Logfile of random's system information tool 1.08 (written by random/random)
Run by Admin at 2011-04-14 16:46:10
Microsoft Windows XP Professional Service Pack 3
System drive C: has 3 GB (16%) free of 17 GB
Total RAM: 511 MB (27% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:46:11, on 14.04.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20935)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Admin\Local Settings\Application Data\{47B1173C-1431-F31F-839A-062E6BF45F69}\.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Mail.Ru\Guard\GuardMailRu.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Mail.Ru\Guard\GuardMailRu.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\TEMP\GuardGuard.exe
C:\Program Files\Yandex\Punto Switcher\punto.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Opera\opera.exe
C:\Program Files\Download Master\dmaster.exe
C:\WINDOWS\system32\NOTEPAD.EXE
D:\Downloads\RSIT.exe
C:\Program Files\trend micro\Admin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.apeha.ru
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://linktarget.ashampoo.com/linktarget/?target=regpopinstall&edition=eid=5751
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Ссылки
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\Gosha\BitComet\tools\BitCometBHO_1.4.12.6.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Спутник@Mail.Ru - {8984B388-A5BB-4DF7-B274-77B879E179DB} - (no file)
O2 - BHO: IE 4.x-6.x BHO for Download Master - {9961627E-4059-41B4-8E0E-A7D6B3854ADF} - C:\PROGRA~1\DOWNLO~1\dmiehlp.dll
O2 - BHO: MyAshampoo - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files\MyAshampoo\prxtbMyA0.dll
O2 - BHO: Radio W Toolbar - {b4efb02b-cd4a-44b9-b5d9-aa486cdffab6} - C:\Program Files\Radio_W\tbRadi.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files\MyAshampoo\prxtbMyA0.dll
O3 - Toolbar: Radio W Toolbar - {b4efb02b-cd4a-44b9-b5d9-aa486cdffab6} - C:\Program Files\Radio_W\tbRadi.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: (no name) - {91397D20-1446-11D4-8AF4-0040CA1127B6} - (no file)
O4 - HKLM\..\Run: [Guard.Mail.ru.gui] "C:\Program Files\Mail.Ru\Guard\GuardMailRu.exe" /gui
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\RunOnce: [AD Network] "C:\Documents and Settings\Admin\Local Settings\Application Data\{47B1173C-1431-F31F-839A-062E6BF45F69}\.exe" ?
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [VistaIcon] C:\Program Files\VistaDriveIcon\VistaDrv.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%\System32\rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\custom.inf,OnceFirstLogonInstall,0 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [IE7_012] rundll32 advpack.dll,LaunchINFSectionEx IE7int.inf,AfterUserStart,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [ZZZZ1_FirstLogonSetting] %SystemRoot%\System32\rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\custom.inf,OnceFirstLogonInstall,0 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [VistaIcon] C:\Program Files\VistaDriveIcon\VistaDrv.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%\System32\rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\custom.inf,NewUserFirstLogonInstall,0 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [VistaIcon] C:\Program Files\VistaDriveIcon\VistaDrv.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [ZZZZ2_FirstLogonSetting] %SystemRoot%\System32\rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\custom.inf,NewUserFirstLogonInstall,0 (User 'Default user')
O4 - Startup: Punto Switcher.lnk = C:\Program Files\Yandex\Punto Switcher\punto.exe
O8 - Extra context menu item: &Отправить в OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: &Экспорт в Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Загрузить &с помощью BitComet - res://D:\Gosha\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Загрузить всё с помощью BitComet - res://D:\Gosha\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Закачать ВСЕ при помощи Download Master - C:\Program Files\Download Master\dmieall.htm
O8 - Extra context menu item: Закачать при помощи Download Master - C:\Program Files\Download Master\dmie.htm
O8 - Extra context menu item: Передать на удаленную закачку DM - C:\Program Files\Download Master\remdown.htm
O9 - Extra button: Отправить в OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Отправить в OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Связанные заметки OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Связанные заметки OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Download Master - {8DAE90AD-4583-4977-9DD4-4360F7A45C74} - C:\Program Files\Download Master\dmaster.exe
O9 - Extra 'Tools' menuitem: &Download Master - {8DAE90AD-4583-4977-9DD4-4360F7A45C74} - C:\Program Files\Download Master\dmaster.exe
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://D:\Gosha\BitComet\tools\BitCometBHO_1.4.12.6.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: solores - {8FA1F4E9-444B-48BF-98CD-B8ECA88E6BA5} - C:\PROGRA~1\Solo9\SoloRes.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O22 - SharedTaskScheduler: Предзагрузчик Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Демон кэша категорий компонентов - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Журнал событий (Eventlog) - Корпорация Майкрософт - C:\WINDOWS\system32\services.exe
O23 - Service: Guard.Mail.ru - Unknown owner - C:\Program Files\Mail.Ru\Guard\GuardMailRu.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Служба COM записи компакт-дисков IMAPI (ImapiService) - Корпорация Майкрософт - C:\WINDOWS\system32\imapi.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: Plug and Play (PlugPlay) - Корпорация Майкрософт - C:\WINDOWS\system32\services.exe
O23 - Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) - Корпорация Майкрософт - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Смарт-карты (SCardSvr) - Корпорация Майкрософт - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Журналы и оповещения производительности (SysmonLog) - Корпорация Майкрософт - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Теневое копирование тома (VSS) - Корпорация Майкрософт - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Адаптер производительности WMI (WmiApSrv) - Корпорация Майкрософт - C:\WINDOWS\system32\wbem\wmiapsrv.exe

--
End of file - 10401 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - D:\Gosha\BitComet\tools\BitCometBHO_1.4.12.6.dll [2010-12-06 765744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8984B388-A5BB-4DF7-B274-77B879E179DB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9961627E-4059-41B4-8E0E-A7D6B3854ADF}]
IE 4.x-6.x BHO for Download Master - C:\PROGRA~1\DOWNLO~1\dmiehlp.dll [2010-06-03 163648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}]
MyAshampoo Toolbar - C:\Program Files\MyAshampoo\prxtbMyA0.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b4efb02b-cd4a-44b9-b5d9-aa486cdffab6}]
Radio W Toolbar - C:\Program Files\Radio_W\tbRadi.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-02-09 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - MyAshampoo Toolbar - C:\Program Files\MyAshampoo\prxtbMyA0.dll [2011-01-17 175912]
{b4efb02b-cd4a-44b9-b5d9-aa486cdffab6} - Radio W Toolbar - C:\Program Files\Radio_W\tbRadi.dll [2010-12-09 3911776]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]
{91397D20-1446-11D4-8AF4-0040CA1127B6}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Guard.Mail.ru.gui"=C:\Program Files\Mail.Ru\Guard\GuardMailRu.exe [2011-04-11 1472720]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2007-04-17 577536]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-11-04 2219184]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"AD Network"=C:\Documents and Settings\Admin\Local Settings\Application Data\{47B1173C-1431-F31F-839A-062E6BF45F69}\.exe [2008-04-15 72704]

C:\Documents and Settings\Admin\Главное меню\Программы\Автозагрузка
Punto Switcher.lnk - C:\Program Files\Yandex\Punto Switcher\punto.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-12-02 143360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LMIinit]
C:\WINDOWS\system32\LMIinit.dll [2010-12-08 87424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-03-02 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoSharedDocuments"=1
"NoSMConfigurePrograms"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 3 months======

2011-04-14 16:45:04 ----D---- C:\rsit
2011-04-14 16:45:04 ----D---- C:\Program Files\trend micro
2011-04-14 11:22:00 ----D---- C:\Documents and Settings\Admin\Application Data\Opera
2011-04-14 10:07:53 ----D---- C:\Program Files\ESET
2011-04-14 10:07:53 ----D---- C:\Documents and Settings\All Users\Application Data\ESET
2011-04-13 15:42:31 ----D---- C:\Program Files\Common Files\CS-REDEMAX System
2011-04-11 13:06:06 ----D---- C:\Documents and Settings\All Users\Application Data\Guard.Mail.Ru
2011-04-07 22:56:38 ----D---- C:\Documents and Settings\All Users\Application Data\Aspyr
2011-04-07 18:25:53 ----D---- C:\Documents and Settings\Admin\Application Data\BitComet
2011-04-07 16:50:50 ----D---- C:\Program Files\AMD APP
2011-04-07 16:50:31 ----D---- C:\Program Files\ATI Technologies
2011-04-07 16:50:28 ----D---- C:\Program Files\ATI
2011-04-07 16:49:17 ----D---- C:\ATI
2011-04-07 16:03:38 ----D---- C:\Documents and Settings\Admin\Application Data\winzipsoft
2011-04-05 13:50:09 ----A---- C:\WINDOWS\system32\npptNT2.sys
2011-04-05 13:49:21 ----D---- C:\Program Files\Common Files\INCA Shared
2011-04-03 19:56:05 ----A---- C:\WINDOWS\usdthank.ini
2011-04-03 19:56:04 ----D---- C:\USDownloaderAvangardEdition
2011-03-29 21:25:13 ----D---- C:\Program Files\SopCast
2011-03-26 03:50:04 ----A---- C:\WINDOWS\system32\$$arcpackedfile$$.tmp
2011-03-24 21:10:55 ----D---- C:\HP
2011-03-23 22:57:15 ----D---- C:\Program Files\OpenAL
2011-03-23 22:56:33 ----A---- C:\WINDOWS\system32\xmlinst.exe
2011-03-23 22:56:31 ----A---- C:\WINDOWS\system32\vp6vfw.dll
2011-03-23 22:56:31 ----A---- C:\WINDOWS\system32\vp6install.exe
2011-03-23 22:56:30 ----A---- C:\WINDOWS\system32\Vb5db.dll
2011-03-23 22:56:29 ----A---- C:\WINDOWS\system32\msxml4a.dll
2011-03-23 22:56:28 ----A---- C:\WINDOWS\system32\msxml3a.dll
2011-03-23 22:56:28 ----A---- C:\WINDOWS\system32\msvcr80.dll
2011-03-23 22:56:28 ----A---- C:\WINDOWS\system32\msvcr71d.dll
2011-03-23 22:56:28 ----A---- C:\WINDOWS\system32\msvcr70d.dll
2011-03-23 22:56:27 ----A---- C:\WINDOWS\system32\msvcp80.dll
2011-03-23 22:56:27 ----A---- C:\WINDOWS\system32\msvcp71d.dll
2011-03-23 22:56:27 ----A---- C:\WINDOWS\system32\msvcp70d.dll
2011-03-23 22:56:27 ----A---- C:\WINDOWS\system32\Msvcp60d.dll
2011-03-23 22:56:27 ----A---- C:\WINDOWS\system32\msvcm80.dll
2011-03-23 22:56:27 ----A---- C:\WINDOWS\system32\msvci70d.dll
2011-03-23 22:56:26 ----A---- C:\WINDOWS\system32\mfcm80u.dll
2011-03-23 22:56:26 ----A---- C:\WINDOWS\system32\mfcm80.dll
2011-03-23 22:56:26 ----A---- C:\WINDOWS\system32\mfc80u.dll
2011-03-23 22:56:26 ----A---- C:\WINDOWS\system32\mfc80.dll
2011-03-23 22:56:25 ----A---- C:\WINDOWS\system32\eax.dll
2011-03-23 22:56:25 ----A---- C:\WINDOWS\system32\Cc3250mt.dll
2011-03-23 22:56:24 ----A---- C:\WINDOWS\system32\xmltok.dll
2011-03-23 22:56:24 ----A---- C:\WINDOWS\system32\xmlparse.dll
2011-03-23 22:56:24 ----A---- C:\WINDOWS\system32\Borlndmm.dll
2011-03-21 19:56:22 ----A---- C:\WINDOWS\system32\OVDecode.dll
2011-03-21 19:56:06 ----A---- C:\WINDOWS\system32\OpenCL.dll
2011-03-21 19:55:46 ----A---- C:\WINDOWS\system32\amdocl.dll
2011-03-20 17:25:41 ----D---- C:\Documents and Settings\Admin\Application Data\Yandex
2011-03-19 15:32:06 ----D---- C:\Program Files\Defraggler
2011-03-19 13:47:18 ----D---- C:\Program Files\CCleaner
2011-03-17 11:41:10 ----ASH---- C:\hiberfil.sys
2011-03-15 16:23:53 ----D---- C:\WINDOWS\system32\appmgmt
2011-03-15 16:13:21 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2011-03-15 16:11:18 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2011-03-14 21:47:20 ----D---- C:\Program Files\DAEMON Tools
2011-03-14 21:46:56 ----D---- C:\Program Files\Mail.Ru
2011-03-10 16:10:37 ----A---- C:\WINDOWS\system32\drivers\oreans32.sys
2011-03-10 13:28:00 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2011-03-10 13:28:00 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2011-03-10 13:27:59 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2011-03-10 13:27:55 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2011-03-10 13:27:52 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2011-03-10 13:27:50 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2011-03-10 13:27:48 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2011-03-04 01:30:22 ----D---- C:\Documents and Settings\All Users\Application Data\TrackMania
2011-03-03 00:26:48 ----D---- C:\Program Files\Common Files\Java
2011-03-03 00:25:09 ----A---- C:\WINDOWS\system32\javaws.exe
2011-03-03 00:25:09 ----A---- C:\WINDOWS\system32\javaw.exe
2011-03-03 00:25:09 ----A---- C:\WINDOWS\system32\java.exe
2011-03-03 00:23:04 ----D---- C:\Documents and Settings\All Users\Application Data\McAfee
2011-02-28 20:24:21 ----D---- C:\Program Files\Microsoft Silverlight
2011-02-28 16:51:04 ----D---- C:\Documents and Settings\All Users\Application Data\Solo9
2011-02-28 16:51:03 ----D---- C:\Program Files\Solo9
2011-02-27 17:00:23 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2011-02-27 00:28:53 ----D---- C:\Documents and Settings\Admin\Application Data\Sony Ericsson
2011-02-27 00:27:00 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-02-27 00:26:25 ----D---- C:\Program Files\Common Files\Teleca Shared
2011-02-27 00:25:15 ----D---- C:\Program Files\Common Files\InstallShield
2011-02-23 14:28:14 ----A---- C:\WINDOWS\system32\drivers\hidgame.sys
2011-02-23 11:39:02 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys
2011-02-20 21:10:53 ----A---- C:\WINDOWS\system32\LMIport.dll
2011-02-20 21:10:52 ----A---- C:\WINDOWS\system32\LMIRfsClientNP.dll
2011-02-20 21:10:52 ----A---- C:\WINDOWS\system32\drivers\LMIRfsDriver.sys
2011-02-20 21:10:44 ----A---- C:\WINDOWS\system32\LMIinit.dll
2011-02-16 21:59:38 ----AH---- C:\WINDOWS\system32\hamachi.sys
2011-02-14 21:13:55 ----D---- C:\WINDOWS\system32\XPSViewer
2011-02-14 21:13:46 ----D---- C:\WINDOWS\system32\en-US
2011-02-14 21:13:38 ----D---- C:\Program Files\Reference Assemblies
2011-02-14 21:13:07 ----N---- C:\WINDOWS\system32\spmsg.dll
2011-02-14 21:13:07 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2011-02-14 21:13:02 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2011-02-14 21:13:02 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2011-02-14 21:13:02 ----N---- C:\WINDOWS\system32\prntvpt.dll
2011-02-14 21:00:07 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2011-02-14 20:59:29 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2011-02-14 20:59:29 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2011-02-14 20:59:28 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2011-02-14 20:59:28 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2011-02-14 20:59:28 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2011-02-14 20:59:27 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2011-02-14 20:59:26 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2011-02-14 02:35:48 ----D---- C:\Program Files\ConduitEngine
2011-02-14 02:35:45 ----D---- C:\Program Files\Radio_W
2011-02-11 20:33:15 ----D---- C:\Documents and Settings\Admin\Application Data\AIMP
2011-02-10 12:07:00 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2011-02-10 12:07:00 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2011-02-10 12:07:00 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2011-02-10 12:07:00 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2011-02-10 12:06:59 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2011-02-10 12:06:59 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2011-02-10 12:06:59 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2011-02-10 12:06:58 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2011-02-10 12:06:58 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2011-02-10 12:06:58 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2011-02-10 12:06:56 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2011-02-10 12:06:51 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2011-02-10 12:06:48 ----D---- C:\WINDOWS\system32\DirectX
2011-02-10 12:06:39 ----D---- C:\WINDOWS\Logs
2011-02-10 02:18:46 ----D---- C:\WINDOWS\Sun
2011-02-10 02:02:55 ----D---- C:\Documents and Settings\Admin\Application Data\vlc
2011-02-09 21:08:20 ----D---- C:\Documents and Settings\Admin\Application Data\Download Master
2011-02-09 19:48:09 ----D---- C:\Downloads
2011-02-09 19:23:28 ----D---- C:\Documents and Settings\Admin\Application Data\WinRAR
2011-02-09 12:06:51 ----D---- C:\Documents and Settings\Admin\Application Data\Mozilla
2011-02-09 12:06:46 ----D---- C:\Program Files\Mozilla Firefox
2011-02-08 23:02:11 ----A---- C:\WINDOWS\system32\h323log.txt
2011-02-08 23:02:04 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2011-02-08 23:02:03 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2011-02-08 23:02:01 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2011-02-08 23:01:59 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys
2011-02-08 23:01:58 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2011-02-08 23:01:56 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2011-02-08 23:01:54 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2011-02-08 23:01:52 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2011-02-08 23:01:51 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2011-02-08 23:01:49 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2011-02-08 23:01:47 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2011-02-08 23:01:42 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2011-02-08 23:01:02 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2011-02-08 23:00:04 ----A---- C:\WINDOWS\system32\drivers\gameenum.sys
2011-02-08 22:59:36 ----A---- C:\WINDOWS\system32\usbui.dll
2011-02-08 22:59:31 ----A---- C:\WINDOWS\system32\ksuser.dll
2011-02-08 22:59:31 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2011-02-08 22:59:30 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2011-02-08 22:56:32 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-02-08 22:56:31 ----SHD---- C:\WINDOWS\Installer
2011-02-08 22:56:30 ----D---- C:\Program Files\Common Files\ODBC
2011-02-08 22:56:30 ----A---- C:\WINDOWS\ODBCINST.INI
2011-02-08 22:56:26 ----D---- C:\Program Files\Common Files\SpeechEngines
2011-02-08 22:56:26 ----D---- C:\Program Files
2011-02-08 22:56:26 ----AD---- C:\Program Files\Common Files\Microsoft Shared
2011-02-08 22:56:26 ----AD---- C:\Program Files\Common Files
2011-02-08 22:56:23 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2011-02-08 22:56:23 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2011-02-08 22:56:23 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2011-02-08 22:56:21 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2011-02-08 22:56:21 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2011-02-08 22:56:21 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2011-02-08 22:56:21 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2011-02-08 22:56:21 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2011-02-08 22:56:21 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2011-02-08 22:56:21 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2011-02-08 22:56:20 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2011-02-08 22:56:20 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2011-02-08 22:56:20 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2011-02-08 22:56:20 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2011-02-08 22:56:20 ----RA---- C:\WINDOWS\system32\kbdest.dll
2011-02-08 22:56:19 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2011-02-08 22:56:19 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2011-02-08 22:56:19 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2011-02-08 22:56:19 ----RA---- C:\WINDOWS\system32\kbdro.dll
2011-02-08 22:56:19 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2011-02-08 22:56:19 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2011-02-08 22:56:19 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2011-02-08 22:56:19 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2011-02-08 22:56:19 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2011-02-08 22:56:19 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2011-02-08 22:56:19 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2011-02-08 22:56:19 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2011-02-08 22:56:19 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2011-02-08 22:56:16 ----A---- C:\WINDOWS\system32\kbdtat.dll
2011-02-08 22:56:16 ----A---- C:\WINDOWS\system32\kbdmon.dll
2011-02-08 22:56:16 ----A---- C:\WINDOWS\system32\kbdkyr.dll
2011-02-08 22:56:15 ----A---- C:\WINDOWS\system32\kbdycc.dll
2011-02-08 22:56:15 ----A---- C:\WINDOWS\system32\kbduzb.dll
2011-02-08 22:56:15 ----A---- C:\WINDOWS\system32\kbdur.dll
2011-02-08 22:56:15 ----A---- C:\WINDOWS\system32\kbdkaz.dll
2011-02-08 22:56:15 ----A---- C:\WINDOWS\system32\kbdbu.dll
2011-02-08 22:56:15 ----A---- C:\WINDOWS\system32\kbdblr.dll
2011-02-08 22:56:15 ----A---- C:\WINDOWS\system32\kbdaze.dll
2011-02-08 22:56:14 ----A---- C:\WINDOWS\system32\spxcoins.dll
2011-02-08 22:56:14 ----A---- C:\WINDOWS\system32\irclass.dll
2011-02-08 22:56:14 ----A---- C:\WINDOWS\system32\dgsetup.dll
2011-02-08 22:56:14 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2011-02-08 22:56:13 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2011-02-08 22:56:12 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2011-02-08 22:56:12 ----A---- C:\WINDOWS\TASKMAN.EXE
2011-02-08 22:56:11 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2011-02-08 22:56:11 ----A---- C:\WINDOWS\system32\batt.dll
2011-02-08 22:56:11 ----A---- C:\WINDOWS\NOTEPAD.EXE
2011-02-08 22:56:10 ----A---- C:\WINDOWS\system32\storprop.dll
2011-02-08 22:56:01 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2011-02-08 22:55:54 ----RA---- C:\WINDOWS\SET8.tmp
2011-02-08 22:55:51 ----RA---- C:\WINDOWS\SET4.tmp
2011-02-08 22:55:49 ----RA---- C:\WINDOWS\SET3.tmp
2011-02-08 22:55:44 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2011-02-08 22:54:36 ----A---- C:\WINDOWS\system32\RTLCPAPI.dll
2011-02-08 22:54:36 ----A---- C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2011-02-08 22:54:36 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2011-02-08 22:54:34 ----A---- C:\WINDOWS\system32\RTLCPL.EXE
2011-02-08 22:54:33 ----A---- C:\WINDOWS\Alcrmv.exe
2011-02-08 22:54:20 ----A---- C:\WINDOWS\system32\drivers\nvmpu401.sys
2011-02-08 22:54:16 ----A---- C:\WINDOWS\system32\drivers\nvcoam.dll
2011-02-08 22:53:07 ----A---- C:\WINDOWS\system32\drivers\NVNRM.SYS
2011-02-08 22:53:07 ----A---- C:\WINDOWS\system32\drivers\nvefd2k.sys
2011-02-08 22:53:07 ----A---- C:\WINDOWS\system32\drivers\ipfnd51.sys
2011-02-08 22:52:58 ----A---- C:\WINDOWS\system32\Oemdspif.dll
2011-02-08 22:52:58 ----A---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2011-02-08 22:52:48 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2011-02-08 22:52:48 ----A---- C:\WINDOWS\system32\ativcoxx.dll
2011-02-08 22:52:48 ----A---- C:\WINDOWS\system32\atitvo32.dll
2011-02-08 22:52:48 ----A---- C:\WINDOWS\system32\atipdlxx.dll
2011-02-08 22:52:48 ----A---- C:\WINDOWS\system32\atiok3x2.dll
2011-02-08 22:52:47 ----A---- C:\WINDOWS\system32\drivers\ati2erec.dll
2011-02-08 22:52:47 ----A---- C:\WINDOWS\system32\atioglxx.dll
2011-02-08 22:52:47 ----A---- C:\WINDOWS\system32\atikvmag.dll
2011-02-08 22:52:47 ----A---- C:\WINDOWS\system32\atiiiexx.dll
2011-02-08 22:52:47 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2011-02-08 22:52:47 ----A---- C:\WINDOWS\system32\ATIDDC.DLL
2011-02-08 22:52:47 ----A---- C:\WINDOWS\system32\atibrtmon.exe
2011-02-08 22:52:47 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2011-02-08 22:52:47 ----A---- C:\WINDOWS\system32\ati3duag.dll
2011-02-08 22:52:47 ----A---- C:\WINDOWS\system32\Ati2mdxx.exe
2011-02-08 22:52:47 ----A---- C:\WINDOWS\system32\ati2evxx.exe
2011-02-08 22:52:47 ----A---- C:\WINDOWS\system32\ati2evxx.dll
2011-02-08 22:52:47 ----A---- C:\WINDOWS\system32\ati2edxx.dll
2011-02-08 22:52:47 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2011-02-08 22:52:47 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2011-02-08 22:52:47 ----A---- C:\WINDOWS\system32\amdpcom32.dll
2011-02-08 22:52:47 ----A---- C:\WINDOWS\system32\amdcalrt.dll
2011-02-08 22:52:47 ----A---- C:\WINDOWS\system32\Amdcaldd.dll
2011-02-08 22:52:47 ----A---- C:\WINDOWS\system32\amdcalcl.dll
2011-02-08 22:50:30 ----D---- C:\WINDOWS\system32\CatRoot2
2011-02-08 22:50:30 ----D---- C:\WINDOWS\system32\CatRoot
2011-02-08 22:50:15 ----SHD---- C:\System Volume Information
2011-02-08 22:50:15 ----D---- C:\Documents and Settings
2011-02-08 22:49:27 ----SH---- C:\boot.ini
2011-02-08 22:42:05 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-02-08 22:42:05 ----RSD---- C:\WINDOWS\Fonts
2011-02-08 22:42:05 ----RD---- C:\WINDOWS\Web
2011-02-08 22:42:05 ----HD---- C:\WINDOWS\inf
2011-02-08 22:42:05 ----D---- C:\WINDOWS\WinSxS
2011-02-08 22:42:05 ----D---- C:\WINDOWS\twain_32
2011-02-08 22:42:05 ----D---- C:\WINDOWS\Temp
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\wins
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\wbem
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\usmt
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\spool
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\ShellExt
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\Setup
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\ru-ru
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\ru
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\ras
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\oobe
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\npp
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\mui
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\inetsrv
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\IME
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\icsxml
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\ias
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\export
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\drivers\UMDF
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\drivers\etc
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\drivers\disdn
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\drivers
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\dhcp
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\config
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\3com_dmi
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\3076
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\2052
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\1054
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\1049
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\1042
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\1041
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\1037
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\1033
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\1031
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\1028
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system32\1025
2011-02-08 22:42:05 ----D---- C:\WINDOWS\system
2011-02-08 22:42:05 ----D---- C:\WINDOWS\security
2011-02-08 22:42:05 ----D---- C:\WINDOWS\Resources
2011-02-08 22:42:05 ----D---- C:\WINDOWS\repair
2011-02-08 22:42:05 ----D---- C:\WINDOWS\Provisioning
2011-02-08 22:42:05 ----D---- C:\WINDOWS\PeerNet
2011-02-08 22:42:05 ----D---- C:\WINDOWS\pchealth
2011-02-08 22:42:05 ----D---- C:\WINDOWS\Network Diagnostic
2011-02-08 22:42:05 ----D---- C:\WINDOWS\mui
2011-02-08 22:42:05 ----D---- C:\WINDOWS\msapps
2011-02-08 22:42:05 ----D---- C:\WINDOWS\msagent
2011-02-08 22:42:05 ----D---- C:\WINDOWS\Media
2011-02-08 22:42:05 ----D---- C:\WINDOWS\L2Schemas
2011-02-08 22:42:05 ----D---- C:\WINDOWS\java
2011-02-08 22:42:05 ----D---- C:\WINDOWS\ime
2011-02-08 22:42:05 ----D---- C:\WINDOWS\Help
2011-02-08 22:42:05 ----D---- C:\WINDOWS\ehome
2011-02-08 22:42:05 ----D---- C:\WINDOWS\Driver Cache
2011-02-08 22:42:05 ----D---- C:\WINDOWS\Debug
2011-02-08 22:42:05 ----D---- C:\WINDOWS\Cursors
2011-02-08 22:42:05 ----D---- C:\WINDOWS\Connection Wizard
2011-02-08 22:42:05 ----D---- C:\WINDOWS\Config
2011-02-08 22:42:05 ----D---- C:\WINDOWS\AppPatch
2011-02-08 22:42:05 ----D---- C:\WINDOWS\addins
2011-02-08 22:42:05 ----D---- C:\WINDOWS
2011-02-08 22:42:05 ----ASH---- C:\pagefile.sys
2011-02-08 22:42:05 ----AD---- C:\WINDOWS\system32
2011-02-08 21:57:58 ----D---- C:\Program Files\Opera
2011-02-08 21:45:19 ----D---- C:\Documents and Settings\Admin\Application Data\Macromedia
2011-02-08 21:24:36 ----SHD---- C:\RECYCLER
2011-02-08 21:23:58 ----A---- C:\WINDOWS\NeroDigital.ini
2011-02-08 21:23:50 ----D---- C:\Program Files\Download Master
2011-02-08 21:23:34 ----D---- C:\Program Files\Total Commander
2011-02-08 21:23:01 ----D---- C:\Documents and Settings\All Users\Application Data\ACD Systems
2011-02-08 21:22:55 ----D---- C:\Program Files\Common Files\ACD Systems
2011-02-08 21:22:55 ----D---- C:\Program Files\ACD Systems
2011-02-08 21:22:11 ----D---- C:\WINDOWS\system32\gs
2011-02-08 21:22:11 ----D---- C:\Program Files\Tweak PDF To Word
2011-02-08 21:21:37 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2011-02-08 21:21:33 ----D---- C:\Program Files\Common Files\Adobe
2011-02-08 21:21:33 ----D---- C:\Program Files\Adobe
2011-02-08 21:19:27 ----D---- C:\Program Files\JRE
2011-02-08 21:19:04 ----D---- C:\Program Files\OpenOffice.org 3
2011-02-08 21:18:48 ----D---- C:\Documents and Settings\All Users\Application Data\Sun
2011-02-08 21:18:33 ----A---- C:\WINDOWS\system32\deployJava1.dll
2011-02-08 21:18:20 ----D---- C:\Program Files\Java
2011-02-08 21:13:51 ----D---- C:\Program Files\MSBuild
2011-02-08 21:12:46 ----D---- C:\Program Files\Common Files\DESIGNER
2011-02-08 21:12:10 ----D---- C:\Program Files\Microsoft.NET
2011-02-08 21:12:10 ----D---- C:\Program Files\Microsoft Sync Framework
2011-02-08 21:10:08 ----D---- C:\Program Files\Microsoft Visual Studio 8
2011-02-08 21:08:33 ----D---- C:\Program Files\Microsoft Analysis Services
2011-02-08 21:08:16 ----D---- C:\WINDOWS\SHELLNEW
2011-02-08 21:07:21 ----D---- C:\Program Files\Microsoft Office
2011-02-08 21:07:20 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2011-02-08 21:07:04 ----RHD---- C:\MSOCache
2011-02-08 21:04:02 ----D---- C:\Program Files\Common Files\Skype
2011-02-08 21:03:33 ----D---- C:\WINDOWS\Lhsp
2011-02-08 21:03:33 ----D---- C:\Program Files\PRMT9
2011-02-08 21:03:33 ----D---- C:\Documents and Settings\All Users\Application Data\PROMT
2011-02-08 21:02:06 ----D---- C:\Program Files\WinDjView
2011-02-08 21:02:03 ----D---- C:\Program Files\Yandex
2011-02-08 21:01:21 ----D---- C:\Program Files\VideoLAN
2011-02-08 21:00:04 ----D---- C:\Program Files\Cyberlink
2011-02-08 21:00:04 ----D---- C:\Program Files\Common Files\CyberLink
2011-02-08 20:59:09 ----D---- C:\Program Files\AIMP2
2011-02-08 20:58:44 ----D---- C:\Program Files\The KMPlayer
2011-02-08 20:57:31 ----D---- C:\Program Files\Photodex
2011-02-08 20:57:27 ----D---- C:\Documents and Settings\Admin\Application Data\Vso
2011-02-08 20:57:19 ----D---- C:\Program Files\VirtualDub
2011-02-08 20:57:10 ----A---- C:\WINDOWS\system32\sipr3260.dll
2011-02-08 20:57:10 ----A---- C:\WINDOWS\system32\drv43260.dll
2011-02-08 20:57:10 ----A---- C:\WINDOWS\system32\drv33260.dll
2011-02-08 20:57:10 ----A---- C:\WINDOWS\system32\drv23260.dll
2011-02-08 20:57:10 ----A---- C:\WINDOWS\system32\cook3260.dll
2011-02-08 20:57:09 ----A---- C:\WINDOWS\system32\wvc1dmod.dll
2011-02-08 20:57:09 ----A---- C:\WINDOWS\system32\vp7vfw.dll
2011-02-08 20:57:06 ----D---- C:\Program Files\VSO
2011-02-08 20:57:02 ----A---- C:\WINDOWS\system32\AVERM.dll
2011-02-08 20:57:02 ----A---- C:\WINDOWS\system32\AVEQT.dll
2011-02-08 20:56:59 ----D---- C:\Program Files\Ultra MKV Converter
2011-02-08 20:56:58 ----D---- C:\Program Files\Video mp3 Extractor
2011-02-08 20:56:46 ----D---- C:\Program Files\DVDFab
2011-02-08 20:56:45 ----D---- C:\Documents and Settings\All Users\Application Data\Easy CD-DA Extractor
2011-02-08 20:56:43 ----D---- C:\Program Files\Easy CD-DA Extractor 2010
2011-02-08 20:56:17 ----D---- C:\Program Files\Xilisoft
2011-02-08 20:55:59 ----A---- C:\WINDOWS\system32\pncrt.dll
2011-02-08 20:55:58 ----A---- C:\WINDOWS\system32\unrar.dll
2011-02-08 20:55:50 ----D---- C:\Program Files\K-Lite Codec Pack
2011-02-08 20:55:47 ----D---- C:\Documents and Settings\Admin\Application Data\Ashampoo
2011-02-08 20:55:41 ----D---- C:\Documents and Settings\Admin\Application Data\Adobe
2011-02-08 20:55:27 ----D---- C:\Program Files\Conduit
2011-02-08 20:55:24 ----D---- C:\Program Files\MyAshampoo
2011-02-08 20:55:19 ----D---- C:\Documents and Settings\All Users\Application Data\ashampoo
2011-02-08 20:54:33 ----D---- C:\Program Files\Ashampoo
2011-02-08 20:33:32 ----D---- C:\Program Files\Daemon Tools Lite
2011-02-08 20:33:13 ----N---- C:\WINDOWS\system32\drivers\imagesrv.sys
2011-02-08 20:33:13 ----N---- C:\WINDOWS\system32\drivers\imagedrv.sys
2011-02-08 20:32:55 ----N---- C:\WINDOWS\system32\TwnLib4.dll
2011-02-08 20:32:55 ----A---- C:\WINDOWS\system32\TwnLib20.dll
2011-02-08 20:32:54 ----N---- C:\WINDOWS\system32\ImagXRA7.dll
2011-02-08 20:32:54 ----N---- C:\WINDOWS\system32\ImagXR7.dll
2011-02-08 20:32:54 ----N---- C:\WINDOWS\system32\ImagXpr7.dll
2011-02-08 20:32:54 ----N---- C:\WINDOWS\system32\ImagX7.dll
2011-02-08 20:32:54 ----D---- C:\Program Files\Common Files\Ahead
2011-02-08 20:32:54 ----A---- C:\WINDOWS\system32\NeroCheck.exe
2011-02-08 20:32:53 ----D---- C:\Program Files\Ahead
2011-02-08 20:32:24 ----A---- C:\WINDOWS\system32\Uninstall.ini
2011-02-08 20:32:23 ----D---- C:\Program Files\Everest
2011-02-08 20:32:20 ----D---- C:\Program Files\WinRAR
2011-02-08 20:32:11 ----A---- C:\WINDOWS\WPI_Log_2011.02.08_19.32.11.txt
2011-02-08 20:25:16 ----A---- C:\WINDOWS\system32\oeminfo.ini
2011-02-08 20:25:11 ----A---- C:\WINDOWS\system32\Reg2Inf.exe
2011-02-08 20:25:09 ----A---- C:\WINDOWS\system32\hidcon.exe
2011-02-08 20:25:08 ----RA---- C:\WINDOWS\system32\OEMINFO.CMD
2011-02-08 20:24:52 ----A---- C:\WINDOWS\system32\wmpns.dll
2011-02-08 20:24:44 ----HD---- C:\Program Files\Uninstall Information
2011-02-08 20:23:05 ----RD---- C:\WINDOWS\OemDrv
2011-02-08 20:22:05 ----ASH---- C:\Documents and Settings\Admin\Application Data\desktop.ini
2011-02-08 20:22:04 ----SD---- C:\Documents and Settings\Admin\Application Data\Microsoft
2011-02-08 20:22:04 ----D---- C:\Documents and Settings\Admin\Application Data\Sun
2011-02-08 20:20:27 ----SD---- C:\WINDOWS\system32\Microsoft
2011-02-08 20:20:26 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-02-08 20:15:44 ----D---- C:\WINDOWS\system32\xircom
2011-02-08 20:15:44 ----D---- C:\Program Files\msn gaming zone
2011-02-08 20:15:19 ----D---- C:\Program Files\VistaDriveIcon
2011-02-08 20:15:09 ----A---- C:\WINDOWS\system32\drivers\sptd.sys
2011-02-08 20:14:59 ----AD---- C:\Program Files\Paint.NET
2011-02-08 20:14:59 ----A---- C:\WINDOWS\system32\wiaaut.dll
2011-02-08 20:14:55 ----RA---- C:\WINDOWS\delete.bat
2011-02-08 20:14:55 ----A---- C:\WINDOWS\innounp.exe
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2011-02-08 20:14:05 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2011-02-08 20:14:04 ----A---- C:\WINDOWS\system32\d3dx9_39.dll
2011-02-08 20:14:04 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2011-02-08 20:14:04 ----A---- C:\WINDOWS\system32\d3dx9_37.dll
2011-02-08 20:14:04 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2011-02-08 20:14:04 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2011-02-08 20:14:04 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2011-02-08 20:14:03 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2011-02-08 20:14:03 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2011-02-08 20:14:03 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2011-02-08 20:14:03 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2011-02-08 20:14:03 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2011-02-08 20:14:03 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2011-02-08 20:14:03 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\d3dx10.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2011-02-08 20:14:02 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2011-02-08 20:10:49 ----RSD---- C:\WINDOWS\assembly
2011-02-08 20:10:49 ----D---- C:\WINDOWS\Microsoft.NET
2011-02-08 20:10:47 ----D---- C:\WINDOWS\system32\URTTemp
2011-02-08 20:09:48 ----N---- C:\WINDOWS\system32\msvcr71.dll
2011-02-08 20:09:48 ----N---- C:\WINDOWS\system32\msvcr70.dll
2011-02-08 20:09:48 ----N---- C:\WINDOWS\system32\msvcp71.dll
2011-02-08 20:09:48 ----N---- C:\WINDOWS\system32\msvci70.dll
2011-02-08 20:09:48 ----N---- C:\WINDOWS\system32\MFC71u.dll
2011-02-08 20:09:48 ----N---- C:\WINDOWS\system32\MFC71.dll
2011-02-08 20:09:48 ----N---- C:\WINDOWS\system32\mfc70u.dll
2011-02-08 20:09:48 ----N---- C:\WINDOWS\system32\mfc70.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\zlib1.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\wnaspi32.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\Vbrun300.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\vbrun200.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\vbrun100.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\Vb40032.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\Vb40016.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\ssleay32.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\msvcrt10.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\MSVCP70.DLL
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\MSSTKPRP.DLL
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\msstdfmt.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\MFC71KOR.DLL
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\MFC71JPN.DLL
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\MFC71ITA.DLL
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\MFC71FRA.DLL
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\MFC71ESP.DLL
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\MFC71ENU.DLL
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\MFC71DEU.DLL
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\MFC71CHT.DLL
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\MFC71CHS.DLL
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\mfc70kor.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\mfc70jpn.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\mfc70ita.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\mfc70fra.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\mfc70esp.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\mfc70enu.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\mfc70deu.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\mfc70cht.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\mfc70chs.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\libssl32.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\libeay32.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\atl71.dll
2011-02-08 20:09:48 ----A---- C:\WINDOWS\system32\atl70.dll
2011-02-08 20:09:21 ----RASH---- C:\MSDOS.SYS
2011-02-08 20:09:21 ----RASH---- C:\IO.SYS
2011-02-08 20:09:21 ----A---- C:\WINDOWS\control.ini
2011-02-08 20:09:21 ----A---- C:\CONFIG.SYS
2011-02-08 20:09:21 ----A---- C:\AUTOEXEC.BAT
2011-02-08 20:09:04 ----A---- C:\WINDOWS\system32\mapi32.dll
2011-02-08 20:07:35 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2011-02-08 20:07:28 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2011-02-08 20:07:20 ----HD---- C:\Program Files\WindowsUpdate
2011-02-08 20:07:16 ----D---- C:\Program Files\Online Services
2011-02-08 20:07:04 ----A---- C:\WINDOWS\system32\atrace.dll
2011-02-08 20:07:03 ----A---- C:\WINDOWS\system32\desktop.ini
2011-02-08 20:07:03 ----A---- C:\WINDOWS\desktop.ini
2011-02-08 20:06:56 ----A---- C:\WINDOWS\system32\acctres.dll
2011-02-08 20:06:55 ----D---- C:\Program Files\Common Files\Services
2011-02-08 20:06:53 ----SD---- C:\WINDOWS\Tasks
2011-02-08 20:06:53 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2011-02-08 20:06:52 ----D---- C:\Program Files\Common Files\MSSoap
2011-02-08 20:06:48 ----D---- C:\WINDOWS\system32\Macromed
2011-02-08 20:06:48 ----D---- C:\WINDOWS\srchasst
2011-02-08 20:06:45 ----A---- C:\WINDOWS\system32\wuweb.dll
2011-02-08 20:06:45 ----A---- C:\WINDOWS\system32\wucltui.dll
2011-02-08 20:06:45 ----A---- C:\WINDOWS\system32\wuauserv.dll
2011-02-08 20:06:45 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2011-02-08 20:06:44 ----A---- C:\WINDOWS\system32\wups.dll
2011-02-08 20:06:44 ----A---- C:\WINDOWS\system32\wuaueng.dll
2011-02-08 20:06:44 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2011-02-08 20:06:44 ----A---- C:\WINDOWS\system32\wuauclt.exe
2011-02-08 20:06:43 ----A---- C:\WINDOWS\system32\wuapi.dll
2011-02-08 20:06:43 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2011-02-08 20:06:43 ----A---- C:\WINDOWS\system32\qmgr.dll
2011-02-08 20:06:43 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2011-02-08 20:06:43 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2011-02-08 20:06:43 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2011-02-08 20:06:39 ----D---- C:\Program Files\Movie Maker
2011-02-08 20:06:25 ----A---- C:\WINDOWS\system32\safrslv.dll
2011-02-08 20:06:25 ----A---- C:\WINDOWS\system32\safrdm.dll
2011-02-08 20:06:25 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2011-02-08 20:06:25 ----A---- C:\WINDOWS\system32\racpldlg.dll
2011-02-08 20:06:21 ----A---- C:\WINDOWS\system32\fltMc.exe
2011-02-08 20:06:21 ----A---- C:\WINDOWS\system32\fltlib.dll
2011-02-08 20:06:21 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2011-02-08 20:06:20 ----D---- C:\WINDOWS\system32\Restore
2011-02-08 20:06:20 ----A---- C:\WINDOWS\system32\srsvc.dll
2011-02-08 20:06:20 ----A---- C:\WINDOWS\system32\srrstr.dll
2011-02-08 20:06:20 ----A---- C:\WINDOWS\system32\srclient.dll
2011-02-08 20:06:20 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2011-02-08 20:06:19 ----A---- C:\WINDOWS\system32\msoert2.dll
2011-02-08 20:06:19 ----A---- C:\WINDOWS\system32\msoeacct.dll
2011-02-08 20:06:18 ----A---- C:\WINDOWS\system32\inetres.dll
2011-02-08 20:06:17 ----A---- C:\WINDOWS\system32\inetcomm.dll
2011-02-08 20:06:15 ----D---- C:\Program Files\Outlook Express
2011-02-08 20:06:15 ----A---- C:\WINDOWS\system32\schedsvc.dll
2011-02-08 20:06:15 ----A---- C:\WINDOWS\system32\mstinit.exe
2011-02-08 20:06:15 ----A---- C:\WINDOWS\system32\mstask.dll
2011-02-08 20:06:15 ----A---- C:\WINDOWS\system32\isign32.dll
2011-02-08 20:06:15 ----A---- C:\WINDOWS\system32\icwphbk.dll
2011-02-08 20:06:15 ----A---- C:\WINDOWS\system32\icwdial.dll
2011-02-08 20:06:14 ----A---- C:\WINDOWS\system32\inetcfg.dll
2011-02-08 20:06:10 ----D---- C:\Program Files\Common Files\System
2011-02-08 20:05:12 ----D---- C:\Program Files\ComPlus Applications
2011-02-08 20:05:09 ----A---- C:\WINDOWS\vbaddin.ini
2011-02-08 20:05:09 ----A---- C:\WINDOWS\vb.ini
2011-02-08 20:05:04 ----D---- C:\WINDOWS\Registration
2011-02-08 20:04:40 ----D---- C:\Program Files\Windows Media Player
2011-02-08 20:04:40 ----D---- C:\Program Files\Windows Media Connect 2
2011-02-08 20:04:35 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-02-08 20:04:35 ----RD---- C:\WINDOWS\Offline Web Pages
2011-02-08 20:04:35 ----A---- C:\WINDOWS\system32\winfxdocobj.exe
2011-02-08 20:04:34 ----D---- C:\WINDOWS\wbem
2011-02-08 20:04:34 ----A---- C:\WINDOWS\system32\msfeedssync.exe
2011-02-08 20:04:34 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2011-02-08 20:04:32 ----A---- C:\WINDOWS\system32\ieframe.dll.mui
2011-02-08 20:04:31 ----D---- C:\Program Files\Internet Explorer
2011-02-08 20:04:31 ----A---- C:\WINDOWS\system32\advpack.dll.mui
2011-02-08 20:04:29 ----A---- C:\WINDOWS\system32\TweakUI.exe
2011-02-08 20:04:28 ----D---- C:\WINDOWS\system32\PreInstall
2011-02-08 20:04:27 ----D---- C:\WINDOWS\SoftwareDistribution
2011-02-08 20:04:27 ----A---- C:\WINDOWS\system32\muweb.dll
2011-02-08 20:04:27 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2011-02-08 20:04:27 ----A---- C:\WINDOWS\system32\mucltui.dll
2011-02-08 20:04:26 ----A---- C:\WINDOWS\system32\write.exe
2011-02-08 20:04:26 ----A---- C:\WINDOWS\system32\gpprefcl.dll
2011-02-08 20:04:10 ----A---- C:\WINDOWS\system32\sndvol32.exe
2011-02-08 20:04:10 ----A---- C:\WINDOWS\system32\hticons.dll
2011-02-08 20:04:09 ----A---- C:\WINDOWS\system32\winchat.exe
2011-02-08 20:04:09 ----A---- C:\WINDOWS\system32\avwav.dll
2011-02-08 20:04:09 ----A---- C:\WINDOWS\system32\avtapi.dll
2011-02-08 20:04:09 ----A---- C:\WINDOWS\system32\avmeter.dll
2011-02-08 20:04:00 ----A---- C:\WINDOWS\system32\getuname.dll
2011-02-08 20:04:00 ----A---- C:\WINDOWS\system32\charmap.exe
2011-02-08 20:03:59 ----A---- C:\WINDOWS\system32\winmine.exe
2011-02-08 20:03:59 ----A---- C:\WINDOWS\system32\sol.exe
2011-02-08 20:03:59 ----A---- C:\WINDOWS\system32\calc.exe
2011-02-08 20:03:58 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2011-02-08 20:03:58 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2011-02-08 20:03:58 ----A---- C:\WINDOWS\system32\tslabels.ini
2011-02-08 20:03:58 ----A---- C:\WINDOWS\system32\tskill.exe
2011-02-08 20:03:58 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2011-02-08 20:03:58 ----A---- C:\WINDOWS\system32\tscon.exe
2011-02-08 20:03:58 ----A---- C:\WINDOWS\system32\shadow.exe
2011-02-08 20:03:58 ----A---- C:\WINDOWS\system32\rwinsta.exe
2011-02-08 20:03:58 ----A---- C:\WINDOWS\system32\reset.exe
2011-02-08 20:03:58 ----A---- C:\WINDOWS\system32\mshearts.exe
2011-02-08 20:03:58 ----A---- C:\WINDOWS\system32\freecell.exe
2011-02-08 20:03:57 ----A---- C:\WINDOWS\system32\regini.exe
2011-02-08 20:03:57 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2011-02-08 20:03:57 ----A---- C:\WINDOWS\system32\qwinsta.exe
2011-02-08 20:03:57 ----A---- C:\WINDOWS\system32\qappsrv.exe
2011-02-08 20:03:57 ----A---- C:\WINDOWS\system32\msg.exe
2011-02-08 20:03:57 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2011-02-08 20:03:57 ----A---- C:\WINDOWS\system32\logoff.exe
2011-02-08 20:03:57 ----A---- C:\WINDOWS\system32\cdmodem.dll
2011-02-08 20:03:52 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2011-02-08 20:03:51 ----A---- C:\WINDOWS\system32\sndrec32.exe
2011-02-08 20:03:51 ----A---- C:\WINDOWS\system32\mplay32.exe
2011-02-08 20:03:51 ----A---- C:\WINDOWS\system32\accwiz.exe
2011-02-08 20:03:50 ----D---- C:\Program Files\Windows NT
2011-02-08 20:03:50 ----A---- C:\WINDOWS\system32\spider.exe
2011-02-08 20:03:50 ----A---- C:\WINDOWS\system32\hypertrm.dll
2011-02-08 20:03:50 ----A---- C:\WINDOWS\system32\clipbrd.exe
2011-02-08 20:03:49 ----A---- C:\WINDOWS\system32\tsgqec.dll
2011-02-08 20:03:49 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2011-02-08 20:03:49 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2011-02-08 20:03:49 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2011-02-08 20:03:49 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2011-02-08 20:03:49 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2011-02-08 20:03:48 ----A---- C:\WINDOWS\system32\mstscax.dll
2011-02-08 20:03:48 ----A---- C:\WINDOWS\system32\mstsc.exe
2011-02-08 20:03:48 ----A---- C:\WINDOWS\system32\aaclient.dll
2011-02-08 20:03:47 ----A---- C:\WINDOWS\system32\termsrv.dll
2011-02-08 20:03:47 ----A---- C:\WINDOWS\system32\sessmgr.exe
2011-02-08 20:03:47 ----A---- C:\WINDOWS\system32\remotepg.dll
2011-02-08 20:03:47 ----A---- C:\WINDOWS\system32\rdshost.exe
2011-02-08 20:03:47 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2011-02-08 20:03:47 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2011-02-08 20:03:47 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2011-02-08 20:03:47 ----A---- C:\WINDOWS\system32\rdpclip.exe
2011-02-08 20:03:47 ----A---- C:\WINDOWS\system32\rdchost.dll
2011-02-08 20:03:47 ----A---- C:\WINDOWS\system32\qprocess.exe
2011-02-08 20:03:46 ----D---- C:\WINDOWS\system32\MsDtc
2011-02-08 20:03:46 ----A---- C:\WINDOWS\system32\mtxoci.dll
2011-02-08 20:03:46 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2011-02-08 20:03:46 ----A---- C:\WINDOWS\system32\msdtctm.dll
2011-02-08 20:03:46 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2011-02-08 20:03:46 ----A---- C:\WINDOWS\system32\icaapi.dll
2011-02-08 20:03:46 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2011-02-08 20:03:45 ----A---- C:\WINDOWS\system32\xolehlp.dll
2011-02-08 20:03:45 ----A---- C:\WINDOWS\system32\msdtclog.dll
2011-02-08 20:03:45 ----A---- C:\WINDOWS\system32\msdtc.exe
2011-02-08 20:03:45 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2011-02-08 20:03:44 ----D---- C:\WINDOWS\system32\Com
2011-02-08 20:03:44 ----A---- C:\WINDOWS\system32\stclient.dll
2011-02-08 20:03:44 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2011-02-08 20:03:44 ----A---- C:\WINDOWS\system32\mtxex.dll
2011-02-08 20:03:44 ----A---- C:\WINDOWS\system32\mtxdm.dll
2011-02-08 20:03:44 ----A---- C:\WINDOWS\system32\comrepl.dll
2011-02-08 20:03:44 ----A---- C:\WINDOWS\system32\comaddin.dll
2011-02-08 20:03:44 ----A---- C:\WINDOWS\system32\colbact.dll
2011-02-08 20:03:44 ----A---- C:\WINDOWS\system32\clbcatex.dll
2011-02-08 20:03:44 ----A---- C:\WINDOWS\system32\catsrvps.dll
2011-02-08 20:03:43 ----A---- C:\WINDOWS\system32\comuid.dll
2011-02-08 20:03:43 ----A---- C:\WINDOWS\system32\comsvcs.dll
2011-02-08 20:03:43 ----A---- C:\WINDOWS\system32\comsnap.dll
2011-02-08 20:03:43 ----A---- C:\WINDOWS\system32\clbcatq.dll
2011-02-08 20:03:43 ----A---- C:\WINDOWS\system32\catsrvut.dll
2011-02-08 20:03:43 ----A---- C:\WINDOWS\system32\catsrv.dll
2011-02-08 20:03:37 ----A---- C:\WINDOWS\system32\servdeps.dll
2011-02-08 20:03:37 ----A---- C:\WINDOWS\system32\mmfutil.dll
2011-02-08 20:03:37 ----A---- C:\WINDOWS\system32\licwmi.dll
2011-02-08 20:03:37 ----A---- C:\WINDOWS\system32\cmprops.dll
2011-02-08 20:03:33 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2011-02-08 20:03:33 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys

======List of files/folders modified in the last 3 months======

2011-04-08 20:04:06 ----A---- C:\WINDOWS\system.ini
2011-02-08 21:09:31 ----A---- C:\WINDOWS\win.ini
2011-02-08 20:32:24 ----A---- C:\WINDOWS\system32\Uninstall.exe
2011-02-08 20:08:32 ----ASH---- C:\WINDOWS\fonts\desktop.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2011-02-08 691696]
R1 AmdK7;Драйвер AMD K7 процессора; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-12-25 41984]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2010-08-03 95896]
R1 oreans32;oreans32; \??\C:\WINDOWS\system32\drivers\oreans32.sys []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-08-04 140752]
R2 LMIRfsDriver;LogMeIn Remote File System Driver; \??\C:\WINDOWS\system32\drivers\LMIRfsDriver.sys []
R2 rspndr;Ответчик обнаружения топологии уровня связи; C:\WINDOWS\system32\DRIVERS\rspndr.sys [2008-10-11 62848]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2008-01-25 4127488]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-12-02 3452928]
R3 ip100xp;IC Plus IP100 10/100 Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\ipfnd51.sys [2005-02-02 26752]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\nvefd2k.sys [2007-07-12 42112]
R3 nvmpu401;Service for NVIDIA(R) nForce(TM) MIDI UART; C:\WINDOWS\system32\drivers\nvmpu401.sys [2006-02-26 10240]
S2 LMIInfo;LogMeIn Kernel Information Provider; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys []
S3 aerk2khn;aerk2khn; C:\WINDOWS\system32\drivers\aerk2khn.sys []
S3 EagleNT;EagleNT; \??\C:\DOCUME~1\Admin\LOCALS~1\Temp\EagleNT.sys []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-02-03 26176]
S3 hidgame;Подключатель HID к игровому порту; C:\WINDOWS\system32\DRIVERS\hidgame.sys [2001-08-17 8576]
S3 HidUsb;Драйвер класса HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 lmimirr;lmimirr; C:\WINDOWS\system32\DRIVERS\lmimirr.sys [2010-09-17 10144]
S3 USBSTOR;Драйвер запоминающих устройств для USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-03-02 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-03-02 82944]
S3 XDva383;XDva383; \??\C:\WINDOWS\system32\XDva383.sys []
S4 LMIRfsClientNP;LMIRfsClientNP; C:\WINDOWS\system32\drivers\LMIRfsClientNP.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-12-02 598016]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-11-04 810144]
R2 Guard.Mail.ru;Guard.Mail.ru; C:\Program Files\Mail.Ru\Guard\GuardMailRu.exe [2011-04-11 1472720]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-02-02 153376]
S3 aspnet_state;Служба состояний ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-11-04 33584]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS\system32\GameMon.des [2010-12-08 3979632]
S3 ose;Office  Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\wmpnetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-15 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------
