Премини към съдържанието

    Препоръчан отговор


    Здравейте, мина доста време от както ползвах услугите ви и съм изключително доволен от това. Проблема е че възстанових един стар backup (от преди години) на системата и загубих защитата си. Като цяло системата ми работи добре и не мисля че има кой знае какво притеснително в нея но за всеки случай да я проверим.

    Не съм сигурен но мисля че тук ми дадохте един файл (по скоро съдържание на host) в който бяха добавени много сайтове който да се блокирват при опит за посещение.

    Примерно: 0.0.0.0 www.google.com

     

    Другото за което също не съм сигурен е дали вие ми дадохте филтър на adblock за Мозила . От него също бях много доволен.

    И последното което ме притеснява проблем със самата Мозила. Не знам дали е от вирус или от самата програма. Проблема се изразява в това че като натисна на падащото меню в адресната лента то не се отваря. Всъщност се отваря но не се вижда абсолютно нищо. Цялото е чисто бяло и не се виждат сайтовете. Същото е при всички падащи менюта от Мозила: Падащото меню за търсачките (какво сме търсили) както и падащото меню на запазените регистрации.

     

    Общо взето това са ми притесненията а останалото те първа ще излезе на яве след сканиранията :)

     

    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 18-10-2017 01
    Ran by eclips (administrator) on ECLIPS-PC (19-10-2017 21:33:45)
    Running from C:\Users\eclips\Desktop
    Loaded Profiles: eclips (Available Profiles: eclips & Guest)
    Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
    Internet Explorer Version 10 (Default browser: FF)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
    
    ==================== Processes (Whitelisted) =================
    
    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
    
    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (AMD) C:\Windows\System32\atiesrxx.exe
    (AMD) C:\Windows\System32\atieclxx.exe
    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe
    (Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe
    (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
    () C:\Program Files (x86)\Common Files\Appkeys\yytool64.exe
    () D:\-   MOI NE6TA\DLNA\Serviio\bin\ServiioService.exe
    () D:\-   MOI NE6TA\DLNA\Serviio\bin\ServiioService.exe
    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    (Transaction Software, D 81829 Munich) H:\TECDOC_CD\1_2014\db\tbmux32.exe
    (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
    (VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
    (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
    (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
    (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
    (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
    (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
    (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    
    ==================== Registry (Whitelisted) ===========================
    
    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
    
    HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
    HKU\S-1-5-21-1144684173-3877916052-1330907298-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
    
    ==================== Internet (Whitelisted) ====================
    
    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
    
    Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
    Tcpip\..\Interfaces\{1E0F611B-DAE1-48B6-8208-5A38B3F56DB9}: [DhcpNameServer] 62.221.132.211 85.130.60.11
    Tcpip\..\Interfaces\{5A334197-46EE-4622-AD06-D1F2AE57959E}: [DhcpNameServer] 192.168.42.129
    
    Internet Explorer:
    ==================
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
    HKU\S-1-5-21-1144684173-3877916052-1330907298-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKU\S-1-5-21-1144684173-3877916052-1330907298-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10181_1360_171019__yaie
    HKU\S-1-5-21-1144684173-3877916052-1330907298-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
    SearchScopes: HKLM-x32 -> DefaultScope value is missing
    SearchScopes: HKU\S-1-5-21-1144684173-3877916052-1330907298-1000 -> {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = hxxps://search.yahoo.com/yhs/search?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__ch_WCYID10181_1360_171019__yaie&p={searchTerms}
    BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2017-10-14] (Kaspersky Lab ZAO)
    BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2017-10-14] (Kaspersky Lab ZAO)
    BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_151\bin\ssv.dll [2017-10-17] (Oracle Corporation)
    BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
    BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll [2017-10-14] (Kaspersky Lab ZAO)
    BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-17] (Oracle Corporation)
    BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll [2017-10-14] (Kaspersky Lab ZAO)
    BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
    BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05] (Adobe Systems Incorporated)
    BHO-x32: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.4.11.9.dll [2010-11-09] (BitComet)
    BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2017-10-14] (Kaspersky Lab ZAO)
    BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
    BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2017-10-14] (Kaspersky Lab ZAO)
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-10-17] (Oracle Corporation)
    BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
    BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll [2017-10-14] (Kaspersky Lab ZAO)
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-17] (Oracle Corporation)
    BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll [2017-10-14] (Kaspersky Lab ZAO)
    
    FireFox:
    ========
    FF DefaultProfile: 7lwtatk8.default-1507842258539
    FF ProfilePath: C:\Users\eclips\AppData\Roaming\Mozilla\Firefox\Profiles\7lwtatk8.default-1507842258539 [2017-10-19]
    FF NewTab: Mozilla\Firefox\Profiles\7lwtatk8.default-1507842258539 -> hxxps://search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10181_1360_171019__yaff
    FF DefaultSearchEngine: Mozilla\Firefox\Profiles\7lwtatk8.default-1507842258539 -> Yahoo®
    FF SelectedSearchEngine: Mozilla\Firefox\Profiles\7lwtatk8.default-1507842258539 -> Yahoo®
    FF Homepage: Mozilla\Firefox\Profiles\7lwtatk8.default-1507842258539 -> hxxps://search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10181_1360_171019__yaff
    FF Extension: (Search Shield Study) - C:\Users\eclips\AppData\Roaming\Mozilla\Firefox\Profiles\7lwtatk8.default-1507842258539\Extensions\@unified-urlbar-shield-study-opt-out-new-users.xpi [2017-10-13]
    FF Extension: (AdBlock) - C:\Users\eclips\AppData\Roaming\Mozilla\Firefox\Profiles\7lwtatk8.default-1507842258539\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2017-10-14]
    FF Extension: (Safe Browsing Version 4 (temporary add-on)) - C:\Users\eclips\AppData\Roaming\Mozilla\Firefox\Profiles\7lwtatk8.default-1507842258539\Extensions\sbv4-gradual-rollout@mozilla.com.xpi [2017-10-13]
    FF Extension: (Adblock Plus) - C:\Users\eclips\AppData\Roaming\Mozilla\Firefox\Profiles\7lwtatk8.default-1507842258539\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-10-19]
    FF HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
    FF Extension: (Kaspersky URL Advisor) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2017-10-14] [not signed]
    FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
    FF Extension: (Virtual Keyboard) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2017-10-14] [not signed]
    FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
    FF Extension: (Dangerous Websites Blocker) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2017-10-14] [not signed]
    FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
    FF Extension: (Anti-Banner) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2017-10-14] [not signed]
    FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
    FF Extension: (Safe Money) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2017-10-14] [not signed]
    FF HKU\S-1-5-21-1144684173-3877916052-1330907298-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
    FF Extension: (McAfee Security Scan Plus) - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04] [not signed]
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_170.dll [2017-10-18] ()
    FF Plugin: @java.com/DTPlugin,version=10.5.0 -> C:\Windows\system32\npDeployJava1.dll [2013-12-10] (Oracle Corporation)
    FF Plugin: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-10-17] (Oracle Corporation)
    FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_170.dll [2017-10-18] ()
    FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
    FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-10-17] (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-10-17] (Oracle Corporation)
    FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll [2014-02-14] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll [2014-02-14] (Google Inc.)
    FF Plugin-x32: @videolan.org/vlc,version=2.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-04-11] (VideoLAN)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2011-09-05] (Adobe Systems Inc.)
    FF Plugin-x32: samsung.com/SamsungLinkPCPlugin -> C:\Program Files\Samsung\Samsung Link\utils\npSamsungLinkPCPlugin.dll [No File]
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll [2010-08-24] (BitComet)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2011-09-05] (Adobe Systems Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll [2013-04-09] (Nullsoft, Inc.)
    
    Chrome: 
    =======
    CHR DefaultProfile: Default
    CHR HKLM\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - hxxps://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa
    CHR HKLM\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-06-17]
    CHR HKLM-x32\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - hxxps://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa
    CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - hxxp://clients2.google.com/service/update2/crx
    CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-06-17]
    CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-06-17]
    CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-06-17]
    CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-06-17]
    CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-06-17]
    CHR crx: C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\default_apps\search.crx [2014-03-15]
    CHR crx: C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\default_apps\search.crx [2014-02-20]
    
    ==================== Services (Whitelisted) ====================
    
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
    
    R2 AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe [404360 2013-12-21] (Samsung) [File not signed]
    R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2017-10-14] (Kaspersky Lab ZAO)
    S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)
    S4 CyberLink PowerDVD 13 Media Server Monitor Service; D:\PROGRAMKI\Power DVD\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-05-03] (CyberLink)
    S4 CyberLink PowerDVD 13 Media Server Service; D:\PROGRAMKI\Power DVD\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [323336 2013-05-03] (CyberLink)
    R2 Leawo_service; C:\Program Files (x86)\Common Files\Appkeys\yytool64.exe [1232880 2014-05-04] ()
    R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
    S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
    S4 Samsung Link Service; D:\-   MOI NE6TA\Samsung Link\Samsung Link.exe [604512 2014-05-19] (Copyright 2013 SAMSUNG)
    R2 Serviio; D:\-   MOI NE6TA\DLNA\Serviio\bin\ServiioService.exe [413696 2016-10-17] () [File not signed]
    S3 Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software) [File not signed]
    R2 Transbase TECDOC CD 1_2014 Service; H:\TECDOC_CD\1_2014\db\tbmux32.exe [360448 2013-02-25] (Transaction Software, D 81829 Munich) [File not signed]
    R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2103096 2013-12-18] (TuneUp Software)
    R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-06-14] (VIA Technologies, Inc.)
    R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-10-16] (Microsoft Corporation)
    S2 Hamachi2Svc; H:\Programki\Hamachi\hamachi-2.exe -s [X]
    
    ===================== Drivers (Whitelisted) ======================
    
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
    
    S3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW76.sys [96256 2012-11-06] (Advanced Micro Devices) [File not signed]
    R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-11-20] (DT Soft Ltd)
    R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
    R3 ElbyCDFL; C:\Windows\SysWOW64\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
    R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-10-19] ()
    R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2017-10-14] (Kaspersky Lab ZAO)
    S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2017-10-14] (Kaspersky Lab ZAO)
    R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625248 2017-10-14] (Kaspersky Lab ZAO)
    R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2017-10-14] (Kaspersky Lab ZAO)
    R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2017-10-14] (Kaspersky Lab ZAO)
    R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2017-10-14] (Kaspersky Lab ZAO)
    R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
    R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)
    R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2017-10-14] (Kaspersky Lab ZAO)
    R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [192952 2017-10-19] (Malwarebytes)
    R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [110016 2017-10-19] (Malwarebytes)
    R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [45504 2017-10-19] (Malwarebytes)
    R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [252232 2017-10-19] (Malwarebytes)
    R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [84256 2017-10-19] (Malwarebytes)
    R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
    U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [60416 2013-10-16] (Microsoft Corporation)
    R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; D:\PROGRAMKI\Power DVD\PowerDVD13\Common\NavFilter\000.fcl [130320 2013-05-03] (CyberLink Corp.)
    S2 AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
    S1 ArcCtrl; system32\drivers\ArcCtrl.sys [X]
    S3 catchme; \??\C:\ComboFix\catchme.sys [X]
    S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
    S3 VGPU; System32\drivers\rdvgkmd.sys [X]
    
    ==================== NetSvcs (Whitelisted) ===================
    
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
    
    
    ==================== One Month Created files and folders ========
    
    (If an entry is included in the fixlist, the file/folder will be moved.)
    
    2017-10-19 21:33 - 2017-10-19 21:34 - 000021252 _____ C:\Users\eclips\Desktop\FRST.txt
    2017-10-19 21:30 - 2017-10-19 21:30 - 002402816 _____ (Farbar) C:\Users\eclips\Desktop\FRST64.exe
    2017-10-19 21:25 - 2017-10-19 21:25 - 019012622 _____ C:\Users\eclips\Desktop\unhackme.zip
    2017-10-19 20:51 - 2017-10-19 20:51 - 000252232 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
    2017-10-19 20:51 - 2017-10-19 20:51 - 000192952 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
    2017-10-19 20:51 - 2017-10-19 20:51 - 000084256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
    2017-10-19 20:50 - 2017-10-19 20:50 - 000045504 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
    2017-10-19 20:07 - 2017-10-19 20:51 - 000110016 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
    2017-10-19 20:07 - 2017-10-19 20:50 - 000077440 _____ C:\Windows\system32\Drivers\mbae64.sys
    2017-10-19 20:07 - 2017-10-19 20:07 - 000001867 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
    2017-10-19 20:07 - 2017-10-19 20:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
    2017-10-19 20:05 - 2017-10-19 20:05 - 000000000 ____D C:\Windows\system32\Drivers\etc\BACKUP
    2017-10-19 16:27 - 2017-10-19 20:41 - 000000000 ____D C:\Users\eclips\Desktop\bsplayer_pro271.1081
    2017-10-19 16:20 - 2017-10-19 16:20 - 000003164 _____ C:\Windows\System32\Tasks\klcp_update
    2017-10-19 16:20 - 2017-10-19 16:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
    2017-10-19 16:20 - 2017-10-19 16:20 - 000000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
    2017-10-19 16:20 - 2017-07-30 13:50 - 003850240 _____ (x264vfw project) C:\Windows\SysWOW64\x264vfw.dll
    2017-10-19 16:20 - 2017-07-30 13:50 - 003799552 _____ (x264vfw project) C:\Windows\system32\x264vfw64.dll
    2017-10-19 16:20 - 2015-12-18 12:00 - 000755200 _____ C:\Windows\system32\xvidcore.dll
    2017-10-19 16:20 - 2015-12-18 12:00 - 000309248 _____ C:\Windows\system32\xvidvfw.dll
    2017-10-19 16:20 - 2015-12-18 12:00 - 000282112 _____ C:\Windows\SysWOW64\xvidvfw.dll
    2017-10-19 16:20 - 2015-10-24 19:00 - 000126976 _____ C:\Windows\system32\ff_vfw.dll
    2017-10-19 16:20 - 2015-10-24 19:00 - 000112128 _____ C:\Windows\SysWOW64\ff_vfw.dll
    2017-10-19 16:20 - 2012-07-21 13:55 - 000180736 _____ (fccHandler) C:\Windows\system32\ac3acm.acm
    2017-10-19 16:20 - 2012-07-21 13:54 - 000122880 _____ (fccHandler) C:\Windows\SysWOW64\ac3acm.acm
    2017-10-19 16:20 - 2011-12-07 20:37 - 000148992 _____ ( ) C:\Windows\system32\lagarith.dll
    2017-10-19 16:20 - 2011-12-07 20:32 - 000216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll
    2017-10-19 16:16 - 2017-10-19 16:18 - 052381992 _____ (KLCP ) C:\Users\eclips\Desktop\K-Lite_Codec_Pack_1359_Mega.exe
    2017-10-19 15:58 - 2017-10-19 15:58 - 010563576 _____ C:\Users\eclips\Desktop\bsplayer271.setup.exe
    2017-10-19 15:54 - 2017-10-19 15:58 - 000000000 ____D C:\Users\eclips\AppData\Roaming\Lavasoft
    2017-10-19 15:54 - 2017-10-19 15:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
    2017-10-19 15:54 - 2017-10-19 15:58 - 000000000 ____D C:\Program Files (x86)\Lavasoft
    2017-10-19 15:54 - 2017-10-19 15:54 - 000000000 ____D C:\Users\eclips\AppData\Local\Lavasoft
    2017-10-19 15:53 - 2017-10-19 15:58 - 000000000 ____D C:\ProgramData\Lavasoft
    2017-10-19 15:44 - 2017-10-19 16:29 - 000001153 _____ C:\ProgramData\Microsoft\Windows\Start Menu\BS.Player PRO.lnk
    2017-10-19 15:44 - 2017-10-19 16:29 - 000001147 _____ C:\Users\Public\Desktop\BS.Player PRO.lnk
    2017-10-19 15:44 - 2017-10-19 15:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Webteh
    2017-10-19 15:37 - 2017-10-19 15:39 - 053285758 _____ (KLCP ) C:\Users\eclips\Desktop\K-Lite_Codec_Pack_1360_Mega.exe
    2017-10-19 14:57 - 2017-10-19 14:57 - 000091280 _____ C:\Users\eclips\Desktop\WAR_2017.(subs.sab.bz).rar
    2017-10-17 23:41 - 2013-12-10 14:50 - 000955888 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
    2017-10-17 23:41 - 2013-12-10 14:50 - 000839152 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
    2017-10-17 23:40 - 2017-10-17 23:40 - 000110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
    2017-10-17 23:39 - 2017-10-17 23:39 - 000000000 ____D C:\Users\eclips\AppData\Roaming\Sun
    2017-10-17 23:38 - 2017-10-17 23:38 - 000000000 ____D C:\Users\eclips\AppData\LocalLow\Oracle
    2017-10-14 20:33 - 2017-10-14 20:33 - 000032774 _____ C:\Users\eclips\Desktop\IT_2017_NEW_HD_TS_60FPS_x264_HQ_CPG.(subs.sab.bz).rar
    2017-10-14 19:44 - 2017-10-17 23:33 - 000000000 ____D C:\Program Files\Common Files\AV
    2017-10-14 19:44 - 2017-10-14 19:44 - 000003032 _____ C:\Windows\System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}
    2017-10-14 19:16 - 2017-10-14 19:16 - 008250832 _____ (Malwarebytes) C:\Users\eclips\Downloads\adwcleaner_7.0.3.1.exe
    2017-10-14 19:12 - 2017-10-17 23:33 - 000002334 _____ C:\Users\eclips\Desktop\Safe Money.lnk
    2017-10-14 19:12 - 2017-10-14 19:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
    2017-10-14 19:12 - 2017-10-14 19:11 - 000001124 _____ C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
    2017-10-14 19:11 - 2017-10-14 19:43 - 000625248 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
    2017-10-14 19:11 - 2017-10-14 19:43 - 000115296 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
    2017-10-14 19:11 - 2017-10-14 19:11 - 000000000 ____D C:\Windows\ELAMBKUP
    2017-10-14 19:11 - 2017-10-14 19:11 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab
    2017-10-14 19:11 - 2013-05-06 09:13 - 000110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
    2017-10-14 16:17 - 2017-10-19 20:41 - 000000000 ____D C:\ProgramData\NVIDIA
    2017-10-14 16:17 - 2017-10-14 16:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
    2017-10-14 16:16 - 2009-07-10 07:01 - 000539168 _____ (NVIDIA Corporation) C:\Windows\system32\NVUNINST.EXE
    2017-10-14 16:15 - 2009-12-03 18:43 - 000000000 ____D C:\Users\eclips\Downloads\VGA_Win7-64(190.38)e
    2017-10-14 16:15 - 2009-07-14 11:54 - 015005696 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
    2017-10-14 16:15 - 2009-07-14 11:54 - 011327776 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
    2017-10-14 16:15 - 2009-07-14 11:54 - 010854400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
    2017-10-14 16:15 - 2009-07-14 11:54 - 009375232 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
    2017-10-14 16:15 - 2009-07-14 11:54 - 007565824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
    2017-10-14 16:15 - 2009-07-14 11:54 - 002617856 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
    2017-10-14 16:15 - 2009-07-14 11:54 - 002258976 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
    2017-10-14 16:15 - 2009-07-14 11:54 - 002169376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
    2017-10-14 16:15 - 2009-07-14 11:54 - 001983488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
    2017-10-14 16:15 - 2009-07-14 11:54 - 001723424 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
    2017-10-14 16:15 - 2009-07-14 11:54 - 001706528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
    2017-10-14 16:15 - 2009-07-14 11:54 - 001291776 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
    2017-10-14 16:15 - 2009-07-14 11:54 - 001044992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
    2017-10-14 16:15 - 2009-07-14 11:54 - 000930272 _____ (Microsoft Corporation) C:\Windows\system32\dpinst.exe
    2017-10-14 16:15 - 2009-07-14 11:54 - 000539168 _____ (NVIDIA Corporation) C:\Windows\system32\nvudisp.exe
    2017-10-14 16:15 - 2009-07-14 11:54 - 000167936 _____ (NVIDIA Corporation) C:\Windows\system32\nvcod157.dll
    2017-10-14 16:15 - 2009-07-14 11:54 - 000167936 _____ (NVIDIA Corporation) C:\Windows\system32\nvcod.dll
    2017-10-14 16:15 - 2009-07-14 11:54 - 000011168 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvBridge.kmd
    2017-10-14 16:15 - 2009-07-14 11:54 - 000010161 _____ C:\Windows\system32\nvdisp.nvu
    2017-10-14 16:14 - 2017-10-14 16:15 - 153992488 _____ C:\Users\eclips\Downloads\VGA_Win7-64(190.38)e.zip
    2017-10-14 16:13 - 2017-10-19 21:13 - 000000000 ____D C:\Users\eclips\AppData\LocalLow\Mozilla
    2017-10-13 22:03 - 2017-10-13 22:03 - 000033952 _____ C:\Users\eclips\Downloads\the.flash.2014.s04e01.hdtv.x264(subsunacs.net).rar
    2017-10-13 01:17 - 2017-10-13 01:17 - 000000000 ____D C:\ProgramData\MB2Migration
    2017-10-13 01:17 - 2017-10-13 01:17 - 000000000 ____D C:\Program Files\Malwarebytes
    2017-10-13 01:12 - 2017-10-14 15:37 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
    2017-10-13 00:34 - 2017-10-18 00:30 - 005818880 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
    2017-10-13 00:04 - 2017-10-13 00:04 - 000000000 ____D C:\Users\eclips\Desktop\Стари данни Firefox
    2017-10-13 00:01 - 2017-10-13 01:17 - 000000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
    2017-10-12 23:30 - 2017-10-13 00:35 - 000000000 ____D C:\Users\eclips\AppData\Local\Dropbox
    2017-10-12 23:30 - 2017-10-12 23:30 - 000000000 ____D C:\ProgramData\Dropbox
    
    ==================== One Month Modified files and folders ========
    
    (If an entry is included in the fixlist, the file/folder will be moved.)
    
    2017-10-19 21:33 - 2014-07-01 19:48 - 000000000 ____D C:\FRST
    2017-10-19 21:15 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\tracing
    2017-10-19 20:49 - 2009-07-14 07:45 - 000026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2017-10-19 20:49 - 2009-07-14 07:45 - 000026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2017-10-19 20:43 - 2014-02-12 12:17 - 000000000 ____D C:\ProgramData\Kaspersky Lab
    2017-10-19 20:41 - 2013-11-19 23:28 - 000065536 _____ C:\Windows\system32\Ikeext.etl
    2017-10-19 20:41 - 2009-07-14 08:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
    2017-10-19 20:40 - 2013-11-19 19:37 - 000000000 ____D C:\Users\eclips\AppData\Roaming\BitComet
    2017-10-19 20:06 - 2013-12-07 21:43 - 000000000 ____D C:\ProgramData\Malwarebytes
    2017-10-19 19:14 - 2014-05-28 13:04 - 000000000 ____D C:\AdwCleaner
    2017-10-19 16:28 - 2013-11-19 23:49 - 000000000 ____D C:\Users\eclips\AppData\Roaming\BSplayer Pro
    2017-10-19 16:27 - 2013-11-19 23:49 - 000000000 ____D C:\Program Files (x86)\Webteh
    2017-10-19 16:23 - 2013-11-19 23:49 - 000000000 ____D C:\Users\eclips\AppData\Roaming\BSplayer
    2017-10-18 19:40 - 2014-02-13 20:08 - 000000000 ____D C:\ADCDA2
    2017-10-18 11:24 - 2013-12-18 22:51 - 000000000 ____D C:\Users\eclips\AppData\Roaming\Skype
    2017-10-18 00:30 - 2013-12-10 11:19 - 000004312 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
    2017-10-18 00:30 - 2013-11-20 11:44 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
    2017-10-18 00:30 - 2013-11-20 11:44 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
    2017-10-18 00:30 - 2013-11-20 11:44 - 000000000 ____D C:\Windows\SysWOW64\Macromed
    2017-10-18 00:30 - 2013-11-20 11:44 - 000000000 ____D C:\Windows\system32\Macromed
    2017-10-17 23:42 - 2014-01-21 17:33 - 000000000 ____D C:\Program Files (x86)\Java
    2017-10-17 23:41 - 2014-01-21 17:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
    2017-10-17 23:41 - 2013-12-10 14:50 - 000000000 ____D C:\Program Files\Java
    2017-10-17 23:40 - 2013-12-10 14:50 - 000319552 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
    2017-10-17 23:40 - 2013-12-10 14:50 - 000206912 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
    2017-10-17 23:40 - 2013-12-10 14:50 - 000206912 _____ (Oracle Corporation) C:\Windows\system32\java.exe
    2017-10-17 23:39 - 2014-09-01 14:38 - 000270912 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
    2017-10-17 23:39 - 2014-09-01 14:38 - 000097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
    2017-10-17 23:39 - 2014-01-21 17:34 - 000000000 ____D C:\ProgramData\Oracle
    2017-10-14 21:22 - 2013-12-04 16:02 - 000000000 ____D C:\Users\eclips\AppData\Roaming\vlc
    2017-10-14 19:43 - 2013-06-10 12:27 - 000029792 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys
    2017-10-14 19:43 - 2013-06-06 17:38 - 000178272 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
    2017-10-14 19:43 - 2013-05-06 09:22 - 000458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys
    2017-10-14 19:43 - 2013-05-05 22:42 - 000029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klmouflt.sys
    2017-10-14 19:43 - 2013-05-05 22:42 - 000029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys
    2017-10-14 19:28 - 2013-11-20 17:22 - 000000000 ____D C:\Windows\pss
    2017-10-14 19:11 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\inf
    2017-10-14 18:40 - 2014-01-05 21:34 - 000000000 ____D C:\Users\eclips\AppData\Roaming\Dropbox
    2017-10-14 16:24 - 2009-07-14 08:13 - 000785366 _____ C:\Windows\system32\PerfStringBackup.INI
    2017-10-14 16:17 - 2014-05-12 23:13 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
    2017-10-14 16:17 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\Help
    2017-10-14 15:37 - 2013-12-10 11:23 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
    2017-10-13 22:40 - 2013-11-19 23:41 - 000000000 ____D C:\ProgramData\AMD
    2017-10-13 00:01 - 2013-12-07 21:44 - 000000000 ____D C:\Users\eclips\AppData\Roaming\Malwarebytes
    2017-10-13 00:01 - 2013-12-07 21:43 - 000000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
    2017-10-13 00:00 - 2013-11-19 21:24 - 000000000 ____D C:\ProgramData\TuneUp Software
    
    ==================== Files in the root of some directories =======
    
    2014-01-04 21:14 - 2014-01-04 21:14 - 001615904 ____R () C:\Users\eclips\AppData\Local\ASbs.ac
    2014-05-12 11:02 - 2014-05-12 11:02 - 000585728 _____ () C:\Users\eclips\AppData\Local\file__0.localstorage
    2013-11-19 22:07 - 2013-11-19 22:07 - 000000017 ____R () C:\Users\eclips\AppData\Local\resmon.resmoncfg
    2014-09-14 20:59 - 2014-09-15 21:08 - 010807116 _____ () C:\ProgramData\OfflineCatalogue_1_2014_TECDOC_CD.log
    2014-09-14 21:05 - 2014-09-14 21:05 - 000006106 _____ () C:\ProgramData\UninstallOfflineCatalogue.log
    
    Some files in TEMP:
    ====================
    2014-09-15 19:44 - 2011-02-11 18:36 - 023454528 ____N (                                   ) C:\Users\eclips\AppData\Local\Temp\AdbeRdr_en_US.exe
    2014-09-07 14:19 - 2014-09-07 14:19 - 007850088 _____ (Microsoft Corporation) C:\Users\eclips\AppData\Local\Temp\BingBarSetup-Partner.exe
    2017-10-13 22:07 - 2017-10-13 22:07 - 016739360 _____ () C:\Users\eclips\AppData\Local\Temp\BitBEFB.tmp.exe
    2017-10-14 18:40 - 2017-10-14 18:40 - 000043008 _____ () C:\Users\eclips\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmprkbc9q.dll
    2014-01-31 06:29 - 2014-01-31 06:29 - 000341120 _____ (Gretech Corporation) C:\Users\eclips\AppData\Local\Temp\ExPromo.exe
    2014-07-01 12:48 - 2014-09-29 20:15 - 000035224 _____ () C:\Users\eclips\AppData\Local\Temp\i4jdel0.exe
    2014-07-28 08:15 - 2014-07-28 08:15 - 000918440 _____ (Oracle Corporation) C:\Users\eclips\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
    2017-09-08 19:04 - 2017-09-08 19:04 - 001856576 _____ (Oracle Corporation) C:\Users\eclips\AppData\Local\Temp\jre-8u151-windows-au.exe
    2014-07-29 18:48 - 2014-07-29 18:48 - 000021888 _____ () C:\Users\eclips\AppData\Local\Temp\ochelper.exe
    
    ==================== Bamital & volsnap ======================
    
    (There is no automatic fix for files that do not pass verification.)
    
    C:\Windows\system32\winlogon.exe => File is digitally signed
    C:\Windows\system32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\system32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\system32\services.exe => File is digitally signed
    C:\Windows\system32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\system32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\system32\rpcss.dll => File is digitally signed
    C:\Windows\system32\dnsapi.dll => File is digitally signed
    C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
    C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
    
    LastRegBack: 2017-10-18 20:24
    
    ==================== End of FRST.txt ============================

     

    Addition.txt

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте..!

    Изтеглете програмата GeekUninstaller и я запазете на десктопа.
    Разархивирайте я и стартирайте файла geek.exe IxXO5oO.jpg  От списъка намерете и деинсталирайте всички програми които съм ви написал в карето:

    Цитат

    Smileys We Love Toolbar for IE (HKLM-x32\...\{D19793B1-5583-40B1-BE98-4AF306CCF2F4}) (Version: 3.0.20 - SqueekyChocolate, LLC) <==== ATTENTION

    Кликнете с десен бутон върху програмата и изберете Uninstall
     
    XhV2QLa.png
     
     
    След края на всяка деинсталацията ще се отвори прозорец подканващ ви да премахнете всички остатъци от програмата (ако има такива, ако няма този прозорец няма да се появи).Натиснете бутона Finish за да изтриете останките от програмата.

     

    След това продължете:

    Фикс с Farbar Recovery Scan Tool
     
    icon13.gif Изтеглете прикачения файл fixlist.txt и го запазете там, където сте свалили FRST.exe
    Стартирайте отново FRST.exe и натиснете бутона Fix веднъж и изчакайте.

    Press%20the%20FIX%20button_zpsdd5zi3mt.p


    Ще се създаде нов лог файла FixLog.txt. Прикачете съдържанието му в следващия си коментар.
     
    ЗАБЕЛЕЖКА: Този скрипт е написан специално за този потребител,и за тази конкретна машина. Изпълнението на фикса, на друг компютър може да доведе до увреждане на  операционната ви система

     

    pfNZP4A.png  Дневници
     
    В следващия си отговор, моля да включите следните дневници:

    • FixLog.txt

     

     

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    За сега я оставете тази програма и продължете със следващата стъпка ..! Благодаря..! :)

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Мдаа..така е ..Скрипта е сработил и е премахнал това което ме притесняваше от предоставените дневници...! Някакви промени по системата ...?

     

    Относно Мозила проверете следните настройки:

     

    1.JPG

    2.JPG

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Mozilla все още се опъва :(   Падащите менюта си останаха бели.  Иначе промяна в системата не откривам. Не че не сме направили нищо ами просто аз и преди не откривах някакви кой знае какви дразнещи проблеми :)   То всъщност както споменах в първия си пост това е стар бекъп и все още го опознавам (едва от 3-4 дни го използвам) :D  Рано е да изказвам мнение но със сигурност сте свършили добра работа:wink12:  

    До сега в повечето случай лично ти си ми чистил системата и винаги съм оставал доволен от резултата:beer11:

    9195278g.jpg

    Редактирано от doktorkartar (преглед на промените)
    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Я да видим нещо тук:

     

    25.jpg?1426074241   Сканиране с SecurityCheck by glax24

    • Изтеглете SecurityCheck by glax24 от тук и запомнете инструмента на десктопа .
    • Стартирате програмата (ако използвате Windows XP) или стартирате с десен бутон на мишката от името на администратор (ако използватеWindows Vista/7/8/10)
    • Изчакайте да приключи сканирането.Ще се отвори в текстов файл с имеSecurityCheck.txt. Копирайте съдържанието на  този файл  следващия си пост
    • Можете да намерите този файл в основната директория на системния диск в папка с име SecurityCheck, напр. C:\SecurityCheck\SecurityCheck.txt

     

     

    pfNZP4A.png  Дневници
     
    В следващия си отговор, моля да включите следните дневници:

    • SecurityCheck.txt (копирате съдържанието)

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Както виждате този стар бекъп ...наистина е стар и системата е с много уязвимости..! Обновете всичко в червено..спазвайки указанията за всяка програма..! Не пропускайте и всички HotFix ...:)

     

    Цитат

    TuneUp Utilities 2014 v.14.0.1000.221 Warning! Suspected demo version of anti-spyware or optimization program - scareware or badware. Uninstallation recommended. Possible you became a victim of fraud or social engineering.
    TuneUp Utilities 2014 (en-US) v.14.0.1000.221 << Hidden Warning! Suspected demo version of anti-spyware or optimization program - scareware or badware. Uninstallation recommended. Possible you became a victim of fraud or social engineering.
    Smileys We Love Toolbar for IE v.3.0.20 Warning! Suspected Adware! If this program is not familiar to you it is recommended to uninstall it and execute PC scanning using Malwarebytes Anti-Malware and Malwarebytes AdwCleaner. Before uninstallation and scanning it is necessary to consult in the forum where cure is provided for you!!!

     

    TuneUp Utilities 2014  - деинсталирате и забравяте за него..!

    Smileys We Love Toolbar for IE  - е това което не успяхте да деинсталирате..за целта:

     

    GfiJrQ9.png&key=c8330b952021a3c1e5ae3771  Сканиране с Malwarebytes Anti-Malware (MBAM)

    Моля изтеглете Malwarebytes Anti-Malware 3.2.2.2018 Final и я запазете на вашия десктоп.

    • Стартирайте файла mb3-setup-consumer-3.2.2.2018.exe и следвайте указанията за да инсталирате програмата.
    • След като инсталацията приключи програмата ще стартира автоматично.
    • Отидете до табът Settings => Protection > и под категорията Scan Options включете опцията "Scan for rootkits" като преместите плъзгача надясно.

    xTvORSF.png

    • Отидете до табът Scan, и изберете Threat Scan и след това натиснете бутона Start Scan.

    RUSrqgW.png

    • Ще започне проверка за зловреден софтуер.

    4CJ90KI.png

    • При някои инфекции можете да видите съобщението:
    • "Could not load DDA driver"
    • Натиснете "Yes" на това съобщение за да позволите драйвера да се зареди след рестарт.
    • Разрешете на компютъра да се рестартира и след това продължете с останалите инструкции.
    • След като проверката приключи ще се появи списъка с резултатите (ако има намерени обекти). Ако програмата е минимизирана докато сканира ще се появи следното съобщение ако има открити заплахи. Натиснете бутона View Scan Results.

    37b.png

    • . Натиснете бутона Quarantine Selected.

    2CfXEk1.png

    • Изчакайте да се появи прозореца подканващ ви да рестартирате и след това натиснете бутона Yes.

    8Jc9dl9.png

    • След рестарта, стартирайте отново Malwarebytes Anti-Malware.
    • Отидете то табът Reports и отворете лог файла с името Scan Report.

    X0ha4sd.png

    • Натиснете бутона Export и след това =>  "Copy to Clipboard"

    fE9qzai.png

    • Сега вече поставете съдържанието на лог файла с клавишната комбинация Ctrl + V и го публикувайте в следващия си коментар.

     

     

     

    Моля, изтеглете  Zemana AntiMalware и го запишете на вашия работен плот.

    • Инсталирайте програмата и след като инсталацията приключи, тя ще се стартира автоматично.
    • Без да промените каквито и опции, натиснете Scan, за да започне проверката
    • След кратко сканирането приключи, ако са открити заплахи натиснете Nextза да ги премахнете.

    Забележка: Ако се изиска рестартиране, за да завършите процеса на почистване, трябва да щракнете върху Reboot . Ако не се изисква рестартиране, моля рестартирайте компютъра ръчно.

    • Отворете  Zemana AntiMalware отново.
    • Кликнете върху  икона 4zu6vb.jpg%26hash=75480eb893db9c3a1688f7 и кликнете два пъти върху последния доклад.
    • Сега кликнете File > Save As  и изберете своя Desktop преди да натиснете Save.
    • Моля копирайте съдържанието на лог файла в следващия си пост.

     

    BY4dvz9.png Сканиране с AdwCleaner

     
    Моля, изтеглете и стартирайте програмата Malwarebytes AdwCleaner (by Xplode):

    • Затворете всички стартирани програми и браузъри
    • Кликнете два пъти върху adwcleaner.exe за да стартирате инструмента.
    • Натиснете OK, за да потвърдите, че всички стартирани програми ще бъдат затворени.
    • Маркирайте A49sxPr.pngScan (провери).
    • След завършване, кликнете на 6cyn5v5.pngLogfile (дневник).Ще се отвори прозорец в който се намира дневника (AdwCleaner [S0] .txt).Кликнете два пъти върх реда и ще се отвори съдържанието на дневника.Публикувайте го в следващия си пост
    • Върнете се към основния прозорец на AdwCleaner .маркирайте MqHawIb.pngClean (Почисти)
    • Следвайте указанията и разрешете на компютъра да се рестартира.
    • След рестарта ще се отвори дневник AdwCleaner[C0].txt . Моля копирайте съдържанието на лог файла в следващия си пост.

     

    pfNZP4A.png&key=0a487e0a7cff89c690a32d13  Дневници 

    В следващия си отговор, моля да включите (като копирате целите съдържания ) следните дневници:

    • Дневник от Zemana AntiMalware
    • Дневник от Malwarebytes Anti -Malware
    • AdwCleaner.txt

     

     

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

     Четири ъпдеита за ОС не успяха да се инсталират:

    HotFix KB3156013 Warning! Download Update
    HotFix KB3178034 Warning! Download Update
    HotFix KB3185911 Warning! Download Update
    HotFix KB3184122 Warning! Download Update

     

    Malwarebytes не откри нищо освен host файла но това е защото бях забравил да изключа сканирането на самия файл.

     

     

     

    Zemana AntiMalware 2.74.2.150 (инсталираната версия)
    
    -------------------------------------------------------
    Scan Result            : Завършено
    Scan Date              : 2017.10.26
    Operating System       : Windows 7 64-bit
    Processor              : 4X AMD FX(tm)-4300 Quad-Core Processor
    BIOS Mode              : Legacy
    CUID                   : 122C1C253FFDA1CA334052
    Scan Type              : Проверка на системата
    Duration               : 8m 36s
    Scanned Objects        : 54238
    Detected Objects       : 6
    Excluded Objects       : 0
    Read Level             : SCSI
    Auto Upload            : Включен
    Detect All Extensions  : Изключен
    Scan Documents         : Изключен
    Domain Info            : WORKGROUP,0,2
    
    Detected Objects
    -------------------------------------------------------
    
    Internet Explorer Search
    Status             : Проверено
    Object             : Yahoo! - http://search.yahoo.com
    MD5                : -
    Publisher          : -
    Size               : -
    Version            : -
    Detection          : Подозрителна настройка на браузъра
    Cleaning Action    : Поправи
    Related Objects    :
                    Настройка на браузъра - Internet Explorer Search
    
    Internet Explorer Homepage
    Status             : Проверено
    Object             : https://search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10181_1360_171019__yaie
    MD5                : -
    Publisher          : -
    Size               : -
    Version            : -
    Detection          : Подозрителна настройка на браузъра
    Cleaning Action    : Поправи
    Related Objects    :
                    Настройка на браузъра - Internet Explorer Homepage
    
    Firefox Search
    Status             : Проверено
    Object             : Речник на Portal.BG - http://portal.bg
    MD5                : -
    Publisher          : -
    Size               : -
    Version            : -
    Detection          : Подозрителна настройка на браузъра
    Cleaning Action    : Поправи
    Related Objects    :
                    Настройка на браузъра - Firefox Search
    
    Firefox Search
    Status             : Проверено
    Object             : Дири.бг - http://diri.bg
    MD5                : -
    Publisher          : -
    Size               : -
    Version            : -
    Detection          : Подозрителна настройка на браузъра
    Cleaning Action    : Поправи
    Related Objects    :
                    Настройка на браузъра - Firefox Search
    
    Firefox Newtab
    Status             : Проверено
    Object             : https://search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10181_1360_171019__yaff
    MD5                : -
    Publisher          : -
    Size               : -
    Version            : -
    Detection          : Подозрителна настройка на браузъра
    Cleaning Action    : Поправи
    Related Objects    :
                    Настройка на браузъра - Firefox Newtab
    
    Файл Hosts
    Status             : Проверено
    Object             : %systemroot%\system32\drivers\etc\hosts
    MD5                : 63C55103F6933CD46B5E9F66ABFCC755
    Publisher          : -
    Size               : 148
    Version            : -
    Detection          : Изменен е файла Hosts
    Cleaning Action    : Поправи
    Related Objects    :
                    Файл hosts - 127.0.0.1 - ft.com
                    Файл - %systemroot%\system32\drivers\etc\hosts
    
    
    Cleaning Result
    -------------------------------------------------------
    Cleaned               : 6
    Reported as safe      : 0
    Failed                : 0

     

     

    # AdwCleaner 7.0.3.1 - Logfile created on Wed Oct 25 21:32:51 2017
    # Updated on 2017/29/09 by Malwarebytes 
    # Running on Windows 7 Ultimate (X64)
    # Mode: clean
    # Support: https://www.malwarebytes.com/support
    
    ***** [ Services ] *****
    
    No malicious services deleted.
    
    ***** [ Folders ] *****
    
    No malicious folders deleted.
    
    ***** [ Files ] *****
    
    No malicious files deleted.
    
    ***** [ DLL ] *****
    
    No malicious DLLs cleaned.
    
    ***** [ WMI ] *****
    
    No malicious WMI cleaned.
    
    ***** [ Shortcuts ] *****
    
    No malicious shortcuts cleaned.
    
    ***** [ Tasks ] *****
    
    No malicious tasks deleted.
    
    ***** [ Registry ] *****
    
    No malicious registry entries deleted.
    
    ***** [ Firefox (and derivatives) ] *****
    
    No malicious Firefox entries deleted.
    
    ***** [ Chromium (and derivatives) ] *****
    
    Plugin deleted: McAfee Security Scan+ - 
    Plugin deleted: McAfee Security Scan+ - 
    
    
    *************************
    
    ::Tracing keys deleted
    ::Winsock settings cleared
    ::Additional Actions: 0
    
    
    
    *************************
    
    C:/AdwCleaner/AdwCleaner[C0].txt - [2402 B] - [2017/10/14 16:20:47]
    C:/AdwCleaner/AdwCleaner[C1].txt - [2229 B] - [2017/10/19 14:53:16]
    C:/AdwCleaner/AdwCleaner[C2].txt - [1592 B] - [2017/10/19 16:14:56]
    C:/AdwCleaner/AdwCleaner[S0].txt - [2634 B] - [2014/5/28 10:12:54]
    C:/AdwCleaner/AdwCleaner[S1].txt - [2650 B] - [2017/10/14 16:20:1]
    C:/AdwCleaner/AdwCleaner[S2].txt - [2670 B] - [2017/10/19 12:58:0]
    C:/AdwCleaner/AdwCleaner[S3].txt - [2356 B] - [2017/10/19 14:53:6]
    C:/AdwCleaner/AdwCleaner[S4].txt - [1587 B] - [2017/10/19 16:14:41]
    C:/AdwCleaner/AdwCleaner[S5].txt - [1725 B] - [2017/10/25 21:31:47]
    
    
    ########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt ##########

     

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Чудесно...всчко е нормално и в системата не се виждат активни зарази...! Има ли нещо което ви притесняа ..?

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Странно...а тия настройки които  ти писах в преден пост..проверихте ли...така ли са ....? Някоя добавка да не се "лигави"..? 

    ..и започнете с изключванетп първо на този  FF Extension:  Search Shield Study..! Чета доста противоричиви неща за тази добавка....!

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Да настройките са така и вече премахнах тази добавка но ...

    Пробвах да изключа всички добавки но проблема си остава. Оправя се само ако пусна надеждния режим който всъщност е (Рестартиране с изключени добавки):ohmy:

    Инсталирах Мозилата на ново без никакви добавки и пак си го прави това. Единственото спасение е надеждния режим.

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Хм....пак според мен ще се окаже добавка...! И то по скоро някои от добавките са в конфликт...! Защо не опитате по метода на изключването ...малко "галимация" е но...Например оставете само добавките на Касперски...!

    https://support.mozilla.org/bg/kb/Безопасен режим

    Нещо не съм в кондиция...започнах да се изчерпвам..!!!

     

    Подгответе нова, свежа проверка с..:

    Сканиране с Farbar Recovery Scan

    • Моля изтеглете icon1337953436.pngFarbar Recovery Scan Tool (според версията на Windows изберете 32 битовата или 64 битовата версия) и го запазете надесктопа.
    • Стартирайте файла FRST.exe (или FRST64.exe)
    • Програмата ще се стартира. Натиснете YES за да се съгласите с лицензионното споразумение.
    • Натиснете бутона YClYkft.jpg.
    • Изчакайте търпеливо проверката да приключи.
    • Ще се създадат два лог файла с името - FRST.txt и Addition.txt надесктопа.
    • Копирайте съдържанието на файла FRST.txt в следващия си пост.Прикачете Addition.txt в коментар си (погледнете опцията Прикачване на файлове, когато публикувате мнение).

     

     Дневници
     
    В следващия си отговор, моля да включите (като копирате целите съдържания ) следните дневници:

    • FRST.txt (копирате цялото съдържание)
    • Addition.txt (прикачате..) 

     

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Опитвал съм с изключването на всички добавки включително и нова чиста инсталация на браузъра.

    То нямам кой знае какви добавки (даже и на касперски нямам).

    FRST.txt

    Addition.txt

    mozila.jpg

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове
    Цитат
    
    F HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
    FF Extension: (Kaspersky URL Advisor) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2017-10-14] [not signed]
    FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
    FF Extension: (Virtual Keyboard) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2017-10-14] [not signed]
    FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
    FF Extension: (Dangerous Websites Blocker) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2017-10-14] [not signed]
    FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
    FF Extension: (Anti-Banner) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2017-10-14] [not signed]
    FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
    FF Extension: (Safe Money) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2017-10-14] [not signed]

     

    А....странно...дневниците показват друго...!

    ....използвате Kaspersky 2014 (version 14.0.0.4651)...струва ми се е версията е много стара....Официален лиценз ли ползвате ..?

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Не. Използвам Reset trial.

    Вслушах се в скрития ти "намек" и сложих Kaspersky 2016г. Проблема е че след премахването на стария KAS, мозилата се бъгна . Сега при всяко стартиране изписва по 2-3 пъти "Профилът на фф не може да бъде зареден. Липсва или е недостъпен." :)

    Изтрих отново Мозила + всичките и файлове и регистри. Инсталирах я на ново и пак пише че липсва профила :ohmy:

    Редактирано от doktorkartar (преглед на промените)

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Прочетете тази тема....дано да ви е полезна с възстановяване на профила..обърнете внимание на часта (папката на вашия профил....:

    https://support.mozilla.org/bg/kb/Анулиране настройките на Firefox – лесно поправяне

    ..и още нещо ....как инсталирахте Kaspersky 2016г ...премахнахте старата версия или надградихте с новата...?

    Мисля че по добрия вариант е да премахнете старата версия съгласно тази инстукция (това е правилния начин):

     

    Как да премахнете остатъците от Касперски:
     
    1.Проверете в Контрол панела => Програми =>Деинсталиране на програми дали Kaspersky фигурира в списъка с инсталираните програми.Ако е "да"..деинсталирайте по стандартния начин ,рестартирайте компютъра си и преминете към следващата точка.Ако е "не"..или деинсталацията не се стартира или се появява грешка преминете към следващата точка.
    2.Изтеглете KAVremover и разархивирате.
    3.Стартирайте файла kavremover.exe и следвайте инструкцията.
    4.Въведете в полето защитния код ,в другото поле изберете програмата на Kaspersky която е инсталирана на вашия компютър:
     
    Публикувано изображение
     
    5.Процесът отнема известно време.Изчакайте да се появи прозорец със съобщение за успешно премахнат продукт:
     
    Публикувано изображение
     
    6.Рестартирайте вашия компютър.
     
     
    Забележка: По подразбиране в папката на продукта ще се генерира лог - kavremvr xxxx-xx-xx xx-xx-xx (pid xxxx).log, публикувайте съдържанието му във следващия си пост.  

     

     

     

     

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Профила е възстановен :)  а Касперски го премахнах с Geek понеже ми хареса че почиства и регистрите след деинсталирането на програмите.

    Обаче това с Мозилата май няма успеем да го оправим. Щом и след чиста инсталация пак прави проблема вероятно не е от добавка.

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове
    преди 13 часа, doktorkartar написа:

    Профила е възстановен :)  а Касперски го премахнах с Geek понеже ми хареса че почиства и регистрите след деинсталирането на програмите.

    Въпреки това горещо ви препоръчвам да пуснете и една проверка с KAVremover 

    + една свежа проверка отново с :

    Сканиране с Farbar Recovery Scan

    • Моля изтеглете icon1337953436.pngFarbar Recovery Scan Tool (според версията на Windows изберете 32 битовата или 64 битовата версия) и го запазете надесктопа.
    • Стартирайте файла FRST.exe (или FRST64.exe)
    • Програмата ще се стартира. Натиснете YES за да се съгласите с лицензионното споразумение.
    • Натиснете бутона YClYkft.jpg.
    • Изчакайте търпеливо проверката да приключи.
    • Ще се създадат два лог файла с името - FRST.txt и Addition.txt надесктопа.
    • Копирайте съдържанието на файла FRST.txt в следващия си пост.Прикачете Addition.txt в коментар си (погледнете опцията Прикачване на файлове, когато публикувате мнение).

     

     Дневници
     
    В следващия си отговор, моля да включите (като копирате целите съдържания ) следните дневници:

    • FRST.txt (копирате цялото съдържание)
    • Addition.txt (прикачате..) 

     

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте..! Имате ли нужда все още от помоща ми..? Спряхте да отговаряте ..да считам ли че проблемът е решен..?

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте, много се извинявам че отговарям с толкова голямо закъснение но просто не бях сядал на компютъра дълго време.

     

    При първото стартиране на kavremover засече 3 различни версии на KAS Internet Security. Избрах една от трите и продължих по стъпките. След рестарта го пуснах отново и не засече другите 2 версии. Въпреки това аз избрах от менюто да премахне KAS TotalSecutity 2016 защото последно бях ъпгреиднал до нея.

    Касперски създаде по два лог файла на всяко стартирана. За kavremvr-srvc xxxx-xx-xx xx-xx-xx (pid xxxx).log не бях сигурен дали трябва да го кача затова го прикачвам отделно!

     

     

     

    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02-11-2017
    Ran by eclips (administrator) on ECLIPS-PC (10-11-2017 19:34:16)
    Running from C:\Users\eclips\Desktop
    Loaded Profiles: eclips & UpdatusUser (Available Profiles: eclips & UpdatusUser & Guest)
    Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
    Internet Explorer Version 10 (Default browser: FF)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
    
    ==================== Processes (Whitelisted) =================
    
    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
    
    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (AMD) C:\Windows\System32\atiesrxx.exe
    (AMD) C:\Windows\System32\atieclxx.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe
    (CyberLink) D:\PROGRAMKI\Power DVD\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe
    (Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe
    (CyberLink) D:\PROGRAMKI\Power DVD\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
    () C:\Program Files (x86)\Common Files\Appkeys\yytool64.exe
    (Copyright 2013 SAMSUNG) D:\-   MOI NE6TA\Samsung Link\Samsung Link.exe
    (Copyright 2013 SAMSUNG) D:\-   MOI NE6TA\Samsung Link\Samsung Link.exe
    () D:\-   MOI NE6TA\DLNA\Serviio\bin\ServiioService.exe
    () D:\-   MOI NE6TA\DLNA\Serviio\bin\ServiioService.exe
    (Transaction Software, D 81829 Munich) H:\TECDOC_CD\1_2014\db\tbmux32.exe
    (VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
    (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    (Copyright 2017.) H:\Programki\Zemana AntiMalware\ZAM.exe
    (Malwarebytes) H:\Programki\Anti-Malware\MBAMService.exe
    (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
    (Microsoft Corporation) C:\Windows\System32\rundll32.exe
    (Malwarebytes) H:\Programki\Anti-Malware\mbamtray.exe
    (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
    (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
    
    ==================== Registry (Whitelisted) ===========================
    
    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
    
    HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
    HKU\S-1-5-21-1144684173-3877916052-1330907298-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
    
    ==================== Internet (Whitelisted) ====================
    
    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
    
    Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
    Tcpip\..\Interfaces\{1E0F611B-DAE1-48B6-8208-5A38B3F56DB9}: [DhcpNameServer] 62.221.132.211 85.130.60.11
    Tcpip\..\Interfaces\{5A334197-46EE-4622-AD06-D1F2AE57959E}: [DhcpNameServer] 192.168.42.129
    Tcpip\..\Interfaces\{A3236531-A5CD-4450-8F87-65A07C468862}: [DhcpNameServer] 178.254.208.6 178.254.192.3
    
    Internet Explorer:
    ==================
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
    HKU\S-1-5-21-1144684173-3877916052-1330907298-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKU\S-1-5-21-1144684173-3877916052-1330907298-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
    SearchScopes: HKLM -> DefaultScope value is missing
    SearchScopes: HKLM-x32 -> DefaultScope value is missing
    SearchScopes: HKU\S-1-5-21-1144684173-3877916052-1330907298-1000 -> {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = 
    BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_151\bin\ssv.dll [2017-10-17] (Oracle Corporation)
    BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
    BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-17] (Oracle Corporation)
    BHO-x32: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.4.11.9.dll [2010-11-09] (BitComet)
    BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-10-17] (Oracle Corporation)
    BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-17] (Oracle Corporation)
    
    FireFox:
    ========
    FF ProfilePath: C:\Users\eclips\AppData\Roaming\Mozilla\Firefox\Profiles\mmmiox4p.default [2017-11-10]
    FF Homepage: Mozilla\Firefox\Profiles\mmmiox4p.default -> hxxps://www.google.bg/
    FF Extension: (Safe Browsing Version 4 (temporary add-on)) - C:\Users\eclips\AppData\Roaming\Mozilla\Firefox\Profiles\mmmiox4p.default\Extensions\sbv4-gradual-rollout@mozilla.com.xpi [2017-10-31]
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_183.dll [2017-10-25] ()
    FF Plugin: @java.com/DTPlugin,version=10.5.0 -> C:\Windows\system32\npDeployJava1.dll [2013-12-10] (Oracle Corporation)
    FF Plugin: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-10-17] (Oracle Corporation)
    FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_183.dll [2017-10-25] ()
    FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
    FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-10-17] (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-10-17] (Oracle Corporation)
    FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-10-22] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-10-22] (Google Inc.)
    FF Plugin-x32: @videolan.org/vlc,version=2.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-04-11] (VideoLAN)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
    FF Plugin-x32: samsung.com/SamsungLinkPCPlugin -> C:\Program Files\Samsung\Samsung Link\utils\npSamsungLinkPCPlugin.dll [No File]
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll [2010-08-24] (BitComet)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2011-09-05] (Adobe Systems Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll [2013-04-09] (Nullsoft, Inc.)
    
    Chrome: 
    =======
    CHR DefaultProfile: Default
    CHR Profile: C:\Users\eclips\AppData\Local\Google\Chrome\User Data\Default [2017-11-01]
    CHR Extension: (Kaspersky Protection) - C:\Users\eclips\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpeeaghdjmhlakojjcgfdhgcejdaefmi [2017-11-01]
    CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\eclips\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-10-31]
    CHR Extension: (Chrome Media Router) - C:\Users\eclips\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-10-31]
    
    ==================== Services (Whitelisted) ====================
    
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
    
    R2 AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe [404360 2013-12-21] (Samsung) [File not signed]
    S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)
    R2 CyberLink PowerDVD 13 Media Server Monitor Service; D:\PROGRAMKI\Power DVD\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-05-03] (CyberLink)
    R2 CyberLink PowerDVD 13 Media Server Service; D:\PROGRAMKI\Power DVD\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [323336 2013-05-03] (CyberLink)
    R2 Leawo_service; C:\Program Files (x86)\Common Files\Appkeys\yytool64.exe [1232880 2014-05-04] ()
    R2 MBAMService; H:\Programki\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
    R2 Samsung Link Service; D:\-   MOI NE6TA\Samsung Link\Samsung Link.exe [604512 2014-05-19] (Copyright 2013 SAMSUNG)
    R2 Serviio; D:\-   MOI NE6TA\DLNA\Serviio\bin\ServiioService.exe [413696 2016-10-17] () [File not signed]
    S3 Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software) [File not signed]
    R2 Transbase TECDOC CD 1_2014 Service; H:\TECDOC_CD\1_2014\db\tbmux32.exe [360448 2013-02-25] (Transaction Software, D 81829 Munich) [File not signed]
    R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-06-14] (VIA Technologies, Inc.)
    R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-10-16] (Microsoft Corporation)
    R2 ZAMSvc; H:\Programki\Zemana AntiMalware\ZAM.exe [15775888 2017-08-09] (Copyright 2017.)
    S2 Hamachi2Svc; H:\Programki\Hamachi\hamachi-2.exe -s [X]
    
    ===================== Drivers (Whitelisted) ======================
    
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
    
    S3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW76.sys [96256 2012-11-06] (Advanced Micro Devices) [File not signed]
    R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-11-20] (DT Soft Ltd)
    R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
    R3 ElbyCDFL; C:\Windows\SysWOW64\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
    R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-10-26] ()
    R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [192952 2017-10-26] (Malwarebytes)
    R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [110016 2017-11-10] (Malwarebytes)
    R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [45504 2017-11-10] (Malwarebytes)
    R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [252232 2017-11-10] (Malwarebytes)
    R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [84256 2017-11-10] (Malwarebytes)
    U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [60416 2013-10-15] (Microsoft Corporation)
    R1 ZAM; C:\Windows\System32\drivers\zam64.sys [203680 2017-10-25] (Zemana Ltd.)
    R1 ZAM_Guard; C:\Windows\System32\drivers\zamguard64.sys [203680 2017-10-25] (Zemana Ltd.)
    R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; D:\PROGRAMKI\Power DVD\PowerDVD13\Common\NavFilter\000.fcl [130320 2013-05-03] (CyberLink Corp.)
    S2 AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
    S1 ArcCtrl; system32\drivers\ArcCtrl.sys [X]
    S3 catchme; \??\C:\ComboFix\catchme.sys [X]
    S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
    S3 VGPU; System32\drivers\rdvgkmd.sys [X]
    
    ==================== NetSvcs (Whitelisted) ===================
    
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
    
    
    ==================== One Month Created files and folders ========
    
    (If an entry is included in the fixlist, the file/folder will be moved.)
    
    2017-11-10 19:08 - 2017-11-10 19:08 - 000020594 _____ C:\Users\eclips\Downloads\the.flash.2014.s04e05.hdtv.x264(subsunacs.net).rar
    2017-11-10 19:07 - 2017-11-10 19:07 - 014523712 _____ (Kaspersky Lab ZAO) C:\Users\eclips\Desktop\kavremvr.exe
    2017-11-07 21:46 - 2017-11-07 21:46 - 000024593 _____ C:\Users\eclips\Downloads\TWD___08x03.(subs.sab.bz).zip
    2017-11-05 22:38 - 2017-11-05 22:38 - 000015358 _____ C:\Users\eclips\Downloads\dcs_legends_of_tomorrow_-_03x04(subsunacs.net).rar
    2017-11-02 21:22 - 2017-11-02 19:52 - 000047574 _____ C:\Users\eclips\Downloads\the.flash.2014.404.hdtv-lol.srt
    2017-11-02 20:52 - 2017-11-02 20:52 - 000021008 _____ C:\Users\eclips\Downloads\the.flash.2014.s04e04.hdtv.x264_1(subsunacs.net).rar
    2017-11-02 09:20 - 2017-11-02 09:20 - 000000020 ___SH C:\Users\UpdatusUser\ntuser.ini
    2017-11-02 09:20 - 2017-11-02 09:20 - 000000000 ____D C:\Users\UpdatusUser
    2017-11-02 09:20 - 2011-04-12 10:28 - 000000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Media Center Programs
    2017-11-02 09:19 - 2017-11-02 09:19 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
    2017-11-02 09:19 - 2015-01-31 04:52 - 026341704 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
    2017-11-02 09:19 - 2015-01-31 04:52 - 025255568 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
    2017-11-02 09:19 - 2015-01-31 04:52 - 019916432 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
    2017-11-02 09:19 - 2015-01-31 04:52 - 017559184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
    2017-11-02 09:19 - 2015-01-31 04:52 - 013585736 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
    2017-11-02 09:19 - 2015-01-31 04:52 - 009185504 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
    2017-11-02 09:19 - 2015-01-31 04:52 - 007755632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
    2017-11-02 09:19 - 2015-01-31 04:52 - 007639952 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
    2017-11-02 09:19 - 2015-01-31 04:52 - 006295288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
    2017-11-02 09:19 - 2015-01-31 04:52 - 002748232 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
    2017-11-02 09:19 - 2015-01-31 04:52 - 002576200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
    2017-11-02 09:19 - 2015-01-31 04:52 - 002220176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
    2017-11-02 09:19 - 2015-01-31 04:52 - 001868104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
    2017-11-02 09:19 - 2015-01-31 04:52 - 001801544 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6430908.dll
    2017-11-02 09:19 - 2015-01-31 04:52 - 001510728 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6430908.dll
    2017-11-02 09:19 - 2015-01-31 04:52 - 000017616 _____ C:\Windows\system32\nvinfo.pb
    2017-11-02 09:18 - 2017-11-02 09:20 - 000000000 ____D C:\Program Files\NVIDIA Corporation
    2017-11-02 09:18 - 2017-11-02 09:18 - 000000000 ____D C:\NVIDIA
    2017-11-02 09:16 - 2017-11-02 09:18 - 227763184 _____ (NVIDIA Corporation) C:\Users\eclips\Downloads\309.08-desktop-win8-win7-winvista-64bit-international-whql.exe
    2017-10-31 23:12 - 2017-10-31 23:12 - 000014847 _____ C:\Users\eclips\Downloads\dcs_legends_of_tomorrow_-_03x03(subsunacs.net).rar
    2017-10-31 21:40 - 2017-11-01 09:33 - 000000000 ____D C:\Program Files\Mozilla Firefox
    2017-10-31 21:40 - 2017-11-01 09:33 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
    2017-10-31 21:40 - 2017-10-31 21:40 - 000000936 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
    2017-10-31 21:40 - 2017-10-31 21:40 - 000000924 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
    2017-10-31 21:40 - 2017-10-31 21:40 - 000000000 ____D C:\Users\eclips\AppData\Roaming\Mozilla
    2017-10-31 21:26 - 2017-10-31 21:26 - 000207458 _____ C:\Users\eclips\Desktop\bookmarks-2017-10-31.json
    2017-10-31 20:14 - 2017-10-31 20:10 - 166180312 _____ (Kaspersky Lab) C:\Users\eclips\Desktop\Kaspersky Total Security 2016 16.0.1.445 (c) MR1 Final
    2017-10-31 18:26 - 2017-11-10 19:34 - 000000000 ____D C:\Users\eclips\Desktop\FRST-OlderVersion
    2017-10-31 13:58 - 2017-10-31 13:58 - 000036120 _____ C:\Users\eclips\Desktop\TWD___08x02.(subs.sab.bz).zip
    2017-10-31 13:58 - 2017-10-31 13:58 - 000020734 _____ C:\Users\eclips\Desktop\the.flash.2014.s04e04.hdtv.x264(subsunacs.net).rar
    2017-10-26 22:10 - 2017-10-26 22:11 - 000000000 ____D C:\Users\eclips\Desktop\New folder
    2017-10-26 00:06 - 2017-11-10 19:30 - 000252232 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
    2017-10-26 00:06 - 2017-11-10 19:30 - 000084256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
    2017-10-26 00:06 - 2017-11-10 19:30 - 000045504 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
    2017-10-26 00:06 - 2017-10-26 00:06 - 000192952 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
    2017-10-26 00:03 - 2017-11-10 19:30 - 000110016 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
    2017-10-26 00:03 - 2017-10-26 00:06 - 000077440 _____ C:\Windows\system32\Drivers\mbae64.sys
    2017-10-26 00:03 - 2017-10-26 00:03 - 000000746 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
    2017-10-26 00:03 - 2017-10-26 00:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
    2017-10-26 00:00 - 2017-10-26 00:00 - 000000000 ____D C:\ProgramData\MB2Migration
    2017-10-25 23:35 - 2017-10-25 23:35 - 000001730 _____ C:\Users\eclips\Desktop\AdwCleaner[C3].txt
    2017-10-25 23:01 - 2017-10-25 23:20 - 000003934 _____ C:\Users\eclips\Desktop\2017.10.25-23.52.26-i0-t92-d6.txt
    2017-10-25 22:51 - 2017-11-10 19:34 - 000047661 _____ C:\Windows\ZAM.krnl.trace
    2017-10-25 22:51 - 2017-11-10 19:34 - 000020691 _____ C:\Windows\ZAM_Guard.krnl.trace
    2017-10-25 22:51 - 2017-10-25 22:51 - 000203680 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zamguard64.sys
    2017-10-25 22:51 - 2017-10-25 22:51 - 000203680 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zam64.sys
    2017-10-25 22:51 - 2017-10-25 22:51 - 000000789 _____ C:\Users\Public\Desktop\Zemana AntiMalware.lnk
    2017-10-25 22:51 - 2017-10-25 22:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiMalware
    2017-10-25 22:33 - 2017-10-25 22:33 - 000000000 ____D C:\Users\eclips\AppData\Local\Zemana
    2017-10-25 22:32 - 2017-10-25 22:32 - 006625600 _____ (Zemana Ltd. ) C:\Users\eclips\Desktop\Zemana.AntiMalware.Setup.exe
    2017-10-25 22:31 - 2017-10-25 22:31 - 000002344 _____ C:\Users\eclips\Desktop\ascas.txt
    2017-10-25 22:30 - 2017-10-25 22:30 - 000002344 _____ C:\Users\eclips\Desktop\am.txt
    2017-10-25 22:19 - 2017-10-25 22:20 - 066347240 _____ (Malwarebytes ) C:\Users\eclips\Desktop\mb3-setup-consumer-3.2.2.2018.exe
    2017-10-25 22:10 - 2017-10-25 23:48 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
    2017-10-25 22:10 - 2017-10-25 23:48 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
    2017-10-25 22:10 - 2017-10-25 22:10 - 000002047 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
    2017-10-25 22:09 - 2017-10-25 22:09 - 000000000 ____D C:\Program Files (x86)\Adobe
    2017-10-25 22:08 - 2017-10-25 22:08 - 000000000 ____D C:\Users\eclips\Desktop\jre1.8.0_152
    2017-10-25 22:07 - 2017-10-25 22:08 - 000000000 ____D C:\Users\eclips\Desktop\jre1.8.0_151
    2017-10-25 22:06 - 2017-10-25 22:07 - 071832128 _____ C:\Users\eclips\Desktop\jre-8u151-windows-x64.tar.gz
    2017-10-25 22:05 - 2017-10-25 22:06 - 071870523 _____ C:\Users\eclips\Desktop\jre-8u152-windows-x64.tar.gz
    2017-10-25 22:03 - 2017-10-25 22:04 - 039736072 _____ (Mozilla) C:\Users\eclips\Desktop\Firefox Setup 56.0.1.exe
    2017-10-25 22:02 - 2017-10-25 22:03 - 020768256 _____ (Adobe Systems Incorporated) C:\Users\eclips\Desktop\install_flash_player.exe
    2017-10-25 21:53 - 2016-04-09 06:20 - 001230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
    2017-10-25 21:53 - 2016-04-09 05:52 - 001424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
    2017-10-25 21:52 - 2016-06-26 02:27 - 000344576 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
    2017-10-25 21:52 - 2016-06-26 02:27 - 000166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
    2017-10-25 21:52 - 2016-06-26 02:27 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
    2017-10-25 21:52 - 2016-06-25 21:53 - 000297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
    2017-10-25 21:52 - 2016-06-25 21:53 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
    2017-10-25 21:52 - 2016-06-25 21:53 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
    2017-10-25 21:52 - 2016-06-25 21:41 - 000061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe
    2017-10-25 21:45 - 2017-10-25 21:45 - 002007986 _____ C:\Users\eclips\Desktop\windows6.1-kb3156019-x64_0b5a11f41322e7a835887b5fe5715bc4d1334333.msu
    2017-10-25 21:45 - 2017-10-25 21:45 - 000526543 _____ C:\Users\eclips\Desktop\windows6.1-kb3156013-x64_ff3e23fe222b35468c5d6a39ad131a62a7f856f3(1).msu
    2017-10-25 21:44 - 2017-10-25 21:44 - 001762067 _____ C:\Users\eclips\Desktop\windows6.1-kb3178034-x64_3b1fbfd4b03deca407de34bfa622742f5e83ca71.msu
    2017-10-25 21:44 - 2017-10-25 21:44 - 001638010 _____ C:\Users\eclips\Desktop\windows6.1-kb3170455-x64_99dc1d99451e7f2d23d088b78a424c14300a5d5b.msu
    2017-10-25 21:43 - 2017-10-25 21:43 - 002362122 _____ C:\Users\eclips\Desktop\windows6.1-kb3185911-x64_0622382f0525ffd278d83779c249be2b03edb67a.msu
    2017-10-25 21:43 - 2017-10-25 21:43 - 000813217 _____ C:\Users\eclips\Desktop\windows6.1-kb3184122-x64_900d8481499f63aca354ca127584cc231188c15e.msu
    2017-10-25 21:42 - 2017-10-25 21:44 - 082997820 _____ C:\Users\eclips\Desktop\windows6.1-kb3192391-x64_8acd94d8d268a6507c2852b0d9917f4ae1349b6c.msu
    2017-10-25 21:42 - 2017-10-25 21:43 - 066045503 _____ C:\Users\eclips\Desktop\windows6.1-kb3205394-x64_71d0c657d24bc852f074996c32987fb936c07774.msu
    2017-10-25 13:55 - 2017-04-17 17:37 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
    2017-10-25 13:55 - 2017-04-17 17:12 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
    2017-10-25 13:54 - 2017-04-21 17:34 - 001133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
    2017-10-25 13:54 - 2017-04-21 17:15 - 000805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
    2017-10-25 13:54 - 2017-04-17 17:37 - 002065408 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
    2017-10-25 13:54 - 2017-04-17 17:37 - 000876544 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
    2017-10-25 13:54 - 2017-04-17 17:37 - 000512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
    2017-10-25 13:54 - 2017-04-17 17:37 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
    2017-10-25 13:54 - 2017-04-17 17:12 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
    2017-10-25 13:54 - 2017-04-17 17:12 - 000581632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
    2017-10-25 13:54 - 2017-04-17 16:54 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
    2017-10-25 13:54 - 2017-04-12 17:32 - 001483776 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
    2017-10-25 13:54 - 2017-04-12 17:32 - 000229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
    2017-10-25 13:54 - 2017-04-12 17:32 - 000190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
    2017-10-25 13:54 - 2017-04-12 17:32 - 000141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
    2017-10-25 13:54 - 2017-04-12 17:26 - 000179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
    2017-10-25 13:54 - 2017-04-12 17:25 - 001176064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
    2017-10-25 13:54 - 2017-04-12 17:25 - 000145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
    2017-10-25 13:54 - 2017-04-12 17:25 - 000106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
    2017-10-25 13:54 - 2017-04-07 17:34 - 000986856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
    2017-10-25 13:54 - 2017-04-07 17:34 - 000265448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
    2017-10-25 13:54 - 2017-04-07 17:30 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
    2017-10-25 13:54 - 2017-04-04 16:53 - 000496128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
    2017-10-25 13:52 - 2017-06-02 10:10 - 000733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
    2017-10-25 13:52 - 2017-05-12 20:26 - 000382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
    2017-10-25 13:52 - 2017-05-12 20:22 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
    2017-10-25 13:52 - 2017-05-12 20:22 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
    2017-10-25 13:52 - 2017-05-12 20:22 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
    2017-10-25 13:52 - 2017-05-12 20:22 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
    2017-10-25 13:52 - 2017-05-12 20:22 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
    2017-10-25 13:52 - 2017-05-12 20:07 - 000308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
    2017-10-25 13:52 - 2017-05-12 20:03 - 000629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
    2017-10-25 13:52 - 2017-05-12 20:03 - 000070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
    2017-10-25 13:52 - 2017-05-12 20:03 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
    2017-10-25 13:52 - 2017-05-12 20:03 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
    2017-10-25 13:52 - 2017-05-12 19:43 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
    2017-10-25 13:52 - 2017-05-12 18:25 - 001251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
    2017-10-25 13:52 - 2017-05-12 17:58 - 001648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
    2017-10-25 13:52 - 2017-05-12 17:58 - 001180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
    2017-10-25 13:52 - 2017-05-10 17:33 - 000091368 _____ (Microsoft Corporation) C:\Windows\system32\MigAutoPlay.exe
    2017-10-25 13:52 - 2017-05-10 17:29 - 014183936 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
    2017-10-25 13:52 - 2017-05-10 17:29 - 003165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
    2017-10-25 13:52 - 2017-05-10 17:29 - 000192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
    2017-10-25 13:52 - 2017-05-10 17:29 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
    2017-10-25 13:52 - 2017-05-10 17:28 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
    2017-10-25 13:52 - 2017-05-10 17:16 - 000091368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MigAutoPlay.exe
    2017-10-25 13:52 - 2017-05-10 17:14 - 002651136 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
    2017-10-25 13:52 - 2017-05-10 17:13 - 000709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
    2017-10-25 13:52 - 2017-05-10 17:13 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
    2017-10-25 13:52 - 2017-05-10 17:13 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
    2017-10-25 13:52 - 2017-05-10 17:13 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
    2017-10-25 13:52 - 2017-05-10 17:13 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
    2017-10-25 13:52 - 2017-05-10 17:13 - 000012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
    2017-10-25 13:52 - 2017-05-10 17:12 - 012880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
    2017-10-25 13:52 - 2017-05-10 17:12 - 000174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
    2017-10-25 13:52 - 2017-05-10 17:00 - 000573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
    2017-10-25 13:52 - 2017-05-10 17:00 - 000093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
    2017-10-25 13:52 - 2017-05-10 17:00 - 000035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
    2017-10-25 13:52 - 2017-05-10 17:00 - 000030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
    2017-10-25 13:52 - 2017-05-09 17:30 - 000757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
    2017-10-25 13:52 - 2017-05-09 17:29 - 000970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
    2017-10-25 13:52 - 2017-05-09 17:15 - 000071680 _____ C:\Windows\system32\PrintBrmUi.exe
    2017-10-25 13:52 - 2017-05-09 17:11 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
    2017-10-25 13:52 - 2017-05-07 17:33 - 000094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
    2017-10-25 13:52 - 2017-05-07 17:29 - 000011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
    2017-10-25 13:52 - 2017-03-30 17:03 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\rundll32.exe
    2017-10-25 13:52 - 2017-03-30 16:58 - 000045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
    2017-10-25 13:47 - 2017-03-07 18:30 - 000085504 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
    2017-10-25 13:47 - 2017-03-07 18:17 - 000067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
    2017-10-25 13:47 - 2017-03-04 03:27 - 001574912 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
    2017-10-25 13:47 - 2017-03-04 03:27 - 000093696 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
    2017-10-25 13:47 - 2017-03-04 03:14 - 001329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
    2017-10-25 13:47 - 2017-03-04 03:14 - 000077312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll
    2017-10-25 13:40 - 2017-06-15 22:23 - 000753664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
    2017-10-25 13:40 - 2017-06-13 00:49 - 001363456 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
    2017-10-25 13:40 - 2017-06-13 00:49 - 000594432 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
    2017-10-25 13:40 - 2017-06-13 00:49 - 000475136 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
    2017-10-25 13:40 - 2017-06-13 00:49 - 000058880 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll
    2017-10-25 13:40 - 2017-06-13 00:29 - 001227264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
    2017-10-25 13:40 - 2017-06-13 00:29 - 000444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll
    2017-10-25 13:40 - 2017-06-13 00:29 - 000390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
    2017-10-25 13:40 - 2017-06-13 00:28 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdhui.dll
    2017-10-25 13:40 - 2017-06-13 00:14 - 000379392 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
    2017-10-25 13:40 - 2017-06-13 00:14 - 000172544 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
    2017-10-25 13:40 - 2017-06-13 00:14 - 000103936 _____ (Microsoft Corporation) C:\Windows\system32\resmon.exe
    2017-10-25 13:40 - 2017-06-13 00:06 - 000303616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe
    2017-10-25 13:40 - 2017-06-13 00:06 - 000157184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfmon.exe
    2017-10-25 13:40 - 2017-06-13 00:06 - 000103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resmon.exe
    2017-10-25 13:40 - 2017-06-10 17:59 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
    2017-10-25 13:40 - 2017-06-10 17:39 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
    2017-10-25 13:40 - 2017-06-06 17:30 - 001867264 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
    2017-10-25 13:40 - 2017-06-06 17:12 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
    2017-10-25 13:40 - 2017-05-30 06:56 - 001895656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
    2017-10-25 13:40 - 2017-05-30 06:56 - 000377576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
    2017-10-25 13:40 - 2017-05-30 06:56 - 000287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
    2017-10-25 13:39 - 2017-07-29 16:56 - 000117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
    2017-10-25 13:39 - 2017-07-21 16:26 - 000518144 _____ C:\Windows\SysWOW64\msjetoledb40.dll
    2017-10-25 13:39 - 2017-07-21 16:26 - 000409600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexch40.dll
    2017-10-25 13:39 - 2017-07-21 16:26 - 000290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjtes40.dll
    2017-10-25 13:39 - 2017-07-21 16:26 - 000282624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstext40.dll
    2017-10-25 13:39 - 2017-07-14 17:29 - 000486400 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
    2017-10-25 13:39 - 2017-07-14 17:29 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
    2017-10-25 13:39 - 2017-07-14 17:10 - 000382976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
    2017-10-25 13:39 - 2017-07-14 16:57 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
    2017-10-25 13:39 - 2017-07-14 16:50 - 000054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
    2017-10-25 13:39 - 2017-07-14 16:50 - 000028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
    2017-10-25 13:39 - 2017-07-08 17:34 - 000370920 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
    2017-10-25 13:39 - 2017-07-07 17:33 - 000363752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys
    2017-10-25 13:39 - 2017-07-01 15:05 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
    2017-10-25 13:39 - 2017-07-01 15:05 - 000616448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrepl40.dll
    2017-10-25 13:39 - 2017-07-01 15:05 - 000475648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxbde40.dll
    2017-10-25 13:39 - 2017-07-01 15:05 - 000375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspbde40.dll
    2017-10-25 13:39 - 2017-07-01 15:05 - 000343552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
    2017-10-25 13:39 - 2017-07-01 15:05 - 000310272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll
    2017-10-25 13:39 - 2017-07-01 15:05 - 000240640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msltus40.dll
    2017-10-25 13:37 - 2017-09-13 17:33 - 000631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
    2017-10-25 13:37 - 2017-09-13 17:32 - 005547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
    2017-10-25 13:37 - 2017-09-13 17:32 - 000706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
    2017-10-25 13:37 - 2017-09-13 17:32 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
    2017-10-25 13:37 - 2017-09-13 17:32 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
    2017-10-25 13:37 - 2017-09-13 17:31 - 001732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 001068544 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000886272 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000448512 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000414208 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000118784 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
    2017-10-25 13:37 - 2017-09-13 17:28 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:13 - 004001512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
    2017-10-25 13:37 - 2017-09-13 17:13 - 003945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
    2017-10-25 13:37 - 2017-09-13 17:10 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000830464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000392704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlansec.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
    2017-10-25 13:37 - 2017-09-13 17:09 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 17:05 - 000324608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
    2017-10-25 13:37 - 2017-09-13 17:00 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
    2017-10-25 13:37 - 2017-09-13 17:00 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
    2017-10-25 13:37 - 2017-09-13 17:00 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
    2017-10-25 13:37 - 2017-09-13 17:00 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
    2017-10-25 13:37 - 2017-09-13 16:57 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
    2017-10-25 13:37 - 2017-09-13 16:56 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
    2017-10-25 13:37 - 2017-09-13 16:53 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
    2017-10-25 13:37 - 2017-09-13 16:53 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
    2017-10-25 13:37 - 2017-09-13 16:53 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
    2017-10-25 13:37 - 2017-09-13 16:52 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
    2017-10-25 13:37 - 2017-09-13 16:52 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
    2017-10-25 13:37 - 2017-09-13 16:50 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
    2017-10-25 13:37 - 2017-09-13 16:47 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
    2017-10-25 13:37 - 2017-09-13 16:46 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
    2017-10-25 13:37 - 2017-09-13 16:46 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
    2017-10-25 13:37 - 2017-09-13 16:46 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
    2017-10-25 13:37 - 2017-09-13 16:46 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 16:46 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 16:46 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 16:46 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
    2017-10-25 13:37 - 2017-09-13 16:46 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
    2017-10-25 13:37 - 2017-09-08 17:34 - 001680616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
    2017-10-25 13:37 - 2017-09-08 17:30 - 002319872 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
    2017-10-25 13:37 - 2017-09-08 17:30 - 002222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
    2017-10-25 13:37 - 2017-09-08 17:30 - 002058240 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
    2017-10-25 13:37 - 2017-09-08 17:30 - 000778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
    2017-10-25 13:37 - 2017-09-08 17:30 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
    2017-10-25 13:37 - 2017-09-08 17:30 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
    2017-10-25 13:37 - 2017-09-08 17:30 - 000288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
    2017-10-25 13:37 - 2017-09-08 17:30 - 000149504 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
    2017-10-25 13:37 - 2017-09-08 17:30 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
    2017-10-25 13:37 - 2017-09-08 17:30 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
    2017-10-25 13:37 - 2017-09-08 17:30 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
    2017-10-25 13:37 - 2017-09-08 17:30 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
    2017-10-25 13:37 - 2017-09-08 17:14 - 000591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
    2017-10-25 13:37 - 2017-09-08 17:13 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
    2017-10-25 13:37 - 2017-09-08 17:13 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
    2017-10-25 13:37 - 2017-09-08 17:10 - 001549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
    2017-10-25 13:37 - 2017-09-08 17:10 - 001363968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll
    2017-10-25 13:37 - 2017-09-08 17:10 - 000312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
    2017-10-25 13:37 - 2017-09-08 17:10 - 000109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
    2017-10-25 13:37 - 2017-09-08 17:09 - 001400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
    2017-10-25 13:37 - 2017-09-08 17:09 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
    2017-10-25 13:37 - 2017-09-08 17:09 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
    2017-10-25 13:37 - 2017-09-08 17:09 - 000197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
    2017-10-25 13:37 - 2017-09-08 17:09 - 000104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
    2017-10-25 13:37 - 2017-09-08 17:09 - 000059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
    2017-10-25 13:37 - 2017-09-08 17:09 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
    2017-10-25 13:37 - 2017-09-08 17:00 - 003222016 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
    2017-10-25 13:37 - 2017-09-08 17:00 - 000427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
    2017-10-25 13:37 - 2017-09-08 17:00 - 000164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
    2017-10-25 13:37 - 2017-09-08 16:59 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
    2017-10-25 13:37 - 2017-09-08 16:59 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
    2017-10-25 13:37 - 2017-09-08 16:20 - 000640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswstr10.dll
    2017-10-25 13:37 - 2017-09-08 16:20 - 000345088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
    2017-10-25 13:37 - 2017-09-08 16:20 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjint40.dll
    2017-10-25 13:37 - 2017-09-07 17:31 - 002851328 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
    2017-10-25 13:37 - 2017-09-07 17:12 - 002755072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll
    2017-10-25 13:37 - 2017-09-07 16:55 - 000461312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
    2017-10-25 13:37 - 2017-09-07 16:55 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
    2017-10-25 13:37 - 2017-09-07 16:55 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
    2017-10-25 13:37 - 2017-07-01 15:05 - 000866816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswdat10.dll
    2017-10-25 13:37 - 2017-07-01 15:05 - 000083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjter40.dll
    2017-10-25 13:36 - 2017-10-25 13:36 - 000526543 _____ C:\Users\eclips\Desktop\windows6.1-kb3156013-x64_ff3e23fe222b35468c5d6a39ad131a62a7f856f3.msu
    2017-10-25 13:35 - 2017-10-25 13:35 - 049284629 _____ C:\Users\eclips\Desktop\windows6.1-kb4022722-x64_ee5b5fae02d1c48dbd94beaff4d3ee4fe3cd2ac2.msu
    2017-10-25 13:35 - 2017-10-25 13:35 - 032037488 _____ C:\Users\eclips\Desktop\windows6.1-kb4019263-x64_d64d8b6f91434754fdd2a552d8732c95a6e64f30.msu
    2017-10-25 13:35 - 2017-10-25 13:35 - 032037488 _____ C:\Users\eclips\Desktop\windows6.1-kb4019263-x64_d64d8b6f91434754fdd2a552d8732c95a6e64f30(1).msu
    2017-10-25 13:34 - 2017-10-25 13:34 - 039346614 _____ C:\Users\eclips\Desktop\windows6.1-kb4015546-x64_4ff5653990d74c465d48adfba21aca6453be99aa.msu
    2017-10-25 13:34 - 2017-10-25 13:34 - 027729400 _____ C:\Users\eclips\Desktop\windows6.1-kb4025337-x64_c013b7fcf3486a0f71c4f58fc361bfdb715c4e94.msu
    2017-10-25 13:33 - 2017-10-25 13:34 - 031719999 _____ C:\Users\eclips\Desktop\windows6.1-kb4034679-x64_ccabab6aefd6c16454fac39163ae5abc2f4f1303.msu
    2017-10-25 13:33 - 2017-10-25 13:33 - 033050297 _____ C:\Users\eclips\Desktop\windows6.1-kb4041678-x64_f55123caaf35a98d2056dc81a5d4a185f148601a.msu
    2017-10-25 13:12 - 2017-10-25 13:12 - 000526543 _____ C:\Users\eclips\Desktop\Windows6.1-KB3156013-x64(1).msu
    2017-10-25 13:11 - 2017-10-25 13:11 - 000813217 _____ C:\Users\eclips\Desktop\Windows6.1-KB3184122-x64.msu
    2017-10-25 13:10 - 2017-10-25 13:11 - 002362122 _____ C:\Users\eclips\Desktop\Windows6.1-KB3185911-x64.msu
    2017-10-25 13:10 - 2017-10-25 13:10 - 034790450 _____ C:\Users\eclips\Desktop\windows6.1-kb4012212-x64_2decefaa02e2058dcd965702509a992d8c4e92b3(1).msu
    2017-10-25 13:10 - 2017-10-25 13:10 - 001762067 _____ C:\Users\eclips\Desktop\Windows6.1-KB3178034-x64(1).msu
    2017-10-25 13:08 - 2017-10-25 13:09 - 092294660 _____ C:\Users\eclips\Desktop\windows6.1-kb3197867-x64_6f8f45a5706eeee8ac05aa16fa91c984a9edb929.msu
    2017-10-25 13:08 - 2017-10-25 13:09 - 082997820 _____ C:\Users\eclips\Desktop\Windows6.1-KB3192391-x64.msu
    2017-10-25 12:54 - 2017-10-25 12:54 - 001762067 _____ C:\Users\eclips\Desktop\Windows6.1-KB3178034-x64.msu
    2017-10-25 12:53 - 2017-10-25 12:53 - 002656864 _____ C:\Users\eclips\Desktop\Windows6.1-KB3155178-x64.msu
    2017-10-25 12:53 - 2017-10-25 12:53 - 000526543 _____ C:\Users\eclips\Desktop\Windows6.1-KB3156013-x64.msu
    2017-10-25 12:52 - 2017-10-25 12:53 - 034790450 _____ C:\Users\eclips\Desktop\windows6.1-kb4012212-x64_2decefaa02e2058dcd965702509a992d8c4e92b3.msu
    2017-10-25 12:52 - 2017-10-25 12:53 - 021672828 _____ C:\Users\eclips\Desktop\Windows6.1-KB3153171-x64.msu
    2017-10-25 12:50 - 2016-04-14 15:49 - 000603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
    2017-10-25 12:50 - 2016-04-14 15:21 - 000647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
    2017-10-25 10:43 - 2017-10-25 10:43 - 000015541 _____ C:\Users\eclips\Desktop\dcs_legends_of_tomorrow_-_03x02(subsunacs.net).rar
    2017-10-24 17:27 - 2017-10-24 17:27 - 000017262 _____ C:\Users\eclips\Desktop\SecurityCheck2.txt
    2017-10-24 17:11 - 2017-02-09 18:31 - 000250880 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
    2017-10-24 17:11 - 2017-02-09 18:14 - 000215040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icm32.dll
    2017-10-24 17:11 - 2017-01-13 20:00 - 000084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
    2017-10-24 17:11 - 2017-01-13 19:45 - 000084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
    2017-10-24 17:11 - 2016-11-20 18:19 - 000084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
    2017-10-24 17:11 - 2016-11-09 18:33 - 000504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
    2017-10-24 17:11 - 2016-11-09 18:33 - 000070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
    2017-10-24 17:11 - 2016-11-09 18:33 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
    2017-10-24 17:11 - 2016-11-09 18:17 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
    2017-10-24 17:11 - 2016-11-09 18:17 - 000025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
    2017-10-24 17:11 - 2016-11-09 18:02 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
    2017-10-24 17:11 - 2016-11-09 17:55 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
    2017-10-24 17:11 - 2016-10-11 17:32 - 000069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
    2017-10-24 17:11 - 2016-10-11 17:31 - 000176128 _____ (Microsoft Corporation) C:\Windows\system32\tintlgnt.ime
    2017-10-24 17:11 - 2016-10-11 17:31 - 000132608 _____ (Microsoft Corporation) C:\Windows\system32\pintlgnt.ime
    2017-10-24 17:11 - 2016-10-11 17:18 - 000126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tintlgnt.ime
    2017-10-24 17:11 - 2016-10-11 17:18 - 000090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pintlgnt.ime
    2017-10-24 17:11 - 2016-10-11 17:18 - 000069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll
    2017-10-24 17:11 - 2016-09-08 22:34 - 000108544 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
    2017-10-24 17:11 - 2016-09-08 22:34 - 000087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
    2017-10-24 17:11 - 2016-09-08 16:55 - 000142336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
    2017-10-24 17:11 - 2016-09-08 16:55 - 000106496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
    2017-10-24 17:11 - 2016-08-12 19:02 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
    2017-10-24 17:11 - 2016-08-06 17:31 - 000012800 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll
    2017-10-24 17:11 - 2016-08-06 17:01 - 000013824 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe
    2017-10-24 17:11 - 2016-08-06 16:53 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmplpxy.dll
    2017-10-24 17:11 - 2016-06-14 19:16 - 001068544 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
    2017-10-24 17:11 - 2016-06-14 19:16 - 000187904 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
    2017-10-24 17:11 - 2016-06-14 19:16 - 000081920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
    2017-10-24 17:11 - 2016-06-14 19:16 - 000037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
    2017-10-24 17:11 - 2016-06-14 19:16 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
    2017-10-24 17:11 - 2016-06-14 19:11 - 000663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
    2017-10-24 17:11 - 2016-06-14 17:21 - 001005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
    2017-10-24 17:11 - 2016-06-14 17:00 - 000011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
    2017-10-24 17:11 - 2016-06-14 17:00 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
    2017-10-24 17:10 - 2017-02-09 18:32 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\WcsPlugInService.dll
    2017-10-24 17:10 - 2017-02-09 18:31 - 000625664 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
    2017-10-24 17:10 - 2017-02-09 18:14 - 000481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
    2017-10-24 17:10 - 2017-02-09 17:51 - 000032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcsPlugInService.dll
    2017-10-24 17:10 - 2017-01-13 20:00 - 000976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
    2017-10-24 17:10 - 2017-01-13 19:45 - 000741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
    2017-10-24 17:10 - 2017-01-11 20:01 - 001887744 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
    2017-10-24 17:10 - 2017-01-11 20:01 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
    2017-10-24 17:10 - 2017-01-11 19:43 - 001241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
    2017-10-24 17:10 - 2017-01-11 19:43 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
    2017-10-24 17:10 - 2016-11-21 20:12 - 000109568 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
    2017-10-24 17:10 - 2016-11-20 16:07 - 000467392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
    2017-10-24 17:10 - 2016-11-10 18:32 - 001009152 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
    2017-10-24 17:10 - 2016-11-10 18:19 - 000833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
    2017-10-24 17:10 - 2016-11-09 18:41 - 000114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
    2017-10-24 17:10 - 2016-11-09 18:33 - 003244032 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
    2017-10-24 17:10 - 2016-11-09 18:33 - 001941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
    2017-10-24 17:10 - 2016-11-09 18:33 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
    2017-10-24 17:10 - 2016-11-09 18:17 - 002365440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
    2017-10-24 17:10 - 2016-11-09 18:17 - 001806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
    2017-10-24 17:10 - 2016-11-09 18:17 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
    2017-10-24 17:10 - 2016-10-11 17:31 - 001148416 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME
    2017-10-24 17:10 - 2016-10-11 17:31 - 000878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
    2017-10-24 17:10 - 2016-10-11 17:31 - 000457216 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime
    2017-10-24 17:10 - 2016-10-11 17:31 - 000246784 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
    2017-10-24 17:10 - 2016-10-11 17:31 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\quick.ime
    2017-10-24 17:10 - 2016-10-11 17:31 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\qintlgnt.ime
    2017-10-24 17:10 - 2016-10-11 17:31 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\phon.ime
    2017-10-24 17:10 - 2016-10-11 17:31 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\cintlgnt.ime
    2017-10-24 17:10 - 2016-10-11 17:31 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\chajei.ime
    2017-10-24 17:10 - 2016-10-11 17:18 - 001027584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10.IME
    2017-10-24 17:10 - 2016-10-11 17:18 - 000701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
    2017-10-24 17:10 - 2016-10-11 17:18 - 000430080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imkr80.ime
    2017-10-24 17:10 - 2016-10-11 17:18 - 000202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll
    2017-10-24 17:10 - 2016-10-11 17:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quick.ime
    2017-10-24 17:10 - 2016-10-11 17:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qintlgnt.ime
    2017-10-24 17:10 - 2016-10-11 17:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\phon.ime
    2017-10-24 17:10 - 2016-10-11 17:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cintlgnt.ime
    2017-10-24 17:10 - 2016-10-11 17:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\chajei.ime
    2017-10-24 17:10 - 2016-10-11 16:55 - 000346112 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
    2017-10-24 17:10 - 2016-10-11 15:33 - 000187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
    2017-10-24 17:10 - 2016-10-11 15:18 - 000419648 _____ C:\Windows\SysWOW64\locale.nls
    2017-10-24 17:10 - 2016-10-11 15:17 - 000419648 _____ C:\Windows\system32\locale.nls
    2017-10-24 17:10 - 2016-10-11 15:06 - 000221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
    2017-10-24 17:10 - 2016-10-08 15:06 - 000633296 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
    2017-10-24 17:10 - 2016-10-07 17:32 - 003649536 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
    2017-10-24 17:10 - 2016-10-07 17:12 - 002291712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
    2017-10-24 17:10 - 2016-10-05 16:54 - 000090112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
    2017-10-24 17:10 - 2016-09-15 16:56 - 000041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
    2017-10-24 17:10 - 2016-09-12 23:08 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
    2017-10-24 17:10 - 2016-09-12 22:49 - 000076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsmsext.dll
    2017-10-24 17:10 - 2016-09-08 22:34 - 000263680 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
    2017-10-24 17:10 - 2016-09-08 22:34 - 000208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
    2017-10-24 17:10 - 2016-08-22 18:19 - 001386496 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
    2017-10-24 17:10 - 2016-08-12 19:02 - 014632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
    2017-10-24 17:10 - 2016-08-12 19:02 - 012574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
    2017-10-24 17:10 - 2016-08-12 19:02 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
    2017-10-24 17:10 - 2016-08-12 19:02 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
    2017-10-24 17:10 - 2016-08-12 18:47 - 012574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
    2017-10-24 17:10 - 2016-08-12 18:47 - 011410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
    2017-10-24 17:10 - 2016-08-12 18:31 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
    2017-10-24 17:10 - 2016-08-12 18:31 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
    2017-10-24 17:10 - 2016-08-12 18:31 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
    2017-10-24 17:10 - 2016-08-12 18:26 - 000461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
    2017-10-24 17:10 - 2016-08-06 17:31 - 002023424 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
    2017-10-24 17:10 - 2016-08-06 17:31 - 000347136 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
    2017-10-24 17:10 - 2016-08-06 17:31 - 000310784 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
    2017-10-24 17:10 - 2016-08-06 17:31 - 000182272 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
    2017-10-24 17:10 - 2016-08-06 17:31 - 000054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll
    2017-10-24 17:10 - 2016-08-06 17:15 - 001178112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
    2017-10-24 17:10 - 2016-08-06 17:15 - 000249344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
    2017-10-24 17:10 - 2016-08-06 17:15 - 000214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
    2017-10-24 17:10 - 2016-08-06 17:15 - 000146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
    2017-10-24 17:10 - 2016-08-06 17:15 - 000054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmRes.dll
    2017-10-24 17:10 - 2016-08-06 17:01 - 000266752 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
    2017-10-24 17:10 - 2016-08-06 16:53 - 000199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
    2017-10-24 17:10 - 2016-08-06 16:53 - 000012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmprovhost.exe
    2017-10-24 17:10 - 2016-06-14 19:16 - 004121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
    2017-10-24 17:10 - 2016-06-14 19:16 - 001202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
    2017-10-24 17:10 - 2016-06-14 19:16 - 000842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
    2017-10-24 17:10 - 2016-06-14 19:16 - 000782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
    2017-10-24 17:10 - 2016-06-14 19:16 - 000680448 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
    2017-10-24 17:10 - 2016-06-14 19:16 - 000641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
    2017-10-24 17:10 - 2016-06-14 19:16 - 000632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
    2017-10-24 17:10 - 2016-06-14 19:16 - 000499712 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
    2017-10-24 17:10 - 2016-06-14 19:16 - 000497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
    2017-10-24 17:10 - 2016-06-14 19:16 - 000440320 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
    2017-10-24 17:10 - 2016-06-14 19:16 - 000433152 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
    2017-10-24 17:10 - 2016-06-14 19:16 - 000371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
    2017-10-24 17:10 - 2016-06-14 19:16 - 000325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
    2017-10-24 17:10 - 2016-06-14 19:16 - 000295936 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
    2017-10-24 17:10 - 2016-06-14 19:16 - 000284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
    2017-10-24 17:10 - 2016-06-14 19:16 - 000206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
    2017-10-24 17:10 - 2016-06-14 19:16 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
    2017-10-24 17:10 - 2016-06-14 17:21 - 003209216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
    2017-10-24 17:10 - 2016-06-14 17:21 - 000988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
    2017-10-24 17:10 - 2016-06-14 17:21 - 000744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
    2017-10-24 17:10 - 2016-06-14 17:21 - 000617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
    2017-10-24 17:10 - 2016-06-14 17:21 - 000519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
    2017-10-24 17:10 - 2016-06-14 17:21 - 000504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
    2017-10-24 17:10 - 2016-06-14 17:21 - 000489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
    2017-10-24 17:10 - 2016-06-14 17:21 - 000442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
    2017-10-24 17:10 - 2016-06-14 17:21 - 000406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
    2017-10-24 17:10 - 2016-06-14 17:21 - 000374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
    2017-10-24 17:10 - 2016-06-14 17:21 - 000354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
    2017-10-24 17:10 - 2016-06-14 17:21 - 000265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
    2017-10-24 17:10 - 2016-06-14 17:21 - 000195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
    2017-10-24 17:10 - 2016-06-14 17:21 - 000103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
    2017-10-24 17:10 - 2016-06-14 17:21 - 000080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
    2017-10-24 17:10 - 2016-06-14 17:21 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
    2017-10-24 17:10 - 2016-06-14 17:15 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
    2017-10-24 17:10 - 2016-06-14 17:15 - 000055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
    2017-10-24 17:10 - 2016-06-14 17:15 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
    2017-10-24 17:10 - 2016-06-14 17:05 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
    2017-10-24 17:10 - 2016-06-14 17:05 - 000023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
    2017-10-24 17:10 - 2016-05-12 15:05 - 000297984 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
    2017-10-24 17:10 - 2016-05-12 15:04 - 000249352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
    2017-10-24 17:08 - 2016-03-24 00:43 - 000457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
    2017-10-24 17:08 - 2016-03-24 00:40 - 000546656 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
    2017-10-24 17:07 - 2016-04-06 17:27 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
    2017-10-24 16:30 - 2016-02-05 03:19 - 000381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
    2017-10-24 16:30 - 2016-02-04 20:41 - 000296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
    2017-10-24 12:42 - 2017-10-24 12:42 - 000020627 _____ C:\Users\eclips\Desktop\TWD___08x01.(subs.sab.bz).zip
    2017-10-22 20:32 - 2017-10-22 20:33 - 001921844 _____ C:\Users\eclips\Desktop\THG570.pdf
    2017-10-21 21:43 - 2017-10-21 21:43 - 000000771 _____ C:\Users\eclips\AppData\Local\RT61_{A3236531-A5CD-4450-8F87-65A07C468862}_sta
    2017-10-21 21:42 - 2017-10-21 21:43 - 000003061 _____ C:\Users\eclips\AppData\Local\RT61_{A3236531-A5CD-4450-8F87-65A07C468862}_prof
    2017-10-21 20:14 - 2017-10-21 20:14 - 000015958 _____ C:\Users\eclips\Desktop\dcs_legends_of_tomorrow_-_03x01(subsunacs.net).rar
    2017-10-20 22:13 - 2017-10-20 22:13 - 000000148 _____ C:\Users\eclips\Documents\host.txt
    2017-10-20 21:41 - 2016-01-06 21:02 - 000275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
    2017-10-20 21:41 - 2016-01-06 20:41 - 000216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
    2017-10-20 21:01 - 2017-10-25 22:00 - 000013692 _____ C:\Users\eclips\Desktop\SecurityCheck.txt
    2017-10-20 21:01 - 2017-10-25 21:58 - 000000000 ____D C:\SecurityCheck
    2017-10-20 21:01 - 2017-10-20 21:01 - 000515639 _____ (glax24 (safezone.cc)) C:\Users\eclips\Desktop\SecurityCheck.exe
    2017-10-20 20:06 - 2017-10-20 20:06 - 000019935 _____ C:\Users\eclips\Desktop\the.flash.2014.s04e02.hdtv.x264(subsunacs.net).rar
    2017-10-20 19:51 - 2017-10-20 19:52 - 000005005 _____ C:\Users\eclips\Desktop\Fixlog.txt
    2017-10-20 19:34 - 2017-10-20 19:42 - 000000000 ____D C:\Users\eclips\AppData\Roaming\Geek Uninstaller
    2017-10-20 19:34 - 2017-10-16 17:36 - 007139264 _____ (Geek Unіnstaller) C:\Users\eclips\Desktop\geek.exe
    2017-10-19 20:34 - 2017-10-31 18:27 - 000057174 _____ C:\Users\eclips\Desktop\Addition.txt
    2017-10-19 20:33 - 2017-11-10 19:34 - 000013363 _____ C:\Users\eclips\Desktop\FRST.txt
    2017-10-19 20:30 - 2017-11-10 19:34 - 002403328 _____ (Farbar) C:\Users\eclips\Desktop\FRST64.exe
    2017-10-19 19:05 - 2017-10-19 19:05 - 000000000 ____D C:\Windows\system32\Drivers\etc\BACKUP
    2017-10-19 15:27 - 2017-10-19 19:41 - 000000000 ____D C:\Users\eclips\Desktop\bsplayer_pro271.1081
    2017-10-19 15:20 - 2017-10-19 15:20 - 000003164 _____ C:\Windows\System32\Tasks\klcp_update
    2017-10-19 15:20 - 2017-10-19 15:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
    2017-10-19 15:20 - 2017-10-19 15:20 - 000000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
    2017-10-19 15:20 - 2017-07-30 12:50 - 003850240 _____ (x264vfw project) C:\Windows\SysWOW64\x264vfw.dll
    2017-10-19 15:20 - 2017-07-30 12:50 - 003799552 _____ (x264vfw project) C:\Windows\system32\x264vfw64.dll
    2017-10-19 15:20 - 2015-12-18 11:00 - 000755200 _____ C:\Windows\system32\xvidcore.dll
    2017-10-19 15:20 - 2015-12-18 11:00 - 000309248 _____ C:\Windows\system32\xvidvfw.dll
    2017-10-19 15:20 - 2015-12-18 11:00 - 000282112 _____ C:\Windows\SysWOW64\xvidvfw.dll
    2017-10-19 15:20 - 2015-10-24 18:00 - 000126976 _____ C:\Windows\system32\ff_vfw.dll
    2017-10-19 15:20 - 2015-10-24 18:00 - 000112128 _____ C:\Windows\SysWOW64\ff_vfw.dll
    2017-10-19 15:20 - 2012-07-21 12:55 - 000180736 _____ (fccHandler) C:\Windows\system32\ac3acm.acm
    2017-10-19 15:20 - 2012-07-21 12:54 - 000122880 _____ (fccHandler) C:\Windows\SysWOW64\ac3acm.acm
    2017-10-19 15:20 - 2011-12-07 19:37 - 000148992 _____ ( ) C:\Windows\system32\lagarith.dll
    2017-10-19 15:20 - 2011-12-07 19:32 - 000216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll
    2017-10-19 15:16 - 2017-10-19 15:18 - 052381992 _____ (KLCP ) C:\Users\eclips\Desktop\K-Lite_Codec_Pack_1359_Mega.exe
    2017-10-19 14:58 - 2017-10-19 14:58 - 010563576 _____ C:\Users\eclips\Desktop\bsplayer271.setup.exe
    2017-10-19 14:54 - 2017-10-19 14:58 - 000000000 ____D C:\Users\eclips\AppData\Roaming\Lavasoft
    2017-10-19 14:54 - 2017-10-19 14:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
    2017-10-19 14:54 - 2017-10-19 14:58 - 000000000 ____D C:\Program Files (x86)\Lavasoft
    2017-10-19 14:54 - 2017-10-19 14:54 - 000000000 ____D C:\Users\eclips\AppData\Local\Lavasoft
    2017-10-19 14:53 - 2017-10-19 14:58 - 000000000 ____D C:\ProgramData\Lavasoft
    2017-10-19 14:44 - 2017-10-19 15:29 - 000001153 _____ C:\ProgramData\Microsoft\Windows\Start Menu\BS.Player PRO.lnk
    2017-10-19 14:44 - 2017-10-19 15:29 - 000001147 _____ C:\Users\Public\Desktop\BS.Player PRO.lnk
    2017-10-19 14:44 - 2017-10-19 14:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Webteh
    2017-10-19 14:37 - 2017-10-19 14:39 - 053285758 _____ (KLCP ) C:\Users\eclips\Desktop\K-Lite_Codec_Pack_1360_Mega.exe
    2017-10-19 13:57 - 2017-10-19 13:57 - 000091280 _____ C:\Users\eclips\Desktop\WAR_2017.(subs.sab.bz).rar
    2017-10-17 22:41 - 2013-12-10 13:50 - 000955888 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
    2017-10-17 22:41 - 2013-12-10 13:50 - 000839152 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
    2017-10-17 22:40 - 2017-10-17 22:40 - 000110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
    2017-10-17 22:39 - 2017-10-17 22:39 - 000000000 ____D C:\Users\eclips\AppData\Roaming\Sun
    2017-10-17 22:38 - 2017-10-17 22:38 - 000000000 ____D C:\Users\eclips\AppData\LocalLow\Oracle
    2017-10-14 19:33 - 2017-10-14 19:33 - 000032774 _____ C:\Users\eclips\Desktop\IT_2017_NEW_HD_TS_60FPS_x264_HQ_CPG.(subs.sab.bz).rar
    2017-10-14 18:44 - 2017-11-10 19:17 - 000000000 ____D C:\Program Files\Common Files\AV
    2017-10-14 18:44 - 2017-11-01 14:48 - 000003032 _____ C:\Windows\System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}
    2017-10-14 18:16 - 2017-10-14 18:16 - 008250832 _____ (Malwarebytes) C:\Users\eclips\Downloads\adwcleaner_7.0.3.1.exe
    2017-10-14 15:17 - 2017-11-02 09:20 - 000000000 ____D C:\ProgramData\NVIDIA
    2017-10-14 15:16 - 2009-07-10 06:01 - 000539168 _____ (NVIDIA Corporation) C:\Windows\system32\NVUNINST.EXE
    2017-10-14 15:15 - 2015-01-31 04:52 - 018320440 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
    2017-10-14 15:15 - 2015-01-31 04:52 - 015373568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
    2017-10-14 15:15 - 2015-01-31 04:52 - 002753952 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
    2017-10-14 15:15 - 2015-01-31 04:52 - 002447000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
    2017-10-14 15:15 - 2009-12-03 17:43 - 000000000 ____D C:\Users\eclips\Downloads\VGA_Win7-64(190.38)e
    2017-10-14 15:15 - 2009-07-14 10:54 - 000930272 _____ (Microsoft Corporation) C:\Windows\system32\dpinst.exe
    2017-10-14 15:15 - 2009-07-14 10:54 - 000539168 _____ (NVIDIA Corporation) C:\Windows\system32\nvudisp.exe
    2017-10-14 15:15 - 2009-07-14 10:54 - 000167936 _____ (NVIDIA Corporation) C:\Windows\system32\nvcod157.dll
    2017-10-14 15:15 - 2009-07-14 10:54 - 000167936 _____ (NVIDIA Corporation) C:\Windows\system32\nvcod.dll
    2017-10-14 15:15 - 2009-07-14 10:54 - 000011168 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvBridge.kmd
    2017-10-14 15:15 - 2009-07-14 10:54 - 000010161 _____ C:\Windows\system32\nvdisp.nvu
    2017-10-14 15:14 - 2017-10-14 15:15 - 153992488 _____ C:\Users\eclips\Downloads\VGA_Win7-64(190.38)e.zip
    2017-10-14 15:13 - 2017-11-10 19:15 - 000000000 ____D C:\Users\eclips\AppData\LocalLow\Mozilla
    2017-10-13 21:03 - 2017-10-13 21:03 - 000033952 _____ C:\Users\eclips\Downloads\the.flash.2014.s04e01.hdtv.x264(subsunacs.net).rar
    2017-10-13 00:17 - 2017-10-25 22:13 - 000000000 ____D C:\Program Files\Malwarebytes
    2017-10-13 00:12 - 2017-10-31 21:26 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
    2017-10-12 23:04 - 2017-10-12 23:04 - 000000000 ____D C:\Users\eclips\Desktop\Стари данни Firefox
    2017-10-12 23:01 - 2017-10-13 00:17 - 000000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
    2017-10-12 22:30 - 2017-10-12 23:35 - 000000000 ____D C:\Users\eclips\AppData\Local\Dropbox
    2017-10-12 22:30 - 2017-10-12 22:30 - 000000000 ____D C:\ProgramData\Dropbox
    
    ==================== One Month Modified files and folders ========
    
    (If an entry is included in the fixlist, the file/folder will be moved.)
    
    2017-11-10 19:34 - 2014-07-01 18:48 - 000000000 ____D C:\FRST
    2017-11-10 19:30 - 2013-11-19 22:28 - 000065536 _____ C:\Windows\system32\Ikeext.etl
    2017-11-10 19:30 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
    2017-11-10 19:28 - 2009-07-14 07:13 - 000785366 _____ C:\Windows\system32\PerfStringBackup.INI
    2017-11-10 19:28 - 2009-07-14 06:45 - 000026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2017-11-10 19:28 - 2009-07-14 06:45 - 000026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2017-11-10 19:28 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
    2017-11-10 19:18 - 2014-02-12 11:17 - 000000000 ____D C:\ProgramData\Kaspersky Lab
    2017-11-10 19:12 - 2013-11-19 18:37 - 000000000 ____D C:\Users\eclips\AppData\Roaming\BitComet
    2017-11-10 19:07 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\tracing
    2017-11-10 19:03 - 2013-12-18 21:51 - 000000000 ____D C:\Users\eclips\AppData\Roaming\Skype
    2017-11-02 09:20 - 2014-05-12 22:13 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
    2017-11-01 19:18 - 2013-11-30 19:46 - 000000000 ____D C:\Users\eclips\AppData\Local\Google
    2017-11-01 14:40 - 2013-11-30 19:46 - 000000000 ____D C:\Program Files (x86)\Google
    2017-11-01 14:39 - 2009-07-14 07:08 - 000032568 _____ C:\Windows\Tasks\SCHEDLGU.TXT
    2017-10-31 21:40 - 2013-11-19 21:42 - 000000000 ____D C:\Users\eclips\AppData\Local\Mozilla
    2017-10-31 18:22 - 2014-06-19 17:57 - 000000000 ____D C:\ProgramData\McAfee Security Scan
    2017-10-30 22:11 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\rescache
    2017-10-26 22:34 - 2014-01-05 20:34 - 000000000 ____D C:\Users\eclips\AppData\Roaming\Dropbox
    2017-10-26 00:03 - 2013-12-07 20:43 - 000000000 ____D C:\ProgramData\Malwarebytes
    2017-10-25 23:46 - 2013-12-10 13:33 - 000000000 ____D C:\ProgramData\Adobe
    2017-10-25 23:32 - 2014-05-28 12:04 - 000000000 ____D C:\AdwCleaner
    2017-10-25 22:52 - 2013-11-19 01:52 - 000000000 ____D C:\Users\eclips
    2017-10-25 22:11 - 2014-07-01 19:06 - 000000000 ____D C:\Users\eclips\AppData\Local\Adobe
    2017-10-25 22:07 - 2013-12-10 10:19 - 000004312 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
    2017-10-25 22:07 - 2013-11-20 10:44 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
    2017-10-25 22:07 - 2013-11-20 10:44 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
    2017-10-25 22:06 - 2013-11-20 10:44 - 000000000 ____D C:\Windows\SysWOW64\Macromed
    2017-10-25 22:06 - 2013-11-20 10:44 - 000000000 ____D C:\Windows\system32\Macromed
    2017-10-25 13:59 - 2014-08-11 17:57 - 000410960 _____ C:\Windows\system32\FNTCACHE.DAT
    2017-10-25 13:57 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\SysWOW64\migwiz
    2017-10-25 13:57 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\system32\migwiz
    2017-10-25 13:57 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\PolicyDefinitions
    2017-10-24 17:14 - 2009-07-14 07:32 - 000000000 ____D C:\Program Files\DVD Maker
    2017-10-24 17:14 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\SysWOW64\Dism
    2017-10-24 17:14 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\system32\Dism
    2017-10-24 17:08 - 2011-04-12 10:28 - 000000000 ____D C:\Program Files\Windows Journal
    2017-10-24 16:47 - 2009-07-14 07:09 - 000000000 ____D C:\Windows\System32\Tasks\WPD
    2017-10-23 20:13 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\system32\NDF
    2017-10-22 20:53 - 2013-12-16 22:50 - 000002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
    2017-10-22 20:53 - 2013-12-16 22:50 - 000002181 _____ C:\Users\Public\Desktop\Google Chrome.lnk
    2017-10-22 20:13 - 2013-11-30 19:46 - 000003430 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
    2017-10-22 20:13 - 2013-11-30 19:46 - 000003302 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
    2017-10-22 19:57 - 2013-12-18 17:58 - 000003694 _____ C:\Windows\System32\Tasks\Adobe online update program
    2017-10-22 19:53 - 2013-12-04 15:02 - 000000000 ____D C:\Users\eclips\AppData\Roaming\vlc
    2017-10-20 19:51 - 2014-04-09 13:35 - 000000035 _____ C:\Windows\system32\Drivers\etc\hosts2 0.0.0.0 keystone.mwbsys.com
    2017-10-20 19:51 - 2013-12-10 16:52 - 000000000 ____D C:\Users\eclips\AppData\LocalLow\Temp
    2017-10-19 23:00 - 2014-02-13 19:08 - 000000000 ____D C:\ADCDA2
    2017-10-19 15:28 - 2013-11-19 22:49 - 000000000 ____D C:\Users\eclips\AppData\Roaming\BSplayer Pro
    2017-10-19 15:27 - 2013-11-19 22:49 - 000000000 ____D C:\Program Files (x86)\Webteh
    2017-10-19 15:23 - 2013-11-19 22:49 - 000000000 ____D C:\Users\eclips\AppData\Roaming\BSplayer
    2017-10-17 22:42 - 2014-01-21 16:33 - 000000000 ____D C:\Program Files (x86)\Java
    2017-10-17 22:41 - 2014-01-21 16:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
    2017-10-17 22:41 - 2013-12-10 13:50 - 000000000 ____D C:\Program Files\Java
    2017-10-17 22:40 - 2013-12-10 13:50 - 000319552 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
    2017-10-17 22:40 - 2013-12-10 13:50 - 000206912 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
    2017-10-17 22:40 - 2013-12-10 13:50 - 000206912 _____ (Oracle Corporation) C:\Windows\system32\java.exe
    2017-10-17 22:39 - 2014-09-01 13:38 - 000270912 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
    2017-10-17 22:39 - 2014-09-01 13:38 - 000097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
    2017-10-17 22:39 - 2014-01-21 16:34 - 000000000 ____D C:\ProgramData\Oracle
    2017-10-14 18:28 - 2013-11-20 16:22 - 000000000 ____D C:\Windows\pss
    2017-10-14 15:17 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\Help
    2017-10-13 21:40 - 2013-11-19 22:41 - 000000000 ____D C:\ProgramData\AMD
    2017-10-12 23:01 - 2013-12-07 20:43 - 000000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
    2017-10-12 23:00 - 2013-11-19 20:24 - 000000000 ____D C:\ProgramData\TuneUp Software
    
    ==================== Files in the root of some directories =======
    
    2014-01-04 20:14 - 2014-01-04 20:14 - 001615904 ____R () C:\Users\eclips\AppData\Local\ASbs.ac
    2014-05-12 10:02 - 2014-05-12 10:02 - 000585728 _____ () C:\Users\eclips\AppData\Local\file__0.localstorage
    2013-11-19 21:07 - 2013-11-19 21:07 - 000000017 ____R () C:\Users\eclips\AppData\Local\resmon.resmoncfg
    2017-10-21 21:42 - 2017-10-21 21:43 - 000003061 _____ () C:\Users\eclips\AppData\Local\RT61_{A3236531-A5CD-4450-8F87-65A07C468862}_prof
    2017-10-21 21:43 - 2017-10-21 21:43 - 000000771 _____ () C:\Users\eclips\AppData\Local\RT61_{A3236531-A5CD-4450-8F87-65A07C468862}_sta
    2014-09-14 19:59 - 2014-09-15 20:08 - 010807116 _____ () C:\ProgramData\OfflineCatalogue_1_2014_TECDOC_CD.log
    2014-09-14 20:05 - 2014-09-14 20:05 - 000006106 _____ () C:\ProgramData\UninstallOfflineCatalogue.log
    
    Some files in TEMP:
    ====================
    2017-11-10 19:08 - 2017-11-10 19:08 - 016739360 _____ () C:\Users\eclips\AppData\Local\Temp\Bit737A.tmp.exe
    2017-10-21 20:34 - 2017-10-21 20:34 - 016739360 _____ () C:\Users\eclips\AppData\Local\Temp\BitDF66.tmp.exe
    2017-10-26 22:34 - 2017-10-26 22:34 - 000043008 _____ () C:\Users\eclips\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpdz2ggf.dll
    2013-12-18 11:01 - 2013-12-18 11:01 - 000026936 _____ (TuneUp Software) C:\Users\eclips\AppData\Local\Temp\DseShExt-x64.dll
    2013-12-18 11:01 - 2013-12-18 11:01 - 000028984 _____ (TuneUp Software) C:\Users\eclips\AppData\Local\Temp\DseShExt-x86.dll
    2017-10-25 22:13 - 2017-10-25 22:13 - 004044736 _____ (Geek Unіnstaller) C:\Users\eclips\AppData\Local\Temp\geek64.exe
    2017-11-02 09:19 - 2009-07-14 11:29 - 000258592 _____ (NVIDIA Corporation) C:\Users\eclips\AppData\Local\Temp\nvStInst.exe
    2013-12-18 11:01 - 2013-12-18 11:01 - 000032568 _____ (TuneUp Software) C:\Users\eclips\AppData\Local\Temp\SDShelEx-win32.dll
    2013-12-18 11:01 - 2013-12-18 11:01 - 000032056 _____ (TuneUp Software) C:\Users\eclips\AppData\Local\Temp\SDShelEx-x64.dll
    
    ==================== Bamital & volsnap ======================
    
    (There is no automatic fix for files that do not pass verification.)
    
    C:\Windows\system32\winlogon.exe => File is digitally signed
    C:\Windows\system32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\system32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\system32\services.exe => File is digitally signed
    C:\Windows\system32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\system32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\system32\rpcss.dll => File is digitally signed
    C:\Windows\system32\dnsapi.dll => File is digitally signed
    C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
    C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
    
    LastRegBack: 2017-10-30 22:03
    
    ==================== End of FRST.txt ============================

     

     

     

     

    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-11-2017
    Ran by eclips (10-11-2017 19:35:11)
    Running from C:\Users\eclips\Desktop
    Windows 7 Ultimate Service Pack 1 (X64) (2013-11-18 23:52:36)
    Boot Mode: Normal
    ==========================================================
    
    
    ==================== Accounts: =============================
    
    Administrator (S-1-5-21-1144684173-3877916052-1330907298-500 - Administrator - Disabled)
    eclips (S-1-5-21-1144684173-3877916052-1330907298-1000 - Administrator - Enabled) => C:\Users\eclips
    Guest (S-1-5-21-1144684173-3877916052-1330907298-501 - Limited - Disabled) => C:\Users\Guest
    UpdatusUser (S-1-5-21-1144684173-3877916052-1330907298-1007 - Limited - Enabled) => C:\Users\UpdatusUser
    
    ==================== Security Center ========================
    
    (If an entry is included in the fixlist, it will be removed.)
    
    AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
    AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
    AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    
    ==================== Installed Programs ======================
    
    (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
    
    µTorrent (HKU\S-1-5-21-1144684173-3877916052-1330907298-1000\...\uTorrent) (Version: 3.3.2.30303 - BitTorrent Inc.)
    Active@ Boot Disk 7.0 (HKLM-x32\...\{9770BCC6-C50D-41D7-AE07-5B796D630052}_is1) (Version: 7.0 - LSoft Technologies Inc)
    Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)
    Adobe Flash Player 27 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 27.0.0.183 - Adobe Systems Incorporated)
    Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.183 - Adobe Systems Incorporated)
    Adobe SVG Viewer 3.0 (HKLM-x32\...\Adobe SVG Viewer) (Version:  3.0 - )
    AllShare Framework DMS (HKLM\...\{83232C27-8C3F-44A5-9EB2-BB7161228ADD}) (Version: 1.3.23 - Samsung)
    BitComet 1.24 (HKLM-x32\...\BitComet) (Version: 1.24 - CometNetwork)
    BitComet 1.36 64-bit (HKLM-x32\...\BitComet_x64) (Version: 1.36 - CometNetwork)
    BS.Player PRO (HKLM-x32\...\BSPlayerp) (Version: 2.71.1081 - AB Team, d.o.o.)
    CloneCD (HKLM-x32\...\CloneCD) (Version:  - SlySoft)
    CyberLink PowerDVD 13 (HKLM-x32\...\InstallShield_{3CFDF154-7E60-4E98-A8DF-C693A4F8E6B6}) (Version: 13.0.2902.57 - CyberLink Corp.)
    DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
    Dropbox (HKU\S-1-5-21-1144684173-3877916052-1330907298-1000\...\Dropbox) (Version: 2.10.30 - Dropbox, Inc.)
    Edimax Wireless LAN (HKLM-x32\...\{FAB1F336-1B7C-4057-A7BC-2922CD82A781}) (Version: 1.0.1.0 - Edimax)
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
    Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
    Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
    Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.22.5 - Google Inc.) Hidden
    Grand Theft Auto IV (HKLM-x32\...\{5454083B-1308-4485-BF17-1110000D8301}) (Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
    Grand Theft Auto IV (HKLM-x32\...\{5454083B-1308-4485-BF17-1110000D8302}) (Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
    Hard Disk Sentinel PRO (HKLM-x32\...\Hard Disk Sentinel_is1) (Version:  - HDS)
    HD Tune Pro 5.50 (HKLM-x32\...\HD Tune Pro_is1) (Version:  - EFD Software)
    Heaven DX11 Benchmark version 3.0 (HKLM\...\Unigine Heaven DX11 Benchmark (Basic Edition)_is1) (Version: 3.0 - Unigine Corp.)
    Java 8 Update 151 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
    Java 8 Update 151 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
    K-Lite Mega Codec Pack 13.5.9 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 13.5.9 - KLCP)
    LogMeIn Hamachi (HKLM-x32\...\{70B1DA58-A2B9-4EA0-B83D-F03CBEEAE22D}) (Version: 2.2.0.236 - LogMeIn, Inc.) Hidden
    LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.236 - LogMeIn, Inc.)
    Malwarebytes version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
    Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
    Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
    Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
    Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
    Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
    Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
    Microsoft Office Proofing Tools Kit 2007 (HKLM-x32\...\PROOFKIT) (Version: 12.0.4518.1070 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Mozilla Firefox 56.0.2 (x64 bg) (HKLM\...\Mozilla Firefox 56.0.2 (x64 bg)) (Version: 56.0.2 - Mozilla)
    Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 56.0.1 - Mozilla)
    Nero Burning ROM 11 (HKLM-x32\...\{E656D89A-8CBB-497F-918F-8361A4071C26}) (Version: 11.0.10400 - Nero AG)
    NVIDIA Graphics Driver 309.08 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 309.08 - NVIDIA Corporation)
    NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
    NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
    Origin (HKLM-x32\...\Origin) (Version: 9.3.10.4710 - Electronic Arts, Inc.)
    Platform (HKLM-x32\...\{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.36 - VIA Technologies, Inc.) Hidden
    SAMSUNG CDMA Modem Driver Set (HKLM-x32\...\SAMSUNG CDMA Modem) (Version:  - )
    Samsung Kies (HKLM-x32\...\{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14044_15 - Samsung Electronics Co., Ltd.) Hidden
    Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14044_15 - Samsung Electronics Co., Ltd.)
    Samsung Link 1.8.1.1405191947 (HKLM\...\8474-7877-9059-0204) (Version: 1.8.1.1405191947 - Copyright 2013 SAMSUNG)
    Samsung New PC Studio (HKLM-x32\...\{F193FC0E-9E18-40FC-A974-509A1BDD240A}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
    Samsung New PC Studio (HKLM-x32\...\InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
    Samsung Tool 16.7 (HKLM-x32\...\44676886-FD7F-4C53-B188-BC86EED9BBC1_is1) (Version:  - z3x-team)
    SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.3.650.0 - SAMSUNG Electronics Co., Ltd.)
    Serviio (HKLM\...\Serviio) (Version:  - )
    Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)
    Smileys We Love Toolbar for IE (HKLM-x32\...\{D19793B1-5583-40B1-BE98-4AF306CCF2F4}) (Version: 3.0.20 - SqueekyChocolate, LLC) <==== ATTENTION
    Sniper Elite III version 1.07 (HKLM-x32\...\Sniper Elite III_is1) (Version: 1.07 - GMT-MAX.ORG)
    Sony Mobile Update Engine (HKLM-x32\...\Update Engine) (Version: 2.14.7.201405202226 - Sony Mobile Communications AB)
    Sony Mobile Update Service (HKLM-x32\...\Update Service) (Version: 2.14.8.201405281228 - Sony Mobile Communications AB)
    Sony PC Companion 2.10.211 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.211 - Sony)
    Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
    TECDOC CD (HKLM-x32\...\{6CF8F6A6-216D-4EC2-AFAC-F2752B1B397B}) (Version: 1.2014 - www.tecdoc.net) Hidden
    TECDOC CD 1.2014 (HKLM-x32\...\InstallShield_{6CF8F6A6-216D-4EC2-AFAC-F2752B1B397B}) (Version: 1.2014 - www.tecdoc.net)
    The KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 3.9.0.125 - PandoraTV)
    Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
    VIA п»ї (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.36 - VIA Technologies, Inc.)
    VLC media player 2.0.6 (HKLM-x32\...\VLC media player) (Version: 2.0.6 - VideoLAN)
    Web Companion (HKLM-x32\...\{7ab7dc7a-ea4f-43bc-ba0c-9a6433008add}) (Version: 3.2.1725.3256 - Lavasoft)
    Winamp (HKLM-x32\...\Winamp) (Version: 5.7 Beta - Nullsoft, Inc)
    Winamp Detector Plug-in (HKU\S-1-5-21-1144684173-3877916052-1330907298-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
    Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
    WinRAR 5.01 (64-битова версия) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
    Zemana AntiMalware (HKLM-x32\...\{8F0CD7D1-42F3-4195-95CD-833578D45057}_is1) (Version: 2.74.0.150 - Zemana Ltd.)
    
    ==================== Custom CLSID (Whitelisted): ==========================
    
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
    
    CustomCLSID: HKU\S-1-5-21-1144684173-3877916052-1330907298-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\eclips\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-1144684173-3877916052-1330907298-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\eclips\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-1144684173-3877916052-1330907298-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\eclips\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-1144684173-3877916052-1330907298-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\eclips\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-1144684173-3877916052-1330907298-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\eclips\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
    ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\eclips\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\eclips\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\eclips\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\eclips\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\eclips\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\eclips\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\eclips\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\eclips\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
    ContextMenuHandlers1: [2.0 Zemana AntiMalware] -> {6ABB1C11-E261-4CEA-BBB5-3836225689DD} => H:\Programki\Zemana AntiMalware\ZAMShellExt64.dll [2017-10-25] ()
    ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2013-12-01] (Alexander Roshal)
    ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2013-12-01] (Alexander Roshal)
    ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} =>  -> No File
    ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2015-01-31] (NVIDIA Corporation)
    ContextMenuHandlers6: [2.0 Zemana AntiMalware] -> {6ABB1C11-E261-4CEA-BBB5-3836225689DD} => H:\Programki\Zemana AntiMalware\ZAMShellExt64.dll [2017-10-25] ()
    ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2013-12-01] (Alexander Roshal)
    ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2013-12-01] (Alexander Roshal)
    ContextMenuHandlers1_S-1-5-21-1144684173-3877916052-1330907298-1000: [DropboxExt] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\eclips\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
    ContextMenuHandlers4_S-1-5-21-1144684173-3877916052-1330907298-1000: [DropboxExt] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\eclips\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
    ContextMenuHandlers5_S-1-5-21-1144684173-3877916052-1330907298-1000: [DropboxExt] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\eclips\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
    
    ==================== Scheduled Tasks (Whitelisted) =============
    
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
    
    Task: {05685187-5463-4EEA-8A8D-8BFB76C1CFA2} - System32\Tasks\{1894671E-6354-473B-8EC7-54D099E436C8} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\USB Vibration\7906\setup\setup.exe" -d "C:\Program Files (x86)\USB Vibration\7906\setup"
    Task: {0775428E-6202-4927-BFA8-72A408D40728} - System32\Tasks\{A25E4948-70EE-45A2-928D-A816761BC657} => C:\Windows\system32\pcalua.exe -a "C:\Users\eclips\Desktop\Skype 3.8.0.180.exe" -d C:\Users\eclips\Desktop
    Task: {21952433-6C55-436B-8A30-7C42EB97E298} - System32\Tasks\{B2F132F3-13FE-4E53-A029-B957939897B8} => C:\Users\eclips\Desktop\Samsung Tool Free\samsung_tool_FREE_By_GohAnZ.exe
    Task: {24351D23-C757-4730-8544-0D54022E1832} - System32\Tasks\{81CF0889-FFF9-4696-AC82-B984EEF945E3} => C:\Users\eclips\Desktop\Samsung Tool Free\samsung_tool_FREE_By_GohAnZ.exe
    Task: {2864E69F-9ABB-48C7-9C05-E5FBAA60E62E} - System32\Tasks\{FC240B98-4A2D-4AB9-A9E5-B8B8DF1AF58B} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\WinRAR\WinRAR.exe" -d C:\Users\eclips\Desktop -c "C:\Users\eclips\Desktop\Avast! 8 2050 Activator [T3chDROiDTh3ory].rar"
    Task: {2B1F8A69-30FB-4CB1-92B8-B46EEA8723A1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-20] (Adobe Systems Incorporated)
    Task: {4088CB97-8887-4A6F-978B-B6460E7C3FE1} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
    Task: {43B2329A-4503-47B9-8D16-A3566F65E3FC} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
    Task: {4F93CE08-0326-4740-8FEF-4F4FE57324D2} - System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} => C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe [2017-10-31] (AO Kaspersky Lab)
    Task: {52A90172-8AF2-40C0-BC3C-B369940980C5} - System32\Tasks\{DEEF1128-337C-47BE-813C-B6AA03146603} => C:\Windows\system32\pcalua.exe -a C:\Users\eclips\Desktop\vcredist_x86.exe -d C:\Users\eclips\Desktop
    Task: {575E392C-B59B-4E33-AF96-5B603F2C8B14} - System32\Tasks\{D1439E8B-F959-4DEC-A841-E4D65FAA8770} => F:\New Folder 3\Xpadder5-3\Xpadder.exe
    Task: {7896C1C1-F771-423C-8C65-95B4FFC85A1C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-10-22] (Google Inc.)
    Task: {7A8D9882-ECF4-42CC-BD77-A456F982118E} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2017-10-05] ()
    Task: {95B43ABC-BC8A-49D1-B1EB-F0FFE02B26E3} - System32\Tasks\Adobe online update program => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-20] (Adobe Systems Incorporated)
    Task: {9BD28E77-6B24-4C67-98CC-EF3FF5AB0AE8} - System32\Tasks\{6EE1B2A2-D8E8-4749-9246-88BF296AAFA0} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
    Task: {A00EF249-7786-4748-8A6C-5B8E160933A9} - System32\Tasks\{3C1188E3-ACB7-463B-95C5-8C91F0660AB6} => C:\Windows\system32\pcalua.exe -a "C:\Users\eclips\Desktop\hamma Gamepad joistik\setup.exe" -d "C:\Users\eclips\Desktop\hamma Gamepad joistik"
    Task: {BF80F48F-5F8E-46A4-A92C-668387A3EACD} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-09-05] (Oracle Corporation)
    Task: {D29E1D80-A485-46AB-9BEB-21DF2F67B085} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-10-25] (Adobe Systems Incorporated)
    Task: {E50FB93C-D577-498B-9DDC-D3FAA10C87EC} - System32\Tasks\{262BCC3E-65C1-47CD-A34D-C6691C48BE7F} => F:\New Folder 3\Xpadder5-3\Xpadder.exe
    Task: {E5D05527-743C-49C7-B0A5-A6D92CFB4CAD} - System32\Tasks\{6245E149-DDED-4A8E-8AEE-8B433AF0E197} => C:\Windows\system32\pcalua.exe -a "D:\-   MOI NE6TA\Steam\steamapps\common\Left 4 Dead 2\bin\addoninstaller.exe" -d "D:\-   MOI NE6TA\Steam\SteamApps\common\Left 4 Dead 2\left4dead2\addons\workshop" -c D:\-MOINE~1\Steam\STEAMA~1\common\LEFT4D~1\LEFT4D~1\addons\workshop\143565~1.VPK
    Task: {E979B7F0-BE7E-4F51-A89D-4EA244234AAE} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
    Task: {FD63EB8E-6EA5-4F69-AE35-30DA523BAEDC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-10-22] (Google Inc.)
    Task: {FDA06FB6-FBBF-447D-A52C-4201BC1BA642} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
    Task: {FDCE1D58-F997-4E9E-965D-0B8E5E053897} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
    
    (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
    
    
    ==================== Shortcuts & WMI ========================
    
    (The entries could be listed to be restored or removed.)
    
    
    Shortcut: C:\Users\eclips\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Какво е новото в последната версия.lnk -> C:\Program Files\WinRAR\WhatsNew.txt () <==== Cyrillic
    Shortcut: C:\Users\eclips\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Помощен файл на WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.chm () <==== Cyrillic
    Shortcut: C:\Users\eclips\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Ръководство за конзолната версия на RAR.lnk -> C:\Program Files\WinRAR\Rar.txt () <==== Cyrillic
    
    ==================== Loaded Modules (Whitelisted) ==============
    
    2017-11-02 09:20 - 2015-01-31 02:57 - 000086160 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
    2014-07-29 18:15 - 2014-05-04 09:02 - 001232880 _____ () C:\Program Files (x86)\Common Files\Appkeys\yytool64.exe
    2014-06-10 13:11 - 2014-05-19 18:47 - 000016896 _____ () D:\-   MOI NE6TA\Samsung Link\JniSys.dll
    2014-06-10 13:12 - 2014-05-19 18:47 - 002149376 _____ () D:\-   MOI NE6TA\Samsung Link\scone_proxy.dll
    2014-06-10 13:12 - 2014-05-19 18:47 - 001630720 _____ () D:\-   MOI NE6TA\Samsung Link\scone_stub.dll
    2013-12-21 10:25 - 2013-12-21 10:25 - 000036864 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\JNIInterface.dll
    2013-12-21 10:26 - 2013-12-21 10:26 - 000144384 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\ASFAPI.dll
    2013-12-21 10:27 - 2013-12-21 10:27 - 000018944 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\MediaDB_Manager.dll
    2013-10-22 08:52 - 2013-10-22 08:52 - 000030720 _____ () C:\Windows\system32\MediaDB64.dll
    2013-10-22 08:52 - 2013-10-22 08:52 - 000908800 _____ () C:\Windows\system32\ContentDirectoryPresenter64.dll
    2013-12-21 10:27 - 2013-12-21 10:27 - 000521728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\DMS_Manager.dll
    2013-07-23 18:19 - 2013-07-23 18:19 - 000049152 _____ () C:\Windows\system32\boost_date_time-vc90-mt-1_47.dll
    2013-07-23 18:19 - 2013-07-23 18:19 - 000016896 _____ () C:\Windows\system32\boost_system-vc90-mt-1_47.dll
    2013-07-23 18:19 - 2013-07-23 18:19 - 000058880 _____ () C:\Windows\system32\boost_thread-vc90-mt-1_47.dll
    2013-07-23 18:19 - 2013-07-23 18:19 - 000299520 _____ () C:\Windows\system32\boost_serialization-vc90-mt-1_47.dll
    2016-10-17 15:46 - 2016-10-17 15:46 - 000413696 _____ () D:\-   MOI NE6TA\DLNA\Serviio\bin\ServiioService.exe
    2017-10-26 00:03 - 2017-10-26 00:06 - 002358728 _____ () H:\PROGRAMKI\ANTI-MALWARE\MwacLib.dll
    2017-10-26 00:03 - 2017-10-26 00:06 - 002289096 _____ () H:\PROGRAMKI\ANTI-MALWARE\SelfProtectionSdk.dll
    2013-12-11 15:46 - 2013-12-11 15:46 - 001114624 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DMSManager.dll
    2013-10-22 08:48 - 2013-10-22 08:48 - 000707072 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ContentDirectoryPresenter.dll
    2013-10-24 15:53 - 2013-10-24 15:53 - 000107008 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DCMCDP.dll
    2013-12-11 15:46 - 2013-12-11 15:46 - 000102400 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\FolderCDP.dll
    2013-12-11 15:46 - 2013-12-11 15:46 - 000077312 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MetadataFramework.dll
    2013-02-14 18:42 - 2013-02-14 18:42 - 000520234 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\sqlite3.dll
    2013-02-14 18:42 - 2013-02-14 18:42 - 000450560 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MoodExtractor.dll
    2013-02-14 18:42 - 2013-02-14 18:42 - 005717504 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DCMImgExtractor.dll
    2013-10-25 18:48 - 2013-10-25 18:48 - 000028672 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AutoChaptering.dll
    2013-02-14 18:42 - 2013-02-14 18:42 - 000147456 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libexpat.dll
    2013-10-25 18:48 - 2013-10-25 18:48 - 000012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoThumb.dll
    2013-02-14 18:42 - 2013-02-14 18:42 - 004671488 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avcodec-52.dll
    2013-02-14 18:42 - 2013-02-14 18:42 - 000070656 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avutil-50.dll
    2013-02-14 18:42 - 2013-02-14 18:42 - 000686080 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avformat-52.dll
    2013-02-14 18:42 - 2013-02-14 18:42 - 000152064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\swscale-0.dll
    2013-10-25 18:49 - 2013-10-25 18:49 - 000028160 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AudioExtractor.dll
    2013-10-25 18:48 - 2013-10-25 18:48 - 000064000 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ID3Driver.dll
    2013-02-14 18:42 - 2013-02-14 18:42 - 000366592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\tag.dll
    2013-10-25 18:48 - 2013-10-25 18:48 - 000289792 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libThumbnail.dll
    2013-10-25 18:48 - 2013-10-25 18:48 - 000023040 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\RichInfoDriver.dll
    2013-12-11 15:45 - 2013-12-11 15:45 - 000017920 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoExtractor.dll
    2013-10-25 18:53 - 2013-10-25 18:53 - 000117248 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ThumbnailMaker.dll
    2013-10-25 18:53 - 2013-10-25 18:53 - 001033728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ImageMagickWrapper.dll
    2013-12-11 15:45 - 2013-12-11 15:45 - 000134144 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoMetadataDriver.dll
    2013-10-25 18:48 - 2013-10-25 18:48 - 000290816 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libKeyFrame.dll
    2013-10-25 18:48 - 2013-10-25 18:48 - 000024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\SECMetaDriver.dll
    2013-10-25 18:53 - 2013-10-25 18:53 - 000012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ImageExtractor.dll
    2013-10-25 18:48 - 2013-10-25 18:48 - 000024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\photoDriver.dll
    2013-02-14 18:42 - 2013-02-14 18:42 - 000399826 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libexif-12.dll.dll
    2013-10-25 18:48 - 2013-10-25 18:48 - 000013824 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\TextExtractor.dll
    2013-10-24 15:53 - 2013-10-24 15:53 - 000032768 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\Autobackup.dll
    2013-04-19 15:38 - 2013-04-19 15:38 - 000055808 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\RosettaAllShare.dll
    2013-07-23 18:18 - 2013-07-23 18:18 - 000227840 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_serialization-vc90-mt-1_47.dll
    2013-07-23 18:18 - 2013-07-23 18:18 - 000038912 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_date_time-vc90-mt-1_47.dll
    2013-07-23 18:18 - 2013-07-23 18:18 - 000012800 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_system-vc90-mt-1_47.dll
    2013-07-23 18:18 - 2013-07-23 18:18 - 000046592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_thread-vc90-mt-1_47.dll
    2013-02-14 18:42 - 2013-02-14 18:42 - 000044032 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\us.dll
    2014-04-09 22:51 - 2013-03-14 13:08 - 000541683 _____ () D:\PROGRAMKI\Power DVD\PowerDVD13\Kernel\DMS\sqlite3.dll
    
    ==================== Alternate Data Streams (Whitelisted) =========
    
    (If an entry is included in the fixlist, only the ADS will be removed.)
    
    
    ==================== Safe Mode (Whitelisted) ===================
    
    (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
    
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\88735092.sys => ""="Driver"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\88735092.sys => ""="Driver"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
    
    ==================== Association (Whitelisted) ===============
    
    (If an entry is included in the fixlist, the registry item will be restored to default or removed.)
    
    
    ==================== Internet Explorer trusted/restricted ===============
    
    (If an entry is included in the fixlist, it will be removed from the registry.)
    
    IE trusted site: HKU\S-1-5-21-1144684173-3877916052-1330907298-1000\...\localhost -> localhost
    
    ==================== Hosts content: ==========================
    
    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)
    
    2017-10-25 23:28 - 2017-10-26 00:02 - 000000081 _____ C:\Windows\system32\Drivers\etc\hosts
    
    127.0.0.1       localhost
    0.0.0.0 serius.mwbsys.com
    0.0.0.0 keystone.mwbsys.com
    
    ==================== Other Areas ============================
    
    (Currently there is no automatic fix for this section.)
    
    HKU\S-1-5-21-1144684173-3877916052-1330907298-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\eclips\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
    DNS Servers: 178.254.208.6 - 178.254.192.3
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
    Windows Firewall is enabled.
    
    ==================== MSCONFIG/TASK MANAGER disabled items ==
    
    MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
    MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Wireless Utility.lnk => C:\Windows\pss\Wireless Utility.lnk.CommonStartup
    MSCONFIG\startupfolder: C:^Users^eclips^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
    MSCONFIG\startupfolder: C:^Users^eclips^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office Outlook 2007.lnk => C:\Windows\pss\Microsoft Office Outlook 2007.lnk.Startup
    MSCONFIG\startupfolder: C:^Users^eclips^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Serviio.lnk => C:\Windows\pss\Serviio.lnk.Startup
    MSCONFIG\startupreg: CloneCDTray => "D:\PROGRAMKI\CloneCD2\CloneCDTray.exe" /s                                                                                                                                                                                                                               
    MSCONFIG\startupreg: DAEMON Tools Lite => "D:\PROGRAMKI\DAEMON Tools Lite\DTLite.exe" -autorun
    MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"                                                                                                                                                                                                     
    MSCONFIG\startupreg: HDAudDeck => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
    MSCONFIG\startupreg: IME JPN 2007 Migration => C:\PROGRA~1\COMMON~1\MICROS~1\IME12\IMEJP\IMJPKLMG.EXE /Preload
    MSCONFIG\startupreg: KiesPreload => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload                                                                                                                                                                                                                    
    MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe                                                                                                                                                                                                                    
    MSCONFIG\startupreg: Korean IME Migration => C:\PROGRA~1\COMMON~1\MICROS~1\IME12\IMEKR\IMKRMIG.EXE
    MSCONFIG\startupreg: LogMeIn Hamachi Ui => "H:\Programki\Hamachi\hamachi-2-ui.exe" --auto-start
    MSCONFIG\startupreg: Microsoft Pinyin IME Migration => C:\PROGRA~1\COMMON~1\MICROS~1\IME12\IMESC\IMSCMIG.EXE /INSTALL
    MSCONFIG\startupreg: PowerDVD13Agent => "D:\PROGRAMKI\Power DVD\PowerDVD13\PowerDVD13Agent.exe"
    MSCONFIG\startupreg: Samsung Link => "C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe"                                                                                                                                                                                                      
    MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
    MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    MSCONFIG\startupreg: ZAM => "H:\Programki\Zemana AntiMalware\ZAM.exe" /minimized
    
    ==================== FirewallRules (Whitelisted) ===============
    
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
    
    FirewallRules: [{3DE34234-DF77-41AD-A6C2-73EE9BB2AAAE}] => (Allow) C:\Program Files\BitComet\BitComet.exe
    FirewallRules: [{4626FA83-C160-4E97-A990-7A51AB7590E6}] => (Allow) C:\Program Files\BitComet\BitComet.exe
    FirewallRules: [{7EC907D1-3482-478E-99E5-A2B88EAF6A89}] => (Allow) LPort=7103
    FirewallRules: [{E414245D-C55B-4AFA-BD38-F8019C634771}] => (Allow) LPort=7103
    FirewallRules: [{8AE84EB1-DCD8-41CB-B45A-7B3FE752BFFB}] => (Allow) C:\Users\eclips\AppData\Roaming\uTorrent\uTorrent.exe
    FirewallRules: [{E4466F35-E214-483E-B3DE-E23A26DE2333}] => (Allow) C:\Users\eclips\AppData\Roaming\uTorrent\uTorrent.exe
    FirewallRules: [{AB793EC1-5984-4515-A885-A52B1C86677B}] => (Allow) C:\Program Files (x86)\BitComet\BitComet.exe
    FirewallRules: [{6F99C2AD-75FC-4463-A78A-ADAD7FB59188}] => (Allow) C:\Program Files (x86)\BitComet\BitComet.exe
    FirewallRules: [{D5B6EA56-FD64-4183-A4D0-B013E896BB14}] => (Allow) D:\-   MOI NE6TA\Steam\Steam.exe
    FirewallRules: [{82D05431-72E5-4C94-B33B-53197D09F03F}] => (Allow) D:\-   MOI NE6TA\Steam\Steam.exe
    FirewallRules: [TCP Query User{C304D65D-7E2B-484B-A4D8-56D9C2809EC0}C:\program files (x86)\winamp\winamp.exe] => (Block) C:\program files (x86)\winamp\winamp.exe
    FirewallRules: [UDP Query User{D5C90170-0F71-445A-8E4F-E7484A70E514}C:\program files (x86)\winamp\winamp.exe] => (Block) C:\program files (x86)\winamp\winamp.exe
    FirewallRules: [{C34557FB-7182-4A48-BD25-A0675887CFB4}] => (Allow) LPort=8743
    FirewallRules: [{DD7CDB62-3EE0-463E-B3AC-5EAFD363F7EC}] => (Allow) LPort=8643
    FirewallRules: [{05774CB8-2B01-4D97-ABB3-69E6E82A466F}] => (Allow) LPort=7676
    FirewallRules: [{0948D858-4F7F-4C7F-B696-53D2471A5809}] => (Allow) LPort=7679
    FirewallRules: [{8B878BBC-AD5A-4B8C-9D6D-51BA8DC145F6}] => (Allow) LPort=24234
    FirewallRules: [{8AFD58B7-AF70-4E76-9312-D3F23A096C70}] => (Allow) LPort=7900
    FirewallRules: [{DFD904E8-0087-4370-A180-2DD03270892B}] => (Allow) LPort=1900
    FirewallRules: [{08A10507-D59A-4B0C-B904-4B2F8AFE81B1}] => (Allow) D:\-   MOI NE6TA\Steam\Steam.exe
    FirewallRules: [{769EB903-259A-4063-8B5F-4E31DF1A57AD}] => (Allow) D:\-   MOI NE6TA\Steam\Steam.exe
    FirewallRules: [{3A1C89AD-0BB9-4117-A756-45021D9728DA}] => (Allow) D:\-   MOI NE6TA\Steam\Steam.exe
    FirewallRules: [{FE52F03B-95E3-4992-ABDA-1ED3038DFEAE}] => (Allow) D:\-   MOI NE6TA\Steam\Steam.exe
    FirewallRules: [{A03AAFFD-9AF2-4D26-9C4E-6E26C7882F63}] => (Allow) C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\AllShareFrameworkDMS.exe
    FirewallRules: [{FBC18F95-66C4-4073-B3DE-FD18C930A12E}] => (Allow) C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\AllShareFrameworkDMS.exe
    FirewallRules: [{6344B9FA-69F0-4565-8053-8E971B0D0AB6}] => (Allow) C:\Users\eclips\AppData\Roaming\Dropbox\bin\Dropbox.exe
    FirewallRules: [{AC691E0F-E105-498D-9D59-7FF189D76AEA}] => (Allow) C:\Users\eclips\AppData\Roaming\Dropbox\bin\Dropbox.exe
    FirewallRules: [{1E204848-46DD-417C-BAF4-A7B678C105E3}] => (Allow) D:\-   MOI NE6TA\Steam\Steam.exe
    FirewallRules: [{F191EEEC-8CF2-4094-8FCB-FF4A1097A690}] => (Allow) D:\-   MOI NE6TA\Steam\Steam.exe
    FirewallRules: [{D387B7AE-1675-4F53-8D43-28D204A989F2}] => (Allow) D:\-   MOI NE6TA\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
    FirewallRules: [{84018E8A-0A8F-403B-9D19-C09826D04C98}] => (Allow) D:\-   MOI NE6TA\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
    FirewallRules: [{563EB642-8A34-461A-A57C-E11E8FCAB48B}] => (Allow) LPort=16329
    FirewallRules: [{BB65A500-5AE0-4D65-955E-644009EA3D36}] => (Allow) LPort=16329
    FirewallRules: [{64C5EF66-F295-44A5-9687-52FF2A6690DD}] => (Allow) D:\-   MOI NE6TA\Steam\SteamApps\common\KillingFloor\System\KillingFloor.exe
    FirewallRules: [{A6BF92CB-6CEA-40DC-AA05-AA13CA90CE81}] => (Allow) D:\-   MOI NE6TA\Steam\SteamApps\common\KillingFloor\System\KillingFloor.exe
    FirewallRules: [TCP Query User{57F96F6F-58AF-4D4C-897C-76E48695B62D}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
    FirewallRules: [UDP Query User{616DB0A3-4D0E-47B5-BFED-C2B43F122622}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
    FirewallRules: [{6E473D40-D6A1-49E0-91F1-76BAD4F1C629}] => (Allow) D:\PROGRAMKI\Power DVD\PowerDVD13\PowerDVD13.exe
    FirewallRules: [{BB7913D6-7848-4049-AB5D-DD7911061A58}] => (Allow) D:\PROGRAMKI\Power DVD\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe
    FirewallRules: [{C01045DB-F2BF-4BCC-8B1E-B68F80CF95A4}] => (Allow) D:\PROGRAMKI\Power DVD\PowerDVD13\PowerDVD13Agent.exe
    FirewallRules: [{802A7A8C-2363-4031-8EBB-01EB648A190D}] => (Allow) D:\PROGRAMKI\Power DVD\PowerDVD13\PowerDVD13ML.exe
    FirewallRules: [{42936FC0-5B59-4736-8C1F-D0C40EDA1466}] => (Allow) D:\PROGRAMKI\Power DVD\PowerDVD13\Movie\PowerDVD.exe
    FirewallRules: [{5C420D04-97D9-4F2D-9DB0-EF5C9F7EDA70}] => (Allow) D:\PROGRAMKI\Power DVD\PowerDVD13\Movie\PowerDVD Cinema\PowerDVDCinema13.exe
    FirewallRules: [{EAFED757-9481-4BE7-89B4-EEF08B7E62BE}] => (Allow) D:\-   MOI NE6TA\Steam\SteamApps\common\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe
    FirewallRules: [{4347D6DC-9D56-4507-A99E-46C1EF347969}] => (Allow) D:\-   MOI NE6TA\Steam\SteamApps\common\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe
    FirewallRules: [{164A6E60-31D5-4912-B0DB-2BB25BC33A3B}] => (Allow) D:\-   MOI NE6TA\Steam\SteamApps\common\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe
    FirewallRules: [{EA1CFDF8-AC41-471E-90B8-5C2A958496FB}] => (Allow) D:\-   MOI NE6TA\Steam\SteamApps\common\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe
    FirewallRules: [{02AB5CD0-F8A3-4336-937F-E242E8CF3AB3}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
    FirewallRules: [{4C03210B-35AA-4FD2-BA1F-E63BDA85DA04}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
    FirewallRules: [{F2F10ADA-82E0-4B1F-A918-B2DDFDB6A62A}] => (Allow) C:\Program Files (x86)\Samsung\Samsung New PC Studio\npsasvr.exe
    FirewallRules: [{D91E5209-197C-490B-8D1D-66BF7C05DFD2}] => (Allow) C:\Program Files (x86)\Samsung\Samsung New PC Studio\npsasvr.exe
    FirewallRules: [{34035EFC-42DE-437F-95C3-41E2758B66F0}] => (Allow) C:\Program Files (x86)\Samsung\Samsung New PC Studio\npsvsvr.exe
    FirewallRules: [{B85E8487-16F7-437D-A720-4075B2BEFE2E}] => (Allow) C:\Program Files (x86)\Samsung\Samsung New PC Studio\npsvsvr.exe
    FirewallRules: [{7EBA7FDD-E1A3-4C5C-970A-87DB8CDB0F59}] => (Allow) C:\Program Files (x86)\Sony Mobile\Update Engine\Sony Mobile Update Engine.exe
    FirewallRules: [{EB669B5D-E5A6-4D3F-A585-AF8A7E10FD83}] => (Allow) C:\Program Files (x86)\Sony Mobile\Update Engine\Sony Mobile Update Engine.exe
    FirewallRules: [{72A91274-731C-4014-B6C5-E804CBDE3381}] => (Allow) D:\-   MOI NE6TA\DLNA\Serviio\bin\ServiioService.exe
    FirewallRules: [{CC7CED2B-9A0E-4645-8885-ADA9A0663A07}] => (Allow) D:\-   MOI NE6TA\DLNA\Serviio\bin\ServiioService.exe
    FirewallRules: [{03D95B07-C761-4E37-A616-00D26D043039}] => (Allow) D:\-   MOI NE6TA\DLNA\Serviio\bin\ServiioConsole.exe
    FirewallRules: [{5DBD66CB-4017-461E-8AD6-85A87D6BC6CC}] => (Allow) D:\-   MOI NE6TA\Sony Mobile Update Service\Update Service\Update Service.exe
    FirewallRules: [{B9C9A7FC-91BC-4162-8E18-AB32794FF5EE}] => (Allow) D:\-   MOI NE6TA\Sony Mobile Update Service\Update Service\Update Service.exe
    FirewallRules: [{24E06E0F-C1B5-4CEB-B387-8C95A67FE41F}] => (Allow) D:\-   MOI NE6TA\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
    FirewallRules: [{5358FADE-1F9C-4441-A569-B43600B78FCF}] => (Allow) D:\-   MOI NE6TA\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
    FirewallRules: [{F76C4953-2BF7-4997-BC48-8180DF6BAFD5}] => (Allow) D:\-   MOI NE6TA\Steam\bin\steamwebhelper.exe
    FirewallRules: [{0A7919E6-2B0E-4005-A1A3-91BEB82A120F}] => (Allow) D:\-   MOI NE6TA\Steam\bin\steamwebhelper.exe
    FirewallRules: [{403DCEFC-D643-44BB-8A2A-1FECE81A6AC1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
    FirewallRules: [{9E97E789-A1E4-46FB-8384-D9C95765F05D}] => (Allow) H:\SteamLibrary\SteamApps\common\GarrysMod\hl2.exe
    FirewallRules: [{0B4C5E65-9E7F-4DE5-B4E9-9B73454A8EB3}] => (Allow) H:\SteamLibrary\SteamApps\common\GarrysMod\hl2.exe
    FirewallRules: [{BB69D718-9358-49C4-A3AC-7CCD95134BA3}] => (Allow) H:\SteamLibrary\SteamApps\common\Unturned\Unturned.exe
    FirewallRules: [{6298F91A-93FF-4E4C-98CE-1C9D233E70AB}] => (Allow) H:\SteamLibrary\SteamApps\common\Unturned\Unturned.exe
    FirewallRules: [{B3FAC3AF-E45A-4DFA-94B8-AE72C056E7A1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    FirewallRules: [{C7D87861-1A70-4EFF-8651-8F4E00CC417E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    FirewallRules: [{BC615B3D-57E9-4AFA-8A7D-2D2182BB75CD}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
    FirewallRules: [{53367D3D-B69D-46A6-81AC-07A5E36A4D3B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
    FirewallRules: [{FACE15FB-FD10-405C-9BF2-056216F19C50}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
    
    ==================== Restore Points =========================
    
    
    ==================== Faulty Device Manager Devices =============
    
    Name: AODDriver4.2.0
    Description: AODDriver4.2.0
    Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    Manufacturer: 
    Service: AODDriver4.2.0
    Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
    Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
    Devices stay in this state if they have been prepared for removal.
    After you remove the device, this error disappears.Remove the device, and this error should be resolved.
    
    Name: NVIDIA nForce Networking Controller
    Description: NVIDIA nForce Networking Controller
    Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
    Manufacturer: NVIDIA
    Service: NVENETFD
    Problem: : This device is disabled. (Code 22)
    Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
    
    Name: ArcCtrl
    Description: ArcCtrl
    Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    Manufacturer: 
    Service: ArcCtrl
    Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
    Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
    Devices stay in this state if they have been prepared for removal.
    After you remove the device, this error disappears.Remove the device, and this error should be resolved.
    
    
    ==================== Event log errors: =========================
    
    Application errors:
    ==================
    Error: (11/10/2017 07:31:48 PM) (Source: WinMgmt) (EventID: 10) (User: )
    Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
    
    Error: (11/10/2017 07:25:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
    Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
    
    Error: (11/10/2017 07:02:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
    Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
    
    Error: (11/07/2017 08:51:42 PM) (Source: WinMgmt) (EventID: 10) (User: )
    Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
    
    Error: (11/06/2017 07:48:12 PM) (Source: WinMgmt) (EventID: 10) (User: )
    Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
    
    Error: (11/05/2017 10:13:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
    Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
    
    Error: (11/03/2017 08:03:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
    Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
    
    Error: (11/02/2017 08:47:48 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: mbam.exe, version: 3.0.0.1169, time stamp: 0x599723f1
    Faulting module name: Qt5Core.dll, version: 5.6.2.0, time stamp: 0x59a63e00
    Exception code: 0xc0000005
    Fault offset: 0x0018de83
    Faulting process id: 0x154c
    Faulting application start time: 0x01d3540b13494a20
    Faulting application path: H:\Programki\Anti-Malware\mbam.exe
    Faulting module path: H:\Programki\Anti-Malware\Qt5Core.dll
    Report Id: 51a621d0-bffe-11e7-bf00-aef6d5e9b23a
    
    Error: (11/02/2017 08:37:40 PM) (Source: WinMgmt) (EventID: 10) (User: )
    Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
    
    Error: (11/02/2017 08:59:09 AM) (Source: WinMgmt) (EventID: 10) (User: )
    Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
    
    
    System errors:
    =============
    Error: (11/10/2017 07:30:45 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
    Description: The following boot-start or system-start driver(s) failed to load: 
    ArcCtrl
    
    Error: (11/10/2017 07:30:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The LogMeIn Hamachi Tunneling Engine service failed to start due to the following error: 
    The system cannot find the file specified.
    
    Error: (11/10/2017 07:30:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The AODDriver4.2.0 service failed to start due to the following error: 
    The system cannot find the path specified.
    
    Error: (11/10/2017 07:24:05 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
    Description: The following boot-start or system-start driver(s) failed to load: 
    ArcCtrl
    
    Error: (11/10/2017 07:23:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The LogMeIn Hamachi Tunneling Engine service failed to start due to the following error: 
    The system cannot find the file specified.
    
    Error: (11/10/2017 07:23:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The AODDriver4.2.0 service failed to start due to the following error: 
    The system cannot find the path specified.
    
    Error: (11/10/2017 07:16:38 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The Kaspersky Anti-Virus Service 16.0.1 service terminated unexpectedly.  It has done this 1 time(s).
    
    Error: (11/10/2017 07:01:40 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
    Description: The following boot-start or system-start driver(s) failed to load: 
    ArcCtrl
    
    Error: (11/10/2017 07:01:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The LogMeIn Hamachi Tunneling Engine service failed to start due to the following error: 
    The system cannot find the file specified.
    
    Error: (11/10/2017 07:00:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The AODDriver4.2.0 service failed to start due to the following error: 
    The system cannot find the path specified.
    
    
    CodeIntegrity:
    ===================================
      Date: 2017-10-23 21:54:26.753
      Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
    
      Date: 2017-10-23 21:54:26.749
      Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
    
      Date: 2017-10-23 21:54:26.514
      Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
    
      Date: 2017-10-23 21:54:25.875
      Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
    
      Date: 2017-10-23 21:54:25.874
      Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
    
      Date: 2017-10-23 21:54:25.872
      Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
    
      Date: 2017-10-18 20:30:36.033
      Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
    
      Date: 2017-10-18 20:30:36.032
      Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
    
      Date: 2017-10-18 20:30:36.030
      Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
    
      Date: 2017-10-18 20:30:35.985
      Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
    
    
    ==================== Memory info =========================== 
    
    Processor: AMD FX(tm)-4300 Quad-Core Processor 
    Percentage of memory in use: 24%
    Total physical RAM: 7919.24 MB
    Available physical RAM: 5995.75 MB
    Total Virtual: 15836.67 MB
    Available Virtual: 13787.8 MB
    
    ==================== Drives ================================
    
    Drive c: () (Fixed) (Total:39.06 GB) (Free:3.47 GB) NTFS ==>[drive with boot components (obtained from BCD)]
    Drive d: () (Fixed) (Total:114.32 GB) (Free:2.31 GB) NTFS
    Drive f: (11111) (Fixed) (Total:156.25 GB) (Free:8.16 GB) NTFS
    Drive h: (New Volume) (Fixed) (Total:775.26 GB) (Free:37.62 GB) NTFS
    
    ==================== MBR & Partition Table ==================
    
    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 98DB7092)
    Partition 1: (Active) - (Size=775.3 GB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=156.2 GB) - (Type=07 NTFS)
    
    ========================================================
    Disk: 1 (MBR Code: Windows 7 or 8) (Size: 153.4 GB) (Disk ID: 23772376)
    Partition 1: (Active) - (Size=39.1 GB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=114.3 GB) - (Type=OF Extended)
    
    ==================== End of Addition.txt ============================

     

     

     

    6520:0fdc 19:15:53.381 KAVRemover tool version 1.0.1275
    6520:0fdc 19:15:53.381 System language detected: langID=9, sublangID=1
    6520:0fdc 19:15:53.381 User language detected: langID=9, sublangID=1
    6520:0fdc 19:15:53.381 Setting UI language: langID=9, sublangID=2
    6520:0fdc 19:15:53.381 Locale successfully set
    6520:0fdc 19:15:53.397 dbghelp.dll dumped OK
    6520:0fdc 19:15:56.802 Binary file dumped
    6520:0fdc 19:15:59.021 ServiceHelper::WaitForServiceStatus
    6520:0fdc 19:15:59.021 Still waiting for 4
    6520:0fdc 19:16:00.021 Service start return code = 1
    6520:0fdc 19:16:00.021 handle does init
    6520:0fdc 19:16:00.022 Dumping user environment...
    6520:0fdc 19:16:00.022 Dumping current environment...
    6520:0fdc 19:16:00.022 CreateFileA () failed, error 3
    6520:0fdc 19:16:00.022 Client malloc
    6520:0fdc 19:16:00.022 Try to set user environment to server...
    6520:0fdc 19:16:00.024 After call, error = 6, ret code = 0)
    6520:0fdc 19:16:00.024 Client free
    6520:1568 19:16:00.044 Searching for installed products...
    6520:1568 19:16:00.045 Try to call some func on server...
    6520:1568 19:16:00.050 Client malloc
    6520:1568 19:16:00.050 After call, error = 0, ret code = 0)
    6520:1568 19:16:00.051 Client free
    6520:1568 19:16:00.051 Try to call detection...
    6520:1568 19:16:00.900 Client malloc
    6520:1568 19:16:00.900 After call detection, error = 0, ret code = 0)
    6520:1568 19:16:00.901 Client free
    6520:1568 19:16:00.901 Processing additional info...
    6520:1568 19:16:00.901 Post message about detected products
    6520:0fdc 19:16:36.580 Try to validate user input...
    6520:0fdc 19:16:36.580 After call, error = 0, ret code = 0)
    6520:0c74 19:16:36.583 Client malloc
    6520:0c74 19:16:36.583 Client malloc
    6520:0c74 19:16:36.583 Client malloc
    6520:0c74 19:16:36.583 Client malloc
    6520:0c74 19:16:36.583 Try to call removing...
    6520:0c74 19:18:19.383 After call removing, error = 0, ret code = 0)
    6520:0c74 19:18:19.383 Client free
    6520:0c74 19:18:19.383 Client free
    6520:0c74 19:18:19.383 Client free
    6520:0c74 19:18:19.383 Client free
    6520:0c74 19:18:19.383 Remove finished successfully
    6520:0fdc 19:18:38.584 Try to restore system environment on server...
    6520:0fdc 19:18:38.586 After call, error = 0, ret code = 0)
    6520:0fdc 19:18:38.586 Current ServiceState is '4'
    6520:0fdc 19:18:38.706 ServiceHelper::WaitForServiceStatus
    6520:0fdc 19:18:38.707 Still waiting for 1
    6520:0fdc 19:18:39.707 Stopped, try to remove

     

     

     

    5012:1314 19:25:29.055 KAVRemover tool version 1.0.1275
    5012:1314 19:25:29.055 System language detected: langID=9, sublangID=1
    5012:1314 19:25:29.055 User language detected: langID=9, sublangID=1
    5012:1314 19:25:29.056 Setting UI language: langID=9, sublangID=2
    5012:1314 19:25:29.056 Locale successfully set
    5012:1314 19:25:29.059 dbghelp.dll dumped OK
    5012:1314 19:25:30.937 Binary file dumped
    5012:1314 19:25:32.124 ServiceHelper::WaitForServiceStatus
    5012:1314 19:25:32.124 Still waiting for 4
    5012:1314 19:25:33.125 Service start return code = 1
    5012:1314 19:25:33.125 handle does init
    5012:1314 19:25:33.126 Dumping user environment...
    5012:1314 19:25:33.126 Dumping current environment...
    5012:1314 19:25:33.126 CreateFileA () failed, error 3
    5012:1314 19:25:33.126 Client malloc
    5012:1314 19:25:33.126 Try to set user environment to server...
    5012:1314 19:25:33.127 After call, error = 6, ret code = 0)
    5012:1314 19:25:33.127 Client free
    5012:0aa8 19:25:33.134 Searching for installed products...
    5012:0aa8 19:25:33.134 Try to call some func on server...
    5012:0aa8 19:25:33.190 Client malloc
    5012:0aa8 19:25:33.190 After call, error = 0, ret code = 0)
    5012:0aa8 19:25:33.191 Client free
    5012:0aa8 19:25:33.191 Try to call detection...
    5012:0aa8 19:25:34.279 Client malloc
    5012:0aa8 19:25:34.279 After call detection, error = 0, ret code = 0)
    5012:0aa8 19:25:34.280 Client free
    5012:0aa8 19:25:34.280 Processing additional info...
    5012:0aa8 19:25:34.280 Post message about detected products. Nothing detected
    5012:1314 19:27:24.812 Try to validate user input...
    5012:1314 19:27:24.812 After call, error = 0, ret code = 0)
    5012:0b18 19:27:24.813 Client malloc
    5012:0b18 19:27:24.813 Client malloc
    5012:0b18 19:27:24.813 Client malloc
    5012:0b18 19:27:24.813 Client malloc
    5012:0b18 19:27:24.813 Try to call removing...
    5012:0b18 19:28:23.616 After call removing, error = 0, ret code = 0)
    5012:0b18 19:28:23.616 Client free
    5012:0b18 19:28:23.616 Client free
    5012:0b18 19:28:23.616 Client free
    5012:0b18 19:28:23.616 Client free
    5012:0b18 19:28:23.616 Remove finished successfully
    5012:1314 19:28:44.170 Try to restore system environment on server...
    5012:1314 19:28:44.224 After call, error = 0, ret code = 0)
    5012:1314 19:28:44.225 Current ServiceState is '4'
    5012:1314 19:28:44.386 ServiceHelper::WaitForServiceStatus
    5012:1314 19:28:44.386 Still waiting for 1
    5012:1314 19:28:45.386 Stopped, try to remove

     

     

     

     

     

     

     

    П.П: Сега съм без Касперски и без добавки в Мозилата но проблема все още съществува.

    kavremvr-srvc 2017-11-10 19-15-59 (pid 5660).log

    kavremvr-srvc 2017-11-10 19-25-32 (pid 5028).log

    Редактирано от doktorkartar (преглед на промените)

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Не знам за вас но аз лично започнах да губя надежда че ще решим проблема. По всичко личи че нямам вирус или нещо подобно.  Толкова време изгубихме заедно че по добре да си бях направил преинсталация:)

    Благодаря ви за отделеното време!

     

     

    Ако искате обявете темата за приключена и без това опитахме всичко срещу тази аномалия.

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Регистрирайте се или влезете в профила си за да коментирате

    Трябва да имате регистрация за да може да коментирате това

    Регистрирайте се

    Създайте нова регистрация в нашия форум. Лесно е!

    Нова регистрация

    Вход

    Имате регистрация? Влезте от тук.

    Вход


    • Подобни теми

      • от мирослав24
        здравейте,получи се следния проблем-след отваряне на снимки от чат,по-точно след последната,излезе съобщение на екрана дали искам да рестартирам.Отказах да изпълня рестарта,след което на курсора на мишката се появи часовника и стоя около 5 минути.През това време не се изпълняваха никакви команди.Изчаках да изчезне часовника и реших да отворя коя да е икона от десктопа-същото нещо-появи се часовника за около 5 минути.Изключих го и повече не се занимавах.Днес сутринта го включих и директно ми се отвори браузъра със същия този часовник.Сега ми изпълнява командите по бавно,но може да се работи.Не съм сканирал с никакви антивирусни софтуери и директно минах на сканиране с FRST.Ето ги и логовете:
        Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 30-11-2017
        Ran by User1 (administrator) on PC1 (05-12-2017 08:35:08)
        Running from C:\Documents and Settings\User2\Desktop
        Loaded Profiles: User1 & User2 (Available Profiles: User1 & User2 & Administrator)
        Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)
        Internet Explorer Version 8 (Default browser: IE)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (Cisco Systems, Inc.) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
        (Comodo) C:\Program Files\Comodo\Dragon\dragon_updater.exe
        () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareService.exe
        (RaMMicHaeL) C:\Program Files\Unchecky\bin\unchecky_svc.exe
        (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
        (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
        (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
        (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
        (Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
        ==================== Registry (Whitelisted) ===========================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [tsnpstd3] => C:\WINDOWS\tsnpstd3.exe [262144 2006-06-19] ()
        HKLM\...\Run: [snpstd3] => C:\WINDOWS\vsnpstd3.exe [831488 2006-05-12] ()
        HKLM\...\Run: [] => [X]
        HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareTray.exe [8063200 2016-07-18] ()
        HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2007-03-11] (Hewlett-Packard Co.)
        HKLM\...\Run: [DWQueuedReporting] => C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [437160 2007-02-26] (Microsoft Corporation)
        HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [Messenger (Yahoo!)] => "F:\SKYPE_~1\yahoo\Messenger\YahooMessenger.exe" -quiet
        HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [uTorrent] => C:\Program Files\uTorrent\uTorrent.exe [395640 2011-05-02] (BitTorrent, Inc.)
        HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6490904 2015-08-20] (Piriform Ltd)
        HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [Google Update] => C:\Documents and Settings\User1\Local Settings\Application Data\Google\Update\1.3.33.7\GoogleUpdateCore.exe [601680 2017-12-02] (Google Inc.)
        HKU\S-1-5-21-220523388-412668190-1417001333-1003\...\Run: [MCShield Monitor] => C:\Program Files\MCShield\mcshieldrtm.exe [650816 2014-04-11] (MyCity)
        HKU\S-1-5-18\...\RunOnce: [RunNarrator] => C:\WINDOWS\system32\Narrator.exe [53760 2008-04-14] (Microsoft Corporation)
        HKU\S-1-5-18\...\RunOnce: [FlashPlayerUpdate] => C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_26_0_0_151_pepper.exe [1281024 2017-08-19] (Adobe Systems Incorporated)
        Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2017-09-02]
        ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
        Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\VPN Client.lnk [2017-12-02]
        ShortcutTarget: VPN Client.lnk -> C:\WINDOWS\Installer\{21E247D4-5E27-4BEA-AA4D-19A81203FE2A}\Icon3E5562ED7.ico ()
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
        Tcpip\..\Interfaces\{0227FD86-8C54-4C88-8029-3F44137A8ADF}: [DhcpNameServer] 192.168.0.1
        Internet Explorer:
        ==================
        HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        HKU\S-1-5-21-220523388-412668190-1417001333-1003\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        HKU\S-1-5-21-220523388-412668190-1417001333-1004\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        URLSearchHook: [S-1-5-21-220523388-412668190-1417001333-1004] ATTENTION => Default URLSearchHook is missing
        DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab
        FireFox:
        ========
        FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_160.dll [2015-06-22] ()
        FF Plugin: @java.com/JavaPlugin,version=10.11.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-01-12] (Oracle Corporation)
        FF Plugin: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files\Yahoo!\Shared\npYState.dll [No File]
        FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
        FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
        FF Plugin HKU\S-1-5-21-220523388-412668190-1417001333-1003: @talk.google.com/GoogleTalkPlugin -> C:\Documents and Settings\User1\Application Data\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
        FF Plugin HKU\S-1-5-21-220523388-412668190-1417001333-1003: @talk.google.com/O1DPlugin -> C:\Documents and Settings\User1\Application Data\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
        FF Plugin HKU\S-1-5-21-220523388-412668190-1417001333-1003: @tools.google.com/Google Update;version=3 -> C:\Documents and Settings\User1\Local Settings\Application Data\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-12-02] (Google Inc.)
        FF Plugin HKU\S-1-5-21-220523388-412668190-1417001333-1003: @tools.google.com/Google Update;version=9 -> C:\Documents and Settings\User1\Local Settings\Application Data\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-12-02] (Google Inc.)
        FF Plugin ProgramFiles/Appdata: C:\Documents and Settings\User1\Application Data\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
        FF Plugin ProgramFiles/Appdata: C:\Documents and Settings\User1\Application Data\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [272384 2017-08-19] (Adobe Systems Incorporated) [File not signed]
        S2 Browser; C:\WINDOWS\System32\browser.dll [78336 2012-07-06] (Microsoft Corporation) [File not signed]
        R2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1528624 2009-11-17] (Cisco Systems, Inc.)
        R2 DcomLaunch; C:\WINDOWS\system32\rpcss.dll [401408 2009-02-09] (Microsoft Corporation) [File not signed]
        R2 Dnscache; C:\WINDOWS\System32\dnsrslvr.dll [45568 2009-04-20] (Microsoft Corporation) [File not signed]
        R2 DragonUpdater; C:\Program Files\Comodo\Dragon\dragon_updater.exe [2060848 2016-02-05] (Comodo)
        R2 Eventlog; C:\WINDOWS\system32\services.exe [110592 2009-02-06] (Microsoft Corporation) [File not signed]
        R3 EventSystem; C:\WINDOWS\system32\es.dll [253952 2008-07-07] (Microsoft Corporation) [File not signed]
        S3 FastUserSwitchingCompatibility; C:\WINDOWS\System32\shsvcs.dll [135168 2009-07-28] (Microsoft Corporation) [File not signed]
        R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2007-06-04] (Hewlett-Packard Co.) [File not signed]
        R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [131072 2007-06-04] (Hewlett-Packard Co.) [File not signed]
        S4 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [170912 2013-01-12] (Oracle Corporation)
        R2 LanmanServer; C:\WINDOWS\System32\srvsvc.dll [99840 2010-08-27] (Microsoft Corporation) [File not signed]
        R2 lanmanworkstation; C:\WINDOWS\System32\wkssvc.dll [132096 2009-06-10] (Microsoft Corporation) [File not signed]
        R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareService.exe [664040 2016-07-18] ()
        S3 MSIServer; C:\WINDOWS\System32\msiexec.exe [95744 2008-05-19] (Microsoft Corporation) [File not signed]
        S3 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [43520 2006-11-08] (Hewlett-Packard) [File not signed]
        R3 Nla; C:\WINDOWS\System32\mswsock.dll [245248 2008-06-20] (Microsoft Corporation) [File not signed]
        R2 PlugPlay; C:\WINDOWS\system32\services.exe [110592 2009-02-06] (Microsoft Corporation) [File not signed]
        S3 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [53248 2006-11-08] (Hewlett-Packard) [File not signed]
        R2 RpcSs; C:\WINDOWS\System32\rpcss.dll [401408 2009-02-09] (Microsoft Corporation) [File not signed]
        R2 ShellHWDetection; C:\WINDOWS\System32\shsvcs.dll [135168 2009-07-28] (Microsoft Corporation) [File not signed]
        S2 SkypeUpdate; C:\Program Files\Skype\Updater\Updater.exe [317400 2017-04-05] (Skype Technologies) [File not signed]
        R2 Spooler; C:\WINDOWS\system32\spoolsv.exe [58880 2010-08-17] (Microsoft Corporation) [File not signed]
        R2 Themes; C:\WINDOWS\System32\shsvcs.dll [135168 2009-07-28] (Microsoft Corporation) [File not signed]
        R2 Unchecky; C:\Program Files\Unchecky\bin\unchecky_svc.exe [243448 2016-02-20] (RaMMicHaeL)
        S3 Wmi; C:\WINDOWS\System32\advapi32.dll [617472 2009-02-09] (Microsoft Corporation) [File not signed]
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R1 AFD; C:\WINDOWS\System32\drivers\afd.sys [138496 2011-08-17] (Microsoft Corporation) [File not signed]
        R1 AmdK8; C:\WINDOWS\System32\DRIVERS\AmdK8.sys [36864 2006-06-18] (Advanced Micro Devices)
        S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
        S3 CVirtA; C:\WINDOWS\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
        R2 CVPNDRVA; C:\WINDOWS\system32\Drivers\CVPNDRVA.sys [308859 2009-11-17] (Cisco Systems, Inc.) [File not signed]
        R3 DNE; C:\WINDOWS\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)
        R3 gzflt; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\3.0.129.0\gzflt.sys [175008 2016-04-28] (BitDefender LLC)
        S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [49920 2007-01-19] (HP)
        S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2007-01-19] (HP)
        S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21568 2007-01-19] (HP)
        R3 HTTP; C:\WINDOWS\System32\Drivers\HTTP.sys [265728 2009-10-20] (Microsoft Corporation) [File not signed]
        R3 IntcAzAudAddService; C:\WINDOWS\System32\drivers\RtkHDAud.sys [4368896 2006-08-15] (Realtek Semiconductor Corp.) [File not signed]
        R3 irsir; C:\WINDOWS\System32\DRIVERS\irsir.sys [18688 2001-08-17] (Microsoft Corporation)
        R0 KSecDD; C:\WINDOWS\system32\Drivers\KSecDD.sys [92928 2009-06-24] (Microsoft Corporation) [File not signed]
        R1 MRxSmb; C:\WINDOWS\System32\DRIVERS\mrxsmb.sys [456320 2011-07-15] (Microsoft Corporation) [File not signed]
        R0 Mup; C:\WINDOWS\system32\Drivers\Mup.sys [105472 2011-04-21] (Microsoft Corporation) [File not signed]
        S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
        R3 NdisTapi; C:\WINDOWS\System32\DRIVERS\ndistapi.sys [10496 2011-07-08] (Microsoft Corporation) [File not signed]
        R3 NDProxy; C:\WINDOWS\system32\Drivers\NDProxy.sys [40960 2013-11-27] (Microsoft Corporation) [File not signed]
        R3 NVENETFD; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [57856 2006-07-11] (NVIDIA Corporation)
        R3 nvnetbus; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [20480 2006-07-11] (NVIDIA Corporation)
        R3 Rasirda; C:\WINDOWS\System32\DRIVERS\rasirda.sys [19584 2001-08-17] (Microsoft Corporation)
        S3 SNPSTD3; C:\WINDOWS\System32\DRIVERS\snpstd3.sys [10148480 2006-06-27] (Sonix Co. Ltd.) [File not signed]
        R3 Srv; C:\WINDOWS\System32\DRIVERS\srv.sys [357888 2011-02-17] (Microsoft Corporation) [File not signed]
        R1 Tcpip; C:\WINDOWS\System32\DRIVERS\tcpip.sys [361600 2008-06-20] (Microsoft Corporation) [File not signed]
        U3 TrueSight; c:\windows\system32\drivers\TrueSight.sys [111872 2011-12-15] () [File not signed]
        S3 Trufos; C:\WINDOWS\System32\DRIVERS\Trufos.sys [428832 2016-04-28] (BitDefender S.R.L.)
        S3 usbaudio; C:\WINDOWS\System32\drivers\usbaudio.sys [60160 2013-07-17] (Microsoft Corporation) [File not signed]
        R3 usbccgp; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [32384 2013-08-09] (Microsoft Corporation) [File not signed]
        R3 usbehci; C:\WINDOWS\System32\DRIVERS\usbehci.sys [30336 2009-03-18] (Microsoft Corporation) [File not signed]
        S3 usbscan; C:\WINDOWS\System32\DRIVERS\usbscan.sys [14976 2013-07-03] (Microsoft Corporation) [File not signed]
        S3 vsdatant; C:\WINDOWS\system32\vsdatant.sys [394952 2007-11-14] (Zone Labs, LLC)
        S3 catchme; \??\C:\DOCUME~1\User1\LOCALS~1\Temp\catchme.sys [X]
        S4 IntelIde; no ImagePath
        S2 StarOpen; no ImagePath
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-12-05 08:35 - 2017-12-05 08:35 - 000013521 _____ C:\Documents and Settings\User2\Desktop\FRST.txt
        2017-12-05 08:34 - 2017-12-05 08:35 - 000000000 ____D C:\FRST
        2017-12-05 08:34 - 2017-12-05 08:34 - 001752064 _____ (Farbar) C:\Documents and Settings\User2\Desktop\FRST.exe
        2017-11-21 14:30 - 2017-11-21 14:30 - 000505729 _____ C:\Documents and Settings\User2\Desktop\87.pdf
        2017-11-14 15:45 - 2017-11-14 15:45 - 000420352 _____ C:\Documents and Settings\User2\Desktop\ценова 2017 -НОЕМВРИ.xls
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-12-05 08:35 - 2015-07-18 12:46 - 000000000 ____D C:\Documents and Settings\User1\Local Settings\temp
        2017-12-05 08:35 - 2011-05-02 12:28 - 000000000 ____D C:\Documents and Settings\User2\Local Settings\Temp
        2017-12-05 08:22 - 2014-01-31 12:39 - 000002051 _____ C:\Documents and Settings\All Users\Desktop\Ad-Aware Antivirus.lnk
        2017-12-05 08:20 - 2015-06-22 13:14 - 000000222 _____ C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Logon.job
        2017-12-05 08:20 - 2011-05-02 09:20 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
        2017-12-05 08:20 - 2001-08-23 11:00 - 000002206 _____ C:\WINDOWS\system32\wpa.dbl
        2017-12-04 14:39 - 2016-02-17 15:35 - 000032618 _____ C:\WINDOWS\SchedLgU.Txt
        2017-12-04 14:31 - 2011-05-25 09:57 - 000000000 ____D C:\Documents and Settings\User2\Application Data\uTorrent
        2017-12-04 14:30 - 2011-05-02 12:28 - 000000000 ____D C:\Documents and Settings\User2
        2017-12-04 14:26 - 2015-04-26 08:48 - 000000000 ____D C:\Documents and Settings\User2\Application Data\Skype
        2017-12-04 13:55 - 2013-03-08 14:11 - 000001078 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-412668190-1417001333-1003UA.job
        2017-12-04 12:55 - 2013-03-08 14:11 - 000001026 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-412668190-1417001333-1003Core.job
        2017-12-02 12:58 - 2011-05-02 11:46 - 000000000 ____D C:\Documents and Settings\User1\Application Data\uTorrent
        2017-12-02 12:58 - 2011-05-02 11:10 - 000000178 ___SH C:\Documents and Settings\User1\ntuser.ini
        2017-12-02 12:48 - 2017-01-16 12:16 - 000000892 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
        2017-12-02 12:48 - 2011-05-02 09:10 - 000000000 ____D C:\WINDOWS\system32\Macromed
        2017-12-02 12:47 - 2015-04-25 10:43 - 000000000 ____D C:\Documents and Settings\User1\Application Data\Skype
        2017-12-02 12:36 - 2016-02-20 12:25 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\MCShield
        2017-11-30 14:44 - 2011-05-02 11:10 - 000000000 ____D C:\Documents and Settings\User1
        2017-11-23 11:07 - 2013-12-09 12:51 - 000000000 ____D C:\Documents and Settings\User2\Desktop\образци PDF
        2017-11-16 12:59 - 2015-06-22 13:14 - 000000216 _____ C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Monthly.job
        ==================== Files in the root of some directories =======
        2011-05-02 12:33 - 2014-09-24 15:20 - 000014848 _____ () C:\Documents and Settings\User1\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
        2014-01-01 12:07 - 2014-01-01 12:07 - 000000036 _____ () C:\Documents and Settings\User1\Local Settings\Application Data\housecall.guid.cache
        2011-05-15 12:35 - 2011-05-15 12:35 - 000000056 _____ () C:\Documents and Settings\All Users\Application Data\ezsidmv.dat
        2017-09-02 11:57 - 2017-09-02 12:18 - 000000473 _____ () C:\Documents and Settings\All Users\Application Data\hpzinstall.log
        Some files in TEMP:
        ====================
        2017-09-02 12:17 - 2017-09-02 12:17 - 000764248 _____ (Igor Pavlov) C:\Documents and Settings\User1\Local Settings\temp\Package_en_ww.exe
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\WINDOWS\explorer.exe => File is digitally signed
        C:\WINDOWS\system32\winlogon.exe => File is digitally signed
        C:\WINDOWS\system32\svchost.exe => File is digitally signed
        C:\WINDOWS\system32\services.exe => MD5 is legit
        C:\WINDOWS\system32\User32.dll => File is digitally signed
        C:\WINDOWS\system32\userinit.exe => File is digitally signed
        C:\WINDOWS\system32\rpcss.dll => MD5 is legit
        C:\WINDOWS\system32\dnsapi.dll => MD5 is legit
        C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
        ==================== End of FRST.txt ============================
        Addition.txt
      • от izipop
        При подновяване на Malwarebytes използвах опцията за пълна защита в реално време...както и пробният период от 14 дни. Нямаше проблеми, всичко функционираше точно. След изтичане на пробния период, при поредно пускане на програмата ми даде съобщение за зловреден софтуер.Преди подновяването нямаше зараза.  Какво да правя за да ги премахна? Мисля, че проблемът идва от това, че исках да ползвам безплатната версия на Malwarebytes и това е активирано след това. Многократно слагах резултатите в карантина и отново излизат като съобщение за зловреден вирус .Мисля, че сгреших, когато предпоследния път изтрих "Карантината". Може би, е изтрило местонахождението, не знам! Търсих ... Моля, помогнете! 
      • от j_d
        Здравейте !
        Device Manager e празен,Network Connections също ,а има нет. Системата(Win Xp) се изключва доста бавно. Дали системата е омазана или се дължи на зловреден софт.
        Да Помоля за помощ !
        Благодаря предварително !
         
        Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 02-11-2017 02
        Ran by doni (administrator) on AMD (06-11-2017 19:57:32)
        Running from C:\
        Loaded Profiles: doni (Available Profiles: doni & Administrator)
        Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)
        Internet Explorer Version 8 (Default browser: IE)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
        (Murray Hurps Software Pty Ltd) C:\Program Files\Ad Muncher\AdMunch.exe
        (Copyright 2017.) C:\Program Files\Zemana AntiLogger\ZAM.exe
        (H.D.S. Hungary) C:\Program Files\Hard Disk Sentinel\HDSentinel.exe
        (Bitsum LLC) C:\Program Files\Process Lasso\ProcessLasso.exe
        (Bitsum LLC) C:\Program Files\Process Lasso\ProcessGovernor.exe
        (FinalWire Ltd.) D:\Важни Програми\AIDA64 Extreme Edition\aida64extreme592\aida64.exe
        () C:\Program Files\Jotta\vss\jVSS.exe
        (HP) C:\WINDOWS\system32\HPZipm12.exe
        (Reason Software Company Inc.) C:\Program Files\Unchecky\bin\unchecky_svc.exe
        (Copyright 2017.) C:\Program Files\Zemana AntiLogger\ZAM.exe
        (Reason Software Company Inc.) C:\Program Files\Unchecky\bin\unchecky_bg.exe
        (ESET) C:\Program Files\ESET\ESET Security\egui.exe
        (SpiderOak) C:\Program Files\SpiderOakONE\SpiderOakONE.exe
        (SpiderOak) C:\Program Files\SpiderOakONE\SpiderOakONE.exe
        () C:\Program Files\SpiderOakONE\windows_dir_watcher.exe
        (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
        (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
        (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
        (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
        (FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
        ==================== Registry (Whitelisted) ===========================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [Ad Muncher] => C:\Program Files\Ad Muncher\AdMunch.exe [560760 2015-06-17] (Murray Hurps Software Pty Ltd)
        HKLM\...\Run: [ZAM] => C:\Program Files\Zemana AntiLogger\ZAM.exe [15775888 2017-08-09] (Copyright 2017.)
        HKLM\...\Run: [Hard Disk Sentinel] => C:\Program Files\Hard Disk Sentinel\HDSentinel.exe [5102680 2017-03-09] (H.D.S. Hungary)
        HKLM\...\Run: [DWPersistentQueuedReporting] => C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [437160 2007-02-26] (Microsoft Corporation)
        Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2009-07-29] (ATI Technologies Inc.)
        HKLM\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
        HKLM\...\Policies\Explorer: [NoResolveSearch] 1
        HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Run: [ProcessLassoManagementConsole] => C:\Program Files\Process Lasso\processlasso.exe [986112 2017-03-06] (Bitsum LLC)
        HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Run: [ProcessGovernor] => C:\Program Files\Process Lasso\processgovernor.exe [717824 2017-03-06] (Bitsum LLC)
        HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Run: [AIDA64 AutoStart] => D:\Важни Програми\AIDA64 Extreme Edition\aida64extreme592\aida64.exe [19602896 2017-06-19] (FinalWire Ltd.)
        HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
        HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
        HKU\S-1-5-21-854245398-329068152-725345543-1003\...\Policies\Explorer: [NoSaveSettings] 0
        Lsa: [Notification Packages] 
        ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [115440 2013-05-08] (SuperAdBlocker.com)
        GroupPolicy: Restriction ? <==== ATTENTION
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Winsock: Catalog9 12 %windir%\system32\vsocklib.dll => No File 
        Winsock: Catalog9 13 %windir%\system32\vsocklib.dll => No File 
        Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
        Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0
        Tcpip\..\Interfaces\{C97B26C0-87E8-44A4-9564-5796CD042123}: [DhcpNameServer] 192.168.1.1 0.0.0.0
        Internet Explorer:
        ==================
        HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
        HKU\S-1-5-21-854245398-329068152-725345543-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        HKU\S-1-5-21-854245398-329068152-725345543-1003\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
        SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
        SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
        SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
        SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
        DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
        Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL [2001-01-22] (Microsoft Corporation)
        Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  No File
        Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL [2000-04-19] (Microsoft Corporation)
        Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  No File
        Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2017-04-05] (Skype Technologies)
        Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} -  No File
        FireFox:
        ========
        FF DefaultProfile: k5gfurjn.default
        FF ProfilePath: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default [2017-11-05]
        FF Homepage: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> google.bg
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.ftp", ""
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.ftp_port", 0
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.socks", ""
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.socks_port", 0
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.ssl", ""
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> backup.ssl_port", 0
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> ftp", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> ftp_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> http", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> http_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> share_proxy_settings", true
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> socks", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> socks_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> ssl", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default -> ssl_port", 9050
        FF Extension: (Adguard AdBlocker) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\adguardadblocker@adguard.com.xpi [2017-02-17]
        FF Extension: (Bloody Vikings!) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\bloodyvikings@ffs.bplaced.net.xpi [2017-01-09]
        FF Extension: (MEGA) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\firefox@mega.co.nz.xpi [2017-03-30]
        FF Extension: (Google™ Translator) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\jid1-dgnIBwQga0SIBw@jetpack.xpi [2016-12-19]
        FF Extension: (S3.Google Translator) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\s3google@translator.xpi [2017-03-30]
        FF Extension: (Video DownloadHelper) - C:\Documents and Settings\doni\Application Data\Mozilla\Firefox\Profiles\k5gfurjn.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-01-02]
        FF ProfilePath: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default [2017-11-05]
        FF DefaultSearchEngine: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> Google
        FF SelectedSearchEngine: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> Google
        FF Homepage: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> www.google.bg
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.ftp", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.ftp_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.socks", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.socks_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.ssl", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> backup.ssl_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> ftp", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> ftp_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> http", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> http_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> share_proxy_settings", true
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> socks", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> socks_port", 9050
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> ssl", "127.0.0.1"
        FF NetworkProxy: C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default -> ssl_port", 9050
        FF Extension: (Adguard AdBlocker (Legacy)) - C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default\Extensions\adguardadblockerlegacy@adguard.com.xpi [2017-10-03]
        FF Extension: (S3.Google Translator) - C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default\Extensions\s3google@translator.xpi [2017-09-25]
        FF Extension: (1-Click YouTube Video Downloader) - C:\Documents and Settings\doni\Application Data\Moonchild Productions\Pale Moon\Profiles\p3bt4kaz.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2017-01-02]
        FF ProfilePath: C:\Documents and Settings\doni\Application Data\K-Meleon\puoi2cit.default [2017-11-05]
        FF user.js: detected! => C:\Documents and Settings\doni\Application Data\K-Meleon\puoi2cit.default\user.js [2006-04-06]
        FF Homepage: C:\Documents and Settings\doni\Application Data\K-Meleon\puoi2cit.default -> www.google.bg
        FF Extension: (NewsFox) - C:\Program Files\K-Meleon\browser\extensions\{899DF1F8-2F43-4394-8315-37F6744E6319}.xpi [2015-03-12] [not signed]
        FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
        FF Extension: (Microsoft .NET Framework Assistant) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2017-10-29] [not signed]
        FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_27_0_0_183.dll [2017-10-25] ()
        FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
        FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
        FF Plugin: @microsoft.com/OfficeLive,version=1.3 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2008-11-13] (Microsoft Corp.)
        FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
        FF Plugin: @real.com/nppl3260;version=6.0.12.69 -> C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll [2008-09-10] (RealNetworks, Inc.)
        FF Plugin: @real.com/nprpjplug;version=6.0.12.69 -> C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll [2008-09-10] (RealNetworks, Inc.)
        FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
        FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
        FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
        FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
        FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
        FF Plugin HKU\.DEFAULT: @tools.google.com/Google Update;version=3 -> C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Google\Update\1.3.22.3\npGoogleUpdate3.dll [2014-02-08] (Google Inc.)
        FF Plugin HKU\.DEFAULT: @tools.google.com/Google Update;version=9 -> C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Google\Update\1.3.22.3\npGoogleUpdate3.dll [2014-02-08] (Google Inc.)
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        S3 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [143776 2017-03-07] (SUPERAntiSpyware.com)
        S3 Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2010-04-15] (Adobe Systems) [File not signed]
        S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [272384 2017-10-25] (Adobe Systems Incorporated) [File not signed]
        R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2069936 2017-06-13] (ESET)
        S3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2007-03-11] (Hewlett-Packard Co.) [File not signed]
        R2 Jotta VSS Service; C:\Program Files\Jotta\vss\jVSS.exe [102520 2017-10-03] ()
        S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4563920 2017-11-01] (Malwarebytes)
        S4 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe [270336 2001-02-23] (Microsoft Corporation) [File not signed]
        R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [69632 2004-09-29] (HP) [File not signed]
        S4 SkypeUpdate; C:\Program Files\Skype\Updater\Updater.exe [317400 2017-04-05] (Skype Technologies) [File not signed]
        R2 Unchecky; C:\Program Files\Unchecky\bin\unchecky_svc.exe [294168 2017-10-03] (Reason Software Company Inc.)
        R2 WudfSvc; C:\WINDOWS\System32\WUDFSvc.dll [64512 2016-03-09] (Microsoft Corporation) [File not signed]
        R2 ZAMSvc; C:\Program Files\Zemana AntiLogger\ZAM.exe [15775888 2017-08-09] (Copyright 2017.)
        S4 Zoolz 2 Service; C:\Program Files\Genie9\Zoolz2\ZoolzService.exe [475792 2017-07-30] (Genie9)
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R1 AFS2K; C:\WINDOWS\system32\Drivers\AFS2K.sys [82380 2011-12-28] (Oak Technology Inc.) [File not signed]
        R3 AIDA64Driver; D:\Важни Програми\AIDA64 Extreme Edition\aida64extreme592\kerneld.x32 [44656 2017-06-19] ()
        S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
        S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
        R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [113512 2017-06-22] (ESET)
        R1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [139384 2017-03-09] (ESET)
        R1 ElbyCDIO; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG)
        R1 epfwtdir; C:\WINDOWS\System32\DRIVERS\epfwtdir.sys [61504 2017-03-09] (ESET)
        S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [51120 2005-03-08] (HP)
        S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2005-03-08] (HP)
        S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21744 2005-03-08] (HP)
        R2 inpout32; C:\WINDOWS\System32\Drivers\inpout32.sys [11936 2017-10-25] (Highresolution Enterprises [www.highrez.co.uk])
        R3 keycrypt; C:\WINDOWS\System32\DRIVERS\KeyCrypt32.sys [144416 2017-03-22] (Zemana Ltd.)
        S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
        S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
        R3 pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [47360 2010-04-06] (VSO Software) [File not signed]
        R3 RTHDMIAzAudService; C:\WINDOWS\System32\drivers\RtKHDMI.sys [3734976 2009-06-25] (Realtek Semiconductor Corp.)
        R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
        R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
        R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [691696 2010-03-17] () [File not signed]
        R3 VComm; C:\WINDOWS\System32\DRIVERS\VComm.sys [34448 2011-05-28] (IVT Corporation.)
        R2 WiseFs; C:\WINDOWS\WiseFs32.sys [57936 2017-07-28] (WiseCleaner.com)
        R1 ZAM; C:\WINDOWS\System32\drivers\zam32.sys [181496 2017-07-31] (Zemana Ltd.)
        R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard32.sys [181496 2017-07-31] (Zemana Ltd.)
        U3 aixna50v; C:\WINDOWS\system32\Drivers\aixna50v.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero byte File/Folder)
        S3 BlueletAudio; system32\DRIVERS\blueletaudio.sys [X]
        S3 BlueletSCOAudio; system32\DRIVERS\BlueletSCOAudio.sys [X]
        S3 BT; system32\DRIVERS\btnetdrv.sys [X]
        S3 Btcsrusb; System32\Drivers\btcusb.sys [X]
        S3 BTHidEnum; system32\DRIVERS\vbtenum.sys [X]
        S0 BTHidMgr; System32\Drivers\BTHidMgr.sys [X]
        S1 epp32; no ImagePath
        S3 ESETCleanersDriver; no ImagePath
        S3 gdrv; no ImagePath
        S4 IntelIde; no ImagePath
        S3 JL2005C; System32\Drivers\jl2005c.sys [X]
        U5 P3; C:\Windows\System32\Drivers\P3.sys [42752 2008-04-14] (Microsoft Corporation)
        U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
        U5 Sdbus; C:\Windows\System32\Drivers\Sdbus.sys [79232 2008-04-14] (Microsoft Corporation)
        U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]
        S3 VcommMgr; System32\Drivers\VcommMgr.sys [X]
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        NETSVC: SSHNAS -> no filepath.
        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-11-06 19:57 - 2017-11-06 19:57 - 000021251 _____ C:\FRST.txt
        2017-11-06 19:57 - 2017-11-06 19:57 - 000000000 ____D C:\FRST
        2017-11-06 19:51 - 2017-11-06 19:51 - 001799680 _____ (Farbar) C:\FRST.exe
        2017-11-05 09:23 - 2017-11-05 09:23 - 000000000 ____D C:\Documents and Settings\doni\Application Data\Inv Softworks
        2017-11-03 22:31 - 2017-11-03 22:31 - 000221112 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
        2017-11-03 22:31 - 2017-11-03 22:31 - 000001715 _____ C:\Documents and Settings\All Users\Desktop\Malwarebytes.lnk
        2017-11-03 22:31 - 2017-11-03 22:31 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes
        2017-11-03 22:31 - 2017-11-03 22:31 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\MB3CoreBackup
        2017-11-03 22:31 - 2017-11-01 08:54 - 000059896 _____ C:\WINDOWS\system32\Drivers\mbae.sys
        2017-11-03 20:17 - 2017-11-03 21:10 - 000000000 ___RD C:\Documents and Settings\doni\My Documents\SpiderOak Hive
        2017-11-03 20:17 - 2017-11-03 20:17 - 000000495 _____ C:\Documents and Settings\doni\Desktop\SpiderOak Hive.lnk
        2017-11-03 20:14 - 2017-11-03 20:14 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\SpiderOak
        2017-11-03 20:11 - 2017-11-03 20:11 - 000000000 ____D C:\Program Files\SpiderOakONE
        2017-11-03 20:11 - 2017-11-03 20:11 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\SpiderOakONE
        2017-11-03 20:07 - 2017-11-03 22:24 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\SharewareOnSale Notifier
        2017-11-01 19:41 - 2017-11-01 21:52 - 000000000 ____D C:\Documents and Settings\doni\dwhelper
        2017-11-01 14:00 - 2017-11-01 14:00 - 000013824 ___SH C:\Documents and Settings\doni\My Documents\Thumbs.db
        2017-11-01 11:34 - 2017-11-01 12:21 - 000000664 _____ C:\WINDOWS\system32\d3d9caps.dat
        2017-11-01 10:50 - 2017-11-06 07:40 - 000032294 _____ C:\WINDOWS\SchedLgU.Txt
        2017-10-30 21:33 - 2008-04-14 05:42 - 000294912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dlimport.exe
        2017-10-30 21:33 - 2008-04-14 05:40 - 000294912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msaud32.acm
        2017-10-30 21:33 - 2008-04-14 05:40 - 000086016 ____C (Sipro Lab Telecom Inc.) C:\WINDOWS\system32\dllcache\sl_anet.acm
        2017-10-30 21:33 - 2008-04-14 05:39 - 000290816 ____C (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\system32\dllcache\l3codeca.acm
        2017-10-30 21:33 - 2008-04-13 22:58 - 000184959 ____C C:\WINDOWS\system32\dllcache\compact.wmz
        2017-10-30 21:33 - 2008-04-13 22:58 - 000066725 ____C C:\WINDOWS\system32\dllcache\revert.wmz
        2017-10-30 21:33 - 2007-06-26 11:30 - 000572557 ____C C:\WINDOWS\system32\dllcache\rtuner.wmv
        2017-10-30 21:33 - 2007-06-26 11:30 - 000457607 ____C C:\WINDOWS\system32\dllcache\mdlib.wmv
        2017-10-30 21:33 - 2007-06-26 11:30 - 000381425 ____C C:\WINDOWS\system32\dllcache\copycd.wmv
        2017-10-30 21:33 - 2007-06-26 11:30 - 000375519 ____C C:\WINDOWS\system32\dllcache\nuskin.wmv
        2017-10-30 21:33 - 2007-06-26 11:30 - 000354468 ____C C:\WINDOWS\system32\dllcache\wmpaud1.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000343204 ____C C:\WINDOWS\system32\dllcache\wmpaud7.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000343204 ____C C:\WINDOWS\system32\dllcache\wmpaud6.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000300969 ____C C:\WINDOWS\system32\dllcache\viz.wmv
        2017-10-30 21:33 - 2007-06-26 11:30 - 000172196 ____C C:\WINDOWS\system32\dllcache\wmpaud9.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000172196 ____C C:\WINDOWS\system32\dllcache\wmpaud8.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000172196 ____C C:\WINDOWS\system32\dllcache\wmpaud3.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000086196 ____C C:\WINDOWS\system32\dllcache\wmpaud5.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000086180 ____C C:\WINDOWS\system32\dllcache\wmpaud4.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000086180 ____C C:\WINDOWS\system32\dllcache\wmpaud2.wav
        2017-10-30 21:33 - 2007-06-26 11:30 - 000022060 ____C C:\WINDOWS\system32\dllcache\npds.zip
        2017-10-30 21:33 - 2007-06-26 11:30 - 000010457 ____C C:\WINDOWS\system32\dllcache\wmptour.hta
        2017-10-30 21:33 - 2007-06-26 11:30 - 000009585 ____C C:\WINDOWS\system32\dllcache\controls.css
        2017-10-30 21:33 - 2007-06-26 11:30 - 000008298 ____C C:\WINDOWS\system32\dllcache\contents.htm
        2017-10-30 21:33 - 2007-06-26 11:30 - 000006878 ____C C:\WINDOWS\system32\dllcache\controls.js
        2017-10-30 21:33 - 2007-06-26 11:30 - 000005971 ____C C:\WINDOWS\system32\dllcache\events.js
        2017-10-30 21:33 - 2007-06-26 11:30 - 000003187 ____C C:\WINDOWS\system32\dllcache\tour.js
        2017-10-30 21:33 - 2007-06-26 11:30 - 000001771 ____C C:\WINDOWS\system32\dllcache\wmptour.css
        2017-10-30 21:33 - 2007-06-26 11:30 - 000001148 ____C C:\WINDOWS\system32\dllcache\snd.htm
        2017-10-30 21:33 - 2007-06-26 11:30 - 000000420 ____C C:\WINDOWS\system32\dllcache\wmploc.js
        2017-10-30 21:33 - 2007-06-26 11:29 - 000097117 ____C C:\WINDOWS\system32\dllcache\mplayer2.hlp
        2017-10-30 21:33 - 2007-06-26 11:29 - 000001885 ____C C:\WINDOWS\system32\dllcache\mplayer2.cnt
        2017-10-30 21:33 - 2007-06-26 11:28 - 000613334 ____C C:\WINDOWS\system32\dllcache\wmplayer.chm
        2017-10-30 21:33 - 2007-06-26 11:28 - 000067374 ____C C:\WINDOWS\system32\dllcache\wmplayer.adm
        2017-10-30 21:33 - 2007-06-26 11:26 - 000077307 ____C C:\WINDOWS\system32\dllcache\plyr_err.chm
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001477 ____C C:\WINDOWS\system32\dllcache\plylst6.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001477 ____C C:\WINDOWS\system32\dllcache\plylst5.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001474 ____C C:\WINDOWS\system32\dllcache\plylst3.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001451 ____C C:\WINDOWS\system32\dllcache\plylst12.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001448 ____C C:\WINDOWS\system32\dllcache\plylst4.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001250 ____C C:\WINDOWS\system32\dllcache\plylst1.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001049 ____C C:\WINDOWS\system32\dllcache\plylst2.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001046 ____C C:\WINDOWS\system32\dllcache\plylst7.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000001036 ____C C:\WINDOWS\system32\dllcache\plylst8.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000789 ____C C:\WINDOWS\system32\dllcache\plylst11.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000787 ____C C:\WINDOWS\system32\dllcache\plylst10.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000784 ____C C:\WINDOWS\system32\dllcache\plylst9.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000783 ____C C:\WINDOWS\system32\dllcache\plylst13.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000775 ____C C:\WINDOWS\system32\dllcache\plylst14.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000733 ____C C:\WINDOWS\system32\dllcache\plylst15.wpl
        2017-10-30 21:33 - 2007-06-26 11:26 - 000000403 ____C C:\WINDOWS\system32\dllcache\npdrmv2.zip
        2017-10-30 21:33 - 2007-04-02 23:21 - 000023195 ____C C:\WINDOWS\system32\dllcache\wmplay.chm
        2017-10-29 22:53 - 2017-10-29 22:53 - 000000000 ___HD C:\Program Files\WindowsUpdate
        2017-10-29 11:15 - 2008-08-21 14:00 - 000041600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\weitekp9.dll
        2017-10-29 11:15 - 2008-08-21 14:00 - 000031232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\weitekp9.sys
        2017-10-29 11:15 - 2008-08-21 14:00 - 000028288 ____C C:\WINDOWS\system32\dllcache\xjis.nls
        2017-10-29 11:15 - 2008-08-21 14:00 - 000009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wamps51.dll
        2017-10-29 11:15 - 2008-04-14 05:42 - 000116224 ____C (Xerox) C:\WINDOWS\system32\dllcache\xrxwiadr.dll
        2017-10-29 11:15 - 2008-04-14 05:42 - 000018944 ____C () C:\WINDOWS\system32\dllcache\xrxscnui.dll
        2017-10-29 11:15 - 2008-04-14 05:42 - 000008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wshirda.dll
        2017-10-29 11:15 - 2008-04-14 00:15 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wceusbsh.sys
        2017-10-29 11:15 - 2008-04-13 22:05 - 000154624 ____C (Lucent Technologies) C:\WINDOWS\system32\dllcache\wlluc48.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000033599 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\watv04nt.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000029311 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\watv01nt.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000023615 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wch7xxnt.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000019551 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\watv02nt.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000019455 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wvchntxx.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000012415 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wadv01nt.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000012127 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wadv02nt.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000012063 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wsiintxx.sys
        2017-10-29 11:15 - 2008-04-13 22:04 - 000011775 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\wadv05nt.sys
        2017-10-29 11:15 - 2001-08-17 22:37 - 000099865 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\xlog.exe
        2017-10-29 11:15 - 2001-08-17 22:37 - 000027648 ____C () C:\WINDOWS\system32\dllcache\xrxftplt.exe
        2017-10-29 11:15 - 2001-08-17 22:37 - 000004608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xrxflnch.exe
        2017-10-29 11:15 - 2001-08-17 22:36 - 000087040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wiafbdrv.dll
        2017-10-29 11:15 - 2001-08-17 22:36 - 000053760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wiamsmud.dll
        2017-10-29 11:15 - 2001-08-17 22:36 - 000023040 ____C (Xerox Corporation) C:\WINDOWS\system32\dllcache\xrxwbtmp.dll
        2017-10-29 11:15 - 2001-08-17 13:28 - 000771581 ____C (Rockwell) C:\WINDOWS\system32\dllcache\winacisa.sys
        2017-10-29 11:15 - 2001-08-17 13:28 - 000701386 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\wdhaalba.sys
        2017-10-29 11:15 - 2001-08-17 12:12 - 000034890 ____C (Raytheon Corp.) C:\WINDOWS\system32\dllcache\wlandrv2.sys
        2017-10-29 11:15 - 2001-08-17 12:11 - 000016970 ____C (US Robotics MCD (Megahertz)) C:\WINDOWS\system32\dllcache\xem336n5.sys
        2017-10-29 11:15 - 2001-08-17 12:10 - 000035871 ____C (Winbond Electronics Corp.) C:\WINDOWS\system32\dllcache\wbfirdma.sys
        2017-10-29 11:14 - 2008-08-21 14:00 - 000185344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\thawbrkr.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000143422 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\softkey.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000101376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srusbusd.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000073728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3ext.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000048256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w32.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000021896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdipx.sys
        2017-10-29 11:14 - 2008-08-21 14:00 - 000019464 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdspx.sys
        2017-10-29 11:14 - 2008-08-21 14:00 - 000016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\status.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tsprof.exe
        2017-10-29 11:14 - 2008-08-21 14:00 - 000013192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdasync.sys
        2017-10-29 11:14 - 2008-08-21 14:00 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpstup.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3svapi.dll
        2017-10-29 11:14 - 2008-08-21 14:00 - 000004608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3ctrs51.dll
        2017-10-29 11:14 - 2008-04-14 05:42 - 000082944 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\tp4mon.exe
        2017-10-29 11:14 - 2008-04-14 00:15 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbser.sys
        2017-10-29 11:14 - 2008-04-14 00:15 - 000020608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbuhci.sys
        2017-10-29 11:14 - 2008-04-14 00:10 - 000149376 ____C (M-Systems) C:\WINDOWS\system32\dllcache\tffsport.sys
        2017-10-29 11:14 - 2008-04-14 00:10 - 000007552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sonyait.sys
        2017-10-29 11:14 - 2008-04-14 00:10 - 000005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\viaide.sys
        2017-10-29 11:14 - 2008-04-13 22:05 - 000032384 ____C (KLSI USA, Inc.) C:\WINDOWS\system32\dllcache\usb101et.sys
        2017-10-29 11:14 - 2001-08-17 22:36 - 000525568 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tridxp.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000216064 ____C (UMAX Data Systems Inc.) C:\WINDOWS\system32\dllcache\um34scan.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000211968 ____C (UMAX Data Systems Inc.) C:\WINDOWS\system32\dllcache\um54scan.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000155648 ____C (Stallion Technologies) C:\WINDOWS\system32\dllcache\stlnprop.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000114688 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\sonypi.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000106584 ____C (Perle Systems Ltd.) C:\WINDOWS\system32\dllcache\spdports.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000099328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srusd.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000094720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxud32.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000094293 ____C (Perle Systems Ltd. ) C:\WINDOWS\system32\dllcache\sxports.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000069632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxu12.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000053760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sw_wheel.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000053248 ____C (Stallion Technologies) C:\WINDOWS\system32\dllcache\stlncoin.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000050688 ____C (UMAX DATA SYSTEMS INC.) C:\WINDOWS\system32\dllcache\umaxscan.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000050176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxp60.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000047616 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxcam.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000041472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sw_effct.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000031744 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\tp4.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000028160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxu40.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxu22.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000024660 ____C (Perle Systems Ltd.) C:\WINDOWS\system32\dllcache\spxupchk.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_smtpctrs.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\swpidflt.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\swpdflt2.dll
        2017-10-29 11:14 - 2001-08-17 22:36 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_snprfdll.dll
        2017-10-29 11:14 - 2001-08-17 22:35 - 000042496 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\tp4res.dll
        2017-10-29 11:14 - 2001-08-17 14:56 - 000440576 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tridkb.dll
        2017-10-29 11:14 - 2001-08-17 14:56 - 000315520 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\trid3d.dll
        2017-10-29 11:14 - 2001-08-17 14:56 - 000172768 ____C (Number Nine Visual Technology) C:\WINDOWS\system32\dllcache\t2r4disp.dll
        2017-10-29 11:14 - 2001-08-17 14:56 - 000081408 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tgiul50.dll
        2017-10-29 11:14 - 2001-08-17 14:07 - 000032640 ____C (LSI Logic) C:\WINDOWS\system32\dllcache\symc8xx.sys
        2017-10-29 11:14 - 2001-08-17 14:07 - 000030688 ____C (LSI Logic) C:\WINDOWS\system32\dllcache\sym_u3.sys
        2017-10-29 11:14 - 2001-08-17 14:07 - 000028384 ____C (LSI Logic) C:\WINDOWS\system32\dllcache\sym_hi.sys
        2017-10-29 11:14 - 2001-08-17 14:07 - 000019072 ____C (Adaptec, Inc.) C:\WINDOWS\system32\dllcache\sparrow.sys
        2017-10-29 11:14 - 2001-08-17 14:07 - 000016256 ____C (Symbios Logic Inc.) C:\WINDOWS\system32\dllcache\symc810.sys
        2017-10-29 11:14 - 2001-08-17 14:02 - 000230912 ____C (Toshiba Corporation) C:\WINDOWS\system32\dllcache\tosdvd03.sys
        2017-10-29 11:14 - 2001-08-17 14:02 - 000003968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\swusbflt.sys
        2017-10-29 11:14 - 2001-08-17 14:01 - 000241664 ____C (Toshiba Corporation) C:\WINDOWS\system32\dllcache\tosdvd02.sys
        2017-10-29 11:14 - 2001-08-17 13:58 - 000022912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\umaxpcls.sys
        2017-10-29 11:14 - 2001-08-17 13:56 - 000007552 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\sonypvu1.sys
        2017-10-29 11:14 - 2001-08-17 13:53 - 000009600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sonymc.sys
        2017-10-29 11:14 - 2001-08-17 13:53 - 000007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snyaitmc.sys
        2017-10-29 11:14 - 2001-08-17 13:52 - 000036736 ____C (Promise Technology, Inc.) C:\WINDOWS\system32\dllcache\ultra.sys
        2017-10-29 11:14 - 2001-08-17 13:52 - 000007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tandqic.sys
        2017-10-29 11:14 - 2001-08-17 13:51 - 000061824 ____C (Perle Systems Ltd.) C:\WINDOWS\system32\dllcache\speed.sys
        2017-10-29 11:14 - 2001-08-17 13:51 - 000016896 ____C (SCM Microsystems, Inc.) C:\WINDOWS\system32\dllcache\stcusb.sys
        2017-10-29 11:14 - 2001-08-17 13:51 - 000004992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\toside.sys
        2017-10-29 11:14 - 2001-08-17 13:50 - 000103936 ____C (Perle Systems Ltd. ) C:\WINDOWS\system32\dllcache\sx.sys
        2017-10-29 11:14 - 2001-08-17 13:49 - 000030464 ____C (Toshiba Corporation) C:\WINDOWS\system32\dllcache\tbatm155.sys
        2017-10-29 11:14 - 2001-08-17 13:49 - 000024576 ____C (VIA Technologies, Inc.) C:\WINDOWS\system32\dllcache\viairda.sys
        2017-10-29 11:14 - 2001-08-17 13:48 - 000011520 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\twotrack.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000794654 ____C (U.S. Robotics, Inc.) C:\WINDOWS\system32\dllcache\usr1801.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000794399 ____C (U.S. Robotics, Inc.) C:\WINDOWS\system32\dllcache\usr1806v.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000793598 ____C (U.S. Robotics, Inc.) C:\WINDOWS\system32\dllcache\usr1806.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000765884 ____C (U.S. Robotics, Inc.) C:\WINDOWS\system32\dllcache\usrti.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000687999 ____C (U.S. Robotics Corporation) C:\WINDOWS\system32\dllcache\usrwdxjs.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000604253 ____C (PCTEL, INC.) C:\WINDOWS\system32\dllcache\vmodem.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000397502 ____C (PCtel, Inc.) C:\WINDOWS\system32\dllcache\vpctcom.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000224802 ____C (U.S. Robotics Corporation) C:\WINDOWS\system32\dllcache\usr1807a.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000113762 ____C (U.S. Robotics Corporation) C:\WINDOWS\system32\dllcache\usrpda.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000064605 ____C (PCtel, Inc.) C:\WINDOWS\system32\dllcache\vvoice.sys
        2017-10-29 11:14 - 2001-08-17 13:28 - 000007556 ____C (U.S. Robotics Corporation) C:\WINDOWS\system32\dllcache\usroslba.sys
        2017-10-29 11:14 - 2001-08-17 12:51 - 000222336 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\trid3dm.sys
        2017-10-29 11:14 - 2001-08-17 12:51 - 000166784 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tridxpm.sys
        2017-10-29 11:14 - 2001-08-17 12:51 - 000159232 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tridkbm.sys
        2017-10-29 11:14 - 2001-08-17 12:51 - 000138528 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\tgiulnt5.sys
        2017-10-29 11:14 - 2001-08-17 12:51 - 000037040 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\sonypi.sys
        2017-10-29 11:14 - 2001-08-17 12:51 - 000020752 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\sonync.sys
        2017-10-29 11:14 - 2001-08-17 12:50 - 000036640 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\t2r4mini.sys
        2017-10-29 11:14 - 2001-08-17 12:18 - 000285760 ____C (Stallion Technologies) C:\WINDOWS\system32\dllcache\stlnata.sys
        2017-10-29 11:14 - 2001-08-17 12:14 - 000249402 ____C (Xircom) C:\WINDOWS\system32\dllcache\vinwm.sys
        2017-10-29 11:14 - 2001-08-17 12:14 - 000123995 ____C (Tiger Jet Network) C:\WINDOWS\system32\dllcache\tjisdn.sys
        2017-10-29 11:14 - 2001-08-17 12:13 - 000037961 ____C (TDK Corporation) C:\WINDOWS\system32\dllcache\tdk100b.sys
        2017-10-29 11:14 - 2001-08-17 12:13 - 000019528 ____C (Winbond Electronics Corporation) C:\WINDOWS\system32\dllcache\w840nd.sys
        2017-10-29 11:14 - 2001-08-17 12:13 - 000019016 ____C (Winbond Electronics Corporation) C:\WINDOWS\system32\dllcache\w926nd.sys
        2017-10-29 11:14 - 2001-08-17 12:13 - 000017129 ____C (TDK Corporation) C:\WINDOWS\system32\dllcache\tdkcd31.sys
        2017-10-29 11:14 - 2001-08-17 12:13 - 000016925 ____C (Winbond Electronics Corporation) C:\WINDOWS\system32\dllcache\w940nd.sys
        2017-10-29 11:14 - 2001-08-17 12:12 - 000034375 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\tpro4.sys
        2017-10-29 11:14 - 2001-08-17 12:11 - 000048736 ____C (3Com) C:\WINDOWS\system32\dllcache\srwlnd5.sys
        2017-10-29 11:14 - 2001-08-17 12:10 - 000028232 ____C (TOSHIBA Corporation) C:\WINDOWS\system32\dllcache\tos4mo.sys
        2017-10-29 11:13 - 2008-08-21 14:00 - 000038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm9aw.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smb6w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sma3w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm87w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm81w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000029184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8cw.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm93w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm92w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm90w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8dw.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8aw.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm89w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm59w.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\simptcp.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smierrsm.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smimsgif.dll
        2017-10-29 11:13 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smierrsy.dll
        2017-10-29 11:13 - 2008-04-14 00:06 - 000016000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smbbatt.sys
        2017-10-29 11:13 - 2008-04-14 00:06 - 000006912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smbclass.sys
        2017-10-29 11:13 - 2008-04-13 22:05 - 000063547 ____C (Symbol Technologies) C:\WINDOWS\system32\dllcache\sla30nd5.sys
        2017-10-29 11:13 - 2008-04-13 22:05 - 000032768 ____C (SiS Corporation) C:\WINDOWS\system32\dllcache\sisnic.sys
        2017-10-29 11:13 - 2001-08-17 22:36 - 000386560 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\sgiul50.dll
        2017-10-29 11:13 - 2001-08-17 22:36 - 000238592 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sisgrv.dll
        2017-10-29 11:13 - 2001-08-17 22:36 - 000045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smb3w.dll
        2017-10-29 11:13 - 2001-08-17 22:36 - 000033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smb0w.dll
        2017-10-29 11:13 - 2001-08-17 22:36 - 000028672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sma0w.dll
        2017-10-29 11:13 - 2001-08-17 22:36 - 000028160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm91w.dll
        2017-10-29 11:13 - 2001-08-17 22:36 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_seos.dll
        2017-10-29 11:13 - 2001-08-17 14:56 - 000252032 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sis300iv.dll
        2017-10-29 11:13 - 2001-08-17 14:56 - 000157696 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sisv256.dll
        2017-10-29 11:13 - 2001-08-17 14:56 - 000150144 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sis6306v.dll
        2017-10-29 11:13 - 2001-08-17 14:56 - 000147200 ____C (Silicon Motion Inc.) C:\WINDOWS\system32\dllcache\smidispb.dll
        2017-10-29 11:13 - 2001-08-17 13:57 - 000006784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smbhc.sys
        2017-10-29 11:13 - 2001-08-17 13:53 - 000006784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\serscan.sys
        2017-10-29 11:13 - 2001-08-17 13:48 - 000017664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sermouse.sys
        2017-10-29 11:13 - 2001-08-17 12:51 - 000098080 ____C (Trident Microsystems Inc.) C:\WINDOWS\system32\dllcache\sgiulnt5.sys
        2017-10-29 11:13 - 2001-08-17 12:51 - 000058368 ____C (Silicon Motion Inc.) C:\WINDOWS\system32\dllcache\smiminib.sys
        2017-10-29 11:13 - 2001-08-17 12:50 - 000104064 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sisgrp.sys
        2017-10-29 11:13 - 2001-08-17 12:50 - 000101760 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sis300ip.sys
        2017-10-29 11:13 - 2001-08-17 12:50 - 000068608 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sis6306p.sys
        2017-10-29 11:13 - 2001-08-17 12:50 - 000050432 ____C (Silicon Integrated Systems Corporation) C:\WINDOWS\system32\dllcache\sisv.sys
        2017-10-29 11:13 - 2001-08-17 12:19 - 000036480 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\sfmanm.sys
        2017-10-29 11:13 - 2001-08-17 12:12 - 000094698 ____C (SysKonnect GmbH.) C:\WINDOWS\system32\dllcache\sk98xwin.sys
        2017-10-29 11:13 - 2001-08-17 12:12 - 000091294 ____C (SysKonnect, a business unit of Schneider & Koch & Co. Datensysteme GmbH.) C:\WINDOWS\system32\dllcache\skfpwin.sys
        2017-10-29 11:13 - 2001-08-17 12:12 - 000025034 ____C (SMC Networks, Inc.) C:\WINDOWS\system32\dllcache\smcpwr2n.sys
        2017-10-29 11:13 - 2001-08-17 12:12 - 000024576 ____C (SMC Networks, Inc.) C:\WINDOWS\system32\dllcache\smc8000n.sys
        2017-10-29 11:13 - 2001-08-17 12:10 - 000035913 ____C (SMC) C:\WINDOWS\system32\dllcache\smcirda.sys
        2017-10-29 11:13 - 2001-07-21 14:29 - 000161568 ____C (Micro Systemation) C:\WINDOWS\system32\dllcache\sgsmusb.sys
        2017-10-29 11:13 - 2001-07-21 14:29 - 000018400 ____C (Micro Systemation) C:\WINDOWS\system32\dllcache\sgsmld.sys
        2017-10-29 11:12 - 2008-04-14 00:15 - 000011520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scsiscan.sys
        2017-10-29 11:12 - 2001-08-17 22:36 - 000057856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_scripto.dll
        2017-10-29 11:12 - 2001-08-17 13:53 - 000006912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\seaddsmc.sys
        2017-10-29 11:12 - 2001-08-17 13:52 - 000011648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scsiprnt.sys
        2017-10-29 11:11 - 2008-08-21 14:00 - 000131584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxviceo.dll
        2017-10-29 11:11 - 2008-08-21 14:00 - 000083748 ____C C:\WINDOWS\system32\dllcache\prcp.nls
        2017-10-29 11:11 - 2008-08-21 14:00 - 000083748 ____C C:\WINDOWS\system32\dllcache\prc.nls
        2017-10-29 11:11 - 2008-08-21 14:00 - 000079872 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia330.dll
        2017-10-29 11:11 - 2008-08-21 14:00 - 000079872 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia001.dll
        2017-10-29 11:11 - 2008-08-21 14:00 - 000020992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\permchk.dll
        2017-10-29 11:11 - 2008-08-21 14:00 - 000016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\quser.exe
        2017-10-29 11:11 - 2008-08-21 14:00 - 000014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\register.exe
        2017-10-29 11:11 - 2008-08-21 14:00 - 000011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxmcro.dll
        2017-10-29 11:11 - 2008-08-21 14:00 - 000009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\query.exe
        2017-10-29 11:11 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxgl.dll
        2017-10-29 11:11 - 2008-04-14 05:42 - 000363520 ____C C:\WINDOWS\system32\dllcache\psisdecd.dll
        2017-10-29 11:11 - 2008-04-14 05:42 - 000159232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ptpusd.dll
        2017-10-29 11:11 - 2008-04-14 05:42 - 000033280 ____C C:\WINDOWS\system32\dllcache\psisrndr.ax
        2017-10-29 11:11 - 2008-04-14 05:42 - 000029696 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rw450ext.dll
        2017-10-29 11:11 - 2008-04-14 05:42 - 000027648 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rw430ext.dll
        2017-10-29 11:11 - 2008-04-14 05:40 - 000259328 ____C (Microsoft Corp., 3Dlabs Inc. Ltd.) C:\WINDOWS\system32\dllcache\perm3dd.dll
        2017-10-29 11:11 - 2008-04-14 05:40 - 000211584 ____C (Microsoft Corp., 3Dlabs Inc. Ltd.) C:\WINDOWS\system32\dllcache\perm2dll.dll
        2017-10-29 11:11 - 2008-04-14 00:14 - 000028032 ____C (Microsoft Corp., 3Dlabs Inc. Ltd.) C:\WINDOWS\system32\dllcache\perm3.sys
        2017-10-29 11:11 - 2008-04-14 00:14 - 000027904 ____C (Microsoft Corp., 3Dlabs Inc. Ltd.) C:\WINDOWS\system32\dllcache\perm2.sys
        2017-10-29 11:11 - 2008-04-14 00:11 - 000017664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ppa3.sys
        2017-10-29 11:11 - 2008-04-14 00:10 - 000079104 ____C (Comtrol Corporation) C:\WINDOWS\system32\dllcache\rocket.sys
        2017-10-29 11:11 - 2008-04-14 00:10 - 000043904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sbp2port.sys
        2017-10-29 11:11 - 2008-04-14 00:10 - 000008832 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\powerfil.sys
        2017-10-29 11:11 - 2008-04-14 00:10 - 000006016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qic157.sys
        2017-10-29 11:11 - 2008-04-13 22:05 - 000020992 ____C (Realtek Semiconductor Corporation) C:\WINDOWS\system32\dllcache\rtl8139.sys
        2017-10-29 11:11 - 2008-04-13 21:42 - 000169984 ____C (Cisco Systems) C:\WINDOWS\system32\dllcache\pcx500.sys
        2017-10-29 11:11 - 2001-08-17 22:37 - 000105984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\phdsext.ax
        2017-10-29 11:11 - 2001-08-17 22:36 - 000495616 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\sblfx.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000121344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\phvfwext.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000086097 ____C (Xircom) C:\WINDOWS\system32\dllcache\reslog32.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000086016 ____C (PCtel, Inc.) C:\WINDOWS\system32\dllcache\pctspk.exe
        2017-10-29 11:11 - 2001-08-17 22:36 - 000082432 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia450.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000079872 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia430.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000062496 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3mtrio.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000041472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qvusd.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000035328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\psisload.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000023040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_regtrace.exe
        2017-10-29 11:11 - 2001-08-17 22:36 - 000016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\philcam1.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000009216 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\rsmgrstr.dll
        2017-10-29 11:11 - 2001-08-17 22:36 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ptpusb.dll
        2017-10-29 11:11 - 2001-08-17 14:56 - 000245632 ____C (S3 Graphics, Inc.) C:\WINDOWS\system32\dllcache\s3savmx.dll
        2017-10-29 11:11 - 2001-08-17 14:56 - 000210496 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3mvirge.dll
        2017-10-29 11:11 - 2001-08-17 14:56 - 000198400 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3sav4.dll
        2017-10-29 11:11 - 2001-08-17 14:56 - 000182272 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3mt3d.dll
        2017-10-29 11:11 - 2001-08-17 14:56 - 000179264 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3sav3d.dll
        2017-10-29 11:11 - 2001-08-17 14:07 - 000027296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\perc2.sys
        2017-10-29 11:11 - 2001-08-17 14:07 - 000019840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\philtune.sys
        2017-10-29 11:11 - 2001-08-17 14:07 - 000005504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\perc2hib.sys
        2017-10-29 11:11 - 2001-08-17 14:04 - 000173696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\philcam2.sys
        2017-10-29 11:11 - 2001-08-17 14:04 - 000092416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\phildec.sys
        2017-10-29 11:11 - 2001-08-17 14:04 - 000075776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\philcam1.sys
        2017-10-29 11:11 - 2001-08-17 13:57 - 000065664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\s3legacy.sys
        2017-10-29 11:11 - 2001-08-17 13:53 - 000017792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ppa.sys
        2017-10-29 11:11 - 2001-08-17 13:53 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pnrmc.sys
        2017-10-29 11:11 - 2001-08-17 13:53 - 000003328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qv2kux.sys
        2017-10-29 11:11 - 2001-08-17 13:52 - 000049024 ____C (QLogic Corporation) C:\WINDOWS\system32\dllcache\ql1280.sys
        2017-10-29 11:11 - 2001-08-17 13:52 - 000045312 ____C (QLogic Corporation) C:\WINDOWS\system32\dllcache\ql12160.sys
        2017-10-29 11:11 - 2001-08-17 13:52 - 000040448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ql1240.sys
        2017-10-29 11:11 - 2001-08-17 13:52 - 000040320 ____C (QLogic Corporation) C:\WINDOWS\system32\dllcache\ql1080.sys
        2017-10-29 11:11 - 2001-08-17 13:52 - 000033152 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ql10wnt.sys
        2017-10-29 11:11 - 2001-08-17 13:51 - 000023936 ____C (OMNIKEY AG) C:\WINDOWS\system32\dllcache\sccmusbm.sys
        2017-10-29 11:11 - 2001-08-17 13:51 - 000023936 ____C (OMNIKEY AG) C:\WINDOWS\system32\dllcache\sccmn50m.sys
        2017-10-29 11:11 - 2001-08-17 13:51 - 000019584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rasirda.sys
        2017-10-29 11:11 - 2001-08-17 13:51 - 000017280 ____C (SCM Microsystems) C:\WINDOWS\system32\dllcache\scr111.sys
        2017-10-29 11:11 - 2001-08-17 13:51 - 000016640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scmstcs.sys
        2017-10-29 11:11 - 2001-08-17 13:51 - 000016128 ____C (SCM Microsystems, Inc.) C:\WINDOWS\system32\dllcache\pscr.sys
        2017-10-29 11:11 - 2001-08-17 13:28 - 000899146 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\r2mdkxga.sys
        2017-10-29 11:11 - 2001-08-17 13:28 - 000714762 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\r2mdmkxx.sys
        2017-10-29 11:11 - 2001-08-17 13:28 - 000130942 ____C (PCTEL, INC.) C:\WINDOWS\system32\dllcache\ptserlv.sys
        2017-10-29 11:11 - 2001-08-17 13:28 - 000128286 ____C (PCTEL, INC.) C:\WINDOWS\system32\dllcache\ptserli.sys
        2017-10-29 11:11 - 2001-08-17 13:28 - 000112574 ____C (PCTEL, INC.) C:\WINDOWS\system32\dllcache\ptserlp.sys
        2017-10-29 11:11 - 2001-08-17 12:50 - 000166720 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3m.sys
        2017-10-29 11:11 - 2001-08-17 12:50 - 000077824 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3sav4m.sys
        2017-10-29 11:11 - 2001-08-17 12:50 - 000075392 ____C (S3 Graphics, Inc.) C:\WINDOWS\system32\dllcache\s3savmxm.sys
        2017-10-29 11:11 - 2001-08-17 12:50 - 000061504 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3sav3dm.sys
        2017-10-29 11:11 - 2001-08-17 12:50 - 000041216 ____C (S3 Incorporated) C:\WINDOWS\system32\dllcache\s3mt3d.sys
        2017-10-29 11:11 - 2001-08-17 12:19 - 000030720 ____C (Conexant Systems Inc.) C:\WINDOWS\system32\dllcache\rthwcls.sys
        2017-10-29 11:11 - 2001-08-17 12:19 - 000003840 ____C (Conexant Systems Inc.) C:\WINDOWS\system32\dllcache\rpfun.sys
        2017-10-29 11:11 - 2001-08-17 12:12 - 000037563 ____C (RadioLAN) C:\WINDOWS\system32\dllcache\rlnet5.sys
        2017-10-29 11:11 - 2001-08-17 12:12 - 000026153 ____C (Linksys) C:\WINDOWS\system32\dllcache\pcmlm56.sys
        2017-10-29 11:11 - 2001-08-17 12:12 - 000019017 ____C (Realtek Semiconductor Corporation) C:\WINDOWS\system32\dllcache\rtl8029.sys
        2017-10-29 11:11 - 2001-08-17 12:11 - 000035328 ____C (AMD Inc.) C:\WINDOWS\system32\dllcache\pcntpci5.sys
        2017-10-29 11:11 - 2001-08-17 12:11 - 000030282 ____C (AMD Inc.) C:\WINDOWS\system32\dllcache\pcntn5hl.sys
        2017-10-29 11:11 - 2001-08-17 12:11 - 000029769 ____C (AMD Inc.) C:\WINDOWS\system32\dllcache\pcntn5m.sys
        2017-10-29 11:10 - 2008-08-21 14:00 - 000053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nextlink.dll
        2017-10-29 11:10 - 2008-08-21 14:00 - 000036927 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs411.dll
        2017-10-29 11:10 - 2008-08-21 14:00 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pagecnt.dll
        2017-10-29 11:10 - 2008-08-21 14:00 - 000014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs412.dll
        2017-10-29 11:10 - 2008-04-14 00:24 - 000028672 ____C (National Semiconductor Corporation) C:\WINDOWS\system32\dllcache\nscirda.sys
        2017-10-29 11:10 - 2008-04-13 22:05 - 000132695 ____C (802.11b) C:\WINDOWS\system32\dllcache\netwlan5.sys
        2017-10-29 11:10 - 2008-04-13 22:05 - 000029502 ____C (Marconi Communications, Inc.) C:\WINDOWS\system32\dllcache\pca200e.sys
        2017-10-29 11:10 - 2001-08-17 22:36 - 000123776 ____C (NVIDIA Corporation) C:\WINDOWS\system32\dllcache\nv3.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000116736 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcodec2.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000060480 ____C (NeoMagic Corporation) C:\WINDOWS\system32\dllcache\neo20xx.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000059104 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i128v2.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000044544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovui2.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000041984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovui2rc.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000039424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcoms.exe
        2017-10-29 11:10 - 2001-08-17 22:36 - 000038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_ntfsdrv.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcomc.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000019968 ____C (Moxa Technologies Co., Ltd) C:\WINDOWS\system32\dllcache\mxicfg.dll
        2017-10-29 11:10 - 2001-08-17 22:36 - 000007168 ____C (Moxa Technologies Co., Ltd) C:\WINDOWS\system32\dllcache\mxport.dll
        2017-10-29 11:10 - 2001-08-17 14:56 - 000091488 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i3disp.dll
        2017-10-29 11:10 - 2001-08-17 14:56 - 000035392 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i128.dll
        2017-10-29 11:10 - 2001-08-17 14:05 - 000351616 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcodek2.sys
        2017-10-29 11:10 - 2001-08-17 14:05 - 000048000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcam2.sys
        2017-10-29 11:10 - 2001-08-17 14:05 - 000031872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovce.sys
        2017-10-29 11:10 - 2001-08-17 14:05 - 000028032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovcd.sys
        2017-10-29 11:10 - 2001-08-17 14:05 - 000025216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovsound2.sys
        2017-10-29 11:10 - 2001-08-17 14:05 - 000025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ovca.sys
        2017-10-29 11:10 - 2001-08-17 13:53 - 000007552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nsmmc.sys
        2017-10-29 11:10 - 2001-08-17 13:50 - 000075520 ____C (Moxa Technologies Co., Ltd.) C:\WINDOWS\system32\dllcache\mxport.sys
        2017-10-29 11:10 - 2001-08-17 13:49 - 000019968 ____C (Macronix International Co., Ltd. ) C:\WINDOWS\system32\dllcache\mxnic.sys
        2017-10-29 11:10 - 2001-08-17 13:49 - 000015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ne2000.sys
        2017-10-29 11:10 - 2001-08-17 13:47 - 000009344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntapm.sys
        2017-10-29 11:10 - 2001-08-17 13:28 - 000054186 ____C (Ositech Communications, Inc.) C:\WINDOWS\system32\dllcache\otcsercb.sys
        2017-10-29 11:10 - 2001-08-17 12:50 - 000198144 ____C (NVIDIA Corporation) C:\WINDOWS\system32\dllcache\nv3.sys
        2017-10-29 11:10 - 2001-08-17 12:50 - 000039264 ____C (NeoMagic Corporation) C:\WINDOWS\system32\dllcache\neo20xx.sys
        2017-10-29 11:10 - 2001-08-17 12:50 - 000033088 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i128v2.sys
        2017-10-29 11:10 - 2001-08-17 12:50 - 000027936 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i3d.sys
        2017-10-29 11:10 - 2001-08-17 12:50 - 000013664 ____C (Number Nine Visual Technology Corp.) C:\WINDOWS\system32\dllcache\n9i128.sys
        2017-10-29 11:10 - 2001-08-17 12:49 - 000051552 ____C (Kensington Technology Group) C:\WINDOWS\system32\dllcache\ntgrip.sys
        2017-10-29 11:10 - 2001-08-17 12:20 - 000126080 ____C (NeoMagic Corporation) C:\WINDOWS\system32\dllcache\nm5a2wdm.sys
        2017-10-29 11:10 - 2001-08-17 12:20 - 000087040 ____C (NeoMagic Corporation) C:\WINDOWS\system32\dllcache\nm6wdm.sys
        2017-10-29 11:10 - 2001-08-17 12:20 - 000054528 ____C (Yamaha Corp.) C:\WINDOWS\system32\dllcache\opl3sax.sys
        2017-10-29 11:10 - 2001-08-17 12:12 - 000043689 ____C (Ositech Communications, Inc.) C:\WINDOWS\system32\dllcache\otceth5.sys
        2017-10-29 11:10 - 2001-08-17 12:12 - 000032840 ____C (NETGEAR Corporation.) C:\WINDOWS\system32\dllcache\ngrpci.sys
        2017-10-29 11:10 - 2001-08-17 12:12 - 000030495 ____C (Linksys) C:\WINDOWS\system32\dllcache\pc100nds.sys
        2017-10-29 11:10 - 2001-08-17 12:12 - 000027209 ____C (Ositech Communications, Inc.) C:\WINDOWS\system32\dllcache\otc06x5.sys
        2017-10-29 11:10 - 2001-08-17 12:11 - 000128000 ____C (Compaq Computer Corporation) C:\WINDOWS\system32\dllcache\n100325.sys
        2017-10-29 11:10 - 2001-08-17 12:11 - 000065278 ____C (Compaq Computer Corporation) C:\WINDOWS\system32\dllcache\netflx3.sys
        2017-10-29 11:10 - 2001-08-17 12:11 - 000052255 ____C (Compaq Computer Corporation) C:\WINDOWS\system32\dllcache\n1000nt5.sys
        2017-10-29 11:09 - 2008-08-21 14:00 - 001875968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msir3jp.lex
        2017-10-29 11:09 - 2008-08-21 14:00 - 000229439 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\multibox.dll
        2017-10-29 11:09 - 2008-08-21 14:00 - 000098304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msir3jp.dll
        2017-10-29 11:09 - 2008-08-21 14:00 - 000092416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mga.sys
        2017-10-29 11:09 - 2008-08-21 14:00 - 000092032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mga.dll
        2017-10-29 11:09 - 2008-08-21 14:00 - 000034304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\migisol.exe
        2017-10-29 11:09 - 2008-08-21 14:00 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mdsync.dll
        2017-10-29 11:09 - 2008-08-21 14:00 - 000022016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\logscrpt.dll
        2017-10-29 11:09 - 2008-04-14 05:42 - 000056832 ____C C:\WINDOWS\system32\dllcache\msdvbnp.ax
        2017-10-29 11:09 - 2008-04-14 00:24 - 000022016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msircomm.sys
        2017-10-29 11:09 - 2008-04-14 00:16 - 000051200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdv.sys
        2017-10-29 11:09 - 2008-04-14 00:16 - 000049024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstape.sys
        2017-10-29 11:09 - 2008-04-14 00:16 - 000015232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mpe.sys
        2017-10-29 11:09 - 2008-04-14 00:11 - 000026112 ____C (Sony Corporation) C:\WINDOWS\system32\dllcache\memstpci.sys
        2017-10-29 11:09 - 2008-04-14 00:10 - 000034688 ____C (Toshiba Corp.) C:\WINDOWS\system32\dllcache\lbrtfdc.sys
        2017-10-29 11:09 - 2008-04-14 00:10 - 000007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ltotape.sys
        2017-10-29 11:09 - 2008-04-13 23:53 - 000606684 ____C (LT) C:\WINDOWS\system32\dllcache\ltmdmnt.sys
        2017-10-29 11:09 - 2008-04-13 23:53 - 000420992 ____C (LT) C:\WINDOWS\system32\dllcache\ltmdmntt.sys
        2017-10-29 11:09 - 2008-04-13 22:09 - 000020864 ____C (Logitech Inc.) C:\WINDOWS\system32\dllcache\lwadihid.sys
        2017-10-29 11:09 - 2001-08-17 22:36 - 000065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_mailmsg.dll
        2017-10-29 11:09 - 2001-08-17 22:36 - 000058880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\m3092dc.dll
        2017-10-29 11:09 - 2001-08-17 22:36 - 000058368 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\m3091dc.dll
        2017-10-29 11:09 - 2001-08-17 22:36 - 000047616 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\memgrp.dll
        2017-10-29 11:09 - 2001-08-17 14:56 - 000235648 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\mgaud.dll
        2017-10-29 11:09 - 2001-08-17 14:02 - 000035200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msgame.sys
        2017-10-29 11:09 - 2001-08-17 14:00 - 000002944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msmpu401.sys
        2017-10-29 11:09 - 2001-08-17 13:58 - 000008320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\memcard.sys
        2017-10-29 11:09 - 2001-08-17 13:57 - 000016128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\modemcsa.sys
        2017-10-29 11:09 - 2001-08-17 13:53 - 000004992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\loop.sys
        2017-10-29 11:09 - 2001-08-17 13:52 - 000017280 ____C (American Megatrends Inc.) C:\WINDOWS\system32\dllcache\mraid35x.sys
        2017-10-29 11:09 - 2001-08-17 13:52 - 000007424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mammoth.sys
        2017-10-29 11:09 - 2001-08-17 13:52 - 000006528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\miniqic.sys
        2017-10-29 11:09 - 2001-08-17 13:51 - 000015744 ____C (Litronic Industries) C:\WINDOWS\system32\dllcache\lit220p.sys
        2017-10-29 11:09 - 2001-08-17 13:50 - 000021888 ____C (Moxa Technologies Co., Ltd.) C:\WINDOWS\system32\dllcache\mxcard.sys
        2017-10-29 11:09 - 2001-08-17 13:48 - 000012416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msriffwv.sys
        2017-10-29 11:09 - 2001-08-17 13:48 - 000006016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfsio.sys
        2017-10-29 11:09 - 2001-08-17 13:28 - 000802683 ____C (Lucent Technologies) C:\WINDOWS\system32\dllcache\ltsm.sys
        2017-10-29 11:09 - 2001-08-17 13:28 - 000797500 ____C (LT) C:\WINDOWS\system32\dllcache\ltsmt.sys
        2017-10-29 11:09 - 2001-08-17 13:28 - 000727786 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\ltck000c.sys
        2017-10-29 11:09 - 2001-08-17 13:28 - 000576746 ____C (LT) C:\WINDOWS\system32\dllcache\ltmdmntl.sys
        2017-10-29 11:09 - 2001-08-17 12:50 - 000320384 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\mgaum.sys
        2017-10-29 11:09 - 2001-08-17 12:50 - 000103296 ____C (Matrox Graphics Inc) C:\WINDOWS\system32\dllcache\mtxvideo.sys
        2017-10-29 11:09 - 2001-08-17 12:49 - 000022848 ____C (Logitech Inc.) C:\WINDOWS\system32\dllcache\lwusbhid.sys
        2017-10-29 11:09 - 2001-08-17 12:19 - 000048768 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\maestro.sys
        2017-10-29 11:09 - 2001-08-17 12:12 - 000164586 ____C (Madge Networks Ltd) C:\WINDOWS\system32\dllcache\mdgndis5.sys
        2017-10-29 11:09 - 2001-08-17 12:12 - 000070730 ____C (Linksys Group, Inc.) C:\WINDOWS\system32\dllcache\lne100tx.sys
        2017-10-29 11:09 - 2001-08-17 12:12 - 000026442 ____C (SMSC) C:\WINDOWS\system32\dllcache\lanepic5.sys
        2017-10-29 11:09 - 2001-08-17 12:12 - 000020573 ____C (The Linksts Group ) C:\WINDOWS\system32\dllcache\lne100.sys
        2017-10-29 11:09 - 2001-08-17 12:12 - 000019016 ____C (Kingston Technology Company ) C:\WINDOWS\system32\dllcache\ktc111.sys
        2017-10-29 11:09 - 2001-08-17 12:11 - 000025065 ____C (D-Link) C:\WINDOWS\system32\dllcache\lmndis3.sys
        2017-10-29 11:08 - 2008-08-21 14:00 - 010129408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hwxkor.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 010096640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hwxcht.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 001158818 ____C C:\WINDOWS\system32\dllcache\korwbrkr.lex
        2017-10-29 11:08 - 2008-08-21 14:00 - 000471102 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imskdic.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000311359 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imepadsv.exe
        2017-10-29 11:08 - 2008-08-21 14:00 - 000134339 ____C C:\WINDOWS\system32\dllcache\imekr.lex
        2017-10-29 11:08 - 2008-08-21 14:00 - 000102463 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imepadsm.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000070656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\korwbrkr.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000060928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisclex4.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000059904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imkrinst.exe
        2017-10-29 11:08 - 2008-08-21 14:00 - 000057398 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdadm.exe
        2017-10-29 11:08 - 2008-08-21 14:00 - 000047066 ____C C:\WINDOWS\system32\dllcache\ksc.nls
        2017-10-29 11:08 - 2008-08-21 14:00 - 000045109 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpuex.exe
        2017-10-29 11:08 - 2008-08-21 14:00 - 000044032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekrmig.exe
        2017-10-29 11:08 - 2008-08-21 14:00 - 000019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iiscrmap.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jupiw.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnecat.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iwrps.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\infoctrs.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnecnt.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnec95.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\isapips.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iissync.exe
        2017-10-29 11:08 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth3.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth2.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinpun.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101a.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdvntc.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdusa.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdurdu.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth1.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth0.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsyr2.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsyr1.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdintel.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdintam.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinmar.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinkan.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinhin.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinguj.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdindev.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdheb.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdfa.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbddiv2.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbddiv1.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda3.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda2.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda1.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdgeo.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdarmw.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdarme.dll
        2017-10-29 11:08 - 2008-08-21 14:00 - 000003584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iismui.dll
        2017-10-29 11:08 - 2008-04-14 05:42 - 000151552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irftp.exe
        2017-10-29 11:08 - 2008-04-14 05:41 - 000702845 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\i81xdnt5.dll
        2017-10-29 11:08 - 2008-04-14 05:41 - 000253952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kdsusd.dll
        2017-10-29 11:08 - 2008-04-14 05:41 - 000048640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kdsui.dll
        2017-10-29 11:08 - 2008-04-14 05:41 - 000028160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irmon.dll
        2017-10-29 11:08 - 2008-04-14 05:39 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd106.dll
        2017-10-29 11:08 - 2008-04-14 00:24 - 000088192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irda.sys
        2017-10-29 11:08 - 2008-04-14 00:11 - 000018560 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\i2omp.sys
        2017-10-29 11:08 - 2008-04-14 00:11 - 000008576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\i2omgmt.sys
        2017-10-29 11:08 - 2008-04-14 00:10 - 000005504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\intelide.sys
        2017-10-29 11:08 - 2008-04-13 22:04 - 000161020 ____C (Intel(R) Corporation) C:\WINDOWS\system32\dllcache\i81xnt5.sys
        2017-10-29 11:08 - 2001-08-17 22:36 - 000372824 ____C (Xircom) C:\WINDOWS\system32\dllcache\iconf32.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000091136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam4com.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000090200 ____C (Perle Systems Ltd. ) C:\WINDOWS\system32\dllcache\io8ports.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000061952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam4ext.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000045056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam5com.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kousd.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam3ext.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam5ext.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdjpn.dll
        2017-10-29 11:08 - 2001-08-17 22:36 - 000008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdkor.dll
        2017-10-29 11:08 - 2001-08-17 22:34 - 000009216 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\ibmsgnet.dll
        2017-10-29 11:08 - 2001-08-17 14:56 - 000353184 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\i740dnt5.dll
        2017-10-29 11:08 - 2001-08-17 14:55 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101c.dll
        2017-10-29 11:08 - 2001-08-17 14:55 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101b.dll
        2017-10-29 11:08 - 2001-08-17 14:55 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd103.dll
        2017-10-29 11:08 - 2001-08-17 14:06 - 000154496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam4usb.sys
        2017-10-29 11:08 - 2001-08-17 14:06 - 000100992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam5usb.sys
        2017-10-29 11:08 - 2001-08-17 14:06 - 000038528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ibmvcap.sys
        2017-10-29 11:08 - 2001-08-17 14:05 - 000141056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icam3.sys
        2017-10-29 11:08 - 2001-08-17 13:52 - 000016000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ini910u.sys
        2017-10-29 11:08 - 2001-08-17 13:51 - 000018688 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irsir.sys
        2017-10-29 11:08 - 2001-08-17 13:50 - 000038784 ____C (Perle Systems Ltd. ) C:\WINDOWS\system32\dllcache\io8.sys
        2017-10-29 11:08 - 2001-08-17 13:49 - 000026624 ____C (SigmaTel, Inc.) C:\WINDOWS\system32\dllcache\irstusb.sys
        2017-10-29 11:08 - 2001-08-17 13:49 - 000023552 ____C (MKNet Corporation) C:\WINDOWS\system32\dllcache\irmk7.sys
        2017-10-29 11:08 - 2001-08-17 13:47 - 000013056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inport.sys
        2017-10-29 11:08 - 2001-08-17 12:49 - 000058592 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\i740nt5.sys
        2017-10-29 11:08 - 2001-08-17 12:12 - 000109085 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\ibmtrp.sys
        2017-10-29 11:08 - 2001-08-17 12:12 - 000100936 ____C (IBM Corporation) C:\WINDOWS\system32\dllcache\ibmtok.sys
        2017-10-29 11:08 - 2001-08-17 12:12 - 000045632 ____C (Interphase (R) Corporation a Windows (R) 2000 DDK Driver Provider) C:\WINDOWS\system32\dllcache\ip5515.sys
        2017-10-29 11:08 - 2001-08-17 12:11 - 000028700 ____C (IBM Corp.) C:\WINDOWS\system32\dllcache\ibmexmp.sys
        2017-10-29 11:07 - 2008-08-21 14:00 - 000132608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsclntr.dll
        2017-10-29 11:07 - 2008-08-21 14:00 - 000111104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscfgwz.dll
        2017-10-29 11:07 - 2008-08-21 14:00 - 000108827 ____C C:\WINDOWS\system32\dllcache\hanja.lex
        2017-10-29 11:07 - 2008-08-21 14:00 - 000036864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hanjadic.dll
        2017-10-29 11:07 - 2008-08-21 14:00 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsroute.dll
        2017-10-29 11:07 - 2008-08-21 14:00 - 000014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\flattemp.exe
        2017-10-29 11:07 - 2008-08-21 14:00 - 000011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxssend.exe
        2017-10-29 11:07 - 2008-08-21 14:00 - 000007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpctrs2.dll
        2017-10-29 11:07 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftlx041e.dll
        2017-10-29 11:07 - 2008-04-14 00:15 - 000059136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\gckernel.sys
        2017-10-29 11:07 - 2008-04-14 00:15 - 000010624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\gameenum.sys
        2017-10-29 11:07 - 2008-04-14 00:10 - 000028288 ____C (Gemplus) C:\WINDOWS\system32\dllcache\grserial.sys
        2017-10-29 11:07 - 2008-04-14 00:06 - 000020352 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidbatt.sys
        2017-10-29 11:07 - 2008-04-13 22:05 - 000034173 ____C (Marconi Communications, Inc.) C:\WINDOWS\system32\dllcache\forehe.sys
        2017-10-29 11:07 - 2001-08-17 22:36 - 000324608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpojwia.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000165888 ____C () C:\WINDOWS\system32\dllcache\hpgt53.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000126976 ____C (Hewlett Packard) C:\WINDOWS\system32\dllcache\hpgt34tk.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000123392 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpgt21tk.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000119296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpdigwia.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000101376 ____C () C:\WINDOWS\system32\dllcache\hpgt34.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000093696 ____C () C:\WINDOWS\system32\dllcache\hpgt42.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000092160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fuusd.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000089088 ____C () C:\WINDOWS\system32\dllcache\hpgt33.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000083968 ____C () C:\WINDOWS\system32\dllcache\hpgt21.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000071680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fnfilter.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000068608 ____C (Avisioin) C:\WINDOWS\system32\dllcache\hpgt53tk.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000048128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpgt33tk.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_fcachdll.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000032768 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpgtmcro.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000031232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpgt42tk.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hr1w.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpsjmcro.dll
        2017-10-29 11:07 - 2001-08-17 22:36 - 000009759 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_inst.dll
        2017-10-29 11:07 - 2001-08-17 14:56 - 001733120 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\g400d.dll
        2017-10-29 11:07 - 2001-08-17 14:56 - 000470144 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\g200d.dll
        2017-10-29 11:07 - 2001-08-17 14:07 - 000025952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpn.sys
        2017-10-29 11:07 - 2001-08-17 14:02 - 000008576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidgame.sys
        2017-10-29 11:07 - 2001-08-17 14:02 - 000002688 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidswvd.sys
        2017-10-29 11:07 - 2001-08-17 13:52 - 000005760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hpt4qic.sys
        2017-10-29 11:07 - 2001-08-17 13:51 - 000082304 ____C (Gemplus) C:\WINDOWS\system32\dllcache\grclass.sys
        2017-10-29 11:07 - 2001-08-17 13:51 - 000017408 ____C (Gemplus) C:\WINDOWS\system32\dllcache\gpr400.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000907456 ____C (Conexant) C:\WINDOWS\system32\dllcache\hcf_msft.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000542879 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_msft.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000488383 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_v124.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000391199 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_k56k.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000289887 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_fall.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000199711 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_faxx.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000150239 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_amos.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000115807 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_fsks.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000073279 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_spkp.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000067167 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_bsc2.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000057471 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_samp.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000050751 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_tone.sys
        2017-10-29 11:07 - 2001-08-17 13:28 - 000044863 ____C (Conexant) C:\WINDOWS\system32\dllcache\hsf_soar.sys
        2017-10-29 11:07 - 2001-08-17 12:49 - 000322432 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\g400m.sys
        2017-10-29 11:07 - 2001-08-17 12:49 - 000320384 ____C (Matrox Graphics Inc.) C:\WINDOWS\system32\dllcache\g200m.sys
        2017-10-29 11:07 - 2001-08-17 12:15 - 000455680 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fus2base.sys
        2017-10-29 11:07 - 2001-08-17 12:15 - 000455296 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fusbbase.sys
        2017-10-29 11:07 - 2001-08-17 12:15 - 000454912 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fxusbase.sys
        2017-10-29 11:07 - 2001-08-17 12:15 - 000442240 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fpnpbase.sys
        2017-10-29 11:07 - 2001-08-17 12:14 - 000444416 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fpcibase.sys
        2017-10-29 11:07 - 2001-08-17 12:14 - 000441728 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\fpcmbase.sys
        2017-10-29 11:07 - 2001-08-17 12:13 - 000027165 ____C (VIA Technologies, Inc. ) C:\WINDOWS\system32\dllcache\fetnd5.sys
        2017-10-29 11:07 - 2001-08-17 12:10 - 000022090 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\fem556n5.sys
        2017-10-29 11:06 - 2008-08-21 14:00 - 000514587 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\edb500.dll
        2017-10-29 11:06 - 2008-08-21 14:00 - 000057856 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esuimgd.dll
        2017-10-29 11:06 - 2008-08-21 14:00 - 000045056 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esunid.dll
        2017-10-29 11:06 - 2008-08-21 14:00 - 000031744 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esucmd.dll
        2017-10-29 11:06 - 2008-08-21 14:00 - 000025856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\et4000.sys
        2017-10-29 11:06 - 2008-04-14 00:10 - 000008320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dlttape.sys
        2017-10-29 11:06 - 2008-04-14 00:09 - 000206976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dot4.sys
        2017-10-29 11:06 - 2008-04-13 22:06 - 000137088 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\essm2e.sys
        2017-10-29 11:06 - 2001-08-17 22:36 - 000614429 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiview.exe
        2017-10-29 11:06 - 2001-08-17 22:36 - 000419357 ____C (Digi International) C:\WINDOWS\system32\dllcache\dgconfig.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000256512 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\devcon32.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000236060 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\ditrace.exe
        2017-10-29 11:06 - 2001-08-17 22:36 - 000229462 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digifwrk.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000159828 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digihlc.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000131156 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digidbp.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000110621 ____C (Digi International, Inc.) C:\WINDOWS\system32\dllcache\digirlpt.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000110592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dc260usd.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000102484 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiinf.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000086016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dc240usd.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000080896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dc210usd.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000065622 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiasyn.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000061952 ____C (Equinox Systems Inc.) C:\WINDOWS\system32\dllcache\eqnloop.exe
        2017-10-29 11:06 - 2001-08-17 22:36 - 000053248 ____C (Equinox Systems Inc.) C:\WINDOWS\system32\dllcache\eqndiag.exe
        2017-10-29 11:06 - 2001-08-17 22:36 - 000051200 ____C (Equinox Systems Inc.) C:\WINDOWS\system32\dllcache\eqnlogr.exe
        2017-10-29 11:06 - 2001-08-17 22:36 - 000045568 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esunib.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000045568 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esuni.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000043008 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esucm.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000041046 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiisdn.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000038985 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\disrvsu.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000037962 ____C C:\WINDOWS\system32\dllcache\divaprop.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000034816 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esuimg.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000031305 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\disrvpp.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000029768 ____C C:\WINDOWS\system32\dllcache\divasu.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000025600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dc210_32.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000024064 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\devldr32.exe
        2017-10-29 11:06 - 2001-08-17 22:36 - 000006729 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\disrvci.dll
        2017-10-29 11:06 - 2001-08-17 22:36 - 000006216 ____C C:\WINDOWS\system32\dllcache\divaci.dll
        2017-10-29 11:06 - 2001-08-17 14:07 - 000020192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dpti2o.sys
        2017-10-29 11:06 - 2001-08-17 13:53 - 000007296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\elmsmc.sys
        2017-10-29 11:06 - 2001-08-17 13:52 - 000007424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ddsmc.sys
        2017-10-29 11:06 - 2001-08-17 13:52 - 000007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\exabyte2.sys
        2017-10-29 11:06 - 2001-08-17 13:50 - 000144896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\epcfw2k.sys
        2017-10-29 11:06 - 2001-08-17 13:50 - 000114944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\epstw2k.sys
        2017-10-29 11:06 - 2001-08-17 13:47 - 000023808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dot4usb.sys
        2017-10-29 11:06 - 2001-08-17 13:47 - 000012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dot4prt.sys
        2017-10-29 11:06 - 2001-08-17 13:47 - 000008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dot4scan.sys
        2017-10-29 11:06 - 2001-08-17 13:28 - 000634134 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el656ct5.sys
        2017-10-29 11:06 - 2001-08-17 13:28 - 000595647 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\es56cvmp.sys
        2017-10-29 11:06 - 2001-08-17 13:28 - 000594238 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\es56hpi.sys
        2017-10-29 11:06 - 2001-08-17 13:28 - 000347550 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\es56tpi.sys
        2017-10-29 11:06 - 2001-08-17 13:28 - 000241206 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el656se5.sys
        2017-10-29 11:06 - 2001-08-17 12:20 - 000334208 ____C (Yamaha Corp.) C:\WINDOWS\system32\dllcache\ds1wdm.sys
        2017-10-29 11:06 - 2001-08-17 12:19 - 000283904 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\emu10k1m.sys
        2017-10-29 11:06 - 2001-08-17 12:19 - 000174464 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\es198x.sys
        2017-10-29 11:06 - 2001-08-17 12:19 - 000072192 ____C (ESS Technology Inc.) C:\WINDOWS\system32\dllcache\es1969.sys
        2017-10-29 11:06 - 2001-08-17 12:19 - 000063360 ____C (ESS Technology, Inc.) C:\WINDOWS\system32\dllcache\ess.sys
        2017-10-29 11:06 - 2001-08-17 12:19 - 000040704 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\es1371mp.sys
        2017-10-29 11:06 - 2001-08-17 12:19 - 000037120 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\es1370mp.sys
        2017-10-29 11:06 - 2001-08-17 12:17 - 000629952 ____C (Equinox Systems Inc.) C:\WINDOWS\system32\dllcache\eqn.sys
        2017-10-29 11:06 - 2001-08-17 12:17 - 000090525 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digifep5.sys
        2017-10-29 11:06 - 2001-08-17 12:17 - 000042432 ____C (Digi International, Inc.) C:\WINDOWS\system32\dllcache\digirlpt.sys
        2017-10-29 11:06 - 2001-08-17 12:17 - 000029531 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\dgapci.sys
        2017-10-29 11:06 - 2001-08-17 12:14 - 000952007 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\diwan.sys
        2017-10-29 11:06 - 2001-08-17 12:14 - 000021606 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiisdn.sys
        2017-10-29 11:06 - 2001-08-17 12:13 - 000103044 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digidxb.sys
        2017-10-29 11:06 - 2001-08-17 12:13 - 000091305 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\dimaint.sys
        2017-10-29 11:06 - 2001-08-17 12:13 - 000037735 ____C (Digi International Inc.) C:\WINDOWS\system32\dllcache\digiasyn.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000117760 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\e100b325.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000063208 ____C (Intel Corporation.) C:\WINDOWS\system32\dllcache\dc21x4.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000050719 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\e1000nt5.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000028062 ____C (National Semiconductor Coproration) C:\WINDOWS\system32\dllcache\dp83820.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000024618 ____C (NETGEAR) C:\WINDOWS\system32\dllcache\fa410nd5.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000019594 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\e100isa4.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000018503 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\epro4.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000016998 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\ex10.sys
        2017-10-29 11:06 - 2001-08-17 12:12 - 000016074 ____C (NETGEAR Corp.) C:\WINDOWS\system32\dllcache\fa312nd5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000455199 ____C (3Com Corporation.) C:\WINDOWS\system32\dllcache\el985n51.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000171520 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el99xn51.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000153631 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el90xnd5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000077386 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el656nd5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000070174 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el98xn5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000069194 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el656cd5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000066591 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el90xbc5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000029696 ____C (CNet Technology, Inc. ) C:\WINDOWS\system32\dllcache\dm9pci5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000026698 ____C (D-Link Corporation) C:\WINDOWS\system32\dllcache\dlh5xnd5.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000024649 ____C (D-Link) C:\WINDOWS\system32\dllcache\dfe650d.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000024648 ____C (D-Link) C:\WINDOWS\system32\dllcache\dfe650.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000020928 ____C (Digital Networks, LLC) C:\WINDOWS\system32\dllcache\defpa.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000012362 ____C (FUJITSU LIMITED) C:\WINDOWS\system32\dllcache\f3ab18xi.sys
        2017-10-29 11:06 - 2001-08-17 12:11 - 000011850 ____C (FUJITSU LIMITED) C:\WINDOWS\system32\dllcache\f3ab18xj.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000069692 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el575nd5.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000055999 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el556nd5.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000044103 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el515.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000026141 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el589nd5.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000025159 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\elnk3.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000024653 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\el574nd4.sys
        2017-10-29 11:06 - 2001-08-17 12:10 - 000019996 ____C (3Com Corporation) C:\WINDOWS\system32\dllcache\em556n4.sys
        2017-10-29 11:05 - 2008-08-21 14:00 - 001677824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chsbrkr.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000838144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chtbrkr.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000195618 ____C C:\WINDOWS\system32\dllcache\c_10002.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000189986 ____C C:\WINDOWS\system32\dllcache\c_1361.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000187938 ____C C:\WINDOWS\system32\dllcache\c_20005.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000186402 ____C C:\WINDOWS\system32\dllcache\c_20001.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000185378 ____C C:\WINDOWS\system32\dllcache\c_20003.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000180770 ____C C:\WINDOWS\system32\dllcache\c_20932.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000180258 ____C C:\WINDOWS\system32\dllcache\c_20004.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000180258 ____C C:\WINDOWS\system32\dllcache\c_20000.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000177698 ____C C:\WINDOWS\system32\dllcache\c_20949.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000177698 ____C C:\WINDOWS\system32\dllcache\c_10003.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000173602 ____C C:\WINDOWS\system32\dllcache\c_20936.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000173602 ____C C:\WINDOWS\system32\dllcache\c_20002.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000173602 ____C C:\WINDOWS\system32\dllcache\c_10008.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000162850 ____C C:\WINDOWS\system32\dllcache\c_10001.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000082172 ____C C:\WINDOWS\system32\dllcache\bopomofo.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066728 ____C C:\WINDOWS\system32\dllcache\big5.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066594 ____C C:\WINDOWS\system32\dllcache\c_864.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066594 ____C C:\WINDOWS\system32\dllcache\c_862.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066594 ____C C:\WINDOWS\system32\dllcache\c_858.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066594 ____C C:\WINDOWS\system32\dllcache\c_720.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_870.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_708.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_28596.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_21027.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_21025.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20924.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20880.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20871.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20838.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20833.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20424.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20423.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20420.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20297.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20290.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20285.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20284.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20280.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20278.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20277.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20273.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20269.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20108.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20107.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20106.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_20105.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1149.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1148.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1147.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1146.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1145.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1144.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1143.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1142.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1141.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1140.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_1047.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_10021.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_10005.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000066082 ____C C:\WINDOWS\system32\dllcache\c_10004.nls
        2017-10-29 11:05 - 2008-08-21 14:00 - 000056320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\convlog.exe
        2017-10-29 11:05 - 2008-08-21 14:00 - 000054528 ____C (Philips Semiconductors GmbH) C:\WINDOWS\system32\dllcache\cap7146.sys
        2017-10-29 11:05 - 2008-08-21 14:00 - 000045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\browscap.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\controt.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\counters.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cprofile.exe
        2017-10-29 11:05 - 2008-08-21 14:00 - 000015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chgport.exe
        2017-10-29 11:05 - 2008-08-21 14:00 - 000014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chgusr.exe
        2017-10-29 11:05 - 2008-08-21 14:00 - 000013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chglogon.exe
        2017-10-29 11:05 - 2008-08-21 14:00 - 000010752 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_iscii.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\change.exe
        2017-10-29 11:05 - 2008-08-21 14:00 - 000009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\authfilt.dll
        2017-10-29 11:05 - 2008-08-21 14:00 - 000006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_is2022.dll
        2017-10-29 11:05 - 2008-04-14 05:42 - 000018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bdaplgin.ax
        2017-10-29 11:05 - 2008-04-14 05:41 - 000249856 ____C (Comtrol® Corporation) C:\WINDOWS\system32\dllcache\ctmasetp.dll
        2017-10-29 11:05 - 2008-04-14 05:41 - 000121856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camext30.dll
        2017-10-29 11:05 - 2008-04-14 00:16 - 000038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avc.sys
        2017-10-29 11:05 - 2008-04-14 00:16 - 000013696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avcstrm.sys
        2017-10-29 11:05 - 2008-04-14 00:16 - 000011776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bdasup.sys
        2017-10-29 11:05 - 2008-04-14 00:11 - 000008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\changer.sys
        2017-10-29 11:05 - 2008-04-14 00:06 - 000014208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\battc.sys
        2017-10-29 11:05 - 2008-04-14 00:06 - 000013952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cmbatt.sys
        2017-10-29 11:05 - 2008-04-14 00:06 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\compbatt.sys
        2017-10-29 11:05 - 2008-04-13 22:06 - 000048640 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwrwdm.sys
        2017-10-29 11:05 - 2001-08-17 22:37 - 000244224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camext20.ax
        2017-10-29 11:05 - 2001-08-17 22:37 - 000116736 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camext30.ax
        2017-10-29 11:05 - 2001-08-17 22:37 - 000073216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camexo20.ax
        2017-10-29 11:05 - 2001-08-17 22:36 - 000236032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camext20.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000216064 ____C (COMPAQ Inc.) C:\WINDOWS\system32\dllcache\cpscan.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000175104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\csamsp.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000144384 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\avmenum.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000102400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\binlsvc.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000087552 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\avmcoxp.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000081408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\brmfcwia.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000074240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camexo20.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000044032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cnusd.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000041472 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brmfusb.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000032256 ____C (Eicon Technology Corporation) C:\WINDOWS\system32\dllcache\diapi2NT.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000032256 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brmfrsmg.exe
        2017-10-29 11:05 - 2001-08-17 22:36 - 000029696 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brmflpt.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000028672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyycoins.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000027648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyzports.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000027648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyyports.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000027136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyzcoins.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000019456 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brbidiif.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000015360 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brmfbidi.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000012800 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brevif.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000009728 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brserif.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000009728 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brcoinst.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000005120 ____C (Brother Industries,Ltd.) C:\WINDOWS\system32\dllcache\brscnrsm.dll
        2017-10-29 11:05 - 2001-08-17 22:36 - 000004096 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\ctwdm32.dll
        2017-10-29 11:05 - 2001-08-17 14:56 - 000342336 ____C (3Dfx Interactive, Inc.) C:\WINDOWS\system32\dllcache\banshee.dll
        2017-10-29 11:05 - 2001-08-17 14:56 - 000170880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cl546x.dll
        2017-10-29 11:05 - 2001-08-17 14:56 - 000111232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cl5465.dll
        2017-10-29 11:05 - 2001-08-17 14:56 - 000091264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cirrus.dll
        2017-10-29 11:05 - 2001-08-17 14:05 - 000314752 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camdro21.sys
        2017-10-29 11:05 - 2001-08-17 14:04 - 000223232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camdrv21.sys
        2017-10-29 11:05 - 2001-08-17 14:04 - 000171264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\camdrv30.sys
        2017-10-29 11:05 - 2001-08-17 14:02 - 000272640 ____C (RAVISENT Technologies Inc.) C:\WINDOWS\system32\dllcache\cinemclc.sys
        2017-10-29 11:05 - 2001-08-17 14:01 - 000036096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avcaudio.sys
        2017-10-29 11:05 - 2001-08-17 13:57 - 000248064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cl546xm.sys
        2017-10-29 11:05 - 2001-08-17 13:57 - 000045696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cirrus.sys
        2017-10-29 11:05 - 2001-08-17 13:52 - 000179584 ____C (Mylex Corporation) C:\WINDOWS\system32\dllcache\dac2w2k.sys
        2017-10-29 11:05 - 2001-08-17 13:52 - 000014976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cpqarray.sys
        2017-10-29 11:05 - 2001-08-17 13:52 - 000014720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dac960nt.sys
        2017-10-29 11:05 - 2001-08-17 13:52 - 000007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cd20xrnt.sys
        2017-10-29 11:05 - 2001-08-17 13:51 - 000020736 ____C (OMNIKEY AG) C:\WINDOWS\system32\dllcache\cmbp0wdm.sys
        2017-10-29 11:05 - 2001-08-17 13:51 - 000013824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bulltlp3.sys
        2017-10-29 11:05 - 2001-08-17 13:51 - 000006656 ____C (CMD Technology, Inc.) C:\WINDOWS\system32\dllcache\cmdide.sys
        2017-10-29 11:05 - 2001-08-17 13:50 - 000050176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyyport.sys
        2017-10-29 11:05 - 2001-08-17 13:50 - 000049792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyzport.sys
        2017-10-29 11:05 - 2001-08-17 13:50 - 000017152 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyclad-z.sys
        2017-10-29 11:05 - 2001-08-17 13:50 - 000014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cyclom-y.sys
        2017-10-29 11:05 - 2001-08-17 13:28 - 000871388 ____C (BCM) C:\WINDOWS\system32\dllcache\bcmdm.sys
        2017-10-29 11:05 - 2001-08-17 13:28 - 000714698 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cbmdmkxx.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000060416 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brserwdm.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000039552 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brparwdm.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000012160 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brfiltlo.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000011008 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brusbmdm.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000010368 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brusbscn.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000003968 ____C (Brother Industries, Ltd.) C:\WINDOWS\system32\dllcache\brfiltup.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000003168 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brparimg.sys
        2017-10-29 11:05 - 2001-08-17 13:12 - 000002944 ____C (Brother Industries Ltd.) C:\WINDOWS\system32\dllcache\brfilt.sys
        2017-10-29 11:05 - 2001-08-17 12:48 - 000036128 ____C (3Dfx Interactive, Inc.) C:\WINDOWS\system32\dllcache\banshee.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000111872 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwcspud.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000096256 ____C (Copyright (C) Creative Technology Ltd. 1994-2001) C:\WINDOWS\system32\dllcache\ctlsb16.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000093952 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwcwdm.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000072832 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwbwdm.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000042112 ____C (Conexant Systems Inc.) C:\WINDOWS\system32\dllcache\crtaud.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000036992 ____C (Aztech Systems Ltd) C:\WINDOWS\system32\dllcache\aztw2320.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000006912 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\ctlfacem.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000003712 ____C (Creative Technology Ltd.) C:\WINDOWS\system32\dllcache\ctljystk.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000003584 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwcosnt5.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000003072 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwbmidi.sys
        2017-10-29 11:05 - 2001-08-17 12:19 - 000003072 ____C (Crystal Semiconductor Corp.) C:\WINDOWS\system32\dllcache\cwbase.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000980034 ____C (Xircom) C:\WINDOWS\system32\dllcache\cicap.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000164923 ____C (Eicon Technology) C:\WINDOWS\system32\dllcache\diapi2.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000089952 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\b1cbase.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000049182 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cem56n5.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000046108 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cben5.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000037568 ____C (AVM GmbH) C:\WINDOWS\system32\dllcache\avmwan.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000027164 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\ce3n5.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000022044 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cem33n5.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000022044 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\cem28n5.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000021533 ____C (Compaq Computer Corporation) C:\WINDOWS\system32\dllcache\cpqndis5.sys
        2017-10-29 11:05 - 2001-08-17 12:13 - 000021530 ____C (Xircom, Inc.) C:\WINDOWS\system32\dllcache\ce2n5.sys
        2017-10-29 11:05 - 2001-08-17 12:12 - 000117760 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\d100ib5.sys
        2017-10-29 11:05 - 2001-08-17 12:12 - 000039680 ____C (Silicom Ltd.) C:\WINDOWS\system32\dllcache\cb325.sys
        2017-10-29 11:05 - 2001-08-17 12:12 - 000037916 ____C (Fast Ethernet Controller Provider) C:\WINDOWS\system32\dllcache\cb102.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000096640 ____C (Broadcom Corporation) C:\WINDOWS\system32\dllcache\b57xp32.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000066557 ____C (Broadcom Corporation) C:\WINDOWS\system32\dllcache\bcm42u.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000060970 ____C (Compaq Computer Corp.) C:\WINDOWS\system32\dllcache\cpqtrnd5.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000054271 ____C (Broadcom Corporation) C:\WINDOWS\system32\dllcache\bcm42xx5.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000039936 ____C (Conexant Systems, Inc.) C:\WINDOWS\system32\dllcache\cnxt1803.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000031529 ____C (BreezeCOM) C:\WINDOWS\system32\dllcache\brzwlan.sys
        2017-10-29 11:05 - 2001-08-17 12:11 - 000026568 ____C (Broadcom Corporation) C:\WINDOWS\system32\dllcache\bcm4e5.sys
        2017-10-29 11:04 - 2008-08-21 14:00 - 000029184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\asptxn.dll
        2017-10-29 11:04 - 2008-08-21 14:00 - 000010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aspperf.dll
        2017-10-29 11:04 - 2001-08-17 22:36 - 000045056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_aqadmin.dll
        2017-10-29 11:04 - 2001-08-17 22:36 - 000037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\atievxx.exe
        2017-10-29 11:04 - 2001-08-17 14:56 - 000268160 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atidvai.dll
        2017-10-29 11:04 - 2001-08-17 14:56 - 000137216 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atidrae.dll
        2017-10-29 11:04 - 2001-08-17 14:56 - 000104832 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atiraged.dll
        2017-10-29 11:04 - 2001-08-17 14:55 - 000382592 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atidrab.dll
        2017-10-29 11:04 - 2001-08-17 14:55 - 000096128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ati.dll
        2017-10-29 11:04 - 2001-08-17 13:57 - 000077568 ____C (ATI Technologies, Inc.) C:\WINDOWS\system32\dllcache\ati.sys
        2017-10-29 11:04 - 2001-08-17 13:52 - 000026496 ____C (Advanced System Products, Inc.) C:\WINDOWS\system32\dllcache\asc.sys
        2017-10-29 11:04 - 2001-08-17 13:52 - 000022400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\asc3350p.sys
        2017-10-29 11:04 - 2001-08-17 13:51 - 000014848 ____C (Advanced System Products, Inc.) C:\WINDOWS\system32\dllcache\asc3550.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000075136 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atimpae.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000049920 ____C C:\WINDOWS\system32\dllcache\atirtcap.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000046464 ____C C:\WINDOWS\system32\dllcache\atibt829.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000026880 ____C C:\WINDOWS\system32\dllcache\atirtsnd.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000026624 ____C C:\WINDOWS\system32\dllcache\ativxbar.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000023552 ____C C:\WINDOWS\system32\dllcache\atixbar.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000019456 ____C C:\WINDOWS\system32\dllcache\ativttxx.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000017152 ____C C:\WINDOWS\system32\dllcache\atitvsnd.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000017152 ____C C:\WINDOWS\system32\dllcache\atitunep.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000010240 ____C C:\WINDOWS\system32\dllcache\atipcxxx.sys
        2017-10-29 11:04 - 2001-08-17 12:49 - 000009472 ____C C:\WINDOWS\system32\dllcache\ativmdcd.sys
        2017-10-29 11:04 - 2001-08-17 12:48 - 000289664 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atimpab.sys
        2017-10-29 11:04 - 2001-08-17 12:48 - 000281600 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atimtai.sys
        2017-10-29 11:04 - 2001-08-17 12:48 - 000070528 ____C (ATI Technologies Inc.) C:\WINDOWS\system32\dllcache\atiragem.sys
        2017-10-29 11:04 - 2001-08-17 12:12 - 000097354 ____C (Bay Networks, Inc.) C:\WINDOWS\system32\dllcache\aspndis3.sys
        2017-10-29 11:03 - 2008-04-13 22:05 - 000036224 ____C (ADMtek Incorporated.) C:\WINDOWS\system32\dllcache\an983.sys
        2017-10-29 11:03 - 2001-08-17 22:37 - 000024576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agcgauge.ax
        2017-10-29 11:03 - 2001-08-17 22:36 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_adsiisex.dll
        2017-10-29 11:03 - 2001-08-17 14:07 - 000056960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aic78xx.sys
        2017-10-29 11:03 - 2001-08-17 14:07 - 000055168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aic78u2.sys
        2017-10-29 11:03 - 2001-08-17 13:52 - 000012800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aha154x.sys
        2017-10-29 11:03 - 2001-08-17 13:52 - 000012032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\amsint.sys
        2017-10-29 11:03 - 2001-08-17 13:51 - 000005248 ____C (Acer Laboratories Inc.) C:\WINDOWS\system32\dllcache\aliide.sys
        2017-10-29 11:03 - 2001-08-17 13:49 - 000026624 ____C (Acer Laboratories Inc.) C:\WINDOWS\system32\dllcache\alifir.sys
        2017-10-29 11:03 - 2001-08-17 13:47 - 000006272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\apmbatt.sys
        2017-10-29 11:03 - 2001-08-17 12:11 - 000027678 ____C (Acer Laboratories Inc.) C:\WINDOWS\system32\dllcache\ali5261.sys
        2017-10-29 11:03 - 2001-08-17 12:11 - 000016969 ____C (AmbiCom, Inc.) C:\WINDOWS\system32\dllcache\amb8002.sys
        2017-10-29 11:02 - 2008-08-21 14:00 - 000169984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisui.dll
        2017-10-29 11:02 - 2008-08-21 14:00 - 000094720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\certmap.ocx
        2017-10-29 11:02 - 2008-08-21 14:00 - 000049664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\adrot.dll
        2017-10-29 11:02 - 2008-08-21 14:00 - 000019968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetsloc.dll
        2017-10-29 11:02 - 2008-08-21 14:00 - 000014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisreset.exe
        2017-10-29 11:02 - 2008-08-21 14:00 - 000007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetmgr.exe
        2017-10-29 11:02 - 2008-08-21 14:00 - 000007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wamregps.dll
        2017-10-29 11:02 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpsapi2.dll
        2017-10-29 11:02 - 2008-08-21 14:00 - 000006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admxprox.dll
        2017-10-29 11:02 - 2008-08-21 14:00 - 000005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisrstap.dll
        2017-10-29 11:02 - 2008-04-14 00:16 - 000048128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\61883.sys
        2017-10-29 11:02 - 2008-04-14 00:10 - 000012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\4mmdat.sys
        2017-10-29 11:02 - 2008-04-13 22:06 - 000231552 ____C (Acer Laboratories Inc.) C:\WINDOWS\system32\dllcache\ac97ali.sys
        2017-10-29 11:02 - 2008-04-13 22:06 - 000084480 ____C (VIA Technologies, Inc.) C:\WINDOWS\system32\dllcache\ac97via.sys
        2017-10-29 11:02 - 2008-04-13 22:06 - 000010880 ____C (Aureal, Inc.) C:\WINDOWS\system32\dllcache\admjoy.sys
        2017-10-29 11:02 - 2001-08-17 22:36 - 000462848 ____C (Aureal Inc.) C:\WINDOWS\system32\dllcache\a3dapi.dll
        2017-10-29 11:02 - 2001-08-17 22:36 - 000098304 ____C (Aureal Semiconductor) C:\WINDOWS\system32\dllcache\a3d.dll
        2017-10-29 11:02 - 2001-08-17 22:36 - 000061440 ____C (Color Flatbed Scanner) C:\WINDOWS\system32\dllcache\acerscad.dll
        2017-10-29 11:02 - 2001-08-17 14:56 - 000066048 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\s3legacy.dll
        2017-10-29 11:02 - 2001-08-17 14:55 - 000689216 ____C (3dfx Interactive, Inc.) C:\WINDOWS\system32\dllcache\3dfxvs.dll
        2017-10-29 11:02 - 2001-08-17 14:55 - 000038400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\8514a.dll
        2017-10-29 11:02 - 2001-08-17 14:07 - 000101888 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\adpu160m.sys
        2017-10-29 11:02 - 2001-08-17 14:06 - 000011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\1394vdbg.sys
        2017-10-29 11:02 - 2001-08-17 13:53 - 000007424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\adicvls.sys
        2017-10-29 11:02 - 2001-08-17 13:52 - 000023552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\abp480n5.sys
        2017-10-29 11:02 - 2001-08-17 13:28 - 000762780 ____C (3Com, Inc.) C:\WINDOWS\system32\dllcache\3cwmcru.sys
        2017-10-29 11:02 - 2001-08-17 12:48 - 000148352 ____C (3dfx Interactive, Inc.) C:\WINDOWS\system32\dllcache\3dfxvsm.sys
        2017-10-29 11:02 - 2001-08-17 12:20 - 000297728 ____C (Silicon Integrated Systems Corp.) C:\WINDOWS\system32\dllcache\ac97sis.sys
        2017-10-29 11:02 - 2001-08-17 12:20 - 000096256 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\ac97intc.sys
        2017-10-29 11:02 - 2001-08-17 12:19 - 000747392 ____C (Aureal, Inc.) C:\WINDOWS\system32\dllcache\adm8830.sys
        2017-10-29 11:02 - 2001-08-17 12:19 - 000584448 ____C (Aureal, Inc.) C:\WINDOWS\system32\dllcache\adm8810.sys
        2017-10-29 11:02 - 2001-08-17 12:19 - 000553984 ____C (Aureal, Inc.) C:\WINDOWS\system32\dllcache\adm8820.sys
        2017-10-29 11:02 - 2001-08-17 12:11 - 000046112 ____C (Adaptec, Inc ) C:\WINDOWS\system32\dllcache\adptsf50.sys
        2017-10-29 11:02 - 2001-08-17 12:11 - 000020160 ____C (ADMtek Incorporated) C:\WINDOWS\system32\dllcache\adm8511.sys
        2017-10-29 07:07 - 2017-10-29 07:07 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\PCHealth
        2017-10-28 22:44 - 2017-03-09 19:43 - 000081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado28.tlb
        2017-10-28 22:35 - 2017-09-09 05:10 - 011092480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieframe.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 002007040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iertutil.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000743424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedvtool.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000630272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeeds.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000522240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsdbgui.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000247808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieproxy.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000233984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsprofilerui.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000055296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeedsbs.dll
        2017-10-28 22:35 - 2017-09-09 05:10 - 000012800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpshims.dll
        2017-10-28 22:35 - 2013-07-17 02:58 - 000060160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbaudio.sys
        2017-10-28 22:24 - 2012-01-11 21:06 - 000003072 ____C C:\WINDOWS\system32\dllcache\iacenc.dll
        2017-10-28 22:24 - 2012-01-11 21:06 - 000003072 _____ C:\WINDOWS\system32\iacenc.dll
        2017-10-27 18:44 - 2017-10-27 18:44 - 000000337 _____ C:\Documents and Settings\doni\My Documents\po.bat
        2017-10-27 13:44 - 2017-11-06 19:57 - 000042686 _____ C:\WINDOWS\ZAM.krnl.trace
        2017-10-27 13:44 - 2017-11-06 19:57 - 000011343 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
        2017-10-27 13:41 - 2017-10-27 13:41 - 000001561 _____ C:\Documents and Settings\All Users\Start Menu\Programs\Internet Explorer.lnk
        2017-10-27 13:38 - 2017-10-27 14:43 - 000000000 ____D C:\Program Files\Windows Media Connect 2
        2017-10-27 13:38 - 2017-10-27 14:43 - 000000000 ____D C:\Program Files\MSXML 4.0
        2017-10-27 13:37 - 2017-10-27 13:37 - 000000000 ____D C:\WINDOWS\system32\DRM
        2017-10-27 13:35 - 2016-03-09 00:00 - 000026144 _____ (Microsoft Corporation) C:\WINDOWS\system32\spupdsvc.exe
        2017-10-27 13:28 - 2017-09-09 01:37 - 001905024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\win32k.sys
        2017-10-27 13:28 - 2017-09-09 01:37 - 001905024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
        2017-10-27 13:28 - 2017-09-07 21:12 - 000456832 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mrxsmb.sys
        2017-10-27 13:28 - 2017-09-07 21:12 - 000456832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
        2017-10-27 13:28 - 2017-09-07 21:10 - 000359552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srv.sys
        2017-10-27 13:28 - 2017-09-07 21:10 - 000359552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
        2017-10-27 13:28 - 2017-05-28 01:40 - 000091776 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiswan.sys
        2017-10-27 13:28 - 2017-05-28 01:40 - 000091776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndiswan.sys
        2017-10-27 13:28 - 2017-05-24 18:27 - 000993792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kernel32.dll
        2017-10-27 13:28 - 2017-05-24 18:27 - 000993792 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
        2017-10-27 13:28 - 2017-05-24 18:27 - 000720384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntdll.dll
        2017-10-27 13:28 - 2017-05-24 18:27 - 000720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
        2017-10-27 13:28 - 2017-05-24 18:27 - 000563200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oleaut32.dll
        2017-10-27 13:28 - 2017-05-24 18:27 - 000563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
        2017-10-27 13:28 - 2017-04-28 07:32 - 002150400 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
        2017-10-27 13:28 - 2017-04-28 07:32 - 002150400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
        2017-10-27 13:28 - 2017-04-28 06:18 - 002029056 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntkrnlpa.exe
        2017-10-27 13:28 - 2017-04-28 06:18 - 002029056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrpamp.exe
        2017-10-27 13:28 - 2016-11-09 16:11 - 004470272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msi.dll
        2017-10-27 13:28 - 2016-11-09 16:11 - 004470272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
        2017-10-27 13:28 - 2016-11-09 16:11 - 000332800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msihnd.dll
        2017-10-27 13:28 - 2016-11-09 16:11 - 000332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
        2017-10-27 13:28 - 2016-10-12 06:55 - 000730624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lsasrv.dll
        2017-10-27 13:28 - 2016-10-12 06:55 - 000730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
        2017-10-27 13:28 - 2016-10-12 06:55 - 000137216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msv1_0.dll
        2017-10-27 13:28 - 2016-10-12 06:55 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
        2017-10-27 13:28 - 2016-09-08 23:04 - 000106112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mup.sys
        2017-10-27 13:28 - 2016-09-08 23:04 - 000106112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mup.sys
        2017-10-27 13:28 - 2016-09-08 21:34 - 000180096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mrxdav.sys
        2017-10-27 13:28 - 2016-09-08 21:34 - 000180096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
        2017-10-27 13:28 - 2016-06-14 17:47 - 000346112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\localspl.dll
        2017-10-27 13:28 - 2016-06-14 17:47 - 000346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
        2017-10-27 13:28 - 2016-05-11 16:54 - 000093056 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
        2017-10-27 13:28 - 2016-05-11 16:54 - 000093056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ksecdd.sys
        2017-10-27 13:28 - 2015-12-17 20:58 - 000618496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\advapi32.dll
        2017-10-27 13:28 - 2015-12-17 20:58 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
        2017-10-27 13:28 - 2015-10-13 17:58 - 000361600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tcpip.sys
        2017-10-27 13:28 - 2015-10-13 17:58 - 000361600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
        2017-10-27 13:28 - 2015-10-13 17:28 - 000226880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tcpip6.sys
        2017-10-27 13:28 - 2015-10-13 17:28 - 000226880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip6.sys
        2017-10-27 13:28 - 2015-09-24 01:52 - 000154112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\schannel.dll
        2017-10-27 13:28 - 2015-09-24 01:52 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
        2017-10-27 13:28 - 2015-06-25 05:11 - 000096256 ____C (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
        2017-10-27 13:28 - 2015-06-25 05:11 - 000096256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msiexec.exe
        2017-10-27 13:28 - 2014-09-02 22:56 - 000143744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fastfat.sys
        2017-10-27 13:28 - 2014-09-02 22:56 - 000143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
        2017-10-27 13:28 - 2014-05-29 02:46 - 000138496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\afd.sys
        2017-10-27 13:28 - 2014-05-29 02:46 - 000138496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
        2017-10-27 13:28 - 2013-11-27 22:21 - 000040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndproxy.sys
        2017-10-27 13:28 - 2013-11-27 22:21 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
        2017-10-27 13:28 - 2013-11-13 04:59 - 000150528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imagehlp.dll
        2017-10-27 13:28 - 2013-11-13 04:59 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
        2017-10-27 13:28 - 2013-08-09 02:55 - 000144128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys
        2017-10-27 13:28 - 2013-08-09 02:55 - 000144128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
        2017-10-27 13:28 - 2013-08-09 02:55 - 000032384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbccgp.sys
        2017-10-27 13:28 - 2013-08-09 02:55 - 000032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
        2017-10-27 13:28 - 2013-08-09 02:55 - 000005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys
        2017-10-27 13:28 - 2013-08-09 02:55 - 000005376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
        2017-10-27 13:28 - 2013-07-17 02:58 - 000123008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys
        2017-10-27 13:28 - 2013-07-17 02:58 - 000123008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
        2017-10-27 13:28 - 2013-07-03 04:12 - 000025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidparse.sys
        2017-10-27 13:28 - 2013-07-03 04:12 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
        2017-10-27 13:28 - 2013-07-03 03:59 - 000014976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys
        2017-10-27 13:28 - 2013-07-03 03:59 - 000014976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbscan.sys
        2017-10-27 13:28 - 2013-02-12 02:32 - 000012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usb8023x.sys
        2017-10-27 13:28 - 2013-02-12 02:32 - 000012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usb8023.sys
        2017-10-27 13:28 - 2013-02-12 02:32 - 000012928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023x.sys
        2017-10-27 13:28 - 2013-02-12 02:32 - 000012928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
        2017-10-27 13:28 - 2012-07-04 16:05 - 000139784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpwd.sys
        2017-10-27 13:28 - 2012-07-04 16:05 - 000139784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpwd.sys
        2017-10-27 13:28 - 2011-10-28 07:31 - 000033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\csrsrv.dll
        2017-10-27 13:28 - 2011-10-28 07:31 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
        2017-10-27 13:28 - 2011-07-08 16:02 - 000010496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndistapi.sys
        2017-10-27 13:28 - 2011-07-08 16:02 - 000010496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
        2017-10-27 13:28 - 2010-08-27 07:57 - 000099840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srvsvc.dll
        2017-10-27 13:28 - 2010-08-27 07:57 - 000099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
        2017-10-27 13:28 - 2009-10-20 18:20 - 000265728 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
        2017-10-27 13:28 - 2009-10-20 18:20 - 000265728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\http.sys
        2017-10-27 13:28 - 2009-06-10 08:14 - 000132096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wkssvc.dll
        2017-10-27 13:28 - 2009-06-10 08:14 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
        2017-10-27 13:28 - 2009-03-18 13:02 - 000030336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys
        2017-10-27 13:28 - 2009-03-18 13:02 - 000030336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
        2017-10-27 13:28 - 2009-02-06 13:11 - 000110592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\services.exe
        2017-10-27 13:28 - 2009-02-06 13:11 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
        2017-10-27 13:28 - 2008-06-13 13:05 - 000272128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bthport.sys
        2017-10-27 13:28 - 2008-06-13 13:05 - 000272128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
        2017-10-27 13:28 - 2008-05-08 16:02 - 000203136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rmcast.sys
        2017-10-27 13:28 - 2008-05-08 16:02 - 000203136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
        2017-10-27 13:28 - 2008-04-14 05:45 - 000009424 ____C C:\WINDOWS\system32\dllcache\drvmain.sdb
        2017-10-27 13:28 - 2008-04-14 05:43 - 000021896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdtcp.sys
        2017-10-27 13:28 - 2008-04-14 05:43 - 000021896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdtcp.sys
        2017-10-27 13:28 - 2008-04-14 05:42 - 000409088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qmgr.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000300544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sysdm.cpl
        2017-10-27 13:28 - 2008-04-14 05:42 - 000300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysdm.cpl
        2017-10-27 13:28 - 2008-04-14 05:42 - 000275456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ulib.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ulib.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000237056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rasapi32.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000102400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\win32spl.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000091136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntprint.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.dll
        2017-10-27 13:28 - 2008-04-14 05:42 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\format.com
        2017-10-27 13:28 - 2008-04-14 05:42 - 000015360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msgrocm.dll
        2017-10-27 13:28 - 2008-04-14 05:41 - 000126976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dhcpcsvc.dll
        2017-10-27 13:28 - 2008-04-14 05:41 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
        2017-10-27 13:28 - 2008-04-14 04:42 - 000985088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\setupapi.dll
        2017-10-27 13:28 - 2008-04-14 04:42 - 000985088 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
        2017-10-27 13:28 - 2008-04-14 04:41 - 000081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieencode.dll
        2017-10-27 13:28 - 2008-04-14 04:41 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieencode.dll
        2017-10-27 13:28 - 2008-04-14 00:58 - 000175744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdbss.sys
        2017-10-27 13:28 - 2008-04-14 00:58 - 000175744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
        2017-10-27 13:28 - 2008-04-14 00:50 - 000182656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndis.sys
        2017-10-27 13:28 - 2008-04-14 00:50 - 000182656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
        2017-10-27 13:28 - 2008-04-14 00:49 - 000146048 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\portcls.sys
        2017-10-27 13:28 - 2008-04-14 00:49 - 000146048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
        2017-10-27 13:28 - 2008-04-14 00:45 - 000574976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntfs.sys
        2017-10-27 13:28 - 2008-04-14 00:45 - 000574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
        2017-10-27 13:28 - 2008-04-14 00:27 - 000041472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\raspppoe.sys
        2017-10-27 13:28 - 2008-04-14 00:27 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\raspppoe.sys
        2017-10-27 13:28 - 2008-04-14 00:26 - 000069120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\psched.sys
        2017-10-27 13:28 - 2008-04-14 00:26 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\psched.sys
        2017-10-27 13:28 - 2008-04-14 00:26 - 000030592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rndismp.sys
        2017-10-27 13:28 - 2008-04-14 00:26 - 000030592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rndismp.sys
        2017-10-27 13:28 - 2008-04-14 00:16 - 000061696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ohci1394.sys
        2017-10-27 13:28 - 2008-04-14 00:16 - 000061696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ohci1394.sys
        2017-10-27 13:28 - 2008-04-14 00:16 - 000053376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\1394bus.sys
        2017-10-27 13:28 - 2008-04-14 00:16 - 000053376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\1394bus.sys
        2017-10-27 13:28 - 2008-04-14 00:15 - 000017152 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbohci.sys
        2017-10-27 13:28 - 2008-04-14 00:15 - 000017152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbohci.sys
        2017-10-27 13:28 - 2008-04-14 00:14 - 000081664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\videoprt.sys
        2017-10-27 13:28 - 2008-04-14 00:14 - 000081664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\videoprt.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000096384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scsiport.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000096384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scsiport.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000062976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cdrom.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdrom.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000036352 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\disk.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\disk.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000011904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sffdisk.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000011904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sffdisk.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000011008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sffp_sd.sys
        2017-10-27 13:28 - 2008-04-14 00:10 - 000011008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sffp_sd.sys
        2017-10-27 13:28 - 2008-04-14 00:09 - 000042368 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mountmgr.sys
        2017-10-27 13:28 - 2008-04-14 00:09 - 000042368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
        2017-10-27 13:28 - 2008-04-14 00:06 - 000079232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sdbus.sys
        2017-10-27 13:28 - 2008-04-14 00:06 - 000079232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
        2017-10-27 13:28 - 2008-04-14 00:02 - 000196224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpdr.sys
        2017-10-27 13:28 - 2008-04-14 00:02 - 000196224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
        2017-10-27 13:28 - 2008-04-14 00:01 - 000134400 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
        2017-10-27 13:28 - 2008-04-13 23:26 - 000030592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rndismpx.sys
        2017-10-27 13:28 - 2008-04-13 23:26 - 000030592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rndismpx.sys
        2017-10-27 13:28 - 2006-09-28 19:00 - 000082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wudfrd.sys
        2017-10-27 13:28 - 2006-09-28 18:55 - 000077568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wudfpf.sys
        2017-10-27 13:28 - 2001-08-23 13:00 - 000070656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ifsutil.dll
        2017-10-27 13:28 - 2001-08-23 13:00 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifsutil.dll
        2017-10-27 13:28 - 2001-08-23 13:00 - 000016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fmifs.dll
        2017-10-27 13:28 - 2001-08-23 13:00 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\fmifs.dll
        2017-10-27 13:28 - 2001-08-23 13:00 - 000007936 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fs_rec.sys
        2017-10-27 13:28 - 2001-08-23 13:00 - 000007936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fs_rec.sys
        2017-10-27 13:25 - 2016-03-09 00:00 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\kblChecker.dll
        2017-10-27 13:20 - 2017-10-27 13:43 - 000000000 ____D C:\3986d7fc9f49b457ca22
        2017-10-26 15:59 - 2017-10-26 15:59 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\GHISLER
        2017-10-25 22:47 - 2017-10-27 14:21 - 000000000 ____D C:\Program Files\Kerish Doctor
        2017-10-25 22:47 - 2017-10-25 22:48 - 000001629 _____ C:\Documents and Settings\All Users\Desktop\Kerish Doctor 2017.lnk
        2017-10-25 22:47 - 2017-10-25 22:47 - 000011936 _____ (Highresolution Enterprises [www.highrez.co.uk]) C:\WINDOWS\system32\Drivers\inpout32.sys
        2017-10-25 22:47 - 2017-10-25 22:47 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Kerish Doctor
        2017-10-25 22:47 - 2011-01-20 00:07 - 000098304 _____ (Highresolution Enterprises) C:\WINDOWS\system32\inpout32.dll
        2017-10-24 13:04 - 2017-10-24 13:04 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Kerish Products
        2017-10-24 13:04 - 2016-08-09 09:35 - 000059880 _____ (Kerish Products) C:\WINDOWS\system32\GPUTemp.dll
        2017-10-24 12:26 - 2017-10-24 12:26 - 000001517 _____ C:\WINDOWS\system32\rrr.lnk
        2017-10-24 08:47 - 2017-10-24 08:47 - 000000998 _____ C:\Documents and Settings\doni\Desktop\RegOrganizerPortable.exe.lnk
        2017-10-23 09:05 - 2017-10-23 09:43 - 000000000 ____D C:\AdwCleaner
        2017-10-23 08:19 - 2017-10-23 08:19 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\OO Software
        2017-10-22 21:21 - 2017-10-22 23:35 - 000000000 ____D C:\Documents and Settings\doni\Application Data\Wise Folder Hider
        2017-10-22 15:53 - 2017-10-22 15:53 - 000000000 ____D C:\Documents and Settings\Administrator\Local Settings\Application Data\Mozilla
        2017-10-22 15:53 - 2017-10-22 15:53 - 000000000 ____D C:\Documents and Settings\Administrator\Application Data\Mozilla
        2017-10-22 15:43 - 2017-10-22 15:43 - 000000000 ____D C:\Documents and Settings\Administrator\Local Settings\Application Data\Zemana
        2017-10-22 15:40 - 2017-10-22 17:37 - 000000000 ____D C:\Documents and Settings\Administrator\Local Settings\Temp
        2017-10-22 15:40 - 2017-10-22 15:56 - 000000178 ___SH C:\Documents and Settings\Administrator\ntuser.ini
        2017-10-22 15:40 - 2017-10-22 15:43 - 000000767 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\Internet Explorer.lnk
        2017-10-22 15:40 - 2017-10-22 15:43 - 000000738 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\Outlook Express.lnk
        2017-10-22 15:40 - 2017-10-22 15:40 - 000000792 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\Windows Media Player.lnk
        2017-10-22 15:40 - 2017-10-22 15:40 - 000000000 __SHD C:\Documents and Settings\Administrator\IETldCache
        2017-10-22 15:40 - 2017-10-22 15:40 - 000000000 ____D C:\Documents and Settings\Administrator
        2017-10-22 15:40 - 2010-03-11 04:41 - 000001599 _____ C:\Documents and Settings\Administrator\Start Menu\Programs\Remote Assistance.lnk
        2017-10-20 08:07 - 2017-10-20 08:07 - 000000000 ____D C:\Documents and Settings\NetworkService\Local Settings\Application Data\Zemana
        2017-10-20 08:07 - 2017-10-20 08:07 - 000000000 ____D C:\Documents and Settings\NetworkService\Application Data\Genie9
        2017-10-19 17:18 - 2017-10-19 17:18 - 000000000 __SHD C:\WINDOWS\CSC
        2017-10-19 11:47 - 2017-10-19 11:47 - 000000000 ____D C:\Program Files\Malwarebytes
        2017-10-19 09:35 - 2017-10-19 14:07 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Malwarebytes
        2017-10-19 09:25 - 2017-10-29 23:03 - 000341032 _____ C:\WINDOWS\system32\FNTCACHE.DAT
        2017-10-14 09:02 - 2017-10-14 09:02 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Auslogics
        2017-10-11 07:48 - 2017-10-11 07:48 - 000000000 ____D C:\Documents and Settings\LocalService\Application Data\Macromedia
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-11-06 19:58 - 2017-01-11 22:56 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Temp
        2017-11-06 19:48 - 2017-07-16 21:46 - 000000830 ____C C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
        2017-11-06 19:29 - 2010-05-06 20:27 - 000000986 ____C C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
        2017-11-06 19:28 - 2010-03-11 06:28 - 001111284 ____C C:\WINDOWS\system32\PerfStringBackup.INI
        2017-11-06 19:24 - 2012-09-14 20:40 - 000000982 ____C C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cd92a860a26e52.job
        2017-11-06 19:24 - 2010-03-11 04:43 - 000000006 ___HC C:\WINDOWS\Tasks\SA.DAT
        2017-11-06 07:40 - 2010-03-11 04:44 - 000000278 __SHC C:\Documents and Settings\doni\ntuser.ini
        2017-11-06 07:24 - 2014-02-08 17:19 - 000001098 ____C C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-18UA.job
        2017-11-05 22:39 - 2017-05-26 20:34 - 000000000 ____D C:\Documents and Settings\doni\Application Data\vlc
        2017-11-05 20:04 - 2017-07-19 11:48 - 000000600 ____C C:\Documents and Settings\doni\PUTTY.RND
        2017-11-05 17:24 - 2014-02-08 17:19 - 000001046 ____C C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-18Core.job
        2017-11-03 22:34 - 2010-12-14 22:26 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\TEMP
        2017-11-03 20:07 - 2016-04-09 10:34 - 000000000 ____D C:\Documents and Settings\doni\My Documents\Изтегляния
        2017-11-03 19:38 - 2016-11-24 19:40 - 000000000 ____D C:\Program Files\stinger
        2017-11-02 12:16 - 2010-03-28 20:57 - 000000000 ____D C:\Documents and Settings\doni\Application Data\dvdcss
        2017-11-02 11:46 - 2010-04-18 13:54 - 000000202 ____C C:\WINDOWS\NeroDigital.ini
        2017-11-02 09:39 - 2017-01-26 11:17 - 000000000 ____D C:\Program Files\IrfanView
        2017-11-02 09:39 - 2015-06-17 09:43 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Unchecky
        2017-11-02 08:56 - 2010-03-17 18:26 - 000000000 ____D C:\Documents and Settings\doni\Application Data\uTorrent
        2017-11-01 19:41 - 2010-03-11 04:44 - 000000000 ____D C:\Documents and Settings\doni
        2017-11-01 19:06 - 2017-04-20 19:00 - 000000000 ____D C:\Documents and Settings\doni\Application Data\XnConvert
        2017-11-01 18:39 - 2011-11-09 13:30 - 000000000 ____D C:\Documents and Settings\doni\Application Data\Auslogics
        2017-11-01 18:39 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\system32\inetsrv
        2017-11-01 14:01 - 2016-08-10 14:24 - 000000000 ____D C:\Documents and Settings\doni\My Documents\Загрузки
        2017-11-01 14:00 - 2017-03-29 19:47 - 000000000 ____D C:\Documents and Settings\doni\My Documents\Files
        2017-11-01 12:15 - 2010-03-11 06:21 - 000000000 RSHDC C:\WINDOWS\system32\dllcache
        2017-11-01 11:41 - 2010-03-11 04:51 - 000065536 _____ C:\WINDOWS\system32\config\ACEEvent.evt
        2017-10-30 21:48 - 2010-03-11 04:44 - 000000792 _____ C:\Documents and Settings\doni\Start Menu\Programs\Windows Media Player.lnk
        2017-10-30 21:47 - 2001-08-23 13:00 - 000002206 ____C C:\WINDOWS\system32\wpa.dbl
        2017-10-30 21:46 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\security
        2017-10-30 21:33 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\system32\oobe
        2017-10-30 21:33 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\inf
        2017-10-30 21:33 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\Help
        2017-10-30 21:33 - 2010-03-11 04:41 - 000001563 _____ C:\Documents and Settings\All Users\Start Menu\Set Program Access and Defaults.lnk
        2017-10-30 21:33 - 2010-03-11 04:37 - 000000000 ____D C:\Program Files\Messenger
        2017-10-30 17:43 - 2010-03-17 22:12 - 000041472 ____C C:\Documents and Settings\doni\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
        2017-10-29 23:50 - 2017-09-17 08:39 - 000100288 _____ C:\WINDOWS\system32\GDIPFONTCACHEV1.DAT
        2017-10-29 22:58 - 2010-03-11 04:41 - 000023392 _____ C:\WINDOWS\system32\nscompat.tlb
        2017-10-29 22:58 - 2010-03-11 04:41 - 000016832 _____ C:\WINDOWS\system32\amcompat.tlb
        2017-10-29 22:30 - 2010-03-11 06:24 - 000000195 __RSH C:\boot.ini
        2017-10-29 10:31 - 2010-03-11 04:38 - 000000000 ____D C:\Program Files\Outlook Express
        2017-10-29 09:10 - 2011-10-17 10:07 - 000000000 ____D C:\WINDOWS\$hf_mig$
        2017-10-29 07:41 - 2017-03-29 20:00 - 000000000 ____D C:\WINDOWS\system32\XPSViewer
        2017-10-28 23:36 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\pchealth
        2017-10-28 20:42 - 2010-03-11 04:43 - 000000178 __SHC C:\Documents and Settings\NetworkService\ntuser.ini
        2017-10-28 19:19 - 2010-03-11 04:51 - 000000000 ____D C:\Program Files\Realtek
        2017-10-28 19:18 - 2010-03-11 04:47 - 000000000 ___HD C:\Program Files\InstallShield Installation Information
        2017-10-27 20:33 - 2001-08-23 13:00 - 000000895 ____C C:\WINDOWS\win.ini
        2017-10-27 20:33 - 2001-08-23 13:00 - 000000246 ____C C:\WINDOWS\system.ini
        2017-10-27 14:54 - 2010-03-11 04:44 - 000000803 ____C C:\Documents and Settings\doni\Start Menu\Programs\Internet Explorer.lnk
        2017-10-27 14:45 - 2010-03-11 13:48 - 000000000 ____D C:\WINDOWS\system32\scripting
        2017-10-27 14:45 - 2010-03-11 13:48 - 000000000 ____D C:\WINDOWS\system32\bits
        2017-10-27 14:45 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\system32\Setup
        2017-10-27 14:44 - 2010-03-11 04:39 - 000000000 ____D C:\Program Files\Movie Maker
        2017-10-27 14:41 - 2010-03-22 10:24 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\ApplicationHistory
        2017-10-27 14:41 - 2010-03-11 04:38 - 000000000 ____D C:\WINDOWS\Registration
        2017-10-27 14:35 - 2015-06-23 10:51 - 000000788 _____ C:\Documents and Settings\LocalService\Start Menu\Programs\Windows Media Player.lnk
        2017-10-27 14:15 - 2016-11-17 22:00 - 000000000 ____D C:\Program Files\Hard Disk Sentinel
        2017-10-26 21:14 - 2017-05-02 19:20 - 000000000 ____D C:\Program Files\BackgammonMasters
        2017-10-25 21:34 - 2017-09-21 07:52 - 000000682 _____ C:\Documents and Settings\doni\Desktop\CCleaner.lnk
        2017-10-25 20:48 - 2017-07-16 21:46 - 000803328 ____C (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
        2017-10-25 20:48 - 2017-07-16 21:46 - 000144896 ____C (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
        2017-10-25 20:48 - 2010-03-11 04:39 - 000000000 ____D C:\WINDOWS\system32\Macromed
        2017-10-24 10:02 - 2010-03-22 10:15 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\HP
        2017-10-23 11:16 - 2012-04-15 20:32 - 000000000 ____D C:\Documents and Settings\doni\.rainlendar2
        2017-10-23 11:16 - 2010-03-17 21:49 - 000000000 ____D C:\Documents and Settings\doni\Application Data\Skype
        2017-10-22 21:48 - 2016-11-28 13:46 - 000000000 ____D C:\Documents and Settings\doni\My Documents\OziBox
        2017-10-22 21:21 - 2017-06-26 10:25 - 000001700 __SHC C:\WINDOWS\wisefs.dat
        2017-10-22 19:22 - 2010-03-11 06:25 - 000000000 ____D C:\Documents and Settings\All Users
        2017-10-22 17:49 - 2016-12-03 10:26 - 000000000 ____D C:\Program Files\Jotta
        2017-10-22 15:40 - 2010-03-11 06:25 - 000000000 ____D C:\Documents and Settings
        2017-10-22 13:31 - 2010-03-11 06:28 - 000001789 ____C C:\WINDOWS\system32\AUTOEXEC.NT
        2017-10-22 08:56 - 2010-03-11 06:21 - 000000000 ____D C:\WINDOWS\Resources
        2017-10-20 06:50 - 2016-10-20 12:19 - 000000000 ____D C:\Program Files\Pale Moon
        2017-10-19 09:14 - 2010-06-13 12:15 - 000000000 __SHD C:\Documents and Settings\doni\PrivacIE
        2017-10-19 09:11 - 2017-07-04 10:38 - 000000000 ____D C:\Documents and Settings\doni\Application Data\ZHP
        2017-10-19 09:11 - 2010-03-28 19:51 - 000000000 ____D C:\Documents and Settings\doni\Local Settings\Application Data\Google
        2017-10-14 08:41 - 2017-05-02 18:26 - 000000000 ____D C:\Program Files\Goodgammon
        2017-10-14 08:41 - 2017-01-21 17:51 - 000000000 ____D C:\Program Files\Slimjet
        2017-10-14 08:41 - 2010-12-04 14:43 - 000000000 ____D C:\Program Files\Your Uninstaller 2010
        2017-10-14 08:21 - 2017-09-21 19:55 - 000000000 ____D C:\Program Files\Common Files\IObit
        2017-10-14 08:21 - 2017-09-21 19:54 - 000000000 ____D C:\Documents and Settings\doni\Application Data\IObit
        2017-10-09 11:28 - 2016-11-29 22:28 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Ozibox Synchronization Application
        ==================== Files in the root of some directories =======
        2010-04-06 23:40 - 2010-04-06 23:40 - 000007176 ____C () C:\Documents and Settings\doni\Application Data\pcouffin.cat
        2010-04-06 23:40 - 2010-04-06 23:40 - 000001144 ____C () C:\Documents and Settings\doni\Application Data\pcouffin.inf
        2010-04-06 23:40 - 2010-04-06 23:40 - 000000034 ____C () C:\Documents and Settings\doni\Application Data\pcouffin.log
        2010-04-06 23:40 - 2010-04-06 23:40 - 000047360 ____C (VSO Software) C:\Documents and Settings\doni\Application Data\pcouffin.sys
        2010-03-17 22:12 - 2017-10-30 17:43 - 000041472 ____C () C:\Documents and Settings\doni\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
        2010-03-22 10:24 - 2010-03-22 10:24 - 000000127 ____C () C:\Documents and Settings\doni\Local Settings\Application Data\fusioncache.dat
        2017-01-24 13:38 - 2016-11-23 15:37 - 000000570 ____C () C:\Documents and Settings\doni\Local Settings\Application Data\TroubleshooterConfig.json
        2012-03-06 10:56 - 2017-05-28 22:02 - 000000043 __SHC () C:\Documents and Settings\All Users\Application Data\.zreglib
        2016-10-05 16:19 - 2016-10-05 16:19 - 000000232 ____C () C:\Documents and Settings\All Users\Application Data\fontcacheev1.dat
        Files to move or delete:
        ====================
        C:\Documents and Settings\doni\TempWmicBatchFile.bat

        Some zero byte size files/folders:
        ==========================
        C:\Windows\mansk.dll
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\WINDOWS\explorer.exe => File is digitally signed
        C:\WINDOWS\system32\winlogon.exe => File is digitally signed
        C:\WINDOWS\system32\svchost.exe => File is digitally signed
        C:\WINDOWS\system32\services.exe => File is digitally signed
        C:\WINDOWS\system32\User32.dll => File is digitally signed
        C:\WINDOWS\system32\userinit.exe => File is digitally signed
        C:\WINDOWS\system32\rpcss.dll => File is digitally signed
        C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
        C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
        C:\WINDOWS\system32\drivers\sptd.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
        ==================== End of FRST.txt ============================
        Addition.txt
      • от SIMO70
        Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 18-11-2017
        Ran by симо7 (administrator) on СИМО (18-11-2017 18:05:13)
        Running from C:\Users\симо7\Desktop
        Loaded Profiles: симо7 (Available Profiles: симо7)
        Platform: Windows 8.1 Pro (Update) (X64) Language: Български (България)
        Internet Explorer Version 11 (Default browser: FF)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
        (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
        (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
        (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
        (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
        (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
        (@ByELDI) C:\Program Files\KMSpico\Service_KMS.exe
        (AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
        (Microsoft Corporation) C:\Windows\System32\dllhost.exe
        (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
        (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
        (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
        (Intel Corporation) C:\Windows\System32\igfxtray.exe
        (Intel Corporation) C:\Windows\System32\hkcmd.exe
        (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
        (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
        (BitTorrent Inc.) C:\Users\симо7\AppData\Roaming\uTorrent\uTorrent.exe
        (BitTorrent Inc.) C:\Users\симо7\AppData\Roaming\uTorrent\updates\3.4.9_43388\utorrentie.exe
        (BitTorrent Inc.) C:\Users\симо7\AppData\Roaming\uTorrent\updates\3.4.9_43388\utorrentie.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Microsoft Corporation) C:\Windows\System32\dllhost.exe
        (Innovative Digital Technologies) C:\Users\симо7\AppData\Roaming\ACEStream\player\ace_player.exe
        (Innovative Digital Technologies) C:\Users\симо7\AppData\Roaming\ACEStream\engine\ace_engine.exe
        (Innovative Digital Technologies) C:\Users\симо7\AppData\Roaming\ACEStream\engine\ace_engine.exe
        () C:\Users\симо7\AppData\Roaming\ACEStream\updater\ace_update.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        ==================== Registry (Whitelisted) ===========================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [253344 2017-11-10] (AVAST Software)
        HKLM-x32\...\Run: [PowerDVD17Agent] => C:\Program Files (x86)\CyberLink\PowerDVD17\PowerDVD17Agent.exe [526376 2017-02-18] (CyberLink Corp.)
        Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
        HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\Run: [uTorrent] => C:\Users\симо7\AppData\Roaming\uTorrent\uTorrent.exe [2405056 2017-03-18] (BitTorrent Inc.)
        HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
        HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
        HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\MountPoints2: {2f40cbec-ac01-11e7-82a5-2cd4449354ae} - "H:\HiSuiteDownLoader.exe"
        HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\MountPoints2: {a28ae7af-ab96-11e7-82a5-2cd4449354ae} - "H:\HiSuiteDownLoader.exe"
        AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [171896 2017-10-27] (NVIDIA Corporation)
        AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [149552 2017-10-27] (NVIDIA Corporation)
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Hosts: 127.0.0.1       cap.cyberlink.com
        Tcpip\Parameters: [DhcpNameServer] 172.16.1.1
        Tcpip\..\Interfaces\{7D160F40-690F-4016-ADAE-E09D926443B7}: [DhcpNameServer] 172.16.1.1
        Internet Explorer:
        ==================
        HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
        HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
        HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
        HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
        HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
        HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
        HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
        HKU\S-1-5-21-976013588-1774182616-1790962854-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        SearchScopes: HKU\S-1-5-21-976013588-1774182616-1790962854-1001 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={6635F779-B341-4CBB-990E-8F4791163F39}&mid=bac4c002c20547cfa1cbfd9d0277bd5d-a68b7eea2a876e0ede82853fb0728bad9cd94760&lang=en&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-12-28 06:22:29&v=4.3.6.255&pid=wtu&sg=&sap=dsp&q={searchTerms}
        SearchScopes: HKU\S-1-5-21-976013588-1774182616-1790962854-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={6635F779-B341-4CBB-990E-8F4791163F39}&mid=bac4c002c20547cfa1cbfd9d0277bd5d-a68b7eea2a876e0ede82853fb0728bad9cd94760&lang=en&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-12-28 06:22:29&v=4.3.6.255&pid=wtu&sg=&sap=dsp&q={searchTerms}
        BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-11-10] (AVAST Software)
        BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2016-07-12] (Microsoft Corporation)
        BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-11-10] (AVAST Software)
        Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
        FireFox:
        ========
        FF DefaultProfile: r1btu8zo.default
        FF ProfilePath: C:\Users\симо7\AppData\Roaming\Mozilla\Firefox\Profiles\r1btu8zo.default [2017-11-18]
        FF Homepage: Mozilla\Firefox\Profiles\r1btu8zo.default -> https://www.google.bg/?gws_rd=ssl
        FF Extension: (FEBE) - C:\Users\симо7\AppData\Roaming\Mozilla\Firefox\Profiles\r1btu8zo.default\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2017-11-14] [Lagacy]
        FF Extension: (Adblock Plus) - C:\Users\симо7\AppData\Roaming\Mozilla\Firefox\Profiles\r1btu8zo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-11-14]
        FF HKU\S-1-5-21-976013588-1774182616-1790962854-1001\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\симо7\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi => not found
        FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-18] ()
        FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
        FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
        FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-18] ()
        FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [No File]
        FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
        FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
        FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-10-27] (NVIDIA Corporation)
        FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-10-27] (NVIDIA Corporation)
        FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
        FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
        FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
        FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
        FF Plugin HKU\S-1-5-21-976013588-1774182616-1790962854-1001: @acestream.net/acestreamplugin,version=3.1.16 -> C:\Users\симо7\AppData\Roaming\ACEStream\player\npace_plugin.dll [2017-01-31] (Innovative Digital Technologies)
        FF Plugin HKU\S-1-5-21-976013588-1774182616-1790962854-1001: @acestream.net/acestreamplugin,version=3.1.2 -> C:\Users\симо7\AppData\Roaming\ACEStream\player\npace_plugin.dll [2017-01-31] (Innovative Digital Technologies)
        FF Plugin HKU\S-1-5-21-976013588-1774182616-1790962854-1001: @acestream.net/acestreamplugin,version=3.1.7 -> C:\Users\симо7\AppData\Roaming\ACEStream\player\npace_plugin.dll [2017-01-31] (Innovative Digital Technologies)
        Chrome:
        =======
        CHR DefaultProfile: Default
        CHR HomePage: Default -> mysearch.avg.com/?rvt=1
        CHR StartupUrls: Default -> "hxxp://www.google.bg/"
        CHR Profile: C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default [2017-11-18]
        CHR Extension: (Презентации) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]
        CHR Extension: (Документи) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
        CHR Extension: (Google Диск) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-08-08]
        CHR Extension: (YouTube) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-08-08]
        CHR Extension: (Adblock Plus) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-09-26]
        CHR Extension: (Avast SafePrice) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-10-17]
        CHR Extension: (Таблици) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]
        CHR Extension: (Google Документи офлайн) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-08-08]
        CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
        CHR Extension: (Gmail) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-08-08]
        CHR Extension: (Chrome Media Router) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-11-15]
        CHR Extension: (Dealicious (Verified)) - C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pplphlbogdadpkmdhbjdebhfhjifbfka [2017-09-29]
        CHR Profile: C:\Users\симо7\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-07-20]
        CHR Profile: C:\Users\симо7\AppData\Local\Google\Chrome\User Data\System Profile [2017-09-27]
        CHR HKU\S-1-5-21-976013588-1774182616-1790962854-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn] - hxxps://clients2.google.com/service/update2/crx
        CHR HKU\S-1-5-21-976013588-1774182616-1790962854-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx
        CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
        CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7549928 2017-11-10] (AVAST Software)
        R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [281416 2017-11-10] (AVAST Software)
        R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [332368 2017-11-10] (AVAST Software)
        R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
        R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518264 2017-10-11] (NVIDIA Corporation)
        S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518264 2017-10-11] (NVIDIA Corporation)
        R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-10-27] (NVIDIA Corporation)
        R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [460920 2017-10-11] (NVIDIA Corporation)
        R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [734400 2015-08-13] (@ByELDI) [File not signed]
        S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
        S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [183584 2017-11-10] (AVAST Software)
        R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [321032 2017-11-10] (AVAST Software s.r.o.)
        R0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [198968 2017-11-10] (AVAST Software s.r.o.)
        R0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [343288 2017-11-10] (AVAST Software s.r.o.)
        R0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [57728 2017-11-10] (AVAST Software s.r.o.)
        S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [47008 2017-11-10] (AVAST Software)
        R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [41832 2017-09-01] (AVAST Software)
        R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [148288 2017-11-10] (AVAST Software)
        R1 aswNetSec; C:\Windows\System32\drivers\aswNetSec.sys [570152 2017-11-10] (AVAST Software)
        R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [110376 2017-11-10] (AVAST Software)
        R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [84416 2017-11-10] (AVAST Software)
        R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1026232 2017-11-10] (AVAST Software)
        R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [455376 2017-11-15] (AVAST Software)
        R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [203976 2017-11-10] (AVAST Software)
        S3 aswTap; C:\Windows\system32\DRIVERS\aswTap.sys [53904 2017-06-25] (The OpenVPN Project)
        R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [364464 2017-11-10] (AVAST Software)
        S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
        R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2016-08-11] (DT Soft Ltd)
        R3 FUJ02B1; C:\Windows\system32\DRIVERS\FUJ02B1.sys [59152 2016-05-11] (FUJITSU LIMITED)
        R0 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [252232 2017-11-17] (Malwarebytes)
        R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-09-04] (Intel Corporation)
        S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-10-11] (NVIDIA Corporation)
        R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50808 2017-10-27] (NVIDIA Corporation)
        R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57976 2017-10-27] (NVIDIA Corporation)
        S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
        S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
        S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
        S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
        R2 {A14A8EF6-B11D-4356-9ECC-4B937E6CC626}; C:\Program Files (x86)\CyberLink\PowerDVD17\Common\NavFilter\000.fcl [38168 2017-02-17] (CyberLink Corp.)
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-11-18 18:05 - 2017-11-18 18:06 - 000018415 _____ C:\Users\симо7\Desktop\FRST.txt
        2017-11-18 18:04 - 2017-11-18 18:05 - 000000000 ____D C:\FRST
        2017-11-18 18:03 - 2017-11-18 18:03 - 002392064 _____ (Farbar) C:\Users\симо7\Desktop\FRST64.exe
        2017-11-17 17:54 - 2017-11-17 17:54 - 000252232 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
        2017-11-17 17:41 - 2017-11-17 17:41 - 000001957 _____ C:\Users\симо7\Desktop\2017-11-17_17h40_17.png.lnk
        2017-11-17 17:38 - 2017-11-17 17:38 - 012701760 _____ (Learnpulse) C:\Users\симо7\Downloads\Screenpresso.exe
        2017-11-15 21:23 - 2017-11-15 21:23 - 000455376 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
        2017-11-15 18:16 - 2017-11-15 18:16 - 000014486 _____ C:\Users\симо7\Downloads\месец октомври аванс Пламена (1).xlsx
        2017-11-15 08:35 - 2017-11-15 08:35 - 000001082 _____ C:\Users\Public\Desktop\VLC media player.lnk
        2017-11-14 23:52 - 2017-11-14 23:52 - 000071871 _____ C:\Users\симо7\Downloads\blizoo_inv_49655974_01.11.2017.pdf
        2017-11-14 23:45 - 2017-11-14 23:45 - 000001165 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
        2017-11-14 23:45 - 2017-11-14 23:45 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
        2017-11-14 23:44 - 2017-11-14 23:45 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
        2017-11-14 23:44 - 2017-11-14 23:44 - 000000000 ____D C:\ProgramData\SWCUTemp
        2017-11-14 23:35 - 2017-11-14 23:35 - 036686848 _____ (Mozilla) C:\Users\симо7\Downloads\Firefox Setup 57.0.exe
        2017-11-14 21:29 - 2017-11-14 21:29 - 000311248 _____ (Mozilla) C:\Users\симо7\Downloads\Firefox Installer.exe
        2017-11-14 18:04 - 2017-11-14 18:04 - 000014473 _____ C:\Users\симо7\Downloads\месец октомври аванс Пламена.xlsx
        2017-11-14 14:27 - 2017-11-18 11:04 - 000000000 ____D C:\Users\симо7\AppData\LocalLow\uTorrent
        2017-11-11 11:27 - 2017-11-11 11:27 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers
        2017-11-11 11:27 - 2017-11-11 11:27 - 000000000 ____D C:\ProgramData\Samsung
        2017-11-11 11:27 - 2017-11-11 11:27 - 000000000 ____D C:\Program Files (x86)\Samsung
        2017-11-11 11:27 - 2015-09-14 07:09 - 002073600 ____N C:\Windows\SysWOW64\DlgSearchEngine.dll
        2017-11-11 11:27 - 2015-03-12 04:43 - 000089600 _____ (SS) C:\Windows\system32\ux003ci.dll
        2017-11-11 11:27 - 2015-03-12 04:43 - 000022528 _____ () C:\Windows\system32\ux003lm.dll
        2017-11-11 11:27 - 2015-02-04 06:41 - 000158016 _____ C:\Windows\system32\ux003ci.exe
        2017-11-11 11:26 - 2014-08-18 14:59 - 000011576 ____N (Samsung Electronics) C:\Windows\system32\Drivers\SSPORT.SYS
        2017-11-10 09:23 - 2017-11-10 09:23 - 000003914 _____ C:\Windows\System32\Tasks\Avast Emergency Update
        2017-11-10 09:23 - 2017-11-10 09:22 - 001026232 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000570152 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetSec.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000455384 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys.151077381642101
        2017-11-10 09:23 - 2017-11-10 09:22 - 000365168 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
        2017-11-10 09:23 - 2017-11-10 09:22 - 000364464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000343288 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000321032 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000203976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000198968 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000183584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000148288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000110376 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000084416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000057728 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
        2017-11-10 09:23 - 2017-11-10 09:22 - 000047008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
        2017-11-09 13:56 - 2017-11-09 13:56 - 000000000 ____D C:\ProgramData\Steam
        2017-11-09 12:58 - 2017-11-12 20:58 - 000000000 ____D C:\Program Files\Call of Duty WWII
        2017-11-09 12:58 - 2017-11-09 13:56 - 000000842 _____ C:\Users\Public\Desktop\Call of Duty WWII.lnk
        2017-11-08 18:20 - 2017-11-08 18:23 - 000008859 _____ C:\Users\симо7\Desktop\ГАЗ-РАЗХОД.xlsx
        2017-11-07 09:10 - 2017-11-07 09:10 - 000001650 _____ C:\Users\симо7\Desktop\ASC.exe.lnk
        2017-11-07 09:08 - 2017-11-18 17:49 - 000002812 _____ C:\Windows\System32\Tasks\ASC10_SkipUac_симо7
        2017-11-03 17:49 - 2017-11-03 17:49 - 000000000 ____D C:\Users\GLCache\1a410118ebdbd30f6e38de2279d395e9
        2017-11-03 17:49 - 2017-11-03 17:49 - 000000000 ____D C:\Users\GLCache
        2017-11-02 22:22 - 2010-06-02 04:55 - 000527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
        2017-11-02 22:22 - 2010-06-02 04:55 - 000518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
        2017-11-02 22:22 - 2010-06-02 04:55 - 000239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
        2017-11-02 22:22 - 2010-06-02 04:55 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
        2017-11-02 22:22 - 2010-06-02 04:55 - 000077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
        2017-11-02 22:22 - 2010-06-02 04:55 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
        2017-11-02 22:22 - 2010-05-26 11:41 - 002526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
        2017-11-02 22:22 - 2010-05-26 11:41 - 001907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
        2017-11-02 22:22 - 2010-05-26 11:41 - 001868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
        2017-11-02 22:22 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
        2017-11-02 22:22 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
        2017-11-02 22:22 - 2009-09-04 17:44 - 000515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
        2017-11-02 22:22 - 2009-09-04 17:44 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
        2017-11-02 22:22 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
        2017-11-02 22:22 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
        2017-11-02 22:22 - 2009-09-04 17:44 - 000069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 005501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 001974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 000523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
        2017-11-02 22:22 - 2009-09-04 17:29 - 000235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
        2017-11-02 22:22 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
        2017-11-02 22:22 - 2009-03-16 14:18 - 000517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
        2017-11-02 22:22 - 2009-03-16 14:18 - 000235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
        2017-11-02 22:22 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
        2017-11-02 22:22 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
        2017-11-02 22:22 - 2009-03-16 14:18 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
        2017-11-02 22:22 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
        2017-11-02 22:22 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
        2017-11-02 22:22 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
        2017-11-02 22:22 - 2009-03-09 15:27 - 001846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
        2017-11-02 22:22 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
        2017-11-02 22:22 - 2009-03-09 15:27 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
        2017-11-02 22:22 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
        2017-11-02 22:22 - 2008-10-10 04:52 - 005631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
        2017-11-02 22:22 - 2008-10-10 04:52 - 004379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
        2017-11-02 22:22 - 2008-10-10 04:52 - 002605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
        2017-11-02 22:22 - 2008-10-10 04:52 - 002036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
        2017-11-02 22:22 - 2008-10-10 04:52 - 000519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
        2017-11-02 22:22 - 2008-10-10 04:52 - 000452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
        2017-11-02 22:22 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
        2017-11-02 22:22 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
        2017-11-02 22:22 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
        2017-11-02 22:22 - 2008-07-31 10:41 - 000068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
        2017-11-02 22:22 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
        2017-11-02 22:22 - 2008-07-31 10:40 - 000509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
        2017-11-02 22:22 - 2008-07-10 11:01 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
        2017-11-02 22:22 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
        2017-11-02 22:22 - 2008-07-10 11:00 - 003851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
        2017-11-02 22:22 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
        2017-11-02 22:22 - 2008-07-10 11:00 - 001493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
        2017-11-02 22:22 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
        2017-11-02 22:22 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
        2017-11-02 22:22 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
        2017-11-02 22:22 - 2008-05-30 14:18 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
        2017-11-02 22:22 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
        2017-11-02 22:22 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
        2017-11-02 22:22 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
        2017-11-02 22:22 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
        2017-11-02 22:22 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
        2017-11-02 22:22 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
        2017-11-02 22:22 - 2008-05-30 14:11 - 003850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
        2017-11-02 22:22 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
        2017-11-02 22:22 - 2008-05-30 14:11 - 001491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
        2017-11-02 22:22 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
        2017-11-02 22:22 - 2008-05-30 14:11 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
        2017-11-02 22:22 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
        2017-11-02 22:22 - 2008-03-05 16:03 - 000479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
        2017-11-02 22:22 - 2008-03-05 16:03 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
        2017-11-02 22:22 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
        2017-11-02 22:22 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
        2017-11-02 22:22 - 2008-03-05 16:00 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
        2017-11-02 22:22 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
        2017-11-02 22:22 - 2008-03-05 15:56 - 003786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
        2017-11-02 22:22 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
        2017-11-02 22:22 - 2008-03-05 15:56 - 001420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
        2017-11-02 22:22 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
        2017-11-02 22:22 - 2008-02-05 23:07 - 000462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
        2017-11-02 22:22 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
        2017-11-02 22:22 - 2007-10-22 03:39 - 000267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
        2017-11-02 22:22 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
        2017-11-02 22:22 - 2007-10-22 03:37 - 000017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
        2017-11-02 22:22 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
        2017-11-02 22:22 - 2007-10-12 15:14 - 003734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
        2017-11-02 22:22 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
        2017-11-02 22:22 - 2007-10-12 15:14 - 001374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
        2017-11-02 22:22 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
        2017-11-02 22:22 - 2007-10-02 09:56 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
        2017-11-02 22:22 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
        2017-11-02 22:22 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
        2017-11-02 22:22 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
        2017-11-02 22:22 - 2007-07-19 18:14 - 003727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
        2017-11-02 22:22 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
        2017-11-02 22:22 - 2007-07-19 18:14 - 001358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
        2017-11-02 22:22 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
        2017-11-02 22:22 - 2007-07-19 18:14 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
        2017-11-02 22:22 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
        2017-11-02 22:22 - 2007-06-20 20:46 - 000266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
        2017-11-02 22:22 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
        2017-11-02 22:22 - 2007-05-16 16:45 - 003497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
        2017-11-02 22:22 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
        2017-11-02 22:22 - 2007-05-16 16:45 - 001124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
        2017-11-02 22:22 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
        2017-11-02 22:22 - 2007-05-16 16:45 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
        2017-11-02 22:22 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
        2017-11-02 22:22 - 2007-04-04 18:55 - 000261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
        2017-11-02 22:22 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
        2017-11-02 22:22 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
        2017-11-02 22:22 - 2007-03-15 16:57 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
        2017-11-02 22:22 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
        2017-11-02 22:22 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
        2017-11-02 22:22 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
        2017-11-02 22:22 - 2007-03-12 16:42 - 001123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
        2017-11-02 22:22 - 2007-03-05 12:42 - 000017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
        2017-11-02 22:22 - 2007-03-05 12:42 - 000015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
        2017-11-02 22:22 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
        2017-11-02 22:22 - 2007-01-24 15:27 - 000255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
        2017-11-02 22:22 - 2006-12-08 12:02 - 000251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
        2017-11-02 22:22 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
        2017-11-02 22:22 - 2006-11-29 13:06 - 004398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
        2017-11-02 22:22 - 2006-11-29 13:06 - 003426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
        2017-11-02 22:22 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
        2017-11-02 22:22 - 2006-11-29 13:06 - 000440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
        2017-11-02 22:22 - 2006-09-28 16:05 - 003977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
        2017-11-02 22:22 - 2006-09-28 16:05 - 002414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
        2017-11-02 22:22 - 2006-09-28 16:05 - 000237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
        2017-11-02 22:22 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
        2017-11-02 22:22 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
        2017-11-02 22:22 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
        2017-11-02 22:22 - 2006-07-28 09:30 - 000236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
        2017-11-02 22:22 - 2006-07-28 09:30 - 000062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
        2017-11-02 22:22 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
        2017-11-02 22:22 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
        2017-11-02 22:22 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
        2017-11-02 22:22 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
        2017-11-02 22:22 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
        2017-11-02 22:22 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
        2017-11-02 22:22 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
        2017-11-02 22:22 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
        2017-11-02 22:22 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
        2017-11-02 22:22 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
        2017-11-02 22:22 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
        2017-11-02 22:22 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
        2017-11-02 22:22 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
        2017-11-02 22:22 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
        2017-11-02 22:22 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
        2017-11-02 22:22 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
        2017-11-02 22:22 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
        2017-11-02 22:22 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
        2017-11-02 22:22 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
        2017-11-02 22:22 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
        2017-11-02 22:22 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
        2017-11-02 22:22 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
        2017-11-02 22:22 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
        2017-11-02 22:22 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
        2017-11-02 22:19 - 2017-11-02 22:22 - 000000000 ____D C:\Windows\SysWOW64\directx
        2017-11-01 17:44 - 2017-11-01 17:44 - 000000000 ____D C:\ProgramData\PDVD
        2017-11-01 17:43 - 2017-11-01 17:43 - 000002431 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 17.lnk
        2017-11-01 17:43 - 2017-11-01 17:43 - 000002419 _____ C:\Users\Public\Desktop\CyberLink PowerDVD 17.lnk
        2017-11-01 17:43 - 2017-11-01 17:43 - 000000000 ____D C:\Program Files (x86)\NSIS Uninstall Information
        2017-11-01 17:41 - 2017-11-01 17:41 - 000000000 ____D C:\ProgramData\install_backup
        2017-11-01 17:41 - 2017-11-01 17:41 - 000000000 ____D C:\Program Files (x86)\CyberLink
        2017-11-01 11:31 - 2017-09-14 01:20 - 000798008 _____ C:\Windows\SysWOW64\vulkan-1.dll
        2017-11-01 11:31 - 2017-09-14 01:20 - 000490296 _____ C:\Windows\SysWOW64\vulkaninfo.exe
        2017-11-01 11:31 - 2017-09-14 01:19 - 000927544 _____ C:\Windows\system32\vulkan-1.dll
        2017-11-01 11:31 - 2017-09-14 01:19 - 000591160 _____ C:\Windows\system32\vulkaninfo.exe
        2017-10-31 21:52 - 2017-11-01 11:31 - 000000000 ____D C:\Program Files (x86)\VulkanRT
        2017-10-31 21:52 - 2017-10-31 21:52 - 000000000 ____D C:\Windows\SysWOW64\NV
        2017-10-31 21:52 - 2017-10-31 21:52 - 000000000 ____D C:\Windows\system32\NV
        2017-10-31 21:52 - 2017-10-27 18:12 - 000123000 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
        2017-10-31 21:52 - 2017-10-27 18:06 - 000136312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
        2017-10-31 21:45 - 2017-10-27 18:12 - 000607168 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
        2017-10-31 21:45 - 2017-10-27 18:12 - 000081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
        2017-10-31 21:40 - 2017-10-31 21:41 - 000000000 ____D C:\Windows\LastGood
        2017-10-31 21:26 - 2017-11-18 17:49 - 000004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003798 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:26 - 2017-11-18 17:49 - 000003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-10-31 21:23 - 2017-10-26 04:31 - 001989240 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438810.dll
        2017-10-31 21:23 - 2017-10-26 04:31 - 001673848 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438810.dll
        2017-10-31 17:46 - 2017-10-31 17:47 - 000000000 ____D C:\Windows\LastGood.Tmp
        2017-10-31 17:44 - 2017-10-27 19:46 - 040237688 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 036194424 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 035156928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 029236344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 023262464 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 021744632 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 019037416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 019012232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 018207248 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 016763000 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
        2017-10-31 17:44 - 2017-10-27 19:46 - 015027984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 013864232 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 013254520 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 011779328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 010882720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 004284496 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 003807680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 003799032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 003346552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 001989056 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438813.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 001673848 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438813.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 001135464 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 001099200 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 001030592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000981112 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000932472 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000885680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000615360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000527288 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000505976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000492048 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000446216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000407064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000171896 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000154392 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000149552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000132256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
        2017-10-31 17:44 - 2017-10-27 19:46 - 000057976 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
        2017-10-31 17:44 - 2017-10-27 19:46 - 000050808 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
        2017-10-31 17:44 - 2017-10-27 19:46 - 000046182 _____ C:\Windows\system32\nvinfo.pb
        2017-10-31 17:44 - 2017-10-27 19:46 - 000038336 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
        2017-10-31 17:44 - 2017-10-27 19:46 - 000000669 _____ C:\Windows\SysWOW64\nv-vk32.json
        2017-10-31 17:44 - 2017-10-27 19:46 - 000000669 _____ C:\Windows\system32\nv-vk64.json
        2017-10-31 17:42 - 2017-10-31 17:42 - 000000000 ____D C:\NVIDIA
        2017-10-28 19:23 - 2017-10-28 19:23 - 000000000 ____D C:\Users\Public\Documents\Steam
        2017-10-28 19:22 - 2016-08-10 09:38 - 000107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
        2017-10-28 17:50 - 2017-10-13 00:25 - 000835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
        2017-10-28 17:50 - 2017-10-13 00:25 - 000177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
        2017-10-28 17:50 - 2017-10-05 09:17 - 000380248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
        2017-10-28 17:50 - 2017-09-15 01:52 - 000986968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
        2017-10-28 17:50 - 2017-09-08 19:14 - 003084288 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
        2017-10-28 17:50 - 2017-09-08 18:50 - 002471424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
        2017-10-28 17:50 - 2017-09-08 05:31 - 000685440 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
        2017-10-28 17:50 - 2017-09-08 05:28 - 000507176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
        2017-10-28 17:50 - 2017-09-07 23:31 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\mgmtapi.dll
        2017-10-28 17:50 - 2017-09-07 21:20 - 000018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mgmtapi.dll
        2017-10-28 17:50 - 2017-09-07 19:20 - 000513456 _____ C:\Windows\SysWOW64\locale.nls
        2017-10-28 17:50 - 2017-09-07 19:20 - 000513456 _____ C:\Windows\system32\locale.nls
        2017-10-28 17:50 - 2017-09-07 15:40 - 000995272 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
        2017-10-28 17:50 - 2017-09-07 15:40 - 000922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
        2017-10-28 17:50 - 2017-09-07 01:07 - 000158552 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
        2017-10-28 17:50 - 2017-09-06 23:17 - 000461144 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
        2017-10-28 17:50 - 2017-09-06 23:17 - 000443224 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
        2017-10-28 17:50 - 2017-09-06 16:14 - 000166400 _____ (Microsoft Corporation) C:\Windows\system32\regsvc.dll
        2017-10-28 17:50 - 2017-08-11 03:39 - 002779136 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
        2017-10-28 17:50 - 2017-08-11 03:30 - 002464256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-11-18 18:06 - 2017-01-20 10:24 - 000000000 ____D C:\Users\симо7\AppData\Roaming\uTorrent
        2017-11-18 17:49 - 2017-10-04 16:24 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
        2017-11-18 17:49 - 2016-08-08 15:35 - 000003430 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
        2017-11-18 17:49 - 2016-08-08 15:35 - 000003302 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
        2017-11-18 17:48 - 2016-08-09 20:20 - 000000000 ____D C:\Users\симо7\AppData\Roaming\.ACEStream
        2017-11-18 17:44 - 2017-08-16 21:00 - 000000000 ____D C:\_acestream_cache_
        2017-11-18 15:37 - 2016-08-08 15:46 - 000000000 ___RD C:\ТОРЕНТ
        2017-11-18 12:25 - 2016-08-08 15:44 - 000000000 ____D C:\ProgramData\NVIDIA
        2017-11-18 12:21 - 2016-08-08 15:31 - 000003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-976013588-1774182616-1790962854-1001
        2017-11-18 11:50 - 2016-11-17 21:04 - 000000000 ____D C:\Users\симо7\AppData\LocalLow\Mozilla
        2017-11-18 11:48 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps
        2017-11-18 11:48 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
        2017-11-17 17:11 - 2017-03-14 18:53 - 000647040 _____ C:\Windows\system32\perfh002.dat
        2017-11-17 17:11 - 2017-03-14 18:53 - 000122548 _____ C:\Windows\system32\perfc002.dat
        2017-11-17 17:11 - 2014-11-21 00:31 - 001521674 _____ C:\Windows\system32\PerfStringBackup.INI
        2017-11-17 17:11 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
        2017-11-15 18:17 - 2016-08-08 15:26 - 000000000 ____D C:\Users\симо7\AppData\Local\Packages
        2017-11-15 16:40 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\LiveKernelReports
        2017-11-15 08:39 - 2017-04-09 16:58 - 000000000 ____D C:\Users\симо7\AppData\Roaming\vlc
        2017-11-14 23:45 - 2016-08-08 16:40 - 000000000 ____D C:\Users\симо7\AppData\Roaming\Mozilla
        2017-11-14 23:45 - 2016-08-08 16:40 - 000000000 ____D C:\Users\симо7\AppData\Local\Mozilla
        2017-11-14 23:40 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
        2017-11-14 18:20 - 2017-09-30 08:48 - 000000089 _____ C:\Users\симо7\Desktop\Нов текстов документ.txt
        2017-11-14 12:40 - 2016-08-10 17:57 - 000000000 ____D C:\ProgramData\Skype
        2017-11-14 08:43 - 2016-08-08 15:35 - 000002213 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
        2017-11-11 11:20 - 2013-08-22 15:25 - 000262144 ___SH C:\Windows\system32\config\BBI
        2017-11-09 12:57 - 2016-08-11 08:32 - 000000000 ____D C:\Users\симо7\AppData\Roaming\DAEMON Tools Lite
        2017-11-01 17:48 - 2016-08-11 08:22 - 000000000 ____D C:\Users\симо7\Documents\CyberLink
        2017-11-01 17:48 - 2016-08-11 08:22 - 000000000 ____D C:\Users\симо7\AppData\Roaming\CyberLink
        2017-11-01 17:44 - 2017-04-12 10:24 - 000000000 ____D C:\ProgramData\CyberLink
        2017-11-01 17:43 - 2016-08-11 08:18 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
        2017-11-01 17:42 - 2016-08-11 08:20 - 000000000 ____D C:\Users\симо7\AppData\Local\CyberLink
        2017-11-01 17:41 - 2017-02-21 08:47 - 000000000 ____D C:\ProgramData\SUPPORTDIR
        2017-11-01 17:41 - 2016-08-11 08:18 - 000000000 ____D C:\ProgramData\install_clap
        2017-11-01 17:36 - 2016-09-07 13:46 - 000000000 ____D C:\Users\симо7\AppData\Local\CrashDumps
        2017-10-31 21:52 - 2016-08-08 15:44 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
        2017-10-31 21:26 - 2016-08-08 15:44 - 000000000 ____D C:\Program Files\NVIDIA Corporation
        2017-10-31 21:26 - 2016-08-08 15:44 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
        2017-10-30 20:08 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
        2017-10-29 11:25 - 2017-09-27 08:01 - 000000000 ____D C:\ProgramData\ProductData
        2017-10-28 17:52 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
        2017-10-27 18:36 - 2016-10-07 15:17 - 000001951 _____ C:\Windows\NvContainerRecovery.bat
        2017-10-27 18:12 - 2016-08-08 15:44 - 005960824 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
        2017-10-27 18:12 - 2016-08-08 15:44 - 002587768 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
        2017-10-27 18:12 - 2016-08-08 15:44 - 001766520 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
        2017-10-27 18:12 - 2016-08-08 15:44 - 000449656 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
        2017-10-26 17:36 - 2016-08-11 08:18 - 000000000 ____D C:\ProgramData\Temp
        2017-10-25 12:33 - 2016-08-08 15:44 - 007802921 _____ C:\Windows\system32\nvcoproc.bin
        2017-10-22 10:21 - 2016-08-08 16:30 - 000000000 ____D C:\Users\симо7\AppData\Local\ElevatedDiagnostics
        2017-10-22 10:21 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\NDF
        Some files in TEMP:
        ====================
        2017-11-09 17:58 - 2017-11-09 17:58 - 012701760 _____ (Learnpulse) C:\Users\симо7\AppData\Local\Temp\ScreenpressoUpd.exe
        2017-11-15 08:34 - 2017-11-15 08:34 - 030950664 _____ () C:\Users\симо7\AppData\Local\Temp\vlc-2.2.6-win32.exe
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\Windows\system32\winlogon.exe => File is digitally signed
        C:\Windows\system32\wininit.exe => File is digitally signed
        C:\Windows\explorer.exe => File is digitally signed
        C:\Windows\SysWOW64\explorer.exe => File is digitally signed
        C:\Windows\system32\svchost.exe => File is digitally signed
        C:\Windows\SysWOW64\svchost.exe => File is digitally signed
        C:\Windows\system32\services.exe => File is digitally signed
        C:\Windows\system32\User32.dll => File is digitally signed
        C:\Windows\SysWOW64\User32.dll => File is digitally signed
        C:\Windows\system32\userinit.exe => File is digitally signed
        C:\Windows\SysWOW64\userinit.exe => File is digitally signed
        C:\Windows\system32\rpcss.dll => File is digitally signed
        C:\Windows\system32\dnsapi.dll => File is digitally signed
        C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
        C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
        LastRegBack: 2017-11-14 10:10
        ==================== End of FRST.txt ============================
        Addition.txt
      • от tany
        От известно време 3-4 пъти месечно "Актуализация" ми иска съгласието да го инсталирам.Аз отказвам но след 6-7 дни пак опит 
        и така вече няколко месеца.Нямам представа дали е вирус,нямам проблеми с компютъра,няма забивания или забавяне.
        Ето за това става въпрос
         
         
        Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 24-09-2017
        Ran by Стоянчо (administrator) on DESKTOP-HV76MO6 (24-09-2017 23:11:02)
        Running from C:\Users\Стоянчо\Downloads
        Loaded Profiles: Стоянчо (Available Profiles: Стоянчо)
        Platform: Windows 10 Pro Version 1703 (X64) Language: Български (България)
        Internet Explorer Version 11 (Default browser: Chrome)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (Intel Corporation) C:\Windows\System32\igfxCUIService.exe
        (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
        (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
        (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
        (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
        (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
        (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
        (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
        () C:\Program Files\Gramblr\gramblr.exe
        (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
        (Intel Corporation) C:\Windows\System32\igfxEM.exe
        (Intel Corporation) C:\Windows\System32\igfxHK.exe
        () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe
        (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.10\Lightshot.exe
        (Microsoft Corporation) C:\Windows\System32\dllhost.exe
        (Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
        (Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
        (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.23.0_x64__8wekyb3d8bbwe\WinStore.App.exe
        () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17072.13111.0_x64__8wekyb3d8bbwe\Video.UI.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        ==================== Registry (Whitelisted) ===========================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
        HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()
        Winlogon\Notify\igfxcui: igfxdev.dll [X]
        HKU\S-1-5-21-3274723310-3931731729-1199849900-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [48138880 2015-10-14] (Skype Technologies S.A.)
        HKU\S-1-5-21-3274723310-3931731729-1199849900-1001\...\Run: [GoogleChromeAutoLaunch_7AC76D272A3C9865EEE36FF327D0728E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1301848 2017-08-23] (Google Inc.)
        Startup: C:\Users\Стоянчо\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk [2016-12-26]
        ShortcutTarget: Facebook Gameroom.lnk -> C:\Users\Стоянчо\AppData\Local\Facebook\Games\FacebookGameroom.exe (Facebook)
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Hosts: 127.0.0.1    localhost
        Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
        Tcpip\..\Interfaces\{2b43ead3-416b-49fc-acb0-4ea078b43530}: [DhcpNameServer] 192.168.42.129
        Tcpip\..\Interfaces\{9146b479-0d48-411c-83c0-18542761f0fe}: [DhcpNameServer] 95.87.194.4 192.168.0.1
        Tcpip\..\Interfaces\{a5340c57-e453-40ab-bfb5-c36cda227066}: [DhcpNameServer] 192.168.1.1
        Internet Explorer:
        ==================
        BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-09-19] (Microsoft Corporation)
        BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-09-19] (Microsoft Corporation)
        BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-09-19] (Microsoft Corporation)
        BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-09-19] (Microsoft Corporation)
        Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)
        Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)
        Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)
        Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)
        FireFox:
        ========
        FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
        FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
        FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
        FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [No File]
        FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-09-19] (Microsoft Corporation)
        FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-09-19] (Microsoft Corporation)
        FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
        FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
        Chrome: 
        =======
        CHR DefaultProfile: Default
        CHR Profile: C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default [2017-09-24]
        CHR Extension: (Google Презентации) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-09-11]
        CHR Extension: (Google Документи) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-09-11]
        CHR Extension: (Google Диск) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-11]
        CHR Extension: (YouTube) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-11]
        CHR Extension: (Video Downloader professional) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2017-08-04]
        CHR Extension: (Електронни таблици от Google) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-09-11]
        CHR Extension: (Farmville 2 Beacon) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdkkmnngogaccacpomdhdiahljbjihoc [2017-05-08]
        CHR Extension: (Google Документи офлайн) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-09-11]
        CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
        CHR Extension: (Gmail) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-09-11]
        CHR Extension: (Chrome Media Router) - C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-08]
        CHR Extension: (JobBoxPro) - C:\Users\Стоянчо\Downloads\Нова папка (6)\jobboxpro [2017-01-25]
        CHR Profile: C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-09-14]
        CHR Profile: C:\Users\Стоянчо\AppData\Local\Google\Chrome\User Data\System Profile [2017-09-11]
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
        R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4424392 2017-09-08] (Microsoft Corporation)
        R2 gramblrclient; C:\Program Files\Gramblr\gramblr.exe [11867216 2017-09-23] () [File not signed]
        R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [337888 2016-05-03] (Intel Corporation)
        S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation)
        S2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1042304 2016-05-04] (Enigma Software Group USA, LLC.)
        R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [255584 2017-08-19] (Synaptics Incorporated)
        R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
        R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-30] (Microsoft Corporation)
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
        S3 EsgScanner; C:\WINDOWS\System32\DRIVERS\EsgScanner.sys [22704 2016-05-04] ()
        R1 MpKsl1045740a; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D1018B7D-39B5-48CE-97D7-3CAF92792300}\MpKsl1045740a.sys [44928 2017-09-24] (Microsoft Corporation)
        R3 netr28x; C:\WINDOWS\System32\drivers\netr28x.sys [2537984 2017-03-18] (MediaTek Inc.)
        R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [895224 2016-02-17] (Realtek )
        R3 rtbth; C:\WINDOWS\System32\drivers\rtbth.sys [1219200 2015-09-13] (Ralink Technology, Corp.)
        S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
        S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
        S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [23040 2017-03-18] (Microsoft Corporation)
        S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
        R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
        R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
        R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [30368 2017-06-21] (HP)
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-09-24 23:11 - 2017-09-24 23:12 - 000012716 _____ C:\Users\Стоянчо\Downloads\FRST.txt
        2017-09-24 23:10 - 2017-09-24 23:11 - 000000000 ____D C:\FRST
        2017-09-24 23:10 - 2017-09-24 23:10 - 002399744 _____ (Farbar) C:\Users\Стоянчо\Downloads\FRST64.exe
        2017-09-20 22:41 - 2017-09-20 22:43 - 000000000 ____D C:\Users\Стоянчо\Desktop\други
        2017-09-15 23:41 - 2017-09-15 23:41 - 017675071 _____ C:\Users\Стоянчо\Downloads\Milk and Honey- Didi(DVD Quality).mp4
        2017-09-13 07:05 - 2017-09-05 08:30 - 000287648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
        2017-09-13 07:05 - 2017-09-05 08:21 - 000189344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
        2017-09-13 07:05 - 2017-09-05 08:12 - 001409048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
        2017-09-13 07:05 - 2017-09-05 08:12 - 001292880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
        2017-09-13 07:05 - 2017-09-05 08:12 - 000627080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
        2017-09-13 07:05 - 2017-09-05 08:12 - 000081176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
        2017-09-13 07:05 - 2017-09-05 07:53 - 001839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
        2017-09-13 07:05 - 2017-09-05 07:52 - 002259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
        2017-09-13 07:05 - 2017-09-05 07:50 - 004330920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
        2017-09-13 07:05 - 2017-09-05 07:46 - 004471888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
        2017-09-13 07:05 - 2017-09-05 07:45 - 005821496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
        2017-09-13 07:05 - 2017-09-05 07:45 - 002476712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
        2017-09-13 07:05 - 2017-09-05 07:45 - 002166808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
        2017-09-13 07:05 - 2017-09-05 07:45 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
        2017-09-13 07:05 - 2017-09-05 07:45 - 000085784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialUIBroker.exe
        2017-09-13 07:05 - 2017-09-05 07:44 - 000569264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
        2017-09-13 07:05 - 2017-09-05 07:43 - 000611096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
        2017-09-13 07:05 - 2017-09-05 07:43 - 000359560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
        2017-09-13 07:05 - 2017-09-05 07:43 - 000280480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
        2017-09-13 07:05 - 2017-09-05 07:43 - 000169376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
        2017-09-13 07:05 - 2017-09-05 07:43 - 000042456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbs.dll
        2017-09-13 07:05 - 2017-09-05 07:42 - 002330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
        2017-09-13 07:05 - 2017-09-05 07:42 - 000703056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
        2017-09-13 07:05 - 2017-09-05 07:42 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
        2017-09-13 07:05 - 2017-09-05 07:42 - 000291904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
        2017-09-13 07:05 - 2017-09-05 07:42 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
        2017-09-13 07:05 - 2017-09-05 07:41 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
        2017-09-13 07:05 - 2017-09-05 07:41 - 006761560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
        2017-09-13 07:05 - 2017-09-05 07:41 - 004671832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
        2017-09-13 07:05 - 2017-09-05 07:41 - 001106904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
        2017-09-13 07:05 - 2017-09-05 07:41 - 001013912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
        2017-09-13 07:05 - 2017-09-05 07:40 - 000052768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll
        2017-09-13 07:05 - 2017-09-05 07:39 - 001517472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
        2017-09-13 07:05 - 2017-09-05 07:37 - 000583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
        2017-09-13 07:05 - 2017-09-05 07:28 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
        2017-09-13 07:05 - 2017-09-05 07:28 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys
        2017-09-13 07:05 - 2017-09-05 07:27 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
        2017-09-13 07:05 - 2017-09-05 07:26 - 002953216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
        2017-09-13 07:05 - 2017-09-05 07:26 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
        2017-09-13 07:05 - 2017-09-05 07:26 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
        2017-09-13 07:05 - 2017-09-05 07:25 - 013844480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
        2017-09-13 07:05 - 2017-09-05 07:25 - 001448960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
        2017-09-13 07:05 - 2017-09-05 07:25 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
        2017-09-13 07:05 - 2017-09-05 07:25 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
        2017-09-13 07:05 - 2017-09-05 07:24 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
        2017-09-13 07:05 - 2017-09-05 07:23 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
        2017-09-13 07:05 - 2017-09-05 07:22 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
        2017-09-13 07:05 - 2017-09-05 07:22 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
        2017-09-13 07:05 - 2017-09-05 07:21 - 006728704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
        2017-09-13 07:05 - 2017-09-05 07:21 - 001178624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
        2017-09-13 07:05 - 2017-09-05 07:21 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll
        2017-09-13 07:05 - 2017-09-05 07:21 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.exe
        2017-09-13 07:05 - 2017-09-05 07:20 - 000370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
        2017-09-13 07:05 - 2017-09-05 07:19 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
        2017-09-13 07:05 - 2017-09-05 07:19 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.dll
        2017-09-13 07:05 - 2017-09-05 07:19 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
        2017-09-13 07:05 - 2017-09-05 07:19 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput.dll
        2017-09-13 07:05 - 2017-09-05 07:18 - 000524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
        2017-09-13 07:05 - 2017-09-05 07:18 - 000471040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
        2017-09-13 07:05 - 2017-09-05 07:18 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll
        2017-09-13 07:05 - 2017-09-05 07:18 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput8.dll
        2017-09-13 07:05 - 2017-09-05 07:18 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll
        2017-09-13 07:05 - 2017-09-05 07:17 - 000918528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
        2017-09-13 07:05 - 2017-09-05 07:17 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll
        2017-09-13 07:05 - 2017-09-05 07:17 - 000586240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
        2017-09-13 07:05 - 2017-09-05 07:17 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
        2017-09-13 07:05 - 2017-09-05 07:16 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
        2017-09-13 07:05 - 2017-09-05 07:16 - 000844288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
        2017-09-13 07:05 - 2017-09-05 07:16 - 000563200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
        2017-09-13 07:05 - 2017-09-05 07:16 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
        2017-09-13 07:05 - 2017-09-05 07:16 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
        2017-09-13 07:05 - 2017-09-05 07:15 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
        2017-09-13 07:05 - 2017-09-05 07:15 - 000657408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
        2017-09-13 07:05 - 2017-09-05 07:15 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
        2017-09-13 07:05 - 2017-09-05 07:15 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
        2017-09-13 07:05 - 2017-09-05 07:15 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
        2017-09-13 07:05 - 2017-09-05 07:14 - 000754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
        2017-09-13 07:05 - 2017-09-05 07:14 - 000590336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
        2017-09-13 07:05 - 2017-09-05 07:14 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
        2017-09-13 07:05 - 2017-09-05 07:13 - 007598080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
        2017-09-13 07:05 - 2017-09-05 07:13 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
        2017-09-13 07:05 - 2017-09-05 07:12 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
        2017-09-13 07:05 - 2017-09-05 07:12 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
        2017-09-13 07:05 - 2017-09-05 07:12 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
        2017-09-13 07:05 - 2017-09-05 07:11 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
        2017-09-13 07:05 - 2017-09-05 07:11 - 001355264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
        2017-09-13 07:05 - 2017-09-05 07:11 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
        2017-09-13 07:05 - 2017-09-05 07:11 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
        2017-09-13 07:05 - 2017-09-05 07:11 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
        2017-09-13 07:05 - 2017-09-05 07:10 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
        2017-09-13 07:05 - 2017-09-05 07:10 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
        2017-09-13 07:05 - 2017-09-05 07:10 - 000761344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
        2017-09-13 07:05 - 2017-09-05 07:10 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthHFSrv.dll
        2017-09-13 07:05 - 2017-09-05 07:06 - 000221696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll
        2017-09-13 07:05 - 2017-09-05 07:06 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
        2017-09-13 07:05 - 2017-09-05 07:04 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RstrtMgr.dll
        2017-09-13 07:05 - 2017-09-05 07:04 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
        2017-09-13 07:04 - 2017-09-05 08:27 - 002399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
        2017-09-13 07:04 - 2017-09-05 08:27 - 000136096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
        2017-09-13 07:04 - 2017-09-05 08:25 - 002969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
        2017-09-13 07:04 - 2017-09-05 08:24 - 000519584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
        2017-09-13 07:04 - 2017-09-05 08:23 - 001242528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
        2017-09-13 07:04 - 2017-09-05 08:18 - 000820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
        2017-09-13 07:04 - 2017-09-05 08:17 - 000316320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
        2017-09-13 07:04 - 2017-09-05 08:16 - 000724200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
        2017-09-13 07:04 - 2017-09-05 08:16 - 000546208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
        2017-09-13 07:04 - 2017-09-05 08:16 - 000410168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
        2017-09-13 07:04 - 2017-09-05 08:16 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
        2017-09-13 07:04 - 2017-09-05 08:14 - 004708504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
        2017-09-13 07:04 - 2017-09-05 08:14 - 001146176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
        2017-09-13 07:04 - 2017-09-05 08:14 - 000958664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
        2017-09-13 07:04 - 2017-09-05 08:14 - 000254176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
        2017-09-13 07:04 - 2017-09-05 08:14 - 000094624 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
        2017-09-13 07:04 - 2017-09-05 08:11 - 002675104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
        2017-09-13 07:04 - 2017-09-05 08:11 - 000610720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
        2017-09-13 07:04 - 2017-09-05 08:11 - 000387936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
        2017-09-13 07:04 - 2017-09-05 07:53 - 001620880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
        2017-09-13 07:04 - 2017-09-05 07:45 - 023679488 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
        2017-09-13 07:04 - 2017-09-05 07:29 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SEMgrPS.dll
        2017-09-13 07:04 - 2017-09-05 07:27 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
        2017-09-13 07:04 - 2017-09-05 07:27 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
        2017-09-13 07:04 - 2017-09-05 07:27 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
        2017-09-13 07:04 - 2017-09-05 07:26 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
        2017-09-13 07:04 - 2017-09-05 07:26 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.exe
        2017-09-13 07:04 - 2017-09-05 07:26 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnpinst.exe
        2017-09-13 07:04 - 2017-09-05 07:25 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys
        2017-09-13 07:04 - 2017-09-05 07:24 - 000457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
        2017-09-13 07:04 - 2017-09-05 07:24 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.dll
        2017-09-13 07:04 - 2017-09-05 07:24 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
        2017-09-13 07:04 - 2017-09-05 07:24 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcrecovery.dll
        2017-09-13 07:04 - 2017-09-05 07:24 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
        2017-09-13 07:04 - 2017-09-05 07:23 - 020509184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
        2017-09-13 07:04 - 2017-09-05 07:23 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
        2017-09-13 07:04 - 2017-09-05 07:23 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 023684608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
        2017-09-13 07:04 - 2017-09-05 07:22 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetpp.dll
        2017-09-13 07:04 - 2017-09-05 07:22 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
        2017-09-13 07:04 - 2017-09-05 07:21 - 001051136 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
        2017-09-13 07:04 - 2017-09-05 07:21 - 000946688 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll
        2017-09-13 07:04 - 2017-09-05 07:21 - 000422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
        2017-09-13 07:04 - 2017-09-05 07:21 - 000408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
        2017-09-13 07:04 - 2017-09-05 07:21 - 000312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
        2017-09-13 07:04 - 2017-09-05 07:21 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
        2017-09-13 07:04 - 2017-09-05 07:20 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
        2017-09-13 07:04 - 2017-09-05 07:20 - 000546816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
        2017-09-13 07:04 - 2017-09-05 07:19 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
        2017-09-13 07:04 - 2017-09-05 07:19 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
        2017-09-13 07:04 - 2017-09-05 07:19 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 012801536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 002078720 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
        2017-09-13 07:04 - 2017-09-05 07:18 - 000921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 000832000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelinesvc.exe
        2017-09-13 07:04 - 2017-09-05 07:18 - 000752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 000266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
        2017-09-13 07:04 - 2017-09-05 07:18 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
        2017-09-13 07:04 - 2017-09-05 07:17 - 008213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
        2017-09-13 07:04 - 2017-09-05 07:17 - 008207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
        2017-09-13 07:04 - 2017-09-05 07:17 - 000757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
        2017-09-13 07:04 - 2017-09-05 07:16 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
        2017-09-13 07:04 - 2017-09-05 07:15 - 004730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
        2017-09-13 07:04 - 2017-09-05 07:15 - 001143296 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
        2017-09-13 07:04 - 2017-09-05 07:15 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
        2017-09-13 07:04 - 2017-09-05 07:15 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
        2017-09-13 07:04 - 2017-09-05 07:14 - 011887104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
        2017-09-13 07:04 - 2017-09-05 07:14 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
        2017-09-13 07:04 - 2017-09-05 07:14 - 001657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
        2017-09-13 07:04 - 2017-09-05 07:14 - 001583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
        2017-09-13 07:04 - 2017-09-05 07:14 - 001046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
        2017-09-13 07:04 - 2017-09-05 07:14 - 000827904 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
        2017-09-13 07:04 - 2017-09-05 07:13 - 002009600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
        2017-09-13 07:04 - 2017-09-05 07:12 - 006265856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
        2017-09-13 07:04 - 2017-09-05 07:11 - 003654656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
        2017-09-13 07:04 - 2017-09-05 07:11 - 001463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
        2017-09-13 07:04 - 2017-09-05 07:06 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
        2017-09-13 07:03 - 2017-09-05 08:31 - 001596592 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
        2017-09-13 07:03 - 2017-09-05 08:31 - 001346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
        2017-09-13 07:03 - 2017-09-05 08:31 - 001147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
        2017-09-13 07:03 - 2017-09-05 08:31 - 001024928 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
        2017-09-13 07:03 - 2017-09-05 08:31 - 000821664 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
        2017-09-13 07:03 - 2017-09-05 08:31 - 000750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
        2017-09-13 07:03 - 2017-09-05 08:31 - 000115792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
        2017-09-13 07:03 - 2017-09-05 08:26 - 008319904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
        2017-09-13 07:03 - 2017-09-05 08:26 - 001930840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
        2017-09-13 07:03 - 2017-09-05 08:25 - 000159648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
        2017-09-13 07:03 - 2017-09-05 08:24 - 000923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
        2017-09-13 07:03 - 2017-09-05 08:23 - 004462120 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
        2017-09-13 07:03 - 2017-09-05 08:20 - 001057824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
        2017-09-13 07:03 - 2017-09-05 08:19 - 004848960 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
        2017-09-13 07:03 - 2017-09-05 08:19 - 002443168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
        2017-09-13 07:03 - 2017-09-05 08:18 - 007326128 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
        2017-09-13 07:03 - 2017-09-05 08:18 - 005477096 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
        2017-09-13 07:03 - 2017-09-05 08:18 - 002972552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
        2017-09-13 07:03 - 2017-09-05 08:18 - 002647224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
        2017-09-13 07:03 - 2017-09-05 08:18 - 001668344 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
        2017-09-13 07:03 - 2017-09-05 08:18 - 000685512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
        2017-09-13 07:03 - 2017-09-05 08:18 - 000212384 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
        2017-09-13 07:03 - 2017-09-05 08:16 - 001320344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
        2017-09-13 07:03 - 2017-09-05 08:16 - 000872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
        2017-09-13 07:03 - 2017-09-05 08:16 - 000715168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
        2017-09-13 07:03 - 2017-09-05 08:16 - 000228256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
        2017-09-13 07:03 - 2017-09-05 08:16 - 000049720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbs.dll
        2017-09-13 07:03 - 2017-09-05 08:15 - 003116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
        2017-09-13 07:03 - 2017-09-05 08:15 - 000871448 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
        2017-09-13 07:03 - 2017-09-05 08:15 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
        2017-09-13 07:03 - 2017-09-05 08:15 - 000381824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
        2017-09-13 07:03 - 2017-09-05 08:15 - 000257440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
        2017-09-13 07:03 - 2017-09-05 08:14 - 021352656 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
        2017-09-13 07:03 - 2017-09-05 08:14 - 007907344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
        2017-09-13 07:03 - 2017-09-05 08:13 - 001619816 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
        2017-09-13 07:03 - 2017-09-05 08:13 - 000078240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncAppvPublishingServer.exe
        2017-09-13 07:03 - 2017-09-05 08:13 - 000064680 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 002229152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 001854880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 001693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 001462688 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000855456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000849824 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
        2017-09-13 07:03 - 2017-09-05 08:12 - 000844704 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000774560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000699808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000674720 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000406944 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
        2017-09-13 07:03 - 2017-09-05 08:12 - 000235424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe
        2017-09-13 07:03 - 2017-09-05 08:12 - 000203680 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamingUX.dll
        2017-09-13 07:03 - 2017-09-05 07:31 - 003668992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
        2017-09-13 07:03 - 2017-09-05 07:30 - 001639936 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
        2017-09-13 07:03 - 2017-09-05 07:30 - 001275904 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
        2017-09-13 07:03 - 2017-09-05 07:30 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
        2017-09-13 07:03 - 2017-09-05 07:30 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
        2017-09-13 07:03 - 2017-09-05 07:30 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
        2017-09-13 07:03 - 2017-09-05 07:30 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
        2017-09-13 07:03 - 2017-09-05 07:30 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
        2017-09-13 07:03 - 2017-09-05 07:30 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrvext.dll
        2017-09-13 07:03 - 2017-09-05 07:30 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
        2017-09-13 07:03 - 2017-09-05 07:28 - 017371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
        2017-09-13 07:03 - 2017-09-05 07:28 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
        2017-09-13 07:03 - 2017-09-05 07:27 - 007931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
        2017-09-13 07:03 - 2017-09-05 07:27 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\CfgSPCellular.dll
        2017-09-13 07:03 - 2017-09-05 07:27 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAPNCsp.dll
        2017-09-13 07:03 - 2017-09-05 07:27 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\datamarketsvc.dll
        2017-09-13 07:03 - 2017-09-05 07:27 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
        2017-09-13 07:03 - 2017-09-05 07:26 - 000499712 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
        2017-09-13 07:03 - 2017-09-05 07:26 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\csplte.dll
        2017-09-13 07:03 - 2017-09-05 07:26 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
        2017-09-13 07:03 - 2017-09-05 07:26 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
        2017-09-13 07:03 - 2017-09-05 07:26 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
        2017-09-13 07:03 - 2017-09-05 07:25 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
        2017-09-13 07:03 - 2017-09-05 07:25 - 000527872 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
        2017-09-13 07:03 - 2017-09-05 07:25 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
        2017-09-13 07:03 - 2017-09-05 07:25 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
        2017-09-13 07:03 - 2017-09-05 07:24 - 000385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvsc.dll
        2017-09-13 07:03 - 2017-09-05 07:24 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
        2017-09-13 07:03 - 2017-09-05 07:24 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput.dll
        2017-09-13 07:03 - 2017-09-05 07:24 - 000109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
        2017-09-13 07:03 - 2017-09-05 07:23 - 000739840 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
        2017-09-13 07:03 - 2017-09-05 07:23 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
        2017-09-13 07:03 - 2017-09-05 07:23 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
        2017-09-13 07:03 - 2017-09-05 07:23 - 000305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
        2017-09-13 07:03 - 2017-09-05 07:23 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
        2017-09-13 07:03 - 2017-09-05 07:23 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll
        2017-09-13 07:03 - 2017-09-05 07:22 - 000556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
        2017-09-13 07:03 - 2017-09-05 07:22 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
        2017-09-13 07:03 - 2017-09-05 07:22 - 000413184 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
        2017-09-13 07:03 - 2017-09-05 07:22 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
        2017-09-13 07:03 - 2017-09-05 07:22 - 000213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput8.dll
        2017-09-13 07:03 - 2017-09-05 07:21 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
        2017-09-13 07:03 - 2017-09-05 07:21 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
        2017-09-13 07:03 - 2017-09-05 07:20 - 007337472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
        2017-09-13 07:03 - 2017-09-05 07:20 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
        2017-09-13 07:03 - 2017-09-05 07:20 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
        2017-09-13 07:03 - 2017-09-05 07:20 - 000412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
        2017-09-13 07:03 - 2017-09-05 07:20 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
        2017-09-13 07:03 - 2017-09-05 07:20 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
        2017-09-13 07:03 - 2017-09-05 07:19 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
        2017-09-13 07:03 - 2017-09-05 07:19 - 001085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
        2017-09-13 07:03 - 2017-09-05 07:19 - 001028608 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
        2017-09-13 07:03 - 2017-09-05 07:19 - 000996864 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
        2017-09-13 07:03 - 2017-09-05 07:19 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
        2017-09-13 07:03 - 2017-09-05 07:19 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
        2017-09-13 07:03 - 2017-09-05 07:19 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 004175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 000922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 000874496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 000803328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
        2017-09-13 07:03 - 2017-09-05 07:18 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
        2017-09-13 07:03 - 2017-09-05 07:17 - 002765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
        2017-09-13 07:03 - 2017-09-05 07:17 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
        2017-09-13 07:03 - 2017-09-05 07:17 - 001397760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
        2017-09-13 07:03 - 2017-09-05 07:16 - 002805248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
        2017-09-13 07:03 - 2017-09-05 07:16 - 002680320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
        2017-09-13 07:03 - 2017-09-05 07:16 - 000440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
        2017-09-13 07:03 - 2017-09-05 07:16 - 000397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 004396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 003307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 003059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 002503680 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 002055680 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
        2017-09-13 07:03 - 2017-09-05 07:15 - 001736704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 001460224 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 001077248 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
        2017-09-13 07:03 - 2017-09-05 07:15 - 000706560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
        2017-09-13 07:03 - 2017-09-05 07:14 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
        2017-09-13 07:03 - 2017-09-05 07:14 - 002445824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
        2017-09-13 07:03 - 2017-09-05 07:14 - 002177024 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
        2017-09-13 07:03 - 2017-09-05 07:14 - 002006528 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
        2017-09-13 07:03 - 2017-09-05 07:14 - 000986624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
        2017-09-13 07:03 - 2017-09-05 07:14 - 000810496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
        2017-09-13 07:03 - 2017-09-05 07:13 - 001802752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
        2017-09-13 07:03 - 2017-09-05 07:13 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
        2017-09-13 07:03 - 2017-09-05 07:12 - 002153984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
        2017-09-13 07:03 - 2017-09-05 07:11 - 000254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
        2017-09-13 07:03 - 2017-09-05 07:09 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll
        2017-09-13 07:03 - 2017-09-05 07:07 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\RstrtMgr.dll
        2017-09-13 07:03 - 2017-09-05 07:07 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll
        2017-09-13 07:03 - 2017-09-01 08:55 - 000031932 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
        2017-08-25 23:36 - 2017-09-13 21:06 - 000000000 ____D C:\Users\Стоянчо\Desktop\red
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-09-24 23:13 - 2017-02-05 23:56 - 000000000 ____D C:\ProgramData\Gramblr
        2017-09-24 22:54 - 2017-06-18 07:23 - 000000000 ____D C:\Users\Стоянчо\Desktop\яяь
        2017-09-24 20:10 - 2017-06-30 01:05 - 000004212 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{33349A0F-B0C0-4DB3-AFE6-0F51132F45D5}
        2017-09-24 19:38 - 2017-06-30 00:42 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
        2017-09-24 17:36 - 2017-06-30 01:05 - 000004276 _____ C:\WINDOWS\System32\Tasks\Software Updater
        2017-09-24 13:12 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\AppReadiness
        2017-09-24 13:06 - 2015-09-13 15:31 - 000000000 __SHD C:\Users\Стоянчо\IntelGraphicsProfiles
        2017-09-23 19:06 - 2015-09-13 15:01 - 000000000 ____D C:\Users\Стоянчо\AppData\Local\Packages
        2017-09-23 19:04 - 2015-09-25 17:35 - 000000000 ____D C:\Users\Стоянчо\AppData\Roaming\uTorrent
        2017-09-23 18:02 - 2017-07-18 10:48 - 000001085 _____ C:\Users\Стоянчо\Desktop\Нов текстов документ.txt
        2017-09-23 15:14 - 2017-02-05 23:57 - 000000000 ____D C:\Program Files\Gramblr
        2017-09-23 13:05 - 2017-06-30 01:03 - 002547028 _____ C:\WINDOWS\system32\PerfStringBackup.INI
        2017-09-23 13:05 - 2015-12-04 21:09 - 001132696 _____ C:\WINDOWS\system32\perfh002.dat
        2017-09-23 13:05 - 2015-12-04 21:09 - 000334978 _____ C:\WINDOWS\system32\perfc002.dat
        2017-09-23 13:00 - 2017-06-30 01:05 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
        2017-09-23 13:00 - 2017-03-18 14:40 - 001572864 _____ C:\WINDOWS\system32\config\BBI
        2017-09-23 07:37 - 2017-03-19 00:03 - 000000000 ___HD C:\Program Files\WindowsApps
        2017-09-22 07:46 - 2017-06-30 00:48 - 000000000 ____D C:\Users\Стоянчо
        2017-09-22 06:18 - 2017-07-27 20:57 - 000003382 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3274723310-3931731729-1199849900-1001
        2017-09-22 06:17 - 2015-09-13 15:03 - 000002401 _____ C:\Users\Стоянчо\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
        2017-09-22 06:17 - 2015-09-13 15:03 - 000000000 ___RD C:\Users\Стоянчо\OneDrive
        2017-09-19 06:55 - 2015-10-09 22:20 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
        2017-09-18 21:49 - 2017-03-19 00:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
        2017-09-14 02:24 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\rescache
        2017-09-14 02:16 - 2017-03-19 00:01 - 000000000 ____D C:\WINDOWS\INF
        2017-09-13 18:18 - 2015-09-13 15:01 - 000000000 __RHD C:\Users\Public\AccountPictures
        2017-09-13 18:15 - 2017-06-30 00:42 - 000381448 _____ C:\WINDOWS\system32\FNTCACHE.DAT
        2017-09-13 07:44 - 2017-03-20 06:21 - 000000000 ____D C:\WINDOWS\system32\bg
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ___SD C:\WINDOWS\system32\F12
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\system32\setup
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\ShellExperiences
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer
        2017-09-13 07:44 - 2017-03-19 00:03 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
        2017-09-13 07:20 - 2015-09-13 17:14 - 000000000 ____D C:\WINDOWS\system32\MRT
        2017-09-13 07:16 - 2017-03-18 23:51 - 000000000 ____D C:\WINDOWS\CbsTemp
        2017-09-13 07:16 - 2015-09-13 17:14 - 138202976 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
        2017-09-02 18:15 - 2017-03-19 00:06 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
        2017-09-02 18:15 - 2017-03-19 00:06 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
        2017-08-29 06:58 - 2016-09-11 19:33 - 000002270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
        2017-08-26 15:34 - 2017-08-05 17:48 - 000000000 ____D C:\Users\Стоянчо\Desktop\;[;.[plpl
        2017-08-25 07:37 - 2017-07-28 23:11 - 000000000 ____D C:\Users\Стоянчо\Desktop\dfere
        ==================== Files in the root of some directories =======
        2016-01-17 08:06 - 2017-07-17 07:19 - 000009216 _____ () C:\Users\Стоянчо\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
        2016-07-17 20:30 - 2016-07-17 20:30 - 000000036 _____ () C:\Users\Стоянчо\AppData\Local\housecall.guid.cache
        2015-09-13 15:16 - 2015-09-13 15:16 - 000000003 _____ () C:\Users\Стоянчо\AppData\Local\updater.log
        2015-09-13 15:16 - 2017-05-06 19:17 - 000000425 _____ () C:\Users\Стоянчо\AppData\Local\UserProducts.xml
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\WINDOWS\system32\winlogon.exe => File is digitally signed
        C:\WINDOWS\system32\wininit.exe => File is digitally signed
        C:\WINDOWS\explorer.exe => File is digitally signed
        C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
        C:\WINDOWS\system32\svchost.exe => File is digitally signed
        C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
        C:\WINDOWS\system32\services.exe => File is digitally signed
        C:\WINDOWS\system32\User32.dll => File is digitally signed
        C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
        C:\WINDOWS\system32\userinit.exe => File is digitally signed
        C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
        C:\WINDOWS\system32\rpcss.dll => File is digitally signed
        C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
        C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
        C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
        LastRegBack: 2017-09-19 19:38
        ==================== End of FRST.txt ============================
         
        Addition.txt
         
        Благодаря предварително.
    • Разглеждащи в момента   0 потребители

      Няма регистрирани потребители разглеждащи тази страница.

    • Дарение

    ×