Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

Троянски кон Инжектор DBMA

6 юли 201610 г.

Вчера един приятел който е малко извънземен седна на компа и го хакна :). По голям хакер от тоя дето не знае кво праи няма в това съм убеден. Дойде ми на гости и го оставих за 1 мин. без наблюдение и го видях да отваря Internet Explorer макар имаше google chrome, но нали ви казах той е извънземен и минавам през стаята и го гледам че му изкачат някви работи и той натиска кото дойде. Но нямах време да го видя имах си работа малко. Идвам след това, сядам и започнаха проблемите мишка + десен бутон, менюто се показва и изчезва за част от секундата, Отварям папки с един клик, и разбрах че съм зарезен, Отворих антивирусната и тя тъкмо ми извади съобщение за вирус. Пуснах да се сканира и извади това и още имаше два, нещо свързани със скайп. Пък аз скайп не ползвам от няколко месеца, но го имам инсталиран. Сканирането свърши даже антивирусната не ми изкара съобщение за лог, и реших да изтрия вирусите от карантината. Изскочи съобщение че иска рестарт за да се завърши изтриването. 4 рестарта ми искаше. Както и да е малко се поуспокоиха нещата. Но не мисля че съм го премахнал на цяло. Забелязах сега че ми сече когато скролирам страници в нета, както и до като пиша!

http://imageshack.com/a/img922/5853/mMkVTd.jpg

Win 8.1 64bit

6 юли 201610 г.

Автор

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02-07-2016
Ran by Freeware Sys (administrator) on SOBIESKICLUB (06-07-2016 23:22:58)
Running from D:\Download\GOOGLE DWN
Loaded Profiles: Freeware Sys (Available Profiles: Freeware Sys & Само за ботове)
Platform: Windows 8.1 Pro (Update) (X64) Language: Английски (Съединени щати)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BCA\pabeSvc64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Microsoft Corporation) C:\Windows\System32\Locator.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Lenovo) C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.334\SSScheduler.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Program Files (x86)\DearMob\5KPlayer\5KPlayer.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McTD25A.tmp
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe
(AIMP DevTeam) C:\Program Files (x86)\AIMP3\AIMP3.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Google Inc.) C:\Users\Freeware Sys\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Freeware Sys\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Freeware Sys\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Freeware Sys\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Freeware Sys\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Freeware Sys\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Freeware Sys\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671792 2014-03-14] (Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5595848 2015-07-09] (ESET)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [MagicPlusHelper] => C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe [2499240 2014-08-27] (Lenovo)
HKLM-x32\...\Run: [5KPlayer.exe] => C:\Program Files (x86)\DearMob\5KPlayer\5KPlayer.exe [4145744 2016-02-26] ()
HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [1523360 2011-01-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-985571877-2983658597-1096150994-1001\...\Run: [Google Update] => C:\Users\Freeware Sys\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2016-01-30] (Google Inc.)
HKU\S-1-5-21-985571877-2983658597-1096150994-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2917456 2016-06-15] (Valve Corporation)
HKU\S-1-5-21-985571877-2983658597-1096150994-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-985571877-2983658597-1096150994-1001\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [842048 2011-03-17] (DT Soft Ltd)
HKU\S-1-5-21-985571877-2983658597-1096150994-1001\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-985571877-2983658597-1096150994-1001\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-21-985571877-2983658597-1096150994-1001\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-21-985571877-2983658597-1096150994-1001\...\Policies\Explorer: [NoCDBurning] 1
HKU\S-1-5-21-985571877-2983658597-1096150994-1001\...\MountPoints2: F - "F:\Autorun.exe"
HKU\S-1-5-21-985571877-2983658597-1096150994-1001\...\MountPoints2: {0d944bbe-169b-11e6-8286-408d5c38df90} - "E:\setup.exe"
HKU\S-1-5-21-985571877-2983658597-1096150994-1001\...\MountPoints2: {23ea0122-04a8-11e6-827b-408d5c38df90} - "F:\setup.exe"
HKU\S-1-5-21-985571877-2983658597-1096150994-1001\...\MountPoints2: {2d9800b1-0b83-11e6-827f-408d5c38df90} - "G:\Lenovo_Suite.exe"
HKU\S-1-5-21-985571877-2983658597-1096150994-1001\...\MountPoints2: {43902d9f-2f29-11e6-829e-408d5c38df90} - "G:\setup.exe"
HKU\S-1-5-21-985571877-2983658597-1096150994-1001\...\MountPoints2: {8a964c11-fc01-11e5-8276-408d5c38df90} - "F:\Autorun.exe"
HKU\S-1-5-18\...\RunOnce: [WTK_IE_Google_Search] => REG ADD HKCU\Software\Microsoft\Internet Explorer\SearchScopes /v DefaultScope /t REG_SZ /d {637D6E3C-DF93-48A5-8362-159A8AC56B11} /f
HKU\S-1-5-18\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-18\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-18\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-18\...\Policies\Explorer: [NoCDBurning] 1
HKU\S-1-5-18\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2016-06-25]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.334\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Freeware Sys\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sidebar314.lnk [2016-07-06]
ShortcutTarget: Sidebar314.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{DE81AB80-16A3-4985-90CB-86B038F86BBA}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-985571877-2983658597-1096150994-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = www.freewaresys.com
HKU\S-1-5-21-985571877-2983658597-1096150994-1001\Software\Microsoft\Internet Explorer\Main,Start Page = www.freewaresys.com
HKU\S-1-5-21-985571877-2983658597-1096150994-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.msn.com/?pc=U270&ocid=U270DHP&osmkt=en-us
SearchScopes: HKLM -> DefaultScope {637D6E3C-DF93-48A5-8362-159A8AC56B11} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {637D6E3C-DF93-48A5-8362-159A8AC56B11} URL = hxxp://www.google.com/search?hl=en&q={searchTerms}&meta=
SearchScopes: HKU\.DEFAULT -> {637D6E3C-DF93-48A5-8362-159A8AC56B11} URL = hxxp://www.google.com/search?hl=en&q={searchTerms}&meta=
SearchScopes: HKU\S-1-5-21-985571877-2983658597-1096150994-1001 -> DefaultScope {637D6E3C-DF93-48A5-8362-159A8AC56B11} URL = hxxp://www.google.com/search?hl=en&q={searchTerms}&meta=
SearchScopes: HKU\S-1-5-21-985571877-2983658597-1096150994-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=U270DF&PC=U270&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-985571877-2983658597-1096150994-1001 -> {637D6E3C-DF93-48A5-8362-159A8AC56B11} URL = hxxp://www.google.com/search?hl=en&q={searchTerms}&meta=
BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2016-06-29] (Intel Security)
Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2016-06-29] (Intel Security)

FireFox:
========
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-06-03] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-06-03] (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-985571877-2983658597-1096150994-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Freeware Sys\AppData\Local\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin HKU\S-1-5-21-985571877-2983658597-1096150994-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Freeware Sys\AppData\Local\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)

Chrome:
=======
CHR HomePage: Default -> msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us
CHR StartupUrls: Default -> "hxxps://www.google.bg/"
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC=__PARAM__&q={searchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR Profile: C:\Users\Freeware Sys\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (QR код) - C:\Users\Freeware Sys\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaephdgbinagkeepamlbkhkfbiaedabm [2016-01-30]
CHR Extension: (Google Презентации) - C:\Users\Freeware Sys\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-01-30]
CHR Extension: (Google Документи) - C:\Users\Freeware Sys\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-30]
CHR Extension: (Google Диск) - C:\Users\Freeware Sys\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-30]
CHR Extension: (YouTube) - C:\Users\Freeware Sys\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-30]
CHR Extension: (Google Търсене) - C:\Users\Freeware Sys\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-30]
CHR Extension: (YOU.DJ app) - C:\Users\Freeware Sys\AppData\Local\Google\Chrome\User Data\Default\Extensions\defekohaofmambflfpfoojkmfdpcbgko [2016-03-07]
CHR Extension: (Електронни таблици от Google) - C:\Users\Freeware Sys\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-30]
CHR Extension: (Часовник) - C:\Users\Freeware Sys\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdkjifoifglkpcdffkenpinlbjgephlo [2016-01-30]
CHR Extension: (Speed Test) - C:\Users\Freeware Sys\AppData\Local\Google\Chrome\User Data\Default\Extensions\hlhbmnfdcklajeaeikfinieljfegamko [2016-01-30]
CHR Extension: (Calculator) - C:\Users\Freeware Sys\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdkgihpbaofhkiliohfepioflkkbapao [2016-01-30]
CHR Extension: (Numerics Calculator & Converter) - C:\Users\Freeware Sys\AppData\Local\Google\Chrome\User Data\Default\Extensions\liglcienpnkhdajdfmnpbgmpjglonipe [2016-01-30]
CHR Extension: (Currency Converter) - C:\Users\Freeware Sys\AppData\Local\Google\Chrome\User Data\Default\Extensions\lndokegkpdlafochibjpgjglkcamdpip [2016-01-30]
CHR Extension: (Onlive Clock) - C:\Users\Freeware Sys\AppData\Local\Google\Chrome\User Data\Default\Extensions\moddbcckaikhdnigidfcmaeelcobchpm [2016-04-28]
CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\Freeware Sys\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-05]
CHR Extension: (Онлайн Music Alarm Clock) - C:\Users\Freeware Sys\AppData\Local\Google\Chrome\User Data\Default\Extensions\pblohfmipkhnjcgpoamnmjelcajhpcjg [2016-01-30]
CHR Extension: (My IP адрес) - C:\Users\Freeware Sys\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfhoeoiodcebkkigjiooibeccnfmmkoe [2016-01-30]
CHR Extension: (Gmail) - C:\Users\Freeware Sys\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-30]
CHR HKU\S-1-5-21-985571877-2983658597-1096150994-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 0001371467816287mcinstcleanup; C:\Windows\TEMP\000137~1.EXE [922152 2016-03-02] (McAfee, Inc.)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [1353720 2015-07-09] (ESET)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [355232 2015-08-09] (Intel Corporation)
R2 IntelBCAsvc; C:\Program Files\Intel\BCA\pabeSvc64.exe [3026584 2016-05-06] (Intel(R) Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.334\McCHSvc.exe [293128 2016-05-31] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [905672 2016-06-22] (McAfee, Inc.)
R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [15736 2016-06-22] (McAfee, Inc.)
S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [86864 2016-06-22] (McAfee, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
S2 InstallerService; "C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe" [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [272448 2016-04-17] (DT Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [255240 2015-07-15] (ESET)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [251632 2015-07-15] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [178520 2015-07-15] (ESET)
R2 epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [168208 2015-07-15] (ESET)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [46016 2016-06-03] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [18768 2016-05-08] () [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2016-04-09] (Duplex Secure Ltd.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-07-06 23:22 - 2016-07-06 23:22 - 00000000 ____D C:\FRST
2016-07-04 00:15 - 2016-07-04 00:15 - 00000000 ____D C:\Users\Freeware Sys\AppData\LocalLow\Temp
2016-07-03 13:06 - 2014-07-07 12:05 - 02412376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2016-07-03 13:04 - 2014-05-20 11:44 - 02785568 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2016-07-02 22:13 - 2016-07-02 22:13 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-07-02 22:13 - 2016-06-03 06:19 - 00113208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-07-02 22:13 - 2016-05-04 05:23 - 00129824 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-07-02 22:13 - 2016-05-04 05:22 - 00130848 _____ C:\Windows\system32\vulkan-1.dll
2016-07-02 22:13 - 2016-05-04 05:22 - 00045344 _____ C:\Windows\system32\vulkaninfo.exe
2016-07-02 22:13 - 2016-05-04 05:22 - 00040224 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-07-02 22:11 - 2016-07-02 22:13 - 00000000 ____D C:\Windows\LastGood.Tmp
2016-07-02 22:11 - 2016-06-03 10:38 - 39979576 _____ C:\Windows\system32\nvcompiler.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 35115456 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 31603768 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 25377848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 21802280 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 21346712 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 18143912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 17738592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 16756888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 13460536 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-07-02 22:11 - 2016-06-03 10:38 - 10643240 _____ C:\Windows\system32\nvptxJitCompiler.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 08733608 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 03512888 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 03065280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 01922616 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436839.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 01581624 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 01571776 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436839.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00985144 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00908736 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00878816 _____ C:\Windows\system32\nvmcumd.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00769984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00707520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00669952 _____ C:\Windows\system32\nvfatbinaryLoader.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00565392 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00502080 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00476664 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00425016 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00422752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00394912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00379448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00178136 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00155768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00153416 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00141256 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-07-02 22:11 - 2016-06-03 10:38 - 00131768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00126008 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcaparm.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00046024 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-07-02 22:11 - 2016-06-03 10:38 - 00046016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvadarm.sys
2016-07-02 22:11 - 2016-06-03 10:38 - 00000594 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-07-02 22:11 - 2016-06-03 10:38 - 00000594 _____ C:\Windows\system32\nv-vk64.json
2016-07-02 20:47 - 2016-07-02 20:47 - 00000021 _____ C:\Users\Freeware Sys\Desktop\asdas.txt
2016-06-25 23:27 - 2016-06-25 23:27 - 00001980 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2016-06-25 23:27 - 2016-06-25 23:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2016-06-22 18:08 - 2016-06-22 18:08 - 00001857 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2016-06-22 18:08 - 2016-06-22 18:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2016-06-22 18:07 - 2016-06-22 18:07 - 00000000 ____D C:\ProgramData\Apple Computer
2016-06-22 18:01 - 2016-06-22 18:01 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2016-06-22 18:01 - 2016-06-22 18:01 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2016-06-21 14:26 - 2016-06-21 14:26 - 00000000 ____D C:\Users\Freeware Sys\AppData\Roaming\Apple Computer
2016-06-21 09:22 - 2016-06-22 18:01 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-06-21 09:22 - 2016-06-21 09:22 - 00000000 ____D C:\Users\Freeware Sys\AppData\Local\Apple
2016-06-21 09:21 - 2016-06-21 09:21 - 00000000 ____D C:\Users\Freeware Sys\AppData\LocalLow\Apple Computer
2016-06-20 10:06 - 2016-06-20 10:06 - 00022200 _____ (Phoenix Technologies) C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS
2016-06-20 10:06 - 2016-06-20 10:06 - 00000000 ____D C:\Users\Freeware Sys\AppData\Local\eSupport.com
2016-06-18 16:55 - 2016-07-03 01:12 - 00000000 ____D C:\Users\Freeware Sys\Documents\The Witcher 3
2016-06-18 16:55 - 2016-06-18 16:55 - 00000000 ____D C:\Users\Freeware Sys\AppData\Roaming\Steam
2016-06-18 16:52 - 2016-06-18 16:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Witcher 3 Wild Hunt Blood and Wine
2016-06-17 17:17 - 2016-06-17 17:17 - 00000000 ____D C:\Users\Freeware Sys\Documents\Command & Conquer 3 Tiberium Wars
2016-06-17 10:31 - 2016-06-17 10:31 - 00000000 ____D C:\Program Files\MSI Kombustor 3
2016-06-17 10:13 - 2016-06-17 10:13 - 00001615 _____ C:\Users\Freeware Sys\Desktop\RTSS.lnk
2016-06-17 09:38 - 2016-06-17 09:38 - 00000780 _____ C:\Users\Public\Desktop\Fraps.lnk
2016-06-17 09:38 - 2016-06-17 09:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2016-06-17 09:38 - 2016-06-17 09:38 - 00000000 ____D C:\Program Files\Fraps
2016-06-14 22:13 - 2016-05-06 18:45 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-06-14 22:13 - 2016-05-06 18:23 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2016-06-14 22:13 - 2016-04-12 18:46 - 14467584 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-06-14 22:13 - 2016-04-12 18:30 - 12879872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-06-14 22:11 - 2016-05-12 21:38 - 00135336 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2016-06-14 22:11 - 2016-05-12 20:43 - 00115704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2016-06-14 22:11 - 2016-05-12 19:24 - 00678912 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2016-06-14 22:11 - 2016-05-12 19:17 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
2016-06-14 22:11 - 2016-05-12 19:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.dll
2016-06-14 22:11 - 2016-05-12 19:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2016-06-14 22:11 - 2016-05-12 19:07 - 01360896 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-06-14 22:11 - 2016-05-12 18:59 - 00398848 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2016-06-14 22:11 - 2016-05-12 18:48 - 00580096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll
2016-06-14 22:11 - 2016-05-12 18:43 - 00291328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\polstore.dll
2016-06-14 22:11 - 2016-05-12 18:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.dll
2016-06-14 22:11 - 2016-05-12 18:37 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FwRemoteSvr.dll
2016-06-14 22:10 - 2016-06-03 20:11 - 00472576 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-06-14 22:10 - 2016-06-03 16:38 - 01413120 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-06-14 22:10 - 2016-06-02 20:51 - 00050352 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-06-14 22:10 - 2016-05-29 18:04 - 01204224 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-06-14 22:10 - 2016-05-29 18:04 - 00569856 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-06-14 22:10 - 2016-05-29 18:04 - 00544256 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-06-14 22:10 - 2016-05-29 18:04 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-06-14 22:10 - 2016-05-29 18:04 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2016-06-14 22:10 - 2016-05-29 18:04 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-06-14 22:10 - 2016-05-21 20:28 - 25802752 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-06-14 22:10 - 2016-05-21 19:57 - 20341248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-06-14 22:10 - 2016-05-21 01:09 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-06-14 22:10 - 2016-05-21 01:08 - 02895360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-06-14 22:10 - 2016-05-21 01:02 - 06051328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-06-14 22:10 - 2016-05-21 00:57 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-06-14 22:10 - 2016-05-21 00:55 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-06-14 22:10 - 2016-05-21 00:54 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-06-14 22:10 - 2016-05-21 00:50 - 02287104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-06-14 22:10 - 2016-05-21 00:44 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-06-14 22:10 - 2016-05-21 00:29 - 13815808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-06-14 22:10 - 2016-05-21 00:27 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-06-14 22:10 - 2016-05-21 00:25 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-06-14 22:10 - 2016-05-21 00:25 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-06-14 22:10 - 2016-05-21 00:21 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-06-14 22:10 - 2016-05-21 00:21 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2016-06-14 22:10 - 2016-05-21 00:19 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-06-14 22:10 - 2016-05-21 00:16 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-06-14 22:10 - 2016-05-21 00:14 - 04610048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-06-14 22:10 - 2016-05-21 00:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-06-14 22:10 - 2016-05-21 00:11 - 15420928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-06-14 22:10 - 2016-05-21 00:11 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-06-14 22:10 - 2016-05-21 00:09 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-06-14 22:10 - 2016-05-21 00:09 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-06-14 22:10 - 2016-05-21 00:08 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-06-14 22:10 - 2016-05-21 00:08 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-06-14 22:10 - 2016-05-21 00:06 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-06-14 22:10 - 2016-05-20 23:46 - 02597888 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-06-14 22:10 - 2016-05-20 23:42 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-06-14 22:10 - 2016-05-20 23:38 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-06-14 22:10 - 2016-05-20 23:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-06-14 22:10 - 2016-05-20 23:34 - 01544192 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-06-14 22:10 - 2016-05-20 23:23 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-06-14 22:10 - 2016-05-19 02:15 - 01379040 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-06-14 22:10 - 2016-05-18 23:35 - 01097216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-06-14 22:10 - 2016-05-18 08:31 - 00372568 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-06-14 22:10 - 2016-05-18 08:31 - 00315224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-06-14 22:10 - 2016-05-17 00:13 - 00563016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-06-14 22:10 - 2016-05-17 00:13 - 00397224 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-06-14 22:10 - 2016-05-17 00:13 - 00340872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-06-14 22:10 - 2016-05-17 00:13 - 00178008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-06-14 22:10 - 2016-05-14 23:01 - 00363104 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-06-14 22:10 - 2016-05-14 23:01 - 00320720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
2016-06-14 22:10 - 2016-05-14 02:09 - 04169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-06-14 22:10 - 2016-05-14 02:07 - 00675328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-06-14 22:10 - 2016-05-14 02:07 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-06-14 22:10 - 2016-05-14 02:07 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2016-06-14 22:10 - 2016-05-14 02:06 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-06-14 22:10 - 2016-05-14 02:04 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-06-14 22:10 - 2016-05-14 01:34 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-06-14 22:10 - 2016-05-14 01:19 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-06-14 22:10 - 2016-05-14 00:58 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-06-14 22:10 - 2016-05-14 00:58 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-06-14 22:10 - 2016-05-14 00:45 - 00802816 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-06-14 22:10 - 2016-05-14 00:35 - 00286208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2016-06-14 22:10 - 2016-05-14 00:26 - 00631808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2016-06-14 22:10 - 2016-05-10 00:35 - 07075328 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2016-06-14 22:10 - 2016-05-09 23:56 - 05270016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2016-06-14 22:10 - 2016-05-09 23:45 - 07793152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-06-14 22:10 - 2016-05-09 23:23 - 05265920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-06-14 22:10 - 2016-04-14 18:25 - 02778624 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-06-14 22:10 - 2016-04-14 18:11 - 02464768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-06-14 22:10 - 2016-01-31 22:17 - 00118624 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-06-14 22:10 - 2016-01-31 21:07 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-06-14 22:10 - 2016-01-31 20:42 - 03320832 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-06-14 22:10 - 2016-01-31 20:14 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-06-14 22:04 - 2016-06-22 18:08 - 00000000 ____D C:\Program Files (x86)\QuickTime
2016-06-14 22:04 - 2016-06-14 22:04 - 00001184 _____ C:\Users\Public\Desktop\Camtasia Studio 8.lnk
2016-06-14 22:04 - 2016-06-14 22:04 - 00000000 ____D C:\ProgramData\regid.1995-08.com.techsmith
2016-06-14 22:04 - 2016-06-14 22:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2016-06-14 22:04 - 2016-06-14 22:04 - 00000000 ____D C:\Program Files (x86)\TechSmith
2016-06-13 20:26 - 2016-06-14 22:04 - 00000000 ____D C:\ProgramData\TechSmith
2016-06-13 15:20 - 2016-06-13 15:20 - 00000000 ____D C:\Users\Freeware Sys\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server
2016-06-13 15:19 - 2016-06-13 15:19 - 00001098 _____ C:\Users\Freeware Sys\Desktop\MSI Afterburner.lnk
2016-06-13 15:19 - 2016-06-13 15:19 - 00000000 ____D C:\Users\Freeware Sys\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
2016-06-13 14:10 - 2016-05-20 11:27 - 00015648 _____ C:\Windows\system32\Drivers\nvflash.sys
2016-06-12 23:21 - 2016-06-12 23:21 - 00002086 _____ C:\Users\Freeware Sys\Desktop\Change background.lnk
2016-06-12 23:21 - 2016-06-12 23:21 - 00001990 _____ C:\Users\Freeware Sys\Desktop\MovieNations.com.lnk
2016-06-12 23:21 - 2016-06-12 23:21 - 00001149 _____ C:\Users\Freeware Sys\Desktop\MovieNations HLAE.lnk
2016-06-12 23:21 - 2016-06-12 23:21 - 00000000 ____D C:\Program Files (x86)\select_path_to_counter-strike
2016-06-12 21:16 - 2010-12-24 03:26 - 00532992 _____ C:\Windows\system32\js32.dll
2016-06-12 21:16 - 2010-12-24 03:26 - 00532992 _____ C:\Windows\js32.dll
2016-06-12 16:58 - 2016-06-12 16:58 - 00000000 ____D C:\Users\Freeware Sys\Documents\My Games
2016-06-12 16:58 - 2016-06-12 16:58 - 00000000 ____D C:\ProgramData\Orbit
2016-06-12 16:10 - 2016-06-12 16:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Far Cry 4 - Gold Edition
2016-06-11 18:07 - 2016-06-11 18:07 - 00000000 ____D C:\Users\Freeware Sys\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2016-06-11 18:06 - 2016-06-11 18:06 - 00000000 ____D C:\Users\Freeware Sys\Documents\Adobe
2016-06-11 18:06 - 2016-06-11 18:06 - 00000000 ____D C:\Users\Freeware Sys\AppData\Roaming\PACE Anti-Piracy
2016-06-11 18:06 - 2016-06-11 18:06 - 00000000 ____D C:\Users\Freeware Sys\AppData\Local\PACE Anti-Piracy
2016-06-11 18:06 - 2016-06-11 18:06 - 00000000 ____D C:\ProgramData\PACE Anti-Piracy
2016-06-11 18:01 - 2016-06-11 18:01 - 00000000 ____D C:\Program Files (x86)\My Company Name
2016-06-11 18:01 - 2016-06-11 18:01 - 00000000 ____D C:\Program Files (x86)\Adobe Story
2016-06-11 18:01 - 2009-07-09 03:00 - 00055280 ____N (Sonic Solutions) C:\Windows\system32\Drivers\PxHlpa64.sys
2016-06-11 18:01 - 2009-06-23 03:00 - 00010224 ____N (Sonic Solutions) C:\Windows\system32\Drivers\cdralw2k.sys
2016-06-11 18:01 - 2009-06-23 03:00 - 00010224 ____N (Sonic Solutions) C:\Windows\system32\Drivers\cdr4_xp.sys
2016-06-11 17:59 - 2016-06-11 18:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2016-06-11 17:46 - 2016-06-11 17:46 - 00001214 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects CS6.lnk
2016-06-11 17:45 - 2016-06-11 17:45 - 00001106 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder CS6.lnk
2016-06-11 17:44 - 2016-06-11 17:44 - 00001013 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
2016-06-11 17:44 - 2016-06-11 17:44 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2016-06-11 17:44 - 2016-06-11 17:44 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2016-06-11 17:15 - 2016-06-12 19:22 - 00000000 ___RD C:\Users\Freeware Sys\Desktop\Design Programs
2016-06-11 17:11 - 2016-07-03 00:53 - 00000000 ___RD C:\Users\Freeware Sys\Desktop\Games
2016-06-11 11:05 - 2016-06-23 22:02 - 00000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2016-06-11 11:04 - 2016-06-23 21:07 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2016-06-11 01:09 - 2016-06-11 01:09 - 00000000 ____D C:\Users\Freeware Sys\AppData\Local\Rockstar Games
2016-06-11 01:09 - 2016-06-11 01:09 - 00000000 ____D C:\ProgramData\Steam
2016-06-11 01:09 - 2016-06-11 01:09 - 00000000 ____D C:\ProgramData\Socialclub
2016-06-11 01:07 - 2016-06-11 01:22 - 00017752 _____ C:\Users\Freeware Sys\Documents\PlayClaw.txt
2016-06-11 01:07 - 2016-06-11 01:07 - 00000000 ____D C:\ProgramData\PlayClaw5plus
2016-06-11 00:57 - 2016-06-11 00:57 - 00000000 ____D C:\Program Files\Rockstar Games
2016-06-11 00:57 - 2016-06-11 00:57 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2016-06-11 00:26 - 2016-06-11 00:26 - 00000080 _____ C:\Users\Freeware Sys\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2016-06-11 00:26 - 2016-06-11 00:26 - 00000000 ____D C:\Users\Freeware Sys\Documents\Rockstar Games
2016-06-10 23:25 - 2016-06-10 23:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunder Master
2016-06-10 23:25 - 2016-06-10 23:25 - 00000000 ____D C:\Program Files (x86)\Thunder Master
2016-06-10 22:24 - 2016-06-10 22:25 - 00000000 ____D C:\Users\Freeware Sys\Documents\Battlefield 4
2016-06-10 22:13 - 2016-06-10 22:13 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2016-06-10 22:06 - 2016-06-25 23:27 - 00000000 ____D C:\Program Files\McAfee Security Scan
2016-06-10 21:42 - 2016-06-10 21:42 - 00000000 ____D C:\ProgramData\TrueKey
2016-06-10 21:42 - 2016-06-10 21:42 - 00000000 ____D C:\Program Files\Common Files\Intel
2016-06-10 21:41 - 2016-07-06 17:45 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\True Key.lnk
2016-06-10 21:41 - 2016-06-10 21:44 - 00000000 ____D C:\Users\Freeware Sys\AppData\Local\tkdata
2016-06-10 21:41 - 2016-06-10 21:41 - 00000000 ____D C:\Program Files\Intel Security
2016-06-10 21:40 - 2016-07-06 17:44 - 00000000 ____D C:\Program Files (x86)\McAfee
2016-06-10 21:40 - 2016-06-11 10:43 - 00003348 _____ C:\Windows\System32\Tasks\McAfee Remediation (Prepare)
2016-06-10 21:40 - 2016-06-11 09:42 - 00000000 ____D C:\Program Files\Common Files\McAfee
2016-06-10 21:40 - 2016-06-10 21:40 - 00000000 ____D C:\Program Files\Common Files\AV
2016-06-10 21:27 - 2016-06-10 21:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\5KPlayer
2016-06-10 21:27 - 2016-06-10 21:27 - 00000000 ____D C:\Program Files\Bonjour
2016-06-10 21:27 - 2016-06-10 21:27 - 00000000 ____D C:\Program Files (x86)\DearMob
2016-06-10 21:27 - 2016-06-10 21:27 - 00000000 ____D C:\Program Files (x86)\Bonjour
2016-06-10 21:23 - 2016-07-06 17:45 - 00000000 ____D C:\Program Files\TrueKey
2016-06-10 21:23 - 2016-06-12 09:45 - 00000000 ____D C:\ProgramData\McAfee
2016-06-10 21:23 - 2016-06-10 23:13 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-06-10 21:23 - 2016-06-10 23:13 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-06-10 21:23 - 2016-06-10 21:23 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2016-06-10 19:22 - 2016-06-20 10:12 - 00000406 _____ C:\Users\Freeware Sys\Desktop\Нов текстов документ.txt
2016-06-10 16:24 - 2016-04-14 08:38 - 00113216 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2016-06-10 16:24 - 2016-04-14 08:38 - 00102976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2016-06-10 16:24 - 2016-04-14 08:38 - 00056384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2016-06-10 16:02 - 2016-06-10 16:37 - 00000000 ____D C:\Users\Freeware Sys\AppData\Roaming\NVIDIA
2016-06-10 15:59 - 2016-06-10 15:59 - 00000000 ____D C:\Users\Freeware Sys\AppData\Local\NVIDIA Corporation
2016-06-10 15:58 - 2016-07-02 22:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-06-10 15:58 - 2016-06-14 23:01 - 01767944 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2016-06-10 15:58 - 2016-06-14 23:01 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2016-06-10 15:58 - 2016-06-14 23:01 - 01377800 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2016-06-10 15:58 - 2016-06-14 23:01 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2016-06-10 15:58 - 2016-06-14 23:01 - 00112216 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-06-10 15:58 - 2016-06-10 16:25 - 00000000 ____D C:\Users\Freeware Sys\AppData\Local\NVIDIA
2016-06-10 15:57 - 2016-06-03 06:26 - 00534072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-06-10 15:57 - 2016-06-03 06:26 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-06-10 15:55 - 2016-06-03 10:38 - 19180152 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2016-06-10 15:55 - 2016-06-03 10:38 - 17290416 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-06-10 15:55 - 2016-06-03 10:38 - 14346320 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-06-10 15:55 - 2016-06-03 10:38 - 03825896 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-06-10 15:55 - 2016-06-03 10:38 - 03383472 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-06-10 15:55 - 2016-06-03 10:38 - 01571776 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcvadgenco64.dll
2016-06-10 15:55 - 2016-04-27 17:35 - 01924152 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436510.dll
2016-06-10 15:55 - 2016-04-27 17:35 - 01572496 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2016-06-10 15:55 - 2016-04-27 17:35 - 01571776 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436510.dll
2016-06-10 15:53 - 2016-07-06 02:28 - 00000000 ____D C:\ProgramData\NVIDIA
2016-06-10 15:53 - 2016-07-02 22:13 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-06-10 15:53 - 2016-06-03 06:26 - 06362560 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-06-10 15:53 - 2016-06-03 06:26 - 02453952 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-06-10 15:53 - 2016-06-03 06:26 - 01764408 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-06-10 15:53 - 2016-06-03 06:26 - 01351104 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2016-06-10 15:53 - 2016-06-03 06:26 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-06-10 15:53 - 2016-06-03 06:26 - 00071224 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-06-10 15:53 - 2016-06-02 15:19 - 06452948 _____ C:\Windows\system32\nvcoproc.bin
2016-06-10 15:48 - 2016-06-10 15:58 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-06-10 15:48 - 2016-06-10 15:58 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-06-10 15:48 - 2015-11-10 02:49 - 00887544 _____ C:\Windows\system32\SET5071.tmp
2016-06-08 00:25 - 2016-06-08 00:25 - 00000000 ____D C:\Program Files (x86)\FinalWire

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-07-06 23:23 - 2016-01-30 00:03 - 00000962 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-985571877-2983658597-1096150994-1001UA.job
2016-07-06 19:54 - 2016-02-14 21:12 - 00000000 ____D C:\Users\Freeware Sys\AppData\Roaming\AIMP3
2016-07-06 19:14 - 2016-01-29 23:53 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-985571877-2983658597-1096150994-1001
2016-07-06 17:54 - 2016-01-29 23:48 - 00000000 ____D C:\ProgramData\KMSAutoS
2016-07-06 17:47 - 2016-01-30 00:01 - 00003970 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{CC5FD64B-53CC-4246-B4AE-1582A4E9F433}
2016-07-06 02:43 - 2014-11-21 10:38 - 00863592 _____ C:\Windows\system32\PerfStringBackup.INI
2016-07-06 02:43 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\Inf
2016-07-06 02:30 - 2016-02-04 14:47 - 00000000 ___DO C:\Users\Freeware Sys\OneDrive
2016-07-06 02:29 - 2016-04-12 00:08 - 00000000 ____D C:\Users\Freeware Sys\AppData\Roaming\5kplayer
2016-07-06 02:29 - 2016-01-30 13:05 - 00000000 ____D C:\Program Files (x86)\Steam
2016-07-06 02:29 - 2016-01-29 23:48 - 00000000 ____D C:\Users\Freeware Sys
2016-07-06 02:28 - 2013-08-22 17:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-07-06 00:23 - 2016-01-30 00:03 - 00000910 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-985571877-2983658597-1096150994-1001Core.job
2016-07-05 19:51 - 2016-01-30 12:15 - 00649720 _____ C:\Windows\ntbtlog.txt
2016-07-05 19:40 - 2013-08-22 16:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-07-05 18:30 - 2016-04-15 22:14 - 00000000 ____D C:\Users\Freeware Sys\AppData\Roaming\Skype
2016-07-05 02:18 - 2013-08-22 18:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-07-05 02:18 - 2013-08-22 18:36 - 00000000 ____D C:\Windows\AppReadiness
2016-07-01 03:58 - 2016-02-23 21:41 - 00000000 ____D C:\Users\Freeware Sys\AppData\Local\ElevatedDiagnostics
2016-06-26 23:32 - 2016-02-04 15:02 - 00000000 ____D C:\Users\Freeware Sys\AppData\Local\CrashDumps
2016-06-26 12:44 - 2016-01-30 01:33 - 00000000 ____D C:\Users\Freeware Sys\AppData\Roaming\uTorrent
2016-06-21 23:00 - 2016-01-30 09:35 - 00000000 ____D C:\Windows\Panther
2016-06-18 17:11 - 2016-04-27 10:47 - 00000000 ___HD C:\$WINDOWS.~BT
2016-06-18 16:32 - 2013-08-22 18:36 - 00000000 ____D C:\Windows\rescache
2016-06-18 14:42 - 2016-01-29 23:48 - 00000000 ____D C:\Users\Freeware Sys\AppData\Local\Packages
2016-06-18 01:24 - 2016-01-30 00:03 - 00002421 _____ C:\Users\Freeware Sys\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-06-17 19:13 - 2016-04-10 11:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-06-17 17:16 - 2016-04-10 11:26 - 00000000 ____D C:\Users\Freeware Sys\AppData\Roaming\Command & Conquer 3 Tiberium Wars
2016-06-17 14:36 - 2016-05-13 01:04 - 00000000 ____D C:\Users\Freeware Sys\Documents\FIFA 14
2016-06-17 13:52 - 2013-08-22 18:20 - 00000000 ____D C:\Windows\CbsTemp
2016-06-17 10:08 - 2013-08-22 17:44 - 05280944 _____ C:\Windows\system32\FNTCACHE.DAT
2016-06-17 10:06 - 2015-01-16 23:51 - 00000000 ____D C:\Windows\system32\appraiser
2016-06-17 10:03 - 2013-08-22 18:36 - 00000000 ___RD C:\Windows\ToastData
2016-06-15 18:35 - 2016-02-04 12:56 - 00000000 ____D C:\Users\Freeware Sys\Documents\Camtasia Studio
2016-06-15 01:29 - 2016-01-31 17:52 - 00000000 ____D C:\Windows\system32\MRT
2016-06-15 01:25 - 2016-02-04 00:41 - 142482544 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-06-14 20:13 - 2014-11-21 18:20 - 00828408 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-06-14 20:13 - 2014-11-21 18:20 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-06-13 20:29 - 2013-08-22 18:36 - 00000000 ____D C:\Windows\system32\NDF
2016-06-13 15:20 - 2016-05-13 00:01 - 00000000 ____D C:\Windows\SysWOW64\directx
2016-06-13 14:24 - 2013-08-22 18:36 - 00000000 ____D C:\Windows\LiveKernelReports
2016-06-11 18:58 - 2016-03-11 13:25 - 00000000 ___HD C:\Users\Freeware Sys\AppData\Local\tjLgHfkm
2016-06-11 18:58 - 2014-06-19 17:29 - 00000000 ___HD C:\Users\Freeware Sys\AppData\Local\EoguBf2hiz804F
2016-06-11 18:17 - 2016-02-23 21:44 - 00000000 ____D C:\Program Files\Adobe
2016-06-11 18:17 - 2016-02-23 21:41 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-06-11 18:17 - 2016-02-23 21:39 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-06-11 18:13 - 2016-02-23 21:34 - 00000000 ____D C:\ProgramData\Adobe
2016-06-11 18:07 - 2016-01-29 23:48 - 00000000 ____D C:\Users\Freeware Sys\AppData\Roaming\Adobe
2016-06-11 18:04 - 2016-02-23 21:45 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-06-11 18:01 - 2016-02-23 21:34 - 00000000 ____D C:\Users\Freeware Sys\AppData\Local\Adobe
2016-06-11 17:19 - 2016-01-29 23:56 - 00000725 _____ C:\Users\Freeware Sys\Desktop\Download.lnk
2016-06-10 21:42 - 2016-01-29 23:54 - 00000000 ____D C:\Program Files\Intel
2016-06-10 21:24 - 2016-02-23 22:37 - 00000000 ____D C:\Users\Freeware Sys\AppData\LocalLow\Adobe
2016-06-10 15:57 - 2016-04-23 16:13 - 00000000 ____D C:\ProgramData\Package Cache
2016-06-10 15:53 - 2013-08-22 18:36 - 00000000 ____D C:\Windows\Help
2016-06-10 12:17 - 2016-01-29 23:55 - 00000000 __SHD C:\Users\Freeware Sys\IntelGraphicsProfiles
2016-06-07 23:08 - 2016-05-03 22:29 - 00000132 _____ C:\Users\Freeware Sys\AppData\Roaming\Adobe PNG Format CS6 Prefs

==================== Files in the root of some directories =======

2014-07-10 09:16 - 2014-07-10 09:16 - 2174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll
2016-05-03 22:29 - 2016-06-07 23:08 - 0000132 _____ () C:\Users\Freeware Sys\AppData\Roaming\Adobe PNG Format CS6 Prefs
2016-01-30 00:35 - 2016-01-30 00:35 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Freeware Sys\AppData\Local\Temp\AutoRun.exe
C:\Users\Freeware Sys\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Freeware Sys\AppData\Local\Temp\InstHelper.exe
C:\Users\Freeware Sys\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Freeware Sys\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Freeware Sys\AppData\Local\Temp\nvStInst.exe
C:\Users\Freeware Sys\AppData\Local\Temp\patchw32.dll
C:\Users\Freeware Sys\AppData\Local\Temp\sonarinst.exe
C:\Users\Freeware Sys\AppData\Local\Temp\Uninst.exe
C:\Users\Freeware Sys\AppData\Local\Temp\UninstAP.exe

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-07-06 02:39

==================== End of FRST.txt ============================

6 юли 201610 г.

Автор

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-07-2016
Ran by Freeware Sys (2016-07-06 23:23:30)
Running from D:\Download\GOOGLE DWN
Windows 8.1 Pro (Update) (X64) (2016-01-29 20:48:27)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-985571877-2983658597-1096150994-500 - Administrator - Disabled)
Freeware Sys (S-1-5-21-985571877-2983658597-1096150994-1001 - Administrator - Enabled) => C:\Users\Freeware Sys
Само за ботове (S-1-5-21-985571877-2983658597-1096150994-501 - Limited - Enabled) => C:\Users\Само за ботове

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET NOD32 Antivirus 8.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET NOD32 Antivirus 8.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-985571877-2983658597-1096150994-1001\...\uTorrent) (Version: 1.8.0 - )
5KPlayer 3.6 (HKLM-x32\...\5KPlayer_is1) (Version: - DearMob, Inc.)
8GadgetPack (HKLM-x32\...\{5D6CB70E-6FA7-4E5E-8A12-06612313E671}) (Version: 18.0.0 - Helmut Buhler)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.016.20045 - Adobe Systems Incorporated)
Adobe After Effects CS6 (HKLM-x32\...\{4817D846-700B-474E-A31B-80892B3E92E3}) (Version: 11 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Premiere Pro CS5.5 (HKLM-x32\...\{0497EAED-70DA-4BBE-BEB3-AF77FD8788EA}) (Version: 5.5 - Adobe Systems Incorporated)
Adobe Story (HKLM-x32\...\com.adobe.AdobeStory.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.0.571 - Adobe Systems Incorporated)
AIDA64 Extreme Edition v3.00 (HKLM-x32\...\AIDA64 Extreme Edition_is1) (Version: 3.00 - FinalWire Ltd.)
AIMP3 (HKLM-x32\...\AIMP3) (Version: v3.55.1350, 16.06.2014 - AIMP DevTeam)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Camtasia Studio 8 (HKLM-x32\...\{A2A41B60-D51F-4C04-BC94-B4C94F7B6DC0}) (Version: 8.6.0.2054 - TechSmith Corporation)
Command & Conquer 3 (HKLM-x32\...\{B0C30E93-D3D9-4F04-A2AC-54749B573275}) (Version: 1.00.0000 - Electronic Arts Inc.)
Counter-Strike (HKLM-x32\...\Steam App 10) (Version: - Valve)
Counter-Strike 1.6 (HKLM-x32\...\{9ABFB92D-93DA-49EE-8ABF-F8195DE45CA9}) (Version: 1.6 - )
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version: - Valve)
Crysis 3 (HKLM-x32\...\Q3J5c2lzMw==_is1) (Version: 1 - )
DAEMON Tools Pro (HKLM-x32\...\DAEMON Tools Pro) (Version: 4.41.0314.0232 - DT Soft Ltd)
ESET NOD32 Antivirus (HKLM\...\{BCFE7AD8-E33B-4AE8-A7C4-1E9956A09F63}) (Version: 8.0.319.1 - ESET, spol s r. o.)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
Far Cry 4 - Gold Edition version 1.9.0 (HKLM-x32\...\{E9F9EC2B-2447-4BA4-A81F-837D7CA62DC5}_is1) (Version: 1.9.0 - Ubisoft)
FIFA 09 (HKLM\...\{2315B23D-3E21-4920-837D-AE6460934ECB}) (Version: 1.0.1.1 - Electronic Arts)
FIFA 09 (HKLM-x32\...\{2315B23D-3E21-4920-837D-AE6460934ECB}) (Version: 1.0.1.1 - Electronic Arts)
FIFA 14 version 3.9.0 (HKLM-x32\...\{6A2D073F-F9AF-424B-A9A4-0D475D84D928}_is1) (Version: 3.9.0 - )
Fraps (HKLM-x32\...\Fraps) (Version: - )
Google Chrome (HKU\S-1-5-21-985571877-2983658597-1096150994-1001\...\Google Chrome) (Version: 51.0.2704.103 - Google Inc.)
Grand Theft Auto V (HKLM-x32\...\R3JhbmRUaGVmdEF1dG9W_is1) (Version: 1 - )
Intel Security True Key (HKLM\...\TrueKey) (Version: 4.3.145.1 - Intel Security)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation)
K-Lite Codec Pack 11.0.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 11.0.0 - )
LenovoUsbDriver 1.0.12 (HKLM-x32\...\LenovoUsbDriver) (Version: 1.0.12 - Lenovo)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.334.1 - McAfee, Inc.)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mobile Assistant (HKLM-x32\...\{311CAE51-E20A-4D90-BBB1-2CADF6193008}) (Version: 1.4.1.10077 - Lenovo)
MSI Afterburner 4.2.0 (HKLM-x32\...\Afterburner) (Version: 4.2.0 - MSI Co., LTD)
MSI Kombustor 3.5.1 (HKLM\...\{9598DA62-2AE8-426D-9C86-BEA96AC6721E}_is1) (Version: - MSI Co., LTD)
NVIDIA 3D Vision Controller Driver 364.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 364.44 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 368.39 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 368.39 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)
NVIDIA Graphics Driver 368.39 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 368.39 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.34.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.14 - NVIDIA Corporation)
NVIDIA Miracast Virtual Audio 368.39 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 368.39 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PxMergeModule (x32 Version: 1.00.0000 - Your Company Name) Hidden
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7200 - Realtek Semiconductor Corp.)
Red Alert 2 (HKLM-x32\...\Red Alert 2_R.G. Mechanics_is1) (Version: - R.G. Mechanics, spider91)
RivaTuner Statistics Server 6.4.1 (HKLM-x32\...\RTSS) (Version: 6.4.1 - Unwinder)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games)
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Skype™ 7.21 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.21.100 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
The Witcher 3 Wild Hunt Blood and Wine (HKLM-x32\...\The Witcher 3 Wild Hunt Blood and Wine_is1) (Version: - )
Thunder Master v2.18 (HKLM-x32\...\{EE04522C-0814-4B63-AE57-0B63E5A355BB}_is1) (Version: 2.18.0.0 - Palit Microsystems Ltd.)
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{3577E42B-3347-4EB8-BFDA-D36E8ED3C519}) (Version: 1.0.24.0 - Microsoft Corporation)
WinRAR 5.21 (64-битова версия) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Xilisoft Video Converter Ultimate (HKLM-x32\...\Xilisoft Video Converter Ultimate) (Version: 7.8.3.20140904 - Xilisoft)
Пакет за съвместимост за системата Office 2007 (HKLM-x32\...\{90120000-0020-0402-0000-0000000FF1CE}) (Version: 12.0.6514.5001 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-985571877-2983658597-1096150994-1001_Classes\CLSID\{0B7AD8D3-094A-44DE-A348-83C6C3FA347C}\InprocServer32 -> C:\Users\Freeware Sys\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Clipboarder.gadget\Release\Clipboarder64.dll (Helmut Buhler)
CustomCLSID: HKU\S-1-5-21-985571877-2983658597-1096150994-1001_Classes\CLSID\{0E7BE950-4ACC-47CB-834B-41A8B96BBFF9}\InprocServer32 -> C:\Users\Freeware Sys\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Sidebar7.gadget\Release\Sidebar7.64.dll (Helmut Buhler)
CustomCLSID: HKU\S-1-5-21-985571877-2983658597-1096150994-1001_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\Freeware Sys\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-985571877-2983658597-1096150994-1001_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\Freeware Sys\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-985571877-2983658597-1096150994-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-985571877-2983658597-1096150994-1001_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\Freeware Sys\AppData\Local\Google\Update\1.3.29.2\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-985571877-2983658597-1096150994-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Freeware Sys\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll (Google Inc.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0895E400-C353-4155-A584-F8F307A20346} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-06-15] (Microsoft Corporation)
Task: {2E88B075-B0FB-49D0-958D-682CD31F5057} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-985571877-2983658597-1096150994-1001Core => C:\Users\Freeware Sys\AppData\Local\Google\Update\GoogleUpdate.exe [2016-01-30] (Google Inc.)
Task: {4AB78CAA-23F4-462B-9136-383F97D9E45D} - System32\Tasks\KMSAutoNet => C:\ProgramData\KMSAutoS\KMSAuto Net.exe [2016-01-29] (MSFree Inc.)
Task: {84A21790-401A-45D6-977B-80318775332A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {977BA660-37DB-446D-A3A7-F87D0CA495EC} - System32\Tasks\{9217B9AF-5A09-438F-86EF-C485AEBFE8C7} => Chrome.exe hxxp://ui.skype.com/ui/0/7.22.0.109/bg/abandoninstall?page=tsProgressBar
Task: {C9F0B751-FC14-4549-A980-0A0954E0FCE1} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-985571877-2983658597-1096150994-1001UA => C:\Users\Freeware Sys\AppData\Local\Google\Update\GoogleUpdate.exe [2016-01-30] (Google Inc.)
Task: {D6D5AB13-4BC2-48FE-9AB8-0CCEA3853379} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {D9D12B43-778B-4CAE-B11A-3C42C39B9710} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee Anti-Virus And Anti-Spyware\upgrade.exe [2016-03-31] (McAfee, Inc.)
Task: {F9CC51F5-64AF-4350-A1AA-4C09B289CF8D} - System32\Tasks\lenovo mobile auto run => C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe [2014-08-27] (Lenovo)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-985571877-2983658597-1096150994-1001Core.job => C:\Users\Freeware Sys\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-985571877-2983658597-1096150994-1001UA.job => C:\Users\Freeware Sys\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2016-06-10 15:53 - 2016-06-03 06:26 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-06-10 15:57 - 2016-06-14 23:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-06-10 15:57 - 2016-06-14 23:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2016-06-10 15:57 - 2016-06-14 23:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-06-10 15:57 - 2016-06-14 23:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-06-10 15:57 - 2016-06-14 23:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-06-10 15:57 - 2016-06-14 23:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2016-06-10 15:57 - 2016-06-14 23:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-06-10 15:57 - 2016-06-14 23:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-06-10 15:58 - 2016-06-14 23:03 - 00165824 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\gamecaster64.dll
2016-06-10 15:58 - 2016-06-14 23:03 - 00861120 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\twitchsdk64.dll
2016-06-10 21:27 - 2016-02-26 14:28 - 04145744 _____ () C:\Program Files (x86)\DearMob\5KPlayer\5KPlayer.exe
2016-06-10 15:57 - 2016-06-14 23:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-06-10 15:57 - 2016-06-14 23:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2014-08-27 18:25 - 2014-08-27 18:25 - 00109736 _____ () C:\Program Files (x86)\MagicPlus\crashreport.dll
2014-08-27 18:25 - 2014-08-27 18:25 - 00351400 _____ () C:\Program Files (x86)\MagicPlus\UsbHelper.dll
2016-06-10 15:57 - 2016-06-14 23:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-01-30 13:06 - 2016-04-29 23:10 - 00785920 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2016-01-30 13:06 - 2015-07-03 19:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2016-01-30 13:06 - 2016-06-15 03:47 - 02387024 _____ () C:\Program Files (x86)\Steam\video.dll
2016-01-30 13:06 - 2015-07-03 19:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2016-01-30 13:06 - 2015-07-03 19:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2016-01-30 13:06 - 2016-02-09 02:14 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2016-01-30 13:06 - 2016-02-09 02:14 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2016-01-30 13:06 - 2016-02-09 02:14 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2016-01-30 13:06 - 2016-02-09 02:14 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2016-01-30 13:06 - 2016-02-09 02:14 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2016-01-30 13:06 - 2016-06-15 03:47 - 00829008 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-03-09 19:24 - 2016-02-18 01:25 - 00281088 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2016-01-30 13:06 - 2016-06-14 22:14 - 49826080 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2016-01-30 13:06 - 2015-09-25 02:56 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
2016-02-14 21:12 - 2016-02-14 21:12 - 00505344 _____ () C:\Program Files (x86)\AIMP3\sqlite3.dll
2016-02-14 21:12 - 2016-02-14 21:12 - 00218112 _____ () C:\Program Files (x86)\AIMP3\libsoxr.dll
2016-02-14 21:12 - 2016-02-14 21:12 - 00220672 _____ () C:\Program Files (x86)\AIMP3\Modules\MACDll.dll
2016-02-14 21:12 - 2016-02-14 21:12 - 00294400 _____ () C:\Program Files (x86)\AIMP3\Modules\libFLAC.dll
2016-02-14 21:12 - 2016-02-14 21:12 - 01733120 _____ () C:\Program Files (x86)\AIMP3\Modules\aimp_libvorbis.dll
2016-02-14 21:12 - 2016-02-14 21:12 - 00072136 _____ () C:\Program Files (x86)\AIMP3\Plugins\aimp_lastfm.dll
2016-02-14 21:12 - 2016-02-14 21:12 - 00026624 _____ () C:\Program Files (x86)\AIMP3\Plugins\Aorta.svp
2016-02-14 21:12 - 2016-02-14 21:12 - 00237568 _____ () C:\Program Files (x86)\AIMP3\Plugins\OptimFROG.dll
2016-02-14 21:12 - 2016-02-14 21:12 - 00141768 _____ () C:\Program Files (x86)\AIMP3\Plugins\PandemicAnalogMeter.dll
2016-06-18 01:24 - 2016-06-15 12:15 - 01745560 _____ () C:\Users\Freeware Sys\AppData\Local\Google\Chrome\Application\51.0.2704.103\libglesv2.dll
2016-06-18 01:24 - 2016-06-15 12:15 - 00091288 _____ () C:\Users\Freeware Sys\AppData\Local\Google\Chrome\Application\51.0.2704.103\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Freeware Sys\AppData\Local\EoguBf2hiz804F:iLfN7JJE7YcHPqDeIXRSAyf6EF9 [1814]
AlternateDataStreams: C:\Users\Freeware Sys\AppData\Local\Temp:eXEEaB85fVsjuXWSeSkLn3gXcqr7 [1900]
AlternateDataStreams: C:\Users\Freeware Sys\AppData\Local\tjLgHfkm:M7lVDxAOZ45E9wUIaD27GOG3 [2144]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2016-06-14 21:59 - 2016-06-25 23:27 - 00001009 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 activation.cloud.techsmith.com
127.0.0.1 65.52.240.48
127.0.0.1 oscount.techsmith.com
127.0.0.1 69.167.144.18
0.0.0.1 mssplus.mcafee.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-985571877-2983658597-1096150994-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Freeware Sys\AppData\Roaming\Microsoft\Windows Photo Viewer\Windows Photo Viewer Wallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{918104BA-C486-4CDC-A171-E8019A324045}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe
FirewallRules: [{58764D8D-E8FF-4EAF-A467-5EA18FCEE9E1}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe
FirewallRules: [{956A2A0A-BC6A-4699-8C56-C7F444E0D34B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{FB94DB4D-2C9A-46AA-8586-1299D767E424}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B856A95A-1D7F-4512-92BC-18D89690349D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{D3C826E5-7035-43D5-923E-0990D4A767B5}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{EEE51CE8-BBCA-4ADC-86B3-2C0A3470F03E}] => (Allow) D:\Games\steamapps\common\Half-Life\hl.exe
FirewallRules: [{E85CB6B3-1FEB-4B63-976D-9738AA4F5DDE}] => (Allow) D:\Games\steamapps\common\Half-Life\hl.exe
FirewallRules: [TCP Query User{991ABCC9-0E4E-4475-B49B-5D84A1147A07}C:\users\freeware sys\appdata\local\temp\electronicarts_patcher_000.exe] => (Allow) C:\users\freeware sys\appdata\local\temp\electronicarts_patcher_000.exe
FirewallRules: [UDP Query User{F48D7107-F6C9-4AA1-9D7A-90D8CBFA58DE}C:\users\freeware sys\appdata\local\temp\electronicarts_patcher_000.exe] => (Allow) C:\users\freeware sys\appdata\local\temp\electronicarts_patcher_000.exe
FirewallRules: [TCP Query User{481CC592-338E-4B20-96F5-A616EBD3289A}C:\program files (x86)\dearmob\5kplayer\5kplayer.exe] => (Allow) C:\program files (x86)\dearmob\5kplayer\5kplayer.exe
FirewallRules: [UDP Query User{7D06D1FF-D265-4CBA-ADEE-99C9A18EEBA8}C:\program files (x86)\dearmob\5kplayer\5kplayer.exe] => (Allow) C:\program files (x86)\dearmob\5kplayer\5kplayer.exe
FirewallRules: [TCP Query User{07770DEB-C55F-4374-B707-8F440FA82EE6}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{2C3AEB03-10B1-43C4-A2A8-26BE3313C4CA}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{67349ABA-3A44-4FDC-9C31-C4BD88F40FEC}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{C0964C88-29F9-4386-A723-E51DD8844CED}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{5844C033-F721-41F9-8E50-087BE65167C0}C:\program files (x86)\magicplus\magicplus.exe] => (Allow) C:\program files (x86)\magicplus\magicplus.exe
FirewallRules: [UDP Query User{0F403902-1157-48A3-8E8D-09B8A2A98A2C}C:\program files (x86)\magicplus\magicplus.exe] => (Allow) C:\program files (x86)\magicplus\magicplus.exe
FirewallRules: [TCP Query User{37159E1A-0921-4B50-B4F9-C2A6A9F5C214}D:\games\fifa 14\game\fifa14.exe] => (Allow) D:\games\fifa 14\game\fifa14.exe
FirewallRules: [UDP Query User{662609F4-EB3F-46AC-8AE3-10C1F5700323}D:\games\fifa 14\game\fifa14.exe] => (Allow) D:\games\fifa 14\game\fifa14.exe
FirewallRules: [TCP Query User{B84B4A94-6A40-4451-8D18-A0349CE6BD39}D:\games\cs 1.6 non steam\hl.exe] => (Allow) D:\games\cs 1.6 non steam\hl.exe
FirewallRules: [UDP Query User{E546B52B-31B5-4D06-96E7-F765974B1BC9}D:\games\cs 1.6 non steam\hl.exe] => (Allow) D:\games\cs 1.6 non steam\hl.exe
FirewallRules: [{85ED759A-B736-4DB5-97B9-2F3E401E5165}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{E05A87EE-470A-478F-AC31-9E1F86960F7A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{5306DF43-D292-450E-8C41-03F0E21CD57F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{D95C8CF8-534C-4D09-9E29-7691DA037A37}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{53121163-CA27-46AA-ADC7-4ADA6FB4D14D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{F0B41D30-F477-4759-8AF4-1A5BB45C8C4F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{3395081F-E576-4564-ABE2-2BD04B0B763C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{992D4356-8583-43AE-A89E-2C91E85716C5}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{DFA6B62A-B536-4472-8988-79BE1AB09A09}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{966C6F22-0772-42D2-BC30-526C77ADD606}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{E7F5414F-43F7-47C6-998A-A6C35EACEC7E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{5E13FC95-BCB2-4522-8FA2-93BB906C8464}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{2B5ADA6E-74E0-4052-80E8-E944D0DEEBF1}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [TCP Query User{427F085A-1FDB-4160-AC7E-EC3AB194116D}D:\games\battlefield 4\bf4.exe] => (Allow) D:\games\battlefield 4\bf4.exe
FirewallRules: [UDP Query User{35BA02E6-DF04-4014-A377-9140CF9B98E0}D:\games\battlefield 4\bf4.exe] => (Allow) D:\games\battlefield 4\bf4.exe
FirewallRules: [TCP Query User{6CEB07E8-1EDD-49B0-88DA-0F2730FC92E6}D:\games\grand theft auto v\gta5.exe] => (Allow) D:\games\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{0722E663-BEE0-48AC-90B6-A02F8FF26CAA}D:\games\grand theft auto v\gta5.exe] => (Allow) D:\games\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{71C14E90-729F-41F7-9043-215B5B3DD57C}D:\games\far cry 4 - gold edition\bin\farcry4.exe] => (Allow) D:\games\far cry 4 - gold edition\bin\farcry4.exe
FirewallRules: [UDP Query User{6FFFA910-DE51-41E1-9345-3019F0200996}D:\games\far cry 4 - gold edition\bin\farcry4.exe] => (Allow) D:\games\far cry 4 - gold edition\bin\farcry4.exe
FirewallRules: [TCP Query User{D719ED65-66D4-4E72-A9CA-7F7C8B818C58}D:\games\cs 1.6 non steam\cs 1.6 non steam\hl.exe] => (Allow) D:\games\cs 1.6 non steam\cs 1.6 non steam\hl.exe
FirewallRules: [UDP Query User{0F10553C-7C69-4C59-8BDA-FA2E47B36606}D:\games\cs 1.6 non steam\cs 1.6 non steam\hl.exe] => (Allow) D:\games\cs 1.6 non steam\cs 1.6 non steam\hl.exe
FirewallRules: [TCP Query User{0ED72DBE-E93F-4133-930D-A332B0875E18}D:\others\game edint files\cs 1.6 non steam\cs 1.6 non steam\hl.exe] => (Allow) D:\others\game edint files\cs 1.6 non steam\cs 1.6 non steam\hl.exe
FirewallRules: [UDP Query User{86AB09D4-5CE4-41B5-BCA9-8E8C8933CAEC}D:\others\game edint files\cs 1.6 non steam\cs 1.6 non steam\hl.exe] => (Allow) D:\others\game edint files\cs 1.6 non steam\cs 1.6 non steam\hl.exe
FirewallRules: [{5A860FAD-3D2F-4FC3-B855-2A663823E9DD}] => (Allow) LPort=8317
FirewallRules: [{FD64637A-991F-48F7-BE48-8675A5DB9F72}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{93959CCE-A3FE-47BB-B53F-2D9DDFE203B4}] => (Allow) D:\Games\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{84D41AD7-289E-4218-B61C-27E4E9C3733F}] => (Allow) D:\Games\steamapps\common\Counter-Strike Global Offensive\csgo.exe

==================== Restore Points =========================

27-06-2016 15:12:50 Installed DirectX
05-07-2016 02:26:33 Scheduled Checkpoint

==================== Faulty Device Manager Devices =============

Name: PCI Simple Communications Controller
Description: PCI Simple Communications Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

==================== Event log errors: =========================

Application errors:
==================
Error: (07/05/2016 07:51:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Име на приложение с грешки: egui.exe, версия: 8.0.319.0, времево клеймо: 0x559d2313
Име на модул с грешки: ToastNotify.dll, версия: 8.0.319.0, времево клеймо: 0x559d2398
Код на изключение: 0xc0000005
Отместване на грешка: 0x0000000000002f3e
ИД на процес на грешка: 0x6c0
Начален час на приложението с грешки: 0xegui.exe0
Път на приложението с грешки: egui.exe1
Път на модула с грешки: egui.exe2
ИД на доклад: egui.exe3
Пълно име на пакета с грешка: egui.exe4
ИД на свързаното с пакета с грешка приложение: egui.exe5

Error: (07/05/2016 02:26:41 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Грешка в услугата "Криптографски услуги" при обработка на обръщение на OnIdentity() към обекта System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:
Access is denied.
.

Error: (07/04/2016 12:19:30 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Име на приложение с грешки: NvStreamNetworkService.exe, версия: 7.1.2084.9592, времево клеймо: 0x57605ac0
Име на модул с грешки: NvMdnsPlugin.dll_unloaded, версия: 0.0.0.0, времево клеймо: 0x57605fbb
Код на изключение: 0xc0000005
Отместване на грешка: 0x00000000000d45a0
ИД на процес на грешка: 0x109c
Начален час на приложението с грешки: 0xNvStreamNetworkService.exe0
Път на приложението с грешки: NvStreamNetworkService.exe1
Път на модула с грешки: NvStreamNetworkService.exe2
ИД на доклад: NvStreamNetworkService.exe3
Пълно име на пакета с грешка: NvStreamNetworkService.exe4
ИД на свързаното с пакета с грешка приложение: NvStreamNetworkService.exe5

Error: (07/03/2016 01:00:47 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT AUTHORITY)
Description: There was an error with the Windows Location Provider database

Error: (06/30/2016 05:36:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Име на приложение с грешки: GWXUX.exe, версия: 6.3.9600.18345, времево клеймо: 0x573de6e7
Име на модул с грешки: RPCRT4.dll, версия: 6.3.9600.18292, времево клеймо: 0x56fca3f6
Код на изключение: 0xc0000005
Отместване на грешка: 0x000000000001204d
ИД на процес на грешка: 0x194c
Начален час на приложението с грешки: 0xGWXUX.exe0
Път на приложението с грешки: GWXUX.exe1
Път на модула с грешки: GWXUX.exe2
ИД на доклад: GWXUX.exe3
Пълно име на пакета с грешка: GWXUX.exe4
ИД на свързаното с пакета с грешка приложение: GWXUX.exe5

Error: (06/27/2016 03:12:59 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Грешка в услугата "Криптографски услуги" при обработка на обръщение на OnIdentity() към обекта System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:
Access is denied.
.

Error: (06/26/2016 11:32:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Име на приложение с грешки: fifa14.exe, версия: 1.3.0.0, времево клеймо: 0x03f90040
Име на модул с грешки: fifa14.exe, версия: 1.3.0.0, времево клеймо: 0x03f90040
Код на изключение: 0xc0000005
Отместване на грешка: 0x02c70bb0
ИД на процес на грешка: 0x199c
Начален час на приложението с грешки: 0xfifa14.exe0
Път на приложението с грешки: fifa14.exe1
Път на модула с грешки: fifa14.exe2
ИД на доклад: fifa14.exe3
Пълно име на пакета с грешка: fifa14.exe4
ИД на свързаното с пакета с грешка приложение: fifa14.exe5

Error: (06/26/2016 11:31:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Име на приложение с грешки: fifa14.exe, версия: 1.3.0.0, времево клеймо: 0x03f90040
Име на модул с грешки: fifa14.exe, версия: 1.3.0.0, времево клеймо: 0x03f90040
Код на изключение: 0xc00001a5
Отместване на грешка: 0x035c9f28
ИД на процес на грешка: 0x199c
Начален час на приложението с грешки: 0xfifa14.exe0
Път на приложението с грешки: fifa14.exe1
Път на модула с грешки: fifa14.exe2
ИД на доклад: fifa14.exe3
Пълно име на пакета с грешка: fifa14.exe4
ИД на свързаното с пакета с грешка приложение: fifa14.exe5

Error: (06/26/2016 02:46:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Име на приложение с грешки: hl.exe, версия: 1.1.1.1, времево клеймо: 0x3fd11900
Име на модул с грешки: unknown, версия: 0.0.0.0, времево клеймо: 0x00000000
Код на изключение: 0xc00000fd
Отместване на грешка: 0x775e971d
ИД на процес на грешка: 0xc20
Начален час на приложението с грешки: 0xhl.exe0
Път на приложението с грешки: hl.exe1
Път на модула с грешки: hl.exe2
ИД на доклад: hl.exe3
Пълно име на пакета с грешка: hl.exe4
ИД на свързаното с пакета с грешка приложение: hl.exe5

Error: (06/26/2016 02:46:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Име на приложение с грешки: hl.exe, версия: 1.1.1.1, времево клеймо: 0x3fd11900
Име на модул с грешки: unknown, версия: 0.0.0.0, времево клеймо: 0x00000000
Код на изключение: 0xc00000fd
Отместване на грешка: 0x775e971d
ИД на процес на грешка: 0x131c
Начален час на приложението с грешки: 0xhl.exe0
Път на приложението с грешки: hl.exe1
Път на модула с грешки: hl.exe2
ИД на доклад: hl.exe3
Пълно име на пакета с грешка: hl.exe4
ИД на свързаното с пакета с грешка приложение: hl.exe5

System errors:
=============
Error: (07/06/2016 05:45:05 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Услуга Interactive Services Detection прекъсна със следната грешка:
%%1 = Невярна функция.

Error: (07/06/2016 02:28:57 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Услуга Service Installer TrueKey не може да бъде стартирана поради следната грешка:
%%2 = Системата не може да намери указания файл.

Error: (07/06/2016 02:28:49 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 1:49:23 AM on ‎7/‎6/‎2016 was unexpected.

Error: (07/05/2016 07:53:50 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C}

Error: (07/05/2016 07:52:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Услуга Service Installer TrueKey не може да бъде стартирана поради следната грешка:
%%2 = Системата не може да намери указания файл.

Error: (07/05/2016 07:52:18 PM) (Source: DCOM) (EventID: 10005) (User: SOBIESKICLUB)
Description: 1084ShellHWDetectionUnavailable{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (07/05/2016 07:52:17 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable

Error: (07/05/2016 07:52:09 PM) (Source: DCOM) (EventID: 10005) (User: SOBIESKICLUB)
Description: 1084NVSvcUnavailable{DCAB0989-1301-4319-BE5F-ADE89F88581C}

Error: (07/05/2016 07:52:05 PM) (Source: DCOM) (EventID: 10005) (User: SOBIESKICLUB)
Description: 1084ShellHWDetectionUnavailable{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (07/05/2016 07:51:56 PM) (Source: DCOM) (EventID: 10005) (User: SOBIESKICLUB)
Description: 1084ShellHWDetectionUnavailable{DD522ACC-F821-461A-A407-50B198B896DC}

CodeIntegrity:
===================================
Date: 2016-02-02 09:08:20.107
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-02-02 09:08:20.045
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-02-02 09:08:19.966
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-02-02 09:08:19.904
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-02-02 09:08:19.826
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-02-02 09:08:19.763
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-02-02 09:08:19.701
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-02-02 09:08:19.623
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-02-02 09:08:19.560
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-02-02 09:08:19.482
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Processor: Intel(R) Xeon(R) CPU E3-1230 v3 @ 3.30GHz
Percentage of memory in use: 13%
Total physical RAM: 16349.75 MB
Available physical RAM: 14148.67 MB
Total Virtual: 18781.75 MB
Available Virtual: 15606.57 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:97.31 GB) (Free:27.19 GB) NTFS
Drive d: () (Fixed) (Total:833.85 GB) (Free:176.53 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 483B2AF7)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=97.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=833.9 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

6 юли 201610 г.

Здравейте.

Моля, не рестартирайте системата докато програмите работят, може да отнемат известно време докато си свършат работата!

СТЪПКА 1

Влезте в Control Panel => Unistall a program => намерете и деинсталирайте следния софтуер:

Цитат

McAfee Security Scan Plus

СТЪПКА 2

Изтеглете fixlist.txt и го запазете на десктопа.
Стартирайте FRST.exe и натиснете бутона Fix веднъж!
След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.

Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

СТЪПКА 3

Изтеглете и стартирайте AdwCleaner.exe.
Натиснете бутона Scan.
AdwCleaner ще започне да проверява компютъра.
След като проверката приключи натиснете бутона Clean.
Програмата ще затвори всички излишни процеси и след почистването ще иска да рестартира машината. Съгласете се.
Ще се появи автоматично лог файл с името (AdwCleaner[S1].txt и AdwCleaner[С1].txt) в C:\Adwcleaner
Публикувайте съдържанието на AdwCleaner[С1].txt в следващия си коментар.

СТЪПКА 4

Моля изтеглете Junkware Removal Tool на вашия десктоп.
Стартирайте инструмента JRT.exe
Ще се отвори ДОС прозорец. Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши.
Натиснете което и да е копче от клавиатурата.
Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt).
Моля копирайте съдържанието на лог файла в следващия си пост.

СТЪПКА 5

Направете ново сканиране с FRST и публикувайте логовете.

12 юли 201610 г.

Поради отсъствие на автора, темата се маркира като приключена!

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.