Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.
Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.
Изкачащи прозорци от Google Chrome

30 юни 20188 г.
Имам един вирус, който му забарви името. Появяват се изщачащи прозорци при ползване на google chrome. Почистих комюпътра последователно със adwcleaner, htiman pro, malwarebytes... Не успява да го изчисти за съжаление
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20.06.2018
Ran by yanka (administrator) on DESKTOP-CPJ8TFE (30-06-2018 22:09:28)
Running from C:\Users\yanka\Downloads
Loaded Profiles: yanka &  (Available Profiles: yanka)
Platform: Windows 10 Pro Version 1803 17134.112 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe
(Performix LLC) C:\Program Files (x86)\Adguard\AdguardSvc.exe
() C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
() C:\Program Files\Nitro\Pro 10\Nitro_UpdateService.exe
(Nitro PDF Software) C:\Program Files\Nitro\Pro 10\NitroPDFDriverService10x64.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Microsoft Corporation) C:\Windows\System32\printfilterpipelinesvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Desktop.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.9328.1700.0_x64__8wekyb3d8bbwe\Office16\OfficeHubTaskHost.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Performix LLC) C:\Program Files (x86)\Adguard\Adguard.exe
() C:\Program Files (x86)\BoricaAD\BISS\BISS.exe
(Oracle Corporation) C:\Program Files (x86)\BoricaAD\BISS\jre1.8.0_144\bin\javaw.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe
(Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\AcWebBrowser.exe
(Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\AcWebBrowser.exe
(Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\AcWebBrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\MSOSYNC.EXE
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [316392 2018-05-11] (Adobe Systems, Incorporated)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242904 2018-06-20] (AVAST Software)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139776 2014-06-16] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4514304 2014-08-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrHelp] => C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe [1944576 2013-03-07] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [709416 2018-03-10] (Autodesk, Inc.)
HKLM-x32\...\Run: [Bonus.SSR.FR12] => C:\Program Files (x86)\ABBYY FineReader 12\Bonus.ScreenshotReader.exe [1472312 2018-05-11] (ABBYY Production LLC.)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06302018220720016\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06302018220720050\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-3081403711-1452664787-965955870-1001\...\Run: [Adguard] => C:\Program Files (x86)\Adguard\Adguard.exe [5716752 2018-03-06] (Performix LLC)
HKU\S-1-5-21-3081403711-1452664787-965955870-1001\...\Policies\Explorer: [] 
HKU\S-1-5-21-3081403711-1452664787-965955870-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssText3d.scr [217088 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-3081403711-1452664787-965955870-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06302018220720081\...\Run: [Adguard] => C:\Program Files (x86)\Adguard\Adguard.exe [5716752 2018-03-06] (Performix LLC)
HKU\S-1-5-21-3081403711-1452664787-965955870-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06302018220720081\...\Policies\Explorer: [] 
HKU\S-1-5-21-3081403711-1452664787-965955870-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06302018220720081\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssText3d.scr [217088 2018-04-12] (Microsoft Corporation)
Startup: C:\Users\yanka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BISS.lnk [2018-04-17]
ShortcutTarget: BISS.lnk -> C:\Program Files (x86)\BoricaAD\BISS\BISS.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 94.26.50.7 94.26.50.8
Tcpip\..\Interfaces\{8fb52371-846f-4f09-8a26-cc1246842a61}: [DhcpNameServer] 94.26.50.7 94.26.50.8

Internet Explorer:
==================
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2015-03-18] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: wzwpem97.default
FF ProfilePath: C:\Users\yanka\AppData\Roaming\Mozilla\Firefox\Profiles\wzwpem97.default [2018-06-29]
FF Extension: (Avast SafePrice) - C:\Users\yanka\AppData\Roaming\Mozilla\Firefox\Profiles\wzwpem97.default\Extensions\[email protected] [2018-04-12]
FF Extension: (Avast Online Security) - C:\Users\yanka\AppData\Roaming\Mozilla\Firefox\Profiles\wzwpem97.default\Extensions\[email protected] [2018-06-20]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-03-31] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 10\npnitromozilla.dll [2015-05-06] (Nitro PDF)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-06-21] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-06-21] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-05-11] (Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultSearchURL: Default -> hxxps://ssl.gstatic.com/docs/spreadsheets/favicon_jfk2.png
CHR Profile: C:\Users\yanka\AppData\Local\Google\Chrome\User Data\Default [2018-06-30]
CHR Extension: (Презентации) - C:\Users\yanka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-04-11]
CHR Extension: (Документи) - C:\Users\yanka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-04-11]
CHR Extension: (Google Диск) - C:\Users\yanka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-04-11]
CHR Extension: (YouTube) - C:\Users\yanka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-04-11]
CHR Extension: (Avast SafePrice) - C:\Users\yanka\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2018-06-20]
CHR Extension: (Таблици) - C:\Users\yanka\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-04-11]
CHR Extension: (КАСА - Google Таблици) - C:\Users\yanka\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjagmccglmmkiaepnjekpdffjbeaehoc [2018-05-11]
CHR Extension: (Google Документи офлайн) - C:\Users\yanka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-04-12]
CHR Extension: (Avast Online Security) - C:\Users\yanka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-04-13]
CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\yanka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-11]
CHR Extension: (Scrummos) - C:\Users\yanka\AppData\Local\Google\Chrome\User Data\Default\Extensions\omaapbceemikiebmdofdbfoflpfnnepf [2018-06-07]
CHR Extension: (Gmail) - C:\Users\yanka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-04-11]
CHR Extension: (Chrome Media Router) - C:\Users\yanka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-11]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1374072 2018-03-10] (Autodesk Inc.)
R2 Adguard Service; C:\Program Files (x86)\Adguard\AdguardSvc.exe [129296 2018-03-06] (Performix LLC)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2321384 2018-05-11] (Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2128872 2018-05-11] (Adobe Systems, Incorporated)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7780400 2018-06-20] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [322464 2018-06-20] (AVAST Software)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2013-09-25] (Brother Industries, Ltd.) [File not signed]
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [192200 2017-07-26] () [File not signed]
R3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-03] (Malwarebytes)
R2 NitroDriverReadSpool10; C:\Program Files\Nitro\Pro 10\NitroPDFDriverService10x64.exe [324760 2015-05-06] (Nitro PDF Software)
R2 NitroUpdateService; C:\Program Files\Nitro\Pro 10\Nitro_UpdateService.exe [418968 2015-05-06] ()
R2 osrss; C:\WINDOWS\system32\osrss.dll [131288 2018-06-27] (Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737448 2018-04-12] (Microsoft Corporation)
S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [11293936 2018-04-03] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4451616 2018-04-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105344 2018-04-12] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 adgnetworkwfpdrv; C:\WINDOWS\System32\drivers\adgnetworkwfpdrv.sys [81000 2017-03-27] ()
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [197160 2018-06-20] (AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdrivera.sys [229392 2018-06-20] (AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsha.sys [201328 2018-06-20] (AVAST Software)
R0 aswblog; C:\WINDOWS\System32\drivers\aswbloga.sys [346664 2018-06-20] (AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniva.sys [59592 2018-06-20] (AVAST Software)
S3 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [15360 2018-06-20] (AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [239680 2018-06-20] (AVAST Software)
S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [46976 2018-06-20] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [159640 2018-06-20] (AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [111872 2018-06-20] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [85968 2018-06-20] (AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1027728 2018-06-20] (AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [463080 2018-06-20] (AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [211160 2018-06-20] (AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [381584 2018-06-20] (AVAST Software)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [152184 2018-04-26] (Malwarebytes)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [190696 2018-06-29] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [112864 2018-06-30] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [44768 2018-06-30] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253664 2018-06-30] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [103648 2018-06-30] (Malwarebytes)
R3 MTsensor; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] ()
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2018-04-12] (Realtek )
S3 smbdirect; C:\WINDOWS\System32\DRIVERS\smbdirect.sys [152064 2018-04-12] (Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44616 2018-04-12] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [331680 2018-04-12] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [44032 2018-04-12] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-06-30 22:09 - 2018-06-30 22:09 - 000018683 _____ C:\Users\yanka\Downloads\FRST.txt
2018-06-30 22:09 - 2018-06-30 22:09 - 000000000 ____D C:\FRST
2018-06-30 22:08 - 2018-06-30 22:08 - 002412544 _____ (Farbar) C:\Users\yanka\Downloads\FRST64.exe
2018-06-30 21:55 - 2018-06-30 21:55 - 000000000 ___HD C:\OneDriveTemp
2018-06-29 21:10 - 2018-06-29 21:10 - 043520264 _____ (Microsoft Corporation) C:\Users\yanka\Downloads\Windows-KB890830-x64-V5.61.exe
2018-06-29 10:59 - 2018-06-29 10:59 - 000000567 _____ C:\Users\yanka\Desktop\JRT.txt
2018-06-29 10:54 - 2018-06-29 10:54 - 001790024 _____ (Malwarebytes) C:\Users\yanka\Downloads\JRT.exe
2018-06-26 13:52 - 2018-06-26 13:52 - 000287149 _____ C:\Users\yanka\Downloads\AccountStatementDocuments_NID01_180626_134436_BFA0D4AB-2985-4CEF-B3BC-DED1D1692DBC.pdf
2018-06-25 16:28 - 2018-06-25 16:28 - 000064524 _____ C:\Users\yanka\Downloads\pog_plan_PDK0320180625162424.pdf
2018-06-22 14:41 - 2018-06-22 14:41 - 000000000 _____ C:\WINDOWS\SysWOW64\last.dump
2018-06-22 14:40 - 2018-06-29 10:54 - 000000000 ____D C:\Users\yanka\AppData\LocalLow\Mozilla
2018-06-22 14:40 - 2018-06-22 14:40 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-06-22 14:40 - 2018-06-22 14:40 - 000000993 _____ C:\Users\Public\Desktop\Firefox.lnk
2018-06-22 14:40 - 2018-06-22 14:40 - 000000000 ____D C:\Users\yanka\AppData\Roaming\Mozilla
2018-06-22 14:40 - 2018-06-22 14:40 - 000000000 ____D C:\Users\yanka\AppData\Local\Mozilla
2018-06-22 14:40 - 2018-06-22 14:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-06-22 14:39 - 2018-06-22 14:40 - 000000000 ____D C:\Program Files\Mozilla Firefox
2018-06-22 14:39 - 2018-06-22 14:39 - 000313656 _____ (Mozilla) C:\Users\yanka\Downloads\Firefox Installer.exe
2018-06-22 14:38 - 2018-06-30 22:09 - 000000000 ____D C:\ProgramData\Adguard
2018-06-22 14:38 - 2018-06-30 21:34 - 000000000 ____D C:\Program Files (x86)\Adguard
2018-06-22 14:38 - 2018-06-22 14:38 - 000173328 _____ C:\Users\yanka\Downloads\adguardInstaller.exe
2018-06-22 14:38 - 2018-06-22 14:38 - 000000998 _____ C:\Users\Public\Desktop\Adguard.lnk
2018-06-22 14:38 - 2018-06-22 14:38 - 000000260 _____ C:\WINDOWS\SysWOW64\Drivers\vwifikerneldrv.sys
2018-06-22 14:38 - 2018-06-22 14:38 - 000000260 _____ C:\WINDOWS\SysWOW64\d3dx9_11.dll.tmp
2018-06-22 14:38 - 2018-06-22 14:38 - 000000260 _____ C:\ProgramData\fontcacheev1.dat
2018-06-22 14:38 - 2018-06-22 14:38 - 000000000 ____D C:\Users\yanka\AppData\Roaming\Performix LLC
2018-06-22 14:38 - 2018-06-22 14:38 - 000000000 ____D C:\Users\yanka\AppData\Local\Performix_LLC
2018-06-22 14:38 - 2018-06-22 14:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adguard
2018-06-22 14:38 - 2017-03-27 08:01 - 000081000 _____ () C:\WINDOWS\system32\Drivers\adgnetworkwfpdrv.sys
2018-06-22 14:37 - 2018-06-30 22:10 - 000103648 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2018-06-22 14:37 - 2018-06-30 22:06 - 000044768 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2018-06-22 14:37 - 2018-06-30 22:05 - 000112864 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2018-06-22 14:37 - 2018-06-29 10:02 - 000190696 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2018-06-22 14:36 - 2018-06-30 22:05 - 000253664 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2018-06-22 12:21 - 2018-06-22 12:21 - 000327839 _____ C:\Users\yanka\Downloads\Дневник за покупките-12.2017.pdf
2018-06-22 12:21 - 2018-06-22 12:21 - 000227871 _____ C:\Users\yanka\Downloads\Дневник за покупките-10.2017.pdf
2018-06-22 12:21 - 2018-06-22 12:21 - 000203267 _____ C:\Users\yanka\Downloads\Дневник за покупките-11.2017.pdf
2018-06-22 12:21 - 2018-06-22 12:21 - 000159818 _____ C:\Users\yanka\Downloads\Дневник за покупките-03.2017.pdf
2018-06-22 12:21 - 2018-06-22 12:21 - 000146997 _____ C:\Users\yanka\Downloads\Дневник за покупките-05.2017.pdf
2018-06-22 12:21 - 2018-06-22 12:21 - 000143804 _____ C:\Users\yanka\Downloads\Дневник за покупките-09.2017.pdf
2018-06-22 12:21 - 2018-06-22 12:21 - 000137572 _____ C:\Users\yanka\Downloads\Дневник за покупките-06.2017.pdf
2018-06-22 12:21 - 2018-06-22 12:21 - 000130622 _____ C:\Users\yanka\Downloads\Дневник за покупките-07.2017.pdf
2018-06-22 12:21 - 2018-06-22 12:21 - 000130494 _____ C:\Users\yanka\Downloads\Дневник за покупките-04.2017.pdf
2018-06-22 12:21 - 2018-06-22 12:21 - 000130406 _____ C:\Users\yanka\Downloads\Дневник за покупките-01.2017.pdf
2018-06-22 12:21 - 2018-06-22 12:21 - 000129562 _____ C:\Users\yanka\Downloads\Дневник за покупките-10.2016.pdf
2018-06-22 12:21 - 2018-06-22 12:21 - 000124790 _____ C:\Users\yanka\Downloads\Дневник за покупките-11.2016.pdf
2018-06-22 12:21 - 2018-06-22 12:21 - 000120244 _____ C:\Users\yanka\Downloads\Дневник за покупките-09.2016.pdf
2018-06-22 12:21 - 2018-06-22 12:21 - 000116948 _____ C:\Users\yanka\Downloads\Дневник за покупките-12.2016.pdf
2018-06-22 12:21 - 2018-06-22 12:21 - 000115595 _____ C:\Users\yanka\Downloads\Дневник за покупките-08.2017.pdf
2018-06-22 12:21 - 2018-06-22 12:21 - 000115549 _____ C:\Users\yanka\Downloads\Дневник за покупките-02.2017.pdf
2018-06-22 12:16 - 2018-06-22 12:16 - 000102400 _____ C:\Users\yanka\Downloads\Платежно вещо лице.pdf
2018-06-21 12:56 - 2018-06-21 12:56 - 000111064 _____ C:\Users\yanka\Downloads\Интертайм континентал (1).pdf
2018-06-21 10:37 - 2018-06-21 10:37 - 000000000 ____D C:\Users\yanka\AppData\Local\CrashDumps
2018-06-21 10:19 - 2018-06-21 10:19 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-06-21 10:19 - 2018-06-21 10:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-06-21 10:19 - 2018-06-21 10:19 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-06-21 10:19 - 2018-06-21 10:19 - 000000000 ____D C:\Program Files\Malwarebytes
2018-06-21 10:19 - 2018-04-26 05:36 - 000152184 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2018-06-21 10:14 - 2018-06-21 10:14 - 000000000 ____D C:\Users\yanka\AppData\Roaming\Obsidium
2018-06-21 09:45 - 2018-06-27 03:55 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-06-21 09:45 - 2018-06-27 03:55 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-06-21 09:44 - 2018-06-21 09:49 - 000003518 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2018-06-21 09:44 - 2018-06-21 09:49 - 000003394 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2018-06-21 09:42 - 2018-06-29 09:44 - 000000000 ____D C:\Users\yanka\AppData\Local\AVAST Software
2018-06-20 17:35 - 2018-06-20 17:35 - 000378072 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2018-06-20 17:35 - 2018-06-20 17:35 - 000015360 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswElam.sys
2018-06-20 10:13 - 2018-06-20 10:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit)
2018-06-20 09:50 - 2018-06-20 09:51 - 000000000 ____D C:\AdwCleaner
2018-06-20 09:50 - 2018-06-20 09:50 - 007372496 _____ (Malwarebytes) C:\Users\yanka\Downloads\adwcleaner_7.2.0.exe
2018-06-20 09:46 - 2018-06-20 09:46 - 000012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe
2018-06-20 09:43 - 2018-06-20 09:47 - 000000000 ____D C:\ProgramData\HitmanPro
2018-06-20 09:43 - 2018-06-20 09:43 - 011609024 _____ (SurfRight B.V.) C:\Users\yanka\Downloads\hitmanpro_x64.exe
2018-06-15 14:55 - 2018-06-15 14:55 - 000112090 _____ C:\Users\yanka\Downloads\Интертайм континентал.pdf
2018-06-15 02:35 - 2018-06-08 22:07 - 002266520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2018-06-15 02:35 - 2018-06-08 22:07 - 000506184 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2018-06-15 02:35 - 2018-06-08 22:07 - 000183712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mavinject.exe
2018-06-15 02:35 - 2018-06-08 22:07 - 000040864 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClientPS.dll
2018-06-15 02:35 - 2018-06-08 22:07 - 000019872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVTerminator.dll
2018-06-15 02:35 - 2018-06-08 22:05 - 000094112 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2018-06-15 02:35 - 2018-06-08 22:02 - 004527680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2018-06-15 02:35 - 2018-06-08 22:02 - 001634808 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2018-06-15 02:35 - 2018-06-08 22:02 - 000661160 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
2018-06-15 02:35 - 2018-06-08 22:01 - 002395056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2018-06-15 02:35 - 2018-06-08 22:01 - 001046944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2018-06-15 02:35 - 2018-06-08 21:48 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2018-06-15 02:35 - 2018-06-08 21:47 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2018-06-15 02:35 - 2018-06-08 21:46 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2018-06-15 02:35 - 2018-06-08 21:45 - 012712448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-06-15 02:35 - 2018-06-08 21:45 - 004392448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-06-15 02:35 - 2018-06-08 21:45 - 001560576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdt.exe
2018-06-15 02:35 - 2018-06-08 21:45 - 000808960 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2018-06-15 02:35 - 2018-06-08 21:44 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2018-06-15 02:35 - 2018-06-08 21:44 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2018-06-15 02:35 - 2018-06-08 21:44 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2018-06-15 02:35 - 2018-06-08 21:44 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2018-06-15 02:35 - 2018-06-08 21:43 - 003640832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2018-06-15 02:35 - 2018-06-08 21:43 - 002922496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2018-06-15 02:35 - 2018-06-08 21:43 - 001719808 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2018-06-15 02:35 - 2018-06-08 21:43 - 001659904 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2018-06-15 02:35 - 2018-06-08 21:43 - 001543680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2018-06-15 02:35 - 2018-06-08 21:43 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2018-06-15 02:35 - 2018-06-08 21:43 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-06-15 02:35 - 2018-06-08 21:42 - 003999232 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2018-06-15 02:35 - 2018-06-08 21:42 - 003653120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-06-15 02:35 - 2018-06-08 21:42 - 002084864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2018-06-15 02:35 - 2018-06-08 21:42 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2018-06-15 02:35 - 2018-06-08 21:42 - 000800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwcreator.exe
2018-06-15 02:35 - 2018-06-08 21:42 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2018-06-15 02:35 - 2018-06-08 21:42 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe
2018-06-15 02:35 - 2018-06-08 21:42 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe
2018-06-15 02:35 - 2018-06-08 21:41 - 002019840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2018-06-15 02:35 - 2018-06-08 21:41 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2018-06-15 02:35 - 2018-06-08 21:41 - 000878080 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2018-06-15 02:35 - 2018-06-08 21:41 - 000758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2018-06-15 02:35 - 2018-06-08 21:41 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2018-06-15 02:35 - 2018-06-08 21:41 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2018-06-15 02:35 - 2018-06-08 21:40 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXP.dll
2018-06-15 02:35 - 2018-06-08 20:07 - 000148896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mavinject.exe
2018-06-15 02:35 - 2018-06-08 20:06 - 001539488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2018-06-15 02:35 - 2018-06-08 20:04 - 001454024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2018-06-15 02:35 - 2018-06-08 19:58 - 002206544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2018-06-15 02:35 - 2018-06-08 19:58 - 000917408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2018-06-15 02:35 - 2018-06-08 19:51 - 011903488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-06-15 02:35 - 2018-06-08 19:50 - 001508352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdt.exe
2018-06-15 02:35 - 2018-06-08 19:48 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2018-06-15 02:35 - 2018-06-08 19:48 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-06-15 02:35 - 2018-06-08 19:47 - 003492864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2018-06-15 02:35 - 2018-06-08 19:47 - 002895872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-06-15 02:35 - 2018-06-08 19:47 - 001462784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dui70.dll
2018-06-15 02:35 - 2018-06-08 19:47 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2018-06-15 02:35 - 2018-06-08 19:47 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2018-06-15 02:35 - 2018-06-08 19:47 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
2018-06-15 02:35 - 2018-06-08 19:46 - 003444224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2018-06-15 02:35 - 2018-06-08 19:46 - 002016256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2018-06-15 02:35 - 2018-06-08 19:46 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2018-06-15 02:35 - 2018-06-08 19:45 - 002401280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2018-06-15 02:35 - 2018-06-08 19:06 - 000976384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2018-06-15 02:35 - 2018-06-08 19:05 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-06-15 02:35 - 2018-06-08 19:05 - 000944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-06-15 02:35 - 2018-06-08 17:00 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2018-06-15 02:35 - 2018-06-08 17:00 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2018-06-15 02:35 - 2018-06-08 13:38 - 005821544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2018-06-15 02:35 - 2018-06-08 13:37 - 002417840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2018-06-15 02:35 - 2018-06-08 13:35 - 001613200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2018-06-15 02:35 - 2018-06-08 13:35 - 000613144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2018-06-15 02:35 - 2018-06-08 13:34 - 001299056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2018-06-15 02:35 - 2018-06-08 13:34 - 000748512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2018-06-15 02:35 - 2018-06-08 13:31 - 007900984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2018-06-15 02:35 - 2018-06-08 13:31 - 003180176 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2018-06-15 02:35 - 2018-06-08 13:31 - 000029600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uefi.sys
2018-06-15 02:35 - 2018-06-08 13:30 - 000705440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2018-06-15 02:35 - 2018-06-08 12:34 - 001140576 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-06-15 02:35 - 2018-06-08 12:34 - 000983016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-06-15 02:35 - 2018-06-08 12:33 - 001213368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2018-06-15 02:35 - 2018-06-08 12:33 - 001034632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-06-15 02:35 - 2018-06-08 12:33 - 000272296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2018-06-15 02:35 - 2018-06-08 12:33 - 000269224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-06-15 02:35 - 2018-06-08 12:31 - 001174432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-06-15 02:35 - 2018-06-08 12:31 - 001012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-06-15 02:35 - 2018-06-08 12:31 - 000226720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ucx01000.sys
2018-06-15 02:35 - 2018-06-08 12:30 - 009148320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-06-15 02:35 - 2018-06-08 12:30 - 003296896 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2018-06-15 02:35 - 2018-06-08 12:30 - 001798552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2018-06-15 02:35 - 2018-06-08 12:30 - 001363632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2018-06-15 02:35 - 2018-06-08 12:30 - 001063328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2018-06-15 02:35 - 2018-06-08 12:30 - 001017080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2018-06-15 02:35 - 2018-06-08 12:30 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2018-06-15 02:35 - 2018-06-08 12:30 - 000722808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2018-06-15 02:35 - 2018-06-08 12:30 - 000709824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-06-15 02:35 - 2018-06-08 12:30 - 000567184 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2018-06-15 02:35 - 2018-06-08 12:30 - 000565152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2018-06-15 02:35 - 2018-06-08 12:30 - 000527264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2018-06-15 02:35 - 2018-06-08 12:30 - 000491328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2018-06-15 02:35 - 2018-06-08 12:30 - 000194456 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2018-06-15 02:35 - 2018-06-08 12:30 - 000170912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2018-06-15 02:35 - 2018-06-08 12:30 - 000137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2018-06-15 02:35 - 2018-06-08 12:30 - 000134584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 007520000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 006817384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 004970360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 004403280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 003283408 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 002836384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-06-15 02:35 - 2018-06-08 12:29 - 002753048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 002590400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2018-06-15 02:35 - 2018-06-08 12:29 - 002570712 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 002564984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 002546592 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 002462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 002422688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-06-15 02:35 - 2018-06-08 12:29 - 002371392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 001946328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 001934400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 001921952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2018-06-15 02:35 - 2018-06-08 12:29 - 001792808 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 001784584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 001611592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 001457136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-06-15 02:35 - 2018-06-08 12:29 - 001364184 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 001288816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 001258288 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-06-15 02:35 - 2018-06-08 12:29 - 001209800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 001190152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 001150416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 001148808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 001112608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 001097648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 001026976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2018-06-15 02:35 - 2018-06-08 12:29 - 000945568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2018-06-15 02:35 - 2018-06-08 12:29 - 000885880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 000792992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2018-06-15 02:35 - 2018-06-08 12:29 - 000678840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 000659096 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 000594128 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2018-06-15 02:35 - 2018-06-08 12:29 - 000416144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 000413824 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 000413088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2018-06-15 02:35 - 2018-06-08 12:29 - 000375712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2018-06-15 02:35 - 2018-06-08 12:29 - 000313592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 000266656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 000260896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 000164768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2018-06-15 02:35 - 2018-06-08 12:29 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 000084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageOverlayUtil.dll
2018-06-15 02:35 - 2018-06-08 12:29 - 000057960 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel.appcore.dll
2018-06-15 02:35 - 2018-06-08 12:13 - 025846784 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-06-15 02:35 - 2018-06-08 12:12 - 000861616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2018-06-15 02:35 - 2018-06-08 12:12 - 000786176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2018-06-15 02:35 - 2018-06-08 12:11 - 001461744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2018-06-15 02:35 - 2018-06-08 12:11 - 000550616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2018-06-15 02:35 - 2018-06-08 12:10 - 002479272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2018-06-15 02:35 - 2018-06-08 12:10 - 002331584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2018-06-15 02:35 - 2018-06-08 12:10 - 002307336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2018-06-15 02:35 - 2018-06-08 12:10 - 001988072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2018-06-15 02:35 - 2018-06-08 12:10 - 001397200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2018-06-15 02:35 - 2018-06-08 12:10 - 001011992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2018-06-15 02:35 - 2018-06-08 12:10 - 000880152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2018-06-15 02:35 - 2018-06-08 12:10 - 000457152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2018-06-15 02:35 - 2018-06-08 12:10 - 000097176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 006569960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 006527064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 004788512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 004469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 002535552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 002486992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 002242216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 001980872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 001805776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 001709720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 001620880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 001584128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 001380200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 001129648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 001077504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 001020168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 000988136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 000770160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 000607648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 000568720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 000567144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 000553248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 000356960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 000064648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LanguageOverlayUtil.dll
2018-06-15 02:35 - 2018-06-08 12:09 - 000050208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel.appcore.dll
2018-06-15 02:35 - 2018-06-08 12:04 - 004706816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2018-06-15 02:35 - 2018-06-08 12:03 - 022005760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-06-15 02:35 - 2018-06-08 12:03 - 000906752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.PhoneNumberFormatting.dll
2018-06-15 02:35 - 2018-06-08 12:03 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2018-06-15 02:35 - 2018-06-08 12:03 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2018-06-15 02:35 - 2018-06-08 12:03 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2018-06-15 02:35 - 2018-06-08 12:02 - 022713856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-06-15 02:35 - 2018-06-08 12:02 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2018-06-15 02:35 - 2018-06-08 12:02 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpnotify.exe
2018-06-15 02:35 - 2018-06-08 12:02 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2018-06-15 02:35 - 2018-06-08 12:01 - 004563456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2018-06-15 02:35 - 2018-06-08 12:01 - 002961408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2018-06-15 02:35 - 2018-06-08 12:01 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2018-06-15 02:35 - 2018-06-08 12:01 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2018-06-15 02:35 - 2018-06-08 12:01 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2018-06-15 02:35 - 2018-06-08 12:01 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-06-15 02:35 - 2018-06-08 12:01 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2018-06-15 02:35 - 2018-06-08 12:01 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2018-06-15 02:35 - 2018-06-08 12:01 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2018-06-15 02:35 - 2018-06-08 12:00 - 019404288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-06-15 02:35 - 2018-06-08 12:00 - 004372992 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2018-06-15 02:35 - 2018-06-08 12:00 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-06-15 02:35 - 2018-06-08 12:00 - 001285120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2018-06-15 02:35 - 2018-06-08 12:00 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2018-06-15 02:35 - 2018-06-08 12:00 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2018-06-15 02:35 - 2018-06-08 12:00 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2018-06-15 02:35 - 2018-06-08 12:00 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2018-06-15 02:35 - 2018-06-08 12:00 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2018-06-15 02:35 - 2018-06-08 11:59 - 006032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2018-06-15 02:35 - 2018-06-08 11:59 - 004867072 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-06-15 02:35 - 2018-06-08 11:59 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-06-15 02:35 - 2018-06-08 11:59 - 001767936 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2018-06-15 02:35 - 2018-06-08 11:59 - 001318400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2018-06-15 02:35 - 2018-06-08 11:59 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2018-06-15 02:35 - 2018-06-08 11:59 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2018-06-15 02:35 - 2018-06-08 11:59 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2018-06-15 02:35 - 2018-06-08 11:59 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2018-06-15 02:35 - 2018-06-08 11:59 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2018-06-15 02:35 - 2018-06-08 11:59 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2018-06-15 02:35 - 2018-06-08 11:58 - 007581696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-06-15 02:35 - 2018-06-08 11:58 - 003712512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-06-15 02:35 - 2018-06-08 11:58 - 001676800 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll
2018-06-15 02:35 - 2018-06-08 11:58 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2018-06-15 02:35 - 2018-06-08 11:58 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-06-15 02:35 - 2018-06-08 11:58 - 000813568 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-06-15 02:35 - 2018-06-08 11:58 - 000781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2018-06-15 02:35 - 2018-06-08 11:58 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2018-06-15 02:35 - 2018-06-08 11:58 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2018-06-15 02:35 - 2018-06-08 11:58 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2018-06-15 02:35 - 2018-06-08 11:57 - 003348992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2018-06-15 02:35 - 2018-06-08 11:57 - 002172416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-06-15 02:35 - 2018-06-08 11:57 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2018-06-15 02:35 - 2018-06-08 11:57 - 001485312 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2018-06-15 02:35 - 2018-06-08 11:57 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2018-06-15 02:35 - 2018-06-08 11:57 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2018-06-15 02:35 - 2018-06-08 11:57 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2018-06-15 02:35 - 2018-06-08 11:57 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2018-06-15 02:35 - 2018-06-08 11:57 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 005780992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 004336128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 003293696 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 002902016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 002900480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 001550848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 001395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2018-06-15 02:35 - 2018-06-08 11:56 - 000871424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 000869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 000715776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 000389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2018-06-15 02:35 - 2018-06-08 11:56 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
2018-06-15 02:35 - 2018-06-08 11:55 - 003441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-06-15 02:35 - 2018-06-08 11:55 - 002248192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2018-06-15 02:35 - 2018-06-08 11:55 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-06-15 02:35 - 2018-06-08 11:55 - 002061824 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2018-06-15 02:35 - 2018-06-08 11:55 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2018-06-15 02:35 - 2018-06-08 11:55 - 001371648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2018-06-15 02:35 - 2018-06-08 11:55 - 001242112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2018-06-15 02:35 - 2018-06-08 11:55 - 001192448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2018-06-15 02:35 - 2018-06-08 11:55 - 001171968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2018-06-15 02:35 - 2018-06-08 11:55 - 001160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2018-06-15 02:35 - 2018-06-08 11:55 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2018-06-15 02:35 - 2018-06-08 11:55 - 001033728 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2018-06-15 02:35 - 2018-06-08 11:55 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2018-06-15 02:35 - 2018-06-08 11:55 - 000849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2018-06-15 02:35 - 2018-06-08 11:55 - 000778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2018-06-15 02:35 - 2018-06-08 11:55 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2018-06-15 02:35 - 2018-06-08 11:55 - 000667648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2018-06-15 02:35 - 2018-06-08 11:55 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2018-06-15 02:35 - 2018-06-08 11:55 - 000630784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2018-06-15 02:35 - 2018-06-08 11:55 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-06-15 02:35 - 2018-06-08 11:55 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2018-06-15 02:35 - 2018-06-08 11:54 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-06-15 02:35 - 2018-06-08 11:54 - 002789376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2018-06-15 02:35 - 2018-06-08 11:54 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-06-15 02:35 - 2018-06-08 11:54 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2018-06-15 02:35 - 2018-06-08 11:54 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2018-06-15 02:35 - 2018-06-08 11:54 - 001128448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2018-06-15 02:35 - 2018-06-08 11:54 - 000999936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2018-06-15 02:35 - 2018-06-08 11:54 - 000950272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2018-06-15 02:35 - 2018-06-08 11:54 - 000857088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2018-06-15 02:35 - 2018-06-08 11:54 - 000842240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2018-06-15 02:35 - 2018-06-08 11:54 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll
2018-06-15 02:35 - 2018-06-08 11:54 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-15 02:35 - 2018-06-08 11:54 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2018-06-15 02:35 - 2018-06-08 11:54 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2018-06-15 02:35 - 2018-06-08 11:54 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2018-06-15 02:35 - 2018-06-08 11:54 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2018-06-15 02:35 - 2018-06-08 11:54 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2018-06-15 02:35 - 2018-06-08 11:54 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
2018-06-15 02:35 - 2018-06-08 11:53 - 001675264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2018-06-15 02:35 - 2018-06-08 11:53 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2018-06-15 02:35 - 2018-06-08 11:53 - 001108992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2018-06-15 02:35 - 2018-06-08 11:53 - 000873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2018-06-15 02:35 - 2018-06-08 11:53 - 000677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2018-06-15 02:35 - 2018-06-08 11:53 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2018-06-15 02:35 - 2018-06-08 11:53 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2018-06-15 02:35 - 2018-06-08 11:53 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2018-06-15 02:35 - 2018-06-08 10:41 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim
2018-06-15 02:35 - 2018-06-06 21:57 - 003733320 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2018-06-15 02:35 - 2018-06-06 07:20 - 002841312 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2018-06-15 02:35 - 2018-06-02 02:24 - 000713376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2018-06-15 02:35 - 2018-06-02 01:54 - 001825792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2018-06-15 02:35 - 2018-05-25 06:24 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2018-06-12 17:17 - 2018-06-12 17:17 - 000118694 _____ C:\Users\yanka\Downloads\vedomost-05.2018.pdf
2018-06-12 17:17 - 2018-06-12 17:17 - 000118094 _____ C:\Users\yanka\Downloads\vedomost - 04.2018.pdf
2018-06-12 17:17 - 2018-06-12 17:17 - 000117855 _____ C:\Users\yanka\Downloads\vedomost - 01.2018.pdf
2018-06-12 17:17 - 2018-06-12 17:17 - 000117300 _____ C:\Users\yanka\Downloads\vedomost - 12.2017.pdf
2018-06-12 17:17 - 2018-06-12 17:17 - 000117219 _____ C:\Users\yanka\Downloads\vedomost-01.2017 (2).pdf
2018-06-12 16:46 - 2018-06-12 16:46 - 000126684 _____ C:\Users\yanka\Downloads\vedomost - 07.2017 (1).pdf
2018-06-12 16:46 - 2018-06-12 16:46 - 000123495 _____ C:\Users\yanka\Downloads\vedomost-08.2017 (1).pdf
2018-06-12 14:55 - 2018-06-12 14:55 - 000094834 _____ C:\Users\yanka\Downloads\фактура Смарт систем.pdf
2018-06-12 14:32 - 2018-06-12 14:32 - 003037451 _____ C:\Users\yanka\Downloads\ITC-geo-milev-vedomosti.rar
2018-06-12 14:32 - 2018-06-12 14:32 - 000000000 ____D C:\Users\yanka\Downloads\ITC-geo-milev-vedomosti
2018-06-12 14:29 - 2018-06-12 14:29 - 000119145 _____ C:\Users\yanka\Downloads\vedomost-11.2016.pdf
2018-06-12 14:29 - 2018-06-12 14:29 - 000118098 _____ C:\Users\yanka\Downloads\vedomost - 12.2016.pdf
2018-06-12 14:25 - 2018-06-12 14:25 - 000127307 _____ C:\Users\yanka\Downloads\vedomost-06.2017.pdf
2018-06-12 14:25 - 2018-06-12 14:25 - 000126524 _____ C:\Users\yanka\Downloads\vedomost-09.2017 (1).pdf
2018-06-12 14:25 - 2018-06-12 14:25 - 000124049 _____ C:\Users\yanka\Downloads\vedomost-03.2017 (1).pdf
2018-06-12 14:25 - 2018-06-12 14:25 - 000123740 _____ C:\Users\yanka\Downloads\vedomost-04.2017 (1).pdf
2018-06-12 14:25 - 2018-06-12 14:25 - 000123574 _____ C:\Users\yanka\Downloads\vedomost-01.2017 (1).pdf
2018-06-12 14:25 - 2018-06-12 14:25 - 000123528 _____ C:\Users\yanka\Downloads\vedomost-05.2017 (1).pdf
2018-06-12 14:25 - 2018-06-12 14:25 - 000123307 _____ C:\Users\yanka\Downloads\vedomost-02.2017 (1).pdf
2018-06-12 14:23 - 2018-06-12 14:23 - 000117693 _____ C:\Users\yanka\Downloads\vedomost - 06.2017.pdf
2018-06-12 14:23 - 2018-06-12 14:23 - 000117590 _____ C:\Users\yanka\Downloads\vedomost-08.2017.pdf
2018-06-12 14:23 - 2018-06-12 14:23 - 000117571 _____ C:\Users\yanka\Downloads\vedomost-05.2017.pdf
2018-06-12 14:23 - 2018-06-12 14:23 - 000117532 _____ C:\Users\yanka\Downloads\vedomost-03.2017.pdf
2018-06-12 14:23 - 2018-06-12 14:23 - 000117526 _____ C:\Users\yanka\Downloads\vedomost-09.2017.pdf
2018-06-12 14:23 - 2018-06-12 14:23 - 000117488 _____ C:\Users\yanka\Downloads\vedomost-04.2017.pdf
2018-06-12 14:23 - 2018-06-12 14:23 - 000117418 _____ C:\Users\yanka\Downloads\vedomost - 07.2017.pdf
2018-06-12 14:23 - 2018-06-12 14:23 - 000117219 _____ C:\Users\yanka\Downloads\vedomost-02.2017.pdf
2018-06-12 14:22 - 2018-06-12 14:22 - 000117219 _____ C:\Users\yanka\Downloads\vedomost-01.2017.pdf
2018-06-12 14:22 - 2018-06-12 14:22 - 000117194 _____ C:\Users\yanka\Downloads\vedomost-10.2017.pdf
2018-06-12 14:07 - 2018-06-12 14:07 - 000127143 _____ C:\Users\yanka\Downloads\vedomost-04.2018 (1).pdf
2018-06-12 11:03 - 2018-06-12 11:03 - 000007051 _____ C:\Users\yanka\Downloads\Размери паркинг система за 2 автомобила.pdf
2018-06-11 11:55 - 2018-06-11 11:55 - 000070716 _____ C:\Users\yanka\Downloads\210027991474_0242817462_20180611 (1).pdf
2018-06-11 11:53 - 2018-06-11 11:53 - 000070921 _____ C:\Users\yanka\Downloads\210035250539_0242958905_20180611.pdf
2018-06-11 11:53 - 2018-06-11 11:53 - 000070921 _____ C:\Users\yanka\Downloads\210035250539_0242958905_20180611 (1).pdf
2018-06-11 11:53 - 2018-06-11 11:53 - 000070852 _____ C:\Users\yanka\Downloads\210027957129_0242817459_20180611.pdf
2018-06-11 11:53 - 2018-06-11 11:53 - 000070852 _____ C:\Users\yanka\Downloads\210027957129_0242817459_20180611 (1).pdf
2018-06-11 11:53 - 2018-06-11 11:53 - 000070807 _____ C:\Users\yanka\Downloads\210027956931_0242817457_20180611.pdf
2018-06-11 11:53 - 2018-06-11 11:53 - 000070721 _____ C:\Users\yanka\Downloads\210027990088_0242817461_20180611.pdf
2018-06-11 11:53 - 2018-06-11 11:53 - 000070716 _____ C:\Users\yanka\Downloads\210027991474_0242817462_20180611.pdf
2018-06-11 11:53 - 2018-06-11 11:53 - 000070703 _____ C:\Users\yanka\Downloads\210027957228_0242817460_20180611.pdf
2018-06-08 18:50 - 2018-06-08 18:50 - 000126637 _____ C:\Users\yanka\Downloads\ведомост - 02,2018.pdf
2018-06-08 18:50 - 2018-06-08 18:50 - 000117857 _____ C:\Users\yanka\Downloads\ведомост - 02,2018 (1).pdf
2018-06-08 17:45 - 2018-06-08 17:45 - 000191624 _____ C:\Users\yanka\Downloads\ПРОФОРМА ФАКТУРА 3000010871 ИНТЕРТАЙМ КОНТИНЕНТАЛ АД (1).pdf
2018-06-08 15:11 - 2018-06-08 15:11 - 000040258 _____ C:\Users\yanka\Downloads\invoice-0000000103_both (1).pdf
2018-06-08 15:11 - 2018-06-08 15:11 - 000038860 _____ C:\Users\yanka\Downloads\invoice-0000000102_both.pdf
2018-06-08 13:07 - 2018-06-08 13:07 - 001887050 _____ C:\Users\yanka\Downloads\КСС, Протокол 1.pdf
2018-06-08 13:07 - 2018-06-08 13:07 - 000103078 _____ C:\Users\yanka\Downloads\F_1000000090.pdf
2018-06-08 13:01 - 2018-06-08 13:01 - 000037888 _____ C:\Users\yanka\Downloads\Oферта_29.03.18_Вълкович_Сивец (1).xls
2018-06-08 12:03 - 2018-06-08 12:03 - 000040258 _____ C:\Users\yanka\Downloads\invoice-0000000103_both.pdf
2018-06-08 11:47 - 2018-06-08 11:47 - 000054825 _____ C:\Users\yanka\Downloads\f-ra_O_0000000009.pdf
2018-06-08 11:02 - 2018-06-08 11:02 - 000190811 _____ C:\Users\yanka\Downloads\ПРОФОРМА ФАКТУРА 3000010871 ИНТЕРТАЙМ КОНТИНЕНТАЛ АД.pdf
2018-06-07 16:12 - 2018-06-07 16:12 - 001550999 _____ C:\Users\yanka\Downloads\Приемо-предавателен протокол и фактура договор за доставка (1).pdf
2018-06-06 13:13 - 2018-06-06 13:13 - 000227277 _____ C:\Users\yanka\Downloads\застраховка 3.pdf
2018-06-06 13:13 - 2018-06-06 13:13 - 000227165 _____ C:\Users\yanka\Downloads\застраховка 2.pdf
2018-06-06 13:13 - 2018-06-06 13:13 - 000227163 _____ C:\Users\yanka\Downloads\застраховка 1.pdf
2018-06-06 13:12 - 2018-06-06 13:12 - 000227001 _____ C:\Users\yanka\Downloads\застраховка.pdf
2018-06-06 13:12 - 2018-06-06 13:12 - 000052525 _____ C:\Users\yanka\Downloads\dobavak_Akt 14 UridL.PDF
2018-06-06 13:10 - 2018-06-06 13:10 - 000312116 _____ C:\Users\yanka\Downloads\Заявление за включване като страна по фирмен кредит ЮЛ.pdf
2018-06-06 13:10 - 2018-06-06 13:10 - 000223592 _____ C:\Users\yanka\Downloads\Заявление за включване като страна по фирмен кредит ФЛ.pdf
2018-06-05 11:53 - 2018-06-05 11:53 - 000066560 _____ C:\Users\yanka\Downloads\210027990088_0237832331_20180311.pdf
2018-06-05 11:38 - 2018-06-05 11:38 - 000065029 _____ C:\Users\yanka\Downloads\0366168966.pdf
2018-06-05 11:38 - 2018-06-05 11:38 - 000064959 _____ C:\Users\yanka\Downloads\0367921365.pdf
2018-06-05 11:04 - 2018-06-05 11:04 - 000013075 _____ C:\Users\yanka\Downloads\Protocol_05_18.xlsx
2018-06-04 13:52 - 2018-06-04 13:52 - 000612947 _____ C:\Users\yanka\Downloads\Отпуски май Делчо и Георги.pdf
2018-05-31 11:34 - 2018-05-31 11:34 - 003722701 _____ C:\Users\yanka\Downloads\ГФО 2017 и доклад.pdf
2018-05-31 10:13 - 2018-06-08 10:09 - 000000000 ____D C:\NAT32v2
2018-05-31 10:13 - 2018-05-31 10:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NAT32 IP Router
2018-05-31 10:10 - 2018-05-31 10:10 - 000000000 ____D C:\Program Files\Reference Assemblies
2018-05-31 10:10 - 2018-05-31 10:10 - 000000000 ____D C:\Program Files\MSBuild
2018-05-31 10:10 - 2018-05-31 10:10 - 000000000 ____D C:\Program Files (x86)\MSBuild
2018-05-31 10:09 - 2018-03-05 16:07 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2018-05-31 10:09 - 2018-03-05 16:07 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-05-31 10:09 - 2018-03-05 16:07 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2018-05-31 10:09 - 2018-02-14 16:21 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-05-31 10:09 - 2018-02-14 16:21 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-05-31 10:09 - 2018-02-14 16:21 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2018-05-31 10:07 - 2018-05-31 10:14 - 000000000 ____D C:\Users\yanka\AppData\Roaming\facebook-nativefier-f52d2f
2018-05-31 10:07 - 2018-05-31 10:07 - 005089366 _____ C:\Users\yanka\Downloads\nat32_2.2-Build-22270.zip
2018-05-31 10:07 - 2018-05-31 10:07 - 000004210 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1527750457
2018-05-31 10:07 - 2018-05-31 10:07 - 000001364 _____ C:\Users\yanka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera Browser.lnk
2018-05-31 10:07 - 2018-05-31 10:07 - 000000000 ____D C:\Users\yanka\AppData\Roaming\Opera Software
2018-05-31 10:07 - 2018-05-31 10:07 - 000000000 ____D C:\Users\yanka\AppData\Local\Opera Software
2018-05-31 10:07 - 2018-05-31 10:07 - 000000000 ____D C:\Program Files (x86)\Facebook

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-06-30 21:56 - 2018-05-16 17:35 - 000005246 _____ C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for DESKTOP-CPJ8TFE-yanka DESKTOP-CPJ8TFE
2018-06-30 21:55 - 2018-05-16 17:30 - 000000000 ____D C:\Users\yanka
2018-06-30 21:55 - 2018-04-12 02:38 - 000000000 ___HD C:\Program Files\WindowsApps
2018-06-30 21:55 - 2018-04-12 02:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-06-30 21:55 - 2018-04-12 02:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-06-30 21:55 - 2018-04-11 19:10 - 000000000 ___RD C:\Users\yanka\OneDrive
2018-06-30 21:53 - 2018-05-16 17:28 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-06-30 21:39 - 2018-05-16 17:38 - 000838560 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-06-30 21:39 - 2018-04-12 02:36 - 000000000 ____D C:\WINDOWS\INF
2018-06-30 21:34 - 2018-05-16 17:35 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-06-30 21:34 - 2018-04-11 19:55 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-06-29 21:10 - 2018-04-11 19:50 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2018-06-29 21:10 - 2018-04-11 19:50 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-06-29 11:00 - 2018-04-12 00:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-06-28 16:43 - 2018-04-12 14:57 - 000007995 _____ C:\WINDOWS\BRRBCOM.INI
2018-06-28 12:31 - 2018-04-11 19:09 - 000000000 ____D C:\Users\yanka\AppData\Local\Packages
2018-06-27 12:10 - 2018-04-11 19:10 - 000131288 _____ (Microsoft Corporation) C:\WINDOWS\system32\osrss.dll
2018-06-22 14:59 - 2018-04-12 02:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-06-22 14:38 - 2018-04-11 19:19 - 000000000 ____D C:\ProgramData\Package Cache
2018-06-21 17:05 - 2018-05-16 17:35 - 000003376 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3081403711-1452664787-965955870-1001
2018-06-21 17:05 - 2018-05-16 17:30 - 000002363 _____ C:\Users\yanka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-06-21 10:33 - 2018-04-12 12:49 - 000000000 ____D C:\Users\yanka\AppData\Roaming\BitComet
2018-06-21 09:44 - 2018-04-11 19:11 - 000000000 ____D C:\Program Files (x86)\Google
2018-06-21 09:40 - 2018-05-16 17:35 - 000004264 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2018-06-20 17:35 - 2018-04-12 15:50 - 001027728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2018-06-20 17:35 - 2018-04-12 15:50 - 000463080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2018-06-20 17:35 - 2018-04-12 15:50 - 000381584 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2018-06-20 17:35 - 2018-04-12 15:50 - 000346664 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbloga.sys
2018-06-20 17:35 - 2018-04-12 15:50 - 000239680 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHdsKe.sys
2018-06-20 17:35 - 2018-04-12 15:50 - 000229392 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
2018-06-20 17:35 - 2018-04-12 15:50 - 000211160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2018-06-20 17:35 - 2018-04-12 15:50 - 000201328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsha.sys
2018-06-20 17:35 - 2018-04-12 15:50 - 000197160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2018-06-20 17:35 - 2018-04-12 15:50 - 000159640 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2018-06-20 17:35 - 2018-04-12 15:50 - 000111872 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2018-06-20 17:35 - 2018-04-12 15:50 - 000085968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2018-06-20 17:35 - 2018-04-12 15:50 - 000059592 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniva.sys
2018-06-20 17:35 - 2018-04-12 15:50 - 000046976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2018-06-20 17:35 - 2018-04-12 02:38 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2018-06-20 10:13 - 2018-04-12 12:49 - 000000853 _____ C:\Users\Public\Desktop\BitComet.lnk
2018-06-20 09:58 - 2018-04-12 14:20 - 000000000 ____D C:\Users\yanka\AppData\Local\Adobe
2018-06-15 03:11 - 2018-05-16 17:28 - 000493496 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2018-06-15 03:10 - 2018-04-12 12:19 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2018-06-15 03:10 - 2018-04-12 02:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-06-15 03:10 - 2018-04-12 02:38 - 000000000 ____D C:\WINDOWS\TextInput
2018-06-15 03:10 - 2018-04-12 02:38 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2018-06-15 03:10 - 2018-04-12 02:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2018-06-15 03:10 - 2018-04-12 02:38 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2018-06-15 03:10 - 2018-04-12 02:38 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2018-06-15 03:10 - 2018-04-12 02:38 - 000000000 ____D C:\WINDOWS\system32\oobe
2018-06-15 03:10 - 2018-04-12 02:38 - 000000000 ____D C:\WINDOWS\system32\appraiser
2018-06-15 03:10 - 2018-04-12 02:38 - 000000000 ____D C:\WINDOWS\ShellExperiences
2018-06-15 03:10 - 2018-04-12 02:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-06-15 03:10 - 2018-04-12 02:38 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2018-06-15 03:10 - 2018-04-12 02:38 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2018-06-15 03:10 - 2018-04-12 00:04 - 000000000 ____D C:\WINDOWS\system32\Dism
2018-06-15 02:40 - 2018-04-11 19:50 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-06-15 02:38 - 2018-04-12 02:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-06-11 14:01 - 2018-04-12 14:28 - 000000000 ____D C:\Users\yanka\AppData\Local\PlaceholderTileLogoFolder
2018-06-06 02:29 - 2018-04-12 02:41 - 000835056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-06-06 02:29 - 2018-04-12 02:41 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2018-05-31 13:52 - 2018-04-17 15:06 - 000000000 ____D C:\Users\yanka\.B-Trust
2018-05-31 10:21 - 2018-05-11 11:43 - 000000000 ____D C:\Users\yanka\AppData\Local\ABBYY

==================== Files in the root of some directories =======

2018-06-22 14:38 - 2018-06-22 14:38 - 000000260 _____ () C:\ProgramData\fontcacheev1.dat

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-05-16 17:28

==================== End of FRST.txt ============================
Addition.txt
icotonev

HJT Team
Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper
3 юли 20188 г.
Здравейте..! Извиняваме се за закъснелия отговор...!
Уверете се , че сте инсталирали най-новата версия на malwarebytes : https://www.malwarebytes.com/mwb-download/
Извършете ново сканиране, като затворите браузера Google Chrom по следната инструкция:
Отидете до табът Settings => Protection > и под категорията Scan Options включете опцията "Scan for rootkits" като преместите плъзгача надясно.
Отидете до табът Scan, и изберете Threat Scan и след това натиснете бутона Start Scan.
Ще започне проверка за зловреден софтуер.
При някои инфекции можете да видите съобщението:
"Could not load DDA driver"
Натиснете "Yes" на това съобщение за да позволите драйвера да се зареди след рестарт.
Разрешете на компютъра да се рестартира и след това продължете с останалите инструкции.
След като проверката приключи ще се появи списъка с резултатите (ако има намерени обекти). Ако програмата е минимизирана докато сканира ще се появи следното съобщение ако има открити заплахи. Натиснете бутона View Scan Results.
. Натиснете бутона Quarantine Selected.
Изчакайте да се появи прозореца подканващ ви да рестартирате и след това натиснете бутона Yes.
След рестарта, стартирайте отново Malwarebytes Anti-Malware.
Отидете то табът Reports и отворете лог файла с името Scan Report.
Натиснете бутона Export и след това => "Copy to Clipboard"
Сега вече поставете съдържанието на лог файла с клавишната комбинация Ctrl + Vи го публикувайте в следващия си коментар.
Ако след сканирането проблема е налице ,тогава най-вероятно това се дължи на синхронизирането на Chrome, което е активирано...За него ще дам други инструкции ..Но всичко по ред..!
Дневници
В следващия си отговор, моля да включите (като копирате целите съдържания ) следните дневници:
Дневник от Malwarebytes Anti -Malware
icotonev

HJT Team
Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper
8 юли 20188 г.
Приключваме по тази тема...Чудя се защо въобще се създават теми и се търси някаква помощ , след като няма да се отговаря в нея...! Маркирам като "Приключена"...!
Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.