Здравейте,от сутринта съм с този вирус и всичко е криптирано :-( Има ли някакъв шанс да си оправя снимките? 

Направи стъпките от важните теми в антивирусния раздел и вирусоборците ще ти помогнат, все пак не са гадатели

geri_brankova, прочети и изпълни инструкциите от линка по-долу. Публикувай нужното и изчакай член на екипа вирусоборци да даде указания за действие:

https://www.kaldata.com/forums/topic/132819-%d1%81%d0%b8%d1%81%d1%82%d0%b5%d0%bc%d0%b0%d1%82%d0%b0-%d0%bc%d0%b8-%d0%b5-%d0%b8%d0%bd%d1%84%d0%b5%d0%ba%d1%82%d0%b8%d1%80%d0%b0%d0%bd%d0%b0-%d0%ba%d0%b0%d0%ba%d0%b2%d0%be-%d0%b4%d0%b0-%d0%bf%d1%80%d0%b0%d0%b2%d1%8f-%d1%81%d0%b5%d0%b3%d0%b0/

Редактирано 6 октомври 201510 г. от ExaFlop (преглед на промените)

Благодаря,извинявам се ако не съм дала достатъчно информация,ама не съм много наясно с тези неща :-)

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:04-10-2015
Ran by mihail (administrator) on MIHAIL_BANEV (06-10-2015 19:55:33)
Running from C:\Users\mihail\Downloads
Loaded Profiles: mihail (Available Profiles: mihail & Administrator)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Windows\System32\AppleOSSMgr.exe
(Apple Inc.) C:\Windows\System32\AppleTimeSrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(ClientConnect Ltd.) C:\Program Files\Tbccint\ToolbarService\ToolbarService.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(Apple Inc.) C:\Program Files\Boot Camp\Bootcamp.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(BitTorrent Inc.) C:\Users\mihail\AppData\Roaming\uTorrent\uTorrent.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(BitTorrent Inc.) C:\Users\mihail\AppData\Roaming\uTorrent\updates\3.4.5_41162\utorrentie.exe
(BitTorrent Inc.) C:\Users\mihail\AppData\Roaming\uTorrent\updates\3.4.5_41162\utorrentie.exe
(BitTorrent Inc.) C:\Users\mihail\AppData\Roaming\uTorrent\updates\3.4.5_41162\utorrentie.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Apple_KbdMgr] => C:\Program Files\Boot Camp\Bootcamp.exe [526208 2011-06-29] (Apple Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [11930696 2013-03-29] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [SwitchBoard] => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-06] (Apple Inc.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3498728 2015-06-29] (Adobe Systems Inc.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-07-02] (Avast Software s.r.o.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [335232 2015-03-07] (Oracle Corporation)
HKLM\...\Run: [ApnTBMon] => C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1719184 2015-09-23] (APN)
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0
HKLM\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-21-4039825040-1470035039-3567437536-1000\...\Run: [uTorrent] => C:\Users\mihail\AppData\Roaming\uTorrent\uTorrent.exe [1821536 2015-09-26] (BitTorrent Inc.)
HKU\S-1-5-21-4039825040-1470035039-3567437536-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-06-28] (Google Inc.)
HKU\S-1-5-21-4039825040-1470035039-3567437536-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-4039825040-1470035039-3567437536-1000\...\Run: [BackgroundContainerV2] => "C:\Windows\system32\Rundll32.exe" "C:\Users\mihail\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun
HKU\S-1-5-21-4039825040-1470035039-3567437536-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [22040168 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-4039825040-1470035039-3567437536-1000\...\Policies\Explorer: [TaskbarNoNotification] 0
HKU\S-1-5-21-4039825040-1470035039-3567437536-1000\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-21-4039825040-1470035039-3567437536-1000\...\MountPoints2: {b349813c-42da-11e4-92f7-0023123f639a} - F:\HTC_Sync_Manager_PC.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-07-02] (Avast Software s.r.o.)
Startup: C:\Users\mihail\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\F90D.tmp [2015-10-05] ()
Startup: C:\Users\mihail\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\recovery.bmp [2015-10-05] ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{48E2D7A0-4A1B-4CBD-9F43-6B6AB5FB7450}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{4E6807E2-6611-4012-8ED6-1C7A5F2F534B}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-4039825040-1470035039-3567437536-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
HKU\S-1-5-21-4039825040-1470035039-3567437536-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
URLSearchHook: HKLM - uTorrentControl_v6 Toolbar - {96f454ea-9d38-474f-b504-56193e00c1a5} - C:\Users\mihail\AppData\LocalLow\uTorrentControl_v6\prxtbuTo0.dll (ClientConnect Ltd.)
SearchScopes: HKLM -> {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^HJ^xdm073^YYA^bg&si=pconvIE&ptb=37335993-2DE6-4F98-93C9-D271A3E767EB&ind=2014011414&n=780b6016&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKU\S-1-5-21-4039825040-1470035039-3567437536-1000 -> {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^HJ^xdm073^YYA^bg&si=pconvIE&ptb=37335993-2DE6-4F98-93C9-D271A3E767EB&ind=2014011414&n=780b6016&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKU\S-1-5-21-4039825040-1470035039-3567437536-1000 -> {E19983A3-D036-47C8-A4E5-D5848774F603} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3289075&CUI=UN42074021912978027&UM=1
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-04-03] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-07-02] (Avast Software s.r.o.)
BHO: uTorrentControl_v6 Toolbar -> {96f454ea-9d38-474f-b504-56193e00c1a5} -> C:\Users\mihail\AppData\LocalLow\uTorrentControl_v6\prxtbuTo0.dll [2014-09-23] (ClientConnect Ltd.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-23] (Google Inc.)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2013-12-21] (Adobe Systems Incorporated)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-03] (Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2013-12-21] (Adobe Systems Incorporated)
Toolbar: HKLM - uTorrentControl_v6 Toolbar - {96f454ea-9d38-474f-b504-56193e00c1a5} - C:\Users\mihail\AppData\LocalLow\uTorrentControl_v6\prxtbuTo0.dll [2014-09-23] (ClientConnect Ltd.)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2013-12-21] (Adobe Systems Incorporated)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-23] (Google Inc.)
Toolbar: HKU\S-1-5-21-4039825040-1470035039-3567437536-1000 -> uTorrentControl_v6 Toolbar - {96F454EA-9D38-474F-B504-56193E00C1A5} - C:\Users\mihail\AppData\LocalLow\uTorrentControl_v6\prxtbuTo0.dll [2014-09-23] (ClientConnect Ltd.)
Toolbar: HKU\S-1-5-21-4039825040-1470035039-3567437536-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-23] (Google Inc.)
Toolbar: HKU\S-1-5-21-4039825040-1470035039-3567437536-1000 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2013-12-21] (Adobe Systems Incorporated)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

FireFox:
========
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-02-20] ()
FF Plugin: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-04-03] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-03] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin: @VideoDownloadConverter_ScriptHelper.com/Plugin -> C:\Program Files\VideoDownloadConverter\npVDCPlugin.dll [No File]
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-28] (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-07-14] (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2012-10-01] (Microsoft Corporation)
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-09-15]
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-06-28]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.search.ask.com/?gct=hp
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR NewTab: Default -> "chrome-extension://nafaimnnclfjfedmmabolbppcngeolgf/newtab/newtab-hp.html"
CHR DefaultSearchURL: Default -> hxxp://www.search.ask.com/web?q={searchTerms}
CHR DefaultSearchKeyword: Default -> search.ask.com
CHR DefaultSuggestURL: Default -> hxxp://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
CHR Profile: C:\Users\mihail\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Ask Search) - C:\Users\mihail\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf [2015-04-03]
CHR Extension: (Google Slides) - C:\Users\mihail\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-04]
CHR Extension: (Google Docs) - C:\Users\mihail\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-06-28]
CHR Extension: (Google Drive) - C:\Users\mihail\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-04]
CHR Extension: (YouTube) - C:\Users\mihail\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-04]
CHR Extension: (Google Search) - C:\Users\mihail\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-04]
CHR Extension: (Tampermonkey) - C:\Users\mihail\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2015-04-03]
CHR Extension: (Adobe Acrobat - Create PDF) - C:\Users\mihail\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2014-11-25]
CHR Extension: (Google Sheets) - C:\Users\mihail\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-04]
CHR Extension: (Google Docs Offline) - C:\Users\mihail\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-06]
CHR Extension: (Avast Online Security) - C:\Users\mihail\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-11-04]
CHR Extension: (Conviertelo Facil) - C:\Users\mihail\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnfgnbjbgncejeohfokhemjomhapnfgg [2014-11-24]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\mihail\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-12]
CHR Extension: (Skype Click to Call) - C:\Users\mihail\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-06-30]
CHR Extension: (Ask Search) - C:\Users\mihail\AppData\Local\Google\Chrome\User Data\Default\Extensions\mppnoffgpafgpgbaigljliadgbnhljfl [2014-12-13]
CHR Extension: (iLivid) - C:\Users\mihail\AppData\Local\Google\Chrome\User Data\Default\Extensions\nafaimnnclfjfedmmabolbppcngeolgf [2014-12-13]
CHR Extension: (Chrome Web Store Payments) - C:\Users\mihail\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-03]
CHR Extension: (Gmail) - C:\Users\mihail\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-04]
CHR HKLM\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2015-10-01]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2015-06-29]
CHR HKLM\...\Chrome\Extension: [fjoijdanhaiflhibkljeklcghcmmfffh] - C:\Program Files\WebCake\WebCakeLayers.crx <not found>
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-07-02]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeActiveFileMonitor11.0; C:\Program Files\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated)
R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [206224 2015-09-23] (APN LLC.)
R2 AppleOSSMgr; C:\Windows\system32\AppleOSSMgr.exe [194432 2011-06-29] ()
R2 AppleTimeSrv; C:\Windows\system32\AppleTimeSrv.exe [100224 2011-06-29] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-07-02] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3207800 2015-07-02] (Avast Software)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 TBSrv; C:\Program Files\Tbccint\ToolbarService\ToolbarService.exe [350528 2014-03-31] (ClientConnect Ltd.)
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 AppleHFS; C:\Windows\system32\Drivers\AppleHFS.sys [49664 2011-06-13] (Apple Inc.) [File not signed]
R0 AppleMNT; C:\Windows\system32\Drivers\AppleMNT.sys [6784 2011-06-13] (Apple Inc.) [File not signed]
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-07-02] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [74976 2015-07-02] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-07-02] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-07-02] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787760 2015-07-02] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [428120 2015-07-02] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [106912 2015-07-02] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [209048 2015-07-02] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-06-29] (DT Soft Ltd)
R3 IRRemoteFlt; C:\Windows\System32\DRIVERS\IRFilter.sys [16512 2011-03-25] (Apple Inc.)
R2 KeyAgent; C:\Windows\system32\drivers\KeyAgent.sys [6528 2011-06-15] (Apple Inc.) [File not signed]
R3 KeyMagic; C:\Windows\System32\DRIVERS\KeyMagic.sys [26624 2011-05-26] (Apple Inc.)
R2 MacHALDriver; C:\Windows\system32\drivers\MacHALDriver.sys [12928 2011-03-25] (Apple Inc.) [File not signed]
R1 prl_boot; C:\Windows\System32\DRIVERS\prl_boot.sys [33864 2013-06-29] (Parallels Holdings, Ltd. and its affiliates.)
R0 prl_pv32; C:\Windows\System32\DRIVERS\prl_pv32.sys [30024 2013-06-29] (Parallels Holdings, Ltd. and its affiliates.)
R0 PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [46096 2012-08-10] (Corel Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220752 2015-07-02] (Avast Software)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-06 19:55 - 2015-10-06 19:55 - 01697792 _____ (Farbar) C:\Users\mihail\Downloads\FRST.exe
2015-10-06 19:55 - 2015-10-06 19:55 - 00022715 _____ C:\Users\mihail\Downloads\FRST.txt
2015-10-06 19:55 - 2015-10-06 19:55 - 00000000 ____D C:\FRST
2015-10-05 20:31 - 2015-10-05 20:31 - 00401934 _____ C:\Users\mihail\AppData\Roaming\recovery.bmp
2015-10-05 17:02 - 2015-10-05 20:29 - 00101533 _____ C:\Users\mihail\Downloads\0320623515 (1)[email protected]
2015-10-05 17:02 - 2015-10-05 20:29 - 00101356 _____ C:\Users\mihail\Downloads\0319020955 (1)[email protected]
2015-10-05 16:58 - 2015-10-05 20:29 - 00101533 _____ C:\Users\mihail\Downloads\[email protected]
2015-10-05 14:53 - 2015-10-05 20:29 - 00157790 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Dryzko_chenge_-4784-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 14:51 - 2015-10-05 20:29 - 00175388 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Sydruzhnik_po_nevolja_-2404-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 09:37 - 2015-10-05 20:29 - 00168764 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Nezhno_otkritie_-2534-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-04 12:44 - 2015-10-05 20:29 - 00130782 _____ C:\Users\mihail\Downloads\Dajana_Palmyr_-_Opasna_klopka_-2779-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-01 08:43 - 2015-10-05 20:24 - 00347899 _____ C:\Users\mihail\Desktop\[email protected]
2015-09-27 17:35 - 2015-10-05 20:29 - 00163018 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Zashtoto_te_obicham_-5048-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-09-27 17:26 - 2015-10-05 20:29 - 00141541 _____ C:\Users\mihail\Downloads\Jayne_Ann_Krentz_-_Dokosvane_na_zhena-16918.txt.zip.id-9281637568_hairullah@inbox.lv
2015-09-27 17:16 - 2015-10-05 20:29 - 00223660 _____ C:\Users\mihail\Downloads\Heather_Graham_-_2._Visok_tymen_i_opasen-27677.txt.zip.id-9281637568_hairullah@inbox.lv
2015-09-26 08:10 - 2015-10-06 06:47 - 00000000 ____D C:\Users\mihail\AppData\LocalLow\uTorrent
2015-09-24 12:40 - 2015-10-05 20:29 - 00230396 _____ C:\Users\mihail\Downloads\Dzhuli_Garuud_-_Ogyn_i_led_-5909-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-09-24 08:47 - 2015-10-05 20:29 - 00101356 _____ C:\Users\mihail\Downloads\[email protected]
2015-09-12 19:11 - 2015-10-05 20:29 - 00337993 _____ C:\Users\mihail\Downloads\Dzhuli_Garuud_-_Razbivach_na_syrtsa_-2794-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-09-12 19:10 - 2015-10-05 20:29 - 00307051 _____ C:\Users\mihail\Downloads\Dzhuli_Garuud_-_Ot_milost_-2796-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-09-10 12:34 - 2015-10-05 20:24 - 01024186 _____ C:\Users\mihail\Desktop\20150910['XJNN [email protected]
2015-09-10 12:33 - 2015-10-05 20:24 - 01094696 _____ C:\Users\mihail\Desktop\[email protected]
2015-09-09 12:22 - 2015-10-05 20:23 - 01639763 _____ C:\Users\mihail\Desktop\[email protected]
2015-09-08 10:20 - 2015-10-05 20:29 - 00253720 _____ C:\Users\mihail\Downloads\Dzhuli_Garuud_-_Skrita_kamera_-4920-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-09-08 10:17 - 2015-10-05 20:29 - 00239566 _____ C:\Users\mihail\Downloads\Dzhuli_Garuud_-_Tants_v_senkite_-2798-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-09-08 10:15 - 2015-10-05 20:29 - 00305677 _____ C:\Users\mihail\Downloads\Dzhuli_Garuud_-_Ubijstven_char_-2795-b.txt.zip.id-9281637568_hairullah@inbox.lv

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-06 19:55 - 2013-06-28 22:20 - 00000000 ____D C:\Users\mihail\AppData\Roaming\uTorrent
2015-10-06 19:47 - 2013-06-29 07:38 - 00000000 ____D C:\Users\mihail\AppData\Roaming\Skype
2015-10-06 19:08 - 2013-06-28 22:29 - 00000886 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-06 18:08 - 2013-06-28 22:29 - 00000882 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-06 06:48 - 2014-12-01 14:59 - 00000000 ____D C:\Users\mihail\Desktop\SNIMKI
2015-10-06 06:48 - 2013-06-29 07:52 - 00000000 ____D C:\Users\mihail\AppData\Local\Adobe
2015-10-06 06:45 - 2009-07-14 07:34 - 00026768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-06 06:45 - 2009-07-14 07:34 - 00026768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-06 06:42 - 2010-11-21 00:01 - 00785390 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-06 06:38 - 2009-07-14 07:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-06 06:38 - 2009-07-14 07:39 - 00094397 _____ C:\Windows\setupact.log
2015-10-05 20:29 - 2015-09-03 11:18 - 00272134 _____ C:\Users\mihail\Downloads\Dzhuli_Garuud_-_Spisyk_s_ubijstva_-2797-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-09-03 11:17 - 00297401 _____ C:\Users\mihail\Downloads\Luiz_Begshou_-_Sydba_-6784-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-09-03 11:15 - 00291425 _____ C:\Users\mihail\Downloads\Luiz_Begshou_-_Strast_-5571-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-09-03 09:32 - 00182907 _____ C:\Users\mihail\Downloads\Sandra_Braun_-_Truden_izbor_-3905-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-09-03 09:30 - 00228094 _____ C:\Users\mihail\Downloads\Hedyr_Greym_-_Ubijstveno_krasiv_-5192-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-09-03 09:27 - 00125314 _____ C:\Users\mihail\Downloads\Dajana_Palmyr_-_Jarostna_strast_-6908-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-09-02 12:44 - 00152692 _____ C:\Users\mihail\Downloads\Sandra_Braun_-_Bjagstvo_-4141-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-08-24 17:29 - 00342341 _____ C:\Users\mihail\Downloads\Sandra_Braun_-_Zdravej_tyma_-3966-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-07-31 16:00 - 00161625 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Ljubov_i_zakon_-4752-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-07-31 15:54 - 00097996 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Zhenata_na_Sylivan_-5388-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-07-31 15:48 - 00336673 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Gorchivo_nebe_-4800-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-07-30 18:24 - 00319508 _____ C:\Users\mihail\Downloads\Sandra_Braun_-_Prevratnosti_-5861-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-07-30 18:23 - 00145090 _____ C:\Users\mihail\Downloads\Sandra_Braun_-_Vryshtane_kym_zhivota_-5456-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-07-30 18:20 - 00310373 _____ C:\Users\mihail\Downloads\Sandra_Braun_-_Smyrtonosno_-6788-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-07-30 18:17 - 00246106 _____ C:\Users\mihail\Downloads\Rejchyl_Gibsyn_-_Istinski_priznanija_-4440-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-07-30 12:51 - 00256162 _____ C:\Users\mihail\Downloads\Rejchyl_Gibsyn_-_Vljuben_do_bezumie_-6815-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-07-18 14:19 - 00357791 _____ C:\Users\mihail\Downloads\Sandra_Braun_-_Alibito_-2830-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-07-17 07:00 - 00151023 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Omagxosana_-3768-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-07-17 06:57 - 00160460 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Charodejna_sila_-2651-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-07-15 21:50 - 00178218 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_V_plen_na_magijata_-5046-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-07-11 21:32 - 00177355 _____ C:\Users\mihail\Downloads\Nora_Roberts_-_NnD_-_2._Magxosnitsata-26509.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-07-05 21:54 - 00432333 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Bozhestveno_zlo_-5383-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-06-29 07:26 - 639759333 _____ C:\Users\mihail\Downloads\2015-06-19 RD Paolina, [email protected]
2015-10-05 20:29 - 2015-06-25 15:42 - 445461244 _____ C:\Users\mihail\Downloads\[email protected]
2015-10-05 20:29 - 2015-06-19 13:04 - 00345994 _____ C:\Users\mihail\Downloads\Sandra_Braun_-_Sdelka_za_milioni_-4074-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-06-17 19:00 - 00338308 _____ C:\Users\mihail\Downloads\Sandra_Braun_-_Nisko_naljagane_-6787-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-06-12 08:20 - 00339987 _____ C:\Users\mihail\Downloads\Sandra_Braun_-_Poslednijat_den_na_karnavala_-3846-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-06-08 14:05 - 00403721 _____ C:\Users\mihail\Downloads\Sandra_Braun_-_Zavist_-5498-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-06-06 12:22 - 00375132 _____ C:\Users\mihail\Downloads\Sandra_Braun_-_Frenska_koprina_-5063-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-05-31 14:06 - 00441642 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Otrova_-2819-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-05-24 20:14 - 00360326 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Tiha_klopka_-4761-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-05-23 07:04 - 01460604 _____ C:\Users\mihail\Downloads\[email protected]
2015-10-05 20:29 - 2015-05-23 07:04 - 01416475 _____ C:\Users\mihail\Downloads\[email protected]
2015-10-05 20:29 - 2015-05-23 07:03 - 01629485 _____ C:\Users\mihail\Downloads\[email protected]
2015-10-05 20:29 - 2015-05-23 07:03 - 01518331 _____ C:\Users\mihail\Downloads\[email protected]
2015-10-05 20:29 - 2015-05-22 07:12 - 00357683 _____ C:\Users\mihail\Downloads\Sandra_Braun_-_Bezposhtadno_-5471-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-05-14 15:05 - 00308680 _____ C:\Users\mihail\Downloads\Sandra_Braun_-_Zad_kadyr_-4725-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-05-12 12:11 - 00306240 _____ C:\Users\mihail\Downloads\Sandra_Braun_-_Uvlechenieto_-4571-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-05-11 06:43 - 00014436 _____ C:\Users\mihail\Downloads\zaqvlenie_zapisvane (1)[email protected]
2015-10-05 20:29 - 2015-05-11 06:43 - 00000000 ____D C:\Users\mihail\Desktop\zaqvlenie_zapisvane (1)_files
2015-10-05 20:29 - 2015-05-11 06:41 - 00014436 _____ C:\Users\mihail\Downloads\[email protected]
2015-10-05 20:29 - 2015-05-04 13:10 - 00341440 _____ C:\Users\mihail\Downloads\Sandra_Braun_-_Dimna_zavesa_-5929-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-05-04 07:39 - 00296618 _____ C:\Users\mihail\Downloads\Barbara_Delinski_-_Bjagstvoto_-6841-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-04-29 20:15 - 00099170 _____ C:\Users\mihail\Downloads\Mihail [email protected]
2015-10-05 20:29 - 2015-04-29 20:15 - 00092657 _____ C:\Users\mihail\Downloads\Mihail Banev1012b (1)[email protected]
2015-10-05 20:29 - 2015-04-29 20:15 - 00090122 _____ C:\Users\mihail\Downloads\Mihail [email protected]
2015-10-05 20:29 - 2015-04-29 20:15 - 00086402 _____ C:\Users\mihail\Downloads\Mihail [email protected]
2015-10-05 20:29 - 2015-04-29 20:15 - 00084182 _____ C:\Users\mihail\Downloads\Mihail [email protected]
2015-10-05 20:29 - 2015-04-29 20:15 - 00083004 _____ C:\Users\mihail\Downloads\Mihail [email protected]
2015-10-05 20:29 - 2015-04-29 20:15 - 00081860 _____ C:\Users\mihail\Downloads\Mihail [email protected]
2015-10-05 20:29 - 2015-04-29 20:15 - 00081860 _____ C:\Users\mihail\Downloads\Mihail Banev1011b (1)[email protected]
2015-10-05 20:29 - 2015-04-29 20:15 - 00079663 _____ C:\Users\mihail\Downloads\Mihail [email protected]
2015-10-05 20:29 - 2015-04-29 20:15 - 00052412 _____ C:\Users\mihail\Downloads\Mihail [email protected]
2015-10-05 20:29 - 2015-04-29 20:15 - 00052393 _____ C:\Users\mihail\Downloads\Mihail [email protected]
2015-10-05 20:29 - 2015-04-29 20:15 - 00052393 _____ C:\Users\mihail\Downloads\Mihail [email protected]
2015-10-05 20:29 - 2015-04-29 20:15 - 00033631 _____ C:\Users\mihail\Downloads\Mihail Banev [email protected]
2015-10-05 20:29 - 2015-04-29 20:14 - 00092657 _____ C:\Users\mihail\Downloads\Mihail [email protected]
2015-10-05 20:29 - 2015-04-29 07:14 - 00395407 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Krajat_na_rekata_-4731-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-04-04 16:16 - 00170844 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Vsichko_koeto_blesti_-5386-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-04-04 16:16 - 00136895 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Bez_sleda_-5382-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-04-04 16:15 - 00168352 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Vyv_vihyra_na_tantsa_-5429-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-04-04 16:14 - 00167026 _____ C:\Users\mihail\Downloads\Nora_Roberts_-_SO_-_1._Trudna_istina-28420.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-04-04 15:59 - 00226706 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Bezsramna_dobrodetel_-2975-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-04-04 15:56 - 00439956 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Chestni_iljuzii_-4776-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-04-04 15:54 - 00390809 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Prokljatieto_na_Anzhelik_-5170-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-04-04 15:52 - 00447716 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Vygleni_v_myrtva_pepel_-5430-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-04-04 15:50 - 00160765 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Vodopad_v_pustinjata_-2912-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-04-03 20:12 - 11539852 _____ C:\Users\mihail\Downloads\KeepVid Video Joiner - [email protected]
2015-10-05 20:29 - 2015-04-02 16:34 - 00358286 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Svidetelkata_-6804-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-04-02 14:17 - 00164329 _____ C:\Users\mihail\Downloads\Tes_Geritsyn_-_Po_tehnite_stypki_-5684-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-04-01 18:19 - 00170749 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Dni_na_promeni_-5432-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-04-01 12:15 - 00192963 _____ C:\Users\mihail\Downloads\Tes_Geritsyn_-_Vinovna_do_dokazvane_na_protivnoto_-5728-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-31 14:52 - 00170597 _____ C:\Users\mihail\Downloads\Tes_Geritsyn_-_Gonitbata_-6351-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-30 17:49 - 00190676 _____ C:\Users\mihail\Downloads\Tes_Geritsyn_-_V_polunosht_-6292-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-30 08:12 - 00168134 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Noshten_dim_-3867-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-27 23:12 - 00170842 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Noshtna_tyma_-3996-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-27 12:49 - 00187751 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Noshtni_senki_-3865-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-25 19:07 - 00157834 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Izpitanie_na_chuvstvata_-5142-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-25 10:32 - 00182760 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Angel_hranitel_-5381-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-24 15:49 - 00174922 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Opasna_igra_-4801-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-23 19:41 - 00170956 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Sladostta_na_zhivota_-5440-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-20 18:32 - 00347750 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Smyrt_kraj_Zmijskata_reka_-3784-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-19 13:32 - 00431490 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Kak_angelite_plachat_-4947-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-18 08:22 - 00241323 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Polunosht_v_stajata_na_senkite_-3129-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-17 13:45 - 00250322 _____ C:\Users\mihail\Downloads\Nora_Roberts_-_Zns_-_3._Sveshtenijat_kamyk-21227.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-16 13:25 - 00250463 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Grad_na_demoni_-4038-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-15 13:42 - 00254683 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Kryvni_bratja_-4035-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-14 19:37 - 00156380 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Tajna_zvezda_-2818-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-14 13:57 - 00148384 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Plenena_zvezda_-4782-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-13 14:10 - 00149242 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Skrita_zvezda_-2691-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-13 14:06 - 00167283 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Da_preskochish_granitsite_-3760-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-11 15:30 - 00227547 _____ C:\Users\mihail\Downloads\Nora_Roberts_-_SK_-_3._Rodena_v_grjah-28417.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-10 13:46 - 00297489 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Rodena_v_led_-2593-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-09 10:43 - 00266992 _____ C:\Users\mihail\Downloads\Nora_Roberts_-_SK_-_1._Rodena_v_plamyk-11234.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-07 19:35 - 00161219 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Slynchevata_Kembyl_-4701-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-06 18:34 - 00208072 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Sezoni_na_ljubovta_-4709-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-05 20:16 - 00147409 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Dzhakpot_-4754-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-05 14:17 - 00229205 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Tyrsachi_na_shtastie_-4708-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-04 16:51 - 00173768 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Sega_i_zavinagi_-2814-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-02 21:59 - 00160786 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Zovyt_na_syrtseto_-2815-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-03-01 21:49 - 00161087 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Vsichko_e_ljubov_-2812-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-02-28 21:17 - 00171885 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Da_izkushish_sydbata_-4707-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-02-27 15:35 - 00171976 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Skriti_tajni_-2453-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-02-27 13:48 - 00158597 _____ C:\Users\mihail\Downloads\Nora_Roberts_-_M_-_1._V_plamyka_na_strastta-21595.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-02-26 20:15 - 00170560 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Izumrudite_na_Bianka_-5433-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-02-26 10:42 - 00173678 _____ C:\Users\mihail\Downloads\Nora_Roberts_-_SK_-_3._Ljubovta_na_Lajla-10951.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-02-25 20:15 - 00101532 _____ C:\Users\mihail\Downloads\Nora_Roberts_-_SK_-_2._Syprug_za_Amanda-28419.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-02-25 15:44 - 00117356 _____ C:\Users\mihail\Downloads\Nora_Roberts_-_SK_-_1._Opasna_tajna-15555.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-02-25 14:08 - 00172186 _____ C:\Users\mihail\Downloads\Nora_Roberts_-_SI_-_1._Noshtni_ptitsi-11236.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-02-24 17:18 - 00264806 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Sbydnati_mechti_-4996-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-02-23 13:41 - 00307443 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Tajni_i_mechti_-3629-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-02-21 16:21 - 00283920 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Sinja_dalija_-2948-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-02-21 14:17 - 00309870 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Dyrzost_i_mechti_-5047-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-02-19 20:11 - 00399002 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Tochno_po_pladne_-5050-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-02-18 17:49 - 00413135 _____ C:\Users\mihail\Downloads\Nora_Robyrts_-_Bregyt_na_tymnata_voda_-5428-b.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-02-16 19:02 - 00164462 _____ C:\Users\mihail\Downloads\Nora_Roberts_-_BM_-_4._Padenieto_na_Shejn-28415.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-02-16 19:02 - 00162554 _____ C:\Users\mihail\Downloads\Nora_Roberts_-_BM_-_3._Syrtseto_na_Devin_Makejd-22639.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-02-16 19:01 - 00145781 _____ C:\Users\mihail\Downloads\Nora_Roberts_-_BM_-_2._Opasno_izkushenie-23073.txt.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-02-04 09:56 - 01453319 _____ C:\Users\mihail\Downloads\IMG_0042 (1)[email protected]
2015-10-05 20:29 - 2015-02-04 09:07 - 01453319 _____ C:\Users\mihail\Downloads\[email protected]
2015-10-05 20:29 - 2015-02-04 09:07 - 01401984 _____ C:\Users\mihail\Downloads\[email protected]
2015-10-05 20:29 - 2015-01-27 23:29 - 00090194 _____ C:\Users\mihail\Downloads\[email protected]
2015-10-05 20:29 - 2015-01-22 21:54 - 00039157 _____ C:\Users\mihail\Downloads\Foto+1 (2)[email protected]
2015-10-05 20:29 - 2015-01-22 21:53 - 00037806 _____ C:\Users\mihail\Downloads\Foto+2(2) (1)[email protected]
2015-10-05 20:29 - 2015-01-22 14:00 - 00039157 _____ C:\Users\mihail\Downloads\Foto+1 (1)[email protected]
2015-10-05 20:29 - 2015-01-22 13:59 - 00039157 _____ C:\Users\mihail\Downloads\[email protected]
2015-10-05 20:29 - 2015-01-22 13:59 - 00037806 _____ C:\Users\mihail\Downloads\Foto+2(2)[email protected]
2015-10-05 20:29 - 2015-01-18 18:50 - 01597610 _____ C:\Users\mihail\Downloads\vectorig_NANO_kluchodarjatel.cdr.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2015-01-18 18:50 - 01475363 _____ C:\Users\mihail\Downloads\12_01 za expo (1)[email protected]
2015-10-05 20:29 - 2015-01-07 15:43 - 00000000 ____D C:\Users\mihail\Documents\Calibre Library
2015-10-05 20:29 - 2014-12-14 15:49 - 00164440 _____ C:\Users\mihail\Downloads\the.equalizer.2014.bluray(subsunacs.net)[email protected]
2015-10-05 20:29 - 2014-12-14 15:49 - 00000000 ____D C:\Users\mihail\Downloads\the.equalizer.2014.bluray(subsunacs.net)
2015-10-05 20:29 - 2014-12-07 00:15 - 423362048 _____ C:\Users\mihail\Downloads\VGA_Intel_10.18.10.3383_W7x64_A.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2014-12-07 00:03 - 38339120 _____ C:\Users\mihail\Downloads\Chipset_Intel_9.4.0.1026_W7x64_A (1)[email protected]
2015-10-05 20:29 - 2014-12-06 23:55 - 38339120 _____ C:\Users\mihail\Downloads\Chipset_Intel_9.4.0.1026_W7x64_A.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2014-12-06 23:53 - 12812606 _____ C:\Users\mihail\Downloads\Lan_Realtek_7.78.1218.2013_W7x64_A.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2014-12-06 23:47 - 13231376 _____ C:\Users\mihail\Downloads\USB [email protected]
2015-10-05 20:29 - 2014-12-06 23:31 - 249383893 _____ C:\Users\mihail\Downloads\Wireless LAN_Atheros_10.0.0.285_W7x64_A.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2014-12-06 23:26 - 273475738 _____ C:\Users\mihail\Downloads\Wireless LAN_Broadcom_6.30.223.228_W7x64_A.zip.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2014-12-06 23:15 - 00519765 _____ C:\Users\mihail\Downloads\[email protected]
2015-10-05 20:29 - 2014-12-04 23:17 - 01303896 _____ C:\Users\mihail\Downloads\[email protected]
2015-10-05 20:29 - 2014-10-18 10:24 - 00012180 _____ C:\Users\mihail\Desktop\[email protected]
2015-10-05 20:29 - 2014-06-24 09:25 - 00050692 _____ C:\Users\mihail\Downloads\Priloj_11_Spravka_doxodi_kreitoisk_sadlajnik_2012.doc.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2014-06-07 12:36 - 00032976 _____ C:\Users\mihail\Downloads\[email protected]
2015-10-05 20:29 - 2014-06-07 12:34 - 00037581 _____ C:\Users\mihail\Downloads\Ghosts.of.Girlfriends.Past.1080p.BluRay.x264_CBGB.(subs.sab.bz)[email protected]
2015-10-05 20:29 - 2014-06-07 12:33 - 00034643 _____ C:\Users\mihail\Downloads\Tomcats.2001.720p.BluRay.x264-PSYCHD.rar.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2014-06-06 19:39 - 00092707 _____ C:\Users\mihail\Downloads\Last_Vegas_2013.(subs.sab.bz)[email protected]
2015-10-05 20:29 - 2014-05-14 21:44 - 00562195 _____ C:\Users\mihail\Downloads\Kreon_listovka_kolelo_forma 50_23 (1)[email protected]
2015-10-05 20:29 - 2014-05-14 21:43 - 00562195 _____ C:\Users\mihail\Downloads\Kreon_listovka_kolelo_forma [email protected]
2015-10-05 20:29 - 2014-05-08 22:38 - 00525721 _____ C:\Users\mihail\Documents\[email protected]
2015-10-05 20:29 - 2014-04-17 09:45 - 00012116 ___SH C:\Users\mihail\Downloads\AlbumArt_{B5413441-932D-48ED-BB80-CECF89EF8B8E}[email protected]
2015-10-05 20:29 - 2014-04-17 09:45 - 00003124 ___SH C:\Users\mihail\Downloads\AlbumArt_{B5413441-932D-48ED-BB80-CECF89EF8B8E}[email protected]
2015-10-05 20:29 - 2014-04-16 17:02 - 00032398 ___SH C:\Users\mihail\Downloads\[email protected]
2015-10-05 20:29 - 2014-04-16 17:02 - 00009124 ___SH C:\Users\mihail\Downloads\AlbumArt_{81D815E3-8353-485D-8B22-2309F6DB2057}[email protected]
2015-10-05 20:29 - 2014-04-16 17:02 - 00007268 ___SH C:\Users\mihail\Downloads\[email protected]
2015-10-05 20:29 - 2014-04-16 17:02 - 00002388 ___SH C:\Users\mihail\Downloads\AlbumArt_{81D815E3-8353-485D-8B22-2309F6DB2057}[email protected]
2015-10-05 20:29 - 2014-03-22 12:44 - 00297332 _____ C:\Users\mihail\Downloads\[email protected]
2015-10-05 20:29 - 2014-02-04 13:31 - 00081104 _____ C:\Users\mihail\Downloads\[email protected]
2015-10-05 20:29 - 2014-01-18 21:46 - 00000000 ____D C:\Users\mihail\Desktop\The.Wolf.of.Wall.Street.2013.DVDSCR.XviD-BiDA
2015-10-05 20:29 - 2013-12-03 23:09 - 00385695 _____ C:\Users\mihail\Downloads\22 10 za [email protected]
2015-10-05 20:29 - 2013-11-15 22:52 - 00402345 _____ C:\Users\mihail\Downloads\Unicredit_CF_tree_2PMS_production.pdf.id-9281637568_hairullah@inbox.lv
2015-10-05 20:29 - 2013-11-15 22:52 - 00402345 _____ C:\Users\mihail\Downloads\Unicredit_CF_tree_2PMS_production (1)[email protected]
2015-10-05 20:29 - 2013-07-14 21:33 - 00000000 ____D C:\Users\mihail\Downloads\Adobe Photoshop Lightroom v4.4 Final (x32-x64)
2015-10-05 20:29 - 2013-07-14 16:13 - 00000000 ____D C:\Users\mihail\Downloads\Adobe.Photoshop.Elements.v11.0.Multilingual.Incl.Keymaker-CORE
2015-10-05 20:29 - 2013-07-13 21:04 - 00000000 ____D C:\Users\mihail\Downloads\Adobe CS6 All Products Activator (x32 & x64)
2015-10-05 20:29 - 2013-06-30 19:07 - 00000000 ____D C:\Users\mihail\Downloads\Microsoft Office 2013 Professional Plus VL (x86-x64) EN (MSDN-TechNet)
2015-10-05 20:29 - 2013-06-30 08:32 - 00000000 ____D C:\Users\mihail\Downloads\Mac books
2015-10-05 20:29 - 2013-06-29 07:50 - 00000000 ____D C:\Users\mihail\Downloads\WinRAR v4.20 Final (x32-x64) BG
2015-10-05 20:29 - 2013-06-28 23:50 - 630986578 _____ C:\Users\mihail\Downloads\[email protected]
2015-10-05 20:29 - 2013-06-28 23:49 - 05179484 _____ C:\Users\mihail\Downloads\[email protected]
2015-10-05 20:26 - 2014-08-23 07:12 - 00000000 ____D C:\Users\mihail\Desktop\nikon 5100
2015-10-05 20:26 - 2013-07-02 20:44 - 00000000 ____D C:\Users\mihail\Desktop\prepress
2015-10-05 20:24 - 2015-02-08 09:34 - 00000000 ____D C:\Users\mihail\Desktop\KNIGI
2015-10-05 20:24 - 2014-06-30 22:09 - 00024580 _____ C:\Users\mihail\Desktop\ccb [email protected]
2015-10-05 20:24 - 2014-05-08 21:54 - 00000000 ____D C:\Users\mihail\Desktop\apartament
2015-10-05 20:24 - 2013-11-15 20:06 - 00358378 _____ C:\Users\mihail\Desktop\[email protected]
2015-10-05 20:24 - 2013-06-29 21:13 - 00000000 ____D C:\Users\mihail\Desktop\movies
2015-10-05 20:23 - 2015-08-27 09:22 - 00966157 _____ C:\Users\mihail\Desktop\[email protected]
2015-10-05 20:23 - 2014-01-22 10:47 - 00117114 _____ C:\Users\mihail\Desktop\1234651_10151890854285843_1649327872_n.jpg.id-9281637568_hairullah@inbox.lv
2015-10-05 20:19 - 2013-06-29 07:41 - 00000000 ____D C:\Users\mihail\AppData\Roaming\DAEMON Tools Lite
2015-10-05 20:18 - 2015-05-04 19:53 - 00000000 ____D C:\Users\mihail\AppData\OICE_15_974FA576_32C1D314_611
2015-10-05 20:18 - 2013-12-11 10:47 - 00000000 ____D C:\Users\mihail\AppData\OICE_15_974FA576_32C1D314_1ABC
2015-10-05 20:18 - 2013-06-28 22:20 - 00000000 ____D C:\Users\mihail\AppData\LocalLow\uTorrentControl_v6
2015-10-05 20:17 - 2013-06-30 20:01 - 00000000 ____D C:\Users\mihail\AppData\Local\Microsoft Toolkit
2015-10-05 20:17 - 2013-06-28 21:44 - 13136304 ____H C:\Users\mihail\AppData\Local\[email protected]
2015-10-05 20:16 - 2014-06-16 16:00 - 00000000 ____D C:\Users\mihail\Desktop\Prodavalnik
2015-10-05 20:16 - 2013-06-29 07:52 - 00000000 ____D C:\ProgramData\Adobe
2015-10-05 20:15 - 2013-07-13 18:54 - 00000000 ____D C:\Users\Administrator\AppData\LocalLow\uTorrentControl_v6
2015-10-05 20:15 - 2013-07-10 22:28 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Skype
2015-10-05 20:15 - 2013-07-03 22:03 - 01175159 ____H C:\Users\Administrator\AppData\Local\[email protected]
2015-10-05 20:11 - 2013-06-28 22:22 - 00000000 ____D C:\Users\mihail\AppData\LocalLow\PriceGong
2015-10-05 06:09 - 2009-07-14 07:33 - 05938824 _____ C:\Windows\system32\FNTCACHE.DAT
2015-09-23 06:38 - 2009-07-14 07:53 - 00032562 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-09-15 18:59 - 2013-06-28 22:28 - 00000000 ____D C:\Users\mihail\AppData\Local\Google

==================== Files in the root of some directories =======

2015-10-05 20:31 - 2015-10-05 20:31 - 0401934 _____ () C:\Users\mihail\AppData\Roaming\recovery.bmp
2013-09-19 22:00 - 2013-09-19 22:00 - 145672688 _____ () C:\Users\mihail\AppData\Local\ACCCx2_1_2_232.zip.aamdownload
2013-09-19 22:00 - 2013-09-19 22:00 - 0001732 _____ () C:\Users\mihail\AppData\Local\ACCCx2_1_2_232.zip.aamdownload.aamd
2014-11-25 12:22 - 2014-11-25 12:22 - 0000036 _____ () C:\Users\mihail\AppData\Local\housecall.guid.cache
2013-08-05 23:52 - 2013-08-05 23:52 - 0007610 _____ () C:\Users\mihail\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
C:\Users\Administrator\AppData\Local\Temp\AAMHelper.exe
C:\Users\Administrator\AppData\Local\Temp\AdobeApplicationManager.exe
C:\Users\Administrator\AppData\Local\Temp\bassmod.dll
C:\Users\mihail\AppData\Local\Temp\AAMHelper.exe
C:\Users\mihail\AppData\Local\Temp\AdobeApplicationManager.exe
C:\Users\mihail\AppData\Local\Temp\APNSetup.exe
C:\Users\mihail\AppData\Local\Temp\aYlEnqimjMWgkYajBXSU.DLL
C:\Users\mihail\AppData\Local\Temp\bassmod.dll
C:\Users\mihail\AppData\Local\Temp\bitool.dll
C:\Users\mihail\AppData\Local\Temp\gTPtnZaFgcgKjvZaxBny.DLL
C:\Users\mihail\AppData\Local\Temp\JqtRgqvKoLGQoBtZzYqL.DLL
C:\Users\mihail\AppData\Local\Temp\kperra.exe
C:\Users\mihail\AppData\Local\Temp\NhTQMxDEIsZlfDfOWACo.DLL
C:\Users\mihail\AppData\Local\Temp\OPBgNQrddNeIAJeEIbcE.DLL
C:\Users\mihail\AppData\Local\Temp\readSTILog.dll
C:\Users\mihail\AppData\Local\Temp\Runner.exe
C:\Users\mihail\AppData\Local\Temp\SkypeSetup.exe
C:\Users\mihail\AppData\Local\Temp\utt4A6A.tmp.exe

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-10-01 15:38

==================== End of FRST.txt ============================

Addition.txt

Здравейте,

Изглежда имате още по-нов вариант на зловредната програма. Ще ви помоля да архивирате следните файлове:

C:\Users\mihail\AppData\Roaming\recovery.bmp
C:\Users\mihail\Downloads\0320623515 (1)[email protected]
C:\Users\mihail\Desktop\[email protected]
C:\Users\mihail\Downloads\[email protected]
C:\Users\mihail\AppData\Local\Temp\aYlEnqimjMWgkYajBXSU.DLL
C:\Users\mihail\AppData\Local\Temp\gTPtnZaFgcgKjvZaxBny.DLL
C:\Users\mihail\AppData\Local\Temp\JqtRgqvKoLGQoBtZzYqL.DLL
C:\Users\mihail\AppData\Local\Temp\kperra.exe
C:\Users\mihail\AppData\Local\Temp\NhTQMxDEIsZlfDfOWACo.DLL
C:\Users\mihail\AppData\Local\Temp\OPBgNQrddNeIAJeEIbcE.DLL
C:\Users\mihail\AppData\Local\Temp\utt4A6A.tmp.exe

И да качите архива на следния адрес => http://dox.abv.bg/files/sharenof

След това ми пратете линка за изтеглянето на архива на Лично Съобщение.

Благодаря!

Искам да копирам криптираните файлове, но и дори това не ми е разрешено.

 

Здравейте,

Получих вашето съобщение и благодарим за файлове. Пратени са за анализ.

За да отговоря на вашия въпрос ще кажа, че не е проблем да преинсталирате, но е добре да преместите всичките си важни криптирани документи от C:\ на дял D:\ за да може ако се намери начин за декриптирането им да можете после да си ги използвате пак, защото при една преинсталация (особено ако е с формат) всичко на дял C:\ ще замине. Пробвайте и преди преинсталацията да възстановите част от файловете си с тези методи докато чакаме за евентуален декриптор.

https://www.kaldata.com/forums/topic/246343-крипитирани-файлове-от-вирус-id-9152957352_file2openmailboxorg/?do=findComment&comment=3213640