Премини към съдържанието

    Препоръчан отговор


    Safe Finder се добави преди няколко дни в мозилата ми (може би и в другите браузъри, но не ги ползвам). Постоянно ми се появяват някакви прозорци или се отварят други сайтове, когато искам да отворя съвсем друг сайт. Понякога даже изобщо не ми зареждат сайтовете. Търсачката ми също се променя автоматично на yahoo safe finder или, ако търся с гугъл най-отгоре се появяват съвсем различни неща пак породени от sefe finder. Имам чувството, че това бави самия лаптоп. Надявам се, че сте ме разбрали, защото аз съм индианка в тази сфера и не знам дали се изказвам правилно :D

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Моля изпълнете инструкциите от тази тема и публикувайте логовете от FRST => Системата ми е инфектирана - Какво да правя сега?

    • Харесва ми 2

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Да, вие ми казахте вече, аз както винаги съм разсеяна

    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:19-12-2015
    Ran by Svetlichka (administrator) on TOSHIBA (19-12-2015 13:15:27)
    Running from D:\Documents\Downloads
    Loaded Profiles: Svetlichka (Available Profiles: Svetlichka)
    Platform: Windows 8.1 Enterprise (X64) Language: Български (България)
    Internet Explorer Version 11 (Default browser: FF)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (AMD) C:\Windows\System32\atiesrxx.exe
    (AMD) C:\Windows\System32\atieclxx.exe
    (Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe
    (Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
    () C:\Program Files\Dripkick\Dripkick.exe
    (Microsoft Corporation) C:\Windows\System32\rundll32.exe
    (Microsoft Corporation) C:\Windows\System32\rundll32.exe
    (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
    (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
    () C:\Temp\ob4six\runner.exe
    (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
    () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
    (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
    (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
    () C:\ProgramData\Zitenop\Zitenop.exe
    () C:\Program Files\Dripkick\packages\e284f59b-9bbf-4d0e-8388-206c74c3da6f\dripl.exe
    (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
    (SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
    (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
    (BitTorrent Inc.) C:\Users\Svetlichka\AppData\Roaming\uTorrent\uTorrent.exe
    () C:\Users\Svetlichka\AppData\Local\Viber\Viber.exe
    (CyberLink Corp.) C:\PowerDVD14\PowerDVD14Agent.exe
    (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
    (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
    (BitTorrent Inc.) C:\Users\Svetlichka\AppData\Roaming\uTorrent\updates\3.4.5_41372\utorrentie.exe
    (BitTorrent Inc.) C:\Users\Svetlichka\AppData\Roaming\uTorrent\updates\3.4.5_41372\utorrentie.exe
    (Microsoft Corporation) C:\Windows\System32\OpenWith.exe
    (Disc Soft Ltd) C:\Daemon Tools Lite\DiscSoftBusService.exe
    () C:\ProgramData\Zitenop\Zitenop.exe
    (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Google Inc.) C:\Users\Svetlichka\AppData\Local\Google\Chrome\Application\chrome.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_235.exe
    (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_235.exe
    (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
    (Google Inc.) C:\Users\Svetlichka\AppData\Local\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Users\Svetlichka\AppData\Local\Google\Chrome\Application\chrome.exe
    (Microsoft Corporation) C:\Windows\System32\OpenWith.exe
    (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe


    ==================== Registry (Whitelisted) ===========================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13776088 2014-12-11] (Realtek Semiconductor)
    HKLM\...\Run: [SRS Premium Sound HD] => C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2172816 2012-10-22] (SRS Labs, Inc.)
    HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2556768 2013-08-17] (TOSHIBA Corporation)
    HKLM-x32\...\Run: [PowerDVD14Agent] => C:\PowerDVD14\PowerDVD14Agent.exe [795672 2014-11-04] (CyberLink Corp.)
    HKU\S-1-5-21-934708141-2903372314-3187024128-1001\...\Run: [uTorrent] => C:\Users\Svetlichka\AppData\Roaming\uTorrent\uTorrent.exe [2026520 2015-12-04] (BitTorrent Inc.)
    HKU\S-1-5-21-934708141-2903372314-3187024128-1001\...\Run: [DAEMON Tools Lite] => C:\Daemon Tools Lite\DTLite.exe [5585136 2015-03-31] (Disc Soft Ltd)
    HKU\S-1-5-21-934708141-2903372314-3187024128-1001\...\Run: [Viber] => C:\Users\Svetlichka\AppData\Local\Viber\Viber.exe [51657424 2015-11-09] ()
    HKU\S-1-5-21-934708141-2903372314-3187024128-1001\...\Run: [Google Update] => C:\Users\Svetlichka\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-12-15] (Google Inc.)
    HKU\S-1-5-21-934708141-2903372314-3187024128-1001\...\Run: [Lync] => "C:\Microsoft Office\Office16\lync.exe" /fromrunkey
    HKU\S-1-5-21-934708141-2903372314-3187024128-1001\...\MountPoints2: {14d5e788-0e18-11e5-8255-2016d88609db} - "E:\RunGame.exe"
    HKU\S-1-5-21-934708141-2903372314-3187024128-1001\...\MountPoints2: {14d5e78c-0e18-11e5-8255-2016d88609db} - "H:\RunGame.exe"
    HKU\S-1-5-21-934708141-2903372314-3187024128-1001\...\MountPoints2: {14d5e790-0e18-11e5-8255-2016d88609db} - "I:\RunGame.exe"
    HKU\S-1-5-21-934708141-2903372314-3187024128-1001\...\MountPoints2: {1be657c8-dc81-11e4-8251-7054d2899f9d} - "G:\SETUP.EXE"
    HKU\S-1-5-21-934708141-2903372314-3187024128-1001\...\MountPoints2: {26be7036-dcab-11e4-8253-2016d88609db} - "E:\HTC_Sync_Manager_PC.exe"
    HKU\S-1-5-21-934708141-2903372314-3187024128-1001\...\MountPoints2: {26be706e-dcab-11e4-8253-2016d88609db} - "E:\HTC_Sync_Manager_PC.exe"
    HKU\S-1-5-21-934708141-2903372314-3187024128-1001\...\MountPoints2: {a1aca753-1e87-11e5-8256-2016d88609db} - "E:\HTC_Sync_Manager_PC.exe"
    HKU\S-1-5-21-934708141-2903372314-3187024128-1001\...\MountPoints2: {edda2619-2e03-11e5-8259-2016d88609db} - "E:\HTC_Sync_Manager_PC.exe"
    AppInit_DLLs: C:\ProgramData\Zitenop\Relab.dll => C:\ProgramData\Zitenop\Relab.dll [518656 2015-12-16] ()
    AppInit_DLLs-x32: C:\ProgramData\Zitenop\Groovephase.dll => C:\ProgramData\Zitenop\Groovephase.dll [320512 2015-12-16] ()
    ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
    GroupPolicy: Restriction - Chrome <======= ATTENTION
    CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    AutoConfigURL: [S-1-5-21-934708141-2903372314-3187024128-1001] => hxxp://unstopp.me/wpad.dat?ceaba8138b049902f46e796aa3275e122620118
    Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
    Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
    Tcpip\..\Interfaces\{3C292FFC-673C-428B-BBF3-A57D34471933}: [DhcpNameServer] 192.168.2.1

    Internet Explorer:
    ==================
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
    HKU\S-1-5-21-934708141-2903372314-3187024128-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.bg/
    SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL =
    SearchScopes: HKLM-x32 -> ielnksrch URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzJkwtp-q9K2X2oyV1M_vuKKky6_HQ7Yt--KjQLxi55CSivI4KwOO5AA7E19Ndkg6v52E5I1frOdrntOK_aJoKmHOiyphUVhkzIhkBHH5MgA5SCMPIerCQ1tRek0_QZYNh8IcEs5Ski8l6hsLOj6hagjX-DBP&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-934708141-2903372314-3187024128-1001 -> {cf34d395-9ff1-49a0-98a5-8db1636431b1} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
    SearchScopes: HKU\S-1-5-21-934708141-2903372314-3187024128-1001 -> {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzJkwtp-q9K2X2oyV1M_vuKKky6_HQ7Yt--KjQLxi55CSivI4KwOO5AA7E19Ndkg6v52E5I1frOdrntOK_aJoKmHOiyphUVhkzIhkBHH5MgA5SCMPIerCQ1tRek0_QZYNh8IcEs5Ski8l6hsLOj6hagjX-DBP&q={searchTerms}
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-15] (Oracle Corporation)
    BHO-x32: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08] (Skype Technologies S.A.)
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-15] (Oracle Corporation)
    Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08] (Skype Technologies S.A.)
    StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.yoursearching.com/?type=sc&ts=1450201075&z=d20b6ebf60797976f6cba3fgezfw5e8o4e9g8efm1q&from=obw&uid=TOSHIBAXMQ01ABD064_14RGC121TXX14RGC121T

    FireFox:
    ========
    FF ProfilePath: C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334
    FF Homepage: hxxp://www.google.bg/
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-09] ()
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-09] ()
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
    FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-15] (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-15] (Oracle Corporation)
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
    FF Plugin HKU\S-1-5-21-934708141-2903372314-3187024128-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Svetlichka\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-15] (Google Inc.)
    FF Plugin HKU\S-1-5-21-934708141-2903372314-3187024128-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Svetlichka\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-15] (Google Inc.)
    FF user.js: detected! => C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334\user.js [2015-12-18]
    FF Extension: "Camera Style - C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334\Extensions\@5B4753C248531D935815F9EB175011D95B47.xpi [2015-12-17] [not signed]
    FF Extension: Skype extension for Firefox - C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2015-12-16] [not signed]
    FF HKLM-x32\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\m4eqozce.default\extensions\deskCutv2@gmail.com => not found
    FF HKLM-x32\...\Firefox\Extensions: [yahooprotected@gmail.com] - C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\m4eqozce.default\extensions\yahooprotected@gmail.com => not found
    FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\!5B4753C248531D935815F9EB175011D95B47.js [2015-12-16] <==== ATTENTION
    FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\5B4753C248531D935815F9EB175011D95B47 [2015-12-16] <==== ATTENTION

    Chrome:
    =======
    CHR HomePage: Default -> hxxp://www.google.bg/
    CHR Profile: C:\Users\Svetlichka\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Google Презентации) - C:\Users\Svetlichka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-16]
    CHR Extension: (Google Документи) - C:\Users\Svetlichka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-16]
    CHR Extension: (Google Диск) - C:\Users\Svetlichka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-16]
    CHR Extension: (YouTube) - C:\Users\Svetlichka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-16]
    CHR Extension: (Google Търсене) - C:\Users\Svetlichka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-16]
    CHR Extension: (Електронни таблици от Google) - C:\Users\Svetlichka\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-16]
    CHR Extension: (Google Документи офлайн) - C:\Users\Svetlichka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-16]
    CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\Svetlichka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-16]
    CHR Extension: (Gmail) - C:\Users\Svetlichka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-16]
    CHR Extension: (Camera Style) - C:\Users\Svetlichka\AppData\Local\Camera Style\Component [2015-12-19]

    ==================== Services (Whitelisted) ========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R3 Disc Soft Lite Bus Service; C:\Daemon Tools Lite\DiscSoftBusService.exe [1277680 2015-03-31] (Disc Soft Ltd)
    R2 Dripkick; C:\Program Files\Dripkick\Dripkick.exe [379392 2015-12-13] () [File not signed]
    R2 FinwarmSvc; C:\Temp\ob4six\runner.exe [45568 2015-12-15] () [File not signed]
    R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
    R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
    R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [File not signed]
    R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-06-18] (Realtek Semiconductor)
    R2 Start8; C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe [143288 2014-06-12] (Stardock Software, Inc)
    R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6889232 2015-12-14] (TeamViewer GmbH)
    R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
    R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
    S3 WsAppService; C:\Program Files (x86)\Wondershare\WAF\WsAppService.exe [256912 2015-05-27] (Wondershare)
    R2 Zitenop; C:\ProgramData\\Zitenop\\Zitenop.exe [437248 2015-12-16] () [File not signed]
    S2 SSFK; C:\Program Files (x86)\SFK\SSFK.exe -s [X]
    S3 WsDrvInst; "C:\Program Files (x86)\Wondershare\MobileGo\DriverInstall.exe" [X]

    ===================== Drivers (Whitelisted) ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30352 2015-04-06] (Disc Soft Ltd)
    S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
    S3 HtcVCom32; C:\Windows\system32\DRIVERS\HtcVComV64.sys [121800 2010-03-08] (QUALCOMM Incorporated)
    R3 RtkBtFilter2; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [48856 2013-11-28] (Realtek Microelectronics)
    R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation                           )
    R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31032 2012-11-30] (Synaptics Incorporated)
    R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381608 2015-04-06] (Duplex Secure Ltd.)
    R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [32624 2013-08-19] (Windows (R) Win 7 DDK provider)
    S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
    R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
    R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
    R2 {C5F942FD-1110-4664-86CE-0C6BDA305235}; C:\PowerDVD14\Common\NavFilter\000.fcl [32456 2014-11-04] (CyberLink Corp.)
    S1 czwvpbrn; \??\C:\Windows\system32\drivers\czwvpbrn.sys [X]

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2015-12-19 13:15 - 2015-12-19 13:15 - 00000000 ____D C:\FRST
    2015-12-18 13:05 - 2015-12-18 13:05 - 00000013 _____ C:\Users\Svetlichka\.pluto.tv
    2015-12-18 13:04 - 2015-12-18 13:06 - 00000000 ____D C:\Program Files (x86)\Pluto TV
    2015-12-18 13:03 - 2015-12-18 13:03 - 00000000 ____D C:\Users\Svetlichka\AppData\Roaming\OpenCandy
    2015-12-18 13:02 - 2015-12-19 10:21 - 00000000 ____D C:\Users\Svetlichka\AppData\LocalLow\uTorrent
    2015-12-17 18:54 - 2015-12-17 18:54 - 00001171 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
    2015-12-17 18:54 - 2015-12-17 18:54 - 00001159 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
    2015-12-17 18:54 - 2015-12-17 18:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
    2015-12-16 20:21 - 2015-12-16 20:21 - 00000000 ____D C:\Users\Svetlichka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
    2015-12-16 20:21 - 2015-12-16 20:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
    2015-12-16 20:19 - 2015-12-16 20:19 - 00003172 _____ C:\Windows\System32\Tasks\Camera Style
    2015-12-16 20:19 - 2015-12-16 20:19 - 00003162 _____ C:\Windows\System32\Tasks\Camera Style2
    2015-12-16 20:06 - 2015-12-18 13:26 - 00000000 ____D C:\Microsoft Office
    2015-12-16 19:49 - 2015-12-18 13:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
    2015-12-16 19:47 - 2015-12-16 19:47 - 00000000 ____D C:\ProgramData\Stardock
    2015-12-16 19:47 - 2015-12-16 19:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stardock
    2015-12-16 19:47 - 2015-12-16 19:47 - 00000000 ____D C:\Program Files (x86)\Stardock
    2015-12-16 19:41 - 2015-12-16 19:41 - 00003174 _____ C:\Windows\System32\Tasks\{64795C1F-BCF6-44BF-B37D-38BA728BCD5A}
    2015-12-16 19:33 - 2015-12-19 10:19 - 00000000 ____D C:\ProgramData\KMSAutoS
    2015-12-16 19:33 - 2015-12-16 20:27 - 00003748 _____ C:\Windows\System32\Tasks\KMSAutoNet
    2015-12-16 19:27 - 2015-12-19 10:26 - 00000000 ____D C:\ProgramData\Zitenop
    2015-12-16 19:27 - 2015-12-16 19:27 - 00000000 ____D C:\ProgramData\Zitenops
    2015-12-16 19:26 - 2015-12-16 19:26 - 00000496 __RSH C:\ProgramData\ntuser.pol
    2015-12-16 18:51 - 2015-12-16 18:51 - 00003126 _____ C:\Windows\System32\Tasks\{2A5EA6B0-25FA-41AA-B3B3-B8B527938491}
    2015-12-16 18:51 - 2015-12-16 18:51 - 00000000 ____D C:\Users\Svetlichka\AppData\Roaming\software
    2015-12-16 18:51 - 2015-12-16 18:51 - 00000000 ____D C:\Users\Svetlichka\AppData\Roaming\atb
    2015-12-16 18:38 - 2015-12-16 18:38 - 00000000 ____D C:\Users\Svetlichka\AppData\Roaming\wps
    2015-12-16 18:33 - 2015-12-16 18:33 - 00003126 _____ C:\Windows\System32\Tasks\{A7FF5776-D79E-42B3-99DE-C5BC32C6BFAA}
    2015-12-15 20:26 - 2015-12-19 12:32 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-934708141-2903372314-3187024128-1001UA.job
    2015-12-15 20:26 - 2015-12-18 20:32 - 00000992 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-934708141-2903372314-3187024128-1001Core.job
    2015-12-15 20:26 - 2015-12-15 20:27 - 00004004 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-934708141-2903372314-3187024128-1001UA
    2015-12-15 20:26 - 2015-12-15 20:27 - 00003624 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-934708141-2903372314-3187024128-1001Core
    2015-12-15 20:26 - 2015-12-15 20:26 - 00000000 ____D C:\Program Files (x86)\Google
    2015-12-15 19:55 - 2015-12-16 19:42 - 00000000 ____D C:\Users\Svetlichka\AppData\Roaming\kingsoft
    2015-12-15 19:44 - 2015-12-15 19:45 - 00000382 _____ C:\Prefs.js
    2015-12-15 19:44 - 2015-12-15 19:44 - 00425744 _____ (Lavasoft Limited) C:\Windows\system32\LavasoftTcpService64.dll
    2015-12-15 19:44 - 2015-12-15 19:44 - 00345360 _____ (Lavasoft Limited) C:\Windows\SysWOW64\LavasoftTcpService.dll
    2015-12-15 19:44 - 2015-12-15 19:44 - 00002816 _____ C:\Windows\SysWOW64\LavasoftTcpServiceOff.ini
    2015-12-15 19:44 - 2015-12-15 19:44 - 00002816 _____ C:\Windows\system32\LavasoftTcpServiceOff.ini
    2015-12-15 19:44 - 2015-12-15 19:44 - 00000000 ____D C:\searchplugins
    2015-12-15 19:38 - 2015-12-16 14:50 - 00000000 ____D C:\ProgramData\Tmp0x0x
    2015-12-15 19:35 - 2015-12-16 19:44 - 00000000 ____D C:\Program Files (x86)\WinRAR
    2015-12-15 19:32 - 2015-12-16 20:09 - 00000000 ____D C:\Program Files (x86)\baidu
    2015-12-15 19:32 - 2015-12-16 19:42 - 00000000 ____D C:\ProgramData\kingsoft
    2015-12-15 19:32 - 2015-12-15 19:55 - 00003594 _____ C:\Windows\System32\Tasks\PPTAssistantUpdateTask_Svetlichka
    2015-12-15 19:32 - 2015-12-15 19:32 - 00000000 ____D C:\Program Files\Dripkick
    2015-12-15 19:32 - 2015-12-15 19:31 - 00000929 _____ C:\Windows\system32\Drivers\etc\hp.bak
    2015-12-15 19:31 - 2015-12-15 19:31 - 00000000 ____D C:\Users\Svetlichka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
    2015-12-15 19:14 - 2015-12-19 12:29 - 00000892 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
    2015-12-15 19:14 - 2015-12-15 19:14 - 00003864 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
    2015-12-15 19:12 - 2015-12-15 19:12 - 00000000 ____D C:\Users\Svetlichka\AppData\Roaming\SimpleFiles
    2015-12-15 19:11 - 2015-12-16 20:24 - 00000000 ____D C:\Users\Svetlichka\AppData\Roaming\Opera Software
    2015-12-15 19:10 - 2015-12-16 20:24 - 00000000 ____D C:\Program Files (x86)\Opera
    2015-12-15 18:52 - 2015-12-15 18:52 - 00001055 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
    2015-12-15 18:52 - 2015-12-15 18:52 - 00001043 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk
    2015-12-11 14:09 - 2015-12-11 14:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
    2015-12-09 16:36 - 2015-11-11 18:21 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2015-12-09 16:36 - 2015-11-11 18:00 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
    2015-12-09 16:36 - 2015-11-11 17:44 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
    2015-12-09 16:36 - 2015-11-11 17:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
    2015-12-09 16:36 - 2015-11-11 17:41 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
    2015-12-09 16:36 - 2015-11-11 17:12 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
    2015-12-09 16:36 - 2015-11-10 02:13 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
    2015-12-09 16:36 - 2015-11-10 02:11 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
    2015-12-09 16:36 - 2015-11-10 02:08 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
    2015-12-09 16:36 - 2015-11-10 02:04 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
    2015-12-09 16:36 - 2015-11-10 02:02 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
    2015-12-09 16:36 - 2015-11-10 01:46 - 04514816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
    2015-12-09 16:36 - 2015-11-10 01:41 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
    2015-12-09 16:36 - 2015-11-10 01:37 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
    2015-12-09 16:36 - 2015-11-10 01:36 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
    2015-12-09 16:36 - 2015-11-10 01:36 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
    2015-12-09 16:36 - 2015-11-10 01:36 - 00325632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
    2015-12-09 16:36 - 2015-11-10 01:25 - 01048576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
    2015-12-09 16:36 - 2015-11-10 01:17 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
    2015-12-09 16:36 - 2015-11-10 01:14 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
    2015-12-09 16:36 - 2015-11-10 01:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
    2015-12-09 16:36 - 2015-11-09 00:15 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2015-12-09 16:36 - 2015-11-09 00:15 - 00571392 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2015-12-09 16:36 - 2015-11-09 00:04 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
    2015-12-09 16:36 - 2015-11-09 00:02 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
    2015-12-09 16:36 - 2015-11-09 00:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
    2015-12-09 16:36 - 2015-11-08 23:32 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
    2015-12-09 16:36 - 2015-11-08 23:32 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
    2015-12-09 16:36 - 2015-11-08 23:25 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
    2015-12-09 16:36 - 2015-11-08 23:18 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
    2015-12-09 16:36 - 2015-11-08 23:16 - 00372224 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
    2015-12-09 16:36 - 2015-11-08 23:15 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
    2015-12-09 16:36 - 2015-11-08 23:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
    2015-12-09 16:36 - 2015-11-08 23:14 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2015-12-09 16:36 - 2015-11-08 23:13 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
    2015-12-09 16:36 - 2015-11-08 22:53 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
    2015-12-09 16:36 - 2015-11-08 22:53 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2015-12-09 16:36 - 2015-11-08 22:41 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
    2015-12-09 16:36 - 2015-11-08 22:30 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
    2015-12-09 16:34 - 2015-11-05 10:59 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
    2015-12-09 16:33 - 2015-11-22 08:59 - 07455064 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
    2015-12-09 16:33 - 2015-11-22 08:59 - 01735000 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
    2015-12-09 16:33 - 2015-11-22 08:59 - 01659568 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
    2015-12-09 16:33 - 2015-11-22 08:59 - 01519592 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
    2015-12-09 16:33 - 2015-11-22 08:59 - 01487008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
    2015-12-09 16:33 - 2015-11-22 08:59 - 01355848 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
    2015-12-09 16:33 - 2015-11-22 08:58 - 01499920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
    2015-12-09 16:33 - 2015-11-21 20:32 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
    2015-12-09 16:33 - 2015-11-21 19:50 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
    2015-12-09 16:33 - 2015-11-21 18:59 - 01706496 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
    2015-12-09 16:33 - 2015-11-21 18:49 - 01344000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
    2015-12-09 16:33 - 2015-11-21 18:47 - 00522240 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
    2015-12-09 16:33 - 2015-11-21 18:40 - 00414208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
    2015-12-09 16:33 - 2015-11-09 02:41 - 01540728 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
    2015-12-09 16:33 - 2015-11-09 00:30 - 04176384 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
    2015-12-09 16:33 - 2015-11-08 23:23 - 01994752 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
    2015-12-09 16:33 - 2015-11-08 23:13 - 01383936 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
    2015-12-09 16:33 - 2015-11-08 23:01 - 01753600 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
    2015-12-09 16:33 - 2015-11-08 22:52 - 01559552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
    2015-12-09 16:33 - 2015-11-08 22:48 - 01376256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
    2015-12-09 16:33 - 2015-11-08 22:42 - 01490944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
    2015-12-09 16:33 - 2015-10-22 19:43 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
    2015-12-09 16:33 - 2015-10-22 19:43 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZST.DLL
    2015-12-09 16:33 - 2015-10-22 19:43 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
    2015-12-09 16:33 - 2015-10-22 19:43 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
    2015-12-09 16:33 - 2015-10-22 18:59 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll
    2015-12-09 16:33 - 2015-10-22 18:59 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZST.DLL
    2015-12-09 16:33 - 2015-10-22 18:59 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL
    2015-12-09 16:33 - 2015-10-22 18:59 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL
    2015-12-09 16:33 - 2015-10-22 18:21 - 01200128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
    2015-12-09 16:33 - 2015-10-22 18:21 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
    2015-12-09 16:33 - 2015-10-22 17:58 - 00868864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
    2015-12-09 16:33 - 2015-10-22 17:58 - 00200704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll
    2015-12-09 16:33 - 2015-10-22 16:08 - 00513456 _____ C:\Windows\SysWOW64\locale.nls
    2015-12-09 16:33 - 2015-10-22 16:08 - 00513456 _____ C:\Windows\system32\locale.nls
    2015-12-09 16:33 - 2015-10-10 19:20 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
    2015-12-09 16:33 - 2015-10-03 21:41 - 01385280 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
    2015-12-09 16:33 - 2015-10-03 21:41 - 01124384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
    2015-12-09 16:32 - 2015-11-21 00:47 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
    2015-12-09 16:32 - 2015-11-20 20:18 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
    2015-12-09 16:32 - 2015-11-20 18:58 - 03706880 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
    2015-12-09 16:32 - 2015-11-20 18:47 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
    2015-12-09 16:32 - 2015-11-20 18:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
    2015-12-09 16:32 - 2015-11-20 18:44 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
    2015-12-09 16:32 - 2015-11-20 18:44 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
    2015-12-09 16:32 - 2015-11-20 18:43 - 00897024 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
    2015-12-09 16:32 - 2015-11-20 18:42 - 02243584 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
    2015-12-09 16:32 - 2015-11-20 18:30 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
    2015-12-09 16:32 - 2015-11-20 18:29 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
    2015-12-09 16:32 - 2015-11-20 18:28 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
    2015-12-09 16:32 - 2015-11-20 18:27 - 00726528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
    2015-12-09 16:32 - 2015-10-28 17:49 - 02775552 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
    2015-12-09 16:32 - 2015-10-28 17:29 - 02462720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
    2015-12-09 16:31 - 2015-10-11 08:34 - 00468824 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
    2015-12-09 16:31 - 2015-10-11 08:34 - 00462168 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
    2015-12-09 16:31 - 2015-10-11 08:34 - 00443224 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
    2015-12-09 16:31 - 2015-10-11 08:34 - 00092504 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
    2015-12-09 16:31 - 2015-10-11 08:34 - 00027992 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
    2015-12-09 16:31 - 2015-10-10 20:41 - 00037376 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
    2015-12-09 16:31 - 2015-10-10 20:41 - 00030208 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
    2015-12-09 16:31 - 2015-10-08 18:11 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\PCPKsp.dll
    2015-12-09 16:31 - 2015-10-08 17:50 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PCPKsp.dll
    2015-12-09 16:31 - 2015-10-05 20:28 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe
    2015-12-09 16:31 - 2015-10-05 20:25 - 00572928 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2015-12-19 13:16 - 2015-04-06 18:33 - 00000000 ____D C:\Temp
    2015-12-19 13:15 - 2015-04-06 18:49 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
    2015-12-19 13:15 - 2013-08-22 15:36 - 00000000 ____D C:\Windows
    2015-12-19 13:12 - 2015-04-06 19:05 - 00000000 ____D C:\Users\Svetlichka\AppData\Roaming\uTorrent
    2015-12-19 13:11 - 2015-04-06 19:15 - 00000000 ____D C:\Users\Svetlichka\AppData\Roaming\Skype
    2015-12-19 10:56 - 2015-04-06 18:36 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-934708141-2903372314-3187024128-1001
    2015-12-19 10:22 - 2015-10-03 21:29 - 00000000 ____D C:\Users\Svetlichka\AppData\Roaming\ViberPC
    2015-12-19 10:20 - 2015-04-06 19:48 - 00000852 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
    2015-12-19 10:20 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
    2015-12-19 10:20 - 2013-08-22 16:44 - 00518728 _____ C:\Windows\system32\FNTCACHE.DAT
    2015-12-19 10:18 - 2015-04-06 18:42 - 00003982 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{46203A89-F057-4C3E-A9D9-4999F644CDA0}
    2015-12-19 10:14 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\Inf
    2015-12-19 10:08 - 2015-04-06 19:14 - 00000000 ____D C:\ProgramData\Skype
    2015-12-18 19:49 - 2015-04-06 19:48 - 00000854 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
    2015-12-18 13:27 - 2015-04-06 20:05 - 00000000 ____D C:\ProgramData\Microsoft Help
    2015-12-18 13:27 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
    2015-12-18 13:25 - 2014-11-21 00:10 - 00000000 ____D C:\Windows\ShellNew
    2015-12-18 13:23 - 2013-08-22 17:36 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
    2015-12-18 13:22 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\System
    2015-12-18 13:22 - 2013-08-22 15:25 - 00000076 _____ C:\Windows\win.ini
    2015-12-18 13:05 - 2015-04-06 18:30 - 00000000 ____D C:\Users\Svetlichka
    2015-12-16 20:24 - 2015-05-03 10:52 - 00000000 ____D C:\Windows\system32\appmgmt
    2015-12-16 20:21 - 2015-04-06 18:44 - 00000000 ____D C:\Winrar
    2015-12-16 19:47 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\PolicyDefinitions
    2015-12-16 19:38 - 2015-04-06 18:30 - 00001426 _____ C:\Users\Svetlichka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    2015-12-16 14:48 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF
    2015-12-15 20:35 - 2015-04-06 18:47 - 00000000 ____D C:\Users\Svetlichka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
    2015-12-15 19:50 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\GroupPolicy
    2015-12-15 19:26 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI
    2015-12-15 19:14 - 2015-04-06 18:49 - 00003718 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
    2015-12-15 18:53 - 2015-08-19 22:43 - 00000000 ____D C:\Program Files (x86)\TeamViewer
    2015-12-12 22:34 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
    2015-12-12 13:50 - 2015-04-07 00:37 - 00000000 ____D C:\Program Files\Microsoft Silverlight
    2015-12-12 13:50 - 2015-04-07 00:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
    2015-12-11 16:38 - 2015-04-07 00:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
    2015-12-11 16:38 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
    2015-12-11 16:32 - 2015-04-06 22:49 - 00000000 ____D C:\Windows\system32\MRT
    2015-12-11 16:25 - 2015-04-06 22:49 - 140158008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
    2015-12-11 14:09 - 2015-10-07 15:36 - 00002713 _____ C:\Users\Public\Desktop\Skype.lnk
    2015-12-11 14:09 - 2015-05-03 10:52 - 00000000 ___RD C:\Program Files (x86)\Skype
    2015-12-09 15:15 - 2015-11-11 15:15 - 09498816 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
    2015-12-09 05:39 - 2015-04-06 23:08 - 00301728 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
    2015-12-07 10:36 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
    2015-12-01 19:19 - 2014-11-21 07:13 - 00826872 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
    2015-12-01 19:19 - 2014-11-21 07:13 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
    2015-11-27 17:24 - 2015-11-02 12:43 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

    ==================== Files in the root of some directories =======

    2015-12-15 19:32 - 2015-12-15 19:32 - 0000187 _____ () C:\Users\Svetlichka\AppData\Local\Zimremice.exe.config

    ==================== Bamital & volsnap =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\system32\winlogon.exe => File is digitally signed
    C:\Windows\system32\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\system32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\system32\services.exe => File is digitally signed
    C:\Windows\system32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\system32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\system32\rpcss.dll => File is digitally signed
    C:\Windows\system32\dnsapi.dll => File is digitally signed
    C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
    C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2015-12-16 20:49

    ==================== End of FRST.txt ============================

    Addition.txt

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте,

    Извинявам се за закъснението, но имах ангажименти.

     

    СТЪПКА 1

     

    Изтеглете програмата GeekUninstaller и я запазете на десктопа.

    Разархивирайте я и стартирайте файла geek.exe IxXO5oO.jpg
    От списъка намерете Camera Style (примера е за Mozilla Firefox, но това е просто за показно).

    Кликнете с десен бутон върху програмата и изберете Uninstall
     
    XhV2QLa.png

    След края на инсталацията ще се отвори прозорец подканващ ви да премахнете всички остатъци от програмата (ако има такива, ако няма този прозорец няма да се появи):

    Пример за Mozilla браузъра:

    geekuninstaller-3.png

    Натиснете бутона Finish за да изтриете останките от програмата.

     

    СТЪПКА 2

     

    Изтеглете edit-text.giffixlist.txt и го запазете на десктопа.
    Стартирайте FRST.exe и натиснете бутона Fix веднъж!
    След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.
     
    Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

    Пишете и как е положението след стъпките до момента.

     

    Поздрави! ;)

     

    • Харесва ми 2

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    До момента няма разлика, продължават да ми се появяват различни прозорци на браузъра както и такива от сорта на "вие спечелихте 100 000, кликнете тук, за да си ги получите". Имам чувството, че е и по-зле даже. Не може да се влезне в нито 1 сайт от тия прозорци и други сайтове :( Powered by Constant Fun пише на тях, а сайтовете са от сорта на alibaba.com

    Редактирано от youandi (преглед на промените)

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    По-зле няма как да е след като премахнахме стотици заразени обекти. Направете нова проверка с FRST като сложите отметка пред Addition.txt преди да натиснете бутона SCAN и след това прикачете и двата лог файла!

     

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Мда...видях новите зарази. Ще ги премахнем и тях. След 10 мин. скрипта трябва да е готов.

    Така...деинсталирайте с помощта на GeekUninstaller програмата Constant Fun.

     

    След това изтеглете edit-text.giffixlist.txt и го запазете на десктопа.
    Стартирайте FRST.exe и натиснете бутона Fix веднъж!
    След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.
     
    Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

    Пишете и как е положението след стъпките до момента.

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Изпълних всички стъпки, но ми се появи папка FRST-OlderVersion. Обнови ли се тази програма, че се появи това ? Всичко е наред вече, не се появява нищо, благодаря

    Редактирано от youandi (преглед на промените)
    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Да направим финални проверки:

     

    СТЪПКА 1

     

    • Изтеглете и стартирайтe 6sv1DN9.jpgAdwCleaner.exe.
    • Натиснете бутона Scan.
    • AdwCleaner ще започне да проверява компютъра.
    • След като проверката приключи натиснете бутона Clean.
    • Програмата ще затвори всички излишни процеси и след почистването ще иска да рестартира машината. Съгласете се.
    • Ще се появи автоматично лог файл с името (AdwCleaner[C0].txt) в C:\Adwcleaner
    • Публикувайте съдържанието му в следващия си коментар.

     

     

    СТЪПКА 2

     

    Моля изтеглете icon1448041809.pngJunkware Removal Tool на вашия десктоп.

    • Спрете временно работата на защитните програми.
    • Стартирайте инструмента JRT.exe
    • Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата.
    • Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши.
    • Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt).
    • Моля копирайте съдържанието на лог файла в следващия си пост.

     

     

    СТЪПКА 3

     

    Моля изтеглете Malwarebytes Anti-Malware 2.2.0.1024 Final и я запазете на вашия десктоп.

    • Стартирайте файла mbam-setup-2.1.8.1057.exe и следвайте указанията за да инсталирате програмата.
    • След като инсталацията приключи се уверете че сте сложили отметка пред:
    • Launch Malwarebytes Anti-Malware
    • Отметката активираща пробния 14 дневен период също е маркиран по-подразбиране. Ако не желаете да тествате защитата в реално време на програмата през следващите 14 дни тогава премахнете отметката. Т.е. премахнете първата отметка:

    DkgJ7Zr.png

    • Натиснете бутона Finish.
    • Отидете до табът Settings > Detection and Protection > и под категорията Detection Options включете опцията "Scan for rootkits".
    • Отидете до табът Scan, сложете радио-бутона пред Threat Scan и след това натиснете бутона Scan Now >> . Ако е намерена актуализация тогава натиснете бутона Update Now.
    • Ще започне проверка за зловреден софтуер.
    • При някои инфекции можете да видите съобщението:
    • "Could not load DDA driver"
    • Натиснете "Yes" на това съобщение за да позволите драйвера да се зареди след рестарт.
    • Разрешете на компютъра да се рестартира и след това продължете с останалите инструкции.
    • След като проверката приключи натиснете бутона Apply Actions.
    • Изчакайте да се появи прозореца подканващ ви да рестартирате и след това натиснете бутона Yes.
    • След рестарта, когато се появи десктопа MBAM ще се зареди още веднъж.
    • Отидете то табът History > Application Logs.

    65ZBqkR.jpg

    • Отворете рапорта с последната дата и час и натиснете бутона "Copy to Clipboard"
    • Сега вече поставете съдържанието на лог файла с клавишната комбинация Ctrl + V и го публикувайте в следващия си коментар.

     

     

    СТЪПКА 4

     

    1.Изтеглете Hitman Pro.

    За 32-битова система - dEMD6.gif.
    За 64-битова система - Download-button3.gif

    2.Стартирайте програмата.
    3.След като сте стартирали програмата като кликнете върху иконата 5vo5F.jpg и натиснете бутона „Напред“ като се съгласите с лицензионното споразумение (EULA).

    4.Сложете отметка пред "Не, искам да завърша еднократно сканиране на компютъра".

    5.Натиснете бутона „Напред“.

    6.Програмата ще започне да сканира. Времето за сканиране е около 2 минути.

    7.След завършване на сканирането от списъка с намерените неща (ако има такива) изберете Apply to all => Ignore.

    8.Натиснете "Next" и след това натиснете "Изнеси резултата в XML file" и запазете лог файла на десктопа.

    9.Архивирайте файла и го прикачете в следващия си коментар или копирайте съдържанието му в следващия си коментар.
     
    Забележка: Ако няма падащо меню, където да изберете ignore както на снимката:
     
    6-scanfin-choose.jpg
     
    Тогава просто затворете програмата след края на проверката (без да премахвате нищо)...след това отворете C:\Programdata\HitmanPro\Logs, отворете и публикувайте съдържанието на лог файла в следващия си коментар.

    Забележка: Папката C:\ProgramData е скрита и затова трябва да направите скритите файлове видими по-следния начин:

    От My Computer => Tools => Folder Options => View:

    Сложете отметка пред "Show hidden files, folders and drives"

    и махнете отметката пред "Hide protected operating system files (recommended)".

    Натиснете Apply.

    Сега проверете за лог файла в папката C:\Programdata\HitmanPro\Logs и го прикачете в следващия си коментар. :)

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    # AdwCleaner v5.025 - Лог файлът е създаден 20/12/2015 при 23:23:11
    # Обновен 13/12/2015 от Xplode
    # База данни : 2015-12-13.2 [Сървър]
    # Операционна система : Windows 8.1 Enterprise  (x64)
    # Потребителско име : Svetlichka - TOSHIBA
    # Изпълнява се от : D:\Documents\Downloads\adwcleaner_5.025.exe
    # Опция : Изчистване
    # Поддръжка : http://toolslib.net/forum

    ***** [ Сервизи ] *****


    ***** [ Папки ] *****


    ***** [ Файлове ] *****


    ***** [ DLLs ] *****


    ***** [ Преки пътища ] *****


    ***** [ Планирани задачи ] *****


    ***** [ Регистър ] *****

    [-] Ключ Изтрито : HKLM\SOFTWARE\Classes\Prod.cap
    [-] Ключ Изтрито : HKLM\SOFTWARE\Classes\speedupmypc
    [-] Ключ Изтрито : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
    [-] Ключ Изтрито : HKCU\Software\Mozilla\Extends
    [-] Ключ Изтрито : HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\Stpro.exe
    [-] Ключ Изтрито : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
    [-] Ключ Изтрито : HKLM\SOFTWARE\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}
    [-] Ключ Изтрито : HKCU\Software\Conduit
    [-] Ключ Изтрито : HKCU\Software\SimpleFiles
    [-] Ключ Изтрито : HKCU\Software\OB
    [-] Ключ Изтрито : HKCU\Software\Reg\Clean
    [!] Ключ Не е Изтрито : HKCU\Software\Mozilla\Extends
    [-] Ключ Изтрито : HKLM\SOFTWARE\Conduit
    [-] Ключ Изтрито : HKLM\SOFTWARE\SimpleFiles
    [-] Ключ Изтрито : HKLM\SOFTWARE\Uniblue
    [-] Ключ Изтрито : HKLM\SOFTWARE\FFPluginHp
    [-] Ключ Изтрито : HKLM\SOFTWARE\downchecker
    [-] Ключ Изтрито : HKLM\SOFTWARE\Reg\Clean
    [-] Ключ Изтрито : HKLM\SOFTWARE\yoursearchingSoftware
    [-] Ключ Изтрито : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
    [-] Ключ Изтрито : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SU
    [-] Ключ Изтрито : [x64] HKLM\SOFTWARE\downchecker

    ***** [ Уеб браузъри ] *****


    *************************

    :: "Tracing" ключове отстраняват
    :: Настройките на Winsock са нулирани

    ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [2460 байта] ##########

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Malwarebytes
    Version: 8.0.1 (11.24.2015)
    Operating System: Windows 8.1 Enterprise x64
    Ran by Svetlichka (Administrator) on 20.12.2015 Ј. at 23:27:15.52
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

     


    File System: 0

     


    Registry: 0

     

     

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on 20.12.2015 Ј. at 23:29:06.89
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Fix result of Farbar Recovery Scan Tool (x64) Version:20-12-2015
    Ran by Svetlichka (2015-12-20 18:58:36) Run:2
    Running from D:\Documents\Desktop
    Loaded Profiles: Svetlichka (Available Profiles: Svetlichka)
    Boot Mode: Normal
    ==============================================

    fixlist content:
    *****************
    start
    CreateRestorePoint:
    CloseProcesses:
    () C:\Program Files (x86)\Common Files\415c6520-c0da-4fcb-9597-9d03c710be54\Updater.exe
    () C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugincontainer.exe
    () C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugins\5\Plugin.exe
    () C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugins\10\Plugin.exe
    () C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugins\8\Plugin.exe
    () C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugins\7\Plugin.exe
    () C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugins\3\Plugin.exe
    () C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugins\2\Plugin.exe
    () C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugins\12\Plugin.exe
    () C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugins\7\Plugin.exe
    () C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugins\3\Plugin.exe
    C:\Program Files (x86)\Common Files\415c6520-c0da-4fcb-9597-9d03c710be54
    BHO-x32: Constant Fun -> {9d6b19f5-4a89-4db4-b650-44222af825b0} -> C:\Program Files (x86)\Constant Fun\Extensions\9d6b19f5-4a89-4db4-b650-44222af825b0.dll [2015-12-20] ()
    FF user.js: detected! => C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334\user.js [2015-12-20]
    FF Extension: Constant Fun - C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334\Extensions\{0520d40c-d004-44b3-9a58-5ec044a672ea}.xpi [2015-12-19] [not signed]
    R2 Service Mgr ConstantFun; C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugincontainer.exe [784096 2015-12-20] () <==== ATTENTION
    R2 Update Mgr ConstantFun; C:\Program Files (x86)\Common Files\415c6520-c0da-4fcb-9597-9d03c710be54\updater.exe [638688 2015-12-20] () <==== ATTENTION
    2015-12-20 12:10 - 2015-12-20 14:40 - 00000000 ____D C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54
    2015-12-20 12:10 - 2015-12-20 12:10 - 00000000 ____D C:\Program Files (x86)\Constant Fun
    2015-12-20 17:55 - 2015-04-06 18:33 - 00000000 ____D C:\Temp
    cmd: bitsadmin /reset /allusers
    cmd: netsh winsock reset catalog
    cmd: ipconfig /flushdns
    RemoveProxy:
    Hosts:
    EmptyTemp:
    End
    *****************

    Restore point was successfully created.
    Processes closed successfully.
    C:\Program Files (x86)\Common Files\415c6520-c0da-4fcb-9597-9d03c710be54\Updater.exe => No running process found
    C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugincontainer.exe => No running process found
    C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugins\5\Plugin.exe => No running process found
    C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugins\10\Plugin.exe => No running process found
    C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugins\8\Plugin.exe => No running process found
    C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugins\7\Plugin.exe => No running process found
    C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugins\3\Plugin.exe => No running process found
    C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugins\2\Plugin.exe => No running process found
    C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugins\12\Plugin.exe => No running process found
    C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugins\7\Plugin.exe => No running process found
    C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54\plugins\3\Plugin.exe => No running process found
    "C:\Program Files (x86)\Common Files\415c6520-c0da-4fcb-9597-9d03c710be54" => not found.
    HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9d6b19f5-4a89-4db4-b650-44222af825b0} => key not found.
    HKCR\Wow6432Node\CLSID\{9d6b19f5-4a89-4db4-b650-44222af825b0} => key not found.
    C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334\user.js => moved successfully
    C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334\Extensions\{0520d40c-d004-44b3-9a58-5ec044a672ea}.xpi => not found.
    Service Mgr ConstantFun => service not found.
    Update Mgr ConstantFun => service not found.
    "C:\ProgramData\415c6520-c0da-4fcb-9597-9d03c710be54" => not found.
    "C:\Program Files (x86)\Constant Fun" => not found.
    C:\Temp => moved successfully

    =========  bitsadmin /reset /allusers =========


    BITSADMIN version 3.0 [ 7.7.9600 ]
    BITS administration utility.
    (C) Copyright 2000-2006 Microsoft Corp.

    BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
    Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.

    0 out of 0 jobs canceled.

    ========= End of CMD: =========


    =========  netsh winsock reset catalog =========


    Sucessfully reset the Winsock Catalog.
    You must restart the computer in order to complete the reset.


    ========= End of CMD: =========


    =========  ipconfig /flushdns =========


    Windows IP Configuration

    Successfully flushed the DNS Resolver Cache.

    ========= End of CMD: =========


    ========= RemoveProxy: =========

    HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
    HKU\S-1-5-21-934708141-2903372314-3187024128-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
    HKU\S-1-5-21-934708141-2903372314-3187024128-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully


    ========= End of RemoveProxy: =========

    C:\Windows\System32\Drivers\etc\hosts => moved successfully
    Hosts restored successfully.
    EmptyTemp: => 365.1 MB temporary data Removed.


    The system needed a reboot.

    ==== End of Fixlog 19:00:10 ====


    HitmanPro 3.7.12.253
    www.hitmanpro.com

       Computer name . . . . : TOSHIBA
       Windows . . . . . . . : 6.3.0.9600.X64/2
       User name . . . . . . : Toshiba\Svetlichka
       UAC . . . . . . . . . : Enabled
       License . . . . . . . : Free

       Scan date . . . . . . : 2015-12-21 00:12:09
       Scan mode . . . . . . : Normal
       Scan duration . . . . : 4m 52s
       Disk access mode  . . : Direct disk access (SRB)
       Cloud . . . . . . . . : Internet
       Reboot  . . . . . . . : No

       Threats . . . . . . . : 9
       Traces  . . . . . . . : 46

       Objects scanned . . . : 1 408 927
       Files scanned . . . . : 30 322
       Remnants scanned  . . : 233 558 files / 1 145 047 keys

    Miniport ____________________________________________________________________

       Primary
          DriverObject . . . : FFFFE001CFAC9DE0
          DriverName . . . . : \Driver\iaStorA
          DriverPath . . . . : \SystemRoot\System32\drivers\iaStorA.sys
          StartIo  . . . . . : 0000000000000000 +0
          IRP_MJ_SCSI  . . . : FFFFE001D00142C0 +0
       Solution
          DriverObject . . . : FFFFE001CFAC9DE0
          DriverName . . . . : \Driver\iaStorA
          DriverPath . . . . : \SystemRoot\System32\drivers\iaStorA.sys
          StartIo  . . . . . : 0000000000000000 +0
          IRP_MJ_SCSI  . . . : FFFFF80082F673C0 \SystemRoot\System32\drivers\storport.sys+9152

    Malware _____________________________________________________________________

       C:\FRST\Quarantine\C\Program Files\Dripkick\packages\e284f59b-9bbf-4d0e-8388-206c74c3da6f\dripl.exe
          Size . . . . . . . : 855 040 bytes
          Age  . . . . . . . : 0.5 days (2015-12-20 12:08:09)
          Entropy  . . . . . : 7.9
          SHA-256  . . . . . : 19D0CEC7EEE135F06812848641A9B437CA515218067672477827C662EF297A92
        > Bitdefender  . . . : Gen:Variant.Adware.Kazy.696265
        > Kaspersky  . . . . : not-a-virus:AdWare.Win32.Amonetize.caru
          Fuzzy  . . . . . . : 116.0
          Forensic Cluster
             -4.8s C:\FRST\Quarantine\C\Program Files\Dripkick\packages\e284f59b-9bbf-4d0e-8388-206c74c3da6f\
             -4.8s C:\FRST\Quarantine\C\Temp\Temp\tmp4D87.tmp
             -4.5s C:\Windows\ServiceProfiles\LocalService\winhttp\2352278310.cache
              0.0s C:\FRST\Quarantine\C\Program Files\Dripkick\packages\e284f59b-9bbf-4d0e-8388-206c74c3da6f\dripl.exe
              1.4s C:\FRST\Quarantine\C\Program Files\Dripkick\packages\e284f59b-9bbf-4d0e-8388-206c74c3da6f\dripl.exe.config
             10.8s C:\FRST\Quarantine\C\Program Files\Dripkick\packages\e284f59b-9bbf-4d0e-8388-206c74c3da6f\config.conf
             13.4s C:\FRST\Quarantine\C\Program Files\Dripkick\packages\e284f59b-9bbf-4d0e-8388-206c74c3da6f\conf.db
             15.4s C:\Users\Svetlichka\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-934708141-2903372314-3187024128-1001\d9fd64fe82e3ca4c7f5401407491128a_7ea157f0-e55d-4fe6-b5a8-aff7d480c517
             17.4s C:\FRST\Quarantine\C\Program Files\Dripkick\packages\e284f59b-9bbf-4d0e-8388-206c74c3da6f\setup\
             17.4s C:\FRST\Quarantine\C\Program Files\Dripkick\packages\e284f59b-9bbf-4d0e-8388-206c74c3da6f\setup\Skype_Update.7.12.0.101.exe
             26.4s C:\FRST\Quarantine\C\Temp\Temp\8bf28faa-44af-4be9-8aff-02430a520d1f.json

       C:\FRST\Quarantine\C\Temp\Temp\nsbCD50.exe
          Size . . . . . . . : 489 787 bytes
          Age  . . . . . . . : 2.5 days (2015-12-18 13:02:01)
          Entropy  . . . . . : 8.0
          SHA-256  . . . . . : 8682CD0D45CAF9F68DCC5ECA64A2D615BF2FE39B5BF7EA093895C56D94F00BF6
        > Kaspersky  . . . . : not-a-virus:AdWare.Win32.OpenCandy.bh
          Fuzzy  . . . . . . : 116.0
          Forensic Cluster
             -12.7s C:\FRST\Quarantine\C\Temp\Temp\tmp9B12.tmp
             -9.1s C:\Windows\System32\LogFiles\Scm\07aa607d-0dc2-42c3-a7b5-17347967f84f
             -7.1s C:\Users\Svetlichka\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-934708141-2903372314-3187024128-1001\166d82bd2d2eca2b35f8ebe66d4a6fd1_7ea157f0-e55d-4fe6-b5a8-aff7d480c517
             -0.0s C:\FRST\Quarantine\C\Temp\Temp\nsbCD4F.exe
              0.0s C:\FRST\Quarantine\C\Temp\Temp\nsbCD4F.exe.config
              0.0s C:\FRST\Quarantine\C\Temp\Temp\nsbCD50.exe
             11.7s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\20\9873076B71CE8DB8.dat
             11.7s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\54\0B2E5F073B0D6CE6.dat
             11.7s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\31\7B5B8830D57874EF.dat
             13.5s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\84\B7D23CB5B011B330.dat
             13.7s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\48\2D556A7A09BC425C.dat
             14.6s C:\ProgramData\Microsoft\Windows Defender\Scans\History\Store\2FACCEFBE799DC9564B013A10C1808F3
             17.6s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\78\47D0B0F29263E7E6.dat
             17.6s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\21\F86D692881BC2541.dat
             19.2s C:\FRST\Quarantine\C\Temp\Temp\{7FB9A4E3-E020-4D6E-A353-5E2C2D2FC447} - OProcSessId.dat
             19.8s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\60\88E7091383912BC4.dat
             21.6s C:\FRST\Quarantine\C\Temp\Temp\df67af99-21ac-419d-a4eb-f38fb90f11ff.json
             28.3s C:\Windows\Prefetch\SVCHOST.EXE-93CEEE07.pf
             28.6s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\45\1C9036760631AB05.dat
             29.1s C:\FRST\Quarantine\C\Temp\Temp\OCP3EC4.tmp
             30.6s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\29\DDB8F11A79DF52C9.dat
             30.6s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\12\D2E8AE750E168780.dat
             31.8s C:\FRST\Quarantine\C\Temp\Temp\OCP4963.tmp
             32.4s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\73\D2F42A42388C80D9.dat
             32.4s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\76\CAD1B2F680910698.dat
             32.4s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\33\F34639351E6B4275.dat
             34.3s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\05\C9B6D4124CD77AF9.dat
             34.3s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\54\885EB69A68F70A3E.dat
             34.3s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\67\B2A986FF8FBFF9DF.dat
             34.3s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\89\1640A1DF4BBD4245.dat
             34.4s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\88\034F408AB1D8DA1C.dat
             34.5s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\74\4C67CBFC0E0F56AA.dat
             34.8s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\80\04FE52094CED349C.dat
             34.8s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\48\FDD42BE00D4C3748.dat
             34.8s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\11\65776C26E7D4E693.dat
             36.5s C:\FRST\Quarantine\C\Temp\Temp\nsn5BA5.exe

       C:\FRST\Quarantine\C\Temp\Temp\nsq1CC1.exe
          Size . . . . . . . : 489 787 bytes
          Age  . . . . . . . : 0.5 days (2015-12-20 12:08:58)
          Entropy  . . . . . : 8.0
          SHA-256  . . . . . : 8682CD0D45CAF9F68DCC5ECA64A2D615BF2FE39B5BF7EA093895C56D94F00BF6
        > Kaspersky  . . . . : not-a-virus:AdWare.Win32.OpenCandy.bh
          Fuzzy  . . . . . . : 116.0
          Forensic Cluster
             -0.0s C:\FRST\Quarantine\C\Temp\Temp\nsq1CC0.exe
              0.0s C:\FRST\Quarantine\C\Temp\Temp\nsq1CC0.exe.config
              0.0s C:\FRST\Quarantine\C\Temp\Temp\nsq1CC1.exe

       C:\FRST\Quarantine\C\Temp\Temp\{38E111CC-4A3C-48DA-AB83-1E4D8A0D3E43}.dll
          Size . . . . . . . : 553 184 bytes
          Age  . . . . . . . : 0.5 days (2015-12-20 12:36:48)
          Entropy  . . . . . : 5.5
          SHA-256  . . . . . : 5F8C343E46549C69415346E52D2BB8AE7419773AF7E7072B83021078936B57E7
          Version  . . . . . : 1.0.5831.40734
          RSA Key Size . . . : 2048
          Authenticode . . . : Valid
        > Bitdefender  . . . : Gen:Adware.BrowseFox.1
          Fuzzy  . . . . . . : 98.0
          Forensic Cluster
             -26.0s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\09\2621E3B5F451E191.dat
             -26.0s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\53\32DD543C82018A59.dat
             -26.0s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\48\3219B15C6E4C0A6C.dat
             -24.2s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\46\C13949197CF922CE.dat
             -24.2s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\22\FF3DA9D2A1D6DAEA.dat
             -20.5s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\95\9CA2507955C6AFDF.dat
             -20.4s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\55\0A2722A895222C7F.dat
             -20.4s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\53\ECA2E9D35D0593DD.dat
             -20.3s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\66\A038E89D4357C06E.dat
             -20.3s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\18\68BEDE5AB3664322.dat
             -20.3s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\66\45B577B1E207F386.dat
             -20.3s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\37\E2BB338658859B71.dat
             -20.3s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\66\DB89524DA5625026.dat
             -18.5s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\60\13E5E51B3F47E738.dat
             -13.6s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\2\70\1F37848736F65A7A.dat
             -12.8s C:\FRST\Quarantine\C\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334\user.js.xBAD
             -12.7s C:\FRST\Quarantine\C\Temp\Temp\{EB9776E1-ADAC-4401-B58C-AC048EE0E49B}.xpi
             -7.7s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\09\4D237A75E8D7B109.dat
             -7.7s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\85\DC07D5F7C57DB5B9.dat
              0.0s C:\FRST\Quarantine\C\Temp\Temp\{38E111CC-4A3C-48DA-AB83-1E4D8A0D3E43}.dll

       C:\FRST\Quarantine\C\Temp\Temp\{A61AC8E0-9E20-4BEF-9C72-3F7D3F1CA166}.dll
          Size . . . . . . . : 556 768 bytes
          Age  . . . . . . . : 0.4 days (2015-12-20 14:41:50)
          Entropy  . . . . . : 5.5
          SHA-256  . . . . . : FB4412E0D5E12604B6C89A8A68126786A06AC4868A9FE121FD21ADB3A94545F9
          Version  . . . . . : 1.0.5832.6546
          RSA Key Size . . . : 2048
          Authenticode . . . : Valid
        > Bitdefender  . . . : Gen:Adware.BrowseFox.1
          Fuzzy  . . . . . . : 98.0
          Forensic Cluster
             -12.7s C:\FRST\Quarantine\C\Temp\Temp\{CC55129E-7F92-4354-AD35-F33780A7CF99}.xpi
             -6.7s C:\Windows\Prefetch\PLUGIN.EXE-F82F3B22.pf
             -6.7s C:\Windows\Prefetch\PLUGIN.EXE-2260CBEE.pf
             -4.7s C:\Windows\Prefetch\PLUGIN.EXE-6CED3021.pf
             -2.4s C:\Windows\Prefetch\PLUGIN.EXE-64317056.pf
              0.0s C:\FRST\Quarantine\C\Temp\Temp\{A61AC8E0-9E20-4BEF-9C72-3F7D3F1CA166}.dll

       C:\FRST\Quarantine\C\Temp\Temp\{AE1F3ABC-E565-4591-890A-EF20248FBFC9}.dll
          Size . . . . . . . : 553 184 bytes
          Age  . . . . . . . : 0.5 days (2015-12-20 12:17:25)
          Entropy  . . . . . : 5.5
          SHA-256  . . . . . : 5F8C343E46549C69415346E52D2BB8AE7419773AF7E7072B83021078936B57E7
          Version  . . . . . : 1.0.5831.40734
          RSA Key Size . . . : 2048
          Authenticode . . . : Valid
        > Bitdefender  . . . : Gen:Adware.BrowseFox.1
          Fuzzy  . . . . . . : 98.0
          Forensic Cluster
             -31.0s C:\FRST\Quarantine\C\Temp\Temp\fb058f53-bc05-48ee-983d-9fc9d63f1aae.json
             -14.7s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\2\03\9E333FC6C8830F07.dat
             -13.4s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\30\C3EBE1BDC6E51C1A.dat
             -13.3s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\33\65303898B995DE69.dat
             -12.6s C:\FRST\Quarantine\C\Temp\Temp\tmp95C.tmp
             -11.0s C:\Windows\System32\LogFiles\Scm\10a2a822-dfaf-40e9-9961-012099607c62
             -6.3s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\78\EFD5B02E729A01E6.dat
             -6.3s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\20\A200F8AD88923AFC.dat
              0.0s C:\FRST\Quarantine\C\Temp\Temp\{AE1F3ABC-E565-4591-890A-EF20248FBFC9}.dll
              5.0s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\03\288B9C18FF362963.dat

       C:\FRST\Quarantine\C\Temp\Temp\{BC5BFD76-BED2-4A04-BC08-E71C84BD7107}.dll
          Size . . . . . . . : 556 768 bytes
          Age  . . . . . . . : 0.3 days (2015-12-20 17:45:36)
          Entropy  . . . . . : 5.5
          SHA-256  . . . . . : FB4412E0D5E12604B6C89A8A68126786A06AC4868A9FE121FD21ADB3A94545F9
          Version  . . . . . : 1.0.5832.6546
          RSA Key Size . . . : 2048
          Authenticode . . . : Valid
        > Bitdefender  . . . : Gen:Adware.BrowseFox.1
          Fuzzy  . . . . . . : 98.0
          Forensic Cluster
             -17.7s C:\Windows\Prefetch\CSRSS.EXE-8C04D631.pf
             -17.0s C:\Windows\System32\wdi\{533a67eb-9fb5-473d-b884-958cf4b9c4a3}\{3c77cf0f-63b4-4829-a732-b50679ad90d6}\
             -17.0s C:\Windows\System32\wdi\{533a67eb-9fb5-473d-b884-958cf4b9c4a3}\{3c77cf0f-63b4-4829-a732-b50679ad90d6}\snapshot.etl
             -16.5s C:\Windows\Prefetch\WINLOGON.EXE-8163EECC.pf
             -16.1s C:\Windows\Prefetch\DWM.EXE-AEABE78B.pf
             -16.1s C:\Windows\Prefetch\ATBROKER.EXE-FF58B71D.pf
             -14.5s C:\Windows\Prefetch\ATIECLXX.EXE-19F63085.pf
             -11.1s C:\Windows\Prefetch\DLLHOST.EXE-893DDF55.pf
             -7.8s C:\Windows\Prefetch\TEAMVIEWER.EXE-381D1066.pf
             -6.2s C:\Windows\Prefetch\USERINIT.EXE-F39AB672.pf
             -5.7s C:\Windows\Prefetch\RAVBG64.EXE-0BA84550.pf
             -4.8s C:\Windows\Prefetch\BOOTSTRAP.EXE-B087E627.pf
              0.0s C:\FRST\Quarantine\C\Temp\Temp\{BC5BFD76-BED2-4A04-BC08-E71C84BD7107}.dll
              1.3s C:\Users\Svetlichka\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-934708141-2903372314-3187024128-1001\ac65531e506649b9d3c755d290217469_7ea157f0-e55d-4fe6-b5a8-aff7d480c517
              2.9s C:\Windows\Prefetch\TV_W32.EXE-0B96649A.pf
              2.9s C:\Windows\Prefetch\TV_X64.EXE-E398BC90.pf
              3.8s C:\Users\Svetlichka\AppData\LocalLow\uTorrent\
              3.8s C:\Users\Svetlichka\AppData\LocalLow\uTorrent\uTorrent_4684_002EF018_1011318942
              4.0s C:\Users\Svetlichka\AppData\LocalLow\uTorrent\uTorrent_4684_002EE780_1575700261
              5.5s C:\Users\Svetlichka\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4CB4DDEFFD68D5306BA7E9163A2CC0C6
              5.5s C:\Users\Svetlichka\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4CB4DDEFFD68D5306BA7E9163A2CC0C6
              6.0s C:\Windows\Prefetch\ISMAGENT.EXE-486EC459.pf
              6.1s C:\Windows\Prefetch\RUNONCE.EXE-21038459.pf
              6.4s C:\Windows\Prefetch\RAVCPL64.EXE-61B16716.pf
              6.9s C:\FRST\Quarantine\C\Temp\Temp\34165f3b-e0d2-40f8-9211-2487f43683ee.json
              7.7s C:\Windows\Prefetch\MOBSYNC.EXE-D8BC6ED2.pf
             35.1s C:\Windows\Prefetch\RUNTIMEBROKER.EXE-A02FF048.pf
             38.3s C:\Windows\Prefetch\UPDATER.EXE-2B61A9D6.pf

       C:\FRST\Quarantine\C\Temp\Temp\{F73907D6-E165-4C0C-9240-A2EC2B5570F4}.dll
          Size . . . . . . . : 553 184 bytes
          Age  . . . . . . . : 0.5 days (2015-12-20 12:12:08)
          Entropy  . . . . . : 5.5
          SHA-256  . . . . . : 5F8C343E46549C69415346E52D2BB8AE7419773AF7E7072B83021078936B57E7
          Version  . . . . . : 1.0.5831.40734
          RSA Key Size . . . : 2048
          Authenticode . . . : Valid
        > Bitdefender  . . . : Gen:Adware.BrowseFox.1
          Fuzzy  . . . . . . : 98.0

       C:\ProgramData\KMSAutoS\bin\KMSSS.exe
          Size . . . . . . . : 304 760 bytes
          Age  . . . . . . . : 4.2 days (2015-12-16 19:33:47)
          Entropy  . . . . . : 6.8
          SHA-256  . . . . . : 4C8C3BED3D9E8F48800065E4AC024AEF237861AAA37443D4B00B98569D83AEEA
          Product  . . . . . : KMS Server Emulator Service (XP)
          Publisher  . . . . : MDL Forum, mod by Ratiborus
          Description  . . . : KMS Server Emulator Service (XP)
          Version  . . . . . : 1.2.1.0
          Copyright  . . . . : MDL Forum, mod by Ratiborus
          RSA Key Size . . . : 1024
          LanguageID . . . . : 1033
          Authenticode . . . : Self-signed
        > Bitdefender  . . . : Trojan.GenericKD.2875703
          Fuzzy  . . . . . . : 105.0
          Forensic Cluster
             -1.0s C:\ProgramData\KMSAutoS\
             -0.4s C:\ProgramData\KMSAutoS\bin\
              0.0s C:\ProgramData\KMSAutoS\bin\KMSSS.exe
              0.0s C:\ProgramData\KMSAutoS\bin\TunMirror2.exe
              0.4s C:\ProgramData\KMSAutoS\bin\driver\x64TAP1\
              0.4s C:\ProgramData\KMSAutoS\bin\driver\x64TAP1\ptun0901.cat
              0.4s C:\ProgramData\KMSAutoS\bin\driver\x64TAP1\OemVista.inf
              0.4s C:\ProgramData\KMSAutoS\bin\driver\
              0.4s C:\ProgramData\KMSAutoS\bin\driver\x64TAP2\
              0.4s C:\ProgramData\KMSAutoS\bin\driver\x64TAP2\tapoas.cat
              0.4s C:\ProgramData\KMSAutoS\bin\driver\oas_sert.cer
              0.4s C:\ProgramData\KMSAutoS\bin\driver\tap0901.cer
              0.4s C:\ProgramData\KMSAutoS\bin\driver\x64TAP2\tapoas.inf
              0.4s C:\ProgramData\KMSAutoS\bin\driver\x64WDV\
              0.4s C:\ProgramData\KMSAutoS\bin\driver\x64WDV\WinDivert.inf
              0.4s C:\ProgramData\KMSAutoS\bin\driver\x64TAP1\devcon.exe
              0.4s C:\ProgramData\KMSAutoS\bin\driver\x64TAP1\ptun0901.sys
              0.4s C:\ProgramData\KMSAutoS\bin\driver\x64TAP2\devcon.exe
              0.4s C:\ProgramData\KMSAutoS\bin\driver\x64WDV\WdfCoInstaller01009.dll
              0.4s C:\ProgramData\KMSAutoS\bin\driver\x64WDV\WinDivert.dll
              0.4s C:\ProgramData\KMSAutoS\bin\driver\x64TAP2\tapoas.sys
              0.4s C:\ProgramData\KMSAutoS\bin\driver\x64WDV\WinDivert.sys
              0.4s C:\ProgramData\KMSAutoS\bin\driver\x64WDV\FakeClient.exe
              0.5s C:\ProgramData\KMSAutoS\KMSAuto Net.exe
              0.5s C:\ProgramData\KMSAutoS\kmsauto.ini
              0.6s C:\Windows\System32\Tasks\KMSAutoNet


    Suspicious files ____________________________________________________________

       C:\Users\Svetlichka\AppData\Roaming\uTorrent\uTorrent.exe
          Size . . . . . . . : 2 026 520 bytes
          Age  . . . . . . . : 258.2 days (2015-04-06 19:05:34)
          Entropy  . . . . . : 8.0
          SHA-256  . . . . . : 22FF84541E3FA15150E95658010EBD09BD928EA64903D14ADC5FEA8FE7B8ADA3
          Product  . . . . . : µTorrent
          Publisher  . . . . : BitTorrent Inc.
          Description  . . . : µTorrent
          Version  . . . . . : 3.4.5.41372
          Copyright  . . . . : ©2015 BitTorrent, Inc. All Rights Reserved.
          RSA Key Size . . . : 2048
          Parent Name  . . . : C:\Windows\Explorer.EXE
          LanguageID . . . . : 1033
          Authenticode . . . : Self-signed
          Running processes  : 4644
          Fuzzy  . . . . . . : 26.0
             Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
             Program is code self-signed.
             This program is actively listening for inbound network connections.
             Uses the Windows Registry to run each time the user logs on.
             Program starts automatically without user intervention.
             The file is in use by one or more active processes.
          Startup
             HKU\S-1-5-21-934708141-2903372314-3187024128-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\uTorrent
          References
             C:\Users\Svetlichka\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
             C:\Users\Svetlichka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Torrent\µTorrent.lnk
          Network Ports
             0.0.0.0:61769    
             127.0.0.1:10000    


    Potential Unwanted Programs _________________________________________________

       HKLM\SOFTWARE\Wow6432Node\Systweak\ (AdvSysProtector)
       HKLM\SYSTEM\ControlSet001\Services\EventLog\Application\RndService\ (Amonetize)
       HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\RndService\ (Amonetize)
       HKU\S-1-5-21-934708141-2903372314-3187024128-1001\Software\systweak\ (AdvSysProtector)

    Cookies _____________________________________________________________________

       C:\Users\Svetlichka\AppData\Local\Microsoft\Windows\INetCookies\2M0K1OZ2.txt
       C:\Users\Svetlichka\AppData\Local\Microsoft\Windows\INetCookies\33TA5IYM.txt
       C:\Users\Svetlichka\AppData\Local\Microsoft\Windows\INetCookies\3NA1AOIX.txt
       C:\Users\Svetlichka\AppData\Local\Microsoft\Windows\INetCookies\78UUNG78.txt
       C:\Users\Svetlichka\AppData\Local\Microsoft\Windows\INetCookies\C0B1ZLRF.txt
       C:\Users\Svetlichka\AppData\Local\Microsoft\Windows\INetCookies\DQWK2ETF.txt
       C:\Users\Svetlichka\AppData\Local\Microsoft\Windows\INetCookies\GTA871RW.txt
       C:\Users\Svetlichka\AppData\Local\Microsoft\Windows\INetCookies\H12ISTZJ.txt
       C:\Users\Svetlichka\AppData\Local\Microsoft\Windows\INetCookies\I1932SIT.txt
       C:\Users\Svetlichka\AppData\Local\Microsoft\Windows\INetCookies\IACIN6Z6.txt
       C:\Users\Svetlichka\AppData\Local\Microsoft\Windows\INetCookies\JL48E8GT.txt
       C:\Users\Svetlichka\AppData\Local\Microsoft\Windows\INetCookies\JOHH3W23.txt
       C:\Users\Svetlichka\AppData\Local\Microsoft\Windows\INetCookies\MA5L0HJM.txt
       C:\Users\Svetlichka\AppData\Local\Microsoft\Windows\INetCookies\O40T03NT.txt
       C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334\cookies.sqlite:adform.net
       C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334\cookies.sqlite:adnxs.com
       C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334\cookies.sqlite:ads.bg-mamma.com
       C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334\cookies.sqlite:ads.kaldata.com
       C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334\cookies.sqlite:adx.adform.net
       C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334\cookies.sqlite:bs.serving-sys.com
       C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334\cookies.sqlite:dmp.adform.net
       C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334\cookies.sqlite:doubleclick.net
       C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334\cookies.sqlite:imrworldwide.com
       C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334\cookies.sqlite:serving-sys.com
       C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334\cookies.sqlite:smartadserver.com
       C:\Users\Svetlichka\AppData\Roaming\Mozilla\Firefox\Profiles\g0h7wdu6.default-1450380684334\cookies.sqlite:turn.com


    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Липсва само лог файла от Malwarebytes Anti-Malware. Вместо него сте публикували fixlog.txt.

    Нека да видя и него и ще ви дам финални наставления. :)

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове
    преди 2 часа, B-boy/StyLe/ написа:

    От My Computer => Tools => Folder Options => View:

    Сложете отметка пред "Show hidden files, folders and drives"

    и махнете отметката пред "Hide protected operating system files (recommended)".

    Натиснете Apply.

    Сега проверете за лог файла в папката C:\Programdata\HitmanPro\Logs и го прикачете в следващия си коментар. :)

    Папките са ми открити, така видях, че е в настройките, но такъв файл нямаше

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове
    преди 19 часа, B-boy/StyLe/ написа:

    Но вие цитирате инструкциите за HitmanPro, за който вече сте дали лог...липсва лог от стъпка 3. :)

    Програмата ми е на български, а Вие сте ми дали инструкции на английски и може би затова така се е получило :(

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Ами просто стартирайте програмата и отидете на Сканиране и изберете Сканиране на заплахи. След като проверката приключи натиснете Приложи действията. След това отидете до табът Хронология => Дневници => отворете лог файла (Scan Log, не Protection Log) и копирайте съдържанието му в следващия си коментар.

    За повече информация вижте тук на български - сайта на колегата ни tigertron => http://tigertron.free.bg/mbam.htm

    Поздрави!

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Извинявам се за забавянето, но имах работа днес :)

    Malwarebytes Anti-Malware
    www.malwarebytes.org

    Дата на сканиране: 22.12.2015 г.
    Час на сканиране: 22:01
    Дневник: Scan Log 1.txt
    Администратор: Да

    Версия: 2.2.0.1024
    База от данни за злонамерен софтуер: v2015.12.22.06
    База от данни за рууткити: v2015.12.18.01
    Лиценз: Безплатен
    Защита от злонамерен софтуер: Забранено
    Защита от злонамерени страници: Забранено
    Самозащита: Забранено

    ОС: Windows 8.1
    Процесор: x64
    Файлова система: NTFS
    Потребител: Svetlichka

    Тип сканиране: Сканиране за заплахи
    Резултат: Завършено
    Сканиране обекти: 339462
    Изминало време: 28 мин. 31 сек.

    Памет: Разрешено
    Начално стартиране: Разрешено
    Файлова система: Разрешено
    Архиви: Разрешено
    Рууткити: Разрешено
    Дълбоко сканиране за рууткити: Разрешено
    Евристика: Разрешено
    ПНП: Разрешено
    ПНИ: Разрешено

    Процеси: 0
    (Не бяха открити злонамерени обекти)

    Модули: 0
    (Не бяха открити злонамерени обекти)

    Ключове в системния регистър: 0
    (Не бяха открити злонамерени обекти)

    Стойности в системния регистър: 0
    (Не бяха открити злонамерени обекти)

    Данни в системния регистър: 0
    (Не бяха открити злонамерени обекти)

    Папки: 0
    (Не бяха открити злонамерени обекти)

    Файлове: 0
    (Не бяха открити злонамерени обекти)

    Физически сектори: 0
    (Не бяха открити злонамерени обекти)


    (end)

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Ето и последната стъпка:

    След това изтеглете edit-text.giffixlist.txt и го запазете на десктопа.
    Стартирайте FRST.exe и натиснете бутона Fix веднъж!
    След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.
     
    Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

     

    След това вижте финалните ми инструкции тук.

    Поздрави и приятни почивни дни! :despicable-me-2-minion-4:

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Fix result of Farbar Recovery Scan Tool (x64) Version:20-12-2015
    Ran by Svetlichka (2015-12-23 00:24:19) Run:3
    Running from D:\Documents\Desktop
    Loaded Profiles: Svetlichka (Available Profiles: Svetlichka)
    Boot Mode: Normal
    ==============================================

    fixlist content:
    *****************
    start
    CreateRestorePoint:
    DeleteKey: HKLM\SOFTWARE\Wow6432Node\Systweak
    DeleteKey: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\RndService
    DeleteKey: HKU\S-1-5-21-934708141-2903372314-3187024128-1001\Software\systweak
    end
    *****************

    Restore point was successfully created.
    HKLM\SOFTWARE\Wow6432Node\Systweak => key removed successfully
    HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\RndService => key removed successfully
    HKU\S-1-5-21-934708141-2903372314-3187024128-1001\Software\systweak => key removed successfully

    ==== End of Fixlog 00:24:38 ====

    Изпълних всичко до инсталирането на CryptoPrevent и доколкото разбрах това е достатъчно от обяснението :)

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове
    преди 39 минути, youandi написа:

    Изпълних всичко до инсталирането на CryptoPrevent и доколкото разбрах това е достатъчно от обяснението :)

    Всеки преценява сам за себе си до къде да изпълни инструкциите според нуждите и способностите си. :)

    Поздрави и весело посрещане на празниците! christmas-carols-smiley-emoticon.gif.60b

     

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове
    преди 14 минути, B-boy/StyLe/ написа:

    Всеки преценява сам за себе си до къде да изпълни инструкциите според нуждите и способностите си. :)

    Поздрави и весело посрещане на празниците! christmas-carols-smiley-emoticon.gif.60b

     

    Благодаря за всичко и весело посрещане на празниците и на вас :)

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Регистрирайте се или влезете в профила си за да коментирате

    Трябва да имате регистрация за да може да коментирате това

    Регистрирайте се

    Създайте нова регистрация в нашия форум. Лесно е!

    Нова регистрация

    Вход

    Имате регистрация? Влезте от тук.

    Вход


    • Горещи теми в момента

    • Подобни теми

      • от мирослав24
        здравейте,получи се следния проблем-след отваряне на снимки от чат,по-точно след последната,излезе съобщение на екрана дали искам да рестартирам.Отказах да изпълня рестарта,след което на курсора на мишката се появи часовника и стоя около 5 минути.През това време не се изпълняваха никакви команди.Изчаках да изчезне часовника и реших да отворя коя да е икона от десктопа-същото нещо-появи се часовника за около 5 минути.Изключих го и повече не се занимавах.Днес сутринта го включих и директно ми се отвори браузъра със същия този часовник.Сега ми изпълнява командите по бавно,но може да се работи.Не съм сканирал с никакви антивирусни софтуери и директно минах на сканиране с FRST.Ето ги и логовете:
        Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 30-11-2017
        Ran by User1 (administrator) on PC1 (05-12-2017 08:35:08)
        Running from C:\Documents and Settings\User2\Desktop
        Loaded Profiles: User1 & User2 (Available Profiles: User1 & User2 & Administrator)
        Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)
        Internet Explorer Version 8 (Default browser: IE)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (Cisco Systems, Inc.) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
        (Comodo) C:\Program Files\Comodo\Dragon\dragon_updater.exe
        () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareService.exe
        (RaMMicHaeL) C:\Program Files\Unchecky\bin\unchecky_svc.exe
        (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
        (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
        (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
        (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
        (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
        ==================== Registry (Whitelisted) ===========================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [tsnpstd3] => C:\WINDOWS\tsnpstd3.exe [262144 2006-06-19] ()
        HKLM\...\Run: [snpstd3] => C:\WINDOWS\vsnpstd3.exe [831488 2006-05-12] ()
        HKLM\...\Run: [] => [X]
        HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareTray.exe [8063200 2016-07-18] ()
        HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2007-03-11] (Hewlett-Packard Co.)
        HKLM\...\Run: [DWQueuedReporting] => C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [437160 2007-02-26] (Microsoft Corporation)
        HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [Messenger (Yahoo!)] => "F:\SKYPE_~1\yahoo\Messenger\YahooMessenger.exe" -quiet
        HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [uTorrent] => C:\Program Files\uTorrent\uTorrent.exe [395640 2011-05-02] (BitTorrent, Inc.)
        HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6490904 2015-08-20] (Piriform Ltd)
        HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [Google Update] => C:\Documents and Settings\User1\Local Settings\Application Data\Google\Update\1.3.33.7\GoogleUpdateCore.exe [601680 2017-12-02] (Google Inc.)
        HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [MCShield Monitor] => C:\Program Files\MCShield\mcshieldrtm.exe [650816 2014-04-11] (MyCity)
        HKU\S-1-5-18\...\RunOnce: [RunNarrator] => C:\WINDOWS\system32\Narrator.exe [53760 2008-04-14] (Microsoft Corporation)
        HKU\S-1-5-18\...\RunOnce: [FlashPlayerUpdate] => C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_26_0_0_151_pepper.exe [1281024 2017-08-19] (Adobe Systems Incorporated)
        Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2017-09-02]
        ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
        Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\VPN Client.lnk [2017-12-02]
        ShortcutTarget: VPN Client.lnk -> C:\WINDOWS\Installer\{21E247D4-5E27-4BEA-AA4D-19A81203FE2A}\Icon3E5562ED7.ico ()
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
        Tcpip\..\Interfaces\{0227FD86-8C54-4C88-8029-3F44137A8ADF}: [DhcpNameServer] 192.168.0.1
        Internet Explorer:
        ==================
        HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        HKU\S-1-5-21-220523388-412668190-1417001333-1003\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        HKU\S-1-5-21-220523388-412668190-1417001333-1004\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        URLSearchHook: [S-1-5-21-220523388-412668190-1417001333-1004] ATTENTION => Default URLSearchHook is missing
        DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab
        FireFox:
        ========
        FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_160.dll [2015-06-22] ()
        FF Plugin: @java.com/JavaPlugin,version=10.11.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-01-12] (Oracle Corporation)
        FF Plugin: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files\Yahoo!\Shared\npYState.dll [No File]
        FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
        FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
        FF Plugin HKU\S-1-5-21-220523388-412668190-1417001333-1003: @talk.google.com/GoogleTalkPlugin -> C:\Documents and Settings\User1\Application Data\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
        FF Plugin HKU\S-1-5-21-220523388-412668190-1417001333-1003: @talk.google.com/O1DPlugin -> C:\Documents and Settings\User1\Application Data\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
        FF Plugin HKU\S-1-5-21-220523388-412668190-1417001333-1003: @tools.google.com/Google Update;version=3 -> C:\Documents and Settings\User1\Local Settings\Application Data\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-12-02] (Google Inc.)
        FF Plugin HKU\S-1-5-21-220523388-412668190-1417001333-1003: @tools.google.com/Google Update;version=9 -> C:\Documents and Settings\User1\Local Settings\Application Data\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-12-02] (Google Inc.)
        FF Plugin ProgramFiles/Appdata: C:\Documents and Settings\User1\Application Data\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
        FF Plugin ProgramFiles/Appdata: C:\Documents and Settings\User1\Application Data\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [272384 2017-08-19] (Adobe Systems Incorporated) [File not signed]
        S2 Browser; C:\WINDOWS\System32\browser.dll [78336 2012-07-06] (Microsoft Corporation) [File not signed]
        R2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1528624 2009-11-17] (Cisco Systems, Inc.)
        R2 DcomLaunch; C:\WINDOWS\system32\rpcss.dll [401408 2009-02-09] (Microsoft Corporation) [File not signed]
        R2 Dnscache; C:\WINDOWS\System32\dnsrslvr.dll [45568 2009-04-20] (Microsoft Corporation) [File not signed]
        R2 DragonUpdater; C:\Program Files\Comodo\Dragon\dragon_updater.exe [2060848 2016-02-05] (Comodo)
        R2 Eventlog; C:\WINDOWS\system32\services.exe [110592 2009-02-06] (Microsoft Corporation) [File not signed]
        R3 EventSystem; C:\WINDOWS\system32\es.dll [253952 2008-07-07] (Microsoft Corporation) [File not signed]
        S3 FastUserSwitchingCompatibility; C:\WINDOWS\System32\shsvcs.dll [135168 2009-07-28] (Microsoft Corporation) [File not signed]
        R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2007-06-04] (Hewlett-Packard Co.) [File not signed]
        R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [131072 2007-06-04] (Hewlett-Packard Co.) [File not signed]
        S4 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [170912 2013-01-12] (Oracle Corporation)
        R2 LanmanServer; C:\WINDOWS\System32\srvsvc.dll [99840 2010-08-27] (Microsoft Corporation) [File not signed]
        R2 lanmanworkstation; C:\WINDOWS\System32\wkssvc.dll [132096 2009-06-10] (Microsoft Corporation) [File not signed]
        R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareService.exe [664040 2016-07-18] ()
        S3 MSIServer; C:\WINDOWS\System32\msiexec.exe [95744 2008-05-19] (Microsoft Corporation) [File not signed]
        S3 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [43520 2006-11-08] (Hewlett-Packard) [File not signed]
        R3 Nla; C:\WINDOWS\System32\mswsock.dll [245248 2008-06-20] (Microsoft Corporation) [File not signed]
        R2 PlugPlay; C:\WINDOWS\system32\services.exe [110592 2009-02-06] (Microsoft Corporation) [File not signed]
        S3 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [53248 2006-11-08] (Hewlett-Packard) [File not signed]
        R2 RpcSs; C:\WINDOWS\System32\rpcss.dll [401408 2009-02-09] (Microsoft Corporation) [File not signed]
        R2 ShellHWDetection; C:\WINDOWS\System32\shsvcs.dll [135168 2009-07-28] (Microsoft Corporation) [File not signed]
        S2 SkypeUpdate; C:\Program Files\Skype\Updater\Updater.exe [317400 2017-04-05] (Skype Technologies) [File not signed]
        R2 Spooler; C:\WINDOWS\system32\spoolsv.exe [58880 2010-08-17] (Microsoft Corporation) [File not signed]
        R2 Themes; C:\WINDOWS\System32\shsvcs.dll [135168 2009-07-28] (Microsoft Corporation) [File not signed]
        R2 Unchecky; C:\Program Files\Unchecky\bin\unchecky_svc.exe [243448 2016-02-20] (RaMMicHaeL)
        S3 Wmi; C:\WINDOWS\System32\advapi32.dll [617472 2009-02-09] (Microsoft Corporation) [File not signed]
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R1 AFD; C:\WINDOWS\System32\drivers\afd.sys [138496 2011-08-17] (Microsoft Corporation) [File not signed]
        R1 AmdK8; C:\WINDOWS\System32\DRIVERS\AmdK8.sys [36864 2006-06-18] (Advanced Micro Devices)
        S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
        S3 CVirtA; C:\WINDOWS\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
        R2 CVPNDRVA; C:\WINDOWS\system32\Drivers\CVPNDRVA.sys [308859 2009-11-17] (Cisco Systems, Inc.) [File not signed]
        R3 DNE; C:\WINDOWS\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)
        R3 gzflt; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\3.0.129.0\gzflt.sys [175008 2016-04-28] (BitDefender LLC)
        S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [49920 2007-01-19] (HP)
        S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2007-01-19] (HP)
        S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21568 2007-01-19] (HP)
        R3 HTTP; C:\WINDOWS\System32\Drivers\HTTP.sys [265728 2009-10-20] (Microsoft Corporation) [File not signed]
        R3 IntcAzAudAddService; C:\WINDOWS\System32\drivers\RtkHDAud.sys [4368896 2006-08-15] (Realtek Semiconductor Corp.) [File not signed]
        R3 irsir; C:\WINDOWS\System32\DRIVERS\irsir.sys [18688 2001-08-17] (Microsoft Corporation)
        R0 KSecDD; C:\WINDOWS\system32\Drivers\KSecDD.sys [92928 2009-06-24] (Microsoft Corporation) [File not signed]
        R1 MRxSmb; C:\WINDOWS\System32\DRIVERS\mrxsmb.sys [456320 2011-07-15] (Microsoft Corporation) [File not signed]
        R0 Mup; C:\WINDOWS\system32\Drivers\Mup.sys [105472 2011-04-21] (Microsoft Corporation) [File not signed]
        S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
        R3 NdisTapi; C:\WINDOWS\System32\DRIVERS\ndistapi.sys [10496 2011-07-08] (Microsoft Corporation) [File not signed]
        R3 NDProxy; C:\WINDOWS\system32\Drivers\NDProxy.sys [40960 2013-11-27] (Microsoft Corporation) [File not signed]
        R3 NVENETFD; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [57856 2006-07-11] (NVIDIA Corporation)
        R3 nvnetbus; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [20480 2006-07-11] (NVIDIA Corporation)
        R3 Rasirda; C:\WINDOWS\System32\DRIVERS\rasirda.sys [19584 2001-08-17] (Microsoft Corporation)
        S3 SNPSTD3; C:\WINDOWS\System32\DRIVERS\snpstd3.sys [10148480 2006-06-27] (Sonix Co. Ltd.) [File not signed]
        R3 Srv; C:\WINDOWS\System32\DRIVERS\srv.sys [357888 2011-02-17] (Microsoft Corporation) [File not signed]
        R1 Tcpip; C:\WINDOWS\System32\DRIVERS\tcpip.sys [361600 2008-06-20] (Microsoft Corporation) [File not signed]
        U3 TrueSight; c:\windows\system32\drivers\TrueSight.sys [111872 2011-12-15] () [File not signed]
        S3 Trufos; C:\WINDOWS\System32\DRIVERS\Trufos.sys [428832 2016-04-28] (BitDefender S.R.L.)
        S3 usbaudio; C:\WINDOWS\System32\drivers\usbaudio.sys [60160 2013-07-17] (Microsoft Corporation) [File not signed]
        R3 usbccgp; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [32384 2013-08-09] (Microsoft Corporation) [File not signed]
        R3 usbehci; C:\WINDOWS\System32\DRIVERS\usbehci.sys [30336 2009-03-18] (Microsoft Corporation) [File not signed]
        S3 usbscan; C:\WINDOWS\System32\DRIVERS\usbscan.sys [14976 2013-07-03] (Microsoft Corporation) [File not signed]
        S3 vsdatant; C:\WINDOWS\system32\vsdatant.sys [394952 2007-11-14] (Zone Labs, LLC)
        S3 catchme; \??\C:\DOCUME~1\User1\LOCALS~1\Temp\catchme.sys [X]
        S4 IntelIde; no ImagePath
        S2 StarOpen; no ImagePath
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-12-05 08:35 - 2017-12-05 08:35 - 000013521 _____ C:\Documents and Settings\User2\Desktop\FRST.txt
        2017-12-05 08:34 - 2017-12-05 08:35 - 000000000 ____D C:\FRST
        2017-12-05 08:34 - 2017-12-05 08:34 - 001752064 _____ (Farbar) C:\Documents and Settings\User2\Desktop\FRST.exe
        2017-11-21 14:30 - 2017-11-21 14:30 - 000505729 _____ C:\Documents and Settings\User2\Desktop\87.pdf
        2017-11-14 15:45 - 2017-11-14 15:45 - 000420352 _____ C:\Documents and Settings\User2\Desktop\ценова 2017 -НОЕМВРИ.xls
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-12-05 08:35 - 2015-07-18 12:46 - 000000000 ____D C:\Documents and Settings\User1\Local Settings\temp
        2017-12-05 08:35 - 2011-05-02 12:28 - 000000000 ____D C:\Documents and Settings\User2\Local Settings\Temp
        2017-12-05 08:22 - 2014-01-31 12:39 - 000002051 _____ C:\Documents and Settings\All Users\Desktop\Ad-Aware Antivirus.lnk
        2017-12-05 08:20 - 2015-06-22 13:14 - 000000222 _____ C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Logon.job
        2017-12-05 08:20 - 2011-05-02 09:20 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
        2017-12-05 08:20 - 2001-08-23 11:00 - 000002206 _____ C:\WINDOWS\system32\wpa.dbl
        2017-12-04 14:39 - 2016-02-17 15:35 - 000032618 _____ C:\WINDOWS\SchedLgU.Txt
        2017-12-04 14:31 - 2011-05-25 09:57 - 000000000 ____D C:\Documents and Settings\User2\Application Data\uTorrent
        2017-12-04 14:30 - 2011-05-02 12:28 - 000000000 ____D C:\Documents and Settings\User2
        2017-12-04 14:26 - 2015-04-26 08:48 - 000000000 ____D C:\Documents and Settings\User2\Application Data\Skype
        2017-12-04 13:55 - 2013-03-08 14:11 - 000001078 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-412668190-1417001333-1003UA.job
        2017-12-04 12:55 - 2013-03-08 14:11 - 000001026 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-412668190-1417001333-1003Core.job
        2017-12-02 12:58 - 2011-05-02 11:46 - 000000000 ____D C:\Documents and Settings\User1\Application Data\uTorrent
        2017-12-02 12:58 - 2011-05-02 11:10 - 000000178 ___SH C:\Documents and Settings\User1\ntuser.ini
        2017-12-02 12:48 - 2017-01-16 12:16 - 000000892 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
        2017-12-02 12:48 - 2011-05-02 09:10 - 000000000 ____D C:\WINDOWS\system32\Macromed
        2017-12-02 12:47 - 2015-04-25 10:43 - 000000000 ____D C:\Documents and Settings\User1\Application Data\Skype
        2017-12-02 12:36 - 2016-02-20 12:25 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\MCShield
        2017-11-30 14:44 - 2011-05-02 11:10 - 000000000 ____D C:\Documents and Settings\User1
        2017-11-23 11:07 - 2013-12-09 12:51 - 000000000 ____D C:\Documents and Settings\User2\Desktop\образци PDF
        2017-11-16 12:59 - 2015-06-22 13:14 - 000000216 _____ C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Monthly.job
        ==================== Files in the root of some directories =======
        2011-05-02 12:33 - 2014-09-24 15:20 - 000014848 _____ () C:\Documents and Settings\User1\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
        2014-01-01 12:07 - 2014-01-01 12:07 - 000000036 _____ () C:\Documents and Settings\User1\Local Settings\Application Data\housecall.guid.cache
        2011-05-15 12:35 - 2011-05-15 12:35 - 000000056 _____ () C:\Documents and Settings\All Users\Application Data\ezsidmv.dat
        2017-09-02 11:57 - 2017-09-02 12:18 - 000000473 _____ () C:\Documents and Settings\All Users\Application Data\hpzinstall.log
        Some files in TEMP:
        ====================
        2017-09-02 12:17 - 2017-09-02 12:17 - 000764248 _____ (Igor Pavlov) C:\Documents and Settings\User1\Local Settings\temp\Package_en_ww.exe
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\WINDOWS\explorer.exe => File is digitally signed
        C:\WINDOWS\system32\winlogon.exe => File is digitally signed
        C:\WINDOWS\system32\svchost.exe => File is digitally signed
        C:\WINDOWS\system32\services.exe => MD5 is legit
        C:\WINDOWS\system32\User32.dll => File is digitally signed
        C:\WINDOWS\system32\userinit.exe => File is digitally signed
        C:\WINDOWS\system32\rpcss.dll => MD5 is legit
        C:\WINDOWS\system32\dnsapi.dll => MD5 is legit
        C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
        ==================== End of FRST.txt ============================
        Addition.txt
      • от izipop
        При подновяване на Malwarebytes използвах опцията за пълна защита в реално време...както и пробният период от 14 дни. Нямаше проблеми, всичко функционираше точно. След изтичане на пробния период, при поредно пускане на програмата ми даде съобщение за зловреден софтуер.Преди подновяването нямаше зараза.  Какво да правя за да ги премахна? Мисля, че проблемът идва от това, че исках да ползвам безплатната версия на Malwarebytes и това е активирано след това. Многократно слагах резултатите в карантина и отново излизат като съобщение за зловреден вирус .Мисля, че сгреших, когато предпоследния път изтрих "Карантината". Може би, е изтрило местонахождението, не знам! Търсих ... Моля, помогнете! 
      • от j_d
        Здравейте !
        Device Manager e празен,Network Connections също ,а има нет. Системата(Win Xp) се изключва доста бавно. Дали системата е омазана или се дължи на зловреден софт.
        Да Помоля за помощ !
        Благодаря предварително !
         
        Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 02-11-2017 02
        Ran by doni (administrator) on AMD (06-11-2017 19:57:32)
        Running from C:\
        Loaded Profiles: doni (Available Profiles: doni & Administrator)
        Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)
        Internet Explorer Version 8 (Default browser: IE)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
        (Murray Hurps Software Pty Ltd) C:\Program Files\Ad Muncher\AdMunch.exe
        (Copyright 2017.) C:\Program Files\Zemana AntiLogger\ZAM.exe
        (H.D.S. Hungary) C:\Program Files\Hard Disk Sentinel\HDSentinel.exe
        (Bitsum LLC) C:\Program Files\Process Lasso\ProcessLasso.exe
        (Bitsum LLC) C:\Program Files\Process Lasso\ProcessGovernor.exe
        (FinalWire Ltd.) D:\Важни Програми\AIDA64 Extreme Edition\aida64extreme592\aida64.exe
        () C:\Program Files\Jotta\vss\jVSS.exe
        (HP) C:\WINDOWS\system32\HPZipm12.exe
        (Reason Software Company Inc.) C:\Program Files\Unchecky\bin\unchecky_svc.exe
        (Copyright 2017.) C:\Program Files\Zemana AntiLogger\ZAM.exe
        (Reason Software Company Inc.) C:\Program Files\Unchecky\bin\unchecky_bg.exe
        (ESET) C:\Program Files\ESET\ESET Security\egui.exe
        (SpiderOak) C:\Program Files\SpiderOakONE\SpiderOakONE.exe
        (SpiderOak) C:\Program Files\SpiderOakONE\SpiderOakONE.exe
        () C:\Program Files\SpiderOakONE\windows_dir_watcher.exe
        (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
        (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
        (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
        (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
        (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
        ==================== Registry (Whitelisted) ===========================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [Ad Muncher] => C:\Program Files\Ad Muncher\AdMunch.exe [560760 2015-06-17] (Murray Hurps Software Pty Ltd)
        HKLM\...\Run: [ZAM] => C:\Program Files\Zemana AntiLogger\ZAM.exe [15775888 2017-08-09] (Copyright 2017.)
        HKLM\...\Run: [Hard Disk Sentinel] => C:\Program Files\Hard Disk Sentinel\HDSentinel.exe [5102680 2017-03-09] (H.D.S. Hungary)
        HKLM\...\Run: [DWPersistentQueuedReporting] => C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [437160 2007-02-26] (Microsoft Corporation)
        Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2009-07-29] (ATI Technologies Inc.)
        HKLM\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
        HKLM\...\Policies\Explorer: [NoResolveSearch] 1
        HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Run: [ProcessLassoManagementConsole] => C:\Program Files\Process Lasso\processlasso.exe [986112 2017-03-06] (Bitsum LLC)
        HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Run: [ProcessGovernor] => C:\Program Files\Process Lasso\processgovernor.exe [717824 2017-03-06] (Bitsum LLC)
        HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Run: [AIDA64 AutoStart] => D:\Важни Програми\AIDA64 Extreme Edition\aida64extreme592\aida64.exe [19602896 2017-06-19] (FinalWire Ltd.)
        HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
        HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
        HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Policies\Explorer: [NoSaveSettings] 0
        Lsa: [Notification Packages] 
        ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [115440 2013-05-08] (SuperAdBlocker.com)
        GroupPolicy: Restriction ? <==== ATTENTION
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Winsock: Catalog9 12 %windir%\system32\vsocklib.dll => No File 
        Winsock: Catalog9 13 %windir%\system32\vsocklib.dll => No File 
        Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
        Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0
        Tcpip\..\Interfaces\{C97B26C0-87E8-44A4-9564-5796CD042123}: [DhcpNameServer] 192.168.1.1 0.0.0.0
        Internet Explorer:
        ==================
        HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
        HKU\S-1-5-21-854245398-329068152-725345543-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        HKU\S-1-5-21-854245398-329068152-725345543-1003\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
        SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
        SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
        SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
        SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
        DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
        Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL [2001-01-22] (Microsoft Corporation)
        Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  No File
        Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL [2000-04-19] (Microsoft Corporation)
        Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  No File
        Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2017-04-05] (Skype Technologies)
        Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} -  No File
        FireFox:
        ========
        FF DefaultProfile: k5gfurjn.default
        FF ProfilePath: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default [2017-11-05]
        FF Homepage: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> google.bg
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.ftp", ""
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.ftp_port", 0
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.socks", ""
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.socks_port", 0
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.ssl", ""
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.ssl_port", 0
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> ftp", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> ftp_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> http", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> http_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> share_proxy_settings", true
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> socks", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> socks_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> ssl", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> ssl_port", 9050
        FF Extension: (Adguard AdBlocker) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\adguardadblocker@adguard.com.xpi [2017-02-17]
        FF Extension: (Bloody Vikings!) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\bloodyvikings@ffs.bplaced.net.xpi [2017-01-09]
        FF Extension: (MEGA) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\firefox@mega.co.nz.xpi [2017-03-30]
        FF Extension: (Google™ Translator) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\jid1-dgnIBwQga0SIBw@jetpack.xpi [2016-12-19]
        FF Extension: (S3.Google Translator) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\s3google@translator.xpi [2017-03-30]
        FF Extension: (Video DownloadHelper) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-01-02]
        FF ProfilePath: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default [2017-11-05]
        FF DefaultSearchEngine: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> Google
        FF SelectedSearchEngine: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> Google
        FF Homepage: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> www.google.bg
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.ftp", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.ftp_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.socks", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.socks_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.ssl", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.ssl_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> ftp", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> ftp_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> http", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> http_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> share_proxy_settings", true
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> socks", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> socks_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> ssl", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> ssl_port", 9050
        FF Extension: (Adguard AdBlocker (Legacy)) - C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default\Extensions\adguardadblockerlegacy@adguard.com.xpi [2017-10-03]
        FF Extension: (S3.Google Translator) - C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default\Extensions\s3google@translator.xpi [2017-09-25]
        FF Extension: (1-Click YouTube Video Downloader) - C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2017-01-02]
        FF ProfilePath: C:\Documents and Settings\doni\Application Data\K-Meleon\puoi2cit.default [2017-11-05]
        FF user.js: detected! => C:\Documents and Settings\doni\Application Data\K-Meleon\puoi2cit.default\user.js [2006-04-06]
        FF Homepage: C:\Documents and Settings\doni\Application Data\K-Meleon\puoi2cit.default -> www.google.bg
        FF Extension: (NewsFox) - C:\Program Files\K-Meleon\browser\extensions\{899DF1F8-2F43-4394-8315-37F6744E6319}.xpi [2015-03-12] [not signed]
        FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
        FF Extension: (Microsoft .NET Framework Assistant) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2017-10-29] [not signed]
        FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_27_0_0_183.dll [2017-10-25] ()
        FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
        FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
        FF Plugin: @microsoft.com/OfficeLive,version=1.3 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2008-11-13] (Microsoft Corp.)
        FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
        FF Plugin: @real.com/nppl3260;version=6.0.12.69 -> C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll [2008-09-10] (RealNetworks, Inc.)
        FF Plugin: @real.com/nprpjplug;version=6.0.12.69 -> C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll [2008-09-10] (RealNetworks, Inc.)
        FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
        FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
        FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
        FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
        FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
        FF Plugin HKU\.DEFAULT: @tools.google.com/Google Update;version=3 -> C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Google\Update\1.3.22.3\npGoogleUpdate3.dll [2014-02-08] (Google Inc.)
        FF Plugin HKU\.DEFAULT: @tools.google.com/Google Update;version=9 -> C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Google\Update\1.3.22.3\npGoogleUpdate3.dll [2014-02-08] (Google Inc.)
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        S3 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [143776 2017-03-07] (SUPERAntiSpyware.com)
        S3 Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2010-04-15] (Adobe Systems) [File not signed]
        S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [272384 2017-10-25] (Adobe Systems Incorporated) [File not signed]
        R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2069936 2017-06-13] (ESET)
        S3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2007-03-11] (Hewlett-Packard Co.) [File not signed]
        R2 Jotta VSS Service; C:\Program Files\Jotta\vss\jVSS.exe [102520 2017-10-03] ()
        S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4563920 2017-11-01] (Malwarebytes)
        S4 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe [270336 2001-02-23] (Microsoft Corporation) [File not signed]
        R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [69632 2004-09-29] (HP) [File not signed]
        S4 SkypeUpdate; C:\Program Files\Skype\Updater\Updater.exe [317400 2017-04-05] (Skype Technologies) [File not signed]
        R2 Unchecky; C:\Program Files\Unchecky\bin\unchecky_svc.exe [294168 2017-10-03] (Reason Software Company Inc.)
        R2 WudfSvc; C:\WINDOWS\System32\WUDFSvc.dll [64512 2016-03-09] (Microsoft Corporation) [File not signed]
        R2 ZAMSvc; C:\Program Files\Zemana AntiLogger\ZAM.exe [15775888 2017-08-09] (Copyright 2017.)
        S4 Zoolz 2 Service; C:\Program Files\Genie9\Zoolz2\ZoolzService.exe [475792 2017-07-30] (Genie9)
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R1 AFS2K; C:\WINDOWS\system32\Drivers\AFS2K.sys [82380 2011-12-28] (Oak Technology Inc.) [File not signed]
        R3 AIDA64Driver; D:\Важни Програми\AIDA64 Extreme Edition\aida64extreme592\kerneld.x32 [44656 2017-06-19] ()
        S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
        S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
        R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [113512 2017-06-22] (ESET)
        R1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [139384 2017-03-09] (ESET)
        R1 ElbyCDIO; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG)
        R1 epfwtdir; C:\WINDOWS\System32\DRIVERS\epfwtdir.sys [61504 2017-03-09] (ESET)
        S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [51120 2005-03-08] (HP)
        S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2005-03-08] (HP)
        S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21744 2005-03-08] (HP)
        R2 inpout32; C:\WINDOWS\System32\Drivers\inpout32.sys [11936 2017-10-25] (Highresolution Enterprises [www.highrez.co.uk])
        R3 keycrypt; C:\WINDOWS\System32\DRIVERS\KeyCrypt32.sys [144416 2017-03-22] (Zemana Ltd.)
        S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
        S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
        R3 pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [47360 2010-04-06] (VSO Software) [File not signed]
        R3 RTHDMIAzAudService; C:\WINDOWS\System32\drivers\RtKHDMI.sys [3734976 2009-06-25] (Realtek Semiconductor Corp.)
        R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
        R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
        R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [691696 2010-03-17] () [File not signed]
        R3 VComm; C:\WINDOWS\System32\DRIVERS\VComm.sys [34448 2011-05-28] (IVT Corporation.)
        R2 WiseFs; C:\WINDOWS\WiseFs32.sys [57936 2017-07-28] (WiseCleaner.com)
        R1 ZAM; C:\WINDOWS\System32\drivers\zam32.sys [181496 2017-07-31] (Zemana Ltd.)
        R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard32.sys [181496 2017-07-31] (Zemana Ltd.)
        U3 aixna50v; C:\WINDOWS\system32\Drivers\aixna50v.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero byte File/Folder)
        S3 BlueletAudio; system32\DRIVERS\blueletaudio.sys [X]
        S3 BlueletSCOAudio; system32\DRIVERS\BlueletSCOAudio.sys [X]
        S3 BT; system32\DRIVERS\btnetdrv.sys [X]
        S3 Btcsrusb; System32\Drivers\btcusb.sys [X]
        S3 BTHidEnum; system32\DRIVERS\vbtenum.sys [X]
        S0 BTHidMgr; System32\Drivers\BTHidMgr.sys [X]
        S1 epp32; no ImagePath
        S3 ESETCleanersDriver; no ImagePath
        S3 gdrv; no ImagePath
        S4 IntelIde; no ImagePath
        S3 JL2005C; System32\Drivers\jl2005c.sys [X]
        U5 P3; C:\Windows\System32\Drivers\P3.sys [42752 2008-04-14] (Microsoft Corporation)
        U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
        U5 Sdbus; C:\Windows\System32\Drivers\Sdbus.sys [79232 2008-04-14] (Microsoft Corporation)
        U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]
        S3 VcommMgr; System32\Drivers\VcommMgr.sys [X]
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        NETSVC: SSHNAS -> no filepath.
        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-11-06 19:57 - 2017-11-06 19:57 - 000021251 _____ C:\FRST.txt
        2017-11-06 19:57 - 2017-11-06 19:57 - 000000000 ____D C:\FRST
        2017-11-06 19:51 - 2017-11-06 19:51 - 001799680 _____ (Farbar) C:\FRST.exe
        2017-11-05 09:23 - 2017-11-05 09:23 - 000000000 ____D C:\Documents and Settings\doni\Application Data\Inv Softworks
        2017-11-03 22:31 - 2017-11-03 22:31 - 000221112 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
        2017-11-03 22:31 - 2017-11-03 22:31 - 000001715 _____ C:\Documents and Settings\All Users\Desktop\Malwarebytes.lnk
        2017-11-03 22:31 - 2017-11-03 22:31 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes
        2017-11-03 22:31 - 2017-11-03 22:31 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\MB3CoreBackup
        2017-11-03 22:31 - 2017-11-01 08:54 - 000059896 _____ C:\WINDOWS\system32\Drivers\mbae.sys
        2017-11-03 20:17 - 2017-11-03 21:10 - 000000000 ___RD C:\Documents and Settings\doni\My Documents\SpiderOak Hive
        2017-11-03 20:17 - 2017-11-03 20:17 - 000000495 _____ C:\Documents and Settings\doni\Desktop\SpiderOak Hive.lnk
        2017-11-03 20:14 - 2017-11-03 20:14 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\SpiderOak
        2017-11-03 20:11 - 2017-11-03 20:11 - 000000000 ____D C:\Program Files\SpiderOakONE
        2017-11-03 20:11 - 2017-11-03 20:11 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\SpiderOakONE
        2017-11-03 20:07 - 2017-11-03 22:24 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\SharewareOnSale Notifier
        2017-11-01 19:41 - 2017-11-01 21:52 - 000000000 ____D C:\Documents and Settings\doni\dwhelper
        2017-11-01 14:00 - 2017-11-01 14:00 - 000013824 ___SH C:\Documents and Settings\doni\My Documents\Thumbs.db
        2017-11-01 11:34 - 2017-11-01 12:21 - 000000664 _____ C:\WINDOWS\system32\d3d9caps.dat
        2017-11-01 10:50 - 2017-11-06 07:40 - 000032294 _____ C:\WINDOWS\SchedLgU.Txt
        2017-10-30 21:33 - 2008-04-14 05:42 - 000294912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dlimport.exe
        2017-10-30 21:33 - 2008-04-14 05:40 - 000294912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msaud32.acm
        2017-10-30 21:33 - 2008-04-14 05:40 - 000086016 ____C (Sipro Lab Telecom Inc.) C:\WINDOWS\system32\dllcache\sl_anet.acm
        2017-10-30 21:33 - 2008-04-14 05:39 - 000290816 ____C (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\system32\dllcache\l3codeca.acm
        2017-10-30 21:33 - 2008-04-13 22:58 - 000184959 ____C C:\WINDOWS\system32\dllcache\compact.wmz
        2017-10-30 21:33 - 2008-04-13 22:58 - 000066725 ____C C:\WINDOWS\system32\dllcache\revert.wmz
        2017-10-30 21:33 - 2007-06-26 11:30 - 000572557 ____C C:\WINDOWS\system32\dllcache\rtuner.wmv
        2017-10-30 21:33 - 2007-06-26 11:30 - 000457607 ____C C:\WINDOWS\system32\dllcache\mdlib.wmv
        2017-10-30 21:33 - 2007-06-26 11:30 - 000381425 ____C C:\WINDOWS\system32\dllcache\copycd.wmv
        2017-10-30 21:33 - 2007-06-26 11:30 - 000375519 ____C C:\WINDOWS\system32\dllcache\nuskin.wmv
        2017-10-30 21:33 - 2007-06-26 11:30 - 000354468 ____C C:\WINDOWS\system32\dllcache\wmpaud1.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000343204 ____C C:\WINDOWS\system32\dllcache\wmpaud7.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000343204 ____C C:\WINDOWS\system32\dllcache\wmpaud6.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000300969 ____C C:\WINDOWS\system32\dllcache\viz.wmv
        2017-10-30 21:33 - 2007-06-26 11:30 - 000172196 ____C C:\WINDOWS\system32\dllcache\wmpaud9.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000172196 ____C C:\WINDOWS\system32\dllcache\wmpaud8.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000172196 ____C C:\WINDOWS\system32\dllcache\wmpaud3.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000086196 ____C C:\WINDOWS\system32\dllcache\wmpaud5.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000086180 ____C C:\WINDOWS\system32\dllcache\wmpaud4.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000086180 ____C C:\WINDOWS\system32\dllcache\wmpaud2.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000022060 ____C C:\WINDOWS\system32\dllcache\npds.zip
        2017-10-30 21:33 - 2007-06-26 11:30 - 000010457 ____C C:\WINDOWS\system32\dllcache\wmptour.hta
        2017-10-30 21:33 - 2007-06-26 11:30 - 000009585 ____C C:\WINDOWS\system32\dllcache\controls.css
        2017-10-30 21:33 - 2007-06-26 11:30 - 000008298 ____C C:\WINDOWS\system32\dllcache\contents.htm
        2017-10-30 21:33 - 2007-06-26 11:30 - 000006878 ____C C:\WINDOWS\system32\dllcache\controls.js
        2017-10-30 21:33 - 2007-06-26 11:30 - 000005971 ____C C:\WINDOWS\system32\dllcache\events.js
        2017-10-30 21:33 - 2007-06-26 11:30 - 000003187 ____C C:\WINDOWS\system32\dllcache\tour.js
        2017-10-30 21:33 - 2007-06-26 11:30 - 000001771 ____C C:\WINDOWS\system32\dllcache\wmptour.css
        2017-10-30 21:33 - 2007-06-26 11:30 - 000001148 ____C C:\WINDOWS\system32\dllcache\snd.htm
        2017-10-30 21:33 - 2007-06-26 11:30 - 000000420 ____C C:\WINDOWS\system32\dllcache\wmploc.js
        2017-10-30 21:33 - 2007-06-26 11:29 - 000097117 ____C C:\WINDOWS\system32\dllcache\mplayer2.hlp
        2017-10-30 21:33 - 2007-06-26 11:29 - 000001885 ____C C:\WINDOWS\system32\dllcache\mplayer2.cnt
        2017-10-30 21:33 - 2007-06-26 11:28 - 000613334 ____C C:\WINDOWS\system32\dllcache\wmplayer.chm
        2017-10-30 21:33 - 2007-06-26 11:28 - 000067374 ____C C:\WINDOWS\system32\dllcache\wmplayer.adm
        2017-10-30 21:33 - 2007-06-26 11:26 - 000077307 ____C C:\WINDOWS\system32\dllcache\plyr_err.chm
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001477 ____C C:\WINDOWS\system32\dllcache\plylst6.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001477 ____C C:\WINDOWS\system32\dllcache\plylst5.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001474 ____C C:\WINDOWS\system32\dllcache\plylst3.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001451 ____C C:\WINDOWS\system32\dllcache\plylst12.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001448 ____C C:\WINDOWS\system32\dllcache\plylst4.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001250 ____C C:\WINDOWS\system32\dllcache\plylst1.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001049 ____C C:\WINDOWS\system32\dllcache\plylst2.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001046 ____C C:\WINDOWS\system32\dllcache\plylst7.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001036 ____C C:\WINDOWS\system32\dllcache\plylst8.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000789 ____C C:\WINDOWS\system32\dllcache\plylst11.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000787 ____C C:\WINDOWS\system32\dllcache\plylst10.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000784 ____C C:\WINDOWS\system32\dllcache\plylst9.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000783 ____C C:\WINDOWS\system32\dllcache\plylst13.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000775 ____C C:\WINDOWS\system32\dllcache\plylst14.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000733 ____C C:\WINDOWS\system32\dllcache\plylst15.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000403 ____C C:\WINDOWS\system32\dllcache\npdrmv2.zip
        2017-10-30 21:33 - 2007-04-02 23:21 - 000023195 ____C C:\WINDOWS\system32\dllcache\wmplay.chm
        2017-10-29 22:53 - 2017-10-29 22:53 - 000000000 ___HD C:\Program Files\WindowsUpdate
        2017-10-29 11:15 - 2008-08-21 14:00 - 000041600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\weitekp9.dll
        2017-10-29 11:15 - 2008-08-21 14:00 - 000031232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\weitekp9.sys
        2017-10-29 11:15 - 2008-08-21 14:00 - 000028288 ____C C:\WINDOWS\system32\dllcache\xjis.nls
        2017-10-29 11:15 - 2008-08-21 14:00 - 000009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wamps51.dll
        2017-10-29 11:15 - 2008-04-14 05:42 - 000116224 ____C (Xerox) C:\WINDOWS\system32\dllcache\xrxwiadr.dll
        2017-10-29 11:15 - 2008-04-14 05:42 - 000018944 ____C () C:\WINDOWS\system32\dllcache\xrxscnui.dll
        2017-10-29 11:15 - 2008-04-14 05:42 - 000008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wshirda.dll
        2017-10-29 11:15 - 2008-04-14 00:15 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wceusbsh.sys
        2017-10-29 11:15 - 2008-04-13 22:05 - 000154624 ____C (Lucent Technologies) C:\WINDOWS\system32\dllcache\wlluc48.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000033599 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\watv04nt.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000029311 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\watv01nt.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000023615 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wch7xxnt.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000019551 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\watv02nt.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000019455 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wvchntxx.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000012415 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wadv01nt.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000012127 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wadv02nt.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000012063 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wsiintxx.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000011775 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wadv05nt.sys
        2017-10-29 11:15 - 2001-08-17 22:37 - 000099865 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\xlog.exe
        2017-10-29 11:15 - 2001-08-17 22:37 - 000027648 ____C () C:\WINDOWS\system32\dllcache\xrxftplt.exe
        2017-10-29 11:15 - 2001-08-17 22:37 - 000004608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xrxflnch.exe
        2017-10-29 11:15 - 2001-08-17 22:36 - 000087040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wiafbdrv.dll
        2017-10-29 11:15 - 2001-08-17 22:36 - 000053760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wiamsmud.dll
        2017-10-29 11:15 - 2001-08-17 22:36 - 000023040 ____C (Xerox Corporation) C:\WINDOWS\system32\dllcache\xrxwbtmp.dll
        2017-10-29 11:15 - 2001-08-17 13:28 - 000771581 ____C (Rockwell) C:\WINDOWS\system32\dllcache\winacisa.sys
        2017-10-29 11:15 - 2001-08-17 13:28 - 000701386 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\wdhaalba.sys
        2017-10-29 11:15 - 2001-08-17 12:12 - 000034890 ____C (Raytheon Corp.) C:\WINDOWS\system32\dllcache\wlandrv2.sys
        2017-10-29 11:15 - 2001-08-17 12:11 - 000016970 ____C (US Robotics MCD (Megahertz)) C:\WINDOWS\system32\dllcache\xem336n5.sys
        2017-10-29 11:15 - 2001-08-17 12:10 - 000035871 ____C (Winbond Electronics Corp.) C:\WINDOWS\system32\dllcache\wbfirdma.sys
        2017-10-29 11:14 - 2008-08-21 14:00 - 000185344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\thawbrkr.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000143422 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\softkey.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000101376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srusbusd.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000073728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3ext.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000048256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w32.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000021896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdipx.sys
        2017-10-29 11:14 - 2008-08-21 14:00 - 000019464 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdspx.sys
        2017-10-29 11:14 - 2008-08-21 14:00 - 000016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\status.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tsprof.exe
        2017-10-29 11:14 - 2008-08-21 14:00 - 000013192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdasync.sys
        2017-10-29 11:14 - 2008-08-21 14:00 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpstup.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3svapi.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000004608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3ctrs51.dll
        2017-10-29 11:14 - 2008-04-14 05:42 - 000082944 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\tp4mon.exe
        2017-10-29 11:14 - 2008-04-14 00:15 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbser.sys
        2017-10-29 11:14 - 2008-04-14 00:15 - 000020608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbuhci.sys
        2017-10-29 11:14 - 2008-04-14 00:10 - 000149376 ____C (M-Systems) C:\WINDOWS\system32\dllcache\tffsport.sys
        2017-10-29 11:14 - 2008-04-14 00:10 - 000007552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sonyait.sys
        2017-10-29 11:14 - 2008-04-14 00:10 - 000005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\viaide.sys
        2017-10-29 11:14 - 2008-04-13 22:05 - 000032384 ____C (KLSI USA, Inc.) C:\WINDOWS\system32\dllcache\usb101et.sys
        2017-10-29 11:14 - 2001-08-17 22:36 - 000525568 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tridxp.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000216064 ____C (UMAX Data Systems Inc.) C:\WINDOWS\system32\dllcache\um34scan.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000211968 ____C (UMAX Data Systems Inc.) C:\WINDOWS\system32\dllcache\um54scan.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000155648 ____C (Stallion Technologies) C:\WINDOWS\system32\dllcache\stlnprop.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000114688 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\sonypi.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000106584 ____C (Perle Systems Ltd.) C:\WINDOWS\system32\dllcache\spdports.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000099328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srusd.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000094720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxud32.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000094293 ____C (Perle Systems Ltd. ) C:\WINDOWS\system32\dllcache\sxports.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000069632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxu12.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000053760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sw_wheel.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000053248 ____C (Stallion Technologies) C:\WINDOWS\system32\dllcache\stlncoin.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000050688 ____C (UMAX DATA SYSTEMS INC.) C:\WINDOWS\system32\dllcache\umaxscan.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000050176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxp60.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000047616 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxcam.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000041472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sw_effct.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000031744 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\tp4.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000028160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxu40.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxu22.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000024660 ____C (Perle Systems Ltd.) C:\WINDOWS\system32\dllcache\spxupchk.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_smtpctrs.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\swpidflt.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\swpdflt2.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_snprfdll.dll
        2017-10-29 11:14 - 2001-08-17 22:35 - 000042496 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\tp4res.dll
        2017-10-29 11:14 - 2001-08-17 14:56 - 000440576 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tridkb.dll
        2017-10-29 11:14 - 2001-08-17 14:56 - 000315520 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\trid3d.dll
        2017-10-29 11:14 - 2001-08-17 14:56 - 000172768 ____C (Number Nine Visual Technology) C:\WINDOWS\system32\dllcache\t2r4disp.dll
        2017-10-29 11:14 - 2001-08-17 14:56 - 000081408 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tgiul50.dll
        2017-10-29 11:14 - 2001-08-17 14:07 - 000032640 ____C (LSI Logic) C:\WINDOWS\system32\dllcache\symc8xx.sys
        2017-10-29 11:14 - 2001-08-17 14:07 - 000030688 ____C (LSI Logic) C:\WINDOWS\system32\dllcache\sym_u3.sys
        2017-10-29 11:14 - 2001-08-17 14:07 - 000028384 ____C (LSI Logic) C:\WINDOWS\system32\dllcache\sym_hi.sys
        2017-10-29 11:14 - 2001-08-17 14:07 - 000019072 ____C (Adaptec, Inc.) C:\WINDOWS\system32\dllcache\sparrow.sys
        2017-10-29 11:14 - 2001-08-17 14:07 - 000016256 ____C (Symbios Logic Inc.) C:\WINDOWS\system32\dllcache\symc810.sys
        2017-10-29 11:14 - 2001-08-17 14:02 - 000230912 ____C (Toshiba Corporation) C:\WINDOWS\system32\dllcache\tosdvd03.sys
        2017-10-29 11:14 - 2001-08-17 14:02 - 000003968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\swusbflt.sys
        2017-10-29 11:14 - 2001-08-17 14:01 - 000241664 ____C (Toshiba Corporation) C:\WINDOWS\system32\dllcache\tosdvd02.sys
        2017-10-29 11:14 - 2001-08-17 13:58 - 000022912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxpcls.sys
        2017-10-29 11:14 - 2001-08-17 13:56 - 000007552 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\sonypvu1.sys
        2017-10-29 11:14 - 2001-08-17 13:53 - 000009600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sonymc.sys
        2017-10-29 11:14 - 2001-08-17 13:53 - 000007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snyaitmc.sys
        2017-10-29 11:14 - 2001-08-17 13:52 - 000036736 ____C (Promise Technology, Inc.) C:\WINDOWS\system32\dllcache\ultra.sys
        2017-10-29 11:14 - 2001-08-17 13:52 - 000007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tandqic.sys
        2017-10-29 11:14 - 2001-08-17 13:51 - 000061824 ____C (Perle Systems Ltd.) C:\WINDOWS\system32\dllcache\speed.sys
        2017-10-29 11:14 - 2001-08-17 13:51 - 000016896 ____C (SCM Microsystems, Inc.) C:\WINDOWS\system32\dllcache\stcusb.sys
        2017-10-29 11:14 - 2001-08-17 13:51 - 000004992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\toside.sys
        2017-10-29 11:14 - 2001-08-17 13:50 - 000103936 ____C (Perle Systems Ltd. ) C:\WINDOWS\system32\dllcache\sx.sys
        2017-10-29 11:14 - 2001-08-17 13:49 - 000030464 ____C (Toshiba Corporation) C:\WINDOWS\system32\dllcache\tbatm155.sys
        2017-10-29 11:14 - 2001-08-17 13:49 - 000024576 ____C (VIA Technologies, Inc.) C:\WINDOWS\system32\dllcache\viairda.sys
        2017-10-29 11:14 - 2001-08-17 13:48 - 000011520 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\twotrack.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000794654 ____C (U.S. Robotics, Inc.) C:\WINDOWS\system32\dllcache\usr1801.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000794399 ____C (U.S. Robotics, Inc.) C:\WINDOWS\system32\dllcache\usr1806v.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000793598 ____C (U.S. Robotics, Inc.) C:\WINDOWS\system32\dllcache\usr1806.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000765884 ____C (U.S. Robotics, Inc.) C:\WINDOWS\system32\dllcache\usrti.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000687999 ____C (U.S. Robotics Corporation) C:\WINDOWS\system32\dllcache\usrwdxjs.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000604253 ____C (PCTEL, INC.) C:\WINDOWS\system32\dllcache\vmodem.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000397502 ____C (PCtel, Inc.) C:\WINDOWS\system32\dllcache\vpctcom.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000224802 ____C (U.S. Robotics Corporation) C:\WINDOWS\system32\dllcache\usr1807a.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000113762 ____C (U.S. Robotics Corporation) C:\WINDOWS\system32\dllcache\usrpda.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000064605 ____C (PCtel, Inc.) C:\WINDOWS\system32\dllcache\vvoice.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000007556 ____C (U.S. Robotics Corporation) C:\WINDOWS\system32\dllcache\usroslba.sys
        2017-10-29 11:14 - 2001-08-17 12:51 - 000222336 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\trid3dm.sys
        2017-10-29 11:14 - 2001-08-17 12:51 - 000166784 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tridxpm.sys
        2017-10-29 11:14 - 2001-08-17 12:51 - 000159232 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tridkbm.sys
        2017-10-29 11:14 - 2001-08-17 12:51 - 000138528 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tgiulnt5.sys
        2017-10-29 11:14 - 2001-08-17 12:51 - 000037040 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\sonypi.sys
        2017-10-29 11:14 - 2001-08-17 12:51 - 000020752 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\sonync.sys
        2017-10-29 11:14 - 2001-08-17 12:50 - 000036640 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\t2r4mini.sys
        2017-10-29 11:14 - 2001-08-17 12:18 - 000285760 ____C (Stallion Technologies) C:\WINDOWS\system32\dllcache\stlnata.sys
        2017-10-29 11:14 - 2001-08-17 12:14 - 000249402 ____C (Xircom) C:\WINDOWS\system32\dllcache\vinwm.sys
        2017-10-29 11:14 - 2001-08-17 12:14 - 000123995 ____C (Tiger Jet Network) C:\WINDOWS\system32\dllcache\tjisdn.sys
        2017-10-29 11:14 - 2001-08-17 12:13 - 000037961 ____C (TDK Corporation) C:\WINDOWS\system32\dllcache\tdk100b.sys
        2017-10-29 11:14 - 2001-08-17 12:13 - 000019528 ____C (Winbond Electronics Corporation) C:\WINDOWS\system32\dllcache\w840nd.sys
        2017-10-29 11:14 - 2001-08-17 12:13 - 000019016 ____C (Winbond Electronics Corporation) C:\WINDOWS\system32\dllcache\w926nd.sys
        2017-10-29 11:14 - 2001-08-17 12:13 - 000017129 ____C (TDK Corporation) C:\WINDOWS\system32\dllcache\tdkcd31.sys
        2017-10-29 11:14 - 2001-08-17 12:13 - 000016925 ____C (Winbond Electronics Corporation) C:\WINDOWS\system32\dllcache\w940nd.sys
        2017-10-29 11:14 - 2001-08-17 12:12 - 000034375 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\tpro4.sys
        2017-10-29 11:14 - 2001-08-17 12:11 - 000048736 ____C (3Com) C:\WINDOWS\system32\dllcache\srwlnd5.sys
        2017-10-29 11:14 - 2001-08-17 12:10 - 000028232 ____C (TOSHIBA Corporation) C:\WINDOWS\system32\dllcache\tos4mo.sys
        2017-10-29 11:13 - 2008-08-21 14:00 - 000038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm9aw.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smb6w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sma3w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm87w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm81w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000029184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8cw.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm93w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm92w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm90w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8dw.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8aw.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm89w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm59w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\simptcp.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smierrsm.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smimsgif.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smierrsy.dll
        2017-10-29 11:13 - 2008-04-14 00:06 - 000016000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smbbatt.sys
        2017-10-29 11:13 - 2008-04-14 00:06 - 000006912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smbclass.sys
        2017-10-29 11:13 - 2008-04-13 22:05 - 000063547 ____C (Symbol Technologies) C:\WINDOWS\system32\dllcache\sla30nd5.sys
        2017-10-29 11:13 - 2008-04-13 22:05 - 000032768 ____C (SiS Corporation) C:\WINDOWS\system32\dllcache\sisnic.sys
        2017-10-29 11:13 - 2001-08-17 22:36 - 000386560 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\sgiul50.dll
        2017-10-29 11:13 - 2001-08-17 22:36 - 000238592 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sisgrv.dll
        2017-10-29 11:13 - 2001-08-17 22:36 - 000045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smb3w.dll
        2017-10-29 11:13 - 2001-08-17 22:36 - 000033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smb0w.dll
        2017-10-29 11:13 - 2001-08-17 22:36 - 000028672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sma0w.dll
        2017-10-29 11:13 - 2001-08-17 22:36 - 000028160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm91w.dll
        2017-10-29 11:13 - 2001-08-17 22:36 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_seos.dll
        2017-10-29 11:13 - 2001-08-17 14:56 - 000252032 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sis300iv.dll
        2017-10-29 11:13 - 2001-08-17 14:56 - 000157696 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sisv256.dll
        2017-10-29 11:13 - 2001-08-17 14:56 - 000150144 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sis6306v.dll
        2017-10-29 11:13 - 2001-08-17 14:56 - 000147200 ____C (Silicon Motion Inc.) C:\WINDOWS\system32\dllcache\smidispb.dll
        2017-10-29 11:13 - 2001-08-17 13:57 - 000006784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smbhc.sys
        2017-10-29 11:13 - 2001-08-17 13:53 - 000006784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\serscan.sys
        2017-10-29 11:13 - 2001-08-17 13:48 - 000017664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sermouse.sys
        2017-10-29 11:13 - 2001-08-17 12:51 - 000098080 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\sgiulnt5.sys
        2017-10-29 11:13 - 2001-08-17 12:51 - 000058368 ____C (Silicon Motion Inc.) C:\WINDOWS\system32\dllcache\smiminib.sys
        2017-10-29 11:13 - 2001-08-17 12:50 - 000104064 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sisgrp.sys
        2017-10-29 11:13 - 2001-08-17 12:50 - 000101760 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sis300ip.sys
        2017-10-29 11:13 - 2001-08-17 12:50 - 000068608 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sis6306p.sys
        2017-10-29 11:13 - 2001-08-17 12:50 - 000050432 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sisv.sys
        2017-10-29 11:13 - 2001-08-17 12:19 - 000036480 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\sfmanm.sys
        2017-10-29 11:13 - 2001-08-17 12:12 - 000094698 ____C (SysKonnect GmbH.) C:\WINDOWS\system32\dllcache\sk98xwin.sys
        2017-10-29 11:13 - 2001-08-17 12:12 - 000091294 ____C (SysKonnect, a business unit of Schneider & Koch & Co. Datensysteme GmbH.) C:\WINDOWS\system32\dllcache\skfpwin.sys
        2017-10-29 11:13 - 2001-08-17 12:12 - 000025034 ____C (SMC Networks, Inc.) C:\WINDOWS\system32\dllcache\smcpwr2n.sys
        2017-10-29 11:13 - 2001-08-17 12:12 - 000024576 ____C (SMC Networks, Inc.) C:\WINDOWS\system32\dllcache\smc8000n.sys
        2017-10-29 11:13 - 2001-08-17 12:10 - 000035913 ____C (SMC) C:\WINDOWS\system32\dllcache\smcirda.sys
        2017-10-29 11:13 - 2001-07-21 14:29 - 000161568 ____C (Micro Systemation) C:\WINDOWS\system32\dllcache\sgsmusb.sys
        2017-10-29 11:13 - 2001-07-21 14:29 - 000018400 ____C (Micro Systemation) C:\WINDOWS\system32\dllcache\sgsmld.sys
        2017-10-29 11:12 - 2008-04-14 00:15 - 000011520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scsiscan.sys
        2017-10-29 11:12 - 2001-08-17 22:36 - 000057856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_scripto.dll
        2017-10-29 11:12 - 2001-08-17 13:53 - 000006912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\seaddsmc.sys
        2017-10-29 11:12 - 2001-08-17 13:52 - 000011648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scsiprnt.sys
        2017-10-29 11:11 - 2008-08-21 14:00 - 000131584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxviceo.dll
        2017-10-29 11:11 - 2008-08-21 14:00 - 000083748 ____C C:\WINDOWS\system32\dllcache\prcp.nls
        2017-10-29 11:11 - 2008-08-21 14:00 - 000083748 ____C C:\WINDOWS\system32\dllcache\prc.nls
        2017-10-29 11:11 - 2008-08-21 14:00 - 000079872 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia330.dll
        2017-10-29 11:11 - 2008-08-21 14:00 - 000079872 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia001.dll
        2017-10-29 11:11 - 2008-08-21 14:00 - 000020992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\permchk.dll
        2017-10-29 11:11 - 2008-08-21 14:00 - 000016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\quser.exe
        2017-10-29 11:11 - 2008-08-21 14:00 - 000014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\register.exe
        2017-10-29 11:11 - 2008-08-21 14:00 - 000011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxmcro.dll
        2017-10-29 11:11 - 2008-08-21 14:00 - 000009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\query.exe
        2017-10-29 11:11 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxgl.dll
        2017-10-29 11:11 - 2008-04-14 05:42 - 000363520 ____C C:\WINDOWS\system32\dllcache\psisdecd.dll
        2017-10-29 11:11 - 2008-04-14 05:42 - 000159232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ptpusd.dll
        2017-10-29 11:11 - 2008-04-14 05:42 - 000033280 ____C C:\WINDOWS\system32\dllcache\psisrndr.ax
        2017-10-29 11:11 - 2008-04-14 05:42 - 000029696 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rw450ext.dll
        2017-10-29 11:11 - 2008-04-14 05:42 - 000027648 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rw430ext.dll
        2017-10-29 11:11 - 2008-04-14 05:40 - 000259328 ____C (Microsoft Corp., 3Dlabs Inc. Ltd.) C:\WINDOWS\system32\dllcache\perm3dd.dll
        2017-10-29 11:11 - 2008-04-14 05:40 - 000211584 ____C (Microsoft Corp., 3Dlabs Inc. Ltd.) C:\WINDOWS\system32\dllcache\perm2dll.dll
        2017-10-29 11:11 - 2008-04-14 00:14 - 000028032 ____C (Microsoft Corp., 3Dlabs Inc. Ltd.) C:\WINDOWS\system32\dllcache\perm3.sys
        2017-10-29 11:11 - 2008-04-14 00:14 - 000027904 ____C (Microsoft Corp., 3Dlabs Inc. Ltd.) C:\WINDOWS\system32\dllcache\perm2.sys
        2017-10-29 11:11 - 2008-04-14 00:11 - 000017664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ppa3.sys
        2017-10-29 11:11 - 2008-04-14 00:10 - 000079104 ____C (Comtrol Corporation) C:\WINDOWS\system32\dllcache\rocket.sys
        2017-10-29 11:11 - 2008-04-14 00:10 - 000043904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sbp2port.sys
        2017-10-29 11:11 - 2008-04-14 00:10 - 000008832 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\powerfil.sys
        2017-10-29 11:11 - 2008-04-14 00:10 - 000006016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qic157.sys
        2017-10-29 11:11 - 2008-04-13 22:05 - 000020992 ____C (Realtek Semiconductor Corporation) C:\WINDOWS\system32\dllcache\rtl8139.sys
        2017-10-29 11:11 - 2008-04-13 21:42 - 000169984 ____C (Cisco Systems) C:\WINDOWS\system32\dllcache\pcx500.sys
        2017-10-29 11:11 - 2001-08-17 22:37 - 000105984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\phdsext.ax
        2017-10-29 11:11 - 2001-08-17 22:36 - 000495616 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\sblfx.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000121344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\phvfwext.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000086097 ____C (Xircom) C:\WINDOWS\system32\dllcache\reslog32.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000086016 ____C (PCtel, Inc.) C:\WINDOWS\system32\dllcache\pctspk.exe
        2017-10-29 11:11 - 2001-08-17 22:36 - 000082432 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia450.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000079872 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia430.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000062496 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3mtrio.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000041472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qvusd.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000035328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\psisload.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000023040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_regtrace.exe
        2017-10-29 11:11 - 2001-08-17 22:36 - 000016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\philcam1.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000009216 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\rsmgrstr.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ptpusb.dll
        2017-10-29 11:11 - 2001-08-17 14:56 - 000245632 ____C (S3 Graphics, Inc.) C:\WINDOWS\system32\dllcache\s3savmx.dll
        2017-10-29 11:11 - 2001-08-17 14:56 - 000210496 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3mvirge.dll
        2017-10-29 11:11 - 2001-08-17 14:56 - 000198400 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3sav4.dll
        2017-10-29 11:11 - 2001-08-17 14:56 - 000182272 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3mt3d.dll
        2017-10-29 11:11 - 2001-08-17 14:56 - 000179264 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3sav3d.dll
        2017-10-29 11:11 - 2001-08-17 14:07 - 000027296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\perc2.sys
        2017-10-29 11:11 - 2001-08-17 14:07 - 000019840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\philtune.sys
        2017-10-29 11:11 - 2001-08-17 14:07 - 000005504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\perc2hib.sys
        2017-10-29 11:11 - 2001-08-17 14:04 - 000173696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\philcam2.sys
        2017-10-29 11:11 - 2001-08-17 14:04 - 000092416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\phildec.sys
        2017-10-29 11:11 - 2001-08-17 14:04 - 000075776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\philcam1.sys
        2017-10-29 11:11 - 2001-08-17 13:57 - 000065664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\s3legacy.sys
        2017-10-29 11:11 - 2001-08-17 13:53 - 000017792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ppa.sys
        2017-10-29 11:11 - 2001-08-17 13:53 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pnrmc.sys
        2017-10-29 11:11 - 2001-08-17 13:53 - 000003328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qv2kux.sys
        2017-10-29 11:11 - 2001-08-17 13:52 - 000049024 ____C (QLogic Corporation) C:\WINDOWS\system32\dllcache\ql1280.sys
        2017-10-29 11:11 - 2001-08-17 13:52 - 000045312 ____C (QLogic Corporation) C:\WINDOWS\system32\dllcache\ql12160.sys
        2017-10-29 11:11 - 2001-08-17 13:52 - 000040448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ql1240.sys
        2017-10-29 11:11 - 2001-08-17 13:52 - 000040320 ____C (QLogic Corporation) C:\WINDOWS\system32\dllcache\ql1080.sys
        2017-10-29 11:11 - 2001-08-17 13:52 - 000033152 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ql10wnt.sys
        2017-10-29 11:11 - 2001-08-17 13:51 - 000023936 ____C (OMNIKEY AG) C:\WINDOWS\system32\dllcache\sccmusbm.sys
        2017-10-29 11:11 - 2001-08-17 13:51 - 000023936 ____C (OMNIKEY AG) C:\WINDOWS\system32\dllcache\sccmn50m.sys
        2017-10-29 11:11 - 2001-08-17 13:51 - 000019584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rasirda.sys
        2017-10-29 11:11 - 2001-08-17 13:51 - 000017280 ____C (SCM Microsystems) C:\WINDOWS\system32\dllcache\scr111.sys
        2017-10-29 11:11 - 2001-08-17 13:51 - 000016640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scmstcs.sys
        2017-10-29 11:11 - 2001-08-17 13:51 - 000016128 ____C (SCM Microsystems, Inc.) C:\WINDOWS\system32\dllcache\pscr.sys
        2017-10-29 11:11 - 2001-08-17 13:28 - 000899146 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\r2mdkxga.sys
        2017-10-29 11:11 - 2001-08-17 13:28 - 000714762 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\r2mdmkxx.sys
        2017-10-29 11:11 - 2001-08-17 13:28 - 000130942 ____C (PCTEL, INC.) C:\WINDOWS\system32\dllcache\ptserlv.sys
        2017-10-29 11:11 - 2001-08-17 13:28 - 000128286 ____C (PCTEL, INC.) C:\WINDOWS\system32\dllcache\ptserli.sys
        2017-10-29 11:11 - 2001-08-17 13:28 - 000112574 ____C (PCTEL, INC.) C:\WINDOWS\system32\dllcache\ptserlp.sys
        2017-10-29 11:11 - 2001-08-17 12:50 - 000166720 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3m.sys
        2017-10-29 11:11 - 2001-08-17 12:50 - 000077824 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3sav4m.sys
        2017-10-29 11:11 - 2001-08-17 12:50 - 000075392 ____C (S3 Graphics, Inc.) C:\WINDOWS\system32\dllcache\s3savmxm.sys
        2017-10-29 11:11 - 2001-08-17 12:50 - 000061504 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3sav3dm.sys
        2017-10-29 11:11 - 2001-08-17 12:50 - 000041216 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3mt3d.sys
        2017-10-29 11:11 - 2001-08-17 12:19 - 000030720 ____C (Conexant Systems Inc.) C:\WINDOWS\system32\dllcache\rthwcls.sys
        2017-10-29 11:11 - 2001-08-17 12:19 - 000003840 ____C (Conexant Systems Inc.) C:\WINDOWS\system32\dllcache\rpfun.sys
        2017-10-29 11:11 - 2001-08-17 12:12 - 000037563 ____C (RadioLAN) C:\WINDOWS\system32\dllcache\rlnet5.sys
        2017-10-29 11:11 - 2001-08-17 12:12 - 000026153 ____C (Linksys) C:\WINDOWS\system32\dllcache\pcmlm56.sys
        2017-10-29 11:11 - 2001-08-17 12:12 - 000019017 ____C (Realtek Semiconductor Corporation) C:\WINDOWS\system32\dllcache\rtl8029.sys
        2017-10-29 11:11 - 2001-08-17 12:11 - 000035328 ____C (AMD Inc.) C:\WINDOWS\system32\dllcache\pcntpci5.sys
        2017-10-29 11:11 - 2001-08-17 12:11 - 000030282 ____C (AMD Inc.) C:\WINDOWS\system32\dllcache\pcntn5hl.sys
        2017-10-29 11:11 - 2001-08-17 12:11 - 000029769 ____C (AMD Inc.) C:\WINDOWS\system32\dllcache\pcntn5m.sys
        2017-10-29 11:10 - 2008-08-21 14:00 - 000053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nextlink.dll
        2017-10-29 11:10 - 2008-08-21 14:00 - 000036927 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs411.dll
        2017-10-29 11:10 - 2008-08-21 14:00 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pagecnt.dll
        2017-10-29 11:10 - 2008-08-21 14:00 - 000014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs412.dll
        2017-10-29 11:10 - 2008-04-14 00:24 - 000028672 ____C (National Semiconductor Corporation) C:\WINDOWS\system32\dllcache\nscirda.sys
        2017-10-29 11:10 - 2008-04-13 22:05 - 000132695 ____C (802.11b) C:\WINDOWS\system32\dllcache\netwlan5.sys
        2017-10-29 11:10 - 2008-04-13 22:05 - 000029502 ____C (Marconi Communications, Inc.) C:\WINDOWS\system32\dllcache\pca200e.sys
        2017-10-29 11:10 - 2001-08-17 22:36 - 000123776 ____C (NVIDIA Corporation) C:\WINDOWS\system32\dllcache\nv3.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000116736 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcodec2.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000060480 ____C (NeoMagic Corporation) C:\WINDOWS\system32\dllcache\neo20xx.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000059104 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i128v2.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000044544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovui2.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000041984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovui2rc.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000039424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcoms.exe
        2017-10-29 11:10 - 2001-08-17 22:36 - 000038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_ntfsdrv.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcomc.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000019968 ____C (Moxa Technologies Co., Ltd) C:\WINDOWS\system32\dllcache\mxicfg.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000007168 ____C (Moxa Technologies Co., Ltd) C:\WINDOWS\system32\dllcache\mxport.dll
        2017-10-29 11:10 - 2001-08-17 14:56 - 000091488 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i3disp.dll
        2017-10-29 11:10 - 2001-08-17 14:56 - 000035392 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i128.dll
        2017-10-29 11:10 - 2001-08-17 14:05 - 000351616 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcodek2.sys
        2017-10-29 11:10 - 2001-08-17 14:05 - 000048000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcam2.sys
        2017-10-29 11:10 - 2001-08-17 14:05 - 000031872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovce.sys
        2017-10-29 11:10 - 2001-08-17 14:05 - 000028032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcd.sys
        2017-10-29 11:10 - 2001-08-17 14:05 - 000025216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovsound2.sys
        2017-10-29 11:10 - 2001-08-17 14:05 - 000025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovca.sys
        2017-10-29 11:10 - 2001-08-17 13:53 - 000007552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nsmmc.sys
        2017-10-29 11:10 - 2001-08-17 13:50 - 000075520 ____C (Moxa Technologies Co., Ltd.) C:\WINDOWS\system32\dllcache\mxport.sys
        2017-10-29 11:10 - 2001-08-17 13:49 - 000019968 ____C (Macronix International Co., Ltd. ) C:\WINDOWS\system32\dllcache\mxnic.sys
        2017-10-29 11:10 - 2001-08-17 13:49 - 000015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ne2000.sys
        2017-10-29 11:10 - 2001-08-17 13:47 - 000009344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntapm.sys
        2017-10-29 11:10 - 2001-08-17 13:28 - 000054186 ____C (Ositech Communications, Inc.) C:\WINDOWS\system32\dllcache\otcsercb.sys
        2017-10-29 11:10 - 2001-08-17 12:50 - 000198144 ____C (NVIDIA Corporation) C:\WINDOWS\system32\dllcache\nv3.sys
        2017-10-29 11:10 - 2001-08-17 12:50 - 000039264 ____C (NeoMagic Corporation) C:\WINDOWS\system32\dllcache\neo20xx.sys
        2017-10-29 11:10 - 2001-08-17 12:50 - 000033088 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i128v2.sys
        2017-10-29 11:10 - 2001-08-17 12:50 - 000027936 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i3d.sys
        2017-10-29 11:10 - 2001-08-17 12:50 - 000013664 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i128.sys
        2017-10-29 11:10 - 2001-08-17 12:49 - 000051552 ____C (Kensington Technology Group) C:\WINDOWS\system32\dllcache\ntgrip.sys
        2017-10-29 11:10 - 2001-08-17 12:20 - 000126080 ____C (NeoMagic Corporation) C:\WINDOWS\system32\dllcache\nm5a2wdm.sys
        2017-10-29 11:10 - 2001-08-17 12:20 - 000087040 ____C (NeoMagic Corporation) C:\WINDOWS\system32\dllcache\nm6wdm.sys
        2017-10-29 11:10 - 2001-08-17 12:20 - 000054528 ____C (Yamaha Corp.) C:\WINDOWS\system32\dllcache\opl3sax.sys
        2017-10-29 11:10 - 2001-08-17 12:12 - 000043689 ____C (Ositech Communications, Inc.) C:\WINDOWS\system32\dllcache\otceth5.sys
        2017-10-29 11:10 - 2001-08-17 12:12 - 000032840 ____C (NETGEAR Corporation.) C:\WINDOWS\system32\dllcache\ngrpci.sys
        2017-10-29 11:10 - 2001-08-17 12:12 - 000030495 ____C (Linksys) C:\WINDOWS\system32\dllcache\pc100nds.sys
        2017-10-29 11:10 - 2001-08-17 12:12 - 000027209 ____C (Ositech Communications, Inc.) C:\WINDOWS\system32\dllcache\otc06x5.sys
        2017-10-29 11:10 - 2001-08-17 12:11 - 000128000 ____C (Compaq Computer Corporation) C:\WINDOWS\system32\dllcache\n100325.sys
        2017-10-29 11:10 - 2001-08-17 12:11 - 000065278 ____C (Compaq Computer Corporation) C:\WINDOWS\system32\dllcache\netflx3.sys
        2017-10-29 11:10 - 2001-08-17 12:11 - 000052255 ____C (Compaq Computer Corporation) C:\WINDOWS\system32\dllcache\n1000nt5.sys
        2017-10-29 11:09 - 2008-08-21 14:00 - 001875968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msir3jp.lex
        2017-10-29 11:09 - 2008-08-21 14:00 - 000229439 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\multibox.dll
        2017-10-29 11:09 - 2008-08-21 14:00 - 000098304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msir3jp.dll
        2017-10-29 11:09 - 2008-08-21 14:00 - 000092416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mga.sys
        2017-10-29 11:09 - 2008-08-21 14:00 - 000092032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mga.dll
        2017-10-29 11:09 - 2008-08-21 14:00 - 000034304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\migisol.exe
        2017-10-29 11:09 - 2008-08-21 14:00 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mdsync.dll
        2017-10-29 11:09 - 2008-08-21 14:00 - 000022016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\logscrpt.dll
        2017-10-29 11:09 - 2008-04-14 05:42 - 000056832 ____C C:\WINDOWS\system32\dllcache\msdvbnp.ax
        2017-10-29 11:09 - 2008-04-14 00:24 - 000022016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msircomm.sys
        2017-10-29 11:09 - 2008-04-14 00:16 - 000051200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdv.sys
        2017-10-29 11:09 - 2008-04-14 00:16 - 000049024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstape.sys
        2017-10-29 11:09 - 2008-04-14 00:16 - 000015232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mpe.sys
        2017-10-29 11:09 - 2008-04-14 00:11 - 000026112 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\memstpci.sys
        2017-10-29 11:09 - 2008-04-14 00:10 - 000034688 ____C (Toshiba Corp.) C:\WINDOWS\system32\dllcache\lbrtfdc.sys
        2017-10-29 11:09 - 2008-04-14 00:10 - 000007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ltotape.sys
        2017-10-29 11:09 - 2008-04-13 23:53 - 000606684 ____C (LT) C:\WINDOWS\system32\dllcache\ltmdmnt.sys
        2017-10-29 11:09 - 2008-04-13 23:53 - 000420992 ____C (LT) C:\WINDOWS\system32\dllcache\ltmdmntt.sys
        2017-10-29 11:09 - 2008-04-13 22:09 - 000020864 ____C (Logitech Inc.) C:\WINDOWS\system32\dllcache\lwadihid.sys
        2017-10-29 11:09 - 2001-08-17 22:36 - 000065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_mailmsg.dll
        2017-10-29 11:09 - 2001-08-17 22:36 - 000058880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\m3092dc.dll
        2017-10-29 11:09 - 2001-08-17 22:36 - 000058368 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\m3091dc.dll
        2017-10-29 11:09 - 2001-08-17 22:36 - 000047616 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\memgrp.dll
        2017-10-29 11:09 - 2001-08-17 14:56 - 000235648 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\mgaud.dll
        2017-10-29 11:09 - 2001-08-17 14:02 - 000035200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msgame.sys
        2017-10-29 11:09 - 2001-08-17 14:00 - 000002944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msmpu401.sys
        2017-10-29 11:09 - 2001-08-17 13:58 - 000008320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\memcard.sys
        2017-10-29 11:09 - 2001-08-17 13:57 - 000016128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\modemcsa.sys
        2017-10-29 11:09 - 2001-08-17 13:53 - 000004992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\loop.sys
        2017-10-29 11:09 - 2001-08-17 13:52 - 000017280 ____C (American Megatrends Inc.) C:\WINDOWS\system32\dllcache\mraid35x.sys
        2017-10-29 11:09 - 2001-08-17 13:52 - 000007424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mammoth.sys
        2017-10-29 11:09 - 2001-08-17 13:52 - 000006528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\miniqic.sys
        2017-10-29 11:09 - 2001-08-17 13:51 - 000015744 ____C (Litronic Industries) C:\WINDOWS\system32\dllcache\lit220p.sys
        2017-10-29 11:09 - 2001-08-17 13:50 - 000021888 ____C (Moxa Technologies Co., Ltd.) C:\WINDOWS\system32\dllcache\mxcard.sys
        2017-10-29 11:09 - 2001-08-17 13:48 - 000012416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msriffwv.sys
        2017-10-29 11:09 - 2001-08-17 13:48 - 000006016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfsio.sys
        2017-10-29 11:09 - 2001-08-17 13:28 - 000802683 ____C (Lucent Technologies) C:\WINDOWS\system32\dllcache\ltsm.sys
        2017-10-29 11:09 - 2001-08-17 13:28 - 000797500 ____C (LT) C:\WINDOWS\system32\dllcache\ltsmt.sys
        2017-10-29 11:09 - 2001-08-17 13:28 - 000727786 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\ltck000c.sys
        2017-10-29 11:09 - 2001-08-17 13:28 - 000576746 ____C (LT) C:\WINDOWS\system32\dllcache\ltmdmntl.sys
        2017-10-29 11:09 - 2001-08-17 12:50 - 000320384 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\mgaum.sys
        2017-10-29 11:09 - 2001-08-17 12:50 - 000103296 ____C (Matrox Graphics Inc) C:\WINDOWS\system32\dllcache\mtxvideo.sys
        2017-10-29 11:09 - 2001-08-17 12:49 - 000022848 ____C (Logitech Inc.) C:\WINDOWS\system32\dllcache\lwusbhid.sys
        2017-10-29 11:09 - 2001-08-17 12:19 - 000048768 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\maestro.sys
        2017-10-29 11:09 - 2001-08-17 12:12 - 000164586 ____C (Madge Networks Ltd) C:\WINDOWS\system32\dllcache\mdgndis5.sys
        2017-10-29 11:09 - 2001-08-17 12:12 - 000070730 ____C (Linksys Group, Inc.) C:\WINDOWS\system32\dllcache\lne100tx.sys
        2017-10-29 11:09 - 2001-08-17 12:12 - 000026442 ____C (SMSC) C:\WINDOWS\system32\dllcache\lanepic5.sys
        2017-10-29 11:09 - 2001-08-17 12:12 - 000020573 ____C (The Linksts Group ) C:\WINDOWS\system32\dllcache\lne100.sys
        2017-10-29 11:09 - 2001-08-17 12:12 - 000019016 ____C (Kingston Technology Company ) C:\WINDOWS\system32\dllcache\ktc111.sys
        2017-10-29 11:09 - 2001-08-17 12:11 - 000025065 ____C (D-Link) C:\WINDOWS\system32\dllcache\lmndis3.sys
        2017-10-29 11:08 - 2008-08-21 14:00 - 010129408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hwxkor.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 010096640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hwxcht.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 001158818 ____C C:\WINDOWS\system32\dllcache\korwbrkr.lex
        2017-10-29 11:08 - 2008-08-21 14:00 - 000471102 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imskdic.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000311359 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imepadsv.exe
        2017-10-29 11:08 - 2008-08-21 14:00 - 000134339 ____C C:\WINDOWS\system32\dllcache\imekr.lex
        2017-10-29 11:08 - 2008-08-21 14:00 - 000102463 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imepadsm.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000070656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\korwbrkr.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000060928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisclex4.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000059904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imkrinst.exe
        2017-10-29 11:08 - 2008-08-21 14:00 - 000057398 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdadm.exe
        2017-10-29 11:08 - 2008-08-21 14:00 - 000047066 ____C C:\WINDOWS\system32\dllcache\ksc.nls
        2017-10-29 11:08 - 2008-08-21 14:00 - 000045109 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpuex.exe
        2017-10-29 11:08 - 2008-08-21 14:00 - 000044032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekrmig.exe
        2017-10-29 11:08 - 2008-08-21 14:00 - 000019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iiscrmap.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jupiw.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnecat.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iwrps.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\infoctrs.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnecnt.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnec95.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\isapips.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iissync.exe
        2017-10-29 11:08 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth3.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth2.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinpun.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101a.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdvntc.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdusa.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdurdu.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth1.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth0.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsyr2.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsyr1.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdintel.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdintam.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinmar.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinkan.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinhin.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinguj.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdindev.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdheb.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdfa.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbddiv2.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbddiv1.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda3.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda2.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda1.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdgeo.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdarmw.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdarme.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000003584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iismui.dll
        2017-10-29 11:08 - 2008-04-14 05:42 - 000151552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irftp.exe
        2017-10-29 11:08 - 2008-04-14 05:41 - 000702845 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\i81xdnt5.dll
        2017-10-29 11:08 - 2008-04-14 05:41 - 000253952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kdsusd.dll
        2017-10-29 11:08 - 2008-04-14 05:41 - 000048640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kdsui.dll
        2017-10-29 11:08 - 2008-04-14 05:41 - 000028160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irmon.dll
        2017-10-29 11:08 - 2008-04-14 05:39 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd106.dll
        2017-10-29 11:08 - 2008-04-14 00:24 - 000088192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irda.sys
        2017-10-29 11:08 - 2008-04-14 00:11 - 000018560 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\i2omp.sys
        2017-10-29 11:08 - 2008-04-14 00:11 - 000008576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\i2omgmt.sys
        2017-10-29 11:08 - 2008-04-14 00:10 - 000005504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\intelide.sys
        2017-10-29 11:08 - 2008-04-13 22:04 - 000161020 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\i81xnt5.sys
        2017-10-29 11:08 - 2001-08-17 22:36 - 000372824 ____C (Xircom) C:\WINDOWS\system32\dllcache\iconf32.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000091136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam4com.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000090200 ____C (Perle Systems Ltd. ) C:\WINDOWS\system32\dllcache\io8ports.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000061952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam4ext.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000045056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam5com.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kousd.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam3ext.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam5ext.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdjpn.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdkor.dll
        2017-10-29 11:08 - 2001-08-17 22:34 - 000009216 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\ibmsgnet.dll
        2017-10-29 11:08 - 2001-08-17 14:56 - 000353184 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\i740dnt5.dll
        2017-10-29 11:08 - 2001-08-17 14:55 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101c.dll
        2017-10-29 11:08 - 2001-08-17 14:55 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101b.dll
        2017-10-29 11:08 - 2001-08-17 14:55 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd103.dll
        2017-10-29 11:08 - 2001-08-17 14:06 - 000154496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam4usb.sys
        2017-10-29 11:08 - 2001-08-17 14:06 - 000100992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam5usb.sys
        2017-10-29 11:08 - 2001-08-17 14:06 - 000038528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ibmvcap.sys
        2017-10-29 11:08 - 2001-08-17 14:05 - 000141056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam3.sys
        2017-10-29 11:08 - 2001-08-17 13:52 - 000016000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ini910u.sys
        2017-10-29 11:08 - 2001-08-17 13:51 - 000018688 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irsir.sys
        2017-10-29 11:08 - 2001-08-17 13:50 - 000038784 ____C (Perle Systems Ltd. ) C:\WINDOWS\system32\dllcache\io8.sys
        2017-10-29 11:08 - 2001-08-17 13:49 - 000026624 ____C (SigmaTel, Inc.) C:\WINDOWS\system32\dllcache\irstusb.sys
        2017-10-29 11:08 - 2001-08-17 13:49 - 000023552 ____C (MKNet Corporation) C:\WINDOWS\system32\dllcache\irmk7.sys
        2017-10-29 11:08 - 2001-08-17 13:47 - 000013056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inport.sys
        2017-10-29 11:08 - 2001-08-17 12:49 - 000058592 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\i740nt5.sys
        2017-10-29 11:08 - 2001-08-17 12:12 - 000109085 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\ibmtrp.sys
        2017-10-29 11:08 - 2001-08-17 12:12 - 000100936 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\ibmtok.sys
        2017-10-29 11:08 - 2001-08-17 12:12 - 000045632 ____C (Interphase (R) Corporation a Windows (R) 2000 DDK Driver Provider) C:\WINDOWS\system32\dllcache\ip5515.sys
        2017-10-29 11:08 - 2001-08-17 12:11 - 000028700 ____C (IBM Corp.) C:\WINDOWS\system32\dllcache\ibmexmp.sys
        2017-10-29 11:07 - 2008-08-21 14:00 - 000132608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsclntr.dll
        2017-10-29 11:07 - 2008-08-21 14:00 - 000111104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscfgwz.dll
        2017-10-29 11:07 - 2008-08-21 14:00 - 000108827 ____C C:\WINDOWS\system32\dllcache\hanja.lex
        2017-10-29 11:07 - 2008-08-21 14:00 - 000036864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hanjadic.dll
        2017-10-29 11:07 - 2008-08-21 14:00 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsroute.dll
        2017-10-29 11:07 - 2008-08-21 14:00 - 000014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\flattemp.exe
        2017-10-29 11:07 - 2008-08-21 14:00 - 000011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxssend.exe
        2017-10-29 11:07 - 2008-08-21 14:00 - 000007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpctrs2.dll
        2017-10-29 11:07 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftlx041e.dll
        2017-10-29 11:07 - 2008-04-14 00:15 - 000059136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\gckernel.sys
        2017-10-29 11:07 - 2008-04-14 00:15 - 000010624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\gameenum.sys
        2017-10-29 11:07 - 2008-04-14 00:10 - 000028288 ____C (Gemplus) C:\WINDOWS\system32\dllcache\grserial.sys
        2017-10-29 11:07 - 2008-04-14 00:06 - 000020352 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidbatt.sys
        2017-10-29 11:07 - 2008-04-13 22:05 - 000034173 ____C (Marconi Communications, Inc.) C:\WINDOWS\system32\dllcache\forehe.sys
        2017-10-29 11:07 - 2001-08-17 22:36 - 000324608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpojwia.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000165888 ____C () C:\WINDOWS\system32\dllcache\hpgt53.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000126976 ____C (Hewlett Packard) C:\WINDOWS\system32\dllcache\hpgt34tk.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000123392 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpgt21tk.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000119296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpdigwia.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000101376 ____C () C:\WINDOWS\system32\dllcache\hpgt34.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000093696 ____C () C:\WINDOWS\system32\dllcache\hpgt42.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000092160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fuusd.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000089088 ____C () C:\WINDOWS\system32\dllcache\hpgt33.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000083968 ____C () C:\WINDOWS\system32\dllcache\hpgt21.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000071680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fnfilter.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000068608 ____C (Avisioin) C:\WINDOWS\system32\dllcache\hpgt53tk.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000048128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpgt33tk.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_fcachdll.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000032768 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpgtmcro.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000031232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpgt42tk.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hr1w.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpsjmcro.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000009759 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_inst.dll
        2017-10-29 11:07 - 2001-08-17 14:56 - 001733120 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\g400d.dll
        2017-10-29 11:07 - 2001-08-17 14:56 - 000470144 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\g200d.dll
        2017-10-29 11:07 - 2001-08-17 14:07 - 000025952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpn.sys
        2017-10-29 11:07 - 2001-08-17 14:02 - 000008576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidgame.sys
        2017-10-29 11:07 - 2001-08-17 14:02 - 000002688 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidswvd.sys
        2017-10-29 11:07 - 2001-08-17 13:52 - 000005760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpt4qic.sys
        2017-10-29 11:07 - 2001-08-17 13:51 - 000082304 ____C (Gemplus) C:\WINDOWS\system32\dllcache\grclass.sys
        2017-10-29 11:07 - 2001-08-17 13:51 - 000017408 ____C (Gemplus) C:\WINDOWS\system32\dllcache\gpr400.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000907456 ____C (Conexant) C:\WINDOWS\system32\dllcache\hcf_msft.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000542879 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_msft.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000488383 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_v124.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000391199 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_k56k.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000289887 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_fall.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000199711 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_faxx.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000150239 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_amos.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000115807 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_fsks.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000073279 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_spkp.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000067167 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_bsc2.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000057471 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_samp.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000050751 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_tone.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000044863 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_soar.sys
        2017-10-29 11:07 - 2001-08-17 12:49 - 000322432 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\g400m.sys
        2017-10-29 11:07 - 2001-08-17 12:49 - 000320384 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\g200m.sys
        2017-10-29 11:07 - 2001-08-17 12:15 - 000455680 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fus2base.sys
        2017-10-29 11:07 - 2001-08-17 12:15 - 000455296 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fusbbase.sys
        2017-10-29 11:07 - 2001-08-17 12:15 - 000454912 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fxusbase.sys
        2017-10-29 11:07 - 2001-08-17 12:15 - 000442240 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fpnpbase.sys
        2017-10-29 11:07 - 2001-08-17 12:14 - 000444416 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fpcibase.sys
        2017-10-29 11:07 - 2001-08-17 12:14 - 000441728 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fpcmbase.sys
        2017-10-29 11:07 - 2001-08-17 12:13 - 000027165 ____C (VIA Technologies, Inc. ) C:\WINDOWS\system32\dllcache\fetnd5.sys
        2017-10-29 11:07 - 2001-08-17 12:10 - 000022090 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\fem556n5.sys
        2017-10-29 11:06 - 2008-08-21 14:00 - 000514587 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\edb500.dll
        2017-10-29 11:06 - 2008-08-21 14:00 - 000057856 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esuimgd.dll
        2017-10-29 11:06 - 2008-08-21 14:00 - 000045056 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esunid.dll
        2017-10-29 11:06 - 2008-08-21 14:00 - 000031744 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esucmd.dll
        2017-10-29 11:06 - 2008-08-21 14:00 - 000025856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\et4000.sys
        2017-10-29 11:06 - 2008-04-14 00:10 - 000008320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dlttape.sys
        2017-10-29 11:06 - 2008-04-14 00:09 - 000206976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dot4.sys
        2017-10-29 11:06 - 2008-04-13 22:06 - 000137088 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\essm2e.sys
        2017-10-29 11:06 - 2001-08-17 22:36 - 000614429 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiview.exe
        2017-10-29 11:06 - 2001-08-17 22:36 - 000419357 ____C (Digi International) C:\WINDOWS\system32\dllcache\dgconfig.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000256512 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\devcon32.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000236060 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\ditrace.exe
        2017-10-29 11:06 - 2001-08-17 22:36 - 000229462 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digifwrk.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000159828 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digihlc.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000131156 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digidbp.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000110621 ____C (Digi International, Inc.) C:\WINDOWS\system32\dllcache\digirlpt.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000110592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dc260usd.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000102484 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiinf.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000086016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dc240usd.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000080896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dc210usd.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000065622 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiasyn.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000061952 ____C (Equinox Systems Inc.) C:\WINDOWS\system32\dllcache\eqnloop.exe
        2017-10-29 11:06 - 2001-08-17 22:36 - 000053248 ____C (Equinox Systems Inc.) C:\WINDOWS\system32\dllcache\eqndiag.exe
        2017-10-29 11:06 - 2001-08-17 22:36 - 000051200 ____C (Equinox Systems Inc.) C:\WINDOWS\system32\dllcache\eqnlogr.exe
        2017-10-29 11:06 - 2001-08-17 22:36 - 000045568 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esunib.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000045568 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esuni.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000043008 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esucm.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000041046 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiisdn.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000038985 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\disrvsu.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000037962 ____C C:\WINDOWS\system32\dllcache\divaprop.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000034816 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esuimg.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000031305 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\disrvpp.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000029768 ____C C:\WINDOWS\system32\dllcache\divasu.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000025600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dc210_32.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000024064 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\devldr32.exe
        2017-10-29 11:06 - 2001-08-17 22:36 - 000006729 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\disrvci.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000006216 ____C C:\WINDOWS\system32\dllcache\divaci.dll
        2017-10-29 11:06 - 2001-08-17 14:07 - 000020192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dpti2o.sys
        2017-10-29 11:06 - 2001-08-17 13:53 - 000007296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\elmsmc.sys
        2017-10-29 11:06 - 2001-08-17 13:52 - 000007424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ddsmc.sys
        2017-10-29 11:06 - 2001-08-17 13:52 - 000007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\exabyte2.sys
        2017-10-29 11:06 - 2001-08-17 13:50 - 000144896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\epcfw2k.sys
        2017-10-29 11:06 - 2001-08-17 13:50 - 000114944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\epstw2k.sys
        2017-10-29 11:06 - 2001-08-17 13:47 - 000023808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dot4usb.sys
        2017-10-29 11:06 - 2001-08-17 13:47 - 000012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dot4prt.sys
        2017-10-29 11:06 - 2001-08-17 13:47 - 000008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dot4scan.sys
        2017-10-29 11:06 - 2001-08-17 13:28 - 000634134 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el656ct5.sys
        2017-10-29 11:06 - 2001-08-17 13:28 - 000595647 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\es56cvmp.sys
        2017-10-29 11:06 - 2001-08-17 13:28 - 000594238 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\es56hpi.sys
        2017-10-29 11:06 - 2001-08-17 13:28 - 000347550 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\es56tpi.sys
        2017-10-29 11:06 - 2001-08-17 13:28 - 000241206 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el656se5.sys
        2017-10-29 11:06 - 2001-08-17 12:20 - 000334208 ____C (Yamaha Corp.) C:\WINDOWS\system32\dllcache\ds1wdm.sys
        2017-10-29 11:06 - 2001-08-17 12:19 - 000283904 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\emu10k1m.sys
        2017-10-29 11:06 - 2001-08-17 12:19 - 000174464 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\es198x.sys
        2017-10-29 11:06 - 2001-08-17 12:19 - 000072192 ____C (ESS Technology Inc.) C:\WINDOWS\system32\dllcache\es1969.sys
        2017-10-29 11:06 - 2001-08-17 12:19 - 000063360 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\ess.sys
        2017-10-29 11:06 - 2001-08-17 12:19 - 000040704 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\es1371mp.sys
        2017-10-29 11:06 - 2001-08-17 12:19 - 000037120 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\es1370mp.sys
        2017-10-29 11:06 - 2001-08-17 12:17 - 000629952 ____C (Equinox Systems Inc.) C:\WINDOWS\system32\dllcache\eqn.sys
        2017-10-29 11:06 - 2001-08-17 12:17 - 000090525 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digifep5.sys
        2017-10-29 11:06 - 2001-08-17 12:17 - 000042432 ____C (Digi International, Inc.) C:\WINDOWS\system32\dllcache\digirlpt.sys
        2017-10-29 11:06 - 2001-08-17 12:17 - 000029531 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\dgapci.sys
        2017-10-29 11:06 - 2001-08-17 12:14 - 000952007 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\diwan.sys
        2017-10-29 11:06 - 2001-08-17 12:14 - 000021606 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiisdn.sys
        2017-10-29 11:06 - 2001-08-17 12:13 - 000103044 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digidxb.sys
        2017-10-29 11:06 - 2001-08-17 12:13 - 000091305 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\dimaint.sys
        2017-10-29 11:06 - 2001-08-17 12:13 - 000037735 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiasyn.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000117760 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\e100b325.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000063208 ____C (Intel Corporation.) C:\WINDOWS\system32\dllcache\dc21x4.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000050719 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\e1000nt5.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000028062 ____C (National Semiconductor Coproration) C:\WINDOWS\system32\dllcache\dp83820.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000024618 ____C (NETGEAR) C:\WINDOWS\system32\dllcache\fa410nd5.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000019594 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\e100isa4.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000018503 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\epro4.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000016998 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\ex10.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000016074 ____C (NETGEAR Corp.) C:\WINDOWS\system32\dllcache\fa312nd5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000455199 ____C (3Com Corporation.) C:\WINDOWS\system32\dllcache\el985n51.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000171520 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el99xn51.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000153631 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el90xnd5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000077386 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el656nd5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000070174 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el98xn5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000069194 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el656cd5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000066591 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el90xbc5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000029696 ____C (CNet Technology, Inc. ) C:\WINDOWS\system32\dllcache\dm9pci5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000026698 ____C (D-Link Corporation) C:\WINDOWS\system32\dllcache\dlh5xnd5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000024649 ____C (D-Link) C:\WINDOWS\system32\dllcache\dfe650d.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000024648 ____C (D-Link) C:\WINDOWS\system32\dllcache\dfe650.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000020928 ____C (Digital Networks, LLC) C:\WINDOWS\system32\dllcache\defpa.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000012362 ____C (FUJITSU LIMITED) C:\WINDOWS\system32\dllcache\f3ab18xi.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000011850 ____C (FUJITSU LIMITED) C:\WINDOWS\system32\dllcache\f3ab18xj.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000069692 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el575nd5.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000055999 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el556nd5.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000044103 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el515.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000026141 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el589nd5.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000025159 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\elnk3.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000024653 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el574nd4.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000019996 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\em556n4.sys
        2017-10-29 11:05 - 2008-08-21 14:00 - 001677824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chsbrkr.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000838144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chtbrkr.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000195618 ____C C:\WINDOWS\system32\dllcache\c_10002.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000189986 ____C C:\WINDOWS\system32\dllcache\c_1361.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000187938 ____C C:\WINDOWS\system32\dllcache\c_20005.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000186402 ____C C:\WINDOWS\system32\dllcache\c_20001.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000185378 ____C C:\WINDOWS\system32\dllcache\c_20003.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000180770 ____C C:\WINDOWS\system32\dllcache\c_20932.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000180258 ____C C:\WINDOWS\system32\dllcache\c_20004.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000180258 ____C C:\WINDOWS\system32\dllcache\c_20000.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000177698 ____C C:\WINDOWS\system32\dllcache\c_20949.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000177698 ____C C:\WINDOWS\system32\dllcache\c_10003.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000173602 ____C C:\WINDOWS\system32\dllcache\c_20936.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000173602 ____C C:\WINDOWS\system32\dllcache\c_20002.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000173602 ____C C:\WINDOWS\system32\dllcache\c_10008.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000162850 ____C C:\WINDOWS\system32\dllcache\c_10001.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000082172 ____C C:\WINDOWS\system32\dllcache\bopomofo.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066728 ____C C:\WINDOWS\system32\dllcache\big5.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066594 ____C C:\WINDOWS\system32\dllcache\c_864.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066594 ____C C:\WINDOWS\system32\dllcache\c_862.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066594 ____C C:\WINDOWS\system32\dllcache\c_858.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066594 ____C C:\WINDOWS\system32\dllcache\c_720.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_870.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_708.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_28596.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_21027.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_21025.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20924.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20880.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20871.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20838.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20833.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20424.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20423.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20420.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20297.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20290.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20285.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20284.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20280.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20278.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20277.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20273.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20269.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20108.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20107.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20106.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20105.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1149.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1148.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1147.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1146.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1145.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1144.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1143.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1142.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1141.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1140.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1047.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_10021.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_10005.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_10004.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000056320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\convlog.exe
        2017-10-29 11:05 - 2008-08-21 14:00 - 000054528 ____C (Philips Semiconductors GmbH) C:\WINDOWS\system32\dllcache\cap7146.sys
        2017-10-29 11:05 - 2008-08-21 14:00 - 000045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\browscap.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\controt.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\counters.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cprofile.exe
        2017-10-29 11:05 - 2008-08-21 14:00 - 000015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chgport.exe
        2017-10-29 11:05 - 2008-08-21 14:00 - 000014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chgusr.exe
        2017-10-29 11:05 - 2008-08-21 14:00 - 000013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chglogon.exe
        2017-10-29 11:05 - 2008-08-21 14:00 - 000010752 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_iscii.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\change.exe
        2017-10-29 11:05 - 2008-08-21 14:00 - 000009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\authfilt.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_is2022.dll
        2017-10-29 11:05 - 2008-04-14 05:42 - 000018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bdaplgin.ax
        2017-10-29 11:05 - 2008-04-14 05:41 - 000249856 ____C (Comtrol® Corporation) C:\WINDOWS\system32\dllcache\ctmasetp.dll
        2017-10-29 11:05 - 2008-04-14 05:41 - 000121856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camext30.dll
        2017-10-29 11:05 - 2008-04-14 00:16 - 000038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avc.sys
        2017-10-29 11:05 - 2008-04-14 00:16 - 000013696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avcstrm.sys
        2017-10-29 11:05 - 2008-04-14 00:16 - 000011776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bdasup.sys
        2017-10-29 11:05 - 2008-04-14 00:11 - 000008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\changer.sys
        2017-10-29 11:05 - 2008-04-14 00:06 - 000014208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\battc.sys
        2017-10-29 11:05 - 2008-04-14 00:06 - 000013952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cmbatt.sys
        2017-10-29 11:05 - 2008-04-14 00:06 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\compbatt.sys
        2017-10-29 11:05 - 2008-04-13 22:06 - 000048640 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwrwdm.sys
        2017-10-29 11:05 - 2001-08-17 22:37 - 000244224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camext20.ax
        2017-10-29 11:05 - 2001-08-17 22:37 - 000116736 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camext30.ax
        2017-10-29 11:05 - 2001-08-17 22:37 - 000073216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camexo20.ax
        2017-10-29 11:05 - 2001-08-17 22:36 - 000236032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camext20.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000216064 ____C (COMPAQ Inc.) C:\WINDOWS\system32\dllcache\cpscan.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000175104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\csamsp.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000144384 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\avmenum.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000102400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\binlsvc.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000087552 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\avmcoxp.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000081408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\brmfcwia.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000074240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camexo20.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000044032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cnusd.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000041472 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brmfusb.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000032256 ____C (Eicon Technology Corporation) C:\WINDOWS\system32\dllcache\diapi2NT.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000032256 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brmfrsmg.exe
        2017-10-29 11:05 - 2001-08-17 22:36 - 000029696 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brmflpt.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000028672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyycoins.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000027648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyzports.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000027648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyyports.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000027136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyzcoins.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000019456 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brbidiif.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000015360 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brmfbidi.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000012800 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brevif.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000009728 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brserif.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000009728 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brcoinst.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000005120 ____C (Brother Industries,Ltd.) C:\WINDOWS\system32\dllcache\brscnrsm.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000004096 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\ctwdm32.dll
        2017-10-29 11:05 - 2001-08-17 14:56 - 000342336 ____C (3Dfx Interactive, Inc.) C:\WINDOWS\system32\dllcache\banshee.dll
        2017-10-29 11:05 - 2001-08-17 14:56 - 000170880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cl546x.dll
        2017-10-29 11:05 - 2001-08-17 14:56 - 000111232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cl5465.dll
        2017-10-29 11:05 - 2001-08-17 14:56 - 000091264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cirrus.dll
        2017-10-29 11:05 - 2001-08-17 14:05 - 000314752 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camdro21.sys
        2017-10-29 11:05 - 2001-08-17 14:04 - 000223232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camdrv21.sys
        2017-10-29 11:05 - 2001-08-17 14:04 - 000171264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camdrv30.sys
        2017-10-29 11:05 - 2001-08-17 14:02 - 000272640 ____C (RAVISENT Technologies Inc.) C:\WINDOWS\system32\dllcache\cinemclc.sys
        2017-10-29 11:05 - 2001-08-17 14:01 - 000036096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avcaudio.sys
        2017-10-29 11:05 - 2001-08-17 13:57 - 000248064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cl546xm.sys
        2017-10-29 11:05 - 2001-08-17 13:57 - 000045696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cirrus.sys
        2017-10-29 11:05 - 2001-08-17 13:52 - 000179584 ____C (Mylex Corporation) C:\WINDOWS\system32\dllcache\dac2w2k.sys
        2017-10-29 11:05 - 2001-08-17 13:52 - 000014976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cpqarray.sys
        2017-10-29 11:05 - 2001-08-17 13:52 - 000014720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dac960nt.sys
        2017-10-29 11:05 - 2001-08-17 13:52 - 000007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cd20xrnt.sys
        2017-10-29 11:05 - 2001-08-17 13:51 - 000020736 ____C (OMNIKEY AG) C:\WINDOWS\system32\dllcache\cmbp0wdm.sys
        2017-10-29 11:05 - 2001-08-17 13:51 - 000013824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bulltlp3.sys
        2017-10-29 11:05 - 2001-08-17 13:51 - 000006656 ____C (CMD Technology, Inc.) C:\WINDOWS\system32\dllcache\cmdide.sys
        2017-10-29 11:05 - 2001-08-17 13:50 - 000050176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyyport.sys
        2017-10-29 11:05 - 2001-08-17 13:50 - 000049792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyzport.sys
        2017-10-29 11:05 - 2001-08-17 13:50 - 000017152 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyclad-z.sys
        2017-10-29 11:05 - 2001-08-17 13:50 - 000014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyclom-y.sys
        2017-10-29 11:05 - 2001-08-17 13:28 - 000871388 ____C (BCM) C:\WINDOWS\system32\dllcache\bcmdm.sys
        2017-10-29 11:05 - 2001-08-17 13:28 - 000714698 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cbmdmkxx.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000060416 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brserwdm.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000039552 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brparwdm.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000012160 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brfiltlo.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000011008 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brusbmdm.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000010368 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brusbscn.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000003968 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brfiltup.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000003168 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brparimg.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000002944 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brfilt.sys
        2017-10-29 11:05 - 2001-08-17 12:48 - 000036128 ____C (3Dfx Interactive, Inc.) C:\WINDOWS\system32\dllcache\banshee.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000111872 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwcspud.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000096256 ____C (Copyright (C) Creative Technology Ltd. 1994-2001) C:\WINDOWS\system32\dllcache\ctlsb16.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000093952 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwcwdm.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000072832 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwbwdm.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000042112 ____C (Conexant Systems Inc.) C:\WINDOWS\system32\dllcache\crtaud.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000036992 ____C (Aztech Systems Ltd) C:\WINDOWS\system32\dllcache\aztw2320.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000006912 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\ctlfacem.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000003712 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\ctljystk.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000003584 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwcosnt5.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000003072 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwbmidi.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000003072 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwbase.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000980034 ____C (Xircom) C:\WINDOWS\system32\dllcache\cicap.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000164923 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\diapi2.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000089952 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\b1cbase.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000049182 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cem56n5.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000046108 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cben5.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000037568 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\avmwan.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000027164 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\ce3n5.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000022044 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cem33n5.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000022044 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cem28n5.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000021533 ____C (Compaq Computer Corporation) C:\WINDOWS\system32\dllcache\cpqndis5.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000021530 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\ce2n5.sys
        2017-10-29 11:05 - 2001-08-17 12:12 - 000117760 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\d100ib5.sys
        2017-10-29 11:05 - 2001-08-17 12:12 - 000039680 ____C (Silicom Ltd.) C:\WINDOWS\system32\dllcache\cb325.sys
        2017-10-29 11:05 - 2001-08-17 12:12 - 000037916 ____C (Fast Ethernet Controller Provider) C:\WINDOWS\system32\dllcache\cb102.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000096640 ____C (Broadcom Corporation) C:\WINDOWS\system32\dllcache\b57xp32.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000066557 ____C (Broadcom Corporation) C:\WINDOWS\system32\dllcache\bcm42u.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000060970 ____C (Compaq Computer Corp.) C:\WINDOWS\system32\dllcache\cpqtrnd5.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000054271 ____C (Broadcom Corporation) C:\WINDOWS\system32\dllcache\bcm42xx5.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000039936 ____C (Conexant Systems, Inc.) C:\WINDOWS\system32\dllcache\cnxt1803.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000031529 ____C (BreezeCOM) C:\WINDOWS\system32\dllcache\brzwlan.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000026568 ____C (Broadcom Corporation) C:\WINDOWS\system32\dllcache\bcm4e5.sys
        2017-10-29 11:04 - 2008-08-21 14:00 - 000029184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\asptxn.dll
        2017-10-29 11:04 - 2008-08-21 14:00 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aspperf.dll
        2017-10-29 11:04 - 2001-08-17 22:36 - 000045056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_aqadmin.dll
        2017-10-29 11:04 - 2001-08-17 22:36 - 000037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\atievxx.exe
        2017-10-29 11:04 - 2001-08-17 14:56 - 000268160 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atidvai.dll
        2017-10-29 11:04 - 2001-08-17 14:56 - 000137216 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atidrae.dll
        2017-10-29 11:04 - 2001-08-17 14:56 - 000104832 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atiraged.dll
        2017-10-29 11:04 - 2001-08-17 14:55 - 000382592 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atidrab.dll
        2017-10-29 11:04 - 2001-08-17 14:55 - 000096128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ati.dll
        2017-10-29 11:04 - 2001-08-17 13:57 - 000077568 ____C (ATI Technologies, Inc.) C:\WINDOWS\system32\dllcache\ati.sys
        2017-10-29 11:04 - 2001-08-17 13:52 - 000026496 ____C (Advanced System Products, Inc.) C:\WINDOWS\system32\dllcache\asc.sys
        2017-10-29 11:04 - 2001-08-17 13:52 - 000022400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\asc3350p.sys
        2017-10-29 11:04 - 2001-08-17 13:51 - 000014848 ____C (Advanced System Products, Inc.) C:\WINDOWS\system32\dllcache\asc3550.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000075136 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atimpae.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000049920 ____C C:\WINDOWS\system32\dllcache\atirtcap.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000046464 ____C C:\WINDOWS\system32\dllcache\atibt829.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000026880 ____C C:\WINDOWS\system32\dllcache\atirtsnd.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000026624 ____C C:\WINDOWS\system32\dllcache\ativxbar.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000023552 ____C C:\WINDOWS\system32\dllcache\atixbar.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000019456 ____C C:\WINDOWS\system32\dllcache\ativttxx.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000017152 ____C C:\WINDOWS\system32\dllcache\atitvsnd.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000017152 ____C C:\WINDOWS\system32\dllcache\atitunep.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000010240 ____C C:\WINDOWS\system32\dllcache\atipcxxx.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000009472 ____C C:\WINDOWS\system32\dllcache\ativmdcd.sys
        2017-10-29 11:04 - 2001-08-17 12:48 - 000289664 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atimpab.sys
        2017-10-29 11:04 - 2001-08-17 12:48 - 000281600 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atimtai.sys
        2017-10-29 11:04 - 2001-08-17 12:48 - 000070528 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atiragem.sys
        2017-10-29 11:04 - 2001-08-17 12:12 - 000097354 ____C (Bay Networks, Inc.) C:\WINDOWS\system32\dllcache\aspndis3.sys
        2017-10-29 11:03 - 2008-04-13 22:05 - 000036224 ____C (ADMtek Incorporated.) C:\WINDOWS\system32\dllcache\an983.sys
        2017-10-29 11:03 - 2001-08-17 22:37 - 000024576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agcgauge.ax
        2017-10-29 11:03 - 2001-08-17 22:36 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_adsiisex.dll
        2017-10-29 11:03 - 2001-08-17 14:07 - 000056960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aic78xx.sys
        2017-10-29 11:03 - 2001-08-17 14:07 - 000055168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aic78u2.sys
        2017-10-29 11:03 - 2001-08-17 13:52 - 000012800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aha154x.sys
        2017-10-29 11:03 - 2001-08-17 13:52 - 000012032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\amsint.sys
        2017-10-29 11:03 - 2001-08-17 13:51 - 000005248 ____C (Acer Laboratories Inc.) C:\WINDOWS\system32\dllcache\aliide.sys
        2017-10-29 11:03 - 2001-08-17 13:49 - 000026624 ____C (Acer Laboratories Inc.) C:\WINDOWS\system32\dllcache\alifir.sys
        2017-10-29 11:03 - 2001-08-17 13:47 - 000006272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\apmbatt.sys
        2017-10-29 11:03 - 2001-08-17 12:11 - 000027678 ____C (Acer Laboratories Inc.) C:\WINDOWS\system32\dllcache\ali5261.sys
        2017-10-29 11:03 - 2001-08-17 12:11 - 000016969 ____C (AmbiCom, Inc.) C:\WINDOWS\system32\dllcache\amb8002.sys
        2017-10-29 11:02 - 2008-08-21 14:00 - 000169984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisui.dll
        2017-10-29 11:02 - 2008-08-21 14:00 - 000094720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\certmap.ocx
        2017-10-29 11:02 - 2008-08-21 14:00 - 000049664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\adrot.dll
        2017-10-29 11:02 - 2008-08-21 14:00 - 000019968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetsloc.dll
        2017-10-29 11:02 - 2008-08-21 14:00 - 000014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisreset.exe
        2017-10-29 11:02 - 2008-08-21 14:00 - 000007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetmgr.exe
        2017-10-29 11:02 - 2008-08-21 14:00 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wamregps.dll
        2017-10-29 11:02 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpsapi2.dll
        2017-10-29 11:02 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admxprox.dll
        2017-10-29 11:02 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisrstap.dll
        2017-10-29 11:02 - 2008-04-14 00:16 - 000048128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\61883.sys
        2017-10-29 11:02 - 2008-04-14 00:10 - 000012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\4mmdat.sys
        2017-10-29 11:02 - 2008-04-13 22:06 - 000231552 ____C (Acer Laboratories Inc.) C:\WINDOWS\system32\dllcache\ac97ali.sys
        2017-10-29 11:02 - 2008-04-13 22:06 - 000084480 ____C (VIA Technologies, Inc.) C:\WINDOWS\system32\dllcache\ac97via.sys
        2017-10-29 11:02 - 2008-04-13 22:06 - 000010880 ____C (Aureal, Inc.) C:\WINDOWS\system32\dllcache\admjoy.sys
        2017-10-29 11:02 - 2001-08-17 22:36 - 000462848 ____C (Aureal Inc.) C:\WINDOWS\system32\dllcache\a3dapi.dll
        2017-10-29 11:02 - 2001-08-17 22:36 - 000098304 ____C (Aureal Semiconductor) C:\WINDOWS\system32\dllcache\a3d.dll
        2017-10-29 11:02 - 2001-08-17 22:36 - 000061440 ____C (Color Flatbed Scanner) C:\WINDOWS\system32\dllcache\acerscad.dll
        2017-10-29 11:02 - 2001-08-17 14:56 - 000066048 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\s3legacy.dll
        2017-10-29 11:02 - 2001-08-17 14:55 - 000689216 ____C (3dfx Interactive, Inc.) C:\WINDOWS\system32\dllcache\3dfxvs.dll
        2017-10-29 11:02 - 2001-08-17 14:55 - 000038400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\8514a.dll
        2017-10-29 11:02 - 2001-08-17 14:07 - 000101888 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\adpu160m.sys
        2017-10-29 11:02 - 2001-08-17 14:06 - 000011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\1394vdbg.sys
        2017-10-29 11:02 - 2001-08-17 13:53 - 000007424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\adicvls.sys
        2017-10-29 11:02 - 2001-08-17 13:52 - 000023552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\abp480n5.sys
        2017-10-29 11:02 - 2001-08-17 13:28 - 000762780 ____C (3Com, Inc.) C:\WINDOWS\system32\dllcache\3cwmcru.sys
        2017-10-29 11:02 - 2001-08-17 12:48 - 000148352 ____C (3dfx Interactive, Inc.) C:\WINDOWS\system32\dllcache\3dfxvsm.sys
        2017-10-29 11:02 - 2001-08-17 12:20 - 000297728 ____C (Silicon Integrated Systems Corp.) C:\WINDOWS\system32\dllcache\ac97sis.sys
        2017-10-29 11:02 - 2001-08-17 12:20 - 000096256 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\ac97intc.sys
        2017-10-29 11:02 - 2001-08-17 12:19 - 000747392 ____C (Aureal, Inc.) C:\WINDOWS\system32\dllcache\adm8830.sys
        2017-10-29 11:02 - 2001-08-17 12:19 - 000584448 ____C (Aureal, Inc.) C:\WINDOWS\system32\dllcache\adm8810.sys
        2017-10-29 11:02 - 2001-08-17 12:19 - 000553984 ____C (Aureal, Inc.) C:\WINDOWS\system32\dllcache\adm8820.sys
        2017-10-29 11:02 - 2001-08-17 12:11 - 000046112 ____C (Adaptec, Inc ) C:\WINDOWS\system32\dllcache\adptsf50.sys
        2017-10-29 11:02 - 2001-08-17 12:11 - 000020160 ____C (ADMtek Incorporated) C:\WINDOWS\system32\dllcache\adm8511.sys
        2017-10-29 07:07 - 2017-10-29 07:07 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\PCHealth
        2017-10-28 22:44 - 2017-03-09 19:43 - 000081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado28.tlb
        2017-10-28 22:35 - 2017-09-09 05:10 - 011092480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieframe.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 002007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iertutil.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000743424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedvtool.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000630272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeeds.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000522240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsdbgui.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000247808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieproxy.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000233984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsprofilerui.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000055296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeedsbs.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000012800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpshims.dll
        2017-10-28 22:35 - 2013-07-17 02:58 - 000060160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbaudio.sys
        2017-10-28 22:24 - 2012-01-11 21:06 - 000003072 ____C C:\WINDOWS\system32\dllcache\iacenc.dll
        2017-10-28 22:24 - 2012-01-11 21:06 - 000003072 _____ C:\WINDOWS\system32\iacenc.dll
        2017-10-27 18:44 - 2017-10-27 18:44 - 000000337 _____ C:\Documents and Settings\doni\My Documents\po.bat
        2017-10-27 13:44 - 2017-11-06 19:57 - 000042686 _____ C:\WINDOWS\ZAM.krnl.trace
        2017-10-27 13:44 - 2017-11-06 19:57 - 000011343 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
        2017-10-27 13:41 - 2017-10-27 13:41 - 000001561 _____ C:\Documents and Settings\All Users\Start Menu\Programs\Internet Explorer.lnk
        2017-10-27 13:38 - 2017-10-27 14:43 - 000000000 ____D C:\Program Files\Windows Media Connect 2
        2017-10-27 13:38 - 2017-10-27 14:43 - 000000000 ____D C:\Program Files\MSXML 4.0
        2017-10-27 13:37 - 2017-10-27 13:37 - 000000000 ____D C:\WINDOWS\system32\DRM
        2017-10-27 13:35 - 2016-03-09 00:00 - 000026144 _____ (Microsoft Corporation) C:\WINDOWS\system32\spupdsvc.exe
        2017-10-27 13:28 - 2017-09-09 01:37 - 001905024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\win32k.sys
        2017-10-27 13:28 - 2017-09-09 01:37 - 001905024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
        2017-10-27 13:28 - 2017-09-07 21:12 - 000456832 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mrxsmb.sys
        2017-10-27 13:28 - 2017-09-07 21:12 - 000456832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
        2017-10-27 13:28 - 2017-09-07 21:10 - 000359552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srv.sys
        2017-10-27 13:28 - 2017-09-07 21:10 - 000359552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
        2017-10-27 13:28 - 2017-05-28 01:40 - 000091776 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiswan.sys
        2017-10-27 13:28 - 2017-05-28 01:40 - 000091776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndiswan.sys
        2017-10-27 13:28 - 2017-05-24 18:27 - 000993792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kernel32.dll
        2017-10-27 13:28 - 2017-05-24 18:27 - 000993792 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
        2017-10-27 13:28 - 2017-05-24 18:27 - 000720384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntdll.dll
        2017-10-27 13:28 - 2017-05-24 18:27 - 000720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
        2017-10-27 13:28 - 2017-05-24 18:27 - 000563200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oleaut32.dll
        2017-10-27 13:28 - 2017-05-24 18:27 - 000563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
        2017-10-27 13:28 - 2017-04-28 07:32 - 002150400 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
        2017-10-27 13:28 - 2017-04-28 07:32 - 002150400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
        2017-10-27 13:28 - 2017-04-28 06:18 - 002029056 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntkrnlpa.exe
        2017-10-27 13:28 - 2017-04-28 06:18 - 002029056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrpamp.exe
        2017-10-27 13:28 - 2016-11-09 16:11 - 004470272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msi.dll
        2017-10-27 13:28 - 2016-11-09 16:11 - 004470272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
        2017-10-27 13:28 - 2016-11-09 16:11 - 000332800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msihnd.dll
        2017-10-27 13:28 - 2016-11-09 16:11 - 000332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
        2017-10-27 13:28 - 2016-10-12 06:55 - 000730624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lsasrv.dll
        2017-10-27 13:28 - 2016-10-12 06:55 - 000730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
        2017-10-27 13:28 - 2016-10-12 06:55 - 000137216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msv1_0.dll
        2017-10-27 13:28 - 2016-10-12 06:55 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
        2017-10-27 13:28 - 2016-09-08 23:04 - 000106112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mup.sys
        2017-10-27 13:28 - 2016-09-08 23:04 - 000106112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mup.sys
        2017-10-27 13:28 - 2016-09-08 21:34 - 000180096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mrxdav.sys
        2017-10-27 13:28 - 2016-09-08 21:34 - 000180096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
        2017-10-27 13:28 - 2016-06-14 17:47 - 000346112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\localspl.dll
        2017-10-27 13:28 - 2016-06-14 17:47 - 000346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
        2017-10-27 13:28 - 2016-05-11 16:54 - 000093056 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
        2017-10-27 13:28 - 2016-05-11 16:54 - 000093056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ksecdd.sys
        2017-10-27 13:28 - 2015-12-17 20:58 - 000618496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\advapi32.dll
        2017-10-27 13:28 - 2015-12-17 20:58 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
        2017-10-27 13:28 - 2015-10-13 17:58 - 000361600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tcpip.sys
        2017-10-27 13:28 - 2015-10-13 17:58 - 000361600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
        2017-10-27 13:28 - 2015-10-13 17:28 - 000226880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tcpip6.sys
        2017-10-27 13:28 - 2015-10-13 17:28 - 000226880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip6.sys
        2017-10-27 13:28 - 2015-09-24 01:52 - 000154112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\schannel.dll
        2017-10-27 13:28 - 2015-09-24 01:52 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
        2017-10-27 13:28 - 2015-06-25 05:11 - 000096256 ____C (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
        2017-10-27 13:28 - 2015-06-25 05:11 - 000096256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msiexec.exe
        2017-10-27 13:28 - 2014-09-02 22:56 - 000143744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fastfat.sys
        2017-10-27 13:28 - 2014-09-02 22:56 - 000143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
        2017-10-27 13:28 - 2014-05-29 02:46 - 000138496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\afd.sys
        2017-10-27 13:28 - 2014-05-29 02:46 - 000138496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
        2017-10-27 13:28 - 2013-11-27 22:21 - 000040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndproxy.sys
        2017-10-27 13:28 - 2013-11-27 22:21 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
        2017-10-27 13:28 - 2013-11-13 04:59 - 000150528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imagehlp.dll
        2017-10-27 13:28 - 2013-11-13 04:59 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
        2017-10-27 13:28 - 2013-08-09 02:55 - 000144128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys
        2017-10-27 13:28 - 2013-08-09 02:55 - 000144128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
        2017-10-27 13:28 - 2013-08-09 02:55 - 000032384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbccgp.sys
        2017-10-27 13:28 - 2013-08-09 02:55 - 000032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
        2017-10-27 13:28 - 2013-08-09 02:55 - 000005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys
        2017-10-27 13:28 - 2013-08-09 02:55 - 000005376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
        2017-10-27 13:28 - 2013-07-17 02:58 - 000123008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys
        2017-10-27 13:28 - 2013-07-17 02:58 - 000123008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
        2017-10-27 13:28 - 2013-07-03 04:12 - 000025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidparse.sys
        2017-10-27 13:28 - 2013-07-03 04:12 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
        2017-10-27 13:28 - 2013-07-03 03:59 - 000014976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys
        2017-10-27 13:28 - 2013-07-03 03:59 - 000014976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbscan.sys
        2017-10-27 13:28 - 2013-02-12 02:32 - 000012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usb8023x.sys
        2017-10-27 13:28 - 2013-02-12 02:32 - 000012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usb8023.sys
        2017-10-27 13:28 - 2013-02-12 02:32 - 000012928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023x.sys
        2017-10-27 13:28 - 2013-02-12 02:32 - 000012928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
        2017-10-27 13:28 - 2012-07-04 16:05 - 000139784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpwd.sys
        2017-10-27 13:28 - 2012-07-04 16:05 - 000139784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpwd.sys
        2017-10-27 13:28 - 2011-10-28 07:31 - 000033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\csrsrv.dll
        2017-10-27 13:28 - 2011-10-28 07:31 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
        2017-10-27 13:28 - 2011-07-08 16:02 - 000010496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndistapi.sys
        2017-10-27 13:28 - 2011-07-08 16:02 - 000010496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
        2017-10-27 13:28 - 2010-08-27 07:57 - 000099840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srvsvc.dll
        2017-10-27 13:28 - 2010-08-27 07:57 - 000099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
        2017-10-27 13:28 - 2009-10-20 18:20 - 000265728 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
        2017-10-27 13:28 - 2009-10-20 18:20 - 000265728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\http.sys
        2017-10-27 13:28 - 2009-06-10 08:14 - 000132096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wkssvc.dll
        2017-10-27 13:28 - 2009-06-10 08:14 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
        2017-10-27 13:28 - 2009-03-18 13:02 - 000030336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys
        2017-10-27 13:28 - 2009-03-18 13:02 - 000030336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
        2017-10-27 13:28 - 2009-02-06 13:11 - 000110592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\services.exe
        2017-10-27 13:28 - 2009-02-06 13:11 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
        2017-10-27 13:28 - 2008-06-13 13:05 - 000272128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bthport.sys
        2017-10-27 13:28 - 2008-06-13 13:05 - 000272128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
        2017-10-27 13:28 - 2008-05-08 16:02 - 000203136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rmcast.sys
        2017-10-27 13:28 - 2008-05-08 16:02 - 000203136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
        2017-10-27 13:28 - 2008-04-14 05:45 - 000009424 ____C C:\WINDOWS\system32\dllcache\drvmain.sdb
        2017-10-27 13:28 - 2008-04-14 05:43 - 000021896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdtcp.sys
        2017-10-27 13:28 - 2008-04-14 05:43 - 000021896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdtcp.sys
        2017-10-27 13:28 - 2008-04-14 05:42 - 000409088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qmgr.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000300544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sysdm.cpl
        2017-10-27 13:28 - 2008-04-14 05:42 - 000300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysdm.cpl
        2017-10-27 13:28 - 2008-04-14 05:42 - 000275456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ulib.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ulib.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000237056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rasapi32.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000102400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\win32spl.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000091136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntprint.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\format.com
        2017-10-27 13:28 - 2008-04-14 05:42 - 000015360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msgrocm.dll
        2017-10-27 13:28 - 2008-04-14 05:41 - 000126976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dhcpcsvc.dll
        2017-10-27 13:28 - 2008-04-14 05:41 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
        2017-10-27 13:28 - 2008-04-14 04:42 - 000985088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\setupapi.dll
        2017-10-27 13:28 - 2008-04-14 04:42 - 000985088 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
        2017-10-27 13:28 - 2008-04-14 04:41 - 000081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieencode.dll
        2017-10-27 13:28 - 2008-04-14 04:41 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieencode.dll
        2017-10-27 13:28 - 2008-04-14 00:58 - 000175744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdbss.sys
        2017-10-27 13:28 - 2008-04-14 00:58 - 000175744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
        2017-10-27 13:28 - 2008-04-14 00:50 - 000182656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndis.sys
        2017-10-27 13:28 - 2008-04-14 00:50 - 000182656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
        2017-10-27 13:28 - 2008-04-14 00:49 - 000146048 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\portcls.sys
        2017-10-27 13:28 - 2008-04-14 00:49 - 000146048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
        2017-10-27 13:28 - 2008-04-14 00:45 - 000574976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntfs.sys
        2017-10-27 13:28 - 2008-04-14 00:45 - 000574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
        2017-10-27 13:28 - 2008-04-14 00:27 - 000041472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\raspppoe.sys
        2017-10-27 13:28 - 2008-04-14 00:27 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\raspppoe.sys
        2017-10-27 13:28 - 2008-04-14 00:26 - 000069120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\psched.sys
        2017-10-27 13:28 - 2008-04-14 00:26 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\psched.sys
        2017-10-27 13:28 - 2008-04-14 00:26 - 000030592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rndismp.sys
        2017-10-27 13:28 - 2008-04-14 00:26 - 000030592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rndismp.sys
        2017-10-27 13:28 - 2008-04-14 00:16 - 000061696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ohci1394.sys
        2017-10-27 13:28 - 2008-04-14 00:16 - 000061696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ohci1394.sys
        2017-10-27 13:28 - 2008-04-14 00:16 - 000053376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\1394bus.sys
        2017-10-27 13:28 - 2008-04-14 00:16 - 000053376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\1394bus.sys
        2017-10-27 13:28 - 2008-04-14 00:15 - 000017152 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbohci.sys
        2017-10-27 13:28 - 2008-04-14 00:15 - 000017152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbohci.sys
        2017-10-27 13:28 - 2008-04-14 00:14 - 000081664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\videoprt.sys
        2017-10-27 13:28 - 2008-04-14 00:14 - 000081664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\videoprt.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000096384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scsiport.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000096384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scsiport.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000062976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cdrom.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdrom.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000036352 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\disk.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\disk.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000011904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sffdisk.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000011904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sffdisk.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000011008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sffp_sd.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000011008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sffp_sd.sys
        2017-10-27 13:28 - 2008-04-14 00:09 - 000042368 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mountmgr.sys
        2017-10-27 13:28 - 2008-04-14 00:09 - 000042368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
        2017-10-27 13:28 - 2008-04-14 00:06 - 000079232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sdbus.sys
        2017-10-27 13:28 - 2008-04-14 00:06 - 000079232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
        2017-10-27 13:28 - 2008-04-14 00:02 - 000196224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpdr.sys
        2017-10-27 13:28 - 2008-04-14 00:02 - 000196224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
        2017-10-27 13:28 - 2008-04-14 00:01 - 000134400 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
        2017-10-27 13:28 - 2008-04-13 23:26 - 000030592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rndismpx.sys
        2017-10-27 13:28 - 2008-04-13 23:26 - 000030592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rndismpx.sys
        2017-10-27 13:28 - 2006-09-28 19:00 - 000082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wudfrd.sys
        2017-10-27 13:28 - 2006-09-28 18:55 - 000077568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wudfpf.sys
        2017-10-27 13:28 - 2001-08-23 13:00 - 000070656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ifsutil.dll
        2017-10-27 13:28 - 2001-08-23 13:00 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifsutil.dll
        2017-10-27 13:28 - 2001-08-23 13:00 - 000016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fmifs.dll
        2017-10-27 13:28 - 2001-08-23 13:00 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\fmifs.dll
        2017-10-27 13:28 - 2001-08-23 13:00 - 000007936 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fs_rec.sys
        2017-10-27 13:28 - 2001-08-23 13:00 - 000007936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fs_rec.sys
        2017-10-27 13:25 - 2016-03-09 00:00 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\kblChecker.dll
        2017-10-27 13:20 - 2017-10-27 13:43 - 000000000 ____D C:\3986d7fc9f49b457ca22
        2017-10-26 15:59 - 2017-10-26 15:59 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\GHISLER
        2017-10-25 22:47 - 2017-10-27 14:21 - 000000000 ____D C:\Program Files\Kerish Doctor
        2017-10-25 22:47 - 2017-10-25 22:48 - 000001629 _____ C:\Documents and Settings\All Users\Desktop\Kerish Doctor 2017.lnk
        2017-10-25 22:47 - 2017-10-25 22:47 - 000011936 _____ (Highresolution Enterprises [www.highrez.co.uk]) C:\WINDOWS\system32\Drivers\inpout32.sys
        2017-10-25 22:47 - 2017-10-25 22:47 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Kerish Doctor
        2017-10-25 22:47 - 2011-01-20 00:07 - 000098304 _____ (Highresolution Enterprises) C:\WINDOWS\system32\inpout32.dll
        2017-10-24 13:04 - 2017-10-24 13:04 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Kerish Products
        2017-10-24 13:04 - 2016-08-09 09:35 - 000059880 _____ (Kerish Products) C:\WINDOWS\system32\GPUTemp.dll
        2017-10-24 12:26 - 2017-10-24 12:26 - 000001517 _____ C:\WINDOWS\system32\rrr.lnk
        2017-10-24 08:47 - 2017-10-24 08:47 - 000000998 _____ C:\Documents and Settings\doni\Desktop\RegOrganizerPortable.exe.lnk
        2017-10-23 09:05 - 2017-10-23 09:43 - 000000000 ____D C:\AdwCleaner
        2017-10-23 08:19 - 2017-10-23 08:19 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\OO Software
        2017-10-22 21:21 - 2017-10-22 23:35 - 000000000 ____D C:\Documents and Settings\doni\Application Data\Wise Folder Hider
        2017-10-22 15:53 - 2017-10-22 15:53 - 000000000 ____D C:\Documents and Settings\Administrator\Local Settings\Application Data\Mozilla
        2017-10-22 15:53 - 2017-10-22 15:53 - 000000000 ____D C:\Documents and Settings\Administrator\Application Data\Mozilla
        2017-10-22 15:43 - 2017-10-22 15:43 - 000000000 ____D C:\Documents and Settings\Administrator\Local Settings\Application Data\Zemana
        2017-10-22 15:40 - 2017-10-22 17:37 - 000000000 ____D C:\Documents and Settings\Administrator\Local Settings\Temp
        2017-10-22 15:40 - 2017-10-22 15:56 - 000000178 ___SH C:\Documents and Settings\Administrator\ntuser.ini
        2017-10-22 15:40 - 2017-10-22 15:43 - 000000767 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\Internet Explorer.lnk
        2017-10-22 15:40 - 2017-10-22 15:43 - 000000738 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\Outlook Express.lnk
        2017-10-22 15:40 - 2017-10-22 15:40 - 000000792 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\Windows Media Player.lnk
        2017-10-22 15:40 - 2017-10-22 15:40 - 000000000 __SHD C:\Documents and Settings\Administrator\IETldCache
        2017-10-22 15:40 - 2017-10-22 15:40 - 000000000 ____D C:\Documents and Settings\Administrator
        2017-10-22 15:40 - 2010-03-11 04:41 - 000001599 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\Remote Assistance.lnk
        2017-10-20 08:07 - 2017-10-20 08:07 - 000000000 ____D C:\Documents and Settings\NetworkService\Local Settings\Application Data\Zemana
        2017-10-20 08:07 - 2017-10-20 08:07 - 000000000 ____D C:\Documents and Settings\NetworkService\Application Data\Genie9
        2017-10-19 17:18 - 2017-10-19 17:18 - 000000000 __SHD C:\WINDOWS\CSC
        2017-10-19 11:47 - 2017-10-19 11:47 - 000000000 ____D C:\Program Files\Malwarebytes
        2017-10-19 09:35 - 2017-10-19 14:07 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Malwarebytes
        2017-10-19 09:25 - 2017-10-29 23:03 - 000341032 _____ C:\WINDOWS\system32\FNTCACHE.DAT
        2017-10-14 09:02 - 2017-10-14 09:02 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Auslogics
        2017-10-11 07:48 - 2017-10-11 07:48 - 000000000 ____D C:\Documents and Settings\LocalService\Application Data\Macromedia
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-11-06 19:58 - 2017-01-11 22:56 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Temp
        2017-11-06 19:48 - 2017-07-16 21:46 - 000000830 ____C C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
        2017-11-06 19:29 - 2010-05-06 20:27 - 000000986 ____C C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
        2017-11-06 19:28 - 2010-03-11 06:28 - 001111284 ____C C:\WINDOWS\system32\PerfStringBackup.INI
        2017-11-06 19:24 - 2012-09-14 20:40 - 000000982 ____C C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cd92a860a26e52.job
        2017-11-06 19:24 - 2010-03-11 04:43 - 000000006 ___HC C:\WINDOWS\Tasks\SA.DAT
        2017-11-06 07:40 - 2010-03-11 04:44 - 000000278 __SHC C:\Documents and Settings\doni\ntuser.ini
        2017-11-06 07:24 - 2014-02-08 17:19 - 000001098 ____C C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-18UA.job
        2017-11-05 22:39 - 2017-05-26 20:34 - 000000000 ____D C:\Documents and Settings\doni\Application Data\vlc
        2017-11-05 20:04 - 2017-07-19 11:48 - 000000600 ____C C:\Documents and Settings\doni\PUTTY.RND
        2017-11-05 17:24 - 2014-02-08 17:19 - 000001046 ____C C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-18Core.job
        2017-11-03 22:34 - 2010-12-14 22:26 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\TEMP
        2017-11-03 20:07 - 2016-04-09 10:34 - 000000000 ____D C:\Documents and Settings\doni\My Documents\Изтегляния
        2017-11-03 19:38 - 2016-11-24 19:40 - 000000000 ____D C:\Program Files\stinger
        2017-11-02 12:16 - 2010-03-28 20:57 - 000000000 ____D C:\Documents and Settings\doni\Application Data\dvdcss
        2017-11-02 11:46 - 2010-04-18 13:54 - 000000202 ____C C:\WINDOWS\NeroDigital.ini
        2017-11-02 09:39 - 2017-01-26 11:17 - 000000000 ____D C:\Program Files\IrfanView
        2017-11-02 09:39 - 2015-06-17 09:43 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Unchecky
        2017-11-02 08:56 - 2010-03-17 18:26 - 000000000 ____D C:\Documents and Settings\doni\Application Data\uTorrent
        2017-11-01 19:41 - 2010-03-11 04:44 - 000000000 ____D C:\Documents and Settings\doni
        2017-11-01 19:06 - 2017-04-20 19:00 - 000000000 ____D C:\Documents and Settings\doni\Application Data\XnConvert
        2017-11-01 18:39 - 2011-11-09 13:30 - 000000000 ____D C:\Documents and Settings\doni\Application Data\Auslogics
        2017-11-01 18:39 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\system32\inetsrv
        2017-11-01 14:01 - 2016-08-10 14:24 - 000000000 ____D C:\Documents and Settings\doni\My Documents\Загрузки
        2017-11-01 14:00 - 2017-03-29 19:47 - 000000000 ____D C:\Documents and Settings\doni\My Documents\Files
        2017-11-01 12:15 - 2010-03-11 06:21 - 000000000 RSHDC C:\WINDOWS\system32\dllcache
        2017-11-01 11:41 - 2010-03-11 04:51 - 000065536 _____ C:\WINDOWS\system32\config\ACEEvent.evt
        2017-10-30 21:48 - 2010-03-11 04:44 - 000000792 _____ C:\Documents and Settings\doni\Start Menu\Programs\Windows Media Player.lnk
        2017-10-30 21:47 - 2001-08-23 13:00 - 000002206 ____C C:\WINDOWS\system32\wpa.dbl
        2017-10-30 21:46 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\security
        2017-10-30 21:33 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\system32\oobe
        2017-10-30 21:33 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\inf
        2017-10-30 21:33 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\Help
        2017-10-30 21:33 - 2010-03-11 04:41 - 000001563 _____ C:\Documents and Settings\All Users\Start Menu\Set Program Access and Defaults.lnk
        2017-10-30 21:33 - 2010-03-11 04:37 - 000000000 ____D C:\Program Files\Messenger
        2017-10-30 17:43 - 2010-03-17 22:12 - 000041472 ____C C:\Documents and Settings\doni\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
        2017-10-29 23:50 - 2017-09-17 08:39 - 000100288 _____ C:\WINDOWS\system32\GDIPFONTCACHEV1.DAT
        2017-10-29 22:58 - 2010-03-11 04:41 - 000023392 _____ C:\WINDOWS\system32\nscompat.tlb
        2017-10-29 22:58 - 2010-03-11 04:41 - 000016832 _____ C:\WINDOWS\system32\amcompat.tlb
        2017-10-29 22:30 - 2010-03-11 06:24 - 000000195 __RSH C:\boot.ini
        2017-10-29 10:31 - 2010-03-11 04:38 - 000000000 ____D C:\Program Files\Outlook Express
        2017-10-29 09:10 - 2011-10-17 10:07 - 000000000 ____D C:\WINDOWS\$hf_mig$
        2017-10-29 07:41 - 2017-03-29 20:00 - 000000000 ____D C:\WINDOWS\system32\XPSViewer
        2017-10-28 23:36 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\pchealth
        2017-10-28 20:42 - 2010-03-11 04:43 - 000000178 __SHC C:\Documents and Settings\NetworkService\ntuser.ini
        2017-10-28 19:19 - 2010-03-11 04:51 - 000000000 ____D C:\Program Files\Realtek
        2017-10-28 19:18 - 2010-03-11 04:47 - 000000000 ___HD C:\Program Files\InstallShield Installation Information
        2017-10-27 20:33 - 2001-08-23 13:00 - 000000895 ____C C:\WINDOWS\win.ini
        2017-10-27 20:33 - 2001-08-23 13:00 - 000000246 ____C C:\WINDOWS\system.ini
        2017-10-27 14:54 - 2010-03-11 04:44 - 000000803 ____C C:\Documents and Settings\doni\Start Menu\Programs\Internet Explorer.lnk
        2017-10-27 14:45 - 2010-03-11 13:48 - 000000000 ____D C:\WINDOWS\system32\scripting
        2017-10-27 14:45 - 2010-03-11 13:48 - 000000000 ____D C:\WINDOWS\system32\bits
        2017-10-27 14:45 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\system32\Setup
        2017-10-27 14:44 - 2010-03-11 04:39 - 000000000 ____D C:\Program Files\Movie Maker
        2017-10-27 14:41 - 2010-03-22 10:24 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\ApplicationHistory
        2017-10-27 14:41 - 2010-03-11 04:38 - 000000000 ____D C:\WINDOWS\Registration
        2017-10-27 14:35 - 2015-06-23 10:51 - 000000788 _____ C:\Documents and Settings\LocalService\Start Menu\Programs\Windows Media Player.lnk
        2017-10-27 14:15 - 2016-11-17 22:00 - 000000000 ____D C:\Program Files\Hard Disk Sentinel
        2017-10-26 21:14 - 2017-05-02 19:20 - 000000000 ____D C:\Program Files\BackgammonMasters
        2017-10-25 21:34 - 2017-09-21 07:52 - 000000682 _____ C:\Documents and Settings\doni\Desktop\CCleaner.lnk
        2017-10-25 20:48 - 2017-07-16 21:46 - 000803328 ____C (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
        2017-10-25 20:48 - 2017-07-16 21:46 - 000144896 ____C (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
        2017-10-25 20:48 - 2010-03-11 04:39 - 000000000 ____D C:\WINDOWS\system32\Macromed
        2017-10-24 10:02 - 2010-03-22 10:15 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\HP
        2017-10-23 11:16 - 2012-04-15 20:32 - 000000000 ____D C:\Documents and Settings\doni\.rainlendar2
        2017-10-23 11:16 - 2010-03-17 21:49 - 000000000 ____D C:\Documents and Settings\doni\Application Data\Skype
        2017-10-22 21:48 - 2016-11-28 13:46 - 000000000 ____D C:\Documents and Settings\doni\My Documents\OziBox
        2017-10-22 21:21 - 2017-06-26 10:25 - 000001700 __SHC C:\WINDOWS\wisefs.dat
        2017-10-22 19:22 - 2010-03-11 06:25 - 000000000 ____D C:\Documents and Settings\All Users
        2017-10-22 17:49 - 2016-12-03 10:26 - 000000000 ____D C:\Program Files\Jotta
        2017-10-22 15:40 - 2010-03-11 06:25 - 000000000 ____D C:\Documents and Settings
        2017-10-22 13:31 - 2010-03-11 06:28 - 000001789 ____C C:\WINDOWS\system32\AUTOEXEC.NT
        2017-10-22 08:56 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\Resources
        2017-10-20 06:50 - 2016-10-20 12:19 - 000000000 ____D C:\Program Files\Pale Moon
        2017-10-19 09:14 - 2010-06-13 12:15 - 000000000 __SHD C:\Documents and Settings\doni\PrivacIE
        2017-10-19 09:11 - 2017-07-04 10:38 - 000000000 ____D C:\Documents and Settings\doni\Application Data\ZHP
        2017-10-19 09:11 - 2010-03-28 19:51 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\Google
        2017-10-14 08:41 - 2017-05-02 18:26 - 000000000 ____D C:\Program Files\Goodgammon
        2017-10-14 08:41 - 2017-01-21 17:51 - 000000000 ____D C:\Program Files\Slimjet
        2017-10-14 08:41 - 2010-12-04 14:43 - 000000000 ____D C:\Program Files\Your Uninstaller 2010
        2017-10-14 08:21 - 2017-09-21 19:55 - 000000000 ____D C:\Program Files\Common Files\IObit
        2017-10-14 08:21 - 2017-09-21 19:54 - 000000000 ____D C:\Documents and Settings\doni\Application Data\IObit
        2017-10-09 11:28 - 2016-11-29 22:28 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Ozibox Synchronization Application
        ==================== Files in the root of some directories =======
        2010-04-06 23:40 - 2010-04-06 23:40 - 000007176 ____C () C:\Documents and Settings\doni\Application Data\pcouffin.cat
        2010-04-06 23:40 - 2010-04-06 23:40 - 000001144 ____C () C:\Documents and Settings\doni\Application Data\pcouffin.inf
        2010-04-06 23:40 - 2010-04-06 23:40 - 000000034 ____C () C:\Documents and Settings\doni\Application Data\pcouffin.log
        2010-04-06 23:40 - 2010-04-06 23:40 - 000047360 ____C (VSO Software) C:\Documents and Settings\doni\Application Data\pcouffin.sys
        2010-03-17 22:12 - 2017-10-30 17:43 - 000041472 ____C () C:\Documents and Settings\doni\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
        2010-03-22 10:24 - 2010-03-22 10:24 - 000000127 ____C () C:\Documents and Settings\doni\Local Settings\Application Data\fusioncache.dat
        2017-01-24 13:38 - 2016-11-23 15:37 - 000000570 ____C () C:\Documents and Settings\doni\Local Settings\Application Data\TroubleshooterConfig.json
        2012-03-06 10:56 - 2017-05-28 22:02 - 000000043 __SHC () C:\Documents and Settings\All Users\Application Data\.zreglib
        2016-10-05 16:19 - 2016-10-05 16:19 - 000000232 ____C () C:\Documents and Settings\All Users\Application Data\fontcacheev1.dat
        Files to move or delete:
        ====================
        C:\Documents and Settings\doni\TempWmicBatchFile.bat

        Some zero byte size files/folders:
        ==========================
        C:\Windows\mansk.dll
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\WINDOWS\explorer.exe => File is digitally signed
        C:\WINDOWS\system32\winlogon.exe => File is digitally signed
        C:\WINDOWS\system32\svchost.exe => File is digitally signed
        C:\WINDOWS\system32\services.exe => File is digitally signed
        C:\WINDOWS\system32\User32.dll => File is digitally signed
        C:\WINDOWS\system32\userinit.exe => File is digitally signed
        C:\WINDOWS\system32\rpcss.dll => File is digitally signed
        C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
        C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
        C:\WINDOWS\system32\drivers\sptd.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
        ==================== End of FRST.txt ============================
        Addition.txt
      • от SIMO70
        Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 18-11-2017
        Ran by симо7 (administrator) on СИМО (18-11-2017 18:05:13)
        Running from C:\Users\симо7\Desktop
        Loaded Profiles: симо7 (Available Profiles: симо7)
        Platform: Windows 8.1 Pro (Update) (X64) Language: Български (България)
        Internet Explorer Version 11 (Default browser: FF)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
        (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
        (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
        (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
        (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
        (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
        (@ByELDI) C:\Program Files\KMSpico\Service_KMS.exe
        (AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
        (Microsoft Corporation) C:\Windows\System32\dllhost.exe
        (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
        (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
        (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
        (Intel Corporation) C:\Windows\System32\igfxtray.exe
        (Intel Corporation) C:\Windows\System32\hkcmd.exe
        (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
        (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
        (BitTorrent Inc.) C:\Users\симо7\AppData\Roaming\uTorrent\uTorrent.exe
        (BitTorrent Inc.) C:\Users\симо7\AppData\Roaming\uTorrent\updates\3.4.9_43388\utorrentie.exe
        (BitTorrent Inc.) C:\Users\симо7\AppData\Roaming\uTorrent\updates\3.4.9_43388\utorrentie.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Microsoft Corporation) C:\Windows\System32\dllhost.exe
        (Innovative Digital Technologies) C:\Users\симо7\AppData\Roaming\ACEStream\player\ace_player.exe
        (Innovative Digital Technologies) C:\Users\симо7\AppData\Roaming\ACEStream\engine\ace_engine.exe
        (Innovative Digital Technologies) C:\Users\симо7\AppData\Roaming\ACEStream\engine\ace_engine.exe
        () C:\Users\симо7\AppData\Roaming\ACEStream\updater\ace_update.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        ==================== Registry (Whitelisted) ===========================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [253344 2017-11-10] (AVAST Software)
        HKLM-x32\...\Run: [PowerDVD17Agent] => C:\Program Files (x86)\CyberLink\PowerDVD17\PowerDVD17Agent.exe [526376 2017-02-18] (CyberLink Corp.)
        Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
        HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\Run: [uTorrent] => C:\Users\симо7\AppData\Roaming\uTorrent\uTorrent.exe [2405056 2017-03-18] (BitTorrent Inc.)
        HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
        HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
        HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\MountPoints2: {2f40cbec-ac01-11e7-82a5-2cd4449354ae} - "H:\HiSuiteDownLoader.exe"
        HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\MountPoints2: {a28ae7af-ab96-11e7-82a5-2cd4449354ae} - "H:\HiSuiteDownLoader.exe"
        AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [171896 2017-10-27] (NVIDIA Corporation)
        AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [149552 2017-10-27] (NVIDIA Corporation)
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Hosts: 127.0.0.1       cap.cyberlink.com
        Tcpip\Parameters: [DhcpNameServer] 172.16.1.1
        Tcpip\..\Interfaces\{7D160F40-690F-4016-ADAE-E09D926443B7}: [DhcpNameServer] 172.16.1.1
        Internet Explorer:
        ==================
        HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
        HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
        HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
        HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
        HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
        HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
        HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
        HKU\S-1-5-21-976013588-1774182616-1790962854-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        SearchScopes: HKU\S-1-5-21-976013588-1774182616-1790962854-1001 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={6635F779-B341-4CBB-990E-8F4791163F39}&mid=bac4c002c20547cfa1cbfd9d0277bd5d-a68b7eea2a876e0ede82853fb0728bad9cd94760&lang=en&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-12-28 06:22:29&v=4.3.6.255&pid=wtu&sg=&sap=dsp&q={searchTerms}
        SearchScopes: HKU\S-1-5-21-976013588-1774182616-1790962854-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={6635F779-B341-4CBB-990E-8F4791163F39}&mid=bac4c002c20547cfa1cbfd9d0277bd5d-a68b7eea2a876e0ede82853fb0728bad9cd94760&lang=en&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-12-28 06:22:29&v=4.3.6.255&pid=wtu&sg=&sap=dsp&q={searchTerms}
        BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-11-10] (AVAST Software)
        BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2016-07-12] (Microsoft Corporation)
        BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-11-10] (AVAST Software)
        Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
        FireFox:
        ========
        FF DefaultProfile: r1btu8zo.default
        FF ProfilePath: C:\Users\симо7\AppData\Roaming\Mozilla\Firefox\Profiles\r1btu8zo.default [2017-11-18]
        FF Homepage: Mozilla\Firefox\Profiles\r1btu8zo.default -> https://www.google.bg/?gws_rd=ssl
        FF Extension: (FEBE) - C:\Users\симо7\AppData\Roaming\Mozilla\Firefox\Profiles\r1btu8zo.default\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2017-11-14] [Lagacy]
        FF Extension: (Adblock Plus) - C:\Users\симо7\AppData\Roaming\Mozilla\Firefox\Profiles\r1btu8zo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-11-14]
        FF HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\симо7\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi => not found
        FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-18] ()
        FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
        FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
        FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-18] ()
        FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [No File]
        FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
        FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
        FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-10-27] (NVIDIA Corporation)
        FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-10-27] (NVIDIA Corporation)
        FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
        FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
        FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
        FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
        FF Plugin HKU\S-1-5-21-976013588-1774182616-1790962854-1001: @acestream.net/acestreamplugin,version=3.1.16 -> C:\Users\симо7\AppData\Roaming\ACEStream\player\npace_plugin.dll [2017-01-31] (Innovative Digital Technologies)
        FF Plugin HKU\S-1-5-21-976013588-1774182616-1790962854-1001: @acestream.net/acestreamplugin,version=3.1.2 -> C:\Users\симо7\AppData\Roaming\ACEStream\player\npace_plugin.dll [2017-01-31] (Innovative Digital Technologies)
        FF Plugin HKU\S-1-5-21-976013588-1774182616-1790962854-1001: @acestream.net/acestreamplugin,version=3.1.7 -> C:\Users\симо7\AppData\Roaming\ACEStream\player\npace_plugin.dll [2017-01-31] (Innovative Digital Technologies)
        Chrome:
        =======
        CHR DefaultProfile: Default
        CHR HomePage: Default -> mysearch.avg.com/?rvt=1
        CHR StartupUrls: Default -> "hxxp://www.google.bg/"
        CHR Profile: C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default [2017-11-18]
        CHR Extension: (Презентации) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]
        CHR Extension: (Документи) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
        CHR Extension: (Google Диск) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-08-08]
        CHR Extension: (YouTube) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-08-08]
        CHR Extension: (Adblock Plus) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-09-26]
        CHR Extension: (Avast SafePrice) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-10-17]
        CHR Extension: (Таблици) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]
        CHR Extension: (Google Документи офлайн) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-08-08]
        CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
        CHR Extension: (Gmail) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-08-08]
        CHR Extension: (Chrome Media Router) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-11-15]
        CHR Extension: (Dealicious (Verified)) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pplphlbogdadpkmdhbjdebhfhjifbfka [2017-09-29]
        CHR Profile: C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-07-20]
        CHR Profile: C:\Users\симо7\AppData\Local\Google\Chrome\User Data\System Profile [2017-09-27]
        CHR HKU\S-1-5-21-976013588-1774182616-1790962854-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn] - hxxps://clients2.google.com/service/update2/crx
        CHR HKU\S-1-5-21-976013588-1774182616-1790962854-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx
        CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
        CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7549928 2017-11-10] (AVAST Software)
        R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [281416 2017-11-10] (AVAST Software)
        R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [332368 2017-11-10] (AVAST Software)
        R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
        R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518264 2017-10-11] (NVIDIA Corporation)
        S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518264 2017-10-11] (NVIDIA Corporation)
        R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-10-27] (NVIDIA Corporation)
        R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [460920 2017-10-11] (NVIDIA Corporation)
        R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [734400 2015-08-13] (@ByELDI) [File not signed]
        S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
        S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [183584 2017-11-10] (AVAST Software)
        R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [321032 2017-11-10] (AVAST Software s.r.o.)
        R0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [198968 2017-11-10] (AVAST Software s.r.o.)
        R0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [343288 2017-11-10] (AVAST Software s.r.o.)
        R0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [57728 2017-11-10] (AVAST Software s.r.o.)
        S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [47008 2017-11-10] (AVAST Software)
        R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [41832 2017-09-01] (AVAST Software)
        R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [148288 2017-11-10] (AVAST Software)
        R1 aswNetSec; C:\Windows\System32\drivers\aswNetSec.sys [570152 2017-11-10] (AVAST Software)
        R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [110376 2017-11-10] (AVAST Software)
        R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [84416 2017-11-10] (AVAST Software)
        R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1026232 2017-11-10] (AVAST Software)
        R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [455376 2017-11-15] (AVAST Software)
        R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [203976 2017-11-10] (AVAST Software)
        S3 aswTap; C:\Windows\system32\DRIVERS\aswTap.sys [53904 2017-06-25] (The OpenVPN Project)
        R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [364464 2017-11-10] (AVAST Software)
        S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
        R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2016-08-11] (DT Soft Ltd)
        R3 FUJ02B1; C:\Windows\system32\DRIVERS\FUJ02B1.sys [59152 2016-05-11] (FUJITSU LIMITED)
        R0 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [252232 2017-11-17] (Malwarebytes)
        R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-09-04] (Intel Corporation)
        S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-10-11] (NVIDIA Corporation)
        R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50808 2017-10-27] (NVIDIA Corporation)
        R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57976 2017-10-27] (NVIDIA Corporation)
        S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
        S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
        S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
        S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
        R2 {A14A8EF6-B11D-4356-9ECC-4B937E6CC626}; C:\Program Files (x86)\CyberLink\PowerDVD17\Common\NavFilter\000.fcl [38168 2017-02-17] (CyberLink Corp.)
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-11-18 18:05 - 2017-11-18 18:06 - 000018415 _____ C:\Users\симо7\Desktop\FRST.txt
        2017-11-18 18:04 - 2017-11-18 18:05 - 000000000 ____D C:\FRST
        2017-11-18 18:03 - 2017-11-18 18:03 - 002392064 _____ (Farbar) C:\Users\симо7\Desktop\FRST64.exe
        2017-11-17 17:54 - 2017-11-17 17:54 - 000252232 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
        2017-11-17 17:41 - 2017-11-17 17:41 - 000001957 _____ C:\Users\симо7\Desktop\2017-11-17_17h40_17.png.lnk
        2017-11-17 17:38 - 2017-11-17 17:38 - 012701760 _____ (Learnpulse) C:\Users\симо7\Downloads\Screenpresso.exe
        2017-11-15 21:23 - 2017-11-15 21:23 - 000455376 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
        2017-11-15 18:16 - 2017-11-15 18:16 - 000014486 _____ C:\Users\симо7\Downloads\месец октомври аванс Пламена (1).xlsx
        2017-11-15 08:35 - 2017-11-15 08:35 - 000001082 _____ C:\Users\Public\Desktop\VLC media player.lnk
        2017-11-14 23:52 - 2017-11-14 23:52 - 000071871 _____ C:\Users\симо7\Downloads\blizoo_inv_49655974_01.11.2017.pdf
        2017-11-14 23:45 - 2017-11-14 23:45 - 000001165 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
        2017-11-14 23:45 - 2017-11-14 23:45 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
        2017-11-14 23:44 - 2017-11-14 23:45 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
        2017-11-14 23:44 - 2017-11-14 23:44 - 000000000 ____D C:\ProgramData\SWCUTemp
        2017-11-14 23:35 - 2017-11-14 23:35 - 036686848 _____ (Mozilla) C:\Users\симо7\Downloads\Firefox Setup 57.0.exe
        2017-11-14 21:29 - 2017-11-14 21:29 - 000311248 _____ (Mozilla) C:\Users\симо7\Downloads\Firefox Installer.exe
        2017-11-14 18:04 - 2017-11-14 18:04 - 000014473 _____ C:\Users\симо7\Downloads\месец октомври аванс Пламена.xlsx
        2017-11-14 14:27 - 2017-11-18 11:04 - 000000000 ____D C:\Users\симо7\AppData\LocalLow\uTorrent
        2017-11-11 11:27 - 2017-11-11 11:27 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers
        2017-11-11 11:27 - 2017-11-11 11:27 - 000000000 ____D C:\ProgramData\Samsung
        2017-11-11 11:27 - 2017-11-11 11:27 - 000000000 ____D C:\Program Files (x86)\Samsung
        2017-11-11 11:27 - 2015-09-14 07:09 - 002073600 ____N C:\Windows\SysWOW64\DlgSearchEngine.dll
        2017-11-11 11:27 - 2015-03-12 04:43 - 000089600 _____ (SS) C:\Windows\system32\ux003ci.dll
        2017-11-11 11:27 - 2015-03-12 04:43 - 000022528 _____ () C:\Windows\system32\ux003lm.dll
        2017-11-11 11:27 - 2015-02-04 06:41 - 000158016 _____ C:\Windows\system32\ux003ci.exe
        2017-11-11 11:26 - 2014-08-18 14:59 - 000011576 ____N (Samsung Electronics) C:\Windows\system32\Drivers\SSPORT.SYS
        2017-11-10 09:23 - 2017-11-10 09:23 - 000003914 _____ C:\Windows\System32\Tasks\Avast Emergency Update
        2017-11-10 09:23 - 2017-11-10 09:22 - 001026232 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000570152 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetSec.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000455384 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys.151077381642101
        2017-11-10 09:23 - 2017-11-10 09:22 - 000365168 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
        2017-11-10 09:23 - 2017-11-10 09:22 - 000364464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000343288 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000321032 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000203976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000198968 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000183584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000148288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000110376 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000084416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000057728 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000047008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
        2017-11-09 13:56 - 2017-11-09 13:56 - 000000000 ____D C:\ProgramData\Steam
        2017-11-09 12:58 - 2017-11-12 20:58 - 000000000 ____D C:\Program Files\Call of Duty WWII
        2017-11-09 12:58 - 2017-11-09 13:56 - 000000842 _____ C:\Users\Public\Desktop\Call of Duty WWII.lnk
        2017-11-08 18:20 - 2017-11-08 18:23 - 000008859 _____ C:\Users\симо7\Desktop\ГАЗ-РАЗХОД.xlsx
        2017-11-07 09:10 - 2017-11-07 09:10 - 000001650 _____ C:\Users\симо7\Desktop\ASC.exe.lnk
        2017-11-07 09:08 - 2017-11-18 17:49 - 000002812 _____ C:\Windows\System32\Tasks\ASC10_SkipUac_симо7
        2017-11-03 17:49 - 2017-11-03 17:49 - 000000000 ____D C:\Users\GLCache\1a410118ebdbd30f6e38de2279d395e9
        2017-11-03 17:49 - 2017-11-03 17:49 - 000000000 ____D C:\Users\GLCache
        2017-11-02 22:22 - 2010-06-02 04:55 - 000527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
        2017-11-02 22:22 - 2010-06-02 04:55 - 000518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
        2017-11-02 22:22 - 2010-06-02 04:55 - 000239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
        2017-11-02 22:22 - 2010-06-02 04:55 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
        2017-11-02 22:22 - 2010-06-02 04:55 - 000077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
        2017-11-02 22:22 - 2010-06-02 04:55 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
        2017-11-02 22:22 - 2010-05-26 11:41 - 002526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
        2017-11-02 22:22 - 2010-05-26 11:41 - 001907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
        2017-11-02 22:22 - 2010-05-26 11:41 - 001868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
        2017-11-02 22:22 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
        2017-11-02 22:22 - 2009-09-04 17:44 - 000515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
        2017-11-02 22:22 - 2009-09-04 17:44 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
        2017-11-02 22:22 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
        2017-11-02 22:22 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
        2017-11-02 22:22 - 2009-09-04 17:44 - 000069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 005501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 001974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 000523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 000235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
        2017-11-02 22:22 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
        2017-11-02 22:22 - 2009-03-16 14:18 - 000517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
        2017-11-02 22:22 - 2009-03-16 14:18 - 000235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
        2017-11-02 22:22 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
        2017-11-02 22:22 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
        2017-11-02 22:22 - 2009-03-16 14:18 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
        2017-11-02 22:22 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
        2017-11-02 22:22 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
        2017-11-02 22:22 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
        2017-11-02 22:22 - 2009-03-09 15:27 - 001846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
        2017-11-02 22:22 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
        2017-11-02 22:22 - 2009-03-09 15:27 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
        2017-11-02 22:22 - 2008-10-10 04:52 - 005631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
        2017-11-02 22:22 - 2008-10-10 04:52 - 004379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
        2017-11-02 22:22 - 2008-10-10 04:52 - 002605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
        2017-11-02 22:22 - 2008-10-10 04:52 - 002036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
        2017-11-02 22:22 - 2008-10-10 04:52 - 000519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
        2017-11-02 22:22 - 2008-10-10 04:52 - 000452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
        2017-11-02 22:22 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
        2017-11-02 22:22 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
        2017-11-02 22:22 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
        2017-11-02 22:22 - 2008-07-31 10:41 - 000068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
        2017-11-02 22:22 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
        2017-11-02 22:22 - 2008-07-31 10:40 - 000509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
        2017-11-02 22:22 - 2008-07-10 11:01 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
        2017-11-02 22:22 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
        2017-11-02 22:22 - 2008-07-10 11:00 - 003851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
        2017-11-02 22:22 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
        2017-11-02 22:22 - 2008-07-10 11:00 - 001493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
        2017-11-02 22:22 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
        2017-11-02 22:22 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
        2017-11-02 22:22 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
        2017-11-02 22:22 - 2008-05-30 14:18 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
        2017-11-02 22:22 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
        2017-11-02 22:22 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
        2017-11-02 22:22 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
        2017-11-02 22:22 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
        2017-11-02 22:22 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
        2017-11-02 22:22 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
        2017-11-02 22:22 - 2008-05-30 14:11 - 003850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
        2017-11-02 22:22 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
        2017-11-02 22:22 - 2008-05-30 14:11 - 001491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
        2017-11-02 22:22 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
        2017-11-02 22:22 - 2008-05-30 14:11 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
        2017-11-02 22:22 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
        2017-11-02 22:22 - 2008-03-05 16:03 - 000479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
        2017-11-02 22:22 - 2008-03-05 16:03 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
        2017-11-02 22:22 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
        2017-11-02 22:22 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
        2017-11-02 22:22 - 2008-03-05 16:00 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
        2017-11-02 22:22 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
        2017-11-02 22:22 - 2008-03-05 15:56 - 003786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
        2017-11-02 22:22 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
        2017-11-02 22:22 - 2008-03-05 15:56 - 001420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
        2017-11-02 22:22 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
        2017-11-02 22:22 - 2008-02-05 23:07 - 000462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
        2017-11-02 22:22 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
        2017-11-02 22:22 - 2007-10-22 03:39 - 000267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
        2017-11-02 22:22 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
        2017-11-02 22:22 - 2007-10-22 03:37 - 000017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
        2017-11-02 22:22 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
        2017-11-02 22:22 - 2007-10-12 15:14 - 003734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
        2017-11-02 22:22 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
        2017-11-02 22:22 - 2007-10-12 15:14 - 001374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
        2017-11-02 22:22 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
        2017-11-02 22:22 - 2007-10-02 09:56 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
        2017-11-02 22:22 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
        2017-11-02 22:22 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
        2017-11-02 22:22 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
        2017-11-02 22:22 - 2007-07-19 18:14 - 003727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
        2017-11-02 22:22 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
        2017-11-02 22:22 - 2007-07-19 18:14 - 001358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
        2017-11-02 22:22 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
        2017-11-02 22:22 - 2007-07-19 18:14 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
        2017-11-02 22:22 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
        2017-11-02 22:22 - 2007-06-20 20:46 - 000266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
        2017-11-02 22:22 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
        2017-11-02 22:22 - 2007-05-16 16:45 - 003497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
        2017-11-02 22:22 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
        2017-11-02 22:22 - 2007-05-16 16:45 - 001124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
        2017-11-02 22:22 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
        2017-11-02 22:22 - 2007-05-16 16:45 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
        2017-11-02 22:22 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
        2017-11-02 22:22 - 2007-04-04 18:55 - 000261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
        2017-11-02 22:22 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
        2017-11-02 22:22 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
        2017-11-02 22:22 - 2007-03-15 16:57 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
        2017-11-02 22:22 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
        2017-11-02 22:22 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
        2017-11-02 22:22 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
        2017-11-02 22:22 - 2007-03-12 16:42 - 001123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
        2017-11-02 22:22 - 2007-03-05 12:42 - 000017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
        2017-11-02 22:22 - 2007-03-05 12:42 - 000015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
        2017-11-02 22:22 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
        2017-11-02 22:22 - 2007-01-24 15:27 - 000255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
        2017-11-02 22:22 - 2006-12-08 12:02 - 000251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
        2017-11-02 22:22 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
        2017-11-02 22:22 - 2006-11-29 13:06 - 004398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
        2017-11-02 22:22 - 2006-11-29 13:06 - 003426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
        2017-11-02 22:22 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
        2017-11-02 22:22 - 2006-11-29 13:06 - 000440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
        2017-11-02 22:22 - 2006-09-28 16:05 - 003977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
        2017-11-02 22:22 - 2006-09-28 16:05 - 002414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
        2017-11-02 22:22 - 2006-09-28 16:05 - 000237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
        2017-11-02 22:22 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
        2017-11-02 22:22 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
        2017-11-02 22:22 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
        2017-11-02 22:22 - 2006-07-28 09:30 - 000236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
        2017-11-02 22:22 - 2006-07-28 09:30 - 000062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
        2017-11-02 22:22 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
        2017-11-02 22:22 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
        2017-11-02 22:22 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
        2017-11-02 22:22 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
        2017-11-02 22:22 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
        2017-11-02 22:22 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
        2017-11-02 22:22 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
        2017-11-02 22:22 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
        2017-11-02 22:22 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
        2017-11-02 22:22 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
        2017-11-02 22:22 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
        2017-11-02 22:22 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
        2017-11-02 22:22 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
        2017-11-02 22:22 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
        2017-11-02 22:22 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
        2017-11-02 22:22 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
        2017-11-02 22:22 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
        2017-11-02 22:22 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
        2017-11-02 22:22 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
        2017-11-02 22:22 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
        2017-11-02 22:22 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
        2017-11-02 22:22 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
        2017-11-02 22:22 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
        2017-11-02 22:22 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
        2017-11-02 22:19 - 2017-11-02 22:22 - 000000000 ____D C:\Windows\SysWOW64\directx
        2017-11-01 17:44 - 2017-11-01 17:44 - 000000000 ____D C:\ProgramData\PDVD
        2017-11-01 17:43 - 2017-11-01 17:43 - 000002431 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 17.lnk
        2017-11-01 17:43 - 2017-11-01 17:43 - 000002419 _____ C:\Users\Public\Desktop\CyberLink PowerDVD 17.lnk
        2017-11-01 17:43 - 2017-11-01 17:43 - 000000000 ____D C:\Program Files (x86)\NSIS Uninstall Information
        2017-11-01 17:41 - 2017-11-01 17:41 - 000000000 ____D C:\ProgramData\install_backup
        2017-11-01 17:41 - 2017-11-01 17:41 - 000000000 ____D C:\Program Files (x86)\CyberLink
        2017-11-01 11:31 - 2017-09-14 01:20 - 000798008 _____ C:\Windows\SysWOW64\vulkan-1.dll
        2017-11-01 11:31 - 2017-09-14 01:20 - 000490296 _____ C:\Windows\SysWOW64\vulkaninfo.exe
        2017-11-01 11:31 - 2017-09-14 01:19 - 000927544 _____ C:\Windows\system32\vulkan-1.dll
        2017-11-01 11:31 - 2017-09-14 01:19 - 000591160 _____ C:\Windows\system32\vulkaninfo.exe
        2017-10-31 21:52 - 2017-11-01 11:31 - 000000000 ____D C:\Program Files (x86)\VulkanRT
        2017-10-31 21:52 - 2017-10-31 21:52 - 000000000 ____D C:\Windows\SysWOW64\NV
        2017-10-31 21:52 - 2017-10-31 21:52 - 000000000 ____D C:\Windows\system32\NV
        2017-10-31 21:52 - 2017-10-27 18:12 - 000123000 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
        2017-10-31 21:52 - 2017-10-27 18:06 - 000136312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
        2017-10-31 21:45 - 2017-10-27 18:12 - 000607168 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
        2017-10-31 21:45 - 2017-10-27 18:12 - 000081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
        2017-10-31 21:40 - 2017-10-31 21:41 - 000000000 ____D C:\Windows\LastGood
        2017-10-31 21:26 - 2017-11-18 17:49 - 000004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003798 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:23 - 2017-10-26 04:31 - 001989240 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438810.dll
        2017-10-31 21:23 - 2017-10-26 04:31 - 001673848 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438810.dll
        2017-10-31 17:46 - 2017-10-31 17:47 - 000000000 ____D C:\Windows\LastGood.Tmp
        2017-10-31 17:44 - 2017-10-27 19:46 - 040237688 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 036194424 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 035156928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 029236344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 023262464 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 021744632 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 019037416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 019012232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 018207248 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 016763000 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
        2017-10-31 17:44 - 2017-10-27 19:46 - 015027984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 013864232 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 013254520 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 011779328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 010882720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 004284496 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 003807680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 003799032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 003346552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 001989056 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438813.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 001673848 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438813.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 001135464 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 001099200 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 001030592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000981112 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000932472 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000885680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000615360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000527288 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000505976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000492048 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000446216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000407064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000171896 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000154392 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000149552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000132256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000057976 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
        2017-10-31 17:44 - 2017-10-27 19:46 - 000050808 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
        2017-10-31 17:44 - 2017-10-27 19:46 - 000046182 _____ C:\Windows\system32\nvinfo.pb
        2017-10-31 17:44 - 2017-10-27 19:46 - 000038336 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
        2017-10-31 17:44 - 2017-10-27 19:46 - 000000669 _____ C:\Windows\SysWOW64\nv-vk32.json
        2017-10-31 17:44 - 2017-10-27 19:46 - 000000669 _____ C:\Windows\system32\nv-vk64.json
        2017-10-31 17:42 - 2017-10-31 17:42 - 000000000 ____D C:\NVIDIA
        2017-10-28 19:23 - 2017-10-28 19:23 - 000000000 ____D C:\Users\Public\Documents\Steam
        2017-10-28 19:22 - 2016-08-10 09:38 - 000107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
        2017-10-28 17:50 - 2017-10-13 00:25 - 000835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
        2017-10-28 17:50 - 2017-10-13 00:25 - 000177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
        2017-10-28 17:50 - 2017-10-05 09:17 - 000380248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
        2017-10-28 17:50 - 2017-09-15 01:52 - 000986968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
        2017-10-28 17:50 - 2017-09-08 19:14 - 003084288 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
        2017-10-28 17:50 - 2017-09-08 18:50 - 002471424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
        2017-10-28 17:50 - 2017-09-08 05:31 - 000685440 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
        2017-10-28 17:50 - 2017-09-08 05:28 - 000507176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
        2017-10-28 17:50 - 2017-09-07 23:31 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\mgmtapi.dll
        2017-10-28 17:50 - 2017-09-07 21:20 - 000018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mgmtapi.dll
        2017-10-28 17:50 - 2017-09-07 19:20 - 000513456 _____ C:\Windows\SysWOW64\locale.nls
        2017-10-28 17:50 - 2017-09-07 19:20 - 000513456 _____ C:\Windows\system32\locale.nls
        2017-10-28 17:50 - 2017-09-07 15:40 - 000995272 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
        2017-10-28 17:50 - 2017-09-07 15:40 - 000922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
        2017-10-28 17:50 - 2017-09-07 01:07 - 000158552 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
        2017-10-28 17:50 - 2017-09-06 23:17 - 000461144 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
        2017-10-28 17:50 - 2017-09-06 23:17 - 000443224 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
        2017-10-28 17:50 - 2017-09-06 16:14 - 000166400 _____ (Microsoft Corporation) C:\Windows\system32\regsvc.dll
        2017-10-28 17:50 - 2017-08-11 03:39 - 002779136 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
        2017-10-28 17:50 - 2017-08-11 03:30 - 002464256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-11-18 18:06 - 2017-01-20 10:24 - 000000000 ____D C:\Users\симо7\AppData\Roaming\uTorrent
        2017-11-18 17:49 - 2017-10-04 16:24 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
        2017-11-18 17:49 - 2016-08-08 15:35 - 000003430 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
        2017-11-18 17:49 - 2016-08-08 15:35 - 000003302 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
        2017-11-18 17:48 - 2016-08-09 20:20 - 000000000 ____D C:\Users\симо7\AppData\Roaming\.ACEStream
        2017-11-18 17:44 - 2017-08-16 21:00 - 000000000 ____D C:\_acestream_cache_
        2017-11-18 15:37 - 2016-08-08 15:46 - 000000000 ___RD C:\ТОРЕНТ
        2017-11-18 12:25 - 2016-08-08 15:44 - 000000000 ____D C:\ProgramData\NVIDIA
        2017-11-18 12:21 - 2016-08-08 15:31 - 000003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-976013588-1774182616-1790962854-1001
        2017-11-18 11:50 - 2016-11-17 21:04 - 000000000 ____D C:\Users\симо7\AppData\LocalLow\Mozilla
        2017-11-18 11:48 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps
        2017-11-18 11:48 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
        2017-11-17 17:11 - 2017-03-14 18:53 - 000647040 _____ C:\Windows\system32\perfh002.dat
        2017-11-17 17:11 - 2017-03-14 18:53 - 000122548 _____ C:\Windows\system32\perfc002.dat
        2017-11-17 17:11 - 2014-11-21 00:31 - 001521674 _____ C:\Windows\system32\PerfStringBackup.INI
        2017-11-17 17:11 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
        2017-11-15 18:17 - 2016-08-08 15:26 - 000000000 ____D C:\Users\симо7\AppData\Local\Packages
        2017-11-15 16:40 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\LiveKernelReports
        2017-11-15 08:39 - 2017-04-09 16:58 - 000000000 ____D C:\Users\симо7\AppData\Roaming\vlc
        2017-11-14 23:45 - 2016-08-08 16:40 - 000000000 ____D C:\Users\симо7\AppData\Roaming\Mozilla
        2017-11-14 23:45 - 2016-08-08 16:40 - 000000000 ____D C:\Users\симо7\AppData\Local\Mozilla
        2017-11-14 23:40 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
        2017-11-14 18:20 - 2017-09-30 08:48 - 000000089 _____ C:\Users\симо7\Desktop\Нов текстов документ.txt
        2017-11-14 12:40 - 2016-08-10 17:57 - 000000000 ____D C:\ProgramData\Skype
        2017-11-14 08:43 - 2016-08-08 15:35 - 000002213 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
        2017-11-11 11:20 - 2013-08-22 15:25 - 000262144 ___SH C:\Windows\system32\config\BBI
        2017-11-09 12:57 - 2016-08-11 08:32 - 000000000 ____D C:\Users\симо7\AppData\Roaming\DAEMON Tools Lite
        2017-11-01 17:48 - 2016-08-11 08:22 - 000000000 ____D C:\Users\симо7\Documents\CyberLink
        2017-11-01 17:48 - 2016-08-11 08:22 - 000000000 ____D C:\Users\симо7\AppData\Roaming\CyberLink
        2017-11-01 17:44 - 2017-04-12 10:24 - 000000000 ____D C:\ProgramData\CyberLink
        2017-11-01 17:43 - 2016-08-11 08:18 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
        2017-11-01 17:42 - 2016-08-11 08:20 - 000000000 ____D C:\Users\симо7\AppData\Local\CyberLink
        2017-11-01 17:41 - 2017-02-21 08:47 - 000000000 ____D C:\ProgramData\SUPPORTDIR
        2017-11-01 17:41 - 2016-08-11 08:18 - 000000000 ____D C:\ProgramData\install_clap
        2017-11-01 17:36 - 2016-09-07 13:46 - 000000000 ____D C:\Users\симо7\AppData\Local\CrashDumps
        2017-10-31 21:52 - 2016-08-08 15:44 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
        2017-10-31 21:26 - 2016-08-08 15:44 - 000000000 ____D C:\Program Files\NVIDIA Corporation
        2017-10-31 21:26 - 2016-08-08 15:44 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
        2017-10-30 20:08 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
        2017-10-29 11:25 - 2017-09-27 08:01 - 000000000 ____D C:\ProgramData\ProductData
        2017-10-28 17:52 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
        2017-10-27 18:36 - 2016-10-07 15:17 - 000001951 _____ C:\Windows\NvContainerRecovery.bat
        2017-10-27 18:12 - 2016-08-08 15:44 - 005960824 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
        2017-10-27 18:12 - 2016-08-08 15:44 - 002587768 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
        2017-10-27 18:12 - 2016-08-08 15:44 - 001766520 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
        2017-10-27 18:12 - 2016-08-08 15:44 - 000449656 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
        2017-10-26 17:36 - 2016-08-11 08:18 - 000000000 ____D C:\ProgramData\Temp
        2017-10-25 12:33 - 2016-08-08 15:44 - 007802921 _____ C:\Windows\system32\nvcoproc.bin
        2017-10-22 10:21 - 2016-08-08 16:30 - 000000000 ____D C:\Users\симо7\AppData\Local\ElevatedDiagnostics
        2017-10-22 10:21 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\NDF
        Some files in TEMP:
        ====================
        2017-11-09 17:58 - 2017-11-09 17:58 - 012701760 _____ (Learnpulse) C:\Users\симо7\AppData\Local\Temp\ScreenpressoUpd.exe
        2017-11-15 08:34 - 2017-11-15 08:34 - 030950664 _____ () C:\Users\симо7\AppData\Local\Temp\vlc-2.2.6-win32.exe
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\Windows\system32\winlogon.exe => File is digitally signed
        C:\Windows\system32\wininit.exe => File is digitally signed
        C:\Windows\explorer.exe => File is digitally signed
        C:\Windows\SysWOW64\explorer.exe => File is digitally signed
        C:\Windows\system32\svchost.exe => File is digitally signed
        C:\Windows\SysWOW64\svchost.exe => File is digitally signed
        C:\Windows\system32\services.exe => File is digitally signed
        C:\Windows\system32\User32.dll => File is digitally signed
        C:\Windows\SysWOW64\User32.dll => File is digitally signed
        C:\Windows\system32\userinit.exe => File is digitally signed
        C:\Windows\SysWOW64\userinit.exe => File is digitally signed
        C:\Windows\system32\rpcss.dll => File is digitally signed
        C:\Windows\system32\dnsapi.dll => File is digitally signed
        C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
        C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
        LastRegBack: 2017-11-14 10:10
        ==================== End of FRST.txt ============================
        Addition.txt
      • от tany
        От известно време 3-4 пъти месечно "Актуализация" ми иска съгласието да го инсталирам.Аз отказвам но след 6-7 дни пак опит 
        и така вече няколко месеца.Нямам представа дали е вирус,нямам проблеми с компютъра,няма забивания или забавяне.
        Ето за това става въпрос
         
         
        Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 24-09-2017
        Ran by Стоянчо (administrator) on DESKTOP-HV76MO6 (24-09-2017 23:11:02)
        Running from C:\Users\Стоянчо\Downloads
        Loaded Profiles: Стоянчо (Available Profiles: Стоянчо)
        Platform: Windows 10 Pro Version 1703 (X64) Language: Български (България)
        Internet Explorer Version 11 (Default browser: Chrome)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (Intel Corporation) C:\Windows\System32\igfxCUIService.exe
        (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
        (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
        (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
        (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
        (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
        (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
        (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
        () C:\Program Files\Gramblr\gramblr.exe
        (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
        (Intel Corporation) C:\Windows\System32\igfxEM.exe
        (Intel Corporation) C:\Windows\System32\igfxHK.exe
        () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe
        (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.10\Lightshot.exe
        (Microsoft Corporation) C:\Windows\System32\dllhost.exe
        (Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
        (Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
        (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.23.0_x64__8wekyb3d8bbwe\WinStore.App.exe
        () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17072.13111.0_x64__8wekyb3d8bbwe\Video.UI.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        ==================== Registry (Whitelisted) ===========================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
        HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()
        Winlogon\Notify\igfxcui: igfxdev.dll [X]
        HKU\S-1-5-21-3274723310-3931731729-1199849900-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [48138880 2015-10-14] (Skype Technologies S.A.)
        HKU\S-1-5-21-3274723310-3931731729-1199849900-1001\...\Run: [GoogleChromeAutoLaunch_7AC76D272A3C9865EEE36FF327D0728E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1301848 2017-08-23] (Google Inc.)
        Startup: C:\Users\Стоянчо\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk [2016-12-26]
        ShortcutTarget: Facebook Gameroom.lnk -> C:\Users\Стоянчо\AppData\Local\Facebook\Games\FacebookGameroom.exe (Facebook)
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Hosts: 127.0.0.1    localhost
        Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
        Tcpip\..\Interfaces\{2b43ead3-416b-49fc-acb0-4ea078b43530}: [DhcpNameServer] 192.168.42.129
        Tcpip\..\Interfaces\{9146b479-0d48-411c-83c0-18542761f0fe}: [DhcpNameServer] 95.87.194.4 192.168.0.1
        Tcpip\..\Interfaces\{a5340c57-e453-40ab-bfb5-c36cda227066}: [DhcpNameServer] 192.168.1.1
        Internet Explorer:
        ==================
        BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-09-19] (Microsoft Corporation)
        BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-09-19] (Microsoft Corporation)
        BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-09-19] (Microsoft Corporation)
        BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-09-19] (Microsoft Corporation)
        Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)
        Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)
        Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)
        Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)
        FireFox:
        ========
        FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
        FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
        FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
        FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [No File]
        FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-09-19] (Microsoft Corporation)
        FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-09-19] (Microsoft Corporation)
        FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
        FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
        Chrome: 
        =======
        CHR DefaultProfile: Default
        CHR Profile: C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default [2017-09-24]
        CHR Extension: (Google Презентации) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-09-11]
        CHR Extension: (Google Документи) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-09-11]
        CHR Extension: (Google Диск) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-11]
        CHR Extension: (YouTube) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-11]
        CHR Extension: (Video Downloader professional) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2017-08-04]
        CHR Extension: (Електронни таблици от Google) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-09-11]
        CHR Extension: (Farmville 2 Beacon) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdkkmnngogaccacpomdhdiahljbjihoc [2017-05-08]
        CHR Extension: (Google Документи офлайн) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-09-11]
        CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
        CHR Extension: (Gmail) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-09-11]
        CHR Extension: (Chrome Media Router) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-08]
        CHR Extension: (JobBoxPro) - C:\Users\Стоянчо\Downloads\Нова папка (6)\jobboxpro [2017-01-25]
        CHR Profile: C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-09-14]
        CHR Profile: C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\System Profile [2017-09-11]
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
        R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4424392 2017-09-08] (Microsoft Corporation)
        R2 gramblrclient; C:\Program Files\Gramblr\gramblr.exe [11867216 2017-09-23] () [File not signed]
        R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [337888 2016-05-03] (Intel Corporation)
        S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation)
        S2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1042304 2016-05-04] (Enigma Software Group USA, LLC.)
        R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [255584 2017-08-19] (Synaptics Incorporated)
        R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
        R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-30] (Microsoft Corporation)
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
        S3 EsgScanner; C:\WINDOWS\System32\DRIVERS\EsgScanner.sys [22704 2016-05-04] ()
        R1 MpKsl1045740a; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D1018B7D-39B5-48CE-97D7-3CAF92792300}\MpKsl1045740a.sys [44928 2017-09-24] (Microsoft Corporation)
        R3 netr28x; C:\WINDOWS\System32\drivers\netr28x.sys [2537984 2017-03-18] (MediaTek Inc.)
        R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [895224 2016-02-17] (Realtek )
        R3 rtbth; C:\WINDOWS\System32\drivers\rtbth.sys [1219200 2015-09-13] (Ralink Technology, Corp.)
        S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
        S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
        S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [23040 2017-03-18] (Microsoft Corporation)
        S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
        R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
        R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
        R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [30368 2017-06-21] (HP)
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-09-24 23:11 - 2017-09-24 23:12 - 000012716 _____ C:\Users\Стоянчо\Downloads\FRST.txt
        2017-09-24 23:10 - 2017-09-24 23:11 - 000000000 ____D C:\FRST
        2017-09-24 23:10 - 2017-09-24 23:10 - 002399744 _____ (Farbar) C:\Users\Стоянчо\Downloads\FRST64.exe
        2017-09-20 22:41 - 2017-09-20 22:43 - 000000000 ____D C:\Users\Стоянчо\Desktop\други
        2017-09-15 23:41 - 2017-09-15 23:41 - 017675071 _____ C:\Users\Стоянчо\Downloads\Milk and Honey- Didi(DVD Quality).mp4
        2017-09-13 07:05 - 2017-09-05 08:30 - 000287648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
        2017-09-13 07:05 - 2017-09-05 08:21 - 000189344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
        2017-09-13 07:05 - 2017-09-05 08:12 - 001409048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
        2017-09-13 07:05 - 2017-09-05 08:12 - 001292880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
        2017-09-13 07:05 - 2017-09-05 08:12 - 000627080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
        2017-09-13 07:05 - 2017-09-05 08:12 - 000081176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
        2017-09-13 07:05 - 2017-09-05 07:53 - 001839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
        2017-09-13 07:05 - 2017-09-05 07:52 - 002259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
        2017-09-13 07:05 - 2017-09-05 07:50 - 004330920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
        2017-09-13 07:05 - 2017-09-05 07:46 - 004471888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
        2017-09-13 07:05 - 2017-09-05 07:45 - 005821496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
        2017-09-13 07:05 - 2017-09-05 07:45 - 002476712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
        2017-09-13 07:05 - 2017-09-05 07:45 - 002166808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
        2017-09-13 07:05 - 2017-09-05 07:45 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
        2017-09-13 07:05 - 2017-09-05 07:45 - 000085784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialUIBroker.exe
        2017-09-13 07:05 - 2017-09-05 07:44 - 000569264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
        2017-09-13 07:05 - 2017-09-05 07:43 - 000611096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
        2017-09-13 07:05 - 2017-09-05 07:43 - 000359560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
        2017-09-13 07:05 - 2017-09-05 07:43 - 000280480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
        2017-09-13 07:05 - 2017-09-05 07:43 - 000169376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
        2017-09-13 07:05 - 2017-09-05 07:43 - 000042456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbs.dll
        2017-09-13 07:05 - 2017-09-05 07:42 - 002330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
        2017-09-13 07:05 - 2017-09-05 07:42 - 000703056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
        2017-09-13 07:05 - 2017-09-05 07:42 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
        2017-09-13 07:05 - 2017-09-05 07:42 - 000291904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
        2017-09-13 07:05 - 2017-09-05 07:42 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
        2017-09-13 07:05 - 2017-09-05 07:41 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
        2017-09-13 07:05 - 2017-09-05 07:41 - 006761560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
        2017-09-13 07:05 - 2017-09-05 07:41 - 004671832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
        2017-09-13 07:05 - 2017-09-05 07:41 - 001106904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
        2017-09-13 07:05 - 2017-09-05 07:41 - 001013912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
        2017-09-13 07:05 - 2017-09-05 07:40 - 000052768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll
        2017-09-13 07:05 - 2017-09-05 07:39 - 001517472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
        2017-09-13 07:05 - 2017-09-05 07:37 - 000583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
        2017-09-13 07:05 - 2017-09-05 07:28 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
        2017-09-13 07:05 - 2017-09-05 07:28 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys
        2017-09-13 07:05 - 2017-09-05 07:27 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
        2017-09-13 07:05 - 2017-09-05 07:26 - 002953216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
        2017-09-13 07:05 - 2017-09-05 07:26 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
        2017-09-13 07:05 - 2017-09-05 07:26 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
        2017-09-13 07:05 - 2017-09-05 07:25 - 013844480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
        2017-09-13 07:05 - 2017-09-05 07:25 - 001448960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
        2017-09-13 07:05 - 2017-09-05 07:25 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
        2017-09-13 07:05 - 2017-09-05 07:25 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
        2017-09-13 07:05 - 2017-09-05 07:24 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
        2017-09-13 07:05 - 2017-09-05 07:23 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
        2017-09-13 07:05 - 2017-09-05 07:22 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
        2017-09-13 07:05 - 2017-09-05 07:22 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
        2017-09-13 07:05 - 2017-09-05 07:21 - 006728704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
        2017-09-13 07:05 - 2017-09-05 07:21 - 001178624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
        2017-09-13 07:05 - 2017-09-05 07:21 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll
        2017-09-13 07:05 - 2017-09-05 07:21 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.exe
        2017-09-13 07:05 - 2017-09-05 07:20 - 000370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
        2017-09-13 07:05 - 2017-09-05 07:19 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
        2017-09-13 07:05 - 2017-09-05 07:19 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.dll
        2017-09-13 07:05 - 2017-09-05 07:19 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
        2017-09-13 07:05 - 2017-09-05 07:19 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput.dll
        2017-09-13 07:05 - 2017-09-05 07:18 - 000524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
        2017-09-13 07:05 - 2017-09-05 07:18 - 000471040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
        2017-09-13 07:05 - 2017-09-05 07:18 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll
        2017-09-13 07:05 - 2017-09-05 07:18 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput8.dll
        2017-09-13 07:05 - 2017-09-05 07:18 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll
        2017-09-13 07:05 - 2017-09-05 07:17 - 000918528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
        2017-09-13 07:05 - 2017-09-05 07:17 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll
        2017-09-13 07:05 - 2017-09-05 07:17 - 000586240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
        2017-09-13 07:05 - 2017-09-05 07:17 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
        2017-09-13 07:05 - 2017-09-05 07:16 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
        2017-09-13 07:05 - 2017-09-05 07:16 - 000844288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
        2017-09-13 07:05 - 2017-09-05 07:16 - 000563200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
        2017-09-13 07:05 - 2017-09-05 07:16 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
        2017-09-13 07:05 - 2017-09-05 07:16 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
        2017-09-13 07:05 - 2017-09-05 07:15 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
        2017-09-13 07:05 - 2017-09-05 07:15 - 000657408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
        2017-09-13 07:05 - 2017-09-05 07:15 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
        2017-09-13 07:05 - 2017-09-05 07:15 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
        2017-09-13 07:05 - 2017-09-05 07:15 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
        2017-09-13 07:05 - 2017-09-05 07:14 - 000754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
        2017-09-13 07:05 - 2017-09-05 07:14 - 000590336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
        2017-09-13 07:05 - 2017-09-05 07:14 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
        2017-09-13 07:05 - 2017-09-05 07:13 - 007598080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
        2017-09-13 07:05 - 2017-09-05 07:13 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
        2017-09-13 07:05 - 2017-09-05 07:12 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
        2017-09-13 07:05 - 2017-09-05 07:12 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
        2017-09-13 07:05 - 2017-09-05 07:12 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
        2017-09-13 07:05 - 2017-09-05 07:11 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
        2017-09-13 07:05 - 2017-09-05 07:11 - 001355264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
        2017-09-13 07:05 - 2017-09-05 07:11 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
        2017-09-13 07:05 - 2017-09-05 07:11 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
        2017-09-13 07:05 - 2017-09-05 07:11 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
        2017-09-13 07:05 - 2017-09-05 07:10 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
        2017-09-13 07:05 - 2017-09-05 07:10 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
        2017-09-13 07:05 - 2017-09-05 07:10 - 000761344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
        2017-09-13 07:05 - 2017-09-05 07:10 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthHFSrv.dll
        2017-09-13 07:05 - 2017-09-05 07:06 - 000221696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll
        2017-09-13 07:05 - 2017-09-05 07:06 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
        2017-09-13 07:05 - 2017-09-05 07:04 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RstrtMgr.dll
        2017-09-13 07:05 - 2017-09-05 07:04 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
        2017-09-13 07:04 - 2017-09-05 08:27 - 002399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
        2017-09-13 07:04 - 2017-09-05 08:27 - 000136096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
        2017-09-13 07:04 - 2017-09-05 08:25 - 002969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
        2017-09-13 07:04 - 2017-09-05 08:24 - 000519584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
        2017-09-13 07:04 - 2017-09-05 08:23 - 001242528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
        2017-09-13 07:04 - 2017-09-05 08:18 - 000820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
        2017-09-13 07:04 - 2017-09-05 08:17 - 000316320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
        2017-09-13 07:04 - 2017-09-05 08:16 - 000724200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
        2017-09-13 07:04 - 2017-09-05 08:16 - 000546208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
        2017-09-13 07:04 - 2017-09-05 08:16 - 000410168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
        2017-09-13 07:04 - 2017-09-05 08:16 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
        2017-09-13 07:04 - 2017-09-05 08:14 - 004708504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
        2017-09-13 07:04 - 2017-09-05 08:14 - 001146176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
        2017-09-13 07:04 - 2017-09-05 08:14 - 000958664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
        2017-09-13 07:04 - 2017-09-05 08:14 - 000254176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
        2017-09-13 07:04 - 2017-09-05 08:14 - 000094624 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
        2017-09-13 07:04 - 2017-09-05 08:11 - 002675104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
        2017-09-13 07:04 - 2017-09-05 08:11 - 000610720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
        2017-09-13 07:04 - 2017-09-05 08:11 - 000387936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
        2017-09-13 07:04 - 2017-09-05 07:53 - 001620880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
        2017-09-13 07:04 - 2017-09-05 07:45 - 023679488 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
        2017-09-13 07:04 - 2017-09-05 07:29 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SEMgrPS.dll
        2017-09-13 07:04 - 2017-09-05 07:27 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
        2017-09-13 07:04 - 2017-09-05 07:27 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
        2017-09-13 07:04 - 2017-09-05 07:27 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
        2017-09-13 07:04 - 2017-09-05 07:26 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
        2017-09-13 07:04 - 2017-09-05 07:26 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.exe
        2017-09-13 07:04 - 2017-09-05 07:26 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnpinst.exe
        2017-09-13 07:04 - 2017-09-05 07:25 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys
        2017-09-13 07:04 - 2017-09-05 07:24 - 000457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
        2017-09-13 07:04 - 2017-09-05 07:24 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.dll
        2017-09-13 07:04 - 2017-09-05 07:24 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
        2017-09-13 07:04 - 2017-09-05 07:24 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcrecovery.dll
        2017-09-13 07:04 - 2017-09-05 07:24 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
        2017-09-13 07:04 - 2017-09-05 07:23 - 020509184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
        2017-09-13 07:04 - 2017-09-05 07:23 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
        2017-09-13 07:04 - 2017-09-05 07:23 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 023684608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
        2017-09-13 07:04 - 2017-09-05 07:22 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetpp.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
        2017-09-13 07:04 - 2017-09-05 07:21 - 001051136 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
        2017-09-13 07:04 - 2017-09-05 07:21 - 000946688 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll
        2017-09-13 07:04 - 2017-09-05 07:21 - 000422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
        2017-09-13 07:04 - 2017-09-05 07:21 - 000408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
        2017-09-13 07:04 - 2017-09-05 07:21 - 000312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
        2017-09-13 07:04 - 2017-09-05 07:21 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
        2017-09-13 07:04 - 2017-09-05 07:20 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
        2017-09-13 07:04 - 2017-09-05 07:20 - 000546816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
        2017-09-13 07:04 - 2017-09-05 07:19 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
        2017-09-13 07:04 - 2017-09-05 07:19 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
        2017-09-13 07:04 - 2017-09-05 07:19 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 012801536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 002078720 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
        2017-09-13 07:04 - 2017-09-05 07:18 - 000921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 000832000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelinesvc.exe
        2017-09-13 07:04 - 2017-09-05 07:18 - 000752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 000266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
        2017-09-13 07:04 - 2017-09-05 07:17 - 008213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
        2017-09-13 07:04 - 2017-09-05 07:17 - 008207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
        2017-09-13 07:04 - 2017-09-05 07:17 - 000757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
        2017-09-13 07:04 - 2017-09-05 07:16 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
        2017-09-13 07:04 - 2017-09-05 07:15 - 004730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
        2017-09-13 07:04 - 2017-09-05 07:15 - 001143296 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
        2017-09-13 07:04 - 2017-09-05 07:15 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
        2017-09-13 07:04 - 2017-09-05 07:15 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
        2017-09-13 07:04 - 2017-09-05 07:14 - 011887104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
        2017-09-13 07:04 - 2017-09-05 07:14 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
        2017-09-13 07:04 - 2017-09-05 07:14 - 001657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
        2017-09-13 07:04 - 2017-09-05 07:14 - 001583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
        2017-09-13 07:04 - 2017-09-05 07:14 - 001046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
        2017-09-13 07:04 - 2017-09-05 07:14 - 000827904 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
        2017-09-13 07:04 - 2017-09-05 07:13 - 002009600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
        2017-09-13 07:04 - 2017-09-05 07:12 - 006265856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
        2017-09-13 07:04 - 2017-09-05 07:11 - 003654656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
        2017-09-13 07:04 - 2017-09-05 07:11 - 001463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
        2017-09-13 07:04 - 2017-09-05 07:06 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
        2017-09-13 07:03 - 2017-09-05 08:31 - 001596592 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
        2017-09-13 07:03 - 2017-09-05 08:31 - 001346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
        2017-09-13 07:03 - 2017-09-05 08:31 - 001147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
        2017-09-13 07:03 - 2017-09-05 08:31 - 001024928 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
        2017-09-13 07:03 - 2017-09-05 08:31 - 000821664 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
        2017-09-13 07:03 - 2017-09-05 08:31 - 000750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
        2017-09-13 07:03 - 2017-09-05 08:31 - 000115792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
        2017-09-13 07:03 - 2017-09-05 08:26 - 008319904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
        2017-09-13 07:03 - 2017-09-05 08:26 - 001930840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
        2017-09-13 07:03 - 2017-09-05 08:25 - 000159648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
        2017-09-13 07:03 - 2017-09-05 08:24 - 000923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
        2017-09-13 07:03 - 2017-09-05 08:23 - 004462120 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
        2017-09-13 07:03 - 2017-09-05 08:20 - 001057824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
        2017-09-13 07:03 - 2017-09-05 08:19 - 004848960 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
        2017-09-13 07:03 - 2017-09-05 08:19 - 002443168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
        2017-09-13 07:03 - 2017-09-05 08:18 - 007326128 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
        2017-09-13 07:03 - 2017-09-05 08:18 - 005477096 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
        2017-09-13 07:03 - 2017-09-05 08:18 - 002972552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
        2017-09-13 07:03 - 2017-09-05 08:18 - 002647224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
        2017-09-13 07:03 - 2017-09-05 08:18 - 001668344 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
        2017-09-13 07:03 - 2017-09-05 08:18 - 000685512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
        2017-09-13 07:03 - 2017-09-05 08:18 - 000212384 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
        2017-09-13 07:03 - 2017-09-05 08:16 - 001320344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
        2017-09-13 07:03 - 2017-09-05 08:16 - 000872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
        2017-09-13 07:03 - 2017-09-05 08:16 - 000715168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
        2017-09-13 07:03 - 2017-09-05 08:16 - 000228256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
        2017-09-13 07:03 - 2017-09-05 08:16 - 000049720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbs.dll
        2017-09-13 07:03 - 2017-09-05 08:15 - 003116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
        2017-09-13 07:03 - 2017-09-05 08:15 - 000871448 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
        2017-09-13 07:03 - 2017-09-05 08:15 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
        2017-09-13 07:03 - 2017-09-05 08:15 - 000381824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
        2017-09-13 07:03 - 2017-09-05 08:15 - 000257440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
        2017-09-13 07:03 - 2017-09-05 08:14 - 021352656 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
        2017-09-13 07:03 - 2017-09-05 08:14 - 007907344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
        2017-09-13 07:03 - 2017-09-05 08:13 - 001619816 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
        2017-09-13 07:03 - 2017-09-05 08:13 - 000078240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncAppvPublishingServer.exe
        2017-09-13 07:03 - 2017-09-05 08:13 - 000064680 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 002229152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 001854880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 001693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 001462688 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000855456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000849824 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
        2017-09-13 07:03 - 2017-09-05 08:12 - 000844704 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000774560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000699808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000674720 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000406944 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000235424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe
        2017-09-13 07:03 - 2017-09-05 08:12 - 000203680 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamingUX.dll
        2017-09-13 07:03 - 2017-09-05 07:31 - 003668992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
        2017-09-13 07:03 - 2017-09-05 07:30 - 001639936 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
        2017-09-13 07:03 - 2017-09-05 07:30 - 001275904 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
        2017-09-13 07:03 - 2017-09-05 07:30 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
        2017-09-13 07:03 - 2017-09-05 07:30 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
        2017-09-13 07:03 - 2017-09-05 07:30 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
        2017-09-13 07:03 - 2017-09-05 07:30 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
        2017-09-13 07:03 - 2017-09-05 07:30 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
        2017-09-13 07:03 - 2017-09-05 07:30 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrvext.dll
        2017-09-13 07:03 - 2017-09-05 07:30 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
        2017-09-13 07:03 - 2017-09-05 07:28 - 017371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
        2017-09-13 07:03 - 2017-09-05 07:28 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
        2017-09-13 07:03 - 2017-09-05 07:27 - 007931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
        2017-09-13 07:03 - 2017-09-05 07:27 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\CfgSPCellular.dll
        2017-09-13 07:03 - 2017-09-05 07:27 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAPNCsp.dll
        2017-09-13 07:03 - 2017-09-05 07:27 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\datamarketsvc.dll
        2017-09-13 07:03 - 2017-09-05 07:27 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
        2017-09-13 07:03 - 2017-09-05 07:26 - 000499712 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
        2017-09-13 07:03 - 2017-09-05 07:26 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\csplte.dll
        2017-09-13 07:03 - 2017-09-05 07:26 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
        2017-09-13 07:03 - 2017-09-05 07:26 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
        2017-09-13 07:03 - 2017-09-05 07:26 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
        2017-09-13 07:03 - 2017-09-05 07:25 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
        2017-09-13 07:03 - 2017-09-05 07:25 - 000527872 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
        2017-09-13 07:03 - 2017-09-05 07:25 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
        2017-09-13 07:03 - 2017-09-05 07:25 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
        2017-09-13 07:03 - 2017-09-05 07:24 - 000385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvsc.dll
        2017-09-13 07:03 - 2017-09-05 07:24 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
        2017-09-13 07:03 - 2017-09-05 07:24 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput.dll
        2017-09-13 07:03 - 2017-09-05 07:24 - 000109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
        2017-09-13 07:03 - 2017-09-05 07:23 - 000739840 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
        2017-09-13 07:03 - 2017-09-05 07:23 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
        2017-09-13 07:03 - 2017-09-05 07:23 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
        2017-09-13 07:03 - 2017-09-05 07:23 - 000305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
        2017-09-13 07:03 - 2017-09-05 07:23 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
        2017-09-13 07:03 - 2017-09-05 07:23 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll
        2017-09-13 07:03 - 2017-09-05 07:22 - 000556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
        2017-09-13 07:03 - 2017-09-05 07:22 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
        2017-09-13 07:03 - 2017-09-05 07:22 - 000413184 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
        2017-09-13 07:03 - 2017-09-05 07:22 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
        2017-09-13 07:03 - 2017-09-05 07:22 - 000213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput8.dll
        2017-09-13 07:03 - 2017-09-05 07:21 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
        2017-09-13 07:03 - 2017-09-05 07:21 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
        2017-09-13 07:03 - 2017-09-05 07:20 - 007337472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
        2017-09-13 07:03 - 2017-09-05 07:20 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
        2017-09-13 07:03 - 2017-09-05 07:20 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
        2017-09-13 07:03 - 2017-09-05 07:20 - 000412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
        2017-09-13 07:03 - 2017-09-05 07:20 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
        2017-09-13 07:03 - 2017-09-05 07:20 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
        2017-09-13 07:03 - 2017-09-05 07:19 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
        2017-09-13 07:03 - 2017-09-05 07:19 - 001085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
        2017-09-13 07:03 - 2017-09-05 07:19 - 001028608 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
        2017-09-13 07:03 - 2017-09-05 07:19 - 000996864 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
        2017-09-13 07:03 - 2017-09-05 07:19 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
        2017-09-13 07:03 - 2017-09-05 07:19 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
        2017-09-13 07:03 - 2017-09-05 07:19 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 004175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 000922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 000874496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 000803328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
        2017-09-13 07:03 - 2017-09-05 07:17 - 002765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
        2017-09-13 07:03 - 2017-09-05 07:17 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
        2017-09-13 07:03 - 2017-09-05 07:17 - 001397760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
        2017-09-13 07:03 - 2017-09-05 07:16 - 002805248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
        2017-09-13 07:03 - 2017-09-05 07:16 - 002680320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
        2017-09-13 07:03 - 2017-09-05 07:16 - 000440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
        2017-09-13 07:03 - 2017-09-05 07:16 - 000397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 004396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 003307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 003059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 002503680 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 002055680 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
        2017-09-13 07:03 - 2017-09-05 07:15 - 001736704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 001460224 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 001077248 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 000706560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
        2017-09-13 07:03 - 2017-09-05 07:14 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
        2017-09-13 07:03 - 2017-09-05 07:14 - 002445824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
        2017-09-13 07:03 - 2017-09-05 07:14 - 002177024 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
        2017-09-13 07:03 - 2017-09-05 07:14 - 002006528 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
        2017-09-13 07:03 - 2017-09-05 07:14 - 000986624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
        2017-09-13 07:03 - 2017-09-05 07:14 - 000810496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
        2017-09-13 07:03 - 2017-09-05 07:13 - 001802752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
        2017-09-13 07:03 - 2017-09-05 07:13 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
        2017-09-13 07:03 - 2017-09-05 07:12 - 002153984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
        2017-09-13 07:03 - 2017-09-05 07:11 - 000254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
        2017-09-13 07:03 - 2017-09-05 07:09 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll
        2017-09-13 07:03 - 2017-09-05 07:07 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\RstrtMgr.dll
        2017-09-13 07:03 - 2017-09-05 07:07 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll
        2017-09-13 07:03 - 2017-09-01 08:55 - 000031932 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
        2017-08-25 23:36 - 2017-09-13 21:06 - 000000000 ____D C:\Users\Стоянчо\Desktop\red
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-09-24 23:13 - 2017-02-05 23:56 - 000000000 ____D C:\ProgramData\Gramblr
        2017-09-24 22:54 - 2017-06-18 07:23 - 000000000 ____D C:\Users\Стоянчо\Desktop\яяь
        2017-09-24 20:10 - 2017-06-30 01:05 - 000004212 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{33349A0F-B0C0-4DB3-AFE6-0F51132F45D5}
        2017-09-24 19:38 - 2017-06-30 00:42 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
        2017-09-24 17:36 - 2017-06-30 01:05 - 000004276 _____ C:\WINDOWS\System32\Tasks\Software Updater
        2017-09-24 13:12 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\AppReadiness
        2017-09-24 13:06 - 2015-09-13 15:31 - 000000000 __SHD C:\Users\Стоянчо\IntelGraphicsProfiles
        2017-09-23 19:06 - 2015-09-13 15:01 - 000000000 ____D C:\Users\Стоянчо\AppData\Local\Packages
        2017-09-23 19:04 - 2015-09-25 17:35 - 000000000 ____D C:\Users\Стоянчо\AppData\Roaming\uTorrent
        2017-09-23 18:02 - 2017-07-18 10:48 - 000001085 _____ C:\Users\Стоянчо\Desktop\Нов текстов документ.txt
        2017-09-23 15:14 - 2017-02-05 23:57 - 000000000 ____D C:\Program Files\Gramblr
        2017-09-23 13:05 - 2017-06-30 01:03 - 002547028 _____ C:\WINDOWS\system32\PerfStringBackup.INI
        2017-09-23 13:05 - 2015-12-04 21:09 - 001132696 _____ C:\WINDOWS\system32\perfh002.dat
        2017-09-23 13:05 - 2015-12-04 21:09 - 000334978 _____ C:\WINDOWS\system32\perfc002.dat
        2017-09-23 13:00 - 2017-06-30 01:05 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
        2017-09-23 13:00 - 2017-03-18 14:40 - 001572864 _____ C:\WINDOWS\system32\config\BBI
        2017-09-23 07:37 - 2017-03-19 00:03 - 000000000 ___HD C:\Program Files\WindowsApps
        2017-09-22 07:46 - 2017-06-30 00:48 - 000000000 ____D C:\Users\Стоянчо
        2017-09-22 06:18 - 2017-07-27 20:57 - 000003382 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3274723310-3931731729-1199849900-1001
        2017-09-22 06:17 - 2015-09-13 15:03 - 000002401 _____ C:\Users\Стоянчо\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
        2017-09-22 06:17 - 2015-09-13 15:03 - 000000000 ___RD C:\Users\Стоянчо\OneDrive
        2017-09-19 06:55 - 2015-10-09 22:20 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
        2017-09-18 21:49 - 2017-03-19 00:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
        2017-09-14 02:24 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\rescache
        2017-09-14 02:16 - 2017-03-19 00:01 - 000000000 ____D C:\WINDOWS\INF
        2017-09-13 18:18 - 2015-09-13 15:01 - 000000000 __RHD C:\Users\Public\AccountPictures
        2017-09-13 18:15 - 2017-06-30 00:42 - 000381448 _____ C:\WINDOWS\system32\FNTCACHE.DAT
        2017-09-13 07:44 - 2017-03-20 06:21 - 000000000 ____D C:\WINDOWS\system32\bg
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ___SD C:\WINDOWS\system32\F12
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\system32\setup
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\ShellExperiences
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
        2017-09-13 07:20 - 2015-09-13 17:14 - 000000000 ____D C:\WINDOWS\system32\MRT
        2017-09-13 07:16 - 2017-03-18 23:51 - 000000000 ____D C:\WINDOWS\CbsTemp
        2017-09-13 07:16 - 2015-09-13 17:14 - 138202976 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
        2017-09-02 18:15 - 2017-03-19 00:06 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
        2017-09-02 18:15 - 2017-03-19 00:06 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
        2017-08-29 06:58 - 2016-09-11 19:33 - 000002270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
        2017-08-26 15:34 - 2017-08-05 17:48 - 000000000 ____D C:\Users\Стоянчо\Desktop\;[;.[plpl
        2017-08-25 07:37 - 2017-07-28 23:11 - 000000000 ____D C:\Users\Стоянчо\Desktop\dfere
        ==================== Files in the root of some directories =======
        2016-01-17 08:06 - 2017-07-17 07:19 - 000009216 _____ () C:\Users\Стоянчо\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
        2016-07-17 20:30 - 2016-07-17 20:30 - 000000036 _____ () C:\Users\Стоянчо\AppData\Local\housecall.guid.cache
        2015-09-13 15:16 - 2015-09-13 15:16 - 000000003 _____ () C:\Users\Стоянчо\AppData\Local\updater.log
        2015-09-13 15:16 - 2017-05-06 19:17 - 000000425 _____ () C:\Users\Стоянчо\AppData\Local\UserProducts.xml
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\WINDOWS\system32\winlogon.exe => File is digitally signed
        C:\WINDOWS\system32\wininit.exe => File is digitally signed
        C:\WINDOWS\explorer.exe => File is digitally signed
        C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
        C:\WINDOWS\system32\svchost.exe => File is digitally signed
        C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
        C:\WINDOWS\system32\services.exe => File is digitally signed
        C:\WINDOWS\system32\User32.dll => File is digitally signed
        C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
        C:\WINDOWS\system32\userinit.exe => File is digitally signed
        C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
        C:\WINDOWS\system32\rpcss.dll => File is digitally signed
        C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
        C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
        C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
        LastRegBack: 2017-09-19 19:38
        ==================== End of FRST.txt ============================
         
        Addition.txt
         
        Благодаря предварително.
    • Разглеждащи в момента   0 потребители

      Няма регистрирани потребители разглеждащи тази страница.

    • Дарение

    ×

    Информация

    Този сайт използва бисквитки (cookies), за най-доброто потребителско изживяване. С използването му, вие приемате нашите Условия за ползване.