Премини към съдържанието

Филтри за търсене

Показани резултати за тагове 'ПРИКЛЮЧЕН'.

  • Търсене по таг

    Въведете тагове разделени със запетая
  • Търсене по автор

Търсене в


Форуми

  • Софтуер
    • Нови Програми
    • Търсене на Програми
    • Програми - Проблеми и Дискусии
    • Драйвери - Търсене, Проблеми, Линкове
    • Операционни системи
    • Сигурност и антивирусна защита
    • Игри
  • Хардуер
    • Общи хардуерни въпроси
    • Преносими компютри
    • Дънни платки
    • Запаметяващи устройства и памети
    • Монитори, Аудио и Видеокарти
    • Периферия
    • Овърклок и PC модинг
    • Нови конфигурации и части, въпроси, препоръки и мнения
  • Мобилни телефони, GSM, Мобилни приложения, Комуникации
    • Мобилни телефони - Въпроси, Проблеми, Софтуер
    • Съвети при избор на телефон
    • Мобилни Приложения (Apps)
    • Мобилни оператори, Мрежи, Промоции, Абонаменти, Услуги
    • Други теми относно мобилни телефони
  • Уеб дизайн, Графичен дизайн, Програмиране
    • Програмиране
    • Графичен Дизайн и Визуални изкуства
    • CMS, Форумни и Торент системи
    • Хостинг, Домейни, Уеб сървъри
    • SEO, Уеб оптимизация и стандарти
  • Битова Техника
    • Аудиотехника
    • Телевизори, Видео и Фото техника, Видео наблюдение
    • Климатици - проблеми, съвети, въпроси
    • Бойлери, Печки, Отопление
    • Друга битова техника
  • Интернет, Локални Мрежи и GPS Навигации
    • Интернет, WiFi, xDSL и Локална Мрежа
    • Биткойн и Криптовалути
    • Онлайн бизнес, AdSense, Affilate програми
    • Рутери, Модеми, Суичове
    • Facebook - проблеми, въпроси, вируси
    • Skype, VoIP - Интернет телефония
    • GPS, Навигационни системи - Въпроси, Карти, Проблеми
  • Изкуство
    • Музика
    • Кино и Телевизия
    • Поезия и Лично творчество
    • Изкуство - Изящно, Приложно и Сценично
    • Фотография и Фотографска техника
    • Литература, Книги (e-books, video trainings, tutorials & etc.)
  • Други
    • Статии и ревюта
    • Образование и обща култура
    • Религия, Мистика, Езотерика
    • История
    • Философия
    • Психология и Психотерапия
    • Новини от България и Света
    • Българите по света
    • Политика
    • Право и Юридически консултации
    • Здраве и Mедицина
    • Банки, Застраховане, Финанси, Кредити
    • Тийн Зона (Teen Zone)
    • Купувам / Продавам
    • Всичко останало
  • Хоби, Развлечение и Свободно време
    • Спорт
    • Автомобили
    • Дом и семейство
    • Домашни любимци
    • Пътешествия и туризъм
    • Кулинар
    • Изповеди
    • Празни приказки и забава
  • За kaldata.com
    • Новини относно сайта
    • Предложения, Въпроси и Проблеми свързани със сайта
  • групите за са стадото аз съм вълк единак Теми
  • Photoshop майнаци Теми
  • Аудио-видео и компютърна техника За приемане на членове
  • Аудио-видео и компютърна техника Теми
  • python3 data types
  • какви са ви любимите игри?? Темиигри за вас
  • супрески игри и рекорди Темиигри за вас

Блогове

Няма резултати

Няма резултати

Категории

  • Компютри
    • Компютърни конфигурации
    • Компютърни компоненти
    • Периферни устройства
    • Дънни платки
    • Мултимедия
    • Компютърни игри и софтуер
    • Администриране и интернет услуги
    • Компютърни аксесоари
    • Лаптопи и таблети
    • Видеокарти
    • Монитори
    • Процесори
    • Хард дискове и Памети
    • Други
  • Електроника
    • Телефони, GSM апарати
    • Аудио
    • Битова електроника
    • GPS и навигационни системи
    • Фотоапарати и обективи
    • TV и Видео
    • Други
  • Имоти
    • Гарсониери
    • Къщи и вили
    • Търговски площи
    • Гаражи
    • Апартаменти
    • Терени
    • Офиси
    • Други имоти в продажба
  • Авто-мото
    • Автомобили
    • Велосипеди
    • Лодки
    • Резервни части
    • Авто аксесоари
    • Мотоциклети
    • Скутери и ATV
    • Камиони и Автобуси
    • Авто сервизи и Rent-a-Car
    • Други
  • Работа
    • Работа в страната
    • Работа в чужбина
    • Стажове
    • Работа от вкъщи
    • Непълно работно време
  • Услуги
  • Строителство
  • Туризъм
  • Курсове и обучение
  • Домашни любимци
  • Други
  • супрески игри и рекорди Обяви
  • супрески игри и рекорди Обяви

Категории

  • Домашни любимци и Животни
  • Игри
  • Инциденти и Екстремни
  • Коли и превозни средства
  • Музика
    • Българска музика
    • Джаз
    • Електронна
    • Метъл и Рок
    • Народна и Фолклор
    • Поп и Диско
    • Поп-фолк
    • Рап и хип-хоп
    • Ритъм енд блус и соул
    • Друга
  • Новини и политика
  • Реклами
  • Смях и Развлечение
  • Спорт
  • Технологии, Компютри, Хардуер
  • ТВ Предавания и Шоу Програми
  • Хора и блогове
  • Филми и анимация
  • Други
  • Old School Hip-Hop and Electroo 80" Видео клипчета

Календари

  • Събития
  • Изложения
  • Семинари
  • Парти
  • Празници в България

Групи продукти

  • Банер Реклами

Търсене в...

Търси резултати които съдържат...


Дата

  • Начало

    Край


Последно обновяване

  • Начало

    Край


Филтриране по брой...

Регистрация

  • Начало

    Край


Група


Skype


Facebook


Google+


Twitter


ICQ


Yahoo


Интернет сайт


Град


Интереси

Открити 129 резултата

  1. Здравейте! Проблема е следния: Всякакъв вид инсталация било то на малка парограмка, игра, драйвър, windows update и т.н забива на 0% и не мърда. Следя как се натоварва системата по време на този 0%, но никакво натоварване 0,0% натовареност 10-20MB заета памет и до там. Операционата система Windows 8 Enterprise (от МОН легален не от някой торент). Позлвах вградената антивирусна windows defender. След като се появи проблема сложих Malwarebytes Anti-Malware, намери гадинки и ги затри, но проблема остана. Мога да инсталирам само под Safe Mode, което ме кара да мисля, че е вирус. Ето прикачените логове: https://app.box.com/s/qi2ufw3ltxx5ixfk4uvz Едит: Става въпрос за настолната ми машина от подписа. Лаптопът е със същата ОС и го няма този проблем
  2. Днес ми се наложи да опитам да открия проблема в един компютър с Windows 7, но не намерих решение. Проблема се изразява в това: потребителски файлове, предимно такива, които са на десктопа и са били оригинално с разширения zip, rar, doc и pdf, са придобили нови разширения след първоначалното име на файла- разширението е NMIFHCN. Така получените файлове на практика са станали неизпозваеми, като премахването на това непонятно разширение и връщането на предполагаемото старо, не дава ефект- файла продължава да е неизползваем. Сканиране с Security Essentials и MBAM не дава наличие на зарази. Връщането със System Restore също не променя нещата. Какво може да е? За съжаление компютъра е служебен и сега нямам възможност да правя други сканирания, ако е нужно- евентуално би могло да стане утре. Просто искам засега да получа информация какво може да е довело до тези разширения на файловете, понеже в интернет не намирам информация за такова- NMIFHCN. Благодаря предварително.
  3. Здравейте,след като инсталирах програмата Vbox Subs Downloader,след рестарт на компщтъра системата се зареди с настройките като при чиста преинсталация с тази разлика,че всички програми,драйвери и настройки си бяха на мястото си.Windows-а работи нормално,но всеки път ми стартира с начален екран и трябва да търся програмите,да оправям работният плот и т.н.Пуснах Kaspersky да сканира и откри един троянец и след рестарт всичко пак отначало. Получих няколко отговора като единият от тях беше да пусна темата тука. http://www.kaldata.com/forums/topic/231052-windows-%D1%81%D1%82%D0%B0%D1%80%D1%82%D0%B8%D1%80%D0%B0-%D0%B2%D1%81%D0%B5%D0%BA%D0%B8-%D0%BF%D1%8A%D1%82-%D0%BD%D0%B0%D1%87%D0%B0%D0%BB%D0%B5%D0%BD-%D0%B5%D0%BA%D1%82%D0%B0%D0%BD/#entry2927298 На Вие съм с компютрите и ако може да ми обясните по подробно какво да направя. Предварително благодаря.
  4. Немога да истрия хак започна да се премахва и заби малко след средата и седи така от около 6 часа незнам какво да правя ... помогнете ми
  5. Здравейте, изглежда че благоверната е качила на лаптопа ми няакаква зловредна гад. При стартиране на браузърите (Chrome/IE) постоянно се зарежда зловреден руски портал (hi.ru). Сайтът се разпознава от Нод 32 като зловреден и го блокира. ОС - 8.1 Проблемът е решен с преинсталация
  6. Addition.txtFRST.txt След сканиране с Qihoo 360: C:\Windows\Setup\scripts\OEM-Sync.exe HEUR/QVM18.0.Malware.Gen, 18
  7. Здравейте, след сваляне на portable програма (Illustrator Portable) и опит за стартиране се скри втория ми твърд диск. Не се показва в Computer Management -->Disk Management - съвсем изчезна. Предполагам, че е заради свалената програма, тъй като изчезна веднага след кликването. Ето лога от сканирането с Farbar Recovery Scan Tool: Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 24-05-2015 Ran by User (administrator) on PCXX on 24-05-2015 14:29:08 Running from C:\Users\User\Desktop Loaded Profiles: User (Available Profiles: User) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe () C:\Windows\System32\nvwmi64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe () C:\Windows\System32\nvwmi64.exe (Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe (Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe () C:\Windows\vsnpstd3.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe (Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe (Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (Akamai Technologies, Inc.) C:\Users\User\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) C:\Users\User\AppData\Local\Akamai\netsession_win.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (MyCity) C:\Program Files (x86)\MCShield\MCShieldRTM.exe (BitTorrent Inc.) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.2.1.1\Lightshot.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe (Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe (Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_188.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_188.exe (Microsoft Corporation) C:\Windows\System32\vds.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor) HKLM\...\Run: [snpstd3] => C:\Windows\vsnpstd3.exe [827392 2006-09-19] () HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation) HKLM\...\Run: [bCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation) HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2728736 2014-08-04] () HKLM-x32\...\Run: [uSB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation) HKLM-x32\...\Run: [iAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation) HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-18] () HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated) HKU\S-1-5-21-1676110180-4283091072-1689541519-1000\...\Run: [Akamai NetSession Interface] => C:\Users\User\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.) HKU\S-1-5-21-1676110180-4283091072-1689541519-1000\...\Run: [MCShield Monitor] => C:\Program Files (x86)\MCShield\mcshieldrtm.exe [650816 2014-04-11] (MyCity) HKU\S-1-5-21-1676110180-4283091072-1689541519-1000\...\Run: [uTorrent] => C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe [1694560 2015-05-12] (BitTorrent Inc.) HKU\S-1-5-21-1676110180-4283091072-1689541519-1000\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31282816 2015-04-17] (Skype Technologies S.A.) HKU\S-1-5-21-1676110180-4283091072-1689541519-1000\...\Policies\Explorer: [] HKU\S-1-5-21-1676110180-4283091072-1689541519-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\PhotoScreensaver.scr [477696 2010-11-21] (Microsoft Corporation) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2012-02-06] (Autodesk, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-1676110180-4283091072-1689541519-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-1676110180-4283091072-1689541519-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM -> DefaultScope value is missing SearchScopes: HKLM-x32 -> DefaultScope value is missing BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-08] (Oracle Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-08] (Oracle Corporation) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.94.1 85.187.216.3 FireFox: ======== FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\s03x6q6l.default-1368262168611 FF Homepage: hxxp://www.google.bg/ FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-05-20] () FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2012-12-25] (Wacom) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-05-20] () FF Plugin-x32: @graphisoft.com/GDL Web Plug-in -> C:\Program Files (x86)\GRAPHISOFT\GDLWebControl\npGDLMozilla.dll [2012-06-13] (Graphisoft SE) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-08] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-08] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-08-04] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-08-04] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.) FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2012-12-25] (Wacom) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-1676110180-4283091072-1689541519-1000: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2012-12-25] (Wacom) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-05-01] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2015-04-08] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2015-04-08] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2015-04-08] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2015-04-08] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2015-04-08] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll [2012-06-28] (Nullsoft, Inc.) FF Extension: Adblock Plus Pop-up Addon - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\s03x6q6l.default-1368262168611\Extensions\adblockpopups@jessehakanen.net.xpi [2014-04-23] FF Extension: Pin It Button - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\s03x6q6l.default-1368262168611\Extensions\jid1-YcMV6ngYmQRA2w@jetpack.xpi [2015-04-21] FF Extension: Adblock Plus - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\s03x6q6l.default-1368262168611\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-05-11] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA} [2015-05-18] Chrome: ======= CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-06-03] CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-06-03] CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-06-03] CHR Extension: (Adblock Plus) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-04-23] CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-06-03] CHR Extension: (Bookmark Manager) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-26] CHR Extension: (Google Wallet) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-21] CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-06-03] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [597896 2014-09-04] (Autodesk Inc.) R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [19232 2012-01-31] (Autodesk, Inc.) R2 DiagTrack; C:\Windows\system32\diagtrack.dll [1254400 2015-04-27] (Microsoft Corporation) S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2015-05-12] (Macrovision Europe Ltd.) [] R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [46904 2013-12-17] (Hewlett-Packard Company) R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation) R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation) R2 NitroDriverReadSpool9; C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe [230920 2013-11-27] (Nitro PDF Software) R2 NVWMI; C:\Windows\system32\nvwmi64.exe [2694432 2014-08-04] () R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5448976 2015-04-17] (TeamViewer GmbH) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [627992 2014-01-13] (Wacom Technology, Corp.) R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [621336 2013-12-04] (Wacom Technology, Corp.) S2 Crypkey License; crypserv.exe [X] S2 mi-raysat_3dsmax2013_64; "D:\Programs\Autodesk 3ds Max 2013\Real\3ds Max 2013\NVIDIA\raysat_3dsmax2013_64server.exe" [X] S3 mi-raysat_3dsmax2015_64; "D:\Programs\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe" [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-10-12] (Samsung Electronics Co., Ltd.) R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-01-29] (DT Soft Ltd) R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-01-19] () R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation) S3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10550272 2007-03-27] (Sonix Co. Ltd.) R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [106760 2014-10-29] (WIBU-SYSTEMS AG) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S1 NetworkX; \SystemRoot\system32\ckldrv.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-05-24 14:29 - 2015-05-24 14:29 - 00018649 _____ () C:\Users\User\Desktop\FRST.txt 2015-05-24 14:29 - 2015-05-24 14:29 - 00000000 ____D () C:\FRST 2015-05-24 14:28 - 2015-05-24 14:28 - 02108416 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe 2015-05-20 11:37 - 2015-05-24 14:09 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-05-20 11:37 - 2015-05-20 12:09 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-05-18 13:43 - 2015-05-18 13:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-05-13 23:45 - 2015-05-01 16:17 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2015-05-13 23:45 - 2015-05-01 16:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2015-05-13 11:46 - 2015-05-05 04:29 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-05-13 11:46 - 2015-05-05 04:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-05-13 11:46 - 2015-04-22 05:28 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-05-13 11:46 - 2015-04-22 04:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-05-13 11:46 - 2015-04-21 20:14 - 24971776 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-05-13 11:46 - 2015-04-21 20:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-05-13 11:46 - 2015-04-21 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-05-13 11:46 - 2015-04-21 19:51 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-05-13 11:46 - 2015-04-21 19:50 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-05-13 11:46 - 2015-04-21 19:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-05-13 11:46 - 2015-04-21 19:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-05-13 11:46 - 2015-04-21 19:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-05-13 11:46 - 2015-04-21 19:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-05-13 11:46 - 2015-04-21 19:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-05-13 11:46 - 2015-04-21 19:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-05-13 11:46 - 2015-04-21 19:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-05-13 11:46 - 2015-04-21 19:35 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-05-13 11:46 - 2015-04-21 19:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-05-13 11:46 - 2015-04-21 19:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-05-13 11:46 - 2015-04-21 19:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-05-13 11:46 - 2015-04-21 19:31 - 06025728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-05-13 11:46 - 2015-04-21 19:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-05-13 11:46 - 2015-04-21 19:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-05-13 11:46 - 2015-04-21 19:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-05-13 11:46 - 2015-04-21 19:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-05-13 11:46 - 2015-04-21 19:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-05-13 11:46 - 2015-04-21 19:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-05-13 11:46 - 2015-04-21 19:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-05-13 11:46 - 2015-04-21 19:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-05-13 11:46 - 2015-04-21 19:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-05-13 11:46 - 2015-04-21 19:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-05-13 11:46 - 2015-04-21 19:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-05-13 11:46 - 2015-04-21 19:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-05-13 11:46 - 2015-04-21 19:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-05-13 11:46 - 2015-04-21 19:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-05-13 11:46 - 2015-04-21 19:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-05-13 11:46 - 2015-04-21 19:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-05-13 11:46 - 2015-04-21 19:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-05-13 11:46 - 2015-04-21 18:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-05-13 11:46 - 2015-04-21 18:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-05-13 11:46 - 2015-04-21 18:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-05-13 11:46 - 2015-04-21 18:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-05-13 11:46 - 2015-04-21 18:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-05-13 11:46 - 2015-04-21 18:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-05-13 11:46 - 2015-04-21 18:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-05-13 11:46 - 2015-04-21 18:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-05-13 11:46 - 2015-04-21 18:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-05-13 11:46 - 2015-04-21 18:40 - 14401536 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-05-13 11:46 - 2015-04-21 18:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-05-13 11:46 - 2015-04-21 18:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-05-13 11:46 - 2015-04-21 18:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-05-13 11:46 - 2015-04-21 18:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-05-13 11:46 - 2015-04-21 18:27 - 02352128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-05-13 11:46 - 2015-04-21 18:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-05-13 11:46 - 2015-04-21 18:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-05-13 11:46 - 2015-04-21 18:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-05-13 11:46 - 2015-04-21 18:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-05-13 11:46 - 2015-04-21 18:15 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-05-13 11:46 - 2015-04-21 18:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-05-13 11:46 - 2015-04-21 18:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-05-13 11:46 - 2015-04-21 17:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-05-13 11:46 - 2015-04-21 17:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-05-13 11:46 - 2015-04-18 06:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2015-05-13 11:46 - 2015-04-18 05:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2015-05-13 11:45 - 2015-04-27 22:28 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-05-13 11:45 - 2015-04-27 22:28 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-05-13 11:45 - 2015-04-27 22:28 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-05-13 11:45 - 2015-04-27 22:26 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 01254400 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-05-13 11:45 - 2015-04-27 22:23 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-05-13 11:45 - 2015-04-27 22:22 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe 2015-05-13 11:45 - 2015-04-27 22:22 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-05-13 11:45 - 2015-04-27 22:22 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-05-13 11:45 - 2015-04-27 22:22 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-05-13 11:45 - 2015-04-27 22:22 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe 2015-05-13 11:45 - 2015-04-27 22:22 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe 2015-05-13 11:45 - 2015-04-27 22:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe 2015-05-13 11:45 - 2015-04-27 22:22 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-05-13 11:45 - 2015-04-27 22:22 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe 2015-05-13 11:45 - 2015-04-27 22:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-05-13 11:45 - 2015-04-27 22:18 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-05-13 11:45 - 2015-04-27 22:18 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 22:11 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-05-13 11:45 - 2015-04-27 22:11 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-05-13 11:45 - 2015-04-27 22:08 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-05-13 11:45 - 2015-04-27 22:05 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2015-05-13 11:45 - 2015-04-27 22:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-05-13 11:45 - 2015-04-27 22:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-05-13 11:45 - 2015-04-27 22:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-05-13 11:45 - 2015-04-27 22:05 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll 2015-05-13 11:45 - 2015-04-27 22:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-05-13 11:45 - 2015-04-27 22:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-05-13 11:45 - 2015-04-27 22:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-05-13 11:45 - 2015-04-27 22:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-05-13 11:45 - 2015-04-27 22:04 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2015-05-13 11:45 - 2015-04-27 22:04 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-05-13 11:45 - 2015-04-27 22:04 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe 2015-05-13 11:45 - 2015-04-27 22:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe 2015-05-13 11:45 - 2015-04-27 22:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe 2015-05-13 11:45 - 2015-04-27 22:04 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe 2015-05-13 11:45 - 2015-04-27 22:04 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-05-13 11:45 - 2015-04-27 22:04 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-05-13 11:45 - 2015-04-27 22:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2015-05-13 11:45 - 2015-04-27 22:03 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-05-13 11:45 - 2015-04-27 22:03 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-05-13 11:45 - 2015-04-27 22:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-05-13 11:45 - 2015-04-27 22:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe 2015-05-13 11:45 - 2015-04-27 22:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-05-13 11:45 - 2015-04-27 22:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-05-13 11:45 - 2015-04-27 22:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 21:06 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll 2015-05-13 11:45 - 2015-04-27 20:57 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-05-13 11:45 - 2015-04-27 20:57 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-05-13 11:45 - 2015-04-27 20:55 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 20:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 20:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-05-13 11:45 - 2015-04-27 20:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2015-05-13 11:45 - 2015-04-20 06:17 - 01647104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2015-05-13 11:45 - 2015-04-20 06:17 - 01179136 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2015-05-13 11:45 - 2015-04-20 05:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2015-05-13 11:45 - 2015-04-20 05:11 - 03204608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-05-13 11:45 - 2015-04-13 06:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe 2015-05-13 11:44 - 2015-04-08 06:29 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2015-05-13 11:44 - 2015-04-08 06:29 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll 2015-05-13 11:44 - 2015-04-08 06:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll 2015-05-13 11:44 - 2015-03-04 07:41 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll 2015-05-13 11:44 - 2015-03-04 07:41 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll 2015-05-13 11:44 - 2015-03-04 07:41 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe 2015-05-13 11:44 - 2015-03-04 07:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll 2015-05-13 11:44 - 2015-03-04 07:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll 2015-05-13 11:44 - 2015-03-04 07:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll 2015-05-13 11:44 - 2015-03-04 07:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe 2015-05-13 11:44 - 2015-02-18 10:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2015-05-13 11:44 - 2015-02-18 10:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2015-05-13 11:44 - 2015-01-29 06:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll 2015-05-13 11:44 - 2015-01-29 06:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll 2015-05-09 00:15 - 2015-05-09 00:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\DxO Labs 2015-05-09 00:02 - 2015-05-13 11:42 - 00000000 ____D () C:\ProgramData\DxO Labs 2015-05-09 00:02 - 2015-05-09 00:15 - 00000000 ____D () C:\Users\User\AppData\Local\DxO_Labs 2015-04-30 20:33 - 2015-04-30 20:33 - 00000000 ____D () C:\Users\User\Documents\Inventor Server x64 Direct Connect 2015-04-30 20:32 - 2015-04-30 20:32 - 00001866 _____ () C:\Users\Public\Desktop\Autodesk 3ds Max 2013 64-bit.lnk ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-05-24 14:27 - 2013-01-25 14:25 - 00000000 ____D () C:\Users\User\AppData\Roaming\uTorrent 2015-05-24 14:18 - 2013-01-25 14:31 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype 2015-05-24 14:14 - 2009-07-14 07:45 - 00032208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-05-24 14:14 - 2009-07-14 07:45 - 00032208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-05-24 14:10 - 2013-01-22 17:27 - 01808061 _____ () C:\Windows\WindowsUpdate.log 2015-05-24 14:07 - 2013-11-23 16:13 - 00000000 ____D () C:\ProgramData\MCShield 2015-05-24 14:07 - 2013-06-03 00:47 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-05-24 14:06 - 2013-01-22 17:56 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-05-24 14:06 - 2009-07-14 08:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-05-24 14:06 - 2009-07-14 07:51 - 00126312 _____ () C:\Windows\setupact.log 2015-05-24 13:36 - 2013-06-03 00:47 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-05-24 13:24 - 2014-12-10 21:20 - 00000386 _____ () C:\Windows\Tasks\update-S-1-5-21-1676110180-4283091072-1689541519-1000.job 2015-05-24 13:06 - 2014-12-10 21:20 - 00000386 _____ () C:\Windows\Tasks\update-sys.job 2015-05-24 11:37 - 2014-10-29 17:46 - 00000000 ____D () C:\Users\User\AppData\Local\Akamai 2015-05-23 11:10 - 2014-04-03 18:51 - 00001557 _____ () C:\Users\User\Documents\plot.log 2015-05-22 22:55 - 2014-03-15 14:16 - 00000000 ____D () C:\Users\User\Downloads\kuhi 2015-05-22 21:25 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\system32\NDF 2015-05-22 17:00 - 2013-01-25 17:05 - 00000000 ____D () C:\Users\User\Graphisoft 2015-05-22 17:00 - 2013-01-25 17:05 - 00000000 ____D () C:\Users\User\Documents\BIMx 2015-05-21 01:27 - 2015-04-05 02:11 - 00000000 ___SD () C:\Windows\SysWOW64\GWX 2015-05-21 01:27 - 2015-04-05 02:11 - 00000000 ___SD () C:\Windows\system32\GWX 2015-05-20 16:37 - 2013-06-03 00:48 - 00002181 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2015-05-20 12:09 - 2013-11-20 18:10 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-05-20 12:09 - 2013-01-22 18:50 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-05-20 11:37 - 2014-08-31 11:01 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe 2015-05-20 11:35 - 2013-01-25 13:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-05-17 21:31 - 2013-06-03 00:47 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-05-17 21:31 - 2013-06-03 00:47 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-05-16 10:09 - 2013-07-16 23:32 - 00000000 ____D () C:\Windows\system32\MRT 2015-05-16 10:06 - 2013-01-22 17:58 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-05-14 10:41 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\rescache 2015-05-14 09:35 - 2009-07-14 07:45 - 05109392 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-05-14 09:34 - 2010-11-21 10:17 - 00000000 ____D () C:\Program Files\Windows Journal 2015-05-14 09:34 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers 2015-05-13 23:49 - 2013-01-25 21:04 - 00000000 ____D () C:\ProgramData\Microsoft Help 2015-05-13 23:47 - 2013-01-25 13:53 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk 2015-05-13 23:47 - 2013-01-25 13:53 - 00001945 _____ () C:\Windows\epplauncher.mif 2015-05-13 23:47 - 2013-01-25 13:53 - 00000000 ____D () C:\Program Files\Microsoft Security Client 2015-05-13 23:47 - 2013-01-25 13:53 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client 2015-05-13 23:45 - 2014-04-22 14:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-05-13 23:45 - 2014-04-22 14:00 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2015-05-13 23:45 - 2014-04-22 14:00 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2015-05-12 22:03 - 2015-02-19 17:56 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2015-05-12 00:08 - 2013-02-07 21:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk 2015-05-12 00:08 - 2013-02-07 21:58 - 00000000 ____D () C:\Program Files (x86)\Autodesk 2015-05-12 00:08 - 2013-01-22 17:35 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2015-05-11 17:41 - 2013-11-27 01:35 - 00000000 ____D () C:\Users\User\AppData\Roaming\Abvent_Artlantis5 2015-05-05 21:02 - 2013-05-26 15:34 - 00000000 ____D () C:\Users\User\Documents\3dsMax 2015-04-30 20:33 - 2013-02-07 21:59 - 00000000 ____D () C:\Program Files\Common Files\Autodesk Shared 2015-04-30 20:33 - 2013-02-07 21:56 - 00000000 ____D () C:\ProgramData\Autodesk 2015-04-30 20:32 - 2013-02-07 21:59 - 00000000 ____D () C:\Program Files\Autodesk 2015-04-30 20:31 - 2009-07-14 05:34 - 00017796 _____ () C:\Windows\system32\Drivers\etc\services 2015-04-30 20:30 - 2013-01-29 16:40 - 00029514 _____ () C:\Windows\DirectX.log 2015-04-30 17:10 - 2013-01-25 14:09 - 00000000 ____D () C:\ProgramData\Skype 2015-04-28 21:47 - 2013-01-29 00:01 - 00010728 _____ () C:\Users\User\AppData\Roaming\SmarThruOptions.xml 2015-04-24 15:17 - 2015-02-16 17:18 - 00000971 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk 2015-04-24 15:17 - 2015-02-16 17:18 - 00000959 _____ () C:\Users\Public\Desktop\TeamViewer 10.lnk 2015-04-24 15:17 - 2014-01-17 15:58 - 00000000 ____D () C:\Program Files (x86)\TeamViewer ==================== Files in the root of some directories ======= 2013-01-29 00:01 - 2015-04-28 21:47 - 0010728 _____ () C:\Users\User\AppData\Roaming\SmarThruOptions.xml 2013-12-04 20:27 - 2013-12-04 20:27 - 0001017 _____ () C:\Users\User\AppData\Local\recently-used.xbel 2013-01-31 22:40 - 2013-01-31 22:40 - 0007605 _____ () C:\Users\User\AppData\Local\Resmon.ResmonCfg 2014-12-10 21:20 - 2014-12-10 21:20 - 0000003 _____ () C:\Users\User\AppData\Local\updater.log 2014-12-10 21:20 - 2015-04-23 01:44 - 0000424 _____ () C:\Users\User\AppData\Local\UserProducts.xml Some files in TEMP: ==================== C:\Users\User\AppData\Local\Temp\AcDeltree.exe C:\Users\User\AppData\Local\Temp\nvSCPAPI.dll C:\Users\User\AppData\Local\Temp\nvStInst.exe C:\Users\User\AppData\Local\Temp\SkypeSetup.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-05-24 12:37 ==================== End of log ============================ Addition.txt
  8. Здравейте, Имам проблем с лаптопа от няколко дни, използва прекалено много от РАМ паметта (при положение, че не съм пуснал нищо), натоварва се и процесора и пр. Изтеглих Malwarebytes и веднага сканирах. Откри дооста заразени файлове и съответно ги изтрих. Но проблемът си остана. Резултатите от Farbar ги прикачам (доста дълги ми се виждат). Благодаря предварително ! Addition.txt FRST.txt
  9. Здравейте колеги, Първо честит празник. От доста време не съм писал във форума.Проблемът е следвия,след няколко часа работа на копмютъра ,определени програми не се стартират- Daemon tools например,оправя се след рестарт.Отделно съм забелязал че рамта от начало е на около 30 процента 8GB /2x4GB/ после застава на 70+ без да има почти нищо стартирано,което според мен не е нормално.Мислил съм за преинсталация ,обаче работя на CAD software -и и съответно настройките им на ново ще ми отнемат поне няколко дни.Лаптопът е Dell Inspirion n7010.Едно време правих врътката и Hitjackthis логовете и нещата заспиваха ,та ако може малко помощ ще съм благодарен.Ms security essentias e anitvir-a почистил съм с CCleaner и съм дефрагментирал дисковете ,ето и лог Logfile of Trend Micro HijackThis v2.0.5 Scan saved at 17:14:07 ч., on 24.5.2015 г. Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.17801) FIREFOX: 36.0.1 (x86 bg) Boot mode: Normal Running processes: C:\PROGRA~2\DUMETE~1\DUMeter.exe C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoUpdateCheck.exe C:\Program Files (x86)\Skype\Phone\Skype.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\Andrey\AppData\Roaming\uTorrent\uTorrent.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\Andrey\Desktop\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://us.yahoo.com?fr=fp-comodo R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O2 - BHO: PrivDogExtension - {FB16E5C3-A9E2-47A2-8EFC-319E775E62CC} - C:\Program Files (x86)\AdTrustMedia\PrivDog\2.1.0.22\trustedads.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe O4 - HKCU\..\Run: [DU Meter] "C:\Program Files (x86)\DU Meter\DUMeter.exe" /autostart O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [uTorrent] "C:\Users\Andrey\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Network Server.lnk = C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: PrivDog - {2F5C139F-79BD-4C84-A95A-E7140525BC55} - C:\Program Files (x86)\AdTrustMedia\PrivDog\2.1.0.22\trustedads.dll O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O17 - HKLM\System\CCS\Services\Tcpip\..\{088CC127-08D2-4CDC-BF13-EF0E71A4882D}: NameServer = 8.8.8.8 O17 - HKLM\System\CCS\Services\Tcpip\..\{2C9938A7-57C8-4AC8-AB77-94B11448B3F3}: NameServer = 8.8.8.8 O17 - HKLM\System\CCS\Services\Tcpip\..\{6A57712F-3C4A-429A-826B-1C52253B8FAF}: NameServer = 8.8.8.8 O17 - HKLM\System\CCS\Services\Tcpip\..\{BA538449-59A1-4259-91F0-2A5798F28C3F}: NameServer = 156.154.70.22,156.154.71.22 O17 - HKLM\System\CS1\Services\Tcpip\..\{088CC127-08D2-4CDC-BF13-EF0E71A4882D}: NameServer = 8.8.8.8 O17 - HKLM\System\CS2\Services\Tcpip\..\{088CC127-08D2-4CDC-BF13-EF0E71A4882D}: NameServer = 8.8.8.8 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O20 - AppInit_DLLs: c:\windows\syswow64\nvinit.dll, C:\Windows\SysWOW64\nvinit.dll O21 - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll O22 - SharedTaskScheduler: Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Autodesk Content Service - Autodesk, Inc. - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe O23 - Service: BitComet Disk Boost Service (BITCOMET_HELPER_SERVICE) - www.BitComet.com - C:\Program Files\BitComet\tools\BitCometService.exe O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe O23 - Service: COMODO livePCsupport Service (CLPSLS) - COMODO - C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLS.exe O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe O23 - Service: DU Meter Service (DUMeterSvc) - Hagel Technologies Ltd. - C:\Program Files (x86)\DU Meter\DUMeterSvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe O23 - Service: Услуга на Google Актуализация (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Услуга на Google Актуализация (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: SolidConverterPDFReadSpool (SCPDFReadSpool) - Solid Documents, LLC - C:\Program Files (x86)\SolidDocuments\Solid Converter PDF\SCPDF\SolidConverterPDFServicex64.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: VRLService - Unknown owner - C:\PROGRA~3\ASGVIS\DONGLE~1\STARTV~1.EXE O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 13208 bytes
  10. Здравейте,от известно време забелязвам,че компютъра стартира програмите доста по-бавно от преди.Браузъра понякога забива за около минута преди да зареди сайт.Често се случва и флаш плеъра да съобщава за грешки...... Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-06-2014Ran by NightRider (administrator) on OUTPOST on 17-06-2014 20:48:25Running from C:UsersNightRiderDesktopPlatform: Windows 7 Professional Service Pack 1 (X64) OS Language: BulgarianInternet Explorer Version 8Boot Mode: NormalThe only official download link for FRST:Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/Download link from any site other than Bleeping Computer is unpermitted or outdated.See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(SurfRight B.V.) C:Program Files (x86)HitmanPro.Alerthmpalert.exe(NVIDIA Corporation) C:WindowsSystem32nvvsvc.exe(COMODO) C:Program FilesCOMODOCOMODO Internet Securitycmdagent.exe(NVIDIA Corporation) C:Program FilesNVIDIA CorporationDisplaynvxdsync.exe(NVIDIA Corporation) C:WindowsSystem32nvvsvc.exe(SUPERAntiSpyware.com) C:Program FilesSUPERAntiSpywareSASCore64.exe(Malwarebytes Corporation) C:Program Files (x86)Malwarebytes Anti-Exploitmbae-svc.exe() C:Program Files (x86)MSI AfterburnerMSIAfterburner.exe(Malwarebytes Corporation) C:Program Files (x86)Malwarebytes Anti-Malwarembamscheduler.exe(Malwarebytes Corporation) C:Program Files (x86)Malwarebytes Anti-Malwarembamservice.exe(Safer-Networking Ltd.) C:Program Files (x86)Spybot - Search & Destroy 2SDFSSvc.exe(Malwarebytes Corporation) C:Program Files (x86)Malwarebytes Anti-Malwarembam.exe(COMODO) C:Program FilesCOMODOCOMODO Internet Securitycfp.exe() C:Program Files (x86)RocketDockRocketDock.exe(VIA) C:Program Files (x86)VIAVIAudioiVDeckVDeck.exe(Safer-Networking Ltd.) C:Program Files (x86)Spybot - Search & Destroy 2SDUpdSvc.exe(Malwarebytes Corporation) C:Program Files (x86)Malwarebytes Anti-Exploitmbae.exe(Safer-Networking Ltd.) C:Program Files (x86)Spybot - Search & Destroy 2SDTray.exe(VMware, Inc.) D:Virtual MSvmware-authd.exe(Safer-Networking Ltd.) C:Program Files (x86)Spybot - Search & Destroy 2SDWSCSvc.exe(Microsoft Corporation) C:WindowsSystem32audiodg.exe(Mozilla Corporation) C:Program Files (x86)Mozilla Firefoxfirefox.exe(Adobe Systems, Inc.) C:WindowsSysWOW64MacromedFlashFlashPlayerPlugin_13_0_0_214.exe==================== Registry (Whitelisted) ==================HKLM...Run: [COMODO Internet Security] => C:Program FilesCOMODOCOMODO Internet Securitycfp.exe [9577680 2012-11-07] (COMODO)HKLM-x32...Run: [HDAudDeck] => C:Program Files (x86)VIAVIAudioiVDeckVDeck.exe [2792448 2009-12-04] (VIA)HKLM-x32...Run: [Malwarebytes Anti-Exploit] => C:Program Files (x86)Malwarebytes Anti-Exploitmbae.exe [1300792 2014-04-10] (Malwarebytes Corporation)HKLM-x32...Run: [sDTray] => C:Program Files (x86)Spybot - Search & Destroy 2SDTray.exe [4101584 2014-04-25] (Safer-Networking Ltd.)WinlogonNotifySDWinLogon-x32: SDWinLogon.dll [X]HKUS-1-5-19...Run: [sidebar] => %ProgramFiles%Windows SidebarSidebar.exe /autoRunHKUS-1-5-20...Run: [sidebar] => %ProgramFiles%Windows SidebarSidebar.exe /autoRunHKUS-1-5-21-2578195413-4270418453-1147072934-1000...Run: [RocketDock] => C:Program Files (x86)RocketDockRocketDock.exe [495616 2007-09-02] ()HKUS-1-5-21-2578195413-4270418453-1147072934-1000...PoliciesExplorer: [NoLowDiskSpaceChecks] 1AppInit_DLLs: C:Windowssystem32guard64.dll => C:Windowssystem32guard64.dll [390392 2012-11-07] (COMODO)AppInit_DLLs-x32: C:WindowsSysWOW64guard32.dll => C:WindowsSysWOW64guard32.dll [301264 2012-11-07] (COMODO)BootExecute: autocheck autochk * sdnclean64.exe==================== Internet (Whitelisted) ====================SearchScopes: HKLM-x32 - DefaultScope value is missing.Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txtTcpipParameters: [DhcpNameServer] 46.40.72.18 46.40.72.17Tcpip..Interfaces{4C832BE6-3FF0-476E-9DB5-AFC0F254BFC8}: [NameServer]198.153.192.40,198.153.194.40FireFox:========FF ProfilePath: C:UsersNightRiderAppDataRoamingMozillaFirefoxProfiles9putosvv.defaultFF Plugin: @adobe.com/FlashPlayer - C:Windowssystem32MacromedFlashNPSWF64_13_0_0_214.dll ()FF Plugin: @microsoft.com/GENUINE - disabled No FileFF Plugin-x32: @adobe.com/FlashPlayer - C:WindowsSysWOW64MacromedFlashNPSWF32_13_0_0_214.dll ()FF Plugin-x32: @microsoft.com/GENUINE - disabled No FileFF SearchPlugin: C:Program Files (x86)mozilla firefoxbrowsersearchplugins911bg.xmlFF SearchPlugin: C:Program Files (x86)mozilla firefoxbrowsersearchpluginsdiribg.xmlFF SearchPlugin: C:Program Files (x86)mozilla firefoxbrowsersearchpluginspe-bg.xmlFF SearchPlugin: C:Program Files (x86)mozilla firefoxbrowsersearchpluginsportalbgdict.xmlFF Extension: Ghostery - C:UsersNightRiderAppDataRoamingMozillaFirefoxProfiles9putosvv.defaultExtensionsfirefox@ghostery.com.xpi [2014-04-10]FF Extension: Adblock Plus - C:UsersNightRiderAppDataRoamingMozillaFirefoxProfiles9putosvv.defaultExtensions{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-10]==================== Services (Whitelisted) =================R2 !SASCORE; C:Program FilesSUPERAntiSpywareSASCORE64.EXE [144152 2013-10-11] (SUPERAntiSpyware.com)R2 cmdAgent; C:Program FilesCOMODOCOMODO Internet Securitycmdagent.exe [2828408 2012-11-07] (COMODO)R2 hmpalertsvc; C:Program Files (x86)HitmanPro.Alerthmpalert.exe [1876816 2014-04-10] (SurfRight B.V.)R2 MbaeSvc; C:Program Files (x86)Malwarebytes Anti-Exploitmbae-svc.exe [347448 2014-04-10] (Malwarebytes Corporation)R2 MBAMScheduler; C:Program Files (x86)Malwarebytes Anti-Malwarembamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)R2 MBAMService; C:Program Files (x86)Malwarebytes Anti-Malwarembamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)R2 SDScannerService; C:Program Files (x86)Spybot - Search & Destroy 2SDFSSvc.exe [1738200 2014-04-25] (Safer-Networking Ltd.)R2 SDUpdateService; C:Program Files (x86)Spybot - Search & Destroy 2SDUpdSvc.exe [2081752 2014-04-25] (Safer-Networking Ltd.)R2 SDWSCService; C:Program Files (x86)Spybot - Search & Destroy 2SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)R2 VMAuthdService; D:Virtual MSvmware-authd.exe [86744 2014-04-14] (VMware, Inc.)==================== Drivers (Whitelisted) ====================R1 A2DDA; D:PROGRAMSEMSISOFTRUNa2ddax64.sys [26176 2014-01-29] (Emsisoft GmbH)S3 cleanhlp; D:ProgramsEmsisoftRuncleanhlp64.sys [57024 2014-01-29] (Emsisoft GmbH)R1 cmderd; C:WindowsSystem32DRIVERScmderd.sys [22736 2012-11-07] (COMODO)R1 cmdGuard; C:WindowsSystem32DRIVERScmdguard.sys [584056 2012-11-07] (COMODO)R1 cmdHlp; C:WindowsSystem32DRIVERScmdhlp.sys [38144 2012-11-07] (COMODO)R1 ESProtectionDriver; C:Program Files (x86)Malwarebytes Anti-Exploitmbae64.sys [63928 2014-04-11] ()R2 hmpalert; C:WindowsSystem32drivershmpalert.sys [93144 2014-04-10] ()R1 inspect; C:WindowsSystem32DRIVERSinspect.sys [94288 2012-11-07] (COMODO)R3 MBAMProtector; C:Windowssystem32driversmbam.sys [25816 2014-05-12] (Malwarebytes Corporation)R3 MBAMSwissArmy; C:Windowssystem32driversMBAMSwissArmy.sys [122584 2014-06-17] (Malwarebytes Corporation)R3 MBAMWebAccessControl; C:Windowssystem32driversmwac.sys [63704 2014-05-12] (Malwarebytes Corporation)R3 RTCore64; C:Program Files (x86)MSI AfterburnerRTCore64.sys [13368 2013-01-23] ()R1 SASDIFSV; C:Program FilesSUPERAntiSpywareSASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)R1 SASKUTIL; C:Program FilesSUPERAntiSpywareSASKUTIL64.SYS [12368 2011-07-13] (SUPERAdBlocker.com and SUPERAntiSpyware.com)R3 vmkbd2; C:Windowssystem32driversVMkbd.sys [33496 2014-04-14] (VMware, Inc.)R2 VMparport; C:Windowssystem32driversVMparport.sys [32472 2014-04-14] (VMware, Inc.)R0 vsock; C:WindowsSystem32driversvsock.sys [73296 2013-10-08] (VMware, Inc.)==================== NetSvcs (Whitelisted) ======================================= One Month Created Files and Folders ========2014-06-17 20:48 - 2014-06-17 20:48 - 00008406 _____ () C:UsersNightRiderDesktopFRST.txt2014-06-17 20:46 - 2014-06-17 20:48 - 00000000 ____D () C:FRST2014-06-17 20:07 - 2014-06-17 20:09 - 02081280 _____ (Farbar) C:UsersNightRiderDesktopFRST64.exe2014-06-14 23:27 - 2014-06-17 20:36 - 00019488 _____ () C:Windowssetupact.log2014-06-14 23:27 - 2014-06-14 23:27 - 00058504 _____ () C:UsersNightRiderAppDataLocalGDIPFONTCACHEV1.DAT2014-06-14 23:27 - 2014-06-14 23:27 - 00000488 _____ () C:WindowsPFRO.log2014-06-14 23:27 - 2014-06-14 23:27 - 00000000 _____ () C:Windowssetuperr.log2014-06-10 23:41 - 2014-04-25 05:34 - 00801280 _____ (Microsoft Corporation) C:Windowssystem32usp10.dll2014-06-10 23:41 - 2014-04-25 05:06 - 00626688 _____ (Microsoft Corporation) C:WindowsSysWOW64usp10.dll2014-06-10 23:41 - 2014-04-05 05:47 - 01903552 _____ (Microsoft Corporation) C:Windowssystem32Driverstcpip.sys2014-06-10 23:41 - 2014-04-05 05:47 - 00288192 _____ (Microsoft Corporation) C:Windowssystem32DriversFWPKCLNT.SYS2014-06-10 23:40 - 2014-03-26 17:44 - 02002432 _____ (Microsoft Corporation) C:Windowssystem32msxml6.dll2014-06-10 23:40 - 2014-03-26 17:44 - 01882112 _____ (Microsoft Corporation) C:Windowssystem32msxml3.dll2014-06-10 23:40 - 2014-03-26 17:41 - 00002048 _____ (Microsoft Corporation) C:Windowssystem32msxml6r.dll2014-06-10 23:40 - 2014-03-26 17:41 - 00002048 _____ (Microsoft Corporation) C:Windowssystem32msxml3r.dll2014-06-10 23:40 - 2014-03-26 17:27 - 01389056 _____ (Microsoft Corporation) C:WindowsSysWOW64msxml6.dll2014-06-10 23:40 - 2014-03-26 17:27 - 01237504 _____ (Microsoft Corporation) C:WindowsSysWOW64msxml3.dll2014-06-10 23:40 - 2014-03-26 17:25 - 00002048 _____ (Microsoft Corporation) C:WindowsSysWOW64msxml6r.dll2014-06-10 23:40 - 2014-03-26 17:25 - 00002048 _____ (Microsoft Corporation) C:WindowsSysWOW64msxml3r.dll2014-06-10 23:32 - 2014-05-08 12:32 - 03178496 _____ (Microsoft Corporation) C:Windowssystem32rdpcorets.dll2014-06-10 23:32 - 2014-05-08 12:32 - 00016384 _____ (Microsoft Corporation) C:Windowssystem32RdpGroupPolicyExtension.dll2014-06-10 19:26 - 2014-06-11 13:46 - 00000000 ____D () C:Program Files (x86)Mozilla Firefox2014-06-10 03:25 - 2014-06-17 20:38 - 00399133 _____ () C:WindowsWindowsUpdate.log2014-06-07 00:32 - 2014-06-07 00:32 - 00000000 ____D () C:UsersNightRiderAppDataLocalcSc2014-06-06 04:13 - 2014-06-06 04:13 - 00000000 ____D () C:ProgramDataMicrosoftWindowsStart MenuProgramsMalwarebytes Anti-Exploit2014-06-06 04:13 - 2014-06-06 04:13 - 00000000 ____D () C:Program Files (x86)Malwarebytes Anti-Exploit==================== One Month Modified Files and Folders =======2014-06-17 20:48 - 2014-06-17 20:48 - 00008406 _____ () C:UsersNightRiderDesktopFRST.txt2014-06-17 20:48 - 2014-06-17 20:46 - 00000000 ____D () C:FRST2014-06-17 20:48 - 2014-04-10 18:06 - 00000000 ____D () C:UsersNightRiderAppDataLocalTemp2014-06-17 20:46 - 2014-04-10 22:30 - 00000000 ____D () C:UsersNightRiderAppDataRoaminguTorrent2014-06-17 20:44 - 2014-04-10 22:54 - 00000830 _____ () C:WindowsTasksAdobe Flash Player Updater.job2014-06-17 20:43 - 2014-04-10 18:40 - 01474832 _____ () C:Windowssystem32Driverssfi.dat2014-06-17 20:38 - 2014-06-10 03:25 - 00399133 _____ () C:WindowsWindowsUpdate.log2014-06-17 20:36 - 2014-06-14 23:27 - 00019488 _____ () C:Windowssetupact.log2014-06-17 20:35 - 2014-05-17 02:22 - 00122584 _____ (Malwarebytes Corporation) C:Windowssystem32DriversMBAMSwissArmy.sys2014-06-17 20:09 - 2014-06-17 20:07 - 02081280 _____ (Farbar) C:UsersNightRiderDesktopFRST64.exe2014-06-17 20:02 - 2014-04-10 22:10 - 00000384 _____ () C:WindowsTasksWpsNotifyTask_NightRider.job2014-06-17 19:56 - 2014-04-10 22:10 - 00000384 _____ () C:WindowsTasksWpsUpdateTask_NightRider.job2014-06-17 19:46 - 2014-04-10 22:04 - 00000000 ____D () C:Program Files (x86)MSI Afterburner2014-06-17 14:26 - 2009-07-14 07:45 - 00021280 ____H () C:Windowssystem327B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A02014-06-17 14:26 - 2009-07-14 07:45 - 00021280 ____H () C:Windowssystem327B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A02014-06-17 13:33 - 2009-07-14 08:08 - 00000006 ____H () C:WindowsTasksSA.DAT2014-06-17 13:20 - 2014-04-10 22:05 - 00003030 _____ () C:WindowsSystem32TasksMSIAfterburner2014-06-17 12:44 - 2009-07-14 06:20 - 00000000 ____D () C:Windowssystem32NDF2014-06-17 03:08 - 2009-07-14 08:08 - 00032646 _____ () C:WindowsTasksSCHEDLGU.TXT2014-06-16 17:51 - 2014-04-11 22:18 - 00000000 ____D () C:UsersNightRiderAppDataLocalVMware2014-06-16 16:03 - 2014-04-11 22:18 - 00000000 ____D () C:UsersNightRiderAppDataRoamingVMware2014-06-16 02:28 - 2014-04-10 22:12 - 00000000 ____D () C:ProgramDataTEMP2014-06-16 02:28 - 2014-04-10 22:12 - 00000000 ____D () C:Program Files (x86)SpywareBlaster2014-06-14 23:27 - 2014-06-14 23:27 - 00058504 _____ () C:UsersNightRiderAppDataLocalGDIPFONTCACHEV1.DAT2014-06-14 23:27 - 2014-06-14 23:27 - 00000488 _____ () C:WindowsPFRO.log2014-06-14 23:27 - 2014-06-14 23:27 - 00000000 _____ () C:Windowssetuperr.log2014-06-14 23:26 - 2014-04-10 22:09 - 00000000 ____D () C:UsersNightRiderAppDataRoamingWise Disk Cleaner2014-06-11 13:46 - 2014-06-10 19:26 - 00000000 ____D () C:Program Files (x86)Mozilla Firefox2014-06-10 23:37 - 2014-04-10 22:10 - 00000000 ____D () C:Program Files (x86)Mozilla Maintenance Service2014-06-10 23:34 - 2014-04-10 20:05 - 00000000 ____D () C:Windowssystem32MRT2014-06-10 23:33 - 2014-04-10 20:05 - 95414520 _____ (Microsoft Corporation) C:Windowssystem32MRT.exe2014-06-10 00:54 - 2014-05-07 21:29 - 00000000 ____D () C:UsersNightRiderAppDataRoamingSumatraPDF2014-06-07 00:32 - 2014-06-07 00:32 - 00000000 ____D () C:UsersNightRiderAppDataLocalcSc2014-06-06 04:13 - 2014-06-06 04:13 - 00000000 ____D () C:ProgramDataMicrosoftWindowsStart MenuProgramsMalwarebytes Anti-Exploit2014-06-06 04:13 - 2014-06-06 04:13 - 00000000 ____D () C:Program Files (x86)Malwarebytes Anti-Exploit2014-06-04 11:10 - 2014-04-11 20:23 - 00000000 ____D () C:UsersNightRiderAppDataLocalTeknoGods2014-05-30 22:35 - 2009-07-14 05:34 - 00450709 ____R () C:Windowssystem32Driversetchosts.20140616-024521.backup2014-05-23 20:53 - 2014-04-12 00:04 - 00000000 ____D () C:UsersNightRiderAppDataRoamingWise Registry Cleaner2014-05-21 22:04 - 2014-05-17 02:21 - 00000000 ____D () C:ProgramDataMicrosoftWindowsStart MenuProgramsMalwarebytes Anti-Malware2014-05-21 22:04 - 2014-05-17 02:21 - 00000000 ____D () C:Program Files (x86)Malwarebytes Anti-Malware2014-05-21 21:54 - 2009-07-14 05:34 - 00450709 ____R () C:Windowssystem32Driversetchosts.20140530-223530.backup2014-05-21 21:38 - 2014-04-11 02:19 - 00000000 ____D () C:Program Files (x86)Spybot - Search & Destroy 22014-05-20 04:10 - 2014-04-10 22:13 - 00000000 ____D () C:WindowsCryptoGuard==================== Bamital & volsnap Check =================C:WindowsSystem32winlogon.exe => File is digitally signedC:WindowsSystem32wininit.exe => File is digitally signedC:WindowsSysWOW64wininit.exe => File is digitally signedC:Windowsexplorer.exe => File is digitally signedC:WindowsSysWOW64explorer.exe => File is digitally signedC:WindowsSystem32svchost.exe => File is digitally signedC:WindowsSysWOW64svchost.exe => File is digitally signedC:WindowsSystem32services.exe => File is digitally signedC:WindowsSystem32User32.dll => File is digitally signedC:WindowsSysWOW64User32.dll => File is digitally signedC:WindowsSystem32userinit.exe => File is digitally signedC:WindowsSysWOW64userinit.exe => File is digitally signedC:WindowsSystem32rpcss.dll => File is digitally signedC:WindowsSystem32Driversvolsnap.sys => File is digitally signedLastRegBack: 2014-06-08 03:36==================== End Of Log ============================ Addition.txt
  11. Здравейте от днес около 4:45 достъпа до интернет мистериозно спря. Мисля че от тогава има малко подобрение, но не съм сигурен може би си въобразявам. Мисля че когато разбрах че нямам достъп до интернет нямаше достъп до никои уебсайт. А сега имам достъп главно до всички сайтове на Google и по късмет до вашият форум спасител, също така имам достъп и до някой сайтове, но повечето не зареждат, същото е и с програмите - веднага давам пример: Malware Anti-Bytes не може да се свърже с сървъра за обновяване на базата данни, същото е и с скайп. Нямам достъп и до bleepingcomputer.com за да предоставя логовете, които изисквате за което се надявам да ме извините. Искам да уточня че от 3 дена ползвам няколко PPTP vpn-a предимно безплатни и 1 платен. Което ми напомня че има изключително малък шанс това поведение на компютъра да е породено от flood, но шанса е минимален защото тези 3 дена 80% от времето бях вързан към VPN. Програмите който съм инсталирал последните дни са Proxifier, който така и не използвах и OpenVPN клиент, който също е ползван само 1 път за няма и 10 минути, защото научих за PPTP VPN-ите. На този етап разполагам с Malware Anti-Bytes Premium които може и да е полезен, но ме съмнява без обновена база данни. Разполагам и с bootable диск с Windows XP x86 SP3 с който съм и в момента. По-рано говорих с интернет доставчика и той казва че всичко при тях е наред и не можел да ме ping-не, което означавало че firewall-а работел. Силно се съмнявам в някакъв вид вирус и затова темата я пускам тук. [offtopic]Ако някой от екип HTJ реши че не е проблем свързан с вирус, то да се свържи с модератор който може да премести темата където и е мястото.[/offtopic]
  12. Здравейте. От скоро имам проблем. Операционната система стартира бавно, програмите се отварят бавно, AIDA64 дори вече не отваря, а Speccy я чакам да анализира много време, а преди анализираше за секунди компонентите и температурите. В Task Manager-а ми пише че SSHD-то ми е натоварено на 99% Ето и логовете::: Additional scan result of Farbar Recovery Scan Tool (x64) Version:20-07-2015 Ran by Y510p at 2015-07-25 00:47:11 Running from C:\Users\Y510p\Downloads Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3436730813-759228368-3301738520-500 - Administrator - Disabled) Guest (S-1-5-21-3436730813-759228368-3301738520-501 - Limited - Disabled) UpdatusUser (S-1-5-21-3436730813-759228368-3301738520-1002 - Limited - Enabled) => C:\Users\UpdatusUser.lenovo Y510p (S-1-5-21-3436730813-759228368-3301738520-1001 - Administrator - Enabled) => C:\Users\Y510p ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-3436730813-759228368-3301738520-1001\...\uTorrent) (Version: 3.4.3.40760 - BitTorrent Inc.) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19140 - Adobe Systems Incorporated) Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated) Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated) Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated) Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated) AIDA64 Extreme v4.60 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 4.60 - FinalWire Ltd.) Anomaly Warzone Earth (HKLM-x32\...\Steam App 91200) (Version: - 11 bit studios) Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.3.2223 - AVAST Software) AVG PC TuneUp 2015 (en-US) (x32 Version: 15.0.1001.373 - AVG Technologies) Hidden AVG PC TuneUp 2015 (HKLM-x32\...\AVG PC TuneUp) (Version: 15.0.1001.373 - AVG Technologies) AVG PC TuneUp 2015 (x32 Version: 15.0.1001.373 - AVG Technologies) Hidden Batman Arkham Origins (HKLM-x32\...\QmF0bWFuQXJraGFtT3JpZ2lucw==_is1) (Version: 1 - ) Counter-Strike Global Offensive version 1.34.4.5 (HKLM\...\{BD051FE3-1575-4CD6-81ED-E905FA94720B}_is1) (Version: 1.34.4.5 - Strogino CS Portal) Crysis 3 (HKLM-x32\...\Q3J5c2lzMw==_is1) (Version: 1 - ) DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd) Enclave (HKLM-x32\...\Steam App 253980) (Version: - Starbreeze) Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.14 - Lenovo) Energy Management (x32 Version: 8.0.2.14 - Lenovo) Hidden Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - ) Free Hide IP (HKLM-x32\...\FreeHideIP) (Version: 4.0.6.2 - ) GameMaker 8.1 (HKU\S-1-5-21-3436730813-759228368-3301738520-1001\...\GameMaker81) (Version: - ) Grand Theft Auto IV (HKLM-x32\...\{579BA58C-F33D-4970-9953-B94B43768AC3}) (Version: 1.00.0000 - Rockstar Games) Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden Intel® PROSet/Wireless Software (HKLM-x32\...\{72814a2c-2e03-4a50-b30a-43e7884b3934}) (Version: 16.5.1 - Intel Corporation) Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation) Knights and Merchants (HKLM-x32\...\Steam App 253900) (Version: - Topware Interactive) League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games) League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden Lenovo EasyCamera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10260 - Realtek Semiconductor Corp.) Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.2105 - CyberLink Corp.) Lenovo OneKey Recovery (Version: 8.0.0.2105 - CyberLink Corp.) Hidden Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Minecraft 1.7.9 (HKLM-x32\...\Minecraft 1.7.9) (Version: 1.7.9 - Mojang) Mozilla Firefox 39.0 (x86 bg) (HKLM-x32\...\Mozilla Firefox 39.0 (x86 bg)) (Version: 39.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 39.0 - Mozilla) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9.2 - Notepad++ Team) NVIDIA Graphics Driver 332.10 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 332.10 - NVIDIA Corporation) NVIDIA PhysX System Software 9.13.0927 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0927 - NVIDIA Corporation) NVIDIA Update 1.15.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.15.2 - NVIDIA Corporation) Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden Qualcomm Atheros Inc.® AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.21 - Qualcomm Atheros Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7030 - Realtek Semiconductor Corp.) Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.) Sniper Elite 3 (HKLM-x32\...\U25pcGVyRWxpdGUz_is1) (Version: 1 - ) Speccy (HKLM\...\Speccy) (Version: 1.28 - Piriform) StarCraft II: Heart of the Swarm © Blizzard Entertainment version 1 (HKLM-x32\...\U3RhckNyYWZ0IElJOiBIZWFydCBvZiB0aGUgU3dhcm0gKGMp~BFC02D25_is1) (Version: 1 - ) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.10.12 - Synaptics Incorporated) The Amazing Spider Man 2 Bundle (HKLM-x32\...\The Amazing Spider Man 2 Bundle_is1) (Version: - ) The Amazing Spider-Man (HKLM-x32\...\ASM_Laguna_is1) (Version: - ) TrackerPro 1.0 (HKLM-x32\...\TrackerPro) (Version: 1.0 - Evisoft) VMware Workstation (HKLM-x32\...\VMware_Workstation) (Version: 9.0.2 - VMware, Inc) VMware Workstation (Version: 9.0.2 - VMware, Inc.) Hidden Windows Driver Package - Lenovo (ACPIVPC) System (02/17/2013 9.52.0.776) (HKLM\...\35DD26BE48DAF4A9F35F969F3CB1E3E1435E661E) (Version: 02/17/2013 9.52.0.776 - Lenovo) Windows Driver Package - Lenovo (WUDFRd) LenovoVhid (07/25/2013 10.30.0.288) (HKLM\...\6BCA401E9CBEED970D75F55FA5320F60D11984E9) (Version: 07/25/2013 10.30.0.288 - Lenovo) WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH) World of Tanks (HKU\S-1-5-21-3436730813-759228368-3301738520-1001\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812eu}_is1) (Version: - Wargaming.net) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Restore Points ========================= 18-07-2015 10:50:13 Installed Lenovo EasyCamera 20-07-2015 11:31:29 Windows Modules Installer 21-07-2015 14:25:08 Installed DirectX 22-07-2015 18:40:09 Installed DirectX 23-07-2015 22:50:01 Installed DirectX 25-07-2015 00:30:57 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 06:25 - 2015-07-18 23:06 - 00000852 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 activate.adobe.com ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {1B128BF9-EF9B-4BC9-89DA-B1083AE5F31E} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation) Task: {27798C5C-A12A-4F3B-B73A-A3093992356A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {34ED3CCB-EB46-4E78-9056-D06462F5BEF1} - System32\Tasks\AdobeAAMUpdater-1.0-lenovo-Y510p => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-03-15] (Adobe Systems Incorporated) Task: {756595A3-0295-4977-B8A4-8FDBF4E4AF39} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-07-18] (AVAST Software) Task: {7AF53989-98F4-4F51-86E0-B1EFFEC4A324} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => E:\AVG TuneUP\OneClick.exe [2015-01-30] (AVG Technologies) Task: {80E875CE-D4F8-4500-840B-DC6A8481E96B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {D03CB292-7189-4F30-84FF-41BC8ED741B5} - System32\Tasks\Java Platform SE Auto Updater => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-06-08] (Oracle Corporation) Task: {DC0ADC74-8A1D-41E1-BF80-6D7E48661F3C} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-07-03] (Microsoft Corporation) Task: {E3D7984F-49F4-4F9E-8850-F3F5D238FED5} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2015-07-18] () Task: {F1D438D0-8351-4BD3-8437-4F33A0A1CA5D} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-09-17] (Synaptics Incorporated) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Loaded Modules (Whitelisted) ============== 2015-01-30 17:23 - 2015-01-30 17:23 - 00712504 _____ () E:\AVG TuneUP\avgrepliba.dll 2015-07-18 12:11 - 2013-12-12 17:21 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2015-01-30 17:23 - 2015-01-30 17:23 - 00855864 _____ () E:\AVG TuneUP\tulnga.dll 2014-05-14 08:15 - 2014-05-14 08:15 - 08890536 _____ () C:\Program Files\Microsoft Office\Office15\1033\GrooveIntlResource.dll 2005-09-19 07:30 - 2005-09-19 07:30 - 01629696 _____ () C:\Program Files (x86)\Evisoft\TrackerPro\encreasebt.exe 2015-07-18 13:08 - 2015-07-18 13:08 - 00102864 _____ () C:\Program Files\AVAST Software\Avast\log.dll 2015-07-18 13:08 - 2015-07-18 13:08 - 00123976 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2015-07-23 13:33 - 2015-07-23 13:33 - 02957312 _____ () C:\Program Files\AVAST Software\Avast\defs\15072300\algo.dll 2015-07-23 21:43 - 2015-07-23 21:43 - 02957312 _____ () C:\Program Files\AVAST Software\Avast\defs\15072301\algo.dll 2015-07-25 00:27 - 2015-07-25 00:27 - 02960384 _____ () C:\Program Files\AVAST Software\Avast\defs\15072402\algo.dll 2013-02-26 02:28 - 2013-02-26 02:28 - 01260624 _____ () C:\Program Files (x86)\VMware\VMware Workstation\libxml2.dll 2015-07-18 13:08 - 2015-07-18 13:08 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2014-05-14 08:15 - 2014-05-14 08:15 - 08890536 _____ () C:\Program Files (x86)\Microsoft Office\Office15\1033\GrooveIntlResource.dll 2015-07-18 13:08 - 2015-07-18 13:08 - 00985600 _____ () C:\Program Files\AVAST Software\Avast\ffmpegsumo.dll 2015-02-14 17:40 - 2015-02-14 17:40 - 00381440 _____ () C:\Windows\mod_frst.exe ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3436730813-759228368-3301738520-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Y510p\Desktop\Batman-Arkham-Origins-screenshot-rero-7.jpg DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKLM\...\StartupApproved\Run32: => "SwitchBoard" HKLM\...\StartupApproved\Run32: => "AdobeCS5ServiceManager" HKLM\...\StartupApproved\Run32: => "vmware-tray.exe" HKU\S-1-5-21-3436730813-759228368-3301738520-1001\...\StartupApproved\Run: => "Skype" HKU\S-1-5-21-3436730813-759228368-3301738520-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount" HKU\S-1-5-21-3436730813-759228368-3301738520-1001\...\StartupApproved\Run: => "RGSC" HKU\S-1-5-21-3436730813-759228368-3301738520-1001\...\StartupApproved\Run: => "Steam" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [sPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppextcomobj.exe FirewallRules: [sPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppextcomobj.exe FirewallRules: [{2E272693-9D00-4082-9E94-8D3CD55FE799}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{64F83FDE-AB7C-48FB-B073-E12708C7F9FE}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{54D360AE-EA59-46A9-B309-660E594FC077}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe FirewallRules: [TCP Query User{BB9045C8-272D-46A4-8435-0E7FB3FA79F0}C:\users\y510p\appdata\local\microsoft\windows\inetcache\ie\2wvm1gca\utorrent_rc3.4build30553.exe] => (Allow) C:\users\y510p\appdata\local\microsoft\windows\inetcache\ie\2wvm1gca\utorrent_rc3.4build30553.exe FirewallRules: [uDP Query User{9C91F867-B587-4B56-9477-33DE31CD62A7}C:\users\y510p\appdata\local\microsoft\windows\inetcache\ie\2wvm1gca\utorrent_rc3.4build30553.exe] => (Allow) C:\users\y510p\appdata\local\microsoft\windows\inetcache\ie\2wvm1gca\utorrent_rc3.4build30553.exe FirewallRules: [TCP Query User{354C7FBC-BBE0-413F-A266-CD6441DEACCD}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [uDP Query User{CB79E1D2-43BB-4294-B4F3-3F62F27FF55B}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [{04EE9326-34E6-4989-9148-B9825CB88E46}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{09D904CD-5B5E-4E6D-8802-50BB93EA59E0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{FDB71CFA-67DD-4A83-9305-96339E53DBC6}] => (Allow) C:\Users\Y510p\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{C42B04B6-1327-4B7F-BFAB-6E7E01E534B3}] => (Allow) C:\Users\Y510p\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{0AFCE07B-A858-4873-AD41-7E51F1815993}] => (Allow) C:\Users\Y510p\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{2E87AF37-CA38-4E1D-9ABB-5FC4D10B833C}] => (Allow) C:\Users\Y510p\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{FF4AB0F1-D3DC-4E77-A5C1-23F6FEC24F93}] => (Allow) C:\Users\Y510p\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{4BC87ACC-319D-4BCD-99CA-26DF59D80853}] => (Allow) C:\Users\Y510p\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [TCP Query User{C668F68E-0ED0-4459-ABAA-719CD4287930}E:\counter-strike global offensive\csgo.exe] => (Block) E:\counter-strike global offensive\csgo.exe FirewallRules: [uDP Query User{51560BA6-9403-40D9-8CB0-D21A0E3A4A57}E:\counter-strike global offensive\csgo.exe] => (Block) E:\counter-strike global offensive\csgo.exe FirewallRules: [TCP Query User{4161D17A-D374-4BCF-972C-5871C6D818CF}C:\program files\java\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\javaw.exe FirewallRules: [uDP Query User{CF68349F-CD83-4251-BFEB-9C14E3AA6503}C:\program files\java\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\javaw.exe FirewallRules: [TCP Query User{F8FC2B40-0E9B-4169-A337-0D9C3F9114A2}E:\counter-strike 1.6\hl.exe] => (Allow) E:\counter-strike 1.6\hl.exe FirewallRules: [uDP Query User{98B4C198-AFFA-4719-90DF-53ECCE40BDBF}E:\counter-strike 1.6\hl.exe] => (Allow) E:\counter-strike 1.6\hl.exe FirewallRules: [{0D2C452F-4CD5-4096-AE39-29B72FD89A53}] => (Allow) E:\Grand Theft Auto IV\Grand Theft Auto IV\LaunchGTAIV.exe FirewallRules: [{B60AE6EE-15D7-4DA6-9E42-15DD1A29D61C}] => (Allow) E:\Grand Theft Auto IV\Grand Theft Auto IV\LaunchGTAIV.exe FirewallRules: [TCP Query User{702A1E8E-FDD8-4198-9478-7F643874D2A3}E:\grand theft auto iv\grand theft auto iv\gtaiv.exe] => (Allow) E:\grand theft auto iv\grand theft auto iv\gtaiv.exe FirewallRules: [uDP Query User{97F68879-3B54-490F-B998-72D6B4F9248E}E:\grand theft auto iv\grand theft auto iv\gtaiv.exe] => (Allow) E:\grand theft auto iv\grand theft auto iv\gtaiv.exe FirewallRules: [TCP Query User{BAB9EFC8-71BE-481E-A50C-CE2ACB1DF086}E:\world_of_tanks\wotlauncher.exe] => (Allow) E:\world_of_tanks\wotlauncher.exe FirewallRules: [uDP Query User{F732AA84-953D-4B51-9A15-EF9B18605472}E:\world_of_tanks\wotlauncher.exe] => (Allow) E:\world_of_tanks\wotlauncher.exe FirewallRules: [TCP Query User{5BEA42E2-8842-4286-9487-E4D57B389235}E:\world_of_tanks\worldoftanks.exe] => (Allow) E:\world_of_tanks\worldoftanks.exe FirewallRules: [uDP Query User{4980AEE3-4D56-40D8-9D6C-5B640CCC2CE4}E:\world_of_tanks\worldoftanks.exe] => (Allow) E:\world_of_tanks\worldoftanks.exe FirewallRules: [{E40800B5-C3FB-40E6-9B00-37AE09EC108E}] => (Block) E:\StarCraft II\Versions\Base24944\SC2.exe FirewallRules: [{CB9A79AB-0622-4DE8-9374-222F590299EA}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{321CA1B1-C901-4C03-B065-33C95F0FBAE3}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{B31FB705-2765-4503-AB8E-750D7E58307B}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{16754680-BA82-4C53-81F9-F906583C9386}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{7B19D829-866C-41DA-B176-287033114BE1}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe FirewallRules: [{1B5B5FCB-9AB6-4B36-A835-F4607B7C6E83}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe FirewallRules: [{BA77A4A3-71C1-4478-B423-FF715C80010D}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe FirewallRules: [{A2DA2EB4-CA30-4347-A6C5-F2468E658B0E}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe FirewallRules: [{07F55A63-C510-404D-AF41-62A63F90432C}] => (Allow) E:\Steam\Steam.exe FirewallRules: [{43B88AE8-6F20-4D07-8B91-ECF3AA52B1BF}] => (Allow) E:\Steam\Steam.exe FirewallRules: [{95951F08-3136-49B9-8B3D-11370D7D28AD}] => (Allow) E:\Steam\bin\steamwebhelper.exe FirewallRules: [{B7D2D44F-D21F-47E2-9717-FF9F2CCCFC35}] => (Allow) E:\Steam\bin\steamwebhelper.exe FirewallRules: [{2F5875D8-C9C4-49B2-8A6D-80D64123F702}] => (Allow) E:\Steam\steamapps\common\Enclave\Enclave.exe FirewallRules: [{9ACB7A63-9485-4194-959A-BE1995A63FC9}] => (Allow) E:\Steam\steamapps\common\Enclave\Enclave.exe FirewallRules: [{C872565E-5905-47D1-BB4E-6D9033609DC4}] => (Allow) E:\Steam\steamapps\common\Anomaly Warzone Earth\AnomalyWarzoneEarth.exe FirewallRules: [{76BCE8EB-20BA-4030-99AF-EC85CC7ED9EA}] => (Allow) E:\Steam\steamapps\common\Anomaly Warzone Earth\AnomalyWarzoneEarth.exe FirewallRules: [{22C490D3-2612-4682-8C8B-4C5AEEEF57E0}] => (Allow) E:\Steam\steamapps\common\Knights and Merchants Historical Version\KM_TPR.exe FirewallRules: [{09E66D89-C5CF-488B-A8A2-BB0973304015}] => (Allow) E:\Steam\steamapps\common\Knights and Merchants Historical Version\KM_TPR.exe FirewallRules: [{3472A815-866E-4A85-ACCE-D030CF973BE0}] => (Allow) E:\Steam\steamapps\common\Knights and Merchants Historical Version\hd\Knights_and_Merchants_steam.exe FirewallRules: [{0464D2BC-3D80-44CD-97AC-81BB5BDE0BCF}] => (Allow) E:\Steam\steamapps\common\Knights and Merchants Historical Version\hd\Knights_and_Merchants_steam.exe ==================== Faulty Device Manager Devices ============= Name: PCI Simple Communications Controller Description: PCI Simple Communications Controller Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (07/25/2015 12:38:18 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program Integrator.exe version 15.0.1001.373 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 1d70 Start Time: 01d0c6ac86759ecc Termination Time: 6 Application Path: E:\AVG TuneUP\Integrator.exe Report Id: 186b84cf-32a0-11e5-825e-00c2c66f1aa7 Faulting package full name: Faulting package-relative application ID: Error: (07/25/2015 12:31:16 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program SeaToolsforWindowsSetup.exe version 0.0.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 11d4 Start Time: 01d0c6abbac94277 Termination Time: 4294967295 Application Path: C:\Users\Y510p\Downloads\SeaToolsforWindowsSetup.exe Report Id: 219a8a23-329f-11e5-825e-00c2c66f1aa7 Faulting package full name: Faulting package-relative application ID: Error: (07/25/2015 12:29:31 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program SeaToolsforWindowsSetup.exe version 0.0.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 1dd8 Start Time: 01d0c6aa1b1c0289 Termination Time: 4294967295 Application Path: C:\Users\Y510p\Downloads\SeaToolsforWindowsSetup.exe Report Id: e332f57e-329e-11e5-825e-00c2c66f1aa7 Faulting package full name: Faulting package-relative application ID: Error: (07/23/2015 11:04:38 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: AnomalyWarzoneEarth.exe, version: 0.0.0.0, time stamp: 0x4ed893c2 Faulting module name: AnomalyWarzoneEarth.exe, version: 0.0.0.0, time stamp: 0x4ed893c2 Exception code: 0xc0000005 Fault offset: 0x00019b4d Faulting process id: 0x1e2c Faulting application start time: 0xAnomalyWarzoneEarth.exe0 Faulting application path: AnomalyWarzoneEarth.exe1 Faulting module path: AnomalyWarzoneEarth.exe2 Report Id: AnomalyWarzoneEarth.exe3 Faulting package full name: AnomalyWarzoneEarth.exe4 Faulting package-relative application ID: AnomalyWarzoneEarth.exe5 Error: (07/23/2015 09:44:22 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY) Description: Event provider ProtectionManagement attempted to register query "select * from MSFT_MpEvent" whose target class "MSFT_MpEvent" in //./root/microsoft/protectionManagement namespace does not exist. The query will be ignored. Error: (07/23/2015 09:44:22 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY) Description: Event provider attempted to register query "select * from MSFT_MpEvent" whose target class "MSFT_MpEvent" in //./root/microsoft/protectionManagement namespace does not exist. The query will be ignored. Error: (07/23/2015 09:43:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: ZeroConfigService.exe, version: 16.5.0.0, time stamp: 0x52179ea0 Faulting module name: MurocApi.dll, version: 16.5.0.0, time stamp: 0x52179d03 Exception code: 0xc0000005 Fault offset: 0x000000000002bcd8 Faulting process id: 0x864 Faulting application start time: 0xZeroConfigService.exe0 Faulting application path: ZeroConfigService.exe1 Faulting module path: ZeroConfigService.exe2 Report Id: ZeroConfigService.exe3 Faulting package full name: ZeroConfigService.exe4 Faulting package-relative application ID: ZeroConfigService.exe5 Error: (07/23/2015 05:31:18 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: Fulcrum.exe, version: 1.0.0.0, time stamp: 0x546e6b9c Faulting module name: clr.dll, version: 4.0.30319.34014, time stamp: 0x52e0b784 Exception code: 0xc00000fd Fault offset: 0x000578d9 Faulting process id: 0x1eac Faulting application start time: 0xFulcrum.exe0 Faulting application path: Fulcrum.exe1 Faulting module path: Fulcrum.exe2 Report Id: Fulcrum.exe3 Faulting package full name: Fulcrum.exe4 Faulting package-relative application ID: Fulcrum.exe5 Error: (07/23/2015 05:30:48 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: Fulcrum.exe, version: 1.0.0.0, time stamp: 0x546e6b9c Faulting module name: KERNEL32.dll, version: 6.3.9600.17056, time stamp: 0x532a2e6c Exception code: 0xc00000fd Fault offset: 0x00010818 Faulting process id: 0xe78 Faulting application start time: 0xFulcrum.exe0 Faulting application path: Fulcrum.exe1 Faulting module path: Fulcrum.exe2 Report Id: Fulcrum.exe3 Faulting package full name: Fulcrum.exe4 Faulting package-relative application ID: Fulcrum.exe5 Error: (07/23/2015 05:30:28 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: Fulcrum.exe, version: 1.0.0.0, time stamp: 0x546e6b9c Faulting module name: clr.dll, version: 4.0.30319.34014, time stamp: 0x52e0b784 Exception code: 0xc00000fd Fault offset: 0x000578d9 Faulting process id: 0xd0c Faulting application start time: 0xFulcrum.exe0 Faulting application path: Fulcrum.exe1 Faulting module path: Fulcrum.exe2 Report Id: Fulcrum.exe3 Faulting package full name: Fulcrum.exe4 Faulting package-relative application ID: Fulcrum.exe5 System errors: ============= Error: (07/25/2015 12:47:12 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Application Experience service failed to start due to the following error: %%1053 Error: (07/25/2015 12:46:57 AM) (Source: DCOM) (EventID: 10029) (User: lenovo) Description: {9B1F122C-2982-4E91-AA8B-E071D54F2A4D}wuauserv Error: (07/25/2015 12:45:29 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Multimedia Class Scheduler service failed to start due to the following error: %%1053 Error: (07/25/2015 12:45:29 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Multimedia Class Scheduler service failed to start due to the following error: %%1053 Error: (07/25/2015 12:45:29 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Multimedia Class Scheduler service failed to start due to the following error: %%1053 Error: (07/25/2015 12:45:29 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Multimedia Class Scheduler service failed to start due to the following error: %%1053 Error: (07/25/2015 12:45:29 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Multimedia Class Scheduler service failed to start due to the following error: %%1053 Error: (07/25/2015 12:45:29 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Multimedia Class Scheduler service failed to start due to the following error: %%1053 Error: (07/25/2015 12:45:29 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Multimedia Class Scheduler service failed to start due to the following error: %%1053 Error: (07/25/2015 12:45:29 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Multimedia Class Scheduler service failed to start due to the following error: %%1053 Microsoft Office: ========================= Error: (07/25/2015 12:38:18 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Integrator.exe15.0.1001.3731d7001d0c6ac86759ecc6E:\AVG TuneUP\Integrator.exe186b84cf-32a0-11e5-825e-00c2c66f1aa7 Error: (07/25/2015 12:31:16 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: SeaToolsforWindowsSetup.exe0.0.0.011d401d0c6abbac942774294967295C:\Users\Y510p\Downloads\SeaToolsforWindowsSetup.exe219a8a23-329f-11e5-825e-00c2c66f1aa7 Error: (07/25/2015 12:29:31 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: SeaToolsforWindowsSetup.exe0.0.0.01dd801d0c6aa1b1c02894294967295C:\Users\Y510p\Downloads\SeaToolsforWindowsSetup.exee332f57e-329e-11e5-825e-00c2c66f1aa7 Error: (07/23/2015 11:04:38 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: AnomalyWarzoneEarth.exe0.0.0.04ed893c2AnomalyWarzoneEarth.exe0.0.0.04ed893c2c000000500019b4d1e2c01d0c5d5e0cbdb5fE:\Steam\steamapps\common\Anomaly Warzone Earth\AnomalyWarzoneEarth.exeE:\Steam\steamapps\common\Anomaly Warzone Earth\AnomalyWarzoneEarth.exedd7be333-31c9-11e5-825d-00c2c66f1aa7 Error: (07/23/2015 09:44:22 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY) Description: ProtectionManagementselect * from MSFT_MpEventMSFT_MpEvent//./root/microsoft/protectionManagement Error: (07/23/2015 09:44:22 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY) Description: select * from MSFT_MpEventMSFT_MpEvent//./root/microsoft/protectionManagement Error: (07/23/2015 09:43:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: ZeroConfigService.exe16.5.0.052179ea0MurocApi.dll16.5.0.052179d03c0000005000000000002bcd886401d0c5cb412ddd2aC:\Program Files\Intel\WiFi\bin\ZeroConfigService.exeC:\Program Files\Intel\WiFi\bin\MurocApi.dll8a4cb59c-31be-11e5-825d-00c2c66f1aa7 Error: (07/23/2015 05:31:18 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Fulcrum.exe1.0.0.0546e6b9cclr.dll4.0.30319.3401452e0b784c00000fd000578d91eac01d0c5a80db1eec8C:\Users\Y510p\Desktop\Fulcrum 4.19 cracked VIP\Fulcrum.exeC:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll4c92c722-319b-11e5-825c-00c2c66f1aa7 Error: (07/23/2015 05:30:48 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Fulcrum.exe1.0.0.0546e6b9cKERNEL32.dll6.3.9600.17056532a2e6cc00000fd00010818e7801d0c5a7fb702583C:\Users\Y510p\Desktop\Fulcrum 4.19 cracked VIP\Fulcrum.exeC:\Windows\SYSTEM32\KERNEL32.dll3a4d81f5-319b-11e5-825c-00c2c66f1aa7 Error: (07/23/2015 05:30:28 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Fulcrum.exe1.0.0.0546e6b9cclr.dll4.0.30319.3401452e0b784c00000fd000578d9d0c01d0c5a7ec00e993C:\Users\Y510p\Desktop\Fulcrum 4.19 cracked VIP\Fulcrum.exeC:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll2e77422d-319b-11e5-825c-00c2c66f1aa7 CodeIntegrity Errors: =================================== Date: 2015-07-23 19:35:42.444 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2015-07-23 19:34:39.979 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2015-07-23 19:11:39.614 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2015-07-23 18:54:44.333 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2015-07-23 18:54:27.248 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2015-07-21 21:06:53.012 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2015-07-21 12:56:12.841 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2015-07-20 17:27:02.585 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2015-07-20 17:27:01.369 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2015-07-20 17:26:53.140 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Processor: Intel® Core i7-4700MQ CPU @ 2.40GHz Percentage of memory in use: 17% Total physical RAM: 16334.36 MB Available physical RAM: 13461.63 MB Total Virtual: 19278.36 MB Available Virtual: 16048.23 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:266.47 GB) (Free:202.93 GB) NTFS ==>[drive with boot components (obtained from BCD)] Drive e: () (Fixed) (Total:664.06 GB) (Free:510.57 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: D9FA2484) Partition 1: (Active) - (Size=266.5 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=664.1 GB) - (Type=07 NTFS) ==================== End of log ============================
  13. върнах системата от преди 5 дни, когато беше чиста но файловете останаха криптирани. https://www.kaldata.com/forums/topic/132819-%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D0%B0%D1%82%D0%B0-%D0%BC%D0%B8-%D0%B5-%D0%B8%D0%BD%D1%84%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%B0%D0%BD%D0%B0-%D0%BA%D0%B0%D0%BA%D0%B2%D0%BE-%D0%B4%D0%B0-%D0%BF%D1%80%D0%B0%D0%B2%D1%8F-%D1%81%D0%B5%D0%B3%D0%B0/ прикачвам файловете от сканирането.. FRST.txt Addition.txt
  14. Писах Ви преди време,че лаптопо ми е заразен.Вие ми писахте,какво трябва да направя,но аз не съм чак толкова компетентен и реших да го дам да го преинсталират.Бих искал да разбера дали всичко е наред.След преинсталацията единственото нещо което ме тревожи,че пак започна да ми излиза надпис ,че липсва флашплеер.Пускам го да се инсталира,след малко пак ми излиза.Моля Ви за съдеиствие.Благодаря Ви предварително. FRST.txt
  15. Здравейте, първо искам да се извиня , че отново пускам такава тема, но преди малко забелязах че на предната сте сложили таг "приключена", та се сетих че може би пък никой няма да я погледне, като е приключена. За това пукам нова. Съжалявам ако сте я прегледали отново и просто трябва да изчакам за отговора, изтрийте тази тема и да се прехвърлим в другата .. или вие ще кажете. Не знам .. Искам просто да разбера дали е хардуерен проблема или е вирус или някакъв софтуер. Прилагам файловете от Farbar Recovery scanner. FRST.txt Addition.txt
  16. Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-04-2015 01 Ran by Alex (administrator) on ALEX-PC on 18-04-2015 20:11:17 Running from C:\Users\Alex\Downloads Loaded Profiles: Alex (Available profiles: Alex) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Musiclab LLC) C:\Program Files (x86)\Music App\Datamngr\DatamngrCoordinator.exe () C:\Program Files (x86)\HD-V1.9\510acaa5-1572-4a90-a2e3-bc2e22a40657-11.exe (FileProperties_CompanyName) C:\Program Files (x86)\fun coupons\fun_coupons_notification_service.exe (InfoHD-V1.8) C:\Program Files (x86)\HD-V1.9\510acaa5-1572-4a90-a2e3-bc2e22a40657-10.exe (InfoHD-V1.8) C:\Program Files (x86)\HD-V1.9\HD-V1.9-nova.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe () C:\Windows\Temp\dgen.exe (BitTorrent Inc.) C:\Users\Alex\AppData\Roaming\uTorrent\uTorrent.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Farbar) C:\Users\Alex\Downloads\FRST64 (2).exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation) HKLM\...\Run: [HotKeysCmds] => C:\Windows\system32\hkcmd.exe HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-06] (AVAST Software) HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-03-07] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-4065903734-2765197403-3730775554-1000\...\Run: [uTorrent] => C:\Users\Alex\AppData\Roaming\uTorrent\uTorrent.exe [1442384 2015-03-26] (BitTorrent Inc.) HKU\S-1-5-21-4065903734-2765197403-3730775554-1000\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31346784 2015-02-26] (Skype Technologies S.A.) HKU\S-1-5-21-4065903734-2765197403-3730775554-1000\...\RunOnce: [Application Restart #2] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-04-14] (Google Inc.) HKU\S-1-5-21-4065903734-2765197403-3730775554-1000\...\MountPoints2: H - H:\setup.exe HKU\S-1-5-21-4065903734-2765197403-3730775554-1000\...\MountPoints2: {32120b6d-d8ab-11e4-8934-001a80fbc046} - H:\setup.exe HKU\S-1-5-18\...\RunOnce: [sPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-03-21] (Microsoft Corporation) IFEO\bitguard.exe: [Debugger] tasklist.exe IFEO\bprotect.exe: [Debugger] tasklist.exe IFEO\bpsvc.exe: [Debugger] tasklist.exe IFEO\browserdefender.exe: [Debugger] tasklist.exe IFEO\browserprotect.exe: [Debugger] tasklist.exe IFEO\browsersafeguard.exe: [Debugger] tasklist.exe IFEO\dprotectsvc.exe: [Debugger] tasklist.exe IFEO\jumpflip: [Debugger] tasklist.exe IFEO\protectedsearch.exe: [Debugger] tasklist.exe IFEO\searchinstaller.exe: [Debugger] tasklist.exe IFEO\searchprotection.exe: [Debugger] tasklist.exe IFEO\searchprotector.exe: [Debugger] tasklist.exe IFEO\searchsettings.exe: [Debugger] tasklist.exe IFEO\searchsettings64.exe: [Debugger] tasklist.exe IFEO\snapdo.exe: [Debugger] tasklist.exe IFEO\stinst32.exe: [Debugger] tasklist.exe IFEO\stinst64.exe: [Debugger] tasklist.exe IFEO\umbrella.exe: [Debugger] tasklist.exe IFEO\utiljumpflip.exe: [Debugger] tasklist.exe IFEO\volaro: [Debugger] tasklist.exe IFEO\vonteera: [Debugger] tasklist.exe IFEO\websteroids.exe: [Debugger] tasklist.exe IFEO\websteroidsservice.exe: [Debugger] tasklist.exe ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=56626&homepage=http://istart.webssearches.com/?type=hp&ts=1405320608&from=amt&uid=FUJITSUXMHY2250BH_K41LT852CBGHT852CBGHX HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=56626&homepage=http://istart.webssearches.com/?type=hp&ts=1405320608&from=amt&uid=FUJITSUXMHY2250BH_K41LT852CBGHT852CBGHX HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?type=ds&ts=1405320608&from=amt&uid=FUJITSUXMHY2250BH_K41LT852CBGHT852CBGHX&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?type=ds&ts=1405320608&from=amt&uid=FUJITSUXMHY2250BH_K41LT852CBGHT852CBGHX&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp&ts=1405320608&from=amt&uid=FUJITSUXMHY2250BH_K41LT852CBGHT852CBGHX HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp&ts=1405320608&from=amt&uid=FUJITSUXMHY2250BH_K41LT852CBGHT852CBGHX HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?type=ds&ts=1405320608&from=amt&uid=FUJITSUXMHY2250BH_K41LT852CBGHT852CBGHX&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?type=ds&ts=1405320608&from=amt&uid=FUJITSUXMHY2250BH_K41LT852CBGHT852CBGHX&q={searchTerms} HKU\S-1-5-21-4065903734-2765197403-3730775554-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=56626&homepage=http://www.search.ask.com/?o=APN10641A&gct=hp&d=2-876&v=a15946-124&t=4 HKU\S-1-5-21-4065903734-2765197403-3730775554-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp&ts=1405320608&from=amt&uid=FUJITSUXMHY2250BH_K41LT852CBGHT852CBGHX SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1405320608&from=amt&uid=FUJITSUXMHY2250BH_K41LT852CBGHT852CBGHX&q={searchTerms} SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1405320608&from=amt&uid=FUJITSUXMHY2250BH_K41LT852CBGHT852CBGHX&q={searchTerms} SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2002} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=876&systemid=2&v=a15946-124&apn_uid=0436673825314173&apn_dtid=IME002&o=APN10641&apn_ptnrs=AG2&q={searchTerms} SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&gct=ds&appid=565&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=2820824023084532&q={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1405320608&from=amt&uid=FUJITSUXMHY2250BH_K41LT852CBGHT852CBGHX&q={searchTerms} SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1405320608&from=amt&uid=FUJITSUXMHY2250BH_K41LT852CBGHT852CBGHX&q={searchTerms} SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2002} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=876&systemid=2&v=a15946-124&apn_uid=0436673825314173&apn_dtid=IME002&o=APN10641&apn_ptnrs=AG2&q={searchTerms} SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&gct=ds&appid=565&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=2820824023084532&q={searchTerms} SearchScopes: HKLM-x32 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3220468 SearchScopes: HKLM-x32 -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10002&barid={BB450165-544F-11E2-87CC-001A80FBC046} SearchScopes: HKU\.DEFAULT -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = SearchScopes: HKU\.DEFAULT -> {B7AD362F-B85B-4BAC-BE2E-12A966292820} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=876&systemid=2&v=a15946-124&apn_uid=0436673825314173&apn_dtid=IME002&o=APN10641&apn_ptnrs=AG2&q={searchTerms} SearchScopes: HKU\S-1-5-21-4065903734-2765197403-3730775554-1000 -> DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2002} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=876&systemid=2&v=a15946-124&apn_uid=0436673825314173&apn_dtid=IME002&o=APN10641&apn_ptnrs=AG2&q={searchTerms} SearchScopes: HKU\S-1-5-21-4065903734-2765197403-3730775554-1000 -> BD314A96F4464D5BBBB58F41556B9225 URL = http://dts.search-results.com/sr?src=ieb&gct=ds&appid=876&systemid=2&apn_uid=0436673825314173&apn_dtid=IME002&o=APN10641&apn_ptnrs=AG2&q={searchTerms} SearchScopes: HKU\S-1-5-21-4065903734-2765197403-3730775554-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTerms}&babsrc=SP_ss_din2g&mntrId=A402001A80FBC046&affID=120695&tt=180613_ndt4&tsp=4920 SearchScopes: HKU\S-1-5-21-4065903734-2765197403-3730775554-1000 -> {308B8CC4-DF12-404F-BFF2-667F131E9427} URL = http://search.creativetoolbars.com/results?src=tb&id=smartbar&g=&q={searchTerms} SearchScopes: HKU\S-1-5-21-4065903734-2765197403-3730775554-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1405320608&from=amt&uid=FUJITSUXMHY2250BH_K41LT852CBGHT852CBGHX&q={searchTerms} SearchScopes: HKU\S-1-5-21-4065903734-2765197403-3730775554-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2002} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=876&systemid=2&v=a15946-124&apn_uid=0436673825314173&apn_dtid=IME002&o=APN10641&apn_ptnrs=AG2&q={searchTerms} SearchScopes: HKU\S-1-5-21-4065903734-2765197403-3730775554-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&gct=ds&appid=565&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=2820824023084532&q={searchTerms} SearchScopes: HKU\S-1-5-21-4065903734-2765197403-3730775554-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3220468 SearchScopes: HKU\S-1-5-21-4065903734-2765197403-3730775554-1000 -> {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://mystart.incredibar.com/mb203?a=6R8SCQLDaA&search={searchTerms}&i=26 SearchScopes: HKU\S-1-5-21-4065903734-2765197403-3730775554-1000 -> {E92A44AC-7DBE-4F6D-BAF6-EA7482862EB4} URL = http://search.softonic.com/INF00176/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=597 SearchScopes: HKU\S-1-5-21-4065903734-2765197403-3730775554-1000 -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10002&barid={BB450165-544F-11E2-87CC-001A80FBC046} BHO: HD-V1.9 -> {11111111-1111-1111-1111-110511951168} -> C:\Program Files (x86)\HD-V1.9\HD-V1.9-bho64.dll [2014-07-14] (InfoHD-V1.8) BHO: sUrrf and ekkeEp -> {15A8D9EE-0518-B55A-468A-99A23B24246A} -> C:\Program Files (x86)\sUrrf and ekkeEp\Pwefk.x64.dll [2013-12-12] () BHO: YoutubeAdblocker -> {3D9C2B81-8FC7-2BDD-94EC-85AEAA784F34} -> C:\Program Files (x86)\YoutubeAdblocker\WM2AuO.x64.dll [2012-12-12] () BHO: SearchNewTab -> {5F5896CE-BCF3-4DE7-0D4E-21AF79E25EA5} -> C:\Program Files (x86)\SearchNewTab\YD_UZ9.x64.dll No File BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-08-06] (AVAST Software) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation) BHO-x32: hosts -> {11111111-1111-1111-1111-110311531182} -> C:\Program Files (x86)\hosts\hosts-bho.dll [2013-07-30] (Alex) BHO-x32: HD-V1.9 -> {11111111-1111-1111-1111-110511951168} -> C:\Program Files (x86)\HD-V1.9\HD-V1.9-bho.dll [2014-07-14] (InfoHD-V1.8) BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-17] (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-08-06] (AVAST Software) BHO-x32: Rich Media Downloader -> {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} -> C:\Users\Alex\AppData\Local\Rich Media Player\BrowserExtensions\IE\RichMediaDownloader.dll [2013-07-03] (Radiocom CJSC) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation) BHO-x32: No Name -> {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} -> No File BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-17] (Oracle Corporation) BHO-x32: Rich Media Player -> {FEB703F7-E7B2-4AB0-9566-87658AC70095} -> C:\Users\Alex\AppData\Local\Rich Media Player\BrowserExtensions\IE\PluginRichmediaplayer.dll [2013-03-12] () Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File Toolbar: HKLM-x32 - No Name - {f34c9277-6577-4dff-b2d7-7d58092f272f} - No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation) Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.1.3\ViProtocol.dll [2013-11-21] (AVG Secure Search) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com/?type=sc&ts=1405320608&from=amt&uid=FUJITSUXMHY2250BH_K41LT852CBGHT852CBGHX FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_64.dll [2014-02-08] () FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll [2013-05-12] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-29] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_64.dll [2014-02-08] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll [2013-09-05] (Adobe Systems, Inc.) FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\17.1.3\\npsitesafety.dll [2013-11-21] (AVG Technologies) FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-17] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-17] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @richmediaplayer.com/nppluginrichmediaplayer -> C:\Program Files (x86)\Mozilla Firefox\plugins\nppluginrichmediaplayer.dll No File FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2014-07-14] (globalUpdate) FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2014-07-14] (globalUpdate) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-29] (Adobe Systems) FF Plugin HKU\S-1-5-21-4065903734-2765197403-3730775554-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Alex\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-05-07] (Unity Technologies ApS) FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\Firefox FF HKLM\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] - C:\Program Files\IB Updater\Firefox FF HKLM-x32\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\Firefox FF HKLM-x32\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] - C:\Program Files\IB Updater\Firefox FF HKLM-x32\...\Firefox\Extensions: [{3DF4B26D-DB19-45DF-962A-6719D071245B}] - C:\Users\Alex\AppData\Local\Rich Media Player\BrowserExtensions\Firefox\{3DF4B26D-DB19-45DF-962A-6719D071245B} FF Extension: Rich Media Player extension - C:\Users\Alex\AppData\Local\Rich Media Player\BrowserExtensions\Firefox\{3DF4B26D-DB19-45DF-962A-6719D071245B} [2013-09-09] FF HKLM-x32\...\Firefox\Extensions: [OKitSpace@Vittalia.es] - C:\Users\Alex\AppData\Roaming\okitspace\Firefox FF Extension: OKitSpace - C:\Users\Alex\AppData\Roaming\okitspace\Firefox [2013-10-04] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-12-23] Chrome: ======= CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Download Video) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\doagiokpgboiomffjfhaiimafndmmpni [2013-10-03] CHR Extension: (eiimnmioipafcokbfikbljfdeojpcgbh) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\eiimnmioipafcokbfikbljfdeojpcgbh [2015-04-05] CHR Extension: (uTorrentControl_v2) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda [2014-02-08] CHR Extension: (Free Smileys & Emoticons) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjbbjfdilbioabojmcplalojlmdngbjl [2015-04-03] CHR Extension: (Avast Online Security) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-03] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-03] CHR Extension: (Skype Click to Call) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-02-08] CHR Extension: (GreyGray) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhogbcndagiknbfomjgdeghehkljalhi [2014-02-08] CHR Extension: (Google Wallet) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-03] CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx [Not Found] CHR HKU\S-1-5-21-4065903734-2765197403-3730775554-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ejpbbhjlbipncjklfjjaedaieimbmdda] - C:\Users\Alex\AppData\Local\CRE\ejpbbhjlbipncjklfjjaedaieimbmdda.crx [2012-11-19] CHR HKLM-x32\...\Chrome\Extension: [ddkpepdilbfaccbiljmaflabkcbgjfin] - C:\Program Files (x86)\Search Results Toolbar\Datamngr\chromeExtension.crx [Not Found] CHR HKLM-x32\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx [Not Found] CHR HKLM-x32\...\Chrome\Extension: [doagiokpgboiomffjfhaiimafndmmpni] - C:\Users\Alex\AppData\Local\Rich Media Player\BrowserExtensions\Chrome\richmediadownloader.crx [2013-07-23] CHR HKLM-x32\...\Chrome\Extension: [ejpbbhjlbipncjklfjjaedaieimbmdda] - C:\Users\Alex\AppData\Local\CRE\ejpbbhjlbipncjklfjjaedaieimbmdda.crx [2012-11-19] CHR HKLM-x32\...\Chrome\Extension: [fjbbjfdilbioabojmcplalojlmdngbjl] - C:\Users\Alex\AppData\Roaming\OpenCandy\AA1258FB8CB1480DBFC4F71273ED1A61\smileyswelovetoolbar.crx [2013-01-05] CHR HKLM-x32\...\Chrome\Extension: [fkcdbkhjcaljlfolhllfneigeepmjfim] - C:\Users\Alex\AppData\Local\Rich Media Player\BrowserExtensions\Chrome\playerextension.crx [2013-02-28] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-08-06] CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - No Path Or update_url value CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx [Not Found] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14] CHR HKLM-x32\...\Chrome\Extension: [nhogbcndagiknbfomjgdeghehkljalhi] - C:\Program Files (x86)\GreyGray\nhogbcndagiknbfomjgdeghehkljalhi.crx [2013-12-07] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-08-06] (AVAST Software) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation) R2 DatamngrCoordinator; C:\Program Files (x86)\Music App\Datamngr\DatamngrCoordinator.exe [3204128 2015-03-23] (Musiclab LLC) S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-07-14] (globalUpdate) [File not signed] <==== ATTENTION S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-07-14] (globalUpdate) [File not signed] <==== ATTENTION S2 ProtectMonitor; C:\Program Files\PCDApp\StartHelp.exe [65846 2014-06-28] () [File not signed] <==== ATTENTION S4 SrvUpdater; C:\Program Files (x86)\SoftwareUpdater\UpdaterService.exe [29696 2013-11-05] () [File not signed] S4 vToolbarUpdater17.1.3; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.3\ToolbarUpdater.exe [1643696 2013-11-21] (AVG Secure Search) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) S2 MBAMScheduler; "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe" [X] S2 MBAMService; "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe" [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-08-06] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-08-06] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-08-06] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-08-06] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-11-21] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-08-06] (AVAST Software) S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-08-06] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2014-01-22] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-08-06] () R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [46368 2013-11-21] (AVG Technologies) S3 Bthcpk; No ImagePath S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30352 2015-04-01] (Disc Soft Ltd) R1 F06DEFF2-5B9C-490D-910F-35D3A91196222; C:\Program Files (x86)\Music App\Datamngr\x64\setmgrc3.cfg [45976 2015-03-23] (Musiclab LLC) S2 SSPORT; C:\Windows\SysWOW64\Drivers\SSPORT.sys [11576 2009-09-10] (Samsung Electronics) R3 ti21sony; C:\Windows\System32\drivers\ti21sony.sys [854528 2010-04-29] (Texas Instruments) S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [X] S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\1.3\temp\FairplayKD.sys [X] S3 MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [X] S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X] S3 MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [X] S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-18 20:11 - 2015-04-18 20:11 - 00028286 _____ () C:\Users\Alex\Downloads\FRST.txt 2015-04-18 20:11 - 2015-04-18 20:11 - 00000000 ___DC () C:\FRST 2015-04-18 20:10 - 2015-04-18 20:10 - 02098176 _____ (Farbar) C:\Users\Alex\Downloads\FRST64 (2).exe 2015-04-18 20:09 - 2015-04-18 20:09 - 02084395 _____ () C:\Users\Alex\Downloads\FRST64 (1).exe 2015-04-18 20:09 - 2015-04-18 20:09 - 01137664 _____ (Farbar) C:\Users\Alex\Downloads\FRST.exe 2015-04-18 20:06 - 2015-04-18 20:06 - 02095595 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe 2015-04-18 09:10 - 2015-04-18 09:10 - 00003424 ____C () C:\bootsqm.dat 2015-04-17 21:49 - 2015-04-18 19:48 - 00001120 _____ () C:\Windows\setupact.log 2015-04-17 21:49 - 2015-04-17 21:49 - 00000000 _____ () C:\Windows\setuperr.log 2015-04-15 17:33 - 2015-03-25 06:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-04-15 17:33 - 2015-03-25 06:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-04-15 17:33 - 2015-03-25 06:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-04-15 17:33 - 2015-03-25 06:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-04-15 17:33 - 2015-03-25 06:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-04-15 17:33 - 2015-03-25 06:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-04-15 17:33 - 2015-03-25 06:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-04-15 17:33 - 2015-03-25 06:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-04-15 17:33 - 2015-03-25 06:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-04-15 17:33 - 2015-03-25 06:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-04-15 17:33 - 2015-03-25 06:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-04-15 17:33 - 2015-03-25 06:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-04-15 17:33 - 2015-03-25 06:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-04-15 17:33 - 2015-03-25 06:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-04-15 17:33 - 2015-03-25 06:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-04-15 17:33 - 2015-03-25 06:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-04-15 17:33 - 2015-03-17 08:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-04-15 17:33 - 2015-03-17 08:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-04-15 17:33 - 2015-03-17 08:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-04-15 17:33 - 2015-03-17 08:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-04-15 17:33 - 2015-03-17 08:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2015-04-15 17:33 - 2015-03-17 08:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-04-15 17:33 - 2015-03-17 08:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-04-15 17:33 - 2015-03-17 08:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-04-15 17:33 - 2015-03-17 08:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2015-04-15 17:33 - 2015-03-17 08:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-04-15 17:33 - 2015-03-17 08:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-04-15 17:33 - 2015-03-17 08:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-04-15 17:33 - 2015-03-17 08:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-04-15 17:33 - 2015-03-17 08:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-04-15 17:33 - 2015-03-17 08:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-04-15 17:33 - 2015-03-17 08:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-04-15 17:33 - 2015-03-17 08:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2015-04-15 17:33 - 2015-03-17 08:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-04-15 17:33 - 2015-03-17 08:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-04-15 17:33 - 2015-03-17 08:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-04-15 17:33 - 2015-03-17 08:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-04-15 17:33 - 2015-03-17 08:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-04-15 17:33 - 2015-03-17 08:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-04-15 17:33 - 2015-03-17 08:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-04-15 17:33 - 2015-03-17 08:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-04-15 17:33 - 2015-03-17 08:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-04-15 17:33 - 2015-03-17 08:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-04-15 17:33 - 2015-03-17 08:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-04-15 17:33 - 2015-03-17 08:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-04-15 17:33 - 2015-03-17 08:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-04-15 17:33 - 2015-03-17 08:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 08:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-04-15 17:33 - 2015-03-17 08:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-04-15 17:33 - 2015-03-17 07:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-04-15 17:33 - 2015-03-17 07:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-04-15 17:33 - 2015-03-17 07:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-04-15 17:33 - 2015-03-17 07:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-04-15 17:33 - 2015-03-17 07:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-04-15 17:33 - 2015-03-17 07:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-04-15 17:33 - 2015-03-17 07:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-04-15 17:33 - 2015-03-17 07:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-04-15 17:33 - 2015-03-17 07:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-04-15 17:33 - 2015-03-17 07:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-04-15 17:33 - 2015-03-17 07:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2015-04-15 17:33 - 2015-03-17 07:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-04-15 17:33 - 2015-03-17 07:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-04-15 17:33 - 2015-03-17 07:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-04-15 17:33 - 2015-03-17 07:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-04-15 17:33 - 2015-03-17 07:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-04-15 17:33 - 2015-03-17 07:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 06:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-04-15 17:33 - 2015-03-17 06:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-04-15 17:33 - 2015-03-17 06:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 06:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 06:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-04-15 17:33 - 2015-03-17 06:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2015-04-15 17:33 - 2015-03-10 06:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2015-04-15 17:33 - 2015-03-10 06:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2015-04-15 17:33 - 2015-03-10 06:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2015-04-15 17:33 - 2015-03-10 06:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2015-04-15 17:33 - 2015-03-05 08:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-04-15 17:33 - 2015-03-05 07:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-04-15 17:32 - 2015-04-02 02:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-04-15 17:32 - 2015-03-17 08:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-04-15 17:32 - 2015-03-17 08:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-04-15 17:32 - 2015-03-17 08:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-04-15 17:32 - 2015-03-17 07:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-04-15 17:32 - 2015-03-17 07:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-04-15 17:32 - 2015-03-17 07:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-04-15 17:32 - 2015-03-13 07:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-04-15 17:32 - 2015-03-13 07:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-04-15 17:32 - 2015-03-13 06:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-04-15 17:32 - 2015-03-13 06:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-04-15 17:32 - 2015-03-13 06:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-04-15 17:32 - 2015-03-13 06:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-04-15 17:32 - 2015-03-13 06:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-04-15 17:32 - 2015-03-13 06:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-04-15 17:32 - 2015-03-13 06:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-04-15 17:32 - 2015-03-13 05:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-04-15 17:32 - 2015-03-13 05:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-04-15 17:32 - 2015-02-25 06:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2015-04-15 17:31 - 2015-04-02 03:17 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-04-15 17:31 - 2015-03-13 07:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-04-15 17:31 - 2015-03-13 07:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-04-15 17:31 - 2015-03-13 07:09 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-04-15 17:31 - 2015-03-13 07:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-04-15 17:31 - 2015-03-13 07:08 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-04-15 17:31 - 2015-03-13 07:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-04-15 17:31 - 2015-03-13 07:06 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-04-15 17:31 - 2015-03-13 07:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-04-15 17:31 - 2015-03-13 06:55 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-04-15 17:31 - 2015-03-13 06:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-04-15 17:31 - 2015-03-13 06:53 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-04-15 17:31 - 2015-03-13 06:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-04-15 17:31 - 2015-03-13 06:44 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-04-15 17:31 - 2015-03-13 06:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-04-15 17:31 - 2015-03-13 06:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-04-15 17:31 - 2015-03-13 06:40 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-04-15 17:31 - 2015-03-13 06:32 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-04-15 17:31 - 2015-03-13 06:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-04-15 17:31 - 2015-03-13 06:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-04-15 17:31 - 2015-03-13 06:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-04-15 17:31 - 2015-03-13 06:27 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-04-15 17:31 - 2015-03-13 06:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-04-15 17:31 - 2015-03-13 06:23 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-04-15 17:31 - 2015-03-13 06:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-04-15 17:31 - 2015-03-13 06:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-04-15 17:31 - 2015-03-13 06:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-04-15 17:31 - 2015-03-13 06:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-04-15 17:31 - 2015-03-13 06:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-04-15 17:31 - 2015-03-13 06:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-04-15 17:31 - 2015-03-13 06:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-04-15 17:31 - 2015-03-13 06:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-04-15 17:31 - 2015-03-13 06:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-04-15 17:31 - 2015-03-13 06:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-04-15 17:31 - 2015-03-13 05:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-04-15 17:31 - 2015-03-13 05:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-04-15 17:31 - 2015-03-13 05:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-04-15 17:31 - 2015-03-13 05:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-04-15 17:31 - 2015-03-13 05:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-04-15 17:31 - 2015-03-13 05:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-04-15 17:31 - 2015-03-13 05:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-04-15 17:31 - 2015-03-13 05:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-04-15 17:31 - 2015-03-13 05:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-04-15 17:31 - 2015-03-13 05:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-04-15 17:31 - 2015-03-13 05:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-04-15 17:31 - 2015-03-13 05:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-04-15 17:30 - 2015-03-04 07:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys 2015-04-15 17:30 - 2015-03-04 07:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll 2015-04-15 17:30 - 2015-03-04 07:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll 2015-04-14 13:23 - 2014-03-10 00:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2015-04-14 13:23 - 2014-03-10 00:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2015-04-14 13:23 - 2014-03-10 00:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe 2015-04-14 13:23 - 2014-03-10 00:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll 2015-04-14 13:22 - 2014-07-01 01:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2015-04-14 13:22 - 2014-07-01 01:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll 2015-04-14 13:21 - 2014-06-06 09:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2015-04-14 13:21 - 2014-06-06 09:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2015-04-13 10:27 - 2015-02-20 07:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2015-04-13 10:27 - 2015-02-20 07:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2015-04-13 10:27 - 2015-02-20 07:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2015-04-13 10:27 - 2015-02-20 07:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2015-04-13 10:27 - 2015-02-20 07:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2015-04-13 10:27 - 2015-02-20 07:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2015-04-13 10:27 - 2015-02-20 07:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2015-04-13 10:27 - 2015-02-20 07:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2015-04-13 10:27 - 2015-02-20 06:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2015-04-13 10:27 - 2015-02-20 06:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2015-04-13 10:27 - 2014-12-11 20:47 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2015-04-13 10:27 - 2014-04-25 05:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2015-04-13 10:27 - 2014-04-25 05:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll 2015-04-13 10:26 - 2015-02-03 06:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx 2015-04-13 10:26 - 2015-02-03 06:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll 2015-04-13 10:26 - 2015-02-03 06:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2015-04-13 10:26 - 2015-02-03 06:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe 2015-04-13 10:26 - 2015-02-03 06:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe 2015-04-13 10:26 - 2015-02-03 06:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll 2015-04-13 10:25 - 2015-02-03 06:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2015-04-13 10:25 - 2015-02-03 06:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys 2015-04-13 10:25 - 2015-02-03 06:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2015-04-13 10:25 - 2015-02-03 06:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2015-04-13 10:25 - 2015-02-03 06:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2015-04-13 10:25 - 2015-02-03 06:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2015-04-13 10:25 - 2015-02-03 06:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll 2015-04-13 10:25 - 2015-02-03 06:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll 2015-04-13 10:25 - 2015-02-03 06:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2015-04-13 10:25 - 2015-02-03 06:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2015-04-13 10:25 - 2015-02-03 06:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2015-04-13 10:25 - 2015-02-03 06:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll 2015-04-13 10:25 - 2015-02-03 06:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2015-04-13 10:25 - 2015-02-03 06:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2015-04-13 10:25 - 2015-02-03 06:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll 2015-04-13 10:25 - 2015-02-03 06:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2015-04-13 10:25 - 2015-02-03 06:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll 2015-04-13 10:25 - 2015-02-03 06:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll 2015-04-13 10:25 - 2015-02-03 06:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll 2015-04-13 10:25 - 2015-02-03 06:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx 2015-04-13 10:25 - 2015-02-03 06:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll 2015-04-13 10:25 - 2015-02-03 06:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2015-04-13 10:25 - 2015-02-03 06:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-04-13 10:25 - 2015-02-03 06:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll 2015-04-13 10:25 - 2015-02-03 06:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll 2015-04-13 10:25 - 2015-02-03 06:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll 2015-04-13 10:25 - 2015-02-03 06:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2015-04-13 10:25 - 2015-02-03 06:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2015-04-13 10:25 - 2015-02-03 06:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll 2015-04-13 10:25 - 2015-02-03 06:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2015-04-13 10:25 - 2015-02-03 06:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2015-04-13 10:25 - 2015-02-03 06:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2015-04-13 10:25 - 2015-02-03 06:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2015-04-13 10:25 - 2015-02-03 06:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2015-04-13 10:25 - 2015-02-03 06:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2015-04-13 10:25 - 2015-02-03 06:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2015-04-13 10:25 - 2015-02-03 06:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll 2015-04-13 10:25 - 2015-02-03 06:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2015-04-13 10:25 - 2015-02-03 06:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2015-04-13 10:25 - 2015-02-03 06:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2015-04-13 10:25 - 2015-02-03 06:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2015-04-13 10:25 - 2015-02-03 06:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2015-04-13 10:25 - 2015-02-03 06:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe 2015-04-13 10:25 - 2015-02-03 06:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe 2015-04-13 10:25 - 2015-02-03 06:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll 2015-04-13 10:25 - 2015-02-03 06:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2015-04-13 10:25 - 2015-02-03 06:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys 2015-04-13 10:25 - 2015-02-03 05:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2015-04-13 10:25 - 2014-11-01 01:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2015-04-13 10:25 - 2014-06-28 03:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2015-04-13 10:25 - 2014-06-28 03:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2015-04-13 10:24 - 2014-12-19 06:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2015-04-13 10:24 - 2014-06-19 01:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll 2015-04-13 10:24 - 2014-06-19 01:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll 2015-04-13 10:24 - 2014-06-19 01:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll 2015-04-13 10:24 - 2014-06-19 01:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll 2015-04-13 10:24 - 2014-06-19 01:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll 2015-04-13 10:24 - 2014-06-19 01:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll 2015-04-13 10:22 - 2014-04-05 05:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2015-04-13 10:22 - 2014-04-05 05:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2015-04-13 10:22 - 2014-01-29 05:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2015-04-13 10:22 - 2014-01-29 05:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2015-04-13 10:22 - 2013-11-26 14:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2015-04-13 10:22 - 2013-10-19 05:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2015-04-13 10:22 - 2013-10-19 04:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2015-04-13 10:21 - 2014-10-14 05:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2015-04-13 10:20 - 2014-12-06 07:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2015-04-13 10:20 - 2014-12-06 06:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll 2015-04-13 10:20 - 2014-12-06 06:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2015-04-13 10:20 - 2014-03-26 17:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2015-04-13 10:20 - 2014-03-26 17:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2015-04-13 10:20 - 2014-03-26 17:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2015-04-13 10:20 - 2014-03-26 17:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2015-04-13 10:19 - 2015-02-13 08:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2015-04-13 10:19 - 2015-02-13 08:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-04-13 10:19 - 2015-02-03 06:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll 2015-04-13 10:19 - 2015-02-03 06:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll 2015-04-13 10:19 - 2014-12-19 04:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2015-04-13 10:19 - 2014-06-18 05:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2015-04-13 10:19 - 2014-06-18 04:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2015-04-13 10:19 - 2014-06-06 13:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2015-04-13 10:19 - 2014-06-06 12:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2015-04-13 10:19 - 2014-05-30 09:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2015-04-13 10:19 - 2013-11-27 04:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2015-04-13 10:19 - 2013-11-27 04:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2015-04-13 10:19 - 2013-11-27 04:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2015-04-13 10:19 - 2013-11-27 04:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2015-04-13 10:19 - 2013-11-27 04:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2015-04-13 10:19 - 2013-11-27 04:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2015-04-13 10:19 - 2013-11-27 04:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2015-04-13 10:19 - 2013-10-04 05:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2015-04-13 10:19 - 2013-10-04 04:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2015-04-13 10:18 - 2014-06-03 13:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-04-13 10:18 - 2014-06-03 13:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-04-13 10:18 - 2014-06-03 13:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2015-04-13 10:18 - 2014-06-03 13:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2015-04-13 10:18 - 2014-06-03 12:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2015-04-13 10:18 - 2014-06-03 12:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2015-04-13 10:18 - 2014-06-03 12:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2015-04-13 10:17 - 2014-03-04 12:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2015-04-13 10:17 - 2014-03-04 12:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2015-04-13 10:17 - 2014-03-04 12:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2015-04-13 10:17 - 2014-03-04 12:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2015-04-13 10:17 - 2014-03-04 12:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2015-04-13 10:17 - 2014-03-04 12:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2015-04-13 10:17 - 2014-03-04 12:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2015-04-13 10:17 - 2014-03-04 12:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2015-04-13 10:17 - 2014-03-04 12:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2015-04-13 10:17 - 2014-03-04 12:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2015-04-13 10:17 - 2014-03-04 12:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2015-04-13 10:17 - 2014-03-04 12:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2015-04-13 10:17 - 2014-03-04 12:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2015-04-13 10:17 - 2014-03-04 12:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2015-04-13 10:16 - 2014-08-12 05:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL 2015-04-13 10:16 - 2014-08-12 04:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL 2015-04-13 10:16 - 2014-06-16 05:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2015-04-13 10:16 - 2013-12-25 02:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2015-04-13 10:16 - 2013-12-25 01:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2015-04-13 10:16 - 2013-11-26 11:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2015-04-13 10:16 - 2013-11-23 01:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2015-04-13 10:15 - 2015-01-31 02:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-04-13 10:15 - 2014-11-11 05:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll 2015-04-13 10:14 - 2015-01-17 05:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2015-04-13 10:14 - 2015-01-17 05:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll 2015-04-13 10:14 - 2014-11-11 06:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2015-04-13 10:14 - 2014-09-04 08:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2015-04-13 10:14 - 2014-09-04 08:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll 2015-04-13 10:13 - 2015-02-03 06:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2015-04-13 10:13 - 2015-02-03 06:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2015-04-13 10:12 - 2014-10-25 04:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2015-04-13 10:12 - 2014-10-25 04:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2015-04-13 10:12 - 2014-07-17 04:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll 2015-04-13 10:12 - 2014-07-17 04:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2015-04-13 10:12 - 2014-07-17 04:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2015-04-13 10:12 - 2014-07-17 04:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll 2015-04-13 10:11 - 2014-07-17 05:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2015-04-13 10:11 - 2014-07-17 05:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2015-04-13 10:11 - 2014-07-17 05:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2015-04-13 10:11 - 2014-07-17 05:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll 2015-04-13 10:11 - 2014-07-17 05:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2015-04-13 10:11 - 2014-07-17 04:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2015-04-13 10:11 - 2014-07-17 04:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2015-04-13 10:10 - 2015-02-26 06:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-04-13 10:10 - 2014-12-08 06:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2015-04-13 10:10 - 2014-12-08 05:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll 2015-04-13 10:09 - 2013-10-12 05:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2015-04-13 10:09 - 2013-10-12 05:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2015-04-13 10:09 - 2013-10-12 05:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2015-04-13 10:09 - 2013-10-12 05:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2015-04-13 10:09 - 2013-10-12 04:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2015-04-13 10:09 - 2013-10-12 04:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2015-04-13 10:09 - 2013-10-12 04:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2015-04-13 10:09 - 2013-10-12 04:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2015-04-13 10:08 - 2014-10-18 05:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2015-04-13 10:08 - 2014-10-18 04:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2015-04-13 10:06 - 2015-02-04 06:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2015-04-13 10:06 - 2015-02-04 05:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2015-04-13 10:06 - 2014-07-14 05:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-04-13 10:06 - 2014-07-14 04:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-04-11 22:41 - 2015-04-12 20:48 - 00001303 ____C () C:\autoupdate.log 2015-04-11 19:19 - 2015-04-11 19:19 - 00003170 _____ () C:\Windows\System32\Tasks\Razer_Game_Booster_AutoUpdate 2015-04-11 19:17 - 2015-04-11 19:17 - 00000000 ____D () C:\Users\Alex\AppData\Local\Razer 2015-04-08 23:17 - 2015-04-12 00:29 - 00000000 ____D () C:\Users\Alex\Downloads\As Above So Below 2014 BRRip XviD AC3-GiANGi 2015-04-08 17:35 - 2015-04-08 17:35 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online 2015-04-06 22:48 - 2015-04-06 22:48 - 00000000 ____D () C:\Users\Alex\AppData\Local\UsernameScraper 2015-04-06 13:23 - 2015-04-06 13:23 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft 2015-04-05 19:17 - 2015-04-18 19:49 - 00000000 ____D () C:\ProgramData\Datamngr 2015-04-04 17:37 - 2008-12-24 23:43 - 00000583 _____ () C:\Users\Alex\Desktop\Shortcut to s3tdl.lnk 2015-04-01 23:04 - 2015-04-07 18:52 - 00000000 ____D () C:\Users\Alex\AppData\Local\Math Problem Solver 2015-04-01 23:04 - 2015-04-01 23:04 - 00003266 _____ () C:\Windows\System32\Tasks\Math Problem Solver CPU 2015-04-01 23:03 - 2015-04-01 23:03 - 00003326 _____ () C:\Windows\System32\Tasks\SidebarExecute 2015-04-01 23:02 - 2015-04-01 23:17 - 00030352 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys 2015-04-01 23:00 - 2015-04-18 19:49 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 2015-04-01 22:00 - 2015-04-18 20:00 - 00001318 _____ () C:\Windows\Tasks\fun_coupons_notification_service.job 2015-04-01 22:00 - 2015-04-18 19:49 - 00000680 _____ () C:\Windows\Tasks\fun_coupons_updating_service.job 2015-04-01 22:00 - 2015-04-01 22:00 - 00004336 _____ () C:\Windows\System32\Tasks\fun_coupons_notification_service 2015-04-01 22:00 - 2015-04-01 22:00 - 00003700 _____ () C:\Windows\System32\Tasks\fun_coupons_updating_service 2015-04-01 22:00 - 2015-04-01 22:00 - 00000000 ____D () C:\Program Files (x86)\fun coupons 2015-03-31 18:16 - 2015-03-31 18:16 - 00000000 ____D () C:\Users\Alex\Desktop\runtime 2015-03-31 18:15 - 2015-03-31 18:16 - 00000000 ____D () C:\Users\Alex\Desktop\game 2015-03-31 17:57 - 2015-04-14 21:31 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\.minecraft 2015-03-31 17:56 - 2015-03-31 17:56 - 01294088 _____ (Mojang) C:\Users\Alex\Desktop\Minecraft.exe 2015-03-29 23:06 - 2015-03-29 23:06 - 00000000 _____ () C:\Users\Alex\Desktop\LK.txt 2015-03-26 20:23 - 2015-03-26 20:23 - 00000000 ____D () C:\ProgramData\Package Cache 2015-03-26 20:19 - 2015-03-26 20:19 - 00001534 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk 2015-03-26 20:09 - 2015-03-28 22:01 - 00000000 ____D () C:\Program Files\Adobe 2015-03-26 19:04 - 2015-03-26 19:04 - 00000000 ____D () C:\ProgramData\Macrovision 2015-03-24 19:25 - 2015-03-24 19:25 - 05033196 _____ () C:\Users\Alex\AppData\Roaming\Nodus.exe 2015-03-24 18:59 - 2015-03-24 18:59 - 00000000 _____ () C:\Users\Alex\AppData\Local\{3399808B-047B-457A-8CF1-3174F9060776} 2015-03-20 14:29 - 2015-03-20 14:29 - 00000000 _____ () C:\Users\Alex\AppData\Local\{61C5ED79-C78C-482F-B096-7410397FC35F} ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-18 20:11 - 2012-12-23 19:20 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\uTorrent 2015-04-18 20:11 - 2009-07-14 07:45 - 00015184 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-04-18 20:11 - 2009-07-14 07:45 - 00015184 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-04-18 19:55 - 2014-07-14 09:55 - 00001440 _____ () C:\Windows\Tasks\510acaa5-1572-4a90-a2e3-bc2e22a40657-7.job 2015-04-18 19:53 - 2014-03-11 19:31 - 01467913 _____ () C:\Windows\WindowsUpdate.log 2015-04-18 19:52 - 2012-12-23 21:03 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Skype 2015-04-18 19:51 - 2012-12-23 19:56 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2015-04-18 19:50 - 2014-07-14 09:56 - 00000000 ____D () C:\Program Files\PCDApp 2015-04-18 19:50 - 2014-07-14 09:55 - 00002760 _____ () C:\Windows\Tasks\510acaa5-1572-4a90-a2e3-bc2e22a40657-3.job 2015-04-18 19:49 - 2014-07-14 09:56 - 00001436 _____ () C:\Windows\Tasks\510acaa5-1572-4a90-a2e3-bc2e22a40657-5_user.job 2015-04-18 19:49 - 2014-07-14 09:56 - 00001416 _____ () C:\Windows\Tasks\510acaa5-1572-4a90-a2e3-bc2e22a40657-5.job 2015-04-18 19:49 - 2014-07-14 09:56 - 00001252 _____ () C:\Windows\Tasks\510acaa5-1572-4a90-a2e3-bc2e22a40657-10.job 2015-04-18 19:49 - 2014-07-14 09:55 - 00002166 _____ () C:\Windows\Tasks\510acaa5-1572-4a90-a2e3-bc2e22a40657-4.job 2015-04-18 19:49 - 2014-07-14 09:55 - 00001498 _____ () C:\Windows\Tasks\510acaa5-1572-4a90-a2e3-bc2e22a40657-6.job 2015-04-18 19:49 - 2014-07-14 09:55 - 00001498 _____ () C:\Windows\Tasks\510acaa5-1572-4a90-a2e3-bc2e22a40657-1.job 2015-04-18 19:49 - 2014-07-14 09:55 - 00000932 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job 2015-04-18 19:49 - 2014-07-14 09:55 - 00000566 _____ () C:\Windows\Tasks\510acaa5-1572-4a90-a2e3-bc2e22a40657-11.job 2015-04-18 19:49 - 2014-07-14 09:49 - 00000356 _____ () C:\Windows\Tasks\AmiUpdXp.job 2015-04-18 19:49 - 2013-03-30 22:13 - 00000374 _____ () C:\Windows\Tasks\SmartPCFix Task.job 2015-04-18 19:49 - 2012-12-23 19:35 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-04-18 19:49 - 2009-07-14 08:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-04-18 19:31 - 2012-12-23 19:35 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-04-18 10:20 - 2014-10-19 12:15 - 00002239 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2015-04-18 10:15 - 2014-07-14 09:55 - 00000936 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job 2015-04-17 21:47 - 2013-03-17 20:36 - 00000000 ____D () C:\Users\Alex\AppData\Local\CrashDumps 2015-04-14 20:28 - 2009-07-14 08:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2015-04-14 20:28 - 2009-07-14 07:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2015-04-14 20:21 - 2014-02-08 16:55 - 00267672 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-04-14 20:18 - 2009-07-14 10:12 - 00000000 ____D () C:\Program Files\Windows Journal 2015-04-14 20:18 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2015-04-14 20:18 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\system32\Dism 2015-04-14 20:17 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2015-04-13 18:48 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\rescache 2015-04-13 18:37 - 2009-07-14 08:08 - 00032646 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2015-04-13 17:57 - 2012-12-23 21:02 - 00000000 ____D () C:\ProgramData\Skype 2015-04-12 21:07 - 2014-02-23 10:27 - 00035708 _____ () C:\Windows\PFRO.log 2015-04-12 20:06 - 2014-07-14 09:55 - 00000000 ____D () C:\Program Files (x86)\HD-V1.9 2015-04-10 18:10 - 2013-05-27 21:21 - 00000228 _____ () C:\Users\Alex\Desktop\New Text Document.txt 2015-04-08 17:35 - 2014-07-07 13:35 - 00001972 _____ () C:\Users\Alex\Desktop\Drakensang Online.lnk 2015-04-08 17:35 - 2014-02-17 22:12 - 00000000 ____D () C:\Program Files (x86)\Drakensang Online 2015-04-07 18:53 - 2014-11-23 14:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-04-07 18:53 - 2014-03-23 10:34 - 00002697 _____ () C:\Users\Public\Desktop\Skype.lnk 2015-04-01 23:22 - 2013-02-20 16:44 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2015-04-01 23:18 - 2014-04-11 19:26 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\DAEMON Tools Lite 2015-03-28 22:02 - 2013-06-11 20:53 - 00000000 ____D () C:\Program Files\Common Files\Adobe 2015-03-28 22:02 - 2012-12-24 10:28 - 00000000 ____D () C:\Program Files (x86)\Adobe 2015-03-26 20:46 - 2012-12-24 00:07 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Adobe 2015-03-26 20:45 - 2012-12-24 10:33 - 00000000 ____D () C:\Users\Alex\AppData\Local\Adobe 2015-03-26 19:06 - 2012-12-23 21:20 - 00000000 ____D () C:\ProgramData\Adobe ==================== Files in the root of some directories ======= 2013-12-12 18:56 - 2013-12-12 19:35 - 0002327 _____ () C:\Users\Alex\AppData\Roaming\LiveSupport.exe_log.txt 2015-03-24 19:25 - 2015-03-24 19:25 - 5033196 _____ () C:\Users\Alex\AppData\Roaming\Nodus.exe 2013-12-12 18:56 - 2013-12-12 19:35 - 0000092 _____ () C:\Users\Alex\AppData\Roaming\regsvr32.exe_log.txt 2013-02-26 17:51 - 2013-02-26 17:54 - 0033134 _____ () C:\Users\Alex\AppData\Roaming\UserTile.png 2015-03-24 18:59 - 2015-03-24 18:59 - 0000000 _____ () C:\Users\Alex\AppData\Local\{3399808B-047B-457A-8CF1-3174F9060776} 2014-05-10 17:14 - 2014-05-10 17:14 - 0000000 _____ () C:\Users\Alex\AppData\Local\{3CF7BF87-991D-47D9-93CE-821B2A458A42} 2015-03-20 14:29 - 2015-03-20 14:29 - 0000000 _____ () C:\Users\Alex\AppData\Local\{61C5ED79-C78C-482F-B096-7410397FC35F} ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2013-11-28 00:14 ==================== End Of Log ============================ И ако може да ми кажете как да къча Addition
  17. Здравейте! Реших да направя едно контролно сканиране за вируси понеже отдавна PC-то не е проверявано. Ето лога от FRST.txt Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2015 Ran by USER (administrator) on USER-PC on 02-02-2015 12:14:28 Running from C:\Users\USER\Desktop Loaded Profiles: USER (Available profiles: USER) Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States) Internet Explorer Version 10 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe () D:\Install\Testing Tools\quietHDD\quietHDD.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Fork, Ltd.) C:\Windows\Prey\wpxsvc.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe (ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe (Joyent, Inc) C:\Windows\Prey\versions\1.3.6\bin\node.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe (Fork, Ltd.) C:\Windows\Prey\versions\1.3.6\node_modules\triggers\bin\lightevt.exe (HP) C:\Windows\System32\HPSIsvc.exe (Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5595336 2014-10-01] (ESET) HKLM-x32\...\Run: [uSB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-27] (Intel Corporation) HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [322432 2012-04-04] (Hewlett-Packard Company) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [btTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [387832 2013-05-14] (IVT Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2316775370-2964681540-2297035872-1000\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30872672 2014-12-11] (Skype Technologies S.A.) HKU\S-1-5-21-2316775370-2964681540-2297035872-1000\...\MountPoints2: F - F:\SISetup.exe HKU\S-1-5-21-2316775370-2964681540-2297035872-1000\...\MountPoints2: {947222fa-a1c7-11e2-80e6-b4b52f788ef4} - F:\setup.exe AppInit_DLLs: C:\Windows\Jaksta\AC\x64\jaudcap.dll => C:\Windows\Jaksta\AC\x64\jaudcap.dll [311584 2014-05-16] (Jaksta Technologies Pty Ltd) Startup: C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\quietHDD.lnk ShortcutTarget: quietHDD.lnk -> D:\Install\Testing Tools\quietHDD\quietHDD.exe () ShellIconOverlayIdentifiers: [shareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) ShellIconOverlayIdentifiers-x32: [ MailRuCloudIconOverlay0] -> {64A9418A-B6B1-4112-B75C-E61633C9A31F} => No File ShellIconOverlayIdentifiers-x32: [ MailRuCloudIconOverlay1] -> {6A2E142B-EA63-433A-AC05-5223CBD26E65} => No File ShellIconOverlayIdentifiers-x32: [ MailRuCloudIconOverlay2] -> {6AFCC535-2F12-4F50-9F0A-1CF856CFC95D} => No File ShellIconOverlayIdentifiers-x32: [shareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyServer: [s-1-5-21-2316775370-2964681540-2297035872-1000] => https=127.0.0.1:54745 HKU\S-1-5-21-2316775370-2964681540-2297035872-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.bg/ HKU\S-1-5-21-2316775370-2964681540-2297035872-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp SearchScopes: HKU\S-1-5-21-2316775370-2964681540-2297035872-1000 -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{3D41CC7B-1CA0-4A34-B378-EF83D183B83F}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{42A1B73C-2FD5-4744-A1AC-DD4C68DBB756}: [NameServer] 8.8.8.8,8.8.4.4 FireFox: ======== FF ProfilePath: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\mluugfdi.default FF NewTab: google.bg FF Homepage: hxxp://www.google.bg/ FF Keyword.URL: https://www.google.com/search?q= FF NetworkProxy: "backup.ftp", "127.0.0.1" FF NetworkProxy: "backup.ftp_port", 9050 FF NetworkProxy: "backup.socks", "127.0.0.1" FF NetworkProxy: "backup.socks_port", 9050 FF NetworkProxy: "backup.ssl", "127.0.0.1" FF NetworkProxy: "backup.ssl_port", 9050 FF NetworkProxy: "ftp", "127.0.0.1" FF NetworkProxy: "ftp_port", 9050 FF NetworkProxy: "no_proxies_on", "" FF NetworkProxy: "share_proxy_settings", true FF NetworkProxy: "socks", "127.0.0.1" FF NetworkProxy: "socks_port", 9050 FF NetworkProxy: "ssl", "127.0.0.1" FF NetworkProxy: "ssl_port", 9050 FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll () FF Plugin: @java.com/DTPlugin,version=10.15.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\SysWOW64\npDeployJava1.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File FF user.js: detected! => C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\mluugfdi.default\user.js FF Extension: WOT - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\mluugfdi.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-26] FF Extension: DownloadHelper - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\mluugfdi.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-12-31] FF Extension: Classic Theme Restorer - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\mluugfdi.default\Extensions\ClassicThemeRestorer@ArisT2Noia4dev.xpi [2014-06-06] FF Extension: Awesome screenshot: Capture and Annotate - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\mluugfdi.default\Extensions\jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi [2014-09-19] FF Extension: Status-4-Evar - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\mluugfdi.default\Extensions\status4evar@caligonstudios.com.xpi [2013-02-03] FF Extension: Downloads Window - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\mluugfdi.default\Extensions\{a7213cf2-fa1e-4373-88ff-255d0abd3020}.xpi [2013-12-22] FF Extension: Download YouTube Videos as MP4 - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\mluugfdi.default\Extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi [2014-11-06] FF Extension: Adblock Plus - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\mluugfdi.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-07] FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1630456 2013-06-07] (IVT Corporation) R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [145656 2013-05-14] (IVT Corporation) R2 CronService; C:\Windows\Prey\wpxsvc.exe [611854 2015-01-25] (Fork, Ltd.) [File not signed] R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1349576 2014-10-01] (ESET) R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [368512 2012-04-04] (Hewlett-Packard Company) S2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [165144 2012-03-28] (Intel Corporation) S4 NetMsmqActivator; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139680 2012-07-08] (Microsoft Corporation) [File not signed] S4 NetPipeActivator; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139680 2012-07-08] (Microsoft Corporation) [File not signed] S4 NetTcpActivator; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139680 2012-07-08] (Microsoft Corporation) [File not signed] S4 NetTcpPortSharing; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139680 2012-07-08] (Microsoft Corporation) [File not signed] S4 STacSV; C:\Program Files\IDT\WDM\stacsv64.exe [323072 2012-09-20] (IDT, Inc.) [File not signed] S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [33968 2012-12-19] (IVT Corporation) R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation) R0 BtHidBus; C:\Windows\System32\Drivers\BtHidBus.sys [24840 2009-01-07] (IVT Corporation.) S3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [54064 2013-04-26] (Ralink Corporation) S3 btnetBUs; C:\Windows\System32\Drivers\btnetBus.sys [35848 2008-12-07] () S3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [49584 2013-03-25] (Ralink Corporation) R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-09-19] (Disc Soft Ltd) R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [243440 2014-10-10] (ESET) U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [241368 2014-10-10] (ESET) R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [169280 2014-10-10] (ESET) R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [222280 2014-10-10] (ESET) R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44632 2014-10-10] (ESET) R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [63160 2014-10-10] (ESET) S1 ISODrive; C:\Windows\SysWOW64\Drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.) S3 IvtBtBUs; C:\Windows\System32\Drivers\IvtBtBus.sys [31624 2008-07-02] (IVT Corporation.) S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [19968 2012-11-08] (Marvell Semiconductor, Inc.) R3 rtbth; C:\Windows\System32\DRIVERS\rtbth.sys [1162952 2013-07-13] (Ralink Technology, Corp.) R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1864328 2012-10-03] () U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] () U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [33968 2012-12-19] (IVT Corporation) S3 BT; system32\DRIVERS\btnetdrv.sys [X] S3 BTCOM; system32\DRIVERS\btcomport.sys [X] S3 BTCOMBUS; System32\Drivers\btcombus.sys [X] S3 NSNDIS5; \??\C:\Windows\system32\NSNDIS5.SYS [X] S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [X] S3 VComm; system32\DRIVERS\VComm.sys [X] S3 VcommMgr; System32\Drivers\VcommMgr.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-02 12:14 - 2015-02-02 12:14 - 00013848 _____ () C:\Users\USER\Desktop\FRST.txt 2015-02-02 12:14 - 2015-02-02 12:14 - 00000000 ____D () C:\FRST 2015-02-02 12:13 - 2015-02-02 12:13 - 02131456 _____ (Farbar) C:\Users\USER\Desktop\FRST64.exe 2015-02-02 11:37 - 2015-02-02 11:50 - 00000112 _____ () C:\Windows\setupact.log 2015-02-02 11:37 - 2015-02-02 11:37 - 00000000 _____ () C:\Windows\setuperr.log 2015-02-02 11:36 - 2015-02-02 11:37 - 00288904 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-02-01 15:48 - 2015-02-01 15:48 - 00001300 _____ () C:\Users\USER\Desktop\CamStudio.lnk 2015-02-01 15:22 - 2015-02-01 15:46 - 00000000 ____D () C:\Users\USER\Documents\My CamStudio Temp Files 2015-02-01 15:20 - 2015-02-01 15:49 - 00000096 _____ () C:\Users\USER\AppData\Roaming\version2.xml 2015-01-28 20:10 - 2015-01-28 20:10 - 00000000 _____ () C:\Users\USER\Desktop\vtornik 3.02.15 - 9.30.txt 2015-01-26 23:06 - 2015-01-26 23:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-01-25 17:47 - 2015-01-25 17:47 - 00000000 ____D () C:\Users\USER\AppData\Roaming\Macromedia 2015-01-25 17:47 - 2015-01-25 17:47 - 00000000 ____D () C:\Users\USER\AppData\Local\Macromedia 2015-01-25 17:42 - 2015-01-25 17:42 - 00001058 _____ () C:\Users\Public\Desktop\BurnAware.lnk 2015-01-25 17:42 - 2015-01-25 17:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BurnAware Free 2015-01-25 17:42 - 2015-01-25 17:42 - 00000000 ____D () C:\Program Files (x86)\BurnAware Free 2015-01-25 17:37 - 2015-02-02 11:55 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-01-25 17:37 - 2015-01-26 10:07 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-01-25 17:37 - 2015-01-25 17:38 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-01-25 17:37 - 2015-01-25 17:38 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-01-23 21:36 - 2015-01-23 22:06 - 00000000 ___RD () C:\Program Files (x86)\Winamp 2015-01-23 21:36 - 2015-01-23 21:37 - 00001061 _____ () C:\Users\Public\Desktop\Winamp.lnk 2015-01-23 21:36 - 2015-01-23 21:36 - 00001013 _____ () C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp.lnk 2015-01-05 21:15 - 2015-01-05 21:15 - 00000000 ____D () C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WMV9 VCM 2015-01-05 21:15 - 2015-01-05 21:15 - 00000000 ____D () C:\Program Files\WMV9_VCM ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-02 12:15 - 2014-12-31 14:19 - 00000000 ____D () C:\Users\USER\AppData\Roaming\Skype 2015-02-02 11:58 - 2009-07-14 06:45 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-02-02 11:58 - 2009-07-14 06:45 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-02-02 11:56 - 2009-07-14 07:13 - 00785302 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-02-02 11:52 - 2014-06-06 23:25 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-02-02 11:50 - 2013-09-13 16:20 - 00001017 _____ () C:\Windows\SysWOW64\bscs.ini 2015-02-02 11:50 - 2013-03-07 11:42 - 00000990 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-02-02 11:50 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-02 11:47 - 2013-03-07 11:42 - 00000994 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-02-02 11:46 - 2014-06-06 16:38 - 00003620 _____ () C:\Windows\SysWOW64\LOCALSERVICE.INI 2015-02-02 11:46 - 2014-06-06 16:38 - 00000043 _____ () C:\Windows\SysWOW64\LOCALDEVICE.INI 2015-02-02 11:30 - 2014-06-06 15:53 - 00000000 ____D () C:\Users\USER\AppData\Roaming\uTorrent 2015-02-02 00:24 - 2013-11-26 22:18 - 00000000 ____D () C:\Users\USER\AppData\Roaming\vlc 2015-01-26 16:20 - 2014-11-30 15:30 - 00001349 _____ () C:\Users\USER\Desktop\CCleaner.lnk 2015-01-26 09:17 - 2009-07-14 07:08 - 00032646 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2015-01-25 17:49 - 2014-12-31 14:12 - 00000000 ____D () C:\Windows\Prey 2015-01-25 17:45 - 2014-10-29 16:20 - 00000236 _____ () C:\Users\USER\AppData\Roaming\burnaware.ini 2015-01-25 17:42 - 2014-12-31 13:17 - 00000000 ____D () C:\ProgramData\Martau 2015-01-25 17:37 - 2013-03-28 20:01 - 00000000 ____D () C:\Windows\SysWOW64\Macromed 2015-01-25 17:30 - 2014-06-06 20:47 - 00000812 _____ () C:\Users\USER\Desktop\µTorrent.lnk 2015-01-25 17:30 - 2014-06-06 20:47 - 00000792 _____ () C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2015-01-24 15:40 - 2012-12-29 22:34 - 00000000 ____D () C:\Users\USER\AppData\Roaming\Thinstall 2015-01-23 23:11 - 2012-12-30 00:56 - 00000000 ____D () C:\ProgramData\TEMP 2015-01-10 11:07 - 2014-11-03 20:17 - 00004096 _____ () C:\Users\USER\AppData\Local\keyfile3.drm 2015-01-08 18:04 - 2014-09-19 16:02 - 00000000 ____D () C:\Users\USER\AppData\Roaming\DAEMON Tools Lite ==================== Files in the root of some directories ======= 2014-10-29 16:20 - 2015-01-25 17:45 - 0000236 _____ () C:\Users\USER\AppData\Roaming\burnaware.ini 2015-02-01 15:20 - 2015-02-01 15:49 - 0000096 _____ () C:\Users\USER\AppData\Roaming\version2.xml 2013-04-18 15:40 - 2013-04-26 13:00 - 0007168 _____ () C:\Users\USER\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-11-03 20:17 - 2015-01-10 11:07 - 0004096 _____ () C:\Users\USER\AppData\Local\keyfile3.drm 2013-02-05 23:18 - 2013-02-05 23:18 - 0000001 _____ () C:\Users\USER\AppData\Local\llftool.4.25.agreement 2013-02-18 20:48 - 2013-02-18 20:48 - 0007650 _____ () C:\Users\USER\AppData\Local\Resmon.ResmonCfg 2014-12-31 10:34 - 2014-12-31 10:34 - 0000016 _____ () C:\ProgramData\mntemp ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-01-24 19:24 ==================== End Of Log ============================ Ето и от Addition.txt Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-02-2015 Ran by USER at 2015-02-02 12:15:10 Running from C:\Users\USER\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: ESET Smart Security 8.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: ESET Smart Security 8.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834} FW: Лична защитна стена на ESET (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-2316775370-2964681540-2297035872-1000\...\uTorrent) (Version: 3.4.2.38397 - BitTorrent Inc.) Adobe Flash Player 16.0.0.296 for Internet Explorer (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.296 - Adobe Systems Incorporated) Adobe Flash Player 16.0.0.296 for Mozilla Firefox (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated) BurnAware Free 7.8 (HKLM-x32\...\BurnAware Free_is1) (Version: - Burnaware) Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft) Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6514.5001 - Microsoft Corporation) DAEMON Tools Lite 4.49.1.0356 (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) doPDF 7.3 Build 393 (HKLM\...\doPDF 7 printer_is1) (Version: 7.3.393 - Softland) ESET Smart Security (HKLM\...\{4E84B341-680E-43B9-A016-CBF11DDC1049}) (Version: 8.0.304.1 - ESET, spol s r. o.) Foxit PhantomPDF (HKLM\...\{8FBFCE1E-C0AD-4FB6-A1B9-674613748597}) (Version: 5.2.1.615 - Foxit Corporation) Google Update Helper (x32 Version: 1.3.21.135 - Google Inc.) Hidden High Quality Photo Resizer 3.0 (HKLM-x32\...\High Quality Photo Resizer_is1) (Version: - Naturpic Software) HP 3D DriveGuard (HKLM\...\{C35A147C-5037-443A-9BF8-A5E7C2154CE4}) (Version: 5.1.7.1 - Hewlett-Packard Company) HP HD Webcam Driver (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 6.0.1112.2_WHQL - Sonix) HP Hotkey Support (HKLM-x32\...\{C97CC14E-4789-4FC5-BC75-79191F7CE009}) (Version: 4.5.12.1 - Hewlett-Packard Company) HP LaserJet Professional M1130-M1210 MFP Series (HKLM\...\HP LaserJet Professional M1130-M1210 MFP Series) (Version: - ) IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6428.0 - IDT) Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.10.1464 - Intel Corporation) Intel® OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: - Intel Corporation) Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation) Intel® Turbo Boost Technology Monitor 2.6 (HKLM\...\{6C9365EB-1F9E-4893-9196-3EC77C88D0C5}) (Version: 2.6.2.0 - Intel) Intel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.225 - Intel Corporation) JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.72.4 - JMicron Technology Corp.) KeyControl v1.02 (HKLM-x32\...\KeyControl) (Version: - ) Malwarebytes Anti-Malware 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation) Mediatek Bluetooth (HKLM\...\{A9409290-2A97-8735-93A3-DF710B1F44B0}) (Version: 11.0.742.0 - Mediatek) Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation) Microsoft Office 2003 Proofing Tools (HKLM-x32\...\{901F0409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.5614.0 - Microsoft Corporation) Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.5614.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Windows Media Video 9 VCM (HKLM-x32\...\WMV9_VCM) (Version: - ) Mozilla Firefox 35.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 en-US)) (Version: 35.0.1 - Mozilla) Prey Anti-Theft (x32 Version: 1.3.6 - Prey, Inc.) Hidden Ralink RT3290 802.11bgn Wi-Fi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 5.0.2.0 - Ralink) Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 7.58.411.2012 - Realtek) Scan To (HKLM\...\{E8A34AC8-0137-4515-A94B-0A0946DDC251}) (Version: 2.0.1 - HP) Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.) Streamripper Plugin 1.62.2 (HKLM-x32\...\Streamripper.Plugin) (Version: - ) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.0.3.0 - Synaptics Incorporated) Teamviewer 7.0.14563.0 (HKLM-x32\...\TeamViewer 7) (Version: 7.0.14563 - TeamViewer) Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb) Winamp Pro 5.666 Build 3516 (HKLM-x32\...\Winamp_is1) (Version: 5.66 Build 3516 - l-rePack®) Windows Movie Maker 2.6 (HKLM-x32\...\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}) (Version: 2.6.4037.0 - Microsoft Corporation) WinRAR 5.11 (64-битова версия) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= ATTENTION: System Restore is disabled. ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2014-12-31 11:43 - 00000923 ____R C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 ursoftware.com 127.0.0.1 www.ursoftware.com 127.0.0.1 www.martau.com ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {1B029E70-7038-4428-BBDF-0C3C8B51A3F3} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {7DDA1AC3-2D59-4CD5-82D1-E512C8CB0DBD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: {A1E6B2AD-1700-438F-9F24-A8E81B743FFE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-25] (Adobe Systems Incorporated) Task: {B151D2D2-45F3-4918-B0CE-52258596D04D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: {FF0EB138-88BB-47BD-B1E4-30441289A378} - System32\Tasks\{B2AA4A6B-D6FD-400E-9C85-520FF4CC53C8} => Firefox.exe http://ui.skype.com/ui/0/6.22.64.107/bg/abandoninstall?source=lightinstaller&amp;page=tsMain Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-05-14 16:33 - 2013-05-14 16:33 - 00029432 _____ () C:\Windows\system32\BsTrace.dll 2013-04-20 12:02 - 2012-09-29 12:25 - 00409088 _____ () C:\Windows\System32\HPM1210LM.DLL 2013-04-20 12:03 - 2012-09-29 12:25 - 00074240 _____ () C:\Windows\system32\spool\PRTPROCS\x64\HPM1210PP.dll 2013-02-18 11:57 - 2009-01-12 20:01 - 00061440 _____ () D:\Install\Testing Tools\quietHDD\quietHDD.exe 2013-05-14 16:33 - 2013-05-14 16:33 - 00016632 _____ () C:\Windows\system32\BsHelpCSps.dll 2013-05-14 16:33 - 2013-05-14 16:33 - 00080120 _____ () C:\Windows\system32\BsProfilefunc.dll 2013-05-14 16:33 - 2013-05-14 16:33 - 00371448 _____ () C:\Windows\system32\BsExtendFunc.dll 2015-01-26 23:06 - 2015-01-26 23:06 - 03925104 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Windows:AstInfo AlternateDataStreams: C:\ProgramData\TEMP:1CE11B51 ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ========================= Accounts: ========================== Administrator (S-1-5-21-2316775370-2964681540-2297035872-500 - Administrator - Disabled) Guest (S-1-5-21-2316775370-2964681540-2297035872-501 - Limited - Disabled) pyxzbclulwzn (S-1-5-21-2316775370-2964681540-2297035872-1009 - Limited - Disabled) taybzabqb (S-1-5-21-2316775370-2964681540-2297035872-1007 - Limited - Disabled) USER (S-1-5-21-2316775370-2964681540-2297035872-1000 - Administrator - Enabled) => C:\Users\USER ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (02/02/2015 11:51:08 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/02/2015 11:37:43 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (02/02/2015 11:53:04 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Intel® Management and Security Application User Notification Service service failed to start due to the following error: %%1053 Error: (02/02/2015 11:53:04 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: A timeout was reached (30000 milliseconds) while waiting for the Intel® Management and Security Application User Notification Service service to connect. Error: (02/02/2015 11:51:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Intel® Dynamic Application Loader Host Interface Service service failed to start due to the following error: %%1053 Error: (02/02/2015 11:51:01 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: A timeout was reached (30000 milliseconds) while waiting for the Intel® Dynamic Application Loader Host Interface Service service to connect. Error: (02/02/2015 11:51:00 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The HP Software Framework Service service failed to start due to the following error: %%1053 Error: (02/02/2015 11:51:00 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: A timeout was reached (30000 milliseconds) while waiting for the HP Software Framework Service service to connect. Error: (02/02/2015 11:39:43 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Intel® Management and Security Application User Notification Service service failed to start due to the following error: %%1053 Error: (02/02/2015 11:39:43 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: A timeout was reached (30000 milliseconds) while waiting for the Intel® Management and Security Application User Notification Service service to connect. Error: (02/02/2015 11:37:43 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Intel® Dynamic Application Loader Host Interface Service service failed to start due to the following error: %%1053 Error: (02/02/2015 11:37:43 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: A timeout was reached (30000 milliseconds) while waiting for the Intel® Dynamic Application Loader Host Interface Service service to connect. Microsoft Office Sessions: ========================= Error: (02/02/2015 11:51:08 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/02/2015 11:37:43 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 ==================== Memory info =========================== Processor: Intel® Core i5-3210M CPU @ 2.50GHz Percentage of memory in use: 47% Total physical RAM: 3976.57 MB Available physical RAM: 2082.76 MB Total Pagefile: 7951.32 MB Available Pagefile: 5860.96 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:39.9 GB) (Free:18.42 GB) NTFS Drive d: (Local Disk) (Fixed) (Total:658.63 GB) (Free:527.06 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: E3DB5E23) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=39.9 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=658.6 GB) - (Type=07 NTFS) ==================== End Of Log ============================
  18. Имам проблем с процесора на компютъра на настолния ми компютър, не мога да разбера защо ми дава, че се използва постоянно по 70-80%, при положение, че компютъра не се използва и това се случва точно след преинсталирането на уиндоус ХП. Преди не съм го имал този проблем, не мога и да открия вирус, какъв може да е проблема ? Казаха ми, че вероятно е вирус. http://postimg.org/image/s61b9onef/
  19. При стартиране на програма компютъра е много бавен и след това се рестартира сам. FRST.txt Addition.txt
  20. Здравейте, Компютърът ми е заразен с вируса CTB-Locker. Прочетох информативно нещата - криптираха се всички свалени файлове, които имах до момента на компютъра! Свалих програмата Spy Hunter 4, която откри общо 4 "зарази". Отделно свалих и ESET NOD32 Antivirus 8, която откри още 14 заплахи - троянски кон. Нямам представа по-нататък как да действам. Някой може ли да ми окаже съдействие? Предварително благодаря!
  21. Здравейте, днес (преди малко), забелязох, че паметта на Local Disk : C е запълнена с около 15 GB отгоре, вчера беше 237 GB свободна, а днес е 222 GB свободна, забелязох, и че си прави дубликати на програмите / папките, днес влязох в Local Disk : C и какво да видя, някаква папка 2-click run, а в нея преки пътища на браузерите които са инсталирани и не само. В папката има : Google Chrome пряк път, IE пряк път, Internet-url икона, някаква връзка More Portable Programs и пряк път на Mozilla Firefox, а аз дори Mozilla-та я нямам инсталирана..Влязох и в Program Files и какво да видя дубликати на папките на PhotoShop, ATI Technologies, microsoft shared, Services и System... Имам диск на ОС-та, но и направих пълна преинсталация миналата седмица.. FRST.TXT https://drive.google.com/file/d/0B6DvfXIf9eWhNHlSM0F6ekx4bDQ/edit?usp=sharing (Може да се види и без да се тегли). Addition.TXT https://drive.google.com/file/d/0B6DvfXIf9eWhMlloVm1hVDkxb0E/edit?usp=sharing (Може да се види и без да се тегли). Едит: Вече почна и да забива.. Не съм теглил нищо, само изтрих папката - 2-click run . Едит: Преинсталирах Windows-a, защото беше толкова забил, че едвам отварях страниците и не ми остана друг избор..
  22. От няколко дена имам доста голям проблем с търсачката гугъл, на кратко не реагира, когато напиша каквото и да е и натисна "търсене" или enter нищо не става на полето където би следвало да получа резултати е бяло. Та пуснах тема, но никой не можа да ми помогне, та си рекох че може да е някакъв онлайн вирусец, защото на пръв поглед машината си работи нормално с изключение на гугъл търсачката.
  23. Здравейте, От няколко дни не мога да прикачвам файлове към е-mail от служебния компютър и понякога се бави. Използвам антивирусна предоставена от телекомуникационния ми оператор, и според мен трябва да я сменя. Компютъра не е вързан в мрежа с други компютри. Благодаря Ви предварително! п.с Не мога да копирам файловете, за това ги прикачвам. dds.txt attach.txt
×

Информация

Поставихме бисквитки на устройството ви за най-добро потребителско изживяване. Можете да промените настройките си за бисквитки, или в противен случай приемаме, че сте съгласни с нашите условия за ползване.