Премини към съдържанието

Препоръчан отговор


Добър ден и честит празник на сайта 
След рестартиране на пц-то 2 пати часовникът се връщаше със стара дата нещо от рода на 11,1,2011г
След което някой от програмите който ми се стартират със лин-а просто бяха скрити като икони .. както и че пц-то започна буквално да работи по бавно 
Не съм със лаптоп )


 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14.03.2018
Ran by GAMEPC (administrator) on GAMEPC-PC (05-04-2018 15:41:11)
Running from C:\Users\GAMEPC\Downloads
Loaded Profiles: GAMEPC (Available Profiles: GAMEPC)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Български (България)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AutoKMS] => C:\Windows\AutoKMS.exe [615936 2017-09-08] ()
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-01-21] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle Corporation)
HKU\S-1-5-21-2297230751-1021565052-1431566534-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832264 2017-10-10] (Skype Technologies S.A.)
HKU\S-1-5-21-2297230751-1021565052-1431566534-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3199776 2018-04-03] (Valve Corporation)
HKU\S-1-5-21-2297230751-1021565052-1431566534-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4836032 2017-08-17] (Disc Soft Ltd)
HKU\S-1-5-21-2297230751-1021565052-1431566534-1000\...\Run: [Viber] => C:\Users\GAMEPC\AppData\Local\Viber\Viber.exe [36126280 2018-03-12] (Viber Media S.à r.l.)
HKU\S-1-5-21-2297230751-1021565052-1431566534-1000\...\Run: [Discord] => C:\Users\GAMEPC\AppData\Local\Discord\app-0.0.300\Discord.exe [57821176 2018-01-08] (Discord Inc.)
HKU\S-1-5-21-2297230751-1021565052-1431566534-1000\...\Run: [RazerCortex] => C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncher.exe [475232 2018-01-16] (Razer Inc.)
HKU\S-1-5-21-2297230751-1021565052-1431566534-1000\...\MountPoints2: {609d2171-c4d2-11e7-a1c0-048d38748987} - F:\Lenovo_Suite.exe
Startup: C:\Users\GAMEPC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Need for Speed™ Undercover Registration.lnk [2018-02-24]
ShortcutTarget: Need for Speed™ Undercover Registration.lnk -> D:\uncer\Support\EAregister.exe (No File)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 87.121.24.12
Tcpip\..\Interfaces\{F8E6BFBF-08DD-4CEC-8468-25670AF9DFE4}: [DhcpNameServer] 87.121.24.12

Internet Explorer:
==================
HKU\S-1-5-21-2297230751-1021565052-1431566534-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_161\bin\ssv.dll [2018-01-20] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-01-20] (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll [2018-01-20] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-01-20] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: mrpwyf7s.default
FF ProfilePath: C:\Users\GAMEPC\AppData\Roaming\Mozilla\Firefox\Profiles\mrpwyf7s.default [2018-04-01]
FF Homepage: Mozilla\Firefox\Profiles\mrpwyf7s.default -> google.bg
FF Extension: (uBlock Origin) - C:\Users\GAMEPC\AppData\Roaming\Mozilla\Firefox\Profiles\mrpwyf7s.default\Extensions\uBlock0@raymondhill.net.xpi [2018-03-31]
FF Extension: (TLS 1.3 gradual roll-out) - C:\Users\GAMEPC\AppData\Roaming\Mozilla\Firefox\Profiles\mrpwyf7s.default\features\{6dfa8bc3-c562-48f9-84e2-1e447d2cef2f}\tls13-rollout-bug1442042@mozilla.org.xpi [2018-03-31] [Legacy]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_29_0_0_113.dll [2018-03-14] ()
FF Plugin: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-01-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-01-20] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_113.dll [2018-03-14] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1229199.dll [2017-03-31] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-01-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-01-20] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-03-24] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-03-24] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://google.bg/"
CHR Profile: C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default [2018-04-05]
CHR Extension: (Презентации) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Документи) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Диск) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-09-08]
CHR Extension: (YouTube) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-09-08]
CHR Extension: (Таблици) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Google Документи офлайн) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-09-08]
CHR Extension: (MetaMask) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2018-04-05]
CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
CHR Extension: (Gmail) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-09-08]
CHR Extension: (Chrome Media Router) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-03-23]

Opera: 
=======
OPR Extension: (uBlock Origin) - C:\Users\GAMEPC\AppData\Roaming\Opera Software\Opera Stable\Extensions\kccohkcpppjjkkjppopfnflnebibpida [2017-12-16]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6076936 2018-03-27] ()
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2291392 2017-08-17] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [774272 2018-03-09] (EasyAntiCheat Ltd)
S2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-09-19] (Hi-Rez Studios) [File not signed]
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [522688 2018-03-14] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [522688 2018-03-14] (NVIDIA Corporation)
R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [253776 2017-12-01] (Razer Inc)
R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [532352 2017-11-07] (Razer Inc.)
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [502144 2018-01-16] (Razer Inc.)
S2 SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [24576 2017-09-08] (Realtek Semiconductor.) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2017-06-20] (Microsoft Corporation)
R2 wuauserv; C:\Windows\system32\wuaueng2.dll [2651136 2017-09-08] (Microsoft Corporation) [File not signed]
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11944 2017-09-08] (Advanced Micro Devices Inc.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2017-09-11] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2017-09-11] (Disc Soft Ltd)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-09-08] (REALiX(tm))
S3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2017-09-08] (Qualcomm Atheros Co., Ltd.)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [31168 2018-03-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [59240 2017-12-15] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57792 2017-11-16] (NVIDIA Corporation)
R3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [61656 2017-09-08] (Realtek Semiconductor Corporation )
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [137720 2017-09-21] (Razer, Inc.)
S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-04-05 15:41 - 2018-04-05 15:41 - 000015301 _____ C:\Users\GAMEPC\Downloads\FRST.txt
2018-04-05 15:41 - 2018-04-05 15:41 - 000000000 ____D C:\FRST
2018-04-05 15:40 - 2018-04-05 15:40 - 002403328 _____ (Farbar) C:\Users\GAMEPC\Downloads\FRST64.exe
2018-04-05 07:09 - 2018-04-05 07:09 - 000027855 _____ C:\Users\GAMEPC\Downloads\Friends.Season.05.BDRip.Xvid.DualAudio.torrent
2018-04-03 16:26 - 2018-04-03 16:26 - 000000000 ____D C:\Users\GAMEPC\Documents\My Games
2018-04-03 15:53 - 2018-04-03 15:53 - 000000222 _____ C:\Users\GAMEPC\Desktop\F1 2015.url
2018-04-03 14:08 - 2018-04-03 14:08 - 000015112 _____ C:\Users\GAMEPC\Downloads\The.Commuter.2018.DVDRip.XviD.AC3-EVO (1).torrent
2018-04-03 14:07 - 2018-04-03 14:07 - 000208429 _____ C:\Users\GAMEPC\Downloads\SUBS_The.Commuter.2018.(subs.sab.bz).zip
2018-04-03 14:07 - 2018-04-03 14:07 - 000015112 _____ C:\Users\GAMEPC\Downloads\The.Commuter.2018.DVDRip.XviD.AC3-EVO.torrent
2018-04-01 21:53 - 2018-04-01 21:53 - 000015670 _____ C:\Users\GAMEPC\Downloads\The.Prestige.2006.480p.BRRip.XviD.BGAUDiO-KiNGS.torrent
2018-04-01 21:52 - 2018-04-01 21:52 - 000013158 _____ C:\Users\GAMEPC\Downloads\The.Illusionist.2006.720p.BRRiP.BG-AUDiO.AC3.XviD-HS0.torrent
2018-03-31 02:05 - 2018-03-31 02:05 - 000027855 _____ C:\Users\GAMEPC\Downloads\Friends.Season.04.BDRip.Xvid.DualAudio.torrent
2018-03-30 19:29 - 2018-03-30 19:29 - 000067856 _____ C:\Users\GAMEPC\Downloads\mollys.game.2017.bdrip.x264-drones_1(subsunacs.net).rar
2018-03-30 19:29 - 2018-03-30 19:29 - 000033868 _____ C:\Users\GAMEPC\Downloads\Mollys.Game.2017.720p.BluRay.x264-DRONES.mkv.torrent
2018-03-29 17:52 - 2018-03-29 17:52 - 000000000 __SHD C:\82ace7d6-0197-474d-bf4b-a2043e72329b
2018-03-28 00:26 - 2018-03-28 00:26 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2018-03-28 00:26 - 2018-03-24 02:05 - 000138120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2018-03-28 00:26 - 2017-12-09 01:25 - 000798520 _____ C:\Windows\SysWOW64\vulkan-1.dll
2018-03-28 00:26 - 2017-12-09 01:25 - 000490808 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2018-03-28 00:26 - 2017-12-09 01:24 - 000928568 _____ C:\Windows\system32\vulkan-1.dll
2018-03-28 00:26 - 2017-12-09 01:24 - 000591672 _____ C:\Windows\system32\vulkaninfo.exe
2018-03-28 00:22 - 2018-03-25 19:26 - 035624808 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2018-03-28 00:22 - 2018-03-25 19:26 - 028204984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2018-03-28 00:22 - 2018-03-25 19:26 - 017371168 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2018-03-28 00:22 - 2018-03-25 19:25 - 000997792 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2018-03-28 00:22 - 2018-03-25 19:25 - 000950120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2018-03-28 00:22 - 2018-03-25 19:25 - 000625592 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2018-03-28 00:22 - 2018-03-25 19:25 - 000515672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2018-03-28 00:22 - 2018-03-25 19:24 - 040278616 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2018-03-28 00:22 - 2018-03-25 19:24 - 035188992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2018-03-28 00:22 - 2018-03-25 19:24 - 003914784 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2018-03-28 00:22 - 2018-03-25 19:24 - 003444152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2018-03-28 00:22 - 2018-03-25 19:24 - 001985112 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6439135.dll
2018-03-28 00:22 - 2018-03-25 19:24 - 001683712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6439135.dll
2018-03-28 00:22 - 2018-03-25 19:24 - 001137056 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2018-03-28 00:22 - 2018-03-25 19:24 - 001066584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2018-03-28 00:22 - 2018-03-25 19:13 - 000419672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2018-03-28 00:22 - 2018-03-25 19:12 - 019854816 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2018-03-28 00:22 - 2018-03-25 19:12 - 018910896 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2018-03-28 00:22 - 2018-03-25 19:12 - 016496768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2018-03-28 00:22 - 2018-03-25 19:12 - 015558928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2018-03-28 00:22 - 2018-03-25 19:12 - 013571520 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2018-03-28 00:22 - 2018-03-25 19:12 - 011132384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2018-03-28 00:22 - 2018-03-25 19:12 - 001153752 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2018-03-28 00:22 - 2018-03-25 19:12 - 000902096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2018-03-28 00:22 - 2018-03-25 19:12 - 000541856 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2018-03-28 00:22 - 2018-03-25 19:12 - 000460024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2018-03-28 00:22 - 2018-03-25 19:12 - 000182784 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2018-03-28 00:22 - 2018-03-25 19:12 - 000165136 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2018-03-28 00:22 - 2018-03-25 19:12 - 000159704 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2018-03-28 00:22 - 2018-03-25 19:12 - 000142816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2018-03-28 00:22 - 2018-03-25 19:11 - 012967056 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2018-03-28 00:22 - 2018-03-25 19:11 - 011001504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2018-03-28 00:22 - 2018-03-25 19:11 - 003919352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2018-03-27 02:18 - 2018-03-27 02:18 - 000029106 _____ C:\Users\GAMEPC\Downloads\Friends.Season.03.BDRip.Xvid.DualAudio.torrent
2018-03-26 21:48 - 2018-03-26 21:48 - 000000000 ____D C:\Users\GAMEPC\AppData\Local\Hinterland
2018-03-26 21:47 - 2018-03-26 21:47 - 000000000 ____D C:\Users\GAMEPC\AppData\LocalLow\Hinterland
2018-03-26 21:34 - 2018-03-26 21:34 - 000000222 _____ C:\Users\GAMEPC\Desktop\The Long Dark.url
2018-03-23 20:52 - 2018-03-23 20:52 - 000047011 _____ C:\Users\GAMEPC\Downloads\The_X_Files_11_01.(subs.sab.bz).zip
2018-03-23 20:52 - 2018-03-23 20:52 - 000007111 _____ C:\Users\GAMEPC\Downloads\The.X-Files.S11E01.XviD-AFG.torrent
2018-03-23 16:37 - 2018-03-23 16:37 - 000015104 _____ C:\Users\GAMEPC\Downloads\[CzechCasting] Irena (02.03.2018) rq.mp4.torrent
2018-03-23 16:36 - 2018-03-23 16:36 - 000014653 _____ C:\Users\GAMEPC\Downloads\CRUISING IN SAINT TROPEZ.torrent
2018-03-23 00:04 - 2018-03-23 00:04 - 000000000 ____D C:\Users\GAMEPC\Documents\League of Legends
2018-03-22 16:58 - 2018-03-22 16:58 - 000067879 _____ C:\Users\GAMEPC\Downloads\mollys.game.2017.dvdscr.xvid.ac3.hq.hive-cm8(subsunacs.net).rar
2018-03-20 19:19 - 2018-03-16 21:01 - 001985280 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6439124.dll
2018-03-20 19:19 - 2018-03-16 21:01 - 001684000 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6439124.dll
2018-03-20 19:12 - 2018-03-20 19:12 - 000003922 _____ C:\Windows\System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-03-18 16:44 - 2018-03-18 16:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
2018-03-18 16:44 - 2018-03-18 16:44 - 000000000 ____D C:\Program Files\qBittorrent
2018-03-16 18:09 - 2018-03-16 18:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gran Turismo 4 Prologue
2018-03-15 11:49 - 2018-03-21 14:30 - 000000000 ____D C:\Users\GAMEPC\AppData\Local\Viber
2018-03-14 17:27 - 2018-03-14 17:27 - 000000000 ____D C:\Program Files (x86)\Flex Anticheat
2018-03-14 01:27 - 2018-03-14 01:27 - 000004466 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-03-12 18:50 - 2018-03-12 18:50 - 000000218 _____ C:\Users\GAMEPC\Desktop\Counter-Strike.url
2018-03-10 16:20 - 2018-03-10 16:20 - 000000000 ____D C:\Users\GAMEPC\AppData\Local\SCE

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-04-05 15:26 - 2017-09-23 18:42 - 000000000 ____D C:\Program Files (x86)\Steam
2018-04-05 15:15 - 2009-07-14 07:45 - 000028352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-04-05 15:15 - 2009-07-14 07:45 - 000028352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-04-05 15:09 - 2018-01-11 17:53 - 000638764 _____ C:\Windows\system32\perfh002.dat
2018-04-05 15:09 - 2018-01-11 17:53 - 000113484 _____ C:\Windows\system32\perfc002.dat
2018-04-05 15:09 - 2009-07-14 08:13 - 001492576 _____ C:\Windows\system32\PerfStringBackup.INI
2018-04-05 15:09 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\inf
2018-04-05 15:06 - 2017-10-13 16:36 - 000000000 ____D C:\Users\GAMEPC\Documents\ViberDownloads
2018-04-05 15:06 - 2017-09-08 14:05 - 000000000 ____D C:\Users\GAMEPC\AppData\Local\NVIDIA
2018-04-05 12:54 - 2017-09-10 01:33 - 000000000 ____D C:\Users\GAMEPC\AppData\Roaming\qBittorrent
2018-04-05 02:17 - 2017-09-19 23:12 - 000000000 ____D C:\Users\GAMEPC\AppData\Roaming\TS3Client
2018-04-04 19:24 - 2017-12-08 19:36 - 000000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2018-04-04 19:23 - 2017-09-08 13:34 - 000000000 ____D C:\Program Files\Mozilla Firefox
2018-04-04 19:23 - 2017-09-08 13:34 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-04-03 16:36 - 2017-09-08 13:35 - 000003864 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1504866897
2018-04-03 16:36 - 2017-09-08 13:34 - 000000000 ____D C:\Program Files (x86)\Opera
2018-04-03 16:26 - 2017-11-29 19:58 - 000000000 ____D C:\ProgramData\Codemasters
2018-04-03 16:24 - 2009-07-14 06:20 - 000000000 ____D C:\Program Files\Common Files\Microsoft Shared
2018-04-01 19:25 - 2017-09-08 13:51 - 000000000 ____D C:\Users\GAMEPC\AppData\LocalLow\Mozilla
2018-03-28 00:27 - 2017-09-08 14:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2018-03-28 00:27 - 2017-09-08 13:20 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2018-03-25 19:13 - 2017-09-08 14:02 - 019968176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2018-03-25 19:13 - 2017-09-08 14:02 - 000505232 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2018-03-25 19:13 - 2017-09-08 13:22 - 022887280 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2018-03-25 19:11 - 2017-09-08 14:02 - 004426120 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2018-03-24 04:13 - 2017-09-08 13:21 - 000045511 _____ C:\Windows\system32\nvinfo.pb
2018-03-24 02:50 - 2017-09-08 14:03 - 000001951 _____ C:\Windows\NvContainerRecovery.bat
2018-03-24 02:02 - 2017-09-08 14:03 - 005952392 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2018-03-24 02:02 - 2017-09-08 14:03 - 002596320 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2018-03-24 02:02 - 2017-09-08 14:03 - 001767824 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2018-03-24 02:02 - 2017-09-08 14:03 - 000633224 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2018-03-24 02:02 - 2017-09-08 14:03 - 000451040 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2018-03-24 02:02 - 2017-09-08 14:03 - 000123840 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2018-03-24 02:02 - 2017-09-08 14:03 - 000083072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2018-03-23 00:47 - 2017-09-08 13:35 - 000002222 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-03-23 00:47 - 2017-09-08 13:35 - 000002181 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-03-22 14:04 - 2017-12-06 19:25 - 000000000 ____D C:\Users\GAMEPC\AppData\Roaming\ViberPC
2018-03-21 14:27 - 2017-09-08 13:20 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2018-03-21 14:22 - 2017-09-08 14:03 - 008114212 _____ C:\Windows\system32\nvcoproc.bin
2018-03-20 19:13 - 2017-09-08 14:05 - 000001416 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2018-03-20 19:13 - 2017-09-08 14:04 - 000003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-03-20 19:13 - 2017-09-08 14:04 - 000003798 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-03-20 19:12 - 2017-09-08 14:04 - 000004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-03-20 19:12 - 2017-09-08 14:04 - 000003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-03-20 19:12 - 2017-09-08 14:04 - 000003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-03-20 19:12 - 2017-09-08 14:04 - 000003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-03-20 19:12 - 2017-09-08 14:04 - 000003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-03-20 19:12 - 2017-09-08 13:20 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2018-03-16 18:10 - 2017-09-23 16:30 - 000000000 ____D C:\Windows\SysWOW64\directx
2018-03-14 17:28 - 2017-09-08 15:54 - 000000000 ____D C:\Users\GAMEPC\AppData\Local\CrashDumps
2018-03-14 16:05 - 2017-09-08 14:04 - 002480064 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2018-03-14 16:05 - 2017-09-08 14:04 - 002137024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2018-03-14 16:05 - 2017-09-08 14:04 - 001310144 _____ (NVIDIA Corporation) C:\Windows\system32\NvRtmpStreamer64.dll
2018-03-14 15:44 - 2017-09-08 13:20 - 000001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2018-03-14 02:27 - 2017-09-18 19:14 - 000804352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-03-14 02:27 - 2017-09-18 19:14 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-03-14 02:27 - 2017-09-18 19:14 - 000004478 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-03-14 02:27 - 2017-09-18 19:14 - 000004324 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-03-14 02:27 - 2017-09-18 19:14 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-03-14 02:27 - 2017-09-18 19:14 - 000000000 ____D C:\Windows\system32\Macromed
2018-03-13 14:54 - 2017-09-23 20:16 - 000000219 _____ C:\Users\GAMEPC\Desktop\Counter-Strike Global Offensive.url
2018-03-09 00:29 - 2017-12-08 22:33 - 000000000 ____D C:\Users\GAMEPC\AppData\Roaming\EasyAntiCheat

Some files in TEMP:
====================
2018-01-11 20:05 - 2018-01-11 20:05 - 000000180 _____ () C:\Users\GAMEPC\AppData\Local\Temp\00e481b5e22dbe1f649fcddd505d3eb7.dll
2018-01-11 20:05 - 2018-04-04 14:02 - 000000016 _____ () C:\Users\GAMEPC\AppData\Local\Temp\9cfeec25b194d212cb1a549f559db4ab.dll
2018-01-20 23:46 - 2018-01-20 23:46 - 001864256 _____ (Oracle Corporation) C:\Users\GAMEPC\AppData\Local\Temp\jre-8u161-windows-au.exe
2018-01-08 19:01 - 2018-02-23 22:29 - 000879840 _____ (NVIDIA Corporation) C:\Users\GAMEPC\AppData\Local\Temp\nvSCPAPI64.dll
2018-01-29 20:03 - 2018-03-16 01:42 - 000373696 _____ (NVIDIA Corporation) C:\Users\GAMEPC\AppData\Local\Temp\nvStInst.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-03-30 14:41

==================== End of FRST.txt ============================

Addition.txt

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Още не съм гледал логовете, но на колко години е компютъра? Питам, защото подобни симптоми може да означава, че батерията на дъното (CMOS) е изхабена и е за смяна.

  • Харесва ми 1

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Ами аз не съм много запознат на настолен комп дали имам батерия на дъното ;д но ако имам значи е на доста години поне на 4 може би не съм сигурен тъй като сменях доста неща по пц-то но специално дъното не си спомням да съм сменял 

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Би трябвало батериите да изкарат повече от 4 години, но все пак и 4 не е малък период. Според мен не пречи да я смените, защото самата батерия струва около 2 лв.

Иначе след малко ще видя дали в логовете има зловреден софтуер. Ако няма тогава е много вероятно да е точно от батерията или друг хардуерен проблем.

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Така, прегледах логовете и не видях зловредна активност.

По-скоро сте за хардуерния раздел: (или както казах батерията на дъното е за смяна):

Цитат

Error: (01/01/2012 12:01:02 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 14:32:11 ч. on ‎5.‎4.‎2018 ‎г. was unexpected.

Все пак преди да прехвърля темата там направете следната проверка:

Моля изтеглете  Malwarebytes Anti-Malware 3.4.5.2467 Final и я запазете на вашия десктоп.

  • Стартирайте файла mb3-setup-consumer-3.4.4.2398.exe и следвайте указанията за да инсталирате програмата.
  • След като инсталацията приключи програмата ще стартира автоматично.
  • Отидете до табът Settings => Protection > и под категорията Scan Options включете опцията "Scan for rootkits" като преместите плъзгача надясно.

xTvORSF.png

  • Отидете до табът Scan, и изберете Threat Scan и след това натиснете бутона Start Scan.

RUSrqgW.png

  • Ще започне проверка за зловреден софтуер.

4CJ90KI.png

  • При някои инфекции можете да видите съобщението:
  • "Could not load DDA driver"
  • Натиснете "Yes" на това съобщение за да позволите драйвера да се зареди след рестарт.
  • Разрешете на компютъра да се рестартира и след това продължете с останалите инструкции.
  • След като проверката приключи ще се появи списъка с резултатите (ако има намерени обекти). Ако програмата е минимизирана докато сканира ще се появи следното съобщение ако има открити заплахи. Натиснете бутона View Scan Results.

37b.png

  • . Натиснете бутона Quarantine Selected.

2CfXEk1.png

  • Изчакайте да се появи прозореца подканващ ви да рестартирате и след това натиснете бутона Yes.

8Jc9dl9.png

  • След рестарта, стартирайте отново Malwarebytes Anti-Malware.
  • Отидете то табът Reports и отворете лог файла с името Scan Report.

X0ha4sd.png

  • Натиснете бутона Export и след това =>  "Copy to Clipboard"

fE9qzai.png

  • Сега вече поставете съдържанието на лог файла с клавишната комбинация Ctrl + V и го публикувайте в следващия си коментар.

Поздрави!


  • Харесва ми 1

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

съжалявам просто нямах достъп до пц-то след 2-3 дни след рестарт на пц-то всичко отново изглежда наред.Благодаря че обърнахте внимание на темата и извинявайте още веднъж !

  • Харесва ми 2

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Няма проблеми. Все пак помислете за смяна на CMOS батерията. ;)

Поздрави и лека вечер!

  • Харесва ми 1

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Регистрирайте се или влезете в профила си за да коментирате

Трябва да имате регистрация за да може да коментирате това

Регистрирайте се

Създайте нова регистрация в нашия форум. Лесно е!

Нова регистрация

Вход

Имате регистрация? Влезте от тук.

Вход

×

Информация

Поставихме бисквитки на устройството ви за най-добро потребителско изживяване. Можете да промените настройките си за бисквитки, или в противен случай приемаме, че сте съгласни с нашите условия за ползване.