Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.
Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.
Добави Kaldata.com в предпочитани източници в Google

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

Забиване на компютъра

ioannidis
в Премахване на зловреден софтуер

Featured Replies

Здравейте, днес си бях инсталирал Avast Cleaner, и след неговото използване компютъра ми започна много да се претоварва и да забива ужасно, дори и при минимален брой работещи процеси. Само в "Безопасен режим" няма никакви проблеми. Пробвах да си възстановя системата, но се оказа че Avast Cleaner ми е изтрил всички точки за възстановяване на системата...

Някакви идеи как да се справя с този проблем?

В момента даже пиша темата в "Безопасен режим", защото в нормален режим браузърът забива страшно много...

По-долу прилагам логовете от FRST (64 bit):

Addition.txt FRST.txt

Здравейте...! Малко да уточним ..какво използвахте  - Avast Cleaner  или Avast Cleanup ...! Вижда се да използвате Avast Premier...платена версия ....? Така ли е ..? А наистина ли е платена или е кракната ...?

 

Изтеглете  CKScanner  от  askey127 и го запазете на вашия десктоп. 
 

  • Щракнете с десния бутон на мишката върху CKScanner.exe и изберете  Run as administrator. 
  • Когато инструментът се отвори, щракнете върху Search For Files (Търсене на файлове). 
  • Когато иконата з на курсора изчезне, щракнете върху Save List To File. 
  • Полето за съобщение ще потвърди, че файлът е запазен. Моля, стартирайте програмата само веднъж. 
  • Инструментът ще създаде дневник на работния плот, наречен CKFiles.txt. Отворете го, след което копирайте и поставете съдържанието му в следващия си отговор.

 

=============================================================================================

 

  Изтеглете и стартирайте диагностичен инструмент (MGADiag.exe) от тук и го запазете на работния си плот.

  • Кликнете два пъти върху MGADiag.exe 
  • Кликнете върху Continue  (Продължи..)
  • Когато програмата приключи, кликнете върху Copy (Копиране) 
  • Отворете Notepad и натиснете Ctrl + V, за да поставите съдържанието на отчета в текстовия файл 
  • Запазете файла на работния плот и го качете в следващия си отговор.

 

 

  • Автор

Avas Cleanup беше, а антивирусната я активирах просто със сериал, който го намерих в интернет, но нито съм краквал, нито съм пачвал, а всичко съм свалял или променял чрез Update/Upgrade/Add на антивирусната. Само искам да кажа, че в момента работим чрез Safe Mode, ако това има някакво значение... 

 

Microsoft Genuine.txt

А резултат от другата програма...???

Цитат

ProxyServer: [S-1-5-21-4278387435-538730147-2961561878-1000] => 169.46.159.24:80

Това Proxy познато ли ви е...?

  • Автор
преди 11 минути, icotonev написа:

А резултат от другата програма...???

Това Proxy познато ли ви е...?

Ни най-малко... А ето и лог от другата програма:

ckfiles.txt

Следващите инструкции изпълнявате в безопасен режим ( Safe Mode )..!

 

Деинсталиране на нежелани / ненужни програми:

  • Натиснете клавишна комбинация   WindowsKey.png + R на клавиатурата си едновременно. Напишете (копирайте) в полето appwiz.cpl и кликнете върху OK.
  • В отворилия се списък с инсталирани програми,  деинсталирайте  програмите от карето по долу:
Цитат

RelevantKnowledge

Skype Click to Call

 

Фикс с Farbar Recovery Scan Tool
 
icon13.gif Изтеглете прикачения файл fixlist.txt и го запазете там, където сте свалили FRST.exe
Стартирайте отново FRST.exe и натиснете бутона Fix веднъж и изчакайте.

Press%20the%20FIX%20button_zpsdd5zi3mt.p


Ще се създаде нов лог файла FixLog.txt. Прикачете съдържанието му в следващия си коментар.
 
ЗАБЕЛЕЖКА: Този скрипт е написан специално за този потребител,и за тази конкретна машина. Изпълнението на фикса, на друг компютър може да доведе до увреждане на  операционната ви система

 

pfNZP4A.png  Дневници
 
В следващия си отговор, моля да включите следните дневници:

  • FixLog.txt

Стартирайте компютъра си в нормален режим и подгответе нови дневници :

 

Сканиране с Farbar Recovery Scan

  • Моля изтеглете icon1337953436.pngFarbar Recovery Scan Tool (според версията на Windows изберете 32 битовата или 64 битовата версия) и го запазете на десктопа.
  • Стартирайте файла FRST.exe (или FRST64.exe)
  • Програмата ще се стартира. Натиснете YES за да се съгласите с лицензионното споразумение.
  • Натиснете бутона YClYkft.jpg.
  • Изчакайте търпеливо проверката да приключи.
  • Ще се създадат два лог файла с името - FRST.txt и Addition.txt на десктопа.
  • Копирайте съдържанието на файла FRST.txt в следващия си пост.Прикачете Addition.txt в коментар си (погледнете опцията Прикачване на файлове, когато публикувате мнение).

pfNZP4A.png&key=0a487e0a7cff89c690a32d13  Дневници 

В следващия си отговор, моля да включите (като копирате целите съдържания ) следните дневници:

  • FRST.txt (копирате цялото съдържание)
  • Addition.txt (прикачате..) 

 

  • Автор

Заповядай: 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17.03.2019
Ran by User-x (administrator) on USER-X-PC (14-04-2019 18:57:06)
Running from C:\Users\User-x\Downloads
Loaded Profiles: User-x (Available Profiles: User-x)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Български (България)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Intel Corporation) [File not signed] C:\Windows\System32\IPROSetMonitor.exe
() [File not signed] C:\Program Files (x86)\ProKAward\rsasws.exe
() [File not signed] C:\Program Files (x86)\ProKAward\wap.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [itype] => C:\Program Files\Microsoft IntelliType Pro\itype.exe [1873256 2011-08-10] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [261000 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18383328 2017-09-07] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [HPPowerAssistant] => C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [3488640 2012-03-14] (Hewlett-Packard Company -> Hewlett-Packard Company)
HKLM\...\Run: [Persistence] => C:\Windows\system32\igfxpers.exe* [418336 2012-11-14] () [File not signed]
HKLM\...\Run: [IgfxTray] => C:\Windows\system32\igfxtray.exe* [163360 2012-11-14] () [File not signed]
HKLM\...\Run: [HotKeysCmds] => C:\Windows\system32\hkcmd.exe* [387616 2012-11-14] () [File not signed]
HKLM-x32\...\Run: [cmsc] => "c:\program files (x86)\cmcm\Clean Master\cmtray.exe" -autorun
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe** [39792 2007-10-10] () [File not signed]
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31072 2008-10-25] (Microsoft Corporation -> Microsoft Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\...\Drivers32: [VIDC.DIVX] => C:\Windows\SysWOW64\DivX.dll [682496 2007-12-04] (DivX, Inc.) [File not signed]
HKLM\...\Drivers32: [VIDC.XVID] => C:\Windows\SysWOW64\xvidvfw.dll [139264 2004-07-03] () [File not signed]
HKLM\...\Drivers32: [VIDC.YV12] => C:\Windows\SysWOW64\yv12vfw.dll [217088 2004-01-25] (www.helixcommunity.org) [File not signed]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\SysWOW64\AC3ACM.acm [118784 2007-09-21] (fccHandler) [File not signed]
HKLM\...\Drivers32: [msacm.lameacm] => C:\Windows\SysWOW64\lameACM.acm [389120 2006-09-24] (hxxp://www.mp3dev.org/) [File not signed]
HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\SysWOW64\ff_vfw.dll [7680 2007-12-24] () [File not signed]
HKLM\...\Drivers32: [msacm.voxacm160] => C:\Windows\SysWOW64\vct3216.acm [82944 2003-05-21] (Voxware, Inc.) [File not signed]
HKLM\...\Drivers32: [msacm.scg726] => C:\Windows\SysWOW64\scg726.acm [13239 2000-03-14] (SHARP Corporation) [File not signed]
HKLM\...\Drivers32: [msacm.alf2cd] => C:\Windows\SysWOW64\alf2cd.acm [38912 2003-05-21] (NCT Company) [File not signed]
HKLM\...\Drivers32-x32: [msacm.lame] => lame.ax
HKLM\...\Drivers32: [vidc.dvsd] => C:\Windows\SysWOW64\mcdvd_32.dll [261632 2003-05-21] (MainConcept) [File not signed]
HKLM\...\Drivers32: [vidc.mpg4] => C:\Windows\SysWOW64\mpg4c32.dll [413760 2002-08-20] (Microsoft Corporation) [File not signed]
HKLM\...\Drivers32: [vidc.mp42] => C:\Windows\SysWOW64\mpg4c32.dll [413760 2002-08-20] (Microsoft Corporation) [File not signed]
HKLM\...\Drivers32: [vidc.mp43] => C:\Windows\SysWOW64\mpg4c32.dll [413760 2002-08-20] (Microsoft Corporation) [File not signed]
HKLM\...\Drivers32: [vidc.VP60] => C:\Windows\SysWOW64\vp6vfw.dll [438272 2004-12-10] (On2.com) [File not signed]
HKLM\...\Drivers32: [vidc.VP61] => C:\Windows\SysWOW64\vp6vfw.dll [438272 2004-12-10] (On2.com) [File not signed]
HKLM\...\Drivers32: [vidc.VP62] => C:\Windows\SysWOW64\vp6vfw.dll [438272 2004-12-10] (On2.com) [File not signed]
HKLM\...\Drivers32: [vidc.LAGS] => C:\Windows\SysWOW64\lagarith.dll [216064 2011-12-07] ( ) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\72.0.3626.121\Installer\chrmstp.exe [2019-03-18] (Google LLC -> Google Inc.)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{3F6FA2B9-C96C-4200-BB2A-3535FCB42917}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{C828C4A4-B76F-4EC2-BCC8-996EF51D3A11}: [DhcpNameServer] 192.168.42.129

Internet Explorer:
==================
HKU\S-1-5-21-4278387435-538730147-2961561878-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.bg/
HKU\S-1-5-21-4278387435-538730147-2961561878-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
BHO-x32: Adobe PDF Reader Link Helper -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF DefaultProfile: m6u0e0h6.default
FF ProfilePath: C:\Users\User-x\AppData\Roaming\Mozilla\Firefox\Profiles\m6u0e0h6.default [2019-04-14]
FF user.js: detected! => C:\Users\User-x\AppData\Roaming\Mozilla\Firefox\Profiles\m6u0e0h6.default\user.js [2015-07-17]
FF Extension: (Avast SafePrice) - C:\Users\User-x\AppData\Roaming\Mozilla\Firefox\Profiles\m6u0e0h6.default\Extensions\[email protected] [2017-12-04] [UpdateUrl:hxxps://firefoxextension.avast.com/sp/update.json]
FF Extension: (Easy Video Downloader) - C:\Users\User-x\AppData\Roaming\Mozilla\Firefox\Profiles\m6u0e0h6.default\Extensions\[email protected] [2017-08-09]
FF Extension: (Avast Online Security) - C:\Users\User-x\AppData\Roaming\Mozilla\Firefox\Profiles\m6u0e0h6.default\Extensions\[email protected] [2017-10-09] [UpdateUrl:hxxps://firefoxextension.avast.com/aos/update.json]
FF Extension: (YouTube Best Video Downloader 2) - C:\Users\User-x\AppData\Roaming\Mozilla\Firefox\Profiles\m6u0e0h6.default\Extensions\{170503FA-3349-4F17-BC86-001888A5C8E2}.xpi [2017-10-09]
FF Extension: (Adblock Plus) - C:\Users\User-x\AppData\Roaming\Mozilla\Firefox\Profiles\m6u0e0h6.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-12-04]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_171.dll [2019-04-14] (Adobe Inc. -> )
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [No File]
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [No File]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_171.dll [2019-04-14] (Adobe Inc. -> )
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [No File]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [No File]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [No File]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [No File]
FF Plugin-x32: @real.com/nppl3260;version=6.0.11.2852 -> C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll [2008-02-25] (RealNetworks, Inc. -> RealNetworks, Inc.) [File not signed]
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.46 -> C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll [2008-02-25] (RealNetworks, Inc. -> RealNetworks, Inc.) [File not signed]
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1662 -> C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll [2008-02-25] (RealNetworks, Inc.) [File not signed]
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.46 -> C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll [2008-02-25] (RealNetworks, Inc.) [File not signed]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-20] (Google Inc -> Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-20] (Google Inc -> Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Default [2019-04-14]
CHR Extension: (Презентации) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-14]
CHR Extension: (Документи) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-14]
CHR Extension: (Google Диск) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-24]
CHR Extension: (YouTube) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-24]
CHR Extension: (Avast Passwords) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Default\Extensions\emhginjpijfggbofeediiojmdlmlkoik [2019-04-13]
CHR Extension: (Таблици) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-14]
CHR Extension: (Google Документи офлайн) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-10-31]
CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-10-27]
CHR Extension: (Gmail) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-03-27]
CHR Extension: (Chrome Media Router) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-02-18]
CHR Profile: C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Profile 1 [2019-04-14]
CHR Extension: (Презентации) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-03-30]
CHR Extension: (Документи) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2019-03-30]
CHR Extension: (Google Диск) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-24]
CHR Extension: (YouTube) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-24]
CHR Extension: (Таблици) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-03-30]
CHR Extension: (Google Документи офлайн) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-03-30]
CHR Extension: (Avast Online Security) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-03-30]
CHR Extension: (Skype) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2019-03-30]
CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-03-30]
CHR Extension: (Gmail) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-07-24]
CHR Extension: (Chrome Media Router) - C:\Users\User-x\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-03-30]
CHR Profile: C:\Users\User-x\AppData\Local\Google\Chrome\User Data\System Profile [2019-04-14]

Opera: 
=======
OPR Extension: (Enhancer for YouTube) - C:\Users\User-x\AppData\Roaming\Opera Software\Opera Stable\Extensions\ofhehnfmgbgnkjaojifkmebjjgffjaeh [2019-02-18]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6660888 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [362488 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [373416 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
S4 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272560 2015-05-21] (Disc Soft Ltd -> Disc Soft Ltd)
R2 Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [505856 2017-08-21] (Intel Corporation) [File not signed]
S4 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [324584 2017-09-07] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
R2 SKLProService; C:\Program Files (x86)\ProKAward\rsasws.exe [98304 2012-02-13] () [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
S2 avast; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /svc [X]
S3 avastm; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /medsvc [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [205400 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [254128 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [196000 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswblog.sys [320624 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [57888 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42288 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [166848 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [38152 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
R1 aswNetSec; C:\Windows\System32\drivers\aswNetSec.sys [526376 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [112520 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [88160 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1031000 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [476776 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [220640 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [380160 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
S3 DrvAgent64; C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [22200 2016-03-06] (eSupport.com, Inc. -> Phoenix Technologies)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2019-03-29] (Disc Soft Ltd -> Disc Soft Ltd)
R3 igfx; C:\Windows\System32\DRIVERS\igdkmd64.sys [10629408 2012-11-14] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
S3 ksapi64; C:\Windows\system32\drivers\ksapi64.sys [81584 2019-03-18] (Beijing Kingsoft Security software Co.,Ltd -> Kingsoft Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381608 2015-04-18] (Disc Soft Ltd -> Duplex Secure Ltd.)
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42064 2016-08-23] (AnchorFree Inc -> Anchorfree Inc.)
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-05-05] (Microsoft Windows -> Microsoft Corporation)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-04-14 18:29 - 2019-04-14 18:30 - 000009103 _____ C:\Users\User-x\Downloads\Fixlog.txt
2019-04-14 17:50 - 2019-04-14 17:50 - 000000127 _____ C:\Users\User-x\Downloads\ckfiles.txt
2019-04-14 17:48 - 2019-04-14 17:48 - 000468480 _____ () C:\Users\User-x\Downloads\CKScanner.exe
2019-04-14 17:32 - 2019-04-14 17:32 - 000000000 ____D C:\MGADiagToolOutput
2019-04-14 17:31 - 2019-04-14 17:31 - 000000000 ____D C:\ProgramData\Office Genuine Advantage
2019-04-14 17:29 - 2019-04-14 17:29 - 002031992 _____ (Microsoft Corporation) C:\Users\User-x\Downloads\MGADiag.exe
2019-04-14 16:05 - 2019-04-14 16:07 - 000033862 _____ C:\Users\User-x\Downloads\Addition.txt
2019-04-14 16:02 - 2019-04-14 19:12 - 000019966 _____ C:\Users\User-x\Downloads\FRST.txt
2019-04-14 16:02 - 2019-04-14 18:57 - 000000000 ____D C:\FRST
2019-04-14 16:02 - 2019-04-14 16:02 - 002434048 _____ (Farbar) C:\Users\User-x\Downloads\FRST64.exe
2019-04-14 15:10 - 2019-04-14 18:32 - 000235156 _____ C:\Windows\ntbtlog.txt
2019-04-14 14:21 - 2019-04-14 14:21 - 007505920 _____ C:\Program Files (x86)\GUTADBC.tmp
2019-04-14 14:21 - 2019-04-14 14:21 - 000000000 ____D C:\Program Files (x86)\GUMADBB.tmp
2019-04-14 14:05 - 2019-04-14 14:05 - 000001232 _____ C:\Users\User-x\Desktop\Facebook Gameroom.lnk
2019-04-14 13:58 - 2019-04-14 13:58 - 000410984 _____ C:\Windows\system32\FNTCACHE.DAT
2019-04-14 13:57 - 2019-04-14 13:57 - 000003288 ____N C:\bootsqm.dat
2019-04-14 13:27 - 2019-04-14 13:27 - 000004424 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2019-04-14 13:18 - 2019-04-14 13:18 - 000003936 _____ C:\Windows\System32\Tasks\Avast Cleanup Update
2019-04-14 12:55 - 2019-04-14 12:55 - 000109688 _____ C:\Users\User-x\AppData\Local\GDIPFONTCACHEV1.DAT
2019-04-14 12:52 - 2019-04-14 15:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2019-04-14 12:50 - 2019-04-14 12:49 - 000526376 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetSec.sys
2019-04-14 12:50 - 2019-04-14 12:49 - 000362888 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2019-04-14 12:49 - 2019-04-14 12:49 - 000038152 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetNd6.sys
2019-04-14 10:47 - 2019-04-14 11:34 - 000000000 ____D C:\Users\User-x\.oracle_jre_usage
2019-04-13 13:04 - 2019-04-13 13:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grand Theft Auto IV Complete Edition
2019-04-13 11:50 - 2019-04-13 12:07 - 000000000 ____D C:\ProgramData\TEMP
2019-04-13 11:50 - 2019-04-13 11:50 - 000000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Uninstaller! 7
2019-04-13 11:50 - 2019-04-13 11:50 - 000000000 ____D C:\Users\User-x\AppData\Roaming\URSoft
2019-04-13 11:50 - 2019-04-13 11:50 - 000000000 ____D C:\Program Files (x86)\Your Uninstaller! 7
2019-04-13 11:46 - 2019-04-13 11:47 - 000008715 _____ C:\Users\User-x\Downloads\Your Uninstaller! Pro v7.5.2014.03.torrent
2019-04-12 21:24 - 2019-04-14 12:50 - 000000077 _____ C:\Windows\system32\Drivers\aswSP.sys.sum
2019-04-11 16:04 - 2019-04-11 16:04 - 000724667 _____ C:\Users\User-x\Downloads\s0beit by SlonoBoyko 23.03.2019_MF_0ba05.zip
2019-04-11 15:31 - 2019-04-11 15:32 - 015534010 _____ C:\Users\User-x\Downloads\sa-mp-0.3.7-R3-1-install.exe
2019-04-11 14:40 - 2019-04-11 14:40 - 000000000 ____D C:\Users\User-x\AppData\Roaming\Pouchin TV Mod
2019-04-11 14:39 - 2019-04-11 14:39 - 002262573 _____ C:\Users\User-x\Downloads\MMzinTV_setup.0.6.3.77.exe
2019-04-11 13:51 - 2019-04-11 13:51 - 010253632 _____ (SoftPerfect Pty Ltd ) C:\Users\User-x\Downloads\networx_setup.exe
2019-04-08 22:34 - 2008-10-15 06:22 - 005631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2019-04-08 22:34 - 2008-10-15 06:22 - 004379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2019-04-08 22:34 - 2008-10-15 06:22 - 002605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2019-04-08 22:34 - 2008-10-15 06:22 - 002036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2019-04-08 22:34 - 2008-10-15 06:22 - 000519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2019-04-08 22:34 - 2008-10-15 06:22 - 000452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2019-04-08 18:01 - 2019-04-08 18:09 - 000000000 ____D C:\Program Files (x86)\VideoLAN
2019-04-06 15:05 - 2019-04-07 09:13 - 000000000 ____D C:\Users\User-x\AppData\LocalLow\Yandex
2019-04-06 15:05 - 2019-04-07 09:13 - 000000000 ____D C:\Users\User-x\AppData\Local\Yandex
2019-04-06 15:04 - 2019-04-07 09:13 - 000000000 ____D C:\Users\User-x\AppData\Roaming\Yandex
2019-04-06 15:04 - 2019-04-06 15:04 - 000000000 ____D C:\ProgramData\IP-TV Player
2019-04-01 09:14 - 2019-04-01 09:14 - 000000000 ____D C:\ProgramData\XLive
2019-03-31 09:50 - 2019-03-31 09:50 - 000000000 ____D C:\Users\User-x\AppData\Roaming\WinRAR
2019-03-31 09:49 - 2019-03-31 09:49 - 000001029 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2019-03-31 09:49 - 2019-03-31 09:49 - 000000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-03-31 09:49 - 2019-03-31 09:49 - 000000000 ____D C:\Users\User-x\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-03-31 09:48 - 2019-03-31 09:49 - 000000000 ____D C:\Program Files\WinRAR
2019-03-29 21:08 - 2019-03-29 21:08 - 000000000 ____D C:\Users\User-x\Documents\Rockstar Games
2019-03-29 17:21 - 2010-06-02 05:55 - 000527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2019-03-29 17:21 - 2010-06-02 05:55 - 000518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2019-03-29 17:21 - 2010-06-02 05:55 - 000239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2019-03-29 17:21 - 2010-06-02 05:55 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2019-03-29 17:21 - 2010-06-02 05:55 - 000077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2019-03-29 17:21 - 2010-06-02 05:55 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2019-03-29 17:21 - 2010-05-26 12:41 - 001907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2019-03-29 17:21 - 2010-05-26 12:41 - 001868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2019-03-29 17:21 - 2010-02-04 11:01 - 000530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2019-03-29 17:21 - 2010-02-04 11:01 - 000528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2019-03-29 17:21 - 2010-02-04 11:01 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2019-03-29 17:21 - 2010-02-04 11:01 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2019-03-29 17:21 - 2010-02-04 11:01 - 000078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2019-03-29 17:21 - 2010-02-04 11:01 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2019-03-29 17:21 - 2010-02-04 11:01 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2019-03-29 17:21 - 2010-02-04 11:01 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2019-03-29 17:21 - 2009-09-04 18:44 - 000517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2019-03-29 17:21 - 2009-09-04 18:44 - 000515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2019-03-29 17:21 - 2009-09-04 18:44 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2019-03-29 17:21 - 2009-09-04 18:44 - 000176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2019-03-29 17:21 - 2009-09-04 18:44 - 000073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2019-03-29 17:21 - 2009-09-04 18:44 - 000069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2019-03-29 17:21 - 2009-09-04 18:29 - 005554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2019-03-29 17:21 - 2009-09-04 18:29 - 005501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2019-03-29 17:21 - 2009-09-04 18:29 - 002582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2019-03-29 17:21 - 2009-09-04 18:29 - 001974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2019-03-29 17:21 - 2009-03-16 15:18 - 000521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2019-03-29 17:21 - 2009-03-16 15:18 - 000517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2019-03-29 17:21 - 2009-03-09 16:27 - 005425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2019-03-29 17:21 - 2009-03-09 16:27 - 004178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2019-03-29 17:21 - 2009-03-09 16:27 - 002430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2019-03-29 17:21 - 2009-03-09 16:27 - 001846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2019-03-29 17:21 - 2009-03-09 16:27 - 000520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2019-03-29 17:21 - 2009-03-09 16:27 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2019-03-29 17:20 - 2009-03-16 15:18 - 000235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2019-03-29 17:20 - 2009-03-16 15:18 - 000174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2019-03-29 17:20 - 2009-03-16 15:18 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2019-03-29 17:20 - 2009-03-16 15:18 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2019-03-29 17:20 - 2008-10-27 11:04 - 000518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2019-03-29 17:20 - 2008-10-27 11:04 - 000514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2019-03-29 17:20 - 2008-10-27 11:04 - 000235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2019-03-29 17:20 - 2008-10-27 11:04 - 000175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2019-03-29 17:20 - 2008-10-27 11:04 - 000074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2019-03-29 17:20 - 2008-10-27 11:04 - 000070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2019-03-29 17:20 - 2008-10-27 11:04 - 000025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2019-03-29 17:20 - 2008-10-27 11:04 - 000023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2019-03-29 17:20 - 2008-07-31 11:41 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2019-03-29 17:20 - 2008-07-31 11:41 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2019-03-29 17:20 - 2008-07-31 11:41 - 000072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2019-03-29 17:20 - 2008-07-31 11:41 - 000068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2019-03-29 17:20 - 2008-07-31 11:40 - 000513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2019-03-29 17:20 - 2008-07-31 11:40 - 000509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2019-03-29 17:20 - 2008-07-10 12:01 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2019-03-29 17:20 - 2008-07-10 12:00 - 004992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2019-03-29 17:20 - 2008-07-10 12:00 - 003851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2019-03-29 17:20 - 2008-07-10 12:00 - 001942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2019-03-29 17:20 - 2008-07-10 12:00 - 001493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2019-03-29 17:20 - 2008-07-10 12:00 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2019-03-29 17:20 - 2008-05-30 15:19 - 000511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2019-03-29 17:20 - 2008-05-30 15:19 - 000507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2019-03-29 17:20 - 2008-05-30 15:18 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2019-03-29 17:20 - 2008-05-30 15:18 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2019-03-29 17:20 - 2008-05-30 15:17 - 000068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2019-03-29 17:20 - 2008-05-30 15:17 - 000065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2019-03-29 17:20 - 2008-05-30 15:17 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2019-03-29 17:20 - 2008-05-30 15:16 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2019-03-29 17:20 - 2008-05-30 15:11 - 004991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2019-03-29 17:20 - 2008-05-30 15:11 - 003850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2019-03-29 17:20 - 2008-05-30 15:11 - 001941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2019-03-29 17:20 - 2008-05-30 15:11 - 001491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2019-03-29 17:20 - 2008-05-30 15:11 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2019-03-29 17:20 - 2008-05-30 15:11 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2019-03-29 17:20 - 2008-03-05 17:04 - 000489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2019-03-29 17:20 - 2008-03-05 17:03 - 000479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2019-03-29 17:20 - 2008-03-05 17:03 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2019-03-29 17:20 - 2008-03-05 17:03 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2019-03-29 17:20 - 2008-03-05 17:00 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2019-03-29 17:20 - 2008-03-05 17:00 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2019-03-29 17:20 - 2008-03-05 16:56 - 004910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2019-03-29 17:20 - 2008-03-05 16:56 - 003786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2019-03-29 17:20 - 2008-03-05 16:56 - 001860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2019-03-29 17:20 - 2008-03-05 16:56 - 001420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2019-03-29 17:20 - 2008-02-06 00:07 - 000529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2019-03-29 17:20 - 2008-02-06 00:07 - 000462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2019-03-29 17:20 - 2007-10-22 04:40 - 000411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2019-03-29 17:20 - 2007-10-22 04:39 - 000267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2019-03-29 17:20 - 2007-10-22 04:37 - 000021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2019-03-29 17:20 - 2007-10-22 04:37 - 000017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2019-03-29 17:20 - 2007-10-12 16:14 - 005081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2019-03-29 17:20 - 2007-10-12 16:14 - 003734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2019-03-29 17:20 - 2007-10-12 16:14 - 002006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2019-03-29 17:20 - 2007-10-12 16:14 - 001374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2019-03-29 17:20 - 2007-10-02 10:56 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2019-03-29 17:20 - 2007-10-02 10:56 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2019-03-29 17:20 - 2007-07-20 01:57 - 000411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2019-03-29 17:20 - 2007-07-20 01:57 - 000267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2019-03-29 17:20 - 2007-07-19 19:14 - 005073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2019-03-29 17:20 - 2007-07-19 19:14 - 003727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2019-03-29 17:20 - 2007-07-19 19:14 - 001985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2019-03-29 17:20 - 2007-07-19 19:14 - 001358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2019-03-29 17:20 - 2007-07-19 19:14 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2019-03-29 17:20 - 2007-07-19 19:14 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2019-03-29 17:20 - 2007-06-20 21:49 - 000409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2019-03-29 17:20 - 2007-06-20 21:46 - 000266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2019-03-29 17:20 - 2007-05-16 17:45 - 004496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2019-03-29 17:20 - 2007-05-16 17:45 - 003497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2019-03-29 17:20 - 2007-05-16 17:45 - 001401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2019-03-29 17:20 - 2007-05-16 17:45 - 001124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2019-03-29 17:20 - 2007-05-16 17:45 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2019-03-29 17:20 - 2007-05-16 17:45 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2019-03-29 17:20 - 2007-04-04 19:55 - 000403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2019-03-29 17:20 - 2007-04-04 19:55 - 000261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2019-03-29 17:20 - 2007-03-15 17:57 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2019-03-29 17:20 - 2007-03-15 17:57 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2019-03-29 17:20 - 2007-03-12 17:42 - 004494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2019-03-29 17:20 - 2007-03-12 17:42 - 003495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2019-03-29 17:20 - 2007-03-12 17:42 - 001400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2019-03-29 17:20 - 2007-03-12 17:42 - 001123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2019-03-29 17:20 - 2007-03-05 13:42 - 000017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2019-03-29 17:20 - 2007-03-05 13:42 - 000015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2019-03-29 17:20 - 2007-01-24 16:27 - 000393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2019-03-29 17:20 - 2007-01-24 16:27 - 000255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2019-03-29 17:20 - 2006-12-08 13:02 - 000251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2019-03-29 17:20 - 2006-12-08 13:00 - 000390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2019-03-29 17:20 - 2006-11-29 14:06 - 004398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2019-03-29 17:20 - 2006-11-29 14:06 - 003426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2019-03-29 17:20 - 2006-09-28 17:05 - 003977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2019-03-29 17:20 - 2006-09-28 17:05 - 002414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2019-03-29 17:20 - 2006-09-28 17:05 - 000237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2019-03-29 17:20 - 2006-09-28 17:04 - 000364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2019-03-29 17:20 - 2006-07-28 10:31 - 000083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2019-03-29 17:20 - 2006-07-28 10:30 - 000363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2019-03-29 17:20 - 2006-07-28 10:30 - 000236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2019-03-29 17:20 - 2006-07-28 10:30 - 000062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2019-03-29 17:20 - 2006-05-31 08:24 - 000230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2019-03-29 17:20 - 2006-05-31 08:22 - 000354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2019-03-29 17:20 - 2006-03-31 13:40 - 000352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2019-03-29 17:20 - 2006-03-31 13:39 - 000229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2019-03-29 17:20 - 2006-03-31 13:39 - 000083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2019-03-29 17:20 - 2006-03-31 13:39 - 000062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2019-03-29 16:50 - 2019-03-29 16:50 - 000000000 ____D C:\Users\User-x\AppData\Local\Disc_Soft_Ltd
2019-03-29 16:50 - 2019-03-29 16:50 - 000000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2019-03-29 16:44 - 2019-03-29 16:46 - 000000000 ____D C:\Program Files\DAEMON Tools Lite
2019-03-29 16:44 - 2019-03-29 16:44 - 000030264 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2019-03-29 16:44 - 2019-03-29 16:44 - 000000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2019-03-29 00:59 - 2019-03-29 00:59 - 000001149 _____ C:\ProgramData\Microsoft\Windows\Start Menu\BS.Player PRO.lnk
2019-03-29 00:58 - 2019-04-04 09:14 - 000000000 ____D C:\Users\User-x\AppData\Roaming\BSplayer PRO
2019-03-29 00:58 - 2019-03-29 00:58 - 000000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Webteh
2019-03-29 00:58 - 2019-03-29 00:58 - 000000000 ____D C:\Program Files (x86)\Webteh
2019-03-29 00:34 - 2019-03-29 00:34 - 000000000 ____D C:\Users\User-x\AppData\Local\BitTorrentHelper
2019-03-24 09:56 - 2019-03-24 09:56 - 000000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2019-03-24 09:56 - 2019-03-24 09:56 - 000000000 ____D C:\Program Files\7-Zip
2019-03-23 21:53 - 2019-04-04 08:59 - 000000000 _____ C:\Windows\system32\last.dump
2019-03-23 21:47 - 2019-04-14 12:49 - 000320624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswblog.sys
2019-03-23 21:47 - 2019-04-14 12:49 - 000254128 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys
2019-03-23 21:47 - 2019-04-14 12:49 - 000196000 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys
2019-03-23 21:47 - 2019-04-14 12:49 - 000057888 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys
2019-03-23 21:28 - 2019-03-23 21:28 - 000000000 ____D C:\Users\User-x\AppData\Roaming\KMP
2019-03-23 21:25 - 2019-03-29 00:56 - 000000000 ____D C:\Program Files\KMPlayer 64X
2019-03-23 00:39 - 2019-03-23 00:39 - 000015620 _____ C:\Windows\system32\results.xml
2019-03-23 00:38 - 2019-03-23 00:38 - 000000000 ____D C:\Program Files\Intel
2019-03-23 00:38 - 2017-08-21 21:12 - 000002291 ____N C:\Windows\system32\SetupBD.din
2019-03-23 00:36 - 2017-08-21 21:12 - 000430656 _____ (Intel Corporation) C:\Windows\system32\PROUnstl.exe
2019-03-18 18:53 - 2019-03-18 18:53 - 000000000 ____D C:\Users\User-x\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook
2019-03-18 18:22 - 2019-03-18 18:22 - 000000000 ____D C:\Users\User-x\AppData\Local\Hewlett-Packard
2019-03-18 17:56 - 2019-03-18 17:56 - 000000000 ____D C:\Windows\System32\Tasks\Hewlett-Packard
2019-03-18 17:55 - 2019-03-18 17:55 - 000000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2019-03-18 17:54 - 2019-04-14 13:25 - 000000000 ____D C:\ProgramData\{A8DA1505-E615-42BB-BB77-74D5CC91FE7E}
2019-03-18 17:53 - 2019-03-18 17:53 - 000000000 ___HD C:\System.sav
2019-03-18 17:53 - 2019-03-18 17:53 - 000000000 ____D C:\Users\User-x\AppData\Roaming\WinBatch
2019-03-18 17:43 - 2019-03-18 17:57 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2019-03-18 17:43 - 2019-03-18 17:43 - 000000178 _____ C:\Windows\system32\HPPA.ini
2019-03-18 17:43 - 2019-03-18 17:43 - 000000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2019-03-18 17:43 - 2019-03-18 17:43 - 000000000 ____D C:\Program Files\Hewlett-Packard
2019-03-18 17:39 - 2019-04-14 13:22 - 000000000 ____D C:\Users\User-x\AppData\Roaming\hpqLog
2019-03-18 17:39 - 2019-03-19 16:36 - 000000000 ____D C:\Users\User-x\AppData\Roaming\Hewlett-Packard
2019-03-18 17:39 - 2019-03-18 17:57 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2019-03-18 17:39 - 2019-03-18 17:39 - 000000000 ____D C:\Users\User-x\AppData\Roaming\Hewlett-Packard Company
2019-03-18 17:39 - 2019-03-18 17:39 - 000000000 ____D C:\swsetup
2019-03-18 17:32 - 2019-03-18 17:32 - 000000000 ____D C:\Program Files (x86)\cmcm
2019-03-18 17:21 - 2019-03-18 17:21 - 000000000 ____D C:\ProgramData\VS Revo Group
2019-03-18 11:05 - 2019-03-18 11:05 - 000000000 ____D C:\Windows\system32\SRSLabs
2019-03-18 11:04 - 2019-03-18 11:04 - 000000000 ____D C:\Program Files (x86)\Realtek
2019-03-18 11:04 - 2017-09-07 05:27 - 003560904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 003509200 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 001435144 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR64.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 001348160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000691680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000467160 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO64.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000387312 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000381408 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM64.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000343704 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000341152 _____ (Synopsys, Inc.) C:\Windows\SysWOW64\SRCOM.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000341152 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000321712 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000321712 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000231912 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000214832 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000192984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000190544 _____ (Sonic Focus, Inc.) C:\Windows\system32\SFProc64.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000110984 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000096056 _____ (Sonic Focus, Inc.) C:\Windows\system32\SFComm64.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000093496 _____ (Sonic Focus, Inc.) C:\Windows\system32\SFSAPO64.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000092472 _____ (Sonic Focus, Inc.) C:\Windows\system32\SFHAPO64.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000092472 _____ (Sonic Focus, Inc.) C:\Windows\system32\SFDAPO64.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000090912 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000088344 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000088320 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2019-03-18 11:04 - 2017-09-07 05:27 - 000083624 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2019-03-18 11:04 - 2017-09-07 05:26 - 072520712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2019-03-18 11:04 - 2017-09-07 05:26 - 005944296 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2019-03-18 11:04 - 2017-09-07 05:26 - 003677160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2019-03-18 11:04 - 2017-09-07 05:26 - 003205120 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2019-03-18 11:04 - 2017-09-07 05:26 - 002923496 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2019-03-18 11:04 - 2017-09-07 05:26 - 001616688 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll
2019-03-18 11:04 - 2017-09-07 05:26 - 001529136 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64Proxy.dll
2019-03-18 11:04 - 2017-09-07 05:26 - 000122320 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2019-03-18 11:04 - 2017-09-07 05:26 - 000023696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2019-03-18 11:04 - 2017-09-07 01:51 - 013381194 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2019-03-18 10:54 - 2017-07-21 17:17 - 002839488 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2019-03-18 10:07 - 2019-03-23 00:24 - 000000000 ____D C:\MyDrivers
2019-03-18 10:07 - 2019-03-18 10:07 - 000000000 ____D C:\Program Files\DIFX
2019-03-18 10:07 - 2012-05-30 08:42 - 000569152 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStor.sys
2019-03-18 09:46 - 2019-03-18 17:32 - 000132832 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\ksapi_ev.sys
2019-03-18 09:46 - 2019-03-18 17:32 - 000124592 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\ksapi.sys
2019-03-18 09:46 - 2019-03-18 17:32 - 000089776 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\ksapi64_ev.sys
2019-03-18 09:46 - 2019-03-18 17:32 - 000081584 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\ksapi64.sys
2019-03-18 09:46 - 2019-03-18 10:03 - 000000000 ____D C:\ProgramData\Kingsoft
2019-03-18 09:46 - 2019-03-18 09:46 - 000000000 ____D C:\Users\User-x\AppData\Roaming\kingsoft
2019-03-18 09:46 - 2019-03-18 09:46 - 000000000 ____D C:\Users\User-x\AppData\Roaming\kcleaner
2019-03-18 09:46 - 2019-03-18 09:46 - 000000000 ____D C:\ProgramData\cmcm

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-04-14 19:00 - 2009-07-14 07:45 - 000026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2019-04-14 19:00 - 2009-07-14 07:45 - 000026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2019-04-14 18:49 - 2018-04-29 18:56 - 000000000 ____D C:\Users\User-x\AppData\Local\AVAST Software
2019-04-14 18:47 - 2019-02-18 11:22 - 000000047 _____ C:\Windows\SysWOW64\E302AF636FDE.ini
2019-04-14 18:47 - 2017-08-06 18:02 - 000065536 _____ C:\Windows\system32\Ikeext.etl
2019-04-14 18:47 - 2015-07-17 15:12 - 000000008 __RSH C:\ProgramData\ntuser.pol
2019-04-14 18:47 - 2009-07-14 08:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-04-14 18:29 - 2009-07-14 06:20 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2019-04-14 18:29 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2019-04-14 15:29 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\tracing
2019-04-14 15:14 - 2015-05-23 17:11 - 000000000 ____D C:\Users\User-x\AppData\Local\ElevatedDiagnostics
2019-04-14 15:12 - 2018-04-29 18:56 - 000000000 ____D C:\Program Files (x86)\AVAST Software
2019-04-14 15:12 - 2015-03-11 17:26 - 000000000 ____D C:\ProgramData\AVAST Software
2019-04-14 14:38 - 2015-03-11 17:24 - 000003430 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2019-04-14 14:38 - 2015-03-11 17:24 - 000003302 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2019-04-14 14:22 - 2015-03-11 16:45 - 000000000 ____D C:\Users\User-x\AppData\Roaming\uTorrent
2019-04-14 14:08 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\inf
2019-04-14 14:01 - 2018-04-29 18:57 - 000003474 _____ C:\Windows\System32\Tasks\AvastUpdateTaskMachineUA
2019-04-14 14:01 - 2018-04-29 18:57 - 000003346 _____ C:\Windows\System32\Tasks\AvastUpdateTaskMachineCore
2019-04-14 13:27 - 2015-04-14 20:47 - 000842296 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2019-04-14 13:27 - 2015-04-14 20:47 - 000175160 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2019-04-14 13:27 - 2015-04-14 20:47 - 000004314 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2019-04-14 13:27 - 2015-04-14 20:47 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2019-04-14 13:27 - 2015-04-14 20:47 - 000000000 ____D C:\Windows\system32\Macromed
2019-04-14 13:22 - 2015-06-20 17:46 - 000000000 ____D C:\Users\User-x\AppData\Roaming\Media Player Classic
2019-04-14 13:22 - 2015-03-11 17:15 - 000000000 ____D C:\Users\User-x\AppData\Roaming\Skype
2019-04-14 13:19 - 2015-04-16 18:46 - 000000000 ____D C:\Users\User-x\AppData\Roaming\AVAST Software
2019-04-14 12:50 - 2017-03-31 20:15 - 000003910 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2019-04-14 12:50 - 2015-03-11 17:27 - 000476776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2019-04-14 12:50 - 2015-03-11 17:27 - 000380160 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2019-04-14 12:49 - 2018-11-10 23:37 - 000042288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2019-04-14 12:49 - 2017-11-10 20:36 - 000205400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2019-04-14 12:49 - 2015-04-16 14:33 - 000220640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2019-04-14 12:49 - 2015-03-11 17:27 - 001031000 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2019-04-14 12:49 - 2015-03-11 17:27 - 000166848 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2019-04-14 12:49 - 2015-03-11 17:27 - 000112520 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2019-04-14 12:49 - 2015-03-11 17:27 - 000088160 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2019-04-14 10:47 - 2015-03-11 16:40 - 000000000 ____D C:\Users\User-x
2019-04-13 13:07 - 2015-04-18 09:41 - 000000000 ____D C:\Windows\SysWOW64\directx
2019-04-13 11:54 - 2017-04-22 15:49 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2019-04-12 18:28 - 2015-12-03 19:13 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
2019-04-09 10:56 - 2015-04-18 18:11 - 000000000 ____D C:\Users\User-x\AppData\Roaming\DAEMON Tools Lite
2019-04-08 18:11 - 2015-03-11 16:45 - 000000000 ____D C:\Users\User-x\AppData\Roaming\Winamp
2019-04-06 14:01 - 2009-07-14 08:13 - 000781782 _____ C:\Windows\system32\PerfStringBackup.INI
2019-04-04 12:21 - 2015-04-18 21:44 - 000000000 ____D C:\Users\User-x\AppData\Local\Rockstar Games
2019-04-01 20:30 - 2015-04-18 09:20 - 000000000 ____D C:\Users\User-x\Documents\GTA San Andreas User Files
2019-03-30 20:24 - 2015-03-11 16:45 - 000000000 ____D C:\Program Files (x86)\WinRAR
2019-03-24 09:57 - 2017-03-15 23:19 - 000000000 ___RD C:\Program Files (x86)\Skype
2019-03-24 09:57 - 2015-03-11 17:15 - 000000000 ____D C:\ProgramData\Skype
2019-03-24 09:55 - 2017-04-22 16:29 - 000000000 ____D C:\Program Files (x86)\Smart Application Controller
2019-03-23 03:19 - 2015-05-23 17:09 - 000000000 ____D C:\Intel
2019-03-18 23:08 - 2015-03-11 17:19 - 000000000 ____D C:\Users\User-x\AppData\Local\Google
2019-03-18 18:53 - 2016-11-03 21:26 - 000000000 ____D C:\Users\User-x\AppData\Local\Facebook
2019-03-18 18:09 - 2015-03-11 17:25 - 000002222 ____H C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-03-18 18:00 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\Help
2019-03-18 17:56 - 2009-07-14 06:20 - 000000000 ____D C:\Program Files\Common Files\Microsoft Shared
2019-03-18 11:06 - 2015-05-23 18:25 - 000000000 ___HD C:\Program Files (x86)\Temp
2019-03-18 11:05 - 2015-05-23 17:07 - 000000000 ____D C:\Windows\SysWOW64\RTCOM
2019-03-18 10:02 - 2015-04-14 18:11 - 000000000 ____D C:\Users\User-x\AppData\Local\Mozilla
2019-03-18 09:55 - 2016-11-23 15:50 - 000000000 ____D C:\Windows\Minidump
2019-03-18 09:55 - 2015-03-11 16:07 - 000000000 ____D C:\Windows\Panther

==================== Files in the root of some directories =======

2019-04-14 14:21 - 2019-04-14 14:21 - 007505920 _____ () C:\Program Files (x86)\GUTADBC.tmp
2015-04-15 15:52 - 2015-07-02 18:40 - 000007608 _____ () C:\Users\User-x\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\dllhost.exe => File is digitally signed
C:\Windows\SysWOW64\dllhost.exe => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2019-04-06 17:03

==================== End of FRST.txt ============================

 

Addition.txt

Фикс с Farbar Recovery Scan Tool
 
icon13.gif Изтеглете прикачения файл fixlist.txt и го запазете там, където сте свалили FRST.exe
Стартирайте отново FRST.exe и натиснете бутона Fix веднъж и изчакайте.

Press%20the%20FIX%20button_zpsdd5zi3mt.p


Ще се създаде нов лог файла FixLog.txt. Прикачете съдържанието му в следващия си коментар.
 
ЗАБЕЛЕЖКА: Този скрипт е написан специално за този потребител,и за тази конкретна машина. Изпълнението на фикса, на друг компютър може да доведе до увреждане на  операционната ви система

 

pfNZP4A.png  Дневници
 
В следващия си отговор, моля да включите следните дневници:

  • FixLog.txt
 

За съжаление трите файла които изпратихме на анализ се оказаха заразени..! Ще се наложи да ги премахнем..!

Фикс с Farbar Recovery Scan Tool
 
icon13.gif Изтеглете прикачения файл fixlist.txt и го запазете там, където сте свалили FRST.exe
Стартирайте отново FRST.exe и натиснете бутона Fix веднъж и изчакайте.

Press%20the%20FIX%20button_zpsdd5zi3mt.p


Ще се създаде нов лог файла FixLog.txt. Прикачете съдържанието му в следващия си коментар.
 
ЗАБЕЛЕЖКА: Този скрипт е написан специално за този потребител,и за тази конкретна машина. Изпълнението на фикса, на друг компютър може да доведе до увреждане на  операционната ви система

 

pfNZP4A.png  Дневници
 
В следващия си отговор, моля да включите следните дневници:

  • FixLog.txt
  • Автор

Първият основен проблем е че все още си забива страшно много, и ако не успея веднага да отворя браузъра за да вляза във сайта, после става много трудно. Вторият проблем беше че когато днес инсталирах Avast Cleanup, след това ми се инсталира Avast Browser, без въобще да ме пита, но аз после го деинсталирах. Третият проблем е че когато натисна десния бутон на мишката на работния плот, там виждам две допълнителни опции за графиката написани на английски, които също се появиха днес, незнайно откъде (по-долу ще приложа и скрийншот). Четвъртият проблем е че днес в диспечера на задачите ми се появиха някакви нови процеси, на които също ще публикувам снимка по-долу но ще ги опиша после, че програмата за разглеждане на снимки не работи в безопасен режим, а в нормален режим е невъзможно да качвам снимки, защото браузърът ми забива и ми изписва (Не отговаря).

Без име.png

Без име2.png

Значи процесите са taskeng.exe, igfxpers.exe, HPSFMsgr.exe и мисля че taskhost.exe

преди 2 минути, ioannidis написа:

когато днес инсталирах Avast Cleanup

Ами ...в момента системата ви е чиста ...не се виждат вече активни зарази...! Тук в този форум често са обсъждани  такива програми оптимизатори..които са нож с две остриета..! Вие сте изтеглили късата клечка....доста сте си омазали системата ..! Аз предполагам какво се е случило ...системата ви е работила бавно защото е била заразена....вие сте решили че Avast Cleanup ще реши проблема и резултат е видим...! Пълно мазало..!

Ще се опитаме да възстановим системата ви ..въпреки че въобще не ми е работа и не е предмет на този подраздел...! Правя последен компромис...!

 

  • Рестартирайте компютъра
  • Натиснете  F8 преди да се появи логото на Windows 7
  • В менюто Advanced Boot Options (Разширени опции за стартиране) изберете опцията Repair your computer (Поправяне на компютъра)
  • Натиснете ENTER
  • Вече трябва да има опции за възстановяване на системата

image.thumb.png.32a975831236308248e2e27e56f8e990.png

 

  • Автор

Благодаря Ви много, @icotonev! Направих всичко както ми казахте и сега системата е по-добре, а след като деинсталирах напълно антивирусната, стана още по-добре. Явно повече няма да слагам Avast, защото още отпреди знам че с тяхната антивирусна винаги е имало проблеми...

Здравейте..! Преди да приключим може ли едно ново сканиране ,защото ние премахнахме заразите ...но да след последната процедура да не би да са се върнали ..!?! Освен това Avast как го деинсталирахте ..? Има си специален инструмент за това: avastclear. Инструкция:

https://www.avast.com/uninstall-utility

 

Сканиране с Farbar Recovery Scan

  • Моля изтеглете icon1337953436.pngFarbar Recovery Scan Tool (според версията на Windows изберете 32 битовата или 64 битовата версия) и го запазете на десктопа.
  • Стартирайте файла FRST.exe (или FRST64.exe)
  • Програмата ще се стартира. Натиснете YES за да се съгласите с лицензионното споразумение.
  • Натиснете бутона YClYkft.jpg.
  • Изчакайте търпеливо проверката да приключи.
  • Ще се създадат два лог файла с името - FRST.txt и Addition.txt на десктопа.
  • Копирайте съдържанието на файла FRST.txt в следващия си пост.Прикачете Addition.txt в коментар си (погледнете опцията Прикачване на файлове, когато публикувате мнение).

pfNZP4A.png&key=0a487e0a7cff89c690a32d13  Дневници 

В следващия си отговор, моля да включите (като копирате целите съдържания ) следните дневници:

  • FRST.txt (копирате цялото съдържание)
  • Addition.txt (прикачате..) 
  • Автор

Здравей, @icotonev, аз направих преинсталация на системата чрез флашка, и ако това не променя нещата, ще направя следващата стъпка за проверка на вируси, но също така искам да разбера как да изтрия безопасно папката Windows.old, защото тя ми заема много място...? Иначе от тази папка изтрих някои файлове, и не мисля че би възникнал проблем....

  • Автор

А ето и логовете от FRST:

FRST.txt 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17.03.2019
Ran by Ivan (administrator) on IVAN-PC (15-04-2019 16:21:06)
Running from C:\Users\Ivan\Downloads
Loaded Profiles: Ivan (Available Profiles: Ivan)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Български (България)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google) C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\SwReporter\39.195.200.3\software_reporter_tool.exe
(Google LLC -> Google) C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\SwReporter\39.195.200.3\software_reporter_tool.exe
(Google LLC -> Google) C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\SwReporter\39.195.200.3\software_reporter_tool.exe
(Google LLC -> Google) C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\SwReporter\39.195.200.3\software_reporter_tool.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.7\GoogleCrashHandler.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.7\GoogleCrashHandler64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\73.0.3683.103\Installer\chrmstp.exe [2019-04-15] (Google LLC -> Google Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{6FB48C45-0A03-4F46-A7A9-647243A3DF49}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-2485589726-3344615239-370885923-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/en-xl/?ocid=iehp
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Windows -> Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Windows -> Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Windows -> Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Windows -> Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-04-15] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-04-15] (Google Inc -> Google LLC)

Chrome: 
=======
CHR Profile: C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default [2019-04-15]
CHR Extension: (Презентации) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-04-15]
CHR Extension: (Документи) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-04-15]
CHR Extension: (Google Диск) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-04-15]
CHR Extension: (YouTube) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-04-15]
CHR Extension: (Avast Passwords) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\emhginjpijfggbofeediiojmdlmlkoik [2019-04-15]
CHR Extension: (Таблици) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-04-15]
CHR Extension: (Google Документи офлайн) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-04-15]
CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-04-15]
CHR Extension: (Gmail) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-15]
CHR Extension: (Chrome Media Router) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-04-15]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Windows -> Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 e1kexpress; C:\Windows\System32\DRIVERS\e1k60x64.sys [220672 2009-06-10] (Microsoft Windows -> Intel Corporation)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-04-15 16:21 - 2019-04-15 16:27 - 000008340 _____ C:\Users\Ivan\Downloads\FRST.txt
2019-04-15 16:20 - 2019-04-15 16:20 - 002434048 _____ (Farbar) C:\Users\Ivan\Downloads\FRST64.exe
2019-04-15 16:13 - 2019-04-15 15:43 - 000000000 ____D C:\Windows\Panther
2019-04-15 16:07 - 2019-04-15 16:07 - 000000000 ____D C:\Users\Ivan\AppData\Roaming\Google
2019-04-15 16:06 - 2019-04-15 16:13 - 000000000 ____D C:\Users\Ivan\AppData\Local\Google
2019-04-15 16:06 - 2019-04-15 16:06 - 000002294 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-04-15 16:06 - 2019-04-15 16:06 - 000002253 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-04-15 16:05 - 2019-04-15 16:05 - 000000000 ____D C:\Program Files (x86)\Google
2019-04-15 16:04 - 2019-04-15 16:05 - 000000000 ____D C:\Users\Ivan\AppData\Local\Deployment
2019-04-15 16:04 - 2019-04-15 16:04 - 000057560 _____ C:\Users\Ivan\AppData\Local\GDIPFONTCACHEV1.DAT
2019-04-15 16:04 - 2019-04-15 16:04 - 000000000 ____D C:\Users\Ivan\AppData\Local\Apps\2.0
2019-04-15 16:04 - 2019-04-15 15:51 - 000000000 ____D C:\Windows.old
2019-04-15 16:01 - 2019-04-15 16:02 - 000056818 _____ C:\Windows\ntbtlog.txt
2019-04-15 15:44 - 2019-04-15 15:44 - 000001427 _____ C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2019-04-15 15:44 - 2019-04-15 15:44 - 000001393 _____ C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2019-04-15 15:44 - 2014-05-14 19:23 - 002477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2019-04-15 15:44 - 2014-05-14 19:23 - 000058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2019-04-15 15:44 - 2014-05-14 19:23 - 000044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2019-04-15 15:44 - 2014-05-14 19:21 - 002620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2019-04-15 15:44 - 2014-05-14 09:23 - 000198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2019-04-15 15:44 - 2014-05-14 09:23 - 000179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2019-04-15 15:44 - 2014-05-14 09:20 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2019-04-15 15:44 - 2014-05-14 09:17 - 000033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2019-04-15 15:43 - 2019-04-15 15:44 - 000000000 ____D C:\Users\Ivan
2019-04-15 15:43 - 2019-04-15 15:43 - 000000020 ___SH C:\Users\Ivan\ntuser.ini
2019-04-15 15:43 - 2019-04-15 15:43 - 000000000 ____D C:\Users\Ivan\AppData\Local\VirtualStore
2019-04-15 15:43 - 2011-04-12 11:34 - 000000000 ____D C:\Users\Ivan\AppData\Roaming\Media Center Programs
2019-04-15 15:20 - 2019-04-15 15:20 - 000001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2019-04-15 15:20 - 2019-04-15 15:20 - 000001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2019-04-14 17:32 - 2019-04-14 17:32 - 000000000 ____D C:\MGADiagToolOutput
2019-04-14 16:02 - 2019-04-15 16:21 - 000000000 ____D C:\FRST
2019-04-14 13:57 - 2019-04-14 13:57 - 000003288 ____N C:\bootsqm.dat
2019-03-18 17:53 - 2019-03-18 17:53 - 000000000 ___HD C:\System.sav
2019-03-18 17:39 - 2019-03-18 17:39 - 000000000 ____D C:\swsetup
2019-03-18 10:07 - 2019-03-23 00:24 - 000000000 ____D C:\MyDrivers

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-04-15 16:22 - 2009-07-14 08:13 - 000713888 _____ C:\Windows\system32\PerfStringBackup.INI
2019-04-15 16:22 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\inf
2019-04-15 16:18 - 2009-07-14 07:45 - 000020640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2019-04-15 16:18 - 2009-07-14 07:45 - 000020640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2019-04-15 16:15 - 2009-07-14 08:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-04-15 16:12 - 2009-07-14 08:32 - 000028672 _____ C:\Windows\system32\config\BCD-Template
2019-04-15 15:43 - 2010-11-21 05:50 - 000000000 ____D C:\Users\Administrator
2019-04-15 15:43 - 2009-07-14 06:20 - 000000000 __RHD C:\Users\Public\Libraries
2019-04-15 15:39 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\rescache
2019-04-15 15:20 - 2009-07-14 08:32 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2019-04-15 15:20 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\system32\sysprep
2019-04-15 15:17 - 2011-04-12 11:34 - 000000000 ____D C:\Windows\CSC
2019-04-15 15:16 - 2009-07-14 07:45 - 000274320 _____ C:\Windows\system32\FNTCACHE.DAT
2019-03-23 03:19 - 2015-05-23 17:09 - 000000000 ____D C:\Intel

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\dllhost.exe => File is digitally signed
C:\Windows\SysWOW64\dllhost.exe => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2019-04-15 15:16

==================== End of FRST.txt ============================

 

Addition.txt

  • Автор

Всъщност аз преинсталирах наново компютъра и вече папката Windows.old я няма, но обаче има нещо, което ми гълта много RAM и искам да разбера кои програми заемат толкова много RAM и има ли някаква възможност да се снижи използването на RAM до минимум...

Чиста е системата ..Всичко е "ок" ..!

Да деинсталираме FRST така:

i_arrow-r.gif&key=65f9fbaa716d42178fcd1e Остана само да премахнем програмите които използвахме За да премахнете правилно инструмента Farbar Recovery Scan Tool  , преименувайте изпълнимия файл FRST64.exe (или FRST.exe) в Uninstall.exe..!

image.png.9cf9e0ab76b122782aff3552f54c5829.png     =>     image.png.44f957ce25ef61c76206655a46425152.png

Стартирайте  файла Uninstall.exe. Ще бъдете уведомени, че трябва да рестартирате системата, за да изтриете инструмента ..!

image.png.abcc20b28654d54fae08e7451bb5dc3b.png

 

 

преди 2 часа, ioannidis написа:

как да изтрия безопасно папката Windows.old

 

Цитат

Тази папка се създава при надстройване от една версия на Windows на друга. Папката Windows.old съдържа всички файлове и данни от предишната инсталация на Windows. Можете да го използвате, за да възстановите системата си до старата версия на Windows, ако не харесвате новата версия. Ако търсите конкретен файл, който не е бил копиран правилно в новата инсталация на Windows, можете също да влезете в папката Windows.old и да го намерите. 
 
По същество папката Windows.old съдържа само старата система на Windows. От системните файлове на Windows до инсталираните програми и настройките и файловете на всеки потребителски акаунт е всичко тук. Новата версия на Windows просто я държи  в случай, че искате да се върнете към по-старата версия на Windows или в случай, че трябва да копирате и намерите файл.  Windows автоматично ще изтрие папката Windows.old, за да освободи място след месец.

 

 

https://www.howtogeek.com/223821/what-is-the-windows.old-folder-and-how-do-you-delete-it/

 

преди 7 минути, ioannidis написа:

което ми гълта много RAM и искам да разбера кои програми заемат толкова много RAM и има ли някаква възможност да се снижи използването на RAM до минимум...

 

..и това на преинсталирана система...? Нещата отиват към вероятен хардуерен проблем ..но нека проверим какво се случва...:

 

icon1373991893.jpg

Изтеглете Autoruns и:

  • Стартирайте програмата;
  • Изберете Options => сложете отметки пред Hide Empty Locations, Hide Microsoft Entries и Hide Windows Entries и махнете отметката пред Hide VirusTotal Clean Entries;
  • Сега изберете Options => Scan Options => и сложете отметки пред Verify Code Signature, Check VirusTotal.com и Submit Unknown Images;
  • Изберете бутона F5 за да се повтори проверката. Изчакайте да приключи (ще разберете, че е така ако в долния ляв край на програмата изпише Ready.);
  • От менюто File => изберете Save => запазете файла някъде с желано от вас име (във формат arn), архивирайте го с програма по желание в zip формат и го прикачете към темата.

 

=======

image.png.8a3c74f8693c9558651e122063e8bb9e.png

Изтеглете Process Explorer  от тук:

https://live.sysinte...com/procexp.exe

Запазете го на десктопа си, след това го стартирайте ( десен бутон и Run As Administrator).

  • Сега изберете  View => Select Column => маркирайте  Verified Signer => OK
  • След това  Options => Verify Image Signatures

Кликнете два пъти  над колоната на CPU, за да подредите нещата по възходящ ред натоварването  на процесора (най -високите стойности отгоре)

Изчакайте минута след това: 
 
От менюто File => изберете Save  As => Save. Запомнете името на  файла. Отворете файла на работния плот и копирайте и поставете текста в следващия си отговор.

  • Автор

Заповядай: 

Process	CPU	Private Bytes	Working Set	PID	Description	Company Name	Verified Signer
TrustedInstaller.exe	39.88	66 108 K	59 544 K	1160	Windows Modules Installer	Microsoft Corporation	(Verified) Microsoft Windows
System Idle Process	59.35	0 K	24 K	0			
procexp64.exe	5.12	30 740 K	46 004 K	608	Sysinternals Process Explorer	Sysinternals - www.sysinternals.com	(Verified) Microsoft Corporation
SearchIndexer.exe	4.64	19 208 K	9 072 K	1428	Microsoft Windows Search Indexer	Microsoft Corporation	(Verified) Microsoft Windows
chrome.exe	4.06	139 848 K	120 736 K	2908	Google Chrome	Google Inc.	(Verified) Google LLC
svchost.exe	2.39	91 132 K	79 256 K	836	Хост процес за услугите на Windows	Microsoft Corporation	(Verified) Microsoft Windows
System	0.69	132 K	264 K	4			
svchost.exe	1.82	1 183 016 K	907 584 K	864	Хост процес за услугите на Windows	Microsoft Corporation	(Verified) Microsoft Windows
chrome.exe	1.65	63 980 K	42 340 K	3728	Google Chrome	Google Inc.	(Verified) Google LLC
Interrupts	0.79	0 K	0 K	n/a	Hardware Interrupts and DPCs		
chrome.exe	0.71	75 228 K	62 884 K	2592	Google Chrome	Google Inc.	(Verified) Google LLC
chrome.exe	0.45	18 436 K	16 368 K	2780	Google Chrome	Google Inc.	(Verified) Google LLC
dwm.exe	0.41	35 936 K	13 336 K	1144	Диспечер на прозорците на работния плот	Microsoft Corporation	(Verified) Microsoft Windows
csrss.exe	0.33	2 328 K	2 452 K	420	Client Server Runtime Process	Microsoft Corporation	(Verified) Microsoft Windows
svchost.exe	0.10	14 404 K	7 428 K	344	Хост процес за услугите на Windows	Microsoft Corporation	(Verified) Microsoft Windows
chrome.exe	0.06	20 496 K	13 592 K	2772	Google Chrome	Google Inc.	(Verified) Google LLC
chrome.exe	0.05	32 028 K	10 980 K	2916	Google Chrome	Google Inc.	(Verified) Google LLC
explorer.exe	0.04	31 392 K	28 436 K	1184	Windows Explorer	Microsoft Corporation	(Verified) Microsoft Windows
chrome.exe	0.02	23 152 K	8 660 K	3556	Google Chrome	Google Inc.	(Verified) Google LLC
svchost.exe	0.02	5 848 K	2 716 K	1372	Хост процес за услугите на Windows	Microsoft Corporation	(Verified) Microsoft Windows
svchost.exe	0.02	67 840 K	13 236 K	3340	Хост процес за услугите на Windows	Microsoft Corporation	(Verified) Microsoft Windows
svchost.exe	0.01	8 432 K	2 696 K	1008	Хост процес за услугите на Windows	Microsoft Corporation	(Verified) Microsoft Windows
taskhost.exe	0.01	3 376 K	1 776 K	1780	Host Process for Windows Tasks	Microsoft Corporation	(Verified) Microsoft Windows
svchost.exe	0.01	20 004 K	6 392 K	800	Хост процес за услугите на Windows	Microsoft Corporation	(Verified) Microsoft Windows
svchost.exe	< 0.01	9 784 K	5 728 K	2200	Хост процес за услугите на Windows	Microsoft Corporation	(Verified) Microsoft Windows
csrss.exe	< 0.01	1 932 K	1 652 K	364	Client Server Runtime Process	Microsoft Corporation	(Verified) Microsoft Windows
wmpnetwk.exe	< 0.01	4 480 K	1 264 K	1460	Услуга за мрежово споделяне на Windows Media Player	Microsoft Corporation	(Verified) Microsoft Windows
wuauclt.exe		1 936 K	1 016 K	3012	Windows Update	Microsoft Corporation	(Verified) Microsoft Windows Component Publisher
WmiPrvSE.exe		2 492 K	3 952 K	3996	WMI Provider Host	Microsoft Corporation	(Verified) Microsoft Windows
winlogon.exe		2 728 K	1 576 K	520	Приложение за влизане в Windows	Microsoft Corporation	(Verified) Microsoft Windows
wininit.exe		1 480 K	304 K	396	Приложение за начално стартиране на Windows	Microsoft Corporation	(Verified) Microsoft Windows
svchost.exe		3 612 K	3 468 K	704	Хост процес за услугите на Windows	Microsoft Corporation	(Verified) Microsoft Windows
svchost.exe		3 992 K	2 796 K	624	Хост процес за услугите на Windows	Microsoft Corporation	(Verified) Microsoft Windows
svchost.exe		13 724 K	6 620 K	1276	Хост процес за услугите на Windows	Microsoft Corporation	(Verified) Microsoft Windows
sppsvc.exe		5 372 K	732 K	3632	Microsoft Software Protection Platform Service	Microsoft Corporation	(Verified) Microsoft Windows
spoolsv.exe		6 224 K	1 416 K	1248	Spooler SubSystem App	Microsoft Corporation	(Verified) Microsoft Windows
smss.exe		440 K	308 K	264	Windows Session Manager	Microsoft Corporation	(Verified) Microsoft Windows
services.exe		4 028 K	3 932 K	452	Приложение за услуги и контролери	Microsoft Corporation	(Verified) Microsoft Windows
procexp.exe		2 548 K	6 920 K	3972	Sysinternals Process Explorer	Sysinternals - www.sysinternals.com	(Verified) Microsoft Corporation
lsm.exe		2 356 K	1 556 K	476	Local Session Manager Service	Microsoft Corporation	(Verified) Microsoft Windows
lsass.exe		4 496 K	3 788 K	468	Local Security Authority Process	Microsoft Corporation	(Verified) Microsoft Windows
GoogleCrashHandler64.exe		1 544 K	416 K	1104	Google Crash Handler	Google LLC	(Verified) Google Inc
GoogleCrashHandler.exe		1 480 K	292 K	2028	Google Crash Handler	Google LLC	(Verified) Google Inc
chrome.exe		23 116 K	7 560 K	3884	Google Chrome	Google Inc.	(Verified) Google LLC
chrome.exe		23 908 K	8 112 K	3736	Google Chrome	Google Inc.	(Verified) Google LLC
chrome.exe		1 972 K	1 520 K	2612	Google Chrome	Google Inc.	(Verified) Google LLC
chrome.exe		2 036 K	416 K	2644	Google Chrome	Google Inc.	(Verified) Google LLC
audiodg.exe		15 584 K	15 180 K	3220	Windows Audio Device Graph Isolation 	Microsoft Corporation	(Verified) Microsoft Windows

 

AutoRunsLogFile.zip

преди 16 минути, ioannidis написа:

TrustedInstaller.exe

Този процес товари..! Вие сте в процес на инсталиране на нещо?  Ако не, този процес не трябва да се изпълнява. Прекъснали ли сте инсталацията на нещо? Може би не се е изчистило от паметта след неуспешна инсталация. Ако не инсталирате нищо, трябва да можете да убиете процеса. Рестартирането също трябва да го изчисти.

Опитайте да спрете услугата за актуализиране на Windows ( Windows Update ) пробно и да настроите типа на стартиране на 'забранено' (disabled )..След рестартиране проверете дали имате същия проблем.

  • Автор
преди 1 минута, icotonev написа:

Този процес товари..! Вие сте в процес на инсталиране на нещо?  Ако не, този процес не трябва да се изпълнява. Прекъснали ли сте инсталацията на нещо? Може би не се е изчистило от паметта след неуспешна инсталация. Ако не инсталирате нищо, трябва да можете да убиете процеса. Рестартирането също трябва да го изчисти.

Бях прекъснал автоматичните актуализации на Windows, защото след почти 10 минутно чакане не се изтегли дори и един байт, и сега направих така, че чакащите актуализации да се изтеглят или при следващото изключване на компютъра, или в 03:00 сутринта.

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Назад

Разглеждащи това в момента 0

  • Няма регистрирани потребители разглеждащи тази страница.

Дарение

  • Подкрепи съществуването на форума - направи дарение
    32%
    Дарени 315 € от нужните 1 000 €

Бюлетин

Получавайте известие, когато има важна промяна или новина свързана с форума.
Абонирайте се

Профил

Навигация

Търсене

Търсене

Конфигуриране на push известия в браузъра
Chrome (Android)
  1. Докоснете иконата на катинар до адресната лента.
  2. Докоснете Разрешения → Известия.
  3. Променете предпочитанията си.
Chrome (Desktop)
  1. Кликнете върху иконата на катинар в адресната лента.
  2. Изберете Настройки на сайта.
  3. Намерете Известия и коригирайте предпочитанията си.