Вирус “Security error: This website requires Google chrome security plugin”

15 март 20179 г.

При чиста инсталация на Windows 8.1 32 бита не може да се влезе в почти всички сайтове от който и да е браузър дава постоянно тази грешка-единствено се променя логото на браузъра и името му? Сканирах с mbam, adwclenaer нищо не откри, в hosts файла на windows няма нищо, в стратирането и в регистрите също? Как може да се оправи? Ето логовете

FRST

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-03-2017
Ran by user (administrator) on DIMITAR (15-03-2017 15:06:09)
Running from C:\Users\user\Desktop
Loaded Profiles: user & UpdatusUser (Available Profiles: user & UpdatusUser)
Platform: Microsoft Windows 8.1 Enterprise (X86) Language: Български (България)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe
(HP) C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
(Panda Security, S.L.) C:\Program Files\Panda Security\Panda Security Protection\PSANHost.exe
( ) C:\Program Files\OpenVPN\bin\openvpnserv2.exe
(The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
(Panda Security, S.L.) C:\Program Files\Panda Security\Panda Devices Agent\AgentSvc.exe
(The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpn.exe
(Panda Security, S.L.) C:\Program Files\Panda Security\Panda Security Protection\PSUAService.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.4.9926.18589_x86__8wekyb3d8bbwe\glcnd.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Gemalto) C:\Program Files\Gemalto\IDGo 800 Certool\IDGo800Certool.exe
(Panda Security, S.L.) C:\Program Files\Panda Security\Panda Security Protection\PSUAMain.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
() C:\Program Files\OpenVPN\bin\openvpn-gui.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Desktop.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKLM\...\Run: [Certool] => C:\Program Files\Gemalto\IDGo 800 Certool\IDGo800Certool.exe [184152 2015-05-15] (Gemalto)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [151000 2016-07-30] (IvoSoft)
HKLM\...\Run: [PSUAMain] => C:\Program Files\Panda Security\Panda Security Protection\PSUAMain.exe [141760 2017-02-22] (Panda Security, S.L.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [15009280 2017-01-11] (Realtek Semiconductor)
HKLM\...\Run: [Bonus.SSR.FR12] => C:\Program Files\ABBYY FineReader 12\Bonus.ScreenshotReader.exe [1517088 2014-12-15] (ABBYY Production LLC.)
HKU\S-1-5-21-1965500355-43354352-2106249206-1001\...\Run: [OPENVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [569472 2017-01-31] ()
HKU\S-1-5-21-1965500355-43354352-2106249206-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7347928 2017-02-08] (Piriform Ltd)
HKU\S-1-5-21-1965500355-43354352-2106249206-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [3777728 2017-02-07] (Disc Soft Ltd)
HKU\S-1-5-21-1965500355-43354352-2106249206-1001\...\MountPoints2: {9d30aee7-07d1-11e7-9716-806e6f6e6963} - "F:\SETUP.EXE"
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)
GroupPolicyScripts: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{57D40BA0-B71D-4476-BA42-28A4E43FA009}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8F672DEA-69A3-4F81-A76A-09F97B7C12A6}: [NameServer] 192.168.5.1

Internet Explorer:
==================
HKU\S-1-5-21-1965500355-43354352-2106249206-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.bg/
HKU\S-1-5-21-1965500355-43354352-2106249206-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
URLSearchHook: [S-1-5-21-1965500355-43354352-2106249206-1004] ATTENTION => Default URLSearchHook is missing
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2011-06-12] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-03-13] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-03-13] (Oracle Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2016-07-30] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)

FireFox:
========
FF DefaultProfile: 6accfasx.default
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6accfasx.default [2017-03-15]
FF Homepage: Mozilla\Firefox\Profiles\6accfasx.default -> www.google.bg
FF Extension: (B-Trust Tool) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6accfasx.default\Extensions\[email protected] [2017-03-14]
FF Extension: (Adblock Plus) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6accfasx.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-03-13]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_25_0_0_127.dll [2017-03-14] ()
FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-03-13] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-03-13] (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-03-13] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-03-13] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np_hoem_x.dll [2012-06-05] ()

Chrome:
=======
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default [2017-03-15]
CHR Extension: (Google Документи) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-03-15]
CHR Extension: (Google Диск) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-03-15]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-03-15]
CHR Extension: (Google Документи офлайн) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-03-15]
CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-13]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-03-15]
CHR Extension: (Chrome Media Router) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-03-15]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1142464 2017-02-07] (Disc Soft Ltd)
R2 HP LaserJet Service; C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe [176128 2014-06-24] (HP) [File not signed]
R2 NanoServiceMain; C:\Program Files\Panda Security\Panda Security Protection\PSANHost.exe [110384 2017-02-14] (Panda Security, S.L.)
R2 OpenVpnService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [File not signed]
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [61056 2017-01-31] (The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [61056 2017-01-31] (The OpenVPN Project)
R2 PandaAgent; C:\Program Files\Panda Security\Panda Devices Agent\AgentSvc.exe [86104 2016-07-19] (Panda Security, S.L.)
R2 PSUAService; C:\Program Files\Panda Security\Panda Security Protection\PSUAService.exe [48584 2017-02-22] (Panda Security, S.L.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe [276992 2017-01-11] (Realtek Semiconductor)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [10351856 2016-12-15] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [278264 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22240 2013-08-22] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AmUStor; C:\Windows\system32\drivers\AmUStor.SYS [76280 2016-06-14] (Alcor Micro, Corp.)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [26168 2017-03-13] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [40504 2017-03-13] (Disc Soft Ltd)
S3 GemCCID; C:\Windows\system32\DRIVERS\GemCCID.sys [99968 2014-11-10] (Gemalto)
R1 NNSALPC; C:\Windows\System32\DRIVERS\NNSAlpc.sys [98624 2017-02-08] (Panda Security, S.L.)
R1 NNSHTTP; C:\Windows\System32\DRIVERS\NNSHttp.sys [210984 2016-06-29] (Panda Security, S.L.)
R1 NNSHTTPS; C:\Windows\System32\DRIVERS\NNSHttps.sys [119760 2017-02-08] (Panda Security, S.L.)
R1 NNSIDS; C:\Windows\System32\DRIVERS\NNSIds.sys [134368 2016-06-29] (Panda Security, S.L.)
R1 NNSNAHSL; C:\Windows\system32\DRIVERS\NNSNAHSL.sys [68376 2016-07-06] (Panda Security, S.L.)
R1 NNSPICC; C:\Windows\System32\DRIVERS\NNSPicc.sys [114536 2016-06-29] (Panda Security, S.L.)
R1 NNSPIHSW; C:\Windows\System32\DRIVERS\NNSPihsw.sys [75504 2016-06-29] (Panda Security, S.L.)
R1 NNSPOP3; C:\Windows\System32\DRIVERS\NNSPop3.sys [129224 2016-06-29] (Panda Security, S.L.)
R1 NNSPROT; C:\Windows\System32\DRIVERS\NNSProt.sys [315904 2016-06-29] (Panda Security, S.L.)
R1 NNSPRV; C:\Windows\System32\DRIVERS\NNSPrv.sys [232536 2017-02-08] (Panda Security, S.L.)
R1 NNSSMTP; C:\Windows\System32\DRIVERS\NNSSmtp.sys [116224 2016-06-29] (Panda Security, S.L.)
R1 NNSSTRM; C:\Windows\System32\DRIVERS\NNSStrm.sys [261064 2016-07-01] (Panda Security, S.L.)
R1 NNSTLSC; C:\Windows\System32\DRIVERS\NNSTlsc.sys [109904 2016-06-29] (Panda Security, S.L.)
R2 PSINAflt; C:\Windows\System32\DRIVERS\PSINAflt.sys [152336 2017-02-12] (Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [112400 2017-02-12] (Panda Security, S.L.)
R1 PSINKNC; C:\Windows\System32\DRIVERS\psinknc.sys [175888 2017-02-20] (Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [121616 2017-02-12] (Panda Security, S.L.)
R2 PSINProt; C:\Windows\System32\DRIVERS\PSINProt.sys [132880 2017-02-12] (Panda Security, S.L.)
R2 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [107792 2017-02-12] (Panda Security, S.L.)
R3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [58288 2016-08-08] (Panda Security, S.L.)
R3 tap0901; C:\Windows\system32\DRIVERS\tap0901.sys [23040 2016-04-21] (The OpenVPN Project)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [29128 2013-08-22] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [214368 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [93024 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-03-15 15:06 - 2017-03-15 15:06 - 00014393 _____ C:\Users\user\Desktop\FRST.txt
2017-03-15 15:03 - 2017-03-15 15:06 - 00000000 ____D C:\FRST
2017-03-15 15:01 - 2017-03-15 15:02 - 01766912 _____ (Farbar) C:\Users\user\Desktop\FRST.exe
2017-03-15 14:35 - 2017-03-15 14:36 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-03-15 14:30 - 2017-03-15 14:30 - 00843654 _____ C:\Users\user\Desktop\Untitled.FR12.tif
2017-03-15 14:24 - 2017-03-15 14:24 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2017-03-15 09:03 - 2017-03-15 09:03 - 00001127 _____ C:\Users\user\Desktop\ИЗТРИВАНЕ НА ФЕЙСБУК - Пряк път.lnk
2017-03-15 09:03 - 2017-03-15 09:03 - 00000983 _____ C:\Users\user\Desktop\КЛИМА - Пряк път.lnk
2017-03-15 09:02 - 2017-03-15 09:03 - 00000000 ____D C:\Users\user\Desktop\ДОКУМЕНТИ
2017-03-14 17:25 - 2017-03-14 17:28 - 00000000 ____D C:\Windows\system32\MRT
2017-03-14 17:25 - 2017-03-14 17:25 - 135086848 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-03-14 17:13 - 2014-04-16 01:35 - 00028352 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2017-03-14 16:19 - 2013-11-11 02:50 - 00036696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2017-03-14 16:19 - 2013-11-09 07:56 - 01391104 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2017-03-14 16:19 - 2013-11-08 10:40 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2017-03-14 16:19 - 2013-11-08 06:42 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\appmgr.dll
2017-03-14 16:19 - 2013-11-08 06:15 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2017-03-14 16:19 - 2013-11-08 05:30 - 01128448 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2017-03-14 16:19 - 2013-11-08 05:05 - 00734208 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2017-03-14 16:19 - 2013-11-05 16:08 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2017-03-14 16:19 - 2013-11-05 15:19 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2017-03-14 16:19 - 2013-11-04 04:28 - 01816576 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2017-03-14 16:19 - 2013-11-04 02:45 - 02038784 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2017-03-14 16:19 - 2013-11-01 12:17 - 00077144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2017-03-14 16:19 - 2013-11-01 07:57 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll
2017-03-14 16:19 - 2013-10-31 01:50 - 05753688 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-03-14 16:19 - 2013-10-26 22:28 - 00120152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SerCx2.sys
2017-03-14 16:19 - 2013-10-24 11:12 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll
2017-03-14 16:19 - 2013-10-17 12:36 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2017-03-14 16:18 - 2013-10-23 11:44 - 00104280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2017-03-14 16:18 - 2013-10-23 11:24 - 00142680 _____ (Microsoft Corporation) C:\Windows\system32\kd_02_8086.dll
2017-03-14 16:18 - 2013-10-23 11:21 - 00044904 _____ (Microsoft Corporation) C:\Windows\system32\wldp.dll
2017-03-14 16:18 - 2013-10-22 08:13 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\embeddedapplauncher.exe
2017-03-14 16:18 - 2013-10-22 08:03 - 02065448 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2017-03-14 16:18 - 2013-10-22 06:04 - 00618496 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2017-03-14 16:18 - 2013-10-22 05:02 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2017-03-14 16:18 - 2013-10-22 04:52 - 00667136 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2017-03-14 16:18 - 2013-10-22 03:59 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2017-03-14 16:18 - 2013-10-22 03:51 - 01634304 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-03-14 16:18 - 2013-10-22 03:40 - 01210368 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2017-03-14 16:18 - 2013-10-19 08:37 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-03-14 16:18 - 2013-10-19 06:52 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-03-14 16:18 - 2013-10-19 06:44 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-03-14 16:18 - 2013-10-19 06:43 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-03-14 16:18 - 2013-10-19 06:28 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-03-14 16:18 - 2013-10-19 06:03 - 00531968 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2017-03-14 16:18 - 2013-10-19 05:56 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-03-14 16:18 - 2013-10-19 05:55 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-03-14 16:18 - 2013-10-19 05:14 - 00888832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2017-03-14 16:18 - 2013-10-19 05:09 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-03-14 16:18 - 2013-10-19 05:02 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-03-14 16:18 - 2013-10-16 11:34 - 00518656 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2017-03-14 16:18 - 2013-10-13 02:49 - 00207192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2017-03-14 16:18 - 2013-10-13 02:29 - 00706536 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll
2017-03-14 16:18 - 2013-10-10 16:53 - 00235960 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2017-03-14 16:18 - 2013-10-10 16:53 - 00088272 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2017-03-14 16:18 - 2013-10-10 13:21 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2017-03-14 16:18 - 2013-10-10 13:12 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2017-03-14 16:18 - 2013-10-08 10:49 - 00415576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2017-03-14 16:18 - 2013-10-08 07:58 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2017-03-14 16:18 - 2013-10-08 07:15 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2017-03-14 16:18 - 2013-10-08 07:14 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2017-03-14 16:18 - 2013-10-08 06:50 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2017-03-14 16:18 - 2013-10-08 06:40 - 00795648 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2017-03-14 16:18 - 2013-10-07 08:07 - 00049544 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-03-14 16:18 - 2013-10-07 04:03 - 02833408 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-03-14 16:18 - 2013-10-05 14:30 - 00321368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2017-03-14 16:18 - 2013-10-05 14:30 - 00047960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2017-03-14 16:18 - 2013-10-05 14:05 - 00578952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2017-03-14 16:18 - 2013-10-05 11:59 - 00336896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-03-14 16:18 - 2013-10-05 10:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2017-03-14 16:18 - 2013-10-05 10:40 - 00795648 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2017-03-14 16:18 - 2013-10-05 10:29 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2017-03-14 16:18 - 2013-10-05 10:24 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\miutils.dll
2017-03-14 16:18 - 2013-10-05 10:21 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2017-03-14 16:18 - 2013-10-05 10:00 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll
2017-03-14 16:18 - 2013-10-05 09:35 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2017-03-14 16:18 - 2013-10-04 10:00 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2017-03-14 16:18 - 2013-09-17 08:31 - 00883184 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2017-03-14 16:18 - 2013-09-17 05:47 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2017-03-14 16:18 - 2013-09-14 14:39 - 01799944 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2017-03-14 16:18 - 2013-09-14 14:33 - 00345552 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2017-03-14 16:18 - 2013-09-14 11:29 - 00284160 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2017-03-14 16:18 - 2013-09-13 09:47 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe
2017-03-14 16:18 - 2013-09-12 10:02 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2017-03-14 16:18 - 2013-09-12 09:37 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2017-03-14 16:18 - 2013-09-12 09:37 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2017-03-14 16:18 - 2013-09-12 09:21 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2017-03-14 16:18 - 2013-09-12 09:17 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll
2017-03-14 16:18 - 2013-09-12 09:01 - 00272896 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2017-03-14 16:18 - 2013-09-10 06:28 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\msched.dll
2017-03-14 16:17 - 2013-12-11 09:36 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2017-03-14 16:17 - 2013-10-10 13:05 - 01019392 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2017-03-14 16:17 - 2013-10-10 12:27 - 00869888 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2017-03-14 16:16 - 2013-12-09 02:04 - 00980480 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2017-03-14 16:16 - 2013-11-27 16:00 - 00663680 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2017-03-14 16:16 - 2013-11-27 15:47 - 02804528 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2017-03-14 16:16 - 2013-11-27 13:03 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ipnat.sys
2017-03-14 16:16 - 2013-11-27 11:46 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2017-03-14 16:16 - 2013-11-27 11:16 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2017-03-14 16:16 - 2013-11-27 11:01 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2017-03-14 16:16 - 2013-11-27 10:56 - 00218112 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.dll
2017-03-14 16:16 - 2013-11-27 10:47 - 01284096 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2017-03-14 16:16 - 2013-11-27 10:23 - 03423744 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2017-03-14 16:16 - 2013-11-26 13:44 - 01204968 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2017-03-14 16:16 - 2013-11-26 13:44 - 01155384 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2017-03-14 16:16 - 2013-11-25 02:47 - 00116568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2017-03-14 16:16 - 2013-11-25 02:32 - 00871256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2017-03-14 16:16 - 2013-11-25 01:30 - 00513536 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2017-03-14 16:16 - 2013-11-23 10:28 - 00030552 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2017-03-14 16:16 - 2013-11-23 08:14 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\bi.dll
2017-03-14 16:16 - 2013-11-23 08:14 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BtaMPM.sys
2017-03-14 16:16 - 2013-11-23 08:09 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-03-14 16:16 - 2013-11-23 06:23 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2017-03-14 16:16 - 2013-11-23 05:15 - 02295808 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2017-03-14 16:16 - 2013-11-21 08:10 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\deviceregistration.dll
2017-03-14 16:16 - 2013-11-21 07:44 - 01088512 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-03-14 16:16 - 2013-11-15 16:25 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2017-03-14 16:16 - 2013-11-15 15:46 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2017-03-14 16:16 - 2013-11-15 15:20 - 00622080 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2017-03-14 16:16 - 2013-10-31 01:41 - 00552624 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2017-03-14 16:16 - 2013-09-17 08:31 - 00326024 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2017-03-14 16:16 - 2013-09-14 10:54 - 00380928 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2017-03-14 16:13 - 2014-01-08 02:55 - 00261464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2017-03-14 16:13 - 2014-01-08 02:35 - 01307992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-03-14 16:13 - 2014-01-08 02:35 - 00320856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-03-14 16:13 - 2014-01-04 17:08 - 00103936 _____ C:\Windows\system32\OEMLicense.dll
2017-03-14 16:13 - 2014-01-04 15:53 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll
2017-03-14 16:13 - 2014-01-03 01:48 - 00336896 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2017-03-14 16:13 - 2014-01-01 02:56 - 01445720 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-03-14 16:13 - 2014-01-01 02:55 - 00381168 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2017-03-14 16:13 - 2014-01-01 02:00 - 00980480 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2017-03-14 16:13 - 2014-01-01 01:59 - 00802816 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2017-03-14 16:13 - 2013-12-31 01:34 - 00218112 _____ (Microsoft Corporation) C:\Windows\system32\sti.dll
2017-03-14 16:13 - 2013-12-31 01:33 - 00811008 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2017-03-14 16:13 - 2013-12-31 01:33 - 00770560 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2017-03-14 16:13 - 2013-12-27 14:05 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll
2017-03-14 16:13 - 2013-12-27 14:05 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2017-03-14 16:13 - 2013-12-27 10:21 - 00517120 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll
2017-03-14 16:13 - 2013-12-27 09:03 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll
2017-03-14 16:13 - 2013-12-27 09:03 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2017-03-14 16:13 - 2013-12-27 08:37 - 00588800 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2017-03-14 16:13 - 2013-12-21 09:04 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll
2017-03-14 16:13 - 2013-12-17 08:13 - 00309248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2017-03-14 16:13 - 2013-12-14 08:31 - 13949440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2017-03-14 16:13 - 2013-12-13 11:14 - 00077992 _____ (Microsoft Corporation) C:\Windows\system32\easinvoker.exe
2017-03-14 16:13 - 2013-12-13 07:32 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2017-03-14 16:13 - 2013-12-09 06:51 - 18643560 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-03-14 16:13 - 2013-11-04 03:30 - 01765376 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2017-03-14 16:13 - 2013-10-05 14:05 - 01765384 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2017-03-14 16:13 - 2013-10-05 14:05 - 00406400 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2017-03-14 16:12 - 2013-11-27 16:09 - 02872688 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2017-03-14 16:12 - 2013-11-27 12:46 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe
2017-03-14 16:12 - 2013-11-27 10:40 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-03-14 16:12 - 2013-11-27 10:17 - 00695808 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2017-03-14 16:12 - 2013-10-19 09:14 - 00070680 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2017-03-14 16:10 - 2014-02-11 05:32 - 03486208 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-03-14 16:10 - 2013-12-09 01:55 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2017-03-14 16:10 - 2013-11-23 06:13 - 00348160 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2017-03-14 16:10 - 2013-10-03 11:02 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2017-03-14 16:10 - 2013-10-02 11:47 - 01018960 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2017-03-14 16:10 - 2013-10-01 05:36 - 00977408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2017-03-14 16:09 - 2014-10-31 00:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2017-03-14 16:09 - 2014-03-06 09:32 - 01033368 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-03-14 16:09 - 2014-03-06 09:10 - 00861984 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-03-14 16:09 - 2014-02-11 04:43 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2017-03-14 16:09 - 2014-01-31 16:04 - 00265560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2017-03-14 16:09 - 2014-01-31 15:47 - 02143960 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2017-03-14 16:09 - 2014-01-31 11:02 - 00352256 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2017-03-14 16:09 - 2014-01-29 09:44 - 01371824 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2017-03-14 16:09 - 2014-01-29 09:44 - 00408480 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2017-03-14 16:09 - 2014-01-29 09:44 - 00369280 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2017-03-14 16:09 - 2014-01-29 09:43 - 01883480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-03-14 16:09 - 2014-01-29 08:41 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2017-03-14 16:09 - 2014-01-27 20:23 - 02873344 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2017-03-14 16:09 - 2014-01-27 20:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2017-03-14 16:09 - 2014-01-27 20:20 - 00138752 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2017-03-14 16:09 - 2014-01-27 19:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2017-03-14 16:09 - 2014-01-27 19:00 - 01238016 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2017-03-14 16:09 - 2014-01-27 17:58 - 05770752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2017-03-14 16:09 - 2014-01-27 13:52 - 00386722 _____ C:\Windows\system32\ApnDatabase.xml
2017-03-14 16:09 - 2014-01-17 23:54 - 00669352 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2017-03-14 16:09 - 2014-01-07 06:30 - 02071552 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2017-03-14 16:09 - 2014-01-04 21:22 - 01202888 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2017-03-14 16:09 - 2014-01-04 16:23 - 11702272 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2017-03-14 16:09 - 2014-01-04 15:47 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2017-03-14 16:09 - 2014-01-04 15:36 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2017-03-14 16:09 - 2014-01-04 15:28 - 04961792 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2017-03-14 16:09 - 2013-12-21 14:06 - 05251224 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2017-03-14 16:09 - 2013-12-21 10:08 - 00438272 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
2017-03-14 16:09 - 2013-12-21 04:10 - 00009701 _____ C:\Windows\system32\connectedsearch-results.searchconnector-ms
2017-03-14 16:09 - 2013-12-20 10:26 - 01382208 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-03-14 16:09 - 2013-12-20 10:26 - 01271664 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2017-03-14 16:09 - 2013-12-09 01:54 - 01317376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-03-14 16:09 - 2013-12-09 01:43 - 00609792 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2017-03-14 16:09 - 2013-11-21 07:44 - 03936256 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2017-03-14 16:09 - 2013-11-09 07:52 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2017-03-14 16:09 - 2013-11-09 07:52 - 00240128 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2017-03-14 16:09 - 2013-10-31 01:39 - 01261320 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-03-14 16:09 - 2013-10-31 01:39 - 01159080 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2017-03-14 16:09 - 2013-10-15 10:03 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2017-03-14 16:09 - 2013-10-13 02:45 - 00069464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2017-03-14 16:09 - 2013-10-12 23:14 - 00549888 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2017-03-14 16:09 - 2013-10-12 23:02 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2017-03-14 16:09 - 2013-10-05 14:05 - 01090808 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-03-14 12:56 - 2017-03-14 12:56 - 00000000 ____D C:\Users\user\AppData\Roaming\ABBYY
2017-03-14 12:51 - 2017-03-14 12:51 - 00002875 _____ C:\Users\Public\Desktop\ABBYY FineReader 12.lnk
2017-03-14 12:51 - 2017-03-14 12:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 12
2017-03-14 12:46 - 2017-03-14 12:57 - 00000000 ____D C:\Users\user\AppData\Local\ABBYY
2017-03-14 12:46 - 2017-03-14 12:56 - 00000000 ____D C:\Program Files\ABBYY FineReader 12
2017-03-14 12:46 - 2017-03-14 12:46 - 00000000 ____D C:\ProgramData\ABBYY
2017-03-14 11:41 - 2017-03-14 11:41 - 00000000 ____D C:\Users\user\AppData\Roaming\Macromedia
2017-03-14 11:41 - 2017-03-14 11:41 - 00000000 ____D C:\Users\user\AppData\Local\Macromedia
2017-03-14 11:40 - 2017-03-14 11:41 - 00000000 ____D C:\Users\user\AppData\Local\Adobe
2017-03-14 11:31 - 2017-03-14 12:14 - 00000000 ____D C:\Users\user\Desktop\ABBYY FineReader Pro12
2017-03-14 11:24 - 2017-03-14 11:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2017-03-14 11:24 - 2017-03-14 11:24 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2017-03-14 11:23 - 2017-03-14 11:24 - 00000000 ____D C:\Program Files\HP
2017-03-14 11:16 - 2017-03-14 11:16 - 00000000 ____D C:\Windows\system32\SRSLabs
2017-03-14 11:16 - 2017-03-14 11:16 - 00000000 ____D C:\Windows\system32\RTCOM
2017-03-14 11:16 - 2017-01-11 11:37 - 04298752 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2017-03-14 11:16 - 2017-01-11 11:37 - 03173736 _____ (DTS, Inc.) C:\Windows\system32\slcnt32.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 02946560 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2017-03-14 11:16 - 2017-01-11 11:37 - 02904576 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 02800320 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 02558352 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 02149376 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 01074048 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00911080 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00866096 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDHF32.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00735920 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDRA32.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00726120 _____ (Sound Research, Corp.) C:\Windows\system32\SECOMN32.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00472528 _____ (Sound Research, Corp.) C:\Windows\system32\SEAPO32.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00401040 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00357152 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSXT.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00341144 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00232752 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00225040 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00225024 _____ (Sonic Focus, Inc.) C:\Windows\system32\SFFXProc.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00196008 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSHD.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00183608 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP360.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00150552 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00088264 _____ (Sonic Focus, Inc.) C:\Windows\system32\SFFXComm.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00083640 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00083624 _____ (Sonic Focus, Inc.) C:\Windows\system32\SFFXSAPO.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00083624 _____ (Sonic Focus, Inc.) C:\Windows\system32\SFFXHAPO.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00083624 _____ (Sonic Focus, Inc.) C:\Windows\system32\SFFXDAPO.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00078480 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO.dll
2017-03-14 11:16 - 2017-01-11 11:37 - 00022152 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR.dll
2017-03-14 11:15 - 2017-03-14 11:17 - 00000000 ___HD C:\Program Files\Temp
2017-03-14 11:15 - 2017-03-14 11:15 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2017-03-14 11:15 - 2017-03-14 11:15 - 00000000 ____D C:\Program Files\Realtek
2017-03-14 11:15 - 2017-01-11 11:37 - 72520712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2017-03-14 11:15 - 2017-01-11 11:37 - 09124224 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2017-03-14 11:15 - 2017-01-11 11:37 - 02920008 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2017-03-14 11:15 - 2017-01-11 11:37 - 02830480 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO.dll
2017-03-14 11:15 - 2017-01-11 11:37 - 01527752 _____ (Conexant Systems Inc.) C:\Windows\system32\CX32APO.dll
2017-03-14 11:15 - 2017-01-11 11:37 - 01451616 _____ (Conexant Systems Inc.) C:\Windows\system32\CX32Proxy.dll
2017-03-14 11:15 - 2017-01-11 11:37 - 00532888 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2017-03-14 11:15 - 2017-01-11 11:37 - 00371808 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP32A.dll
2017-03-14 11:15 - 2017-01-11 11:37 - 00307232 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT32.dll
2017-03-14 11:15 - 2017-01-11 11:37 - 00307232 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA32.dll
2017-03-14 11:15 - 2017-01-11 11:37 - 00181224 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED32A.dll
2017-03-14 11:15 - 2017-01-11 11:37 - 00105648 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTARen.dll
2017-03-14 11:15 - 2017-01-11 11:37 - 00101328 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2017-03-14 11:15 - 2017-01-11 11:37 - 00088272 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL32A.dll
2017-03-14 11:15 - 2017-01-11 11:37 - 00074376 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG32A.dll
2017-03-14 11:15 - 2016-09-22 14:55 - 02839520 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2017-03-14 11:11 - 2017-03-14 11:23 - 00000000 ____D C:\HP_LaserJet_Pro_MFP_M125-M126
2017-03-14 11:11 - 2017-03-14 11:11 - 00000000 ____D C:\ProgramData\HP
2017-03-14 11:11 - 2015-04-30 01:52 - 00828936 _____ (Hewlett-Packard) C:\Windows\system32\hpptsplj125126.dll
2017-03-14 11:11 - 2015-04-30 01:52 - 00491528 _____ (HP Inc., LP) C:\Windows\system32\hpwia2_lj125126.dll
2017-03-14 11:11 - 2014-06-19 01:34 - 00456480 _____ (Hewlett-Packard) C:\Windows\system32\hpzjcd01scan.dll
2017-03-14 11:04 - 2016-06-14 03:32 - 01085944 _____ C:\Windows\system32\AmRdrIco.icl
2017-03-14 11:04 - 2016-06-14 03:32 - 00076280 _____ (Alcor Micro, Corp.) C:\Windows\system32\Drivers\AmUStor.sys
2017-03-14 11:04 - 2016-06-14 03:32 - 00019968 _____ (Alcor Micro, Corp.) C:\Windows\system32\AmUStor2.dll
2017-03-14 11:04 - 2016-06-14 03:25 - 00041952 _____ C:\Windows\system32\AmUStor.ini
2017-03-14 11:04 - 2016-06-14 03:25 - 00000640 _____ C:\Windows\system32\VendorCmd6435.bin
2017-03-14 11:04 - 2016-06-14 03:25 - 00000124 _____ C:\Windows\system32\VendorCmd6485_SetSSC.bin
2017-03-14 11:04 - 2016-06-14 03:25 - 00000032 _____ C:\Windows\system32\VendorCommand_MS1bit.bin
2017-03-14 11:04 - 2016-06-14 03:25 - 00000032 _____ C:\Windows\system32\VendorCmd6485.bin
2017-03-14 11:04 - 2016-06-14 03:25 - 00000032 _____ C:\Windows\system32\VendorCmd6465.bin
2017-03-14 11:04 - 2016-06-14 03:25 - 00000008 _____ C:\Windows\system32\CardDetect6485.bin
2017-03-14 11:04 - 2016-06-14 03:25 - 00000008 _____ C:\Windows\system32\CardDetect6420.bin
2017-03-14 11:04 - 2016-06-14 03:25 - 00000008 _____ C:\Windows\system32\CardDetect6366.bin
2017-03-14 11:04 - 2016-06-14 03:25 - 00000008 _____ C:\Windows\system32\CardDetect6362.bin
2017-03-14 11:04 - 2016-06-14 03:25 - 00000008 _____ C:\Windows\system32\CardDetect6361.bin
2017-03-14 11:04 - 2016-06-14 03:25 - 00000008 _____ C:\Windows\system32\CardDetect6339.bin
2017-03-14 11:03 - 2013-04-05 16:31 - 00457248 _____ (Hewlett-Packard) C:\Windows\system32\hpzjcd01.dll
2017-03-14 11:03 - 2010-10-21 23:15 - 00187960 _____ (Hewlett Packard) C:\Windows\system32\hppscancoins32.dll
2017-03-14 11:01 - 2017-03-15 14:44 - 00000000 ____D C:\Program Files\DevID Agent
2017-03-13 14:11 - 2016-08-08 11:00 - 00058288 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSKMAD.sys
2017-03-13 14:07 - 2017-03-15 14:48 - 00000000 ____D C:\AdwCleaner
2017-03-13 14:06 - 2017-03-13 14:07 - 00002211 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Protection.lnk
2017-03-13 14:06 - 2017-03-13 14:06 - 00000000 ____D C:\Users\user\AppData\Roaming\Panda Security
2017-03-13 14:06 - 2017-03-13 14:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Protection
2017-03-13 14:06 - 2017-03-13 14:06 - 00000000 ____D C:\Program Files\Panda Security
2017-03-13 14:04 - 2017-03-13 14:06 - 00000000 ____D C:\ProgramData\Panda Security
2017-03-13 13:51 - 2017-03-13 13:51 - 00000039 _____ C:\Users\user\Downloads\starfm.m3u
2017-03-13 13:47 - 2017-03-13 13:47 - 00000000 ____D C:\Users\user\AppData\Roaming\vlc
2017-03-13 13:47 - 2017-03-13 13:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-03-13 13:46 - 2017-03-14 17:04 - 00000000 ____D C:\Users\user\AppData\Roaming\uTorrent
2017-03-13 13:46 - 2017-03-13 13:46 - 30533688 _____ C:\Users\user\Downloads\vlc-2.2.4-win32.exe
2017-03-13 13:46 - 2017-03-13 13:46 - 00000000 ____D C:\Program Files\VideoLAN
2017-03-13 13:45 - 2017-03-13 13:45 - 02405056 _____ (BitTorrent Inc.) C:\Users\user\Downloads\uTorrent.exe
2017-03-13 13:44 - 2017-03-13 13:44 - 00003109 _____ C:\Users\user\Desktop\Microsoft Word 2010.lnk
2017-03-13 13:44 - 2017-03-13 13:44 - 00003045 _____ C:\Users\user\Desktop\Microsoft Excel 2010.lnk
2017-03-13 13:44 - 2017-03-13 13:44 - 00000000 ____D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-03-13 13:44 - 2017-03-13 13:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-03-13 13:44 - 2017-03-13 13:44 - 00000000 ____D C:\Program Files\WinRAR
2017-03-13 13:42 - 2017-03-13 13:42 - 00001457 _____ C:\Users\user\Desktop\ActWereMgmnt.lnk
2017-03-13 13:40 - 2017-03-13 13:40 - 00002425 _____ C:\Users\Public\Desktop\WinLbd.lnk
2017-03-13 13:40 - 2017-03-13 13:40 - 00001346 _____ C:\Users\Public\Desktop\LbdDocuments.lnk
2017-03-13 13:40 - 2017-03-13 13:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinLbd
2017-03-13 13:39 - 2017-03-13 13:39 - 00000000 ____D C:\Program Files\WinLbd
2017-03-13 13:38 - 2017-03-13 13:38 - 00002431 _____ C:\Users\Public\Desktop\ActWare.lnk
2017-03-13 13:38 - 2017-03-13 13:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ActWare
2017-03-13 13:38 - 2017-03-13 13:38 - 00000000 ____D C:\Program Files\ActWare
2017-03-13 13:35 - 2017-03-13 13:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows
2017-03-13 13:35 - 2017-03-13 13:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
2017-03-13 13:33 - 2017-03-14 16:54 - 00000394 _____ C:\Users\user\Desktop\КАМЕРИ.website
2017-03-13 13:14 - 2017-03-13 13:14 - 01195795 _____ C:\Users\user\Downloads\A6Viewer.exe
2017-03-13 13:13 - 2017-03-13 13:13 - 00391762 _____ ( ) C:\Users\user\Downloads\ffactivex-setup-r39.exe
2017-03-13 13:07 - 2017-03-13 13:07 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2017-03-13 13:07 - 2017-03-13 13:07 - 00002507 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk
2017-03-13 13:07 - 2017-03-13 13:07 - 00000000 ____D C:\Users\user\AppData\Local\Apple
2017-03-13 13:07 - 2017-03-13 13:07 - 00000000 ____D C:\ProgramData\Apple Computer
2017-03-13 13:07 - 2017-03-13 13:07 - 00000000 ____D C:\ProgramData\Apple
2017-03-13 13:07 - 2017-03-13 13:07 - 00000000 ____D C:\Program Files\Safari
2017-03-13 13:07 - 2017-03-13 13:07 - 00000000 ____D C:\Program Files\Apple Software Update
2017-03-13 13:06 - 2017-03-13 13:07 - 38501744 _____ (Apple Inc.) C:\Users\user\Downloads\SafariSetup.exe
2017-03-13 13:01 - 2017-03-13 13:01 - 01330871 _____ C:\Users\user\Downloads\SetupActiveX(1).exe
2017-03-13 13:00 - 2017-03-13 13:08 - 00000000 ____D C:\Windows\system32\WATCH_16R_KCONFIG
2017-03-13 13:00 - 2017-03-13 13:00 - 01330871 _____ C:\Users\user\Downloads\SetupActiveX.exe
2017-03-13 12:56 - 2017-03-13 12:56 - 00000000 ____D C:\Users\user\AppData\Local\Disc_Soft_Ltd
2017-03-13 12:56 - 2017-03-13 12:56 - 00000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2017-03-13 12:54 - 2017-03-13 12:53 - 01209719 _____ C:\Windows\unins000.exe
2017-03-13 12:48 - 2017-03-13 12:56 - 00000000 ____D C:\Users\user\AppData\Roaming\DAEMON Tools Lite
2017-03-13 12:48 - 2017-03-13 12:48 - 00040504 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtliteusbbus.sys
2017-03-13 12:48 - 2017-03-13 12:48 - 00026168 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2017-03-13 12:48 - 2017-03-13 12:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2017-03-13 12:48 - 2017-03-13 12:48 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2017-03-13 12:48 - 2017-03-13 12:48 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2017-03-13 12:47 - 2017-03-13 12:51 - 00002159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-03-13 12:47 - 2017-03-13 12:47 - 02006576 _____ C:\Users\user\Downloads\wrar540(1).exe
2017-03-13 12:47 - 2017-03-13 12:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-03-13 12:47 - 2017-03-13 12:47 - 00000000 ____D C:\Program Files\CCleaner
2017-03-13 12:46 - 2017-03-13 12:47 - 00000000 ____D C:\Users\user\AppData\Local\Google
2017-03-13 12:46 - 2017-03-13 12:47 - 00000000 ____D C:\Program Files\Google
2017-03-13 12:46 - 2017-03-13 12:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2017-03-13 12:46 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2017-03-13 12:46 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2017-03-13 12:45 - 2017-03-13 12:49 - 00000000 ____D C:\Users\user\AppData\Roaming\Winamp
2017-03-13 12:45 - 2017-03-13 12:47 - 00000000 ____D C:\Program Files\Winamp
2017-03-13 12:45 - 2017-03-13 12:45 - 09261616 _____ (Piriform Ltd) C:\Users\user\Downloads\ccsetup527.exe
2017-03-13 12:45 - 2017-03-13 12:45 - 00694744 _____ (Disc Soft Ltd.) C:\Users\user\Downloads\DTLiteInstaller.exe
2017-03-13 12:45 - 2017-03-13 12:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2017-03-13 12:45 - 2017-03-13 12:45 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-03-13 12:45 - 2017-03-13 12:45 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2017-03-13 12:45 - 2017-03-13 12:45 - 00000000 ____D C:\Program Files\Common Files\PX Storage Engine
2017-03-13 12:45 - 2016-03-10 14:09 - 00053120 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2017-03-13 12:45 - 2016-03-10 14:08 - 00126336 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2017-03-13 12:45 - 2016-03-10 14:08 - 00024448 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-03-13 12:44 - 2017-03-13 12:44 - 22851472 _____ (Malwarebytes ) C:\Users\user\Downloads\mbam-setup-FileHippo.19901-2.2.1.1043.exe
2017-03-13 12:43 - 2017-03-13 12:43 - 12432368 _____ (Nullsoft, Inc.) C:\Users\user\Downloads\winamp5666_full_en-us.exe
2017-03-13 12:34 - 2017-03-15 14:19 - 00000000 ____D C:\Program Files\TeamViewer
2017-03-13 12:34 - 2017-03-13 12:34 - 00001013 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk
2017-03-13 12:34 - 2017-03-13 12:34 - 00001001 _____ C:\Users\Public\Desktop\TeamViewer 12.lnk
2017-03-13 12:34 - 2017-03-13 12:34 - 00000000 ____D C:\Users\user\AppData\Roaming\TeamViewer
2017-03-13 12:34 - 2017-03-13 12:34 - 00000000 ____D C:\ProgramData\Gemalto
2017-03-13 12:33 - 2017-03-13 12:33 - 12974216 _____ (TeamViewer GmbH) C:\Users\user\Downloads\TeamViewer_Setup_bg.exe
2017-03-13 12:31 - 2017-03-13 13:16 - 00000726 _____ C:\Users\user\Desktop\Национална база данни.website
2017-03-13 12:21 - 2017-03-13 12:21 - 04031440 _____ C:\Users\user\Downloads\adwcleaner_6.044.exe
2017-03-13 12:21 - 2017-03-13 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2017-03-13 12:21 - 2017-03-13 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2017-03-13 12:20 - 2017-03-13 12:20 - 00000000 ____D C:\Program Files\MSBuild
2017-03-13 12:20 - 2017-03-13 12:20 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2017-03-13 12:19 - 2017-03-13 12:19 - 00000000 ____D C:\Windows\PCHEALTH
2017-03-13 12:19 - 2017-03-13 12:19 - 00000000 ____D C:\Program Files\Microsoft Sync Framework
2017-03-13 12:17 - 2017-03-13 12:17 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 8
2017-03-13 12:16 - 2017-03-15 15:02 - 00000000 ____D C:\Users\user\AppData\Local\ClassicShell
2017-03-13 12:16 - 2017-03-13 12:19 - 00000000 ____D C:\Program Files\Microsoft Office
2017-03-13 12:16 - 2017-03-13 12:16 - 00000000 __RHD C:\MSOCache
2017-03-13 12:16 - 2017-03-13 12:16 - 00000000 ____D C:\Users\user\AppData\Local\Microsoft Help
2017-03-13 12:16 - 2017-03-13 12:16 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2017-03-13 12:15 - 2017-03-13 12:15 - 00000000 ____D C:\Users\user\AppData\Roaming\ClassicShell
2017-03-13 12:15 - 2017-03-13 12:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2017-03-13 12:15 - 2017-03-13 12:15 - 00000000 ____D C:\ProgramData\ClassicShell
2017-03-13 12:15 - 2017-03-13 12:15 - 00000000 ____D C:\Program Files\Classic Shell
2017-03-13 12:14 - 2017-03-13 12:14 - 07220496 _____ (IvoSoft) C:\Users\user\Downloads\ClassicShellSetup_4_3_0.exe
2017-03-13 12:11 - 2017-03-13 12:54 - 00191060 _____ C:\Windows\unins000.dat
2017-03-13 12:11 - 2017-03-13 12:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\B-Trust
2017-03-13 12:11 - 2017-03-13 12:54 - 00000000 ____D C:\Program Files\B-Trust
2017-03-13 12:11 - 2017-03-13 12:11 - 00000000 ____D C:\Users\user\AppData\LocalLow\Sun
2017-03-13 12:11 - 2017-03-13 12:11 - 00000000 ____D C:\Program Files\Gemalto
2017-03-13 12:11 - 2017-03-13 12:11 - 00000000 ____D C:\Program Files\Common Files\Java
2017-03-13 12:11 - 2015-08-11 11:06 - 02083296 _____ C:\Windows\system32\idprimepkcs11.dll
2017-03-13 12:10 - 2017-03-13 12:11 - 00000000 ____D C:\ProgramData\Oracle
2017-03-13 12:10 - 2017-03-13 12:10 - 00095808 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2017-03-13 12:10 - 2017-03-13 12:10 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_11_00.Wdf
2017-03-13 12:10 - 2017-03-13 12:10 - 00000000 ____D C:\Users\user\AppData\Roaming\Sun
2017-03-13 12:10 - 2017-03-13 12:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-03-13 12:10 - 2017-03-13 12:10 - 00000000 ____D C:\Program Files\Java
2017-03-13 12:09 - 2017-03-13 12:09 - 00738880 _____ (Oracle Corporation) C:\Users\user\Downloads\jxpiinstall.exe
2017-03-13 12:07 - 2017-03-13 12:07 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2017-03-13 12:07 - 2017-03-13 12:07 - 00000000 ____D C:\Users\UpdatusUser
2017-03-13 12:07 - 2017-03-13 12:07 - 00000000 ____D C:\ProgramData\NVIDIA
2017-03-13 12:07 - 2012-12-07 10:47 - 03969384 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2017-03-13 12:07 - 2012-12-07 10:47 - 02857832 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll
2017-03-13 12:07 - 2012-12-07 10:47 - 02557288 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2017-03-13 12:07 - 2012-12-07 10:47 - 00645992 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2017-03-13 12:07 - 2012-12-07 10:47 - 00108392 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2017-03-13 12:07 - 2012-12-07 10:47 - 00062312 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2017-03-13 12:06 - 2017-03-13 12:07 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-03-13 12:06 - 2017-03-13 12:06 - 02006576 _____ C:\Users\user\Downloads\wrar540.exe
2017-03-13 12:06 - 2017-03-13 12:06 - 00000000 ____D C:\Users\user\OpenVPN
2017-03-13 12:06 - 2017-03-13 12:06 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-03-13 12:06 - 2012-12-18 03:22 - 00052584 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2017-03-13 12:04 - 2017-03-13 13:35 - 00001077 _____ C:\Users\Public\Desktop\OpenVPN GUI.lnk
2017-03-13 12:04 - 2017-03-13 12:04 - 00000000 ____D C:\Program Files\TAP-Windows
2017-03-13 12:04 - 2017-03-13 12:04 - 00000000 ____D C:\Program Files\OpenVPN
2017-03-13 12:03 - 2017-03-13 12:03 - 03379880 _____ C:\Users\user\Downloads\openvpn-install-2.4.0-I602.exe
2017-03-13 12:00 - 2017-03-15 15:01 - 00000000 ____D C:\Users\user\AppData\LocalLow\Mozilla
2017-03-13 12:00 - 2017-03-13 13:00 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-03-13 12:00 - 2017-03-13 12:04 - 00000000 ____D C:\Users\user\AppData\Local\Mozilla
2017-03-13 12:00 - 2017-03-13 12:00 - 00001129 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-03-13 12:00 - 2017-03-13 12:00 - 00000000 ____D C:\Users\user\AppData\Roaming\Mozilla
2017-03-13 12:00 - 2017-03-13 12:00 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-03-13 11:59 - 2017-03-13 11:59 - 00245600 _____ C:\Users\user\Downloads\Firefox Setup Stub 52.0.exe
2017-03-13 11:58 - 2017-03-15 15:05 - 00000000 ____D C:\Users\user\Desktop\ДЕВНЕНСКИ ХЪЛМОВЕ
2017-03-13 11:58 - 2017-03-13 12:11 - 00000000 ____D C:\Users\user\Desktop\с. Кипра_files
2017-03-13 11:58 - 2017-03-13 11:58 - 00000000 ____D C:\Users\user\Desktop\удоств. за наследници
2017-03-13 11:58 - 2017-03-13 11:58 - 00000000 ____D C:\Users\user\Desktop\СТЕЛЧА-10.05.2014
2017-03-13 11:58 - 2017-03-13 11:58 - 00000000 ____D C:\Users\user\Desktop\КЪЩА-КИПРА
2017-03-13 11:58 - 2017-03-13 11:58 - 00000000 ____D C:\Users\user\Desktop\ИЗБОРЕН КОДЕКС
2017-03-13 11:58 - 2017-03-13 11:58 - 00000000 ____D C:\Users\user\Desktop\New Folder
2017-03-13 11:58 - 2017-03-06 13:51 - 04031440 _____ C:\Users\user\Desktop\adwcleaner_6.044.exe
2017-03-13 11:58 - 2016-03-18 16:05 - 00004834 _____ C:\Users\user\Desktop\kipra.rar
2017-03-13 11:58 - 2014-07-02 15:23 - 01195795 _____ C:\Users\user\Desktop\A6Viewer_v1.1.26.exe
2017-03-13 11:55 - 2017-03-13 11:58 - 00000000 ____D C:\Users\user\Desktop\MUSIK
2017-03-13 11:55 - 2016-12-23 15:50 - 00117285 _____ C:\Users\user\Desktop\с. Кипра.htm
2017-03-13 11:54 - 2017-03-15 14:30 - 00616448 ___SH C:\Users\user\Desktop\Thumbs.db
2017-03-13 11:52 - 2017-03-13 13:36 - 00000000 ____D C:\Users\user\AppData\Local\ElevatedDiagnostics
2017-03-13 11:48 - 2017-03-14 15:55 - 00000000 ____D C:\Users\user\AppData\Local\Packages
2017-03-13 11:48 - 2017-03-13 13:34 - 00000000 ____D C:\Users\user\AppData\Local\VirtualStore
2017-03-13 11:48 - 2017-03-13 11:48 - 00001426 _____ C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-03-13 11:48 - 2017-03-13 11:48 - 00000020 ___SH C:\Users\user\ntuser.ini
2017-03-13 11:48 - 2017-03-13 11:48 - 00000000 ____D C:\Users\user\AppData\Roaming\Adobe
2017-03-13 11:46 - 2017-03-13 11:46 - 00000000 ____D C:\Windows\CSC
2017-03-13 11:44 - 2017-03-13 11:44 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2017-03-13 11:43 - 2017-03-13 14:02 - 00000000 ____D C:\Windows\Panther
2017-03-13 11:43 - 2017-03-13 11:43 - 00008192 __RSH C:\BOOTSECT.BAK
2017-02-20 15:15 - 2017-02-20 15:15 - 00175888 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSINKNC.sys

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-03-15 14:24 - 2013-08-22 08:21 - 00000000 ____D C:\Windows\inf
2017-03-15 12:02 - 2013-08-22 10:17 - 00000000 ___HD C:\Program Files\WindowsApps
2017-03-15 12:02 - 2013-08-22 10:17 - 00000000 ____D C:\Windows\AppReadiness
2017-03-15 11:49 - 2013-09-30 06:16 - 00818732 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-15 08:47 - 2013-08-22 10:05 - 00000000 ____D C:\Windows\CbsTemp
2017-03-15 08:37 - 2013-08-22 09:23 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-15 08:37 - 2013-08-22 09:22 - 00505432 _____ C:\Windows\system32\FNTCACHE.DAT
2017-03-14 17:29 - 2013-08-22 08:13 - 00262144 ___SH C:\Windows\system32\config\BBI
2017-03-14 17:28 - 2013-08-22 10:17 - 00000000 ___RD C:\Windows\ToastData
2017-03-14 17:28 - 2013-08-22 10:17 - 00000000 ____D C:\Windows\WinStore
2017-03-14 17:28 - 2013-08-22 10:17 - 00000000 ____D C:\Windows\system32\SecureBootUpdates
2017-03-14 17:28 - 2013-08-22 10:17 - 00000000 ____D C:\Windows\system32\migwiz
2017-03-14 17:28 - 2013-08-22 10:17 - 00000000 ____D C:\Windows\PolicyDefinitions
2017-03-14 17:28 - 2013-08-22 10:17 - 00000000 ____D C:\Windows\MediaViewer
2017-03-14 17:28 - 2013-08-22 10:17 - 00000000 ____D C:\Windows\FileManager
2017-03-14 17:28 - 2013-08-22 10:17 - 00000000 ____D C:\Windows\Camera
2017-03-14 17:28 - 2013-08-22 10:17 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-03-14 17:28 - 2013-08-22 08:21 - 00000000 ____D C:\Windows\system32\Dism
2017-03-14 17:23 - 2013-08-22 08:13 - 00000167 _____ C:\Windows\win.ini
2017-03-14 11:41 - 2013-08-22 10:17 - 00000000 ____D C:\Windows\system32\Macromed
2017-03-13 14:06 - 2013-08-22 10:17 - 00000000 ____D C:\Windows\system32\GroupPolicy
2017-03-13 12:43 - 2013-08-22 10:17 - 00000000 ____D C:\Windows\system32\NDF
2017-03-13 12:20 - 2013-09-30 05:55 - 00000000 ____D C:\Windows\ShellNew
2017-03-13 12:16 - 2013-08-22 10:17 - 00000000 ____D C:\Program Files\Common Files\System
2017-03-13 12:07 - 2013-08-22 10:17 - 00000000 ____D C:\Windows\Help
2017-03-13 11:46 - 2013-08-22 10:17 - 00000000 ____D C:\Windows\rescache
2017-03-13 11:43 - 2013-08-22 10:17 - 00262144 _____ C:\Windows\system32\config\BCD-Template

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-03-13 11:44

==================== End of FRST.txt ============================

Addition.txt

15 март 20179 г.

Стъпка 1

Изтеглете: ADWCleaner.

Затворете всички браузъри и стартирайте AdwCleaner.exe.
Натиснете бутона SCAN.
След като приключи проверката натиснете бутона CLEAN.
Програмата ще затвори излишния софтуер и ще започне почистването.
След като приключи почистването ADWCleaner ще поиска рестарт. Съгласете се.
След зареждането на системата отидете до: C:\AdwCleaner и потърсете лог файл с името AdwCleaner[C0].txt.
Публикувайте съдържанието на "AdwCleaner[C0]" в следващия Ви коментар.

Стъпка 2

Изтеглете: JRT.

Запазете файла на вашия десктоп.
Затворете всички браузъри.
Стартирайте JRT.exe.
След като се появи съобщението "Press any key to continue . . .". Натиснете което и да е копче от клавиатурата.
Програмата ще започне почистването. Не прекъсвайте работата и, и не използвайте системата докато протича почистването.
След като приключи почистването ще се отвори лог файл, който се намира на десктопа с име JRT.txt.
Копирайте съдържанието му и го поставете към следващия Ви коментар.

Стъпка 3

Изтеглете: MiniToolBox

Стартирайте програмата
Затворете всички браузъри.
Сложете отметки на:
- Flush DNS
- Report IE Proxy Settings
- Reset IE Proxy Settings
- Report FF Proxy Settings
- Reset FF Proxy Settings
- List content of Hosts
- List IP configuration
- List Winsock Entries
- List last 10 Event Viewer log
- List Installed Programs
- List Users, Partitions and Memory size.
Натиснете Go
След като приключи проверката, ще се отвори лог с име Result.txt. Прикачете лога към следващия ви коментар.

Стъпка 4

Изтеглете: ZHPCleaner

Запазете файла на вашия десктоп.
Десен бутон върху файла => Стартирай като администратор (Run As Administrator).
Натиснете бутона "I Agree". Така се съгласявате със лицензионното споразумение.
Натиснете бутона "Scanner".
Ще започне проверка. След проверката ще се отвори лог файл.

Забележка: Ако лог файл не бъде отворен натиснете върху бутона Report.

Прикачете лог файла към следващия Ви коментар.

Стъпка 5

Направете нови логове с FRST и ги прикачете към следващия Ви коментар.

16 март 20179 г.

Автор

# AdwCleaner v6.044 - Дневникът е създаден 16/03/2017 в 09:23:30
# Обновен на 28/02/2017 от Malwarebytes
# База данни : 2017-03-15.2 [Сървърна]
# Операционна Система : Windows 8.1 Enterprise (X86)
# Потребителско име : user - DIMITAR
# Изпълнява се от : C:\Users\user\Desktop\adwcleaner_6.044.exe
# Режим: Почистване
# Поддръжка : https://www.malwarebytes.com/support

***** [ Услуги ] *****

***** [ Папки ] *****

***** [ Файлове ] *****

***** [ DLL ] *****

***** [ WMI ] *****

***** [ Преки пътища ] *****

***** [ Планирани Задачи ] *****

***** [ Регистър ] *****

***** [ Интернет Браузъри ] *****

[-] [C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Изтрит: ask.com

*************************

:: "Tracing" ключовете бяха изтрити
:: Winsock настройките бяха изчистени

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [1398 Байта] - [13/03/2017 14:10:09]
C:\AdwCleaner\AdwCleaner[C2].txt - [1236 Байта] - [16/03/2017 09:23:30]
C:\AdwCleaner\AdwCleaner[S0].txt - [1953 Байта] - [13/03/2017 14:08:59]
C:\AdwCleaner\AdwCleaner[S1].txt - [2126 Байта] - [15/03/2017 14:48:18]
C:\AdwCleaner\AdwCleaner[S2].txt - [2187 Байта] - [16/03/2017 09:22:51]

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1548 Байта] ##########

JRT.txt.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.2 (03.10.2017)
Operating System: Windows 8.1 Enterprise x86
Ran by user (Administrator) on зҐвў 16.03.2017 Ј. at 9:27:29,37
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 0

Registry: 0

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on зҐвў 16.03.2017 Ј. at 9:30:17,22
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

16 март 20179 г.

Как сте свързан към интернет? Посредством рутер или кабел?

Стъпка 1

Изтеглете файла fixlist и го запазете на вашия десктоп.

Стартирайте FRST.exe и натиснете бутона FIX веднъж!
Почистването ще започне, не използвайте системата!
След като приключи, ако ви поиска рестартиране, съгласете се.
След като зареди системата публикувайте лог файла с име fixlog.txt, който се намира на десктопа Ви.

Забележка: Текущия фикс да не се използва на други системи!

Стъпка 2

Изтеглете: Emsissoft Emergency Kit

Стартирайте файла и посочете къде да се разархивира програмата - например в (C:\EEK), натискайки бутона Extract.
Стартирайте файла Start Emsisoft Emergency Kit от десктопа за да стартирате програмата.
Натиснете бутона "Yes", когато бъдете подканени да обновите дефинициите на програмата.
След като обновяването на дефинициите приключи натиснете бутона "Scan".
Програмата ще Ви попита дали искате да включите засичането на Potentially Unwanted Applications, натиснете бутона "Yes".
Натиснете бутона "Custom Scan". Премахнете от списъка оставете само дял C:\.
Натиснете "Next" за да започне проверката.
Когато проверката приключи натиснете бутона "View Report".
Копирайте съдържанието на лог файла в следващия Ви коментар.

Стъпка 3

Изтеглете: HitmanPro.

Запазете файла на вашия десктоп.
Стартирайте програмата.

Забележка: Програмата ще се актуализира, след актуализацията HitmanPro ще се рестартира.

Натиснете бутона "Напред".
Сложете отметка на лицензионното споразумение и натиснете отново бутона "Напред".
Кликнете върху "Не, искам да извърша еднократно сканиране на компютъра" и натиснете бутона "Напред".
Програмата ще започне да сканира. Сканирането ще отнеме ~2 минути.
След като сканирането приключи от списъка с намерените обекти(ако има такива) изберете Apply to all => Ignore.
Натиснете бутона "Next" и след това бутона "Изнеси резултатите от сканирането в XML файл" и запазете лог файла на десктопа.
Отворете лог файла, копирайте съдържанието му и го поставете в следващия Ви коментар.

Забележка: Ако от падащото меню няма Ignore тогава просто затворете програмата след края на проверката без да премахвате нищо!

От My Computer => Tools => Folder Options => View => Сложете отметка пред "Show hidden files, folders and drives".
Натиснете Apply.

Влезте в C:\Programdata\HitmanPro\Logs прикачете лога към следващия Ви коментар.

17 март 20179 г.

Автор

Относно интернета-рутер

Стъпка 1

Fix result of Farbar Recovery Scan Tool (x86) Version: 15-03-2017
Ran by user (17-03-2017 10:24:20) Run:1
Running from C:\Users\user\Desktop
Loaded Profiles: user & UpdatusUser (Available Profiles: user & UpdatusUser)
Boot Mode: Normal

==============================================

fixlist content:
*****************
start
GroupPolicyScripts: Restriction <======= ATTENTION
HKU\S-1-5-21-1965500355-43354352-2106249206-1001\...\MountPoints2: {9d30aee7-07d1-11e7-9716-806e6f6e6963} - "F:\SETUP.EXE"
URLSearchHook: [S-1-5-21-1965500355-43354352-2106249206-1004] ATTENTION => Default URLSearchHook is missing
CHR Extension: (Chrome Media Router) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-03-15]
2017-03-13 14:07 - 2017-03-16 09:23 - 00000000 ____D C:\AdwCleaner
Hosts:
cmd: bitsadmin /reset /allusers
cmd: netsh winsock reset catalog
cmd: ipconfig /flushdns
EmptyTemp:
Reboot:
end
*****************

C:\Windows\system32\GroupPolicy\Machine => moved successfully
HKU\S-1-5-21-1965500355-43354352-2106249206-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9d30aee7-07d1-11e7-9716-806e6f6e6963} => key removed successfully.
HKCR\CLSID\{9d30aee7-07d1-11e7-9716-806e6f6e6963} => key not found.
Could not restore Default URLSearchHook.
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm => moved successfully
C:\AdwCleaner => moved successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

========= bitsadmin /reset /allusers =========

BITSADMIN version 3.0 [ 7.7.9600 ]
BITS administration utility.
(C) Copyright 2000-2006 Microsoft Corp.

BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.

0 out of 0 jobs canceled.

========= End of CMD: =========

========= netsh winsock reset catalog =========

Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.

========= End of CMD: =========

========= ipconfig /flushdns =========

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 11757141 B
Java, Flash, Steam htmlcache => 1824 B
Windows/system/drivers => 2146740 B
Edge => 0 B
Chrome => 11435209 B
Firefox => 376441190 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 193094 B
LocalService => 2775456 B
NetworkService => 0 B
user => 453900319 B
UpdatusUser => 0 B

RecycleBin => 1276996 B
EmptyTemp: => 828.1 MB temporary data Removed.

================================

The system needed a reboot.

==== End of Fixlog 10:25:22 ====

Стъпка 2

Emsisoft Emergency Kit - Version 2017.2
Last update: 17.3.2017 г. 10:30:50
User account: dimitar\user
Computer name: DIMITAR
OS version: Windows 8.1x86

Scan settings:

Scan type: Custom Scan
Objects: Rootkits, Memory, Traces, C:\

Detect PUPs: On
Scan archives: On
ADS Scan: On
File extension filter: Off
Direct disk access: Off

Scan start: 17.3.2017 г. 10:31:24

Scanned 238850
Found 0

Scan end: 17.3.2017 г. 11:04:20
Scan time: 0:32:56

Стъпка 3

HitmanPro 3.7.15.281
www.hitmanpro.com
	   Computer name . . . . : DIMITAR
   Windows . . . . . . . : 6.3.0.9600.X86/2
   User name . . . . . . : dimitar\user
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Free
	   Scan date . . . . . . : 2017-03-17 11:06:27
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 3m 19s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No
	   Threats . . . . . . . : 0
   Traces  . . . . . . . : 2
	   Objects scanned . . . : 912 289
   Files scanned . . . . : 12 073
   Remnants scanned  . . : 203 191 files / 697 025 keys
	Suspicious files ____________________________________________________________
	   C:\Users\user\Desktop\FRST.exe
      Size . . . . . . . : 1 766 912 bytes
      Age  . . . . . . . : 0.1 days (2017-03-17 09:42:30)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 35EDD8A50A502BD90830900B24E36028352D1CE45CC4DE44188CD36DBC4607FF
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.
	   C:\Users\user\Desktop\Нова папка\FRST.exe
      Size . . . . . . . : 1 766 912 bytes
      Age  . . . . . . . : 1.8 days (2017-03-15 15:01:55)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 35EDD8A50A502BD90830900B24E36028352D1CE45CC4DE44188CD36DBC4607FF
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.
      Forensic Cluster
          0.0s C:\Users\user\Desktop\Нова папка\FRST.exe
          1.3s C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6accfasx.default\datareporting\archived\2017-03\1489582916316.3d1fefb4-97d3-495c-9a10-4afe36fd3392.main.jsonlz4
          1.3s C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6accfasx.default\saved-telemetry-pings\3d1fefb4-97d3-495c-9a10-4afe36fd3392
          4.6s C:\Users\user\AppData\Local\Packages\windows_ie_ac_001\AC\INetCookies\5SJRRYT7.txt

И проблема си продължава-в повечето сайтове продължават да не могат да се зареждат и дава да се инсталира този плъгин??

HitmanPro_20170317_1110.log

Редактирано 17 март 20179 г. от gig93 (преглед на промените)

17 март 20179 г.

Върнете рутера към първоначалните му настройки. Отзад има малък бутон, който може да натиснете с игла или кламер. Натиснете и задръжте за около 30 секунди и го пуснете. Настройте го наново и вижте дали проблема остава.

19 март 20179 г.

Има ли някаква промяна?

20 март 20179 г.

Автор

на 3/19/2017 в 15:10, Stoyannnov написа:

Има ли някаква промяна?

Има едни специфични настройки направени на рутери и ми казаха, че не препоръчително да го ресетвам, че трябва всичко на ново да правят, въпроса е, че другите компютри, които са свързани към рутера могат да си влизат без проблем навсякъде само на този компютър не става-мислех, че проблема ще се реши с формат, но след формат на диска и нов Windwos тои проблем продължава и се чудя от какво може да е-например в даден сайт си зарежда но определена рубрика дава тази грешка или в един известен сайт а онлайн пазаруване не става въобще да се влезе излиза пак това-само на определени сайтове става появяват се за 1 секунда и излиза тази грешка?

Редактирано 20 март 20179 г. от gig93 (преглед на промените)

20 март 20179 г.

Изключете антивирусния софтуер и проверете дали отново излиза тази грешка.

22 март 20179 г.

Автор

на 3/20/2017 в 22:47, Stoyannnov написа:

Изключете антивирусния софтуер и проверете дали отново излиза тази грешка.

Отново дава грешката! Вече се чудя от какво може да е и от рутера не е, заото другите свързани към него нямат проблем със сайтовете??

Редактирано 22 март 20179 г. от gig93 (преглед на промените)

22 март 20179 г.

Според мен го върни към първоначалните му настройки, за да съм сигурен, че не е от него!

27 март 20179 г.

Никакъв отговор. Темата се маркира като приключена!

Добре дошли!

Вирус “Security error: This website requires Google chrome security plugin”

Featured Replies

Архивирана тема

Разглеждащи това в момента 0

Дарение

Бюлетин

Профил

Навигация

Търсене

Конфигуриране на push известия в браузъра

Chrome (Android)

Chrome (Desktop)

Safari (iOS 16.4+)

Safari (macOS)

Edge (Android)

Edge (Desktop)

Firefox (Android)

Firefox (Desktop)