Заразен съм с CryptoWall

12 август 201511 г.
Автор
Това е първата част
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:09-08-2015
Ran by Administrator (administrator) on NESLA-COMP (01-01-2001 05:03:20)
Running from F:\
Loaded Profiles: Administrator (Available Profiles: Nesla-1 & Administrator)
Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)
Internet Explorer Version 8 (Default browser: IE)
Boot Mode: Safe Mode (minimal)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\WINXP\system32\smss.exe
(Microsoft Corporation) C:\WINXP\system32\csrss.exe
(Microsoft Corporation) C:\WINXP\system32\winlogon.exe
(Microsoft Corporation) C:\WINXP\system32\services.exe
(Microsoft Corporation) C:\WINXP\system32\lsass.exe
(Microsoft Corporation) C:\WINXP\system32\svchost.exe
(Microsoft Corporation) C:\WINXP\system32\svchost.exe
(Microsoft Corporation) C:\WINXP\system32\svchost.exe
(Microsoft Corporation) C:\WINXP\explorer.exe
(Microsoft Corporation) C:\WINXP\system32\wbem\wmiprvse.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254696 2011-04-08] (Sun Microsystems, Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [998104 2015-07-07] (Adobe Systems Incorporated)
HKLM\...\Run: [ClamWin] => C:\Program Files\ClamWin\bin\ClamTray.exe [86016 2015-05-05] (alch)
HKLM\...\Winlogon: [Userinit] C:\WINXP\system32\userinit.exe,
HKLM\...\Winlogon: [Shell] Explorer.exe [x ] ()
HKLM\...\Winlogon: [UIHost] C:\WINXP\system32\logonui.exe [514560 2008-04-14] (Microsoft Corporation)
Winlogon\Notify\crypt32chain: C:\WINXP\system32\crypt32.dll [2013-10-07] (Microsoft Corporation)
Winlogon\Notify\cryptnet: C:\WINXP\system32\cryptnet.dll [2008-04-14] (Microsoft Corporation)
Winlogon\Notify\cscdll: C:\WINXP\system32\cscdll.dll [2008-04-14] (Microsoft Corporation)
Winlogon\Notify\dimsntfy: C:\WINXP\System32\dimsntfy.dll [2008-04-14] (Microsoft Corporation)
Winlogon\Notify\ScCertProp: C:\WINXP\system32\wlnotify.dll [2008-04-14] (Microsoft Corporation)
Winlogon\Notify\Schedule: C:\WINXP\system32\wlnotify.dll [2008-04-14] (Microsoft Corporation)
Winlogon\Notify\sclgntfy: C:\WINXP\system32\sclgntfy.dll [2008-04-14] (Microsoft Corporation)
Winlogon\Notify\SensLogn: C:\WINXP\system32\WlNotify.dll [2008-04-14] (Microsoft Corporation)
Winlogon\Notify\termsrv: C:\WINXP\system32\wlnotify.dll [2008-04-14] (Microsoft Corporation)
Winlogon\Notify\WgaLogon: C:\WINXP\system32\WgaLogon.dll [2010-02-22] ()
Winlogon\Notify\wlballoon: C:\WINXP\system32\wlnotify.dll [2008-04-14] (Microsoft Corporation)
HKU\S-1-5-20\...\Run: [CTFMON.EXE] => C:\WINXP\system32\CTFMON.EXE [15360 2008-04-14] (Microsoft Corporation)
HKU\S-1-5-21-1645522239-1547161642-459486346-500\...\Run: [CTFMON.EXE] => C:\WINXP\system32\CTFMON.EXE [15360 2008-04-14] (Microsoft Corporation)
HKU\S-1-5-18\...\Run: [CTFMON.EXE] => C:\WINXP\system32\CTFMON.EXE [15360 2008-04-14] (Microsoft Corporation)
Startup: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\restore_files_enfmy.html [2015-08-05] ()
Startup: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\restore_files_enfmy.txt [2015-08-05] ()
Startup: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\restore_files_hyxlm.html [2015-08-06] ()
Startup: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\restore_files_hyxlm.txt [2015-08-06] ()
Startup: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\restore_files_kcmyi.html [2015-08-06] ()
Startup: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\restore_files_kcmyi.txt [2015-08-06] ()
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\restore_files_enfmy.html [2015-08-05] ()
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\restore_files_enfmy.txt [2015-08-05] ()
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\restore_files_hyxlm.html [2015-08-06] ()
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\restore_files_hyxlm.txt [2015-08-06] ()
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\restore_files_kcmyi.html [2015-08-06] ()
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\restore_files_kcmyi.txt [2015-08-06] ()
Startup: C:\Documents and Settings\Default User\Start Menu\Programs\Startup\restore_files_enfmy.html [2015-08-05] ()
Startup: C:\Documents and Settings\Default User\Start Menu\Programs\Startup\restore_files_enfmy.txt [2015-08-05] ()
Startup: C:\Documents and Settings\Default User\Start Menu\Programs\Startup\restore_files_hyxlm.html [2015-08-06] ()
Startup: C:\Documents and Settings\Default User\Start Menu\Programs\Startup\restore_files_hyxlm.txt [2015-08-06] ()
Startup: C:\Documents and Settings\Default User\Start Menu\Programs\Startup\restore_files_kcmyi.html [2015-08-06] ()
Startup: C:\Documents and Settings\Default User\Start Menu\Programs\Startup\restore_files_kcmyi.txt [2015-08-06] ()
Startup: C:\Documents and Settings\Nesla-1\Start Menu\Programs\Startup\restore_files_kcmyi.html [2015-08-06] ()
Startup: C:\Documents and Settings\Nesla-1\Start Menu\Programs\Startup\restore_files_kcmyi.txt [2015-08-06] ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://mysearch.sweetpacks.com/?src=10&st=12&i=48&did=10844&ppd=search,37643778162,microsoft+security+essentials,p,,c,Microsoft+Security+Essentials,,,www.fileparade.com&barid=1523565520363936074
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm
HKU\S-1-5-21-1645522239-1547161642-459486346-500\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "C:\Documents and Settings\All Users\Application Data\ICQ\ICQNewTab\newTab.html" <======= ATTENTION
SearchScopes: HKLM -> DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://mysearch.sweetpacks.com/?src=6&q={searchTerms}&st=12&i=48&did=10844&ppd=search,37643778162,microsoft+security+essentials,p,,c,Microsoft+Security+Essentials,,,ww&barid=1523565520363936074
SearchScopes: HKLM -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://mysearch.sweetpacks.com/?src=6&q={searchTerms}&st=12&i=48&did=10844&ppd=search,37643778162,microsoft+security+essentials,p,,c,Microsoft+Security+Essentials,,,ww&barid=1523565520363936074
SearchScopes: HKU\S-1-5-21-1645522239-1547161642-459486346-500 -> DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = 
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-10-09] (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-06-13] (Sun Microsystems, Inc.)
BHO: JQSIEStartDetectorImpl Class -> {E7E6F031-17CE-4C07-BC86-EABFE594F69C} -> C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-06-13] (Sun Microsystems, Inc.)
BHO: SweetPacks Browser Helper -> {EEE6C35C-6118-11DC-9C72-001320C79847} -> C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2013-05-30] (SweetIM Technologies Ltd.)
Toolbar: HKLM - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2013-05-30] (SweetIM Technologies Ltd.)
DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-10-09] (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2013-02-26] (Skype Technologies)
Winsock: Catalog5 01 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog5 02 C:\WINXP\system32\winrnr.dll [16896 2008-04-14] (Microsoft Corporation)
Winsock: Catalog5 03 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 01 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 02 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 03 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 04 C:\WINXP\system32\rsvpsp.dll [92672 2008-04-14] (Microsoft Corporation)
Winsock: Catalog9 05 C:\WINXP\system32\rsvpsp.dll [92672 2008-04-14] (Microsoft Corporation)
Winsock: Catalog9 06 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 07 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 08 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 09 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 10 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
Winsock: Catalog9 11 C:\WINXP\system32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)

FireFox:
========
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll [2011-06-13] (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINXP\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-05-08] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Java\jre6\lib\deploy\jqs\ff
FF Extension: Java Quick Starter - C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2011-06-13]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINXP\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINXP\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-10-17]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-10-09]
StartMenuInternet: chrome.exe - C:\Documents and Settings\Nesla-1\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AdobeFlashPlayerUpdateSvc; C:\WINXP\system32\Macromed\Flash\FlashPlayerUpdateService.exe [268976 2015-07-20] (Adobe Systems Incorporated)
S4 Alerter; C:\WINXP\system32\alrsvc.dll [17408 2008-04-14] (Microsoft Corporation)
S3 ALG; C:\WINXP\System32\alg.exe [44544 2008-04-14] (Microsoft Corporation)
S3 AppMgmt; C:\WINXP\System32\appmgmts.dll [167936 2008-04-14] (Microsoft Corporation)
S3 aspnet_state; C:\WINXP\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [34312 2008-07-25] (Microsoft Corporation)
S2 AudioSrv; C:\WINXP\System32\audiosrv.dll [42496 2008-04-14] (Microsoft Corporation)
S3 BITS; C:\WINXP\system32\qmgr.dll [409088 2008-04-14] (Microsoft Corporation)
S2 Browser; C:\WINXP\System32\browser.dll [78336 2012-07-06] (Microsoft Corporation)
S3 CiSvc; C:\WINXP\system32\cisvc.exe [5632 2008-04-14] (Microsoft Corporation)
S4 ClipSrv; C:\WINXP\system32\clipsrv.exe [33280 2008-04-14] (Microsoft Corporation)
S3 clr_optimization_v2.0.50727_32; C:\WINXP\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [69632 2008-07-25] (Microsoft Corporation)
R2 CryptSvc; C:\WINXP\System32\cryptsvc.dll [62464 2008-04-14] (Microsoft Corporation)
R2 DcomLaunch; C:\WINXP\system32\rpcss.dll [401408 2010-09-16] (Microsoft Corporation)
S2 Dhcp; C:\WINXP\System32\dhcpcsvc.dll [126976 2008-04-14] (Microsoft Corporation)
S3 dmadmin; C:\WINXP\System32\dmadmin.exe [224768 2008-04-14] (Microsoft Corp., Veritas Software)
R2 dmserver; C:\WINXP\System32\dmserver.dll [23552 2008-04-14] (Microsoft Corp.)
S2 Dnscache; C:\WINXP\System32\dnsrslvr.dll [45568 2009-04-20] (Microsoft Corporation)
S3 Dot3svc; C:\WINXP\System32\dot3svc.dll [132096 2008-04-14] (Microsoft Corporation)
S3 EapHost; C:\WINXP\System32\eapsvc.dll [33792 2008-04-14] (Microsoft Corporation)
S2 ERSvc; C:\WINXP\System32\ersvc.dll [23040 2008-04-14] (Microsoft Corporation)
R2 Eventlog; C:\WINXP\system32\services.exe [110592 2010-09-16] (Microsoft Corporation)
S3 EventSystem; C:\WINXP\system32\es.dll [253952 2010-09-16] (Microsoft Corporation)
S3 FastUserSwitchingCompatibility; C:\WINXP\System32\shsvcs.dll [135168 2011-03-08] (Microsoft Corporation)
S3 FontCache3.0.0.0; C:\WINXP\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [46104 2008-07-29] (Microsoft Corporation)
R2 helpsvc; C:\WINXP\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400 2008-04-14] (Microsoft Corporation)
S3 hkmsvc; C:\WINXP\System32\kmsvc.dll [61440 2008-04-14] (Microsoft Corporation)
S3 HTTPFilter; C:\WINXP\System32\w3ssl.dll [15872 2008-04-14] (Microsoft Corporation)
S3 idsvc; C:\WINXP\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [881664 2008-07-29] (Microsoft Corporation)
S3 ImapiService; C:\WINXP\system32\imapi.exe [150528 2008-04-14] (Microsoft Corporation)
S2 JavaQuickStarterService; C:\Program Files\Java\jre6\bin\jqs.exe [153376 2011-06-13] (Sun Microsystems, Inc.)
S2 LanmanServer; C:\WINXP\System32\srvsvc.dll [99840 2010-10-12] (Microsoft Corporation)
S2 lanmanworkstation; C:\WINXP\System32\wkssvc.dll [134144 2010-09-16] (Microsoft Corporation)
S2 LmHosts; C:\WINXP\System32\lmhsvc.dll [13824 2008-04-14] (Microsoft Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S4 Messenger; C:\WINXP\System32\msgsvc.dll [33792 2008-04-14] (Microsoft Corporation)
S3 mnmsrvc; C:\WINXP\system32\mnmsrvc.exe [32768 2008-04-14] (Microsoft Corporation)
S3 MSDTC; C:\WINXP\system32\msdtc.exe [6144 2008-04-14] (Microsoft Corporation)
S3 MSIServer; C:\WINXP\System32\msiexec.exe [78848 2008-04-14] (Microsoft Corporation)
S4 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2014-03-11] (Microsoft Corporation)
S3 napagent; C:\WINXP\System32\qagentrt.dll [291328 2008-04-14] (Microsoft Corporation)
S2 Net Driver HPZ12; C:\WINXP\system32\HPZinw12.dll [43520 2006-05-09] (Hewlett-Packard) [File not signed]
S4 NetDDE; C:\WINXP\system32\netdde.exe [111104 2008-04-14] (Microsoft Corporation)
S4 NetDDEdsdm; C:\WINXP\system32\netdde.exe [111104 2008-04-14] (Microsoft Corporation)
S3 Netlogon; C:\WINXP\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation)
S3 Netman; C:\WINXP\System32\netman.dll [198144 2008-04-14] (Microsoft Corporation)
S4 NetTcpPortSharing; C:\WINXP\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [132096 2008-07-29] (Microsoft Corporation)
S3 Nla; C:\WINXP\System32\mswsock.dll [245248 2010-09-16] (Microsoft Corporation)
S3 NtLmSsp; C:\WINXP\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation)
S3 NtmsSvc; C:\WINXP\system32\ntmssvc.dll [435200 2008-04-14] (Microsoft Corporation)
R2 PlugPlay; C:\WINXP\system32\services.exe [110592 2010-09-16] (Microsoft Corporation)
S2 Pml Driver HPZ12; C:\WINXP\system32\HPZipm12.dll [52736 2006-05-09] (Hewlett-Packard) [File not signed]
S2 PolicyAgent; C:\WINXP\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation)
S2 ProtectedStorage; C:\WINXP\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation)
S3 RasAuto; C:\WINXP\System32\rasauto.dll [88576 2008-04-14] (Microsoft Corporation)
S3 RasMan; C:\WINXP\System32\rasmans.dll [186368 2008-04-14] (Microsoft Corporation)
S3 RDSessMgr; C:\WINXP\system32\sessmgr.exe [141312 2008-04-14] (Microsoft Corporation)
S4 RemoteAccess; C:\WINXP\System32\mprdim.dll [53248 2008-04-14] (Microsoft Corporation)
S2 RemoteRegistry; C:\WINXP\system32\regsvc.dll [59904 2008-04-14] (Microsoft Corporation)
S3 RpcLocator; C:\WINXP\system32\locator.exe [75264 2008-04-14] (Microsoft Corporation)
R2 RpcSs; C:\WINXP\system32\rpcss.dll [401408 2010-09-16] (Microsoft Corporation)
S3 RSVP; C:\WINXP\system32\rsvp.exe [132608 2008-04-14] (Microsoft Corporation)
S2 SamSs; C:\WINXP\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation)
S3 SCardSvr; C:\WINXP\System32\SCardSvr.exe [95744 2008-04-14] (Microsoft Corporation)
S2 Schedule; C:\WINXP\system32\schedsvc.dll [192512 2008-04-14] (Microsoft Corporation)
S2 seclogon; C:\WINXP\System32\seclogon.dll [18944 2008-04-14] (Microsoft Corporation)
S2 SENS; C:\WINXP\system32\sens.dll [39424 2008-04-14] (Microsoft Corporation)
S2 SharedAccess; C:\WINXP\System32\ipnathlp.dll [331264 2008-04-14] (Microsoft Corporation)
S2 ShellHWDetection; C:\WINXP\System32\shsvcs.dll [135168 2011-03-08] (Microsoft Corporation)
S2 Skype C2C Service; C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3275136 2013-10-09] (Skype Technologies S.A.)
S2 Spooler; C:\WINXP\system32\spoolsv.exe [58880 2010-09-16] (Microsoft Corporation)
R2 srservice; C:\WINXP\system32\srsvc.dll [171008 2008-04-14] (Microsoft Corporation)
S3 SSDPSRV; C:\WINXP\System32\ssdpsrv.dll [71680 2008-04-14] (Microsoft Corporation)
S2 stisvc; C:\WINXP\system32\wiaservc.dll [333824 2008-04-14] (Microsoft Corporation)
S3 SysmonLog; C:\WINXP\system32\smlogsvc.exe [89600 2008-04-14] (Microsoft Corporation)
S3 TapiSrv; C:\WINXP\System32\tapisrv.dll [249856 2008-04-14] (Microsoft Corporation)
S3 TermService; C:\WINXP\System32\termsrv.dll [295424 2008-04-14] (Microsoft Corporation)
S2 Themes; C:\WINXP\System32\shsvcs.dll [135168 2011-03-08] (Microsoft Corporation)
S4 TlntSvr; C:\WINXP\system32\tlntsvr.exe [73216 2008-04-14] (Microsoft Corporation)
S2 TrkWks; C:\WINXP\system32\trkwks.dll [90112 2008-04-14] (Microsoft Corporation)
S3 upnphost; C:\WINXP\System32\upnphost.dll [185856 2008-04-14] (Microsoft Corporation)
S3 UPS; C:\WINXP\System32\ups.exe [18432 2008-04-14] (Microsoft Corporation)
S3 VSS; C:\WINXP\System32\vssvc.exe [289792 2008-04-14] (Microsoft Corporation)
S2 W32Time; C:\WINXP\system32\w32time.dll [175104 2008-04-14] (Microsoft Corporation)
S2 WebClient; C:\WINXP\System32\webclnt.dll [68096 2008-04-14] (Microsoft Corporation)
R2 winmgmt; C:\WINXP\system32\wbem\WMIsvc.dll [144896 2008-04-14] (Microsoft Corporation)
S3 WmdmPmSN; C:\WINXP\system32\mspmsnsv.dll [27136 2010-09-16] (Microsoft Corporation)
S3 Wmi; C:\WINXP\System32\advapi32.dll [617472 2010-09-16] (Microsoft Corporation)
S3 WmiApSrv; C:\WINXP\system32\wbem\wmiapsrv.exe [126464 2008-04-14] (Microsoft Corporation)
S4 wscsvc; C:\WINXP\system32\wscsvc.dll [80896 2008-04-14] (Microsoft Corporation)
S2 wuauserv; C:\WINXP\system32\wuauserv.dll [6656 2008-04-14] (Microsoft Corporation)
S3 WudfSvc; C:\WINXP\System32\WUDFSvc.dll [55808 2010-09-16] (Microsoft Corporation)
S2 WZCSVC; C:\WINXP\System32\wzcsvc.dll [483840 2011-03-08] (Microsoft Corporation)
S3 xmlprov; C:\WINXP\System32\xmlprov.dll [129024 2008-04-14] (Microsoft Corporation)
S3 COMSysApp; C:\WINXP\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
S3 SwPrv; C:\WINXP\system32\dllhost.exe /Processid:{9B5EE8D8-820A-4B10-A7CF-D1DF12DA1E6F}

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ac97intc; C:\WINXP\System32\drivers\ac97intc.sys [96256 2001-08-17] (Intel Corporation)
R0 ACPI; C:\WINXP\System32\DRIVERS\ACPI.sys [187776 2008-04-14] (Microsoft Corporation)
S4 ACPIEC; C:\WINXP\system32\Drivers\ACPIEC.sys [11648 2008-04-14] (Microsoft Corporation)
S3 aec; C:\WINXP\System32\drivers\aec.sys [142592 2008-04-13] (Microsoft Corporation)
S1 AFD; C:\WINXP\System32\drivers\afd.sys [138496 2011-08-17] (Microsoft Corporation)
R0 agp440; C:\WINXP\System32\DRIVERS\agp440.sys [42368 2008-04-13] (Microsoft Corporation)
S3 AsyncMac; C:\WINXP\System32\DRIVERS\asyncmac.sys [14336 2008-04-14] (Microsoft Corporation)
R0 atapi; C:\WINXP\System32\DRIVERS\atapi.sys [96512 2008-04-14] (Microsoft Corporation)
S3 atirage; C:\WINXP\System32\DRIVERS\atiragem.sys [70528 2001-08-17] (ATI Technologies Inc.)
S3 Atmarpc; C:\WINXP\System32\DRIVERS\atmarpc.sys [59904 2008-04-14] (Microsoft Corporation)
S3 audstub; C:\WINXP\System32\DRIVERS\audstub.sys [3072 2001-08-17] (Microsoft Corporation)
R1 Beep; C:\WINXP\system32\Drivers\Beep.sys [4224 2008-04-14] (Microsoft Corporation)
S4 cbidf2k; C:\WINXP\system32\Drivers\cbidf2k.sys [13952 2008-04-14] (Microsoft Corporation)
S1 Cdaudio; C:\WINXP\system32\Drivers\Cdaudio.sys [18688 2011-03-08] (Microsoft Corporation)
R4 Cdfs; C:\WINXP\system32\Drivers\Cdfs.sys [63744 2008-04-14] (Microsoft Corporation)
R1 Cdrom; C:\WINXP\System32\DRIVERS\cdrom.sys [62976 2008-04-14] (Microsoft Corporation)
R0 Disk; C:\WINXP\System32\DRIVERS\disk.sys [36352 2008-04-14] (Microsoft Corporation)
S4 dmboot; C:\WINXP\System32\drivers\dmboot.sys [799744 2008-04-14] (Microsoft Corp., Veritas Software)
R0 dmio; C:\WINXP\System32\drivers\dmio.sys [153344 2008-04-14] (Microsoft Corp., Veritas Software)
R0 dmload; C:\WINXP\System32\drivers\dmload.sys [5888 2008-04-14] (Microsoft Corp., Veritas Software.)
S3 DMusic; C:\WINXP\System32\drivers\DMusic.sys [52864 2008-04-13] (Microsoft Corporation)
S3 drmkaud; C:\WINXP\System32\drivers\drmkaud.sys [2944 2008-04-13] (Microsoft Corporation)
S3 EL90X; C:\WINXP\System32\DRIVERS\el90xnd5.sys [153631 2001-08-17] (3Com Corporation)
R4 Fastfat; C:\WINXP\system32\Drivers\Fastfat.sys [143744 2008-04-14] (Microsoft Corporation)
R3 Fdc; C:\WINXP\System32\DRIVERS\fdc.sys [27392 2008-04-14] (Microsoft Corporation)
S1 Fips; C:\WINXP\system32\Drivers\Fips.sys [44544 2008-04-14] (Microsoft Corporation)
R3 Flpydisk; C:\WINXP\System32\DRIVERS\flpydisk.sys [20480 2008-04-14] (Microsoft Corporation)
R0 FltMgr; C:\WINXP\System32\DRIVERS\fltMgr.sys [129792 2008-04-14] (Microsoft Corporation)
U1 Fs_Rec; C:\WINXP\system32\Drivers\Fs_Rec.sys [7936 2008-04-14] (Microsoft Corporation)
R0 Ftdisk; C:\WINXP\System32\DRIVERS\ftdisk.sys [125056 2008-04-14] (Microsoft Corporation)
S3 gameenum; C:\WINXP\System32\DRIVERS\gameenum.sys [10624 2008-04-13] (Microsoft Corporation)
S3 Gpc; C:\WINXP\System32\DRIVERS\msgpc.sys [35072 2008-04-14] (Microsoft Corporation)
R3 hidusb; C:\WINXP\System32\DRIVERS\hidusb.sys [10368 2008-04-14] (Microsoft Corporation)
S3 HPZid412; C:\WINXP\System32\DRIVERS\HPZid412.sys [49920 2005-10-20] (HP)
S3 HPZipr12; C:\WINXP\System32\DRIVERS\HPZipr12.sys [16496 2005-10-20] (HP)
S3 HPZius12; C:\WINXP\System32\DRIVERS\HPZius12.sys [21568 2005-10-20] (HP)
S3 HTTP; C:\WINXP\System32\Drivers\HTTP.sys [265728 2010-09-16] (Microsoft Corporation)
R1 i8042prt; C:\WINXP\System32\DRIVERS\i8042prt.sys [52480 2008-04-14] (Microsoft Corporation)
R1 Imapi; C:\WINXP\System32\DRIVERS\imapi.sys [42112 2008-04-14] (Microsoft Corporation)
R0 IntelIde; C:\WINXP\System32\DRIVERS\intelide.sys [5504 2008-04-14] (Microsoft Corporation)
S3 Ip6Fw; C:\WINXP\System32\DRIVERS\Ip6Fw.sys [36608 2008-04-14] (Microsoft Corporation)
S3 IpFilterDriver; C:\WINXP\System32\DRIVERS\ipfltdrv.sys [32896 2008-04-14] (Microsoft Corporation)
S3 IpInIp; C:\WINXP\System32\DRIVERS\ipinip.sys [20864 2008-04-14] (Microsoft Corporation)
S3 IpNat; C:\WINXP\System32\DRIVERS\ipnat.sys [152832 2008-04-14] (Microsoft Corporation)
S1 IPSec; C:\WINXP\System32\DRIVERS\ipsec.sys [75264 2008-04-14] (Microsoft Corporation)
S3 IRENUM; C:\WINXP\System32\DRIVERS\irenum.sys [11264 2008-04-14] (Microsoft Corporation)
R0 isapnp; C:\WINXP\System32\DRIVERS\isapnp.sys [37248 2008-04-14] (Microsoft Corporation)
R1 Kbdclass; C:\WINXP\System32\DRIVERS\kbdclass.sys [24576 2008-04-14] (Microsoft Corporation)
S1 kbdhid; C:\WINXP\System32\DRIVERS\kbdhid.sys [14592 2008-04-13] (Microsoft Corporation)
S3 kmixer; C:\WINXP\System32\drivers\kmixer.sys [172416 2008-04-13] (Microsoft Corporation)
R0 KSecDD; C:\WINXP\system32\Drivers\KSecDD.sys [92928 2009-06-23] (Microsoft Corporation)
S3 MBAMProtector; C:\WINXP\system32\drivers\mbam.sys [23256 2015-06-18] (Malwarebytes Corporation)
S1 mnmdd; C:\WINXP\system32\Drivers\mnmdd.sys [4224 2008-04-14] (Microsoft Corporation)
S3 Modem; C:\WINXP\system32\Drivers\Modem.sys [30080 2011-03-08] (Microsoft Corporation)
R1 Mouclass; C:\WINXP\System32\DRIVERS\mouclass.sys [23040 2011-03-08] (Microsoft Corporation)
R3 mouhid; C:\WINXP\System32\DRIVERS\mouhid.sys [12160 2011-03-08] (Microsoft Corporation)
R0 MountMgr; C:\WINXP\system32\Drivers\MountMgr.sys [42368 2008-04-14] (Microsoft Corporation)
S0 MpFilter; C:\WINXP\System32\DRIVERS\MpFilter.sys [231960 2014-01-25] (Microsoft Corporation)
S3 MRxDAV; C:\WINXP\System32\DRIVERS\mrxdav.sys [180608 2008-04-14] (Microsoft Corporation)
S1 MRxSmb; C:\WINXP\System32\DRIVERS\mrxsmb.sys [457856 2011-07-15] (Microsoft Corporation)
R1 Msfs; C:\WINXP\system32\Drivers\Msfs.sys [19072 2008-04-14] (Microsoft Corporation)
S3 MSKSSRV; C:\WINXP\System32\drivers\MSKSSRV.sys [7552 2008-04-13] (Microsoft Corporation)
S3 MSPCLOCK; C:\WINXP\System32\drivers\MSPCLOCK.sys [5376 2008-04-13] (Microsoft Corporation)
S3 MSPQM; C:\WINXP\System32\drivers\MSPQM.sys [4992 2008-04-13] (Microsoft Corporation)
R3 mssmbios; C:\WINXP\System32\DRIVERS\mssmbios.sys [15488 2011-03-08] (Microsoft Corporation)
S3 ms_mpu401; C:\WINXP\System32\drivers\msmpu401.sys [2944 2001-08-17] (Microsoft Corporation)
R0 Mup; C:\WINXP\system32\Drivers\Mup.sys [105472 2011-04-21] (Microsoft Corporation)
R0 NDIS; C:\WINXP\system32\Drivers\NDIS.sys [182656 2008-04-14] (Microsoft Corporation)
S3 NdisTapi; C:\WINXP\System32\DRIVERS\ndistapi.sys [10496 2011-07-08] (Microsoft Corporation)
S3 Ndisuio; C:\WINXP\System32\DRIVERS\ndisuio.sys [14592 2011-03-08] (Microsoft Corporation)
S3 NdisWan; C:\WINXP\System32\DRIVERS\ndiswan.sys [91520 2008-04-14] (Microsoft Corporation)
S3 NDProxy; C:\WINXP\system32\Drivers\NDProxy.sys [40960 2013-11-27] (Microsoft Corporation)
S1 NetBIOS; C:\WINXP\System32\DRIVERS\netbios.sys [34688 2008-04-14] (Microsoft Corporation)
S1 NetBT; C:\WINXP\System32\DRIVERS\netbt.sys [162816 2008-04-14] (Microsoft Corporation)
R1 Npfs; C:\WINXP\system32\Drivers\Npfs.sys [30848 2008-04-14] (Microsoft Corporation)
R4 Ntfs; C:\WINXP\system32\Drivers\Ntfs.sys [574976 2008-04-14] (Microsoft Corporation)
R1 Null; C:\WINXP\system32\Drivers\Null.sys [2944 2008-04-14] (Microsoft Corporation)
S3 NwlnkFlt; C:\WINXP\System32\DRIVERS\nwlnkflt.sys [12416 2008-04-14] (Microsoft Corporation)
S3 NwlnkFwd; C:\WINXP\System32\DRIVERS\nwlnkfwd.sys [32512 2008-04-14] (Microsoft Corporation)
S3 Parport; C:\WINXP\System32\DRIVERS\parport.sys [80128 2011-03-08] (Microsoft Corporation)
R0 PartMgr; C:\WINXP\system32\Drivers\PartMgr.sys [19712 2008-04-14] (Microsoft Corporation)
S2 ParVdm; C:\WINXP\system32\Drivers\ParVdm.sys [6784 2008-04-14] (Microsoft Corporation)
R0 PCI; C:\WINXP\System32\DRIVERS\pci.sys [68224 2008-04-14] (Microsoft Corporation)
S4 Pcmcia; C:\WINXP\system32\Drivers\Pcmcia.sys [120192 2008-04-14] (Microsoft Corporation)
S3 PptpMiniport; C:\WINXP\System32\DRIVERS\raspptp.sys [48384 2008-04-14] (Microsoft Corporation)
S3 PSched; C:\WINXP\System32\DRIVERS\psched.sys [69120 2008-04-14] (Microsoft Corporation)
S3 Ptilink; C:\WINXP\System32\DRIVERS\ptilink.sys [17792 2008-04-14] (Parallel Technologies, Inc.)
S1 RasAcd; C:\WINXP\System32\DRIVERS\rasacd.sys [8832 2008-04-14] (Microsoft Corporation)
S3 Rasl2tp; C:\WINXP\System32\DRIVERS\rasl2tp.sys [51328 2008-04-14] (Microsoft Corporation)
S3 RasPppoe; C:\WINXP\System32\DRIVERS\raspppoe.sys [41472 2008-04-14] (Microsoft Corporation)
S3 Raspti; C:\WINXP\System32\DRIVERS\raspti.sys [16512 2008-04-14] (Microsoft Corporation)
S1 Rdbss; C:\WINXP\System32\DRIVERS\rdbss.sys [175744 2008-04-14] (Microsoft Corporation)
S1 RDPCDD; C:\WINXP\System32\DRIVERS\RDPCDD.sys [4224 2008-04-14] (Microsoft Corporation)
R3 rdpdr; C:\WINXP\System32\DRIVERS\rdpdr.sys [196224 2008-04-13] (Microsoft Corporation)
S3 RDPWD; C:\WINXP\system32\Drivers\RDPWD.sys [139784 2012-07-04] (Microsoft Corporation)
R1 redbook; C:\WINXP\System32\DRIVERS\redbook.sys [57600 2008-04-13] (Microsoft Corporation)
S3 Secdrv; C:\WINXP\System32\DRIVERS\secdrv.sys [20480 2008-04-14] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
S3 serenum; C:\WINXP\System32\DRIVERS\serenum.sys [15744 2008-04-14] (Microsoft Corporation)
S1 Serial; C:\WINXP\System32\DRIVERS\serial.sys [64512 2008-04-14] (Microsoft Corporation)
S1 Sfloppy; C:\WINXP\system32\Drivers\Sfloppy.sys [11392 2008-04-14] (Microsoft Corporation)
S3 splitter; C:\WINXP\System32\drivers\splitter.sys [6272 2008-04-13] (Microsoft Corporation)
R0 sr; C:\WINXP\System32\DRIVERS\sr.sys [73472 2008-04-14] (Microsoft Corporation)
S3 Srv; C:\WINXP\System32\DRIVERS\srv.sys [357888 2011-02-17] (Microsoft Corporation)
R3 swenum; C:\WINXP\System32\DRIVERS\swenum.sys [4352 2011-03-08] (Microsoft Corporation)
S3 swmidi; C:\WINXP\System32\drivers\swmidi.sys [56576 2008-04-13] (Microsoft Corporation)
S3 sysaudio; C:\WINXP\System32\drivers\sysaudio.sys [60800 2008-04-13] (Microsoft Corporation)
S1 Tcpip; C:\WINXP\System32\DRIVERS\tcpip.sys [361600 2010-09-16] (Microsoft Corporation)
S3 TDPIPE; C:\WINXP\system32\Drivers\TDPIPE.sys [12040 2008-04-14] (Microsoft Corporation)
S3 TDTCP; C:\WINXP\system32\Drivers\TDTCP.sys [21896 2008-04-14] (Microsoft Corporation)
R1 TermDD; C:\WINXP\System32\DRIVERS\termdd.sys [40840 2008-04-14] (Microsoft Corporation)
S4 Udfs; C:\WINXP\system32\Drivers\Udfs.sys [66048 2008-04-14] (Microsoft Corporation)
R3 Update; C:\WINXP\System32\DRIVERS\update.sys [384768 2008-04-14] (Microsoft Corporation)
S3 usbccgp; C:\WINXP\System32\DRIVERS\usbccgp.sys [32384 2013-08-08] (Microsoft Corporation)
R3 usbhub; C:\WINXP\System32\DRIVERS\usbhub.sys [59520 2008-04-14] (Microsoft Corporation)
S3 usbprint; C:\WINXP\System32\DRIVERS\usbprint.sys [25856 2008-04-13] (Microsoft Corporation)
S3 usbscan; C:\WINXP\System32\DRIVERS\usbscan.sys [14976 2013-07-02] (Microsoft Corporation)
R3 USBSTOR; C:\WINXP\System32\DRIVERS\USBSTOR.SYS [26368 2008-04-13] (Microsoft Corporation)
R3 usbuhci; C:\WINXP\System32\DRIVERS\usbuhci.sys [20608 2008-04-14] (Microsoft Corporation)
R1 VgaSave; C:\WINXP\System32\drivers\vga.sys [20992 2008-04-14] (Microsoft Corporation)
R0 VolSnap; C:\WINXP\system32\Drivers\VolSnap.sys [52352 2008-04-14] (Microsoft Corporation)
S3 Wanarp; C:\WINXP\System32\DRIVERS\wanarp.sys [34560 2008-04-14] (Microsoft Corporation)
S3 wdmaud; C:\WINXP\System32\drivers\wdmaud.sys [83072 2008-04-13] (Microsoft Corporation)
S3 WudfPf; C:\WINXP\System32\DRIVERS\WudfPf.sys [77568 2010-09-16] (Microsoft Corporation)
S3 WudfRd; C:\WINXP\System32\DRIVERS\wudfrd.sys [82944 2010-09-16] (Microsoft Corporation)
U1 WS2IFSL; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-06 11:31 - 2015-08-06 11:31 - 02416454 _____ C:\Documents and Settings\Nesla-1\Desktop\RESTORE_FILES.BMP
2015-08-06 11:31 - 2015-08-06 11:31 - 00003822 _____ C:\Documents and Settings\Nesla-1\Desktop\RESTORE_FILES.HTML
2015-08-06 11:31 - 2015-08-06 11:31 - 00002170 _____ C:\Documents and Settings\Nesla-1\Desktop\RESTORE_FILES.TXT
2015-08-06 11:26 - 2015-08-06 11:26 - 00003822 _____ C:\Documents and Settings\restore_files_kcmyi.html
2015-08-06 11:26 - 2015-08-06 11:26 - 00003822 _____ C:\Documents and Settings\NetworkService\restore_files_kcmyi.html
2015-08-06 11:26 - 2015-08-06 11:26 - 00003822 _____ C:\Documents and Settings\NetworkService\Local Settings\restore_files_kcmyi.html
2015-08-06 11:26 - 2015-08-06 11:26 - 00002170 _____ C:\Documents and Settings\restore_files_kcmyi.txt
2015-08-06 11:26 - 2015-08-06 11:26 - 00002170 _____ C:\Documents and Settings\NetworkService\restore_files_kcmyi.txt
2015-08-06 11:26 - 2015-08-06 11:26 - 00002170 _____ C:\Documents and Settings\NetworkService\Local Settings\restore_files_kcmyi.txt
2015-08-06 11:22 - 2015-08-06 11:22 - 00003822 _____ C:\Documents and Settings\NetworkService\Local Settings\Application Data\restore_files_kcmyi.html
2015-08-06 11:22 - 2015-08-06 11:22 - 00002170 _____ C:\Documents and Settings\NetworkService\Local Settings\Application Data\restore_files_kcmyi.txt
2015-08-06 11:21 - 2015-08-06 11:21 - 00003822 _____ C:\Documents and Settings\NetworkService\Application Data\restore_files_kcmyi.html
2015-08-06 11:21 - 2015-08-06 11:21 - 00003822 _____ C:\Documents and Settings\Nesla-1\Start Menu\restore_files_kcmyi.html
2015-08-06 11:21 - 2015-08-06 11:21 - 00003822 _____ C:\Documents and Settings\Nesla-1\Start Menu\Programs\restore_files_kcmyi.html
2015-08-06 11:21 - 2015-08-06 11:21 - 00003822 _____ C:\Documents and Settings\Nesla-1\restore_files_kcmyi.html
2015-08-06 11:21 - 2015-08-06 11:21 - 00003822 _____ C:\Documents and Settings\Nesla-1\My Documents\restore_files_kcmyi.html
2015-08-06 11:21 - 2015-08-06 11:21 - 00002170 _____ C:\Documents and Settings\NetworkService\Application Data\restore_files_kcmyi.txt
2015-08-06 11:21 - 2015-08-06 11:21 - 00002170 _____ C:\Documents and Settings\Nesla-1\Start Menu\restore_files_kcmyi.txt
2015-08-06 11:21 - 2015-08-06 11:21 - 00002170 _____ C:\Documents and Settings\Nesla-1\Start Menu\Programs\restore_files_kcmyi.txt
2015-08-06 11:21 - 2015-08-06 11:21 - 00002170 _____ C:\Documents and Settings\Nesla-1\restore_files_kcmyi.txt
2015-08-06 11:21 - 2015-08-06 11:21 - 00002170 _____ C:\Documents and Settings\Nesla-1\My Documents\restore_files_kcmyi.txt
2015-08-06 11:18 - 2015-08-06 11:18 - 00003822 _____ C:\Documents and Settings\Nesla-1\Local Settings\restore_files_kcmyi.html
2015-08-06 11:18 - 2015-08-06 11:18 - 00002170 _____ C:\Documents and Settings\Nesla-1\Local Settings\restore_files_kcmyi.txt
2015-08-06 11:13 - 2015-08-06 11:13 - 00003822 _____ C:\Documents and Settings\Nesla-1\Local Settings\Application Data\restore_files_kcmyi.html
2015-08-06 11:13 - 2015-08-06 11:13 - 00002170 _____ C:\Documents and Settings\Nesla-1\Local Settings\Application Data\restore_files_kcmyi.txt
2015-08-06 11:09 - 2015-08-06 11:09 - 00003822 _____ C:\Documents and Settings\Nesla-1\Application Data\restore_files_kcmyi.html
2015-08-06 11:09 - 2015-08-06 11:09 - 00002170 _____ C:\Documents and Settings\Nesla-1\Application Data\restore_files_kcmyi.txt
2015-08-06 11:07 - 2015-08-06 11:07 - 00003822 _____ C:\Documents and Settings\LocalService\Start Menu\restore_files_kcmyi.html
2015-08-06 11:07 - 2015-08-06 11:07 - 00003822 _____ C:\Documents and Settings\LocalService\Start Menu\Programs\restore_files_kcmyi.html
2015-08-06 11:07 - 2015-08-06 11:07 - 00003822 _____ C:\Documents and Settings\LocalService\restore_files_kcmyi.html
2015-08-06 11:07 - 2015-08-06 11:07 - 00003822 _____ C:\Documents and Settings\LocalService\Local Settings\restore_files_kcmyi.html
2015-08-06 11:07 - 2015-08-06 11:07 - 00003822 _____ C:\Documents and Settings\LocalService\Local Settings\Application Data\restore_files_kcmyi.html
2015-08-06 11:07 - 2015-08-06 11:07 - 00003822 _____ C:\Documents and Settings\LocalService\Application Data\restore_files_kcmyi.html
2015-08-06 11:07 - 2015-08-06 11:07 - 00003822 _____ C:\Documents and Settings\Default User\Start Menu\restore_files_kcmyi.html
2015-08-06 11:07 - 2015-08-06 11:07 - 00003822 _____ C:\Documents and Settings\Default User\Start Menu\Programs\restore_files_kcmyi.html
2015-08-06 11:07 - 2015-08-06 11:07 - 00003822 _____ C:\Documents and Settings\Default User\restore_files_kcmyi.html
2015-08-06 11:07 - 2015-08-06 11:07 - 00003822 _____ C:\Documents and Settings\Default User\My Documents\restore_files_kcmyi.html
2015-08-06 11:07 - 2015-08-06 11:07 - 00003822 _____ C:\Documents and Settings\Default User\Local Settings\restore_files_kcmyi.html
2015-08-06 11:07 - 2015-08-06 11:07 - 00003822 _____ C:\Documents and Settings\Default User\Local Settings\Application Data\restore_files_kcmyi.html
2015-08-06 11:07 - 2015-08-06 11:07 - 00003822 _____ C:\Documents and Settings\Default User\Desktop\restore_files_kcmyi.html
2015-08-06 11:07 - 2015-08-06 11:07 - 00003822 _____ C:\Documents and Settings\Default User\Application Data\restore_files_kcmyi.html
2015-08-06 11:07 - 2015-08-06 11:07 - 00003822 _____ C:\Documents and Settings\All Users\Start Menu\restore_files_kcmyi.html
2015-08-06 11:07 - 2015-08-06 11:07 - 00003822 _____ C:\Documents and Settings\All Users\Start Menu\Programs\restore_files_kcmyi.html
2015-08-06 11:07 - 2015-08-06 11:07 - 00003822 _____ C:\Documents and Settings\All Users\restore_files_kcmyi.html
2015-08-06 11:07 - 2015-08-06 11:07 - 00003822 _____ C:\Documents and Settings\All Users\Application Data\restore_files_kcmyi.html
2015-08-06 11:07 - 2015-08-06 11:07 - 00002170 _____ C:\Documents and Settings\LocalService\Start Menu\restore_files_kcmyi.txt
2015-08-06 11:07 - 2015-08-06 11:07 - 00002170 _____ C:\Documents and Settings\LocalService\Start Menu\Programs\restore_files_kcmyi.txt
2015-08-06 11:07 - 2015-08-06 11:07 - 00002170 _____ C:\Documents and Settings\LocalService\restore_files_kcmyi.txt
2015-08-06 11:07 - 2015-08-06 11:07 - 00002170 _____ C:\Documents and Settings\LocalService\Local Settings\restore_files_kcmyi.txt
2015-08-06 11:07 - 2015-08-06 11:07 - 00002170 _____ C:\Documents and Settings\LocalService\Local Settings\Application Data\restore_files_kcmyi.txt
2015-08-06 11:07 - 2015-08-06 11:07 - 00002170 _____ C:\Documents and Settings\LocalService\Application Data\restore_files_kcmyi.txt
2015-08-06 11:07 - 2015-08-06 11:07 - 00002170 _____ C:\Documents and Settings\Default User\Start Menu\restore_files_kcmyi.txt
2015-08-06 11:07 - 2015-08-06 11:07 - 00002170 _____ C:\Documents and Settings\Default User\Start Menu\Programs\restore_files_kcmyi.txt
2015-08-06 11:07 - 2015-08-06 11:07 - 00002170 _____ C:\Documents and Settings\Default User\restore_files_kcmyi.txt
2015-08-06 11:07 - 2015-08-06 11:07 - 00002170 _____ C:\Documents and Settings\Default User\My Documents\restore_files_kcmyi.txt
2015-08-06 11:07 - 2015-08-06 11:07 - 00002170 _____ C:\Documents and Settings\Default User\Local Settings\restore_files_kcmyi.txt
2015-08-06 11:07 - 2015-08-06 11:07 - 00002170 _____ C:\Documents and Settings\Default User\Local Settings\Application Data\restore_files_kcmyi.txt
2015-08-06 11:07 - 2015-08-06 11:07 - 00002170 _____ C:\Documents and Settings\Default User\Desktop\restore_files_kcmyi.txt
2015-08-06 11:07 - 2015-08-06 11:07 - 00002170 _____ C:\Documents and Settings\Default User\Application Data\restore_files_kcmyi.txt
2015-08-06 11:07 - 2015-08-06 11:07 - 00002170 _____ C:\Documents and Settings\All Users\Start Menu\restore_files_kcmyi.txt
2015-08-06 11:07 - 2015-08-06 11:07 - 00002170 _____ C:\Documents and Settings\All Users\Start Menu\Programs\restore_files_kcmyi.txt
2015-08-06 11:07 - 2015-08-06 11:07 - 00002170 _____ C:\Documents and Settings\All Users\restore_files_kcmyi.txt
2015-08-06 11:07 - 2015-08-06 11:07 - 00002170 _____ C:\Documents and Settings\All Users\Application Data\restore_files_kcmyi.txt
2015-08-06 11:06 - 2015-08-06 11:06 - 00003822 _____ C:\Documents and Settings\Administrator\Start Menu\restore_files_kcmyi.html
2015-08-06 11:06 - 2015-08-06 11:06 - 00003822 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\restore_files_kcmyi.html
2015-08-06 11:06 - 2015-08-06 11:06 - 00003822 _____ C:\Documents and Settings\Administrator\restore_files_kcmyi.html
2015-08-06 11:06 - 2015-08-06 11:06 - 00002170 _____ C:\Documents and Settings\Administrator\Start Menu\restore_files_kcmyi.txt
2015-08-06 11:06 - 2015-08-06 11:06 - 00002170 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\restore_files_kcmyi.txt
2015-08-06 11:06 - 2015-08-06 11:06 - 00002170 _____ C:\Documents and Settings\Administrator\restore_files_kcmyi.txt
2015-08-06 11:03 - 2015-08-06 11:03 - 00003822 _____ C:\Documents and Settings\Administrator\My Documents\restore_files_kcmyi.html
2015-08-06 11:03 - 2015-08-06 11:03 - 00003822 _____ C:\Documents and Settings\Administrator\Local Settings\restore_files_kcmyi.html
2015-08-06 11:03 - 2015-08-06 11:03 - 00002170 _____ C:\Documents and Settings\Administrator\My Documents\restore_files_kcmyi.txt
2015-08-06 11:03 - 2015-08-06 11:03 - 00002170 _____ C:\Documents and Settings\Administrator\Local Settings\restore_files_kcmyi.txt
2015-08-06 11:00 - 2015-08-06 11:00 - 00003822 _____ C:\Documents and Settings\Administrator\Local Settings\Application Data\restore_files_kcmyi.html
2015-08-06 11:00 - 2015-08-06 11:00 - 00002170 _____ C:\Documents and Settings\Administrator\Local Settings\Application Data\restore_files_kcmyi.txt
2015-08-06 10:57 - 2015-08-06 10:57 - 00003822 _____ C:\Documents and Settings\Administrator\Desktop\restore_files_kcmyi.html
2015-08-06 10:57 - 2015-08-06 10:57 - 00003822 _____ C:\Documents and Settings\Administrator\Application Data\restore_files_kcmyi.html
2015-08-06 10:57 - 2015-08-06 10:57 - 00002170 _____ C:\Documents and Settings\Administrator\Desktop\restore_files_kcmyi.txt
2015-08-06 10:56 - 2015-08-06 10:56 - 00002170 _____ C:\Documents and Settings\Administrator\Application Data\restore_files_kcmyi.txt
2015-08-06 10:55 - 2015-08-06 10:55 - 00000249 _____ C:\Documents and Settings\Nesla-1\My Documents\Recovery_File_jovie.txt
2015-08-06 10:49 - 2015-08-06 10:49 - 00003822 _____ C:\Documents and Settings\Nesla-1\Application Data\restore_files_hyxlm.html
2015-08-06 10:49 - 2015-08-06 10:49 - 00002170 _____ C:\Documents and Settings\Nesla-1\Application Data\restore_files_hyxlm.txt
2015-08-06 10:48 - 2015-08-06 10:48 - 00003822 _____ C:\Documents and Settings\LocalService\Start Menu\restore_files_hyxlm.html
2015-08-06 10:48 - 2015-08-06 10:48 - 00003822 _____ C:\Documents and Settings\LocalService\restore_files_hyxlm.html
2015-08-06 10:48 - 2015-08-06 10:48 - 00002170 _____ C:\Documents and Settings\LocalService\Start Menu\restore_files_hyxlm.txt
2015-08-06 10:48 - 2015-08-06 10:48 - 00002170 _____ C:\Documents and Settings\LocalService\restore_files_hyxlm.txt
2015-08-06 10:47 - 2015-08-06 10:47 - 00003822 _____ C:\Documents and Settings\LocalService\Start Menu\Programs\restore_files_hyxlm.html
2015-08-06 10:47 - 2015-08-06 10:47 - 00003822 _____ C:\Documents and Settings\LocalService\Local Settings\restore_files_hyxlm.html
2015-08-06 10:47 - 2015-08-06 10:47 - 00003822 _____ C:\Documents and Settings\LocalService\Local Settings\Application Data\restore_files_hyxlm.html
2015-08-06 10:47 - 2015-08-06 10:47 - 00003822 _____ C:\Documents and Settings\LocalService\Application Data\restore_files_hyxlm.html
2015-08-06 10:47 - 2015-08-06 10:47 - 00003822 _____ C:\Documents and Settings\Default User\Start Menu\restore_files_hyxlm.html
2015-08-06 10:47 - 2015-08-06 10:47 - 00003822 _____ C:\Documents and Settings\Default User\Start Menu\Programs\restore_files_hyxlm.html
2015-08-06 10:47 - 2015-08-06 10:47 - 00003822 _____ C:\Documents and Settings\Default User\restore_files_hyxlm.html
2015-08-06 10:47 - 2015-08-06 10:47 - 00003822 _____ C:\Documents and Settings\Default User\My Documents\restore_files_hyxlm.html
2015-08-06 10:47 - 2015-08-06 10:47 - 00003822 _____ C:\Documents and Settings\Default User\Local Settings\restore_files_hyxlm.html
2015-08-06 10:47 - 2015-08-06 10:47 - 00003822 _____ C:\Documents and Settings\Default User\Local Settings\Application Data\restore_files_hyxlm.html
2015-08-06 10:47 - 2015-08-06 10:47 - 00003822 _____ C:\Documents and Settings\Default User\Desktop\restore_files_hyxlm.html
2015-08-06 10:47 - 2015-08-06 10:47 - 00003822 _____ C:\Documents and Settings\Default User\Application Data\restore_files_hyxlm.html
2015-08-06 10:47 - 2015-08-06 10:47 - 00003822 _____ C:\Documents and Settings\All Users\Start Menu\restore_files_hyxlm.html
2015-08-06 10:47 - 2015-08-06 10:47 - 00003822 _____ C:\Documents and Settings\All Users\Start Menu\Programs\restore_files_hyxlm.html
2015-08-06 10:47 - 2015-08-06 10:47 - 00003822 _____ C:\Documents and Settings\All Users\restore_files_hyxlm.html
2015-08-06 10:47 - 2015-08-06 10:47 - 00003822 _____ C:\Documents and Settings\All Users\Application Data\restore_files_hyxlm.html
2015-08-06 10:47 - 2015-08-06 10:47 - 00002170 _____ C:\Documents and Settings\LocalService\Start Menu\Programs\restore_files_hyxlm.txt
2015-08-06 10:47 - 2015-08-06 10:47 - 00002170 _____ C:\Documents and Settings\LocalService\Local Settings\restore_files_hyxlm.txt
2015-08-06 10:47 - 2015-08-06 10:47 - 00002170 _____ C:\Documents and Settings\LocalService\Local Settings\Application Data\restore_files_hyxlm.txt
2015-08-06 10:47 - 2015-08-06 10:47 - 00002170 _____ C:\Documents and Settings\LocalService\Application Data\restore_files_hyxlm.txt
2015-08-06 10:47 - 2015-08-06 10:47 - 00002170 _____ C:\Documents and Settings\Default User\Start Menu\restore_files_hyxlm.txt
2015-08-06 10:47 - 2015-08-06 10:47 - 00002170 _____ C:\Documents and Settings\Default User\Start Menu\Programs\restore_files_hyxlm.txt
2015-08-06 10:47 - 2015-08-06 10:47 - 00002170 _____ C:\Documents and Settings\Default User\restore_files_hyxlm.txt
2015-08-06 10:47 - 2015-08-06 10:47 - 00002170 _____ C:\Documents and Settings\Default User\My Documents\restore_files_hyxlm.txt
2015-08-06 10:47 - 2015-08-06 10:47 - 00002170 _____ C:\Documents and Settings\Default User\Local Settings\restore_files_hyxlm.txt
2015-08-06 10:47 - 2015-08-06 10:47 - 00002170 _____ C:\Documents and Settings\Default User\Local Settings\Application Data\restore_files_hyxlm.txt
2015-08-06 10:47 - 2015-08-06 10:47 - 00002170 _____ C:\Documents and Settings\Default User\Desktop\restore_files_hyxlm.txt
2015-08-06 10:47 - 2015-08-06 10:47 - 00002170 _____ C:\Documents and Settings\Default User\Application Data\restore_files_hyxlm.txt
2015-08-06 10:47 - 2015-08-06 10:47 - 00002170 _____ C:\Documents and Settings\All Users\Start Menu\restore_files_hyxlm.txt
2015-08-06 10:47 - 2015-08-06 10:47 - 00002170 _____ C:\Documents and Settings\All Users\Start Menu\Programs\restore_files_hyxlm.txt
2015-08-06 10:47 - 2015-08-06 10:47 - 00002170 _____ C:\Documents and Settings\All Users\restore_files_hyxlm.txt
2015-08-06 10:47 - 2015-08-06 10:47 - 00002170 _____ C:\Documents and Settings\All Users\Application Data\restore_files_hyxlm.txt
2015-08-06 10:46 - 2015-08-06 10:46 - 00003822 _____ C:\Documents and Settings\Administrator\Start Menu\restore_files_hyxlm.html
2015-08-06 10:46 - 2015-08-06 10:46 - 00003822 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\restore_files_hyxlm.html
2015-08-06 10:46 - 2015-08-06 10:46 - 00003822 _____ C:\Documents and Settings\Administrator\restore_files_hyxlm.html
2015-08-06 10:46 - 2015-08-06 10:46 - 00002170 _____ C:\Documents and Settings\Administrator\Start Menu\restore_files_hyxlm.txt
2015-08-06 10:46 - 2015-08-06 10:46 - 00002170 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\restore_files_hyxlm.txt
2015-08-06 10:46 - 2015-08-06 10:46 - 00002170 _____ C:\Documents and Settings\Administrator\restore_files_hyxlm.txt
2015-08-06 10:45 - 2015-08-06 10:45 - 00003822 _____ C:\Documents and Settings\Administrator\My Documents\restore_files_hyxlm.html
2015-08-06 10:45 - 2015-08-06 10:45 - 00003822 _____ C:\Documents and Settings\Administrator\Local Settings\restore_files_hyxlm.html
2015-08-06 10:45 - 2015-08-06 10:45 - 00002170 _____ C:\Documents and Settings\Administrator\My Documents\restore_files_hyxlm.txt
2015-08-06 10:45 - 2015-08-06 10:45 - 00002170 _____ C:\Documents and Settings\Administrator\Local Settings\restore_files_hyxlm.txt
2015-08-06 10:43 - 2015-08-06 10:43 - 00003822 _____ C:\Documents and Settings\Administrator\Local Settings\Application Data\restore_files_hyxlm.html
2015-08-06 10:43 - 2015-08-06 10:43 - 00002170 _____ C:\Documents and Settings\Administrator\Local Settings\Application Data\restore_files_hyxlm.txt
2015-08-06 10:42 - 2015-08-06 10:42 - 00003822 _____ C:\Documents and Settings\Administrator\Desktop\restore_files_hyxlm.html
2015-08-06 10:42 - 2015-08-06 10:42 - 00002170 _____ C:\Documents and Settings\Administrator\Desktop\restore_files_hyxlm.txt
2015-08-06 10:41 - 2015-08-06 10:41 - 00003822 _____ C:\Documents and Settings\Administrator\Application Data\restore_files_hyxlm.html
2015-08-06 10:41 - 2015-08-06 10:41 - 00002170 _____ C:\Documents and Settings\Administrator\Application Data\restore_files_hyxlm.txt
2015-08-06 10:36 - 2015-08-06 10:36 - 00000249 _____ C:\Documents and Settings\Nesla-1\My Documents\Recovery_File_jbqlb.txt
2015-08-05 14:54 - 2015-08-05 14:54 - 00003822 _____ C:\Documents and Settings\Nesla-1\Local Settings\Application Data\restore_files_enfmy.html
2015-08-05 14:54 - 2015-08-05 14:54 - 00002170 _____ C:\Documents and Settings\Nesla-1\Local Settings\Application Data\restore_files_enfmy.txt
2015-08-05 14:46 - 2015-08-05 14:46 - 00003822 _____ C:\Documents and Settings\Nesla-1\Application Data\restore_files_enfmy.html
2015-08-05 14:46 - 2015-08-05 14:46 - 00002170 _____ C:\Documents and Settings\Nesla-1\Application Data\restore_files_enfmy.txt
2015-08-05 14:43 - 2015-08-05 14:43 - 00003822 _____ C:\Documents and Settings\LocalService\Start Menu\restore_files_enfmy.html
2015-08-05 14:43 - 2015-08-05 14:43 - 00003822 _____ C:\Documents and Settings\LocalService\Start Menu\Programs\restore_files_enfmy.html
2015-08-05 14:43 - 2015-08-05 14:43 - 00003822 _____ C:\Documents and Settings\LocalService\restore_files_enfmy.html
2015-08-05 14:43 - 2015-08-05 14:43 - 00003822 _____ C:\Documents and Settings\LocalService\Local Settings\restore_files_enfmy.html
2015-08-05 14:43 - 2015-08-05 14:43 - 00003822 _____ C:\Documents and Settings\LocalService\Local Settings\Application Data\restore_files_enfmy.html
2015-08-05 14:43 - 2015-08-05 14:43 - 00003822 _____ C:\Documents and Settings\LocalService\Application Data\restore_files_enfmy.html
2015-08-05 14:43 - 2015-08-05 14:43 - 00003822 _____ C:\Documents and Settings\Default User\Start Menu\restore_files_enfmy.html
2015-08-05 14:43 - 2015-08-05 14:43 - 00003822 _____ C:\Documents and Settings\Default User\Start Menu\Programs\restore_files_enfmy.html
2015-08-05 14:43 - 2015-08-05 14:43 - 00003822 _____ C:\Documents and Settings\Default User\restore_files_enfmy.html
2015-08-05 14:43 - 2015-08-05 14:43 - 00003822 _____ C:\Documents and Settings\Default User\My Documents\restore_files_enfmy.html
2015-08-05 14:43 - 2015-08-05 14:43 - 00003822 _____ C:\Documents and Settings\Default User\Local Settings\restore_files_enfmy.html
2015-08-05 14:43 - 2015-08-05 14:43 - 00003822 _____ C:\Documents and Settings\Default User\Local Settings\Application Data\restore_files_enfmy.html
2015-08-05 14:43 - 2015-08-05 14:43 - 00003822 _____ C:\Documents and Settings\Default User\Desktop\restore_files_enfmy.html
2015-08-05 14:43 - 2015-08-05 14:43 - 00003822 _____ C:\Documents and Settings\Default User\Application Data\restore_files_enfmy.html
2015-08-05 14:43 - 2015-08-05 14:43 - 00003822 _____ C:\Documents and Settings\All Users\Start Menu\restore_files_enfmy.html
2015-08-05 14:43 - 2015-08-05 14:43 - 00003822 _____ C:\Documents and Settings\All Users\Start Menu\Programs\restore_files_enfmy.html
2015-08-05 14:43 - 2015-08-05 14:43 - 00003822 _____ C:\Documents and Settings\All Users\restore_files_enfmy.html
2015-08-05 14:43 - 2015-08-05 14:43 - 00003822 _____ C:\Documents and Settings\All Users\Application Data\restore_files_enfmy.html
2015-08-05 14:43 - 2015-08-05 14:43 - 00002170 _____ C:\Documents and Settings\LocalService\Start Menu\restore_files_enfmy.txt
2015-08-05 14:43 - 2015-08-05 14:43 - 00002170 _____ C:\Documents and Settings\LocalService\Start Menu\Programs\restore_files_enfmy.txt
2015-08-05 14:43 - 2015-08-05 14:43 - 00002170 _____ C:\Documents and Settings\LocalService\restore_files_enfmy.txt
2015-08-05 14:43 - 2015-08-05 14:43 - 00002170 _____ C:\Documents and Settings\LocalService\Local Settings\restore_files_enfmy.txt
2015-08-05 14:43 - 2015-08-05 14:43 - 00002170 _____ C:\Documents and Settings\LocalService\Local Settings\Application Data\restore_files_enfmy.txt
2015-08-05 14:43 - 2015-08-05 14:43 - 00002170 _____ C:\Documents and Settings\LocalService\Application Data\restore_files_enfmy.txt
2015-08-05 14:43 - 2015-08-05 14:43 - 00002170 _____ C:\Documents and Settings\Default User\Start Menu\restore_files_enfmy.txt
2015-08-05 14:43 - 2015-08-05 14:43 - 00002170 _____ C:\Documents and Settings\Default User\Start Menu\Programs\restore_files_enfmy.txt
2015-08-05 14:43 - 2015-08-05 14:43 - 00002170 _____ C:\Documents and Settings\Default User\restore_files_enfmy.txt
2015-08-05 14:43 - 2015-08-05 14:43 - 00002170 _____ C:\Documents and Settings\Default User\My Documents\restore_files_enfmy.txt
2015-08-05 14:43 - 2015-08-05 14:43 - 00002170 _____ C:\Documents and Settings\Default User\Local Settings\restore_files_enfmy.txt
2015-08-05 14:43 - 2015-08-05 14:43 - 00002170 _____ C:\Documents and Settings\Default User\Local Settings\Application Data\restore_files_enfmy.txt
2015-08-05 14:43 - 2015-08-05 14:43 - 00002170 _____ C:\Documents and Settings\Default User\Desktop\restore_files_enfmy.txt
2015-08-05 14:43 - 2015-08-05 14:43 - 00002170 _____ C:\Documents and Settings\Default User\Application Data\restore_files_enfmy.txt
2015-08-05 14:43 - 2015-08-05 14:43 - 00002170 _____ C:\Documents and Settings\All Users\Start Menu\restore_files_enfmy.txt
2015-08-05 14:43 - 2015-08-05 14:43 - 00002170 _____ C:\Documents and Settings\All Users\Start Menu\Programs\restore_files_enfmy.txt
2015-08-05 14:43 - 2015-08-05 14:43 - 00002170 _____ C:\Documents and Settings\All Users\restore_files_enfmy.txt
2015-08-05 14:43 - 2015-08-05 14:43 - 00002170 _____ C:\Documents and Settings\All Users\Application Data\restore_files_enfmy.txt
2015-08-05 14:41 - 2015-08-05 14:41 - 00003822 _____ C:\Documents and Settings\Administrator\restore_files_enfmy.html
2015-08-05 14:41 - 2015-08-05 14:41 - 00002170 _____ C:\Documents and Settings\Administrator\restore_files_enfmy.txt
2015-08-05 14:40 - 2015-08-05 14:40 - 00003822 _____ C:\Documents and Settings\Administrator\Start Menu\restore_files_enfmy.html
2015-08-05 14:40 - 2015-08-05 14:40 - 00003822 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\restore_files_enfmy.html
2015-08-05 14:40 - 2015-08-05 14:40 - 00003822 _____ C:\Documents and Settings\Administrator\My Documents\restore_files_enfmy.html
2015-08-05 14:40 - 2015-08-05 14:40 - 00003822 _____ C:\Documents and Settings\Administrator\Local Settings\restore_files_enfmy.html
2015-08-05 14:40 - 2015-08-05 14:40 - 00002170 _____ C:\Documents and Settings\Administrator\Start Menu\restore_files_enfmy.txt
2015-08-05 14:40 - 2015-08-05 14:40 - 00002170 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\restore_files_enfmy.txt
2015-08-05 14:40 - 2015-08-05 14:40 - 00002170 _____ C:\Documents and Settings\Administrator\My Documents\restore_files_enfmy.txt
2015-08-05 14:40 - 2015-08-05 14:40 - 00002170 _____ C:\Documents and Settings\Administrator\Local Settings\restore_files_enfmy.txt
2015-08-05 14:38 - 2015-08-05 14:38 - 00003822 _____ C:\Documents and Settings\Administrator\Local Settings\Application Data\restore_files_enfmy.html
2015-08-05 14:37 - 2015-08-05 14:38 - 00002170 _____ C:\Documents and Settings\Administrator\Local Settings\Application Data\restore_files_enfmy.txt
2015-08-05 14:35 - 2015-08-05 14:35 - 00003822 _____ C:\Documents and Settings\Administrator\Desktop\restore_files_enfmy.html
2015-08-05 14:35 - 2015-08-05 14:35 - 00003822 _____ C:\Documents and Settings\Administrator\Application Data\restore_files_enfmy.html
2015-08-05 14:35 - 2015-08-05 14:35 - 00002170 _____ C:\Documents and Settings\Administrator\Desktop\restore_files_enfmy.txt
2015-08-05 14:35 - 2015-08-05 14:35 - 00002170 _____ C:\Documents and Settings\Administrator\Application Data\restore_files_enfmy.txt
2015-08-05 14:34 - 2015-08-05 14:34 - 00000249 _____ C:\Documents and Settings\Nesla-1\My Documents\Recovery_File_xacir.txt
2015-08-04 10:56 - 2015-08-04 10:56 - 06420480 _____ C:\Program Files\GUT8A.tmp
2015-08-04 10:55 - 2015-08-04 11:00 - 00000000 ____D C:\Program Files\GUM89.tmp
2015-07-31 13:02 - 2015-08-06 11:07 - 00000000 ___HD C:\Documents and Settings\All Users\Application Data\{782BC108-9123-4B10-9CDE-BA6A2CFD98A6}
2015-07-27 14:20 - 2015-07-27 14:19 - 00090112 _____ C:\WINXP\Minidump\Mini072715-01.dmp
2015-07-24 15:02 - 2015-08-06 11:21 - 01874526 _____ C:\Documents and Settings\Nesla-1\My Documents\Салата „Капрезе“ - Вкусно - Предястие - Edna.pdf.aaa
2015-07-23 12:28 - 2015-08-06 11:21 - 02455486 _____ C:\Documents and Settings\Nesla-1\My Documents\Щрудел с кайсии - Бон Апети.pdf.aaa
2015-07-08 11:48 - 2015-08-06 11:21 - 02007022 _____ C:\Documents and Settings\Nesla-1\My Documents\Бразилски кекс с кокос - Бон Апети.pdf.aaa
2015-07-03 14:27 - 2015-08-06 11:21 - 00982814 _____ C:\Documents and Settings\Nesla-1\My Documents\Тарт със сирене и шунка - Бон Апети.pdf.aaa
2015-07-02 14:19 - 2015-08-06 11:21 - 01522654 _____ C:\Documents and Settings\Nesla-1\My Documents\Сладкиш с череши - Бон Апети.pdf.aaa
2015-06-29 15:03 - 2015-06-29 15:03 - 00000836 _____ C:\Documents and Settings\Nesla-1\Start Menu\µTorrent.lnk
2015-06-29 15:03 - 2015-06-29 15:03 - 00000836 _____ C:\Documents and Settings\Nesla-1\Desktop\µTorrent.lnk
2015-06-05 11:00 - 2015-08-06 11:21 - 00276622 _____ C:\Documents and Settings\Nesla-1\My Documents\Nesla OOD 973 04062015.pdf.aaa
2015-06-01 09:51 - 2015-08-06 11:21 - 00000000 ____D C:\Documents and Settings\NetworkService\Application Data\Adobe
2015-06-01 09:50 - 2015-07-20 10:19 - 00778416 _____ (Adobe Systems Incorporated) C:\WINXP\system32\FlashPlayerApp.exe
2015-06-01 09:50 - 2015-07-20 10:19 - 00142512 _____ (Adobe Systems Incorporated) C:\WINXP\system32\FlashPlayerCPLApp.cpl
2015-06-01 09:50 - 2000-12-31 23:10 - 00000826 _____ C:\WINXP\Tasks\Adobe Flash Player Updater.job
2015-05-08 11:20 - 2015-08-06 11:21 - 01510686 _____ C:\Documents and Settings\Nesla-1\My Documents\Мелопита - Бон Апети.pdf.aaa
2015-05-05 13:24 - 2015-08-06 11:21 - 00905502 _____ C:\Documents and Settings\Nesla-1\My Documents\Сирене в гювече - рецепта - Kulinar.pdf.aaa
2015-05-04 12:48 - 2015-08-06 11:21 - 00246782 _____ C:\Documents and Settings\Nesla-1\My Documents\Zori.pdf.aaa
2015-05-04 12:33 - 2015-08-06 11:18 - 00250638 _____ C:\Documents and Settings\Nesla-1\My Documents\Bobi.pdf.aaa
2015-04-29 11:40 - 2015-08-06 11:21 - 00127262 _____ C:\Documents and Settings\Nesla-1\My Documents\Отпечатай.pdf-N.pdf.aaa
2015-04-29 11:30 - 2015-08-06 11:21 - 00126958 _____ C:\Documents and Settings\Nesla-1\My Documents\Отпечатай.pdf.aaa
2015-04-23 11:48 - 2015-08-06 11:21 - 01941438 _____ C:\Documents and Settings\Nesla-1\My Documents\Солена торта - Бон Апети.pdf.aaa
2015-04-20 13:36 - 2015-08-06 11:21 - 00782334 _____ C:\Documents and Settings\Nesla-1\My Documents\Свински котлети с домати и грах _ Готварска Рецепта от Гответе с Мен.pdf.aaa
2015-03-20 14:15 - 2015-07-27 14:20 - 00000000 ____D C:\WINXP\Minidump
2015-03-20 14:15 - 2015-03-20 14:14 - 00090112 _____ C:\WINXP\Minidump\Mini032015-01.dmp
2015-03-06 13:56 - 2015-08-06 11:21 - 05772446 _____ C:\Documents and Settings\Nesla-1\My Documents\Вкуснотека_ Шоколадов кейк с банан.pdf.aaa
2014-12-15 01:26 - 2015-08-06 11:21 - 00000000 ____D C:\Documents and Settings\NetworkService\Application Data\Macromedia
2014-12-10 11:30 - 2015-08-06 11:21 - 00000000 ____D C:\Documents and Settings\NetworkService\Application Data\Sun
2014-12-08 13:57 - 2015-08-06 11:18 - 00020398 _____ C:\Documents and Settings\Nesla-1\My Documents\8.doc.aaa
2014-09-24 11:05 - 2015-08-06 12:54 - 00000000 ____D C:\Documents and Settings\Nesla-1\Local Settings\Application Data\SWDS
2014-09-18 14:07 - 2015-08-06 11:18 - 02915902 _____ C:\Documents and Settings\Nesla-1\My Documents\25608A3F.jpg.aaa
2014-08-27 11:38 - 2015-08-06 11:21 - 03311742 _____ C:\Documents and Settings\Nesla-1\My Documents\Picture 003.jpg.aaa
2014-08-27 11:30 - 2015-08-06 11:19 - 00000000 ____D C:\Documents and Settings\Nesla-1\My Documents\la boda
2014-08-27 11:28 - 2015-08-06 11:21 - 03555246 _____ C:\Documents and Settings\Nesla-1\My Documents\Picture 008.jpg.aaa
2014-08-27 10:56 - 2015-08-06 11:21 - 03453134 _____ C:\Documents and Settings\Nesla-1\My Documents\Picture 005.jpg.aaa
2014-08-26 15:16 - 2015-08-06 11:18 - 00000000 ____D C:\Documents and Settings\Nesla-1\My Documents\alysa
2014-08-26 14:59 - 2008-04-14 02:42 - 00159232 _____ (Microsoft Corporation) C:\WINXP\system32\ptpusd.dll
2014-08-26 14:59 - 2001-08-17 19:36 - 00005632 _____ (Microsoft Corporation) C:\WINXP\system32\ptpusb.dll
2014-07-08 12:15 - 2014-07-08 12:15 - 00000000 ___HD C:\WINXP\system32\GroupPolicy
2014-07-08 12:05 - 2014-07-08 12:05 - 00000000 ____D C:\WINXP\pss
2014-07-08 11:56 - 2001-01-01 01:31 - 00000000 ____D C:\WINXP\system32\appmgmt
2014-06-20 10:46 - 2014-06-20 10:46 - 00000000 ____D C:\WINXP\system32\LogFiles
2014-05-07 16:00 - 2014-05-07 16:00 - 00011550 _____ C:\WINXP\KB2964358-IE8.log
2014-04-09 16:07 - 2014-04-09 16:07 - 00000000 __HDC C:\WINXP\$NtUninstallKB2922229$
2014-04-09 16:04 - 2014-04-09 16:04 - 00016959 _____ C:\WINXP\KB2936068-IE8.log
2014-04-09 10:51 - 2014-04-09 16:07 - 00024588 _____ C:\WINXP\KB2922229.log
2014-04-01 13:58 - 2015-08-06 11:07 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\SweetIM
2014-03-26 13:45 - 2014-03-26 13:45 - 00000000 ____D C:\Program Files\SweetIM
2014-03-26 13:44 - 2015-08-06 11:09 - 00000000 ____D C:\Documents and Settings\Nesla-1\Local Settings\Application Data\Conduit
2014-03-26 13:44 - 2014-03-26 13:44 - 00000000 ____D C:\Program Files\Conduit
2014-03-26 13:42 - 2014-09-17 22:42 - 00773968 _____ (Microsoft Corporation) C:\WINXP\system32\msvcr100.dll
2014-03-26 13:42 - 2014-09-17 22:42 - 00632656 _____ (Microsoft Corporation) C:\WINXP\system32\msvcr80.dll
2014-03-26 13:42 - 2014-09-17 22:42 - 00554832 _____ (Microsoft Corporation) C:\WINXP\system32\msvcp80.dll
2014-03-26 13:42 - 2014-09-17 22:42 - 00479232 _____ (Microsoft Corporation) C:\WINXP\system32\msvcm80.dll
2014-03-26 13:42 - 2014-09-17 22:42 - 00421200 _____ (Microsoft Corporation) C:\WINXP\system32\msvcp100.dll
2014-03-26 13:42 - 2014-09-17 22:42 - 00001870 _____ C:\WINXP\system32\Microsoft.VC80.CRT.manifest
2014-03-26 13:41 - 2014-03-26 13:45 - 00000000 _____ C:\END
2014-03-13 15:41 - 2014-03-13 15:41 - 00017018 _____ C:\WINXP\KB2925418-IE8.log
2014-03-13 15:41 - 2014-03-13 15:41 - 00000000 __HDC C:\WINXP\$NtUninstallKB2929961$
2014-03-13 15:40 - 2014-03-13 15:40 - 00000000 __HDC C:\WINXP\$NtUninstallKB2930275$
2014-03-13 10:07 - 2014-03-13 15:41 - 00020308 _____ C:\WINXP\KB2929961.log
2014-03-13 10:06 - 2014-03-13 15:40 - 00021631 _____ C:\WINXP\KB2930275.log
2014-03-11 06:39 - 2015-07-08 14:00 - 00000216 _____ C:\WINXP\Tasks\Microsoft Windows XP End of Service Notification Monthly.job
2014-03-11 06:39 - 2001-01-01 02:48 - 00000222 _____ C:\WINXP\Tasks\Microsoft Windows XP End of Service Notification Logon.job
2014-03-10 15:02 - 2014-03-10 15:02 - 00010113 _____ C:\WINXP\KB2934207.log
2014-03-10 15:02 - 2014-03-10 15:02 - 00000000 __HDC C:\WINXP\$NtUninstallKB2934207$
2014-03-10 13:15 - 2014-02-25 17:59 - 00013312 ____N (Microsoft Corporation) C:\WINXP\system32\xp_eos.exe
2014-03-10 13:15 - 2014-02-25 17:59 - 00013312 ____C (Microsoft Corporation) C:\WINXP\system32\dllcache\xp_eos.exe
2014-03-06 10:36 - 2015-08-06 11:06 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Licenses
2014-03-06 10:35 - 2014-03-06 10:35 - 00000620 _____ C:\Program Files\Common Files\Konvertor.lnk
2014-03-06 10:35 - 2002-06-19 10:19 - 00091136 ____R (Microsoft Corporation) C:\WINXP\system32\msls2.dll
2014-03-06 10:33 - 2015-08-06 11:06 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Konvertor
2014-02-25 16:33 - 2014-02-25 16:33 - 00000000 ____D C:\Program Files\Common Files\Skype
2014-02-14 16:36 - 2014-02-14 16:36 - 00000000 __HDC C:\WINXP\$NtUninstallKB2916036$
2014-02-14 16:22 - 2014-02-14 16:22 - 00016945 _____ C:\WINXP\KB2909921-IE8.log
2014-02-14 16:22 - 2014-02-14 16:22 - 00010230 _____ C:\WINXP\KB2909210-IE8.log
2014-02-14 10:58 - 2014-02-14 16:36 - 00025169 _____ C:\WINXP\KB2916036.log
2014-02-10 14:55 - 2012-06-02 15:18 - 00275696 _____ (Microsoft Corporation) C:\WINXP\system32\mucltui.dll
2014-02-10 14:55 - 2012-06-02 15:18 - 00214256 _____ (Microsoft Corporation) C:\WINXP\system32\muweb.dll
2014-02-10 14:55 - 2012-06-02 15:18 - 00017136 _____ (Microsoft Corporation) C:\WINXP\system32\mucltui.dll.mui
2014-02-10 11:59 - 2014-04-03 15:23 - 00001945 _____ C:\WINXP\epplauncher.mif
2014-02-10 11:59 - 2014-04-03 15:23 - 00001694 _____ C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-02-10 11:58 - 2014-04-03 15:23 - 00000000 ____D C:\Program Files\Microsoft Security Client
2014-02-10 11:30 - 2015-08-06 10:58 - 00000000 __SHD C:\Documents and Settings\Administrator\IETldCache
2014-02-10 11:30 - 2014-02-10 11:30 - 00000000 __SHD C:\WINXP\CSC
2014-02-10 11:30 - 2011-06-13 13:59 - 00001587 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\Remote Assistance.lnk
2014-02-10 11:30 - 2001-01-01 05:04 - 00000000 ____D C:\Documents and Settings\Administrator\Local Settings\Temp
2014-02-10 11:30 - 2001-01-01 02:46 - 00000000 ___RD C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories
2014-02-10 11:30 - 2001-01-01 01:48 - 00000178 ___SH C:\Documents and Settings\Administrator\ntuser.ini
2014-02-10 11:30 - 2001-01-01 01:28 - 00000000 ____D C:\Documents and Settings\Administrator
2014-01-16 16:41 - 2014-01-16 16:41 - 00010424 _____ C:\WINXP\KB2914368.log
2014-01-16 16:41 - 2014-01-16 16:41 - 00000000 __HDC C:\WINXP\$NtUninstallKB2914368$
2013-12-12 15:34 - 2013-12-12 15:35 - 00018319 _____ C:\WINXP\KB2898785-IE8.log
2013-12-12 15:34 - 2013-12-12 15:34 - 00010803 _____ C:\WINXP\KB2904266.log
2013-12-12 15:34 - 2013-12-12 15:34 - 00000000 __HDC C:\WINXP\$NtUninstallKB2904266$
2013-12-12 15:34 - 2013-12-12 15:34 - 00000000 __HDC C:\WINXP\$NtUninstallKB2898715$
2013-12-12 15:33 - 2013-12-12 15:33 - 00000000 __HDC C:\WINXP\$NtUninstallKB2893984$
2013-12-12 15:33 - 2013-12-12 15:33 - 00000000 __HDC C:\WINXP\$NtUninstallKB2893294$
2013-12-12 15:33 - 2013-12-12 15:33 - 00000000 __HDC C:\WINXP\$NtUninstallKB2892075$
2013-12-12 15:20 - 2013-12-12 15:33 - 00020681 _____ C:\WINXP\KB2893294.log
2013-12-12 15:19 - 2013-12-12 15:33 - 00021496 _____ C:\WINXP\KB2893984.log
2013-12-12 15:19 - 2013-12-12 15:33 - 00019860 _____ C:\WINXP\KB2892075.log
2013-12-12 15:18 - 2013-12-12 15:34 - 00021943 _____ C:\WINXP\KB2898715.log
2013-11-13 13:41 - 2013-11-13 13:41 - 00014769 _____ C:\WINXP\KB2900986.log
2013-11-13 13:41 - 2013-11-13 13:41 - 00000000 __HDC C:\WINXP\$NtUninstallKB2900986$
2013-11-13 13:41 - 2013-11-13 13:41 - 00000000 __HDC C:\WINXP\$NtUninstallKB2868626$
2013-11-13 13:40 - 2013-11-13 13:40 - 00000000 __HDC C:\WINXP\$NtUninstallKB2876331$
2013-11-13 13:40 - 2013-11-13 13:40 - 00000000 __HDC C:\WINXP\$NtUninstallKB2862152$
2013-11-13 13:39 - 2013-11-13 13:40 - 00017000 _____ C:\WINXP\KB2888505-IE8.log
2013-11-13 10:39 - 2013-11-13 13:40 - 00024758 _____ C:\WINXP\KB2876331.log
2013-11-13 10:37 - 2013-11-13 13:41 - 00026257 _____ C:\WINXP\KB2868626.log
2013-11-13 10:37 - 2013-11-13 13:41 - 00025382 _____ C:\WINXP\KB2862152.log
2013-10-17 13:51 - 2013-10-20 11:23 - 00000000 ____D C:\WINXP\system32\XPSViewer
2013-10-17 13:51 - 2013-10-17 13:51 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-10-17 13:51 - 2013-10-17 13:51 - 00000000 ____D C:\Program Files\MSBuild
2013-10-17 13:50 - 2008-07-06 04:06 - 01676288 ____N (Microsoft Corporation) C:\WINXP\system32\xpssvcs.dll
2013-10-17 13:50 - 2008-07-06 04:06 - 01676288 ____C (Microsoft Corporation) C:\WINXP\system32\dllcache\xpssvcs.dll
2013-10-17 13:50 - 2008-07-06 04:06 - 00575488 ____N (Microsoft Corporation) C:\WINXP\system32\xpsshhdr.dll
2013-10-17 13:50 - 2008-07-06 04:06 - 00575488 ____C (Microsoft Corporation) C:\WINXP\system32\dllcache\xpsshhdr.dll
2013-10-17 13:50 - 2008-07-06 04:06 - 00117760 ____N (Microsoft Corporation) C:\WINXP\system32\prntvpt.dll
2013-10-17 13:50 - 2008-07-06 04:06 - 00089088 ____C (Microsoft Corporation) C:\WINXP\system32\dllcache\filterpipelineprintproc.dll
2013-10-17 13:50 - 2008-07-06 02:50 - 00597504 ____C (Microsoft Corporation) C:\WINXP\system32\dllcache\printfilterpipelinesvc.exe
2013-10-17 13:47 - 2014-02-17 09:04 - 00000000 ____D C:\WINXP\Microsoft.NET
2013-10-09 14:27 - 2013-10-09 14:27 - 00015429 _____ C:\WINXP\KB2862335.log
2013-10-09 14:27 - 2013-10-09 14:27 - 00000000 __HDC C:\WINXP\$NtUninstallKB2862335$
2013-10-09 14:27 - 2013-10-09 14:27 - 00000000 __HDC C:\WINXP\$NtUninstallKB2847311$
2013-10-09 14:26 - 2013-10-09 14:26 - 00017047 _____ C:\WINXP\KB2879017-IE8.log
2013-10-09 14:26 - 2013-10-09 14:26 - 00000000 __HDC C:\WINXP\$NtUninstallKB2883150$
2013-10-09 14:25 - 2013-10-09 14:25 - 00000000 __HDC C:\WINXP\$NtUninstallKB2862330$
2013-10-09 08:03 - 2013-08-08 16:55 - 00144128 ____C (Microsoft Corporation) C:\WINXP\system32\dllcache\usbport.sys
2013-10-09 08:03 - 2013-08-08 16:55 - 00005376 ____C (Microsoft Corporation) C:\WINXP\system32\dllcache\usbd.sys
2013-10-09 08:03 - 2009-03-18 03:02 - 00030336 ____N (Microsoft Corporation) C:\WINXP\system32\Drivers\usbehci.sys
2013-10-09 08:03 - 2009-03-18 03:02 - 00030336 ____C (Microsoft Corporation) C:\WINXP\system32\dllcache\usbehci.sys
2013-10-09 08:02 - 2013-10-09 14:27 - 00024417 _____ C:\WINXP\KB2847311.log
2013-10-09 08:02 - 2013-07-02 18:12 - 00025088 ____C (Microsoft Corporation) C:\WINXP\system32\dllcache\hidparse.sys
2013-09-27 09:53 - 2014-01-25 00:19 - 00231960 _____ (Microsoft Corporation) C:\WINXP\system32\Drivers\MpFilter.sys
2013-09-11 16:04 - 2013-09-11 16:05 - 00017555 _____ C:\WINXP\KB2870699-IE8.log
2013-09-11 16:04 - 2013-09-11 16:04 - 00000000 __HDC C:\WINXP\$NtUninstallKB2876315$
2013-09-11 16:04 - 2013-09-11 16:04 - 00000000 __HDC C:\WINXP\$NtUninstallKB2876217$
2013-09-11 16:03 - 2013-09-11 16:03 - 00000000 __HDC C:\WINXP\$NtUninstallKB2864063$
2013-09-11 07:42 - 2013-09-11 16:04 - 00019991 _____ C:\WINXP\KB2864063.log
2013-09-11 07:41 - 2013-09-11 16:04 - 00021608 _____ C:\WINXP\KB2876315.log
2013-09-11 07:41 - 2013-09-11 16:04 - 00021054 _____ C:\WINXP\KB2876217.log
2013-09-03 02:00 - 2013-09-03 02:00 - 00004157 _____ C:\WINXP\KB2834904-v2.log
2013-09-03 02:00 - 2013-09-03 02:00 - 00000000 __HDC C:\WINXP\$NtUninstallKB2834904-v2_WM11$
2013-09-02 14:56 - 2013-09-02 14:57 - 00019047 _____ C:\WINXP\KB2862772-IE8.log
2013-09-02 14:56 - 2013-09-02 14:56 - 00000000 __HDC C:\WINXP\$NtUninstallKB2850869$
2013-09-02 14:55 - 2013-09-02 14:55 - 00000000 __HDC C:\WINXP\$NtUninstallKB2859537$
2013-09-02 14:52 - 2013-09-02 14:55 - 00011767 _____ C:\WINXP\KB2863058.log
2013-09-02 14:52 - 2013-09-02 14:52 - 00000000 __HDC C:\WINXP\$NtUninstallKB2863058$
2013-09-02 14:51 - 2013-09-02 14:51 - 00000000 __HDC C:\WINXP\$NtUninstallKB2849470$
2013-09-02 05:03 - 2013-09-02 14:56 - 00022578 _____ C:\WINXP\KB2850869.log
2013-09-02 05:02 - 2013-09-02 14:56 - 00023500 _____ C:\WINXP\KB2859537.log
2013-07-31 04:16 - 2013-07-31 04:16 - 00015781 _____ C:\WINXP\KB2834886.log
2013-07-31 04:16 - 2013-07-31 04:16 - 00010031 _____ C:\WINXP\KB2834904.log
2013-07-31 04:16 - 2013-07-31 04:16 - 00000000 __HDC C:\WINXP\$NtUninstallKB2850851$
2013-07-31 04:16 - 2013-07-31 04:16 - 00000000 __HDC C:\WINXP\$NtUninstallKB2834904_WM11$
2013-07-31 04:16 - 2013-07-31 04:16 - 00000000 __HDC C:\WINXP\$NtUninstallKB2834886$
2013-07-31 04:15 - 2013-07-31 04:15 - 00000000 __HDC C:\WINXP\$NtUninstallKB2845187$
2013-07-31 04:08 - 2013-07-31 04:14 - 00017939 _____ C:\WINXP\KB2846071-IE8.log
2013-07-19 00:18 - 2013-07-19 00:18 - 00102608 _____ (Microsoft Corporation) C:\WINXP\system32\PresentationCFFRasterizerNative_v0300.dll
2013-07-12 11:14 - 2013-07-31 04:16 - 00026793 _____ C:\WINXP\KB2850851.log
2013-07-12 11:13 - 2013-07-31 04:16 - 00025758 _____ C:\WINXP\KB2845187.log
2013-06-13 14:22 - 2013-06-13 14:22 - 00000000 __HDC C:\WINXP\$NtUninstallKB2839229$
2013-06-13 14:20 - 2013-06-13 14:21 - 00016884 _____ C:\WINXP\KB2838727-IE8.log
2013-06-13 08:25 - 2013-06-13 14:22 - 00026023 _____ C:\WINXP\KB2839229.log
2013-05-22 10:47 - 2015-08-06 11:21 - 00032174 _____ C:\Documents and Settings\Nesla-1\My Documents\Цени на услугите на БСА за предоставяне на Акредитация на лабораториите.doc.aaa
2013-05-15 15:05 - 2013-05-15 15:06 - 00017003 _____ C:\WINXP\KB2829530-IE8.log
2013-05-15 15:05 - 2013-05-15 15:05 - 00012354 _____ C:\WINXP\KB2820197.log
2013-05-15 15:05 - 2013-05-15 15:05 - 00011285 _____ C:\WINXP\KB2847204-IE8.log
2013-05-15 15:05 - 2013-05-15 15:05 - 00000000 __HDC C:\WINXP\$NtUninstallKB2820197$
2013-05-15 15:04 - 2013-05-15 15:04 - 00000000 __HDC C:\WINXP\$NtUninstallKB2829361$
2013-05-15 12:38 - 2013-05-15 15:04 - 00021660 _____ C:\WINXP\KB2829361.log
2013-04-23 08:25 - 2013-04-23 08:25 - 00000664 _____ C:\Documents and Settings\Nesla-1\Local Settings\Application Data\d3d9caps.tmp
2013-04-10 15:27 - 2013-04-10 15:28 - 00031666 _____ C:\WINXP\KB2817183-IE8.log
2013-04-10 15:27 - 2013-04-10 15:27 - 00000000 __HDC C:\WINXP\$NtUninstallKB2820917$
2013-04-10 15:27 - 2013-04-10 15:27 - 00000000 __HDC C:\WINXP\$NtUninstallKB2808735$
2013-04-10 15:26 - 2013-04-10 15:26 - 00000000 __HDC C:\WINXP\$NtUninstallKB2813170$
2013-04-10 08:20 - 2013-04-10 15:27 - 00036449 _____ C:\WINXP\KB2808735.log
2013-04-10 08:20 - 2013-04-10 15:27 - 00035257 _____ C:\WINXP\KB2820917.log
2013-04-01 11:39 - 2013-04-01 11:39 - 00011138 _____ C:\Documents and Settings\Nesla-1\Desktop\hs_err_pid1972.log
2013-03-22 15:40 - 2013-03-22 15:40 - 00012638 _____ C:\WINXP\KB2807986.log
2013-03-22 15:40 - 2013-03-22 15:40 - 00000000 __HDC C:\WINXP\$NtUninstallKB2807986$
2013-03-22 10:04 - 2013-02-11 16:32 - 00012928 ____C (Microsoft Corporation) C:\WINXP\system32\dllcache\usb8023x.sys
2013-03-14 15:35 - 2013-03-14 15:36 - 00023103 _____ C:\WINXP\KB2809289-IE8.log
2013-02-26 14:14 - 2015-08-06 11:21 - 00026542 _____ C:\Documents and Settings\Nesla-1\My Documents\До Комисия по възражения към ИА.doc.aaa
2013-02-13 16:16 - 2013-02-13 16:16 - 00016914 _____ C:\WINXP\KB2797052-IE8.log
2013-02-13 16:16 - 2013-02-13 16:16 - 00000000 __HDC C:\WINXP\$NtUninstallKB2778344$
2013-02-13 16:15 - 2013-02-13 16:16 - 00000000 __HDC C:\WINXP\$NtUninstallKB2799494$
2013-02-13 16:15 - 2013-02-13 16:15 - 00000000 __HDC C:\WINXP\$NtUninstallKB2802968$
2013-02-13 16:15 - 2013-02-13 16:15 - 00000000 __HDC C:\WINXP\$NtUninstallKB2780091$
2013-02-13 16:14 - 2013-02-13 16:15 - 00023104 _____ C:\WINXP\KB2792100-IE8.log
2013-02-13 09:34 - 2013-02-13 16:16 - 00039066 _____ C:\WINXP\KB2778344.log
2013-02-13 09:33 - 2013-02-13 16:16 - 00043123 _____ C:\WINXP\KB2799494.log
2013-02-13 09:33 - 2013-02-13 16:15 - 00037431 _____ C:\WINXP\KB2780091.log
2013-02-13 09:33 - 2013-02-13 16:15 - 00025713 _____ C:\WINXP\KB2802968.log
2013-01-31 14:47 - 2015-08-06 11:07 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Skype
2013-01-31 14:47 - 2015-08-04 10:52 - 00002261 _____ C:\Documents and Settings\All Users\Desktop\Skype.lnk
2013-01-29 09:30 - 2013-01-29 09:30 - 00126976 __RSH C:\WINXP\system32\mfplatc.dll
2013-01-29 09:30 - 2001-01-01 02:48 - 00000304 _____ C:\WINXP\Tasks\OMLGJFNC.job
2013-01-15 16:04 - 2013-01-15 16:05 - 00016707 _____ C:\WINXP\KB2799329-IE8.log
2013-01-10 13:01 - 2013-01-10 13:01 - 00000000 __HDC C:\WINXP\$NtUninstallKB2757638$
2013-01-10 11:36 - 2013-01-10 13:01 - 00032965 _____ C:\WINXP\KB2757638.log
2012-12-21 16:31 - 2012-12-21 16:32 - 00015305 _____ C:\WINXP\KB2753842-v2.log
2012-12-21 16:31 - 2012-12-21 16:31 - 00000000 __HDC C:\WINXP\$NtUninstallKB2753842-v2$
2012-12-13 16:49 - 2012-12-13 16:49 - 00000000 __HDC C:\WINXP\$NtUninstallKB2758857$
2012-12-13 16:48 - 2012-12-13 16:48 - 00007872 _____ C:\WINXP\KB2779562.log
2012-12-13 16:48 - 2012-12-13 16:48 - 00000000 __HDC C:\WINXP\$NtUninstallKB2779562$
2012-12-13 16:48 - 2012-12-13 16:48 - 00000000 __HDC C:\WINXP\$NtUninstallKB2779030$
2012-12-13 16:48 - 2012-12-13 16:48 - 00000000 __HDC C:\WINXP\$NtUninstallKB2770660$
2012-12-13 16:48 - 2012-12-13 16:48 - 00000000 __HDC C:\WINXP\$NtUninstallKB2753842$
2012-12-13 16:47 - 2012-12-13 16:48 - 00029089 _____ C:\WINXP\KB2761465-IE8.log
2012-12-13 09:38 - 2012-12-13 16:49 - 00036166 _____ C:\WINXP\KB2758857.log
2012-12-13 09:36 - 2012-12-13 16:48 - 00034943 _____ C:\WINXP\KB2753842.log
2012-12-10 16:10 - 2015-08-06 11:13 - 00000000 ____D C:\Documents and Settings\Nesla-1\Local Settings\Application Data\Threat Expert
2012-12-10 15:59 - 2012-12-10 15:59 - 00000000 ____D C:\Program Files\PC Tools
2012-12-10 15:46 - 2012-12-10 15:48 - 00564356 _____ C:\WINXP\system32\Drivers\Cat.DB
2012-12-10 15:45 - 2012-12-11 09:37 - 00000000 ____D C:\Program Files\Common Files\PC Tools
2012-12-10 15:45 - 2012-11-01 15:35 - 00202280 _____ (PC Tools) C:\WINXP\system32\Drivers\PCTSD.sys
2012-12-10 15:44 - 2015-08-06 11:07 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\TEMP
2012-12-10 15:43 - 2015-08-06 11:09 - 00000000 ____D C:\Documents and Settings\Nesla-1\Application Data\TestApp
2012-12-10 15:43 - 2015-08-06 11:07 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\PC Tools
2012-11-14 16:04 - 2012-11-14 16:04 - 00000000 __HDC C:\WINXP\$NtUninstallKB2761226$
2012-11-14 16:04 - 2012-11-14 16:04 - 00000000 __HDC C:\WINXP\$NtUninstallKB2727528$
2012-11-14 09:20 - 2012-11-14 16:04 - 00031768 _____ C:\WINXP\KB2761226.log
2012-11-14 09:20 - 2012-11-14 16:04 - 00019950 _____ C:\WINXP\KB2727528.log
2012-10-10 15:25 - 2012-10-10 15:25 - 00000000 __HDC C:\WINXP\$NtUninstallKB2724197$
2012-10-10 15:22 - 2012-10-10 15:22 - 00004812 _____ C:\WINXP\KB2756822.log
2012-10-10 15:22 - 2012-10-10 15:22 - 00000000 __HDC C:\WINXP\$NtUninstallKB2756822$
2012-10-10 15:22 - 2012-10-10 15:22 - 00000000 __HDC C:\WINXP\$NtUninstallKB2749655$
2012-10-10 15:21 - 2012-10-10 15:21 - 00000000 __HDC C:\WINXP\$NtUninstallKB2661254-v2$
2012-10-10 08:17 - 2012-10-10 15:25 - 00035966 _____ C:\WINXP\KB2724197.log
2012-10-10 08:16 - 2012-10-10 15:22 - 00030647 _____ C:\WINXP\KB2749655.log
2012-10-10 08:16 - 2012-10-10 15:21 - 00020856 _____ C:\WINXP\KB2661254-v2.log
2012-09-24 15:33 - 2012-09-24 15:34 - 00027740 _____ C:\WINXP\KB2744842-IE8.log
2012-09-12 15:57 - 2012-09-12 15:57 - 00010383 _____ C:\WINXP\KB2736233.log
2012-09-12 15:57 - 2012-09-12 15:57 - 00000000 __HDC C:\WINXP\$NtUninstallKB2736233$
2012-08-21 13:02 - 2015-08-06 11:09 - 00000000 ____D C:\Documents and Settings\Nesla-1\Application Data\Skype
2012-08-21 13:01 - 2015-08-05 14:43 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Skype
2012-08-21 13:01 - 2014-02-25 16:33 - 00000000 ___RD C:\Program Files\Skype
2012-08-15 15:19 - 2012-08-15 15:19 - 00000000 __HDC C:\WINXP\$NtUninstallKB2731847$
2012-08-15 15:19 - 2012-08-15 15:19 - 00000000 __HDC C:\WINXP\$NtUninstallKB2712808$
2012-08-15 15:18 - 2012-08-15 15:19 - 00019120 _____ C:\WINXP\KB2731847.log
2012-08-15 15:16 - 2012-08-15 15:16 - 00014802 _____ C:\WINXP\KB2723135.log
2012-08-15 15:16 - 2012-08-15 15:16 - 00000000 __HDC C:\WINXP\$NtUninstallKB2723135$
2012-08-15 15:16 - 2012-08-15 15:16 - 00000000 __HDC C:\WINXP\$NtUninstallKB2705219$
2012-08-15 15:15 - 2012-08-15 15:16 - 00027043 _____ C:\WINXP\KB2722913-IE8.log
2012-08-15 09:42 - 2012-08-15 15:19 - 00033941 _____ C:\WINXP\KB2712808.log
2012-08-15 09:41 - 2012-08-15 15:16 - 00033270 _____ C:\WINXP\KB2705219.log
2012-07-11 15:44 - 2012-07-11 15:44 - 00000000 __HDC C:\WINXP\$NtUninstallKB2691442$
2012-07-11 15:43 - 2012-07-11 15:43 - 00022039 _____ C:\WINXP\KB2718523.log
2012-07-11 15:43 - 2012-07-11 15:43 - 00000000 __HDC C:\WINXP\$NtUninstallKB2719985$
2012-07-11 15:43 - 2012-07-11 15:43 - 00000000 __HDC C:\WINXP\$NtUninstallKB2718523$
2012-07-11 15:43 - 2012-07-11 15:43 - 00000000 __HDC C:\WINXP\$NtUninstallKB2655992$
2012-07-11 15:40 - 2012-07-11 15:41 - 00021328 _____ C:\WINXP\KB2698365.log
2012-07-11 15:40 - 2012-07-11 15:41 - 00000000 __HDC C:\WINXP\$NtUninstallKB2698365$
2012-07-11 08:16 - 2012-07-11 15:44 - 00036662 _____ C:\WINXP\KB2691442.log
2012-07-11 08:16 - 2012-07-11 15:43 - 00035302 _____ C:\WINXP\KB2655992.log
2012-07-11 08:15 - 2012-07-11 15:43 - 00035600 _____ C:\WINXP\KB2719985.log
2012-07-11 08:15 - 2012-05-28 04:25 - 00081920 ____C (Microsoft Corporation) C:\WINXP\system32\dllcache\msado28.tlb
2012-06-13 14:31 - 2012-06-13 14:31 - 00000000 __HDC C:\WINXP\$NtUninstallKB2707511$
2012-06-13 14:28 - 2012-06-13 14:29 - 00025665 _____ C:\WINXP\KB2699988-IE8.log
2012-06-13 14:28 - 2012-06-13 14:28 - 00010282 _____ C:\WINXP\KB2685939.log
2012-06-13 14:28 - 2012-06-13 14:28 - 00000000 __HDC C:\WINXP\$NtUninstallKB2709162$
2012-06-13 14:28 - 2012-06-13 14:28 - 00000000 __HDC C:\WINXP\$NtUninstallKB2685939$
2012-06-13 08:19 - 2014-03-06 09:59 - 00522240 ____C (Microsoft Corporation) C:\WINXP\system32\dllcache\jsdbgui.dll
2012-06-13 08:19 - 2012-06-13 14:31 - 00036169 _____ C:\WINXP\KB2707511.log
2012-06-13 08:16 - 2012-06-13 14:28 - 00026563 _____ C:\WINXP\KB2709162.log
2012-06-05 14:57 - 2012-06-05 14:57 - 00000000 __HDC C:\WINXP\$NtUninstallKB2718704$
2012-06-05 08:16 - 2012-06-05 14:58 - 00018072 _____ C:\WINXP\KB2718704.log
2012-05-09 22:17 - 2012-05-09 15:19 - 00033092 _____ C:\WINXP\KB2676562.log
2012-05-09 15:21 - 2012-05-09 15:21 - 00007528 _____ C:\WINXP\KB2659262.log
2012-05-09 15:21 - 2012-05-09 15:21 - 00000000 __HDC C:\WINXP\$NtUninstallKB2659262$
2012-05-09 15:19 - 2012-05-09 15:19 - 00010248 _____ C:\WINXP\KB2686509.log
2012-05-09 15:19 - 2012-05-09 15:19 - 00009598 _____ C:\WINXP\KB2695962.log
2012-05-09 15:19 - 2012-05-09 15:19 - 00000000 __HDC C:\WINXP\$NtUninstallKB2695962$
2012-05-09 15:19 - 2012-05-09 15:19 - 00000000 __HDC C:\WINXP\$NtUninstallKB2686509$
2012-05-09 15:19 - 2012-05-09 15:19 - 00000000 __HDC C:\WINXP\$NtUninstallKB2676562$
2012-05-02 11:17 - 2012-05-02 11:17 - 01070152 _____ (Microsoft Corporation) C:\WINXP\system32\MSCOMCTL.OCX
2012-04-11 15:05 - 2012-04-11 15:06 - 00025368 _____ C:\WINXP\KB2675157-IE8.log
2012-04-11 15:03 - 2012-04-11 15:03 - 00000000 __HDC C:\WINXP\$NtUninstallKB2653956$
2012-04-11 08:12 - 2012-04-11 15:03 - 00025298 _____ C:\WINXP\KB2653956.log
2012-03-14 16:51 - 2012-03-14 16:51 - 00011407 _____ C:\WINXP\KB2641653.log
2012-03-14 16:51 - 2012-03-14 16:51 - 00000000 __HDC C:\WINXP\$NtUninstallKB2641653$
2012-03-14 16:49 - 2012-03-14 16:49 - 00000000 __HDC C:\WINXP\$NtUninstallKB2621440$
2012-03-14 16:48 - 2012-03-14 16:49 - 00009019 _____ C:\WINXP\KB2647518.log
2012-03-14 16:48 - 2012-03-14 16:48 - 00000000 __HDC C:\WINXP\$NtUninstallKB2647518$
2012-03-13 11:38 - 2015-08-06 11:09 - 00000000 ____D C:\Documents and Settings\Nesla-1\Local Settings\Application Data\ESET
2012-03-13 11:29 - 2012-03-13 11:29 - 10671648 _____ (Copyright© 2005-2012 FreeSoundRecorder Technologies, Inc. ) C:\Documents and Settings\Nesla-1\My Documents\FreeSoundRecorder.exe
2012-03-13 11:26 - 2015-08-06 11:07 - 00000000 ____D C:\Documents and Settings\LocalService\Local Settings\Application Data\ESET
2012-03-04 12:19 - 2015-06-12 11:27 - 00000768 _____ C:\WINXP\system32\d3d8caps.dat
2012-02-14 16:38 - 2012-02-14 16:38 - 00000000 __HDC C:\WINXP\$NtUninstallKB2660465$
2012-02-14 16:37 - 2012-02-14 16:38 - 00024336 _____ C:\WINXP\KB2647516-IE8.log
2012-02-14 16:37 - 2012-02-14 16:37 - 00009189 _____ C:\WINXP\KB2661637.log
2012-02-14 16:37 - 2012-02-14 16:37 - 00000000 __HDC C:\WINXP\$NtUninstallKB2661637$
2012-02-14 09:13 - 2012-02-14 16:38 - 00028216 _____ C:\WINXP\KB2660465.log
2012-02-14 09:11 - 2012-01-11 11:06 - 00003072 ____N C:\WINXP\system32\iacenc.dll
2012-02-14 09:11 - 2012-01-11 11:06 - 00003072 ____C C:\WINXP\system32\dllcache\iacenc.dll
2012-01-26 03:00 - 2012-01-26 03:00 - 00000000 __HDC C:\WINXP\$NtUninstallKB2585542$
2012-01-26 01:24 - 2012-01-26 03:00 - 00024681 _____ C:\WINXP\KB2585542.log
2012-01-11 16:54 - 2012-01-11 16:54 - 00000000 __HDC C:\WINXP\$NtUninstallKB2646524$
2012-01-11 16:54 - 2012-01-11 16:54 - 00000000 __HDC C:\WINXP\$NtUninstallKB2631813$
2012-01-11 16:52 - 2012-01-11 16:52 - 00008909 _____ C:\WINXP\KB2603381.log
2012-01-11 16:52 - 2012-01-11 16:52 - 00000000 __HDC C:\WINXP\$NtUninstallKB2603381$
2012-01-11 16:52 - 2012-01-11 16:52 - 00000000 __HDC C:\WINXP\$NtUninstallKB2598479$
2012-01-11 16:52 - 2012-01-11 16:52 - 00000000 __HDC C:\WINXP\$NtUninstallKB2584146$
2012-01-11 09:16 - 2012-01-11 16:55 - 00023538 _____ C:\WINXP\KB2646524.log
2012-01-11 09:16 - 2012-01-11 16:54 - 00022684 _____ C:\WINXP\KB2631813.log
2012-01-11 09:16 - 2012-01-11 16:52 - 00016811 _____ C:\WINXP\KB2598479.log
2012-01-11 09:16 - 2012-01-11 16:52 - 00015678 _____ C:\WINXP\KB2584146.log
2011-12-20 14:40 - 2011-12-20 14:40 - 00000000 ____D C:\WINXP\Sun
2011-12-14 16:57 - 2011-12-14 16:57 - 00000000 __HDC C:\WINXP\$NtUninstallKB2639417$
2011-12-14 16:57 - 2011-12-14 16:57 - 00000000 __HDC C:\WINXP\$NtUninstallKB2624667$
2011-12-14 16:56 - 2011-12-14 16:57 - 00023488 _____ C:\WINXP\KB2618444-IE8.log
2011-12-14 16:54 - 2011-12-14 16:54 - 00008759 _____ C:\WINXP\KB2618451.log
2011-12-14 16:54 - 2011-12-14 16:54 - 00004109 _____ C:\WINXP\KB2633952.log
2011-12-14 16:54 - 2011-12-14 16:54 - 00000000 __HDC C:\WINXP\$NtUninstallKB2633952$
2011-12-14 16:54 - 2011-12-14 16:54 - 00000000 __HDC C:\WINXP\$NtUninstallKB2619339$
2011-12-14 16:54 - 2011-12-14 16:54 - 00000000 __HDC C:\WINXP\$NtUninstallKB2618451$
2011-12-14 16:53 - 2011-12-14 16:53 - 00000000 __HDC C:\WINXP\$NtUninstallKB2633171$
2011-12-14 16:53 - 2011-12-14 16:53 - 00000000 __HDC C:\WINXP\$NtUninstallKB2620712$
2011-12-14 11:09 - 2011-12-14 16:57 - 00027261 _____ C:\WINXP\KB2639417.log
2011-12-14 11:09 - 2011-12-14 16:57 - 00026126 _____ C:\WINXP\KB2624667.log
2011-12-14 11:07 - 2011-12-14 16:54 - 00020896 _____ C:\WINXP\KB2619339.log
2011-12-14 11:07 - 2011-12-14 16:54 - 00020804 _____ C:\WINXP\KB2620712.log
2011-12-14 11:07 - 2011-12-14 16:53 - 00024128 _____ C:\WINXP\KB2633171.log
2011-11-23 12:47 - 2015-08-06 11:21 - 00026542 _____ C:\Documents and Settings\Nesla-1\My Documents\БАБХ е орган.doc.aaa
2011-11-17 15:23 - 2014-01-31 02:28 - 00006144 _____ C:\Documents and Settings\Nesla-1\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-11-11 16:27 - 2011-11-11 16:27 - 00000000 __HDC C:\WINXP\$NtUninstallKB2641690$
2011-11-11 13:06 - 2015-08-06 11:21 - 00021934 _____ C:\Documents and Settings\Nesla-1\My Documents\До ЛК.doc.aaa
2011-11-09 12:53 - 2011-11-09 12:53 - 00000000 __HDC C:\WINXP\$NtUninstallKB2544893-v2$
2011-11-09 12:43 - 2014-07-08 12:08 - 00002333 _____ C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Reader X.lnk
2011-11-09 12:43 - 2011-11-09 12:43 - 00001730 _____ C:\Documents and Settings\All Users\Desktop\Adobe Reader X.lnk
2011-11-09 12:42 - 2013-11-21 00:31 - 00000000 ____D C:\Program Files\Common Files\Adobe
2011-11-09 12:42 - 2011-11-09 12:42 - 00000000 ____D C:\Program Files\Adobe
2011-11-09 09:34 - 2011-11-09 12:53 - 00021536 _____ C:\WINXP\KB2544893-v2.log
2011-10-25 05:38 - 2013-07-03 19:03 - 02149888 ____C (Microsoft Corporation) C:\WINXP\system32\dllcache\ntkrnlmp.exe
2011-10-25 05:34 - 2013-07-03 18:59 - 02193536 ____C (Microsoft Corporation) C:\WINXP\system32\dllcache\ntoskrnl.exe
2011-10-25 04:52 - 2013-07-03 18:08 - 02070144 ____C (Microsoft Corporation) C:\WINXP\system32\dllcache\ntkrnlpa.exe
2011-10-25 04:52 - 2013-07-03 18:08 - 02028544 ____C (Microsoft Corporation) C:\WINXP\system32\dllcache\ntkrpamp.exe
2011-10-12 15:52 - 2011-10-12 15:52 - 00010777 _____ C:\WINXP\KB2564958.log
2011-10-12 15:52 - 2011-10-12 15:52 - 00000000 __HDC C:\WINXP\$NtUninstallKB2564958$
2011-10-12 15:50 - 2011-10-12 15:50 - 00012963 _____ C:\WINXP\KB2592799.log
2011-10-12 15:50 - 2011-10-12 15:50 - 00000000 __HDC C:\WINXP\$NtUninstallKB2592799$
2011-10-12 15:50 - 2011-10-12 15:50 - 00000000 __HDC C:\WINXP\$NtUninstallKB2567053$
2011-10-12 15:49 - 2011-10-12 15:50 - 00022118 _____ C:\WINXP\KB2586448-IE8.log
2011-10-12 15:38 - 2015-08-06 11:21 - 00070158 _____ C:\Documents and Settings\Nesla-1\My Documents\obshti-uslovia-eoodtr.pdf.aaa
2011-10-12 08:27 - 2011-10-12 15:50 - 00023993 _____ C:\WINXP\KB2567053.log
2011-09-15 16:10 - 2011-09-15 16:10 - 00000000 __HDC C:\WINXP\$NtUninstallKB2616676$
2011-09-15 16:08 - 2011-09-15 16:09 - 00007974 _____ C:\WINXP\KB2570947.log
2011-09-15 16:08 - 2011-09-15 16:08 - 00000000 __HDC C:\WINXP\$NtUninstallKB2570947$
2011-09-15 11:15 - 2011-09-15 16:11 - 00014726 _____ C:\WINXP\KB2616676.log
2011-09-07 15:34 - 2011-09-07 15:34 - 00000000 __HDC C:\WINXP\$NtUninstallKB2607712$
2011-09-07 10:05 - 2011-09-07 15:34 - 00014825 _____ C:\WINXP\KB2607712.log
2011-08-26 11:20 - 2011-08-26 11:21 - 00003823 _____ C:\WINXP\KB2570791.log
2011-08-26 11:20 - 2011-08-26 11:20 - 00000000 __HDC C:\WINXP\$NtUninstallKB2570791$
2011-08-16 15:09 - 2015-08-06 11:21 - 00000990 _____ C:\Documents and Settings\Nesla-1\My Documents\spider.sav.aaa
2011-08-10 16:38 - 2011-08-10 16:38 - 00012809 _____ C:\WINXP\KB2536276-v2.log
2011-08-10 16:38 - 2011-08-10 16:38 - 00012170 _____ C:\WINXP\KB2570222.log
2011-08-10 16:38 - 2011-08-10 16:38 - 00000000 __HDC C:\WINXP\$NtUninstallKB2570222$
2011-08-10 16:38 - 2011-08-10 16:38 - 00000000 __HDC C:\WINXP\$NtUninstallKB2567680$
2011-08-10 16:38 - 2011-08-10 16:38 - 00000000 __HDC C:\WINXP\$NtUninstallKB2536276-v2$
2011-08-10 16:35 - 2011-08-10 16:36 - 00020849 _____ C:\WINXP\KB2559049-IE8.log
2011-08-10 16:35 - 2011-08-10 16:35 - 00008183 _____ C:\WINXP\KB2566454.log
10 август 201511 г.
Здравейте, имам един компютър в работата, който е със старо XP. За съжаление, открих съобщение, че имам вирус CryptoWall. Положението е много неприятно, защото има файлове, които са много важни! Ще му пусна малко по-късно Farbar Scan Recovery Tool.
Не иска да го пусне лога във форума, явно трябва да го разделя на две. Не мога да инсталирам malwarebytes
Редактирано 11 август 201511 г. от Stefan Troplev (преглед на промените)
Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.
Добре дошли!

Заразен съм с CryptoWall

Featured Replies

Архивирана тема

Разглеждащи това в момента 0

Дарение

Бюлетин

Профил

Навигация

Търсене

Конфигуриране на push известия в браузъра

Chrome (Android)

Chrome (Desktop)

Safari (iOS 16.4+)

Safari (macOS)

Edge (Android)

Edge (Desktop)

Firefox (Android)

Firefox (Desktop)
