PROGRA~2\Ticno\Tabs\TICNOT~1.EXE [2012-06-19 965712] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^USB-модем Билайн.lnk] C:\PROGRA~2\USB-~1\UIMain.exe [2010-03-15 564048] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2010-03-04 284696] "ISBMgr.exe"=C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2010-05-31 673136] "PMBVolumeWatcher"=C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [2010-06-01 600928] "autodetect"=C:\Windows\SysWOW64\SupportAppXL\AutoDect.exe [2010-03-15 129872] "StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun [] "DATAMNGR"=C:\PROGRA~2\SEARCH~2\Datamngr\DATAMN~1.EXE [2012-10-22 1899448] "Norton Online Backup"=C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2012-10-31 3056576] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Adobe Gamma Loader.lnk - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe C:\Users\Romain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup adobe_flash_player.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="C:\PROGRA~2\SEARCH~2\Datamngr\x64\datamngr.dll C:\PROGRA~2\SEARCH~2\Datamngr\x64\IEBHO.dll " [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\Windows\system32\igfxdev.dll [2010-06-25 269824] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 "NoDriveTypeAutoRun"=28 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "VIDC.XVID"=xvidvfw.dll "VIDC.FPS1"=frapsv64.dll ======Ассоциации файлов====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======Список файлов и папок, созданных за последние 3 месяца====== 2012-12-13 23:57:24 ----D---- C:\ProgramData\Media Center Programs 2012-12-13 23:25:38 ----SHD---- C:\Windows\ftpcache 2012-12-13 16:36:25 ----D---- C:\Program Files (x86)\Stalker Silver Edition 2012-12-13 15:45:51 ----A---- C:\Windows\SYSWOW64\mshtmled.dll 2012-12-13 15:45:51 ----A---- C:\Windows\system32\mshtmled.dll 2012-12-13 15:45:50 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2012-12-13 15:45:50 ----A---- C:\Windows\SYSWOW64\ieui.dll 2012-12-13 15:45:49 ----A---- C:\Windows\SYSWOW64\url.dll 2012-12-13 15:45:49 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2012-12-13 15:45:49 ----A---- C:\Windows\system32\url.dll 2012-12-13 15:45:49 ----A---- C:\Windows\system32\ieUnatt.exe 2012-12-13 15:45:49 ----A---- C:\Windows\system32\ieui.dll 2012-12-13 15:45:48 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2012-12-13 15:45:48 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2012-12-13 15:45:48 ----A---- C:\Windows\system32\urlmon.dll 2012-12-13 15:45:48 ----A---- C:\Windows\system32\msfeeds.dll 2012-12-13 15:45:48 ----A---- C:\Windows\system32\jscript9.dll 2012-12-13 15:45:46 ----A---- C:\Windows\SYSWOW64\wininet.dll 2012-12-13 15:45:46 ----A---- C:\Windows\system32\wininet.dll 2012-12-13 15:45:45 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2012-12-13 15:45:45 ----A---- C:\Windows\SYSWOW64\jscript.dll 2012-12-13 15:45:45 ----A---- C:\Windows\system32\vbscript.dll 2012-12-13 15:45:45 ----A---- C:\Windows\system32\jsproxy.dll 2012-12-13 15:45:45 ----A---- C:\Windows\system32\jscript.dll 2012-12-13 15:45:44 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2012-12-13 15:45:44 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2012-12-13 15:45:44 ----A---- C:\Windows\system32\iertutil.dll 2012-12-13 15:45:41 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2012-12-13 15:45:40 ----A---- C:\Windows\system32\mshtml.dll 2012-12-13 15:45:39 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2012-12-13 15:45:39 ----A---- C:\Windows\system32\ieframe.dll 2012-12-13 15:16:00 ----A---- C:\Windows\SYSWOW64\drivers\vdm3mzgy.sys 2012-12-13 15:04:15 ----A---- C:\Windows\SYSWOW64\drivers\utm3mzgy.sys 2012-12-13 13:53:18 ----D---- C:\rsit 2012-12-13 13:53:18 ----D---- C:\Program Files\trend micro 2012-12-13 13:37:12 ----A---- C:\Windows\SYSWOW64\tzres.dll 2012-12-13 13:37:12 ----A---- C:\Windows\system32\tzres.dll 2012-12-13 13:36:51 ----A---- C:\Windows\system32\win32k.sys 2012-12-13 13:36:50 ----A---- C:\Windows\SYSWOW64\atmlib.dll 2012-12-13 13:36:50 ----A---- C:\Windows\SYSWOW64\atmfd.dll 2012-12-13 13:36:50 ----A---- C:\Windows\system32\atmlib.dll 2012-12-13 13:36:50 ----A---- C:\Windows\system32\atmfd.dll 2012-12-13 13:36:38 ----A---- C:\Windows\system32\KernelBase.dll 2012-12-13 13:36:37 ----A---- C:\Windows\system32\winsrv.dll 2012-12-13 13:36:37 ----A---- C:\Windows\system32\kernel32.dll 2012-12-13 13:36:36 ----A---- C:\Windows\SYSWOW64\KernelBase.dll 2012-12-13 13:36:36 ----A---- C:\Windows\SYSWOW64\kernel32.dll 2012-12-13 13:36:36 ----A---- C:\Windows\system32\conhost.exe 2012-12-13 13:36:35 ----A---- C:\Windows\SYSWOW64\setup16.exe 2012-12-13 13:36:35 ----A---- C:\Windows\system32\wow64win.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2012-12-13 13:36:34 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2012-12-13 13:36:34 ----A---- C:\Windows\SYSWOW64\wow32.dll 2012-12-13 13:36:34 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll 2012-12-13 13:36:34 ----A---- C:\Windows\SYSWOW64\instnm.exe 2012-12-13 13:36:34 ----A---- C:\Windows\system32\wow64cpu.dll 2012-12-13 13:36:34 ----A---- C:\Windows\system32\wow64.dll 2012-12-13 13:36:34 ----A---- C:\Windows\system32\ntvdm64.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2012-12-13 13:36:33 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2012-12-13 13:36:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll 2012-12-13 13:36:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll 2012-12-13 13:36:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll 2012-12-13 13:36:28 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2012-12-13 13:36:28 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2012-12-13 13:36:28 ----A---- C:\Windows\SYSWOW64\user.exe 2012-12-13 13:35:47 ----A---- C:\Windows\SYSWOW64\dpnet.dll 2012-12-13 13:35:47 ----A---- C:\Windows\system32\dpnet.dll 2012-12-13 13:35:45 ----A---- C:\Windows\system32\drivers\volsnap.sys 2012-11-30 16:36:26 ----D---- C:\ProgramData\Orbit 2012-11-30 16:15:11 ----D---- C:\Program Files (x86)\Far Cry 3.Deluxe Edition.v 1.01 2012-11-28 15:45:37 ----D---- C:\Program Files (x86)\eMail Extractor 2012-11-26 20:20:41 ----D---- C:\Users\Romain\AppData\Roaming\AtomPark 2012-11-26 20:20:41 ----D---- C:\Program Files (x86)\AtomPark 2012-11-15 19:28:10 ----D---- C:\Program Files (x86)\Games 2012-11-15 18:55:11 ----A---- C:\Windows\SYSWOW64\synceng.dll 2012-11-15 18:55:11 ----A---- C:\Windows\system32\synceng.dll 2012-11-15 00:15:52 ----A---- C:\Windows\system32\Wdfres.dll 2012-11-15 00:15:52 ----A---- C:\Windows\system32\drivers\WdfLdr.sys 2012-11-15 00:15:52 ----A---- C:\Windows\system32\drivers\Wdf01000.sys 2012-11-15 00:06:38 ----A---- C:\Windows\system32\drivers\WUDFRd.sys 2012-11-15 00:06:38 ----A---- C:\Windows\system32\drivers\WUDFPf.sys 2012-11-15 00:06:36 ----A---- C:\Windows\system32\WUDFSvc.dll 2012-11-15 00:06:36 ----A---- C:\Windows\system32\WUDFPlatform.dll 2012-11-15 00:06:36 ----A---- C:\Windows\system32\WUDFCoinstaller.dll 2012-11-15 00:06:35 ----A---- C:\Windows\system32\WUDFx.dll 2012-11-15 00:06:35 ----A---- C:\Windows\system32\WUDFHost.exe 2012-10-26 12:57:52 ----D---- C:\Program Files (x86)\BabylonToolbar 2012-10-26 12:57:29 ----D---- C:\Users\Romain\AppData\Roaming\PerformerSoft 2012-10-26 12:57:28 ----A---- C:\Windows\system32\roboot64.exe 2012-10-26 12:57:21 ----D---- C:\Users\Romain\AppData\Roaming\Babylon 2012-10-26 12:57:21 ----D---- C:\ProgramData\Babylon 2012-10-26 12:57:12 ----D---- C:\ProgramData\eType Manager 2012-10-26 12:57:03 ----D---- C:\Users\Romain\AppData\Roaming\eType 2012-10-26 12:57:03 ----D---- C:\ProgramData\IBUpdaterService 2012-10-26 12:39:24 ----D---- C:\Program Files (x86)\Search Results Toolbar 2012-10-25 13:40:42 ----D---- C:\Program Files (x86)\R.G. World Games 2012-10-17 09:48:53 ----HD---- C:\SPLASH.SYS 2012-10-16 21:18:16 ----D---- C:\ProgramData\RELOADED 2012-10-16 20:29:19 ----D---- C:\Program Files (x86)\DangeSecond 2012-10-16 19:16:30 ----A---- C:\Windows\system32\drivers\ntfs.sys 2012-10-16 19:16:26 ----A---- C:\Windows\system32\ntoskrnl.exe 2012-10-16 19:16:24 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe 2012-10-16 19:16:24 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe 2012-10-16 19:15:52 ----A---- C:\Windows\SYSWOW64\wintrust.dll 2012-10-16 19:15:52 ----A---- C:\Windows\system32\wintrust.dll 2012-10-16 19:15:17 ----A---- C:\Windows\SYSWOW64\kerberos.dll 2012-10-16 19:15:17 ----A---- C:\Windows\system32\kerberos.dll 2012-10-16 19:14:59 ----A---- C:\Windows\system32\crypt32.dll 2012-10-16 19:14:58 ----A---- C:\Windows\SYSWOW64\crypt32.dll 2012-10-16 19:14:58 ----A---- C:\Windows\system32\cryptsvc.dll 2012-10-16 19:14:57 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll 2012-10-16 19:14:57 ----A---- C:\Windows\SYSWOW64\cryptnet.dll 2012-10-16 19:14:57 ----A---- C:\Windows\system32\cryptnet.dll 2012-10-03 22:00:08 ----D---- C:\ProgramData\gamemaker_studio 2012-09-27 17:09:31 ----D---- C:\Program Files (x86)\F1 2012 2012-09-22 07:41:39 ----A---- C:\Windows\system32\drivers\bthport.sys 2012-09-22 07:17:38 ----A---- C:\Windows\SYSWOW64\wmi.dll 2012-09-22 07:17:38 ----A---- C:\Windows\SYSWOW64\imagehlp.dll 2012-09-22 07:17:38 ----A---- C:\Windows\system32\wmi.dll 2012-09-22 07:17:38 ----A---- C:\Windows\system32\imagehlp.dll 2012-09-22 07:17:38 ----A---- C:\Windows\system32\drivers\fs_rec.sys 2012-09-21 15:40:02 ----A---- C:\Windows\SYSWOW64\d2d1.dll 2012-09-21 15:40:01 ----A---- C:\Windows\SYSWOW64\DWrite.dll 2012-09-21 15:40:01 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll 2012-09-21 15:40:01 ----A---- C:\Windows\system32\DWrite.dll 2012-09-21 15:40:01 ----A---- C:\Windows\system32\d3d10warp.dll 2012-09-21 15:40:01 ----A---- C:\Windows\system32\d3d10_1core.dll 2012-09-21 15:40:00 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll 2012-09-21 15:40:00 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll 2012-09-21 15:40:00 ----A---- C:\Windows\system32\d3d10_1.dll 2012-09-21 15:40:00 ----A---- C:\Windows\system32\d2d1.dll 2012-09-21 15:39:56 ----A---- C:\Windows\SYSWOW64\srclient.dll 2012-09-21 15:39:56 ----A---- C:\Windows\system32\srcore.dll 2012-09-21 15:38:20 ----A---- C:\Windows\SYSWOW64\msxml6.dll 2012-09-21 15:38:20 ----A---- C:\Windows\system32\msxml6.dll 2012-09-21 15:38:20 ----A---- C:\Windows\system32\msxml3.dll 2012-09-21 15:38:19 ----A---- C:\Windows\SYSWOW64\msxml3.dll 2012-09-21 15:38:13 ----A---- C:\Windows\SYSWOW64\win32spl.dll 2012-09-21 15:38:13 ----A---- C:\Windows\system32\win32spl.dll 2012-09-21 15:38:13 ----A---- C:\Windows\system32\spoolsv.exe 2012-09-21 15:38:13 ----A---- C:\Windows\splwow64.exe 2012-09-21 15:38:01 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll 2012-09-21 15:38:01 ----A---- C:\Windows\system32\d3d10level9.dll 2012-09-21 15:37:53 ----A---- C:\Windows\system32\shell32.dll 2012-09-21 15:37:51 ----A---- C:\Windows\SYSWOW64\shell32.dll 2012-09-21 15:37:47 ----A---- C:\Windows\system32\rdrmemptylst.exe 2012-09-21 15:37:47 ----A---- C:\Windows\system32\rdpwsx.dll 2012-09-21 15:37:47 ----A---- C:\Windows\system32\rdpcorekmts.dll 2012-09-21 15:37:42 ----A---- C:\Windows\system32\schannel.dll 2012-09-21 15:37:42 ----A---- C:\Windows\system32\drivers\cng.sys 2012-09-21 15:37:41 ----A---- C:\Windows\SYSWOW64\schannel.dll 2012-09-21 15:37:41 ----A---- C:\Windows\SYSWOW64\ncrypt.dll 2012-09-21 15:37:41 ----A---- C:\Windows\system32\ncrypt.dll 2012-09-21 15:37:41 ----A---- C:\Windows\system32\drivers\ksecpkg.sys 2012-09-21 15:37:41 ----A---- C:\Windows\system32\drivers\ksecdd.sys 2012-09-21 15:37:40 ----A---- C:\Windows\SYSWOW64\sspicli.dll 2012-09-21 15:37:40 ----A---- C:\Windows\SYSWOW64\secur32.dll 2012-09-21 15:37:37 ----A---- C:\Windows\system32\profsvc.dll 2012-09-21 15:32:32 ----A---- C:\Windows\system32\drivers\rdpwd.sys 2012-09-21 15:32:31 ----A---- C:\Windows\system32\drivers\partmgr.sys 2012-09-21 15:32:28 ----A---- C:\Windows\system32\msi.dll 2012-09-21 15:32:27 ----A---- C:\Windows\SYSWOW64\msi.dll 2012-09-21 15:26:13 ----A---- C:\Windows\SYSWOW64\netapi32.dll 2012-09-21 15:26:13 ----A---- C:\Windows\SYSWOW64\browcli.dll 2012-09-21 15:26:13 ----A---- C:\Windows\system32\netapi32.dll 2012-09-21 15:26:13 ----A---- C:\Windows\system32\browser.dll 2012-09-21 15:26:13 ----A---- C:\Windows\system32\browcli.dll 2012-09-21 15:25:32 ----A---- C:\Windows\system32\localspl.dll 2012-09-21 15:25:29 ----A---- C:\Windows\system32\drivers\tcpip.sys 2012-09-21 14:28:15 ----A---- C:\Windows\system32\wups2.dll 2012-09-21 14:28:15 ----A---- C:\Windows\system32\wucltux.dll 2012-09-21 14:28:15 ----A---- C:\Windows\system32\wuaueng.dll 2012-09-21 14:28:15 ----A---- C:\Windows\system32\wuauclt.exe 2012-09-21 14:27:54 ----A---- C:\Windows\system32\wups.dll 2012-09-21 14:27:54 ----A---- C:\Windows\system32\wudriver.dll 2012-09-21 14:27:54 ----A---- C:\Windows\system32\wuapi.dll 2012-09-21 14:27:17 ----A---- C:\Windows\system32\wuwebv.dll 2012-09-21 14:27:17 ----A---- C:\Windows\system32\wuapp.exe ======Список файлов и папок, измененных за последние 3 месяца====== 2012-12-15 15:31:31 ----D---- C:\Windows\Temp 2012-12-15 15:29:46 ----D---- C:\Windows\Prefetch 2012-12-15 15:27:12 ----D---- C:\Users\Romain\AppData\Roaming\Skype 2012-12-15 12:34:20 ----D---- C:\Windows\system32\config 2012-12-15 12:23:05 ----A---- C:\Windows\SYSWOW64\log.txt 2012-12-15 12:23:04 ----D---- C:\Windows\system32\Tasks 2012-12-15 09:39:05 ----D---- C:\Users\Romain\AppData\Roaming\SoftGrid Client 2012-12-15 09:32:51 ----D---- C:\Windows\System32 2012-12-15 09:32:51 ----D---- C:\Windows\inf 2012-12-15 09:32:51 ----A---- C:\Windows\system32\PerfStringBackup.INI 2012-12-15 00:55:07 ----SHD---- C:\System Volume Information 2012-12-14 19:37:27 ----SHD---- C:\Windows\Installer 2012-12-14 19:37:26 ----SHD---- C:\Config.Msi 2012-12-14 18:46:33 ----D---- C:\Windows\rescache 2012-12-14 15:46:58 ----D---- C:\Windows 2012-12-14 15:45:58 ----D---- C:\ProgramData\DAEMON Tools Lite 2012-12-14 15:41:07 ----D---- C:\Windows\Minidump 2012-12-14 00:44:20 ----D---- C:\Users\Romain\AppData\Roaming\uTorrent 2012-12-13 23:57:24 ----HD---- C:\ProgramData 2012-12-13 16:36:25 ----D---- C:\Program Files (x86) 2012-12-13 16:32:36 ----D---- C:\ProgramData\Origin 2012-12-13 16:27:08 ----D---- C:\Users\Romain\AppData\Roaming\Origin 2012-12-13 16:27:03 ----D---- C:\Program Files (x86)\Origin 2012-12-13 15:59:28 ----D---- C:\Windows\winsxs 2012-12-13 15:55:23 ----D---- C:\Windows\SYSWOW64\ru-RU 2012-12-13 15:55:23 ----D---- C:\Windows\SYSWOW64\en-US 2012-12-13 15:55:23 ----D---- C:\Windows\SysWOW64 2012-12-13 15:55:23 ----D---- C:\Windows\system32\ru-RU 2012-12-13 15:55:23 ----D---- C:\Windows\system32\en-US 2012-12-13 15:55:19 ----D---- C:\Windows\AppPatch 2012-12-13 15:55:18 ----D---- C:\Windows\SYSWOW64\migration 2012-12-13 15:55:18 ----D---- C:\Program Files (x86)\Internet Explorer 2012-12-13 15:55:17 ----D---- C:\Windows\system32\migration 2012-12-13 15:55:16 ----D---- C:\Program Files\Internet Explorer 2012-12-13 15:55:11 ----D---- C:\Windows\system32\DriverStore 2012-12-13 15:55:08 ----D---- C:\Windows\system32\drivers 2012-12-13 15:48:08 ----A---- C:\Windows\system32\MRT.exe 2012-12-13 15:46:33 ----D---- C:\Windows\system32\catroot2 2012-12-13 15:46:33 ----D---- C:\Windows\system32\catroot 2012-12-13 15:16:00 ----D---- C:\Windows\SYSWOW64\drivers 2012-12-13 13:53:18 ----RD---- C:\Program Files 2012-12-12 20:08:34 ----D---- C:\Users\Romain\AppData\Roaming\vlc 2012-12-12 20:02:39 ----AD---- C:\ProgramData\TEMP 2012-12-12 19:27:57 ----D---- C:\Users\Romain\AppData\Roaming\WebMoney 2012-12-12 16:35:40 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2012-12-03 00:42:20 ----D---- C:\Users\Romain\AppData\Roaming\.MinecraftZone 2012-12-02 19:55:04 ----D---- C:\Games 2012-12-02 18:01:01 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2012-12-02 17:59:59 ----D---- C:\ProgramData\Ubisoft 2012-12-02 00:27:58 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe 2012-11-30 16:32:26 ----D---- C:\Windows\SYSWOW64\directx 2012-11-30 16:31:54 ----HD---- C:\Windows\msdownld.tmp 2012-11-28 13:44:29 ----D---- C:\ProgramData\Skype 2012-11-28 13:44:23 ----RD---- C:\Program Files (x86)\Skype 2012-11-28 13:44:23 ----D---- C:\Program Files (x86)\Common Files 2012-11-26 20:49:37 ----D---- C:\Program Files (x86)\ICQ7.7 2012-11-26 20:49:30 ----D---- C:\Users\Romain\AppData\Roaming\ICQ 2012-11-24 13:40:29 ----D---- C:\Windows\Microsoft.NET 2012-11-24 13:40:28 ----RSD---- C:\Windows\assembly 2012-11-23 14:46:51 ----D---- C:\Program Files\Common Files\Microsoft Shared 2012-11-21 13:41:36 ----D---- C:\Windows\Tasks 2012-11-21 13:41:36 ----D---- C:\Windows\system32\wfp 2012-11-21 13:41:25 ----D---- C:\Windows\AppCompat 2012-11-21 13:41:15 ----D---- C:\Windows\system32\wbem 2012-11-21 13:41:15 ----D---- C:\Windows\registration 2012-11-15 14:07:27 ----D---- C:\Windows\system32\drivers\ru-RU 2012-11-15 14:07:21 ----RSD---- C:\Windows\Fonts 2012-11-14 23:16:07 ----D---- C:\ProgramData\Guard.Mail.Ru 2012-11-12 01:18:20 ----D---- C:\Windows\system32\CodeIntegrity 2012-11-05 13:22:30 ----D---- C:\ProgramData\boost_interprocess 2012-10-28 02:12:03 ----D---- C:\Fraps 2012-10-26 13:01:52 ----D---- C:\Windows\SYSWOW64\SupportAppCB 2012-10-22 08:16:01 ----D---- C:\Windows\system32\NDF 2012-10-18 07:41:41 ----D---- C:\Update 2012-10-17 09:48:50 ----D---- C:\Program Files (x86)\Downloaded Installations 2012-10-16 00:33:37 ----D---- C:\Users\Romain\AppData\Roaming\Adobe 2012-10-16 00:33:37 ----D---- C:\ProgramData\Adobe 2012-09-27 17:40:19 ----D---- C:\ProgramData\Codemasters 2012-09-22 07:47:30 ----D---- C:\Program Files (x86)\Microsoft Silverlight 2012-09-22 07:16:24 ----D---- C:\Program Files\Windows Journal 2012-09-22 07:09:35 ----D---- C:\Users\Romain\AppData\Roaming\skypePM 2012-09-22 00:09:04 ----D---- C:\ProgramData\Skype Extras 2012-09-16 01:33:19 ----D---- C:\Users\Romain\AppData\Roaming\Awesomium ======Список драйверов (тип запуска: R=Запущен, S=остановлен, 0=Загрузочный, 1=Системный, 2=Автоматически, 3=Вручную, 4=Отключено)====== R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2010-03-04 540696] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-06-19 213888] R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-08-10 526392] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] R2 rimspci;rimspci; C:\Windows\system32\drivers\rimssne64.sys [2010-06-24 94208] R2 risdsnpe;risdsnpe; C:\Windows\system32\drivers\risdsne64.sys [2010-06-24 78848] R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\Windows\system32\DRIVERS\RMCAST.sys [2009-07-14 145920] R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-10-07 10207232] R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-10-07 317952] R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2010-06-01 299568] R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect; C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2009-05-26 19968] R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-06-01 1573888] R3 BthEnum;Драйвер блока запроса Bluetooth; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984] R3 BthPan;Устройства Bluetooth (личной сети); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784] R3 BTHUSB;Драйвер порта USB радиомодуля Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384] R3 btwampfl;Bluetooth AMP USB Filter; C:\Windows\system32\drivers\btwampfl.sys [2010-06-24 342056] R3 btwaudio;Аудиоустройствоî Bluetooth; C:\Windows\system32\drivers\btwaudio.sys [2010-06-24 102952] R3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\DRIVERS\btwavdt.sys [2010-06-24 135720] R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2010-06-24 39464] R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-06-24 21544] R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-05-29 56344] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-06-01 2357024] R3 RFCOMM;Устройство Bluetooth (протокол RFCOMM TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720] R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2010-06-01 231328] R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-10-10 109056] R3 SFEP;Sony Firmware Extension Parser; C:\Windows\system32\DRIVERS\SFEP.sys [2010-04-27 12032] R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264] R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648] R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960] R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376] R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920] S1 vdm3mzgy;AVZ-BC Kernel Driver; \??\C:\Windows\system32\Drivers\vdm3mzgy.sys [] S2 eusk2par;EUTRON SmartKey Parallel Driver; \??\C:\Windows\system32\Drivers\eusk2par.sys [] S2 Sentinel;Sentinel; C:\Windows\System32\Drivers\SENTINEL.SYS [] S3 ATICDSDr;ATICDSDr; \??\C:\Users\3901~1\AppData\Local\Temp\ATICDSDr.sys [] S3 BTHPORT;Драйвер порта Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552448] S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488] S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-06-25 10326784] S3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2010-05-29 158976] S3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-06-25 271872] S3 libusb0;LibUsb-Win32 - Kernel Driver; C:\Windows\system32\drivers\libusb0.sys [] S3 massfilter;ZTE Mass Storage Filter Driver; C:\Windows\system32\drivers\massfilter.sys [] S3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver; C:\Windows\system32\DRIVERS\MijXfilt.sys [2012-06-27 121416] S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2010-12-02 19968] S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2011-08-17 27136] S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys [2010-12-02 12800] S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2010-12-02 171008] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2011-08-17 9216] S3 usbser;USB Modem Driver; C:\Windows\system32\DRIVERS\usbser.sys [2009-07-14 32768] S3 utm3mzgy;AVZ Kernel Driver; \??\C:\Windows\system32\Drivers\utm3mzgy.sys [] S3 VBTUSB;VBTUSB.Sys VAIO Bluetooth Driver over USB device; C:\Windows\System32\Drivers\VBTUSB.sys [2010-06-17 14848] S4 RsFx0103;RsFx0103 Driver; C:\Windows\system32\DRIVERS\RsFx0103.sys [2009-03-30 311656] ======Список служб (тип запуска: R=Запущена, S=остановлена, 0=Загрузочная, 1=Системная, 2=Автоматически, 3=Вручную, 4=Отключено)====== R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-10-07 204288] R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-06-09 952096] R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624] R2 eType Manager;eType Manager; C:\ProgramData\eType Manager\2.4.897.176\{16cdff19-861d-48e3-a751-d99a27784753}\etypemngr.exe [2012-11-02 2400792] R2 Guard.Mail.ru;Guard.Mail.ru; C:\Program Files (x86)\Mail.Ru\Guard\GuardMailRu.exe [2012-11-14 2259560] R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-04 13336] R2 IBUpdaterService;Updater Service; C:\ProgramData\IBUpdaterService\ibsvc.exe [2012-10-26 604928] R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-05-29 268824] R2 LoviOtvetUpService;LoviOtvet Service; C:\Program Files (x86)\LoviOtvet\LoviOtvetService.exe [2011-10-18 3682949] R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2012-10-31 4177856] R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2010-06-01 367456] R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-03-16 76888] R2 SampleCollector;VAIO Care Performance Service; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [2011-01-29 259192] R2 SCPDFReadSpool;SolidConverterPDFReadSpool; C:\Program Files (x86)\SolidDocuments\Solid Converter PDF\SCPDF\SolidConverterPDFServicex64.exe [2011-10-21 209920] R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648] R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776] R2 SQLWriter;Модуль сервера SQL Server для записи VSS; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-07-10 157720] R2 StarWindServiceAE;StarWind AE Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-24 370688] R2 uCamMonitor;CamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2008-09-18 104960] R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-05-29 2320920] R2 VAIO Event Service;VAIO Event Service; C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe [2010-05-31 217968] R2 VAIO Power Management;VAIO Power Management; C:\Program Files\Sony\VAIO Power Management\SPMService.exe [2010-06-21 575856] R2 VSNService;VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [2010-06-08 836608] R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496] R3 VCService;VCService; C:\Program Files\Sony\VAIO Care\VCService.exe [2011-02-14 44736] R3 VUAgent;VUAgent; C:\Program Files\Sony\VAIO Update Common\VUAgent.exe [2012-01-13 1256040] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] S2 gupdate;Служба Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-02 136176] S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe /McCoreSvc [] S2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2009-03-30 57617752] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944] S2 TicnoSearch;TicnoSearch; C:\PROGRA~2\Ticno\Multibar\SearchService.exe [2011-12-07 279968] S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152] S3 Adobe LM Service;Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2012-01-26 68096] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-12 250808] S3 aspnet_state;Служба состояний ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376] S3 BBSvc;Bing Bar Update Service; C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560] S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352] S3 gupdatem;Служба Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-02 136176] S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-11 194032] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352] S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184] S3 SOHCImp;VAIO Media plus Content Importer; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2010-06-20 108400] S3 SOHDms;VAIO Media plus Digital Media Server; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2010-06-18 423280] S3 SOHDs;VAIO Media plus Device Searcher; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2010-06-20 67952] S3 SpfService;VAIO Entertainment Common Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [2010-06-06 304496] S3 VCFw;VAIO Content Folder Watcher; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2010-06-17 851824] S3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2010-06-09 537456] S3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager; C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2010-06-09 384880] S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface; C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2010-06-09 101232] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-03-21 1255736] S4 MSSQLServerADHelper100;Служба поддержки Active Directory сервера SQL Server; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-21 61976] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240] S4 SQLAgent$SQLEXPRESS;Агент SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2009-03-30 427880] S4 SQLBrowser;SQL Server, обозреватель; c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2009-03-30 254808] -----------------EOF-----------------