Премини към съдържанието
Rada Beliata

Хакната поща в mail.bg , неправомерно влизане в пощата ми изпращане от мое име на мейлове към непознати потребители

Препоръчан отговор


Здравейте, 

преди минути установих , че от пощата ми в mail.bg някой е изпращал мейлове без мое знание към непознати за мен адреси с текст на руски , който призовава потребители да влезят и променят някакви пароли . Ето част от текста, който са изпращали:

Приветствую,паруминутокнайдется? 
Оповещени для клиентов нашего сервиса.
Мы ценим каждого и всегда рады помочь во время.

Ваш ПРК - kfin0288uqfba
Тикет - 6442077653312 от 13.12.2018
Описание - перенесен или переименован аккаунт "

следва и линк "пройти на сайту" , който е активен

Смених веднага паролата си за mail.bg и писах на съпорта 

Притеснявам се да не са ми хакнали и целия комп

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 09.12.2018
Ran by User (administrator) on USER-PC (18-12-2018 21:17:40)
Running from C:\Users\User\Downloads
Loaded Profiles: User (Available Profiles: User)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(VoipConnect) C:\Program Files (x86)\VoipConnect.com\VoipConnect\voipconnect.exe
(Viber Media S.à r.l.) C:\Users\User\AppData\Local\Viber\Viber.exe
(© 2015 Microsoft Corporation) C:\Users\User\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Jeppesen) C:\Jeppesen\JWC\JWC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
() C:\ProgramData\MobileBrServ\mbbService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-30] (Intel Corporation)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-12-05] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2795248 2013-10-25] (Synaptics Incorporated)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2670056 2018-09-10] (Adobe Systems, Incorporated)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642816 2013-05-18] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [77088 2013-03-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [387832 2013-11-01] (IVT Corporation)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-3914007145-2479916420-1064401623-1000\...\Run: [*LABAL*] => [X]
HKU\S-1-5-21-3914007145-2479916420-1064401623-1000\...\Run: [VoipConnect] => C:\Program Files (x86)\VoipConnect.com\VoipConnect\voipconnect.exe [36547168 2016-05-14] (VoipConnect)
HKU\S-1-5-21-3914007145-2479916420-1064401623-1000\...\Run: [Viber] => C:\Users\User\AppData\Local\Viber\Viber.exe [36901960 2018-12-04] (Viber Media S.à r.l.)
HKU\S-1-5-21-3914007145-2479916420-1064401623-1000\...\Run: [BingSvc] => C:\Users\User\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-3914007145-2479916420-1064401623-1000\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [50100160 2018-03-02] (Skype Technologies S.A.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{4F635613-A958-44D2-ABE6-D3CC1A3DABC3}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{7019DF92-BFEA-4C0F-A4AA-C467798353EB}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3914007145-2479916420-1064401623-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-18] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-18] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
DPF: HKLM-x32 {A996E48C-D3DC-4244-89F7-AFA33EC60679} hxxps://online.bulbank.bg/capicom.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -  No File

FireFox:
========
FF DefaultProfile: aewkzmml.default
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\aewkzmml.default [2018-03-10]
FF NetworkProxy: Mozilla\Firefox\Profiles\aewkzmml.default -> autoconfig_url", "hxxp://aiidatapro.net/proxy2.js"
FF Extension: (Skype) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-05-25] [Legacy]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_101.dll [2018-12-06] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_101.dll [2018-12-06] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-19] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-12-04] (Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> msn.com
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC=__PARAM__&q={searchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR DefaultSuggestURL: Default -> hxxp://www.bing.com/osjson.aspx?FORM=__PARAM__DF&PC=__PARAM__&query={searchTerms}
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2018-12-18]
CHR Extension: (Slides) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-15]
CHR Extension: (Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (Skype Calling) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blakpkgjpemejpbmfiglncklihnhjkij [2017-09-06]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-26]
CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-29]
CHR Extension: (Bing) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2018-09-29]
CHR Extension: (Sheets) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Google Docs Offline) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-22]
CHR Extension: (Skype) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2017-12-03]
CHR Extension: (Chrome Web Store Payments) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-04]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-12-09]
CHR HKU\S-1-5-21-3914007145-2479916420-1064401623-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2910696 2018-09-10] (Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2704872 2018-09-10] (Adobe Systems, Incorporated)
R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1706744 2013-11-01] (IVT Corporation)
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [145656 2013-11-01] (IVT Corporation)
S3 GoogleChromeElevationService; C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\elevation_service.exe [443872 2018-12-12] (Google Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-30] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-20] (Intel Corporation)
R2 JWC; C:\Jeppesen\JWC\JWC.exe [658016 2014-10-06] (Jeppesen)
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [242256 2014-08-20] ()
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [340480 2013-12-05] (IDT, Inc.) [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7500048 2016-09-20] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [35936 2013-04-10] (Advanced Micro Devices, Inc.)
S3 BlueletAudio; C:\Windows\System32\DRIVERS\blueletaudio.sys [33968 2012-12-19] (IVT Corporation)
S3 BlueletAudio; C:\Windows\SysWOW64\DRIVERS\blueletaudio.sys [33968 2012-12-19] (IVT Corporation)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [54064 2013-04-26] (Ralink Corporation)
R3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [49584 2013-03-25] (Ralink Corporation)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-08-25] (Disc Soft Ltd)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-30] (Intel Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-12-19] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R3 netr28x; C:\Windows\System32\DRIVERS\netr28x.sys [2473616 2014-12-10] (MediaTek Inc.)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
R3 rtbth; C:\Windows\System32\DRIVERS\rtbth.sys [1204424 2013-12-02] (Ralink Technology, Corp.)
S3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [444632 2013-09-26] (Realsil Semiconductor Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [34544 2013-10-25] (Synaptics Incorporated)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 ewusbmbb; system32\DRIVERS\ewusbwwan.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X]
S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S1 ZAM; \??\C:\Windows\System32\drivers\zam64.sys [X]
S1 ZAM_Guard; \??\C:\Windows\System32\drivers\zamguard64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-12-18 21:17 - 2018-12-18 21:23 - 000019523 _____ C:\Users\User\Downloads\FRST.txt
2018-12-18 21:17 - 2018-12-18 21:17 - 000000000 ____D C:\FRST
2018-12-18 21:16 - 2018-12-18 21:16 - 002417152 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2018-12-17 21:43 - 2018-12-17 21:43 - 000478562 _____ C:\Users\User\Documents\76HQ9Z.pdf
2018-12-17 21:43 - 2018-12-17 21:43 - 000464683 _____ C:\Users\User\Downloads\76HQ9Z.pdf
2018-12-17 21:41 - 2018-12-17 21:41 - 000691469 _____ C:\Users\User\Documents\Управлявайте резервациите си - Booking.pdf
2018-12-17 21:39 - 2018-12-17 21:39 - 000000036 _____ C:\Users\User\Desktop\greec.txt
2018-12-11 21:32 - 2018-12-06 04:39 - 003227648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-12-11 21:32 - 2018-11-29 00:02 - 014635520 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2018-12-11 21:32 - 2018-11-29 00:02 - 012574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2018-12-11 21:32 - 2018-11-29 00:02 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2018-12-11 21:32 - 2018-11-29 00:02 - 000005632 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2018-12-11 21:32 - 2018-11-29 00:02 - 000005632 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2018-12-11 21:32 - 2018-11-28 23:50 - 012574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2018-12-11 21:32 - 2018-11-28 23:50 - 011411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2018-12-11 21:32 - 2018-11-28 23:38 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2018-12-11 21:32 - 2018-11-28 23:38 - 000004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2018-12-11 21:32 - 2018-11-28 23:38 - 000004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2018-12-11 21:32 - 2018-11-15 21:46 - 000397088 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-12-11 21:32 - 2018-11-15 20:55 - 000348976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-12-11 21:32 - 2018-11-15 05:00 - 025735680 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-12-11 21:32 - 2018-11-15 04:34 - 020281856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-12-11 21:32 - 2018-11-15 03:51 - 000498176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-12-11 21:32 - 2018-11-15 03:50 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-12-11 21:32 - 2018-11-13 06:54 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2018-12-11 21:32 - 2018-11-13 06:54 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2018-12-11 21:32 - 2018-11-13 06:42 - 002902016 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-12-11 21:32 - 2018-11-13 06:41 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2018-12-11 21:32 - 2018-11-13 06:40 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-12-11 21:32 - 2018-11-13 06:40 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2018-12-11 21:32 - 2018-11-13 06:39 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2018-12-11 21:32 - 2018-11-13 06:35 - 005778944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-12-11 21:32 - 2018-11-13 06:33 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2018-12-11 21:32 - 2018-11-13 06:32 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2018-12-11 21:32 - 2018-11-13 06:30 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-12-11 21:32 - 2018-11-13 06:28 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-12-11 21:32 - 2018-11-13 06:28 - 000794624 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-12-11 21:32 - 2018-11-13 06:28 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2018-12-11 21:32 - 2018-11-13 06:28 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2018-12-11 21:32 - 2018-11-13 06:26 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2018-12-11 21:32 - 2018-11-13 06:21 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2018-12-11 21:32 - 2018-11-13 06:18 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2018-12-11 21:32 - 2018-11-13 06:13 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2018-12-11 21:32 - 2018-11-13 06:13 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2018-12-11 21:32 - 2018-11-13 06:13 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2018-12-11 21:32 - 2018-11-13 06:12 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2018-12-11 21:32 - 2018-11-13 06:11 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2018-12-11 21:32 - 2018-11-13 06:11 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-12-11 21:32 - 2018-11-13 06:10 - 002295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-12-11 21:32 - 2018-11-13 06:10 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-12-11 21:32 - 2018-11-13 06:07 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2018-12-11 21:32 - 2018-11-13 06:07 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2018-12-11 21:32 - 2018-11-13 06:06 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2018-12-11 21:32 - 2018-11-13 06:06 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2018-12-11 21:32 - 2018-11-13 06:05 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2018-12-11 21:32 - 2018-11-13 06:05 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2018-12-11 21:32 - 2018-11-13 06:04 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-12-11 21:32 - 2018-11-13 06:03 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-12-11 21:32 - 2018-11-13 06:03 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2018-12-11 21:32 - 2018-11-13 06:03 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2018-12-11 21:32 - 2018-11-13 05:55 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2018-12-11 21:32 - 2018-11-13 05:53 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-12-11 21:32 - 2018-11-13 05:52 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-12-11 21:32 - 2018-11-13 05:51 - 015284736 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-12-11 21:32 - 2018-11-13 05:51 - 000728064 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-12-11 21:32 - 2018-11-13 05:51 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2018-12-11 21:32 - 2018-11-13 05:50 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2018-12-11 21:32 - 2018-11-13 05:50 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2018-12-11 21:32 - 2018-11-13 05:50 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2018-12-11 21:32 - 2018-11-13 05:49 - 002136064 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-12-11 21:32 - 2018-11-13 05:47 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2018-12-11 21:32 - 2018-11-13 05:47 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2018-12-11 21:32 - 2018-11-13 05:46 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2018-12-11 21:32 - 2018-11-13 05:44 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2018-12-11 21:32 - 2018-11-13 05:42 - 004494848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-12-11 21:32 - 2018-11-13 05:39 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-12-11 21:32 - 2018-11-13 05:38 - 013681152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-12-11 21:32 - 2018-11-13 05:38 - 004859904 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-12-11 21:32 - 2018-11-13 05:37 - 002059776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-12-11 21:32 - 2018-11-13 05:37 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-12-11 21:32 - 2018-11-13 05:36 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2018-12-11 21:32 - 2018-11-13 05:27 - 001555968 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-12-11 21:32 - 2018-11-13 05:18 - 004386816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-12-11 21:32 - 2018-11-13 05:16 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-12-11 21:32 - 2018-11-13 05:15 - 001330176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-12-11 21:32 - 2018-11-13 05:14 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-12-11 21:32 - 2018-11-11 19:19 - 000631680 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-12-11 21:32 - 2018-11-11 19:02 - 000262376 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-12-11 21:32 - 2018-11-11 19:01 - 005551848 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-12-11 21:32 - 2018-11-11 19:01 - 000708328 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-12-11 21:32 - 2018-11-11 19:01 - 000366824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys
2018-12-11 21:32 - 2018-11-11 19:01 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-12-11 21:32 - 2018-11-11 19:01 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-12-11 21:32 - 2018-11-11 19:00 - 001664360 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 001461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 001211904 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000094208 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2018-12-11 21:32 - 2018-11-11 18:58 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:49 - 004054760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-12-11 21:32 - 2018-11-11 18:49 - 003960040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-12-11 21:32 - 2018-11-11 18:47 - 001314104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-12-11 21:32 - 2018-11-11 18:45 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-12-11 21:32 - 2018-11-11 18:45 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-12-11 21:32 - 2018-11-11 18:45 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-12-11 21:32 - 2018-11-11 18:45 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2018-12-11 21:32 - 2018-11-11 18:45 - 000275968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-12-11 21:32 - 2018-11-11 18:45 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-12-11 21:32 - 2018-11-11 18:45 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-12-11 21:32 - 2018-11-11 18:45 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-12-11 21:32 - 2018-11-11 18:45 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-12-11 21:32 - 2018-11-11 18:45 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-12-11 21:32 - 2018-11-11 18:45 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-12-11 21:32 - 2018-11-11 18:45 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-12-11 21:32 - 2018-11-11 18:45 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-12-11 21:32 - 2018-11-11 18:45 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-12-11 21:32 - 2018-11-11 18:45 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-12-11 21:32 - 2018-11-11 18:45 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-12-11 21:32 - 2018-11-11 18:45 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-12-11 21:32 - 2018-11-11 18:45 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:44 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:25 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-12-11 21:32 - 2018-11-11 18:25 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-12-11 21:32 - 2018-11-11 18:25 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-12-11 21:32 - 2018-11-11 18:24 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-12-11 21:32 - 2018-11-11 18:20 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2018-12-11 21:32 - 2018-11-11 18:20 - 000129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\videoprt.sys
2018-12-11 21:32 - 2018-11-11 18:19 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-12-11 21:32 - 2018-11-11 18:19 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-12-11 21:32 - 2018-11-11 18:16 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-12-11 21:32 - 2018-11-11 18:16 - 000160768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-12-11 21:32 - 2018-11-11 18:16 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-12-11 21:32 - 2018-11-11 18:15 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-12-11 21:32 - 2018-11-11 18:15 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys
2018-12-11 21:32 - 2018-11-11 18:15 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys
2018-12-11 21:32 - 2018-11-11 18:15 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys
2018-12-11 21:32 - 2018-11-11 18:15 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys
2018-12-11 21:32 - 2018-11-11 18:15 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-12-11 21:32 - 2018-11-11 18:15 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-12-11 21:32 - 2018-11-11 18:15 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-12-11 21:32 - 2018-11-11 18:15 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-12-11 21:32 - 2018-11-11 18:15 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-12-11 21:32 - 2018-11-11 18:14 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-12-11 21:32 - 2018-11-11 18:13 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:13 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:13 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-12-11 21:32 - 2018-11-11 18:13 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-12-11 21:32 - 2018-11-08 18:58 - 002009600 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2018-12-11 21:32 - 2018-11-08 18:58 - 001889280 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2018-12-11 21:32 - 2018-11-08 18:58 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2018-12-11 21:32 - 2018-11-08 18:58 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2018-12-11 21:32 - 2018-11-08 18:43 - 001391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2018-12-11 21:32 - 2018-11-08 18:43 - 001241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2018-12-11 21:32 - 2018-11-08 18:43 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2018-12-11 21:32 - 2018-11-08 18:43 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2018-12-11 21:32 - 2018-11-06 06:36 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2018-12-11 21:32 - 2018-11-06 06:20 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2018-12-11 21:32 - 2018-10-06 18:03 - 000383720 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2018-12-11 21:32 - 2018-10-06 17:59 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2018-12-11 21:32 - 2018-10-06 17:59 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2018-12-11 21:32 - 2018-10-06 17:58 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2018-12-11 21:32 - 2018-10-06 17:58 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2018-12-11 21:32 - 2018-10-06 17:58 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2018-12-11 21:32 - 2018-10-06 17:50 - 000309480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2018-12-11 21:32 - 2018-10-06 17:44 - 000111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2018-12-11 21:32 - 2018-10-06 17:44 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2018-12-11 21:32 - 2018-10-06 17:43 - 000071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2018-12-11 21:32 - 2018-10-06 17:43 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2018-12-11 21:32 - 2018-10-06 17:16 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2018-12-07 21:38 - 2018-12-18 21:04 - 000000000 ____D C:\Users\User\AppData\Local\Viber
2018-12-05 09:30 - 2018-12-05 09:30 - 000140203 _____ C:\Users\User\Downloads\Protect_Buy (1).pdf
2018-12-05 09:28 - 2018-12-05 09:28 - 000035652 _____ C:\Users\User\Downloads\Invoce_1020013384913_01122018.pdf
2018-12-05 09:24 - 2018-12-05 09:25 - 000039065 _____ C:\Users\User\Downloads\sl000053 (3).pdf
2018-12-04 09:15 - 2018-12-04 09:15 - 000608589 _____ C:\Users\User\Documents\Карта за медицински преглед.pdf
2018-12-02 17:07 - 2018-12-02 17:07 - 000001100 _____ C:\Users\User\Desktop\Български Тълковен Речник.lnk
2018-12-02 17:07 - 2018-12-02 17:07 - 000000000 ____D C:\Windows\SysWOW64\embedded
2018-12-02 17:07 - 2018-12-02 17:07 - 000000000 ____D C:\Windows\pv
2018-12-02 17:07 - 2018-12-02 17:07 - 000000000 ____D C:\Windows\LHSP
2018-12-02 17:07 - 2018-12-02 17:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Polyglot7
2018-12-02 17:07 - 2018-12-02 17:07 - 000000000 ____D C:\Program Files (x86)\Polyglot7
2018-12-02 17:05 - 2018-12-02 17:06 - 050341195 _____ (Перфект Софтуер ) C:\Users\User\Downloads\Polyglot_7_All_Dictionaries.exe
2018-11-29 20:34 - 2018-11-29 20:34 - 000751687 _____ C:\Users\User\Documents\ExtendedWarrantyCertificate-BG-10037.pdf
2018-11-29 20:31 - 2018-11-29 20:31 - 000868920 _____ C:\Users\User\Downloads\ExtendedWarrantyCertificate-BG-10037.pdf
2018-11-24 21:32 - 2018-11-24 21:33 - 000145883 _____ C:\Users\User\Downloads\Crew forms 2018 (14).xlsx
2018-11-22 21:40 - 2018-11-22 21:40 - 000231758 _____ C:\Users\User\Documents\Payslip (1).pdf
2018-11-22 21:39 - 2018-11-22 21:39 - 000105298 _____ C:\Users\User\Downloads\Payslip (1).PDF
2018-11-22 18:15 - 2018-11-22 18:15 - 000105298 _____ C:\Users\User\Downloads\Payslip.PDF
2018-11-21 19:50 - 2018-11-21 19:50 - 000478036 _____ C:\Users\User\Documents\GetFileAttachment.pdf
2018-11-21 19:42 - 2018-11-21 19:42 - 000005188 _____ C:\Users\User\Downloads\BEG Declaration Form.odt
2018-11-21 19:24 - 2018-11-21 19:24 - 000021809 _____ C:\Users\User\Downloads\BGE Bestellformular Crewverkauf Winter 2018_BGE_NEU_2.xlsx

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-12-18 21:09 - 2009-07-14 06:45 - 000031504 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-12-18 21:09 - 2009-07-14 06:45 - 000031504 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-12-18 21:03 - 2017-06-11 17:28 - 000000000 ____D C:\Users\User\AppData\Roaming\ViberPC
2018-12-18 20:58 - 2016-08-05 15:18 - 000003620 _____ C:\Windows\SysWOW64\LOCALSERVICE.INI
2018-12-18 20:58 - 2013-11-20 09:44 - 000001077 _____ C:\Windows\SysWOW64\bscs.ini
2018-12-18 20:57 - 2016-08-05 15:18 - 000000043 _____ C:\Windows\SysWOW64\LOCALDEVICE.INI
2018-12-18 20:57 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-12-18 20:44 - 2018-10-20 13:37 - 000003918 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{DD511EAE-AE87-49B5-802E-5328985FD7D1}
2018-12-17 11:08 - 2009-07-14 07:13 - 000783606 _____ C:\Windows\system32\PerfStringBackup.INI
2018-12-17 11:08 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2018-12-16 00:20 - 2017-06-11 17:30 - 000000000 ____D C:\Users\User\Documents\ViberDownloads
2018-12-14 12:18 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\rescache
2018-12-12 21:05 - 2014-12-08 23:49 - 000002184 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-12-12 21:05 - 2014-12-08 23:49 - 000002143 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-12-12 20:49 - 2009-07-14 06:45 - 000410984 _____ C:\Windows\system32\FNTCACHE.DAT
2018-12-11 23:11 - 2014-08-18 16:35 - 000767916 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2018-12-11 23:10 - 2014-08-18 18:28 - 000000000 ____D C:\Windows\system32\MRT
2018-12-11 23:07 - 2014-08-18 18:28 - 137260640 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-12-11 23:04 - 2009-07-14 04:34 - 000000478 _____ C:\Windows\win.ini
2018-12-11 21:34 - 2017-03-06 14:12 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-12-11 00:04 - 2010-11-21 05:27 - 000592616 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2018-12-06 15:51 - 2014-08-21 18:10 - 000004312 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-12-06 15:50 - 2018-03-13 13:57 - 000004458 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-12-06 15:50 - 2014-08-21 18:10 - 000842240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-12-06 15:50 - 2014-08-21 18:10 - 000175104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-12-06 15:50 - 2014-08-21 18:10 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-12-06 15:50 - 2014-08-21 18:10 - 000000000 ____D C:\Windows\system32\Macromed
2018-12-05 18:40 - 2018-03-31 20:36 - 000000000 ____D C:\Users\User\Desktop\Flying Book R.I
2018-12-04 22:20 - 2016-08-05 15:20 - 000000710 _____ C:\Windows\SysWOW64\REMOTEDEVICE.INI
2018-12-02 15:33 - 2009-07-14 07:09 - 000000000 ____D C:\Windows\System32\Tasks\WPD
2018-12-01 23:37 - 2014-08-19 15:13 - 000000000 ____D C:\Users\User\AppData\Roaming\vlc
2018-11-27 10:58 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\system32\NDF

==================== Files in the root of some directories =======

2018-09-29 09:29 - 2018-09-29 09:29 - 000000000 _____ () C:\Users\User\AppData\Local\oobelibMkey.log
2016-05-14 20:19 - 2016-05-14 20:19 - 000000017 _____ () C:\Users\User\AppData\Local\resmon.resmoncfg
2017-07-13 22:04 - 2017-07-13 22:04 - 000000000 _____ () C:\Users\User\AppData\Local\{08496EBD-3675-4FFD-9190-C60ED46C2602}

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-12-14 12:10

==================== End of FRST.txt ============================

 

Addition1.txt

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Докато чаках за отговор пуснах антивирусната да сканира компа-даде ми открит троянец

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Вчера пуснах тази тема, виждам , че все още стои съобщение , че ще бъде прегледана от модератор

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Тази тема се маркира като приключена, защото вече имате нова.

  • Харесва ми 1

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Регистрирайте се или влезете в профила си за да коментирате

Трябва да имате регистрация за да може да коментирате това

Регистрирайте се

Създайте нова регистрация в нашия форум. Лесно е!

Нова регистрация

Вход

Имате регистрация? Влезте от тук.

Вход

  • Разглеждащи това в момента   0 потребители

    Няма регистрирани потребители разглеждащи тази страница.

  • Горещи теми в момента

  • Подобни теми

    • от porata
      Добър ден, искам да попитам дали не съм се заразил с някоя гадинка тъй като от около седмица пц-то работи доста бавно,като дори когато в момента пиша това и натисна дясно копче върху самият сайт то отворения прозорец остава така замазан на екрана както и ако отворя някоя друга програма върху сайта или друг няма значение.
      Дали случайно не съм се напълнил с гадинки или просто лин-а е просто за преинсталация и е доста намазан ?



       
      Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 8.02.2019
      Ran by GAMEPC (administrator) on GAMEPC-PC (10-02-2019 12:37:44)
      Running from C:\Users\GAMEPC\Downloads
      Loaded Profiles: GAMEPC (Available Profiles: GAMEPC)
      Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Български (България)
      Internet Explorer Version 11 (Default browser: Chrome)
      Boot Mode: Normal
      Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
      ==================== Processes (Whitelisted) =================
      (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
      (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
      (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
      (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
      (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
      (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
      (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
      (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
      (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
      (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
      (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
      (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
      (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      ==================== Registry (Whitelisted) ===========================
      (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
      HKLM-x32\...\Run: [StereoLinksInstall] => C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe [2362248 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation)
      HKU\S-1-5-21-2297230751-1021565052-1431566534-1000\...\Run: [Viber] => C:\Users\GAMEPC\AppData\Local\Viber\Viber.exe [37073480 2019-01-30] (Viber Media S.à r.l. -> Viber Media S.à r.l.)
      HKU\S-1-5-21-2297230751-1021565052-1431566534-1000\...\Run: [Spotify] => C:\Users\GAMEPC\AppData\Roaming\Spotify\Spotify.exe [26154216 2019-02-03] (Spotify AB -> Spotify Ltd)
      HKU\S-1-5-21-2297230751-1021565052-1431566534-1000\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [35195280 2019-02-01] (Epic Games Inc. -> Epic Games, Inc.)
      HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\Installer\chrmstp.exe [2018-12-12] (Google Inc -> Google Inc.)
      ==================== Internet (Whitelisted) ====================
      (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
      Tcpip\Parameters: [DhcpNameServer] 94.72.140.1
      Tcpip\..\Interfaces\{F8E6BFBF-08DD-4CEC-8468-25670AF9DFE4}: [DhcpNameServer] 94.72.140.1
      Internet Explorer:
      ==================
      HKU\S-1-5-21-2297230751-1021565052-1431566534-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
      BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation -> Microsoft Corporation)
      BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_171\bin\ssv.dll [2018-04-20] (Oracle America, Inc. -> Oracle Corporation)
      BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation -> Microsoft Corporation)
      BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-04-20] (Oracle America, Inc. -> Oracle Corporation)
      BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation -> Microsoft Corporation)
      BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\ssv.dll [2018-04-20] (Oracle America, Inc. -> Oracle Corporation)
      BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation -> Microsoft Corporation)
      BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-04-20] (Oracle America, Inc. -> Oracle Corporation)
      FireFox:
      ========
      FF DefaultProfile: mrpwyf7s.default
      FF ProfilePath: C:\Users\GAMEPC\AppData\Roaming\Mozilla\Firefox\Profiles\mrpwyf7s.default [2019-01-31]
      FF user.js: detected! => C:\Users\GAMEPC\AppData\Roaming\Mozilla\Firefox\Profiles\mrpwyf7s.default\user.js [2019-01-02]
      FF Homepage: Mozilla\Firefox\Profiles\mrpwyf7s.default -> google.bg
      FF Extension: (uBlock Origin) - C:\Users\GAMEPC\AppData\Roaming\Mozilla\Firefox\Profiles\mrpwyf7s.default\Extensions\uBlock0@raymondhill.net.xpi [2019-01-31]
      FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_114.dll [2019-01-09] ()
      FF Plugin: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-04-20] (Oracle Corporation)
      FF Plugin: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-04-20] (Oracle Corporation)
      FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
      FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
      FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
      FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_114.dll [2019-01-09] ()
      FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1229199.dll [2017-03-31] (Adobe Systems, Inc.)
      FF Plugin-x32: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-04-20] (Oracle Corporation)
      FF Plugin-x32: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-04-20] (Oracle Corporation)
      FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
      FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
      FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
      FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-01-09] (Microsoft Corporation)
      FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2019-01-30] (NVIDIA Corporation)
      FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2019-01-30] (NVIDIA Corporation)
      FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc.)
      FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc.)
      Chrome: 
      =======
      CHR StartupUrls: Default -> "hxxp://google.bg/"
      CHR Profile: C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default [2019-02-10]
      CHR Extension: (Презентации) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
      CHR Extension: (Документи) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
      CHR Extension: (Google Диск) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-16]
      CHR Extension: (YouTube) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-09-08]
      CHR Extension: (Таблици) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
      CHR Extension: (Google Документи офлайн) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-16]
      CHR Extension: (Hoxx VPN Proxy) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbcojefnccbanplpoffopkoepjmhgdgh [2019-01-23]
      CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
      CHR Extension: (Gmail) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-09-08]
      CHR Extension: (Chrome Media Router) - C:\Users\GAMEPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-12-07]
      Opera: 
      =======
      OPR Extension: (uBlock Origin) - C:\Users\GAMEPC\AppData\Roaming\Opera Software\Opera Stable\Extensions\kccohkcpppjjkkjppopfnflnebibpida [2018-12-20]
      ==================== Services (Whitelisted) ====================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
      S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8403672 2019-01-31] (BattlEye Innovations e.K. -> )
      S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2291392 2017-08-17] (Disc Soft Ltd -> Disc Soft Ltd)
      S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [777856 2018-07-29] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
      S3 mracsvc; C:\Windows\System32\mracsvc.exe [11132176 2018-10-09] (Mail.Ru LLC -> LLC Mail.Ru)
      S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [8019808 2018-03-29] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.)
      R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [787440 2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
      S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [787440 2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
      S2 SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [24576 2017-09-08] (Realtek Semiconductor.) [File not signed]
      S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2017-06-20] (Microsoft Windows -> Microsoft Corporation)
      R2 wuauserv; C:\Windows\system32\wuaueng2.dll [2651136 2017-09-08] (Microsoft Corporation) [File not signed]
      R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 
      S2 NvTelemetryContainer; "C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvTelemetry\plugins" -r
      ===================== Drivers (Whitelisted) ======================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
      R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11944 2017-09-08] (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.)
      R0 amdsata; C:\Windows\System32\DRIVERS\amdsata.sys [67128 2009-04-28] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
      R0 amdxata; C:\Windows\System32\drivers\amdxata.sys [28216 2009-04-28] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
      R0 AtiPcie; C:\Windows\System32\DRIVERS\AtiPcie.sys [16440 2009-05-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.)
      R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2017-09-11] (Disc Soft Ltd -> Disc Soft Ltd)
      R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2017-09-11] (Disc Soft Ltd -> Disc Soft Ltd)
      R0 FACEIT; C:\Windows\System32\Drivers\FACEIT.sys [13287800 2019-02-01] (FACE IT LIMITED -> )
      R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-09-08] (Martin Malik - REALiX -> REALiX(tm))
      S3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2017-09-08] (Qualcomm Atheros -> Qualcomm Atheros Co., Ltd.)
      S3 mracdrv; C:\Windows\System32\drivers\mracdrv.sys [10348560 2018-10-09] (Mail.Ru LLC -> LLC Mail.Ru)
      S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30336 2018-10-25] (NVIDIA Corporation -> NVIDIA Corporation)
      R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [70024 2018-10-01] (NVIDIA Corporation -> NVIDIA Corporation)
      R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [74576 2018-10-01] (NVIDIA Corporation -> NVIDIA Corporation)
      R3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [61656 2017-09-08] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation )
      R3 usbfilter; C:\Windows\System32\DRIVERS\usbfilter.sys [34872 2009-04-03] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
      S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]
      ==================== NetSvcs (Whitelisted) ===================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

      ==================== One month (created) ========
      (If an entry is included in the fixlist, the file/folder will be moved.)
      2019-02-10 12:37 - 2019-02-10 12:38 - 000016274 _____ C:\Users\GAMEPC\Downloads\FRST.txt
      2019-02-10 12:37 - 2019-02-10 12:37 - 002434048 _____ (Farbar) C:\Users\GAMEPC\Downloads\FRST64.exe
      2019-02-10 12:37 - 2019-02-10 12:37 - 000000000 ____D C:\FRST
      2019-02-09 10:46 - 2019-02-09 10:46 - 008736903 _____ C:\Users\GAMEPC\Downloads\5. Курве.mp4
      2019-02-08 23:47 - 2019-02-08 23:47 - 000004811 _____ C:\Users\GAMEPC\Downloads\niko.zip
      2019-02-08 03:03 - 2019-02-08 03:03 - 067321320 _____ (Electronic Arts) C:\Users\GAMEPC\Downloads\ApexLegendsInstaller.exe
      2019-02-06 23:56 - 2019-02-06 23:56 - 000014497 _____ C:\Users\GAMEPC\Downloads\Flight.of.the.Phoenix.2004.BRRip.XviD.BGAUDiO-KiNGS.torrent
      2019-02-06 23:56 - 2019-02-06 23:56 - 000014497 _____ C:\Users\GAMEPC\Downloads\Flight.of.the.Phoenix.2004.BRRip.XviD.BGAUDiO-KiNGS (1).torrent
      2019-02-06 13:10 - 2019-02-06 13:10 - 000000000 ____D C:\Users\GAMEPC\AppData\Local\Viber
      2019-02-05 14:41 - 2019-02-05 14:41 - 014648464 _____ (Microsoft Corporation) C:\Users\GAMEPC\Downloads\vc_redist.x86.exe
      2019-02-04 20:49 - 2019-01-30 22:07 - 000133512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
      2019-02-04 20:47 - 2019-02-04 20:49 - 000000000 ____D C:\Windows\LastGood
      2019-02-04 20:45 - 2019-02-01 23:36 - 000228768 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
      2019-02-04 20:45 - 2019-02-01 23:36 - 000047592 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
      2019-02-04 20:45 - 2019-02-01 03:42 - 001005984 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
      2019-02-04 20:45 - 2019-02-01 03:42 - 001005984 _____ C:\Windows\system32\vulkan-1.dll
      2019-02-04 20:45 - 2019-02-01 03:42 - 000869584 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
      2019-02-04 20:45 - 2019-02-01 03:42 - 000869584 _____ C:\Windows\SysWOW64\vulkan-1.dll
      2019-02-04 20:45 - 2019-02-01 03:42 - 000551920 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
      2019-02-04 20:45 - 2019-02-01 03:42 - 000457304 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
      2019-02-04 20:45 - 2019-02-01 03:42 - 000269520 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
      2019-02-04 20:45 - 2019-02-01 03:42 - 000269520 _____ C:\Windows\system32\vulkaninfo.exe
      2019-02-04 20:45 - 2019-02-01 03:42 - 000243920 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
      2019-02-04 20:45 - 2019-02-01 03:42 - 000243920 _____ C:\Windows\SysWOW64\vulkaninfo.exe
      2019-02-04 20:45 - 2019-02-01 03:41 - 071470016 _____ (NVIDIA Corp.) C:\Windows\system32\nvoptix.dll
      2019-02-04 20:45 - 2019-02-01 03:41 - 040344024 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
      2019-02-04 20:45 - 2019-02-01 03:41 - 030021616 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
      2019-02-04 20:45 - 2019-02-01 03:41 - 020887352 _____ (NVIDIA Corporation) C:\Windows\system32\nvrtum64.dll
      2019-02-04 20:45 - 2019-02-01 03:41 - 020409840 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
      2019-02-04 20:45 - 2019-02-01 03:41 - 001463952 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
      2019-02-04 20:45 - 2019-02-01 03:41 - 001129368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
      2019-02-04 20:45 - 2019-02-01 03:41 - 000631440 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
      2019-02-04 20:45 - 2019-02-01 03:41 - 000521872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
      2019-02-04 20:45 - 2019-02-01 03:41 - 000419832 _____ C:\Windows\system32\nvofapi64.dll
      2019-02-04 20:45 - 2019-02-01 03:41 - 000368808 _____ C:\Windows\SysWOW64\nvofapi.dll
      2019-02-04 20:45 - 2019-02-01 03:40 - 040235096 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
      2019-02-04 20:45 - 2019-02-01 03:40 - 035140696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
      2019-02-04 20:45 - 2019-02-01 03:40 - 004868080 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
      2019-02-04 20:45 - 2019-02-01 03:40 - 004339616 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
      2019-02-04 20:45 - 2019-02-01 03:40 - 002030736 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
      2019-02-04 20:45 - 2019-02-01 03:40 - 001734560 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6441881.dll
      2019-02-04 20:45 - 2019-02-01 03:40 - 001533936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
      2019-02-04 20:45 - 2019-02-01 03:40 - 001467864 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6441881.dll
      2019-02-04 20:45 - 2019-02-01 03:40 - 000497056 _____ (NVIDIA Corporation) C:\Windows\system32\nvcbl64.dll
      2019-02-04 20:45 - 2019-02-01 03:39 - 035477392 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl64.dll
      2019-02-04 20:45 - 2019-02-01 03:39 - 031989600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
      2019-02-04 20:45 - 2019-02-01 03:39 - 029985200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl32.dll
      2019-02-04 20:45 - 2019-02-01 03:39 - 021206192 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
      2019-02-04 20:45 - 2019-02-01 03:39 - 020096416 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
      2019-02-04 20:45 - 2019-02-01 03:39 - 017616432 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
      2019-02-04 20:45 - 2019-02-01 03:39 - 010894304 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
      2019-02-04 20:45 - 2019-02-01 03:39 - 009254488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
      2019-02-04 20:45 - 2019-02-01 03:39 - 001168936 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
      2019-02-04 20:45 - 2019-02-01 03:39 - 000914912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
      2019-02-04 20:45 - 2019-02-01 03:39 - 000524248 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
      2019-02-04 20:45 - 2019-02-01 03:39 - 000450648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
      2019-02-04 20:45 - 2019-02-01 03:39 - 000419776 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
      2019-02-04 20:45 - 2019-02-01 03:39 - 000182040 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
      2019-02-04 20:45 - 2019-02-01 03:39 - 000163184 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
      2019-02-04 20:45 - 2019-02-01 03:39 - 000159480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
      2019-02-04 20:45 - 2019-02-01 03:39 - 000141568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
      2019-02-04 20:45 - 2019-02-01 03:38 - 017424680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
      2019-02-04 20:45 - 2019-02-01 03:38 - 004311968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
      2019-02-04 20:45 - 2019-01-31 08:26 - 000000669 _____ C:\Windows\SysWOW64\nv-vk32.json
      2019-02-04 20:45 - 2019-01-31 08:26 - 000000669 _____ C:\Windows\system32\nv-vk64.json
      2019-02-04 00:33 - 2019-02-04 00:33 - 000016205 _____ C:\Users\GAMEPC\Downloads\Beautiful.Creature.2013.BRRip.XviD.AC3.BGAUDiO-SiSO&QT.torrent
      2019-02-02 19:10 - 2019-02-02 19:10 - 000032425 _____ C:\Users\GAMEPC\Downloads\Speed.2.1997.DVDRip.XviD.BGAUDiO-ZmN.torrent
      2019-02-02 19:09 - 2019-02-02 19:09 - 000056272 _____ C:\Users\GAMEPC\Downloads\Speed 2 (1997)[DVDRip].torrent
      2019-01-31 21:58 - 2019-01-31 21:58 - 000061719 _____ C:\Users\GAMEPC\Downloads\ggirl_din.(subs.sab.bz).rar
      2019-01-31 21:58 - 2019-01-31 21:58 - 000012712 _____ C:\Users\GAMEPC\Downloads\Gone.Girl.2014.576p.BRRip.x265-DiN.torrent
      2019-01-30 22:43 - 2019-01-30 22:43 - 000023223 _____ C:\Users\GAMEPC\Downloads\The.Call.2013.720p.BluRay.x264_SPARKS.(subs.sab.bz).zip
      2019-01-30 22:43 - 2019-01-30 22:43 - 000014490 _____ C:\Users\GAMEPC\Downloads\The.Call.BDRip.XviD.AC3-WAR (1).torrent
      2019-01-30 22:41 - 2019-01-30 22:41 - 000014490 _____ C:\Users\GAMEPC\Downloads\The.Call.BDRip.XviD.AC3-WAR.torrent
      2019-01-30 22:22 - 2019-01-30 22:22 - 000028835 _____ C:\Users\GAMEPC\Downloads\Taking.Lives.DC.2004.720p.HDDVD.x264_ESiR.(subs.sab.bz).zip
      2019-01-30 22:22 - 2019-01-30 22:22 - 000019710 _____ C:\Users\GAMEPC\Downloads\Taking.Lives.2004.DC.BRRip.x264.AAC-WAR.torrent
      2019-01-29 20:26 - 2019-01-29 20:26 - 000029511 _____ C:\Users\GAMEPC\Downloads\The_Cloverfield_Paradox.2018.HDRip.XViD_ETRG.(subs.sab.bz).zip
      2019-01-29 20:26 - 2019-01-29 20:26 - 000008066 _____ C:\Users\GAMEPC\Downloads\The.Cloverfield.Paradox.2018.HDRip.XviD.AC3-EVO.torrent
      2019-01-29 20:22 - 2019-01-29 20:22 - 000029721 _____ C:\Users\GAMEPC\Downloads\tucker.and.dale.vs.evil.2010.bluray.720p.dts.x264-chd(subsunacs.net).rar
      2019-01-29 20:21 - 2019-01-29 20:21 - 000014671 _____ C:\Users\GAMEPC\Downloads\Tucker.And.Dale.vs.Evil.2010.BRRip.XviD-DiN.torrent
      2019-01-29 20:11 - 2019-01-29 20:11 - 000014405 _____ C:\Users\GAMEPC\Downloads\Predators.2010.DVDRip.XviD.BG.AUDIO-BDB.torrent
      2019-01-29 20:03 - 2019-01-29 20:03 - 000011568 _____ C:\Users\GAMEPC\Downloads\Pandorum.2008.1080p.BluRay.H264.AAC.Dual Audio-ASA.torrent
      2019-01-29 19:56 - 2019-01-29 19:56 - 000015401 _____ C:\Users\GAMEPC\Downloads\Abraham.Lincoln.Vampire.Hunter.2012.480p.BDRip.x264.DUAL-SLSS.torrent
      2019-01-29 19:55 - 2019-01-29 19:55 - 000027007 _____ C:\Users\GAMEPC\Downloads\cocaine.godmother.2017.720p.webrip.x264-yts.am(subsunacs.net).rar
      2019-01-29 19:55 - 2019-01-29 19:55 - 000013125 _____ C:\Users\GAMEPC\Downloads\Cocaine.Godmother.2017.WEBRip.x265-DiN.torrent
      2019-01-29 17:26 - 2019-01-29 17:26 - 000014876 _____ C:\Users\GAMEPC\Downloads\api-ms-win-crt-runtime-l1-1-0.dll_85.rar
      2019-01-28 17:46 - 2019-01-28 17:46 - 000017617 _____ C:\Users\GAMEPC\Downloads\Ghost.Ship.2002.720p.BluRay.x264_DON.(subs.sab.bz).rar
      2019-01-28 17:46 - 2019-01-28 17:46 - 000014588 _____ C:\Users\GAMEPC\Downloads\Ghost.Ship.2002.BDRp.XviD.AC3-WAR.torrent
      2019-01-28 00:46 - 2019-01-28 00:46 - 000014403 _____ C:\Users\GAMEPC\Downloads\top_gear.17x07.india_special.hdtv_xvid-fov.avi (1).torrent
      2019-01-28 00:02 - 2019-01-28 00:02 - 000033323 _____ C:\Users\GAMEPC\Downloads\top.gear.at.the.movies.2011.bdrip.xvid-taste(subsunacs.net).rar
      2019-01-28 00:02 - 2019-01-28 00:02 - 000014764 _____ C:\Users\GAMEPC\Downloads\Top.Gear.At.The.Movies.2011.BDRip.XviD-TASTE.torrent
      2019-01-28 00:02 - 2019-01-28 00:02 - 000014423 _____ C:\Users\GAMEPC\Downloads\Top.Gear.S14E06.DVBRip.XviD.BGAudio.torrent
      2019-01-28 00:02 - 2019-01-28 00:02 - 000011585 _____ C:\Users\GAMEPC\Downloads\Top.Gear.The.Great.African.Adventure.2013.720p.BluRay.x264.torrent
      2019-01-28 00:00 - 2019-01-28 00:00 - 000036810 _____ C:\Users\GAMEPC\Downloads\Top_Gear_India_Special.(subs.sab.bz).rar
      2019-01-27 23:59 - 2019-01-27 23:59 - 000014401 _____ C:\Users\GAMEPC\Downloads\top_gear.17x07.india_special.hdtv_xvid-fov.avi.torrent
      2019-01-26 04:50 - 2019-01-26 04:50 - 000011416 _____ C:\Users\GAMEPC\Downloads\Top Gear - Burma Special.torrent
      2019-01-26 04:47 - 2019-01-26 04:47 - 000020539 _____ C:\Users\GAMEPC\Downloads\Top.Gear.The.Worst.Car.In.The.History.Of.The.World.2012.720p.BluRay.x264.torrent
      2019-01-25 04:45 - 2019-01-25 04:45 - 000016631 _____ C:\Users\GAMEPC\Downloads\Top Gear - Season 16.torrent
      2019-01-23 23:26 - 2019-01-23 23:26 - 000000219 _____ C:\Users\GAMEPC\Desktop\Counter-Strike Global Offensive.url
      2019-01-20 15:34 - 2019-01-20 15:34 - 000094134 _____ C:\Users\GAMEPC\Downloads\The_Grand_Tour_S02x08.(subs.sab.bz).zip
      2019-01-20 15:34 - 2019-01-20 15:34 - 000092379 _____ C:\Users\GAMEPC\Downloads\The_Grand_Tour_S02x07.(subs.sab.bz).zip
      2019-01-20 15:34 - 2019-01-20 15:34 - 000086708 _____ C:\Users\GAMEPC\Downloads\The_Grand_Tour_S02x06.(subs.sab.bz).zip
      2019-01-20 15:34 - 2019-01-20 15:34 - 000067819 _____ C:\Users\GAMEPC\Downloads\The_Grand_Tour_02x10.(subs.sab.bz).zip
      2019-01-20 15:34 - 2019-01-20 15:34 - 000063437 _____ C:\Users\GAMEPC\Downloads\The_Grand_Tour_02x09.(subs.sab.bz).zip
      2019-01-20 15:34 - 2019-01-20 15:34 - 000055727 _____ C:\Users\GAMEPC\Downloads\The_Grand_Tour_S02x05.(subs.sab.bz).zip
      2019-01-20 15:34 - 2019-01-20 15:34 - 000051267 _____ C:\Users\GAMEPC\Downloads\The_Grand_Tour_02x11.(subs.sab.bz).zip
      2019-01-19 22:51 - 2019-01-19 22:51 - 000000222 _____ C:\Users\GAMEPC\Desktop\DiRT 3 Complete Edition.url
      2019-01-19 17:40 - 2019-01-19 17:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
      2019-01-18 18:47 - 2019-01-18 18:47 - 000091478 _____ C:\Users\GAMEPC\Downloads\The_Grand_Tour_S02x04.(subs.sab.bz).zip
      2019-01-18 18:46 - 2019-01-18 18:47 - 000104011 _____ C:\Users\GAMEPC\Downloads\The_Grand_Tour_S02E02.(subs.sab.bz).zip
      2019-01-18 18:46 - 2019-01-18 18:47 - 000086312 _____ C:\Users\GAMEPC\Downloads\The_Grand_Tour_S02x03.(subs.sab.bz).zip
      2019-01-18 18:46 - 2019-01-18 18:46 - 000101264 _____ C:\Users\GAMEPC\Downloads\The_Grand_Tour_S02E01.(subs.sab.bz).zip
      2019-01-18 18:45 - 2019-01-18 18:45 - 000038914 _____ C:\Users\GAMEPC\Downloads\The.Grand.Tour.S02.WEBRip.X264-Mixed.torrent
      2019-01-18 18:43 - 2019-01-18 18:43 - 000028976 _____ C:\Users\GAMEPC\Downloads\_Yavka.net_Goosebumps.2.Haunted.Halloween.2018.720p.BluRay.H264.AAC-RARBG.rar
      2019-01-18 18:42 - 2019-01-18 18:42 - 000014612 _____ C:\Users\GAMEPC\Downloads\Goosebumps.2.Haunted.Halloween.2018.BRRip.XViD-ETRG.torrent
      2019-01-18 17:30 - 2019-01-18 17:36 - 032841688 _____ C:\Users\GAMEPC\Downloads\masturbira pred kamera.flv
      2019-01-18 17:30 - 2019-01-18 17:32 - 011506791 _____ C:\Users\GAMEPC\Downloads\Bulgarian teen girl selfshot her orgasm - xHamster.com.flv
      2019-01-18 17:29 - 2019-01-18 17:50 - 196627499 _____ C:\Users\GAMEPC\Downloads\Тийнейджърка.mkv
      2019-01-18 17:27 - 2019-01-18 17:28 - 021624320 _____ C:\Users\GAMEPC\Downloads\Maria Bratoeva - Ruse.avi
      2019-01-18 17:27 - 2019-01-18 17:27 - 003177723 _____ C:\Users\GAMEPC\Downloads\Cumming on my girlfriend's tits and face - xHamster.com.flv
      2019-01-18 17:27 - 2019-01-18 17:27 - 001862496 _____ C:\Users\GAMEPC\Downloads\SEX Denica Stoqnova .3gp
      2019-01-18 17:27 - 2019-01-18 17:27 - 000215130 _____ C:\Users\GAMEPC\Downloads\Seks v kenefa.3gp
      2019-01-18 17:13 - 2019-01-18 17:23 - 096802616 _____ C:\Users\GAMEPC\Downloads\PUTIBG_9-2. от Асеновград пред камератаvideo (1).flv
      2019-01-18 14:31 - 2019-01-18 14:31 - 000003476 _____ C:\Users\GAMEPC\Downloads\d2c4a999-a7cb-4247-957e-b682f76cd2ea-profile_image-70x70.jpeg
      2019-01-18 00:46 - 2019-01-18 00:46 - 000000218 _____ C:\Users\GAMEPC\Desktop\Counter-Strike.url
      2019-01-17 17:01 - 2019-01-17 17:01 - 002982580 _____ C:\Users\GAMEPC\Downloads\19godina.avi
      2019-01-17 17:01 - 2019-01-17 17:01 - 002982580 _____ C:\Users\GAMEPC\Downloads\19godina (1).avi
      2019-01-17 16:57 - 2019-01-17 16:57 - 007733248 _____ C:\Users\GAMEPC\Downloads\Mimi Kavarna.3gp
      2019-01-16 15:51 - 2019-01-16 15:51 - 002824729 _____ C:\Users\GAMEPC\Downloads\IMG_2378.MOV
      2019-01-15 17:01 - 2019-01-12 06:02 - 000383568 _____ C:\Windows\system32\nvofapi.dll
      2019-01-15 17:00 - 2019-01-12 06:01 - 002018184 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6441771.dll
      2019-01-15 17:00 - 2019-01-12 06:01 - 001467648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6441771.dll
      2019-01-13 21:23 - 2019-01-13 21:23 - 000016563 _____ C:\Users\GAMEPC\Downloads\The.Hangover.Part.II.2011.BDRip.XviD.AC3.DUAL-REFLUX.torrent
      2019-01-13 21:17 - 2019-01-13 21:17 - 000014673 _____ C:\Users\GAMEPC\Downloads\Accepted[2006]DvDrip[Eng]-aXXo.torrent
      2019-01-13 21:09 - 2019-01-13 21:09 - 000014129 _____ C:\Users\GAMEPC\Downloads\The.Social.Network.2010.BDRip.XviD.AC3.BGAUDiO-SiSO.torrent
      2019-01-11 01:57 - 2019-01-11 21:58 - 000000000 ____D C:\Users\GAMEPC\AppData\Local\PokerStars.BG
      2019-01-11 01:57 - 2019-01-11 02:00 - 000000000 ____D C:\Program Files (x86)\PokerStars.BG
      2019-01-11 01:57 - 2019-01-11 01:57 - 000002008 _____ C:\Users\GAMEPC\Desktop\PokerStars.bg.lnk
      2019-01-11 01:57 - 2019-01-11 01:57 - 000000000 ____D C:\Users\GAMEPC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PokerStars.BG
      2019-01-11 01:56 - 2019-01-11 01:56 - 002174984 _____ (Rational Intellectual Holdings Ltd.) C:\Users\GAMEPC\Downloads\PokerStarsInstallBG.exe
      ==================== One month (modified) ========
      (If an entry is included in the fixlist, the file/folder will be moved.)
      2019-02-10 12:25 - 2017-09-23 17:42 - 000000000 ____D C:\Program Files (x86)\Steam
      2019-02-10 12:25 - 2017-09-08 13:03 - 000000000 ____D C:\ProgramData\NVIDIA
      2019-02-10 03:18 - 2009-07-14 06:45 - 000028352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
      2019-02-10 03:18 - 2009-07-14 06:45 - 000028352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
      2019-02-10 01:24 - 2017-09-19 22:12 - 000000000 ____D C:\Users\GAMEPC\AppData\Roaming\TS3Client
      2019-02-09 17:55 - 2019-01-09 00:51 - 000000000 ____D C:\Users\GAMEPC\AppData\Local\Spotify
      2019-02-09 17:37 - 2019-01-09 00:50 - 000000000 ____D C:\Users\GAMEPC\AppData\Roaming\Spotify
      2019-02-09 10:55 - 2017-12-06 18:25 - 000000000 ____D C:\Users\GAMEPC\AppData\Roaming\ViberPC
      2019-02-07 15:31 - 2017-09-08 12:34 - 000000000 ____D C:\Program Files (x86)\Opera
      2019-02-07 01:05 - 2018-04-14 10:49 - 000000000 ____D C:\Users\GAMEPC\AppData\Local\Ubisoft Game Launcher
      2019-02-07 00:01 - 2017-09-10 00:33 - 000000000 ____D C:\Users\GAMEPC\AppData\Roaming\qBittorrent
      2019-02-05 14:13 - 2017-09-08 13:05 - 000000000 ____D C:\Users\GAMEPC\AppData\Local\NVIDIA
      2019-02-04 20:50 - 2017-09-08 12:20 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
      2019-02-04 20:50 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
      2019-02-04 20:49 - 2017-09-08 12:20 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
      2019-02-04 20:46 - 2017-09-08 13:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
      2019-02-03 18:42 - 2017-09-08 14:54 - 000000000 ____D C:\Users\GAMEPC\AppData\Local\CrashDumps
      2019-02-01 23:36 - 2017-09-08 12:19 - 001682392 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
      2019-02-01 21:20 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
      2019-02-01 21:19 - 2018-12-29 22:14 - 013287800 _____ C:\Windows\system32\Drivers\FACEIT.sys
      2019-02-01 03:40 - 2017-09-08 12:22 - 037286456 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
      2019-02-01 03:39 - 2017-09-08 13:02 - 000506208 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
      2019-02-01 03:38 - 2017-09-08 13:02 - 004868928 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
      2019-01-31 22:19 - 2018-12-29 22:14 - 000000000 ____D C:\Program Files\FACEIT AC
      2019-01-31 22:14 - 2017-09-08 12:34 - 000000000 ____D C:\Program Files\Mozilla Firefox
      2019-01-31 22:14 - 2017-09-08 12:34 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
      2019-01-31 15:01 - 2017-09-08 12:51 - 000000000 ____D C:\Users\GAMEPC\AppData\LocalLow\Mozilla
      2019-01-31 08:26 - 2017-09-08 12:21 - 000046936 _____ C:\Windows\system32\nvinfo.pb
      2019-01-31 08:26 - 2017-09-08 12:20 - 000001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
      2019-01-30 22:09 - 2017-09-08 13:03 - 005364776 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
      2019-01-30 22:09 - 2017-09-08 13:03 - 002624824 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
      2019-01-30 22:09 - 2017-09-08 13:03 - 001767920 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
      2019-01-30 22:09 - 2017-09-08 13:03 - 000651248 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
      2019-01-30 22:09 - 2017-09-08 13:03 - 000450600 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
      2019-01-30 22:09 - 2017-09-08 13:03 - 000124968 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
      2019-01-30 22:09 - 2017-09-08 13:03 - 000082800 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
      2019-01-30 15:15 - 2017-09-08 13:03 - 008488852 _____ C:\Windows\system32\nvcoproc.bin
      2019-01-29 17:21 - 2017-10-13 15:36 - 000000000 ____D C:\Users\GAMEPC\Documents\ViberDownloads
      2019-01-26 16:03 - 2017-09-08 13:03 - 000001951 _____ C:\Windows\NvContainerRecovery.bat
      2019-01-25 16:58 - 2018-08-04 01:57 - 000000000 ____D C:\ProgramData\TruckersMP
      2019-01-21 14:28 - 2017-09-26 23:48 - 000000000 ____D C:\Users\GAMEPC\AppData\Local\ElevatedDiagnostics
      2019-01-19 23:47 - 2018-07-27 17:56 - 000466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
      2019-01-19 23:47 - 2018-07-27 17:56 - 000444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
      2019-01-19 23:47 - 2018-07-27 17:56 - 000122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
      2019-01-19 23:47 - 2018-07-27 17:56 - 000109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
      2019-01-19 17:40 - 2017-09-08 13:25 - 000000000 ____D C:\Users\GAMEPC\AppData\Roaming\Skype
      2019-01-19 17:40 - 2017-09-08 12:39 - 000001318 _____ C:\Users\Public\Desktop\Skype.lnk
      2019-01-19 17:40 - 2017-09-08 12:39 - 000000000 ____D C:\ProgramData\Skype
      2019-01-19 17:39 - 2017-09-08 12:39 - 000000000 ___RD C:\Program Files (x86)\Skype
      2019-01-12 02:01 - 2017-09-08 13:02 - 000505696 _____ (NVIDIA Corporation) C:\Windows\system32\SET3358.tmp
      2019-01-12 02:01 - 2017-09-08 12:22 - 036884408 _____ (NVIDIA Corporation) C:\Windows\system32\SET39DF.tmp
      2019-01-12 01:59 - 2017-09-08 13:02 - 004850072 _____ (NVIDIA Corporation) C:\Windows\system32\SETE88.tmp
      ==================== Files in the root of some directories =======
      2018-12-17 20:42 - 2018-12-23 18:48 - 000007597 _____ () C:\Users\GAMEPC\AppData\Local\Resmon.ResmonCfg
      Some files in TEMP:
      ====================
      2019-01-29 04:11 - 2019-01-29 04:11 - 000000196 _____ () C:\Users\GAMEPC\AppData\Local\Temp\00e481b5e22dbe1f649fcddd505d3eb7.dll
      2019-01-02 23:12 - 2019-01-06 00:10 - 000000020 _____ () C:\Users\GAMEPC\AppData\Local\Temp\25bac1013fc49581f9f82c556d27f9bb.dll
      2019-01-29 04:11 - 2019-02-09 21:58 - 000000020 _____ () C:\Users\GAMEPC\AppData\Local\Temp\d92b9ce5f9f41a6d518fdcbc62bd3532.dll
      2019-01-15 17:01 - 2019-01-11 11:31 - 000397520 _____ (NVIDIA Corporation) C:\Users\GAMEPC\AppData\Local\Temp\nvStInst.exe
      2019-01-19 17:38 - 2019-01-19 17:39 - 062928040 _____ (Skype Technologies S.A.) C:\Users\GAMEPC\AppData\Local\Temp\SkypeSetup.exe
      ==================== Bamital & volsnap ======================
      (There is no automatic fix for files that do not pass verification.)
      C:\Windows\system32\winlogon.exe => File is digitally signed
      C:\Windows\system32\wininit.exe => File is digitally signed
      C:\Windows\SysWOW64\wininit.exe => File is digitally signed
      C:\Windows\explorer.exe => File is digitally signed
      C:\Windows\SysWOW64\explorer.exe => File is digitally signed
      C:\Windows\system32\svchost.exe => File is digitally signed
      C:\Windows\SysWOW64\svchost.exe => File is digitally signed
      C:\Windows\system32\services.exe => File is digitally signed
      C:\Windows\system32\User32.dll => File is digitally signed
      C:\Windows\SysWOW64\User32.dll => File is digitally signed
      C:\Windows\system32\userinit.exe => File is digitally signed
      C:\Windows\SysWOW64\userinit.exe => File is digitally signed
      C:\Windows\system32\rpcss.dll => File is digitally signed
      C:\Windows\system32\dnsapi.dll => File is digitally signed
      C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
      C:\Windows\system32\dllhost.exe => File is digitally signed
      C:\Windows\SysWOW64\dllhost.exe => File is digitally signed
      C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
      LastRegBack: 2019-02-02 06:31
      ==================== End of FRST.txt ============================











       
      Additional scan result of Farbar Recovery Scan Tool (x64) Version: 8.02.2019
      Ran by GAMEPC (10-02-2019 12:38:44)
      Running from C:\Users\GAMEPC\Downloads
      Windows 7 Home Premium Service Pack 1 (X64) (2017-09-08 09:32:01)
      Boot Mode: Normal
      ==========================================================

      ==================== Accounts: =============================
      Administrator (S-1-5-21-2297230751-1021565052-1431566534-500 - Administrator - Disabled)
      GAMEPC (S-1-5-21-2297230751-1021565052-1431566534-1000 - Administrator - Enabled) => C:\Users\GAMEPC
      Guest (S-1-5-21-2297230751-1021565052-1431566534-501 - Limited - Disabled)
      ==================== Security Center ========================
      (If an entry is included in the fixlist, it will be removed.)
      AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
      ==================== Installed Programs ======================
      (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
      Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 26.0.0.127 - Adobe Systems Incorporated)
      Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.114 - Adobe Systems Incorporated)
      Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.114 - Adobe Systems Incorporated)
      Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.9.199 - Adobe Systems, Inc.)
      ATI Catalyst Install Manager (HKLM\...\{DC9C8BC1-72CE-B5FE-EA4F-6D9127E51746}) (Version: 3.0.736.0 - ATI Technologies, Inc.)
      CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.7.6623 - CDBurnerXP)
      CpuCoreParking (HKLM-x32\...\{0984C56D-2985-4786-AB62-39AB985E269C}) (Version: 2.1.2.0 - CpuCoreParking)
      DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.6.0.0283 - Disc Soft Ltd)
      DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 418.81 - NVIDIA Corporation) Hidden
      Epic Games Launcher (HKLM-x32\...\{0E63B233-DC24-442C-BD38-0B91D90FEC5B}) (Version: 1.1.167.0 - Epic Games, Inc.)
      Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
      FACEIT AC version 1.0 (HKLM\...\{1419E44C-0EF4-4822-9194-9F1A4D43973D}_is1) (Version: 1.0 - FACEIT LTD)
      FIFA18 version 1.0 (HKLM\...\FIFA18_is1) (Version: 1.0 - STEAMPUNKS) <==== ATTENTION
      GOM Player (HKLM-x32\...\GOM Player) (Version: 2.3.14.5270 - Gretech Corporation)
      Google Chrome (HKLM\...\{DA081EB6-F64C-358C-9BB0-AF1EA8001F34}) (Version: 71.0.3578.98 - Google, Inc.)
      Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
      Java 8 Update 171 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180171F0}) (Version: 8.0.1710.11 - Oracle Corporation)
      Java 8 Update 171 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180171F0}) (Version: 8.0.1710.11 - Oracle Corporation)
      Kinect for Windows Speech Recognition Language Pack (en-AU) (HKLM-x32\...\{48CEC0A3-AE10-4EE3-AC62-76D3D58792E5}) (Version: 11.0.7400.336 - Microsoft Corporation)
      Kinect for Windows Speech Recognition Language Pack (en-CA) (HKLM-x32\...\{9C5505DA-F9C1-46CB-9F8F-AC38F8EA518A}) (Version: 11.0.7400.336 - Microsoft Corporation)
      Kinect for Windows Speech Recognition Language Pack (en-GB) (HKLM-x32\...\{A0186231-0A8B-455A-8A25-B64AABCC11A6}) (Version: 11.0.7400.336 - Microsoft Corporation)
      Kinect for Windows Speech Recognition Language Pack (en-US) (HKLM-x32\...\{8AAA44BB-487E-4D01-AF76-484ACB90DBFE}) (Version: 11.0.7400.336 - Microsoft Corporation)
      Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
      Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
      Microsoft Office Language Pack 2010 - Bulgarian/български (HKLM-x32\...\Office14.OMUI.bg-bg) (Version: 14.0.4763.1021 - Microsoft Corporation)
      Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4734.1000 - Microsoft Corporation)
      Microsoft Server Speech Platform Runtime (x64) (HKLM\...\{3B433087-E62E-4BF5-97F9-4AF6E1C2409C}) (Version: 11.0.7400.345 - Microsoft Corporation)
      Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
      Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
      Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
      Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
      Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
      Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
      Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
      Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
      Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
      Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
      Mozilla Firefox 64.0.2 (x64 bg) (HKLM\...\Mozilla Firefox 64.0.2 (x64 bg)) (Version: 64.0.2 - Mozilla)
      Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 55.0.3 - Mozilla)
      NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.12 - NVIDIA Corporation) Hidden
      NVIDIA 3D Vision Controller Driver 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation)
      NVIDIA 3D Vision Driver 418.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 418.81 - NVIDIA Corporation)
      NVIDIA GeForce Experience 3.16.0.140 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.16.0.140 - NVIDIA Corporation)
      NVIDIA Graphics Driver 418.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 418.81 - NVIDIA Corporation)
      NVIDIA HD Audio Driver 1.3.38.13 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.13 - NVIDIA Corporation)
      NVIDIA PhysX System Software 9.18.0907 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.18.0907 - NVIDIA Corporation)
      OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
      Opera Stable 57.0.3098.116 (HKLM-x32\...\Opera 57.0.3098.116) (Version: 57.0.3098.116 - Opera Software)
      PokerStars.bg (HKLM-x32\...\PokerStars.bg) (Version:  - PokerStars.bg)
      PotPlayer-64 bit (HKLM\...\PotPlayer64) (Version: 1.7.16291 - Kakao Corp.)
      PotPlayer-64 bit (HKLM-x32\...\PotPlayer64) (Version: 1.7.8556 - Kakao Corp.)
      qBittorrent 4.1.5 (HKLM-x32\...\qBittorrent) (Version: 4.1.5 - The qBittorrent project)
      Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.4.1 - Rockstar Games)
      Skype, версия 8.34 (HKLM-x32\...\Skype_is1) (Version: 8.34 - Skype Technologies S.A.)
      Spotify (HKU\S-1-5-21-2297230751-1021565052-1431566534-1000\...\Spotify) (Version: 1.0.99.250.g936eab8d - Spotify AB)
      StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
      Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
      swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
      TeamSpeak 3 Client (HKU\S-1-5-21-2297230751-1021565052-1431566534-1000\...\TeamSpeak 3 Client) (Version: 3.1.8 - TeamSpeak Systems GmbH)
      TruckersMP Launcher 1.0.0.4 (HKLM\...\{A227B892-C548-4490-9C5D-DB341F8194A6}_is1) (Version: 1.0.0.4 - TruckersMP Team)
      Uplay (HKLM-x32\...\Uplay) (Version: 73.0 - Ubisoft)
      Viber (HKLM-x32\...\{0235CB19-2284-4C34-9CF9-04078CF94C32}) (Version: 7.7.0.1126 - Viber Media Inc.) Hidden
      Viber (HKU\S-1-5-21-2297230751-1021565052-1431566534-1000\...\{f37aa91a-8669-4ac1-bb40-8cc05c3beca1}) (Version: 7.7.0.1126 - Viber Media Inc.)
      Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
      WinRAR 5.40 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
      WinRAR 5.50 (64-битова версия) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
      ==================== Custom CLSID (Whitelisted): ==========================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
      ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-08-14] (win.rar GmbH -> Alexander Roshal)
      ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-08-14] (win.rar GmbH -> Alexander Roshal)
      ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation)
      ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-08-14] (win.rar GmbH -> Alexander Roshal)
      ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-08-14] (win.rar GmbH -> Alexander Roshal)
      ==================== Scheduled Tasks (Whitelisted) =============
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
      Task: {1EC5AF9E-5A52-4FE5-A2E8-539165748CC5} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
      Task: {29CD2B59-F360-4EA0-8046-E993FB989355} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_114_pepper.exe [2019-01-09] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
      Task: {3216E845-2829-4DBE-AA88-3252ACB814DC} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
      Task: {3DAD135E-7AD5-4D57-B3E2-9E7F6AD9E01C} - System32\Tasks\{76A40252-E785-4407-9A98-34E12F6F05C9} => C:\Windows\system32\pcalua.exe -a "c:\program files (x86)\hi-rez studios\HiRezGamesDiagAndSupport.exe" -c uninstall=0
      Task: {47FB829C-5030-4A81-8AE1-E19E047EF8CF} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
      Task: {593E836D-18E7-4C3A-A10E-E739556F42F1} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
      Task: {64503CA0-D96B-485A-A2ED-32E1ADEC5130} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-09-08] (Google Inc -> Google Inc.)
      Task: {82C47114-5EDD-46D5-95B9-AA03FCB16F9C} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
      Task: {94F3AB4C-229D-4981-8100-F63CF93E0D45} - System32\Tasks\Opera scheduled Autoupdate 1504866897 => C:\Program Files (x86)\Opera\launcher.exe [2019-01-09] (Opera Software AS -> Opera Software)
      Task: {96F1B500-22FF-4448-9D51-718DA940360E} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
      Task: {9D60B4F8-D682-4540-9CBB-BBA043460DF1} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
      Task: {A19D33FF-7FBC-4D6F-B122-FFBC2947D956} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2019-01-09] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
      Task: {A1D60D55-A6B8-401B-BC05-2938E02DF2F2} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => d:\program files\windows defender\MpCmdRun.exe
      Task: {A95A63BB-59FF-4E60-A4BC-C4AF14655608} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
      Task: {B7BAE40D-B03C-4ABB-BBB5-9C26431B4B11} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
      Task: {C4E8B14A-4159-4C58-BDAD-281DBBFC97E8} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => d:\program files\windows defender\MpCmdRun.exe
      Task: {CB523FAF-057C-440F-B17F-8A36BBB5394E} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
      Task: {F67C982E-B27B-4B4D-B6F1-B5474BEA2341} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_114_Plugin.exe [2019-01-09] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
      Task: {F77C5DF3-2A9F-4C58-909F-C3F4DFDE4752} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
      Task: {FB761E82-2ABF-4B7D-A0A8-3F00F3533DD3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-09-08] (Google Inc -> Google Inc.)
      (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

      ==================== Shortcuts & WMI ========================
      (The entries could be listed to be restored or removed.)

      Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Браузър Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) <==== Cyrillic
      Shortcut: C:\Users\Public\Desktop\Браузър Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) <==== Cyrillic
      ==================== Loaded Modules (Whitelisted) ==============
      2010-01-09 19:17 - 2010-01-09 19:17 - 004254560 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
      2018-05-24 21:15 - 2018-12-06 12:14 - 001315312 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
      2018-08-29 01:53 - 2018-12-06 01:47 - 001066784 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\SDL2.dll
      2018-08-29 01:53 - 2018-11-20 02:56 - 102804768 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libcef.dll
      2018-08-29 01:53 - 2018-11-20 02:56 - 004866336 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libglesv2.dll
      2018-08-29 01:53 - 2018-11-20 02:56 - 000116000 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libegl.dll
      2018-12-12 21:53 - 2018-12-12 07:12 - 002682336 _____ () C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\swiftshader\libglesv2.dll
      2018-12-12 21:53 - 2018-12-12 07:12 - 000156640 _____ () C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\swiftshader\libegl.dll
      2017-09-08 13:04 - 2018-12-06 12:14 - 001033200 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
      2017-09-23 17:44 - 2018-12-06 01:47 - 000885536 _____ () C:\Program Files (x86)\Steam\SDL2.dll
      2017-09-23 17:44 - 2016-09-01 03:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll
      2017-09-23 17:44 - 2016-09-01 03:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
      2017-09-23 17:44 - 2016-09-01 03:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
      2017-09-23 17:44 - 2019-02-02 19:33 - 002667296 _____ () C:\Program Files (x86)\Steam\video.dll
      2017-12-14 10:20 - 2018-11-05 20:53 - 005137696 _____ () C:\Program Files (x86)\Steam\libavcodec-57.dll
      2017-12-14 10:20 - 2018-11-05 20:53 - 000847136 _____ () C:\Program Files (x86)\Steam\libavutil-55.dll
      2017-12-14 10:20 - 2018-11-05 20:53 - 000810784 _____ () C:\Program Files (x86)\Steam\libavformat-57.dll
      2017-12-14 10:20 - 2018-11-05 20:53 - 000351520 _____ () C:\Program Files (x86)\Steam\libavresample-3.dll
      2017-12-14 10:20 - 2018-11-05 20:53 - 000783648 _____ () C:\Program Files (x86)\Steam\libswscale-4.dll
      2017-09-23 17:44 - 2019-02-02 19:33 - 001031456 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
      2017-09-23 17:43 - 2016-07-05 00:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
      ==================== Alternate Data Streams (Whitelisted) =========
      (If an entry is included in the fixlist, only the ADS will be removed.)
      AlternateDataStreams: C:\Users\GAMEPC\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394]
      AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [482]
      ==================== Safe Mode (Whitelisted) ===================
      (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

      ==================== Association (Whitelisted) ===============
      (If an entry is included in the fixlist, the registry item will be restored to default or removed.)

      ==================== Internet Explorer trusted/restricted ===============
      (If an entry is included in the fixlist, it will be removed from the registry.)
      IE trusted site: HKU\S-1-5-21-2297230751-1021565052-1431566534-1000\...\hola.org -> hxxp://hola.org
      ==================== Hosts content: ===============================
      (If needed Hosts: directive could be included in the fixlist to reset Hosts.)
      2009-07-14 04:34 - 2009-06-10 23:00 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts

      ==================== Other Areas ============================
      (Currently there is no automatic fix for this section.)
      HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR
      HKU\S-1-5-21-2297230751-1021565052-1431566534-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\GAMEPC\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
      DNS Servers: 94.72.140.1
      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
      Windows Firewall is enabled.
      ==================== MSCONFIG/TASK MANAGER disabled items ==
      If an entry is included in the fixlist, it will be removed.
      MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
      MSCONFIG\startupreg: DAEMON Tools Lite Automount => "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
      MSCONFIG\startupreg: FACEIT => "C:\Users\GAMEPC\AppData\Local\FACEITApp\update.exe" --processStart "FACEIT.exe"
      MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
      MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
      MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
      ==================== FirewallRules (Whitelisted) ===============
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
      FirewallRules: [{11074DEE-7B8C-4DC2-AE4C-93DF0A309913}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
      FirewallRules: [{D19357FE-92D5-4C15-865D-6BA1144E3141}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
      FirewallRules: [{21EB0059-8DA7-4F26-8EBC-947F0C4E2AAA}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe ()
      FirewallRules: [{F8BB1871-4D02-4C5E-A222-4D557710B3E1}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe ()
      FirewallRules: [{1EE7FB5D-9E25-4DA9-ACB5-D608ECDBB452}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
      FirewallRules: [{84ACAD4A-CAC3-405E-BED8-CCE7B6F558B9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
      FirewallRules: [{5C9FEA0E-0037-4228-8A5E-308AD75AC1DF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
      FirewallRules: [{FD05E114-41E1-4EC3-B5A2-BBA593EE39E2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
      FirewallRules: [{831352BE-7396-43E6-9657-9ED9D8BAB30D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
      FirewallRules: [{AB5ACC3F-22CB-469F-9EB3-8D69417E7CD5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
      FirewallRules: [{43ADA9C0-2E56-45D1-B73D-9C89040C463D}] => (Allow) D:\SteamLibrary\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe (Valve -> )
      FirewallRules: [{06129773-C563-4DFF-8D34-BEA82843A4F0}] => (Allow) D:\SteamLibrary\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe (Valve -> )
      FirewallRules: [TCP Query User{A7A3205E-5145-4588-981D-700ACBF67C2F}D:\arc\s\fifa 17\fifa17.exe] => (Allow) D:\arc\s\fifa 17\fifa17.exe No File
      FirewallRules: [UDP Query User{FCB7CF1E-D214-47B7-8337-D288C7BAF41D}D:\arc\s\fifa 17\fifa17.exe] => (Allow) D:\arc\s\fifa 17\fifa17.exe No File
      FirewallRules: [TCP Query User{0D1FADB8-FCE1-4E0E-B19A-D5490965A994}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
      FirewallRules: [UDP Query User{F6FECCC1-1C2E-45A5-B7AC-EAF4B88229DF}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
      FirewallRules: [TCP Query User{DEFA441A-0140-4630-9B49-0F0DB88705EC}D:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe (Bluehole, Inc. -> Bluehole GinnoGames, Inc.)
      FirewallRules: [UDP Query User{2F3AD7BE-C36D-4E24-BFFA-EED5BE5D11F4}D:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe (Bluehole, Inc. -> Bluehole GinnoGames, Inc.)
      FirewallRules: [{3B7D3801-5557-4905-A940-9FFB3D9419C2}] => (Allow) D:\SteamLibrary\steamapps\common\WormsRevolution\WormsRevolution.exe ()
      FirewallRules: [{B5A843B5-4869-438A-A418-D42BF3EC672D}] => (Allow) D:\SteamLibrary\steamapps\common\WormsRevolution\WormsRevolution.exe ()
      FirewallRules: [{B5E37EE1-9BE1-4B57-9AD5-EEF981D7F031}] => (Allow) D:\SteamLibrary\steamapps\common\TheLongDark\tld.exe ()
      FirewallRules: [{DC6EA5CC-0B14-4DA5-BA55-E772E5860678}] => (Allow) D:\SteamLibrary\steamapps\common\TheLongDark\tld.exe ()
      FirewallRules: [{C118432B-871D-4268-9C07-248641F7E265}] => (Allow) D:\SteamLibrary\steamapps\common\F1 2015\F1_2015.exe (Codemasters Software Company Limited)
      FirewallRules: [{9A5D2120-07BE-4587-9767-DFFC0484207F}] => (Allow) D:\SteamLibrary\steamapps\common\F1 2015\F1_2015.exe (Codemasters Software Company Limited)
      FirewallRules: [{CC5A4281-306D-4711-91C7-E00E2ABEBC40}] => (Allow) D:\SteamLibrary\steamapps\common\Human Fall Flat\Human.exe ()
      FirewallRules: [{8A4DCBEC-E89C-462E-8216-8A9A38C394ED}] => (Allow) D:\SteamLibrary\steamapps\common\Human Fall Flat\Human.exe ()
      FirewallRules: [{BA413E19-022B-4719-B578-4F0E6C99F5FA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
      FirewallRules: [{FDAF511F-0C5C-4E27-8950-6B78D13412DB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
      FirewallRules: [TCP Query User{B1B4DF97-831E-413C-A928-4176B7B76801}D:\fifa\fifa18\fifa18.exe] => (Allow) D:\fifa\fifa18\fifa18.exe (Electronic Arts -> Electronic Arts)
      FirewallRules: [UDP Query User{8691C936-9089-4A6A-9831-A0087C639A9C}D:\fifa\fifa18\fifa18.exe] => (Allow) D:\fifa\fifa18\fifa18.exe (Electronic Arts -> Electronic Arts)
      FirewallRules: [{FF76D716-DBA6-437A-A34F-847AF6AB88AD}] => (Allow) D:\SteamLibrary\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
      FirewallRules: [{13A0D233-1007-4376-A4B4-1DA27C101ECB}] => (Allow) D:\SteamLibrary\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
      FirewallRules: [TCP Query User{86D55748-40A6-4288-AEF7-2C0B25BDF778}C:\program files\java\jre1.8.0_171\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_171\bin\javaw.exe (Oracle America, Inc. -> Oracle Corporation)
      FirewallRules: [UDP Query User{D8AE6DDF-C0F2-475C-AB9C-B84C11DDC8AB}C:\program files\java\jre1.8.0_171\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_171\bin\javaw.exe (Oracle America, Inc. -> Oracle Corporation)
      FirewallRules: [TCP Query User{695C8135-FF2C-4E94-9566-E526643684CA}C:\program files (x86)\common files\oracle\java\javapath_target_116381722\java.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_116381722\java.exe (Oracle America, Inc. -> Oracle Corporation)
      FirewallRules: [UDP Query User{3091889E-265D-4648-88DF-CEE54431325D}C:\program files (x86)\common files\oracle\java\javapath_target_116381722\java.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_116381722\java.exe (Oracle America, Inc. -> Oracle Corporation)
      FirewallRules: [{19A95D83-1997-4E1D-B782-E9518C66DFBB}] => (Allow) D:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
      FirewallRules: [{A1F359C7-4712-4555-B250-972DC5238157}] => (Allow) D:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
      FirewallRules: [{9310E9DD-E024-4761-B062-698FB0E3AB13}] => (Allow) D:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
      FirewallRules: [{F2B11A3B-CC53-4DFF-B8AC-3ADDA6F5D794}] => (Allow) D:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
      FirewallRules: [{DB2F74E8-C7EB-44B3-81D7-12B84175E2EA}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
      FirewallRules: [{E44676E1-030C-4238-B65F-434792B61DE5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
      FirewallRules: [{0E47D0AA-C664-4226-B706-39D5D9E15552}] => (Allow) D:\SteamLibrary\steamapps\common\PUBG\TslGame\Binaries\Win64\ExecPubg.exe (Bluehole, Inc. -> PUBG Corporation )
      FirewallRules: [{0FE9DEBC-25B9-4A7D-A2B1-D61EE33E7F27}] => (Allow) D:\SteamLibrary\steamapps\common\PUBG\TslGame\Binaries\Win64\ExecPubg.exe (Bluehole, Inc. -> PUBG Corporation )
      FirewallRules: [TCP Query User{0E86F5BD-F2B3-4EF9-8B0C-48823DA809CB}D:\steamlibrary\steamapps\common\warface\gamecenter\gamecenter.exe] => (Allow) D:\steamlibrary\steamapps\common\warface\gamecenter\gamecenter.exe No File
      FirewallRules: [UDP Query User{0C5E839A-52EC-40D4-969E-24F12ED8D2D0}D:\steamlibrary\steamapps\common\warface\gamecenter\gamecenter.exe] => (Allow) D:\steamlibrary\steamapps\common\warface\gamecenter\gamecenter.exe No File
      FirewallRules: [TCP Query User{8796E73D-79C0-4D0B-AF34-FB3AF9BCC9BA}D:\steamlibrary\steamapps\common\warface\warface\bin32release\game.exe] => (Allow) D:\steamlibrary\steamapps\common\warface\warface\bin32release\game.exe No File
      FirewallRules: [UDP Query User{EFB29360-AB3A-4A44-9CB4-EF91CEBDB39C}D:\steamlibrary\steamapps\common\warface\warface\bin32release\game.exe] => (Allow) D:\steamlibrary\steamapps\common\warface\warface\bin32release\game.exe No File
      FirewallRules: [{CE4CC83D-33DB-4941-B63E-839395BEF26D}] => (Allow) D:\SteamLibrary\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe (Rockstar Games, Inc. -> Rockstar Games)
      FirewallRules: [{62B0C736-3662-4965-ABCF-C095480B3E5E}] => (Allow) D:\SteamLibrary\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe (Rockstar Games, Inc. -> Rockstar Games)
      FirewallRules: [TCP Query User{91266298-136D-4BB3-8C13-A850A76C9BF1}D:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games)
      FirewallRules: [UDP Query User{E3EAEE44-6095-4A5E-BE2F-F3E3F8349E0A}D:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games)
      FirewallRules: [{12A4A27A-BB67-48E9-9C50-3BFF7FAFB778}] => (Allow) D:\SteamLibrary\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
      FirewallRules: [{AEEB531B-9796-4704-ACF2-4D21152475BF}] => (Allow) D:\SteamLibrary\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
      FirewallRules: [{7F3749E0-59C1-4422-B6F5-FB6E3727295D}] => (Allow) D:\SteamLibrary\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSix_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
      FirewallRules: [{60F8D80B-FA92-4B64-93F5-05A4F7DADF00}] => (Allow) D:\SteamLibrary\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSix_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
      FirewallRules: [{2D541380-97BF-4291-BDBE-2F2228CAEA60}] => (Allow) D:\SteamLibrary\steamapps\common\EasyAntiCheat\EasyAntiCheat.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
      FirewallRules: [{127D37C8-619F-462E-BE1A-E32131065FF4}] => (Allow) D:\SteamLibrary\steamapps\common\EasyAntiCheat\EasyAntiCheat.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
      FirewallRules: [{3AE125A7-E2F2-4264-9007-75C3A531B173}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc -> Google Inc.)
      FirewallRules: [{9CB2E9CF-4CF5-4270-90C8-708DF5C9EA41}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
      FirewallRules: [{5DDB721B-805F-4405-9439-CF48D05CD91D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
      FirewallRules: [{FBCDCF18-DF9A-480D-8245-D45ACCBABE9F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
      FirewallRules: [{38AC95F2-BD01-4E8B-9093-31663D8E317A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
      FirewallRules: [{458841A3-2771-481D-884C-B7930C379C97}] => (Allow) C:\Program Files (x86)\Opera\57.0.3098.106\opera.exe (Opera Software AS -> Opera Software)
      FirewallRules: [{235BAD27-D13D-420B-8B97-7A919F070DAA}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe ()
      FirewallRules: [{13789DD3-E1EC-4822-B391-E7109AE3CC48}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe ()
      FirewallRules: [TCP Query User{3DE0592A-8D12-447D-939D-BCA439AFF137}C:\users\gamepc\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\gamepc\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
      FirewallRules: [UDP Query User{33216198-C2C2-482B-9DC9-2D0D13DBB4FA}C:\users\gamepc\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\gamepc\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
      FirewallRules: [{BC1B52E7-C2B8-4017-8791-69B710F1CCBB}] => (Allow) C:\Program Files (x86)\Opera\57.0.3098.116\opera.exe (Opera Software AS -> Opera Software)
      FirewallRules: [TCP Query User{270B0322-3799-457B-960A-455318931953}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
      FirewallRules: [UDP Query User{A13AA196-1978-4C67-902B-2460B54A5BBF}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
      FirewallRules: [{EF08AF4C-3154-4DAB-BCE6-F39115FD1EB2}] => (Allow) D:\SteamLibrary\steamapps\common\Half-Life\hl.exe (Valve -> Valve)
      FirewallRules: [{DFBF8C13-3341-468F-9043-C61EE1DF2608}] => (Allow) D:\SteamLibrary\steamapps\common\Half-Life\hl.exe (Valve -> Valve)
      FirewallRules: [{64832D58-8D2F-49F2-9821-FC19B1E90DA6}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
      FirewallRules: [{26B327D5-AC62-4B35-9E8A-241677C45E6B}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
      FirewallRules: [{17F7F489-79F0-4B1E-8C40-2AE2479A4164}] => (Allow) D:\SteamLibrary\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe (Codemasters Software Company Limited)
      FirewallRules: [{12452DC3-0184-4D50-9874-AFEDEF2EFAA9}] => (Allow) D:\SteamLibrary\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe (Codemasters Software Company Limited)
      FirewallRules: [{59D96386-6E3E-4356-8348-CF3CFA65A81B}] => (Allow) D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
      FirewallRules: [{FFA55DD9-7016-4EC4-A808-1A467A45E95C}] => (Allow) D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
      FirewallRules: [TCP Query User{DC649560-4400-4885-84A1-B96EE04BD03C}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
      FirewallRules: [UDP Query User{962C91EA-9380-4D1D-8A2F-E951089E3F37}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
      FirewallRules: [{6E404A41-222B-4F61-937B-39B8D0A5BE40}] => (Allow) D:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
      FirewallRules: [{394ABFE5-D758-4C24-B451-12FE329ECF53}] => (Allow) D:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
      FirewallRules: [{CAB0B3BC-BD97-4B9F-AD34-4EA3FD6A653B}] => (Allow) D:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
      FirewallRules: [{D1AE7604-9B6C-4322-8475-D1AC1B29A431}] => (Allow) D:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
      ==================== Restore Points =========================
      01-02-2019 16:11:32 Планирана контролна точка
      09-02-2019 15:07:59 Планирана контролна точка
      ==================== Faulty Device Manager Devices =============
      Name: Qualcomm Atheros AR8161/8165 PCI-E Gigabit Ethernet Controller (NDIS 6.20)
      Description: Qualcomm Atheros AR8161/8165 PCI-E Gigabit Ethernet Controller (NDIS 6.20)
      Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
      Manufacturer: Qualcomm Atheros
      Service: L1C
      Problem: : This device is disabled. (Code 22)
      Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

      ==================== Event log errors: =========================
      Application errors:
      ==================
      Error: (02/10/2019 03:12:13 AM) (Source: SideBySide) (EventID: 33) (User: )
      Description: Activation context generation failed for "C:\Program Files\ATI\CIM\Bin64\Setup.exe".
      Dependent Assembly Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
      Please use sxstrace.exe for detailed diagnosis.
      Error: (02/10/2019 03:12:13 AM) (Source: SideBySide) (EventID: 33) (User: )
      Description: Activation context generation failed for "C:\Program Files\ATI\CIM\Bin64\InstallManagerApp.exe".
      Dependent Assembly Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
      Please use sxstrace.exe for detailed diagnosis.
      Error: (02/09/2019 03:26:38 AM) (Source: SideBySide) (EventID: 33) (User: )
      Description: Activation context generation failed for "C:\Program Files\ATI\CIM\Bin64\Setup.exe".
      Dependent Assembly Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
      Please use sxstrace.exe for detailed diagnosis.
      Error: (02/09/2019 03:26:38 AM) (Source: SideBySide) (EventID: 33) (User: )
      Description: Activation context generation failed for "C:\Program Files\ATI\CIM\Bin64\InstallManagerApp.exe".
      Dependent Assembly Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
      Please use sxstrace.exe for detailed diagnosis.
      Error: (02/08/2019 04:45:30 AM) (Source: SideBySide) (EventID: 33) (User: )
      Description: Activation context generation failed for "C:\Program Files\ATI\CIM\Bin64\Setup.exe".
      Dependent Assembly Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
      Please use sxstrace.exe for detailed diagnosis.
      Error: (02/08/2019 04:45:29 AM) (Source: SideBySide) (EventID: 33) (User: )
      Description: Activation context generation failed for "C:\Program Files\ATI\CIM\Bin64\InstallManagerApp.exe".
      Dependent Assembly Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
      Please use sxstrace.exe for detailed diagnosis.
      Error: (02/07/2019 03:15:48 AM) (Source: SideBySide) (EventID: 33) (User: )
      Description: Activation context generation failed for "C:\Program Files\ATI\CIM\Bin64\Setup.exe".
      Dependent Assembly Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
      Please use sxstrace.exe for detailed diagnosis.
      Error: (02/07/2019 03:15:48 AM) (Source: SideBySide) (EventID: 33) (User: )
      Description: Activation context generation failed for "C:\Program Files\ATI\CIM\Bin64\InstallManagerApp.exe".
      Dependent Assembly Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
      Please use sxstrace.exe for detailed diagnosis.

      System errors:
      =============
      Error: (02/09/2019 11:34:40 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
      Description: The following fatal alert was received: 20.
      Error: (02/09/2019 02:59:26 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
      Description: The following fatal alert was received: 20.
      Error: (02/06/2019 08:56:52 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
      Description: Изтекъл период на изчакване (30000 милисекунди) при изчакване на отговор за транзакция от услуга eventlog.
      Error: (02/05/2019 07:09:30 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
      Description: The following fatal alert was received: 20.
      Error: (02/04/2019 09:08:24 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
      Description: Услуга NVIDIA Telemetry Container прекъсна със следната грешка: 
      Изпълним файл за обща команда върна резултат, показващ грешка.
      Error: (02/04/2019 08:48:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
      Description: Услуга NVIDIA LocalSystem Container беше прекъсната неочаквано. Това се е случвало с нея 1 път(и). След 6000 милисекунди ще бъде предприето следното коригиращо действие: Рестартиране на услугата.
      Error: (02/04/2019 08:48:18 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
      Description: Услуга NVIDIA LocalSystem Container прекъсна със следната грешка: 
      Изпълним файл за обща команда върна резултат, показващ грешка.
      Error: (02/03/2019 01:44:41 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
      Description: Услуга Steam Client Service не може да бъде стартирана поради следната грешка: 
      Услугата не отговори навреме на искане за стартиране или управление.

      ==================== Memory info =========================== 
      Processor: AMD FX-8320E Eight-Core Processor 
      Percentage of memory in use: 41%
      Total physical RAM: 8189.54 MB
      Available physical RAM: 4811.05 MB
      Total Virtual: 16377.26 MB
      Available Virtual: 11050.03 MB
      ==================== Drives ================================
      Drive c: () (Fixed) (Total:150 GB) (Free:70.97 GB) NTFS
      Drive d: () (Fixed) (Total:781.41 GB) (Free:323.18 GB) NTFS
      \\?\Volume{2f050b3f-9477-11e7-8c98-806e6f6e6963}\ (Резервирана за системата) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS
      ==================== MBR & Partition Table ==================
      ========================================================
      Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 0C59AE75)
      Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
      Partition 2: (Not Active) - (Size=150 GB) - (Type=07 NTFS)
      Partition 3: (Not Active) - (Size=781.4 GB) - (Type=05)
      ==================== End of Addition.txt ============================
    • от qnkov
      Инсталирах едно нещо, което се оказа, че не трябва и сега ми пъкват реклами постоянно, компа забозва и така нататък. С любов от русия.
      С какво може да сканирам и да оправя нещата, уиндолс 10. 
    • от Tosho55
      Добър ден не знам дали някой ще може да помогне но ви се моля от все сърце! Изтеглих някакъв паурпоинт защото ми беше нужен от компютъра на майка ми всичко беше ок но когато почнах да гледам клипче в йутуб започнаха мъките всичко стана адски бавно едвам изключих компютъра после го пуснах и само 1 минута горе долу винаги е бърз както преди и после става адски бавен и чакам да отвори всичко по 3 минути даже и май компютър знам че съм глупав но сега не ми трябват критики а помощ направих проверака за вируси с аваст но е същото дори като почистих уж някакви моля ще съм много благодарен едвам пуснах гугъл!  
    • от nikolaustirol
      Забелязах, че имам процес WPFFontCashe_v0400. Въпреки, че намерих файл с такова име и го изтрих процеса си се стартира и работи. Имам съмнения , че е вирус. ОС  е ХР. Разполагам с оригинален инсталационен диск.
      Addition.txt
      Addition_1.txt
    • от bvitanov
      Здравейте.От няколко дни във всичките ми браузъри се лепна този сайт-SEARCH QUERYROUTER.От там ме препраща на различни търсачки и порно сайтове и bet365 и др.Видях в контрол панел на деинсталирай програмите-нямам нищо за деинсталиране с непознато име...имам есет и ublock origin и нищо не помага.Гледах клипове за деинсталиране и разръчках настройките на браузърите ми но нямам добавени апликации.Благодаря за отговорите ви предварително !!!
  • Дарение

×

Информация

Поставихме бисквитки на устройството ви за най-добро потребителско изживяване. Можете да промените настройките си за бисквитки, или в противен случай приемаме, че сте съгласни с нашите условия за ползване.