Здравейте. Използвам MalwareBytes Anti-Malware и MalwareBytes Anti-Exploit както и Kaspersky Total Security и Windows 10 Defender. Сканирах целия лаптоп с тези програми изстрих 20 вируса, но лаптопа пак ми създава проблеми. Забива и такива работи (докато гледам филм), а той е чисто нов на 1 месец (или 1 и половина).



FRST:

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2016
Ran by Vladi (administrator) on DESKTOP-P1SQD7P (01-09-2016 22:37:25)
Running from C:\Users\Vladi\Downloads
Loaded Profiles: Vladi (Available Profiles: Vladi)
Platform: Windows 10 Enterprise Version 1607 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

Failed to access process -> Secure System
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Windows (R) Win 7 DDK provider) C:\Windows\System32\AdminService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 17.0.0\avp.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Windows\System32\vmms.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Windows\System32\vmcompute.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 17.0.0\avpui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAgent.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.7.113.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
() C:\Program Files (x86)\Acer\Care Center\ACCStd.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerButton_NB.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11607.1001.51.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040792 2015-07-07] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\nvspcap64.dll [1767944 2016-06-14] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-03-22] (Adobe Systems Incorporated)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-07-16] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2313408 2016-04-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [UVS10 Preload] => C:\Program Files (x86)\Ulead Systems\Ulead VideoStudio SE DVD\uvPL.exe [36864 2011-08-10] (Ulead Systems, Inc.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2086240 2015-04-28] (Wondershare)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe [39792 2008-01-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2631120 2016-07-28] (Malwarebytes Corporation)
HKU\S-1-5-21-2816908210-2458137055-2526392203-1001\...\Run: [] => 0
HKU\S-1-5-21-2816908210-2458137055-2526392203-1001\...\Run: [Spotify Web Helper] => C:\Users\Vladi\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1554032 2016-07-11] (Spotify Ltd)
HKU\S-1-5-21-2816908210-2458137055-2526392203-1001\...\Run: [Spotify] => C:\Users\Vladi\AppData\Roaming\Spotify\Spotify.exe [6913648 2016-07-11] (Spotify Ltd)
HKU\S-1-5-21-2816908210-2458137055-2526392203-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2917456 2016-06-15] (Valve Corporation)
HKU\S-1-5-21-2816908210-2458137055-2526392203-1001\...\Run: [SideSync] => C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe [10952880 2016-03-18] ()
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-02] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-02] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-02] ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{c669f449-1692-4dae-9b08-031a5e4fa7bb}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{e799da2a-3c23-4db1-8e59-84bad1a310b2}: [DhcpNameServer] 192.168.1.1 192.168.1.1
ManualProxies: 

Internet Explorer:
==================
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-11-12] (IObit)
BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 17.0.0\x64\IEExt\ie_plugin.dll [2016-06-28] (AO Kaspersky Lab)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation)
BHO-x32: Adobe PDF Reader Link Helper -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22] (Adobe Systems Incorporated)
BHO-x32: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 17.0.0\IEExt\ie_plugin.dll [2016-06-28] (AO Kaspersky Lab)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
BHO-x32: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll [2013-11-29] (BitComet)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 17.0.0\x64\IEExt\ie_plugin.dll [2016-06-28] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 17.0.0\IEExt\ie_plugin.dll [2016-06-28] (AO Kaspersky Lab)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Vladi\AppData\Roaming\Mozilla\Firefox\Profiles\6of9y0kd.default
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-04-07] (Adobe Systems)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-21] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-21] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-21] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-21] (Foxit Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll [2013-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-04-07] (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-07-31] (Microsoft Corporation)
FF Extension: (Greasemonkey) - C:\Users\Vladi\AppData\Roaming\Mozilla\Firefox\Profiles\6of9y0kd.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2016-06-16]
FF Extension: (Scribd PDF Downloader) - C:\Users\Vladi\AppData\Roaming\Mozilla\Firefox\Profiles\6of9y0kd.default\extensions\{c2921baa-9930-4d73-a203-f69db858f139}.xpi [2016-06-16]
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2016-06-28]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi

Chrome: 
=======
CHR Profile: C:\Users\Vladi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Vladi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-04-16]
CHR Extension: (Google Docs) - C:\Users\Vladi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-04-16]
CHR Extension: (Google Drive) - C:\Users\Vladi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-16]
CHR Extension: (YouTube) - C:\Users\Vladi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-16]
CHR Extension: (Adblock Plus) - C:\Users\Vladi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-08-23]
CHR Extension: (Tampermonkey) - C:\Users\Vladi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2016-08-03]
CHR Extension: (Google Sheets) - C:\Users\Vladi\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-04-16]
CHR Extension: (Kaspersky Protection) - C:\Users\Vladi\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhoibnponjcgjgcnfacekaijdbbplhib [2016-08-31]
CHR Extension: (Google Docs Offline) - C:\Users\Vladi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-16]
CHR Extension: (JavaScript Popup Blocker) - C:\Users\Vladi\AppData\Local\Google\Chrome\User Data\Default\Extensions\hiajdlfgbgnnjakkbnpdhmhfhklkbiol [2016-06-16]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Vladi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-16]
CHR Extension: (ColorPick Eyedropper) - C:\Users\Vladi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohcpnigalekghcmgcdcenkpelffpdolg [2016-06-22]
CHR Extension: (Deezify) - C:\Users\Vladi\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiceggpepnlmecihfoclonmfndheebdi [2016-07-21]
CHR Extension: (Javascript Popup Blocker) - C:\Users\Vladi\AppData\Local\Google\Chrome\User Data\Default\Extensions\phhapihcombffnnagbmajhfncoajinlo [2016-07-04]
CHR Extension: (Gmail) - C:\Users\Vladi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-16]
CHR Extension: (Chrome Media Router) - C:\Users\Vladi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-31]
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKLM-x32\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [694464 2016-04-07] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2159320 2016-08-22] (Adobe Systems, Incorporated)
R2 AtherosSvc; C:\Windows\system32\AdminService.exe [355760 2016-06-26] (Windows (R) Win 7 DDK provider)
R2 AVP17.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
S3 cplspcon; C:\Windows\system32\IntelCpHDCPSvc.exe [604280 2016-04-16] (Intel Corporation)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573568 2015-05-14] (Acer Incorporated)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)
S3 hns; C:\Windows\System32\HostNetSvc.dll [537088 2016-08-06] (Microsoft Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [354936 2016-04-16] (Intel Corporation)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21184 2016-03-29] (Microsoft Corporation)
S3 klvssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 17.0.0\x64\vssbridge64.exe [77328 2016-06-28] (AO Kaspersky Lab)
R2 KSDE1.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [241544 2016-06-28] (AO Kaspersky Lab)
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2960672 2016-07-20] (IObit)
R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [750032 2016-07-28] (Malwarebytes Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2122248 2016-07-09] (Electronic Arts)
R3 QALSvc; C:\Program Files\Acer\Acer Quick Access\QALSvc.exe [395616 2015-07-18] (Acer Incorporated)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [450400 2015-07-18] (Acer Incorporated)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-07-16] (Microsoft Corporation)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\Wex.Services.exe [137216 2016-03-29] (Microsoft Corporation) [File not signed]
R2 UleadBurningHelper; C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2011-09-28] (Ulead Systems, Inc.) [File not signed]
R3 vmcompute; C:\Windows\system32\vmcompute.exe [1904640 2016-08-20] (Microsoft Corporation)
R2 vmms; C:\Windows\system32\vmms.exe [14414848 2016-08-20] (Microsoft Corporation)
S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [56552 2016-03-22] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
S2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.2.2.3\WsAppService.exe [413696 2016-06-17] (Wondershare) [File not signed]
S3 BstHdAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Service.exe" BstHdAndroidSvc Android [X]
S2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [X]
S3 BstHdPlusAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe" BstHdPlusAndroidSvc Android [X]
S2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [152672 2016-08-03] () [File not signed]
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [238936 2016-06-10] (AO Kaspersky Lab)
R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [75360 2016-08-04] ()
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [554416 2016-06-02] (AO Kaspersky Lab)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [63920 2016-06-07] (AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [86352 2016-06-15] (AO Kaspersky Lab)
R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [28792 2016-03-31] (AO Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [191312 2016-06-26] (AO Kaspersky Lab)
R1 klhk; C:\Windows\System32\drivers\klhk.sys [421200 2016-06-20] (AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP17.0.0\Bases\klids.sys [182360 2016-09-01] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [1012048 2016-06-26] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [49488 2016-06-20] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [52136 2016-05-19] (AO Kaspersky Lab)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [45488 2016-05-31] (AO Kaspersky Lab)
R3 kltap; C:\Windows\System32\drivers\kltap.sys [52152 2016-06-07] (The OpenVPN Project)
U0 klupd_klif_arkmon; C:\Windows\System32\Drivers\klupd_klif_arkmon.sys [223528 2016-08-31] (AO Kaspersky Lab)
U3 klupd_klif_klark; C:\Windows\System32\Drivers\klupd_klif_klark.sys [252560 2016-08-31] (AO Kaspersky Lab)
U0 klupd_klif_klbg; C:\Windows\System32\Drivers\klupd_klif_klbg.sys [112336 2016-08-31] (AO Kaspersky Lab)
U3 klupd_klif_mark; C:\Windows\System32\Drivers\klupd_klif_mark.sys [167904 2016-08-31] (AO Kaspersky Lab)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [85320 2016-06-18] (AO Kaspersky Lab)
R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [126864 2016-06-02] (AO Kaspersky Lab)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [194480 2016-06-14] (AO Kaspersky Lab)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21344 2015-07-10] (Acer Incorporated)
S3 lunparser; C:\Windows\System32\drivers\lunparser.sys [22528 2016-08-28] (Microsoft Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-09-01] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
S3 passthruparser; C:\Windows\System32\drivers\passthruparser.sys [24576 2016-08-28] (Microsoft Corporation)
S3 pcip; C:\Windows\System32\drivers\pcip.sys [46592 2016-08-28] (Microsoft Corporation)
S3 pvhdparser; C:\Windows\System32\drivers\pvhdparser.sys [50176 2016-08-28] (Microsoft Corporation)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
R3 Qcamain10x64; C:\Windows\System32\drivers\Qcamain10x64.sys [2336768 2016-07-16] (Qualcomm Atheros, Inc.)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14688 2015-07-10] (Acer Incorporated)
S3 ramparser; C:\Windows\System32\drivers\ramparser.sys [30720 2016-08-28] (Microsoft Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [895256 2015-06-05] (Realtek                                            )
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [402136 2015-05-27] (Realsil Semiconductor Corporation)
R3 SensorsSimulatorDriver; C:\Windows\System32\drivers\WUDFRd.sys [216064 2016-07-16] (Microsoft Corporation)
S3 ss_conn_usb_driver; C:\Windows\System32\Drivers\ss_conn_usb_driver.sys [42112 2016-04-25] (Samsung Electronics Co., Ltd.)
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [47784 2015-07-29] (Synaptics Incorporated)
R3 Synth3dVsp; C:\Windows\System32\drivers\synth3dvsp.sys [103424 2016-08-28] (Microsoft Corporation)
S3 tap-tb-0901; C:\Windows\System32\drivers\tap-tb-0901.sys [38656 2015-08-10] (The OpenVPN Project)
S3 vhdparser; C:\Windows\System32\drivers\vhdparser.sys [26624 2016-08-28] (Microsoft Corporation)
R2 VMSP; C:\Windows\System32\drivers\vmswitch.sys [1617408 2016-08-20] (Microsoft Corporation)
R0 vmsproxy; C:\Windows\System32\drivers\vmsproxy.sys [33632 2016-08-31] (Microsoft Corporation)
S3 VMSVSF; C:\Windows\System32\drivers\vmswitch.sys [1617408 2016-08-20] (Microsoft Corporation)
S3 VMSVSP; C:\Windows\System32\drivers\vmswitch.sys [1617408 2016-08-20] (Microsoft Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 WinNat; C:\Windows\System32\drivers\winnat.sys [207360 2016-08-28] (Microsoft Corporation)
S3 WsAudioDevice_383; C:\Windows\system32\drivers\VirtualAudio.sys [31080 2016-06-07] (Wondershare)
S2 BstkDrv; \??\C:\Program Files (x86)\BlueStacks\BstkDrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

NETSVC: hns -> C:\Windows\System32\HostNetSvc.dll (Microsoft Corporation)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-09-01 22:37 - 2016-09-01 22:38 - 00029058 _____ C:\Users\Vladi\Downloads\FRST.txt
2016-09-01 22:36 - 2016-09-01 22:37 - 00000000 ____D C:\FRST
2016-09-01 20:49 - 2016-09-01 22:35 - 02397696 _____ (Farbar) C:\Users\Vladi\Downloads\FRST64.exe
2016-09-01 19:57 - 2016-09-01 19:57 - 00000000 ___HD C:\OneDriveTemp
2016-09-01 17:16 - 2016-09-01 17:16 - 00007132 _____ C:\Users\Vladi\Desktop\[ www.scenetime.com Join us now ] - Penn.and.Teller.Fool.Us.S03E08.480p.x264-mSD.torrent
2016-09-01 01:03 - 2016-09-01 01:06 - 00553156 _____ C:\WINDOWS\Minidump\090116-31921-01.dmp
2016-08-31 23:29 - 2016-08-31 23:29 - 00252560 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klark.sys
2016-08-31 23:28 - 2016-08-31 23:28 - 00223528 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_arkmon.sys
2016-08-31 23:28 - 2016-08-31 23:28 - 00167904 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_mark.sys
2016-08-31 23:28 - 2016-08-31 23:28 - 00112336 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klbg.sys
2016-08-31 23:27 - 2016-08-31 23:27 - 00001447 _____ C:\Users\Public\Desktop\Kaspersky Secure Connection.lnk
2016-08-31 23:27 - 2016-08-31 23:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection
2016-08-31 23:26 - 2016-09-01 20:08 - 00003240 _____ C:\WINDOWS\System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}
2016-08-31 23:26 - 2016-08-31 23:28 - 00000000 ____D C:\Program Files\Common Files\AV
2016-08-31 23:26 - 2016-08-31 23:26 - 00002208 _____ C:\Users\Public\Desktop\Safe Money.lnk
2016-08-31 23:26 - 2016-08-31 23:26 - 00002184 _____ C:\Users\Public\Desktop\Kaspersky Total Security.lnk
2016-08-31 23:26 - 2016-08-31 23:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security
2016-08-31 23:26 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll
2016-08-31 23:25 - 2016-09-01 21:27 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2016-08-31 23:25 - 2016-08-31 23:26 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2016-08-31 23:25 - 2016-06-26 15:14 - 01012048 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys
2016-08-31 23:25 - 2016-06-26 15:14 - 00191312 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klflt.sys
2016-08-31 23:25 - 2016-06-20 17:54 - 00421200 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klhk.sys
2016-08-31 23:17 - 2016-08-31 23:17 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2016-08-31 23:17 - 2016-08-31 23:17 - 00000000 ____D C:\ProgramData\BlueStacks
2016-08-31 23:17 - 2016-08-31 23:17 - 00000000 ____D C:\Program Files (x86)\BlueStacks
2016-08-31 22:59 - 2016-08-31 22:59 - 00001126 _____ C:\Users\Vladi\Downloads\Kaspersky_Reset_Trial_5.1.0.25.torrent
2016-08-31 22:58 - 2016-08-31 22:58 - 00012916 _____ C:\Users\Vladi\Downloads\Kaspersky Total Security 2016 16.0.1.445 (c) MR1 Final (1).torrent
2016-08-31 22:57 - 2016-08-31 22:59 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2016-08-31 22:51 - 2016-08-31 22:51 - 00005012 _____ C:\Users\Vladi\Downloads\Malwarebytes Anti-Malware Premium Keys.zip
2016-08-31 22:46 - 2016-08-31 22:46 - 00014596 _____ C:\Users\Vladi\Downloads\Malwarebytes Anti-Malware Premium v2.2.1.1043 Final (1).torrent
2016-08-31 22:42 - 2016-09-01 19:52 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-08-31 22:42 - 2016-08-31 22:42 - 00001175 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-08-31 22:42 - 2016-08-31 22:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-08-31 22:42 - 2016-08-31 22:42 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-08-31 22:42 - 2016-08-31 22:42 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-08-31 22:42 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-08-31 22:42 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-08-31 22:42 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-08-31 22:40 - 2016-09-01 20:46 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit
2016-08-31 22:40 - 2016-08-31 22:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Exploit
2016-08-31 22:40 - 2016-08-31 22:40 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Exploit
2016-08-31 22:34 - 2016-08-31 22:34 - 00012916 _____ C:\Users\Vladi\Downloads\Kaspersky Total Security 2016 16.0.1.445 (c) MR1 Final.torrent
2016-08-31 22:31 - 2016-08-31 22:31 - 00014596 _____ C:\Users\Vladi\Downloads\Malwarebytes Anti-Malware Premium v2.2.1.1043 Final.torrent
2016-08-31 22:30 - 2016-08-31 22:31 - 00013083 _____ C:\Users\Vladi\Downloads\MalwareBytes Anti-Exploit Premium 1.08.1.1189.torrent
2016-08-31 20:32 - 2016-08-27 08:12 - 04130944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-08-31 20:32 - 2016-08-27 08:12 - 00244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-08-31 20:32 - 2016-08-27 07:58 - 03893376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-08-31 20:32 - 2016-08-27 07:58 - 00121368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-08-31 20:32 - 2016-08-27 07:39 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2016-08-31 20:32 - 2016-08-27 07:38 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2016-08-31 20:32 - 2016-08-27 07:38 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2016-08-31 20:32 - 2016-08-27 07:37 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2016-08-31 20:32 - 2016-08-27 07:25 - 00804864 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2016-08-31 20:32 - 2016-08-20 09:06 - 01046976 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-08-31 20:32 - 2016-08-20 09:06 - 00885832 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-08-31 20:32 - 2016-08-20 09:05 - 01377008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2016-08-31 20:32 - 2016-08-20 09:04 - 07814488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-08-31 20:32 - 2016-08-20 09:04 - 01349120 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-08-31 20:32 - 2016-08-20 09:04 - 01163696 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-08-31 20:32 - 2016-08-20 09:03 - 01883784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-08-31 20:32 - 2016-08-20 08:52 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-08-31 20:32 - 2016-08-20 08:52 - 02190688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-08-31 20:32 - 2016-08-20 08:52 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-08-31 20:32 - 2016-08-20 08:52 - 01279328 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-08-31 20:32 - 2016-08-20 08:52 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-08-31 20:32 - 2016-08-20 08:52 - 00658776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-08-31 20:32 - 2016-08-20 08:52 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-08-31 20:32 - 2016-08-20 08:52 - 00178528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll
2016-08-31 20:32 - 2016-08-20 08:51 - 00681312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2016-08-31 20:32 - 2016-08-20 08:50 - 02913104 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-08-31 20:32 - 2016-08-20 08:50 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-08-31 20:32 - 2016-08-20 08:50 - 01099608 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2016-08-31 20:32 - 2016-08-20 08:50 - 00987992 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2016-08-31 20:32 - 2016-08-20 08:50 - 00073568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2016-08-31 20:32 - 2016-08-20 08:50 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-08-31 20:32 - 2016-08-20 08:50 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2016-08-31 20:32 - 2016-08-20 08:47 - 22218808 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-08-31 20:32 - 2016-08-20 08:47 - 01453992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-08-31 20:32 - 2016-08-20 08:47 - 01071728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-08-31 20:32 - 2016-08-20 08:46 - 01570680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-08-31 20:32 - 2016-08-20 08:43 - 02049536 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmwp.exe
2016-08-31 20:32 - 2016-08-20 08:43 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-08-31 20:32 - 2016-08-20 08:34 - 01430200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-08-31 20:32 - 2016-08-20 08:34 - 00782176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-08-31 20:32 - 2016-08-20 08:34 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll
2016-08-31 20:32 - 2016-08-20 08:33 - 05722312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-08-31 20:32 - 2016-08-20 08:33 - 00852824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-08-31 20:32 - 2016-08-20 08:32 - 02166232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-08-31 20:32 - 2016-08-20 08:32 - 00846552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-08-31 20:32 - 2016-08-20 08:29 - 20965240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-08-31 20:32 - 2016-08-20 08:29 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-08-31 20:32 - 2016-08-20 08:29 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-08-31 20:32 - 2016-08-20 08:25 - 01264912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-08-31 20:32 - 2016-08-20 08:22 - 22571008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-08-31 20:32 - 2016-08-20 08:22 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-08-31 20:32 - 2016-08-20 08:21 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2016-08-31 20:32 - 2016-08-20 08:21 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2016-08-31 20:32 - 2016-08-20 08:21 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL
2016-08-31 20:32 - 2016-08-20 08:21 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2016-08-31 20:32 - 2016-08-20 08:21 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2016-08-31 20:32 - 2016-08-20 08:21 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2016-08-31 20:32 - 2016-08-20 08:21 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\c_GSM7.DLL
2016-08-31 20:32 - 2016-08-20 08:20 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2016-08-31 20:32 - 2016-08-20 08:20 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2016-08-31 20:32 - 2016-08-20 08:20 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2016-08-31 20:32 - 2016-08-20 08:20 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL
2016-08-31 20:32 - 2016-08-20 08:19 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-08-31 20:32 - 2016-08-20 08:19 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2016-08-31 20:32 - 2016-08-20 08:18 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-08-31 20:32 - 2016-08-20 08:18 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-08-31 20:32 - 2016-08-20 08:18 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2016-08-31 20:32 - 2016-08-20 08:17 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2016-08-31 20:32 - 2016-08-20 08:17 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll
2016-08-31 20:32 - 2016-08-20 08:16 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2016-08-31 20:32 - 2016-08-20 08:16 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2016-08-31 20:32 - 2016-08-20 08:16 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll
2016-08-31 20:32 - 2016-08-20 08:15 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-08-31 20:32 - 2016-08-20 08:15 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-08-31 20:32 - 2016-08-20 08:15 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2016-08-31 20:32 - 2016-08-20 08:15 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-08-31 20:32 - 2016-08-20 08:15 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2016-08-31 20:32 - 2016-08-20 08:14 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL
2016-08-31 20:32 - 2016-08-20 08:14 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2016-08-31 20:32 - 2016-08-20 08:14 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2016-08-31 20:32 - 2016-08-20 08:14 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2016-08-31 20:32 - 2016-08-20 08:14 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL
2016-08-31 20:32 - 2016-08-20 08:14 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\c_GSM7.DLL
2016-08-31 20:32 - 2016-08-20 08:13 - 01081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-08-31 20:32 - 2016-08-20 08:13 - 00743424 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-08-31 20:32 - 2016-08-20 08:13 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll
2016-08-31 20:32 - 2016-08-20 08:13 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2016-08-31 20:32 - 2016-08-20 08:12 - 01014784 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-08-31 20:32 - 2016-08-20 08:12 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-08-31 20:32 - 2016-08-20 08:12 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-08-31 20:32 - 2016-08-20 08:12 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-08-31 20:32 - 2016-08-20 08:12 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2016-08-31 20:32 - 2016-08-20 08:12 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-08-31 20:32 - 2016-08-20 08:11 - 00965120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-08-31 20:32 - 2016-08-20 08:11 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-08-31 20:32 - 2016-08-20 08:11 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-08-31 20:32 - 2016-08-20 08:11 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-08-31 20:32 - 2016-08-20 08:10 - 01904640 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmcompute.exe
2016-08-31 20:32 - 2016-08-20 08:10 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2016-08-31 20:32 - 2016-08-20 08:10 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-08-31 20:32 - 2016-08-20 08:09 - 09128448 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-08-31 20:32 - 2016-08-20 08:09 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-08-31 20:32 - 2016-08-20 08:09 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2016-08-31 20:32 - 2016-08-20 08:08 - 01906176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2016-08-31 20:32 - 2016-08-20 08:08 - 01547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2016-08-31 20:32 - 2016-08-20 08:08 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-08-31 20:32 - 2016-08-20 08:08 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll
2016-08-31 20:32 - 2016-08-20 08:08 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-08-31 20:32 - 2016-08-20 08:08 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll
2016-08-31 20:32 - 2016-08-20 08:07 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2016-08-31 20:32 - 2016-08-20 08:07 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2016-08-31 20:32 - 2016-08-20 08:07 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-08-31 20:32 - 2016-08-20 08:07 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2016-08-31 20:32 - 2016-08-20 08:07 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2016-08-31 20:32 - 2016-08-20 08:07 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll
2016-08-31 20:32 - 2016-08-20 08:07 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll
2016-08-31 20:32 - 2016-08-20 08:06 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-08-31 20:32 - 2016-08-20 08:06 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2016-08-31 20:32 - 2016-08-20 08:06 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll
2016-08-31 20:32 - 2016-08-20 08:05 - 14414848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmms.exe
2016-08-31 20:32 - 2016-08-20 08:05 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-08-31 20:32 - 2016-08-20 08:04 - 23682560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-08-31 20:32 - 2016-08-20 08:04 - 03245056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2016-08-31 20:32 - 2016-08-20 08:04 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-08-31 20:32 - 2016-08-20 08:04 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2016-08-31 20:32 - 2016-08-20 08:04 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2016-08-31 20:32 - 2016-08-20 08:04 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll
2016-08-31 20:32 - 2016-08-20 08:03 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2016-08-31 20:32 - 2016-08-20 08:03 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-08-31 20:32 - 2016-08-20 08:03 - 02846208 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2016-08-31 20:32 - 2016-08-20 08:02 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-08-31 20:32 - 2016-08-20 08:01 - 04612096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-08-31 20:32 - 2016-08-20 08:01 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2016-08-31 20:32 - 2016-08-20 08:01 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll
2016-08-31 20:32 - 2016-08-20 08:00 - 19423232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-08-31 20:32 - 2016-08-20 08:00 - 08124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-08-31 20:32 - 2016-08-20 08:00 - 01316352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2016-08-31 20:32 - 2016-08-20 08:00 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll
2016-08-31 20:32 - 2016-08-20 07:59 - 07624192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-08-31 20:32 - 2016-08-20 07:59 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2016-08-31 20:32 - 2016-08-20 07:59 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-08-31 20:32 - 2016-08-20 07:59 - 01690112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-08-31 20:32 - 2016-08-20 07:59 - 01106944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2016-08-31 20:32 - 2016-08-20 07:59 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2016-08-31 20:32 - 2016-08-20 07:59 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll
2016-08-31 20:32 - 2016-08-20 07:58 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-08-31 20:32 - 2016-08-20 07:58 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll
2016-08-31 20:32 - 2016-08-20 07:57 - 02680832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-08-31 20:32 - 2016-08-20 07:57 - 02264064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-08-31 20:32 - 2016-08-20 07:57 - 01282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-08-31 20:32 - 2016-08-20 07:56 - 02711040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2016-08-31 20:32 - 2016-08-20 07:56 - 02315264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-08-31 20:32 - 2016-08-20 07:56 - 02289664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-08-31 20:32 - 2016-08-20 07:56 - 02143232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2016-08-31 20:32 - 2016-08-20 07:56 - 01006080 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2016-08-31 20:32 - 2016-08-20 07:56 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-08-31 20:32 - 2016-08-20 07:56 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll
2016-08-31 20:32 - 2016-08-20 07:55 - 19418624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-08-31 20:32 - 2016-08-20 07:55 - 00726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-08-31 20:32 - 2016-08-20 07:54 - 00806912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2016-08-31 20:32 - 2016-08-20 07:53 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-08-31 20:32 - 2016-08-20 07:52 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-08-31 20:32 - 2016-08-20 07:51 - 06044672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-08-31 20:32 - 2016-08-20 07:51 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-08-31 20:32 - 2016-08-20 07:51 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2016-08-31 20:32 - 2016-08-20 07:50 - 01875456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-08-31 20:31 - 2016-08-27 15:45 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll
2016-08-31 20:31 - 2016-08-27 12:37 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll
2016-08-31 20:31 - 2016-08-27 07:44 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll
2016-08-31 20:31 - 2016-08-27 07:43 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll
2016-08-31 20:31 - 2016-08-20 09:26 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-08-31 20:31 - 2016-08-20 09:13 - 00590952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-08-31 20:31 - 2016-08-20 09:06 - 00108384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2016-08-31 20:31 - 2016-08-20 09:03 - 02257248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-08-31 20:31 - 2016-08-20 08:50 - 00942424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2016-08-31 20:31 - 2016-08-20 08:50 - 00807776 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2016-08-31 20:31 - 2016-08-20 08:42 - 02537824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2016-08-31 20:31 - 2016-08-20 08:20 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2016-08-31 20:31 - 2016-08-20 08:19 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmusrv.dll
2016-08-31 20:31 - 2016-08-20 08:19 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpcivsp.sys
2016-08-31 20:31 - 2016-08-20 08:17 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-08-31 20:31 - 2016-08-20 08:14 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll
2016-08-31 20:31 - 2016-08-20 08:12 - 01617408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmswitch.sys
2016-08-31 20:31 - 2016-08-20 08:12 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-08-31 20:31 - 2016-08-20 08:11 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2016-08-31 20:31 - 2016-08-20 08:10 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2016-08-31 20:31 - 2016-08-20 08:09 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-08-31 20:31 - 2016-08-20 08:05 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2016-08-31 20:31 - 2016-08-20 08:04 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2016-08-31 20:31 - 2016-08-20 08:03 - 00944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-08-31 20:31 - 2016-08-20 07:57 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2016-08-31 20:31 - 2016-08-20 07:56 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2016-08-31 20:31 - 2016-08-20 07:53 - 03617792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-08-31 20:31 - 2016-08-20 07:53 - 03299328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2016-08-31 20:31 - 2016-08-20 07:49 - 02999296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2016-08-31 20:31 - 2016-08-20 07:46 - 03105792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2016-08-31 20:31 - 2016-08-19 04:33 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS
2016-08-31 20:03 - 2016-08-31 20:05 - 00522860 _____ C:\WINDOWS\Minidump\083116-27593-01.dmp
2016-08-31 19:52 - 2016-08-31 19:53 - 00524076 _____ C:\WINDOWS\Minidump\083116-26093-01.dmp
2016-08-31 18:11 - 2016-08-31 18:12 - 00557340 _____ C:\WINDOWS\Minidump\083116-26828-01.dmp
2016-08-29 21:16 - 2016-08-29 21:16 - 14584566 _____ C:\Users\Vladi\Desktop\eminems.psd
2016-08-29 12:10 - 2016-08-29 12:10 - 00000000 ____D C:\Users\Vladi\Desktop\Нова папка
2016-08-29 12:09 - 2016-08-29 12:09 - 00631961 _____ C:\Users\Vladi\Downloads\crark51.rar
2016-08-28 20:40 - 2016-08-28 20:40 - 00000000 ____D C:\Users\Vladi\Desktop\YouTube
2016-08-28 20:39 - 2016-08-28 21:14 - 00000000 ____D C:\Users\Vladi\Desktop\Words
2016-08-28 20:39 - 2016-08-28 20:39 - 00000000 ____D C:\Users\Vladi\Desktop\Magic
2016-08-28 20:14 - 2016-08-28 10:05 - 00000000 ___DC C:\WINDOWS\Panther
2016-08-28 20:12 - 2016-08-28 20:12 - 00000000 ____D C:\Windows.old
2016-08-28 20:11 - 2016-08-28 20:11 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2016-08-28 20:08 - 2016-08-31 23:18 - 00000000 ____D C:\Program Files\Hyper-V
2016-08-28 20:08 - 2016-08-28 20:08 - 00000000 ___SD C:\WINDOWS\system32\containers
2016-08-28 20:08 - 2016-08-28 20:08 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2016-08-28 20:08 - 2016-08-28 20:08 - 00000000 ____D C:\Users\Public\Documents\Hyper-V
2016-08-28 20:08 - 2016-08-28 20:08 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-08-28 20:08 - 2016-08-28 20:08 - 00000000 ____D C:\Program Files\MSBuild
2016-08-28 20:08 - 2016-08-28 20:08 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-08-28 20:08 - 2016-08-28 09:29 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-08-28 20:07 - 2016-08-28 20:07 - 00199008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2016-08-28 20:07 - 2016-05-26 01:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-08-28 20:07 - 2016-05-26 01:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-08-28 20:07 - 2016-05-26 01:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2016-08-28 20:07 - 2016-05-25 22:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2016-08-28 20:07 - 2016-05-25 22:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-08-28 20:07 - 2016-05-25 22:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2016-08-28 17:23 - 2016-08-28 17:24 - 00527796 _____ C:\WINDOWS\Minidump\082816-28718-01.dmp
2016-08-28 16:50 - 2016-08-28 16:50 - 00524012 _____ C:\WINDOWS\Minidump\082816-26546-01.dmp
2016-08-28 16:15 - 2016-08-28 16:17 - 00534612 _____ C:\WINDOWS\Minidump\082816-30937-01.dmp
2016-08-28 15:25 - 2016-08-28 15:25 - 00000000 ____D C:\Program Files\CMAK
2016-08-28 15:25 - 2016-08-28 15:25 - 00000000 ____D C:\Program Files (x86)\CMAK
2016-08-28 15:21 - 2016-09-01 01:03 - 00000000 ____D C:\WINDOWS\Minidump
2016-08-28 15:21 - 2016-08-28 15:22 - 00266252 _____ C:\WINDOWS\Minidump\082816-50578-01.dmp
2016-08-28 15:00 - 2016-08-02 11:11 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-08-28 15:00 - 2016-08-02 11:10 - 00509952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-08-28 15:00 - 2016-08-02 10:58 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-08-28 15:00 - 2016-08-02 07:25 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-08-28 15:00 - 2016-07-22 04:32 - 00062816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2016-08-28 15:00 - 2016-07-22 04:25 - 00389000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2016-08-28 15:00 - 2016-07-22 04:18 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-08-28 15:00 - 2016-07-22 04:18 - 00297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2016-08-28 15:00 - 2016-07-22 04:11 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-08-28 15:00 - 2016-07-22 03:32 - 01708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2016-08-28 14:59 - 2016-07-22 03:31 - 00770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-08-28 14:58 - 2016-08-06 07:17 - 00790760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2016-08-28 14:58 - 2016-08-06 07:08 - 02251432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-08-28 14:58 - 2016-08-06 07:08 - 00509784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-08-28 14:58 - 2016-08-06 07:08 - 00313560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2016-08-28 14:58 - 2016-08-06 07:04 - 00361096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2016-08-28 14:58 - 2016-08-06 07:03 - 01557296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2016-08-28 14:58 - 2016-08-06 07:03 - 01343928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-08-28 14:58 - 2016-08-06 07:03 - 00955008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-08-28 14:58 - 2016-08-06 07:03 - 00529928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2016-08-28 14:58 - 2016-08-06 07:03 - 00036168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2016-08-28 14:58 - 2016-08-06 07:02 - 00321280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-08-28 14:58 - 2016-08-06 06:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-08-28 14:58 - 2016-08-06 06:48 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2016-08-28 14:58 - 2016-08-06 06:48 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll
2016-08-28 14:58 - 2016-08-06 06:48 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
2016-08-28 14:58 - 2016-08-06 06:48 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll
2016-08-28 14:58 - 2016-08-06 06:46 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL
2016-08-28 14:58 - 2016-08-06 06:45 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2016-08-28 14:58 - 2016-08-06 06:45 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2016-08-28 14:58 - 2016-08-06 06:45 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2016-08-28 14:58 - 2016-08-06 06:45 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe
2016-08-28 14:58 - 2016-08-06 06:44 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2016-08-28 14:58 - 2016-08-06 06:44 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll
2016-08-28 14:58 - 2016-08-06 06:41 - 13867520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-08-28 14:58 - 2016-08-06 06:41 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2016-08-28 14:58 - 2016-08-06 06:41 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll
2016-08-28 14:58 - 2016-08-06 06:40 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-08-28 14:58 - 2016-08-06 06:39 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll
2016-08-28 14:58 - 2016-08-06 06:37 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-08-28 14:58 - 2016-08-06 06:31 - 12174336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-08-28 14:58 - 2016-08-06 06:30 - 12345344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-08-28 14:58 - 2016-08-06 06:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-08-28 14:58 - 2016-08-06 06:28 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-08-28 14:58 - 2016-08-06 06:28 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2016-08-28 14:58 - 2016-08-06 06:28 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2016-08-28 14:58 - 2016-08-06 06:26 - 02422784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAJApi.dll
2016-08-28 14:58 - 2016-08-06 06:26 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-08-28 14:58 - 2016-08-06 06:25 - 01595904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-08-28 14:58 - 2016-08-06 06:24 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-08-28 14:58 - 2016-08-06 06:23 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-08-28 14:58 - 2016-08-06 06:21 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2016-08-28 14:58 - 2016-08-05 12:10 - 00939872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll
2016-08-28 14:58 - 2016-08-05 11:29 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2016-08-28 14:58 - 2016-08-05 11:23 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2016-08-28 14:58 - 2016-08-05 11:20 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2016-08-28 14:58 - 2016-08-05 11:18 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll
2016-08-28 14:57 - 2016-08-06 07:33 - 00354264 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-08-28 14:57 - 2016-08-06 07:31 - 00077664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2016-08-28 14:57 - 2016-08-06 07:31 - 00041824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2016-08-28 14:57 - 2016-08-06 07:18 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-08-28 14:57 - 2016-08-06 07:17 - 00450400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-08-28 14:57 - 2016-08-06 07:17 - 00224096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2016-08-28 14:57 - 2016-08-06 07:15 - 00408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2016-08-28 14:57 - 2016-08-06 07:13 - 01694200 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2016-08-28 14:57 - 2016-08-06 06:48 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2016-08-28 14:57 - 2016-08-06 06:46 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe
2016-08-28 14:57 - 2016-08-06 06:45 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2016-08-28 14:57 - 2016-08-06 06:45 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe
2016-08-28 14:57 - 2016-08-06 06:44 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2016-08-28 14:57 - 2016-08-06 06:44 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wnvapi.dll
2016-08-28 14:57 - 2016-08-06 06:41 - 00724992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wnv.sys
2016-08-28 14:57 - 2016-08-06 06:41 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
2016-08-28 14:57 - 2016-08-06 06:40 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll
2016-08-28 14:57 - 2016-08-06 06:40 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll
2016-08-28 14:57 - 2016-08-06 06:38 - 00526848 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-08-28 14:57 - 2016-08-06 06:33 - 01082368 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-08-28 14:57 - 2016-08-06 06:33 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-08-28 14:57 - 2016-08-06 06:31 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-08-28 14:57 - 2016-08-06 06:23 - 01508864 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-08-28 14:57 - 2016-08-06 06:23 - 01062400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-08-28 14:57 - 2016-08-06 06:23 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
2016-08-28 14:57 - 2016-08-06 06:19 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2016-08-28 14:57 - 2016-08-06 06:19 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storvsp.sys
2016-08-28 14:57 - 2016-08-05 12:14 - 01066328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2016-08-28 14:57 - 2016-08-05 12:12 - 05622600 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2016-08-28 14:57 - 2016-08-05 11:28 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2016-08-28 14:57 - 2016-08-05 11:22 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2016-08-28 14:57 - 2016-08-05 11:20 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2016-08-28 14:57 - 2016-08-05 11:08 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2016-08-28 14:56 - 2016-08-06 07:29 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2016-08-28 14:56 - 2016-08-06 07:26 - 01176664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2016-08-28 14:56 - 2016-08-06 07:23 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-08-28 14:56 - 2016-08-06 07:18 - 02745224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-08-28 14:56 - 2016-08-06 07:18 - 00396168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-08-28 14:56 - 2016-08-06 07:17 - 00619368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-08-28 14:56 - 2016-08-06 07:16 - 00435040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2016-08-28 14:56 - 2016-08-06 07:13 - 01847048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-08-28 14:56 - 2016-08-06 07:13 - 01066096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-08-28 14:56 - 2016-08-06 07:13 - 00595488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2016-08-28 14:56 - 2016-08-06 07:13 - 00381760 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-08-28 14:56 - 2016-08-06 07:13 - 00044472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2016-08-28 14:56 - 2016-08-06 07:09 - 00151224 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-08-28 14:56 - 2016-08-06 07:08 - 01469120 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-08-28 14:56 - 2016-08-06 07:08 - 00587968 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-08-28 14:56 - 2016-08-06 07:08 - 00050880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-08-28 14:56 - 2016-08-06 06:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-08-28 14:56 - 2016-08-06 06:48 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2016-08-28 14:56 - 2016-08-06 06:48 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll
2016-08-28 14:56 - 2016-08-06 06:47 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2016-08-28 14:56 - 2016-08-06 06:47 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2016-08-28 14:56 - 2016-08-06 06:47 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2016-08-28 14:56 - 2016-08-06 06:47 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
2016-08-28 14:56 - 2016-08-06 06:47 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll
2016-08-28 14:56 - 2016-08-06 06:46 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL
2016-08-28 14:56 - 2016-08-06 06:46 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe
2016-08-28 14:56 - 2016-08-06 06:46 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2016-08-28 14:56 - 2016-08-06 06:46 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2016-08-28 14:56 - 2016-08-06 06:45 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2016-08-28 14:56 - 2016-08-06 06:45 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpupvdev.dll
2016-08-28 14:56 - 2016-08-06 06:45 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2016-08-28 14:56 - 2016-08-06 06:44 - 00272384 _____ C:\WINDOWS\system32\PrivateCloudHNSPlugin.dll
2016-08-28 14:56 - 2016-08-06 06:44 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpcievdev.dll
2016-08-28 14:56 - 2016-08-06 06:44 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmwpctrl.dll
2016-08-28 14:56 - 2016-08-06 06:44 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll
2016-08-28 14:56 - 2016-08-06 06:43 - 00537088 _____ (Microsoft Corporation) C:\WINDOWS\system32\HostNetSvc.dll
2016-08-28 14:56 - 2016-08-06 06:43 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll
2016-08-28 14:56 - 2016-08-06 06:43 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-08-28 14:56 - 2016-08-06 06:43 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-08-28 14:56 - 2016-08-06 06:43 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2016-08-28 14:56 - 2016-08-06 06:42 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmprox.dll
2016-08-28 14:56 - 2016-08-06 06:42 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-08-28 14:56 - 2016-08-06 06:42 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsynthfcvdev.dll
2016-08-28 14:56 - 2016-08-06 06:42 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetMgmtIF.dll
2016-08-28 14:56 - 2016-08-06 06:41 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmuidevices.dll
2016-08-28 14:56 - 2016-08-06 06:41 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2016-08-28 14:56 - 2016-08-06 06:41 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2016-08-28 14:56 - 2016-08-06 06:41 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2016-08-28 14:56 - 2016-08-06 06:41 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2016-08-28 14:56 - 2016-08-06 06:40 - 02801152 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmchipset.dll
2016-08-28 14:56 - 2016-08-06 06:40 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-08-28 14:56 - 2016-08-06 06:40 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafpos.dll
2016-08-28 14:56 - 2016-08-06 06:39 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2016-08-28 14:56 - 2016-08-06 06:39 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmEmulatedStorage.dll
2016-08-28 14:56 - 2016-08-06 06:39 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-08-28 14:56 - 2016-08-06 06:39 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2016-08-28 14:56 - 2016-08-06 06:38 - 17187328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-08-28 14:56 - 2016-08-06 06:38 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmEmulatedNic.dll
2016-08-28 14:56 - 2016-08-06 06:38 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsynthstor.dll
2016-08-28 14:56 - 2016-08-06 06:36 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
2016-08-28 14:56 - 2016-08-06 06:36 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmSynthNic.dll
2016-08-28 14:56 - 2016-08-06 06:31 - 01052672 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2016-08-28 14:56 - 2016-08-06 06:31 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2016-08-28 14:56 - 2016-08-06 06:31 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2016-08-28 14:56 - 2016-08-06 06:30 - 13080576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-08-28 14:56 - 2016-08-06 06:29 - 13433856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-08-28 14:56 - 2016-08-06 06:29 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-08-28 14:56 - 2016-08-06 06:29 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2016-08-28 14:56 - 2016-08-06 06:29 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2016-08-28 14:56 - 2016-08-06 06:26 - 00758784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-08-28 14:56 - 2016-08-06 06:25 - 03116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAJApi.dll
2016-08-28 14:56 - 2016-08-06 06:24 - 02095616 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-08-28 14:56 - 2016-08-06 06:23 - 02370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2016-08-28 14:56 - 2016-08-06 06:23 - 01780736 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-08-28 14:56 - 2016-08-06 06:23 - 01491456 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-08-28 14:56 - 2016-08-06 06:23 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2016-08-28 14:56 - 2016-08-06 06:19 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2016-08-28 14:56 - 2016-08-05 12:05 - 00665768 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
2016-08-28 10:09 - 2016-08-28 10:09 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-08-28 10:06 - 2016-08-28 10:10 - 00000000 ____D C:\Users\Vladi\AppData\Local\ConnectedDevicesPlatform
2016-08-28 10:06 - 2016-08-28 10:06 - 00000020 ___SH C:\Users\Vladi\ntuser.ini
2016-08-28 10:05 - 2016-08-28 10:05 - 00000000 ____D C:\ProgramData\USOShared
2016-08-28 10:04 - 2016-08-28 10:04 - 00000000 _SHDL C:\Users\Default\My Documents
2016-08-28 10:04 - 2016-08-28 10:04 - 00000000 _SHDL C:\Users\Default\Documents\My Videos
2016-08-28 10:04 - 2016-08-28 10:04 - 00000000 _SHDL C:\Users\Default\Documents\My Pictures
2016-08-28 10:04 - 2016-08-28 10:04 - 00000000 _SHDL C:\Users\Default\Documents\My Music
2016-08-28 10:04 - 2016-08-28 10:04 - 00000000 _SHDL C:\Users\Default User\Documents\My Videos
2016-08-28 10:04 - 2016-08-28 10:04 - 00000000 _SHDL C:\Users\Default User\Documents\My Pictures
2016-08-28 10:04 - 2016-08-28 10:04 - 00000000 _SHDL C:\Users\Default User\Documents\My Music
2016-08-28 10:02 - 2016-08-28 10:04 - 00007623 _____ C:\WINDOWS\diagwrn.xml
2016-08-28 10:02 - 2016-08-28 10:04 - 00007623 _____ C:\WINDOWS\diagerr.xml
2016-08-28 09:58 - 2016-09-01 19:51 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-08-28 09:58 - 2016-08-28 17:31 - 00002496 _____ C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_Vladi
2016-08-28 09:58 - 2016-08-28 09:58 - 00004302 _____ C:\WINDOWS\System32\Tasks\Software Update Application
2016-08-28 09:58 - 2016-08-28 09:58 - 00003852 _____ C:\WINDOWS\System32\Tasks\ACCAgent
2016-08-28 09:58 - 2016-08-28 09:58 - 00003450 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-08-28 09:58 - 2016-08-28 09:58 - 00003310 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{586F316F-8BB1-4F4D-B41D-72C8D39F713A}
2016-08-28 09:58 - 2016-08-28 09:58 - 00003226 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-08-28 09:58 - 2016-08-28 09:58 - 00002824 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task
2016-08-28 09:58 - 2016-08-28 09:58 - 00002820 _____ C:\WINDOWS\System32\Tasks\ACC
2016-08-28 09:58 - 2016-08-28 09:58 - 00002774 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-P1SQD7P-Vladi
2016-08-28 09:58 - 2016-08-28 09:58 - 00002402 _____ C:\WINDOWS\System32\Tasks\DriverToolkit Autorun
2016-08-28 09:58 - 2016-08-28 09:58 - 00002328 _____ C:\WINDOWS\System32\Tasks\ACCBackgroundApplication
2016-08-28 09:58 - 2016-08-28 09:58 - 00002274 _____ C:\WINDOWS\System32\Tasks\{8E71DD8A-510E-430B-AC80-30D2D9AA376C}
2016-08-28 09:58 - 2016-08-28 09:58 - 00002264 _____ C:\WINDOWS\System32\Tasks\Power Button
2016-08-28 09:58 - 2016-08-28 09:58 - 00002222 _____ C:\WINDOWS\System32\Tasks\Power Management
2016-08-28 09:58 - 2016-08-28 09:58 - 00002180 _____ C:\WINDOWS\System32\Tasks\Quick Access
2016-08-28 09:49 - 2016-08-28 09:49 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-08-28 09:25 - 2016-08-28 09:51 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2016-08-28 09:23 - 2016-09-01 19:49 - 00000000 ____D C:\Users\Vladi
2016-08-28 09:23 - 2016-08-28 09:23 - 00000000 _SHDL C:\Users\Vladi\My Documents
2016-08-28 09:23 - 2016-08-28 09:23 - 00000000 _SHDL C:\Users\Vladi\Documents\My Videos
2016-08-28 09:23 - 2016-08-28 09:23 - 00000000 _SHDL C:\Users\Vladi\Documents\My Pictures
2016-08-28 09:23 - 2016-08-28 09:23 - 00000000 _SHDL C:\Users\Vladi\Documents\My Music
2016-08-28 09:22 - 2016-08-28 23:37 - 01058078 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-08-28 09:22 - 2016-08-28 09:22 - 00933028 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2016-08-28 09:20 - 2016-08-28 09:20 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2016-08-28 09:20 - 2016-08-28 09:20 - 00000000 ____D C:\ProgramData\NVIDIA
2016-08-28 09:20 - 2016-08-28 09:20 - 00000000 ____D C:\Program Files\Common Files\Atheros
2016-08-28 09:20 - 2016-06-29 20:50 - 06363072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2016-08-28 09:20 - 2016-06-29 20:50 - 02455608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2016-08-28 09:20 - 2016-06-29 20:50 - 01764408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2016-08-28 09:20 - 2016-06-29 20:50 - 01352760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2016-08-28 09:20 - 2016-06-29 20:50 - 00534072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2016-08-28 09:20 - 2016-06-29 20:50 - 00393784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2016-08-28 09:20 - 2016-06-29 20:50 - 00081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2016-08-28 09:20 - 2016-06-29 20:50 - 00071224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2016-08-28 09:20 - 2016-06-22 18:16 - 07208075 _____ C:\WINDOWS\system32\nvcoproc.bin
2016-08-28 09:19 - 2016-09-01 19:51 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-08-28 09:19 - 2016-08-28 09:29 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-08-28 09:19 - 2016-08-28 09:29 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-08-28 09:19 - 2016-08-28 09:29 - 00000000 ____D C:\Program Files\Intel
2016-08-28 09:19 - 2016-08-28 09:19 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2016-08-28 09:19 - 2016-07-16 14:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2016-08-28 09:19 - 2016-04-16 20:10 - 00082432 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2016-08-28 09:18 - 2016-08-28 09:18 - 32931716 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2016-08-28 09:18 - 2016-08-28 09:18 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2016-08-28 09:18 - 2016-08-28 09:18 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2016-08-28 09:18 - 2016-08-28 09:18 - 00000000 ____D C:\WINDOWS\system32\DAX2
2016-08-28 09:18 - 2016-08-28 09:18 - 00000000 ____D C:\Program Files\Realtek
2016-08-28 09:16 - 2016-09-01 22:22 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-08-28 09:16 - 2016-08-31 23:20 - 05043968 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-08-28 09:16 - 2016-08-28 09:16 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2016-08-27 23:29 - 2016-08-28 09:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2016-08-27 23:29 - 2016-08-27 23:29 - 00000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
2016-08-27 23:29 - 2016-08-27 23:29 - 00000000 ____D C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
2016-08-27 23:27 - 2016-08-27 23:27 - 00000000 ____D C:\Users\Vladi\AppData\Roaming\ProductData
2016-08-27 23:27 - 2016-08-27 23:27 - 00000000 ____D C:\Users\Vladi\AppData\IObit
2016-08-27 23:26 - 2016-08-28 17:31 - 00000310 _____ C:\WINDOWS\Tasks\Uninstaller_SkipUac_Vladi.job
2016-08-27 23:26 - 2016-08-28 17:06 - 00000000 ____D C:\ProgramData\IObit
2016-08-27 23:26 - 2016-08-27 23:31 - 00000000 ____D C:\ProgramData\ProductData
2016-08-27 23:26 - 2016-08-27 23:29 - 00000000 ____D C:\Users\Vladi\AppData\Roaming\IObit
2016-08-27 23:26 - 2016-08-27 23:29 - 00000000 ____D C:\Program Files (x86)\IObit
2016-08-27 23:26 - 2016-08-27 23:26 - 00000000 ____D C:\Users\Vladi\AppData\LocalLow\IObit
2016-08-23 16:56 - 2016-08-23 16:58 - 00000375 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2016-08-23 16:40 - 2016-08-27 23:04 - 00000000 ____D C:\Users\Vladi\AppData\Roaming\TunnelBear
2016-08-23 16:40 - 2016-08-23 16:40 - 00000000 ____D C:\Users\Vladi\AppData\Local\IsolatedStorage
2016-08-19 10:40 - 2016-08-19 10:40 - 00000000 ____D C:\Users\Vladi\AppData\Roaming\Skype
2016-08-15 09:36 - 2016-08-28 09:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyVPN
2016-08-15 09:36 - 2016-08-15 09:37 - 00000000 ____D C:\Program Files (x86)\MyVPN
2016-08-06 20:46 - 2016-08-06 21:24 - 00014519 _____ C:\Users\Vladi\Downloads\Eminem - Rap God (Explicit) - Copy.srt
2016-08-05 17:38 - 2016-08-06 21:24 - 00013857 _____ C:\Users\Vladi\Downloads\Eminem - Rap God (Explicit).srt

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-09-01 20:59 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\rescache
2016-09-01 19:57 - 2016-04-16 19:15 - 00000000 ___RD C:\Users\Vladi\OneDrive
2016-09-01 19:54 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-09-01 19:51 - 2016-04-16 19:53 - 00000000 __SHD C:\Users\Vladi\IntelGraphicsProfiles
2016-09-01 19:50 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\TAPI
2016-09-01 19:50 - 2016-07-16 09:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2016-09-01 19:49 - 2016-04-16 21:00 - 00000000 ____D C:\Users\Vladi\AppData\Roaming\BitComet
2016-09-01 19:47 - 2016-04-16 21:20 - 00000000 ____D C:\Users\Vladi\AppData\Local\ROX Player
2016-09-01 17:33 - 2016-04-16 21:02 - 00000000 ____D C:\KMPlayer
2016-09-01 09:36 - 2016-05-24 14:31 - 00000000 ____D C:\Program Files (x86)\Grand Theft Auto V
2016-09-01 02:07 - 2016-04-16 20:29 - 00000000 ____D C:\Users\Vladi\AppData\Local\Adobe
2016-09-01 01:11 - 2016-07-16 09:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2016-09-01 01:07 - 2016-07-16 14:45 - 00000000 ____D C:\WINDOWS\INF
2016-09-01 01:03 - 2016-05-18 14:44 - 1319492788 _____ C:\WINDOWS\MEMORY.DMP
2016-08-31 23:25 - 2016-07-16 14:47 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-08-31 23:25 - 2015-10-30 09:28 - 00000000 ____D C:\Users\Default.migrated
2016-08-31 23:24 - 2016-02-13 16:23 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-08-31 23:19 - 2016-07-16 14:47 - 00000000 ___SD C:\WINDOWS\system32\dsc
2016-08-31 23:19 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-08-31 23:19 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2016-08-31 23:19 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2016-08-31 23:19 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\et-EE
2016-08-31 23:19 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\es-MX
2016-08-31 23:19 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\en-GB
2016-08-31 23:19 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2016-08-31 23:18 - 2016-07-16 17:24 - 00000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2016-08-31 23:18 - 2016-07-16 14:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-08-31 23:18 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\Provisioning
2016-08-31 23:18 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2016-08-31 23:17 - 2016-07-16 14:47 - 00000000 __RHD C:\Users\Public\Libraries
2016-08-31 23:15 - 2016-07-16 14:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-08-31 20:14 - 2016-07-16 14:43 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2016-08-31 20:14 - 2016-07-16 14:43 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-08-31 20:14 - 2016-07-16 14:43 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2016-08-31 20:14 - 2016-07-16 14:43 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2016-08-31 20:14 - 2016-07-16 14:43 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-08-31 20:14 - 2016-07-16 14:43 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-08-31 20:14 - 2016-07-16 14:42 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2016-08-31 20:14 - 2016-07-16 14:42 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2016-08-31 20:14 - 2016-07-16 14:42 - 00409952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2016-08-31 20:14 - 2016-07-16 14:42 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2016-08-31 20:14 - 2016-07-16 14:42 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2016-08-31 20:14 - 2016-07-16 14:42 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-08-31 20:14 - 2016-07-16 14:42 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-08-31 20:13 - 2016-07-16 14:43 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2016-08-31 20:13 - 2016-07-16 14:43 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsif.dll
2016-08-31 20:13 - 2016-07-16 14:43 - 00033632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmsproxy.sys
2016-08-31 20:13 - 2016-07-16 14:43 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsifproxystub.dll
2016-08-31 20:13 - 2016-07-16 14:42 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-08-31 20:13 - 2016-07-16 14:42 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2016-08-31 20:13 - 2016-07-16 14:42 - 00114192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2016-08-31 20:13 - 2016-07-16 14:42 - 00079544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2016-08-31 16:36 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-08-31 06:28 - 2016-07-16 14:47 - 00000000 ___HD C:\Program Files\WindowsApps
2016-08-29 03:33 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\appcompat
2016-08-28 20:14 - 2016-07-16 14:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2016-08-28 20:08 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\schemas
2016-08-28 20:08 - 2016-07-16 14:43 - 04407808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvgm.exe
2016-08-28 20:08 - 2016-07-16 14:43 - 02315264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdp4vs.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 01569750 _____ C:\WINDOWS\system32\WindowsVirtualization.V2.mof
2016-08-28 20:08 - 2016-07-16 14:43 - 01241600 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmemulateddevices.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 01149404 _____ C:\WINDOWS\system32\WindowsHyperVCluster.V2.mof
2016-08-28 20:08 - 2016-07-16 14:43 - 00779776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmconnect.exe
2016-08-28 20:08 - 2016-07-16 14:43 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsconfig.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmcompute.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsmb.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmicvdev.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00336296 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmEngUM.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsynth3dvideo.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteFileBrowse.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmdynmem.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2016-08-28 20:08 - 2016-07-16 14:43 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CCG.exe
2016-08-28 20:08 - 2016-07-16 14:43 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\CCGLaunchPad.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmicrdv.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmserial.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmtpm.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00144967 _____ C:\WINDOWS\system32\virtmgmt.msc
2016-08-28 20:08 - 2016-07-16 14:43 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmdebug.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbusvdev.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\HgsClientWmi.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00128128 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsp.exe
2016-08-28 20:08 - 2016-07-16 14:43 - 00075616 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtpm.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContainerUpdater.exe
2016-08-28 20:08 - 2016-07-16 14:43 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\HyperVSysprepProvider.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pvhdparser.sys
2016-08-28 20:08 - 2016-07-16 14:43 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\vid.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00034816 _____ C:\WINDOWS\system32\ActivationVdev.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ramparser.sys
2016-08-28 20:08 - 2016-07-16 14:43 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdvgmProxy.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdvGpuInfo.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2016-08-28 20:08 - 2016-07-16 14:43 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdparser.sys
2016-08-28 20:08 - 2016-07-16 14:43 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00024752 _____ C:\WINDOWS\system32\sbresources.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\passthruparser.sys
2016-08-28 20:08 - 2016-07-16 14:43 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2016-08-28 20:08 - 2016-07-16 14:43 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\lunparser.sys
2016-08-28 20:08 - 2016-07-16 14:43 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdvgmProxy.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2016-08-28 20:08 - 2016-07-16 14:43 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\synth3dvideoproxy.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\HostGuardianServiceClientResources.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll
2016-08-28 20:08 - 2016-07-16 14:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll
2016-08-28 20:08 - 2016-07-16 14:41 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Vid.sys
2016-08-28 20:08 - 2016-07-16 14:41 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbusr.sys
2016-08-28 20:08 - 2016-07-16 14:41 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Synth3dVsp.sys
2016-08-28 20:08 - 2016-07-16 14:41 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pcip.sys
2016-08-28 20:08 - 2016-07-16 14:41 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbuspiper.dll
2016-08-28 18:53 - 2016-04-16 21:20 - 00000000 ____D C:\Users\Vladi\AppData\Roaming\.ACEStream
2016-08-28 17:55 - 2016-05-22 14:55 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2016-08-28 16:58 - 2016-04-16 19:13 - 00000000 ____D C:\Users\Vladi\AppData\Local\Packages
2016-08-28 15:32 - 2016-06-29 14:41 - 00000400 __RSH C:\ProgramData\ntuser.pol
2016-08-28 15:26 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-08-28 10:14 - 2016-04-16 19:15 - 00002412 _____ C:\Users\Vladi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-08-28 10:06 - 2016-05-20 23:02 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 11.0
2016-08-28 10:06 - 2016-05-20 22:57 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0
2016-08-28 10:06 - 2016-05-20 22:15 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 14.0
2016-08-28 10:05 - 2016-07-16 14:47 - 00000000 ____D C:\ProgramData\USOPrivate
2016-08-28 10:02 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-08-28 10:02 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\Registration
2016-08-28 10:02 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2016-08-28 09:58 - 2016-05-20 00:24 - 00022840 _____ C:\WINDOWS\system32\emptyregdb.dat
2016-08-28 09:51 - 2016-07-23 18:23 - 00000000 ____D C:\Users\Vladi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2016-08-28 09:51 - 2016-07-21 15:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ulead VideoStudio SE DVD
2016-08-28 09:51 - 2016-07-16 14:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-08-28 09:51 - 2016-07-09 17:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 12
2016-08-28 09:51 - 2016-07-09 15:41 - 00000000 ____D C:\Users\Vladi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Handbrake
2016-08-28 09:51 - 2016-05-21 01:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python Tools for Visual Studio 2015
2016-08-28 09:51 - 2016-05-20 23:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android SDK Tools
2016-08-28 09:51 - 2016-05-20 23:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2016-08-28 09:51 - 2016-05-20 23:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone SDK 8.0
2016-08-28 09:51 - 2016-05-20 23:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-08-28 09:51 - 2016-05-20 23:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone SDK 8.1
2016-08-28 09:51 - 2016-05-20 22:27 - 00000000 ____D C:\WINDOWS\SysWOW64\1033
2016-08-28 09:51 - 2016-05-20 22:15 - 00000000 ____D C:\WINDOWS\system32\1033
2016-08-28 09:51 - 2016-05-15 20:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.5
2016-08-28 09:51 - 2016-05-14 18:03 - 00000000 ____D C:\Users\Vladi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TVBulgaria
2016-08-28 09:51 - 2016-04-23 17:46 - 00000000 ____D C:\ProgramData\regid.1995-08.com.techsmith
2016-08-28 09:51 - 2016-04-23 17:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2016-08-28 09:51 - 2016-04-16 23:11 - 00000000 ____D C:\Users\Vladi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-08-28 09:51 - 2016-04-16 21:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Subtitle Edit
2016-08-28 09:51 - 2016-04-16 21:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters
2016-08-28 09:51 - 2016-04-16 21:47 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-08-28 09:51 - 2016-04-16 21:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-08-28 09:51 - 2016-04-16 21:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ROX Player
2016-08-28 09:51 - 2016-04-16 21:09 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools
2016-08-28 09:51 - 2016-04-16 21:03 - 00000000 ____D C:\Users\Vladi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2016-08-28 09:51 - 2016-04-16 21:01 - 00000000 ____D C:\Users\Vladi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-08-28 09:51 - 2016-04-16 21:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-08-28 09:51 - 2016-04-16 21:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit)
2016-08-28 09:51 - 2016-04-16 19:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-08-28 09:51 - 2016-04-16 19:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit PhantomPDF
2016-08-28 09:51 - 2016-04-16 19:33 - 00000000 ____D C:\WINDOWS\system32\ihvmanager
2016-08-28 09:51 - 2016-04-16 19:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2016-08-28 09:51 - 2016-02-13 16:04 - 00000000 ____D C:\WINDOWS\ShellNew
2016-08-28 09:30 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2016-08-28 09:30 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\spool
2016-08-28 09:29 - 2016-07-23 17:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTubeByClick.com
2016-08-28 09:29 - 2016-07-16 14:47 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2016-08-28 09:29 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-08-28 09:29 - 2016-07-16 14:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-08-28 09:29 - 2016-07-12 19:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam
2016-08-28 09:29 - 2016-06-22 14:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2016-08-28 09:29 - 2016-06-18 20:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JoWooD
2016-08-28 09:29 - 2016-05-20 23:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 5 SDK
2016-08-28 09:29 - 2016-05-20 23:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits
2016-08-28 09:29 - 2016-05-20 23:10 - 00000000 ____D C:\Program Files\IIS
2016-08-28 09:29 - 2016-05-20 23:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Expression
2016-08-28 09:29 - 2016-05-20 23:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2012
2016-08-28 09:29 - 2016-05-20 22:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015
2016-08-28 09:29 - 2016-05-16 20:49 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2016-08-28 09:29 - 2016-04-16 21:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2016-08-28 09:25 - 2015-07-10 14:04 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2016-08-28 09:22 - 2016-07-16 09:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-08-28 09:20 - 2016-07-16 14:47 - 00000000 ___RD C:\WINDOWS\PrintDialog
2016-08-28 09:20 - 2016-07-16 14:47 - 00000000 ___RD C:\WINDOWS\MiracastView
2016-08-28 09:20 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\Help
2016-08-28 08:52 - 2016-07-16 18:02 - 00000000 ___HD C:\$WINDOWS.~BT
2016-08-28 00:08 - 2016-07-27 22:21 - 00000000 ____D C:\Users\Vladi\AppData\Local\ElevatedDiagnostics
2016-08-27 23:35 - 2016-04-16 21:01 - 00000938 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-08-27 23:30 - 2016-04-23 18:01 - 00000000 ____D C:\Users\Vladi\AppData\Local\CrashDumps
2016-08-27 23:04 - 2016-04-16 19:39 - 00000000 ____D C:\ProgramData\Package Cache
2016-08-27 23:01 - 2016-04-16 21:01 - 00000934 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-08-27 23:00 - 2016-07-27 23:11 - 00000390 _____ C:\WINDOWS\Tasks\DriverToolkit Autorun.job
2016-08-27 22:57 - 2016-07-29 14:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avidemux (64 bits)
2016-08-23 20:43 - 2016-04-16 21:30 - 00000000 ____D C:\Program Files (x86)\Steam
2016-08-12 00:08 - 2016-04-16 21:06 - 00002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-08-12 00:07 - 2016-04-17 19:30 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-08-11 23:57 - 2016-04-17 19:30 - 147640136 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-08-07 12:54 - 2016-07-12 00:37 - 04173312 ___SH C:\Users\Vladi\Desktop\Thumbs.db
2016-08-03 21:56 - 2016-04-16 20:51 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-08-03 16:04 - 2016-06-22 14:09 - 00000000 ____D C:\Users\Vladi\Documents\GTA3 User Files

==================== Files in the root of some directories =======

2016-08-28 09:18 - 2016-08-28 09:18 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-07-21 17:40 - 2016-07-21 17:40 - 0010255 _____ () C:\ProgramData\regid.2011-06.com.youtubebyclick_3C521B99-9ACE-47EA-AC9F-26075467D03B.swidtag

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-08-28 09:15

==================== End of FRST.txt ============================

Addition.txt

Здравейте..!

 

 Сканиране с AdwCleaner

 
Моля, изтеглете и стартирайте програмата AdwCleaner (by Xplode):

• Затворете всички стартирани програми и браузъри
• Кликнете два пъти върху adwcleaner.exe за да стартирате инструмента.
• Натиснете OK, за да потвърдите, че всички стартирани програми ще бъдат затворени.
• Маркирайте Clean
• Вашият компютър ще се рестартира автоматично. Текстовия файл ще се отвори след рестарта.
• Моля, да публикувате съдържанието на този лог в отговора си

 

  Сканиране с Junkware Removal Tool
 
Моля, изтеглете Junkware Removal Tool (by Thisisu ) и запазете на вашия десктоп.

• Спрете временно работата на защитните програми.
• Стартирайте инструмента JRT.exe
• Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата.
• Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши.
• Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt).
• Моля копирайте съдържанието на лог файла в следващия си пост.

 

Публикувайте в следващия си пост всички дневници от сканиранията с  MalwareBytes Anti-Malware да ги видя аз тези 20 вируса какви са..:

• Отидете то табът History > Application Logs.

• Отворете рапорта с последната дата и час и натиснете бутона "Copy to Clipboard"
• Сега вече поставете съдържанието на лог файла с клавишната комбинацияCtrl + V и го публикувайте в следващия си коментар.

 

Направете ново  сканиране с Farbar Recovery Scan Tool като предварително изтриете вашето копие и карантинната папка на инструмента разположена в C:FRSТ\Quarantine. Изтеглете последна свежа версия и сканирайте..!

 

  Дневници
 
В следващия си отговор, моля да включите следните дневници:

• AdwCleaner.txt
• JRT.txt

...и като допълнение прочетете този пост ...защото много хора мислят че MalwareBytes Anti-Malware и Kaspersky Total Security са несъвместими...!!!

Мисля че точно тук някъде е разковничето на вашия проблем..Но да не бързаме със заключенията..!

 https://forums.malwarebytes.org/topic/171664-malwarebytes-premium-and-kaspersky-total-security-2015/#comment-983337

....и направете препоръката за взаимното изключване на двете програми..! 

http://support.kaspersky.com/12034

 

Обаче нямам такава папка, за да я изключа от MalwareBytes Anti-Malware C:\Program Files (x86)\Carbonite

Addition.txt

AdwCleaner[C0].txt

AdwCleaner[S0].txt

FRST.txt

JRT.txt

malwarebytes anti-malware.txt

преди 1 час, bpkole написа:

C:\Program Files (x86)\Carbonite

Няма да я имате...просто скрийн шота е такъв...не я търсете. има ли подобрение след процедурите до тук..?

За сега не е забивал.

преди 1 минута, bpkole написа:

За сега не е забивал.

Ясно..има какво още да пипнем...ще огледам логовете и ще пиша ....! Но тази вечер ще съм ангажиран със семейни задължения и най - вероятно утре ще напиша скрипт...Поне може тази вечер да наблюдавате системата  и да видите как ще се държи.Добра работа..!   Приятна вечер ви пожелавам...!

п.п. не трийте нищо от програмите които използвахме до тук. Ще ги махнем накрая ..като приключим..!

Фикс с Farbar Recovery Scan Tool

 
 Изтеглете прикачения файл - fixlist.txt  и го запазете там, където сте свалили FRST.exe
Стартирайте отново FRST.exe и натиснете бутона Fix веднъж и изчакайте.
Ще се създаде нов лог файла FixLog.txt. Прикачете съдържанието му в следващия си коментар.
 
ЗАБЕЛЕЖКА: Този скрипт е написан специално за този потребител,и за тази конкретна машина. Изпълнението на фикса, на друг компютър може да доведе до увреждане на  операционната ви система

 

 

   Сканиране с SecurityCheck by glax24

• Изтеглете SecurityCheck by glax24 от тук и запомнете инструмента на десктопа .
• Стартирате програмата (ако използвате Windows XP) или стартирате с десен бутон на мишката от името на администратор (ако използватеWindows Vista/7/8/10)
• Изчакайте да приключи сканирането.Ще се отвори в текстов файл с имеSecurityCheck.txt. Копирайте съдържанието на  този файл  следващия си пост
• Можете да намерите този файл в основната директория на системния диск в папка с име SecurityCheck, напр. C:\SecurityCheck\SecurityCheck.txt

 

  Дневници
 
В следващия си отговор, моля да включите следните дневници:

• FixLog.txt
• SecurityCheck.txt

Fixlog.txt

SecurityCheck.txt

Цитат

WinRAR 5.31 (64-битова версия) v.5.31.0 Warning! Download Update

Microsoft Silverlight v.5.1.20513.0 Warning! Download Update

Java SE Development Kit 7 Update 55 v.1.7.0.550 Warning! This software is no longer supported. Please uninstall it and use Java SDK 8 (jdk-8u102-windows-i586.exe).

Adobe Reader 8.1.2 v.8.1.2 Warning! This software is no longer supported. Please uninstall it and use Adobe Reader XI or Adobe Acrobat Reader DC.

Обновете софтуера които съм поставил в карето горе..!

Деинсталирайте по стандартния начин следната програма:

Цитат

IObit Uninstaller v.5.4.0.125 Warning!

 

Как са нещата сега..Наблюдавате ли проблеми..?

Вчера когато ползвах програмите за сканиране и днес пак забиваше.

преди 2 часа, bpkole написа:

Вчера когато ползвах програмите за сканиране и днес пак забиваше.

 

При вас нещата определено не се дължат на зловреден софтуер..!

Контролни сканирания...:

 

 Malwarebytes Anti-Malware (MBAM)

Моля, изтеглете Malwarebytes Anti-Malware 2.2.0.1024 Final и я запазете на вашия десктоп.

• Стартирайте файла mbam-setup-bc.хххх-х.х.х.хххх.exe и следвайте указанията за да инсталирате програмата.
• След като инсталацията приключи се уверете че сте сложили отметка пред:
• Launch Malwarebytes Anti-Malware
• Отметката активираща пробния 14 дневен период също е маркиран по-подразбиране. Ако не желаете да тествате защитата в реално време на програмата през следващите 14 дни тогава премахнете отметката. Т.е. премахнете първата отметка:

• Натиснете бутона Finish.
• Отидете до табът Settings > Detection and Protection > и под категорията Detection Options включете опцията "Scan for rootkits".
• Отидете до табът Scan, сложете радио-бутона пред Threat Scan и след това натиснете бутона Scan Now >> . Ако е намерена актуализация тогава натиснете бутона Update Now.
• Ще започне проверка за зловреден софтуер.
• При някои инфекции можете да видите съобщението:
• "Could not load DDA driver"
• Натиснете "Yes" на това съобщение за да позволите драйвера да се зареди след рестарт.
• Разрешете на компютъра да се рестартира и след това продължете с останалите инструкции.
• След като проверката приключи натиснете бутона Apply Actions.
• Изчакайте да се появи прозореца подканващ ви да рестартирате и след това натиснете бутона Yes.
• След рестарта, когато се появи десктопа MBAM ще се зареди още веднъж.
• Отидете то табът History > Application Logs.

• Отворете рапорта с последната дата и час и натиснете бутона "Copy to Clipboard"
• Сега вече поставете съдържанието на лог файла с клавишната комбинация Ctrl + V и го публикувайте в следващия си коментар.

 

 

• Моля изтеглете EmsisoftEmergencyKit, стартирайте exe файла и посочете къде да се разархивира програмата - например в (C:\EEK), натискайки бутона Extract.
• Стартирайте иконата на файла Start Emsisoft Emergency Kit от десктопа за да стартирате приложението.
• Натиснете бутона"Yes", когато бъдете подканени да обновите дефинициите на програмата.

• След като процеса по обновяването на дефинициите приключи натиснете бутона "Scan".
• Натиснете бутона "Yes", когато бъдете попитани дали да програмата да включи засичането на потенциално нежелани приложения (Potentially Unwanted Applications).
• Сега вече изберете бутона Custom Scan. Премахнете от списъка всички дялове без C:\ (т.е. нека да остане само дял C:\ в списъка).
• Натиснете Next за да започне проверката.
• Когато проверката приключи натиснете бутона View Report.
• Копирайте съдържанието на лог файла в следващия си коментар.

 

Сканиране с ESET Online Scan

 

• Моля изтеглете и стартирайте изпълнимия файл от линка отдолу:
  ESET OnlineScan
• Сложете отметката пред
• Натиснете бутона
• Сложете отметката пред Enable detection of potentially unwanted applications.
• Сега кликнете на Advanced Settings и се уверете, че опцията Remove found threats не е маркирана, а следните са маркирани:
  • Scan archives
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth Technology
  • Изберете сега бутона Change и изберете само Operating memory и дял C:\

• Натиснете бутона Start.
• ESET ще започне да сваля и инсталира актуализации за вирусните дефиниции и след това ще започне да сканира компютъра. Бъдете търпеливи, защото процеса е бавен и може да отнеме доста време.
• След като проверката приключи натиснете бутона
• Сега натиснете бутона , и запазете файла на десктопа с име по избор като например (ESETScan.txt). Копирайте резултата в следващия си коментар.
• Натиснете бутона  и след това натиснете бутона  за да затворите приложението.

 

  Дневници
 
В следващия си отговор, моля да включите следните дневници:

• Дневник от Emsisoft Emergency Kit
• Дневник от ESET Online Scanner ( List of found threats )

 

 

 

 

Аз вече имам MalwareBytes трябва ли пак да го тегля?

Не ..не е нужно..!

преди 14 часа, icotonev написа:

Не ..не е нужно..!

Пуснах ESET, но от вчера е на стъпка 2 на 96% и ми казва горе в червени букви "Can not get update. Is proxy configured?"

• Изтеглете MiniToolBox.exe и го запазете на десктопа.
• Сложете всички отметки на : 

Цитат

Flush DNS

Report IE Proxy Settings

Reset IE Proxy Settings

Report FF Proxy Settings

Reset FF Proxy Settings

List content of Hosts

List IP configuration

List Winsock Entries

List last 10 Event Viewer log

List Installed Programs

List Devices (Only Problems)

List Users, Partitions and Memory size.

List Minidump Files

List Restore points

• и натиснете Go.
• Прикачете лог файла Result.txt в следващия си пост.

 

След това опитайте отново с Eset Online Scanner ..!

MTB.txt

преди 22 минути, icotonev написа:

След това опитайте отново с Eset Online Scanner ..!

Сега обнови ли се ...и всичко нормално ли тръгна..?

Да.

eset.txt

scan_160905-174139.txt

mbam.txt

 

Фикс с Farbar Recovery Scan Tool

 
 Изтеглете прикачения файл - fixlist.txt   и го запазете там, където сте свалили FRST.exe
Стартирайте отново FRST.exe и натиснете бутона Fix веднъж и изчакайте.
Ще се създаде нов лог файла FixLog.txt. Прикачете съдържанието му в следващия си коментар.
 
ЗАБЕЛЕЖКА: Този скрипт е написан специално за този потребител,и за тази конкретна машина. Изпълнението на фикса, на друг компютър може да доведе до увреждане на  операционната ви система

Fixlog.txt

Активни зарази не се виждат...Системата е чиста..!

Да премахнем програмите които използвахме:

Изтеглете DelFix и го стартирайте. Сложете отметка пред:

• Remove disinfection tools
• Purge system restore

 
..и след това натиснете бутона Run

• След като операцията е завърши,ще се създаде дневник
• Копирате го и го поставите в следващия си отговор

Инструмента ще се самоизтрие след като приключи своята задача!

Ако има нещо което използвахме в лечението до тук и не се е премахнало след последните инструкции го премахнете ръчно ,по стандартните методи..!

 

DelFix.txt

Да махна ли антивирусните?

преди 54 минути, bpkole написа:

Да махна ли антивирусните?

За кои антивирусни ми говорите..?