C:\Program Files (x86)\NVIDIA Corporation\PhysX\Engine\73BE2921551D\APEX_BasicIOSCHECKED_x86.dll (1543224 bytes) (NVIDIA Corporation) (18.05.2019 22:47:26) (--A-) (47878da68031bf87670bae662279c228) (Создан)
C:\Program Files (x86)\NVIDIA Corporation\PhysX\Engine\73BE2921551D\APEX_FieldSamplerCHECKED_x86.dll (458808 bytes) (NVIDIA Corporation) (18.05.2019 22:47:26) (--A-) (4ea9233857342eed2ad5fb3633cee8f2) (Создан)
C:\Program Files (x86)\NVIDIA Corporation\PhysX\Engine\73BE2921551D\APEX_TurbulenceFSCHECKED_x86.dll (2827320 bytes) (NVIDIA Corporation) (18.05.2019 22:47:26) (--A-) (a45d6b63996caf75dbaea8add9c2c135) (Создан)
C:\Program Files (x86)\NVIDIA Corporation\PhysX\Engine\73BE2921551D\ImplicitLibs\cudart32_65.dll (262592 bytes) (NVIDIA Corporation) (18.05.2019 22:47:26) (--A-) (76523573ce29a237c2ba490890f0a67a) (Создан)
C:\Program Files (x86)\NVIDIA Corporation\PhysX\Engine\73BE2921551D\ImplicitLibs\PhysX3GpuCHECKED_x86.dll (380472 bytes) (Unknown) (18.05.2019 22:47:26) (--A-) (5ae0f55895f9362f359dd2e1bcc0529b) (Создан)
C:\Program Files (x86)\NVIDIA Corporation\PhysX\Engine\A0A1369354E1\APEX_TurbulenceFS_x86.dll (2822080 bytes) (NVIDIA Corporation) (18.05.2019 22:47:26) (--A-) (cfcfb62c55ae19406d158992622dac5d) (Создан)
C:\Program Files (x86)\NVIDIA Corporation\PhysX\Engine\v2.7.1\PhysXCooking.dll (371136 bytes) (Unknown) (18.05.2019 22:47:26) (--A-) (55c6160549bbf0c4a0c6c0f2fd17757e) (Создан)
C:\Program Files (x86)\NVIDIA Corporation\PhysX\Engine\v2.7.3\PhysXCooking.dll (371136 bytes) (NVIDIA Corporation) (18.05.2019 22:47:26) (--A-) (8d0725f169a69e2fdc3628ac9d02519c) (Создан)
C:\Program Files (x86)\NVIDIA Corporation\PhysX\Engine\v2.7.4\PhysXCooking.dll (371136 bytes) (NVIDIA Corporation) (18.05.2019 22:47:26) (--A-) (18fcd977773f6aa1d18aead88fa5ed90) (Создан)
C:\Program Files (x86)\NVIDIA Corporation\PhysX\Engine\v2.7.5\PhysXCooking.dll (371136 bytes) (NVIDIA Corporation) (18.05.2019 22:47:26) (--A-) (cf2522e9ea1a6e66e28c8394f842fda4) (Создан)
C:\Program Files (x86)\NVIDIA Corporation\PhysX\Engine\v2.7.6\PhysXCooking.dll (384056 bytes) (NVIDIA Corporation) (18.05.2019 22:47:26) (--A-) (7ad657fa6e97646dfa7fff8be24616d9) (Создан)
C:\Program Files (x86)\NVIDIA Corporation\PhysX\Engine\v2.8.0\PhysXCooking.dll (372280 bytes) (NVIDIA Corporation) (18.05.2019 22:47:26) (--A-) (e8e6ea172a0c74849bb9ea3de58cecfb) (Создан)
C:\Program Files (x86)\NVIDIA Corporation\PhysX\Engine\v2.8.1\PhysXCooking.dll (371648 bytes) (NVIDIA Corporation) (18.05.2019 22:47:26) (--A-) (42467bcb3ba3b02eb4899831296af1e0) (Создан)
C:\Program Files (x86)\NVIDIA Corporation\PhysX\Engine\v2.8.3\PhysXCooking.dll (349240 bytes) (NVIDIA Corporation) (18.05.2019 22:47:26) (--A-) (a72b008a648fa28621b35869f1a6762a) (Создан)
C:\Program Files (x86)\NVIDIA Corporation\PhysX\Engine\v2.8.3\PhysXCooking64.dll (420800 bytes) (NVIDIA Corporation) (18.05.2019 22:47:26) (--A-) (d3d740dcef342f2ec55ad939e821ddfc) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\unins000.exe (1203807 bytes) (Unknown) (18.05.2019 23:07:41) (--A-) (98a899763908944cc15676662ecc0cbb) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\DrvFRTst.exe (1259904 bytes) (ШТРИХ-М) (18.05.2019 23:07:42) (--A-) (af02220f86bfa02b803edd3bdc556f2e) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\DrvFRTst1C.exe (254848 bytes) (ШТРИХ-М) (18.05.2019 23:07:42) (--A-) (b505846eae113ae4b0242dc6f9cab64d) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\libeay32.dll (1370624 bytes) (The OpenSSL Project,
http://www.openssl.org/) (18.05.2019 23:07:42) (--A-) (a724f5da0a0184b5668ef2d85a7346e0) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\PaymentDrv.dll (234368 bytes) (ШТРИХ-М) (18.05.2019 23:07:43) (--A-) (8eae8e8928b5379dc3174efaece71746) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\ServiceProg.exe (148352 bytes) (ШТРИХ-М) (18.05.2019 23:07:42) (--A-) (ff86e3bc3adda14b834a9697a46dc4d5) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\SMDrvFR1CLib.dll (531328 bytes) (ШТРИХ-М) (18.05.2019 23:07:42) (--A-) (78ddd4618dfda641b645a6119ceeca2c) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\SMDrvFR1CLib24.dll (545664 bytes) (ШТРИХ-М) (18.05.2019 23:07:42) (--A-) (d81618c20acc256470e0129cba1a8908) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\sqlite3.dll (511383 bytes) (Unknown) (18.05.2019 23:07:42) (--A-) (ab60c429cae878a571ac0704d35d39f3) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\SrvFR.exe (519552 bytes) (ШТРИХ-М) (18.05.2019 23:07:42) (--A-) (938793219c7c853be9e15756922b814e) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\ssleay32.dll (337920 bytes) (The OpenSSL Project,
http://www.openssl.org/) (18.05.2019 23:07:42) (--A-) (d34ecd24706dcfff478fe6fbe79026a9) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\TaxProg2.exe (405888 bytes) (ШТРИХ-М) (18.05.2019 23:07:42) (--A-) (509e2c59bdd6f3641f75041ee926f08e) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\DFU\Driver\new\x64\WdfCoInstaller01011.dll (1795952 bytes) (Microsoft Corporation) (18.05.2019 23:07:43) (--A-) (d10864c1730172780c2d4be633b9220a) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\DFU\Driver\new\x64\winusbcoinstaller2.dll (1002728 bytes) (Microsoft Corporation) (18.05.2019 23:07:43) (--A-) (246900ce6474718730ecd4f873234cf5) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\DFU\Driver\new\x86\WdfCoInstaller01011.dll (1629040 bytes) (Microsoft Corporation) (18.05.2019 23:07:46) (--A-) (3d2a2d921135801835073451f002480f) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\DFU\Driver\new\x86\winusbcoinstaller2.dll (851176 bytes) (Microsoft Corporation) (18.05.2019 23:07:46) (--A-) (8e7b9f81e8823fee2d82f7de3a44300b) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\DFU\Driver\xp32\x86\wdfcoinstaller01009.dll (1461992 bytes) (Microsoft Corporation) (18.05.2019 23:07:46) (--A-) (a9970042be512c7981b36e689c5f3f9f) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\DFU\Driver\xp32\x86\winusbcoinstaller2.dll (851176 bytes) (Microsoft Corporation) (18.05.2019 23:07:46) (--A-) (8e7b9f81e8823fee2d82f7de3a44300b) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\DFU\Util\dfu-util-static.exe (280795 bytes) (Unknown) (18.05.2019 23:07:46) (--A-) (7f3b67a8ffd9a7e8b58a4ad7708a0e85) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\OFDConnect\ofdconnectsvc.exe (2493824 bytes) (Штрих-М) (18.05.2019 23:07:42) (--A-) (9142c81fafcc67735c132bb93cef70c1) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\OKassa\libeay32.dll (1374208 bytes) (The OpenSSL Project,
http://www.openssl.org/) (18.05.2019 23:07:43) (--A-) (de484d5dafe3c1208da6e24af40e0a97) (Создан)
C:\Program Files (x86)\SHTRIH-M\DrvFR 4.14\Bin\OKassa\ssleay32.dll (337920 bytes) (The OpenSSL Project,
http://www.openssl.org/) (18.05.2019 23:07:43) (--A-) (284e004b654306f8db1a63cff0e73d91) (Создан)
C:\Program Files (x86)\Total Commander\lua5.1.dll (325960 bytes) (Unknown) (18.05.2019 23:49:44) (--A-) (56e2cb184a24aedb473880462197cac4) (Создан)
C:\Program Files (x86)\Total Commander\uninstall.exe (1342464 bytes) (Indigo Rose Corporation) (18.05.2019 23:49:44) (--A-) (53817a366d16165e18b0babc60239ff5) (Создан)
[+] Скрытые файлы в системных папках
[+] Подозрительные ключи реестра
[+] Подозрительные папки
[+] Драйверы
C:\Users\dima\WINDOWS\system32\drivers\acpi.sys (ACPI) (Драйвер Microsoft ACPI) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\afd.sys (AFD) (Ancillary Function Driver for Winsock) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\amdxata.sys (amdxata) (amdxata) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\blbdrive.sys (blbdrive) (blbdrive) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\bowser.sys (bowser) (Драйвер поддержки браузера) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\cng.sys (CNG) (CNG) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\compositebus.sys (CompositeBus) (Драйвер перечислителя композитной шины) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\dfsc.sys (DfsC) (DFS Namespace Client Driver) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\discache.sys (discache) (System Attribute Cache) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\disk.sys (Disk) (Драйвер диска) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\dxgkrnl.sys (DXGKrnl) (LDDM Graphics Subsystem) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\fileinfo.sys (FileInfo) (File Information FS MiniFilter) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\fltmgr.sys (FltMgr) (Диспетчер фильтров) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\hdaudio.sys (HdAudAddService) (Драйвер функции UAA для службы High Definition Audio (Microsoft), версия 1.1) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\hdaudbus.sys (HDAudBus) (Драйвер для шины UAA для High Definition Audio (Microsoft)) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\http.sys (HTTP) (HTTP) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\hwpolicy.sys (hwpolicy) (Hardware Policy Driver) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\i8042prt.sys (i8042prt) (Драйвер i8042-клавиатуры и мыши для порта PS/2) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\iastorv.sys (iaStorV) (RAID-контроллер Intel для Windows 7) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\intelppm.sys (intelppm) (Драйвер Intel процессора) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\iusb3hub.sys (iusb3hub) (Драйвер концентратора Intel(R) USB 3.0) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\iusb3xhc.sys (iusb3xhc) (Драйвер расширяемого хост-контроллера Intel(R) USB 3.0) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\kbdclass.sys (kbdclass) (Драйвер класса клавиатуры) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\ksecdd.sys (KSecDD) (KSecDD) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\ksecpkg.sys (KSecPkg) (KSecPkg) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\ksthunk.sys (ksthunk) (Kernel Streaming Thunks) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\lltdio.sys (lltdio) (Link-Layer Topology Discovery Mapper I/O Driver) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\luafv.sys (luafv) (Виртуализация файла контроля учетных записей) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\mouclass.sys (mouclass) (Драйвер класса мыши) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\mountmgr.sys (mountmgr) (Диспетчер точек подключения) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\mpsdrv.sys (mpsdrv) (Драйвер авторизации брандмауэра Windows) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\mrxsmb.sys (mrxsmb) (Оболочка и модуль мини-перенаправителя SMB) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\mrxsmb10.sys (mrxsmb10) (Мини-перенаправитель SMB 1.x) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\mrxsmb20.sys (mrxsmb20) (Мини-перенаправитель SMB 2.0) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\msisadrv.sys (msisadrv) (msisadrv) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\mssmbios.sys (mssmbios) (Microsoft System Management BIOS драйвер) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\mup.sys (Mup) (Mup) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\ndis.sys (NDIS) (Системный драйвер NDIS) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\ndistapi.sys (NdisTapi) (NDIS-драйвер TAPI удаленного доступа) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\ndiswan.sys (NdisWan) (NDIS-драйвер WAN удаленного доступа) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\netbios.sys (NetBIOS) (NetBIOS Interface) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\netbt.sys (NetBT) (NetBT) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\nsiproxy.sys (nsiproxy) (NSI proxy service driver.) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\nvlddmkm.sys (nvlddmkm) (nvlddmkm) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\partmgr.sys (partmgr) (Диспетчер разделов) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\pci.sys (pci) (Драйвер PCI шины) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\pcw.sys (pcw) (Performance Counters for Windows Driver) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\peauth.sys (PEAUTH) (PEAUTH) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\raspptp.sys (PptpMiniport) (Мини-порт WAN (PPTP)) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\pacer.sys (Psched) (Планировщик пакетов QoS) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\agilevpn.sys (RasAgileVpn) (WAN Miniport (IKEv2)) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\rasl2tp.sys (Rasl2tp) (Мини-порт WAN (L2TP)) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\raspppoe.sys (RasPppoe) (Драйвер PPPOE удаленного доступа) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\rassstp.sys (RasSstp) (Мини-порт WAN (SSTP)) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\rdbss.sys (rdbss) (Перенаправленная подсистема буферизации) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\rdpbus.sys (rdpbus) (Remote Desktop Device Redirector Bus Driver) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\rdpcdd.sys (RDPCDD) (RDPCDD) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\rdpdr.sys (RDPDR) (Terminal Server Device Redirector Driver) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\rdpencdd.sys (RDPENCDD) (RDP Encoder Mirror Driver) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\rdprefmp.sys (RDPREFMP) (Reflector Display Driver used to gain access to graphics data) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\rspndr.sys (rspndr) (Link-Layer Topology Discovery Responder) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\rt64win7.sys (RTL8167) (Realtek 8167 NT Driver) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\serenum.sys (Serenum) (Драйвер фильтра Serenum) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\serial.sys (Serial) (Драйвер последовательного порта) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\srv.sys (srv) (Драйвер сервера Server SMB 1.xxx) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\srv2.sys (srv2) (Драйвер сервера Server SMB 2.xxx) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\srvnet.sys (srvnet) (srvnet) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\vmstorfl.sys (storflt) (Диск Виртуальная машина Шина Ускорение Фильтр Драйвер) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\swenum.sys (swenum) (Драйвер программной шины) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\tap0901.sys (tap0901) (TAP-Windows Adapter V9) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\tcpip.sys (Tcpip) (Драйвер протокола TCP/IP) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\tcpipreg.sys (tcpipreg) (TCP/IP Registry Compatibility) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\tdtcp.sys (TDTCP) (TDTCP) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\tdx.sys (tdx) (Драйвер поддержки NetIO Legacy TDI) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\termdd.sys (TermDD) (Драйвер устройства терминала) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\tssecsrv.sys (tssecsrv) (Remote Desktop Services Security Filter Driver) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\tunnel.sys (tunnel) (Драйвер адаптера минипорта для туннеля Microsoft) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\umbus.sys (umbus) (UMBus драйвер перечислителя) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\vdrvroot.sys (vdrvroot) (Драйвер перечислителя виртуальных дисков (Майкрософт)) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\vga.sys (VgaSave) (VgaSave) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\volmgr.sys (volmgr) (Драйвер диспетчера томов) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\volmgrx.sys (volmgrx) (Диспетчер динамических томов) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\volsnap.sys (volsnap) (Тома запоминающих устройств) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\wanarp.sys (Wanarpv6) (Драйвер удаленного доступа IPv6 ARP) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\wdf01000.sys (Wdf01000) (Kernel Mode Driver Frameworks service) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
C:\Users\dima\WINDOWS\system32\drivers\wfplwf.sys (WfpLwf) (WFP Lightweight Filter) (Unknown) (d41d8cd98f00b204e9800998ecf8427e)
[+] Драйверы -> FSFilter Anti-Virus
[+] Службы
c:\program files\microsoft sql server\100\dts\binn\msdtssrvr.exe (MsDtsServer100) (Службы SQL Server Integration Services 10.0) (Microsoft Corporation) (27278903af58040ab0daf2ad82b42708)
c:\program files\microsoft sql server\mssql10_50.mssqlserver\mssql\binn\fdlauncher.exe (MSSQLFDLauncher) (SQL Full-text Filter Daemon Launcher (MSSQLSERVER)) (Microsoft Corporation) (aa511eb28672011a1d832f73e302f0a0)
c:\program files\microsoft sql server\mssql10_50.mssqlserver\mssql\binn\sqlservr.exe (MSSQLSERVER) (SQL Server (MSSQLSERVER)) (Microsoft Corporation) (7396087f9212009b1b8fac28c0b7b728)
c:\program files\microsoft sql server\msas10_50.mssqlserver\olap\bin\msmdsrv.exe (MSSQLServerOLAPService) (Службы SQL Server Analysis Services (MSSQLSERVER)) (Microsoft Corporation) (6694baf1a4eebb1157a3d0e88b6bd2bd)
c:\program files\nvidia corporation\display.nvcontainer\nvdisplay.container.exe (NVDisplay.ContainerLocalSystem) (NVIDIA Display Container LS) (NVIDIA Corporation) (31fc8a583384cf7add882f68dbc236d1)
c:\program files (x86)\shtrih-m\drvfr 4.14\bin\ofdconnect\ofdconnectsvc.exe (ofdconnect) (SHTRIH-M: ofdconnect) (Штрих-М) (9142c81fafcc67735c132bb93cef70c1)
c:\program files\openvpn\bin\openvpnserv.exe (OpenVPNService) (OpenVPN Service) (The OpenVPN Project) (f1fd24ba7691117908a7d428135bf8a2)
c:\program files\microsoft sql server\msrs10_50.mssqlserver\reporting services\reportserver\bin\reportingservicesservice.exe (ReportServer) (Службы SQL Server Reporting Services (MSSQLSERVER)) (Microsoft Corporation) (c48163f4c29540abdb272d50dfb76280)
c:\program files\microsoft sql server\mssql10_50.mssqlserver\mssql\binn\sqlagent.exe (SQLSERVERAGENT) (Агент SQL Server (MSSQLSERVER)) (Microsoft Corporation) (bea7fea5bb31eb58d78971f821ae6844)
c:\program files\microsoft sql server\90\shared\sqlwriter.exe (SQLWriter) (Модуль сервера SQL Server для записи VSS) (Microsoft Corporation) (f98ddfbfe0ee66d4c4b00693512b9527)
c:\program files (x86)\1cv81\bin\ragent.exe (1C:Enterprise 8.1 Server Agent) (Агент сервера 1С:Предприятия 8.1) (1C) (2abcf77feabf10b98963fa7029619c5b)
[+] Dll файлы служб
[+] Неизвестные файлы в Winsock LSP
Значение: LibraryPath
Параметр: %SystemRoot%\system32\NLAapi.dll
Ключ: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_ Entries\000000000001
Значение: LibraryPath
Параметр: %SystemRoot%\system32\napinsp.dll
Ключ: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_ Entries\000000000002
Значение: LibraryPath
Параметр: %SystemRoot%\System32\mswsock.dll
Ключ: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_ Entries\000000000003
Значение: LibraryPath
Параметр: %SystemRoot%\System32\winrnr.dll
Ключ: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_ Entries\000000000004
Значение: LibraryPath
Параметр: %SystemRoot%\system32\NLAapi.dll
Ключ: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entr ies\000000000001
Значение: LibraryPath
Параметр: %SystemRoot%\system32\napinsp.dll
Ключ: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entr ies\000000000002
Значение: LibraryPath
Параметр: %SystemRoot%\System32\mswsock.dll
Ключ: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entr ies\000000000003
Значение: LibraryPath
Параметр: %SystemRoot%\System32\winrnr.dll
Ключ: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entr ies\000000000004
Значение: LibraryPath
Параметр: %SystemRoot%\system32\NLAapi.dll
Ключ: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entr ies\000000000001
Значение: LibraryPath
Параметр: %SystemRoot%\system32\napinsp.dll
Ключ: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entr ies\000000000002
Значение: LibraryPath
Параметр: %SystemRoot%\System32\mswsock.dll
Ключ: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entr ies\000000000003
Значение: LibraryPath
Параметр: %SystemRoot%\System32\winrnr.dll
Ключ: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entr ies\000000000004
[+] Неизвестные файлы в CLSID
[+] Соединения TCP
N/A -> 0.0.0.0:80 -> 0.0.0.0:0 -> LISTENING
N/A -> 0.0.0.0:135 -> 0.0.0.0:0 -> LISTENING
N/A -> 0.0.0.0:445 -> 0.0.0.0:0 -> LISTENING
N/A -> 0.0.0.0:1433 -> 0.0.0.0:0 -> LISTENING
ragent.exe -> 0.0.0.0:1540 -> 0.0.0.0:0 -> LISTENING
rmngr.exe -> 0.0.0.0:1541 -> 0.0.0.0:0 -> LISTENING
rmngr.exe -> 0.0.0.0:1560 -> 0.0.0.0:0 -> LISTENING
ragent.exe -> 0.0.0.0:1561 -> 0.0.0.0:0 -> LISTENING
rphost.exe -> 0.0.0.0:1562 -> 0.0.0.0:0 -> LISTENING
rphost.exe -> 0.0.0.0:1563 -> 0.0.0.0:0 -> LISTENING
N/A -> 0.0.0.0:2383 -> 0.0.0.0:0 -> LISTENING
ofdconnectsvc.exe -> 0.0.0.0:7878 -> 0.0.0.0:0 -> LISTENING
N/A -> 0.0.0.0:47001 -> 0.0.0.0:0 -> LISTENING
N/A -> 0.0.0.0:49152 -> 0.0.0.0:0 -> LISTENING
N/A -> 0.0.0.0:49153 -> 0.0.0.0:0 -> LISTENING
N/A -> 0.0.0.0:49154 -> 0.0.0.0:0 -> LISTENING
N/A -> 0.0.0.0:49155 -> 0.0.0.0:0 -> LISTENING
N/A -> 0.0.0.0:49156 -> 0.0.0.0:0 -> LISTENING
N/A -> 0.0.0.0:49157 -> 0.0.0.0:0 -> LISTENING
N/A -> 0.0.0.0:49159 -> 0.0.0.0:0 -> LISTENING
N/A -> 0.0.0.0:60000 -> 0.0.0.0:0 -> LISTENING
N/A -> 10.17.0.60:139 -> 0.0.0.0:0 -> LISTENING
ragent.exe -> 10.17.0.60:1540 -> 10.17.0.60:49273 -> ESTABLISHED
rmngr.exe -> 10.17.0.60:1541 -> 10.17.0.60:49269 -> ESTABLISHED
rmngr.exe -> 10.17.0.60:1541 -> 10.17.0.60:49270 -> ESTABLISHED
rmngr.exe -> 10.17.0.60:1541 -> 10.17.0.60:49278 -> ESTABLISHED
rmngr.exe -> 10.17.0.60:1541 -> 10.17.0.60:49282 -> ESTABLISHED
rmngr.exe -> 10.17.0.60:1541 -> 10.17.0.60:49283 -> ESTABLISHED
rphost.exe -> 10.17.0.60:1562 -> 10.17.0.60:49275 -> ESTABLISHED
rphost.exe -> 10.17.0.60:1562 -> 10.17.0.60:49279 -> ESTABLISHED
rphost.exe -> 10.17.0.60:1562 -> 10.17.0.60:49306 -> ESTABLISHED
ragent.exe -> 10.17.0.60:49269 -> 10.17.0.60:1541 -> ESTABLISHED
rphost.exe -> 10.17.0.60:49270 -> 10.17.0.60:1541 -> ESTABLISHED
N/A -> 10.17.0.60:49272 -> 10.17.0.60:1540 -> TIME_WAIT
mmc.exe -> 10.17.0.60:49273 -> 10.17.0.60:1540 -> ESTABLISHED
mmc.exe -> 10.17.0.60:49275 -> 10.17.0.60:1562 -> ESTABLISHED
rphost.exe -> 10.17.0.60:49278 -> 10.17.0.60:1541 -> ESTABLISHED
rmngr.exe -> 10.17.0.60:49279 -> 10.17.0.60:1562 -> ESTABLISHED
rphost.exe -> 10.17.0.60:49282 -> 10.17.0.60:1541 -> ESTABLISHED
rphost.exe -> 10.17.0.60:49283 -> 10.17.0.60:1541 -> ESTABLISHED
N/A -> 10.17.0.60:49295 -> 10.17.0.60:1433 -> TIME_WAIT
N/A -> 10.17.0.60:49296 -> 10.17.0.60:1433 -> TIME_WAIT
N/A -> 10.17.0.60:49297 -> 10.17.0.60:1433 -> TIME_WAIT
N/A -> 10.17.0.60:49298 -> 10.17.0.60:1433 -> TIME_WAIT
N/A -> 10.17.0.60:49299 -> 10.17.0.60:1433 -> TIME_WAIT
N/A -> 10.17.0.60:49300 -> 10.17.0.60:1433 -> TIME_WAIT
N/A -> 10.17.0.60:49301 -> 10.17.0.60:1433 -> TIME_WAIT
N/A -> 10.17.0.60:49302 -> 10.17.0.60:1433 -> TIME_WAIT
N/A -> 10.17.0.60:49303 -> 10.17.0.60:1433 -> TIME_WAIT
N/A -> 10.17.0.60:49304 -> 10.17.0.60:1433 -> TIME_WAIT
1cv8.exe -> 10.17.0.60:49306 -> 10.17.0.60:1562 -> ESTABLISHED
N/A -> 10.17.0.60:49307 -> 10.17.0.60:1433 -> TIME_WAIT
N/A -> 10.17.0.60:49308 -> 10.17.0.60:1433 -> TIME_WAIT
N/A -> 10.17.0.60:49309 -> 10.17.0.60:1433 -> TIME_WAIT
N/A -> 10.17.0.60:49313 -> 10.17.0.60:1433 -> TIME_WAIT
N/A -> 10.17.0.60:49314 -> 10.17.0.60:1433 -> TIME_WAIT
N/A -> 10.17.0.60:60000 -> 10.17.0.1:54267 -> ESTABLISHED
N/A -> 127.0.0.1:1433 -> 127.0.0.1:49280 -> ESTABLISHED
N/A -> 127.0.0.1:1433 -> 127.0.0.1:49281 -> ESTABLISHED
N/A -> 127.0.0.1:1433 -> 127.0.0.1:49284 -> ESTABLISHED
N/A -> 127.0.0.1:1433 -> 127.0.0.1:49285 -> ESTABLISHED
N/A -> 127.0.0.1:1433 -> 127.0.0.1:49286 -> ESTABLISHED
N/A -> 127.0.0.1:1433 -> 127.0.0.1:49287 -> ESTABLISHED
N/A -> 127.0.0.1:1433 -> 127.0.0.1:49288 -> ESTABLISHED
N/A -> 127.0.0.1:1433 -> 127.0.0.1:49289 -> ESTABLISHED
N/A -> 127.0.0.1:1433 -> 127.0.0.1:49290 -> ESTABLISHED
N/A -> 127.0.0.1:1433 -> 127.0.0.1:49291 -> ESTABLISHED
N/A -> 127.0.0.1:1433 -> 127.0.0.1:49293 -> ESTABLISHED
N/A -> 127.0.0.1:1434 -> 0.0.0.0:0 -> LISTENING
rmngr.exe -> 127.0.0.1:1560 -> 127.0.0.1:49271 -> ESTABLISHED
ragent.exe -> 127.0.0.1:1561 -> 127.0.0.1:49274 -> ESTABLISHED
rphost.exe -> 127.0.0.1:1563 -> 127.0.0.1:49292 -> ESTABLISHED
rmngr.exe -> 127.0.0.1:49271 -> 127.0.0.1:1560 -> ESTABLISHED
ragent.exe -> 127.0.0.1:49274 -> 127.0.0.1:1561 -> ESTABLISHED
N/A -> 127.0.0.1:49276 -> 127.0.0.1:1433 -> TIME_WAIT
N/A -> 127.0.0.1:49277 -> 127.0.0.1:1433 -> TIME_WAIT
rphost.exe -> 127.0.0.1:49280 -> 127.0.0.1:1433 -> ESTABLISHED
rphost.exe -> 127.0.0.1:49281 -> 127.0.0.1:1433 -> ESTABLISHED
rphost.exe -> 127.0.0.1:49284 -> 127.0.0.1:1433 -> ESTABLISHED
rphost.exe -> 127.0.0.1:49285 -> 127.0.0.1:1433 -> ESTABLISHED
rphost.exe -> 127.0.0.1:49286 -> 127.0.0.1:1433 -> ESTABLISHED
rphost.exe -> 127.0.0.1:49287 -> 127.0.0.1:1433 -> ESTABLISHED
rphost.exe -> 127.0.0.1:49288 -> 127.0.0.1:1433 -> ESTABLISHED
rphost.exe -> 127.0.0.1:49289 -> 127.0.0.1:1433 -> ESTABLISHED
rphost.exe -> 127.0.0.1:49290 -> 127.0.0.1:1433 -> ESTABLISHED
rphost.exe -> 127.0.0.1:49291 -> 127.0.0.1:1433 -> ESTABLISHED
rphost.exe -> 127.0.0.1:49292 -> 127.0.0.1:1563 -> ESTABLISHED
rphost.exe -> 127.0.0.1:49293 -> 127.0.0.1:1433 -> ESTABLISHED
N/A -> 127.0.0.1:49305 -> 127.0.0.1:1541 -> TIME_WAIT
N/A -> 192.168.0.9:139 -> 0.0.0.0:0 -> LISTENING
N/A -> 192.168.0.9:49311 -> 192.168.0.109:139 -> ESTABLISHED
N/A -> 192.168.0.9:49312 -> 192.168.0.109:139 -> ESTABLISHED
N/A -> 192.168.0.9:60000 -> 94.75.15.247:11107 -> ESTABLISHED
[+] Соединения UDP
N/A -> 0.0.0.0:500 -> *.*
N/A -> 0.0.0.0:4500 -> *.*
N/A -> 0.0.0.0:5355 -> *.*
N/A -> 0.0.0.0:54322 -> *.*
N/A -> 0.0.0.0:58583 -> *.*
N/A -> 10.17.0.60:137 -> *.*
N/A -> 10.17.0.60:138 -> *.*
N/A -> 127.0.0.1:52918 -> *.*
N/A -> 127.0.0.1:59923 -> *.*
N/A -> 127.0.0.1:59925 -> *.*
N/A -> 192.168.0.9:137 -> *.*
N/A -> 192.168.0.9:138 -> *.*
[+] Файл Hosts
127.0.0.1 genuine.microsoft.com
127.0.0.1 mpa.one.microsoft.com
127.0.0.1 sls.microsoft.com
[+] Ring3 API Hooks
x64 OS not supported!
[+] Информация о ядре
x64 OS not supported!
---
Время работы [ 0:4:21 ]
