Лог утилиты random's system information tool 1.10 (автор: random/random) Run by admin at 2015-02-03 12:22:14 Microsoft Windows 7 Профессиональная Service Pack 1 Системный раздел C: размер 59 GB (59%) Свободно 100 GB Total RAM: 3818 MB (54% free) ======Список процессов====== \SystemRoot\System32\smss.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 winlogon.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\WLANExt.exe 27554784 \??\C:\Windows\system32\conhost.exe "1103289870-89440649-691798605-1089974733486716941455635349-1405606409-1105009615 "taskhost.exe" "C:\Windows\system32\Dwm.exe" C:\Windows\Explorer.EXE C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\system32\svchost.exe -k imgsvc "C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-25addc40-4707-4929-a501-57f4493d5b32 -SystemEventPortName:HostProcess-6478dbe2-dff2-4daa-a305-e5b22cf8ad83 -IoCancelEventPortName:HostProcess-3d7c9086-1a49-42b0-a464-7228c573b8f5 -NonStateChangingEventPortName:HostProcess-c5a597d3-8ebb-4bb1-98fb-17777228efce -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:8895d193-b0a3-4bae-bbe5-da240166ebfd C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding C:\Windows\system32\SearchIndexer.exe /Embedding "C:\Program Files\Windows Media Player\wmpnetwk.exe" C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\System32\svchost.exe -k LocalServicePeerNet "C:\Program Files\palemoon\palemoon.exe" C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\system32\svchost.exe -k SDRSVC "C:\Windows\system32\mspaint.exe" "C:\Program Files\palemoon\plugin-container.exe" --channel=2820.18cc57c0.1451674960 "C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll" -greomni "C:\Program Files\palemoon\omni.ja" -appomni "C:\Program Files\palemoon\browser\omni.ja" -appdir "C:\Program Files\palemoon\browser" - 2820 plugin "C:\Windows\system32\calc.exe" C:\Windows\System32\svchost.exe -k WerSvcGroup "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516 "D:\RSITx64.exe" C:\Windows\system32\wbem\wmiprvse.exe ======Папка назначеных зданий====== C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3718469319-2268923820-1076510825-1000Core.job - C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3718469319-2268923820-1076510825-1000UA.job - C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler =========Mozilla firefox========= ProfilePath - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\lgnyl3ko.default prefs.js - "browser.search.useDBForOrder" - true [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 16.0.0.296 Plugin "Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer] "Description"=Adobe Shockwave Player "Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1214154.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.65.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.65.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect] "Description"= "Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 16.0.0.296 Plugin "Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect] "Description"= "Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll C:\Program Files (x86)\Mozilla Firefox\extensions\ KavAntiBanner@Kaspersky.ru linkfilter@kaspersky.ru {972ce4c6-7e08-4474-a285-3208198ce6fd} C:\Program Files (x86)\Mozilla Firefox\components\ binary.manifest browsercomps.dll C:\Program Files (x86)\Mozilla Firefox\searchplugins\ google.xml mailru.xml ozonru.xml priceru.xml wikipedia-ru.xml yandex-slovari.xml yandex.xml C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\lgnyl3ko.default\extensions\ {37964A3C-4EE8-47b1-8321-34DE2C39BA4D} C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\lgnyl3ko.default\searchplugins\ youtube.xml ======Снимок реестра====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}] SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-14 81024] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}] SteadyVideoBHO Class - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-14 69760] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-07-11 462760] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9961627E-4059-41B4-8E0E-A7D6B3854ADF}] IE 4.x-6.x BHO for Download Master - d:\PROGRA~1\DOWNLO~1\dmiehlp.dll [2009-04-16 158208] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9BFBA68E-E21B-458E-AE12-FE85E903D2C1}] AlterGeoBHO Class - C:\Program Files (x86)\AlterGeo\AlterGeo Magic Scanner\2.8.8.615\AlterGeo.BrowserPlugin.dll [2010-08-31 257384] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-07-11 171944] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "WinFLTray"=C:\Windows\SysWow64\WinFLTray.exe [2015-01-09 330040] "FLBackup"=C:\Program Files (x86)\NewSoftware's\Folder Lock\FLComServCtrl.exe [2015-01-09 275768] "uTorrent"=C:\Program Files (x86)\uTorrent\uTorrent.exe [2013-11-26 735608] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-03-21 472992] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCEPServiceManager] C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe [2013-03-13 1039248] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update] C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe [2014-03-16 116648] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Infium] D:\Program Files\QIP 2012\qip.exe [2013-11-25 8502256] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IP Blocker] D:\program files\IP_Blocker_2.0\IPBlocker.exe [2011-08-25 1445888] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MAgent] C:\Program Files (x86)\Mail.Ru\Agent\magent.exe [2014-12-25 12826304] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MINI IP Blocker] D:\Program Files\IP_Blocker_2.0\MiniIPBlocker.exe [2011-08-13 561152] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerDVD13Agent] C:\Program Files (x86)\PowerDVD13\PowerDVD13\PowerDVD13Agent.exe [2013-05-03 513048] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-06-09 11860072] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2013-10-08 766208] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-07-11 256896] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe [2013-11-26 735608] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\wmagent.exe] C:\Program Files (x86)\WebMoney Agent\wmagent.exe [2009-10-19 210400] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^PrivateTunnel.lnk] C:\PROGRA~2\OpenVPN\PRIVAT~1.EXE [2014-10-03 310680] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^admin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^USB Disk Security.lnk] C:\PROGRA~2\USBDIS~1\USBGuard.exe [2011-11-04 2048928] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinFLAdrv.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableTaskmgr"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "PromptOnSecureDesktop"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "HideFastUserSwitching"=0 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoClose"=0 "NoLogoff"=0 "NoDriveTypeAutoRun"=221 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 "NoDriveTypeAutoRun"=56 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "MSVideo8"=VfWWDM32.dll "vidc.XVID"=xvidvfw.dll "msacm.ac3filter"=ac3filter64.acm "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "aux2"=wdmaud.drv ======Ассоциации файлов====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======Список файлов и папок, созданных за последние 3 месяца====== 2015-02-03 12:22:14 ----D---- C:\rsit 2015-02-03 12:22:14 ----D---- C:\Program Files\trend micro 2015-02-03 00:15:49 ----D---- C:\Windows\CheckSur 2015-02-02 16:18:15 ----D---- C:\Users\admin\AppData\Roaming\Moonchild Productions 2015-02-02 16:17:30 ----D---- C:\Program Files\palemoon 2015-02-01 18:14:14 ----A---- C:\Windows\ntbtlog.txt 2015-02-01 14:13:05 ----D---- C:\ProgramData\Kaspersky Lab 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-02-01 13:13:17 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-02-01 13:13:17 ----A---- C:\Windows\system32\wow64win.dll 2015-02-01 13:13:17 ----A---- C:\Windows\system32\wow64cpu.dll 2015-02-01 13:13:17 ----A---- C:\Windows\system32\wow64.dll 2015-02-01 13:13:17 ----A---- C:\Windows\system32\winsrv.dll 2015-02-01 13:13:17 ----A---- C:\Windows\system32\tdh.dll 2015-02-01 13:13:17 ----A---- C:\Windows\system32\smss.exe 2015-02-01 13:13:17 ----A---- C:\Windows\system32\ntvdm64.dll 2015-02-01 13:13:17 ----A---- C:\Windows\system32\ntoskrnl.exe 2015-02-01 13:13:17 ----A---- C:\Windows\system32\ntdll.dll 2015-02-01 13:13:17 ----A---- C:\Windows\system32\KernelBase.dll 2015-02-01 13:13:17 ----A---- C:\Windows\system32\kernel32.dll 2015-02-01 13:13:17 ----A---- C:\Windows\system32\csrsrv.dll 2015-02-01 13:13:17 ----A---- C:\Windows\system32\conhost.exe 2015-02-01 13:13:17 ----A---- C:\Windows\system32\advapi32.dll 2015-02-01 13:13:05 ----A---- C:\Windows\system32\mswsock.dll 2015-02-01 13:13:05 ----A---- C:\Windows\system32\drivers\tcpip.sys 2015-02-01 13:13:05 ----A---- C:\Windows\system32\drivers\afd.sys 2015-02-01 12:36:39 ----A---- C:\Windows\system32\UIAnimation.dll 2015-02-01 12:36:39 ----A---- C:\Windows\system32\msmpeg2vdec.dll 2015-02-01 12:36:36 ----A---- C:\Windows\system32\WMPhoto.dll 2015-02-01 12:36:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2015-02-01 12:36:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2015-02-01 12:36:33 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2015-02-01 12:36:33 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2015-02-01 12:36:33 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2015-02-01 12:36:33 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2015-02-01 12:36:33 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2015-02-01 12:36:33 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2015-02-01 12:36:33 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2015-02-01 12:36:33 ----A---- C:\Windows\system32\XpsGdiConverter.dll 2015-02-01 12:36:33 ----A---- C:\Windows\system32\d3d10warp.dll 2015-02-01 12:36:33 ----A---- C:\Windows\system32\d3d10_1.dll 2015-02-01 12:36:32 ----A---- C:\Windows\system32\dxgi.dll 2015-02-01 12:36:32 ----A---- C:\Windows\system32\d3d10level9.dll 2015-02-01 12:36:32 ----A---- C:\Windows\system32\d3d10core.dll 2015-02-01 12:36:32 ----A---- C:\Windows\system32\d3d10_1core.dll 2015-02-01 12:36:32 ----A---- C:\Windows\system32\d3d10.dll 2015-02-01 12:36:31 ----A---- C:\Windows\system32\XpsPrint.dll 2015-02-01 12:36:31 ----A---- C:\Windows\system32\WindowsCodecsExt.dll 2015-02-01 12:36:31 ----A---- C:\Windows\system32\WindowsCodecs.dll 2015-02-01 12:36:31 ----A---- C:\Windows\system32\FntCache.dll 2015-02-01 12:36:31 ----A---- C:\Windows\system32\DWrite.dll 2015-02-01 12:36:31 ----A---- C:\Windows\system32\d2d1.dll 2015-01-31 18:51:23 ----A---- C:\Windows\system32\IEUDINIT.EXE 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-01-31 18:43:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll 2015-01-31 18:43:19 ----A---- C:\Windows\SYSWOW64\wow32.dll 2015-01-31 18:43:19 ----A---- C:\Windows\SYSWOW64\user.exe 2015-01-31 18:43:19 ----A---- C:\Windows\SYSWOW64\tdh.dll 2015-01-31 18:43:19 ----A---- C:\Windows\SYSWOW64\setup16.exe 2015-01-31 18:43:19 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll 2015-01-31 18:43:19 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe 2015-01-31 18:43:19 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe 2015-01-31 18:43:19 ----A---- C:\Windows\SYSWOW64\ntdll.dll 2015-01-31 18:43:19 ----A---- C:\Windows\SYSWOW64\KernelBase.dll 2015-01-31 18:43:19 ----A---- C:\Windows\SYSWOW64\kernel32.dll 2015-01-31 18:43:19 ----A---- C:\Windows\SYSWOW64\instnm.exe 2015-01-31 18:43:19 ----A---- C:\Windows\SYSWOW64\apisetschema.dll 2015-01-31 18:43:19 ----A---- C:\Windows\SYSWOW64\advapi32.dll 2015-01-31 18:42:54 ----A---- C:\Windows\SYSWOW64\mswsock.dll 2015-01-31 18:40:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2015-01-31 18:40:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2015-01-31 18:40:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2015-01-31 18:40:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2015-01-31 18:40:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2015-01-31 18:40:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2015-01-31 18:40:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2015-01-31 18:40:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2015-01-31 18:40:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2015-01-31 18:40:57 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll 2015-01-31 18:40:57 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll 2015-01-31 18:40:57 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll 2015-01-31 18:40:57 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll 2015-01-31 18:40:57 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll 2015-01-31 18:40:57 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll 2015-01-31 18:40:57 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll 2015-01-31 18:40:57 ----A---- C:\Windows\SYSWOW64\dxgi.dll 2015-01-31 18:40:57 ----A---- C:\Windows\SYSWOW64\DWrite.dll 2015-01-31 18:40:57 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll 2015-01-31 18:40:57 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll 2015-01-31 18:40:57 ----A---- C:\Windows\SYSWOW64\d3d10core.dll 2015-01-31 18:40:57 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll 2015-01-31 18:40:57 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll 2015-01-31 18:40:57 ----A---- C:\Windows\SYSWOW64\d3d10.dll 2015-01-31 18:40:57 ----A---- C:\Windows\SYSWOW64\d2d1.dll 2015-01-31 18:39:41 ----A---- C:\Windows\SYSWOW64\d3d11.dll 2015-01-31 18:39:41 ----A---- C:\Windows\system32\d3d11.dll 2015-01-30 20:51:27 ----ASH---- C:\Windows\SYSWOW64\win_stlthdb_sys.dat 2015-01-12 14:22:35 ----D---- C:\Program Files (x86)\Monkey's Audio 2015-01-12 14:22:35 ----A---- C:\Windows\SYSWOW64\MACDll.dll 2015-01-09 22:46:01 ----ASH---- C:\Windows\SYSWOW64\win_fldb_sys.dat 2015-01-09 22:43:54 ----ASH---- C:\Windows\SYSWOW64\win_flfiles_sys.dat 2015-01-09 22:43:34 ----A---- C:\Windows\SYSWOW64\WinFLAdrv.sys 2015-01-09 22:43:33 ----A---- C:\Windows\SYSWOW64\WinVDEdrv6.sys 2015-01-09 22:43:32 ----A---- C:\Windows\SYSWOW64\WinVDEdrv.sys 2015-01-09 22:43:17 ----A---- C:\Windows\SYSWOW64\WinFLService.exe 2015-01-09 22:43:16 ----A---- C:\Windows\SYSWOW64\WinFLMsgService.exe 2015-01-09 22:43:15 ----A---- C:\Windows\SYSWOW64\nwsftUninstall.exe 2015-01-09 22:43:14 ----A---- C:\Windows\SYSWOW64\WinFLTray.exe 2015-01-09 22:43:13 ----A---- C:\Windows\SYSWOW64\WinFLTrayShred.exe 2015-01-09 22:43:11 ----D---- C:\Program Files (x86)\NewSoftware's 2015-01-05 16:31:25 ----D---- C:\Users\admin\AppData\Roaming\Klipfolio 2014-12-30 16:24:54 ----D---- C:\Windows\pss 2014-12-28 00:35:07 ----D---- C:\ProgramData\BlueStacksSetup 2014-12-25 19:06:32 ----D---- C:\ProgramData\Guard.Mail.Ru 2014-12-25 19:01:31 ----D---- C:\Program Files (x86)\AlterGeo 2014-12-25 19:01:26 ----D---- C:\0000_mra_logs 2014-12-25 19:01:11 ----D---- C:\Users\admin\AppData\Roaming\Mra 2014-12-25 19:01:11 ----D---- C:\Program Files (x86)\Mail.Ru 2014-12-20 21:26:41 ----D---- C:\Program Files\TAP-Windows 2014-12-20 21:23:11 ----A---- C:\Windows\SYSWOW64\libeay32.dll 2014-12-20 21:22:25 ----A---- C:\Windows\system32\libeay32.dll 2014-12-20 21:10:40 ----D---- C:\Program Files (x86)\OpenVPN 2014-12-20 21:08:26 ----D---- C:\Program Files (x86)\WinSCP 2014-12-02 17:29:14 ----AD---- C:\oscill_new 2014-11-05 19:16:32 ----A---- C:\Windows\system32\drivers\tap0901.sys ======Список файлов и папок, измененных за последние 3 месяца====== 2015-02-03 12:22:17 ----D---- C:\Windows\Temp 2015-02-03 12:22:14 ----RD---- C:\Program Files 2015-02-03 12:21:22 ----D---- C:\Windows 2015-02-03 11:58:03 ----D---- C:\Windows\System32 2015-02-03 11:58:03 ----D---- C:\Windows\inf 2015-02-03 11:58:03 ----A---- C:\Windows\system32\PerfStringBackup.INI 2015-02-03 11:23:16 ----SHD---- C:\System Volume Information 2015-02-03 11:11:36 ----D---- C:\Windows\system32\config 2015-02-02 17:54:32 ----D---- C:\Windows\rescache 2015-02-02 16:30:38 ----SHD---- C:\Windows\Installer 2015-02-02 15:38:55 ----D---- C:\Windows\winsxs 2015-02-01 18:34:34 ----D---- C:\Windows\SysWOW64 2015-02-01 17:56:10 ----D---- C:\Windows\system32\wfp 2015-02-01 17:55:09 ----D---- C:\Windows\system32\drivers 2015-02-01 17:55:09 ----D---- C:\Windows\AppPatch 2015-02-01 17:55:04 ----D---- C:\Windows\system32\wbem 2015-02-01 17:54:24 ----D---- C:\Windows\Tasks 2015-02-01 17:54:24 ----D---- C:\Windows\system32\DriverStore 2015-02-01 17:54:24 ----D---- C:\Windows\system32\catroot2 2015-02-01 17:54:20 ----D---- C:\Users\admin\AppData\Roaming\uTorrent 2015-02-01 17:54:20 ----D---- C:\doublecmd 2015-02-01 17:54:17 ----D---- C:\Windows\registration 2015-02-01 17:54:05 ----D---- C:\Windows\system32\catroot 2015-02-01 17:53:59 ----HD---- C:\ProgramData 2015-02-01 17:44:24 ----D---- C:\Users\admin\AppData\Roaming\FileZilla 2015-02-01 13:44:22 ----D---- C:\Windows\Logs 2015-02-01 13:03:56 ----RD---- C:\Program Files (x86) 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\zh-TW 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\zh-HK 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\zh-CN 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\tr-TR 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\sv-SE 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\ru-RU 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\pt-PT 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\pt-BR 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\pl-PL 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\nl-NL 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\nb-NO 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\ko-KR 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\ja-JP 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\it-IT 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\hu-HU 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\fr-FR 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\fi-FI 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\es-ES 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\en-US 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\el-GR 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\de-DE 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\da-DK 2015-02-01 12:38:32 ----D---- C:\Windows\SYSWOW64\cs-CZ 2015-02-01 12:38:32 ----D---- C:\Windows\system32\zh-TW 2015-02-01 12:38:32 ----D---- C:\Windows\system32\zh-HK 2015-02-01 12:38:32 ----D---- C:\Windows\system32\zh-CN 2015-02-01 12:38:32 ----D---- C:\Windows\system32\tr-TR 2015-02-01 12:38:32 ----D---- C:\Windows\system32\sv-SE 2015-02-01 12:38:32 ----D---- C:\Windows\system32\pt-PT 2015-02-01 12:38:32 ----D---- C:\Windows\system32\pt-BR 2015-02-01 12:38:32 ----D---- C:\Windows\system32\pl-PL 2015-02-01 12:38:32 ----D---- C:\Windows\system32\nl-NL 2015-02-01 12:38:32 ----D---- C:\Windows\system32\ko-KR 2015-02-01 12:38:32 ----D---- C:\Windows\system32\it-IT 2015-02-01 12:38:32 ----D---- C:\Windows\system32\hu-HU 2015-02-01 12:38:32 ----D---- C:\Windows\system32\fr-FR 2015-02-01 12:38:32 ----D---- C:\Windows\system32\fi-FI 2015-02-01 12:38:32 ----D---- C:\Windows\system32\es-ES 2015-02-01 12:38:32 ----D---- C:\Windows\system32\el-GR 2015-02-01 12:38:32 ----D---- C:\Windows\system32\de-DE 2015-02-01 12:38:32 ----D---- C:\Windows\system32\cs-CZ 2015-02-01 12:38:31 ----D---- C:\Windows\system32\ru-RU 2015-02-01 12:38:31 ----D---- C:\Windows\system32\nb-NO 2015-02-01 12:38:31 ----D---- C:\Windows\system32\ja-JP 2015-02-01 12:38:31 ----D---- C:\Windows\system32\en-US 2015-02-01 12:38:31 ----D---- C:\Windows\system32\da-DK 2015-02-01 12:38:30 ----RSD---- C:\Windows\Fonts 2015-02-01 12:34:22 ----D---- C:\Windows\SoftwareDistribution 2015-02-01 10:12:43 ----D---- C:\Windows\SYSWOW64\migration 2015-02-01 10:12:43 ----D---- C:\Windows\system32\migration 2015-02-01 10:12:43 ----D---- C:\Windows\PolicyDefinitions 2015-02-01 10:12:43 ----D---- C:\Program Files\Internet Explorer 2015-02-01 10:12:43 ----D---- C:\Program Files (x86)\Internet Explorer 2015-02-01 00:29:07 ----D---- C:\Users\admin\AppData\Roaming\foobar2000 2015-01-30 00:35:57 ----D---- C:\Users\admin\AppData\Roaming\Skype 2015-01-29 18:25:42 ----D---- C:\Users\admin\AppData\Roaming\Foxmail7 2015-01-27 15:36:38 ----AD---- C:\ProgramData\Temp 2015-01-27 15:35:03 ----D---- C:\Users\admin\AppData\Roaming\WebMoney 2015-01-27 00:00:16 ----D---- C:\Windows\Microsoft.NET 2015-01-26 23:18:50 ----RSD---- C:\Windows\assembly 2015-01-25 14:24:31 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2015-01-19 16:57:20 ----D---- C:\Windows\Minidump 2015-01-12 02:08:17 ----D---- C:\ProgramData\Microsoft Help 2015-01-12 02:07:18 ----D---- C:\Windows\ShellNew 2014-12-29 14:08:44 ----D---- C:\Windows\system32\Tasks 2014-12-28 00:34:43 ----SD---- C:\Users\admin\AppData\Roaming\Microsoft 2014-12-22 18:51:40 ----A---- C:\Users\admin\AppData\Roaming\bitlord_log.txt 2014-12-04 00:56:51 ----D---- C:\Users\admin\AppData\Roaming\BitLord 2014-11-16 22:57:41 ----D---- C:\Windows\AppCompat ======Список драйверов (тип запуска: R=Запущен, S=остановлен, 0=Загрузочный, 1=Системный, 2=Автоматически, 3=Вручную, 4=Отключено)====== R0 oem-drv64;OEM-SLP2.1 Driver (HPD64); C:\Windows\system32\DRIVERS\oem-drv64.sys [2015-02-03 42496] R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888] R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560] R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-12-27 283200] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] R1 WinFLAdrv;WinFLAdrv; C:\Windows\SysWOW64\WinFLAdrv.sys [2015-01-09 36384] R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5};Power Control [2013/11/26 00:43:33]; \??\C:\Program Files (x86)\PowerDVD13\PowerDVD13\Common\NavFilter\000.fcl [2013-05-03 130320] R2 AODDriver4.2;AODDriver4.2; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-11-20 57512] R2 NEWDRIVER;NEWDRIVER; \??\C:\Windows\SysWow64\WinVDEdrv6.sys [2015-01-09 197648] R2 WinVDEDrv;WinVDEDrv; \??\C:\Windows\SysWow64\WinVDEdrv.sys [2015-01-09 225680] R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-10-08 12534784] R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-10-08 619008] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-06-14 2899176] R3 MBfilt;MBfilt; C:\Windows\system32\drivers\MBfilt64.sys [2009-11-18 32344] R3 NBlocker;NBlocker Miniport; C:\Windows\system32\DRIVERS\nblocker.sys [2010-05-04 38496] R3 ptun0901;TAP Adapter V9 for Private Tunnel; C:\Windows\system32\DRIVERS\ptun0901.sys [2014-08-08 27136] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-04-22 471144] R3 RTL8192cu;B-Link RTL8192CU Wireless LAN 802.11n USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\rtwlanu.sys [2011-07-13 1045608] S3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-07-05 96256] S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168] S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2012-01-09 19968] S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2012-01-09 27136] S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112] S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888] S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656] S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688] S3 tap0901;TAP-Windows Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys [2014-11-05 27136] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392] S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232] S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216] S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-21 32768] S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216] S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552] S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760] S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920] S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984] ======Список служб (тип запуска: R=Запущена, S=остановлена, 0=Загрузочная, 1=Системная, 2=Автоматически, 3=Вручную, 4=Отключено)====== R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-07-09 104912] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-08 123856] S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136] S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088] S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-25 267440] S4 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-10-08 239616] S4 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-10-08 344064] S4 AMD_RAIDXpert;AMD RAIDXpert; C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe [2010-11-28 128904] S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-08 51648] S4 B-Link11nCU;B-Link11nCU; C:\Program Files (x86)\B-Link\11n USB Wireless LAN Utility\RtlService.exe [2010-04-16 36864] S4 CyberLink PowerDVD 13 Media Server Monitor Service;CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files (x86)\PowerDVD13\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [2013-05-03 77576] S4 CyberLink PowerDVD 13 Media Server Service;CyberLink PowerDVD 13 Media Server Service; C:\Program Files (x86)\PowerDVD13\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [2013-05-03 323336] S4 FLService;FLService; C:\Windows\SysWow64\WinFLService.exe [2015-01-09 92984] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696] S4 OMSI download service;Sony Ericsson OMSI download service; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112] S4 OpenVPNService;OpenVPN Service; C:\users\admin\OpenVPN\bin\openvpnserv.exe [2014-12-01 38200] S4 ptservice;Private Tunnel Core Service; C:\Program Files (x86)\OpenVPN\ptservice.exe [2014-10-03 17816] S4 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376] S4 TeamViewer9;TeamViewer 9; d:\Program Files\TeamViewer\TeamViewer_Service.exe [2013-12-17 5341536] -----------------EOF-----------------