Премини към съдържанието

    Препоръчан отговор


    Здравейте.

    Лаптопът работи много бавно, при опит да премахна елементите открити от MSE системата забива и не ми позволява да правя нищо повече. Нямам представа от къде се е заразила системата, лаптопът се ползва от родителите ми. Не разполагам с диск за Windows. Елементите под карантина в MSE са доста, изброявам ги, като някои се повтарят:

    -BrowserModifier:Win32/CouponRuc;  Trojan:Win32/Raydefun.A;  Trojan:Win32/Peaac.gen!A!plock;  VirTool:Win32/Obfuscator.ANX;  BrowserModifier:Win32/Diplugem;  Trojan:Win32/Damingvat.A;  Trojan:Win32/Colisi.C

     

    Ето и лог файла:

     

     

    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:14-09-2015
    Ran by RRR (administrator) on RRR-PC (15-09-2015 12:00:16)
    Running from C:\Users\RRR\Desktop
    Loaded Profiles: RRR (Available Profiles: RRR)
    Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
    Internet Explorer Version 11 (Default browser: "C:\Program Files (x86)\Opera\Opera.exe" "%1")
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
    (IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
    (Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
    (Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
    (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
    (IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
    (Intel Corporation) C:\Windows\System32\igfxtray.exe
    (Intel Corporation) C:\Windows\System32\hkcmd.exe
    (Intel Corporation) C:\Windows\System32\igfxpers.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
    (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    (DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe
    (Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
    (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
    () C:\Users\RRR\AppData\Roaming\ACEStream\engine\ace_engine.exe
    (Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Mouse Suite\hpMonitor.exe
    (Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
    (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
    (Hewlett-Packard ) C:\ProgramData\HP Mouse Suite Config\hpwjd.exe
    (Hewlett-Packard ) C:\ProgramData\HP Mouse Suite Config\hpwmsd.exe
    (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
    (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
    (Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
    (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
    (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
    (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
    () C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
    (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
    (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
    (Microsoft Corporation) C:\Windows\System32\alg.exe
    (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
    (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
    (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe


    ==================== Registry (Whitelisted) ===========================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [sysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-11-12] (IDT, Inc.)
    HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
    HKLM\...\Run: [synTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2804976 2013-10-30] (Synaptics Incorporated)
    HKLM\...\Run: [New Value #1] => “ctfmon”=”CTFMON.EXE”
    HKLM-x32\...\Run: [uSB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [290688 2012-10-24] (Intel Corporation)
    HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [334240 2012-09-12] (Hewlett-Packard Company)
    HKLM-x32\...\Run: [] => [X]
    HKLM-x32\...\Run: [iAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-29] (Intel Corporation)
    HKLM-x32\...\Run: [NWEReboot] => [X]
    HKLM-x32\...\Run: [NeroFilterCheck] => C:\Windows\SysWOW64\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
    HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
    HKLM-x32\...\Run: [btTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [371976 2012-09-19] (IVT Corporation)
    Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
    HKU\S-1-5-21-3352682033-4164677752-1323257766-1000\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [4527424 2011-08-17] (DT Soft Ltd)
    HKU\S-1-5-21-3352682033-4164677752-1323257766-1000\...\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [94208 2005-09-08] (Nero AG)
    HKU\S-1-5-21-3352682033-4164677752-1323257766-1000\...\Run: [AceStream] => C:\Users\RRR\AppData\Roaming\ACEStream\engine\ace_engine.exe [27904 2014-09-25] ()
    HKU\S-1-5-21-3352682033-4164677752-1323257766-1000\...\Run: [Facebook Update] => C:\Users\RRR\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-07-27] (Facebook Inc.)
    HKU\S-1-5-18\...\RunOnce: [sPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-06-02] (Microsoft Corporation)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HPMonitor.exe.lnk [2013-06-01]
    ShortcutTarget: HPMonitor.exe.lnk -> C:\Program Files (x86)\Hewlett-Packard\HP Mouse Suite\hpMonitor.exe (Hewlett-Packard)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\hpwjd.exe.lnk [2013-06-01]
    ShortcutTarget: hpwjd.exe.lnk -> C:\ProgramData\HP Mouse Suite Config\hpwjd.exe (Hewlett-Packard )
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\hpwmsd.exe.lnk [2013-06-01]
    ShortcutTarget: hpwmsd.exe.lnk -> C:\ProgramData\HP Mouse Suite Config\hpwmsd.exe (Hewlett-Packard )
    GroupPolicy: Restriction - Chrome <======= ATTENTION
    CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
    Tcpip\..\Interfaces\{178F6E31-C398-402E-AC71-7DBF82FAF851}: [NameServer] 199.203.131.145,82.163.143.167
    Tcpip\..\Interfaces\{BA4CAD20-CBAD-471F-9F84-E16DB495FA06}: [NameServer] 82.163.143.169,82.163.142.171
    Tcpip\..\Interfaces\{BA4CAD20-CBAD-471F-9F84-E16DB495FA06}: [DhcpNameServer] 192.168.0.1

    Internet Explorer:
    ==================
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
    HKU\S-1-5-21-3352682033-4164677752-1323257766-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
    HKU\S-1-5-21-3352682033-4164677752-1323257766-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
    DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
    Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

    FireFox:
    ========
    FF ProfilePath: C:\Users\RRR\AppData\Roaming\Mozilla\Firefox\Profiles\w3qckbrn.default
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-08-01] ()
    FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-08-01] ()
    FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2010-01-21] (Google)
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
    FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-06-23] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-06-23] (Google Inc.)
    FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
    FF Plugin HKU\S-1-5-21-3352682033-4164677752-1323257766-1000: @acestream.net/acestreamplugin,version=2.1.5.3 -> C:\Users\RRR\AppData\Roaming\ACEStream\player\npace_plugin.dll [2014-06-13] (Innovative Digital Technologies)
    FF Plugin HKU\S-1-5-21-3352682033-4164677752-1323257766-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\RRR\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
    FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\911bg.xml [2014-09-24]
    FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\diribg.xml [2014-09-24]
    FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\pe-bg.xml [2014-09-24]
    FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\portalbgdict.xml [2014-09-24]

    Chrome:
    =======
    CHR dev: Chrome dev build detected! <======= ATTENTION
    CHR HomePage: Default -> hxxp://www.google.com/
    CHR Profile: C:\Users\RRR\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (No Name) - C:\Users\RRR\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhnkgpdlogbknkhlgdjlejeljbhflim [2015-09-14]
    CHR Extension: (Google Wallet) - C:\Users\RRR\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-18]

    Opera:
    =======
    OPR Extension: (No Name) - C:\Users\RRR\AppData\Roaming\Opera Software\Opera Stable\Extensions\mfhnkgpdlogbknkhlgdjlejeljbhflim [2015-02-27]

    ==================== Services (Whitelisted) ========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1612552 2012-09-26] (IVT Corporation)
    R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
    R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [146184 2012-09-19] (IVT Corporation)
    R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
    R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
    S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2013-06-02] (Macrovision Europe Ltd.) [File not signed]
    R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [523680 2012-09-12] (Hewlett-Packard Company)
    R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [166720 2012-07-18] (Intel Corporation)
    R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
    R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
    R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
    R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
    R2 OS Selector; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2139400 2011-11-15] ()
    R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [327680 2012-11-12] (IDT, Inc.) [File not signed]
    S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
    S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
    S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]

    ===================== Drivers (Whitelisted) ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)
    R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
    R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation)
    R3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48608 2012-10-02] (Ralink Corporation)
    R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [271424 2013-06-02] (DT Soft Ltd)
    S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
    R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
    R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-09-15] (Malwarebytes Corporation)
    R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
    R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
    R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
    R3 rtbth; C:\Windows\System32\DRIVERS\rtbth.sys [692832 2012-10-02] (Ralink Technology, Corp.)
    R3 RTLE8023x64; C:\Windows\System32\DRIVERS\Rtenic64.sys [402024 2012-02-22] (Realtek Semiconductor Corporation )
    R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [2621128 2015-07-16] (Sonix Tech. Co., Ltd.)
    U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)
    S3 hitmanpro37; \??\C:\Windows\system32\drivers\hitmanpro37.sys [X]
    S4 InCDFs; system32\drivers\InCDFs.sys [X]
    S1 InCDPass; system32\drivers\InCDPass.sys [X]
    S1 InCDRm; system32\drivers\InCDRm.sys [X]

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2015-09-15 12:00 - 2015-09-15 12:00 - 00016956 _____ C:\Users\RRR\Desktop\FRST.txt
    2015-09-15 12:00 - 2015-09-15 12:00 - 00000000 ____D C:\FRST
    2015-09-15 11:59 - 2015-09-15 11:53 - 02190848 _____ (Farbar) C:\Users\RRR\Desktop\FRST64.exe
    2015-09-14 15:54 - 2015-09-14 15:54 - 00782510 _____ C:\Windows\system32\PerfStringBackup.INI
    2015-09-14 15:53 - 2015-09-14 15:53 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\2A1F53E5.sys
    2015-09-14 15:53 - 2015-09-14 15:48 - 00000358 _____ C:\Users\RRR\Desktop\hg.txt
    2015-09-14 13:30 - 2015-09-15 11:57 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
    2015-09-14 13:30 - 2015-09-14 13:30 - 00001106 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
    2015-09-14 13:30 - 2015-09-14 13:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
    2015-09-14 13:30 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
    2015-09-14 13:30 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
    2015-09-14 13:30 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
    2015-09-14 13:18 - 2015-09-14 13:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
    2015-09-14 13:18 - 2015-09-14 13:18 - 00000000 ____D C:\ProgramData\Malwarebytes
    2015-09-14 12:38 - 2015-09-14 15:55 - 00000000 ____D C:\ProgramData\HitmanPro
    2015-09-14 11:51 - 2015-09-14 12:01 - 00000000 ____D C:\AdwCleaner
    2015-09-11 12:18 - 2015-08-05 20:56 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
    2015-09-11 12:18 - 2015-08-05 20:56 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
    2015-09-11 12:18 - 2015-08-05 20:40 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
    2015-09-11 12:17 - 2015-08-05 20:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
    2015-09-11 12:17 - 2015-07-23 03:06 - 05568960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
    2015-09-11 12:17 - 2015-07-23 03:03 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
    2015-09-11 12:17 - 2015-07-23 03:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
    2015-09-11 12:17 - 2015-07-23 03:02 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
    2015-09-11 12:17 - 2015-07-23 03:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
    2015-09-11 12:17 - 2015-07-22 19:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
    2015-09-11 12:17 - 2015-07-15 06:17 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
    2015-09-11 12:17 - 2015-07-15 05:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
    2015-09-11 12:17 - 2015-07-09 20:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
    2015-09-11 12:17 - 2015-07-09 20:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
    2015-09-11 12:17 - 2015-07-09 20:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
    2015-09-11 12:17 - 2015-07-09 20:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
    2015-09-11 12:16 - 2015-07-23 03:06 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
    2015-09-11 12:16 - 2015-07-23 03:06 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
    2015-09-11 12:16 - 2015-07-23 03:03 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
    2015-09-11 12:16 - 2015-07-23 03:03 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
    2015-09-11 12:16 - 2015-07-23 03:03 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
    2015-09-11 12:16 - 2015-07-23 03:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
    2015-09-11 12:16 - 2015-07-23 03:02 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
    2015-09-11 12:16 - 2015-07-23 03:02 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
    2015-09-11 12:16 - 2015-07-23 03:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
    2015-09-11 12:16 - 2015-07-23 03:02 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
    2015-09-11 12:16 - 2015-07-23 03:02 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
    2015-09-11 12:16 - 2015-07-23 03:02 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
    2015-09-11 12:16 - 2015-07-23 03:02 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
    2015-09-11 12:16 - 2015-07-23 03:02 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
    2015-09-11 12:16 - 2015-07-23 03:02 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
    2015-09-11 12:16 - 2015-07-23 03:02 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
    2015-09-11 12:16 - 2015-07-23 03:02 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
    2015-09-11 12:16 - 2015-07-23 03:02 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
    2015-09-11 12:16 - 2015-07-23 03:02 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
    2015-09-11 12:16 - 2015-07-23 03:02 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
    2015-09-11 12:16 - 2015-07-23 03:02 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
    2015-09-11 12:16 - 2015-07-23 03:02 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
    2015-09-11 12:16 - 2015-07-23 03:02 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
    2015-09-11 12:16 - 2015-07-23 03:02 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
    2015-09-11 12:16 - 2015-07-23 03:02 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
    2015-09-11 12:16 - 2015-07-23 03:02 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
    2015-09-11 12:16 - 2015-07-23 03:02 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
    2015-09-11 12:16 - 2015-07-23 03:01 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
    2015-09-11 12:16 - 2015-07-23 03:01 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
    2015-09-11 12:16 - 2015-07-23 03:01 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
    2015-09-11 12:16 - 2015-07-23 02:58 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
    2015-09-11 12:16 - 2015-07-23 02:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-23 02:51 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
    2015-09-11 12:16 - 2015-07-22 20:57 - 03989952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
    2015-09-11 12:16 - 2015-07-22 20:57 - 03934656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
    2015-09-11 12:16 - 2015-07-22 20:54 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
    2015-09-11 12:16 - 2015-07-22 20:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
    2015-09-11 12:16 - 2015-07-22 20:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
    2015-09-11 12:16 - 2015-07-22 20:53 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
    2015-09-11 12:16 - 2015-07-22 20:53 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
    2015-09-11 12:16 - 2015-07-22 20:53 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
    2015-09-11 12:16 - 2015-07-22 20:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
    2015-09-11 12:16 - 2015-07-22 20:53 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
    2015-09-11 12:16 - 2015-07-22 20:53 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
    2015-09-11 12:16 - 2015-07-22 20:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
    2015-09-11 12:16 - 2015-07-22 20:53 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
    2015-09-11 12:16 - 2015-07-22 20:53 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
    2015-09-11 12:16 - 2015-07-22 20:53 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
    2015-09-11 12:16 - 2015-07-22 20:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
    2015-09-11 12:16 - 2015-07-22 20:52 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
    2015-09-11 12:16 - 2015-07-22 20:52 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
    2015-09-11 12:16 - 2015-07-22 20:52 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
    2015-09-11 12:16 - 2015-07-22 20:52 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
    2015-09-11 12:16 - 2015-07-22 20:52 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
    2015-09-11 12:16 - 2015-07-22 20:52 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
    2015-09-11 12:16 - 2015-07-22 20:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
    2015-09-11 12:16 - 2015-07-22 20:47 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
    2015-09-11 12:16 - 2015-07-22 20:46 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 20:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 19:45 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
    2015-09-11 12:16 - 2015-07-22 19:44 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
    2015-09-11 12:16 - 2015-07-22 19:44 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
    2015-09-11 12:16 - 2015-07-22 19:34 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
    2015-09-11 12:16 - 2015-07-22 19:34 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
    2015-09-11 12:16 - 2015-07-22 19:31 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 19:31 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 19:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
    2015-09-11 12:16 - 2015-07-22 19:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
    2015-09-11 12:16 - 2015-06-25 13:06 - 00115136 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
    2015-09-11 12:16 - 2015-06-25 13:01 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
    2015-09-11 12:16 - 2015-06-25 13:01 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
    2015-09-11 12:16 - 2015-06-25 12:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
    2015-09-11 12:15 - 2015-09-02 06:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
    2015-09-11 12:15 - 2015-09-02 06:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
    2015-09-11 12:15 - 2015-09-02 06:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
    2015-09-11 12:15 - 2015-09-02 06:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
    2015-09-11 12:15 - 2015-09-02 05:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
    2015-09-11 12:15 - 2015-09-02 05:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
    2015-09-11 12:15 - 2015-09-02 05:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
    2015-09-11 12:15 - 2015-09-02 05:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
    2015-09-11 12:15 - 2015-09-02 04:51 - 03209216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
    2015-09-11 12:15 - 2015-09-02 04:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
    2015-09-11 12:15 - 2015-09-02 04:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
    2015-09-11 12:15 - 2015-08-27 21:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
    2015-09-11 12:15 - 2015-08-27 21:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
    2015-09-11 12:15 - 2015-08-27 21:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
    2015-09-11 12:15 - 2015-08-27 21:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
    2015-09-11 12:15 - 2015-08-27 20:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
    2015-09-11 12:15 - 2015-08-27 20:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
    2015-09-11 12:15 - 2015-08-27 20:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
    2015-09-11 12:15 - 2015-08-27 20:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
    2015-09-11 12:15 - 2015-08-26 21:07 - 03165696 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
    2015-09-11 12:15 - 2015-08-26 21:07 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
    2015-09-11 12:15 - 2015-08-26 21:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
    2015-09-11 12:15 - 2015-08-26 21:07 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
    2015-09-11 12:15 - 2015-08-26 21:07 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
    2015-09-11 12:15 - 2015-08-26 21:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
    2015-09-11 12:15 - 2015-08-26 21:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
    2015-09-11 12:15 - 2015-08-26 21:06 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
    2015-09-11 12:15 - 2015-08-26 21:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
    2015-09-11 12:15 - 2015-08-26 21:06 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
    2015-09-11 12:15 - 2015-08-26 21:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
    2015-09-11 12:15 - 2015-08-26 20:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
    2015-09-11 12:15 - 2015-08-26 20:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
    2015-09-11 12:15 - 2015-08-26 20:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
    2015-09-11 12:15 - 2015-08-26 20:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
    2015-09-11 12:15 - 2015-08-26 20:55 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
    2015-09-11 12:15 - 2015-08-04 21:03 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
    2015-09-11 12:15 - 2015-08-04 21:00 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
    2015-09-11 12:15 - 2015-08-04 20:56 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
    2015-09-11 12:15 - 2015-08-04 20:56 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
    2015-09-11 12:15 - 2015-08-04 20:56 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
    2015-09-11 12:15 - 2015-08-04 20:55 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
    2015-09-11 12:15 - 2015-08-04 20:55 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
    2015-09-11 12:15 - 2015-08-04 20:47 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
    2015-09-11 12:15 - 2015-08-04 19:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
    2015-08-19 14:47 - 2015-08-11 04:20 - 25191936 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2015-08-19 14:47 - 2015-08-11 04:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
    2015-08-19 14:47 - 2015-08-11 03:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
    2015-08-19 14:47 - 2015-08-11 03:20 - 19871232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2015-09-15 12:00 - 2013-06-01 10:31 - 01702946 _____ C:\Windows\WindowsUpdate.log
    2015-09-15 11:59 - 2012-09-26 10:53 - 00000950 _____ C:\Windows\SysWOW64\bscs.ini
    2015-09-15 11:58 - 2013-06-01 18:07 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
    2015-09-15 11:57 - 2013-12-12 14:39 - 00003620 _____ C:\Windows\SysWOW64\LOCALSERVICE.INI
    2015-09-15 11:56 - 2013-12-12 14:39 - 00000043 _____ C:\Windows\SysWOW64\LOCALDEVICE.INI
    2015-09-15 11:55 - 2009-07-14 08:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
    2015-09-15 11:55 - 2009-07-14 07:51 - 00149816 _____ C:\Windows\setupact.log
    2015-09-15 11:32 - 2009-07-14 07:45 - 00022336 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2015-09-15 11:32 - 2009-07-14 07:45 - 00022336 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2015-09-14 16:19 - 2015-08-14 22:19 - 00000336 _____ C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job
    2015-09-14 15:40 - 2013-12-12 14:39 - 00000822 _____ C:\Windows\SysWOW64\REMOTEDEVICE.INI
    2015-09-14 15:19 - 2014-07-27 14:48 - 00000920 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3352682033-4164677752-1323257766-1000UA.job
    2015-09-14 15:19 - 2014-07-27 14:48 - 00000898 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3352682033-4164677752-1323257766-1000Core.job
    2015-09-14 15:19 - 2013-06-02 22:32 - 00123918 _____ C:\Windows\PFRO.log
    2015-09-14 13:37 - 2015-06-27 11:47 - 00000000 ____D C:\Program Files (x86)\Do Not Disturb
    2015-09-14 13:36 - 2015-06-08 17:01 - 00000000 ____D C:\Program Files (x86)\rikaikun
    2015-09-14 13:12 - 2014-08-31 13:15 - 00000000 ____D C:\Users\RRR\AppData\Local\Adobe
    2015-09-13 02:55 - 2013-08-03 03:00 - 00000000 ____D C:\Windows\system32\MRT
    2015-09-13 00:40 - 2009-07-14 07:45 - 02338960 _____ C:\Windows\system32\FNTCACHE.DAT
    2015-09-13 00:37 - 2009-07-14 10:45 - 00000000 ____D C:\Program Files\Windows Journal
    2015-09-13 00:20 - 2013-06-02 22:43 - 00000000 ____D C:\ProgramData\Microsoft Help
    2015-08-28 14:05 - 2015-06-01 08:44 - 00000000 ____D C:\Program Files (x86)\Omnifinder
    2015-08-28 14:05 - 2015-05-21 11:01 - 00000000 ____D C:\Program Files (x86)\Cookie Killer for Facebook
    2015-08-26 18:37 - 2013-06-05 20:27 - 134753440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
    2015-08-23 18:55 - 2013-07-07 10:37 - 00000000 ____D C:\Users\RRR\Desktop\recepti
    2015-08-19 14:04 - 2015-02-26 19:04 - 00003826 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1424966667
    2015-08-19 14:04 - 2013-06-02 18:27 - 00000000 ____D C:\Program Files (x86)\Opera

    ==================== Files in the root of some directories =======

    2015-06-23 08:55 - 2015-08-01 13:57 - 0000020 _____ () C:\Users\RRR\AppData\Roaming\appdataFr2.bin
    2015-06-15 14:29 - 2015-07-03 12:47 - 0000024 _____ () C:\Users\RRR\AppData\Roaming\appdataFr25.bin
    2015-03-02 21:46 - 2015-04-23 11:35 - 0000020 _____ () C:\Users\RRR\AppData\Roaming\appdataFr3.bin

    Files to move or delete:
    ====================
    C:\Users\RRR\install_flashplayer15x32au_chra_dy_aaa_aih.exe


    Some files in TEMP:
    ====================
    C:\Users\RRR\AppData\Local\Temp\07b31aB7338C7.exe
    C:\Users\RRR\AppData\Local\Temp\130e04c69E226.exe
    C:\Users\RRR\AppData\Local\Temp\56ACC069e3.exe
    C:\Users\RRR\AppData\Local\Temp\9569E98A43F0.exe
    C:\Users\RRR\AppData\Local\Temp\AtpTimerInfo.dll
    C:\Users\RRR\AppData\Local\Temp\B6D283.exe
    C:\Users\RRR\AppData\Local\Temp\BitLord_1.01.exe
    C:\Users\RRR\AppData\Local\Temp\HitmanPro.exe
    C:\Users\RRR\AppData\Local\Temp\HPSWF.EXE
    C:\Users\RRR\AppData\Local\Temp\install_reader11_en_chrd_aaa_aih.exe
    C:\Users\RRR\AppData\Local\Temp\SkypeSetup.exe
    C:\Users\RRR\AppData\Local\Temp\sqlite3.dll
    C:\Users\RRR\AppData\Local\Temp\supoptsetup.exe
    C:\Users\RRR\AppData\Local\Temp\SWHelperQueryW.dll
    C:\Users\RRR\AppData\Local\Temp\SWHelperWrapper.exe


    ==================== Bamital & volsnap =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\system32\winlogon.exe => File is digitally signed
    C:\Windows\system32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\system32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\system32\services.exe => File is digitally signed
    C:\Windows\system32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\system32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\system32\rpcss.dll => File is digitally signed
    C:\Windows\system32\dnsapi.dll => File is digitally signed
    C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
    C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2014-07-23 20:30

    ==================== End of FRST.txt ============================

    Addition.txt

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте,

     

     

    icon_zps423a0d9f.jpgМоля изтеглете ZHPcleaner и я запазете на вашия десктоп.

    • Стартирайте ZHPCleaner с десен клик върху файла и изберете от контекстното меню "Run as administrator"
    • Кликнете върху Ashampoo_Snap_20140819_13h09m50s_001__zp за да се съгласите с лицензионното споразумение.
    • Изберете бутона y3pI4LR.png.
    • Браузърите ще бъдат затворени автоматично.
    • Ще се отвори лог файл след приключването на проверката.
    • Публикувайте лог файла в следващия си коментар.

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Съжалявам за забавянето, но сканирането спря на 'FirewallRules' на 95%, и го пуснах да сканира отново, стои си на 95% вече 20мин. Нормално ли е, да чакам ли още. Също по време на сканирането към 85% ме пита дали съм инсталирал този сървър и имаше цифри след това, като IP.

    Редактирано от stepan10 (преглед на промените)

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Направих сканирането в Safe Mode, тъй като всеки път забиваше на 95%.

     

    ~ ZHPCleaner v2015.9.14.347 by Nicolas Coolman (2015/09/14)
    ~ Run by RRR (Administrator)  (15/09/2015 15:00:19)
    ~ Site : http://www.nicolascoolman.fr
    ~ Facebook : https://www.facebook.com/nicolascoolman1
    ~ State version : Version OK
    ~ Type : Scan
    ~ Report : C:\Users\RRR\Desktop\ZHPCleaner.txt
    ~ Quarantine : C:\Users\RRR\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
    ~ UAC : Activate
    ~ Boot Mode : Sans échec avec prise en charge du réseau (Fail-safe with network boot)
    Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)


    ---\\  Services (0)
    ~ No malicious or unnecessary items found.


    ---\\  Browser internet (2)
    FOUND: [w3qckbrn.default] - user_pref("extensions.8Zz02IlJHaYab0q6.url", "http://mojofuneasy.com/sync2/?q=hfZ9oeJQAchEAen0rHU4rS[...] =>PUP.Optional.DriverGuide
    FOUND: [w3qckbrn.default] - user_pref("extensions.EuVt7jbA1JpaE7y0.url", "http://foreveryshare.ru/sync2/?q=hfZ9oehUBeCHtNbPhd9Hp[...] =>PUP.Optional.DriverGuide


    ---\\  Hosts file (1)
    ~ The hosts file is legitimate (21)


    ---\\  Scheduled automatic tasks. (1)
    FOUND task: [bidaily Synchronize Task[8da6]] [C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job]  =>PUP.Optional.BidailySync


    ---\\  Explorer ( File, Folder) (49)
    FOUND file: C:\Users\RRR\Desktop\BitLord.lnk  [bad : C:\Program Files (x86)\BitLord\BitLord.exe]  =>PUP.Optional.WhenUSave
    FOUND file: C:\Program Files (x86)\BitLord\BitLord.exe [www.BitLord.com - BitLord]  =>PUP.Optional.WhenUSave
    FOUND file: C:\Users\RRR\Desktop\BitLord.lnk    =>PUP.Optional.WhenUSave
    FOUND file: C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job    =>PUP.Optional.BidailySync
    FOUND file: C:\Windows\Prefetch\GS_BOOSTER.EXE-5D689F23.pf    =>PUP.Optional.GSBooster
    FOUND file: C:\Users\RRR\AppData\Roaming\appdataFr3.bin    =>PUP.Optional.Generic
    FOUND file: C:\Users\RRR\AppData\Local\Temp\supoptsetup.exe [super PC Tools ltd - Fix PC problems and optimize performance]  =>PUP.Optional.SuperPCTools
    FOUND file: C:\Users\RRR\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage    =>PUP.Optional.SpecialSavings
    FOUND file: C:\Users\RRR\AppData\Local\Temp\BitLord_1.01.exe    =>PUP.Optional.WhenUSave
    FOUND file: C:\Program Files (x86)\BitLord\BitLord.xml    =>PUP.Optional.WhenUSave
    FOUND file: C:\Program Files (x86)\BitLord\BitLord_Win9x.exe [www.BitLord.com - BitLord]  =>PUP.Optional.WhenUSave
    FOUND file: C:\Program Files (x86)\BitLord\Downloads.xml    =>PUP.Optional.WhenUSave
    FOUND file: C:\Program Files (x86)\BitLord\License.txt    =>PUP.Optional.WhenUSave
    FOUND file: C:\Program Files (x86)\BitLord\uninst.exe    =>PUP.Optional.WhenUSave
    FOUND folder: C:\Program Files (x86)\BitLord\Downloads  =>PUP.Optional.WhenUSave
    FOUND folder: C:\Program Files (x86)\BitLord\lang  =>PUP.Optional.WhenUSave
    FOUND folder: C:\Program Files (x86)\BitLord\rules  =>PUP.Optional.WhenUSave
    FOUND folder: C:\Program Files (x86)\BitLord  =>PUP.Optional.WhenUSave
    FOUND file: C:\ProgramData\AAlllCheapPriaCe\7BvMumlPrBJs9e.dat    =>PUP.Optional.Multiplug
    FOUND file: C:\ProgramData\AAlllCheapPriaCe\7BvMumlPrBJs9e.tlb    =>PUP.Optional.Multiplug
    FOUND file: C:\ProgramData\CheapMe\8kml8G1KobskPF.dat    =>PUP.Optional.Multiplug
    FOUND file: C:\ProgramData\CheapMe\8kml8G1KobskPF.tlb    =>PUP.Optional.Multiplug
    FOUND file: C:\ProgramData\DigiCooupOn\QiNGqmkxESXVtQ.dat    =>PUP.Optional.Multiplug
    FOUND file: C:\ProgramData\DigiCooupOn\QiNGqmkxESXVtQ.tlb    =>PUP.Optional.Multiplug
    FOUND file: C:\ProgramData\ExstraiCCouppon\1X7fbuq7cRhVed.dat    =>PUP.Optional.Multiplug
    FOUND file: C:\ProgramData\ExstraiCCouppon\1X7fbuq7cRhVed.tlb    =>PUP.Optional.Multiplug
    FOUND file: C:\ProgramData\NetoCoupon\bztKtfionYfDL5.dat    =>PUP.Optional.Multiplug
    FOUND file: C:\ProgramData\NetoCoupon\bztKtfionYfDL5.exe    =>PUP.Optional.Multiplug
    FOUND file: C:\ProgramData\NetoCoupon\bztKtfionYfDL5.tlb    =>PUP.Optional.Multiplug
    FOUND file: C:\ProgramData\RandomPrice\y2NllSdRaEwHfS.dat    =>PUP.Optional.Multiplug
    FOUND file: C:\ProgramData\RandomPrice\y2NllSdRaEwHfS.tlb    =>PUP.Optional.Multiplug
    FOUND file: C:\ProgramData\SaveNewaAppz\EXWIPz5s5gbesb.dat    =>PUP.Optional.Multiplug
    FOUND file: C:\ProgramData\SaveNewaAppz\EXWIPz5s5gbesb.exe    =>PUP.Optional.Multiplug
    FOUND file: C:\ProgramData\SaveNewaAppz\EXWIPz5s5gbesb.tlb    =>PUP.Optional.Multiplug
    FOUND folder: C:\ProgramData\AAlllCheapPriaCe  =>PUP.Optional.Multiplug
    FOUND folder: C:\ProgramData\CheapMe  =>PUP.Optional.Multiplug
    FOUND folder: C:\ProgramData\DigiCooupOn  =>PUP.Optional.Multiplug
    FOUND folder: C:\ProgramData\ExstraiCCouppon  =>PUP.Optional.Multiplug
    FOUND folder: C:\ProgramData\NetoCoupon  =>PUP.Optional.Multiplug
    FOUND folder: C:\ProgramData\RandomPrice  =>PUP.Optional.Multiplug
    FOUND folder: C:\ProgramData\SaveNewaAppz  =>PUP.Optional.Multiplug
    FOUND folder: C:\Users\Administrator\AppData\Local\Chromatic Browser\User Data  =>PUP.Optional.ChromaticBrowser
    FOUND folder: C:\Users\Administrator\AppData\Local\Torch\User Data  =>PUP.Optional.Torch
    FOUND folder: C:\Users\Administrator\AppData\Local\Chromatic Browser  =>PUP.Optional.ChromaticBrowser
    FOUND folder: C:\Users\Administrator\AppData\Local\Torch  =>PUP.Optional.Torch
    FOUND folder: C:\Users\Guest\AppData\Local\Chromatic Browser\User Data  =>PUP.Optional.ChromaticBrowser
    FOUND folder: C:\Users\Guest\AppData\Local\Torch\User Data  =>PUP.Optional.Torch
    FOUND folder: C:\Users\Guest\AppData\Local\Chromatic Browser  =>PUP.Optional.ChromaticBrowser
    FOUND folder: C:\Users\Guest\AppData\Local\Torch  =>PUP.Optional.Torch


    ---\\  Registry ( Key, Value, Data) (15)
    FOUND key: HKLM\SOFTWARE\Wow6432Node\Policies\Google\Update []  =>PUM.Security.Hijack
    FOUND key: [X64] HKLM\SOFTWARE\Classes\bitlordunfinishedfile [bitLord Unfinished Download File]  =>Toolbar.CompleteBar
    FOUND key: [X64] HKLM\SOFTWARE\Classes\BitLordUnfinishedFile [bitLord Unfinished Download File]  =>PUP.Optional.WhenUSave
    FOUND key: [X64] HKLM\SOFTWARE\Classes\bittorrent [bitLord File]  =>PUP.Optional.WhenUSave
    FOUND key: [X64] HKLM\SOFTWARE\Classes\CLSID\{5051b095-86fa-4569-8745-1b96d535240c} [DigiCooupOn]  =>PUP.Optional.Multiplug
    FOUND key: [X64] HKLM\SOFTWARE\Classes\CLSID\{5494c1f2-ba96-4824-94d7-53dfbb1d0f21} [CheapMe]  =>PUP.Optional.Multiplug
    FOUND key: [X64] HKLM\SOFTWARE\Classes\CLSID\{7ff0fc24-3bfd-40df-8701-b231f8378330} [MiniimmummPriice]  =>PUP.Optional.Multiplug
    FOUND key: [X64] HKLM\SOFTWARE\Classes\CLSID\{93824824-94bd-4b23-806c-fefb6fb7f3e0} [AAlllCheapPriaCe]  =>PUP.Optional.Multiplug
    FOUND data: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{178F6E31-C398-402E-AC71-7DBF82FAF851}\\NameServer [bad : 199.203.131.145,82.163.143.167]  =>Hijacker.Browser
    FOUND data: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{BA4CAD20-CBAD-471F-9F84-E16DB495FA06}\\NameServer [bad : 82.163.143.169,82.163.142.171]  =>Hijacker.Browser
    FOUND key: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\bitlord.exe [C:\Program Files (x86)\BitLord\BitLord.exe]  =>Toolbar.CompleteBar
    FOUND key: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\bitlord.exe [C:\Program Files (x86)\BitLord\BitLord.exe]  =>Toolbar.CompleteBar
    FOUND key: [X64] HKLM\SOFTWARE\5da059a482fd494db3f252126fbc3d5b []  =>Hijacker.Browser
    FOUND value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\TCP Query User{55D90B99-D2C5-43C8-AF02-10FB750A655C}C:\program files (x86)\bitlord\bitlord.exe [C:\program files (x86)\bitlord\bitlord.exe]  =>PUP.Optional.WhenUSave
    FOUND value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\UDP Query User{654393BC-A4D9-4E83-97B1-DBCFC607255A}C:\program files (x86)\bitlord\bitlord.exe [C:\program files (x86)\bitlord\bitlord.exe]  =>PUP.Optional.WhenUSave


    ---\\ Result of repair
    ~ Any repair made


    ---\\ Statistics
    ~ Items scanned : 76863
    ~ Items found : 98
    ~ Items cancelled : 0
    ~ Items repaired : 0


    ~ End of search in 4 minutes
    ===================
    ZHPCleaner--15092015-15_04_47.txt

    ZHPCleaner.txt

    Редактирано от stepan10 (преглед на промените)

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Ок, ако не сте затворили програмата натиснете бутона Repair, ако сте я затворили ще се наложи да повторите проверката и чак след това да натиснете бутона Repair.

    Публикувайте резултатите в следващия си коментар.


    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    ~ ZHPCleaner v2015.9.14.347 by Nicolas Coolman (2015/09/14)
    ~ Run by RRR (Administrator)  (15/09/2015 15:24:31)
    ~ Site : http://www.nicolascoolman.fr
    ~ Facebook : https://www.facebook.com/nicolascoolman1
    ~ State version : Version OK
    ~ Type : Repair
    ~ Report : C:\Users\RRR\Desktop\ZHPCleaner.txt
    ~ Quarantine : C:\Users\RRR\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
    ~ UAC : Activate
    ~ Boot Mode : Sans échec avec prise en charge du réseau (Fail-safe with network boot)
    Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)


    ---\\  Services (0)
    ~ No malicious or unnecessary items found.


    ---\\  Browser internet (2)
    DELETED: [w3qckbrn.default] - user_pref("extensions.8Zz02IlJHaYab0q6.url", "http://mojofuneasy.com/sync2/?q=hfZ9oeJQAchEAen0rHU4rS[...] =>PUP.Optional.DriverGuide
    DELETED: [w3qckbrn.default] - user_pref("extensions.EuVt7jbA1JpaE7y0.url", "http://foreveryshare.ru/sync2/?q=hfZ9oehUBeCHtNbPhd9Hp[...] =>PUP.Optional.DriverGuide


    ---\\  Hosts file (1)
    ~ The hosts file is legitimate (21)


    ---\\  Scheduled automatic tasks. (1)
    DELETED task: [bidaily Synchronize Task[8da6]] [C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job (Not File) ]  =>PUP.Optional.BidailySync


    ---\\  Explorer ( File, Folder) (19)
    MOVED file: C:\Users\RRR\Desktop\BitLord.lnk  [bad : C:\Program Files (x86)\BitLord\BitLord.exe]  =>PUP.Optional.WhenUSave
    MOVED file: C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job    =>PUP.Optional.BidailySync
    MOVED file: C:\Windows\Prefetch\GS_BOOSTER.EXE-5D689F23.pf    =>PUP.Optional.GSBooster
    MOVED file: C:\Users\RRR\AppData\Roaming\appdataFr3.bin    =>PUP.Optional.Generic
    MOVED file: C:\Users\RRR\AppData\Local\Temp\supoptsetup.exe [super PC Tools ltd - Fix PC problems and optimize performance]  =>PUP.Optional.SuperPCTools
    MOVED file: C:\Users\RRR\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage    =>PUP.Optional.SpecialSavings
    MOVED file: C:\Users\RRR\AppData\Local\Temp\BitLord_1.01.exe    =>PUP.Optional.WhenUSave
    MOVED folder: C:\Program Files (x86)\BitLord  =>PUP.Optional.WhenUSave
    MOVED folder: C:\ProgramData\AAlllCheapPriaCe  =>PUP.Optional.Multiplug
    MOVED folder: C:\ProgramData\CheapMe  =>PUP.Optional.Multiplug
    MOVED folder: C:\ProgramData\DigiCooupOn  =>PUP.Optional.Multiplug
    MOVED folder: C:\ProgramData\ExstraiCCouppon  =>PUP.Optional.Multiplug
    MOVED folder: C:\ProgramData\NetoCoupon  =>PUP.Optional.Multiplug
    MOVED folder: C:\ProgramData\RandomPrice  =>PUP.Optional.Multiplug
    MOVED folder: C:\ProgramData\SaveNewaAppz  =>PUP.Optional.Multiplug
    MOVED folder: C:\Users\Administrator\AppData\Local\Chromatic Browser  =>PUP.Optional.ChromaticBrowser
    MOVED folder: C:\Users\Administrator\AppData\Local\Torch  =>PUP.Optional.Torch
    MOVED folder: C:\Users\Guest\AppData\Local\Chromatic Browser  =>PUP.Optional.ChromaticBrowser
    MOVED folder: C:\Users\Guest\AppData\Local\Torch  =>PUP.Optional.Torch


    ---\\  Registry ( Key, Value, Data) (14)
    DELETED data: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{178F6E31-C398-402E-AC71-7DBF82FAF851}\\NameServer [bad : 199.203.131.145,82.163.143.167]  =>Hijacker.Browser
    DELETED data: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{BA4CAD20-CBAD-471F-9F84-E16DB495FA06}\\NameServer [bad : 82.163.143.169,82.163.142.171]  =>Hijacker.Browser
    DELETED key*: HKLM\SOFTWARE\Wow6432Node\Policies\Google\Update []  =>PUM.Security.Hijack
    DELETED key*: [X64] HKLM\SOFTWARE\Classes\bitlordunfinishedfile [bitLord Incomplete Download File]  =>Toolbar.CompleteBar
    DELETED key*: [X64] HKLM\SOFTWARE\Classes\bittorrent [bitLord File]  =>PUP.Optional.WhenUSave
    DELETED key*: [X64] HKLM\SOFTWARE\Classes\CLSID\{5051b095-86fa-4569-8745-1b96d535240c} [DigiCooupOn]  =>PUP.Optional.Multiplug
    DELETED key*: [X64] HKLM\SOFTWARE\Classes\CLSID\{5494c1f2-ba96-4824-94d7-53dfbb1d0f21} [CheapMe]  =>PUP.Optional.Multiplug
    DELETED key*: [X64] HKLM\SOFTWARE\Classes\CLSID\{7ff0fc24-3bfd-40df-8701-b231f8378330} [MiniimmummPriice]  =>PUP.Optional.Multiplug
    DELETED key*: [X64] HKLM\SOFTWARE\Classes\CLSID\{93824824-94bd-4b23-806c-fefb6fb7f3e0} [AAlllCheapPriaCe]  =>PUP.Optional.Multiplug
    DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\bitlord.exe [C:\Program Files (x86)\BitLord\BitLord.exe (Not File)]  =>Toolbar.CompleteBar
    DELETED key: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\bitlord.exe [C:\Program Files (x86)\BitLord\BitLord.exe (Not File)]  =>Toolbar.CompleteBar
    DELETED key*: [X64] HKLM\SOFTWARE\5da059a482fd494db3f252126fbc3d5b []  =>Hijacker.Browser
    DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\TCP Query User{55D90B99-D2C5-43C8-AF02-10FB750A655C}C:\program files (x86)\bitlord\bitlord.exe [C:\program files (x86)\bitlord\bitlord.exe]  =>PUP.Optional.WhenUSave
    DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\UDP Query User{654393BC-A4D9-4E83-97B1-DBCFC607255A}C:\program files (x86)\bitlord\bitlord.exe [C:\program files (x86)\bitlord\bitlord.exe]  =>PUP.Optional.WhenUSave


    ---\\ Result of repair
    ~ Repair carried out successfully


    ---\\ Statistics
    ~ Items scanned : 4159
    ~ Items found : 0
    ~ Items cancelled : 0
    ~ Items repaired : 36


    ~ End of clean in 0 minutes
    ===================
    ZHPCleaner-[R]-15092015-15_25_05.txt
    ZHPCleaner--15092015-15_04_47.txt
    ZHPCleaner--15092015-15_24_07.txt
     

    ZHPCleaner.txt

    Редактирано от stepan10 (преглед на промените)

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте,

     

     

    Лошото е, че гадината е обновила браузъра ви до версия за разработчици, където всички защитни механизми за свалени и дори след като го почистихме след време гадината пак ще си инсталира зловредните добавки.

     

    CHR dev: Chrome dev build detected! <======= ATTENTION

     

    Затова...решението е пълно деинсталиране на браузъра Google Chrome с GeekUninstaller и след това инсталирането на последната стабилна версия на браузъра.

     

    Преди да го деинсталирате е добре да си запазите всички пароли и добавки ако имате такива.

     

    Експортиране на отметки от Chrome:

    1. В горния десен ъгъл на прозореца на браузъра кликнете върху менюто на Chrome.
    2. Изберете Отметки > Диспечер на отметките.
    3. Кликнете върху менюто „Организиране“ в диспечера.
    4. Сега изберете Export bookmarks to HTML file.

    Тук са даден инструкции след това как да ги импортнете обратно след преинсталацията на браузъра:

    http://www.wikihow.c...rks-from-Chrome

     

    За паролите вижте дали следния инструмент сработва:

    http://www.intowindo...chrome-browser/

     

    Сега вече деинсталирайте браузъра с GeekUninstaller по следния начин:

     

    Изтеглете програмата GeekUninstaller и я запазете на десктопа.

    Разархивирайте я и стартирайте файла geek.exe IxXO5oO.jpg
    От списъка намерете Google Chrome (примера е за Mozilla Firefox, но това е просто за показно).

    Кликнете с десен бутон върху програмата и изберете Uninstall
     
    XhV2QLa.png
     
    След края на инсталацията ще се отвори прозорец подканващ ви да премахнете всички остатъци от програмата (ако има такива, ако няма този прозорец няма да се появи):
     
    Пример за Mozilla браузъра:

     

    geekuninstaller-3.png

    Натиснете бутона Finish за да изтриете останките от програмата.

     

    След това вече изтеглете и инсталирайте последната стабилна версия на Google Chrome оттук => Google Chrome 45.0.2454.85 Stable

     

    След това направете нова проверка с FRST като сложите отметка пред Addition.txt и прикачете новите два лог файла в следващия си коментар.

     

     

    Поздрави!

    • Харесва ми 2

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте.

     

    Google Chrome не съм го инсталирал, дава грешка при стартиране на инсталацията, ще мина и без него.

    FRST.txt

    Addition.txt

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Ще оправим и Google Chrome...

     

    Изтеглете KKdS6sj.pngfixlist.txt и го запазете в папката от която стартирахте FRST.exe.
    Стартирайте FRST.exe и натиснете бутона Fix веднъж!
    След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.
     
    Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Fix result of Farbar Recovery Scan Tool (x64) Version:15-09-2015
    Ran by RRR (2015-09-16 10:18:56) Run:1
    Running from C:\Users\RRR\Desktop\New folder (2)
    Loaded Profiles: RRR (Available Profiles: RRR)
    Boot Mode: Normal
    ==============================================

    fixlist content:
    *****************
    start
    Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden
    CMD: Dir /b c:\*Google* /s
    reg: reg query HKCU\SOFTWARE\Google
    reg: reg query "HKCU\SOFTWARE\Google\Update\Clients" /s
    reg: reg query "HKCU\SOFTWARE\Google\Update\ClientState" /s
    reg: reg query HKLM\SOFTWARE\Google
    reg: reg query HKLM\SOFTWARE\Wow6432Node\Google
    reg: reg query "HKLM\SOFTWARE\Google\Update\Clients" /s
    reg: reg query "HKLM\SOFTWARE\Google\Update\ClientState" /s
    reg: reg query "HKLM\SOFTWARE\Wow6432Node\Google\Update\Clients" /s
    reg: reg query "HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState" /s
    end
    *****************

    HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}\\SystemComponent => value removed successfully

    =========  Dir /b c:\*Google* /s =========

    c:\AdwCleaner\Quarantine\C\Users\RRR\AppData\Local\Google
    c:\Program Files (x86)\Google
    c:\Program Files (x86)\Share on Google Plus
    c:\Program Files (x86)\Google\Google Earth
    c:\Program Files (x86)\Google\Google Earth\client\googleearth.exe
    c:\Program Files (x86)\Google\Google Earth\client\googleearth.exe.local
    c:\Program Files (x86)\Google\Google Earth\client\google_earth.ico
    c:\Program Files (x86)\Google\Google Earth\client\res\google_earth_splash.png
    c:\Program Files (x86)\Google\Google Earth\client\res\ko.locale\google_earth_splash.png
    c:\Program Files (x86)\Google\Google Earth\client\res\ru.locale\google_earth_splash.png
    c:\Program Files (x86)\Google\Google Earth\client\res\zh-Hans.locale\google_earth_splash.png
    c:\Program Files (x86)\Google\Google Earth\client\res\zh-Hant.locale\google_earth_splash.png
    c:\Program Files (x86)\Google\Google Earth\plugin\googleearth.exe.local
    c:\Program Files (x86)\Google\Google Earth\plugin\google_earth.ico
    c:\Program Files (x86)\Google\Google Earth\plugin\res\google_earth_splash.png
    c:\Program Files (x86)\Google\Update\GoogleGGupdate.exe
    c:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
    c:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
    c:\Program Files (x86)\Google\Update\1.3.26.9\GoogleUpdate.exe
    c:\Program Files (x86)\Google\Update\1.3.26.9\GoogleUpdateBroker.exe
    c:\Program Files (x86)\Google\Update\1.3.26.9\GoogleUpdateComRegisterShell64.exe
    c:\Program Files (x86)\Google\Update\1.3.26.9\GoogleUpdateHelper.msi
    c:\Program Files (x86)\Google\Update\1.3.26.9\GoogleUpdateOnDemand.exe
    c:\Program Files (x86)\Google\Update\1.3.26.9\GoogleUpdateSetup.exe
    c:\Program Files (x86)\Google\Update\1.3.26.9\GoogleUpdateWebPlugin.exe
    c:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll
    c:\Program Files (x86)\Google\Update�\GoogleUpdate.exe
    c:\Program Files (x86)\Google\Update�\1.3.25.5\GoogleCrashHandler.exe
    c:\Program Files (x86)\Google\Update�\1.3.25.5\GoogleCrashHandler64.exe
    c:\Program Files (x86)\Google\Update�\1.3.25.5\GoogleUpdate.exe
    c:\Program Files (x86)\Google\Update�\1.3.25.5\GoogleUpdateBroker.exe
    c:\Program Files (x86)\Google\Update�\1.3.25.5\GoogleUpdateComRegisterShell64.exe
    c:\Program Files (x86)\Google\Update�\1.3.25.5\GoogleUpdateHelper.msi
    c:\Program Files (x86)\Google\Update�\1.3.25.5\GoogleUpdateOnDemand.exe
    c:\Program Files (x86)\Google\Update�\1.3.25.5\GoogleUpdateSetup.exe
    c:\Program Files (x86)\Google\Update�\1.3.25.5\npGoogleUpdate3.dll
    c:\Program Files (x86)\Google\Update�\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.25.5\GoogleUpdateSetup.exe
    c:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\google.xml
    c:\Program Files (x86)\Share on Google Plus\Share on Google Plus.dat
    c:\Program Files (x86)\VideoLAN\VLC\lua\meta\art\01_googleimage.luac
    c:\Program Files (x86)\VideoLAN\VLC\lua\playlist\googlevideo.luac
    c:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
    c:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth\Google ����.lnk
    c:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth\Uninstall Google Earth .lnk
    c:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth\����࠭� �� Google ���� � DirectX ०��.lnk
    c:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth\����࠭� �� Google ���� � OpenGL ०��.lnk
    c:\Users\Administrator\AppData\Local\Google
    c:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Google Earth
    c:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Google Earth\Google ����.lnk
    c:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Google Earth\Uninstall Google Earth .lnk
    c:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Google Earth\����࠭� �� Google ���� � DirectX ०��.lnk
    c:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Google Earth\����࠭� �� Google ���� � OpenGL ०��.lnk
    c:\Users\Guest\AppData\Local\Google
    c:\Users\Public\Desktop\Google ����.lnk
    c:\Users\RRR\AppData\Local\Google
    c:\Users\RRR\AppData\Local\Google\Custom Buttons\toolbar.google.com_MXE8GT6B9RBHXCGLZ06L.xml
    c:\Users\RRR\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25OIUGWK\google-plus[1].jpg
    c:\Users\RRR\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\559IHO4I\google-plus[1].png
    c:\Users\RRR\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T41N1SP4\google-plus[1].jpg
    c:\Users\RRR\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TA29W88H\google-plus[1].png
    c:\Users\RRR\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TA29W88H\google-plus[3].png
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\accounts.google.com.idx
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\books.google.bg.idx
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\http%3A%2F%2Fbooks.google.bg%2Ffavicon.png
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\http%3A%2F%2Fimages.google.bg%2Ffavicon.png
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\http%3A%2F%2Fmaps.google.bg%2Ffavicon.png
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\http%3A%2F%2Fpicasaweb.google.com%2Ffavicon.png
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\http%3A%2F%2Fredir.opera.com%2Ffavicons%2Fgoogle%2Ffavicon.png
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\http%3A%2F%2Ftranslate.google.bg%2Ffavicon.png
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\http%3A%2F%2Fwww.google.bg%2Ffavicon.png
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\http%3A%2F%2Fwww.google.com%2Ffavicon.png
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\http%3A%2F%2Fwww.google.com%2Fs2%2Ffavicons%3Fdomain=freepornsit.png
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\https%3A%2F%2Faccounts.google.com%2Ffavicon.png
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\https%3A%2F%2Fsupport.google.com%2Ffavicon.png
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\https%3A%2F%2Ftranslate.google.bg%2Ffavicon.png
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\https%3A%2F%2Ftranslate.google.com%2Ffavicon.png
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\https%3A%2F%2Fwww.google.bg%2Fimages%2Fbranding%2Fproduct%2Fico%2Fgoogleg_lodp.png
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\https%3A%2F%2Fwww.google.com%2Ffavicon.png
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\https%3A%2F%2Fwww.google.com%2Fimages%2Ficons%2Fproduct%2Fsites-16.png
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\https%3A%2F%2Fwww.google.com.mx%2Ffavicon.png
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\images.google.bg.idx
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\maps.google.bg.idx
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\maps.google.ca.idx
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\maps.google.com.idx
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\picasaweb.google.com.idx
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\plus.google.com.idx
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\sites.google.com.idx
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\support.google.com.idx
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\translate.google.bg.idx
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\translate.google.com.idx
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\www.google.bg.idx
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\www.google.com.idx
    c:\Users\RRR\AppData\Local\Opera\Opera\icons\www.google.com.mx.idx
    c:\Users\RRR\AppData\Local\Temp\GUM68D0.tmp\GoogleUpdateSetup.exe
    c:\Users\RRR\AppData\LocalLow\Google
    c:\Users\RRR\AppData\LocalLow\Google\GoogleEarth
    c:\Users\RRR\AppData\LocalLow\Google\GoogleEarth\icons\kh.google.com_icons_1050_l.png
    c:\Users\RRR\AppData\LocalLow\Google\GoogleEarth\icons\kh.google.com_icons_360cities64_l.png
    c:\Users\RRR\AppData\LocalLow\Google\GoogleEarth\icons\kh.google.com_icons_3d_buildings_new_l.png
    c:\Users\RRR\AppData\LocalLow\Google\GoogleEarth\icons\kh.google.com_icons_blue_star_l.png
    c:\Users\RRR\AppData\LocalLow\Google\GoogleEarth\icons\kh.google.com_icons_census_new_l.png
    c:\Users\RRR\AppData\LocalLow\Google\GoogleEarth\icons\kh.google.com_icons_city_capital_star.png
    c:\Users\RRR\AppData\LocalLow\Google\GoogleEarth\icons\kh.google.com_icons_city_major.png
    c:\Users\RRR\AppData\LocalLow\Google\GoogleEarth\icons\kh.google.com_icons_flag64_l.png
    c:\Users\RRR\AppData\LocalLow\Google\GoogleEarth\icons\kh.google.com_icons_generic_poi_l.png
    c:\Users\RRR\AppData\LocalLow\Google\GoogleEarth\icons\kh.google.com_icons_lil_earth_l.png
    c:\Users\RRR\AppData\LocalLow\Google\GoogleEarth\icons\kh.google.com_icons_ocean_l.png
    c:\Users\RRR\AppData\LocalLow\Google\GoogleEarth\icons\kh.google.com_icons_panoramioclustered64_l.png
    c:\Users\RRR\AppData\LocalLow\Google\GoogleEarth\icons\kh.google.com_icons_panoramio_cluster_n1.png
    c:\Users\RRR\AppData\LocalLow\Google\GoogleEarth\icons\kh.google.com_icons_panoramio_cluster_n2.png
    c:\Users\RRR\AppData\LocalLow\Google\GoogleEarth\icons\kh.google.com_icons_panoramio_cluster_n3.png
    c:\Users\RRR\AppData\LocalLow\Google\GoogleEarth\icons\kh.google.com_icons_panoramio_photo_square_l.png
    c:\Users\RRR\AppData\LocalLow\Google\GoogleEarth\icons\kh.google.com_icons_park-15.png
    c:\Users\RRR\AppData\LocalLow\Google\GoogleEarth\icons\kh.google.com_icons_roads_legend_l.png
    c:\Users\RRR\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\7L4J33E8\googleads.g.doubleclick[1].xml
    c:\Users\RRR\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\7L4J33E8\plus.google[1].xml
    c:\Users\RRR\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\7L4J33E8\tpc.googlesyndication[1].xml
    c:\Users\RRR\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\7L4J33E8\www.google[1].xml
    c:\Users\RRR\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\AHURWFCW\googleads.g.doubleclick[1].xml
    c:\Users\RRR\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\AHURWFCW\plus.googleapis[1].xml
    c:\Users\RRR\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\AHURWFCW\www.google[1].xml
    c:\Users\RRR\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\AX7OCEZD\play.google[1].xml
    c:\Users\RRR\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\AX7OCEZD\translate.google[1].xml
    c:\Users\RRR\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\CQETTWM0\translate.google[1].xml
    c:\Users\RRR\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\CQETTWM0\translate.google[2].xml
    c:\Users\RRR\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\HPMSKKNY\googleads.g.doubleclick[1].xml
    c:\Users\RRR\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\HPMSKKNY\plus.google[1].xml
    c:\Users\RRR\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\HPMSKKNY\translate.googleusercontent[1].xml
    c:\Users\RRR\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\HPMSKKNY\translate.google[1].xml
    c:\Users\RRR\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\HPMSKKNY\www.google[1].xml
    c:\Users\RRR\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\MMNMP0FE\googleads.g.doubleclick[1].xml
    c:\Users\RRR\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\MMNMP0FE\www.google[1].xml
    c:\Users\RRR\AppData\Roaming\ACEStream\player\lua\meta\art\01_googleimage.luac
    c:\Users\RRR\AppData\Roaming\ACEStream\player\lua\playlist\googlevideo.luac
    c:\Users\RRR\AppData\Roaming\Opera Software\Opera Stable\Local Storage\https_www.google.bg_0.localstorage
    c:\Users\RRR\AppData\Roaming\Opera Software\Opera Stable\Local Storage\https_www.google.bg_0.localstorage-journal
    c:\Windows\Installer\{2EAF7E61-068E-11DF-953C-005056806466}\googleearth.exe1_F6A848FB884248E6A4CDCBDCF41F6A74.exe
    c:\Windows\Installer\{2EAF7E61-068E-11DF-953C-005056806466}\googleearth.exe_F6A848FB884248E6A4CDCBDCF41F6A74.exe
    c:\Windows\SysWOW64\config\systemprofile\AppData\Local\Google

    ========= End of CMD: =========


    ========= reg query HKCU\SOFTWARE\Google =========


    HKEY_CURRENT_USER\SOFTWARE\Google\Common
    HKEY_CURRENT_USER\SOFTWARE\Google\GECommonSettings
    HKEY_CURRENT_USER\SOFTWARE\Google\Google Earth Plus
    HKEY_CURRENT_USER\SOFTWARE\Google\Software Removal Tool
    HKEY_CURRENT_USER\SOFTWARE\Google\Update


    ========= End of Reg: =========


    ========= reg query "HKCU\SOFTWARE\Google\Update\Clients" /s =========

    ERROR: The system was unable to find the specified registry key or value.


    ========= End of Reg: =========


    ========= reg query "HKCU\SOFTWARE\Google\Update\ClientState" /s =========


    HKEY_CURRENT_USER\SOFTWARE\Google\Update\ClientState\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}
        dr    REG_SZ    1

    HKEY_CURRENT_USER\SOFTWARE\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
        dr    REG_SZ    1
        lastrun    REG_SZ    13084053209466234



    ========= End of Reg: =========


    ========= reg query HKLM\SOFTWARE\Google =========

    ERROR: The system was unable to find the specified registry key or value.


    ========= End of Reg: =========


    ========= reg query HKLM\SOFTWARE\Wow6432Node\Google =========


    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\GoogleEarthPlugin
    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\NavClient
    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\No Chrome Offer Until
    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update


    ========= End of Reg: =========


    ========= reg query "HKLM\SOFTWARE\Google\Update\Clients" /s =========

    ERROR: The system was unable to find the specified registry key or value.


    ========= End of Reg: =========


    ========= reg query "HKLM\SOFTWARE\Google\Update\ClientState" /s =========

    ERROR: The system was unable to find the specified registry key or value.


    ========= End of Reg: =========


    ========= reg query "HKLM\SOFTWARE\Wow6432Node\Google\Update\Clients" /s =========


    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{430FD4D0-B729-4F61-AA34-91526481799D}
        pv    REG_SZ    1.3.26.9
        name    REG_SZ    Google ЂЄвг «Ё§ жЁп



    ========= End of Reg: =========


    ========= reg query "HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState" /s =========


    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}
        pv    REG_SZ    1.3.26.9
        brand    REG_SZ    IHCB
        InstallTime    REG_DWORD    0x53f1eb57
        DayOfInstall    REG_DWORD    0xae2
        DayOfLastActivity    REG_DWORD    0xffffffff
        DayOfLastRollCall    REG_DWORD    0xb26
        experiment_labels    REG_SZ    omaha=long_tail_update|Thu, 21 Aug 2014 02:55:20 GMT
        RollCallDayStartSec    REG_DWORD    0x544b4a82
        LastCheckSuccess    REG_DWORD    0x544b5d31
        UpdateTime    REG_DWORD    0x544178ad

    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}\CurrentState
        StateValue    REG_DWORD    0x10

    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}
        UninstallArguments    REG_SZ     --uninstall --multi-install --msi --system-level --verbose-logging
        brand    REG_SZ    IHCB
        ap    REG_SZ    2.0-dev-multi
        pv    REG_SZ    38.0.2125.104
        ActivePingDayStartSec    REG_DWORD    0x5449f902
        RollCallDayStartSec    REG_DWORD    0x544b4a82
        DayOfLastActivity    REG_DWORD    0xb25
        DayOfLastRollCall    REG_DWORD    0xb26
        LastCheckSuccess    REG_DWORD    0x544b5d31
        UpdateTime    REG_DWORD    0x5447a164
        LastInstallerResult    REG_DWORD    0x0
        LastInstallerError    REG_DWORD    0x2
        msi    REG_DWORD    0x0
        InstallerResult    REG_DWORD    0x0
        InstallerError    REG_DWORD    0x2

    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}\CurrentState
        StateValue    REG_DWORD    0x10

    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}
        brand    REG_SZ    IHCB
        InstallTime    REG_DWORD    0x53f1eb59
        DayOfInstall    REG_DWORD    0xae2
        DayOfLastActivity    REG_DWORD    0xb25
        DayOfLastRollCall    REG_DWORD    0xb26
        UninstallArguments    REG_SZ     --uninstall --multi-install --chrome --msi --system-level --verbose-logging
        pv    REG_SZ    44.0.2403.155
        LastCheckSuccess    REG_DWORD    0x55ce3d87
        ActivePingDayStartSec    REG_DWORD    0x5449f902
        RollCallDayStartSec    REG_DWORD    0x544b4a82
        experiment_labels    REG_SZ    CrVar1=3312701|Mon, 01 Aug 2016 12:06:44 GMT;CrVar2=3300143|Wed, 15 Jun 2016 11:29:49 GMT;CrVar3=3300029|Wed, 15 Jun 2016 11:29:49 GMT;CrVar4=3300120|Wed, 15 Jun 2016 11:29:49 GMT;CrVar5=3300132|Wed, 15 Jun 2016 11:29:49 GMT;CrVar6=3300108|Wed, 15 Jun 2016 11:29:49 GMT;CrVar7=3300135|Wed, 15 Jun 2016 11:29:49 GMT
        msi    REG_DWORD    0x0
        ap    REG_SZ    2.0-dev-multi-chrome
        LastInstallerResult    REG_DWORD    0x0
        LastInstallerError    REG_DWORD    0x2
        usagestats    REG_DWORD    0x1

    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\CurrentState
        StateValue    REG_DWORD    0xe
        DownloadTimeRemainingMs    REG_DWORD    0xffffffff
        DownloadProgressPercent    REG_DWORD    0x0
        InstallTimeRemainingMs    REG_DWORD    0x0
        InstallProgressPercent    REG_DWORD    0x64

    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{FDA71E6F-AC4C-4A00-8B70-9958A68906BF}
        pv    REG_SZ    38.0.2125.104
        RollCallDayStartSec    REG_DWORD    0x544b4a82
        DayOfLastRollCall    REG_DWORD    0xb26

    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{FDA71E6F-AC4C-4A00-8B70-9958A68906BF}\CurrentState
        StateValue    REG_DWORD    0x11



    ========= End of Reg: =========


    ==== End of Fixlog 10:22:00 ====

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Изтеглете KKdS6sj.pngfixlist.txt и го запазете в папката от която стартирахте FRST.exe.
    Стартирайте FRST.exe и натиснете бутона Fix веднъж!
    След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.
     
    Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

     

    След това пробвайте да инсталирате отново Google Chrome.

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Ето лог файла:

     

    Fix result of Farbar Recovery Scan Tool (x64) Version:15-09-2015
    Ran by RRR (2015-09-16 12:12:33) Run:2
    Running from C:\Users\RRR\Desktop\New folder (2)
    Loaded Profiles: RRR (Available Profiles: RRR)
    Boot Mode: Normal
    ==============================================

    fixlist content:
    *****************
    start
    DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{430FD4D0-B729-4F61-AA34-91526481799D}
    DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}
    end
    *****************

    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{430FD4D0-B729-4F61-AA34-91526481799D} => key removed successfully
    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D} => could not remove at first attempt (ErrorCode: C0000121), see next line.
    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D} => key removed successfully

    ==== End of Fixlog 12:12:33 ====

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    След като вече сме премахнали ключовете в регистрите просто го деинсталирайте отново и след това го преинсталирайте.

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Преинсталирах го и си чакам вече 15 мин. да зареди след поредния блокаж, явно ще бъде изключен по грубия начин за пореден път.

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Нека да стои така. Не сме свършили с почистването така или иначе.

     

    Изтеглете KKdS6sj.pngfixlist.txt и го запазете в папката от която стартирахте FRST.exe.
    Стартирайте FRST.exe и натиснете бутона Fix веднъж!
    След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.
     
    Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

     

     

    Сега за да продължим с почистването следвайте следните стъпки:

     

     

    СТЪПКА 1

     

    • Изтеглете и стартирайтe последната версия на 6sv1DN9.jpgAdwCleaner.exe..
    • Натиснете бутона Scan.
    • AdwCleaner ще започне да проверява компютъра.
    • След като проверката приключи натиснете бутона Clean.
    • Програмата ще затвори всички излишни процеси и след почистването ще иска да рестартира машината. Съгласете се.
    • Ще се появи автоматично лог файл с името (AdwCleaner[s0].txt) в C:\Adwcleaner
    • Публикувайте съдържанието му в следващия си коментар.

     

     

    СТЪПКА 2

     

     

    Моля изтеглете icon1351185104.png Junkware Removal Tool на вашия десктоп.

    • Спрете временно работата на защитните програми.
    • Стартирайте инструмента JRT.exe
    • Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата.
    • Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши.
    • Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt).
    • Моля копирайте съдържанието на лог файла в следващия си пост.

     

     

    СТЪПКА 3

     

     

    Направете нова проверка с FRST като се уверите, че има отметка пред Addition.txt преди да натиснете бутона SCAN.

    Прикачете новите два лог файла - FRST.txt и Addition.txt в следващия си коментар.

     

     

    Поздрави!

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Лог файла:

     

    Fix result of Farbar Recovery Scan Tool (x64) Version:15-09-2015
    Ran by RRR (2015-09-16 21:02:09) Run:3
    Running from C:\Users\RRR\Desktop\FRST-OlderVersion
    Loaded Profiles: RRR (Available Profiles: RRR)
    Boot Mode: Normal
    ==============================================

    fixlist content:
    *****************
    start
    CreateRestorePoint:
    CloseProcesses:
    HKLM-x32\...\Run: [] => [X]
    GroupPolicy: Restriction - Chrome <======= ATTENTION
    CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
    OPR Extension: (No Name) - C:\Users\RRR\AppData\Roaming\Opera Software\Opera Stable\Extensions\mfhnkgpdlogbknkhlgdjlejeljbhflim [2015-02-27]
    2015-08-28 14:05 - 2015-06-01 08:44 - 00000000 ____D C:\Program Files (x86)\Omnifinder
    2015-06-23 08:55 - 2015-08-01 13:57 - 0000020 _____ () C:\Users\RRR\AppData\Roaming\appdataFr2.bin
    2015-06-15 14:29 - 2015-07-03 12:47 - 0000024 _____ () C:\Users\RRR\AppData\Roaming\appdataFr25.bin
    Task: {1C7C436F-B485-437A-92A5-669FA1451B92} - \DNSWETHERSFIELD -> No File <==== ATTENTION
    Task: {DD133C23-348B-4E41-93C7-675D29B85B5A} - System32\Tasks\Bidaily Synchronize Task[8da6] => c:\programdata\{716405bc-1f38-db87-7164-405bc1f316f0}\hqghumeaylnlf.exe <==== ATTENTION
    c:\programdata\{716405bc-1f38-db87-7164-405bc1f316f0}
    cmd: bitsadmin /reset /allusers
    cmd: netsh winsock reset catalog
    cmd: ipconfig /flushdns
    RemoveProxy:
    EmptyTemp:
    End
    *****************

    Restore point was successfully created.
    Processes closed successfully.
    HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully
    C:\Windows\system32\GroupPolicy\Machine => moved successfully
    C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully
    C:\Windows\SysWOW64\GroupPolicy\GPT.ini => moved successfully
    "HKLM\SOFTWARE\Policies\Google" => key removed successfully
    C:\Users\RRR\AppData\Roaming\Opera Software\Opera Stable\Extensions\mfhnkgpdlogbknkhlgdjlejeljbhflim => moved successfully
    C:\Program Files (x86)\Omnifinder => moved successfully
    C:\Users\RRR\AppData\Roaming\appdataFr2.bin => moved successfully
    C:\Users\RRR\AppData\Roaming\appdataFr25.bin => moved successfully
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{1C7C436F-B485-437A-92A5-669FA1451B92}" => key removed successfully
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1C7C436F-B485-437A-92A5-669FA1451B92}" => key removed successfully
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DNSWETHERSFIELD" => key removed successfully
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DD133C23-348B-4E41-93C7-675D29B85B5A}" => key removed successfully
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DD133C23-348B-4E41-93C7-675D29B85B5A}" => key removed successfully
    C:\Windows\System32\Tasks\Bidaily Synchronize Task[8da6] => moved successfully
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Bidaily Synchronize Task[8da6]" => key removed successfully
    "c:\programdata\{716405bc-1f38-db87-7164-405bc1f316f0}" => File/Folder not found.

    =========  bitsadmin /reset /allusers =========


    BITSADMIN version 3.0 [ 7.5.7601 ]
    BITS administration utility.
    © Copyright 2000-2006 Microsoft Corp.

    BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
    Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.

    Unable to cancel {647D83BB-8F7D-4C6D-8D36-ED1EBCA3D75E}.
    Unable to cancel {7D84FF2C-827B-4F45-A510-688EE1E1F737}.
    Unable to cancel {B722E082-4326-4BD9-8912-001E420CECFA}.
    0 out of 3 jobs canceled.

    ========= End of CMD: =========


    =========  netsh winsock reset catalog =========


    Sucessfully reset the Winsock Catalog.
    You must restart the computer in order to complete the reset.


    ========= End of CMD: =========


    =========  ipconfig /flushdns =========


    Windows IP Configuration

    Successfully flushed the DNS Resolver Cache.

    ========= End of CMD: =========


    ========= RemoveProxy: =========

    HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
    HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully
    HKU\S-1-5-21-3352682033-4164677752-1323257766-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
    HKU\S-1-5-21-3352682033-4164677752-1323257766-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully


    ========= End of RemoveProxy: =========

    EmptyTemp: => 9.7 GB temporary data Removed.


    The system needed a reboot..

    ==== End of Fixlog 21:04:37 ====

     

     

     

    СТЪПКА 1

     

    # AdwCleaner v5.007 - Logfile created 16/09/2015 at 21:23:11
    # Updated 08/09/2015 by Xplode
    # Database : 2015-09-15.1 [server]
    # Operating system : Windows 7 Home Premium Service Pack 1 (x64)
    # Username : RRR - RRR-PC
    # Running from : C:\Users\RRR\Desktop\adwcleaner_5.007.exe
    # Option : Cleaning
    # Support : http://toolslib.net/forum

    ***** [ Services ] *****


    ***** [ Folders ] *****

    [-] Folder Deleted : C:\Users\RRR\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iajffemldkkhodaedkcpnbpfabiglmdi
    [!] Folder Not Deleted : C:\Users\RRR\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iajffemldkkhodaedkcpnbpfabiglmdi
    [!] Folder Not Deleted : C:\Users\RRR\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iajffemldkkhodaedkcpnbpfabiglmdi
    [-] Folder Deleted : C:\Users\RRR\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iajffemldkkhodaedkcpnbpfabiglmdi
    [!] Folder Not Deleted : C:\Users\RRR\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iajffemldkkhodaedkcpnbpfabiglmdi
    [!] Folder Not Deleted : C:\Users\RRR\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iajffemldkkhodaedkcpnbpfabiglmdi

    ***** [ Files ] *****


    ***** [ Shortcuts ] *****


    ***** [ Scheduled tasks ] *****


    ***** [ Registry ] *****


    ***** [ Web browsers ] *****


    *************************

    :: Winsock sеttings cleared

    ########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1399 bytes] ##########
     


    СТЪПКА 2

     

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Malwarebytes
    Version: 7.6.2 (09.14.2015:1)
    OS: Windows 7 Home Premium x64
    Ran by RRR on 16/09/2015 at 21:55:58.92
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




    ~~~ Services



    ~~~ Tasks



    ~~~ Registry Values



    ~~~ Registry Keys



    ~~~ Files



    ~~~ Folders

    Failed to delete: [Folder] C:\Users\RRR\AppData\Roaming\acestream
    Successfully deleted: [Folder] C:\Program Files (x86)\Do Not Disturb
    Successfully deleted: [Folder] C:\Users\RRR\AppData\Roaming\.acestream
    Successfully deleted: [Folder] C:\ProgramData\coinsavoe
    Successfully deleted: [Folder] C:\ProgramData\onamlcnfmfdbihloidoehgdcoojflpgk



    ~~~ FireFox

    Emptied folder: C:\Users\RRR\AppData\Roaming\mozilla\firefox\profiles\w3qckbrn.default\minidumps [4 files]



    ~~~ Chrome


    [C:\Users\RRR\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

    [C:\Users\RRR\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

    [C:\Users\RRR\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

    [C:\Users\RRR\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:





    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on 16/09/2015 at 21:59:30.63
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

     

     

     

    СТЪПКА 3

     

     

    FRST.txt

    Addition.txt

    Редактирано от stepan10 (преглед на промените)

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Така, имаме напредък.

     

    Изтеглете KKdS6sj.pngfixlist.txt и го запазете в папката от която стартирахте FRST.exe.
    Стартирайте FRST.exe и натиснете бутона Fix веднъж!
    След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.
     
    Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

     

     

    След това пишете как е положението.

    • Харесва ми 2

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Лог файла:

     

    Fix result of Farbar Recovery Scan Tool (x64) Version:15-09-2015
    Ran by RRR (2015-09-16 23:44:47) Run:4
    Running from C:\Users\RRR\Desktop\FRST-OlderVersion
    Loaded Profiles: RRR (Available Profiles: RRR)
    Boot Mode: Normal
    ==============================================

    fixlist content:
    *****************
    start
    CreateRestorePoint:
    HKLM-x32\...\Run: [NWEReboot] => [X]
    HKU\S-1-5-21-3352682033-4164677752-1323257766-1000\...\Run: [AceStream] => C:\Users\RRR\AppData\Roaming\ACEStream\engine\ace_engine.exe
    FF Plugin HKU\S-1-5-21-3352682033-4164677752-1323257766-1000: @acestream.net/acestreamplugin,version=2.1.5.3 -> C:\Users\RRR\AppData\Roaming\ACEStream\player\npace_plugin.dll No File
    OPR Extension: (AS Magic Player) - C:\Users\RRR\AppData\Roaming\Opera Software\Opera Stable\Extensions\mfhnkgpdlogbknkhlgdjlejeljbhflim [2015-09-16]
    S3 hitmanpro37; \??\C:\Windows\system32\drivers\hitmanpro37.sys [X]
    S4 InCDFs; system32\drivers\InCDFs.sys [X]
    S1 InCDPass; system32\drivers\InCDPass.sys [X]
    S1 InCDRm; system32\drivers\InCDRm.sys [X]
    S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
    2015-09-16 21:38 - 2015-09-16 21:38 - 00000000 _____ C:\Users\RRR\AppData\Local\{2E533058-2966-48FA-BC98-B4DA2385E9E5}
    2015-09-14 15:53 - 2015-09-14 15:53 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\2A1F53E5.sys
    2015-09-14 13:18 - 2015-09-14 13:18 - 00000000 ____D C:\ProgramData\Malwarebytes
    2015-09-14 12:38 - 2015-09-14 15:55 - 00000000 ____D C:\ProgramData\HitmanPro
    2015-09-16 21:57 - 2013-08-17 17:02 - 00000000 ____D C:\Users\RRR\AppData\Roaming\ACEStream
    2015-09-14 13:36 - 2015-06-08 17:01 - 00000000 ____D C:\Program Files (x86)\rikaikun
    C:\Users\RRR\install_flashplayer15x32au_chra_dy_aaa_aih.exe
    C:\Users\RRR\AppData\Local\Temp\sqlite3.dll
    FirewallRules: [TCP Query User{AFA16D64-B9D3-4E76-BA6D-2A46A27E008D}C:\users\rrr\appdata\roaming\acestream\engine\ace_engine.exe] => (Allow) C:\users\rrr\appdata\roaming\acestream\engine\ace_engine.exe
    FirewallRules: [uDP Query User{B88C8446-6342-4AFA-8C2B-2BC43DC34570}C:\users\rrr\appdata\roaming\acestream\engine\ace_engine.exe] => (Allow) C:\users\rrr\appdata\roaming\acestream\engine\ace_engine.exe
    FirewallRules: [{2F06F89F-62F5-4E2C-9FFD-57C41318737A}] => (Block) C:\users\rrr\appdata\roaming\acestream\engine\ace_engine.exe
    FirewallRules: [{5D849231-41C1-43C7-9A7F-444C57E4376E}] => (Block) C:\users\rrr\appdata\roaming\acestream\engine\ace_engine.exe
    end
    *****************

    Restore point was successfully created.
    HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\NWEReboot => value removed successfully
    HKU\S-1-5-21-3352682033-4164677752-1323257766-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AceStream => value removed successfully
    "HKU\S-1-5-21-3352682033-4164677752-1323257766-1000\Software\MozillaPlugins\@acestream.net/acestreamplugin,version=2.1.5.3" => key removed successfully
    C:\Users\RRR\AppData\Roaming\ACEStream\player\npace_plugin.dll => not found.
    C:\Users\RRR\AppData\Roaming\Opera Software\Opera Stable\Extensions\mfhnkgpdlogbknkhlgdjlejeljbhflim => moved successfully
    hitmanpro37 => service removed successfully
    InCDFs => service removed successfully
    InCDPass => service removed successfully
    InCDRm => service removed successfully
    MBAMSwissArmy => service removed successfully
    C:\Users\RRR\AppData\Local\{2E533058-2966-48FA-BC98-B4DA2385E9E5} => moved successfully
    C:\Windows\system32\Drivers\2A1F53E5.sys => moved successfully
    C:\ProgramData\Malwarebytes => moved successfully
    C:\ProgramData\HitmanPro => moved successfully
    C:\Users\RRR\AppData\Roaming\ACEStream => moved successfully
    C:\Program Files (x86)\rikaikun => moved successfully
    C:\Users\RRR\install_flashplayer15x32au_chra_dy_aaa_aih.exe => moved successfully
    C:\Users\RRR\AppData\Local\Temp\sqlite3.dll => moved successfully
    HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{AFA16D64-B9D3-4E76-BA6D-2A46A27E008D}C:\users\rrr\appdata\roaming\acestream\engine\ace_engine.exe => value removed successfully
    HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B88C8446-6342-4AFA-8C2B-2BC43DC34570}C:\users\rrr\appdata\roaming\acestream\engine\ace_engine.exe => value removed successfully
    HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2F06F89F-62F5-4E2C-9FFD-57C41318737A} => value removed successfully
    HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5D849231-41C1-43C7-9A7F-444C57E4376E} => value removed successfully

    ==== End of Fixlog 23:44:56 ====

     

     

     

     

    Има напредък, за пръв път от 2 дена успя да се рестатрира сам, иначе Mozilla забива като го стартирам, а Google Chrome така и не е активен след много опити да го инсталирам.

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    В какъв смисъл е успял да се рестартира сам? Това по-скоро прилича на хардуерен проблем и като гледам грешките от Event Viewer-a ще имаме доста работа и в тази насока.

    И не разбрах последно Google Chrome инсталиран ли е или не? Деинсталирайте го отново с помощта на GeekUninstaller и почистете всички остатъци и след това инсталирайте браузъра от офлайн инсталатора му.

     

    Също така направете и следното:

     

    СТЪПКА 1

     

     

     

    Проверете дяла и за грешки и лоши сектори и да поправим някои от проблемите с файловата система.

     

    В полето за търсене CMD => кликнете върху файла CMD.exe и изберете Run as administrator => въведете командата: chkdsk c: /x /f /r => натиснете Enter

     

    Съгласете се с Y на диалоговия прозорец. Рестартирайте компютъра и би трябвало проверката да започне.След това вижте какви са били резултатите.

     

    Рапорта от проверката ще намерите тук: В полето за търсене въведете eventvwr.msc => Аpplications => събитие WinInit Event ID 1001. Kопирайте рапорта в следващия си пост.

     

    Ето как да намерите лог файла.

     

     

     

    СТЪПКА 2

     

     

     

    В полето за търсене на Windows 8 въведете CMD => кликнете с десен бутон върху CMD.exe и изберете Run as administrator.

     

    След това с копи/пейст изпълнете една по една командите и след всяка натиснете Enter

     

    sfc /scannow

    findstr /c:"[sR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt"

     

    Сега трябва да се появи sfcdetails.txt на десктопа. Прикачете файла, който ще се появи на десктопа - sfcdetails.txt в следващия си коментар и пишете дали има промяна.

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    СТЪПКА 1

     

    Checking file system on E: The type of the file system is FAT32.
    One of your disks needs to be checked for consistency.
    You may cancel the disk check, but it is strongly recommended that you continue.
    Windows will now check the disk. Volume Serial Number is 51A9-9BEA Windows has checked the file system and found no problems.
    2093043712 bytes total disk space.
    8192 bytes in 2 hidden files.
    28672 bytes in 7 folders.
    24211456 bytes in 41 files.
    2068791296 bytes available on disk.
    4096 bytes in each allocation unit.
    510997 total allocation units on disk.
    505076 allocation units available on disk.

     

     

    Не съм сигурен дали това е правилният рапорт.

     

     

    Относно СТЪПКА 2, след въвеждането на първата команда сканирането стигна до 71% и така си стои вече 2 часа.

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Определено не е правилния рапорт...сканираме дял C:\, не дял E:\

    Като цяло се чудя и защо сте оставили E:\ във FAT32, а не в NTFS, но както и да е.

     

    Проверете и намерете правилния рапорт отнасящ се за дял C:\ В предните инструкции има линк с картинки към това как да се намери лог файла.

     

    Поздрави!

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Следвайки инструкциите, единственият рапорт сканирал C: и събитие WinInit Event ID 1001 е с дата от 01.08.

    Ето го и него:

     

    Checking file system on C:
    The type of the file system is NTFS.

    A disk check has been scheduled.
    Windows will now check the disk.                         

    CHKDSK is verifying files (stage 1 of 5)...
    Cleaning up instance tags for file 0x1786b.
    Cleaning up instance tags for file 0x19141.
    Attribute record of type 0x80 and instance tag 0x3 is cross linked
    starting at 0x54a6b3 for possibly 0x9 clusters.
    Some clusters occupied by attribute of type 0x80 and instance tag 0x3
    in file 0x195d0 is already in use.
    Deleting corrupt attribute record (128, "")
    from file record segment 103888.
    Cleaning up instance tags for file 0x2e4f2.
      220160 file records processed.                                          File verification completed.
      1078 large file records processed.                                      0 bad file records processed.                                        0 EA records processed.                                              44 reparse records processed.                                       CHKDSK is verifying indexes (stage 2 of 5)...
      295982 index entries processed.                                         Index verification completed.
    CHKDSK is scanning unindexed files for reconnect to their original directory.
      1 unindexed files scanned.                                         Recovering orphaned file V010149B.log (103888) into directory file 84400.
      0 unindexed files recovered.                                       CHKDSK is verifying security descriptors (stage 3 of 5)...
      220160 file SDs/SIDs processed.                                         CHKDSK is compacting the security descriptor stream
    Cleaning up 3797 unused security descriptors.
    Inserting data attribute into file 103888.
      37913 data files processed.                                            CHKDSK is verifying Usn Journal...
      37494664 USN bytes processed.                                             Usn Journal verification completed.
    CHKDSK is verifying file data (stage 4 of 5)...
      220144 files processed.                                                 File data verification completed.
    CHKDSK is verifying free space (stage 5 of 5)...
      11134429 free clusters processed.                                         Free space verification is complete.
    Adding 1 bad clusters to the Bad Clusters File.
    CHKDSK discovered free space marked as allocated in the
    master file table (MFT) bitmap.
    Correcting errors in the Volume Bitmap.
    Windows has made corrections to the file system.

     123371516 KB total disk space.
      78392748 KB in 180449 files.
        112232 KB in 37915 indexes.
             4 KB in bad sectors.
        328820 KB in use by the system.
         65536 KB occupied by the log file.
      44537712 KB available on disk.

          4096 bytes in each allocation unit.
      30842879 total allocation units on disk.
      11134428 allocation units available on disk.

    Internal Info:
    00 5c 03 00 07 55 03 00 9d 30 06 00 00 00 00 00  .\...U...0......
    b9 03 00 00 2c 00 00 00 00 00 00 00 00 00 00 00  ....,...........
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

    Windows has finished checking your disk.
    Please wait while your computer restarts.

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Значи не сте направили изобщо инструкции както трябва...сега сме 18.09...

     

    Ако с командата ви е трудно просто отворете My Computer => кликнете с десен бутон на дял C:\ и изберете Properties => отидете на Tools => Check Now... => сложете двете отметки и натиснете бутона Start. Рестартирайте системата и изчакайте проветката да приключи (може да мине над час). След това проверете отново и публикувайте лог файла от последната дата.

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Checking file system on C:
    The type of the file system is NTFS.

    A disk check has been scheduled.
    Windows will now check the disk.                         

    CHKDSK is verifying files (stage 1 of 5)...
      230144 file records processed.                                          File verification completed.
      1081 large file records processed.                                      0 bad file records processed.                                        0 EA records processed.                                              44 reparse records processed.                                       CHKDSK is verifying indexes (stage 2 of 5)...
      301386 index entries processed.                                         Index verification completed.
    CHKDSK is scanning unindexed files for reconnect to their original directory.
    Recovering orphaned file tmp.edb (106026) into directory file 57586.
      2 unindexed files scanned.                                         Recovering orphaned file {72E8C~1 (163886) into directory file 22468.
    Recovering orphaned file {72e8cd6b-17f5-466d-982e-ec79271773f5}_OnDiskSnapshotProp (163886) into directory file 22468.
      0 unindexed files recovered.                                       CHKDSK is verifying security descriptors (stage 3 of 5)...
      230144 file SDs/SIDs processed.                                         Cleaning up 735 unused index entries from index $SII of file 0x9.
    Cleaning up 735 unused index entries from index $SDH of file 0x9.
    Cleaning up 735 unused security descriptors.
    CHKDSK is compacting the security descriptor stream
      35622 data files processed.                                            CHKDSK is verifying Usn Journal...
      36880472 USN bytes processed.                                             Usn Journal verification completed.
    CHKDSK is verifying file data (stage 4 of 5)...
    Read failure with status 0xc00000b5 at offset 0x51e71000 for 0x10000 bytes.
    Read failure with status 0xc00000b5 at offset 0x51e80000 for 0x1000 bytes.
    Windows replaced bad clusters in file 215798
    of name \Windows\winsxs\WO08D5~1.175\EXPLOR~1.DLL.
      230128 files processed.                                                 File data verification completed.
    CHKDSK is verifying free space (stage 5 of 5)...
      13883503 free clusters processed.                                         Free space verification is complete.
    Adding 1 bad clusters to the Bad Clusters File.
    CHKDSK discovered free space marked as allocated in the
    master file table (MFT) bitmap.
    Correcting errors in the Volume Bitmap.
    Windows has made corrections to the file system.

     123371516 KB total disk space.
      67385948 KB in 176223 files.
        113588 KB in 35625 indexes.
             8 KB in bad sectors.
        337960 KB in use by the system.
         65536 KB occupied by the log file.
      55534012 KB available on disk.

          4096 bytes in each allocation unit.
      30842879 total allocation units on disk.
      13883503 allocation units available on disk.

    Internal Info:
    00 83 03 00 92 3b 03 00 10 1c 06 00 00 00 00 00  .....;..........
    ce 03 00 00 2c 00 00 00 00 00 00 00 00 00 00 00  ....,...........
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

    Windows has finished checking your disk.
    Please wait while your computer restarts.
     

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Регистрирайте се или влезете в профила си за да коментирате

    Трябва да имате регистрация за да може да коментирате това

    Регистрирайте се

    Създайте нова регистрация в нашия форум. Лесно е!

    Нова регистрация

    Вход

    Имате регистрация? Влезте от тук.

    Вход


    • Подобни теми

      • от мирослав24
        здравейте,получи се следния проблем-след отваряне на снимки от чат,по-точно след последната,излезе съобщение на екрана дали искам да рестартирам.Отказах да изпълня рестарта,след което на курсора на мишката се появи часовника и стоя около 5 минути.През това време не се изпълняваха никакви команди.Изчаках да изчезне часовника и реших да отворя коя да е икона от десктопа-същото нещо-появи се часовника за около 5 минути.Изключих го и повече не се занимавах.Днес сутринта го включих и директно ми се отвори браузъра със същия този часовник.Сега ми изпълнява командите по бавно,но може да се работи.Не съм сканирал с никакви антивирусни софтуери и директно минах на сканиране с FRST.Ето ги и логовете:
        Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 30-11-2017
        Ran by User1 (administrator) on PC1 (05-12-2017 08:35:08)
        Running from C:\Documents and Settings\User2\Desktop
        Loaded Profiles: User1 & User2 (Available Profiles: User1 & User2 & Administrator)
        Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)
        Internet Explorer Version 8 (Default browser: IE)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (Cisco Systems, Inc.) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
        (Comodo) C:\Program Files\Comodo\Dragon\dragon_updater.exe
        () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareService.exe
        (RaMMicHaeL) C:\Program Files\Unchecky\bin\unchecky_svc.exe
        (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
        (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
        (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
        (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
        (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
        ==================== Registry (Whitelisted) ===========================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [tsnpstd3] => C:\WINDOWS\tsnpstd3.exe [262144 2006-06-19] ()
        HKLM\...\Run: [snpstd3] => C:\WINDOWS\vsnpstd3.exe [831488 2006-05-12] ()
        HKLM\...\Run: [] => [X]
        HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareTray.exe [8063200 2016-07-18] ()
        HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2007-03-11] (Hewlett-Packard Co.)
        HKLM\...\Run: [DWQueuedReporting] => C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [437160 2007-02-26] (Microsoft Corporation)
        HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [Messenger (Yahoo!)] => "F:\SKYPE_~1\yahoo\Messenger\YahooMessenger.exe" -quiet
        HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [uTorrent] => C:\Program Files\uTorrent\uTorrent.exe [395640 2011-05-02] (BitTorrent, Inc.)
        HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6490904 2015-08-20] (Piriform Ltd)
        HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [Google Update] => C:\Documents and Settings\User1\Local Settings\Application Data\Google\Update\1.3.33.7\GoogleUpdateCore.exe [601680 2017-12-02] (Google Inc.)
        HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [MCShield Monitor] => C:\Program Files\MCShield\mcshieldrtm.exe [650816 2014-04-11] (MyCity)
        HKU\S-1-5-18\...\RunOnce: [RunNarrator] => C:\WINDOWS\system32\Narrator.exe [53760 2008-04-14] (Microsoft Corporation)
        HKU\S-1-5-18\...\RunOnce: [FlashPlayerUpdate] => C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_26_0_0_151_pepper.exe [1281024 2017-08-19] (Adobe Systems Incorporated)
        Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2017-09-02]
        ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
        Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\VPN Client.lnk [2017-12-02]
        ShortcutTarget: VPN Client.lnk -> C:\WINDOWS\Installer\{21E247D4-5E27-4BEA-AA4D-19A81203FE2A}\Icon3E5562ED7.ico ()
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
        Tcpip\..\Interfaces\{0227FD86-8C54-4C88-8029-3F44137A8ADF}: [DhcpNameServer] 192.168.0.1
        Internet Explorer:
        ==================
        HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        HKU\S-1-5-21-220523388-412668190-1417001333-1003\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        HKU\S-1-5-21-220523388-412668190-1417001333-1004\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        URLSearchHook: [S-1-5-21-220523388-412668190-1417001333-1004] ATTENTION => Default URLSearchHook is missing
        DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab
        FireFox:
        ========
        FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_160.dll [2015-06-22] ()
        FF Plugin: @java.com/JavaPlugin,version=10.11.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-01-12] (Oracle Corporation)
        FF Plugin: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files\Yahoo!\Shared\npYState.dll [No File]
        FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
        FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
        FF Plugin HKU\S-1-5-21-220523388-412668190-1417001333-1003: @talk.google.com/GoogleTalkPlugin -> C:\Documents and Settings\User1\Application Data\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
        FF Plugin HKU\S-1-5-21-220523388-412668190-1417001333-1003: @talk.google.com/O1DPlugin -> C:\Documents and Settings\User1\Application Data\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
        FF Plugin HKU\S-1-5-21-220523388-412668190-1417001333-1003: @tools.google.com/Google Update;version=3 -> C:\Documents and Settings\User1\Local Settings\Application Data\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-12-02] (Google Inc.)
        FF Plugin HKU\S-1-5-21-220523388-412668190-1417001333-1003: @tools.google.com/Google Update;version=9 -> C:\Documents and Settings\User1\Local Settings\Application Data\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-12-02] (Google Inc.)
        FF Plugin ProgramFiles/Appdata: C:\Documents and Settings\User1\Application Data\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
        FF Plugin ProgramFiles/Appdata: C:\Documents and Settings\User1\Application Data\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [272384 2017-08-19] (Adobe Systems Incorporated) [File not signed]
        S2 Browser; C:\WINDOWS\System32\browser.dll [78336 2012-07-06] (Microsoft Corporation) [File not signed]
        R2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1528624 2009-11-17] (Cisco Systems, Inc.)
        R2 DcomLaunch; C:\WINDOWS\system32\rpcss.dll [401408 2009-02-09] (Microsoft Corporation) [File not signed]
        R2 Dnscache; C:\WINDOWS\System32\dnsrslvr.dll [45568 2009-04-20] (Microsoft Corporation) [File not signed]
        R2 DragonUpdater; C:\Program Files\Comodo\Dragon\dragon_updater.exe [2060848 2016-02-05] (Comodo)
        R2 Eventlog; C:\WINDOWS\system32\services.exe [110592 2009-02-06] (Microsoft Corporation) [File not signed]
        R3 EventSystem; C:\WINDOWS\system32\es.dll [253952 2008-07-07] (Microsoft Corporation) [File not signed]
        S3 FastUserSwitchingCompatibility; C:\WINDOWS\System32\shsvcs.dll [135168 2009-07-28] (Microsoft Corporation) [File not signed]
        R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2007-06-04] (Hewlett-Packard Co.) [File not signed]
        R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [131072 2007-06-04] (Hewlett-Packard Co.) [File not signed]
        S4 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [170912 2013-01-12] (Oracle Corporation)
        R2 LanmanServer; C:\WINDOWS\System32\srvsvc.dll [99840 2010-08-27] (Microsoft Corporation) [File not signed]
        R2 lanmanworkstation; C:\WINDOWS\System32\wkssvc.dll [132096 2009-06-10] (Microsoft Corporation) [File not signed]
        R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareService.exe [664040 2016-07-18] ()
        S3 MSIServer; C:\WINDOWS\System32\msiexec.exe [95744 2008-05-19] (Microsoft Corporation) [File not signed]
        S3 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [43520 2006-11-08] (Hewlett-Packard) [File not signed]
        R3 Nla; C:\WINDOWS\System32\mswsock.dll [245248 2008-06-20] (Microsoft Corporation) [File not signed]
        R2 PlugPlay; C:\WINDOWS\system32\services.exe [110592 2009-02-06] (Microsoft Corporation) [File not signed]
        S3 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [53248 2006-11-08] (Hewlett-Packard) [File not signed]
        R2 RpcSs; C:\WINDOWS\System32\rpcss.dll [401408 2009-02-09] (Microsoft Corporation) [File not signed]
        R2 ShellHWDetection; C:\WINDOWS\System32\shsvcs.dll [135168 2009-07-28] (Microsoft Corporation) [File not signed]
        S2 SkypeUpdate; C:\Program Files\Skype\Updater\Updater.exe [317400 2017-04-05] (Skype Technologies) [File not signed]
        R2 Spooler; C:\WINDOWS\system32\spoolsv.exe [58880 2010-08-17] (Microsoft Corporation) [File not signed]
        R2 Themes; C:\WINDOWS\System32\shsvcs.dll [135168 2009-07-28] (Microsoft Corporation) [File not signed]
        R2 Unchecky; C:\Program Files\Unchecky\bin\unchecky_svc.exe [243448 2016-02-20] (RaMMicHaeL)
        S3 Wmi; C:\WINDOWS\System32\advapi32.dll [617472 2009-02-09] (Microsoft Corporation) [File not signed]
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R1 AFD; C:\WINDOWS\System32\drivers\afd.sys [138496 2011-08-17] (Microsoft Corporation) [File not signed]
        R1 AmdK8; C:\WINDOWS\System32\DRIVERS\AmdK8.sys [36864 2006-06-18] (Advanced Micro Devices)
        S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
        S3 CVirtA; C:\WINDOWS\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
        R2 CVPNDRVA; C:\WINDOWS\system32\Drivers\CVPNDRVA.sys [308859 2009-11-17] (Cisco Systems, Inc.) [File not signed]
        R3 DNE; C:\WINDOWS\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)
        R3 gzflt; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\3.0.129.0\gzflt.sys [175008 2016-04-28] (BitDefender LLC)
        S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [49920 2007-01-19] (HP)
        S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2007-01-19] (HP)
        S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21568 2007-01-19] (HP)
        R3 HTTP; C:\WINDOWS\System32\Drivers\HTTP.sys [265728 2009-10-20] (Microsoft Corporation) [File not signed]
        R3 IntcAzAudAddService; C:\WINDOWS\System32\drivers\RtkHDAud.sys [4368896 2006-08-15] (Realtek Semiconductor Corp.) [File not signed]
        R3 irsir; C:\WINDOWS\System32\DRIVERS\irsir.sys [18688 2001-08-17] (Microsoft Corporation)
        R0 KSecDD; C:\WINDOWS\system32\Drivers\KSecDD.sys [92928 2009-06-24] (Microsoft Corporation) [File not signed]
        R1 MRxSmb; C:\WINDOWS\System32\DRIVERS\mrxsmb.sys [456320 2011-07-15] (Microsoft Corporation) [File not signed]
        R0 Mup; C:\WINDOWS\system32\Drivers\Mup.sys [105472 2011-04-21] (Microsoft Corporation) [File not signed]
        S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
        R3 NdisTapi; C:\WINDOWS\System32\DRIVERS\ndistapi.sys [10496 2011-07-08] (Microsoft Corporation) [File not signed]
        R3 NDProxy; C:\WINDOWS\system32\Drivers\NDProxy.sys [40960 2013-11-27] (Microsoft Corporation) [File not signed]
        R3 NVENETFD; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [57856 2006-07-11] (NVIDIA Corporation)
        R3 nvnetbus; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [20480 2006-07-11] (NVIDIA Corporation)
        R3 Rasirda; C:\WINDOWS\System32\DRIVERS\rasirda.sys [19584 2001-08-17] (Microsoft Corporation)
        S3 SNPSTD3; C:\WINDOWS\System32\DRIVERS\snpstd3.sys [10148480 2006-06-27] (Sonix Co. Ltd.) [File not signed]
        R3 Srv; C:\WINDOWS\System32\DRIVERS\srv.sys [357888 2011-02-17] (Microsoft Corporation) [File not signed]
        R1 Tcpip; C:\WINDOWS\System32\DRIVERS\tcpip.sys [361600 2008-06-20] (Microsoft Corporation) [File not signed]
        U3 TrueSight; c:\windows\system32\drivers\TrueSight.sys [111872 2011-12-15] () [File not signed]
        S3 Trufos; C:\WINDOWS\System32\DRIVERS\Trufos.sys [428832 2016-04-28] (BitDefender S.R.L.)
        S3 usbaudio; C:\WINDOWS\System32\drivers\usbaudio.sys [60160 2013-07-17] (Microsoft Corporation) [File not signed]
        R3 usbccgp; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [32384 2013-08-09] (Microsoft Corporation) [File not signed]
        R3 usbehci; C:\WINDOWS\System32\DRIVERS\usbehci.sys [30336 2009-03-18] (Microsoft Corporation) [File not signed]
        S3 usbscan; C:\WINDOWS\System32\DRIVERS\usbscan.sys [14976 2013-07-03] (Microsoft Corporation) [File not signed]
        S3 vsdatant; C:\WINDOWS\system32\vsdatant.sys [394952 2007-11-14] (Zone Labs, LLC)
        S3 catchme; \??\C:\DOCUME~1\User1\LOCALS~1\Temp\catchme.sys [X]
        S4 IntelIde; no ImagePath
        S2 StarOpen; no ImagePath
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-12-05 08:35 - 2017-12-05 08:35 - 000013521 _____ C:\Documents and Settings\User2\Desktop\FRST.txt
        2017-12-05 08:34 - 2017-12-05 08:35 - 000000000 ____D C:\FRST
        2017-12-05 08:34 - 2017-12-05 08:34 - 001752064 _____ (Farbar) C:\Documents and Settings\User2\Desktop\FRST.exe
        2017-11-21 14:30 - 2017-11-21 14:30 - 000505729 _____ C:\Documents and Settings\User2\Desktop\87.pdf
        2017-11-14 15:45 - 2017-11-14 15:45 - 000420352 _____ C:\Documents and Settings\User2\Desktop\ценова 2017 -НОЕМВРИ.xls
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-12-05 08:35 - 2015-07-18 12:46 - 000000000 ____D C:\Documents and Settings\User1\Local Settings\temp
        2017-12-05 08:35 - 2011-05-02 12:28 - 000000000 ____D C:\Documents and Settings\User2\Local Settings\Temp
        2017-12-05 08:22 - 2014-01-31 12:39 - 000002051 _____ C:\Documents and Settings\All Users\Desktop\Ad-Aware Antivirus.lnk
        2017-12-05 08:20 - 2015-06-22 13:14 - 000000222 _____ C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Logon.job
        2017-12-05 08:20 - 2011-05-02 09:20 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
        2017-12-05 08:20 - 2001-08-23 11:00 - 000002206 _____ C:\WINDOWS\system32\wpa.dbl
        2017-12-04 14:39 - 2016-02-17 15:35 - 000032618 _____ C:\WINDOWS\SchedLgU.Txt
        2017-12-04 14:31 - 2011-05-25 09:57 - 000000000 ____D C:\Documents and Settings\User2\Application Data\uTorrent
        2017-12-04 14:30 - 2011-05-02 12:28 - 000000000 ____D C:\Documents and Settings\User2
        2017-12-04 14:26 - 2015-04-26 08:48 - 000000000 ____D C:\Documents and Settings\User2\Application Data\Skype
        2017-12-04 13:55 - 2013-03-08 14:11 - 000001078 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-412668190-1417001333-1003UA.job
        2017-12-04 12:55 - 2013-03-08 14:11 - 000001026 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-412668190-1417001333-1003Core.job
        2017-12-02 12:58 - 2011-05-02 11:46 - 000000000 ____D C:\Documents and Settings\User1\Application Data\uTorrent
        2017-12-02 12:58 - 2011-05-02 11:10 - 000000178 ___SH C:\Documents and Settings\User1\ntuser.ini
        2017-12-02 12:48 - 2017-01-16 12:16 - 000000892 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
        2017-12-02 12:48 - 2011-05-02 09:10 - 000000000 ____D C:\WINDOWS\system32\Macromed
        2017-12-02 12:47 - 2015-04-25 10:43 - 000000000 ____D C:\Documents and Settings\User1\Application Data\Skype
        2017-12-02 12:36 - 2016-02-20 12:25 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\MCShield
        2017-11-30 14:44 - 2011-05-02 11:10 - 000000000 ____D C:\Documents and Settings\User1
        2017-11-23 11:07 - 2013-12-09 12:51 - 000000000 ____D C:\Documents and Settings\User2\Desktop\образци PDF
        2017-11-16 12:59 - 2015-06-22 13:14 - 000000216 _____ C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Monthly.job
        ==================== Files in the root of some directories =======
        2011-05-02 12:33 - 2014-09-24 15:20 - 000014848 _____ () C:\Documents and Settings\User1\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
        2014-01-01 12:07 - 2014-01-01 12:07 - 000000036 _____ () C:\Documents and Settings\User1\Local Settings\Application Data\housecall.guid.cache
        2011-05-15 12:35 - 2011-05-15 12:35 - 000000056 _____ () C:\Documents and Settings\All Users\Application Data\ezsidmv.dat
        2017-09-02 11:57 - 2017-09-02 12:18 - 000000473 _____ () C:\Documents and Settings\All Users\Application Data\hpzinstall.log
        Some files in TEMP:
        ====================
        2017-09-02 12:17 - 2017-09-02 12:17 - 000764248 _____ (Igor Pavlov) C:\Documents and Settings\User1\Local Settings\temp\Package_en_ww.exe
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\WINDOWS\explorer.exe => File is digitally signed
        C:\WINDOWS\system32\winlogon.exe => File is digitally signed
        C:\WINDOWS\system32\svchost.exe => File is digitally signed
        C:\WINDOWS\system32\services.exe => MD5 is legit
        C:\WINDOWS\system32\User32.dll => File is digitally signed
        C:\WINDOWS\system32\userinit.exe => File is digitally signed
        C:\WINDOWS\system32\rpcss.dll => MD5 is legit
        C:\WINDOWS\system32\dnsapi.dll => MD5 is legit
        C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
        ==================== End of FRST.txt ============================
        Addition.txt
      • от izipop
        При подновяване на Malwarebytes използвах опцията за пълна защита в реално време...както и пробният период от 14 дни. Нямаше проблеми, всичко функционираше точно. След изтичане на пробния период, при поредно пускане на програмата ми даде съобщение за зловреден софтуер.Преди подновяването нямаше зараза.  Какво да правя за да ги премахна? Мисля, че проблемът идва от това, че исках да ползвам безплатната версия на Malwarebytes и това е активирано след това. Многократно слагах резултатите в карантина и отново излизат като съобщение за зловреден вирус .Мисля, че сгреших, когато предпоследния път изтрих "Карантината". Може би, е изтрило местонахождението, не знам! Търсих ... Моля, помогнете! 
      • от j_d
        Здравейте !
        Device Manager e празен,Network Connections също ,а има нет. Системата(Win Xp) се изключва доста бавно. Дали системата е омазана или се дължи на зловреден софт.
        Да Помоля за помощ !
        Благодаря предварително !
         
        Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 02-11-2017 02
        Ran by doni (administrator) on AMD (06-11-2017 19:57:32)
        Running from C:\
        Loaded Profiles: doni (Available Profiles: doni & Administrator)
        Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)
        Internet Explorer Version 8 (Default browser: IE)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
        (Murray Hurps Software Pty Ltd) C:\Program Files\Ad Muncher\AdMunch.exe
        (Copyright 2017.) C:\Program Files\Zemana AntiLogger\ZAM.exe
        (H.D.S. Hungary) C:\Program Files\Hard Disk Sentinel\HDSentinel.exe
        (Bitsum LLC) C:\Program Files\Process Lasso\ProcessLasso.exe
        (Bitsum LLC) C:\Program Files\Process Lasso\ProcessGovernor.exe
        (FinalWire Ltd.) D:\Важни Програми\AIDA64 Extreme Edition\aida64extreme592\aida64.exe
        () C:\Program Files\Jotta\vss\jVSS.exe
        (HP) C:\WINDOWS\system32\HPZipm12.exe
        (Reason Software Company Inc.) C:\Program Files\Unchecky\bin\unchecky_svc.exe
        (Copyright 2017.) C:\Program Files\Zemana AntiLogger\ZAM.exe
        (Reason Software Company Inc.) C:\Program Files\Unchecky\bin\unchecky_bg.exe
        (ESET) C:\Program Files\ESET\ESET Security\egui.exe
        (SpiderOak) C:\Program Files\SpiderOakONE\SpiderOakONE.exe
        (SpiderOak) C:\Program Files\SpiderOakONE\SpiderOakONE.exe
        () C:\Program Files\SpiderOakONE\windows_dir_watcher.exe
        (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
        (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
        (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
        (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
        (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
        ==================== Registry (Whitelisted) ===========================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [Ad Muncher] => C:\Program Files\Ad Muncher\AdMunch.exe [560760 2015-06-17] (Murray Hurps Software Pty Ltd)
        HKLM\...\Run: [ZAM] => C:\Program Files\Zemana AntiLogger\ZAM.exe [15775888 2017-08-09] (Copyright 2017.)
        HKLM\...\Run: [Hard Disk Sentinel] => C:\Program Files\Hard Disk Sentinel\HDSentinel.exe [5102680 2017-03-09] (H.D.S. Hungary)
        HKLM\...\Run: [DWPersistentQueuedReporting] => C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [437160 2007-02-26] (Microsoft Corporation)
        Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2009-07-29] (ATI Technologies Inc.)
        HKLM\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
        HKLM\...\Policies\Explorer: [NoResolveSearch] 1
        HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Run: [ProcessLassoManagementConsole] => C:\Program Files\Process Lasso\processlasso.exe [986112 2017-03-06] (Bitsum LLC)
        HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Run: [ProcessGovernor] => C:\Program Files\Process Lasso\processgovernor.exe [717824 2017-03-06] (Bitsum LLC)
        HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Run: [AIDA64 AutoStart] => D:\Важни Програми\AIDA64 Extreme Edition\aida64extreme592\aida64.exe [19602896 2017-06-19] (FinalWire Ltd.)
        HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
        HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
        HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Policies\Explorer: [NoSaveSettings] 0
        Lsa: [Notification Packages] 
        ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [115440 2013-05-08] (SuperAdBlocker.com)
        GroupPolicy: Restriction ? <==== ATTENTION
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Winsock: Catalog9 12 %windir%\system32\vsocklib.dll => No File 
        Winsock: Catalog9 13 %windir%\system32\vsocklib.dll => No File 
        Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
        Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0
        Tcpip\..\Interfaces\{C97B26C0-87E8-44A4-9564-5796CD042123}: [DhcpNameServer] 192.168.1.1 0.0.0.0
        Internet Explorer:
        ==================
        HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
        HKU\S-1-5-21-854245398-329068152-725345543-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        HKU\S-1-5-21-854245398-329068152-725345543-1003\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
        SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
        SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
        SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
        SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
        DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
        Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL [2001-01-22] (Microsoft Corporation)
        Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  No File
        Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL [2000-04-19] (Microsoft Corporation)
        Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  No File
        Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2017-04-05] (Skype Technologies)
        Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} -  No File
        FireFox:
        ========
        FF DefaultProfile: k5gfurjn.default
        FF ProfilePath: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default [2017-11-05]
        FF Homepage: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> google.bg
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.ftp", ""
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.ftp_port", 0
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.socks", ""
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.socks_port", 0
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.ssl", ""
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.ssl_port", 0
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> ftp", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> ftp_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> http", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> http_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> share_proxy_settings", true
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> socks", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> socks_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> ssl", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> ssl_port", 9050
        FF Extension: (Adguard AdBlocker) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\adguardadblocker@adguard.com.xpi [2017-02-17]
        FF Extension: (Bloody Vikings!) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\bloodyvikings@ffs.bplaced.net.xpi [2017-01-09]
        FF Extension: (MEGA) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\firefox@mega.co.nz.xpi [2017-03-30]
        FF Extension: (Google™ Translator) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\jid1-dgnIBwQga0SIBw@jetpack.xpi [2016-12-19]
        FF Extension: (S3.Google Translator) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\s3google@translator.xpi [2017-03-30]
        FF Extension: (Video DownloadHelper) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-01-02]
        FF ProfilePath: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default [2017-11-05]
        FF DefaultSearchEngine: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> Google
        FF SelectedSearchEngine: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> Google
        FF Homepage: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> www.google.bg
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.ftp", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.ftp_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.socks", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.socks_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.ssl", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.ssl_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> ftp", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> ftp_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> http", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> http_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> share_proxy_settings", true
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> socks", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> socks_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> ssl", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> ssl_port", 9050
        FF Extension: (Adguard AdBlocker (Legacy)) - C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default\Extensions\adguardadblockerlegacy@adguard.com.xpi [2017-10-03]
        FF Extension: (S3.Google Translator) - C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default\Extensions\s3google@translator.xpi [2017-09-25]
        FF Extension: (1-Click YouTube Video Downloader) - C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2017-01-02]
        FF ProfilePath: C:\Documents and Settings\doni\Application Data\K-Meleon\puoi2cit.default [2017-11-05]
        FF user.js: detected! => C:\Documents and Settings\doni\Application Data\K-Meleon\puoi2cit.default\user.js [2006-04-06]
        FF Homepage: C:\Documents and Settings\doni\Application Data\K-Meleon\puoi2cit.default -> www.google.bg
        FF Extension: (NewsFox) - C:\Program Files\K-Meleon\browser\extensions\{899DF1F8-2F43-4394-8315-37F6744E6319}.xpi [2015-03-12] [not signed]
        FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
        FF Extension: (Microsoft .NET Framework Assistant) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2017-10-29] [not signed]
        FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_27_0_0_183.dll [2017-10-25] ()
        FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
        FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
        FF Plugin: @microsoft.com/OfficeLive,version=1.3 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2008-11-13] (Microsoft Corp.)
        FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
        FF Plugin: @real.com/nppl3260;version=6.0.12.69 -> C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll [2008-09-10] (RealNetworks, Inc.)
        FF Plugin: @real.com/nprpjplug;version=6.0.12.69 -> C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll [2008-09-10] (RealNetworks, Inc.)
        FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
        FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
        FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
        FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
        FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
        FF Plugin HKU\.DEFAULT: @tools.google.com/Google Update;version=3 -> C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Google\Update\1.3.22.3\npGoogleUpdate3.dll [2014-02-08] (Google Inc.)
        FF Plugin HKU\.DEFAULT: @tools.google.com/Google Update;version=9 -> C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Google\Update\1.3.22.3\npGoogleUpdate3.dll [2014-02-08] (Google Inc.)
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        S3 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [143776 2017-03-07] (SUPERAntiSpyware.com)
        S3 Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2010-04-15] (Adobe Systems) [File not signed]
        S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [272384 2017-10-25] (Adobe Systems Incorporated) [File not signed]
        R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2069936 2017-06-13] (ESET)
        S3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2007-03-11] (Hewlett-Packard Co.) [File not signed]
        R2 Jotta VSS Service; C:\Program Files\Jotta\vss\jVSS.exe [102520 2017-10-03] ()
        S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4563920 2017-11-01] (Malwarebytes)
        S4 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe [270336 2001-02-23] (Microsoft Corporation) [File not signed]
        R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [69632 2004-09-29] (HP) [File not signed]
        S4 SkypeUpdate; C:\Program Files\Skype\Updater\Updater.exe [317400 2017-04-05] (Skype Technologies) [File not signed]
        R2 Unchecky; C:\Program Files\Unchecky\bin\unchecky_svc.exe [294168 2017-10-03] (Reason Software Company Inc.)
        R2 WudfSvc; C:\WINDOWS\System32\WUDFSvc.dll [64512 2016-03-09] (Microsoft Corporation) [File not signed]
        R2 ZAMSvc; C:\Program Files\Zemana AntiLogger\ZAM.exe [15775888 2017-08-09] (Copyright 2017.)
        S4 Zoolz 2 Service; C:\Program Files\Genie9\Zoolz2\ZoolzService.exe [475792 2017-07-30] (Genie9)
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R1 AFS2K; C:\WINDOWS\system32\Drivers\AFS2K.sys [82380 2011-12-28] (Oak Technology Inc.) [File not signed]
        R3 AIDA64Driver; D:\Важни Програми\AIDA64 Extreme Edition\aida64extreme592\kerneld.x32 [44656 2017-06-19] ()
        S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
        S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
        R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [113512 2017-06-22] (ESET)
        R1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [139384 2017-03-09] (ESET)
        R1 ElbyCDIO; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG)
        R1 epfwtdir; C:\WINDOWS\System32\DRIVERS\epfwtdir.sys [61504 2017-03-09] (ESET)
        S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [51120 2005-03-08] (HP)
        S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2005-03-08] (HP)
        S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21744 2005-03-08] (HP)
        R2 inpout32; C:\WINDOWS\System32\Drivers\inpout32.sys [11936 2017-10-25] (Highresolution Enterprises [www.highrez.co.uk])
        R3 keycrypt; C:\WINDOWS\System32\DRIVERS\KeyCrypt32.sys [144416 2017-03-22] (Zemana Ltd.)
        S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
        S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
        R3 pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [47360 2010-04-06] (VSO Software) [File not signed]
        R3 RTHDMIAzAudService; C:\WINDOWS\System32\drivers\RtKHDMI.sys [3734976 2009-06-25] (Realtek Semiconductor Corp.)
        R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
        R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
        R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [691696 2010-03-17] () [File not signed]
        R3 VComm; C:\WINDOWS\System32\DRIVERS\VComm.sys [34448 2011-05-28] (IVT Corporation.)
        R2 WiseFs; C:\WINDOWS\WiseFs32.sys [57936 2017-07-28] (WiseCleaner.com)
        R1 ZAM; C:\WINDOWS\System32\drivers\zam32.sys [181496 2017-07-31] (Zemana Ltd.)
        R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard32.sys [181496 2017-07-31] (Zemana Ltd.)
        U3 aixna50v; C:\WINDOWS\system32\Drivers\aixna50v.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero byte File/Folder)
        S3 BlueletAudio; system32\DRIVERS\blueletaudio.sys [X]
        S3 BlueletSCOAudio; system32\DRIVERS\BlueletSCOAudio.sys [X]
        S3 BT; system32\DRIVERS\btnetdrv.sys [X]
        S3 Btcsrusb; System32\Drivers\btcusb.sys [X]
        S3 BTHidEnum; system32\DRIVERS\vbtenum.sys [X]
        S0 BTHidMgr; System32\Drivers\BTHidMgr.sys [X]
        S1 epp32; no ImagePath
        S3 ESETCleanersDriver; no ImagePath
        S3 gdrv; no ImagePath
        S4 IntelIde; no ImagePath
        S3 JL2005C; System32\Drivers\jl2005c.sys [X]
        U5 P3; C:\Windows\System32\Drivers\P3.sys [42752 2008-04-14] (Microsoft Corporation)
        U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
        U5 Sdbus; C:\Windows\System32\Drivers\Sdbus.sys [79232 2008-04-14] (Microsoft Corporation)
        U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]
        S3 VcommMgr; System32\Drivers\VcommMgr.sys [X]
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        NETSVC: SSHNAS -> no filepath.
        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-11-06 19:57 - 2017-11-06 19:57 - 000021251 _____ C:\FRST.txt
        2017-11-06 19:57 - 2017-11-06 19:57 - 000000000 ____D C:\FRST
        2017-11-06 19:51 - 2017-11-06 19:51 - 001799680 _____ (Farbar) C:\FRST.exe
        2017-11-05 09:23 - 2017-11-05 09:23 - 000000000 ____D C:\Documents and Settings\doni\Application Data\Inv Softworks
        2017-11-03 22:31 - 2017-11-03 22:31 - 000221112 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
        2017-11-03 22:31 - 2017-11-03 22:31 - 000001715 _____ C:\Documents and Settings\All Users\Desktop\Malwarebytes.lnk
        2017-11-03 22:31 - 2017-11-03 22:31 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes
        2017-11-03 22:31 - 2017-11-03 22:31 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\MB3CoreBackup
        2017-11-03 22:31 - 2017-11-01 08:54 - 000059896 _____ C:\WINDOWS\system32\Drivers\mbae.sys
        2017-11-03 20:17 - 2017-11-03 21:10 - 000000000 ___RD C:\Documents and Settings\doni\My Documents\SpiderOak Hive
        2017-11-03 20:17 - 2017-11-03 20:17 - 000000495 _____ C:\Documents and Settings\doni\Desktop\SpiderOak Hive.lnk
        2017-11-03 20:14 - 2017-11-03 20:14 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\SpiderOak
        2017-11-03 20:11 - 2017-11-03 20:11 - 000000000 ____D C:\Program Files\SpiderOakONE
        2017-11-03 20:11 - 2017-11-03 20:11 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\SpiderOakONE
        2017-11-03 20:07 - 2017-11-03 22:24 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\SharewareOnSale Notifier
        2017-11-01 19:41 - 2017-11-01 21:52 - 000000000 ____D C:\Documents and Settings\doni\dwhelper
        2017-11-01 14:00 - 2017-11-01 14:00 - 000013824 ___SH C:\Documents and Settings\doni\My Documents\Thumbs.db
        2017-11-01 11:34 - 2017-11-01 12:21 - 000000664 _____ C:\WINDOWS\system32\d3d9caps.dat
        2017-11-01 10:50 - 2017-11-06 07:40 - 000032294 _____ C:\WINDOWS\SchedLgU.Txt
        2017-10-30 21:33 - 2008-04-14 05:42 - 000294912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dlimport.exe
        2017-10-30 21:33 - 2008-04-14 05:40 - 000294912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msaud32.acm
        2017-10-30 21:33 - 2008-04-14 05:40 - 000086016 ____C (Sipro Lab Telecom Inc.) C:\WINDOWS\system32\dllcache\sl_anet.acm
        2017-10-30 21:33 - 2008-04-14 05:39 - 000290816 ____C (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\system32\dllcache\l3codeca.acm
        2017-10-30 21:33 - 2008-04-13 22:58 - 000184959 ____C C:\WINDOWS\system32\dllcache\compact.wmz
        2017-10-30 21:33 - 2008-04-13 22:58 - 000066725 ____C C:\WINDOWS\system32\dllcache\revert.wmz
        2017-10-30 21:33 - 2007-06-26 11:30 - 000572557 ____C C:\WINDOWS\system32\dllcache\rtuner.wmv
        2017-10-30 21:33 - 2007-06-26 11:30 - 000457607 ____C C:\WINDOWS\system32\dllcache\mdlib.wmv
        2017-10-30 21:33 - 2007-06-26 11:30 - 000381425 ____C C:\WINDOWS\system32\dllcache\copycd.wmv
        2017-10-30 21:33 - 2007-06-26 11:30 - 000375519 ____C C:\WINDOWS\system32\dllcache\nuskin.wmv
        2017-10-30 21:33 - 2007-06-26 11:30 - 000354468 ____C C:\WINDOWS\system32\dllcache\wmpaud1.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000343204 ____C C:\WINDOWS\system32\dllcache\wmpaud7.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000343204 ____C C:\WINDOWS\system32\dllcache\wmpaud6.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000300969 ____C C:\WINDOWS\system32\dllcache\viz.wmv
        2017-10-30 21:33 - 2007-06-26 11:30 - 000172196 ____C C:\WINDOWS\system32\dllcache\wmpaud9.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000172196 ____C C:\WINDOWS\system32\dllcache\wmpaud8.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000172196 ____C C:\WINDOWS\system32\dllcache\wmpaud3.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000086196 ____C C:\WINDOWS\system32\dllcache\wmpaud5.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000086180 ____C C:\WINDOWS\system32\dllcache\wmpaud4.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000086180 ____C C:\WINDOWS\system32\dllcache\wmpaud2.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000022060 ____C C:\WINDOWS\system32\dllcache\npds.zip
        2017-10-30 21:33 - 2007-06-26 11:30 - 000010457 ____C C:\WINDOWS\system32\dllcache\wmptour.hta
        2017-10-30 21:33 - 2007-06-26 11:30 - 000009585 ____C C:\WINDOWS\system32\dllcache\controls.css
        2017-10-30 21:33 - 2007-06-26 11:30 - 000008298 ____C C:\WINDOWS\system32\dllcache\contents.htm
        2017-10-30 21:33 - 2007-06-26 11:30 - 000006878 ____C C:\WINDOWS\system32\dllcache\controls.js
        2017-10-30 21:33 - 2007-06-26 11:30 - 000005971 ____C C:\WINDOWS\system32\dllcache\events.js
        2017-10-30 21:33 - 2007-06-26 11:30 - 000003187 ____C C:\WINDOWS\system32\dllcache\tour.js
        2017-10-30 21:33 - 2007-06-26 11:30 - 000001771 ____C C:\WINDOWS\system32\dllcache\wmptour.css
        2017-10-30 21:33 - 2007-06-26 11:30 - 000001148 ____C C:\WINDOWS\system32\dllcache\snd.htm
        2017-10-30 21:33 - 2007-06-26 11:30 - 000000420 ____C C:\WINDOWS\system32\dllcache\wmploc.js
        2017-10-30 21:33 - 2007-06-26 11:29 - 000097117 ____C C:\WINDOWS\system32\dllcache\mplayer2.hlp
        2017-10-30 21:33 - 2007-06-26 11:29 - 000001885 ____C C:\WINDOWS\system32\dllcache\mplayer2.cnt
        2017-10-30 21:33 - 2007-06-26 11:28 - 000613334 ____C C:\WINDOWS\system32\dllcache\wmplayer.chm
        2017-10-30 21:33 - 2007-06-26 11:28 - 000067374 ____C C:\WINDOWS\system32\dllcache\wmplayer.adm
        2017-10-30 21:33 - 2007-06-26 11:26 - 000077307 ____C C:\WINDOWS\system32\dllcache\plyr_err.chm
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001477 ____C C:\WINDOWS\system32\dllcache\plylst6.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001477 ____C C:\WINDOWS\system32\dllcache\plylst5.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001474 ____C C:\WINDOWS\system32\dllcache\plylst3.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001451 ____C C:\WINDOWS\system32\dllcache\plylst12.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001448 ____C C:\WINDOWS\system32\dllcache\plylst4.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001250 ____C C:\WINDOWS\system32\dllcache\plylst1.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001049 ____C C:\WINDOWS\system32\dllcache\plylst2.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001046 ____C C:\WINDOWS\system32\dllcache\plylst7.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001036 ____C C:\WINDOWS\system32\dllcache\plylst8.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000789 ____C C:\WINDOWS\system32\dllcache\plylst11.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000787 ____C C:\WINDOWS\system32\dllcache\plylst10.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000784 ____C C:\WINDOWS\system32\dllcache\plylst9.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000783 ____C C:\WINDOWS\system32\dllcache\plylst13.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000775 ____C C:\WINDOWS\system32\dllcache\plylst14.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000733 ____C C:\WINDOWS\system32\dllcache\plylst15.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000403 ____C C:\WINDOWS\system32\dllcache\npdrmv2.zip
        2017-10-30 21:33 - 2007-04-02 23:21 - 000023195 ____C C:\WINDOWS\system32\dllcache\wmplay.chm
        2017-10-29 22:53 - 2017-10-29 22:53 - 000000000 ___HD C:\Program Files\WindowsUpdate
        2017-10-29 11:15 - 2008-08-21 14:00 - 000041600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\weitekp9.dll
        2017-10-29 11:15 - 2008-08-21 14:00 - 000031232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\weitekp9.sys
        2017-10-29 11:15 - 2008-08-21 14:00 - 000028288 ____C C:\WINDOWS\system32\dllcache\xjis.nls
        2017-10-29 11:15 - 2008-08-21 14:00 - 000009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wamps51.dll
        2017-10-29 11:15 - 2008-04-14 05:42 - 000116224 ____C (Xerox) C:\WINDOWS\system32\dllcache\xrxwiadr.dll
        2017-10-29 11:15 - 2008-04-14 05:42 - 000018944 ____C () C:\WINDOWS\system32\dllcache\xrxscnui.dll
        2017-10-29 11:15 - 2008-04-14 05:42 - 000008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wshirda.dll
        2017-10-29 11:15 - 2008-04-14 00:15 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wceusbsh.sys
        2017-10-29 11:15 - 2008-04-13 22:05 - 000154624 ____C (Lucent Technologies) C:\WINDOWS\system32\dllcache\wlluc48.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000033599 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\watv04nt.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000029311 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\watv01nt.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000023615 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wch7xxnt.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000019551 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\watv02nt.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000019455 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wvchntxx.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000012415 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wadv01nt.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000012127 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wadv02nt.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000012063 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wsiintxx.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000011775 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wadv05nt.sys
        2017-10-29 11:15 - 2001-08-17 22:37 - 000099865 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\xlog.exe
        2017-10-29 11:15 - 2001-08-17 22:37 - 000027648 ____C () C:\WINDOWS\system32\dllcache\xrxftplt.exe
        2017-10-29 11:15 - 2001-08-17 22:37 - 000004608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xrxflnch.exe
        2017-10-29 11:15 - 2001-08-17 22:36 - 000087040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wiafbdrv.dll
        2017-10-29 11:15 - 2001-08-17 22:36 - 000053760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wiamsmud.dll
        2017-10-29 11:15 - 2001-08-17 22:36 - 000023040 ____C (Xerox Corporation) C:\WINDOWS\system32\dllcache\xrxwbtmp.dll
        2017-10-29 11:15 - 2001-08-17 13:28 - 000771581 ____C (Rockwell) C:\WINDOWS\system32\dllcache\winacisa.sys
        2017-10-29 11:15 - 2001-08-17 13:28 - 000701386 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\wdhaalba.sys
        2017-10-29 11:15 - 2001-08-17 12:12 - 000034890 ____C (Raytheon Corp.) C:\WINDOWS\system32\dllcache\wlandrv2.sys
        2017-10-29 11:15 - 2001-08-17 12:11 - 000016970 ____C (US Robotics MCD (Megahertz)) C:\WINDOWS\system32\dllcache\xem336n5.sys
        2017-10-29 11:15 - 2001-08-17 12:10 - 000035871 ____C (Winbond Electronics Corp.) C:\WINDOWS\system32\dllcache\wbfirdma.sys
        2017-10-29 11:14 - 2008-08-21 14:00 - 000185344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\thawbrkr.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000143422 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\softkey.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000101376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srusbusd.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000073728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3ext.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000048256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w32.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000021896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdipx.sys
        2017-10-29 11:14 - 2008-08-21 14:00 - 000019464 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdspx.sys
        2017-10-29 11:14 - 2008-08-21 14:00 - 000016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\status.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tsprof.exe
        2017-10-29 11:14 - 2008-08-21 14:00 - 000013192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdasync.sys
        2017-10-29 11:14 - 2008-08-21 14:00 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpstup.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3svapi.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000004608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3ctrs51.dll
        2017-10-29 11:14 - 2008-04-14 05:42 - 000082944 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\tp4mon.exe
        2017-10-29 11:14 - 2008-04-14 00:15 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbser.sys
        2017-10-29 11:14 - 2008-04-14 00:15 - 000020608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbuhci.sys
        2017-10-29 11:14 - 2008-04-14 00:10 - 000149376 ____C (M-Systems) C:\WINDOWS\system32\dllcache\tffsport.sys
        2017-10-29 11:14 - 2008-04-14 00:10 - 000007552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sonyait.sys
        2017-10-29 11:14 - 2008-04-14 00:10 - 000005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\viaide.sys
        2017-10-29 11:14 - 2008-04-13 22:05 - 000032384 ____C (KLSI USA, Inc.) C:\WINDOWS\system32\dllcache\usb101et.sys
        2017-10-29 11:14 - 2001-08-17 22:36 - 000525568 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tridxp.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000216064 ____C (UMAX Data Systems Inc.) C:\WINDOWS\system32\dllcache\um34scan.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000211968 ____C (UMAX Data Systems Inc.) C:\WINDOWS\system32\dllcache\um54scan.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000155648 ____C (Stallion Technologies) C:\WINDOWS\system32\dllcache\stlnprop.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000114688 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\sonypi.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000106584 ____C (Perle Systems Ltd.) C:\WINDOWS\system32\dllcache\spdports.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000099328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srusd.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000094720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxud32.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000094293 ____C (Perle Systems Ltd. ) C:\WINDOWS\system32\dllcache\sxports.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000069632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxu12.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000053760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sw_wheel.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000053248 ____C (Stallion Technologies) C:\WINDOWS\system32\dllcache\stlncoin.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000050688 ____C (UMAX DATA SYSTEMS INC.) C:\WINDOWS\system32\dllcache\umaxscan.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000050176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxp60.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000047616 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxcam.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000041472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sw_effct.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000031744 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\tp4.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000028160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxu40.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxu22.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000024660 ____C (Perle Systems Ltd.) C:\WINDOWS\system32\dllcache\spxupchk.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_smtpctrs.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\swpidflt.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\swpdflt2.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_snprfdll.dll
        2017-10-29 11:14 - 2001-08-17 22:35 - 000042496 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\tp4res.dll
        2017-10-29 11:14 - 2001-08-17 14:56 - 000440576 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tridkb.dll
        2017-10-29 11:14 - 2001-08-17 14:56 - 000315520 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\trid3d.dll
        2017-10-29 11:14 - 2001-08-17 14:56 - 000172768 ____C (Number Nine Visual Technology) C:\WINDOWS\system32\dllcache\t2r4disp.dll
        2017-10-29 11:14 - 2001-08-17 14:56 - 000081408 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tgiul50.dll
        2017-10-29 11:14 - 2001-08-17 14:07 - 000032640 ____C (LSI Logic) C:\WINDOWS\system32\dllcache\symc8xx.sys
        2017-10-29 11:14 - 2001-08-17 14:07 - 000030688 ____C (LSI Logic) C:\WINDOWS\system32\dllcache\sym_u3.sys
        2017-10-29 11:14 - 2001-08-17 14:07 - 000028384 ____C (LSI Logic) C:\WINDOWS\system32\dllcache\sym_hi.sys
        2017-10-29 11:14 - 2001-08-17 14:07 - 000019072 ____C (Adaptec, Inc.) C:\WINDOWS\system32\dllcache\sparrow.sys
        2017-10-29 11:14 - 2001-08-17 14:07 - 000016256 ____C (Symbios Logic Inc.) C:\WINDOWS\system32\dllcache\symc810.sys
        2017-10-29 11:14 - 2001-08-17 14:02 - 000230912 ____C (Toshiba Corporation) C:\WINDOWS\system32\dllcache\tosdvd03.sys
        2017-10-29 11:14 - 2001-08-17 14:02 - 000003968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\swusbflt.sys
        2017-10-29 11:14 - 2001-08-17 14:01 - 000241664 ____C (Toshiba Corporation) C:\WINDOWS\system32\dllcache\tosdvd02.sys
        2017-10-29 11:14 - 2001-08-17 13:58 - 000022912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxpcls.sys
        2017-10-29 11:14 - 2001-08-17 13:56 - 000007552 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\sonypvu1.sys
        2017-10-29 11:14 - 2001-08-17 13:53 - 000009600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sonymc.sys
        2017-10-29 11:14 - 2001-08-17 13:53 - 000007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snyaitmc.sys
        2017-10-29 11:14 - 2001-08-17 13:52 - 000036736 ____C (Promise Technology, Inc.) C:\WINDOWS\system32\dllcache\ultra.sys
        2017-10-29 11:14 - 2001-08-17 13:52 - 000007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tandqic.sys
        2017-10-29 11:14 - 2001-08-17 13:51 - 000061824 ____C (Perle Systems Ltd.) C:\WINDOWS\system32\dllcache\speed.sys
        2017-10-29 11:14 - 2001-08-17 13:51 - 000016896 ____C (SCM Microsystems, Inc.) C:\WINDOWS\system32\dllcache\stcusb.sys
        2017-10-29 11:14 - 2001-08-17 13:51 - 000004992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\toside.sys
        2017-10-29 11:14 - 2001-08-17 13:50 - 000103936 ____C (Perle Systems Ltd. ) C:\WINDOWS\system32\dllcache\sx.sys
        2017-10-29 11:14 - 2001-08-17 13:49 - 000030464 ____C (Toshiba Corporation) C:\WINDOWS\system32\dllcache\tbatm155.sys
        2017-10-29 11:14 - 2001-08-17 13:49 - 000024576 ____C (VIA Technologies, Inc.) C:\WINDOWS\system32\dllcache\viairda.sys
        2017-10-29 11:14 - 2001-08-17 13:48 - 000011520 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\twotrack.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000794654 ____C (U.S. Robotics, Inc.) C:\WINDOWS\system32\dllcache\usr1801.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000794399 ____C (U.S. Robotics, Inc.) C:\WINDOWS\system32\dllcache\usr1806v.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000793598 ____C (U.S. Robotics, Inc.) C:\WINDOWS\system32\dllcache\usr1806.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000765884 ____C (U.S. Robotics, Inc.) C:\WINDOWS\system32\dllcache\usrti.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000687999 ____C (U.S. Robotics Corporation) C:\WINDOWS\system32\dllcache\usrwdxjs.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000604253 ____C (PCTEL, INC.) C:\WINDOWS\system32\dllcache\vmodem.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000397502 ____C (PCtel, Inc.) C:\WINDOWS\system32\dllcache\vpctcom.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000224802 ____C (U.S. Robotics Corporation) C:\WINDOWS\system32\dllcache\usr1807a.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000113762 ____C (U.S. Robotics Corporation) C:\WINDOWS\system32\dllcache\usrpda.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000064605 ____C (PCtel, Inc.) C:\WINDOWS\system32\dllcache\vvoice.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000007556 ____C (U.S. Robotics Corporation) C:\WINDOWS\system32\dllcache\usroslba.sys
        2017-10-29 11:14 - 2001-08-17 12:51 - 000222336 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\trid3dm.sys
        2017-10-29 11:14 - 2001-08-17 12:51 - 000166784 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tridxpm.sys
        2017-10-29 11:14 - 2001-08-17 12:51 - 000159232 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tridkbm.sys
        2017-10-29 11:14 - 2001-08-17 12:51 - 000138528 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tgiulnt5.sys
        2017-10-29 11:14 - 2001-08-17 12:51 - 000037040 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\sonypi.sys
        2017-10-29 11:14 - 2001-08-17 12:51 - 000020752 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\sonync.sys
        2017-10-29 11:14 - 2001-08-17 12:50 - 000036640 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\t2r4mini.sys
        2017-10-29 11:14 - 2001-08-17 12:18 - 000285760 ____C (Stallion Technologies) C:\WINDOWS\system32\dllcache\stlnata.sys
        2017-10-29 11:14 - 2001-08-17 12:14 - 000249402 ____C (Xircom) C:\WINDOWS\system32\dllcache\vinwm.sys
        2017-10-29 11:14 - 2001-08-17 12:14 - 000123995 ____C (Tiger Jet Network) C:\WINDOWS\system32\dllcache\tjisdn.sys
        2017-10-29 11:14 - 2001-08-17 12:13 - 000037961 ____C (TDK Corporation) C:\WINDOWS\system32\dllcache\tdk100b.sys
        2017-10-29 11:14 - 2001-08-17 12:13 - 000019528 ____C (Winbond Electronics Corporation) C:\WINDOWS\system32\dllcache\w840nd.sys
        2017-10-29 11:14 - 2001-08-17 12:13 - 000019016 ____C (Winbond Electronics Corporation) C:\WINDOWS\system32\dllcache\w926nd.sys
        2017-10-29 11:14 - 2001-08-17 12:13 - 000017129 ____C (TDK Corporation) C:\WINDOWS\system32\dllcache\tdkcd31.sys
        2017-10-29 11:14 - 2001-08-17 12:13 - 000016925 ____C (Winbond Electronics Corporation) C:\WINDOWS\system32\dllcache\w940nd.sys
        2017-10-29 11:14 - 2001-08-17 12:12 - 000034375 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\tpro4.sys
        2017-10-29 11:14 - 2001-08-17 12:11 - 000048736 ____C (3Com) C:\WINDOWS\system32\dllcache\srwlnd5.sys
        2017-10-29 11:14 - 2001-08-17 12:10 - 000028232 ____C (TOSHIBA Corporation) C:\WINDOWS\system32\dllcache\tos4mo.sys
        2017-10-29 11:13 - 2008-08-21 14:00 - 000038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm9aw.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smb6w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sma3w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm87w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm81w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000029184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8cw.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm93w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm92w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm90w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8dw.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8aw.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm89w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm59w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\simptcp.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smierrsm.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smimsgif.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smierrsy.dll
        2017-10-29 11:13 - 2008-04-14 00:06 - 000016000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smbbatt.sys
        2017-10-29 11:13 - 2008-04-14 00:06 - 000006912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smbclass.sys
        2017-10-29 11:13 - 2008-04-13 22:05 - 000063547 ____C (Symbol Technologies) C:\WINDOWS\system32\dllcache\sla30nd5.sys
        2017-10-29 11:13 - 2008-04-13 22:05 - 000032768 ____C (SiS Corporation) C:\WINDOWS\system32\dllcache\sisnic.sys
        2017-10-29 11:13 - 2001-08-17 22:36 - 000386560 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\sgiul50.dll
        2017-10-29 11:13 - 2001-08-17 22:36 - 000238592 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sisgrv.dll
        2017-10-29 11:13 - 2001-08-17 22:36 - 000045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smb3w.dll
        2017-10-29 11:13 - 2001-08-17 22:36 - 000033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smb0w.dll
        2017-10-29 11:13 - 2001-08-17 22:36 - 000028672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sma0w.dll
        2017-10-29 11:13 - 2001-08-17 22:36 - 000028160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm91w.dll
        2017-10-29 11:13 - 2001-08-17 22:36 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_seos.dll
        2017-10-29 11:13 - 2001-08-17 14:56 - 000252032 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sis300iv.dll
        2017-10-29 11:13 - 2001-08-17 14:56 - 000157696 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sisv256.dll
        2017-10-29 11:13 - 2001-08-17 14:56 - 000150144 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sis6306v.dll
        2017-10-29 11:13 - 2001-08-17 14:56 - 000147200 ____C (Silicon Motion Inc.) C:\WINDOWS\system32\dllcache\smidispb.dll
        2017-10-29 11:13 - 2001-08-17 13:57 - 000006784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smbhc.sys
        2017-10-29 11:13 - 2001-08-17 13:53 - 000006784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\serscan.sys
        2017-10-29 11:13 - 2001-08-17 13:48 - 000017664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sermouse.sys
        2017-10-29 11:13 - 2001-08-17 12:51 - 000098080 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\sgiulnt5.sys
        2017-10-29 11:13 - 2001-08-17 12:51 - 000058368 ____C (Silicon Motion Inc.) C:\WINDOWS\system32\dllcache\smiminib.sys
        2017-10-29 11:13 - 2001-08-17 12:50 - 000104064 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sisgrp.sys
        2017-10-29 11:13 - 2001-08-17 12:50 - 000101760 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sis300ip.sys
        2017-10-29 11:13 - 2001-08-17 12:50 - 000068608 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sis6306p.sys
        2017-10-29 11:13 - 2001-08-17 12:50 - 000050432 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sisv.sys
        2017-10-29 11:13 - 2001-08-17 12:19 - 000036480 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\sfmanm.sys
        2017-10-29 11:13 - 2001-08-17 12:12 - 000094698 ____C (SysKonnect GmbH.) C:\WINDOWS\system32\dllcache\sk98xwin.sys
        2017-10-29 11:13 - 2001-08-17 12:12 - 000091294 ____C (SysKonnect, a business unit of Schneider & Koch & Co. Datensysteme GmbH.) C:\WINDOWS\system32\dllcache\skfpwin.sys
        2017-10-29 11:13 - 2001-08-17 12:12 - 000025034 ____C (SMC Networks, Inc.) C:\WINDOWS\system32\dllcache\smcpwr2n.sys
        2017-10-29 11:13 - 2001-08-17 12:12 - 000024576 ____C (SMC Networks, Inc.) C:\WINDOWS\system32\dllcache\smc8000n.sys
        2017-10-29 11:13 - 2001-08-17 12:10 - 000035913 ____C (SMC) C:\WINDOWS\system32\dllcache\smcirda.sys
        2017-10-29 11:13 - 2001-07-21 14:29 - 000161568 ____C (Micro Systemation) C:\WINDOWS\system32\dllcache\sgsmusb.sys
        2017-10-29 11:13 - 2001-07-21 14:29 - 000018400 ____C (Micro Systemation) C:\WINDOWS\system32\dllcache\sgsmld.sys
        2017-10-29 11:12 - 2008-04-14 00:15 - 000011520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scsiscan.sys
        2017-10-29 11:12 - 2001-08-17 22:36 - 000057856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_scripto.dll
        2017-10-29 11:12 - 2001-08-17 13:53 - 000006912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\seaddsmc.sys
        2017-10-29 11:12 - 2001-08-17 13:52 - 000011648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scsiprnt.sys
        2017-10-29 11:11 - 2008-08-21 14:00 - 000131584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxviceo.dll
        2017-10-29 11:11 - 2008-08-21 14:00 - 000083748 ____C C:\WINDOWS\system32\dllcache\prcp.nls
        2017-10-29 11:11 - 2008-08-21 14:00 - 000083748 ____C C:\WINDOWS\system32\dllcache\prc.nls
        2017-10-29 11:11 - 2008-08-21 14:00 - 000079872 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia330.dll
        2017-10-29 11:11 - 2008-08-21 14:00 - 000079872 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia001.dll
        2017-10-29 11:11 - 2008-08-21 14:00 - 000020992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\permchk.dll
        2017-10-29 11:11 - 2008-08-21 14:00 - 000016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\quser.exe
        2017-10-29 11:11 - 2008-08-21 14:00 - 000014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\register.exe
        2017-10-29 11:11 - 2008-08-21 14:00 - 000011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxmcro.dll
        2017-10-29 11:11 - 2008-08-21 14:00 - 000009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\query.exe
        2017-10-29 11:11 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxgl.dll
        2017-10-29 11:11 - 2008-04-14 05:42 - 000363520 ____C C:\WINDOWS\system32\dllcache\psisdecd.dll
        2017-10-29 11:11 - 2008-04-14 05:42 - 000159232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ptpusd.dll
        2017-10-29 11:11 - 2008-04-14 05:42 - 000033280 ____C C:\WINDOWS\system32\dllcache\psisrndr.ax
        2017-10-29 11:11 - 2008-04-14 05:42 - 000029696 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rw450ext.dll
        2017-10-29 11:11 - 2008-04-14 05:42 - 000027648 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rw430ext.dll
        2017-10-29 11:11 - 2008-04-14 05:40 - 000259328 ____C (Microsoft Corp., 3Dlabs Inc. Ltd.) C:\WINDOWS\system32\dllcache\perm3dd.dll
        2017-10-29 11:11 - 2008-04-14 05:40 - 000211584 ____C (Microsoft Corp., 3Dlabs Inc. Ltd.) C:\WINDOWS\system32\dllcache\perm2dll.dll
        2017-10-29 11:11 - 2008-04-14 00:14 - 000028032 ____C (Microsoft Corp., 3Dlabs Inc. Ltd.) C:\WINDOWS\system32\dllcache\perm3.sys
        2017-10-29 11:11 - 2008-04-14 00:14 - 000027904 ____C (Microsoft Corp., 3Dlabs Inc. Ltd.) C:\WINDOWS\system32\dllcache\perm2.sys
        2017-10-29 11:11 - 2008-04-14 00:11 - 000017664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ppa3.sys
        2017-10-29 11:11 - 2008-04-14 00:10 - 000079104 ____C (Comtrol Corporation) C:\WINDOWS\system32\dllcache\rocket.sys
        2017-10-29 11:11 - 2008-04-14 00:10 - 000043904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sbp2port.sys
        2017-10-29 11:11 - 2008-04-14 00:10 - 000008832 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\powerfil.sys
        2017-10-29 11:11 - 2008-04-14 00:10 - 000006016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qic157.sys
        2017-10-29 11:11 - 2008-04-13 22:05 - 000020992 ____C (Realtek Semiconductor Corporation) C:\WINDOWS\system32\dllcache\rtl8139.sys
        2017-10-29 11:11 - 2008-04-13 21:42 - 000169984 ____C (Cisco Systems) C:\WINDOWS\system32\dllcache\pcx500.sys
        2017-10-29 11:11 - 2001-08-17 22:37 - 000105984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\phdsext.ax
        2017-10-29 11:11 - 2001-08-17 22:36 - 000495616 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\sblfx.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000121344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\phvfwext.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000086097 ____C (Xircom) C:\WINDOWS\system32\dllcache\reslog32.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000086016 ____C (PCtel, Inc.) C:\WINDOWS\system32\dllcache\pctspk.exe
        2017-10-29 11:11 - 2001-08-17 22:36 - 000082432 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia450.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000079872 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia430.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000062496 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3mtrio.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000041472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qvusd.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000035328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\psisload.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000023040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_regtrace.exe
        2017-10-29 11:11 - 2001-08-17 22:36 - 000016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\philcam1.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000009216 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\rsmgrstr.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ptpusb.dll
        2017-10-29 11:11 - 2001-08-17 14:56 - 000245632 ____C (S3 Graphics, Inc.) C:\WINDOWS\system32\dllcache\s3savmx.dll
        2017-10-29 11:11 - 2001-08-17 14:56 - 000210496 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3mvirge.dll
        2017-10-29 11:11 - 2001-08-17 14:56 - 000198400 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3sav4.dll
        2017-10-29 11:11 - 2001-08-17 14:56 - 000182272 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3mt3d.dll
        2017-10-29 11:11 - 2001-08-17 14:56 - 000179264 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3sav3d.dll
        2017-10-29 11:11 - 2001-08-17 14:07 - 000027296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\perc2.sys
        2017-10-29 11:11 - 2001-08-17 14:07 - 000019840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\philtune.sys
        2017-10-29 11:11 - 2001-08-17 14:07 - 000005504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\perc2hib.sys
        2017-10-29 11:11 - 2001-08-17 14:04 - 000173696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\philcam2.sys
        2017-10-29 11:11 - 2001-08-17 14:04 - 000092416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\phildec.sys
        2017-10-29 11:11 - 2001-08-17 14:04 - 000075776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\philcam1.sys
        2017-10-29 11:11 - 2001-08-17 13:57 - 000065664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\s3legacy.sys
        2017-10-29 11:11 - 2001-08-17 13:53 - 000017792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ppa.sys
        2017-10-29 11:11 - 2001-08-17 13:53 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pnrmc.sys
        2017-10-29 11:11 - 2001-08-17 13:53 - 000003328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qv2kux.sys
        2017-10-29 11:11 - 2001-08-17 13:52 - 000049024 ____C (QLogic Corporation) C:\WINDOWS\system32\dllcache\ql1280.sys
        2017-10-29 11:11 - 2001-08-17 13:52 - 000045312 ____C (QLogic Corporation) C:\WINDOWS\system32\dllcache\ql12160.sys
        2017-10-29 11:11 - 2001-08-17 13:52 - 000040448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ql1240.sys
        2017-10-29 11:11 - 2001-08-17 13:52 - 000040320 ____C (QLogic Corporation) C:\WINDOWS\system32\dllcache\ql1080.sys
        2017-10-29 11:11 - 2001-08-17 13:52 - 000033152 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ql10wnt.sys
        2017-10-29 11:11 - 2001-08-17 13:51 - 000023936 ____C (OMNIKEY AG) C:\WINDOWS\system32\dllcache\sccmusbm.sys
        2017-10-29 11:11 - 2001-08-17 13:51 - 000023936 ____C (OMNIKEY AG) C:\WINDOWS\system32\dllcache\sccmn50m.sys
        2017-10-29 11:11 - 2001-08-17 13:51 - 000019584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rasirda.sys
        2017-10-29 11:11 - 2001-08-17 13:51 - 000017280 ____C (SCM Microsystems) C:\WINDOWS\system32\dllcache\scr111.sys
        2017-10-29 11:11 - 2001-08-17 13:51 - 000016640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scmstcs.sys
        2017-10-29 11:11 - 2001-08-17 13:51 - 000016128 ____C (SCM Microsystems, Inc.) C:\WINDOWS\system32\dllcache\pscr.sys
        2017-10-29 11:11 - 2001-08-17 13:28 - 000899146 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\r2mdkxga.sys
        2017-10-29 11:11 - 2001-08-17 13:28 - 000714762 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\r2mdmkxx.sys
        2017-10-29 11:11 - 2001-08-17 13:28 - 000130942 ____C (PCTEL, INC.) C:\WINDOWS\system32\dllcache\ptserlv.sys
        2017-10-29 11:11 - 2001-08-17 13:28 - 000128286 ____C (PCTEL, INC.) C:\WINDOWS\system32\dllcache\ptserli.sys
        2017-10-29 11:11 - 2001-08-17 13:28 - 000112574 ____C (PCTEL, INC.) C:\WINDOWS\system32\dllcache\ptserlp.sys
        2017-10-29 11:11 - 2001-08-17 12:50 - 000166720 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3m.sys
        2017-10-29 11:11 - 2001-08-17 12:50 - 000077824 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3sav4m.sys
        2017-10-29 11:11 - 2001-08-17 12:50 - 000075392 ____C (S3 Graphics, Inc.) C:\WINDOWS\system32\dllcache\s3savmxm.sys
        2017-10-29 11:11 - 2001-08-17 12:50 - 000061504 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3sav3dm.sys
        2017-10-29 11:11 - 2001-08-17 12:50 - 000041216 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3mt3d.sys
        2017-10-29 11:11 - 2001-08-17 12:19 - 000030720 ____C (Conexant Systems Inc.) C:\WINDOWS\system32\dllcache\rthwcls.sys
        2017-10-29 11:11 - 2001-08-17 12:19 - 000003840 ____C (Conexant Systems Inc.) C:\WINDOWS\system32\dllcache\rpfun.sys
        2017-10-29 11:11 - 2001-08-17 12:12 - 000037563 ____C (RadioLAN) C:\WINDOWS\system32\dllcache\rlnet5.sys
        2017-10-29 11:11 - 2001-08-17 12:12 - 000026153 ____C (Linksys) C:\WINDOWS\system32\dllcache\pcmlm56.sys
        2017-10-29 11:11 - 2001-08-17 12:12 - 000019017 ____C (Realtek Semiconductor Corporation) C:\WINDOWS\system32\dllcache\rtl8029.sys
        2017-10-29 11:11 - 2001-08-17 12:11 - 000035328 ____C (AMD Inc.) C:\WINDOWS\system32\dllcache\pcntpci5.sys
        2017-10-29 11:11 - 2001-08-17 12:11 - 000030282 ____C (AMD Inc.) C:\WINDOWS\system32\dllcache\pcntn5hl.sys
        2017-10-29 11:11 - 2001-08-17 12:11 - 000029769 ____C (AMD Inc.) C:\WINDOWS\system32\dllcache\pcntn5m.sys
        2017-10-29 11:10 - 2008-08-21 14:00 - 000053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nextlink.dll
        2017-10-29 11:10 - 2008-08-21 14:00 - 000036927 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs411.dll
        2017-10-29 11:10 - 2008-08-21 14:00 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pagecnt.dll
        2017-10-29 11:10 - 2008-08-21 14:00 - 000014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs412.dll
        2017-10-29 11:10 - 2008-04-14 00:24 - 000028672 ____C (National Semiconductor Corporation) C:\WINDOWS\system32\dllcache\nscirda.sys
        2017-10-29 11:10 - 2008-04-13 22:05 - 000132695 ____C (802.11b) C:\WINDOWS\system32\dllcache\netwlan5.sys
        2017-10-29 11:10 - 2008-04-13 22:05 - 000029502 ____C (Marconi Communications, Inc.) C:\WINDOWS\system32\dllcache\pca200e.sys
        2017-10-29 11:10 - 2001-08-17 22:36 - 000123776 ____C (NVIDIA Corporation) C:\WINDOWS\system32\dllcache\nv3.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000116736 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcodec2.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000060480 ____C (NeoMagic Corporation) C:\WINDOWS\system32\dllcache\neo20xx.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000059104 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i128v2.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000044544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovui2.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000041984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovui2rc.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000039424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcoms.exe
        2017-10-29 11:10 - 2001-08-17 22:36 - 000038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_ntfsdrv.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcomc.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000019968 ____C (Moxa Technologies Co., Ltd) C:\WINDOWS\system32\dllcache\mxicfg.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000007168 ____C (Moxa Technologies Co., Ltd) C:\WINDOWS\system32\dllcache\mxport.dll
        2017-10-29 11:10 - 2001-08-17 14:56 - 000091488 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i3disp.dll
        2017-10-29 11:10 - 2001-08-17 14:56 - 000035392 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i128.dll
        2017-10-29 11:10 - 2001-08-17 14:05 - 000351616 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcodek2.sys
        2017-10-29 11:10 - 2001-08-17 14:05 - 000048000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcam2.sys
        2017-10-29 11:10 - 2001-08-17 14:05 - 000031872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovce.sys
        2017-10-29 11:10 - 2001-08-17 14:05 - 000028032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcd.sys
        2017-10-29 11:10 - 2001-08-17 14:05 - 000025216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovsound2.sys
        2017-10-29 11:10 - 2001-08-17 14:05 - 000025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovca.sys
        2017-10-29 11:10 - 2001-08-17 13:53 - 000007552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nsmmc.sys
        2017-10-29 11:10 - 2001-08-17 13:50 - 000075520 ____C (Moxa Technologies Co., Ltd.) C:\WINDOWS\system32\dllcache\mxport.sys
        2017-10-29 11:10 - 2001-08-17 13:49 - 000019968 ____C (Macronix International Co., Ltd. ) C:\WINDOWS\system32\dllcache\mxnic.sys
        2017-10-29 11:10 - 2001-08-17 13:49 - 000015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ne2000.sys
        2017-10-29 11:10 - 2001-08-17 13:47 - 000009344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntapm.sys
        2017-10-29 11:10 - 2001-08-17 13:28 - 000054186 ____C (Ositech Communications, Inc.) C:\WINDOWS\system32\dllcache\otcsercb.sys
        2017-10-29 11:10 - 2001-08-17 12:50 - 000198144 ____C (NVIDIA Corporation) C:\WINDOWS\system32\dllcache\nv3.sys
        2017-10-29 11:10 - 2001-08-17 12:50 - 000039264 ____C (NeoMagic Corporation) C:\WINDOWS\system32\dllcache\neo20xx.sys
        2017-10-29 11:10 - 2001-08-17 12:50 - 000033088 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i128v2.sys
        2017-10-29 11:10 - 2001-08-17 12:50 - 000027936 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i3d.sys
        2017-10-29 11:10 - 2001-08-17 12:50 - 000013664 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i128.sys
        2017-10-29 11:10 - 2001-08-17 12:49 - 000051552 ____C (Kensington Technology Group) C:\WINDOWS\system32\dllcache\ntgrip.sys
        2017-10-29 11:10 - 2001-08-17 12:20 - 000126080 ____C (NeoMagic Corporation) C:\WINDOWS\system32\dllcache\nm5a2wdm.sys
        2017-10-29 11:10 - 2001-08-17 12:20 - 000087040 ____C (NeoMagic Corporation) C:\WINDOWS\system32\dllcache\nm6wdm.sys
        2017-10-29 11:10 - 2001-08-17 12:20 - 000054528 ____C (Yamaha Corp.) C:\WINDOWS\system32\dllcache\opl3sax.sys
        2017-10-29 11:10 - 2001-08-17 12:12 - 000043689 ____C (Ositech Communications, Inc.) C:\WINDOWS\system32\dllcache\otceth5.sys
        2017-10-29 11:10 - 2001-08-17 12:12 - 000032840 ____C (NETGEAR Corporation.) C:\WINDOWS\system32\dllcache\ngrpci.sys
        2017-10-29 11:10 - 2001-08-17 12:12 - 000030495 ____C (Linksys) C:\WINDOWS\system32\dllcache\pc100nds.sys
        2017-10-29 11:10 - 2001-08-17 12:12 - 000027209 ____C (Ositech Communications, Inc.) C:\WINDOWS\system32\dllcache\otc06x5.sys
        2017-10-29 11:10 - 2001-08-17 12:11 - 000128000 ____C (Compaq Computer Corporation) C:\WINDOWS\system32\dllcache\n100325.sys
        2017-10-29 11:10 - 2001-08-17 12:11 - 000065278 ____C (Compaq Computer Corporation) C:\WINDOWS\system32\dllcache\netflx3.sys
        2017-10-29 11:10 - 2001-08-17 12:11 - 000052255 ____C (Compaq Computer Corporation) C:\WINDOWS\system32\dllcache\n1000nt5.sys
        2017-10-29 11:09 - 2008-08-21 14:00 - 001875968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msir3jp.lex
        2017-10-29 11:09 - 2008-08-21 14:00 - 000229439 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\multibox.dll
        2017-10-29 11:09 - 2008-08-21 14:00 - 000098304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msir3jp.dll
        2017-10-29 11:09 - 2008-08-21 14:00 - 000092416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mga.sys
        2017-10-29 11:09 - 2008-08-21 14:00 - 000092032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mga.dll
        2017-10-29 11:09 - 2008-08-21 14:00 - 000034304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\migisol.exe
        2017-10-29 11:09 - 2008-08-21 14:00 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mdsync.dll
        2017-10-29 11:09 - 2008-08-21 14:00 - 000022016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\logscrpt.dll
        2017-10-29 11:09 - 2008-04-14 05:42 - 000056832 ____C C:\WINDOWS\system32\dllcache\msdvbnp.ax
        2017-10-29 11:09 - 2008-04-14 00:24 - 000022016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msircomm.sys
        2017-10-29 11:09 - 2008-04-14 00:16 - 000051200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdv.sys
        2017-10-29 11:09 - 2008-04-14 00:16 - 000049024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstape.sys
        2017-10-29 11:09 - 2008-04-14 00:16 - 000015232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mpe.sys
        2017-10-29 11:09 - 2008-04-14 00:11 - 000026112 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\memstpci.sys
        2017-10-29 11:09 - 2008-04-14 00:10 - 000034688 ____C (Toshiba Corp.) C:\WINDOWS\system32\dllcache\lbrtfdc.sys
        2017-10-29 11:09 - 2008-04-14 00:10 - 000007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ltotape.sys
        2017-10-29 11:09 - 2008-04-13 23:53 - 000606684 ____C (LT) C:\WINDOWS\system32\dllcache\ltmdmnt.sys
        2017-10-29 11:09 - 2008-04-13 23:53 - 000420992 ____C (LT) C:\WINDOWS\system32\dllcache\ltmdmntt.sys
        2017-10-29 11:09 - 2008-04-13 22:09 - 000020864 ____C (Logitech Inc.) C:\WINDOWS\system32\dllcache\lwadihid.sys
        2017-10-29 11:09 - 2001-08-17 22:36 - 000065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_mailmsg.dll
        2017-10-29 11:09 - 2001-08-17 22:36 - 000058880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\m3092dc.dll
        2017-10-29 11:09 - 2001-08-17 22:36 - 000058368 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\m3091dc.dll
        2017-10-29 11:09 - 2001-08-17 22:36 - 000047616 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\memgrp.dll
        2017-10-29 11:09 - 2001-08-17 14:56 - 000235648 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\mgaud.dll
        2017-10-29 11:09 - 2001-08-17 14:02 - 000035200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msgame.sys
        2017-10-29 11:09 - 2001-08-17 14:00 - 000002944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msmpu401.sys
        2017-10-29 11:09 - 2001-08-17 13:58 - 000008320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\memcard.sys
        2017-10-29 11:09 - 2001-08-17 13:57 - 000016128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\modemcsa.sys
        2017-10-29 11:09 - 2001-08-17 13:53 - 000004992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\loop.sys
        2017-10-29 11:09 - 2001-08-17 13:52 - 000017280 ____C (American Megatrends Inc.) C:\WINDOWS\system32\dllcache\mraid35x.sys
        2017-10-29 11:09 - 2001-08-17 13:52 - 000007424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mammoth.sys
        2017-10-29 11:09 - 2001-08-17 13:52 - 000006528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\miniqic.sys
        2017-10-29 11:09 - 2001-08-17 13:51 - 000015744 ____C (Litronic Industries) C:\WINDOWS\system32\dllcache\lit220p.sys
        2017-10-29 11:09 - 2001-08-17 13:50 - 000021888 ____C (Moxa Technologies Co., Ltd.) C:\WINDOWS\system32\dllcache\mxcard.sys
        2017-10-29 11:09 - 2001-08-17 13:48 - 000012416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msriffwv.sys
        2017-10-29 11:09 - 2001-08-17 13:48 - 000006016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfsio.sys
        2017-10-29 11:09 - 2001-08-17 13:28 - 000802683 ____C (Lucent Technologies) C:\WINDOWS\system32\dllcache\ltsm.sys
        2017-10-29 11:09 - 2001-08-17 13:28 - 000797500 ____C (LT) C:\WINDOWS\system32\dllcache\ltsmt.sys
        2017-10-29 11:09 - 2001-08-17 13:28 - 000727786 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\ltck000c.sys
        2017-10-29 11:09 - 2001-08-17 13:28 - 000576746 ____C (LT) C:\WINDOWS\system32\dllcache\ltmdmntl.sys
        2017-10-29 11:09 - 2001-08-17 12:50 - 000320384 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\mgaum.sys
        2017-10-29 11:09 - 2001-08-17 12:50 - 000103296 ____C (Matrox Graphics Inc) C:\WINDOWS\system32\dllcache\mtxvideo.sys
        2017-10-29 11:09 - 2001-08-17 12:49 - 000022848 ____C (Logitech Inc.) C:\WINDOWS\system32\dllcache\lwusbhid.sys
        2017-10-29 11:09 - 2001-08-17 12:19 - 000048768 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\maestro.sys
        2017-10-29 11:09 - 2001-08-17 12:12 - 000164586 ____C (Madge Networks Ltd) C:\WINDOWS\system32\dllcache\mdgndis5.sys
        2017-10-29 11:09 - 2001-08-17 12:12 - 000070730 ____C (Linksys Group, Inc.) C:\WINDOWS\system32\dllcache\lne100tx.sys
        2017-10-29 11:09 - 2001-08-17 12:12 - 000026442 ____C (SMSC) C:\WINDOWS\system32\dllcache\lanepic5.sys
        2017-10-29 11:09 - 2001-08-17 12:12 - 000020573 ____C (The Linksts Group ) C:\WINDOWS\system32\dllcache\lne100.sys
        2017-10-29 11:09 - 2001-08-17 12:12 - 000019016 ____C (Kingston Technology Company ) C:\WINDOWS\system32\dllcache\ktc111.sys
        2017-10-29 11:09 - 2001-08-17 12:11 - 000025065 ____C (D-Link) C:\WINDOWS\system32\dllcache\lmndis3.sys
        2017-10-29 11:08 - 2008-08-21 14:00 - 010129408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hwxkor.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 010096640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hwxcht.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 001158818 ____C C:\WINDOWS\system32\dllcache\korwbrkr.lex
        2017-10-29 11:08 - 2008-08-21 14:00 - 000471102 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imskdic.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000311359 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imepadsv.exe
        2017-10-29 11:08 - 2008-08-21 14:00 - 000134339 ____C C:\WINDOWS\system32\dllcache\imekr.lex
        2017-10-29 11:08 - 2008-08-21 14:00 - 000102463 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imepadsm.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000070656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\korwbrkr.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000060928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisclex4.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000059904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imkrinst.exe
        2017-10-29 11:08 - 2008-08-21 14:00 - 000057398 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdadm.exe
        2017-10-29 11:08 - 2008-08-21 14:00 - 000047066 ____C C:\WINDOWS\system32\dllcache\ksc.nls
        2017-10-29 11:08 - 2008-08-21 14:00 - 000045109 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpuex.exe
        2017-10-29 11:08 - 2008-08-21 14:00 - 000044032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekrmig.exe
        2017-10-29 11:08 - 2008-08-21 14:00 - 000019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iiscrmap.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jupiw.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnecat.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iwrps.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\infoctrs.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnecnt.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnec95.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\isapips.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iissync.exe
        2017-10-29 11:08 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth3.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth2.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinpun.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101a.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdvntc.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdusa.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdurdu.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth1.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth0.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsyr2.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsyr1.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdintel.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdintam.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinmar.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinkan.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinhin.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinguj.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdindev.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdheb.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdfa.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbddiv2.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbddiv1.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda3.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda2.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda1.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdgeo.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdarmw.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdarme.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000003584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iismui.dll
        2017-10-29 11:08 - 2008-04-14 05:42 - 000151552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irftp.exe
        2017-10-29 11:08 - 2008-04-14 05:41 - 000702845 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\i81xdnt5.dll
        2017-10-29 11:08 - 2008-04-14 05:41 - 000253952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kdsusd.dll
        2017-10-29 11:08 - 2008-04-14 05:41 - 000048640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kdsui.dll
        2017-10-29 11:08 - 2008-04-14 05:41 - 000028160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irmon.dll
        2017-10-29 11:08 - 2008-04-14 05:39 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd106.dll
        2017-10-29 11:08 - 2008-04-14 00:24 - 000088192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irda.sys
        2017-10-29 11:08 - 2008-04-14 00:11 - 000018560 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\i2omp.sys
        2017-10-29 11:08 - 2008-04-14 00:11 - 000008576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\i2omgmt.sys
        2017-10-29 11:08 - 2008-04-14 00:10 - 000005504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\intelide.sys
        2017-10-29 11:08 - 2008-04-13 22:04 - 000161020 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\i81xnt5.sys
        2017-10-29 11:08 - 2001-08-17 22:36 - 000372824 ____C (Xircom) C:\WINDOWS\system32\dllcache\iconf32.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000091136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam4com.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000090200 ____C (Perle Systems Ltd. ) C:\WINDOWS\system32\dllcache\io8ports.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000061952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam4ext.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000045056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam5com.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kousd.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam3ext.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam5ext.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdjpn.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdkor.dll
        2017-10-29 11:08 - 2001-08-17 22:34 - 000009216 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\ibmsgnet.dll
        2017-10-29 11:08 - 2001-08-17 14:56 - 000353184 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\i740dnt5.dll
        2017-10-29 11:08 - 2001-08-17 14:55 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101c.dll
        2017-10-29 11:08 - 2001-08-17 14:55 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101b.dll
        2017-10-29 11:08 - 2001-08-17 14:55 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd103.dll
        2017-10-29 11:08 - 2001-08-17 14:06 - 000154496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam4usb.sys
        2017-10-29 11:08 - 2001-08-17 14:06 - 000100992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam5usb.sys
        2017-10-29 11:08 - 2001-08-17 14:06 - 000038528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ibmvcap.sys
        2017-10-29 11:08 - 2001-08-17 14:05 - 000141056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam3.sys
        2017-10-29 11:08 - 2001-08-17 13:52 - 000016000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ini910u.sys
        2017-10-29 11:08 - 2001-08-17 13:51 - 000018688 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irsir.sys
        2017-10-29 11:08 - 2001-08-17 13:50 - 000038784 ____C (Perle Systems Ltd. ) C:\WINDOWS\system32\dllcache\io8.sys
        2017-10-29 11:08 - 2001-08-17 13:49 - 000026624 ____C (SigmaTel, Inc.) C:\WINDOWS\system32\dllcache\irstusb.sys
        2017-10-29 11:08 - 2001-08-17 13:49 - 000023552 ____C (MKNet Corporation) C:\WINDOWS\system32\dllcache\irmk7.sys
        2017-10-29 11:08 - 2001-08-17 13:47 - 000013056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inport.sys
        2017-10-29 11:08 - 2001-08-17 12:49 - 000058592 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\i740nt5.sys
        2017-10-29 11:08 - 2001-08-17 12:12 - 000109085 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\ibmtrp.sys
        2017-10-29 11:08 - 2001-08-17 12:12 - 000100936 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\ibmtok.sys
        2017-10-29 11:08 - 2001-08-17 12:12 - 000045632 ____C (Interphase (R) Corporation a Windows (R) 2000 DDK Driver Provider) C:\WINDOWS\system32\dllcache\ip5515.sys
        2017-10-29 11:08 - 2001-08-17 12:11 - 000028700 ____C (IBM Corp.) C:\WINDOWS\system32\dllcache\ibmexmp.sys
        2017-10-29 11:07 - 2008-08-21 14:00 - 000132608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsclntr.dll
        2017-10-29 11:07 - 2008-08-21 14:00 - 000111104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscfgwz.dll
        2017-10-29 11:07 - 2008-08-21 14:00 - 000108827 ____C C:\WINDOWS\system32\dllcache\hanja.lex
        2017-10-29 11:07 - 2008-08-21 14:00 - 000036864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hanjadic.dll
        2017-10-29 11:07 - 2008-08-21 14:00 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsroute.dll
        2017-10-29 11:07 - 2008-08-21 14:00 - 000014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\flattemp.exe
        2017-10-29 11:07 - 2008-08-21 14:00 - 000011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxssend.exe
        2017-10-29 11:07 - 2008-08-21 14:00 - 000007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpctrs2.dll
        2017-10-29 11:07 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftlx041e.dll
        2017-10-29 11:07 - 2008-04-14 00:15 - 000059136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\gckernel.sys
        2017-10-29 11:07 - 2008-04-14 00:15 - 000010624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\gameenum.sys
        2017-10-29 11:07 - 2008-04-14 00:10 - 000028288 ____C (Gemplus) C:\WINDOWS\system32\dllcache\grserial.sys
        2017-10-29 11:07 - 2008-04-14 00:06 - 000020352 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidbatt.sys
        2017-10-29 11:07 - 2008-04-13 22:05 - 000034173 ____C (Marconi Communications, Inc.) C:\WINDOWS\system32\dllcache\forehe.sys
        2017-10-29 11:07 - 2001-08-17 22:36 - 000324608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpojwia.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000165888 ____C () C:\WINDOWS\system32\dllcache\hpgt53.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000126976 ____C (Hewlett Packard) C:\WINDOWS\system32\dllcache\hpgt34tk.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000123392 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpgt21tk.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000119296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpdigwia.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000101376 ____C () C:\WINDOWS\system32\dllcache\hpgt34.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000093696 ____C () C:\WINDOWS\system32\dllcache\hpgt42.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000092160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fuusd.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000089088 ____C () C:\WINDOWS\system32\dllcache\hpgt33.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000083968 ____C () C:\WINDOWS\system32\dllcache\hpgt21.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000071680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fnfilter.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000068608 ____C (Avisioin) C:\WINDOWS\system32\dllcache\hpgt53tk.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000048128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpgt33tk.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_fcachdll.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000032768 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpgtmcro.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000031232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpgt42tk.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hr1w.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpsjmcro.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000009759 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_inst.dll
        2017-10-29 11:07 - 2001-08-17 14:56 - 001733120 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\g400d.dll
        2017-10-29 11:07 - 2001-08-17 14:56 - 000470144 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\g200d.dll
        2017-10-29 11:07 - 2001-08-17 14:07 - 000025952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpn.sys
        2017-10-29 11:07 - 2001-08-17 14:02 - 000008576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidgame.sys
        2017-10-29 11:07 - 2001-08-17 14:02 - 000002688 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidswvd.sys
        2017-10-29 11:07 - 2001-08-17 13:52 - 000005760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpt4qic.sys
        2017-10-29 11:07 - 2001-08-17 13:51 - 000082304 ____C (Gemplus) C:\WINDOWS\system32\dllcache\grclass.sys
        2017-10-29 11:07 - 2001-08-17 13:51 - 000017408 ____C (Gemplus) C:\WINDOWS\system32\dllcache\gpr400.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000907456 ____C (Conexant) C:\WINDOWS\system32\dllcache\hcf_msft.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000542879 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_msft.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000488383 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_v124.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000391199 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_k56k.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000289887 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_fall.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000199711 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_faxx.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000150239 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_amos.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000115807 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_fsks.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000073279 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_spkp.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000067167 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_bsc2.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000057471 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_samp.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000050751 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_tone.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000044863 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_soar.sys
        2017-10-29 11:07 - 2001-08-17 12:49 - 000322432 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\g400m.sys
        2017-10-29 11:07 - 2001-08-17 12:49 - 000320384 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\g200m.sys
        2017-10-29 11:07 - 2001-08-17 12:15 - 000455680 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fus2base.sys
        2017-10-29 11:07 - 2001-08-17 12:15 - 000455296 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fusbbase.sys
        2017-10-29 11:07 - 2001-08-17 12:15 - 000454912 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fxusbase.sys
        2017-10-29 11:07 - 2001-08-17 12:15 - 000442240 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fpnpbase.sys
        2017-10-29 11:07 - 2001-08-17 12:14 - 000444416 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fpcibase.sys
        2017-10-29 11:07 - 2001-08-17 12:14 - 000441728 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fpcmbase.sys
        2017-10-29 11:07 - 2001-08-17 12:13 - 000027165 ____C (VIA Technologies, Inc. ) C:\WINDOWS\system32\dllcache\fetnd5.sys
        2017-10-29 11:07 - 2001-08-17 12:10 - 000022090 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\fem556n5.sys
        2017-10-29 11:06 - 2008-08-21 14:00 - 000514587 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\edb500.dll
        2017-10-29 11:06 - 2008-08-21 14:00 - 000057856 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esuimgd.dll
        2017-10-29 11:06 - 2008-08-21 14:00 - 000045056 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esunid.dll
        2017-10-29 11:06 - 2008-08-21 14:00 - 000031744 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esucmd.dll
        2017-10-29 11:06 - 2008-08-21 14:00 - 000025856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\et4000.sys
        2017-10-29 11:06 - 2008-04-14 00:10 - 000008320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dlttape.sys
        2017-10-29 11:06 - 2008-04-14 00:09 - 000206976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dot4.sys
        2017-10-29 11:06 - 2008-04-13 22:06 - 000137088 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\essm2e.sys
        2017-10-29 11:06 - 2001-08-17 22:36 - 000614429 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiview.exe
        2017-10-29 11:06 - 2001-08-17 22:36 - 000419357 ____C (Digi International) C:\WINDOWS\system32\dllcache\dgconfig.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000256512 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\devcon32.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000236060 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\ditrace.exe
        2017-10-29 11:06 - 2001-08-17 22:36 - 000229462 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digifwrk.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000159828 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digihlc.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000131156 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digidbp.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000110621 ____C (Digi International, Inc.) C:\WINDOWS\system32\dllcache\digirlpt.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000110592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dc260usd.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000102484 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiinf.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000086016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dc240usd.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000080896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dc210usd.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000065622 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiasyn.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000061952 ____C (Equinox Systems Inc.) C:\WINDOWS\system32\dllcache\eqnloop.exe
        2017-10-29 11:06 - 2001-08-17 22:36 - 000053248 ____C (Equinox Systems Inc.) C:\WINDOWS\system32\dllcache\eqndiag.exe
        2017-10-29 11:06 - 2001-08-17 22:36 - 000051200 ____C (Equinox Systems Inc.) C:\WINDOWS\system32\dllcache\eqnlogr.exe
        2017-10-29 11:06 - 2001-08-17 22:36 - 000045568 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esunib.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000045568 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esuni.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000043008 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esucm.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000041046 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiisdn.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000038985 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\disrvsu.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000037962 ____C C:\WINDOWS\system32\dllcache\divaprop.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000034816 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esuimg.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000031305 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\disrvpp.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000029768 ____C C:\WINDOWS\system32\dllcache\divasu.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000025600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dc210_32.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000024064 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\devldr32.exe
        2017-10-29 11:06 - 2001-08-17 22:36 - 000006729 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\disrvci.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000006216 ____C C:\WINDOWS\system32\dllcache\divaci.dll
        2017-10-29 11:06 - 2001-08-17 14:07 - 000020192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dpti2o.sys
        2017-10-29 11:06 - 2001-08-17 13:53 - 000007296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\elmsmc.sys
        2017-10-29 11:06 - 2001-08-17 13:52 - 000007424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ddsmc.sys
        2017-10-29 11:06 - 2001-08-17 13:52 - 000007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\exabyte2.sys
        2017-10-29 11:06 - 2001-08-17 13:50 - 000144896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\epcfw2k.sys
        2017-10-29 11:06 - 2001-08-17 13:50 - 000114944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\epstw2k.sys
        2017-10-29 11:06 - 2001-08-17 13:47 - 000023808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dot4usb.sys
        2017-10-29 11:06 - 2001-08-17 13:47 - 000012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dot4prt.sys
        2017-10-29 11:06 - 2001-08-17 13:47 - 000008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dot4scan.sys
        2017-10-29 11:06 - 2001-08-17 13:28 - 000634134 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el656ct5.sys
        2017-10-29 11:06 - 2001-08-17 13:28 - 000595647 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\es56cvmp.sys
        2017-10-29 11:06 - 2001-08-17 13:28 - 000594238 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\es56hpi.sys
        2017-10-29 11:06 - 2001-08-17 13:28 - 000347550 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\es56tpi.sys
        2017-10-29 11:06 - 2001-08-17 13:28 - 000241206 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el656se5.sys
        2017-10-29 11:06 - 2001-08-17 12:20 - 000334208 ____C (Yamaha Corp.) C:\WINDOWS\system32\dllcache\ds1wdm.sys
        2017-10-29 11:06 - 2001-08-17 12:19 - 000283904 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\emu10k1m.sys
        2017-10-29 11:06 - 2001-08-17 12:19 - 000174464 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\es198x.sys
        2017-10-29 11:06 - 2001-08-17 12:19 - 000072192 ____C (ESS Technology Inc.) C:\WINDOWS\system32\dllcache\es1969.sys
        2017-10-29 11:06 - 2001-08-17 12:19 - 000063360 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\ess.sys
        2017-10-29 11:06 - 2001-08-17 12:19 - 000040704 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\es1371mp.sys
        2017-10-29 11:06 - 2001-08-17 12:19 - 000037120 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\es1370mp.sys
        2017-10-29 11:06 - 2001-08-17 12:17 - 000629952 ____C (Equinox Systems Inc.) C:\WINDOWS\system32\dllcache\eqn.sys
        2017-10-29 11:06 - 2001-08-17 12:17 - 000090525 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digifep5.sys
        2017-10-29 11:06 - 2001-08-17 12:17 - 000042432 ____C (Digi International, Inc.) C:\WINDOWS\system32\dllcache\digirlpt.sys
        2017-10-29 11:06 - 2001-08-17 12:17 - 000029531 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\dgapci.sys
        2017-10-29 11:06 - 2001-08-17 12:14 - 000952007 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\diwan.sys
        2017-10-29 11:06 - 2001-08-17 12:14 - 000021606 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiisdn.sys
        2017-10-29 11:06 - 2001-08-17 12:13 - 000103044 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digidxb.sys
        2017-10-29 11:06 - 2001-08-17 12:13 - 000091305 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\dimaint.sys
        2017-10-29 11:06 - 2001-08-17 12:13 - 000037735 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiasyn.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000117760 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\e100b325.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000063208 ____C (Intel Corporation.) C:\WINDOWS\system32\dllcache\dc21x4.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000050719 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\e1000nt5.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000028062 ____C (National Semiconductor Coproration) C:\WINDOWS\system32\dllcache\dp83820.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000024618 ____C (NETGEAR) C:\WINDOWS\system32\dllcache\fa410nd5.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000019594 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\e100isa4.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000018503 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\epro4.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000016998 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\ex10.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000016074 ____C (NETGEAR Corp.) C:\WINDOWS\system32\dllcache\fa312nd5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000455199 ____C (3Com Corporation.) C:\WINDOWS\system32\dllcache\el985n51.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000171520 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el99xn51.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000153631 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el90xnd5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000077386 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el656nd5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000070174 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el98xn5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000069194 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el656cd5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000066591 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el90xbc5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000029696 ____C (CNet Technology, Inc. ) C:\WINDOWS\system32\dllcache\dm9pci5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000026698 ____C (D-Link Corporation) C:\WINDOWS\system32\dllcache\dlh5xnd5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000024649 ____C (D-Link) C:\WINDOWS\system32\dllcache\dfe650d.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000024648 ____C (D-Link) C:\WINDOWS\system32\dllcache\dfe650.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000020928 ____C (Digital Networks, LLC) C:\WINDOWS\system32\dllcache\defpa.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000012362 ____C (FUJITSU LIMITED) C:\WINDOWS\system32\dllcache\f3ab18xi.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000011850 ____C (FUJITSU LIMITED) C:\WINDOWS\system32\dllcache\f3ab18xj.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000069692 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el575nd5.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000055999 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el556nd5.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000044103 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el515.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000026141 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el589nd5.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000025159 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\elnk3.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000024653 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el574nd4.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000019996 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\em556n4.sys
        2017-10-29 11:05 - 2008-08-21 14:00 - 001677824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chsbrkr.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000838144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chtbrkr.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000195618 ____C C:\WINDOWS\system32\dllcache\c_10002.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000189986 ____C C:\WINDOWS\system32\dllcache\c_1361.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000187938 ____C C:\WINDOWS\system32\dllcache\c_20005.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000186402 ____C C:\WINDOWS\system32\dllcache\c_20001.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000185378 ____C C:\WINDOWS\system32\dllcache\c_20003.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000180770 ____C C:\WINDOWS\system32\dllcache\c_20932.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000180258 ____C C:\WINDOWS\system32\dllcache\c_20004.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000180258 ____C C:\WINDOWS\system32\dllcache\c_20000.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000177698 ____C C:\WINDOWS\system32\dllcache\c_20949.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000177698 ____C C:\WINDOWS\system32\dllcache\c_10003.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000173602 ____C C:\WINDOWS\system32\dllcache\c_20936.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000173602 ____C C:\WINDOWS\system32\dllcache\c_20002.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000173602 ____C C:\WINDOWS\system32\dllcache\c_10008.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000162850 ____C C:\WINDOWS\system32\dllcache\c_10001.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000082172 ____C C:\WINDOWS\system32\dllcache\bopomofo.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066728 ____C C:\WINDOWS\system32\dllcache\big5.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066594 ____C C:\WINDOWS\system32\dllcache\c_864.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066594 ____C C:\WINDOWS\system32\dllcache\c_862.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066594 ____C C:\WINDOWS\system32\dllcache\c_858.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066594 ____C C:\WINDOWS\system32\dllcache\c_720.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_870.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_708.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_28596.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_21027.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_21025.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20924.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20880.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20871.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20838.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20833.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20424.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20423.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20420.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20297.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20290.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20285.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20284.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20280.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20278.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20277.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20273.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20269.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20108.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20107.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20106.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20105.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1149.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1148.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1147.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1146.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1145.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1144.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1143.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1142.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1141.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1140.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1047.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_10021.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_10005.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_10004.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000056320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\convlog.exe
        2017-10-29 11:05 - 2008-08-21 14:00 - 000054528 ____C (Philips Semiconductors GmbH) C:\WINDOWS\system32\dllcache\cap7146.sys
        2017-10-29 11:05 - 2008-08-21 14:00 - 000045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\browscap.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\controt.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\counters.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cprofile.exe
        2017-10-29 11:05 - 2008-08-21 14:00 - 000015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chgport.exe
        2017-10-29 11:05 - 2008-08-21 14:00 - 000014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chgusr.exe
        2017-10-29 11:05 - 2008-08-21 14:00 - 000013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chglogon.exe
        2017-10-29 11:05 - 2008-08-21 14:00 - 000010752 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_iscii.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\change.exe
        2017-10-29 11:05 - 2008-08-21 14:00 - 000009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\authfilt.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_is2022.dll
        2017-10-29 11:05 - 2008-04-14 05:42 - 000018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bdaplgin.ax
        2017-10-29 11:05 - 2008-04-14 05:41 - 000249856 ____C (Comtrol® Corporation) C:\WINDOWS\system32\dllcache\ctmasetp.dll
        2017-10-29 11:05 - 2008-04-14 05:41 - 000121856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camext30.dll
        2017-10-29 11:05 - 2008-04-14 00:16 - 000038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avc.sys
        2017-10-29 11:05 - 2008-04-14 00:16 - 000013696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avcstrm.sys
        2017-10-29 11:05 - 2008-04-14 00:16 - 000011776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bdasup.sys
        2017-10-29 11:05 - 2008-04-14 00:11 - 000008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\changer.sys
        2017-10-29 11:05 - 2008-04-14 00:06 - 000014208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\battc.sys
        2017-10-29 11:05 - 2008-04-14 00:06 - 000013952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cmbatt.sys
        2017-10-29 11:05 - 2008-04-14 00:06 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\compbatt.sys
        2017-10-29 11:05 - 2008-04-13 22:06 - 000048640 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwrwdm.sys
        2017-10-29 11:05 - 2001-08-17 22:37 - 000244224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camext20.ax
        2017-10-29 11:05 - 2001-08-17 22:37 - 000116736 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camext30.ax
        2017-10-29 11:05 - 2001-08-17 22:37 - 000073216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camexo20.ax
        2017-10-29 11:05 - 2001-08-17 22:36 - 000236032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camext20.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000216064 ____C (COMPAQ Inc.) C:\WINDOWS\system32\dllcache\cpscan.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000175104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\csamsp.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000144384 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\avmenum.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000102400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\binlsvc.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000087552 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\avmcoxp.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000081408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\brmfcwia.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000074240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camexo20.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000044032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cnusd.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000041472 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brmfusb.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000032256 ____C (Eicon Technology Corporation) C:\WINDOWS\system32\dllcache\diapi2NT.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000032256 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brmfrsmg.exe
        2017-10-29 11:05 - 2001-08-17 22:36 - 000029696 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brmflpt.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000028672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyycoins.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000027648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyzports.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000027648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyyports.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000027136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyzcoins.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000019456 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brbidiif.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000015360 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brmfbidi.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000012800 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brevif.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000009728 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brserif.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000009728 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brcoinst.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000005120 ____C (Brother Industries,Ltd.) C:\WINDOWS\system32\dllcache\brscnrsm.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000004096 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\ctwdm32.dll
        2017-10-29 11:05 - 2001-08-17 14:56 - 000342336 ____C (3Dfx Interactive, Inc.) C:\WINDOWS\system32\dllcache\banshee.dll
        2017-10-29 11:05 - 2001-08-17 14:56 - 000170880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cl546x.dll
        2017-10-29 11:05 - 2001-08-17 14:56 - 000111232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cl5465.dll
        2017-10-29 11:05 - 2001-08-17 14:56 - 000091264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cirrus.dll
        2017-10-29 11:05 - 2001-08-17 14:05 - 000314752 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camdro21.sys
        2017-10-29 11:05 - 2001-08-17 14:04 - 000223232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camdrv21.sys
        2017-10-29 11:05 - 2001-08-17 14:04 - 000171264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camdrv30.sys
        2017-10-29 11:05 - 2001-08-17 14:02 - 000272640 ____C (RAVISENT Technologies Inc.) C:\WINDOWS\system32\dllcache\cinemclc.sys
        2017-10-29 11:05 - 2001-08-17 14:01 - 000036096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avcaudio.sys
        2017-10-29 11:05 - 2001-08-17 13:57 - 000248064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cl546xm.sys
        2017-10-29 11:05 - 2001-08-17 13:57 - 000045696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cirrus.sys
        2017-10-29 11:05 - 2001-08-17 13:52 - 000179584 ____C (Mylex Corporation) C:\WINDOWS\system32\dllcache\dac2w2k.sys
        2017-10-29 11:05 - 2001-08-17 13:52 - 000014976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cpqarray.sys
        2017-10-29 11:05 - 2001-08-17 13:52 - 000014720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dac960nt.sys
        2017-10-29 11:05 - 2001-08-17 13:52 - 000007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cd20xrnt.sys
        2017-10-29 11:05 - 2001-08-17 13:51 - 000020736 ____C (OMNIKEY AG) C:\WINDOWS\system32\dllcache\cmbp0wdm.sys
        2017-10-29 11:05 - 2001-08-17 13:51 - 000013824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bulltlp3.sys
        2017-10-29 11:05 - 2001-08-17 13:51 - 000006656 ____C (CMD Technology, Inc.) C:\WINDOWS\system32\dllcache\cmdide.sys
        2017-10-29 11:05 - 2001-08-17 13:50 - 000050176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyyport.sys
        2017-10-29 11:05 - 2001-08-17 13:50 - 000049792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyzport.sys
        2017-10-29 11:05 - 2001-08-17 13:50 - 000017152 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyclad-z.sys
        2017-10-29 11:05 - 2001-08-17 13:50 - 000014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyclom-y.sys
        2017-10-29 11:05 - 2001-08-17 13:28 - 000871388 ____C (BCM) C:\WINDOWS\system32\dllcache\bcmdm.sys
        2017-10-29 11:05 - 2001-08-17 13:28 - 000714698 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cbmdmkxx.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000060416 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brserwdm.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000039552 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brparwdm.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000012160 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brfiltlo.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000011008 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brusbmdm.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000010368 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brusbscn.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000003968 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brfiltup.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000003168 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brparimg.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000002944 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brfilt.sys
        2017-10-29 11:05 - 2001-08-17 12:48 - 000036128 ____C (3Dfx Interactive, Inc.) C:\WINDOWS\system32\dllcache\banshee.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000111872 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwcspud.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000096256 ____C (Copyright (C) Creative Technology Ltd. 1994-2001) C:\WINDOWS\system32\dllcache\ctlsb16.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000093952 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwcwdm.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000072832 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwbwdm.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000042112 ____C (Conexant Systems Inc.) C:\WINDOWS\system32\dllcache\crtaud.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000036992 ____C (Aztech Systems Ltd) C:\WINDOWS\system32\dllcache\aztw2320.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000006912 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\ctlfacem.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000003712 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\ctljystk.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000003584 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwcosnt5.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000003072 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwbmidi.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000003072 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwbase.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000980034 ____C (Xircom) C:\WINDOWS\system32\dllcache\cicap.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000164923 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\diapi2.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000089952 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\b1cbase.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000049182 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cem56n5.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000046108 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cben5.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000037568 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\avmwan.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000027164 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\ce3n5.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000022044 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cem33n5.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000022044 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cem28n5.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000021533 ____C (Compaq Computer Corporation) C:\WINDOWS\system32\dllcache\cpqndis5.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000021530 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\ce2n5.sys
        2017-10-29 11:05 - 2001-08-17 12:12 - 000117760 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\d100ib5.sys
        2017-10-29 11:05 - 2001-08-17 12:12 - 000039680 ____C (Silicom Ltd.) C:\WINDOWS\system32\dllcache\cb325.sys
        2017-10-29 11:05 - 2001-08-17 12:12 - 000037916 ____C (Fast Ethernet Controller Provider) C:\WINDOWS\system32\dllcache\cb102.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000096640 ____C (Broadcom Corporation) C:\WINDOWS\system32\dllcache\b57xp32.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000066557 ____C (Broadcom Corporation) C:\WINDOWS\system32\dllcache\bcm42u.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000060970 ____C (Compaq Computer Corp.) C:\WINDOWS\system32\dllcache\cpqtrnd5.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000054271 ____C (Broadcom Corporation) C:\WINDOWS\system32\dllcache\bcm42xx5.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000039936 ____C (Conexant Systems, Inc.) C:\WINDOWS\system32\dllcache\cnxt1803.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000031529 ____C (BreezeCOM) C:\WINDOWS\system32\dllcache\brzwlan.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000026568 ____C (Broadcom Corporation) C:\WINDOWS\system32\dllcache\bcm4e5.sys
        2017-10-29 11:04 - 2008-08-21 14:00 - 000029184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\asptxn.dll
        2017-10-29 11:04 - 2008-08-21 14:00 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aspperf.dll
        2017-10-29 11:04 - 2001-08-17 22:36 - 000045056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_aqadmin.dll
        2017-10-29 11:04 - 2001-08-17 22:36 - 000037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\atievxx.exe
        2017-10-29 11:04 - 2001-08-17 14:56 - 000268160 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atidvai.dll
        2017-10-29 11:04 - 2001-08-17 14:56 - 000137216 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atidrae.dll
        2017-10-29 11:04 - 2001-08-17 14:56 - 000104832 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atiraged.dll
        2017-10-29 11:04 - 2001-08-17 14:55 - 000382592 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atidrab.dll
        2017-10-29 11:04 - 2001-08-17 14:55 - 000096128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ati.dll
        2017-10-29 11:04 - 2001-08-17 13:57 - 000077568 ____C (ATI Technologies, Inc.) C:\WINDOWS\system32\dllcache\ati.sys
        2017-10-29 11:04 - 2001-08-17 13:52 - 000026496 ____C (Advanced System Products, Inc.) C:\WINDOWS\system32\dllcache\asc.sys
        2017-10-29 11:04 - 2001-08-17 13:52 - 000022400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\asc3350p.sys
        2017-10-29 11:04 - 2001-08-17 13:51 - 000014848 ____C (Advanced System Products, Inc.) C:\WINDOWS\system32\dllcache\asc3550.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000075136 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atimpae.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000049920 ____C C:\WINDOWS\system32\dllcache\atirtcap.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000046464 ____C C:\WINDOWS\system32\dllcache\atibt829.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000026880 ____C C:\WINDOWS\system32\dllcache\atirtsnd.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000026624 ____C C:\WINDOWS\system32\dllcache\ativxbar.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000023552 ____C C:\WINDOWS\system32\dllcache\atixbar.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000019456 ____C C:\WINDOWS\system32\dllcache\ativttxx.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000017152 ____C C:\WINDOWS\system32\dllcache\atitvsnd.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000017152 ____C C:\WINDOWS\system32\dllcache\atitunep.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000010240 ____C C:\WINDOWS\system32\dllcache\atipcxxx.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000009472 ____C C:\WINDOWS\system32\dllcache\ativmdcd.sys
        2017-10-29 11:04 - 2001-08-17 12:48 - 000289664 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atimpab.sys
        2017-10-29 11:04 - 2001-08-17 12:48 - 000281600 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atimtai.sys
        2017-10-29 11:04 - 2001-08-17 12:48 - 000070528 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atiragem.sys
        2017-10-29 11:04 - 2001-08-17 12:12 - 000097354 ____C (Bay Networks, Inc.) C:\WINDOWS\system32\dllcache\aspndis3.sys
        2017-10-29 11:03 - 2008-04-13 22:05 - 000036224 ____C (ADMtek Incorporated.) C:\WINDOWS\system32\dllcache\an983.sys
        2017-10-29 11:03 - 2001-08-17 22:37 - 000024576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agcgauge.ax
        2017-10-29 11:03 - 2001-08-17 22:36 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_adsiisex.dll
        2017-10-29 11:03 - 2001-08-17 14:07 - 000056960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aic78xx.sys
        2017-10-29 11:03 - 2001-08-17 14:07 - 000055168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aic78u2.sys
        2017-10-29 11:03 - 2001-08-17 13:52 - 000012800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aha154x.sys
        2017-10-29 11:03 - 2001-08-17 13:52 - 000012032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\amsint.sys
        2017-10-29 11:03 - 2001-08-17 13:51 - 000005248 ____C (Acer Laboratories Inc.) C:\WINDOWS\system32\dllcache\aliide.sys
        2017-10-29 11:03 - 2001-08-17 13:49 - 000026624 ____C (Acer Laboratories Inc.) C:\WINDOWS\system32\dllcache\alifir.sys
        2017-10-29 11:03 - 2001-08-17 13:47 - 000006272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\apmbatt.sys
        2017-10-29 11:03 - 2001-08-17 12:11 - 000027678 ____C (Acer Laboratories Inc.) C:\WINDOWS\system32\dllcache\ali5261.sys
        2017-10-29 11:03 - 2001-08-17 12:11 - 000016969 ____C (AmbiCom, Inc.) C:\WINDOWS\system32\dllcache\amb8002.sys
        2017-10-29 11:02 - 2008-08-21 14:00 - 000169984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisui.dll
        2017-10-29 11:02 - 2008-08-21 14:00 - 000094720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\certmap.ocx
        2017-10-29 11:02 - 2008-08-21 14:00 - 000049664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\adrot.dll
        2017-10-29 11:02 - 2008-08-21 14:00 - 000019968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetsloc.dll
        2017-10-29 11:02 - 2008-08-21 14:00 - 000014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisreset.exe
        2017-10-29 11:02 - 2008-08-21 14:00 - 000007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetmgr.exe
        2017-10-29 11:02 - 2008-08-21 14:00 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wamregps.dll
        2017-10-29 11:02 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpsapi2.dll
        2017-10-29 11:02 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admxprox.dll
        2017-10-29 11:02 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisrstap.dll
        2017-10-29 11:02 - 2008-04-14 00:16 - 000048128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\61883.sys
        2017-10-29 11:02 - 2008-04-14 00:10 - 000012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\4mmdat.sys
        2017-10-29 11:02 - 2008-04-13 22:06 - 000231552 ____C (Acer Laboratories Inc.) C:\WINDOWS\system32\dllcache\ac97ali.sys
        2017-10-29 11:02 - 2008-04-13 22:06 - 000084480 ____C (VIA Technologies, Inc.) C:\WINDOWS\system32\dllcache\ac97via.sys
        2017-10-29 11:02 - 2008-04-13 22:06 - 000010880 ____C (Aureal, Inc.) C:\WINDOWS\system32\dllcache\admjoy.sys
        2017-10-29 11:02 - 2001-08-17 22:36 - 000462848 ____C (Aureal Inc.) C:\WINDOWS\system32\dllcache\a3dapi.dll
        2017-10-29 11:02 - 2001-08-17 22:36 - 000098304 ____C (Aureal Semiconductor) C:\WINDOWS\system32\dllcache\a3d.dll
        2017-10-29 11:02 - 2001-08-17 22:36 - 000061440 ____C (Color Flatbed Scanner) C:\WINDOWS\system32\dllcache\acerscad.dll
        2017-10-29 11:02 - 2001-08-17 14:56 - 000066048 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\s3legacy.dll
        2017-10-29 11:02 - 2001-08-17 14:55 - 000689216 ____C (3dfx Interactive, Inc.) C:\WINDOWS\system32\dllcache\3dfxvs.dll
        2017-10-29 11:02 - 2001-08-17 14:55 - 000038400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\8514a.dll
        2017-10-29 11:02 - 2001-08-17 14:07 - 000101888 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\adpu160m.sys
        2017-10-29 11:02 - 2001-08-17 14:06 - 000011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\1394vdbg.sys
        2017-10-29 11:02 - 2001-08-17 13:53 - 000007424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\adicvls.sys
        2017-10-29 11:02 - 2001-08-17 13:52 - 000023552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\abp480n5.sys
        2017-10-29 11:02 - 2001-08-17 13:28 - 000762780 ____C (3Com, Inc.) C:\WINDOWS\system32\dllcache\3cwmcru.sys
        2017-10-29 11:02 - 2001-08-17 12:48 - 000148352 ____C (3dfx Interactive, Inc.) C:\WINDOWS\system32\dllcache\3dfxvsm.sys
        2017-10-29 11:02 - 2001-08-17 12:20 - 000297728 ____C (Silicon Integrated Systems Corp.) C:\WINDOWS\system32\dllcache\ac97sis.sys
        2017-10-29 11:02 - 2001-08-17 12:20 - 000096256 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\ac97intc.sys
        2017-10-29 11:02 - 2001-08-17 12:19 - 000747392 ____C (Aureal, Inc.) C:\WINDOWS\system32\dllcache\adm8830.sys
        2017-10-29 11:02 - 2001-08-17 12:19 - 000584448 ____C (Aureal, Inc.) C:\WINDOWS\system32\dllcache\adm8810.sys
        2017-10-29 11:02 - 2001-08-17 12:19 - 000553984 ____C (Aureal, Inc.) C:\WINDOWS\system32\dllcache\adm8820.sys
        2017-10-29 11:02 - 2001-08-17 12:11 - 000046112 ____C (Adaptec, Inc ) C:\WINDOWS\system32\dllcache\adptsf50.sys
        2017-10-29 11:02 - 2001-08-17 12:11 - 000020160 ____C (ADMtek Incorporated) C:\WINDOWS\system32\dllcache\adm8511.sys
        2017-10-29 07:07 - 2017-10-29 07:07 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\PCHealth
        2017-10-28 22:44 - 2017-03-09 19:43 - 000081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado28.tlb
        2017-10-28 22:35 - 2017-09-09 05:10 - 011092480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieframe.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 002007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iertutil.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000743424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedvtool.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000630272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeeds.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000522240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsdbgui.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000247808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieproxy.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000233984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsprofilerui.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000055296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeedsbs.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000012800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpshims.dll
        2017-10-28 22:35 - 2013-07-17 02:58 - 000060160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbaudio.sys
        2017-10-28 22:24 - 2012-01-11 21:06 - 000003072 ____C C:\WINDOWS\system32\dllcache\iacenc.dll
        2017-10-28 22:24 - 2012-01-11 21:06 - 000003072 _____ C:\WINDOWS\system32\iacenc.dll
        2017-10-27 18:44 - 2017-10-27 18:44 - 000000337 _____ C:\Documents and Settings\doni\My Documents\po.bat
        2017-10-27 13:44 - 2017-11-06 19:57 - 000042686 _____ C:\WINDOWS\ZAM.krnl.trace
        2017-10-27 13:44 - 2017-11-06 19:57 - 000011343 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
        2017-10-27 13:41 - 2017-10-27 13:41 - 000001561 _____ C:\Documents and Settings\All Users\Start Menu\Programs\Internet Explorer.lnk
        2017-10-27 13:38 - 2017-10-27 14:43 - 000000000 ____D C:\Program Files\Windows Media Connect 2
        2017-10-27 13:38 - 2017-10-27 14:43 - 000000000 ____D C:\Program Files\MSXML 4.0
        2017-10-27 13:37 - 2017-10-27 13:37 - 000000000 ____D C:\WINDOWS\system32\DRM
        2017-10-27 13:35 - 2016-03-09 00:00 - 000026144 _____ (Microsoft Corporation) C:\WINDOWS\system32\spupdsvc.exe
        2017-10-27 13:28 - 2017-09-09 01:37 - 001905024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\win32k.sys
        2017-10-27 13:28 - 2017-09-09 01:37 - 001905024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
        2017-10-27 13:28 - 2017-09-07 21:12 - 000456832 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mrxsmb.sys
        2017-10-27 13:28 - 2017-09-07 21:12 - 000456832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
        2017-10-27 13:28 - 2017-09-07 21:10 - 000359552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srv.sys
        2017-10-27 13:28 - 2017-09-07 21:10 - 000359552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
        2017-10-27 13:28 - 2017-05-28 01:40 - 000091776 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiswan.sys
        2017-10-27 13:28 - 2017-05-28 01:40 - 000091776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndiswan.sys
        2017-10-27 13:28 - 2017-05-24 18:27 - 000993792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kernel32.dll
        2017-10-27 13:28 - 2017-05-24 18:27 - 000993792 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
        2017-10-27 13:28 - 2017-05-24 18:27 - 000720384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntdll.dll
        2017-10-27 13:28 - 2017-05-24 18:27 - 000720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
        2017-10-27 13:28 - 2017-05-24 18:27 - 000563200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oleaut32.dll
        2017-10-27 13:28 - 2017-05-24 18:27 - 000563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
        2017-10-27 13:28 - 2017-04-28 07:32 - 002150400 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
        2017-10-27 13:28 - 2017-04-28 07:32 - 002150400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
        2017-10-27 13:28 - 2017-04-28 06:18 - 002029056 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntkrnlpa.exe
        2017-10-27 13:28 - 2017-04-28 06:18 - 002029056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrpamp.exe
        2017-10-27 13:28 - 2016-11-09 16:11 - 004470272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msi.dll
        2017-10-27 13:28 - 2016-11-09 16:11 - 004470272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
        2017-10-27 13:28 - 2016-11-09 16:11 - 000332800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msihnd.dll
        2017-10-27 13:28 - 2016-11-09 16:11 - 000332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
        2017-10-27 13:28 - 2016-10-12 06:55 - 000730624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lsasrv.dll
        2017-10-27 13:28 - 2016-10-12 06:55 - 000730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
        2017-10-27 13:28 - 2016-10-12 06:55 - 000137216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msv1_0.dll
        2017-10-27 13:28 - 2016-10-12 06:55 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
        2017-10-27 13:28 - 2016-09-08 23:04 - 000106112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mup.sys
        2017-10-27 13:28 - 2016-09-08 23:04 - 000106112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mup.sys
        2017-10-27 13:28 - 2016-09-08 21:34 - 000180096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mrxdav.sys
        2017-10-27 13:28 - 2016-09-08 21:34 - 000180096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
        2017-10-27 13:28 - 2016-06-14 17:47 - 000346112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\localspl.dll
        2017-10-27 13:28 - 2016-06-14 17:47 - 000346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
        2017-10-27 13:28 - 2016-05-11 16:54 - 000093056 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
        2017-10-27 13:28 - 2016-05-11 16:54 - 000093056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ksecdd.sys
        2017-10-27 13:28 - 2015-12-17 20:58 - 000618496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\advapi32.dll
        2017-10-27 13:28 - 2015-12-17 20:58 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
        2017-10-27 13:28 - 2015-10-13 17:58 - 000361600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tcpip.sys
        2017-10-27 13:28 - 2015-10-13 17:58 - 000361600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
        2017-10-27 13:28 - 2015-10-13 17:28 - 000226880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tcpip6.sys
        2017-10-27 13:28 - 2015-10-13 17:28 - 000226880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip6.sys
        2017-10-27 13:28 - 2015-09-24 01:52 - 000154112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\schannel.dll
        2017-10-27 13:28 - 2015-09-24 01:52 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
        2017-10-27 13:28 - 2015-06-25 05:11 - 000096256 ____C (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
        2017-10-27 13:28 - 2015-06-25 05:11 - 000096256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msiexec.exe
        2017-10-27 13:28 - 2014-09-02 22:56 - 000143744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fastfat.sys
        2017-10-27 13:28 - 2014-09-02 22:56 - 000143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
        2017-10-27 13:28 - 2014-05-29 02:46 - 000138496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\afd.sys
        2017-10-27 13:28 - 2014-05-29 02:46 - 000138496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
        2017-10-27 13:28 - 2013-11-27 22:21 - 000040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndproxy.sys
        2017-10-27 13:28 - 2013-11-27 22:21 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
        2017-10-27 13:28 - 2013-11-13 04:59 - 000150528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imagehlp.dll
        2017-10-27 13:28 - 2013-11-13 04:59 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
        2017-10-27 13:28 - 2013-08-09 02:55 - 000144128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys
        2017-10-27 13:28 - 2013-08-09 02:55 - 000144128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
        2017-10-27 13:28 - 2013-08-09 02:55 - 000032384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbccgp.sys
        2017-10-27 13:28 - 2013-08-09 02:55 - 000032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
        2017-10-27 13:28 - 2013-08-09 02:55 - 000005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys
        2017-10-27 13:28 - 2013-08-09 02:55 - 000005376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
        2017-10-27 13:28 - 2013-07-17 02:58 - 000123008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys
        2017-10-27 13:28 - 2013-07-17 02:58 - 000123008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
        2017-10-27 13:28 - 2013-07-03 04:12 - 000025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidparse.sys
        2017-10-27 13:28 - 2013-07-03 04:12 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
        2017-10-27 13:28 - 2013-07-03 03:59 - 000014976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys
        2017-10-27 13:28 - 2013-07-03 03:59 - 000014976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbscan.sys
        2017-10-27 13:28 - 2013-02-12 02:32 - 000012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usb8023x.sys
        2017-10-27 13:28 - 2013-02-12 02:32 - 000012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usb8023.sys
        2017-10-27 13:28 - 2013-02-12 02:32 - 000012928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023x.sys
        2017-10-27 13:28 - 2013-02-12 02:32 - 000012928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
        2017-10-27 13:28 - 2012-07-04 16:05 - 000139784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpwd.sys
        2017-10-27 13:28 - 2012-07-04 16:05 - 000139784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpwd.sys
        2017-10-27 13:28 - 2011-10-28 07:31 - 000033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\csrsrv.dll
        2017-10-27 13:28 - 2011-10-28 07:31 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
        2017-10-27 13:28 - 2011-07-08 16:02 - 000010496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndistapi.sys
        2017-10-27 13:28 - 2011-07-08 16:02 - 000010496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
        2017-10-27 13:28 - 2010-08-27 07:57 - 000099840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srvsvc.dll
        2017-10-27 13:28 - 2010-08-27 07:57 - 000099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
        2017-10-27 13:28 - 2009-10-20 18:20 - 000265728 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
        2017-10-27 13:28 - 2009-10-20 18:20 - 000265728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\http.sys
        2017-10-27 13:28 - 2009-06-10 08:14 - 000132096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wkssvc.dll
        2017-10-27 13:28 - 2009-06-10 08:14 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
        2017-10-27 13:28 - 2009-03-18 13:02 - 000030336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys
        2017-10-27 13:28 - 2009-03-18 13:02 - 000030336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
        2017-10-27 13:28 - 2009-02-06 13:11 - 000110592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\services.exe
        2017-10-27 13:28 - 2009-02-06 13:11 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
        2017-10-27 13:28 - 2008-06-13 13:05 - 000272128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bthport.sys
        2017-10-27 13:28 - 2008-06-13 13:05 - 000272128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
        2017-10-27 13:28 - 2008-05-08 16:02 - 000203136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rmcast.sys
        2017-10-27 13:28 - 2008-05-08 16:02 - 000203136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
        2017-10-27 13:28 - 2008-04-14 05:45 - 000009424 ____C C:\WINDOWS\system32\dllcache\drvmain.sdb
        2017-10-27 13:28 - 2008-04-14 05:43 - 000021896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdtcp.sys
        2017-10-27 13:28 - 2008-04-14 05:43 - 000021896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdtcp.sys
        2017-10-27 13:28 - 2008-04-14 05:42 - 000409088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qmgr.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000300544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sysdm.cpl
        2017-10-27 13:28 - 2008-04-14 05:42 - 000300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysdm.cpl
        2017-10-27 13:28 - 2008-04-14 05:42 - 000275456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ulib.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ulib.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000237056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rasapi32.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000102400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\win32spl.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000091136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntprint.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\format.com
        2017-10-27 13:28 - 2008-04-14 05:42 - 000015360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msgrocm.dll
        2017-10-27 13:28 - 2008-04-14 05:41 - 000126976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dhcpcsvc.dll
        2017-10-27 13:28 - 2008-04-14 05:41 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
        2017-10-27 13:28 - 2008-04-14 04:42 - 000985088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\setupapi.dll
        2017-10-27 13:28 - 2008-04-14 04:42 - 000985088 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
        2017-10-27 13:28 - 2008-04-14 04:41 - 000081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieencode.dll
        2017-10-27 13:28 - 2008-04-14 04:41 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieencode.dll
        2017-10-27 13:28 - 2008-04-14 00:58 - 000175744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdbss.sys
        2017-10-27 13:28 - 2008-04-14 00:58 - 000175744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
        2017-10-27 13:28 - 2008-04-14 00:50 - 000182656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndis.sys
        2017-10-27 13:28 - 2008-04-14 00:50 - 000182656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
        2017-10-27 13:28 - 2008-04-14 00:49 - 000146048 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\portcls.sys
        2017-10-27 13:28 - 2008-04-14 00:49 - 000146048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
        2017-10-27 13:28 - 2008-04-14 00:45 - 000574976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntfs.sys
        2017-10-27 13:28 - 2008-04-14 00:45 - 000574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
        2017-10-27 13:28 - 2008-04-14 00:27 - 000041472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\raspppoe.sys
        2017-10-27 13:28 - 2008-04-14 00:27 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\raspppoe.sys
        2017-10-27 13:28 - 2008-04-14 00:26 - 000069120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\psched.sys
        2017-10-27 13:28 - 2008-04-14 00:26 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\psched.sys
        2017-10-27 13:28 - 2008-04-14 00:26 - 000030592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rndismp.sys
        2017-10-27 13:28 - 2008-04-14 00:26 - 000030592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rndismp.sys
        2017-10-27 13:28 - 2008-04-14 00:16 - 000061696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ohci1394.sys
        2017-10-27 13:28 - 2008-04-14 00:16 - 000061696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ohci1394.sys
        2017-10-27 13:28 - 2008-04-14 00:16 - 000053376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\1394bus.sys
        2017-10-27 13:28 - 2008-04-14 00:16 - 000053376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\1394bus.sys
        2017-10-27 13:28 - 2008-04-14 00:15 - 000017152 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbohci.sys
        2017-10-27 13:28 - 2008-04-14 00:15 - 000017152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbohci.sys
        2017-10-27 13:28 - 2008-04-14 00:14 - 000081664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\videoprt.sys
        2017-10-27 13:28 - 2008-04-14 00:14 - 000081664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\videoprt.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000096384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scsiport.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000096384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scsiport.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000062976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cdrom.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdrom.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000036352 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\disk.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\disk.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000011904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sffdisk.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000011904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sffdisk.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000011008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sffp_sd.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000011008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sffp_sd.sys
        2017-10-27 13:28 - 2008-04-14 00:09 - 000042368 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mountmgr.sys
        2017-10-27 13:28 - 2008-04-14 00:09 - 000042368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
        2017-10-27 13:28 - 2008-04-14 00:06 - 000079232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sdbus.sys
        2017-10-27 13:28 - 2008-04-14 00:06 - 000079232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
        2017-10-27 13:28 - 2008-04-14 00:02 - 000196224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpdr.sys
        2017-10-27 13:28 - 2008-04-14 00:02 - 000196224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
        2017-10-27 13:28 - 2008-04-14 00:01 - 000134400 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
        2017-10-27 13:28 - 2008-04-13 23:26 - 000030592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rndismpx.sys
        2017-10-27 13:28 - 2008-04-13 23:26 - 000030592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rndismpx.sys
        2017-10-27 13:28 - 2006-09-28 19:00 - 000082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wudfrd.sys
        2017-10-27 13:28 - 2006-09-28 18:55 - 000077568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wudfpf.sys
        2017-10-27 13:28 - 2001-08-23 13:00 - 000070656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ifsutil.dll
        2017-10-27 13:28 - 2001-08-23 13:00 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifsutil.dll
        2017-10-27 13:28 - 2001-08-23 13:00 - 000016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fmifs.dll
        2017-10-27 13:28 - 2001-08-23 13:00 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\fmifs.dll
        2017-10-27 13:28 - 2001-08-23 13:00 - 000007936 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fs_rec.sys
        2017-10-27 13:28 - 2001-08-23 13:00 - 000007936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fs_rec.sys
        2017-10-27 13:25 - 2016-03-09 00:00 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\kblChecker.dll
        2017-10-27 13:20 - 2017-10-27 13:43 - 000000000 ____D C:\3986d7fc9f49b457ca22
        2017-10-26 15:59 - 2017-10-26 15:59 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\GHISLER
        2017-10-25 22:47 - 2017-10-27 14:21 - 000000000 ____D C:\Program Files\Kerish Doctor
        2017-10-25 22:47 - 2017-10-25 22:48 - 000001629 _____ C:\Documents and Settings\All Users\Desktop\Kerish Doctor 2017.lnk
        2017-10-25 22:47 - 2017-10-25 22:47 - 000011936 _____ (Highresolution Enterprises [www.highrez.co.uk]) C:\WINDOWS\system32\Drivers\inpout32.sys
        2017-10-25 22:47 - 2017-10-25 22:47 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Kerish Doctor
        2017-10-25 22:47 - 2011-01-20 00:07 - 000098304 _____ (Highresolution Enterprises) C:\WINDOWS\system32\inpout32.dll
        2017-10-24 13:04 - 2017-10-24 13:04 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Kerish Products
        2017-10-24 13:04 - 2016-08-09 09:35 - 000059880 _____ (Kerish Products) C:\WINDOWS\system32\GPUTemp.dll
        2017-10-24 12:26 - 2017-10-24 12:26 - 000001517 _____ C:\WINDOWS\system32\rrr.lnk
        2017-10-24 08:47 - 2017-10-24 08:47 - 000000998 _____ C:\Documents and Settings\doni\Desktop\RegOrganizerPortable.exe.lnk
        2017-10-23 09:05 - 2017-10-23 09:43 - 000000000 ____D C:\AdwCleaner
        2017-10-23 08:19 - 2017-10-23 08:19 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\OO Software
        2017-10-22 21:21 - 2017-10-22 23:35 - 000000000 ____D C:\Documents and Settings\doni\Application Data\Wise Folder Hider
        2017-10-22 15:53 - 2017-10-22 15:53 - 000000000 ____D C:\Documents and Settings\Administrator\Local Settings\Application Data\Mozilla
        2017-10-22 15:53 - 2017-10-22 15:53 - 000000000 ____D C:\Documents and Settings\Administrator\Application Data\Mozilla
        2017-10-22 15:43 - 2017-10-22 15:43 - 000000000 ____D C:\Documents and Settings\Administrator\Local Settings\Application Data\Zemana
        2017-10-22 15:40 - 2017-10-22 17:37 - 000000000 ____D C:\Documents and Settings\Administrator\Local Settings\Temp
        2017-10-22 15:40 - 2017-10-22 15:56 - 000000178 ___SH C:\Documents and Settings\Administrator\ntuser.ini
        2017-10-22 15:40 - 2017-10-22 15:43 - 000000767 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\Internet Explorer.lnk
        2017-10-22 15:40 - 2017-10-22 15:43 - 000000738 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\Outlook Express.lnk
        2017-10-22 15:40 - 2017-10-22 15:40 - 000000792 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\Windows Media Player.lnk
        2017-10-22 15:40 - 2017-10-22 15:40 - 000000000 __SHD C:\Documents and Settings\Administrator\IETldCache
        2017-10-22 15:40 - 2017-10-22 15:40 - 000000000 ____D C:\Documents and Settings\Administrator
        2017-10-22 15:40 - 2010-03-11 04:41 - 000001599 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\Remote Assistance.lnk
        2017-10-20 08:07 - 2017-10-20 08:07 - 000000000 ____D C:\Documents and Settings\NetworkService\Local Settings\Application Data\Zemana
        2017-10-20 08:07 - 2017-10-20 08:07 - 000000000 ____D C:\Documents and Settings\NetworkService\Application Data\Genie9
        2017-10-19 17:18 - 2017-10-19 17:18 - 000000000 __SHD C:\WINDOWS\CSC
        2017-10-19 11:47 - 2017-10-19 11:47 - 000000000 ____D C:\Program Files\Malwarebytes
        2017-10-19 09:35 - 2017-10-19 14:07 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Malwarebytes
        2017-10-19 09:25 - 2017-10-29 23:03 - 000341032 _____ C:\WINDOWS\system32\FNTCACHE.DAT
        2017-10-14 09:02 - 2017-10-14 09:02 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Auslogics
        2017-10-11 07:48 - 2017-10-11 07:48 - 000000000 ____D C:\Documents and Settings\LocalService\Application Data\Macromedia
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-11-06 19:58 - 2017-01-11 22:56 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Temp
        2017-11-06 19:48 - 2017-07-16 21:46 - 000000830 ____C C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
        2017-11-06 19:29 - 2010-05-06 20:27 - 000000986 ____C C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
        2017-11-06 19:28 - 2010-03-11 06:28 - 001111284 ____C C:\WINDOWS\system32\PerfStringBackup.INI
        2017-11-06 19:24 - 2012-09-14 20:40 - 000000982 ____C C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cd92a860a26e52.job
        2017-11-06 19:24 - 2010-03-11 04:43 - 000000006 ___HC C:\WINDOWS\Tasks\SA.DAT
        2017-11-06 07:40 - 2010-03-11 04:44 - 000000278 __SHC C:\Documents and Settings\doni\ntuser.ini
        2017-11-06 07:24 - 2014-02-08 17:19 - 000001098 ____C C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-18UA.job
        2017-11-05 22:39 - 2017-05-26 20:34 - 000000000 ____D C:\Documents and Settings\doni\Application Data\vlc
        2017-11-05 20:04 - 2017-07-19 11:48 - 000000600 ____C C:\Documents and Settings\doni\PUTTY.RND
        2017-11-05 17:24 - 2014-02-08 17:19 - 000001046 ____C C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-18Core.job
        2017-11-03 22:34 - 2010-12-14 22:26 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\TEMP
        2017-11-03 20:07 - 2016-04-09 10:34 - 000000000 ____D C:\Documents and Settings\doni\My Documents\Изтегляния
        2017-11-03 19:38 - 2016-11-24 19:40 - 000000000 ____D C:\Program Files\stinger
        2017-11-02 12:16 - 2010-03-28 20:57 - 000000000 ____D C:\Documents and Settings\doni\Application Data\dvdcss
        2017-11-02 11:46 - 2010-04-18 13:54 - 000000202 ____C C:\WINDOWS\NeroDigital.ini
        2017-11-02 09:39 - 2017-01-26 11:17 - 000000000 ____D C:\Program Files\IrfanView
        2017-11-02 09:39 - 2015-06-17 09:43 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Unchecky
        2017-11-02 08:56 - 2010-03-17 18:26 - 000000000 ____D C:\Documents and Settings\doni\Application Data\uTorrent
        2017-11-01 19:41 - 2010-03-11 04:44 - 000000000 ____D C:\Documents and Settings\doni
        2017-11-01 19:06 - 2017-04-20 19:00 - 000000000 ____D C:\Documents and Settings\doni\Application Data\XnConvert
        2017-11-01 18:39 - 2011-11-09 13:30 - 000000000 ____D C:\Documents and Settings\doni\Application Data\Auslogics
        2017-11-01 18:39 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\system32\inetsrv
        2017-11-01 14:01 - 2016-08-10 14:24 - 000000000 ____D C:\Documents and Settings\doni\My Documents\Загрузки
        2017-11-01 14:00 - 2017-03-29 19:47 - 000000000 ____D C:\Documents and Settings\doni\My Documents\Files
        2017-11-01 12:15 - 2010-03-11 06:21 - 000000000 RSHDC C:\WINDOWS\system32\dllcache
        2017-11-01 11:41 - 2010-03-11 04:51 - 000065536 _____ C:\WINDOWS\system32\config\ACEEvent.evt
        2017-10-30 21:48 - 2010-03-11 04:44 - 000000792 _____ C:\Documents and Settings\doni\Start Menu\Programs\Windows Media Player.lnk
        2017-10-30 21:47 - 2001-08-23 13:00 - 000002206 ____C C:\WINDOWS\system32\wpa.dbl
        2017-10-30 21:46 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\security
        2017-10-30 21:33 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\system32\oobe
        2017-10-30 21:33 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\inf
        2017-10-30 21:33 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\Help
        2017-10-30 21:33 - 2010-03-11 04:41 - 000001563 _____ C:\Documents and Settings\All Users\Start Menu\Set Program Access and Defaults.lnk
        2017-10-30 21:33 - 2010-03-11 04:37 - 000000000 ____D C:\Program Files\Messenger
        2017-10-30 17:43 - 2010-03-17 22:12 - 000041472 ____C C:\Documents and Settings\doni\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
        2017-10-29 23:50 - 2017-09-17 08:39 - 000100288 _____ C:\WINDOWS\system32\GDIPFONTCACHEV1.DAT
        2017-10-29 22:58 - 2010-03-11 04:41 - 000023392 _____ C:\WINDOWS\system32\nscompat.tlb
        2017-10-29 22:58 - 2010-03-11 04:41 - 000016832 _____ C:\WINDOWS\system32\amcompat.tlb
        2017-10-29 22:30 - 2010-03-11 06:24 - 000000195 __RSH C:\boot.ini
        2017-10-29 10:31 - 2010-03-11 04:38 - 000000000 ____D C:\Program Files\Outlook Express
        2017-10-29 09:10 - 2011-10-17 10:07 - 000000000 ____D C:\WINDOWS\$hf_mig$
        2017-10-29 07:41 - 2017-03-29 20:00 - 000000000 ____D C:\WINDOWS\system32\XPSViewer
        2017-10-28 23:36 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\pchealth
        2017-10-28 20:42 - 2010-03-11 04:43 - 000000178 __SHC C:\Documents and Settings\NetworkService\ntuser.ini
        2017-10-28 19:19 - 2010-03-11 04:51 - 000000000 ____D C:\Program Files\Realtek
        2017-10-28 19:18 - 2010-03-11 04:47 - 000000000 ___HD C:\Program Files\InstallShield Installation Information
        2017-10-27 20:33 - 2001-08-23 13:00 - 000000895 ____C C:\WINDOWS\win.ini
        2017-10-27 20:33 - 2001-08-23 13:00 - 000000246 ____C C:\WINDOWS\system.ini
        2017-10-27 14:54 - 2010-03-11 04:44 - 000000803 ____C C:\Documents and Settings\doni\Start Menu\Programs\Internet Explorer.lnk
        2017-10-27 14:45 - 2010-03-11 13:48 - 000000000 ____D C:\WINDOWS\system32\scripting
        2017-10-27 14:45 - 2010-03-11 13:48 - 000000000 ____D C:\WINDOWS\system32\bits
        2017-10-27 14:45 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\system32\Setup
        2017-10-27 14:44 - 2010-03-11 04:39 - 000000000 ____D C:\Program Files\Movie Maker
        2017-10-27 14:41 - 2010-03-22 10:24 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\ApplicationHistory
        2017-10-27 14:41 - 2010-03-11 04:38 - 000000000 ____D C:\WINDOWS\Registration
        2017-10-27 14:35 - 2015-06-23 10:51 - 000000788 _____ C:\Documents and Settings\LocalService\Start Menu\Programs\Windows Media Player.lnk
        2017-10-27 14:15 - 2016-11-17 22:00 - 000000000 ____D C:\Program Files\Hard Disk Sentinel
        2017-10-26 21:14 - 2017-05-02 19:20 - 000000000 ____D C:\Program Files\BackgammonMasters
        2017-10-25 21:34 - 2017-09-21 07:52 - 000000682 _____ C:\Documents and Settings\doni\Desktop\CCleaner.lnk
        2017-10-25 20:48 - 2017-07-16 21:46 - 000803328 ____C (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
        2017-10-25 20:48 - 2017-07-16 21:46 - 000144896 ____C (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
        2017-10-25 20:48 - 2010-03-11 04:39 - 000000000 ____D C:\WINDOWS\system32\Macromed
        2017-10-24 10:02 - 2010-03-22 10:15 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\HP
        2017-10-23 11:16 - 2012-04-15 20:32 - 000000000 ____D C:\Documents and Settings\doni\.rainlendar2
        2017-10-23 11:16 - 2010-03-17 21:49 - 000000000 ____D C:\Documents and Settings\doni\Application Data\Skype
        2017-10-22 21:48 - 2016-11-28 13:46 - 000000000 ____D C:\Documents and Settings\doni\My Documents\OziBox
        2017-10-22 21:21 - 2017-06-26 10:25 - 000001700 __SHC C:\WINDOWS\wisefs.dat
        2017-10-22 19:22 - 2010-03-11 06:25 - 000000000 ____D C:\Documents and Settings\All Users
        2017-10-22 17:49 - 2016-12-03 10:26 - 000000000 ____D C:\Program Files\Jotta
        2017-10-22 15:40 - 2010-03-11 06:25 - 000000000 ____D C:\Documents and Settings
        2017-10-22 13:31 - 2010-03-11 06:28 - 000001789 ____C C:\WINDOWS\system32\AUTOEXEC.NT
        2017-10-22 08:56 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\Resources
        2017-10-20 06:50 - 2016-10-20 12:19 - 000000000 ____D C:\Program Files\Pale Moon
        2017-10-19 09:14 - 2010-06-13 12:15 - 000000000 __SHD C:\Documents and Settings\doni\PrivacIE
        2017-10-19 09:11 - 2017-07-04 10:38 - 000000000 ____D C:\Documents and Settings\doni\Application Data\ZHP
        2017-10-19 09:11 - 2010-03-28 19:51 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\Google
        2017-10-14 08:41 - 2017-05-02 18:26 - 000000000 ____D C:\Program Files\Goodgammon
        2017-10-14 08:41 - 2017-01-21 17:51 - 000000000 ____D C:\Program Files\Slimjet
        2017-10-14 08:41 - 2010-12-04 14:43 - 000000000 ____D C:\Program Files\Your Uninstaller 2010
        2017-10-14 08:21 - 2017-09-21 19:55 - 000000000 ____D C:\Program Files\Common Files\IObit
        2017-10-14 08:21 - 2017-09-21 19:54 - 000000000 ____D C:\Documents and Settings\doni\Application Data\IObit
        2017-10-09 11:28 - 2016-11-29 22:28 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Ozibox Synchronization Application
        ==================== Files in the root of some directories =======
        2010-04-06 23:40 - 2010-04-06 23:40 - 000007176 ____C () C:\Documents and Settings\doni\Application Data\pcouffin.cat
        2010-04-06 23:40 - 2010-04-06 23:40 - 000001144 ____C () C:\Documents and Settings\doni\Application Data\pcouffin.inf
        2010-04-06 23:40 - 2010-04-06 23:40 - 000000034 ____C () C:\Documents and Settings\doni\Application Data\pcouffin.log
        2010-04-06 23:40 - 2010-04-06 23:40 - 000047360 ____C (VSO Software) C:\Documents and Settings\doni\Application Data\pcouffin.sys
        2010-03-17 22:12 - 2017-10-30 17:43 - 000041472 ____C () C:\Documents and Settings\doni\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
        2010-03-22 10:24 - 2010-03-22 10:24 - 000000127 ____C () C:\Documents and Settings\doni\Local Settings\Application Data\fusioncache.dat
        2017-01-24 13:38 - 2016-11-23 15:37 - 000000570 ____C () C:\Documents and Settings\doni\Local Settings\Application Data\TroubleshooterConfig.json
        2012-03-06 10:56 - 2017-05-28 22:02 - 000000043 __SHC () C:\Documents and Settings\All Users\Application Data\.zreglib
        2016-10-05 16:19 - 2016-10-05 16:19 - 000000232 ____C () C:\Documents and Settings\All Users\Application Data\fontcacheev1.dat
        Files to move or delete:
        ====================
        C:\Documents and Settings\doni\TempWmicBatchFile.bat

        Some zero byte size files/folders:
        ==========================
        C:\Windows\mansk.dll
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\WINDOWS\explorer.exe => File is digitally signed
        C:\WINDOWS\system32\winlogon.exe => File is digitally signed
        C:\WINDOWS\system32\svchost.exe => File is digitally signed
        C:\WINDOWS\system32\services.exe => File is digitally signed
        C:\WINDOWS\system32\User32.dll => File is digitally signed
        C:\WINDOWS\system32\userinit.exe => File is digitally signed
        C:\WINDOWS\system32\rpcss.dll => File is digitally signed
        C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
        C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
        C:\WINDOWS\system32\drivers\sptd.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
        ==================== End of FRST.txt ============================
        Addition.txt
      • от SIMO70
        Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 18-11-2017
        Ran by симо7 (administrator) on СИМО (18-11-2017 18:05:13)
        Running from C:\Users\симо7\Desktop
        Loaded Profiles: симо7 (Available Profiles: симо7)
        Platform: Windows 8.1 Pro (Update) (X64) Language: Български (България)
        Internet Explorer Version 11 (Default browser: FF)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
        (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
        (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
        (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
        (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
        (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
        (@ByELDI) C:\Program Files\KMSpico\Service_KMS.exe
        (AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
        (Microsoft Corporation) C:\Windows\System32\dllhost.exe
        (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
        (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
        (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
        (Intel Corporation) C:\Windows\System32\igfxtray.exe
        (Intel Corporation) C:\Windows\System32\hkcmd.exe
        (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
        (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
        (BitTorrent Inc.) C:\Users\симо7\AppData\Roaming\uTorrent\uTorrent.exe
        (BitTorrent Inc.) C:\Users\симо7\AppData\Roaming\uTorrent\updates\3.4.9_43388\utorrentie.exe
        (BitTorrent Inc.) C:\Users\симо7\AppData\Roaming\uTorrent\updates\3.4.9_43388\utorrentie.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Microsoft Corporation) C:\Windows\System32\dllhost.exe
        (Innovative Digital Technologies) C:\Users\симо7\AppData\Roaming\ACEStream\player\ace_player.exe
        (Innovative Digital Technologies) C:\Users\симо7\AppData\Roaming\ACEStream\engine\ace_engine.exe
        (Innovative Digital Technologies) C:\Users\симо7\AppData\Roaming\ACEStream\engine\ace_engine.exe
        () C:\Users\симо7\AppData\Roaming\ACEStream\updater\ace_update.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        ==================== Registry (Whitelisted) ===========================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [253344 2017-11-10] (AVAST Software)
        HKLM-x32\...\Run: [PowerDVD17Agent] => C:\Program Files (x86)\CyberLink\PowerDVD17\PowerDVD17Agent.exe [526376 2017-02-18] (CyberLink Corp.)
        Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
        HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\Run: [uTorrent] => C:\Users\симо7\AppData\Roaming\uTorrent\uTorrent.exe [2405056 2017-03-18] (BitTorrent Inc.)
        HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
        HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
        HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\MountPoints2: {2f40cbec-ac01-11e7-82a5-2cd4449354ae} - "H:\HiSuiteDownLoader.exe"
        HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\MountPoints2: {a28ae7af-ab96-11e7-82a5-2cd4449354ae} - "H:\HiSuiteDownLoader.exe"
        AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [171896 2017-10-27] (NVIDIA Corporation)
        AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [149552 2017-10-27] (NVIDIA Corporation)
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Hosts: 127.0.0.1       cap.cyberlink.com
        Tcpip\Parameters: [DhcpNameServer] 172.16.1.1
        Tcpip\..\Interfaces\{7D160F40-690F-4016-ADAE-E09D926443B7}: [DhcpNameServer] 172.16.1.1
        Internet Explorer:
        ==================
        HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
        HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
        HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
        HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
        HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
        HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
        HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
        HKU\S-1-5-21-976013588-1774182616-1790962854-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        SearchScopes: HKU\S-1-5-21-976013588-1774182616-1790962854-1001 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={6635F779-B341-4CBB-990E-8F4791163F39}&mid=bac4c002c20547cfa1cbfd9d0277bd5d-a68b7eea2a876e0ede82853fb0728bad9cd94760&lang=en&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-12-28 06:22:29&v=4.3.6.255&pid=wtu&sg=&sap=dsp&q={searchTerms}
        SearchScopes: HKU\S-1-5-21-976013588-1774182616-1790962854-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={6635F779-B341-4CBB-990E-8F4791163F39}&mid=bac4c002c20547cfa1cbfd9d0277bd5d-a68b7eea2a876e0ede82853fb0728bad9cd94760&lang=en&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-12-28 06:22:29&v=4.3.6.255&pid=wtu&sg=&sap=dsp&q={searchTerms}
        BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-11-10] (AVAST Software)
        BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2016-07-12] (Microsoft Corporation)
        BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-11-10] (AVAST Software)
        Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
        FireFox:
        ========
        FF DefaultProfile: r1btu8zo.default
        FF ProfilePath: C:\Users\симо7\AppData\Roaming\Mozilla\Firefox\Profiles\r1btu8zo.default [2017-11-18]
        FF Homepage: Mozilla\Firefox\Profiles\r1btu8zo.default -> https://www.google.bg/?gws_rd=ssl
        FF Extension: (FEBE) - C:\Users\симо7\AppData\Roaming\Mozilla\Firefox\Profiles\r1btu8zo.default\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2017-11-14] [Lagacy]
        FF Extension: (Adblock Plus) - C:\Users\симо7\AppData\Roaming\Mozilla\Firefox\Profiles\r1btu8zo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-11-14]
        FF HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\симо7\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi => not found
        FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-18] ()
        FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
        FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
        FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-18] ()
        FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [No File]
        FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
        FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
        FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-10-27] (NVIDIA Corporation)
        FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-10-27] (NVIDIA Corporation)
        FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
        FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
        FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
        FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
        FF Plugin HKU\S-1-5-21-976013588-1774182616-1790962854-1001: @acestream.net/acestreamplugin,version=3.1.16 -> C:\Users\симо7\AppData\Roaming\ACEStream\player\npace_plugin.dll [2017-01-31] (Innovative Digital Technologies)
        FF Plugin HKU\S-1-5-21-976013588-1774182616-1790962854-1001: @acestream.net/acestreamplugin,version=3.1.2 -> C:\Users\симо7\AppData\Roaming\ACEStream\player\npace_plugin.dll [2017-01-31] (Innovative Digital Technologies)
        FF Plugin HKU\S-1-5-21-976013588-1774182616-1790962854-1001: @acestream.net/acestreamplugin,version=3.1.7 -> C:\Users\симо7\AppData\Roaming\ACEStream\player\npace_plugin.dll [2017-01-31] (Innovative Digital Technologies)
        Chrome:
        =======
        CHR DefaultProfile: Default
        CHR HomePage: Default -> mysearch.avg.com/?rvt=1
        CHR StartupUrls: Default -> "hxxp://www.google.bg/"
        CHR Profile: C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default [2017-11-18]
        CHR Extension: (Презентации) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]
        CHR Extension: (Документи) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
        CHR Extension: (Google Диск) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-08-08]
        CHR Extension: (YouTube) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-08-08]
        CHR Extension: (Adblock Plus) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-09-26]
        CHR Extension: (Avast SafePrice) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-10-17]
        CHR Extension: (Таблици) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]
        CHR Extension: (Google Документи офлайн) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-08-08]
        CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
        CHR Extension: (Gmail) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-08-08]
        CHR Extension: (Chrome Media Router) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-11-15]
        CHR Extension: (Dealicious (Verified)) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pplphlbogdadpkmdhbjdebhfhjifbfka [2017-09-29]
        CHR Profile: C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-07-20]
        CHR Profile: C:\Users\симо7\AppData\Local\Google\Chrome\User Data\System Profile [2017-09-27]
        CHR HKU\S-1-5-21-976013588-1774182616-1790962854-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn] - hxxps://clients2.google.com/service/update2/crx
        CHR HKU\S-1-5-21-976013588-1774182616-1790962854-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx
        CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
        CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7549928 2017-11-10] (AVAST Software)
        R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [281416 2017-11-10] (AVAST Software)
        R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [332368 2017-11-10] (AVAST Software)
        R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
        R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518264 2017-10-11] (NVIDIA Corporation)
        S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518264 2017-10-11] (NVIDIA Corporation)
        R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-10-27] (NVIDIA Corporation)
        R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [460920 2017-10-11] (NVIDIA Corporation)
        R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [734400 2015-08-13] (@ByELDI) [File not signed]
        S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
        S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [183584 2017-11-10] (AVAST Software)
        R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [321032 2017-11-10] (AVAST Software s.r.o.)
        R0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [198968 2017-11-10] (AVAST Software s.r.o.)
        R0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [343288 2017-11-10] (AVAST Software s.r.o.)
        R0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [57728 2017-11-10] (AVAST Software s.r.o.)
        S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [47008 2017-11-10] (AVAST Software)
        R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [41832 2017-09-01] (AVAST Software)
        R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [148288 2017-11-10] (AVAST Software)
        R1 aswNetSec; C:\Windows\System32\drivers\aswNetSec.sys [570152 2017-11-10] (AVAST Software)
        R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [110376 2017-11-10] (AVAST Software)
        R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [84416 2017-11-10] (AVAST Software)
        R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1026232 2017-11-10] (AVAST Software)
        R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [455376 2017-11-15] (AVAST Software)
        R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [203976 2017-11-10] (AVAST Software)
        S3 aswTap; C:\Windows\system32\DRIVERS\aswTap.sys [53904 2017-06-25] (The OpenVPN Project)
        R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [364464 2017-11-10] (AVAST Software)
        S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
        R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2016-08-11] (DT Soft Ltd)
        R3 FUJ02B1; C:\Windows\system32\DRIVERS\FUJ02B1.sys [59152 2016-05-11] (FUJITSU LIMITED)
        R0 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [252232 2017-11-17] (Malwarebytes)
        R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-09-04] (Intel Corporation)
        S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-10-11] (NVIDIA Corporation)
        R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50808 2017-10-27] (NVIDIA Corporation)
        R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57976 2017-10-27] (NVIDIA Corporation)
        S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
        S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
        S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
        S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
        R2 {A14A8EF6-B11D-4356-9ECC-4B937E6CC626}; C:\Program Files (x86)\CyberLink\PowerDVD17\Common\NavFilter\000.fcl [38168 2017-02-17] (CyberLink Corp.)
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-11-18 18:05 - 2017-11-18 18:06 - 000018415 _____ C:\Users\симо7\Desktop\FRST.txt
        2017-11-18 18:04 - 2017-11-18 18:05 - 000000000 ____D C:\FRST
        2017-11-18 18:03 - 2017-11-18 18:03 - 002392064 _____ (Farbar) C:\Users\симо7\Desktop\FRST64.exe
        2017-11-17 17:54 - 2017-11-17 17:54 - 000252232 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
        2017-11-17 17:41 - 2017-11-17 17:41 - 000001957 _____ C:\Users\симо7\Desktop\2017-11-17_17h40_17.png.lnk
        2017-11-17 17:38 - 2017-11-17 17:38 - 012701760 _____ (Learnpulse) C:\Users\симо7\Downloads\Screenpresso.exe
        2017-11-15 21:23 - 2017-11-15 21:23 - 000455376 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
        2017-11-15 18:16 - 2017-11-15 18:16 - 000014486 _____ C:\Users\симо7\Downloads\месец октомври аванс Пламена (1).xlsx
        2017-11-15 08:35 - 2017-11-15 08:35 - 000001082 _____ C:\Users\Public\Desktop\VLC media player.lnk
        2017-11-14 23:52 - 2017-11-14 23:52 - 000071871 _____ C:\Users\симо7\Downloads\blizoo_inv_49655974_01.11.2017.pdf
        2017-11-14 23:45 - 2017-11-14 23:45 - 000001165 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
        2017-11-14 23:45 - 2017-11-14 23:45 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
        2017-11-14 23:44 - 2017-11-14 23:45 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
        2017-11-14 23:44 - 2017-11-14 23:44 - 000000000 ____D C:\ProgramData\SWCUTemp
        2017-11-14 23:35 - 2017-11-14 23:35 - 036686848 _____ (Mozilla) C:\Users\симо7\Downloads\Firefox Setup 57.0.exe
        2017-11-14 21:29 - 2017-11-14 21:29 - 000311248 _____ (Mozilla) C:\Users\симо7\Downloads\Firefox Installer.exe
        2017-11-14 18:04 - 2017-11-14 18:04 - 000014473 _____ C:\Users\симо7\Downloads\месец октомври аванс Пламена.xlsx
        2017-11-14 14:27 - 2017-11-18 11:04 - 000000000 ____D C:\Users\симо7\AppData\LocalLow\uTorrent
        2017-11-11 11:27 - 2017-11-11 11:27 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers
        2017-11-11 11:27 - 2017-11-11 11:27 - 000000000 ____D C:\ProgramData\Samsung
        2017-11-11 11:27 - 2017-11-11 11:27 - 000000000 ____D C:\Program Files (x86)\Samsung
        2017-11-11 11:27 - 2015-09-14 07:09 - 002073600 ____N C:\Windows\SysWOW64\DlgSearchEngine.dll
        2017-11-11 11:27 - 2015-03-12 04:43 - 000089600 _____ (SS) C:\Windows\system32\ux003ci.dll
        2017-11-11 11:27 - 2015-03-12 04:43 - 000022528 _____ () C:\Windows\system32\ux003lm.dll
        2017-11-11 11:27 - 2015-02-04 06:41 - 000158016 _____ C:\Windows\system32\ux003ci.exe
        2017-11-11 11:26 - 2014-08-18 14:59 - 000011576 ____N (Samsung Electronics) C:\Windows\system32\Drivers\SSPORT.SYS
        2017-11-10 09:23 - 2017-11-10 09:23 - 000003914 _____ C:\Windows\System32\Tasks\Avast Emergency Update
        2017-11-10 09:23 - 2017-11-10 09:22 - 001026232 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000570152 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetSec.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000455384 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys.151077381642101
        2017-11-10 09:23 - 2017-11-10 09:22 - 000365168 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
        2017-11-10 09:23 - 2017-11-10 09:22 - 000364464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000343288 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000321032 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000203976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000198968 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000183584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000148288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000110376 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000084416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000057728 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000047008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
        2017-11-09 13:56 - 2017-11-09 13:56 - 000000000 ____D C:\ProgramData\Steam
        2017-11-09 12:58 - 2017-11-12 20:58 - 000000000 ____D C:\Program Files\Call of Duty WWII
        2017-11-09 12:58 - 2017-11-09 13:56 - 000000842 _____ C:\Users\Public\Desktop\Call of Duty WWII.lnk
        2017-11-08 18:20 - 2017-11-08 18:23 - 000008859 _____ C:\Users\симо7\Desktop\ГАЗ-РАЗХОД.xlsx
        2017-11-07 09:10 - 2017-11-07 09:10 - 000001650 _____ C:\Users\симо7\Desktop\ASC.exe.lnk
        2017-11-07 09:08 - 2017-11-18 17:49 - 000002812 _____ C:\Windows\System32\Tasks\ASC10_SkipUac_симо7
        2017-11-03 17:49 - 2017-11-03 17:49 - 000000000 ____D C:\Users\GLCache\1a410118ebdbd30f6e38de2279d395e9
        2017-11-03 17:49 - 2017-11-03 17:49 - 000000000 ____D C:\Users\GLCache
        2017-11-02 22:22 - 2010-06-02 04:55 - 000527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
        2017-11-02 22:22 - 2010-06-02 04:55 - 000518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
        2017-11-02 22:22 - 2010-06-02 04:55 - 000239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
        2017-11-02 22:22 - 2010-06-02 04:55 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
        2017-11-02 22:22 - 2010-06-02 04:55 - 000077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
        2017-11-02 22:22 - 2010-06-02 04:55 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
        2017-11-02 22:22 - 2010-05-26 11:41 - 002526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
        2017-11-02 22:22 - 2010-05-26 11:41 - 001907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
        2017-11-02 22:22 - 2010-05-26 11:41 - 001868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
        2017-11-02 22:22 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
        2017-11-02 22:22 - 2009-09-04 17:44 - 000515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
        2017-11-02 22:22 - 2009-09-04 17:44 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
        2017-11-02 22:22 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
        2017-11-02 22:22 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
        2017-11-02 22:22 - 2009-09-04 17:44 - 000069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 005501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 001974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 000523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 000235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
        2017-11-02 22:22 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
        2017-11-02 22:22 - 2009-03-16 14:18 - 000517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
        2017-11-02 22:22 - 2009-03-16 14:18 - 000235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
        2017-11-02 22:22 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
        2017-11-02 22:22 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
        2017-11-02 22:22 - 2009-03-16 14:18 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
        2017-11-02 22:22 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
        2017-11-02 22:22 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
        2017-11-02 22:22 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
        2017-11-02 22:22 - 2009-03-09 15:27 - 001846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
        2017-11-02 22:22 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
        2017-11-02 22:22 - 2009-03-09 15:27 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
        2017-11-02 22:22 - 2008-10-10 04:52 - 005631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
        2017-11-02 22:22 - 2008-10-10 04:52 - 004379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
        2017-11-02 22:22 - 2008-10-10 04:52 - 002605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
        2017-11-02 22:22 - 2008-10-10 04:52 - 002036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
        2017-11-02 22:22 - 2008-10-10 04:52 - 000519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
        2017-11-02 22:22 - 2008-10-10 04:52 - 000452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
        2017-11-02 22:22 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
        2017-11-02 22:22 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
        2017-11-02 22:22 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
        2017-11-02 22:22 - 2008-07-31 10:41 - 000068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
        2017-11-02 22:22 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
        2017-11-02 22:22 - 2008-07-31 10:40 - 000509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
        2017-11-02 22:22 - 2008-07-10 11:01 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
        2017-11-02 22:22 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
        2017-11-02 22:22 - 2008-07-10 11:00 - 003851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
        2017-11-02 22:22 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
        2017-11-02 22:22 - 2008-07-10 11:00 - 001493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
        2017-11-02 22:22 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
        2017-11-02 22:22 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
        2017-11-02 22:22 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
        2017-11-02 22:22 - 2008-05-30 14:18 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
        2017-11-02 22:22 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
        2017-11-02 22:22 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
        2017-11-02 22:22 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
        2017-11-02 22:22 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
        2017-11-02 22:22 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
        2017-11-02 22:22 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
        2017-11-02 22:22 - 2008-05-30 14:11 - 003850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
        2017-11-02 22:22 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
        2017-11-02 22:22 - 2008-05-30 14:11 - 001491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
        2017-11-02 22:22 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
        2017-11-02 22:22 - 2008-05-30 14:11 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
        2017-11-02 22:22 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
        2017-11-02 22:22 - 2008-03-05 16:03 - 000479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
        2017-11-02 22:22 - 2008-03-05 16:03 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
        2017-11-02 22:22 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
        2017-11-02 22:22 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
        2017-11-02 22:22 - 2008-03-05 16:00 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
        2017-11-02 22:22 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
        2017-11-02 22:22 - 2008-03-05 15:56 - 003786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
        2017-11-02 22:22 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
        2017-11-02 22:22 - 2008-03-05 15:56 - 001420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
        2017-11-02 22:22 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
        2017-11-02 22:22 - 2008-02-05 23:07 - 000462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
        2017-11-02 22:22 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
        2017-11-02 22:22 - 2007-10-22 03:39 - 000267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
        2017-11-02 22:22 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
        2017-11-02 22:22 - 2007-10-22 03:37 - 000017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
        2017-11-02 22:22 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
        2017-11-02 22:22 - 2007-10-12 15:14 - 003734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
        2017-11-02 22:22 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
        2017-11-02 22:22 - 2007-10-12 15:14 - 001374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
        2017-11-02 22:22 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
        2017-11-02 22:22 - 2007-10-02 09:56 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
        2017-11-02 22:22 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
        2017-11-02 22:22 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
        2017-11-02 22:22 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
        2017-11-02 22:22 - 2007-07-19 18:14 - 003727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
        2017-11-02 22:22 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
        2017-11-02 22:22 - 2007-07-19 18:14 - 001358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
        2017-11-02 22:22 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
        2017-11-02 22:22 - 2007-07-19 18:14 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
        2017-11-02 22:22 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
        2017-11-02 22:22 - 2007-06-20 20:46 - 000266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
        2017-11-02 22:22 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
        2017-11-02 22:22 - 2007-05-16 16:45 - 003497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
        2017-11-02 22:22 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
        2017-11-02 22:22 - 2007-05-16 16:45 - 001124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
        2017-11-02 22:22 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
        2017-11-02 22:22 - 2007-05-16 16:45 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
        2017-11-02 22:22 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
        2017-11-02 22:22 - 2007-04-04 18:55 - 000261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
        2017-11-02 22:22 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
        2017-11-02 22:22 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
        2017-11-02 22:22 - 2007-03-15 16:57 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
        2017-11-02 22:22 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
        2017-11-02 22:22 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
        2017-11-02 22:22 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
        2017-11-02 22:22 - 2007-03-12 16:42 - 001123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
        2017-11-02 22:22 - 2007-03-05 12:42 - 000017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
        2017-11-02 22:22 - 2007-03-05 12:42 - 000015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
        2017-11-02 22:22 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
        2017-11-02 22:22 - 2007-01-24 15:27 - 000255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
        2017-11-02 22:22 - 2006-12-08 12:02 - 000251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
        2017-11-02 22:22 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
        2017-11-02 22:22 - 2006-11-29 13:06 - 004398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
        2017-11-02 22:22 - 2006-11-29 13:06 - 003426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
        2017-11-02 22:22 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
        2017-11-02 22:22 - 2006-11-29 13:06 - 000440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
        2017-11-02 22:22 - 2006-09-28 16:05 - 003977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
        2017-11-02 22:22 - 2006-09-28 16:05 - 002414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
        2017-11-02 22:22 - 2006-09-28 16:05 - 000237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
        2017-11-02 22:22 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
        2017-11-02 22:22 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
        2017-11-02 22:22 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
        2017-11-02 22:22 - 2006-07-28 09:30 - 000236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
        2017-11-02 22:22 - 2006-07-28 09:30 - 000062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
        2017-11-02 22:22 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
        2017-11-02 22:22 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
        2017-11-02 22:22 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
        2017-11-02 22:22 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
        2017-11-02 22:22 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
        2017-11-02 22:22 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
        2017-11-02 22:22 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
        2017-11-02 22:22 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
        2017-11-02 22:22 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
        2017-11-02 22:22 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
        2017-11-02 22:22 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
        2017-11-02 22:22 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
        2017-11-02 22:22 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
        2017-11-02 22:22 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
        2017-11-02 22:22 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
        2017-11-02 22:22 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
        2017-11-02 22:22 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
        2017-11-02 22:22 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
        2017-11-02 22:22 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
        2017-11-02 22:22 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
        2017-11-02 22:22 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
        2017-11-02 22:22 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
        2017-11-02 22:22 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
        2017-11-02 22:22 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
        2017-11-02 22:19 - 2017-11-02 22:22 - 000000000 ____D C:\Windows\SysWOW64\directx
        2017-11-01 17:44 - 2017-11-01 17:44 - 000000000 ____D C:\ProgramData\PDVD
        2017-11-01 17:43 - 2017-11-01 17:43 - 000002431 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 17.lnk
        2017-11-01 17:43 - 2017-11-01 17:43 - 000002419 _____ C:\Users\Public\Desktop\CyberLink PowerDVD 17.lnk
        2017-11-01 17:43 - 2017-11-01 17:43 - 000000000 ____D C:\Program Files (x86)\NSIS Uninstall Information
        2017-11-01 17:41 - 2017-11-01 17:41 - 000000000 ____D C:\ProgramData\install_backup
        2017-11-01 17:41 - 2017-11-01 17:41 - 000000000 ____D C:\Program Files (x86)\CyberLink
        2017-11-01 11:31 - 2017-09-14 01:20 - 000798008 _____ C:\Windows\SysWOW64\vulkan-1.dll
        2017-11-01 11:31 - 2017-09-14 01:20 - 000490296 _____ C:\Windows\SysWOW64\vulkaninfo.exe
        2017-11-01 11:31 - 2017-09-14 01:19 - 000927544 _____ C:\Windows\system32\vulkan-1.dll
        2017-11-01 11:31 - 2017-09-14 01:19 - 000591160 _____ C:\Windows\system32\vulkaninfo.exe
        2017-10-31 21:52 - 2017-11-01 11:31 - 000000000 ____D C:\Program Files (x86)\VulkanRT
        2017-10-31 21:52 - 2017-10-31 21:52 - 000000000 ____D C:\Windows\SysWOW64\NV
        2017-10-31 21:52 - 2017-10-31 21:52 - 000000000 ____D C:\Windows\system32\NV
        2017-10-31 21:52 - 2017-10-27 18:12 - 000123000 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
        2017-10-31 21:52 - 2017-10-27 18:06 - 000136312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
        2017-10-31 21:45 - 2017-10-27 18:12 - 000607168 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
        2017-10-31 21:45 - 2017-10-27 18:12 - 000081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
        2017-10-31 21:40 - 2017-10-31 21:41 - 000000000 ____D C:\Windows\LastGood
        2017-10-31 21:26 - 2017-11-18 17:49 - 000004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003798 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:23 - 2017-10-26 04:31 - 001989240 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438810.dll
        2017-10-31 21:23 - 2017-10-26 04:31 - 001673848 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438810.dll
        2017-10-31 17:46 - 2017-10-31 17:47 - 000000000 ____D C:\Windows\LastGood.Tmp
        2017-10-31 17:44 - 2017-10-27 19:46 - 040237688 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 036194424 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 035156928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 029236344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 023262464 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 021744632 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 019037416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 019012232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 018207248 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 016763000 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
        2017-10-31 17:44 - 2017-10-27 19:46 - 015027984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 013864232 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 013254520 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 011779328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 010882720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 004284496 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 003807680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 003799032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 003346552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 001989056 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438813.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 001673848 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438813.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 001135464 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 001099200 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 001030592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000981112 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000932472 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000885680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000615360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000527288 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000505976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000492048 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000446216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000407064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000171896 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000154392 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000149552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000132256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000057976 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
        2017-10-31 17:44 - 2017-10-27 19:46 - 000050808 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
        2017-10-31 17:44 - 2017-10-27 19:46 - 000046182 _____ C:\Windows\system32\nvinfo.pb
        2017-10-31 17:44 - 2017-10-27 19:46 - 000038336 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
        2017-10-31 17:44 - 2017-10-27 19:46 - 000000669 _____ C:\Windows\SysWOW64\nv-vk32.json
        2017-10-31 17:44 - 2017-10-27 19:46 - 000000669 _____ C:\Windows\system32\nv-vk64.json
        2017-10-31 17:42 - 2017-10-31 17:42 - 000000000 ____D C:\NVIDIA
        2017-10-28 19:23 - 2017-10-28 19:23 - 000000000 ____D C:\Users\Public\Documents\Steam
        2017-10-28 19:22 - 2016-08-10 09:38 - 000107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
        2017-10-28 17:50 - 2017-10-13 00:25 - 000835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
        2017-10-28 17:50 - 2017-10-13 00:25 - 000177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
        2017-10-28 17:50 - 2017-10-05 09:17 - 000380248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
        2017-10-28 17:50 - 2017-09-15 01:52 - 000986968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
        2017-10-28 17:50 - 2017-09-08 19:14 - 003084288 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
        2017-10-28 17:50 - 2017-09-08 18:50 - 002471424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
        2017-10-28 17:50 - 2017-09-08 05:31 - 000685440 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
        2017-10-28 17:50 - 2017-09-08 05:28 - 000507176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
        2017-10-28 17:50 - 2017-09-07 23:31 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\mgmtapi.dll
        2017-10-28 17:50 - 2017-09-07 21:20 - 000018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mgmtapi.dll
        2017-10-28 17:50 - 2017-09-07 19:20 - 000513456 _____ C:\Windows\SysWOW64\locale.nls
        2017-10-28 17:50 - 2017-09-07 19:20 - 000513456 _____ C:\Windows\system32\locale.nls
        2017-10-28 17:50 - 2017-09-07 15:40 - 000995272 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
        2017-10-28 17:50 - 2017-09-07 15:40 - 000922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
        2017-10-28 17:50 - 2017-09-07 01:07 - 000158552 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
        2017-10-28 17:50 - 2017-09-06 23:17 - 000461144 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
        2017-10-28 17:50 - 2017-09-06 23:17 - 000443224 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
        2017-10-28 17:50 - 2017-09-06 16:14 - 000166400 _____ (Microsoft Corporation) C:\Windows\system32\regsvc.dll
        2017-10-28 17:50 - 2017-08-11 03:39 - 002779136 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
        2017-10-28 17:50 - 2017-08-11 03:30 - 002464256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-11-18 18:06 - 2017-01-20 10:24 - 000000000 ____D C:\Users\симо7\AppData\Roaming\uTorrent
        2017-11-18 17:49 - 2017-10-04 16:24 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
        2017-11-18 17:49 - 2016-08-08 15:35 - 000003430 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
        2017-11-18 17:49 - 2016-08-08 15:35 - 000003302 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
        2017-11-18 17:48 - 2016-08-09 20:20 - 000000000 ____D C:\Users\симо7\AppData\Roaming\.ACEStream
        2017-11-18 17:44 - 2017-08-16 21:00 - 000000000 ____D C:\_acestream_cache_
        2017-11-18 15:37 - 2016-08-08 15:46 - 000000000 ___RD C:\ТОРЕНТ
        2017-11-18 12:25 - 2016-08-08 15:44 - 000000000 ____D C:\ProgramData\NVIDIA
        2017-11-18 12:21 - 2016-08-08 15:31 - 000003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-976013588-1774182616-1790962854-1001
        2017-11-18 11:50 - 2016-11-17 21:04 - 000000000 ____D C:\Users\симо7\AppData\LocalLow\Mozilla
        2017-11-18 11:48 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps
        2017-11-18 11:48 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
        2017-11-17 17:11 - 2017-03-14 18:53 - 000647040 _____ C:\Windows\system32\perfh002.dat
        2017-11-17 17:11 - 2017-03-14 18:53 - 000122548 _____ C:\Windows\system32\perfc002.dat
        2017-11-17 17:11 - 2014-11-21 00:31 - 001521674 _____ C:\Windows\system32\PerfStringBackup.INI
        2017-11-17 17:11 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
        2017-11-15 18:17 - 2016-08-08 15:26 - 000000000 ____D C:\Users\симо7\AppData\Local\Packages
        2017-11-15 16:40 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\LiveKernelReports
        2017-11-15 08:39 - 2017-04-09 16:58 - 000000000 ____D C:\Users\симо7\AppData\Roaming\vlc
        2017-11-14 23:45 - 2016-08-08 16:40 - 000000000 ____D C:\Users\симо7\AppData\Roaming\Mozilla
        2017-11-14 23:45 - 2016-08-08 16:40 - 000000000 ____D C:\Users\симо7\AppData\Local\Mozilla
        2017-11-14 23:40 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
        2017-11-14 18:20 - 2017-09-30 08:48 - 000000089 _____ C:\Users\симо7\Desktop\Нов текстов документ.txt
        2017-11-14 12:40 - 2016-08-10 17:57 - 000000000 ____D C:\ProgramData\Skype
        2017-11-14 08:43 - 2016-08-08 15:35 - 000002213 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
        2017-11-11 11:20 - 2013-08-22 15:25 - 000262144 ___SH C:\Windows\system32\config\BBI
        2017-11-09 12:57 - 2016-08-11 08:32 - 000000000 ____D C:\Users\симо7\AppData\Roaming\DAEMON Tools Lite
        2017-11-01 17:48 - 2016-08-11 08:22 - 000000000 ____D C:\Users\симо7\Documents\CyberLink
        2017-11-01 17:48 - 2016-08-11 08:22 - 000000000 ____D C:\Users\симо7\AppData\Roaming\CyberLink
        2017-11-01 17:44 - 2017-04-12 10:24 - 000000000 ____D C:\ProgramData\CyberLink
        2017-11-01 17:43 - 2016-08-11 08:18 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
        2017-11-01 17:42 - 2016-08-11 08:20 - 000000000 ____D C:\Users\симо7\AppData\Local\CyberLink
        2017-11-01 17:41 - 2017-02-21 08:47 - 000000000 ____D C:\ProgramData\SUPPORTDIR
        2017-11-01 17:41 - 2016-08-11 08:18 - 000000000 ____D C:\ProgramData\install_clap
        2017-11-01 17:36 - 2016-09-07 13:46 - 000000000 ____D C:\Users\симо7\AppData\Local\CrashDumps
        2017-10-31 21:52 - 2016-08-08 15:44 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
        2017-10-31 21:26 - 2016-08-08 15:44 - 000000000 ____D C:\Program Files\NVIDIA Corporation
        2017-10-31 21:26 - 2016-08-08 15:44 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
        2017-10-30 20:08 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
        2017-10-29 11:25 - 2017-09-27 08:01 - 000000000 ____D C:\ProgramData\ProductData
        2017-10-28 17:52 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
        2017-10-27 18:36 - 2016-10-07 15:17 - 000001951 _____ C:\Windows\NvContainerRecovery.bat
        2017-10-27 18:12 - 2016-08-08 15:44 - 005960824 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
        2017-10-27 18:12 - 2016-08-08 15:44 - 002587768 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
        2017-10-27 18:12 - 2016-08-08 15:44 - 001766520 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
        2017-10-27 18:12 - 2016-08-08 15:44 - 000449656 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
        2017-10-26 17:36 - 2016-08-11 08:18 - 000000000 ____D C:\ProgramData\Temp
        2017-10-25 12:33 - 2016-08-08 15:44 - 007802921 _____ C:\Windows\system32\nvcoproc.bin
        2017-10-22 10:21 - 2016-08-08 16:30 - 000000000 ____D C:\Users\симо7\AppData\Local\ElevatedDiagnostics
        2017-10-22 10:21 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\NDF
        Some files in TEMP:
        ====================
        2017-11-09 17:58 - 2017-11-09 17:58 - 012701760 _____ (Learnpulse) C:\Users\симо7\AppData\Local\Temp\ScreenpressoUpd.exe
        2017-11-15 08:34 - 2017-11-15 08:34 - 030950664 _____ () C:\Users\симо7\AppData\Local\Temp\vlc-2.2.6-win32.exe
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\Windows\system32\winlogon.exe => File is digitally signed
        C:\Windows\system32\wininit.exe => File is digitally signed
        C:\Windows\explorer.exe => File is digitally signed
        C:\Windows\SysWOW64\explorer.exe => File is digitally signed
        C:\Windows\system32\svchost.exe => File is digitally signed
        C:\Windows\SysWOW64\svchost.exe => File is digitally signed
        C:\Windows\system32\services.exe => File is digitally signed
        C:\Windows\system32\User32.dll => File is digitally signed
        C:\Windows\SysWOW64\User32.dll => File is digitally signed
        C:\Windows\system32\userinit.exe => File is digitally signed
        C:\Windows\SysWOW64\userinit.exe => File is digitally signed
        C:\Windows\system32\rpcss.dll => File is digitally signed
        C:\Windows\system32\dnsapi.dll => File is digitally signed
        C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
        C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
        LastRegBack: 2017-11-14 10:10
        ==================== End of FRST.txt ============================
        Addition.txt
      • от tany
        От известно време 3-4 пъти месечно "Актуализация" ми иска съгласието да го инсталирам.Аз отказвам но след 6-7 дни пак опит 
        и така вече няколко месеца.Нямам представа дали е вирус,нямам проблеми с компютъра,няма забивания или забавяне.
        Ето за това става въпрос
         
         
        Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 24-09-2017
        Ran by Стоянчо (administrator) on DESKTOP-HV76MO6 (24-09-2017 23:11:02)
        Running from C:\Users\Стоянчо\Downloads
        Loaded Profiles: Стоянчо (Available Profiles: Стоянчо)
        Platform: Windows 10 Pro Version 1703 (X64) Language: Български (България)
        Internet Explorer Version 11 (Default browser: Chrome)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (Intel Corporation) C:\Windows\System32\igfxCUIService.exe
        (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
        (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
        (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
        (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
        (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
        (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
        (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
        () C:\Program Files\Gramblr\gramblr.exe
        (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
        (Intel Corporation) C:\Windows\System32\igfxEM.exe
        (Intel Corporation) C:\Windows\System32\igfxHK.exe
        () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe
        (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.10\Lightshot.exe
        (Microsoft Corporation) C:\Windows\System32\dllhost.exe
        (Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
        (Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
        (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.23.0_x64__8wekyb3d8bbwe\WinStore.App.exe
        () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17072.13111.0_x64__8wekyb3d8bbwe\Video.UI.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        ==================== Registry (Whitelisted) ===========================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
        HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()
        Winlogon\Notify\igfxcui: igfxdev.dll [X]
        HKU\S-1-5-21-3274723310-3931731729-1199849900-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [48138880 2015-10-14] (Skype Technologies S.A.)
        HKU\S-1-5-21-3274723310-3931731729-1199849900-1001\...\Run: [GoogleChromeAutoLaunch_7AC76D272A3C9865EEE36FF327D0728E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1301848 2017-08-23] (Google Inc.)
        Startup: C:\Users\Стоянчо\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk [2016-12-26]
        ShortcutTarget: Facebook Gameroom.lnk -> C:\Users\Стоянчо\AppData\Local\Facebook\Games\FacebookGameroom.exe (Facebook)
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Hosts: 127.0.0.1    localhost
        Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
        Tcpip\..\Interfaces\{2b43ead3-416b-49fc-acb0-4ea078b43530}: [DhcpNameServer] 192.168.42.129
        Tcpip\..\Interfaces\{9146b479-0d48-411c-83c0-18542761f0fe}: [DhcpNameServer] 95.87.194.4 192.168.0.1
        Tcpip\..\Interfaces\{a5340c57-e453-40ab-bfb5-c36cda227066}: [DhcpNameServer] 192.168.1.1
        Internet Explorer:
        ==================
        BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-09-19] (Microsoft Corporation)
        BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-09-19] (Microsoft Corporation)
        BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-09-19] (Microsoft Corporation)
        BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-09-19] (Microsoft Corporation)
        Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)
        Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)
        Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)
        Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)
        FireFox:
        ========
        FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
        FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
        FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
        FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [No File]
        FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-09-19] (Microsoft Corporation)
        FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-09-19] (Microsoft Corporation)
        FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
        FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
        Chrome: 
        =======
        CHR DefaultProfile: Default
        CHR Profile: C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default [2017-09-24]
        CHR Extension: (Google Презентации) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-09-11]
        CHR Extension: (Google Документи) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-09-11]
        CHR Extension: (Google Диск) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-11]
        CHR Extension: (YouTube) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-11]
        CHR Extension: (Video Downloader professional) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2017-08-04]
        CHR Extension: (Електронни таблици от Google) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-09-11]
        CHR Extension: (Farmville 2 Beacon) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdkkmnngogaccacpomdhdiahljbjihoc [2017-05-08]
        CHR Extension: (Google Документи офлайн) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-09-11]
        CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
        CHR Extension: (Gmail) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-09-11]
        CHR Extension: (Chrome Media Router) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-08]
        CHR Extension: (JobBoxPro) - C:\Users\Стоянчо\Downloads\Нова папка (6)\jobboxpro [2017-01-25]
        CHR Profile: C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-09-14]
        CHR Profile: C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\System Profile [2017-09-11]
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
        R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4424392 2017-09-08] (Microsoft Corporation)
        R2 gramblrclient; C:\Program Files\Gramblr\gramblr.exe [11867216 2017-09-23] () [File not signed]
        R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [337888 2016-05-03] (Intel Corporation)
        S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation)
        S2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1042304 2016-05-04] (Enigma Software Group USA, LLC.)
        R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [255584 2017-08-19] (Synaptics Incorporated)
        R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
        R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-30] (Microsoft Corporation)
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
        S3 EsgScanner; C:\WINDOWS\System32\DRIVERS\EsgScanner.sys [22704 2016-05-04] ()
        R1 MpKsl1045740a; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D1018B7D-39B5-48CE-97D7-3CAF92792300}\MpKsl1045740a.sys [44928 2017-09-24] (Microsoft Corporation)
        R3 netr28x; C:\WINDOWS\System32\drivers\netr28x.sys [2537984 2017-03-18] (MediaTek Inc.)
        R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [895224 2016-02-17] (Realtek )
        R3 rtbth; C:\WINDOWS\System32\drivers\rtbth.sys [1219200 2015-09-13] (Ralink Technology, Corp.)
        S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
        S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
        S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [23040 2017-03-18] (Microsoft Corporation)
        S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
        R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
        R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
        R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [30368 2017-06-21] (HP)
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-09-24 23:11 - 2017-09-24 23:12 - 000012716 _____ C:\Users\Стоянчо\Downloads\FRST.txt
        2017-09-24 23:10 - 2017-09-24 23:11 - 000000000 ____D C:\FRST
        2017-09-24 23:10 - 2017-09-24 23:10 - 002399744 _____ (Farbar) C:\Users\Стоянчо\Downloads\FRST64.exe
        2017-09-20 22:41 - 2017-09-20 22:43 - 000000000 ____D C:\Users\Стоянчо\Desktop\други
        2017-09-15 23:41 - 2017-09-15 23:41 - 017675071 _____ C:\Users\Стоянчо\Downloads\Milk and Honey- Didi(DVD Quality).mp4
        2017-09-13 07:05 - 2017-09-05 08:30 - 000287648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
        2017-09-13 07:05 - 2017-09-05 08:21 - 000189344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
        2017-09-13 07:05 - 2017-09-05 08:12 - 001409048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
        2017-09-13 07:05 - 2017-09-05 08:12 - 001292880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
        2017-09-13 07:05 - 2017-09-05 08:12 - 000627080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
        2017-09-13 07:05 - 2017-09-05 08:12 - 000081176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
        2017-09-13 07:05 - 2017-09-05 07:53 - 001839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
        2017-09-13 07:05 - 2017-09-05 07:52 - 002259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
        2017-09-13 07:05 - 2017-09-05 07:50 - 004330920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
        2017-09-13 07:05 - 2017-09-05 07:46 - 004471888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
        2017-09-13 07:05 - 2017-09-05 07:45 - 005821496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
        2017-09-13 07:05 - 2017-09-05 07:45 - 002476712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
        2017-09-13 07:05 - 2017-09-05 07:45 - 002166808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
        2017-09-13 07:05 - 2017-09-05 07:45 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
        2017-09-13 07:05 - 2017-09-05 07:45 - 000085784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialUIBroker.exe
        2017-09-13 07:05 - 2017-09-05 07:44 - 000569264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
        2017-09-13 07:05 - 2017-09-05 07:43 - 000611096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
        2017-09-13 07:05 - 2017-09-05 07:43 - 000359560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
        2017-09-13 07:05 - 2017-09-05 07:43 - 000280480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
        2017-09-13 07:05 - 2017-09-05 07:43 - 000169376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
        2017-09-13 07:05 - 2017-09-05 07:43 - 000042456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbs.dll
        2017-09-13 07:05 - 2017-09-05 07:42 - 002330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
        2017-09-13 07:05 - 2017-09-05 07:42 - 000703056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
        2017-09-13 07:05 - 2017-09-05 07:42 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
        2017-09-13 07:05 - 2017-09-05 07:42 - 000291904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
        2017-09-13 07:05 - 2017-09-05 07:42 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
        2017-09-13 07:05 - 2017-09-05 07:41 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
        2017-09-13 07:05 - 2017-09-05 07:41 - 006761560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
        2017-09-13 07:05 - 2017-09-05 07:41 - 004671832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
        2017-09-13 07:05 - 2017-09-05 07:41 - 001106904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
        2017-09-13 07:05 - 2017-09-05 07:41 - 001013912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
        2017-09-13 07:05 - 2017-09-05 07:40 - 000052768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll
        2017-09-13 07:05 - 2017-09-05 07:39 - 001517472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
        2017-09-13 07:05 - 2017-09-05 07:37 - 000583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
        2017-09-13 07:05 - 2017-09-05 07:28 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
        2017-09-13 07:05 - 2017-09-05 07:28 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys
        2017-09-13 07:05 - 2017-09-05 07:27 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
        2017-09-13 07:05 - 2017-09-05 07:26 - 002953216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
        2017-09-13 07:05 - 2017-09-05 07:26 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
        2017-09-13 07:05 - 2017-09-05 07:26 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
        2017-09-13 07:05 - 2017-09-05 07:25 - 013844480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
        2017-09-13 07:05 - 2017-09-05 07:25 - 001448960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
        2017-09-13 07:05 - 2017-09-05 07:25 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
        2017-09-13 07:05 - 2017-09-05 07:25 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
        2017-09-13 07:05 - 2017-09-05 07:24 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
        2017-09-13 07:05 - 2017-09-05 07:23 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
        2017-09-13 07:05 - 2017-09-05 07:22 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
        2017-09-13 07:05 - 2017-09-05 07:22 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
        2017-09-13 07:05 - 2017-09-05 07:21 - 006728704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
        2017-09-13 07:05 - 2017-09-05 07:21 - 001178624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
        2017-09-13 07:05 - 2017-09-05 07:21 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll
        2017-09-13 07:05 - 2017-09-05 07:21 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.exe
        2017-09-13 07:05 - 2017-09-05 07:20 - 000370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
        2017-09-13 07:05 - 2017-09-05 07:19 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
        2017-09-13 07:05 - 2017-09-05 07:19 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.dll
        2017-09-13 07:05 - 2017-09-05 07:19 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
        2017-09-13 07:05 - 2017-09-05 07:19 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput.dll
        2017-09-13 07:05 - 2017-09-05 07:18 - 000524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
        2017-09-13 07:05 - 2017-09-05 07:18 - 000471040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
        2017-09-13 07:05 - 2017-09-05 07:18 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll
        2017-09-13 07:05 - 2017-09-05 07:18 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput8.dll
        2017-09-13 07:05 - 2017-09-05 07:18 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll
        2017-09-13 07:05 - 2017-09-05 07:17 - 000918528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
        2017-09-13 07:05 - 2017-09-05 07:17 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll
        2017-09-13 07:05 - 2017-09-05 07:17 - 000586240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
        2017-09-13 07:05 - 2017-09-05 07:17 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
        2017-09-13 07:05 - 2017-09-05 07:16 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
        2017-09-13 07:05 - 2017-09-05 07:16 - 000844288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
        2017-09-13 07:05 - 2017-09-05 07:16 - 000563200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
        2017-09-13 07:05 - 2017-09-05 07:16 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
        2017-09-13 07:05 - 2017-09-05 07:16 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
        2017-09-13 07:05 - 2017-09-05 07:15 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
        2017-09-13 07:05 - 2017-09-05 07:15 - 000657408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
        2017-09-13 07:05 - 2017-09-05 07:15 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
        2017-09-13 07:05 - 2017-09-05 07:15 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
        2017-09-13 07:05 - 2017-09-05 07:15 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
        2017-09-13 07:05 - 2017-09-05 07:14 - 000754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
        2017-09-13 07:05 - 2017-09-05 07:14 - 000590336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
        2017-09-13 07:05 - 2017-09-05 07:14 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
        2017-09-13 07:05 - 2017-09-05 07:13 - 007598080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
        2017-09-13 07:05 - 2017-09-05 07:13 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
        2017-09-13 07:05 - 2017-09-05 07:12 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
        2017-09-13 07:05 - 2017-09-05 07:12 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
        2017-09-13 07:05 - 2017-09-05 07:12 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
        2017-09-13 07:05 - 2017-09-05 07:11 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
        2017-09-13 07:05 - 2017-09-05 07:11 - 001355264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
        2017-09-13 07:05 - 2017-09-05 07:11 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
        2017-09-13 07:05 - 2017-09-05 07:11 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
        2017-09-13 07:05 - 2017-09-05 07:11 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
        2017-09-13 07:05 - 2017-09-05 07:10 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
        2017-09-13 07:05 - 2017-09-05 07:10 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
        2017-09-13 07:05 - 2017-09-05 07:10 - 000761344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
        2017-09-13 07:05 - 2017-09-05 07:10 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthHFSrv.dll
        2017-09-13 07:05 - 2017-09-05 07:06 - 000221696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll
        2017-09-13 07:05 - 2017-09-05 07:06 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
        2017-09-13 07:05 - 2017-09-05 07:04 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RstrtMgr.dll
        2017-09-13 07:05 - 2017-09-05 07:04 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
        2017-09-13 07:04 - 2017-09-05 08:27 - 002399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
        2017-09-13 07:04 - 2017-09-05 08:27 - 000136096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
        2017-09-13 07:04 - 2017-09-05 08:25 - 002969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
        2017-09-13 07:04 - 2017-09-05 08:24 - 000519584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
        2017-09-13 07:04 - 2017-09-05 08:23 - 001242528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
        2017-09-13 07:04 - 2017-09-05 08:18 - 000820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
        2017-09-13 07:04 - 2017-09-05 08:17 - 000316320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
        2017-09-13 07:04 - 2017-09-05 08:16 - 000724200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
        2017-09-13 07:04 - 2017-09-05 08:16 - 000546208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
        2017-09-13 07:04 - 2017-09-05 08:16 - 000410168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
        2017-09-13 07:04 - 2017-09-05 08:16 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
        2017-09-13 07:04 - 2017-09-05 08:14 - 004708504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
        2017-09-13 07:04 - 2017-09-05 08:14 - 001146176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
        2017-09-13 07:04 - 2017-09-05 08:14 - 000958664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
        2017-09-13 07:04 - 2017-09-05 08:14 - 000254176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
        2017-09-13 07:04 - 2017-09-05 08:14 - 000094624 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
        2017-09-13 07:04 - 2017-09-05 08:11 - 002675104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
        2017-09-13 07:04 - 2017-09-05 08:11 - 000610720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
        2017-09-13 07:04 - 2017-09-05 08:11 - 000387936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
        2017-09-13 07:04 - 2017-09-05 07:53 - 001620880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
        2017-09-13 07:04 - 2017-09-05 07:45 - 023679488 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
        2017-09-13 07:04 - 2017-09-05 07:29 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SEMgrPS.dll
        2017-09-13 07:04 - 2017-09-05 07:27 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
        2017-09-13 07:04 - 2017-09-05 07:27 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
        2017-09-13 07:04 - 2017-09-05 07:27 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
        2017-09-13 07:04 - 2017-09-05 07:26 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
        2017-09-13 07:04 - 2017-09-05 07:26 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.exe
        2017-09-13 07:04 - 2017-09-05 07:26 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnpinst.exe
        2017-09-13 07:04 - 2017-09-05 07:25 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys
        2017-09-13 07:04 - 2017-09-05 07:24 - 000457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
        2017-09-13 07:04 - 2017-09-05 07:24 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.dll
        2017-09-13 07:04 - 2017-09-05 07:24 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
        2017-09-13 07:04 - 2017-09-05 07:24 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcrecovery.dll
        2017-09-13 07:04 - 2017-09-05 07:24 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
        2017-09-13 07:04 - 2017-09-05 07:23 - 020509184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
        2017-09-13 07:04 - 2017-09-05 07:23 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
        2017-09-13 07:04 - 2017-09-05 07:23 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 023684608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
        2017-09-13 07:04 - 2017-09-05 07:22 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetpp.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
        2017-09-13 07:04 - 2017-09-05 07:21 - 001051136 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
        2017-09-13 07:04 - 2017-09-05 07:21 - 000946688 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll
        2017-09-13 07:04 - 2017-09-05 07:21 - 000422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
        2017-09-13 07:04 - 2017-09-05 07:21 - 000408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
        2017-09-13 07:04 - 2017-09-05 07:21 - 000312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
        2017-09-13 07:04 - 2017-09-05 07:21 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
        2017-09-13 07:04 - 2017-09-05 07:20 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
        2017-09-13 07:04 - 2017-09-05 07:20 - 000546816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
        2017-09-13 07:04 - 2017-09-05 07:19 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
        2017-09-13 07:04 - 2017-09-05 07:19 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
        2017-09-13 07:04 - 2017-09-05 07:19 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 012801536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 002078720 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
        2017-09-13 07:04 - 2017-09-05 07:18 - 000921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 000832000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelinesvc.exe
        2017-09-13 07:04 - 2017-09-05 07:18 - 000752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 000266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
        2017-09-13 07:04 - 2017-09-05 07:17 - 008213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
        2017-09-13 07:04 - 2017-09-05 07:17 - 008207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
        2017-09-13 07:04 - 2017-09-05 07:17 - 000757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
        2017-09-13 07:04 - 2017-09-05 07:16 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
        2017-09-13 07:04 - 2017-09-05 07:15 - 004730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
        2017-09-13 07:04 - 2017-09-05 07:15 - 001143296 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
        2017-09-13 07:04 - 2017-09-05 07:15 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
        2017-09-13 07:04 - 2017-09-05 07:15 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
        2017-09-13 07:04 - 2017-09-05 07:14 - 011887104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
        2017-09-13 07:04 - 2017-09-05 07:14 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
        2017-09-13 07:04 - 2017-09-05 07:14 - 001657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
        2017-09-13 07:04 - 2017-09-05 07:14 - 001583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
        2017-09-13 07:04 - 2017-09-05 07:14 - 001046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
        2017-09-13 07:04 - 2017-09-05 07:14 - 000827904 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
        2017-09-13 07:04 - 2017-09-05 07:13 - 002009600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
        2017-09-13 07:04 - 2017-09-05 07:12 - 006265856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
        2017-09-13 07:04 - 2017-09-05 07:11 - 003654656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
        2017-09-13 07:04 - 2017-09-05 07:11 - 001463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
        2017-09-13 07:04 - 2017-09-05 07:06 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
        2017-09-13 07:03 - 2017-09-05 08:31 - 001596592 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
        2017-09-13 07:03 - 2017-09-05 08:31 - 001346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
        2017-09-13 07:03 - 2017-09-05 08:31 - 001147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
        2017-09-13 07:03 - 2017-09-05 08:31 - 001024928 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
        2017-09-13 07:03 - 2017-09-05 08:31 - 000821664 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
        2017-09-13 07:03 - 2017-09-05 08:31 - 000750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
        2017-09-13 07:03 - 2017-09-05 08:31 - 000115792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
        2017-09-13 07:03 - 2017-09-05 08:26 - 008319904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
        2017-09-13 07:03 - 2017-09-05 08:26 - 001930840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
        2017-09-13 07:03 - 2017-09-05 08:25 - 000159648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
        2017-09-13 07:03 - 2017-09-05 08:24 - 000923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
        2017-09-13 07:03 - 2017-09-05 08:23 - 004462120 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
        2017-09-13 07:03 - 2017-09-05 08:20 - 001057824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
        2017-09-13 07:03 - 2017-09-05 08:19 - 004848960 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
        2017-09-13 07:03 - 2017-09-05 08:19 - 002443168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
        2017-09-13 07:03 - 2017-09-05 08:18 - 007326128 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
        2017-09-13 07:03 - 2017-09-05 08:18 - 005477096 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
        2017-09-13 07:03 - 2017-09-05 08:18 - 002972552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
        2017-09-13 07:03 - 2017-09-05 08:18 - 002647224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
        2017-09-13 07:03 - 2017-09-05 08:18 - 001668344 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
        2017-09-13 07:03 - 2017-09-05 08:18 - 000685512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
        2017-09-13 07:03 - 2017-09-05 08:18 - 000212384 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
        2017-09-13 07:03 - 2017-09-05 08:16 - 001320344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
        2017-09-13 07:03 - 2017-09-05 08:16 - 000872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
        2017-09-13 07:03 - 2017-09-05 08:16 - 000715168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
        2017-09-13 07:03 - 2017-09-05 08:16 - 000228256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
        2017-09-13 07:03 - 2017-09-05 08:16 - 000049720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbs.dll
        2017-09-13 07:03 - 2017-09-05 08:15 - 003116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
        2017-09-13 07:03 - 2017-09-05 08:15 - 000871448 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
        2017-09-13 07:03 - 2017-09-05 08:15 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
        2017-09-13 07:03 - 2017-09-05 08:15 - 000381824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
        2017-09-13 07:03 - 2017-09-05 08:15 - 000257440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
        2017-09-13 07:03 - 2017-09-05 08:14 - 021352656 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
        2017-09-13 07:03 - 2017-09-05 08:14 - 007907344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
        2017-09-13 07:03 - 2017-09-05 08:13 - 001619816 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
        2017-09-13 07:03 - 2017-09-05 08:13 - 000078240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncAppvPublishingServer.exe
        2017-09-13 07:03 - 2017-09-05 08:13 - 000064680 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 002229152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 001854880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 001693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 001462688 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000855456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000849824 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
        2017-09-13 07:03 - 2017-09-05 08:12 - 000844704 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000774560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000699808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000674720 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000406944 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000235424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe
        2017-09-13 07:03 - 2017-09-05 08:12 - 000203680 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamingUX.dll
        2017-09-13 07:03 - 2017-09-05 07:31 - 003668992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
        2017-09-13 07:03 - 2017-09-05 07:30 - 001639936 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
        2017-09-13 07:03 - 2017-09-05 07:30 - 001275904 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
        2017-09-13 07:03 - 2017-09-05 07:30 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
        2017-09-13 07:03 - 2017-09-05 07:30 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
        2017-09-13 07:03 - 2017-09-05 07:30 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
        2017-09-13 07:03 - 2017-09-05 07:30 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
        2017-09-13 07:03 - 2017-09-05 07:30 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
        2017-09-13 07:03 - 2017-09-05 07:30 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrvext.dll
        2017-09-13 07:03 - 2017-09-05 07:30 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
        2017-09-13 07:03 - 2017-09-05 07:28 - 017371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
        2017-09-13 07:03 - 2017-09-05 07:28 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
        2017-09-13 07:03 - 2017-09-05 07:27 - 007931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
        2017-09-13 07:03 - 2017-09-05 07:27 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\CfgSPCellular.dll
        2017-09-13 07:03 - 2017-09-05 07:27 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAPNCsp.dll
        2017-09-13 07:03 - 2017-09-05 07:27 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\datamarketsvc.dll
        2017-09-13 07:03 - 2017-09-05 07:27 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
        2017-09-13 07:03 - 2017-09-05 07:26 - 000499712 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
        2017-09-13 07:03 - 2017-09-05 07:26 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\csplte.dll
        2017-09-13 07:03 - 2017-09-05 07:26 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
        2017-09-13 07:03 - 2017-09-05 07:26 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
        2017-09-13 07:03 - 2017-09-05 07:26 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
        2017-09-13 07:03 - 2017-09-05 07:25 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
        2017-09-13 07:03 - 2017-09-05 07:25 - 000527872 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
        2017-09-13 07:03 - 2017-09-05 07:25 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
        2017-09-13 07:03 - 2017-09-05 07:25 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
        2017-09-13 07:03 - 2017-09-05 07:24 - 000385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvsc.dll
        2017-09-13 07:03 - 2017-09-05 07:24 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
        2017-09-13 07:03 - 2017-09-05 07:24 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput.dll
        2017-09-13 07:03 - 2017-09-05 07:24 - 000109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
        2017-09-13 07:03 - 2017-09-05 07:23 - 000739840 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
        2017-09-13 07:03 - 2017-09-05 07:23 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
        2017-09-13 07:03 - 2017-09-05 07:23 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
        2017-09-13 07:03 - 2017-09-05 07:23 - 000305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
        2017-09-13 07:03 - 2017-09-05 07:23 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
        2017-09-13 07:03 - 2017-09-05 07:23 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll
        2017-09-13 07:03 - 2017-09-05 07:22 - 000556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
        2017-09-13 07:03 - 2017-09-05 07:22 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
        2017-09-13 07:03 - 2017-09-05 07:22 - 000413184 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
        2017-09-13 07:03 - 2017-09-05 07:22 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
        2017-09-13 07:03 - 2017-09-05 07:22 - 000213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput8.dll
        2017-09-13 07:03 - 2017-09-05 07:21 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
        2017-09-13 07:03 - 2017-09-05 07:21 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
        2017-09-13 07:03 - 2017-09-05 07:20 - 007337472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
        2017-09-13 07:03 - 2017-09-05 07:20 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
        2017-09-13 07:03 - 2017-09-05 07:20 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
        2017-09-13 07:03 - 2017-09-05 07:20 - 000412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
        2017-09-13 07:03 - 2017-09-05 07:20 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
        2017-09-13 07:03 - 2017-09-05 07:20 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
        2017-09-13 07:03 - 2017-09-05 07:19 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
        2017-09-13 07:03 - 2017-09-05 07:19 - 001085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
        2017-09-13 07:03 - 2017-09-05 07:19 - 001028608 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
        2017-09-13 07:03 - 2017-09-05 07:19 - 000996864 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
        2017-09-13 07:03 - 2017-09-05 07:19 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
        2017-09-13 07:03 - 2017-09-05 07:19 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
        2017-09-13 07:03 - 2017-09-05 07:19 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 004175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 000922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 000874496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 000803328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
        2017-09-13 07:03 - 2017-09-05 07:17 - 002765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
        2017-09-13 07:03 - 2017-09-05 07:17 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
        2017-09-13 07:03 - 2017-09-05 07:17 - 001397760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
        2017-09-13 07:03 - 2017-09-05 07:16 - 002805248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
        2017-09-13 07:03 - 2017-09-05 07:16 - 002680320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
        2017-09-13 07:03 - 2017-09-05 07:16 - 000440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
        2017-09-13 07:03 - 2017-09-05 07:16 - 000397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 004396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 003307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 003059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 002503680 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 002055680 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
        2017-09-13 07:03 - 2017-09-05 07:15 - 001736704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 001460224 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 001077248 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 000706560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
        2017-09-13 07:03 - 2017-09-05 07:14 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
        2017-09-13 07:03 - 2017-09-05 07:14 - 002445824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
        2017-09-13 07:03 - 2017-09-05 07:14 - 002177024 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
        2017-09-13 07:03 - 2017-09-05 07:14 - 002006528 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
        2017-09-13 07:03 - 2017-09-05 07:14 - 000986624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
        2017-09-13 07:03 - 2017-09-05 07:14 - 000810496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
        2017-09-13 07:03 - 2017-09-05 07:13 - 001802752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
        2017-09-13 07:03 - 2017-09-05 07:13 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
        2017-09-13 07:03 - 2017-09-05 07:12 - 002153984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
        2017-09-13 07:03 - 2017-09-05 07:11 - 000254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
        2017-09-13 07:03 - 2017-09-05 07:09 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll
        2017-09-13 07:03 - 2017-09-05 07:07 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\RstrtMgr.dll
        2017-09-13 07:03 - 2017-09-05 07:07 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll
        2017-09-13 07:03 - 2017-09-01 08:55 - 000031932 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
        2017-08-25 23:36 - 2017-09-13 21:06 - 000000000 ____D C:\Users\Стоянчо\Desktop\red
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-09-24 23:13 - 2017-02-05 23:56 - 000000000 ____D C:\ProgramData\Gramblr
        2017-09-24 22:54 - 2017-06-18 07:23 - 000000000 ____D C:\Users\Стоянчо\Desktop\яяь
        2017-09-24 20:10 - 2017-06-30 01:05 - 000004212 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{33349A0F-B0C0-4DB3-AFE6-0F51132F45D5}
        2017-09-24 19:38 - 2017-06-30 00:42 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
        2017-09-24 17:36 - 2017-06-30 01:05 - 000004276 _____ C:\WINDOWS\System32\Tasks\Software Updater
        2017-09-24 13:12 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\AppReadiness
        2017-09-24 13:06 - 2015-09-13 15:31 - 000000000 __SHD C:\Users\Стоянчо\IntelGraphicsProfiles
        2017-09-23 19:06 - 2015-09-13 15:01 - 000000000 ____D C:\Users\Стоянчо\AppData\Local\Packages
        2017-09-23 19:04 - 2015-09-25 17:35 - 000000000 ____D C:\Users\Стоянчо\AppData\Roaming\uTorrent
        2017-09-23 18:02 - 2017-07-18 10:48 - 000001085 _____ C:\Users\Стоянчо\Desktop\Нов текстов документ.txt
        2017-09-23 15:14 - 2017-02-05 23:57 - 000000000 ____D C:\Program Files\Gramblr
        2017-09-23 13:05 - 2017-06-30 01:03 - 002547028 _____ C:\WINDOWS\system32\PerfStringBackup.INI
        2017-09-23 13:05 - 2015-12-04 21:09 - 001132696 _____ C:\WINDOWS\system32\perfh002.dat
        2017-09-23 13:05 - 2015-12-04 21:09 - 000334978 _____ C:\WINDOWS\system32\perfc002.dat
        2017-09-23 13:00 - 2017-06-30 01:05 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
        2017-09-23 13:00 - 2017-03-18 14:40 - 001572864 _____ C:\WINDOWS\system32\config\BBI
        2017-09-23 07:37 - 2017-03-19 00:03 - 000000000 ___HD C:\Program Files\WindowsApps
        2017-09-22 07:46 - 2017-06-30 00:48 - 000000000 ____D C:\Users\Стоянчо
        2017-09-22 06:18 - 2017-07-27 20:57 - 000003382 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3274723310-3931731729-1199849900-1001
        2017-09-22 06:17 - 2015-09-13 15:03 - 000002401 _____ C:\Users\Стоянчо\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
        2017-09-22 06:17 - 2015-09-13 15:03 - 000000000 ___RD C:\Users\Стоянчо\OneDrive
        2017-09-19 06:55 - 2015-10-09 22:20 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
        2017-09-18 21:49 - 2017-03-19 00:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
        2017-09-14 02:24 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\rescache
        2017-09-14 02:16 - 2017-03-19 00:01 - 000000000 ____D C:\WINDOWS\INF
        2017-09-13 18:18 - 2015-09-13 15:01 - 000000000 __RHD C:\Users\Public\AccountPictures
        2017-09-13 18:15 - 2017-06-30 00:42 - 000381448 _____ C:\WINDOWS\system32\FNTCACHE.DAT
        2017-09-13 07:44 - 2017-03-20 06:21 - 000000000 ____D C:\WINDOWS\system32\bg
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ___SD C:\WINDOWS\system32\F12
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\system32\setup
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\ShellExperiences
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
        2017-09-13 07:20 - 2015-09-13 17:14 - 000000000 ____D C:\WINDOWS\system32\MRT
        2017-09-13 07:16 - 2017-03-18 23:51 - 000000000 ____D C:\WINDOWS\CbsTemp
        2017-09-13 07:16 - 2015-09-13 17:14 - 138202976 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
        2017-09-02 18:15 - 2017-03-19 00:06 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
        2017-09-02 18:15 - 2017-03-19 00:06 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
        2017-08-29 06:58 - 2016-09-11 19:33 - 000002270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
        2017-08-26 15:34 - 2017-08-05 17:48 - 000000000 ____D C:\Users\Стоянчо\Desktop\;[;.[plpl
        2017-08-25 07:37 - 2017-07-28 23:11 - 000000000 ____D C:\Users\Стоянчо\Desktop\dfere
        ==================== Files in the root of some directories =======
        2016-01-17 08:06 - 2017-07-17 07:19 - 000009216 _____ () C:\Users\Стоянчо\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
        2016-07-17 20:30 - 2016-07-17 20:30 - 000000036 _____ () C:\Users\Стоянчо\AppData\Local\housecall.guid.cache
        2015-09-13 15:16 - 2015-09-13 15:16 - 000000003 _____ () C:\Users\Стоянчо\AppData\Local\updater.log
        2015-09-13 15:16 - 2017-05-06 19:17 - 000000425 _____ () C:\Users\Стоянчо\AppData\Local\UserProducts.xml
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\WINDOWS\system32\winlogon.exe => File is digitally signed
        C:\WINDOWS\system32\wininit.exe => File is digitally signed
        C:\WINDOWS\explorer.exe => File is digitally signed
        C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
        C:\WINDOWS\system32\svchost.exe => File is digitally signed
        C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
        C:\WINDOWS\system32\services.exe => File is digitally signed
        C:\WINDOWS\system32\User32.dll => File is digitally signed
        C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
        C:\WINDOWS\system32\userinit.exe => File is digitally signed
        C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
        C:\WINDOWS\system32\rpcss.dll => File is digitally signed
        C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
        C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
        C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
        LastRegBack: 2017-09-19 19:38
        ==================== End of FRST.txt ============================
         
        Addition.txt
         
        Благодаря предварително.
    • Разглеждащи в момента   0 потребители

      Няма регистрирани потребители разглеждащи тази страница.

    • Дарение

    ×