Here is log from OTL.
OTL logfile created on: 29.10.2011 4:39:00 - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\YaChrista\Рабочий стол
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000422 | Country: Украина | Language: UKR | Date Format: dd.MM.yyyy
1013,88 Mb Total Physical Memory | 511,16 Mb Available Physical Memory | 50,42% Memory free
2,38 Gb Paging File | 2,01 Gb Available in Paging File | 84,44% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 142,05 Gb Total Space | 8,86 Gb Free Space | 6,24% Space Free | Partition Type: NTFS
Computer Name: CHRISTA | User Name: YaChrista | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2011.10.29 04:30:31 | 000,284,880 | ---- | M] () -- C:\WINDOWS\Temp\GuardGuard.exe
PRC - [2011.10.28 09:59:28 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\YaChrista\Рабочий стол\OTL.exe
PRC - [2011.08.31 17:00:48 | 000,449,608 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2011.08.31 17:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2011.06.26 22:16:41 | 001,472,720 | ---- | M] () -- C:\Program Files\Mail.Ru\Guard\GuardMailRu.exe
PRC - [2009.09.29 14:03:46 | 000,735,960 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
PRC - [2009.09.29 14:02:52 | 002,054,360 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
PRC - [2009.02.11 15:46:28 | 000,565,248 | ---- | M] (Acer Incorporated) -- C:\Program Files\Acer\Acer VCM\AcerVCM.exe
PRC - [2009.02.09 14:25:55 | 000,111,104 | ---- | M] (Корпорация Майкрософт) -- C:\WINDOWS\system32\services.exe
PRC - [2008.10.14 10:15:08 | 000,032,768 | ---- | M] () -- C:\WINDOWS\WebCam\M3000\M3000Mnt.exe
PRC - [2008.06.09 15:00:00 | 001,034,240 | ---- | M] (Корпорация Майкрософт) -- C:\WINDOWS\explorer.exe
PRC - [2008.06.09 15:00:00 | 000,509,440 | ---- | M] (Корпорация Майкрософт) -- C:\WINDOWS\system32\winlogon.exe
PRC - [2008.06.09 15:00:00 | 000,126,464 | ---- | M] (Корпорация Майкрософт) -- C:\WINDOWS\system32\wbem\wmiapsrv.exe
PRC - [2008.06.09 15:00:00 | 000,050,688 | ---- | M] (Корпорация Майкрософт) -- C:\WINDOWS\system32\smss.exe
PRC - [2008.04.15 17:54:42 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
========== Modules (No Company Name) ==========
MOD - [2011.10.29 04:30:31 | 000,284,880 | ---- | M] () -- C:\WINDOWS\Temp\GuardGuard.exe
MOD - [2011.06.26 22:16:41 | 001,472,720 | ---- | M] () -- C:\Program Files\Mail.Ru\Guard\GuardMailRu.exe
MOD - [2008.10.14 10:15:08 | 000,032,768 | ---- | M] () -- C:\WINDOWS\WebCam\M3000\M3000Mnt.exe
MOD - [2008.06.20 20:48:23 | 000,247,296 | ---- | M] () -- \\?\globalroot\systemroot\system32\mswsock.dll
MOD - [2008.06.20 20:48:23 | 000,247,296 | ---- | M] () -- \\.\globalroot\systemroot\system32\mswsock.dll
MOD - [2008.06.04 09:53:14 | 000,026,624 | ---- | M] () -- C:\WINDOWS\system32\spd__l.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt)
SRV - [2011.08.31 17:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2011.06.26 22:16:41 | 001,472,720 | ---- | M] () [Auto | Running] -- C:\Program Files\Mail.Ru\Guard\GuardMailRu.exe -- (Guard.Mail.ru)
SRV - [2010.08.09 05:04:02 | 000,131,888 | ---- | M] (Samsung Electronics CO., LTD.) [On_Demand | Stopped] -- C:\WINDOWS\System32\SUPDSvc.exe -- (Samsung UPD Service)
SRV - [2009.09.29 14:11:10 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009.09.29 14:03:46 | 000,735,960 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2009.07.28 02:19:10 | 000,135,680 | ---- | M] (Корпорация Майкрософт) [Auto | Running] -- C:\WINDOWS\system32\shsvcs.dll -- (Themes)
SRV - [2009.07.28 02:19:10 | 000,135,680 | ---- | M] (Корпорация Майкрософт) [Auto | Running] -- C:\WINDOWS\system32\shsvcs.dll -- (ShellHWDetection)
SRV - [2009.07.28 02:19:10 | 000,135,680 | ---- | M] (Корпорация Майкрософт) [On_Demand | Running] -- C:\WINDOWS\system32\shsvcs.dll -- (FastUserSwitchingCompatibility)
SRV - [2009.02.09 14:25:55 | 000,111,104 | ---- | M] (Корпорация Майкрософт) [Auto | Running] -- C:\WINDOWS\system32\services.exe -- (PlugPlay)
SRV - [2009.02.09 14:25:55 | 000,111,104 | ---- | M] (Корпорация Майкрософт) [Auto | Running] -- C:\WINDOWS\system32\services.exe -- (Eventlog)
SRV - [2009.02.05 08:14:56 | 000,237,568 | ---- | M] (Acer Incorporated) [Auto | Stopped] -- C:\Program Files\Acer\Acer VCM\RS_Service.exe -- (RS_Service)
SRV - [2008.11.11 10:38:06 | 000,620,544 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008.06.20 20:48:23 | 000,247,296 | ---- | M] (Корпорация Майкрософт) [On_Demand | Stopped] -- C:\WINDOWS\system32\mswsock.dll -- (Nla) Служба сетевого расположения (NLA)
SRV - [2008.06.09 15:00:00 | 000,483,840 | ---- | M] (Корпорация Майкрософт) [Auto | Running] -- C:\WINDOWS\system32\wzcsvc.dll -- (WZCSVC)
SRV - [2008.06.09 15:00:00 | 000,436,736 | ---- | M] (Корпорация Майкрософт) [On_Demand | Stopped] -- C:\WINDOWS\system32\ntmssvc.dll -- (NtmsSvc)
SRV - [2008.06.09 15:00:00 | 000,409,088 | ---- | M] (Корпорация Майкрософт) [Auto | Running] -- C:\WINDOWS\system32\qmgr.dll -- (BITS) Фоновая интеллектуальная служба передачи (BITS)
SRV - [2008.06.09 15:00:00 | 000,333,824 | ---- | M] (Корпорация Майкрософт) [Auto | Running] -- C:\WINDOWS\system32\wiaservc.dll -- (stisvc) Служба загрузки изображений (WIA)
SRV - [2008.06.09 15:00:00 | 000,331,264 | ---- | M] (Корпорация Майкрософт) [Auto | Running] -- C:\WINDOWS\system32\ipnathlp.dll -- (SharedAccess) Брандмауэр Windows/Общий доступ к Интернету (ICS)
SRV - [2008.06.09 15:00:00 | 000,295,936 | ---- | M] (Корпорация Майкрософт) [Auto | Running] -- C:\WINDOWS\system32\termsrv.dll -- (TermService)
SRV - [2008.06.09 15:00:00 | 000,290,304 | ---- | M] (Корпорация Майкрософт) [On_Demand | Stopped] -- C:\WINDOWS\system32\vssvc.exe -- (VSS)
SRV - [2008.06.09 15:00:00 | 000,249,856 | ---- | M] (Корпорация Майкрософт) [On_Demand | Running] -- C:\WINDOWS\system32\tapisrv.dll -- (TapiSrv)
SRV - [2008.06.09 15:00:00 | 000,198,144 | ---- | M] (Корпорация Майкрософт) [On_Demand | Running] -- C:\WINDOWS\system32\netman.dll -- (Netman)
SRV - [2008.06.09 15:00:00 | 000,193,024 | ---- | M] (Корпорация Майкрософт) [Auto | Running] -- C:\WINDOWS\system32\schedsvc.dll -- (Schedule)
SRV - [2008.06.09 15:00:00 | 000,186,368 | ---- | M] (Корпорация Майкрософт) [On_Demand | Stopped] -- C:\WINDOWS\system32\upnphost.dll -- (upnphost)
SRV - [2008.06.09 15:00:00 | 000,175,616 | ---- | M] (Корпорация Майкрософт) [Auto | Running] -- C:\WINDOWS\system32\w32time.dll -- (W32Time)
SRV - [2008.06.09 15:00:00 | 000,171,008 | ---- | M] (Корпорация Майкрософт) [Auto | Running] -- C:\WINDOWS\system32\srsvc.dll -- (srservice)
SRV - [2008.06.09 15:00:00 | 000,150,528 | ---- | M] (Корпорация Майкрософт) [On_Demand | Stopped] -- C:\WINDOWS\system32\imapi.exe -- (ImapiService)
SRV - [2008.06.09 15:00:00 | 000,145,408 | ---- | M] (Корпорация Майкрософт) [Auto | Running] -- C:\WINDOWS\system32\wbem\wmisvc.dll -- (winmgmt)
SRV - [2008.06.09 15:00:00 | 000,141,824 | ---- | M] (Корпорация Майкрософт) [On_Demand | Stopped] -- C:\WINDOWS\system32\sessmgr.exe -- (RDSessMgr)
SRV - [2008.06.09 15:00:00 | 000,126,464 | ---- | M] (Корпорация Майкрософт) [On_Demand | Running] -- C:\WINDOWS\system32\wbem\wmiapsrv.exe -- (WmiApSrv)
SRV - [2008.06.09 15:00:00 | 000,126,464 | ---- | M] (Корпорация Майкрософт) [Auto | Running] -- C:\WINDOWS\system32\dhcpcsvc.dll -- (Dhcp)
SRV - [2008.06.09 15:00:00 | 000,113,664 | ---- | M] (Корпорация Майкрософт) [Disabled | Stopped] -- C:\WINDOWS\system32\netdde.exe -- (NetDDEdsdm)
SRV - [2008.06.09 15:00:00 | 000,113,664 | ---- | M] (Корпорация Майкрософт) [Disabled | Stopped] -- C:\WINDOWS\system32\netdde.exe -- (NetDDE)
SRV - [2008.06.09 15:00:00 | 000,096,768 | ---- | M] (Корпорация Майкрософт) [On_Demand | Stopped] -- C:\WINDOWS\system32\scardsvr.exe -- (SCardSvr)
SRV - [2008.06.09 15:00:00 | 000,091,648 | ---- | M] (Корпорация Майкрософт) [On_Demand | Stopped] -- C:\WINDOWS\system32\smlogsvc.exe -- (SysmonLog)
SRV - [2008.06.09 15:00:00 | 000,045,568 | ---- | M] (Корпорация Майкрософт) [Auto | Running] -- C:\WINDOWS\system32\dnsrslvr.dll -- (Dnscache)
SRV - [2008.06.09 15:00:00 | 000,032,768 | ---- | M] (Корпорация Майкрософт) [On_Demand | Stopped] -- C:\WINDOWS\system32\mnmsrvc.exe -- (mnmsrvc)
SRV - [2008.06.09 15:00:00 | 000,024,064 | ---- | M] (Корпорация Майкрософт) [On_Demand | Stopped] -- C:\WINDOWS\system32\dmserver.dll -- (dmserver)
SRV - [2008.06.09 15:00:00 | 000,018,944 | ---- | M] (Корпорация Майкрософт) [Auto | Running] -- C:\WINDOWS\system32\seclogon.dll -- (seclogon)
SRV - [2008.04.15 17:54:42 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel®
========== Driver Services (SafeList) ==========
DRV - [2011.08.31 17:00:50 | 000,022,216 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2010.04.28 07:44:02 | 000,054,760 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr)
DRV - [2010.04.08 20:16:30 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009.10.12 15:21:54 | 000,100,736 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbdev.sys -- (hwusbdev)
DRV - [2009.09.29 14:05:54 | 000,096,408 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir)
DRV - [2009.09.29 14:02:58 | 000,108,792 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009.09.29 13:56:32 | 000,116,008 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2009.09.10 14:55:52 | 000,102,528 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2009.03.02 08:03:46 | 000,038,912 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\l1c51x86.sys -- (L1c)
DRV - [2009.02.25 19:17:52 | 001,344,224 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athw.sys -- (AR5416)
DRV - [2009.02.24 11:49:44 | 005,032,448 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2009.02.03 09:42:30 | 000,162,816 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV - [2009.01.02 17:33:54 | 000,145,408 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\M3000KNT.sys -- (M3000Srv)
DRV - [2008.08.26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008.08.05 15:10:12 | 001,684,736 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2008.06.09 15:00:00 | 000,188,288 | ---- | M] (Корпорация Майкрософт) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ACPI.sys -- (ACPI)
DRV - [2008.06.09 15:00:00 | 000,125,440 | ---- | M] (Корпорация Майкрософт) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ftdisk.sys -- (Ftdisk)
DRV - [2008.06.09 15:00:00 | 000,120,192 | ---- | M] (Корпорация Майкрософт) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\pcmcia.sys -- (Pcmcia)
DRV - [2008.06.09 15:00:00 | 000,080,128 | ---- | M] (Корпорация Майкрософт) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\parport.sys -- (Parport)
DRV - [2008.06.09 15:00:00 | 000,073,472 | ---- | M] (Корпорация Майкрософт) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\sr.sys -- (sr)
DRV - [2008.06.09 15:00:00 | 000,068,480 | ---- | M] (Корпорация Майкрософт) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\pci.sys -- (PCI)
DRV - [2008.06.09 15:00:00 | 000,065,024 | ---- | M] (Корпорация Майкрософт) [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\drivers\serial.sys -- (Serial)
DRV - [2008.06.09 15:00:00 | 000,051,968 | ---- | M] (Корпорация Майкрософт) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\volsnap.sys -- (VolSnap)
DRV - [2008.06.09 15:00:00 | 000,044,544 | ---- | M] (Корпорация Майкрософт) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\fips.sys -- (Fips)
DRV - [2008.06.09 15:00:00 | 000,037,504 | ---- | M] (Корпорация Майкрософт) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\isapnp.sys -- (isapnp)
DRV - [2008.06.09 15:00:00 | 000,030,208 | ---- | M] (Корпорация Майкрософт) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\modem.sys -- (Modem)
DRV - [2008.06.09 15:00:00 | 000,024,832 | ---- | M] (Корпорация Майкрософт) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\kbdclass.sys -- (Kbdclass)
DRV - [2008.06.09 15:00:00 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usb8023.sys -- (USB_RNDIS)
DRV - [2008.06.09 15:00:00 | 000,011,776 | ---- | M] (Корпорация Майкрософт) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ACPIEC.sys -- (ACPIEC)
DRV - [2008.06.09 15:00:00 | 000,006,912 | ---- | M] (Корпорация Майкрософт) [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\drivers\parvdm.sys -- (ParVdm)
DRV - [2008.06.09 15:00:00 | 000,005,504 | ---- | M] (Корпорация Майкрософт) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\intelide.sys -- (IntelIde)
DRV - [2008.06.09 15:00:00 | 000,004,992 | ---- | M] (Корпорация Майкрософт) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\toside.sys -- (TosIde)
DRV - [2008.06.09 15:00:00 | 000,003,328 | ---- | M] (Корпорация Майкрософт) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\pciide.sys -- (PCIIde)
DRV - [2008.04.14 21:14:10 | 000,053,120 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\i8042prt.sys -- (i8042prt)
DRV - [2008.04.14 21:11:48 | 000,058,368 | ---- | M] (Корпорация Майкрософт) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\redbook.sys -- (redbook)
DRV - [2008.04.14 21:07:44 | 000,023,296 | ---- | M] (Корпорация Майкрософт) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\mouclass.sys -- (Mouclass)
DRV - [2007.11.05 11:54:00 | 000,879,528 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2007.11.05 11:53:58 | 000,539,576 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2007.08.27 07:58:18 | 000,074,656 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2007.06.29 06:38:30 | 000,156,392 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2007.03.31 07:02:40 | 000,055,352 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwhid.sys -- (btwhid)
DRV - [2007.03.23 04:50:36 | 000,037,280 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwmodem.sys -- (btwmodem)
DRV - [2007.03.23 04:50:08 | 000,037,424 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2006.11.02 16:27:36 | 000,020,112 | ---- | M] (Dritek System Inc.) [Kernel | System | Running] -- C:\Program Files\Launch Manager\DPortIO.sys -- (DritekPortIO)
DRV - [2006.10.23 04:36:38 | 000,093,440 | ---- | M] (AnyDATA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\adusbser.sys -- (adusbser)
DRV - [2006.01.04 10:41:48 | 001,389,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2001.10.19 19:33:10 | 000,012,160 | ---- | M] (Корпорация Майкрософт) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mouhid.sys -- (mouhid)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://start.icq.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
IE - HKCU\..\URLSearchHook: - No CLSID value found
IE - HKCU\..\URLSearchHook: {09900DE8-1DCA-443F-9243-26FF581438AF} - C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll (@Mail.Ru)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaulturl: "http://search.icq.co...b_ver=1.3.1&q="
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.com.ua/"
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:2.0.0.6
FF - prefs.js..extensions.enabledItems: [email protected]:1.0
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.6
FF - prefs.js..keyword.URL: "http://go.mail.ru/se...fr=fftbUFix&q="
FF - prefs.js..network.proxy.type: 0
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\3.0.40624.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Documents and Settings\YaChrista\Application Data\Facebook\npfbplugin_1_0_3.dll ( )
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Documents and Settings\YaChrista\Application Data\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Documents and Settings\YaChrista\Application Data\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\YaChrista\Local Settings\Application Data\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\YaChrista\Local Settings\Application Data\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.10.07 04:29:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.06.12 22:52:21 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2010.01.29 21:53:44 | 000,000,000 | ---D | M]
[2009.06.18 07:38:42 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Extensions
[2011.10.16 00:11:24 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\extensions
[2010.09.26 03:24:48 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011.08.02 21:39:11 | 000,000,000 | ---D | M] (Спутник @Mail.Ru) -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}
[2011.08.18 22:07:38 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011.10.16 00:11:24 | 000,000,000 | ---D | M] (Microsoft Choice Guard) -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\extensions\ChoiceGuard@Microsoft
[2010.04.08 20:23:08 | 000,002,921 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\daemon-search.xml
[2011.10.22 19:18:28 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin-1.xml
[2010.10.30 00:20:54 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin-10.xml
[2011.04.04 20:37:22 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin-11.xml
[2011.05.06 23:08:42 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin-12.xml
[2011.05.07 20:52:32 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin-13.xml
[2011.06.26 00:25:10 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin-14.xml
[2011.08.18 21:52:07 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin-15.xml
[2011.09.03 21:27:30 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin-16.xml
[2011.09.07 20:16:10 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin-17.xml
[2011.10.05 10:02:37 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin-18.xml
[2011.10.07 04:30:00 | 000,000,656 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin-19.xml
[2010.03.24 00:38:25 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin-2.xml
[2010.04.02 21:00:24 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin-3.xml
[2010.04.08 20:23:58 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin-4.xml
[2010.07.21 20:21:02 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin-5.xml
[2010.08.10 01:26:23 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin-6.xml
[2010.09.30 15:25:56 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin-7.xml
[2010.10.22 22:56:53 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin-8.xml
[2010.10.23 01:44:55 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin-9.xml
[2010.06.21 17:35:24 | 000,001,042 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\icqplugin.xml
[2011.08.02 21:58:18 | 000,001,533 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\mailru---.xml
[2009.06.18 20:25:33 | 000,002,061 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Mozilla\Firefox\Profiles\tewi1j95.default\searchplugins\qipsearch.xml
[2011.10.07 04:29:47 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011.09.29 10:32:21 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.09.29 04:06:15 | 000,002,549 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\mailru.xml
[2011.09.29 04:06:15 | 000,005,568 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\ozonru.xml
[2011.09.29 04:06:15 | 000,001,133 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\priceru.xml
[2011.09.29 04:06:15 | 000,001,304 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-ru.xml
[2011.09.29 04:06:15 | 000,001,548 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yandex-slovari.xml
[2011.09.29 04:06:15 | 000,001,719 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yandex.xml
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\14.0.835.202\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.6.2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.180.7 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeploytk.dll
CHR - plugin: Java Platform SE 6 U18 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: Chrome NaCl (Enabled) = C:\Program Files\Google\Chrome\Application\14.0.835.202\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\14.0.835.202\pdf.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Facebook Plugin (Enabled) = C:\Documents and Settings\YaChrista\Application Data\Facebook\npfbplugin_1_0_3.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Updater (Enabled) = C:\Program Files\Google\Google Updater\2.4.1601.7122\npCIDetect13.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
Hosts file not found
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (MailRuBHO Class) - {8984B388-A5BB-4DF7-B274-77B879E179DB} - C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll (@Mail.Ru)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Спутник@Mail.Ru) - {09900DE8-1DCA-443F-9243-26FF581438AF} - C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll (@Mail.Ru)
O3 - HKCU\..\Toolbar\ShellBrowser: (&Адрес) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Корпорация Майкрософт)
O3 - HKCU\..\Toolbar\WebBrowser: (Спутник@Mail.Ru) - {09900DE8-1DCA-443F-9243-26FF581438AF} - C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll (@Mail.Ru)
O4 - HKLM..\Run: [AzMixerSel] C:\Program Files\Realtek\Audio\Drivers\AzMixerSel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [Guard.Mail.ru.gui] C:\Program Files\Mail.Ru\Guard\GuardMailRu.exe ()
O4 - HKLM..\Run: [M3000Mnt] Rundll32.exe M3000Rmv.dll ,WinMainRmv /StartStillMnt File not found
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Главное меню\Программы\Автозагрузка\Acer VCM.lnk = C:\Program Files\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &Отправить на устройство Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: &Экспорт в Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Отправить через Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (PokerStars)
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\System32\mswsock.dll (Корпорация Майкрософт)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\System32\mswsock.dll (Корпорация Майкрософт)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll (Корпорация Майкрософт)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll (Корпорация Майкрософт)
O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\system32\shell32.dll (Корпорация Майкрософт)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\WINDOWS\explorer.exe (Корпорация Майкрософт)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Корпорация Майкрософт)
O20 - HKLM Winlogon: UIHost - (logonui.exe) -C:\WINDOWS\System32\logonui.exe (Корпорация Майкрософт)
O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) -C:\WINDOWS\System32\shell32.dll (Корпорация Майкрософт)
O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") -C:\WINDOWS\System32\sysdm.cpl (Корпорация Майкрософт)
O20 - Winlogon\Notify\crypt32chain: DllName - (crypt32.dll) - C:\WINDOWS\System32\crypt32.dll (Корпорация Майкрософт)
O20 - Winlogon\Notify\cscdll: DllName - (cscdll.dll) - C:\WINDOWS\System32\cscdll.dll (Корпорация Майкрософт)
O20 - Winlogon\Notify\ScCertProp: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Корпорация Майкрософт)
O20 - Winlogon\Notify\Schedule: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Корпорация Майкрософт)
O20 - Winlogon\Notify\sclgntfy: DllName - (sclgntfy.dll) - C:\WINDOWS\System32\sclgntfy.dll (Корпорация Майкрософт)
O20 - Winlogon\Notify\SensLogn: DllName - (WlNotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Корпорация Майкрософт)
O20 - Winlogon\Notify\termsrv: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Корпорация Майкрософт)
O20 - Winlogon\Notify\wlballoon: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Корпорация Майкрософт)
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll (Корпорация Майкрософт)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll (Корпорация Майкрософт)
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Корпорация Майкрософт)
O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Предзагрузчик Browseui - C:\WINDOWS\system32\browseui.dll (Корпорация Майкрософт)
O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Демон кэша категорий компонентов - C:\WINDOWS\system32\browseui.dll (Корпорация Майкрософт)
O24 - Desktop Components:0 (Моя текущая домашняя страница) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\YaChrista\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\YaChrista\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Корпорация Майкрософт)
O29 - HKLM SecurityProviders - (digest.dll) -C:\WINDOWS\System32\digest.dll (Корпорация Майкрософт)
O29 - HKLM SecurityProviders - (msnsspc.dll) -C:\WINDOWS\System32\msnsspc.dll (Корпорация Майкрософт)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.03.16 22:11:48 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{05320de5-6057-11de-b72e-00235a88fd37}\Shell\AutoRun\command - "" = F:\gynFXX.EXe
O33 - MountPoints2\{05320de5-6057-11de-b72e-00235a88fd37}\Shell\OpEn\comMAnD - "" = F:\GYnFxx.exE
O33 - MountPoints2\{08b3ba60-008d-11e0-b9b7-00235a88fd37}\Shell - "" = AutoRun
O33 - MountPoints2\{08b3ba60-008d-11e0-b9b7-00235a88fd37}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{08b3ba61-008d-11e0-b9b7-00235a88fd37}\Shell - "" = AutoRun
O33 - MountPoints2\{08b3ba61-008d-11e0-b9b7-00235a88fd37}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{33797a90-f3ab-11de-b81f-0005ca514a54}\Shell\AutoRun\command - "" = D:\ROBINJA\\\\\\\\\\SAMTVOJA.exe
O33 - MountPoints2\{33797a90-f3ab-11de-b81f-0005ca514a54}\Shell\explore\command - "" = D:\ROBINJA\\\\\\\\\\\\SAMTVOJA.exe
O33 - MountPoints2\{33797a90-f3ab-11de-b81f-0005ca514a54}\Shell\open\command - "" = D:\ROBINJA\\\\\\\\\\\\SAMTVOJA.exe
O33 - MountPoints2\{45b7df64-0da8-11e0-b9c7-00242cf8e076}\Shell - "" = AutoRun
O33 - MountPoints2\{45b7df64-0da8-11e0-b9c7-00242cf8e076}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{534cadc6-5924-11e0-b9e5-00235a88fd37}\Shell - "" = AutoRun
O33 - MountPoints2\{534cadc6-5924-11e0-b9e5-00235a88fd37}\Shell\AutoRun\command - "" = D:\Launcher.exe
O33 - MountPoints2\{534cadc9-5924-11e0-b9e5-00235a88fd37}\Shell - "" = AutoRun
O33 - MountPoints2\{534cadc9-5924-11e0-b9e5-00235a88fd37}\Shell\AutoRun\command - "" = D:\Launcher.exe
O33 - MountPoints2\{5ba867f8-5b04-11e0-b9e8-00235a88fd37}\Shell - "" = AutoRun
O33 - MountPoints2\{5ba867f8-5b04-11e0-b9e8-00235a88fd37}\Shell\AutoRun\command - "" = D:\Launcher.exe
O33 - MountPoints2\{6554139d-f194-11de-b81b-00235a88fd37}\Shell\AutoRun\command - "" = D:\IVANA/danilovic.exe
O33 - MountPoints2\{6554139d-f194-11de-b81b-00235a88fd37}\Shell\open\command - "" = D:\IVANA/danilovic.exe
O33 - MountPoints2\{87b77ac4-cb07-11df-b963-00235a88fd37}\Shell - "" = AutoRun
O33 - MountPoints2\{87b77ac4-cb07-11df-b963-00235a88fd37}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{87b77ac8-cb07-11df-b963-00235a88fd37}\Shell - "" = AutoRun
O33 - MountPoints2\{87b77ac8-cb07-11df-b963-00235a88fd37}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{8afbc28c-1713-11e0-b9c9-00235a88fd37}\Shell - "" = AutoRun
O33 - MountPoints2\{8afbc28c-1713-11e0-b9c9-00235a88fd37}\Shell\AutoRun\command - "" = D:\Autorun.exe
O33 - MountPoints2\{9d117d31-d200-11df-b96a-00235a88fd37}\Shell - "" = AutoRun
O33 - MountPoints2\{9d117d31-d200-11df-b96a-00235a88fd37}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{9d117d35-d200-11df-b96a-00235a88fd37}\Shell - "" = AutoRun
O33 - MountPoints2\{9d117d35-d200-11df-b96a-00235a88fd37}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{9d117d41-d200-11df-b96a-00235a88fd37}\Shell - "" = AutoRun
O33 - MountPoints2\{9d117d41-d200-11df-b96a-00235a88fd37}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{9d117d43-d200-11df-b96a-00235a88fd37}\Shell - "" = AutoRun
O33 - MountPoints2\{9d117d43-d200-11df-b96a-00235a88fd37}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{9d117d45-d200-11df-b96a-00235a88fd37}\Shell - "" = AutoRun
O33 - MountPoints2\{9d117d45-d200-11df-b96a-00235a88fd37}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{9d117d49-d200-11df-b96a-00235a88fd37}\Shell - "" = AutoRun
O33 - MountPoints2\{9d117d49-d200-11df-b96a-00235a88fd37}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{9d117d4b-d200-11df-b96a-00235a88fd37}\Shell - "" = AutoRun
O33 - MountPoints2\{9d117d4b-d200-11df-b96a-00235a88fd37}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{a5ce9e55-02ff-11e0-b9b9-00235a88fd37}\Shell\AutoRun\command - "" = 1.exe 0o
O33 - MountPoints2\{a5ce9e55-02ff-11e0-b9b9-00235a88fd37}\Shell\explore\Command - "" = 1.exe 0e
O33 - MountPoints2\{a5ce9e55-02ff-11e0-b9b9-00235a88fd37}\Shell\open\Command - "" = 1.exe 0o
O33 - MountPoints2\{c4495c5f-83c4-11df-b948-00235a88fd37}\Shell\AutoRun\command - "" = stojan\\kristal.exe
O33 - MountPoints2\{c4495c5f-83c4-11df-b948-00235a88fd37}\Shell\explore\command - "" = stojan\\\kristal.exe
O33 - MountPoints2\{c4495c5f-83c4-11df-b948-00235a88fd37}\Shell\open\command - "" = stojan\\\kristal.exe
O33 - MountPoints2\{cd079976-5b5b-11e0-b9ea-00235a88fd37}\Shell - "" = AutoRun
O33 - MountPoints2\{cd079976-5b5b-11e0-b9ea-00235a88fd37}\Shell\AutoRun\command - "" = D:\Launcher.exe
O34 - HKLM BootExecute: (autocheck autochk /r \??\C:)
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011.10.28 22:58:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\YaChrista\Application Data\Malwarebytes
[2011.10.28 22:58:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Главное меню\Программы\Malwarebytes' Anti-Malware
[2011.10.28 22:58:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2011.10.28 22:58:24 | 000,022,216 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011.10.28 22:58:23 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011.10.28 09:58:38 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\YaChrista\Рабочий стол\OTL.exe
[2011.10.28 01:51:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Sun
[2011.10.28 01:49:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Macromedia
[2011.10.28 01:49:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Adobe
[2011.10.25 05:54:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\YaChrista\Рабочий стол\Home Desing
[2011.10.24 06:28:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\YaChrista\Application Data\WordPod
[2011.10.24 06:27:30 | 000,000,000 | ---D | C] -- C:\Program Files\WordPod
[2011.10.24 06:27:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\YaChrista\Главное меню\Программы\WordPod
[2011.10.23 21:15:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Главное меню\Программы\Skype
[2011.10.16 06:45:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\YaChrista\Рабочий стол\medialink
[2011.10.16 01:40:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\YaChrista\Local Settings\Application Data\WMTools Downloaded Files
[2011.10.16 00:16:39 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Документы\Мои видеозаписи
[2011.10.16 00:11:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\YaChrista\Tracing
[2011.10.16 00:08:05 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2011.10.16 00:07:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Главное меню\Программы\Microsoft Office Live Add-in
[2011.10.16 00:06:33 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Sync Framework
[2011.10.16 00:02:54 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft
[2011.10.15 20:34:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\YaChrista\Рабочий стол\Lovely books
[2011.10.10 22:46:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\YaChrista\Рабочий стол\Servises Quality
[2011.10.10 22:45:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\YaChrista\Рабочий стол\Crisis Man
[2011.10.10 22:44:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\YaChrista\Рабочий стол\HR&Labour relat
[2011.10.06 22:11:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\oL21703JlHhG21703
[2011.10.01 05:48:45 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Application Data\CanonIJFAX
[2011.10.01 05:47:43 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Application Data\CanonBJ
[2011.10.01 05:47:36 | 000,000,000 | -H-D | C] -- C:\WINDOWS\System32\CanonIJ Uninstaller Information
[2011.10.01 05:47:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Главное меню\Программы\Canon MX360 series
[2011.10.01 05:47:05 | 000,000,000 | -H-D | C] -- C:\Program Files\CanonBJ
[2011.10.01 05:37:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Главное меню\Программы\Canon Utilities
[2011.10.01 05:34:05 | 000,000,000 | ---D | C] -- C:\Program Files\Canon
[2009.03.17 08:56:05 | 000,049,152 | ---- | C] ( ) -- C:\WINDOWS\Interop.IWshRuntimeLibrary.dll
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\Documents and Settings\YaChrista\Рабочий стол\*.tmp files -> C:\Documents and Settings\YaChrista\Рабочий стол\*.tmp -> ]
[1 C:\Documents and Settings\YaChrista\Local Settings\Application Data\*.tmp files -> C:\Documents and Settings\YaChrista\Local Settings\Application Data\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011.10.29 04:30:29 | 000,000,952 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011.10.29 04:30:17 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011.10.29 04:30:00 | 1063,198,720 | -HS- | M] () -- C:\hiberfil.sys
[2011.10.28 23:21:12 | 000,000,956 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011.10.28 23:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At48.job
[2011.10.28 23:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At47.job
[2011.10.28 22:58:29 | 000,000,788 | ---- | M] () -- C:\Documents and Settings\All Users\Рабочий стол\Malwarebytes' Anti-Malware.lnk
[2011.10.28 22:58:08 | 000,167,424 | ---- | M] () -- C:\Documents and Settings\YaChrista\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.10.28 21:03:05 | 000,914,476 | ---- | M] () -- C:\WINDOWS\System32\perfh019.dat
[2011.10.28 21:03:05 | 000,773,554 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011.10.28 21:03:05 | 000,316,192 | ---- | M] () -- C:\WINDOWS\System32\perfc019.dat
[2011.10.28 21:03:05 | 000,273,700 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011.10.28 14:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At30.job
[2011.10.28 14:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At29.job
[2011.10.28 13:55:07 | 000,000,934 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2011.10.28 13:52:04 | 000,001,140 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1161744426-2188283067-2291903390-1005UA.job
[2011.10.28 13:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At28.job
[2011.10.28 13:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At27.job
[2011.10.28 12:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At26.job
[2011.10.28 12:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At25.job
[2011.10.28 11:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At24.job
[2011.10.28 11:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At23.job
[2011.10.28 10:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At22.job
[2011.10.28 10:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At21.job
[2011.10.28 09:59:28 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\YaChrista\Рабочий стол\OTL.exe
[2011.10.28 08:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At18.job
[2011.10.28 08:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At17.job
[2011.10.28 07:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At16.job
[2011.10.28 07:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At15.job
[2011.10.28 06:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At14.job
[2011.10.28 06:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At13.job
[2011.10.28 05:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At12.job
[2011.10.28 05:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At11.job
[2011.10.28 04:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At10.job
[2011.10.28 04:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At9.job
[2011.10.28 03:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At8.job
[2011.10.28 03:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At7.job
[2011.10.28 02:56:41 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\E3Jc4a6.dat
[2011.10.28 02:56:40 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At46.job
[2011.10.28 02:56:40 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At44.job
[2011.10.28 02:56:40 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At42.job
[2011.10.28 02:56:40 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At40.job
[2011.10.28 02:56:40 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At38.job
[2011.10.28 02:56:40 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At36.job
[2011.10.28 02:56:40 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At34.job
[2011.10.28 02:56:40 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At32.job
[2011.10.28 02:56:40 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At45.job
[2011.10.28 02:56:40 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At43.job
[2011.10.28 02:56:40 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At41.job
[2011.10.28 02:56:40 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At39.job
[2011.10.28 02:56:40 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At37.job
[2011.10.28 02:56:40 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At35.job
[2011.10.28 02:56:40 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At33.job
[2011.10.28 02:56:40 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At31.job
[2011.10.28 02:56:39 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At6.job
[2011.10.28 02:56:39 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At4.job
[2011.10.28 02:56:39 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At5.job
[2011.10.28 02:56:39 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At3.job
[2011.10.28 02:56:38 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At20.job
[2011.10.28 02:56:38 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At2.job
[2011.10.28 02:56:38 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At19.job
[2011.10.28 02:56:38 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2011.10.28 02:35:30 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011.10.27 15:16:48 | 000,030,090 | ---- | M] () -- C:\Documents and Settings\YaChrista\Рабочий стол\Latest-Indian-Salwar-Kameez-Tips.jpg
[2011.10.26 16:52:01 | 000,001,088 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1161744426-2188283067-2291903390-1005Core.job
[2011.10.23 21:14:23 | 000,002,283 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Microsoft\Internet Explorer\Quick Launch\Skype.lnk
[2011.10.20 20:41:20 | 000,037,527 | ---- | M] () -- C:\Documents and Settings\YaChrista\Рабочий стол\FEESTATEMENT-642979-201201-2011OCT17143411.PDF
[2011.10.16 01:45:31 | 010,397,833 | ---- | M] () -- C:\Documents and Settings\YaChrista\Рабочий стол\Фильм.wmv
[2011.10.16 01:45:31 | 010,397,833 | ---- | M] () -- C:\Documents and Settings\YaChrista\Рабочий стол\Classroom.avi
[2011.10.07 04:29:50 | 000,000,746 | ---- | M] () -- C:\Documents and Settings\YaChrista\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011.10.07 02:00:15 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\YaChrista\Local Settings\Application Data\{0CFC8CFE-6319-444C-B2DD-18CC9C9EE1C2}
[2011.10.03 00:35:14 | 000,078,571 | ---- | M] () -- C:\Documents and Settings\YaChrista\Рабочий стол\Community Stage Volunteer 2.pdf
[2011.10.01 05:37:33 | 000,001,740 | ---- | M] () -- C:\Documents and Settings\All Users\Рабочий стол\Canon MP Navigator EX 4.1.lnk
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\Documents and Settings\YaChrista\Рабочий стол\*.tmp files -> C:\Documents and Settings\YaChrista\Рабочий стол\*.tmp -> ]
[1 C:\Documents and Settings\YaChrista\Local Settings\Application Data\*.tmp files -> C:\Documents and Settings\YaChrista\Local Settings\Application Data\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011.10.28 22:58:29 | 000,000,788 | ---- | C] () -- C:\Documents and Settings\All Users\Рабочий стол\Malwarebytes' Anti-Malware.lnk
[2011.10.28 22:52:30 | 1063,198,720 | -HS- | C] () -- C:\hiberfil.sys
[2011.10.28 02:56:41 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\E3Jc4a6.dat
[2011.10.28 02:56:39 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At48.job
[2011.10.28 02:56:39 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At46.job
[2011.10.28 02:56:39 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At44.job
[2011.10.28 02:56:39 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At42.job
[2011.10.28 02:56:39 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At40.job
[2011.10.28 02:56:39 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At38.job
[2011.10.28 02:56:39 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At36.job
[2011.10.28 02:56:39 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At34.job
[2011.10.28 02:56:39 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At32.job
[2011.10.28 02:56:39 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At30.job
[2011.10.28 02:56:39 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At28.job
[2011.10.28 02:56:39 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At26.job
[2011.10.28 02:56:39 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At47.job
[2011.10.28 02:56:39 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At45.job
[2011.10.28 02:56:39 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At43.job
[2011.10.28 02:56:39 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At41.job
[2011.10.28 02:56:39 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At39.job
[2011.10.28 02:56:39 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At37.job
[2011.10.28 02:56:39 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At35.job
[2011.10.28 02:56:39 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At33.job
[2011.10.28 02:56:39 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At31.job
[2011.10.28 02:56:39 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At29.job
[2011.10.28 02:56:39 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At27.job
[2011.10.28 02:56:38 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At8.job
[2011.10.28 02:56:38 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At6.job
[2011.10.28 02:56:38 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At4.job
[2011.10.28 02:56:38 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At24.job
[2011.10.28 02:56:38 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At22.job
[2011.10.28 02:56:38 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At20.job
[2011.10.28 02:56:38 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At2.job
[2011.10.28 02:56:38 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At18.job
[2011.10.28 02:56:38 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At16.job
[2011.10.28 02:56:38 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At14.job
[2011.10.28 02:56:38 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At12.job
[2011.10.28 02:56:38 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At10.job
[2011.10.28 02:56:38 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At9.job
[2011.10.28 02:56:38 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At7.job
[2011.10.28 02:56:38 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At5.job
[2011.10.28 02:56:38 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At3.job
[2011.10.28 02:56:38 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At25.job
[2011.10.28 02:56:38 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At23.job
[2011.10.28 02:56:38 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At21.job
[2011.10.28 02:56:38 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At19.job
[2011.10.28 02:56:38 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At17.job
[2011.10.28 02:56:38 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At15.job
[2011.10.28 02:56:38 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At13.job
[2011.10.28 02:56:38 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At11.job
[2011.10.28 02:56:37 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At1.job
[2011.10.27 15:16:47 | 000,030,090 | ---- | C] () -- C:\Documents and Settings\YaChrista\Рабочий стол\Latest-Indian-Salwar-Kameez-Tips.jpg
[2011.10.20 20:41:19 | 000,037,527 | ---- | C] () -- C:\Documents and Settings\YaChrista\Рабочий стол\FEESTATEMENT-642979-201201-2011OCT17143411.PDF
[2011.10.16 01:51:18 | 010,397,833 | ---- | C] () -- C:\Documents and Settings\YaChrista\Рабочий стол\Classroom.avi
[2011.10.16 01:43:43 | 010,397,833 | ---- | C] () -- C:\Documents and Settings\YaChrista\Рабочий стол\Фильм.wmv
[2011.10.14 21:18:57 | 000,002,283 | ---- | C] () -- C:\Documents and Settings\YaChrista\Application Data\Microsoft\Internet Explorer\Quick Launch\Skype.lnk
[2011.10.07 02:00:11 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\YaChrista\Local Settings\Application Data\{0CFC8CFE-6319-444C-B2DD-18CC9C9EE1C2}
[2011.10.03 00:35:14 | 000,078,571 | ---- | C] () -- C:\Documents and Settings\YaChrista\Рабочий стол\Community Stage Volunteer 2.pdf
[2011.10.01 05:48:24 | 000,015,104 | ---- | C] () -- C:\WINDOWS\System32\CNC174DD.TBL
[2011.10.01 05:37:33 | 000,001,740 | ---- | C] () -- C:\Documents and Settings\All Users\Рабочий стол\Canon MP Navigator EX 4.1.lnk
[2011.09.18 05:57:17 | 000,259,888 | ---- | C] () -- C:\WINDOWS\SUPDRun.exe
[2011.09.18 05:57:17 | 000,026,624 | ---- | C] () -- C:\WINDOWS\System32\spd__l.dll
[2011.09.18 05:57:16 | 000,283,136 | ---- | C] () -- C:\WINDOWS\System32\DscPnt.dll
[2011.09.18 05:57:15 | 000,151,552 | ---- | C] () -- C:\WINDOWS\System32\spd__ci.exe
[2011.08.15 21:36:58 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\YaChrista\Local Settings\Application Data\{0959031C-8F64-4E02-BD36-BDFDBAF885A5}
[2011.03.28 13:18:14 | 000,000,316 | ---- | C] () -- C:\WINDOWS\red_dialer.ini
[2010.05.26 18:31:18 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010.05.26 18:31:12 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010.05.26 18:30:36 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010.05.26 18:30:36 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010.05.26 18:30:19 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010.02.17 22:15:40 | 000,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2009.11.22 18:30:31 | 000,074,752 | ---- | C] () -- C:\WINDOWS\System32\sounds.dll
[2009.11.22 18:30:30 | 000,074,752 | ---- | C] () -- C:\WINDOWS\System32\sounig.dll
[2009.06.24 04:20:40 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009.06.18 22:23:34 | 000,167,424 | ---- | C] () -- C:\Documents and Settings\YaChrista\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.06.18 08:10:02 | 000,000,394 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009.06.18 07:38:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009.04.24 20:46:34 | 000,233,472 | ---- | C] () -- C:\WINDOWS\System32\M3000DIF.dll
[2009.04.24 20:46:34 | 000,145,408 | ---- | C] () -- C:\WINDOWS\System32\drivers\M3000KNT.sys
[2009.04.24 20:46:34 | 000,015,190 | ---- | C] () -- C:\WINDOWS\M3000Twn.ini
[2009.03.17 08:56:05 | 000,020,480 | ---- | C] () -- C:\WINDOWS\LauncheRyDiscCalc.exe
[2009.03.17 08:55:58 | 000,914,476 | ---- | C] () -- C:\WINDOWS\System32\perfh019.dat
[2009.03.17 08:55:58 | 000,305,414 | ---- | C] () -- C:\WINDOWS\System32\perfi019.dat
[2009.03.17 08:55:58 | 000,036,176 | ---- | C] () -- C:\WINDOWS\System32\perfd019.dat
[2009.03.17 08:55:57 | 000,316,192 | ---- | C] () -- C:\WINDOWS\System32\perfc019.dat
[2009.03.17 08:55:45 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2009.03.17 08:55:43 | 000,773,554 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2009.03.17 08:55:43 | 000,273,700 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2009.03.17 08:55:43 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2009.03.17 08:55:43 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2009.03.17 08:55:42 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2009.03.17 08:55:42 | 000,004,524 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2009.03.17 08:55:41 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2009.03.17 08:55:38 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2009.03.17 08:55:38 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2009.03.17 08:55:33 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2009.03.17 08:55:31 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2009.03.17 01:06:58 | 000,004,337 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009.03.17 01:06:15 | 000,265,416 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009.03.16 23:55:19 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2009.03.16 23:02:47 | 000,090,772 | ---- | C] () -- C:\WINDOWS\System32\drivers\RtConvEQ.DAT
[2009.03.16 23:02:47 | 000,000,536 | ---- | C] () -- C:\WINDOWS\System32\drivers\RtHdatEx.dat
[2009.03.16 23:02:47 | 000,000,520 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTEQEX2.dat
[2009.03.16 23:02:47 | 000,000,520 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTEQEX1.dat
[2009.03.16 23:02:47 | 000,000,520 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTEQEX0.dat
[2009.03.16 23:02:47 | 000,000,164 | ---- | C] () -- C:\WINDOWS\System32\drivers\SamSfPa.dat
[2009.03.16 23:02:47 | 000,000,016 | ---- | C] () -- C:\WINDOWS\System32\drivers\rtkhdaud.dat
[2009.03.16 23:01:50 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4926.dll
[2009.03.16 22:14:50 | 000,032,768 | ---- | C] () -- C:\WINDOWS\AMove.exe
[2009.03.16 22:14:50 | 000,006,782 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2009.03.16 22:13:54 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009.03.16 22:09:58 | 000,022,564 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009.03.16 22:09:09 | 000,003,556 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2007.11.01 15:53:34 | 002,842,624 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll
[2007.11.01 15:43:30 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\btprn2k.dll
[2001.11.14 11:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll
[2000.03.29 21:00:00 | 000,125,440 | ---- | C] () -- C:\WINDOWS\System32\UnzDll.dll
========== LOP Check ==========
[2011.06.26 22:19:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ACD Systems
[2011.10.01 05:47:43 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\CanonBJ
[2011.10.01 05:48:45 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\CanonIJFAX
[2010.04.08 20:23:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2009.06.15 19:04:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ESET
[2009.03.16 23:39:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\eSobi
[2011.08.03 10:18:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FlexSave
[2010.11.29 12:49:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ICQ
[2010.01.23 16:05:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Installations
[2011.10.07 02:16:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\oL21703JlHhG21703
[2010.10.23 15:37:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Suite
[2009.09.08 22:09:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sandlot Games
[2009.09.08 22:30:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2009.12.19 22:46:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TrackMania
[2009.07.30 06:48:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2009.09.08 22:30:05 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\YaChrista\Application Data\.#
[2011.06.26 22:23:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\YaChrista\Application Data\ACD Systems
[2009.03.16 23:40:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\YaChrista\Application Data\Acer
[2009.03.16 23:15:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\YaChrista\Application Data\Acer GameZone Console
[2010.04.08 20:24:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\YaChrista\Application Data\DAEMON Tools
[2010.04.08 20:25:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\YaChrista\Application Data\DAEMON Tools Lite
[2010.04.08 20:24:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\YaChrista\Application Data\DAEMON Tools Pro
[2009.06.16 12:54:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\YaChrista\Application Data\eSobi
[2010.06.03 21:39:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\YaChrista\Application Data\Facebook
[2010.11.30 21:23:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\YaChrista\Application Data\ICQ
[2010.04.08 20:31:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\YaChrista\Application Data\Mathsoft
[2010.01.23 16:10:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\YaChrista\Application Data\Nokia
[2010.01.23 16:10:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\YaChrista\Application Data\PC Suite
[2011.08.11 23:17:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\YaChrista\Application Data\PhotoScape
[2009.06.18 20:26:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\YaChrista\Application Data\QIP
[2009.09.02 09:10:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\YaChrista\Application Data\SulusGames
[2009.07.22 10:23:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\YaChrista\Application Data\Super-Cow
[2011.10.24 06:28:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\YaChrista\Application Data\WordPod
[2010.11.07 21:56:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\YaChrista\Application Data\Yandex
[2011.10.28 02:56:38 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At1.job
[2011.10.28 04:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At10.job
[2011.10.28 05:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At11.job
[2011.10.28 05:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At12.job
[2011.10.28 06:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At13.job
[2011.10.28 06:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At14.job
[2011.10.28 07:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At15.job
[2011.10.28 07:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At16.job
[2011.10.28 08:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At17.job
[2011.10.28 08:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At18.job
[2011.10.28 02:56:38 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At19.job
[2011.10.28 02:56:38 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At2.job
[2011.10.28 02:56:38 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At20.job
[2011.10.28 10:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At21.job
[2011.10.28 10:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At22.job
[2011.10.28 11:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At23.job
[2011.10.28 11:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At24.job
[2011.10.28 12:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At25.job
[2011.10.28 12:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At26.job
[2011.10.28 13:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At27.job
[2011.10.28 13:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At28.job
[2011.10.28 14:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At29.job
[2011.10.28 02:56:39 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At3.job
[2011.10.28 14:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At30.job
[2011.10.28 02:56:40 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At31.job
[2011.10.28 02:56:40 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At32.job
[2011.10.28 02:56:40 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At33.job
[2011.10.28 02:56:40 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At34.job
[2011.10.28 02:56:40 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At35.job
[2011.10.28 02:56:40 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At36.job
[2011.10.28 02:56:40 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At37.job
[2011.10.28 02:56:40 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At38.job
[2011.10.28 02:56:40 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At39.job
[2011.10.28 02:56:39 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At4.job
[2011.10.28 02:56:40 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At40.job
[2011.10.28 02:56:40 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At41.job
[2011.10.28 02:56:40 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At42.job
[2011.10.28 02:56:40 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At43.job
[2011.10.28 02:56:40 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At44.job
[2011.10.28 02:56:40 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At45.job
[2011.10.28 02:56:40 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At46.job
[2011.10.28 23:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At47.job
[2011.10.28 23:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At48.job
[2011.10.28 02:56:39 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At5.job
[2011.10.28 02:56:39 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At6.job
[2011.10.28 03:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At7.job
[2011.10.28 03:02:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At8.job
[2011.10.28 04:02:00 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At9.job
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7091055F
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:93C494CA
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:ADE16379
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4CF61E54
< End of report >
Edited by LAmoZ, 28 October 2011 - 07:57 PM.