Премини към съдържанието

hjhj

Потребител
  • Публикации

    38
  • Регистрация

  • Последно онлайн

Харесвания

6 Неутрална репутация

Всичко за hjhj

  • Титла
    Потребител
  1. Bat Файл

    По принцип думата ще я има в повече в съдържанието отколкото в заглавието но не е изключено да я има и в някое друго заглавие. Няма да е само тази дума има и други много са работим с много апаратури ползват се различни термини и т.н. Файловете по принцип са разхвърляни и може и да има и на други дялове. Няма резултат от изпълнението.
  2. Bat Файл

    Пробвах кода който ми състави но няма никакъв резултат. Може и аз да бъркам нещо
  3. Bat Файл

    Здравейте колеги. Да ви попитам като използвам под CMD команда find да търси например проводник и ми изведе много файлове в различни директории, да ги копирам наведнъж в една папка. Идеята ми е ако може да създам bat файл.
  4. Оригинален Stock Rom

    Благодаря изтеглих си го и сега ще се "мъча" с него
  5. Оригинален Stock Rom

    Ако го имаше в сайта на Леново щях да го сваля от там още отдавна и нямаше да чакам ти да ми кажеш бъди сигурен
  6. Оригинален Stock Rom

    Мерси това го гледах, но не знам дали наистина е оригинален и дали няма нещо пипано из него.
  7. Оригинален Stock Rom

    Не не съм инсталирал нищо. Това с фабричните непомога правих и хард ресет ама пак няма промяна. Става дума за Леново а606
  8. Оригинален Stock Rom

    Здравейте Да попитам някой дали знае откъде мога да си дръпна оригинален софтуер за телефона? След 3 години вярна служба започна да дава проблеми със софа и ми се иска да опитам да го оправя ако не да го сменям..
  9. В крайна сметка го отнесох на сервиз и се оказа интеграла на вертикалата поне така ми казаха.
  10. Здравейте. Имам следния проблем с телевизора. Когато се включи в началото показва 3 черти (червена, зелена, синя), след което картината се показва на половината и отдолу има бели черти. Понякога се оправя понякога не. Модела на телевизора е cb1445 от старите
  11. Изтрих всичко което програмата намери но рестартирах преди да направя дневник. Сега сканирах на ново ето резултата: (не откри нищо) Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 8/20/17 Scan Time: 5:30 PM Log File: new report malware.txt Administrator: Yes -Software Information- Version: 3.1.2.1733 Components Version: 1.0.160 Update Package Version: 1.0.2624 License: Trial -System Information- OS: Windows 10 (Build 15063.540) CPU: x64 File System: NTFS User: JPSOF08-PC\Administrator -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 476323 Threats Detected: 0 (No malicious items detected) Threats Quarantined: 0 (No malicious items detected) Time Elapsed: 15 min, 22 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 0 (No malicious items detected) Physical Sector: 0 (No malicious items detected) (end)
  12. Като цяло няма промяна в системата. Отново си е бавна и мудна Дневник от Zemana AntiMalware Zemana AntiMalware 2.74.2.76 (Installed) ------------------------------------------------------- Scan Result : Completed Scan Date : 2017/8/20 Operating System : Windows 10 64-bit Processor : 2X Intel(R) Core(TM)2 CPU 6600 @ 2.40GHz BIOS Mode : Legacy CUID : 129193FAFBA93673498DD1 Scan Type : System Scan Duration : 19m 37s Scanned Objects : 75152 Detected Objects : 0 Excluded Objects : 0 Read Level : SCSI Auto Upload : Enabled Detect All Extensions : Disabled Scan Documents : Disabled Domain Info : OMNI,0,2 Detected Objects ------------------------------------------------------- No threats detected Дневник от Malwarebytes Anti -Malware Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 8/20/17 Scan Time: 1:53 PM Log File: Malware report predi reset.txt Administrator: Yes -Software Information- Version: 3.1.2.1733 Components Version: 1.0.160 Update Package Version: 1.0.2622 License: Trial -System Information- OS: Windows 10 (Build 15063.540) CPU: x64 File System: NTFS User: JPSOF08-PC\Administrator -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 476216 Threats Detected: 46 Threats Quarantined: 0 (No malicious items detected) Time Elapsed: 19 min, 44 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 42 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\CLSID\{CF0F43AB-9C23-4D7B-8040-201B82844854}, No Action By User, [6599], [168803],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\SmileysWeLoveToolbar.SWLIEToolbar, No Action By User, [6599], [168803],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CF0F43AB-9C23-4D7B-8040-201B82844854}, No Action By User, [6599], [168803],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{CF0F43AB-9C23-4D7B-8040-201B82844854}, No Action By User, [6599], [168803],1.0.2622 PUP.Optional.SmileysWeLove, HKU\S-1-5-21-1680452487-3381643071-2330436843-500\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{CF0F43AB-9C23-4D7B-8040-201B82844854}, No Action By User, [6599], [168803],1.0.2622 PUP.Optional.SmileysWeLove, HKU\S-1-5-21-1680452487-3381643071-2330436843-500\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{CF0F43AB-9C23-4D7B-8040-201B82844854}, No Action By User, [6599], [168803],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\SmileysWeLoveToolbar.IEModule, No Action By User, [6599], [168804],1.0.2622 PUP.Optional.SmileysWeLove, HKU\S-1-5-21-1680452487-3381643071-2330436843-500\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{E4EF8A64-0A30-48F5-B3FE-5FDA978DA775}, No Action By User, [6599], [168804],1.0.2622 PUP.Optional.SmileysWeLove, HKU\S-1-5-21-1680452487-3381643071-2330436843-500\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{E4EF8A64-0A30-48F5-B3FE-5FDA978DA775}, No Action By User, [6599], [168804],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E4EF8A64-0A30-48F5-B3FE-5FDA978DA775}, No Action By User, [6599], [168804],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E4EF8A64-0A30-48F5-B3FE-5FDA978DA775}, No Action By User, [6599], [168804],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\1afb8e7a-a08b-475a-beb2-376df461eb17, No Action By User, [6599], [168805],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\CLSID\{9E1D4C49-E255-3A4D-8364-E69B3DCD5421}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{9E1D4C49-E255-3A4D-8364-E69B3DCD5421}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{9E1D4C49-E255-3A4D-8364-E69B3DCD5421}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\SmileysWeLoveToolbar.IEModule+IECustomCommands, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\CLSID\{647EFA4E-6349-3093-8C57-B26EC1ACA785}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{647EFA4E-6349-3093-8C57-B26EC1ACA785}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{647EFA4E-6349-3093-8C57-B26EC1ACA785}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\SmileysWeLoveToolbar.IEModule+IECustomContextMenuCommands, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\CLSID\{B781EE97-26A2-388A-802C-29BE927500AF}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{B781EE97-26A2-388A-802C-29BE927500AF}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{B781EE97-26A2-388A-802C-29BE927500AF}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\SmileysWeLoveToolbar.PopupForm, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\CLSID\{EF250318-E93A-3279-8896-F8DF95C0CF2B}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EF250318-E93A-3279-8896-F8DF95C0CF2B}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{EF250318-E93A-3279-8896-F8DF95C0CF2B}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\SmileysWeLoveToolbar.PopupForm+AltActionClickedEventArgs, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\CLSID\{8A6E668C-308A-3456-8D66-5BD429A17A88}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{8A6E668C-308A-3456-8D66-5BD429A17A88}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{8A6E668C-308A-3456-8D66-5BD429A17A88}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\SmileysWeLoveToolbar.PopupForm+SmileyClickedEventArgs, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\CLSID\{3BF3CEC6-D4A4-3E85-BF7F-B914991D1CFA}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3BF3CEC6-D4A4-3E85-BF7F-B914991D1CFA}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{3BF3CEC6-D4A4-3E85-BF7F-B914991D1CFA}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\SmileysWeLoveToolbar.SWLSettings, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\CLSID\{E30DA02E-EB04-3ABB-A3B4-A26FF74C14F3}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E30DA02E-EB04-3ABB-A3B4-A26FF74C14F3}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{E30DA02E-EB04-3ABB-A3B4-A26FF74C14F3}, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.SmileysWeLove, HKLM\SOFTWARE\CLASSES\SmileysWeLoveToolbar.WatermarkTextBox, No Action By User, [6599], [243210],1.0.2622 PUP.Optional.CrossRider, HKU\S-1-5-21-1680452487-3381643071-2330436843-500\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F5DC3120-9360-4C3D-AD67-52EBF4F1DD72}, No Action By User, [218], [237488],1.0.2622 PUP.Optional.UpdateCheckerApp, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\UpdateCheckerApp, No Action By User, [14190], [244358],1.0.2622 Registry Value: 1 PUP.Optional.CrossRider, HKU\S-1-5-21-1680452487-3381643071-2330436843-500\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F5DC3120-9360-4C3D-AD67-52EBF4F1DD72}|APPNAME, No Action By User, [218], [237488],1.0.2622 Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 1 Adware.Agent.Generic, C:\PROGRAMDATA\IJHBIDIKLKKCEFBKACPGCBPPNNJMKBFF, No Action By User, [1396], [389396],1.0.2622 File: 2 Adware.Agent.Generic, C:\PROGRAMDATA\IJHBIDIKLKKCEFBKACPGCBPPNNJMKBFF\IJHBIDIKLKKCEFBKACPGCBPPNNJMKBFF.CRX, No Action By User, [1396], [389396],1.0.2622 Adware.Agent.Generic, C:\ProgramData\ijhbidiklkkcefbkacpgcbppnnjmkbff\update.xml, No Action By User, [1396], [389396],1.0.2622 Physical Sector: 0 (No malicious items detected) (end) FRST.txt Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-08-2017 Ran by Administrator (administrator) on JPSOF08-PC (20-08-2017 14:48:54) Running from C:\Users\Administrator\Desktop Loaded Profiles: Administrator (Available Profiles: Administrator) Platform: Windows 10 Pro Version 1703 (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: Edge) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe (ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (Lenovo) C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Copyright 2017.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe (Copyright 2017.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ==================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation) HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes) HKLM\...\Run: [ZAM] => C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [15546512 2017-06-19] (Copyright 2017.) HKU\S-1-5-21-1680452487-3381643071-2330436843-500\...\Policies\Explorer: [] Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled [2017-08-16] () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled [2017-03-16] () ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 10.210.107.245 10.210.210.200 Tcpip\..\Interfaces\{11f60767-c6de-4cc3-b063-d1ce2b22fe27}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{cce81b2e-e4df-4b2b-b745-66396682aba5}: [DhcpNameServer] 10.210.107.245 10.210.210.200 Internet Explorer: ================== HKU\S-1-5-21-1680452487-3381643071-2330436843-500\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.live.com/1rewlive4startup/home BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-07] (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-07] (Oracle Corporation) FireFox: ======== FF ProfilePath: C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\3trpquxa.default [2017-08-20] FF Homepage: Mozilla\Firefox\Profiles\3trpquxa.default -> about:home FF NetworkProxy: Mozilla\Firefox\Profiles\3trpquxa.default -> type", 0 FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird FF Extension: (ESET Smart Security Extension) - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2013-08-05] [not signed] FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_21_0_0_182.dll [2016-03-16] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_182.dll [2016-03-16] () FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-10-07] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-10-07] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.) FF Plugin-x32: Web Components -> C:\Program Files (x86)\Web Components\npWebVideoPlugin.dll [2015-03-09] () Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default [2017-08-20] CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-06-07] CHR Extension: (Chrome Media Router) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-09] ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1231376 2016-03-23] (Autodesk Inc.) S2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.) S3 EhttpSrv; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [42360 2011-10-24] (ESET) R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [814264 2011-10-24] (ESET) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes) S3 NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [774144 2006-11-10] (Nero AG) [File not signed] S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-19] (Microsoft Corporation) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7757040 2017-04-06] (TeamViewer GmbH) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-07-11] (Microsoft Corporation) R2 ZAMSvc; C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [15546512 2017-06-19] (Copyright 2017.) ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.) R3 E100B; C:\WINDOWS\System32\drivers\efe5b32e.sys [182656 2017-03-18] (Intel Corporation) R2 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [171152 2011-10-24] (ESET) R1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [141264 2011-10-24] (ESET) R2 epfwwfpr; C:\WINDOWS\System32\DRIVERS\epfwwfpr.sys [125296 2011-10-24] (ESET) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77376 2017-06-27] () R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [188352 2017-08-20] (Malwarebytes) R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [101784 2017-08-20] (Malwarebytes) R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [45472 2017-08-20] (Malwarebytes) R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [253856 2017-08-20] (Malwarebytes) R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [93600 2017-08-20] (Malwarebytes) S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] () S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.) S3 ssudserd; C:\WINDOWS\system32\DRIVERS\ssudserd.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.) R1 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [119712 2016-04-28] (Oracle Corporation) R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [192352 2016-04-28] (Oracle Corporation) S3 VBoxUSB; C:\WINDOWS\System32\Drivers\VBoxUSB.sys [135768 2016-04-28] (Oracle Corporation) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation) R1 ZAM; C:\WINDOWS\System32\drivers\zam64.sys [203680 2017-08-20] (Zemana Ltd.) R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2017-08-20] (Zemana Ltd.) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-08-20 14:48 - 2017-08-20 14:49 - 000010424 _____ C:\Users\Administrator\Desktop\FRST.txt 2017-08-20 14:47 - 2017-08-20 08:56 - 002395648 _____ (Farbar) C:\Users\Administrator\Desktop\FRST64.exe 2017-08-20 14:46 - 2017-08-20 14:46 - 000000800 _____ C:\Users\Administrator\Desktop\Zemana-2017.08.20-14.22.39-i0-t92-d0.txt 2017-08-20 14:22 - 2017-08-20 14:48 - 000021768 _____ C:\WINDOWS\ZAM.krnl.trace 2017-08-20 14:22 - 2017-08-20 14:48 - 000008039 _____ C:\WINDOWS\ZAM_Guard.krnl.trace 2017-08-20 14:22 - 2017-08-20 14:22 - 000203680 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zamguard64.sys 2017-08-20 14:22 - 2017-08-20 14:22 - 000203680 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zam64.sys 2017-08-20 14:22 - 2017-08-20 14:22 - 000001217 _____ C:\Users\Public\Desktop\Zemana AntiMalware.lnk 2017-08-20 14:22 - 2017-08-20 14:22 - 000000000 ____D C:\Users\Administrator\AppData\Local\Zemana 2017-08-20 14:22 - 2017-08-20 14:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiMalware 2017-08-20 14:22 - 2017-08-20 14:22 - 000000000 ____D C:\Program Files (x86)\Zemana AntiMalware 2017-08-20 14:21 - 2017-08-20 14:21 - 006589840 _____ (Zemana Ltd. ) C:\Users\Administrator\Downloads\Zemana.AntiMalware.Setup.exe 2017-08-20 14:21 - 2017-08-20 14:21 - 006589840 _____ (Zemana Ltd. ) C:\Users\Administrator\Desktop\Zemana.AntiMalware.Setup.exe 2017-08-20 14:14 - 2017-08-20 14:14 - 000008393 _____ C:\Users\Administrator\Desktop\Malware report predi reset.txt 2017-08-20 13:52 - 2017-08-20 14:17 - 000101784 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys 2017-08-20 13:52 - 2017-08-20 14:17 - 000093600 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2017-08-20 13:52 - 2017-08-20 14:17 - 000045472 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2017-08-20 13:52 - 2017-08-20 13:52 - 000188352 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys 2017-08-20 13:51 - 2017-08-20 14:17 - 000253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2017-08-20 13:51 - 2017-08-20 13:51 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2017-08-20 13:51 - 2017-08-20 13:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2017-08-20 13:51 - 2017-08-20 13:51 - 000000000 ____D C:\ProgramData\Malwarebytes 2017-08-20 13:51 - 2017-08-20 13:51 - 000000000 ____D C:\Program Files\Malwarebytes 2017-08-20 13:51 - 2017-06-27 12:06 - 000077376 _____ C:\WINDOWS\system32\Drivers\mbae64.sys 2017-08-20 13:50 - 2017-08-20 13:50 - 065033984 _____ (Malwarebytes ) C:\Users\Administrator\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.160-1.0.2251.exe 2017-08-20 13:50 - 2017-08-20 13:50 - 065033984 _____ (Malwarebytes ) C:\Users\Administrator\Desktop\mb3-setup-consumer-3.1.2.1733-1.0.160-1.0.2251.exe 2017-08-20 12:33 - 2017-08-20 12:33 - 000006080 _____ C:\Users\Administrator\Downloads\fixlist.txt 2017-08-20 12:32 - 2017-08-20 13:03 - 000000000 ____D C:\Users\Administrator\Desktop\chidska 2017-08-20 12:28 - 2017-08-20 12:32 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Geek Uninstaller 2017-08-20 12:28 - 2017-08-20 12:28 - 007137216 _____ (Geek Unіnstaller) C:\Users\Administrator\Desktop\geek.exe 2017-08-20 12:28 - 2017-08-20 12:28 - 000000000 ____D C:\Users\Administrator\Desktop\geek 2017-08-20 12:28 - 2017-08-20 12:27 - 003000643 _____ C:\Users\Administrator\Desktop\geek.zip 2017-08-20 12:27 - 2017-08-20 12:27 - 003000643 _____ C:\Users\Administrator\Downloads\geek.zip 2017-08-20 08:57 - 2017-08-20 14:48 - 000000000 ____D C:\FRST 2017-08-20 08:56 - 2017-08-20 08:56 - 002395648 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64.exe 2017-08-18 09:16 - 2017-08-18 09:28 - 000037376 _____ C:\Users\Administrator\Desktop\отчет АТЦ 17.08.2017.xls 2017-08-16 23:03 - 2017-08-16 12:17 - 000000000 ____D C:\Windows.old 2017-08-16 23:00 - 2017-08-16 23:00 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2017-08-16 23:00 - 2017-08-16 23:00 - 005820984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2017-08-16 23:00 - 2017-08-16 23:00 - 005721600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2017-08-16 23:00 - 2017-08-16 23:00 - 002671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2017-08-16 23:00 - 2017-08-16 23:00 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-08-16 23:00 - 2017-08-16 23:00 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2017-08-16 23:00 - 2017-08-16 23:00 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2017-08-16 23:00 - 2017-08-16 23:00 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2017-08-16 23:00 - 2017-08-16 23:00 - 000551200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2017-08-16 23:00 - 2017-08-16 23:00 - 000406544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2017-08-16 23:00 - 2017-08-16 23:00 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2017-08-16 23:00 - 2017-08-16 23:00 - 000387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll 2017-08-16 23:00 - 2017-08-16 23:00 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe 2017-08-16 23:00 - 2017-08-16 23:00 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll 2017-08-16 23:00 - 2017-08-16 23:00 - 000337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2017-08-16 23:00 - 2017-08-16 23:00 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll 2017-08-16 23:00 - 2017-08-16 23:00 - 000096648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll 2017-08-16 23:00 - 2017-08-16 23:00 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll 2017-08-16 23:00 - 2017-08-16 23:00 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IpNatHlpClient.dll 2017-08-16 22:59 - 2017-08-16 23:00 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 023681536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 023677952 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 021353208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 020504064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 017366528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 013841408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 012786176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 011870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 008333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 008319392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 008209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 007931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 007907344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 007336960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 007326128 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 006761568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 006728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 006557520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 006269440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 005808640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 005477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 005302968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 004730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 004707840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 004535296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 004445696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 004417024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 004396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 004213656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 004056064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 003995136 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 003670016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-08-16 22:59 - 2017-08-16 22:59 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 003464704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 003377664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 003204608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 002969888 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 002956288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-08-16 22:59 - 2017-08-16 22:59 - 002939392 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 002805248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 002679200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2017-08-16 22:59 - 2017-08-16 22:59 - 002645680 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 002604248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 002444704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-08-16 22:59 - 2017-08-16 22:59 - 002444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 002424024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 002399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 002327456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2017-08-16 22:59 - 2017-08-16 22:59 - 002259768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 002211840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 002165752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 002055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-08-16 22:59 - 2017-08-16 22:59 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001833984 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001802752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001722880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001706496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001536512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001525760 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 001468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001396736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001357312 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001337856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001325968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001305088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001298432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001195760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001114528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001068720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001054280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001033544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 001015296 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000967584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000961952 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000952832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000942592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000923048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000892928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswdat10.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000866808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000864248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000853504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000809984 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000805816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000778240 _____ C:\WINDOWS\system32\MBR2GPT.EXE 2017-08-16 22:59 - 2017-08-16 22:59 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000723680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys 2017-08-16 22:59 - 2017-08-16 22:59 - 000715168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2017-08-16 22:59 - 2017-08-16 22:59 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2017-08-16 22:59 - 2017-08-16 22:59 - 000699904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000687616 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000665600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000660680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000641536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000616448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl40.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000612864 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsvcs.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000610584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000587776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000586752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsvcs.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000554400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2017-08-16 22:59 - 2017-08-16 22:59 - 000538112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000529992 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000527976 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000518144 _____ C:\WINDOWS\SysWOW64\msjetoledb40.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Display.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000482816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000473240 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000455584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000446464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000414296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000411040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000410160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000382368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2017-08-16 22:59 - 2017-08-16 22:59 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000359552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000349600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000323936 _____ (Microsoft Corporation) C:\WINDOWS\system32\shlwapi.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000318232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000315288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000303104 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjtes40.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000280472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000279968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys 2017-08-16 22:59 - 2017-08-16 22:59 - 000277432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shlwapi.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstext40.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000267264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000212384 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000204192 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000192264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE 2017-08-16 22:59 - 2017-08-16 22:59 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000176024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000173104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000168864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE 2017-08-16 22:59 - 2017-08-16 22:59 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\qasf.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000143736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qasf.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000133904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdeploy.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000119904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000119712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys 2017-08-16 22:59 - 2017-08-16 22:59 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000116280 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys 2017-08-16 22:59 - 2017-08-16 22:59 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000104432 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000100232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys 2017-08-16 22:59 - 2017-08-16 22:59 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000090464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ofdeploy.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter40.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmclr.sys 2017-08-16 22:59 - 2017-08-16 22:59 - 000082336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys 2017-08-16 22:59 - 2017-08-16 22:59 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe 2017-08-16 22:59 - 2017-08-16 22:59 - 000077312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys 2017-08-16 22:59 - 2017-08-16 22:59 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sscore.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll 2017-08-16 22:59 - 2017-08-16 22:59 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\IpNatHlpClient.dll 2017-08-16 22:48 - 2017-03-18 08:59 - 004164608 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0002.dll 2017-08-16 22:48 - 2017-03-18 08:55 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0002.dll 2017-08-16 22:48 - 2017-03-18 08:54 - 001914368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MLS2.dll 2017-08-16 22:48 - 2017-03-18 08:43 - 004164608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0002.dll 2017-08-16 22:48 - 2017-03-18 08:40 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0002.dll 2017-08-16 22:48 - 2017-03-18 08:39 - 001868288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MLS2.dll 2017-08-16 22:47 - 2017-08-16 22:47 - 000008192 _____ C:\WINDOWS\system32\config\userdiff 2017-08-16 22:47 - 2017-08-16 12:09 - 000000000 ____D C:\WINDOWS\ServiceProfiles 2017-08-16 13:51 - 2017-08-16 13:51 - 000000000 ____D C:\Users\Administrator\AppData\Local\DBG 2017-08-16 13:27 - 2017-08-16 13:27 - 000000000 ____D C:\ProgramData\Microsoft OneDrive 2017-08-16 13:23 - 2017-08-16 13:23 - 000000020 ___SH C:\Users\Administrator\ntuser.ini 2017-08-16 12:42 - 2017-08-16 12:44 - 000007623 _____ C:\WINDOWS\diagwrn.xml 2017-08-16 12:42 - 2017-08-16 12:44 - 000007623 _____ C:\WINDOWS\diagerr.xml 2017-08-16 12:36 - 2017-08-20 14:42 - 000004172 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{515D036F-337C-41A8-8081-3C714B88143D} 2017-08-16 12:36 - 2017-08-20 14:16 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-08-16 12:36 - 2017-08-16 12:36 - 000003444 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2017-08-16 12:36 - 2017-08-16 12:36 - 000003220 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2017-08-16 12:36 - 2017-08-16 12:36 - 000003016 _____ C:\WINDOWS\System32\Tasks\lenovo mobile auto run 2017-08-16 12:36 - 2017-08-16 12:36 - 000002426 _____ C:\WINDOWS\System32\Tasks\{66490BEA-72AB-41F2-A6A2-C01421233BE8} 2017-08-16 12:36 - 2017-08-16 12:36 - 000002406 _____ C:\WINDOWS\System32\Tasks\{98CB306E-AB3D-46E9-B06E-45FCF2D5C9B3} 2017-08-16 12:36 - 2017-08-16 12:36 - 000002394 _____ C:\WINDOWS\System32\Tasks\{779B36A9-04E0-43CE-8087-C74D0C366FC9} 2017-08-16 12:36 - 2017-08-16 12:36 - 000002390 _____ C:\WINDOWS\System32\Tasks\{4E4FCB1C-7684-4D25-915D-998EE97DB0BE} 2017-08-16 12:36 - 2017-08-16 12:36 - 000002386 _____ C:\WINDOWS\System32\Tasks\{8B16F1B8-5B1B-4F6F-A221-3164B9D55BEE} 2017-08-16 12:36 - 2017-08-16 12:36 - 000002372 _____ C:\WINDOWS\System32\Tasks\{27C85CFF-4CAE-4453-9FF4-EBC9430AE651} 2017-08-16 12:36 - 2017-08-16 12:36 - 000002226 _____ C:\WINDOWS\System32\Tasks\{9606CE0E-1B5F-4876-9B35-3F410DC6620B} 2017-08-16 12:36 - 2017-08-16 12:36 - 000000000 ____D C:\WINDOWS\System32\Tasks\WPD 2017-08-16 12:36 - 2017-08-16 12:36 - 000000000 ____D C:\WINDOWS\System32\Tasks\Games 2017-08-16 12:35 - 2017-08-20 14:21 - 000957848 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-08-16 12:25 - 2017-08-16 12:25 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2017-08-16 12:20 - 2017-08-16 12:20 - 000000000 ____D C:\ProgramData\USOShared 2017-08-16 12:17 - 2017-08-16 12:17 - 000000000 ____D C:\Program Files\Common Files\SpeechEngines 2017-08-16 12:16 - 2017-08-16 12:26 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate 2017-08-16 12:13 - 2017-08-20 14:22 - 000000000 ____D C:\Users\Administrator 2017-08-16 12:12 - 2017-03-18 23:56 - 002233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2017-08-16 12:09 - 2017-08-20 14:39 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2017-08-16 12:09 - 2017-08-18 08:02 - 000400824 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-08-15 08:49 - 2017-08-16 12:46 - 000000000 ___DC C:\WINDOWS\Panther 2017-07-26 10:19 - 2017-07-26 10:19 - 000000000 ____D C:\Users\Administrator\Desktop\Conf. GK Pernik Line 2017-07-26 10:19 - 2017-07-26 10:19 - 000000000 ____D C:\Users\Administrator\Desktop\Conf. GK Dragoman Line ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-08-20 14:16 - 2017-03-18 14:40 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2017-08-20 12:40 - 2013-08-05 15:54 - 000000008 __RSH C:\ProgramData\ntuser.pol 2017-08-20 12:34 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy 2017-08-20 12:34 - 2009-07-14 06:20 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy 2017-08-20 08:25 - 2016-05-09 13:50 - 000000000 ____D C:\Users\Administrator\AppData\Local\CrashDumps 2017-08-20 08:24 - 2017-03-22 08:18 - 000001149 _____ C:\Users\Administrator\Desktop\Oracle VM VirtualBox.lnk 2017-08-20 07:15 - 2017-03-19 00:03 - 000000000 ___HD C:\Program Files\WindowsApps 2017-08-20 07:15 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\AppReadiness 2017-08-18 09:29 - 2016-11-18 15:39 - 000000000 ____D C:\Users\Administrator\AppData\LocalLow\Mozilla 2017-08-18 08:00 - 2016-11-18 11:33 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2017-08-18 08:00 - 2014-01-03 15:56 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2017-08-18 00:18 - 2013-10-07 14:18 - 000002270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-08-17 17:09 - 2017-03-18 23:51 - 000000000 ____D C:\WINDOWS\CbsTemp 2017-08-17 17:08 - 2017-03-19 00:01 - 000000000 ____D C:\WINDOWS\INF 2017-08-17 14:21 - 2017-02-20 14:15 - 000000000 ____D C:\Users\Administrator\Desktop\Месечни отчети 2017-08-17 10:29 - 2016-04-11 09:12 - 000000000 ____D C:\Users\Administrator\Desktop\Ежедневни отчети 2017-08-17 04:55 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\appcompat 2017-08-16 23:07 - 2017-03-19 00:03 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template 2017-08-16 23:03 - 2017-03-19 00:06 - 000000000 ____D C:\WINDOWS\Setup 2017-08-16 23:02 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2017-08-16 23:01 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\system32\WinMetadata 2017-08-16 23:01 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2017-08-16 23:01 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\system32\oobe 2017-08-16 23:01 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\ShellExperiences 2017-08-16 23:01 - 2017-03-19 00:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer 2017-08-16 23:01 - 2017-03-19 00:03 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2017-08-16 22:48 - 2017-03-19 05:30 - 000000000 ____D C:\WINDOWS\OCR 2017-08-16 15:25 - 2010-11-21 06:27 - 000565416 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2017-08-16 14:06 - 2016-01-01 19:48 - 000000000 ____D C:\Users\Administrator\AppData\Local\Packages 2017-08-16 13:32 - 2016-01-01 19:56 - 000002427 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-08-16 13:32 - 2016-01-01 19:56 - 000000000 ___RD C:\Users\Administrator\OneDrive 2017-08-16 13:24 - 2017-03-19 00:03 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-08-16 13:24 - 2016-01-01 19:49 - 000000000 __RHD C:\Users\Public\AccountPictures 2017-08-16 13:24 - 2014-01-23 14:27 - 000000000 ___RD C:\Users\Administrator\Virtual Machines 2017-08-16 12:47 - 2017-03-18 14:40 - 000032768 _____ C:\WINDOWS\system32\config\ELAM 2017-08-16 12:45 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase 2017-08-16 12:44 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\rescache 2017-08-16 12:41 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\Registration 2017-08-16 12:41 - 2016-07-16 14:47 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated 2017-08-16 12:37 - 2017-03-19 05:31 - 000000000 ____D C:\WINDOWS\HoloShell 2017-08-16 12:36 - 2015-12-31 20:41 - 000022840 _____ C:\WINDOWS\system32\emptyregdb.dat 2017-08-16 12:35 - 2017-03-19 00:03 - 000000000 __RSD C:\WINDOWS\Media 2017-08-16 12:35 - 2017-03-19 00:03 - 000000000 __RHD C:\Users\Public\Libraries 2017-08-16 12:26 - 2017-06-19 13:51 - 000000000 ____D C:\WINDOWS\system32\UNP 2017-08-16 12:26 - 2017-05-25 09:19 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yamicsoft 2017-08-16 12:26 - 2017-05-18 14:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SEP eSigner 2017-08-16 12:26 - 2017-05-08 19:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mobile Assistant 2017-08-16 12:26 - 2017-03-16 14:03 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeFixer 2017-08-16 12:26 - 2016-06-09 08:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WebComponents 2017-08-16 12:26 - 2016-06-02 18:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2017-08-16 12:26 - 2016-05-31 11:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox 2017-08-16 12:26 - 2016-04-12 09:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDSU Fiber Trace Viewer 2017-08-16 12:26 - 2016-02-22 14:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Configuration Software Tool (UCST) 2017-08-16 12:26 - 2015-11-26 10:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk 2017-08-16 12:26 - 2015-10-30 12:07 - 000000000 ____D C:\WINDOWS\ShellNew 2017-08-16 12:26 - 2015-10-28 11:49 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YOKOGAWA OTDR Viewer 2017-08-16 12:26 - 2015-10-28 11:42 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Anritsu 2017-08-16 12:26 - 2014-11-14 13:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2017-08-16 12:26 - 2014-05-29 13:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 7 Essentials 2017-08-16 12:26 - 2014-03-31 08:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Networking Academy 2017-08-16 12:26 - 2014-01-30 15:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Web Start 2017-08-16 12:26 - 2014-01-29 14:51 - 000000000 ____D C:\WINDOWS\SysWOW64\Alcatel 2017-08-16 12:26 - 2013-10-21 14:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Packet Tracer 2017-08-16 12:26 - 2013-10-07 13:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TNMS-M v10.3 2017-08-16 12:26 - 2013-10-07 13:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2017-08-16 12:26 - 2013-10-02 14:40 - 000000000 ____D C:\WINDOWS\en 2017-08-16 12:26 - 2013-10-02 14:40 - 000000000 ____D C:\WINDOWS\bg 2017-08-16 12:26 - 2013-10-02 14:38 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live 2017-08-16 12:26 - 2013-08-05 16:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2017-08-16 12:20 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\SysWOW64\IME 2017-08-16 12:20 - 2017-03-19 00:03 - 000000000 ____D C:\ProgramData\USOPrivate 2017-08-16 12:20 - 2017-03-19 00:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-08-16 12:20 - 2016-01-01 06:01 - 000000000 ____D C:\WINDOWS\SysWOW64\BestPractices 2017-08-16 12:20 - 2013-05-28 00:48 - 000000000 ____D C:\WINDOWS\SysWOW64\x64 2017-08-16 12:20 - 2013-05-28 00:48 - 000000000 ____D C:\WINDOWS\SysWOW64\Lang 2017-08-16 12:19 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\system32\spool 2017-08-16 12:19 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\system32\NDF 2017-08-16 12:19 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\system32\IME 2017-08-16 12:17 - 2017-03-19 00:03 - 000000000 __SHD C:\Program Files\Windows Sidebar 2017-08-16 12:17 - 2017-03-19 00:03 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar 2017-08-16 12:17 - 2017-03-19 00:03 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files 2017-08-16 12:17 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\System 2017-08-16 12:17 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\schemas 2017-08-16 12:17 - 2017-03-19 00:03 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2017-08-16 12:17 - 2016-01-01 06:01 - 000000000 ____D C:\WINDOWS\system32\BestPractices 2017-08-16 12:17 - 2016-01-01 06:01 - 000000000 ____D C:\Program Files\Reference Assemblies 2017-08-16 12:17 - 2016-01-01 06:01 - 000000000 ____D C:\Program Files\MSBuild 2017-08-16 12:17 - 2015-03-13 15:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcatel-Lucent 2017-08-16 12:17 - 2014-01-30 15:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALCATEL 2017-08-16 12:17 - 2013-10-07 10:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ECoCoMS 2017-08-16 12:17 - 2013-10-02 14:38 - 000000000 ____D C:\Program Files\Windows Live 2017-08-16 12:17 - 2013-10-02 14:38 - 000000000 ____D C:\Program Files (x86)\Windows Live 2017-08-16 12:17 - 2013-08-05 16:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET 2017-08-16 12:17 - 2013-08-05 15:49 - 000000000 ____D C:\WINDOWS\system32\appmgmt 2017-08-16 12:13 - 2017-03-18 14:40 - 000000000 ____D C:\WINDOWS\system32\Sysprep 2017-08-16 11:13 - 2017-07-11 09:54 - 000000000 ___HD C:\$WINDOWS.~BT 2017-08-16 11:10 - 2014-02-03 14:21 - 1853318656 _____ C:\Users\Administrator\Desktop\xp_lite Hard Disk_virtualbox.vhd 2017-08-16 10:40 - 2014-01-23 15:25 - 000000000 ____D C:\Users\Administrator\.VirtualBox 2017-08-15 07:30 - 2013-10-02 13:29 - 000000000 ____D C:\Users\Administrator\AppData\Local\Microsoft Help 2017-08-14 15:21 - 2013-10-07 14:01 - 000001623 _____ C:\Users\Administrator\Desktop\languard.ini 2017-08-14 08:58 - 2014-07-14 13:53 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2017-08-09 12:00 - 2014-05-29 09:30 - 000000000 ____D C:\WINDOWS\system32\MRT 2017-08-09 11:55 - 2014-05-29 09:30 - 140394280 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-08-01 10:01 - 2016-11-10 10:11 - 000000000 ____D C:\Users\Administrator\Desktop\Измервания оптични влакна 2017-07-31 18:15 - 2017-03-19 00:06 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2017-07-31 18:15 - 2017-03-19 00:06 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl ==================== Files in the root of some directories ======= 2015-11-26 11:03 - 2015-11-26 11:03 - 000000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll => File is digitally signed C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2017-08-16 12:08 ==================== End of FRST.txt ============================ Addition.txt
  13. Smileys We Love Toolbar for IE не иска да се инсталира дава ми това Fixlog.txt
  14. Здравейте. Съмнява ме, че системата е заразена с някоя гадинка. Почти през час се налага я рестартирам защото забива и нищо не се отваря. Понякога се губи интернета и се налага отново рестарт. Дори и диспечера със задачи не се отваря всекой път., а когато се отвори диска е почти на 100% натовареност. Addition.txt FRST.txt
  15. Проблем с инсталиране на програми

    Това направих сега, махнах и Loaris Trojan Remover и сложих http://www.superantispyware.com/
  • Разглеждащи в момента   0 потребители

    Няма регистрирани потребители разглеждащи тази страница.

×

Информация

Този сайт използва бисквитки (cookies), за най-доброто потребителско изживяване. С използването му, вие приемате нашите Условия за ползване.