- This topic has 4 ответа, 2 участника, and was last updated 8 years, 9 months назад by
.
-
Сообщения
-
Скачал программу FRST
Прикладываю содержимое файла frst.txtScan result of Farbar Recovery Scan Tool (FRST) (x64) Version:21-02-2016 01
Ran by Павел (administrator) on PASHOK (22-02-2016 13:45:31)
Running from C:UsersПавелDownloads
Loaded Profiles: Павел (Available Profiles: Павел)
Platform: Windows 10 Pro (X64) Language: Русский (Россия)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forums/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:Program Files (x86)NVIDIA Corporation3D VisionnvSCPAPISvr.exe
(NVIDIA Corporation) C:WindowsSystem32nvvsvc.exe
(NVIDIA Corporation) C:Program FilesNVIDIA CorporationDisplaynvxdsync.exe
(NVIDIA Corporation) C:WindowsSystem32nvvsvc.exe
() C:Program Files (x86)ASUSAXSP1.01.02atkexComSvc.exe
(Autodesk, Inc.) C:Program Files (x86)AutodeskContent ServiceConnect.Service.ContentService.exe
(Apple Inc.) C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
(NVIDIA Corporation) C:Program FilesNVIDIA CorporationGeForce Experience ServiceGfExperienceService.exe
(Autodesk Inc.) C:Program Files (x86)Common FilesAutodesk SharedAppManagerR1AdAppMgrSvc.exe
(Apple Inc.) C:Program FilesBonjourmDNSResponder.exe
(NVIDIA Corporation) C:Program FilesNVIDIA CorporationNvStreamSrvNvStreamService.exe
(NVIDIA Corporation) C:Program Files (x86)NVIDIA CorporationNetServiceNvNetworkService.exe
(Microsoft Corporation) C:Program FilesWindows DefenderMsMpEng.exe
(NVIDIA Corporation) C:Program FilesNVIDIA CorporationNvStreamSrvNvStreamNetworkService.exe
(Microsoft Corporation) C:Program FilesWindows DefenderNisSrv.exe
(NVIDIA Corporation) C:Program FilesNVIDIA CorporationNvStreamSrvNvStreamUserAgent.exe
(Microsoft Corporation) C:WindowsSystem32dllhost.exe
(NVIDIA Corporation) C:Program FilesNVIDIA CorporationDisplaynvtray.exe
(NVIDIA Corporation) C:Program Files (x86)NVIDIA CorporationUpdate CoreNvBackend.exe
(Realtek Semiconductor) C:Program FilesRealtekAudioHDARtkNGUI64.exe
(BitTorrent Inc.) C:UsersПавелAppDataRoaminguTorrentuTorrent.exe
(Disc Soft Ltd) C:Program Files (x86)DAEMON Tools LiteDiscSoftBusService.exe
(BitTorrent Inc.) C:UsersПавелAppDataRoaminguTorrentupdates3.4.5_41712utorrentie.exe
(BitTorrent Inc.) C:UsersПавелAppDataRoaminguTorrentupdates3.4.5_41712utorrentie.exe
(Oracle Corporation) C:Program Files (x86)Common FilesJavaJava Updatejusched.exe
(Oracle Corporation) C:Program Files (x86)Common FilesJavaJava Updatejucheck.exe
() C:Program FilesWindowsAppsMicrosoft.Windows.Photos_16.201.11370.0_x64__8wekyb3d8bbweMicrosoft.Photos.exe
(MPC-HC Team) C:Program Files (x86)MPC-HCmpc-hc.exe
(Microsoft Corporation) C:WindowsSystemAppsMicrosoft.MicrosoftEdge_8wekyb3d8bbweMicrosoftEdge.exe
(Microsoft Corporation) C:WindowsSystem32browser_broker.exe
(Microsoft Corporation) C:WindowsSystemAppsMicrosoft.MicrosoftEdge_8wekyb3d8bbweMicrosoftEdgeCP.exe
(Microsoft Corporation) C:WindowsSystemAppsMicrosoft.MicrosoftEdge_8wekyb3d8bbweMicrosoftEdgeCP.exe
(Microsoft Corporation) C:WindowsSystemAppsMicrosoft.MicrosoftEdge_8wekyb3d8bbweMicrosoftEdgeCP.exe
(Microsoft Corporation) C:WindowsSystemAppsMicrosoft.MicrosoftEdge_8wekyb3d8bbweMicrosoftEdgeCP.exe
(Microsoft Corporation) C:WindowsSystemAppsMicrosoft.MicrosoftEdge_8wekyb3d8bbweMicrosoftEdgeCP.exe
(Microsoft Corporation) C:WindowsSystem32dllhost.exe
(Microsoft Corporation) C:WindowsSystem32dllhost.exe
(Farbar) C:UsersПавелDownloadsFRST64 (1).exe==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM…Run: [RTHDVCPL] => C:Program FilesRealtekAudioHDARtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)
HKLM…Run: [NvBackend] => C:Program Files (x86)NVIDIA CorporationUpdate CoreNvBackend.exe [2789248 2016-02-17] (NVIDIA Corporation)
HKLM…Run: [ShadowPlay] => «C:WINDOWSsystem32rundll32.exe» C:WINDOWSsystem32nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32…Run: [Bonus.SSR.FR12] => C:Program Files (x86)ABBYY FineReader 12Bonus.ScreenshotReader.exe [1517088 2014-09-12] (ABBYY Production LLC.)
HKLM-x32…Run: [ADSKAppManager] => C:Program Files (x86)Common FilesAutodesk SharedAppManagerR1AdAppMgr.exe [493960 2014-12-05] (Autodesk Inc.)
HKLM-x32…Run: [SunJavaUpdateSched] => C:Program Files (x86)Common FilesJavaJava Updatejusched.exe [596528 2015-11-09] (Oracle Corporation)
HKUS-1-5-21-2409177678-848065757-1350060629-1001…Run: [iCloudServices] => C:Program Files (x86)Common FilesAppleInternet ServicesiCloudServices.exe [43816 2015-04-26] (Apple Inc.)
HKUS-1-5-21-2409177678-848065757-1350060629-1001…Run: [ApplePhotoStreams] => C:Program Files (x86)Common FilesAppleInternet ServicesApplePhotoStreams.exe [43816 2015-04-26] (Apple Inc.)
HKUS-1-5-21-2409177678-848065757-1350060629-1001…Run: [Autodesk Sync] => C:Program FilesAutodeskAutodesk SyncAdSync.exe [1208712 2014-05-14] (Autodesk, Inc.)
HKUS-1-5-21-2409177678-848065757-1350060629-1001…Run: [uTorrent] => C:UsersПавелAppDataRoaminguTorrentuTorrent.exe [2065944 2016-02-10] (BitTorrent Inc.)
HKUS-1-5-21-2409177678-848065757-1350060629-1001…Run: [DAEMON Tools Lite Automount] => C:Program Files (x86)DAEMON Tools LiteDTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKUS-1-5-21-2409177678-848065757-1350060629-1001…Run: [Skype] => C:Program Files (x86)SkypePhoneSkype.exe [50599552 2016-02-10] (Skype Technologies S.A.)
HKUS-1-5-21-2409177678-848065757-1350060629-1001…PoliciesExplorer: []
HKUS-1-5-21-2409177678-848065757-1350060629-1001…MountPoints2: {1420a95f-5942-11e5-83e3-d850e64caa6a} — «E:Autorun.EXE»
HKUS-1-5-21-2409177678-848065757-1350060629-1001…MountPoints2: {1a261089-c744-11e5-8456-d850e64caa6a} — «G:HTC_Sync_Manager_PC.exe»
HKUS-1-5-21-2409177678-848065757-1350060629-1001…MountPoints2: {4129691e-d58b-11e5-8466-d850e64caa6a} — «G:HTC_Sync_Manager_PC.exe»
ShellIconOverlayIdentifiers: [ MailRuCloudIconOverlay0] -> {64A9418A-B6B1-4112-B75C-E61633C9A31F} => No File
ShellIconOverlayIdentifiers: [ MailRuCloudIconOverlay1] -> {6A2E142B-EA63-433A-AC05-5223CBD26E65} => No File
ShellIconOverlayIdentifiers: [ MailRuCloudIconOverlay2] -> {6AFCC535-2F12-4F50-9F0A-1CF856CFC95D} => No File
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:Windowssystem32AcSignIcon.dll [2013-04-16] (Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: [ MailRuCloudIconOverlay0] -> {64A9418A-B6B1-4112-B75C-E61633C9A31F} => No File
ShellIconOverlayIdentifiers-x32: [ MailRuCloudIconOverlay1] -> {6A2E142B-EA63-433A-AC05-5223CBD26E65} => No File
ShellIconOverlayIdentifiers-x32: [ MailRuCloudIconOverlay2] -> {6AFCC535-2F12-4F50-9F0A-1CF856CFC95D} => No File==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
TcpipParameters: [DhcpNameServer] 192.168.1.1
Tcpip..Interfaces{1d7c358b-9dbb-402f-a5e5-dfad40b8c7ab}: [DhcpNameServer] 192.168.1.1Internet Explorer:
==================
SearchScopes: HKUS-1-5-21-2409177678-848065757-1350060629-1001 -> DefaultScope 6004E68FC6E8C1222F69C28941228045 URL = hxxp://www.google.ru/search?hl=ru&q={searchTerms}&btnG=РџРѕРёСЃРє+РІ+Google&lr=&rlz=
SearchScopes: HKUS-1-5-21-2409177678-848065757-1350060629-1001 -> 6004E68FC6E8C1222F69C28941228045 URL = hxxp://www.google.ru/search?hl=ru&q={searchTerms}&btnG=РџРѕРёСЃРє+РІ+Google&lr=&rlz=
SearchScopes: HKUS-1-5-21-2409177678-848065757-1350060629-1001 -> {117513C1-6909-4230-AD7C-E43D6B6FF3F5} URL = hxxp://yandex.ru/yandsearch?win=120&clid=2083140&text={searchTerms}
SearchScopes: HKUS-1-5-21-2409177678-848065757-1350060629-1001 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/search?q={SearchTerms}&fr=ntg&gp=newcustom1
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:Program FilesMicrosoft OfficeOffice15OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:Program FilesMicrosoft OfficeOffice15URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:Program FilesMicrosoft OfficeOffice15GROOVEEX.DLL [2012-12-09] (Microsoft Corporation)
BHO: Визуальные закладки -> {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:Program Files (x86)Javajre1.8.0_66binssv.dll [2016-01-14] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:Program Files (x86)Microsoft OfficeOffice15URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Визуальные закладки -> {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} -> No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:Program Files (x86)Javajre1.8.0_66binjp2ssv.dll [2016-01-14] (Oracle Corporation)
Handler-x32: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:Program Files (x86)Common FilesSkypeSkype4COM.dll [2014-05-02] (Skype Technologies)FireFox:
========
FF ProfilePath: C:UsersПавелAppDataRoamingMozillaFirefoxProfilesnahd6ha2.default
FF DefaultSearchEngine: Поиск@Mail.Ru
FF Plugin: @adobe.com/FlashPlayer -> C:WINDOWSsystem32MacromedFlashNPSWF64_20_0_0_306.dll [2016-02-10] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:WINDOWSSysWOW64MacromedFlashNPSWF32_20_0_0_306.dll [2016-02-10] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:Program Files (x86)Javajre1.8.0_66bindtpluginnpDeployJava1.dll [2016-01-14] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:Program Files (x86)Javajre1.8.0_66binplugin2npjp2.dll [2016-01-14] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:PROGRA~2MICROS~2Office15NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:Program Files (x86)NVIDIA Corporation3D Visionnpnv3dv.dll [2016-02-09] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:Program Files (x86)NVIDIA Corporation3D Visionnpnv3dvstreaming.dll [2016-02-09] (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:Program Files (x86)AdobeAcrobat Reader DCReaderAIRnppdf32.dll [2015-12-18] (Adobe Systems Inc.)Chrome:
=======
CHR Profile: C:UsersПавелAppDataLocalGoogleChromeUser DataDefault
CHR Extension: (Google Презентации) — C:UsersПавелAppDataLocalGoogleChromeUser DataDefaultExtensionsaapocclcgogkmnckokdopfmhonfmgoek [2015-08-10]
CHR Extension: (Документы Google) — C:UsersПавелAppDataLocalGoogleChromeUser DataDefaultExtensionsaohghmighlieiainnegkcijnfilokake [2015-08-10]
CHR Extension: (Диск Google) — C:UsersПавелAppDataLocalGoogleChromeUser DataDefaultExtensionsapdfllckaahabafndbhieahigkjlhalf [2015-08-10]
CHR Extension: (YouTube) — C:UsersПавелAppDataLocalGoogleChromeUser DataDefaultExtensionsblpcfgokakmgnkcojhhkbfbldkacnbeo [2015-08-10]
CHR Extension: (Google Search) — C:UsersПавелAppDataLocalGoogleChromeUser DataDefaultExtensionscoobgpohoikkiipiblmjeljniedjpjpf [2015-08-10]
CHR Extension: (Google Таблицы) — C:UsersПавелAppDataLocalGoogleChromeUser DataDefaultExtensionsfelcaaldnbdncclmgdcncolpebgiejap [2015-08-10]
CHR Extension: (Chrome Hotword Shared Module) — C:UsersПавелAppDataLocalGoogleChromeUser DataDefaultExtensionslccekmodgklaepjeofjdjpbminllajkg [2015-08-10]
CHR Extension: (Платежная система Интернет-магазина Chrome) — C:UsersПавелAppDataLocalGoogleChromeUser DataDefaultExtensionsnmmhkkegccagdldgiimedpiccmgmieda [2015-08-10]
CHR Extension: (Gmail) — C:UsersПавелAppDataLocalGoogleChromeUser DataDefaultExtensionspjkljhegncpnkpknbcohdijeoejaedia [2015-08-10]
CHR HKUS-1-5-21-2409177678-848065757-1350060629-1001SOFTWAREGoogleChromeExtensions…ChromeExtension: [bknbnapaddjdnbilpmlacdkjdkjmbjhd] — hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32…ChromeExtension: [bknbnapaddjdnbilpmlacdkjdkjmbjhd] — hxxp://clients2.google.com/service/update2/crx==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 ABBYY.Licensing.FineReader.Corporate.12.0; C:Program Files (x86)Common FilesABBYYFineReader12.00LicensingCENetworkLicenseServer.exe [961744 2014-07-17] (ABBYY Production LLC)
R2 AdAppMgrSvc; C:Program Files (x86)Common FilesAutodesk SharedAppManagerR1AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.)
R2 Apple Mobile Device Service; C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 asComSvc; C:Program Files (x86)ASUSAXSP1.01.02atkexComSvc.exe [936728 2013-07-04] ()
R2 Autodesk Content Service; C:Program Files (x86)AutodeskContent ServiceConnect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.) [File not signed]
R3 Disc Soft Lite Bus Service; C:Program Files (x86)DAEMON Tools LiteDiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
R2 GfExperienceService; C:Program FilesNVIDIA CorporationGeForce Experience ServiceGfExperienceService.exe [1164672 2016-02-17] (NVIDIA Corporation)
S3 mi-raysat_3dsmax2015_64; C:Program FilesAutodesk3ds Max 2015NVIDIASatelliteraysat_3dsmax2015_64server.exe [86016 2011-09-15] () [File not signed]
R2 NvNetworkService; C:Program Files (x86)NVIDIA CorporationNetServiceNvNetworkService.exe [1880960 2016-02-17] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:Program FilesNVIDIA CorporationNvStreamSrvNvStreamNetworkService.exe [6474112 2016-02-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:Program FilesNVIDIA CorporationNvStreamSrvNvStreamService.exe [2609024 2016-02-17] (NVIDIA Corporation)
S3 Origin Client Service; C:Program Files (x86)OriginOriginClientService.exe [1903472 2015-01-27] (Electronic Arts)
R3 WdNisSvc; C:Program FilesWindows DefenderNisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
R2 WinDefend; C:Program FilesWindows DefenderMsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 AsIO; C:WindowsSysWow64driversAsIO.sys [15232 2013-07-04] ()
R3 dtlitescsibus; C:WindowsSystem32driversdtlitescsibus.sys [30264 2015-08-14] (Disc Soft Ltd)
S3 Hamachi; C:Windowssystem32DRIVERSHamdrv.sys [44296 2015-01-20] (LogMeIn Inc.)
S3 i8042HDR; C:Windowssystem32DRIVERSi8042HDR.sys [15920 2009-08-14] (Windows (R) Codename Longhorn DDK provider)
S3 MEIx64; C:WindowsSystem32driversTeeDriverW8x64.sys [193336 2015-08-30] (Intel Corporation)
S3 Netaapl; C:Windowssystem32DRIVERSnetaapl64.sys [23040 2013-07-25] (Apple Inc.) [File not signed]
R3 NvStreamKms; C:Program FilesNVIDIA CorporationNvStreamSrvNvStreamKms.sys [28032 2016-02-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:Windowssystem32driversnvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation)
R3 rt640x64; C:WindowsSystem32driversrt640x64.sys [886528 2015-08-11] (Realtek )
S2 SecDrv; C:WINDOWSSysWOW64driversSECDRV.SYS [163644 2015-09-12] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed]
S3 UdeCx; C:WindowsSystem32driversudecx.sys [44032 2015-07-10] ()
S3 USBAAPL64; C:WindowsSystem32Driversusbaapl64.sys [54784 2015-06-10] (Apple, Inc.) [File not signed]
S0 WdBoot; C:WindowsSystem32driversWdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
R0 WdFilter; C:WindowsSystem32driversWdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
R2 WdNisDrv; C:WindowsSystem32DriversWdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; SystemRootSystem32driverswfpcapture.sys [X]==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-02-22 13:45 — 2016-02-22 13:45 — 02371072 _____ (Farbar) C:UsersПавелDownloadsFRST64 (1).exe
2016-02-22 13:39 — 2016-02-22 13:39 — 00008185 _____ C:UsersПавелDownloads[rutor.is]P0zhDeCtB0.2O15.P.BDRip.720p.mkv.torrent
2016-02-22 13:10 — 2016-02-22 13:10 — 00016148 _____ C:WINDOWSsystem32PASHOK_Павел_HistoryPrediction.bin
2016-02-22 10:44 — 2016-02-22 10:44 — 00012404 _____ C:UsersПавелDownloads[rutor.is]Ona.2013.DUAL.BDRip.XviD.AC3.-HELLYWOOD.torrent
2016-02-21 12:25 — 2016-02-21 12:25 — 00002206 _____ C:UsersPublicDesktop3D Vision Photo Viewer.lnk
2016-02-21 12:25 — 2016-02-09 08:04 — 00111672 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvStreaming.exe
2016-02-21 12:24 — 2016-02-21 12:24 — 00000000 ____D C:WINDOWSLastGood.Tmp
2016-02-21 12:24 — 2016-02-09 11:25 — 42983480 _____ C:WINDOWSsystem32nvcompiler.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 37616184 _____ C:WINDOWSSysWOW64nvcompiler.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 31119296 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvoglv64.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 24944064 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvoglv32.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 21201784 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvopencl.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 20741880 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvcuda.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 17631304 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvopencl.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 17224664 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvcuda.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 17175248 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvwgf2um.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 17116936 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvd3dumx.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 02541504 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvcuvid.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 02187712 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvcuvid.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 01924152 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvdispco6436191.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 01573432 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvdispgenco6436191.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 00950328 _____ (NVIDIA Corporation) C:WINDOWSsystem32NvFBC64.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 00882232 _____ (NVIDIA Corporation) C:WINDOWSsystem32NvIFR64.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 00786688 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvEncMFTH264.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 00745408 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64NvFBC.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 00689600 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64NvIFR.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 00632336 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvEncMFTH264.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 00541000 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvumdshimx.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 00445728 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvumdshim.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 00423360 _____ (NVIDIA Corporation) C:WINDOWSsystem32NvIFROpenGL.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 00383424 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvDecMFTMjpeg.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 00379448 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64NvIFROpenGL.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 00378968 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvEncodeAPI64.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 00348216 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvDecMFTMjpeg.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 00317144 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvEncodeAPI.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 00175368 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvinitx.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 00153392 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvinit.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 00151368 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvoglshim64.dll
2016-02-21 12:24 — 2016-02-09 11:25 — 00128696 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvoglshim32.dll
2016-02-21 10:25 — 2016-02-21 10:25 — 00015351 _____ C:UsersПавелDownloads[rutor.is]V.Tcentre.Vnimaniya.2015.DUAL.BDRip.x264.HELLYW.torrent
2016-02-19 22:52 — 2016-02-19 22:52 — 00028092 _____ C:UsersПавелDownloads[rutor.is]Interny.s14.SATRip_1 (8).torrent
2016-02-19 22:52 — 2016-02-19 22:52 — 00015649 _____ C:UsersПавелDownloads[rutor.is]Red_Comrades_Save_the_Galaxy_-_Reloaded_FitGirl.torrent
2016-02-19 22:52 — 2016-02-19 22:52 — 00015089 _____ C:UsersПавелDownloads[rutor.is]Doping.2015_HDRip_scarabey.org.torrent
2016-02-19 22:52 — 2016-02-19 22:52 — 00012431 _____ C:UsersПавелDownloads[rutor.is]Doping.2015.BDRip-AVC.ExKinoRay.mkv.torrent
2016-02-17 18:43 — 2016-02-17 18:43 — 00024898 _____ C:UsersПавелDownloads[rutor.is]Interny.s14.SATRip.torrent
2016-02-16 19:55 — 2016-02-16 19:55 — 00023421 _____ C:UsersПавелDownloads[rutor.is]Interny (1).torrent
2016-02-15 22:16 — 2016-02-15 22:16 — 00021904 _____ C:UsersПавелDownloads[rutor.is]Interny.s14.SATRip_1 (7).torrent
2016-02-15 22:15 — 2016-02-15 22:15 — 00062301 _____ C:UsersПавелDownloads[rutor.is]TBBT_S09_1080p.torrent
2016-02-15 22:15 — 2016-02-15 22:15 — 00011797 _____ C:UsersПавелDownloads[rutor.is]MaKBET.2015.BDRip._by_Vovan366ExKinoRay.avi.torrent
2016-02-14 19:57 — 2016-02-14 19:57 — 00015776 _____ C:UsersПавелDownloads[rutor.is]Elektra.2005.RUS.BDRip.XviD.AC3.-HQCLUB.torrent
2016-02-14 19:49 — 2016-02-14 19:49 — 00011739 _____ C:UsersПавелDownloads[rutracker.org].t3669853.torrent
2016-02-14 19:48 — 2016-02-14 19:48 — 00011642 _____ C:UsersПавелDownloads[rutracker.org].t3651533.torrent
2016-02-14 16:03 — 2016-02-14 16:03 — 00018570 _____ C:UsersПавелDownloads[rutor.is]Borodach.2016.SATRip-MegaPeer.torrent
2016-02-14 15:57 — 2016-02-14 15:57 — 00017020 _____ C:UsersПавелDownloads[rutracker.org].t5049374.torrent
2016-02-14 15:57 — 2016-02-14 15:57 — 00012365 _____ C:UsersПавелDownloads[rutracker.org].t4179399.torrent
2016-02-14 15:56 — 2016-02-14 15:56 — 00021564 _____ C:UsersПавелDownloads[rutracker.org].t4789604.torrent
2016-02-14 15:56 — 2016-02-14 15:56 — 00016482 _____ C:UsersПавелDownloads[rutracker.org].t4878089.torrent
2016-02-14 15:56 — 2016-02-14 15:56 — 00014741 _____ C:UsersПавелDownloads[rutracker.org].t3707682.torrent
2016-02-14 15:56 — 2016-02-14 15:56 — 00012187 _____ C:UsersПавелDownloads[rutracker.org].t4793825.torrent
2016-02-14 15:55 — 2016-02-14 15:56 — 00019189 _____ C:UsersПавелDownloads[rutracker.org].t4674986.torrent
2016-02-14 15:51 — 2016-02-14 15:51 — 00015411 _____ C:UsersПавелDownloads[rutracker.org].t4674192.torrent
2016-02-14 15:50 — 2016-02-14 15:50 — 00018690 _____ C:UsersПавелDownloads[rutracker.org].t4109762.torrent
2016-02-14 15:50 — 2016-02-14 15:50 — 00017699 _____ C:UsersПавелDownloads[rutracker.org].t4990497.torrent
2016-02-14 15:50 — 2016-02-14 15:50 — 00014980 _____ C:UsersПавелDownloads[rutracker.org].t3705286.torrent
2016-02-14 15:49 — 2016-02-14 15:49 — 00016750 _____ C:UsersПавелDownloads[rutracker.org].t4226918.torrent
2016-02-14 15:49 — 2016-02-14 15:49 — 00006261 _____ C:UsersПавелDownloads[rutracker.org].t5126052.torrent
2016-02-14 15:47 — 2016-02-14 15:47 — 00018935 _____ C:UsersПавелDownloads[rutracker.org].t4139675.torrent
2016-02-14 15:47 — 2016-02-14 15:47 — 00018225 _____ C:UsersПавелDownloads[rutracker.org].t3682942.torrent
2016-02-14 15:46 — 2016-02-14 15:47 — 00017305 _____ C:UsersПавелDownloads[rutracker.org].t4121696.torrent
2016-02-14 15:45 — 2016-02-14 15:45 — 00018191 _____ C:UsersПавелDownloads[rutracker.org].t4017875.torrent
2016-02-14 15:45 — 2016-02-14 15:45 — 00018146 _____ C:UsersПавелDownloads[rutracker.org].t5124588.torrent
2016-02-14 15:45 — 2016-02-14 15:45 — 00017985 _____ C:UsersПавелDownloads[rutracker.org].t3752088.torrent
2016-02-14 15:44 — 2016-02-14 15:44 — 00018161 _____ C:UsersПавелDownloads[rutracker.org].t5124322.torrent
2016-02-14 15:44 — 2016-02-14 15:44 — 00017376 _____ C:UsersПавелDownloads[rutracker.org].t5005508.torrent
2016-02-14 15:41 — 2016-02-14 15:41 — 00019031 _____ C:UsersПавелDownloads[rutracker.org].t5010373.torrent
2016-02-14 14:40 — 2016-02-14 14:40 — 00011351 _____ C:UsersПавелDownloads[rutracker.org].t4892587.torrent
2016-02-14 09:54 — 2016-02-14 09:58 — 22908888 _____ (Malwarebytes ) C:UsersПавелDownloadsmbam-setup-2.2.0.1024 (1).exe
2016-02-14 09:51 — 2016-02-14 09:51 — 00051499 _____ C:UsersПавелDownloadsAddition.txt
2016-02-14 09:50 — 2016-02-22 13:45 — 00017294 _____ C:UsersПавелDownloadsFRST.txt
2016-02-14 09:50 — 2016-02-22 13:45 — 00000000 ____D C:FRST
2016-02-14 09:49 — 2016-02-14 09:49 — 02370560 _____ (Farbar) C:UsersПавелDownloadsFRST64.exe
2016-02-14 09:46 — 2016-02-14 09:46 — 01508352 _____ C:UsersПавелDownloadsadwcleaner_5.033 (1).exe
2016-02-14 09:45 — 2016-02-14 09:45 — 01508352 _____ C:UsersПавелDownloadsadwcleaner_5.033.exe
2016-02-13 14:55 — 2016-02-13 14:55 — 00001010 _____ C:UsersПавелDesktopTotal War. Rome II — Emperor Edition.lnk
2016-02-13 13:51 — 2016-02-13 13:51 — 00401464 _____ C:UsersПавелDownloadsСтругацкий_-_Трудно_быть_богом.mobi
2016-02-12 20:16 — 2016-02-12 20:16 — 00015918 _____ C:UsersПавелDownloads[rutor.is]007.Koordinaty.Skajfoll.2012.DUAL.BDRip-AVC.x26.torrent
2016-02-12 20:14 — 2016-02-12 20:14 — 00020802 _____ C:UsersПавелDownloadst1273684.torrent
2016-02-12 17:55 — 2016-02-12 17:55 — 00019857 _____ C:UsersПавелDownloads[rutor.is]Interny.s14.2016.SATRip.AVC.Files-x.torrent
2016-02-12 17:54 — 2016-02-12 17:54 — 00032019 _____ C:UsersПавелDownloads[rutor.is]Mafija_Igra_na_vyzhivanie_2016_WEB-DL_1080p.torrent
2016-02-12 17:53 — 2016-02-12 17:53 — 00015682 _____ C:UsersПавелDownloads[rutor.is]007.Spektr.2015.DUAL.BDRip.x264.HELLYWOOD.mkv.torrent
2016-02-11 19:39 — 2016-01-31 09:25 — 01951872 _____ (Microsoft Corporation) C:WINDOWSsystem32KernelBase.dll
2016-02-11 19:39 — 2016-01-31 09:25 — 01248896 _____ (Microsoft Corporation) C:WINDOWSsystem32WinTypes.dll
2016-02-11 19:39 — 2016-01-31 09:24 — 01824880 _____ (Microsoft Corporation) C:WINDOWSsystem32ntdll.dll
2016-02-11 19:39 — 2016-01-31 09:23 — 02601160 _____ (Microsoft Corporation) C:WINDOWSsystem32combase.dll
2016-02-11 19:39 — 2016-01-31 09:23 — 01420392 _____ (Microsoft Corporation) C:WINDOWSsystem32msctf.dll
2016-02-11 19:39 — 2016-01-31 09:06 — 01535032 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ntdll.dll
2016-02-11 19:39 — 2016-01-31 09:06 — 01531368 _____ (Microsoft Corporation) C:WINDOWSSysWOW64KernelBase.dll
2016-02-11 19:39 — 2016-01-31 09:06 — 00809336 _____ (Microsoft Corporation) C:WINDOWSSysWOW64WinTypes.dll
2016-02-11 19:39 — 2016-01-31 09:04 — 01811360 _____ (Microsoft Corporation) C:WINDOWSSysWOW64combase.dll
2016-02-11 19:39 — 2016-01-31 09:04 — 01180696 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msctf.dll
2016-02-11 19:39 — 2016-01-31 08:38 — 21873152 _____ (Microsoft Corporation) C:WINDOWSsystem32edgehtml.dll
2016-02-11 19:39 — 2016-01-31 08:34 — 00088064 _____ (Microsoft Corporation) C:WINDOWSsystem32ngckeyenum.dll
2016-02-11 19:39 — 2016-01-31 08:33 — 24593920 _____ (Microsoft Corporation) C:WINDOWSsystem32mshtml.dll
2016-02-11 19:39 — 2016-01-31 08:33 — 00057856 _____ (Microsoft Corporation) C:WINDOWSsystem32IoTAssignedAccessLockFramework.dll
2016-02-11 19:39 — 2016-01-31 08:29 — 11557888 _____ (Microsoft Corporation) C:WINDOWSsystem32twinui.dll
2016-02-11 19:39 — 2016-01-31 08:29 — 00141312 _____ (Microsoft Corporation) C:WINDOWSsystem32rasman.dll
2016-02-11 19:39 — 2016-01-31 08:26 — 06787072 _____ (Microsoft Corporation) C:WINDOWSsystem32Windows.Data.Pdf.dll
2016-02-11 19:39 — 2016-01-31 08:26 — 03793408 _____ (Microsoft Corporation) C:WINDOWSsystem32rdpcorets.dll
2016-02-11 19:39 — 2016-01-31 08:25 — 12504576 _____ (Microsoft Corporation) C:WINDOWSsystem32ieframe.dll
2016-02-11 19:39 — 2016-01-31 08:25 — 02237952 _____ (Microsoft Corporation) C:WINDOWSsystem32wuaueng.dll
2016-02-11 19:39 — 2016-01-31 08:25 — 00366592 _____ (Microsoft Corporation) C:WINDOWSsystem32wuuhext.dll
2016-02-11 19:39 — 2016-01-31 08:25 — 00143872 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversmrxdav.sys
2016-02-11 19:39 — 2016-01-31 08:24 — 00784384 _____ (Microsoft Corporation) C:WINDOWSsystem32wuapi.dll
2016-02-11 19:39 — 2016-01-31 08:24 — 00047616 _____ (Microsoft Corporation) C:WINDOWSsystem32wups.dll
2016-02-11 19:39 — 2016-01-31 08:24 — 00033280 _____ (Microsoft Corporation) C:WINDOWSsystem32wups2.dll
2016-02-11 19:39 — 2016-01-31 08:23 — 00079360 _____ (Microsoft Corporation) C:WINDOWSsystem32rdpudd.dll
2016-02-11 19:39 — 2016-01-31 08:22 — 00680448 _____ (Microsoft Corporation) C:WINDOWSsystem32rasmans.dll
2016-02-11 19:39 — 2016-01-31 08:20 — 02849792 _____ (Microsoft Corporation) C:WINDOWSsystem32wininet.dll
2016-02-11 19:39 — 2016-01-31 08:19 — 01602560 _____ (Microsoft Corporation) C:WINDOWSsystem32urlmon.dll
2016-02-11 19:39 — 2016-01-31 08:19 — 00237056 _____ (Microsoft Corporation) C:WINDOWSsystem32NetworkDesktopSettings.dll
2016-02-11 19:39 — 2016-01-31 08:19 — 00046592 _____ (Microsoft Corporation) C:WINDOWSSysWOW64IoTAssignedAccessLockFramework.dll
2016-02-11 19:39 — 2016-01-31 08:18 — 00771072 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakradiag.dll
2016-02-11 19:39 — 2016-01-31 08:18 — 00147456 _____ (Microsoft Corporation) C:WINDOWSsystem32mtxoci.dll
2016-02-11 19:39 — 2016-01-31 08:17 — 19324928 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mshtml.dll
2016-02-11 19:39 — 2016-01-31 08:17 — 00109056 _____ (Microsoft Corporation) C:WINDOWSsystem32hlink.dll
2016-02-11 19:39 — 2016-01-31 08:16 — 09889280 _____ (Microsoft Corporation) C:WINDOWSSysWOW64twinui.dll
2016-02-11 19:39 — 2016-01-31 08:16 — 00950272 _____ (Microsoft Corporation) C:WINDOWSsystem32kerberos.dll
2016-02-11 19:39 — 2016-01-31 08:14 — 07525376 _____ (Microsoft Corporation) C:WINDOWSsystem32Chakra.dll
2016-02-11 19:39 — 2016-01-31 08:14 — 03588096 _____ (Microsoft Corporation) C:WINDOWSsystem32win32kfull.sys
2016-02-11 19:39 — 2016-01-31 08:13 — 04791808 _____ (Microsoft Corporation) C:WINDOWSsystem32jscript9.dll
2016-02-11 19:39 — 2016-01-31 08:13 — 00123392 _____ (Microsoft Corporation) C:WINDOWSSysWOW64rasman.dll
2016-02-11 19:39 — 2016-01-31 08:13 — 00034816 _____ (Microsoft Corporation) C:WINDOWSsystem32ztrace_maps.dll
2016-02-11 19:39 — 2016-01-31 08:11 — 05156352 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Windows.Data.Pdf.dll
2016-02-11 19:39 — 2016-01-31 08:11 — 00678400 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wuapi.dll
2016-02-11 19:39 — 2016-01-31 08:11 — 00291840 _____ (Microsoft Corporation) C:WINDOWSsystem32microsoft-windows-system-events.dll
2016-02-11 19:39 — 2016-01-31 08:11 — 00162304 _____ (Microsoft Corporation) C:WINDOWSSysWOW64msorcl32.dll
2016-02-11 19:39 — 2016-01-31 08:07 — 18802176 _____ (Microsoft Corporation) C:WINDOWSSysWOW64edgehtml.dll
2016-02-11 19:39 — 2016-01-31 08:06 — 02316800 _____ (Microsoft Corporation) C:WINDOWSSysWOW64wininet.dll
2016-02-11 19:39 — 2016-01-31 08:05 — 01380864 _____ (Microsoft Corporation) C:WINDOWSSysWOW64urlmon.dll
2016-02-11 19:39 — 2016-01-31 08:05 — 00574464 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakradiag.dll
2016-02-11 19:39 — 2016-01-31 08:05 — 00118272 _____ (Microsoft Corporation) C:WINDOWSSysWOW64mtxoci.dll
2016-02-11 19:39 — 2016-01-31 08:04 — 00100352 _____ (Microsoft Corporation) C:WINDOWSSysWOW64hlink.dll
2016-02-11 19:39 — 2016-01-31 08:02 — 03580416 _____ (Microsoft Corporation) C:WINDOWSSysWOW64jscript9.dll
2016-02-11 19:39 — 2016-01-31 08:02 — 00768000 _____ (Microsoft Corporation) C:WINDOWSSysWOW64kerberos.dll
2016-02-11 19:39 — 2016-01-31 08:00 — 11263488 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ieframe.dll
2016-02-11 19:39 — 2016-01-31 07:59 — 05457408 _____ (Microsoft Corporation) C:WINDOWSSysWOW64Chakra.dll
2016-02-11 19:39 — 2016-01-31 07:58 — 00029696 _____ (Microsoft Corporation) C:WINDOWSSysWOW64ztrace_maps.dll
2016-02-10 22:25 — 2016-02-13 12:21 — 00000000 ____D C:WINDOWStwain_64
2016-02-10 22:12 — 2016-02-10 22:12 — 00011940 _____ C:UsersПавелDownloads[rutor.is]VueScan_Pro_9.5.26.torrent
2016-02-10 22:08 — 2016-02-10 22:08 — 00004797 _____ C:UsersПавелDownloadsVueScan_Pro_9.0.88_x32-x64-2012-odnim-torrent-faylom.torrent
2016-02-10 22:05 — 2016-02-10 22:05 — 09615760 _____ (Hamrick Software) C:UsersПавелDownloadsvuex6495 (3).exe
2016-02-10 22:05 — 2016-02-10 22:05 — 09615760 _____ (Hamrick Software) C:UsersПавелDownloadsvuex6495 (2).exe
2016-02-10 21:53 — 2016-02-11 19:24 — 09615760 _____ (Hamrick Software) C:UsersПавелDownloadsvuex6495 (1).exe
2016-02-10 21:50 — 2016-02-10 21:50 — 09615760 _____ (Hamrick Software) C:UsersПавелDownloadsvuex6495.exe
2016-02-10 21:17 — 2016-02-10 21:17 — 00003786 _____ C:WINDOWSSystem32TasksKMSAutoNet
2016-02-10 21:17 — 2016-02-10 21:17 — 00000000 ____D C:UsersВсе пользователиKMSAutoS
2016-02-10 21:17 — 2016-02-10 21:17 — 00000000 ____D C:ProgramDataKMSAutoS
2016-02-10 21:14 — 2016-02-10 21:17 — 00000000 ____D C:UsersПавелAppDataLocalMSfree Inc
2016-02-10 21:12 — 2016-02-10 21:12 — 00004266 _____ C:UsersПавелDownloads[rutor.is]KMSAuto_Net_2015_v1.4.2_Portable.torrent
2016-02-10 19:11 — 2016-02-10 19:11 — 12381888 _____ C:UsersПавелDownloadsULM_S-0721-P-AR (1).pdf
2016-02-10 19:10 — 2016-02-10 19:10 — 00485772 _____ C:UsersПавелDownloadsЮлмарт_Софийская_РЦИЗ_КР_Семенова Ольга — Лист — 43 — Общий вид (1).pdf
2016-02-10 19:09 — 2016-02-10 19:09 — 04521490 _____ C:UsersПавелDownloadsULM_S-0721-P-KR.pdf
2016-02-10 19:08 — 2016-02-10 19:08 — 08402671 _____ C:UsersПавелDownloadsULM_S-0721-P-KR-Prilozhenie_1_Raschety.pdf
2016-02-10 19:07 — 2016-02-10 19:07 — 00485772 _____ C:UsersПавелDownloadsЮлмарт_Софийская_РЦИЗ_КР_Семенова Ольга — Лист — 43 — Общий вид.pdf
2016-02-10 19:05 — 2016-02-10 19:05 — 12381888 _____ C:UsersПавелDownloadsULM_S-0721-P-AR.pdf
2016-02-10 18:30 — 2016-02-22 09:29 — 00000000 ____D C:UsersПавелAppDataLocalLowuTorrent
2016-02-10 18:13 — 2016-02-10 18:13 — 00019050 _____ C:UsersПавелDownloads[rutor.is]Interny.s14.SATRip_1 (6).torrent
2016-02-09 18:44 — 2016-02-09 18:44 — 00020044 _____ C:UsersПавелDownloads[rutor.is]Grand_Theft_Auto_III_hq.torrent
2016-02-09 18:43 — 2016-02-09 18:43 — 00011708 _____ C:UsersПавелDownloads[rutor.is]Shef.Adam.Dzhons.2015.DUAL.BDRip.x264.HELLYWOOD.torrent
2016-02-09 18:42 — 2016-02-09 18:42 — 00017533 _____ C:UsersПавелDownloads[rutor.is]Interny.s14.SATRip_1 (5).torrent
2016-02-08 18:33 — 2016-02-08 18:33 — 00015856 _____ C:UsersПавелDownloads[rutor.is]Interny.s14.SATRip_1 (4).torrent
2016-02-06 21:04 — 2016-02-06 21:04 — 00016347 _____ C:UsersПавелDownloads[rutracker.org].t5010474.torrent
2016-02-06 15:50 — 2016-02-06 15:50 — 00000214 _____ C:WINDOWSTasksCreateExplorerShellUnelevatedTask.job
2016-02-05 18:45 — 2016-02-05 18:45 — 00043444 _____ C:UsersПавелDownloads[rutor.is]XCOM_2_FitGirl_Repack_RuTor.torrent
2016-02-04 19:12 — 2016-02-04 19:12 — 00014339 _____ C:UsersПавелDownloads[rutor.is]Interny.s14.SATRip_1 (3).torrent
2016-02-02 18:34 — 2016-02-02 18:34 — 00015367 _____ C:UsersПавелDownloads[rutor.is]Shpionskiy.Most.2015.DUAL.BDRip.x264.HELLYWOOD..torrent
2016-02-02 18:34 — 2016-02-02 18:34 — 00011425 _____ C:UsersПавелDownloads[rutor.is]Interny.s14.SATRip_1 (2).torrent
2016-02-01 22:00 — 2016-02-01 22:00 — 00004353 _____ C:UsersПавелDownloads[rutor.is]Ivan.i.VoLLK.3.2O16.O.WEB-DLRip.1O8Op.mkv.torrent
2016-02-01 18:50 — 2016-02-01 18:50 — 00014069 _____ C:UsersПавелDownloads[rutor.is]Bjetmen_Durnaja_KrovSaint_SoundViruse_ProjectBl.torrent
2016-01-31 20:55 — 2016-01-31 20:55 — 00015243 _____ C:UsersПавелDownloads[rutor.is]Nedetskoe.kino.2001.Triple.WEBDL.mkv.torrent
2016-01-31 17:19 — 2016-01-31 17:19 — 00018176 _____ C:UsersПавелDownloads[rutor.is]The_Witness_by_xatab.torrent
2016-01-31 17:06 — 2016-01-31 17:06 — 00015628 _____ C:UsersПавелDownloads[rutor.is]Strana_chudes.2015.DVDRip.avi.torrent
2016-01-31 11:38 — 2016-01-31 11:38 — 00020869 _____ C:UsersПавелDownloads[rutor.is]The.Age.Of.Adaline.2015.D.HDRip.AVC.ExKinoRay.m.torrent
2016-01-29 21:52 — 2016-01-29 21:52 — 00100211 _____ C:UsersПавелDownloads[torrent-film.biz]_397373.torrent
2016-01-29 19:19 — 2016-01-23 06:31 — 01924152 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvdispco6436175.dll
2016-01-29 19:19 — 2016-01-23 06:31 — 01571776 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvdispgenco6436175.dll
2016-01-29 19:02 — 2015-12-18 09:10 — 00099472 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvaudcap64v.dll
2016-01-29 19:02 — 2015-12-18 09:10 — 00090768 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvaudcap32v.dll
2016-01-29 18:39 — 2016-01-29 18:39 — 01507840 _____ C:UsersПавелDownloadsadwcleaner_5.031.exe
2016-01-29 18:39 — 2016-01-29 18:39 — 01507840 _____ C:UsersПавелDownloadsadwcleaner_5.031 (1).exe
2016-01-28 18:11 — 2016-01-28 18:11 — 00015231 _____ C:UsersПавелDownloads[rutor.is]Interny.s14.SATRip_1 (1).torrent
2016-01-27 18:50 — 2016-01-27 18:50 — 00012314 _____ C:UsersПавелDownloads[rutor.is]Interny.s14.SATRip_1.torrent
2016-01-25 20:40 — 2016-01-25 20:40 — 00011820 _____ C:UsersПавелDownloads[rutor.is]Interny.torrent
2016-01-25 20:39 — 2016-01-25 20:40 — 00011574 _____ C:UsersПавелDownloads[rutor.is]Samyy.luchshiy.den.2015.WEB-DLRip.avi.torrent
2016-01-24 16:29 — 2016-01-24 16:29 — 00011949 _____ C:UsersПавелDownloads[rutor.is]Skauty.Protiv.Zombi.2015.DUAL.BDRip.x264.HELLYW (1).torrent
2016-01-24 16:27 — 2016-01-24 16:27 — 00011949 _____ C:UsersПавелDownloads[rutor.is]Skauty.Protiv.Zombi.2015.DUAL.BDRip.x264.HELLYW.torrent
2016-01-24 00:35 — 2016-01-24 00:35 — 02023687 _____ C:WINDOWSSysWOW64x11modGeForce GTX 780glg2tc6080w256l4.bin==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-02-22 13:45 — 2015-08-12 19:22 — 00000000 ____D C:UsersПавелAppDataRoaminguTorrent
2016-02-22 13:10 — 2014-09-09 19:16 — 00000000 ____D C:UsersПавелAppDataRoamingfoobar2000
2016-02-22 12:55 — 2015-02-21 21:18 — 00000896 _____ C:WINDOWSTasksAdobe Flash Player Updater.job
2016-02-22 09:32 — 2015-08-11 23:00 — 01820548 _____ C:WINDOWSsystem32PerfStringBackup.INI
2016-02-22 09:32 — 2015-07-10 19:29 — 00798250 _____ C:WINDOWSsystem32perfh019.dat
2016-02-22 09:32 — 2015-07-10 19:29 — 00155678 _____ C:WINDOWSsystem32perfc019.dat
2016-02-22 09:32 — 2015-07-10 14:02 — 00000000 ____D C:WINDOWSINF
2016-02-22 09:30 — 2013-12-12 19:47 — 00000000 ____D C:UsersПавелAppDataRoamingSkype
2016-02-22 09:30 — 2013-12-09 17:50 — 00004024 _____ C:WINDOWSSystem32TasksUser_Feed_Synchronization-{02A460FB-EF8B-4971-8D70-F457E5CBEEDF}
2016-02-22 09:26 — 2015-08-11 22:47 — 00000000 ____D C:UsersВсе пользователиNVIDIA
2016-02-22 09:26 — 2015-08-11 22:47 — 00000000 ____D C:ProgramDataNVIDIA
2016-02-22 09:26 — 2015-07-10 15:21 — 00000006 ____H C:WINDOWSTasksSA.DAT
2016-02-22 09:25 — 2015-08-11 22:47 — 00000000 _____ C:WINDOWSsystem32Driverslvuvc.hs
2016-02-22 00:57 — 2015-07-10 12:05 — 00131072 ___SH C:WINDOWSsystem32configBBI
2016-02-21 23:22 — 2015-07-10 14:04 — 00000000 ____D C:WINDOWSAppReadiness
2016-02-21 12:25 — 2015-12-25 21:22 — 00000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsNVIDIA Corporation
2016-02-21 12:25 — 2015-08-11 22:47 — 00000000 ____D C:UsersВсе пользователиNVIDIA Corporation
2016-02-21 12:25 — 2015-08-11 22:47 — 00000000 ____D C:ProgramDataNVIDIA Corporation
2016-02-21 12:21 — 2015-12-25 21:22 — 00000000 ____D C:UsersПавелAppDataLocalNVIDIA
2016-02-20 23:04 — 2015-07-10 14:04 — 00000000 ___HD C:Program FilesWindowsApps
2016-02-18 23:49 — 2015-12-25 21:02 — 00002457 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsAcrobat Reader DC.lnk
2016-02-18 23:36 — 2013-12-12 19:47 — 00000000 ____D C:UsersВсе пользователиSkype
2016-02-18 23:36 — 2013-12-12 19:47 — 00000000 ____D C:ProgramDataSkype
2016-02-17 18:55 — 2015-07-10 14:04 — 00000000 ____D C:WINDOWSrescache
2016-02-17 09:40 — 2015-12-25 21:22 — 01903344 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvspcap64.dll
2016-02-17 09:40 — 2015-12-25 21:22 — 01756424 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvspbridge64.dll
2016-02-17 09:40 — 2015-12-25 21:22 — 01571624 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvspcap.dll
2016-02-17 09:40 — 2015-12-25 21:22 — 01316184 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvspbridge.dll
2016-02-17 09:40 — 2015-12-25 21:22 — 00112216 _____ C:WINDOWSsystem32NvRtmpStreamer64.dll
2016-02-14 10:06 — 2015-07-10 14:04 — 00000000 ____D C:WINDOWSLiveKernelReports
2016-02-14 09:46 — 2015-12-31 16:00 — 00000000 ____D C:UsersПавелAppDataLocalCrashDumps
2016-02-13 14:31 — 2013-12-23 19:10 — 00000000 ____D C:UsersПавелAppDataLocalApple Computer
2016-02-13 13:50 — 2015-08-11 21:44 — 00000000 ____D C:UsersПавелAppDataRoamingMPC-HC
2016-02-13 01:32 — 2015-07-10 19:32 — 00000000 ____D C:Program FilesWindows Journal
2016-02-11 19:42 — 2015-07-31 18:12 — 00000000 ____D C:WINDOWSsystem32MRT
2016-02-11 19:42 — 2015-07-10 13:55 — 00000000 ____D C:WINDOWSCbsTemp
2016-02-11 19:41 — 2015-07-31 18:12 — 146614896 _____ (Microsoft Corporation) C:WINDOWSsystem32MRT.exe
2016-02-10 19:07 — 2013-12-09 17:45 — 00000000 ____D C:UsersПавелAppDataLocalPackages
2016-02-10 09:27 — 2015-08-05 03:40 — 12478528 _____ (NVIDIA Corporation) C:WINDOWSsystem32Driversnvlddmkm.sys
2016-02-09 11:25 — 2015-12-25 21:15 — 03231544 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvapi.dll
2016-02-09 11:25 — 2015-08-05 03:40 — 19779648 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvwgf2umx.dll
2016-02-09 11:25 — 2015-08-05 03:40 — 14115136 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvd3dum.dll
2016-02-09 11:25 — 2015-08-05 03:40 — 03649576 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvapi64.dll
2016-02-09 11:25 — 2015-07-23 04:02 — 00035832 _____ C:WINDOWSsystem32nvinfo.pb
2016-02-09 08:29 — 2015-12-25 21:16 — 00530368 _____ (NVIDIA Corporation) C:WINDOWSsystem32nv3dappshext.dll
2016-02-09 08:29 — 2015-12-25 21:16 — 00083512 _____ (NVIDIA Corporation) C:WINDOWSsystem32nv3dappshextr.dll
2016-02-09 08:29 — 2015-08-11 22:47 — 06368824 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvcpl.dll
2016-02-09 08:29 — 2015-08-11 22:47 — 02992064 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvsvc64.dll
2016-02-09 08:29 — 2015-08-11 22:47 — 02561472 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvsvcr.dll
2016-02-09 08:29 — 2015-08-11 22:47 — 01263040 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvvsvc.exe
2016-02-09 08:29 — 2015-08-11 22:47 — 00392128 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvmctray.dll
2016-02-09 08:29 — 2015-08-11 22:47 — 00071224 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvshext.dll
2016-02-07 05:05 — 2015-08-11 22:50 — 00000000 ____D C:UsersПавел
2016-02-06 17:58 — 2015-08-11 22:47 — 06154909 _____ C:WINDOWSsystem32nvcoproc.bin
2016-02-05 19:25 — 2015-08-11 23:02 — 00002447 _____ C:UsersПавелAppDataRoamingMicrosoftWindowsStart MenuProgramsOneDrive.lnk
2016-02-05 19:25 — 2015-08-11 23:02 — 00000000 ___RD C:UsersПавелOneDrive
2016-02-03 19:54 — 2015-05-30 15:09 — 00000000 ____D C:UsersПавелDesktopработа
2016-02-03 01:47 — 2015-07-10 14:06 — 00828920 _____ (Adobe Systems Incorporated) C:WINDOWSSysWOW64FlashPlayerApp.exe
2016-02-03 01:47 — 2015-07-10 14:06 — 00176632 _____ (Adobe Systems Incorporated) C:WINDOWSSysWOW64FlashPlayerCPLApp.cpl
2016-01-29 19:19 — 2015-08-11 22:47 — 00000000 ____D C:Program FilesNVIDIA Corporation
2016-01-29 18:47 — 2015-11-25 18:49 — 00000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsSeagate
2016-01-29 18:40 — 2015-12-06 10:32 — 00000000 ____D C:AdwCleaner==================== Files in the root of some directories =======
2014-09-22 11:32 — 2014-09-22 11:33 — 0000661 _____ () C:UsersПавелAppDataRoamingMPQEditor.ini
2014-04-20 13:19 — 2014-04-21 21:19 — 0000080 _____ () C:UsersПавелAppDataRoamingWB.CFG
2015-08-11 22:47 — 2015-08-11 22:47 — 0000000 ____H () C:ProgramDataDP45977C.lfl
2013-12-09 19:34 — 2013-12-09 19:34 — 0000153 _____ () C:ProgramDataMicrosoft.SqlServer.Compact.351.32.bcSome files in TEMP:
====================
C:UsersПавелAppDataLocalTempnvSCPAPI.dll
C:UsersПавелAppDataLocalTempnvSCPAPI64.dll
C:UsersПавелAppDataLocalTempnvStInst.exe
C:UsersПавелAppDataLocalTempsqlite3.dll
C:UsersПавелAppDataLocalTempvsdel.exe==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:WINDOWSsystem32winlogon.exe => File is digitally signed
C:WINDOWSsystem32wininit.exe => File is digitally signed
C:WINDOWSexplorer.exe => File is digitally signed
C:WINDOWSSysWOW64explorer.exe => File is digitally signed
C:WINDOWSsystem32svchost.exe => File is digitally signed
C:WINDOWSSysWOW64svchost.exe => File is digitally signed
C:WINDOWSsystem32services.exe => File is digitally signed
C:WINDOWSsystem32User32.dll => File is digitally signed
C:WINDOWSSysWOW64User32.dll => File is digitally signed
C:WINDOWSsystem32userinit.exe => File is digitally signed
C:WINDOWSSysWOW64userinit.exe => File is digitally signed
C:WINDOWSsystem32rpcss.dll => File is digitally signed
C:WINDOWSsystem32dnsapi.dll => File is digitally signed
C:WINDOWSSysWOW64dnsapi.dll => File is digitally signed
C:WINDOWSsystem32Driversvolsnap.sys => File is digitally signedLastRegBack: 2016-02-20 23:13
==================== End of FRST.txt ============================
Здравствуйте, добро пожаловать на Spyware-ru форум.
Запустите программу Блокнот и вставьте в открытое окно следующий текст
CloseProcesses:
HKUS-1-5-21-2409177678-848065757-1350060629-1001...PoliciesExplorer: []
BHO: Визуальные закладки -> {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} -> No File
BHO-x32: Визуальные закладки -> {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} -> No File
Task: {3A6091D6-F941-4050-8568-7F87192F1432} - System32TasksCTF Host => C:UsersПавелAppDataRoamingSkypeCtfhostctfhost.exe
Task: {3CA930FC-CCF3-4641-B906-BE0F2D1766AB} - System32TasksDoctor WebDr.Web Daily scan => C:Program FilesDrWebdwscanner.exe
Task: {463A8AC1-D926-407C-AE36-1699BC92BFBB} - System32TasksSteam-S-1-8-22-9865GUI => C:UsersПавелAppDataRoamingSteamReversedsteam.exe <==== ATTENTION
Task: {554E8C04-6B19-4B8C-92DF-E02E81FC6A1A} - MicrosoftWindowsSetupGWXTriggersMachineUnlock-5d -> No File <==== ATTENTION
Task: {5D2482A5-9C46-446C-A1B2-BCBE678E1B2C} - MicrosoftWindowsSetupGWXTriggersOutOfSleep-5d -> No File <==== ATTENTION
Task: {6ACA9B23-D8BC-4207-9731-4F3AA24B8C05} - MicrosoftWindowsSetupgwxrefreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {73303C10-A115-4D6B-81F6-13A559D0D74C} - MicrosoftWindowsSetupGWXTriggersLogon-5d -> No File <==== ATTENTION
Task: {7376C8CE-88A5-41FB-84A4-EE3AAD90792C} - MicrosoftWindowsSetupGWXTriggersrefreshgwxconfig-B -> No File <==== ATTENTION
Task: {7C1B0E12-E4FE-440F-9A52-56BC25067E9F} - MicrosoftWindowsSetupgwxlaunchtrayprocess -> No File <==== ATTENTION
Task: {A4BEE24B-8891-4038-80D2-B790CC0CCE4A} - MicrosoftOfficeOffice 15 Subscription Heartbeat -> No File <==== ATTENTION
Task: {A9B69E81-9138-4306-A9FF-EA239005A979} - MicrosoftWindowsSetupgwxrefreshgwxconfig -> No File <==== ATTENTION
Task: {B43689EC-7E73-44E5-9A58-7C977813BFAC} - MicrosoftWindowsSetupGWXTriggersTelemetry-4xd -> No File <==== ATTENTION
Task: {BD309E7D-8530-4E55-9375-3F800C37D68B} - MicrosoftWindowsSetupGWXTriggersTime-5d -> No File <==== ATTENTION
Task: {C98E13FE-23B1-467C-BCA3-05CC97355112} - MicrosoftWindowsSetupgwxrefreshgwxcontent -> No File <==== ATTENTION
Task: {C99E50CE-AE41-417C-8F12-C448994E84B1} - MicrosoftWindowsSetupGWXTriggersOutOfIdle-5d -> No File <==== ATTENTION
Task: {EAD62785-1A97-4021-BAF8-1B291CA68F88} - System32TasksMS => hxxp://gangnamgame.org
Task: C:WINDOWSTasksCreateExplorerShellUnelevatedTask.job => C:WINDOWSexplorer.exe
EmptyTemp:
Reboot:Сохраните полученный файл в папку где находится программа FRST/FRST64 под именем fixlist
Запустите программу FRST и нажмите кнопку Fix. В процессе работы программы компьютер будет перезагружен.
Когда программа закончит работу появиться сообщение «Fix completed». Нажмите OK.
Откроется блокнот с содержимым файла fixlog.txt. Вставьте содержимое этого файла в ваш ответ.Кроме этого:
1. выполните новую проверку программой FRST и оба её лога прикрепите к вашему ответу.
2. Скачайте AdwCleaner. Запустите программу, кликнув по ней правой клавишей мыши и выбрав «Запустить от имени администратора». Нажмите кнопку «Сканировать» и дождитесь окончания процесса. Когда сканирование закончиться, закройте программу и найдите отчет о сканировании. Он находиться в папке C:AdwCleaner и имеет имя AdwCleaner[S1]. Содержимое этого отчета так же вставьте в ваше ответное сообщение. Если отчёт большой, то можете его прикрепить к сообщению.Спасибо большое за оперативный ответ!
Выполнил все по Вашей инструкции.
# AdwCleaner v5.027 — Отчёт создан 31/12/2015 в 17:56:49
# Обновлено 30/12/2015 by Xplode
# База данных : 2015-12-30.1 [Сервер]
# Операционная система : Windows 10 Pro (x64)
# Пользователь : Павел — PASHOK
# Запущено из : C:UsersПавелDownloadsadwcleaner_5.027.exe
# Настройка : Сканировать
# помощь : http://toolslib.net/forum***** [ Службы ] *****
Служба Найдено : WinDivert1.1
***** [ Папки ] *****
***** [ Файлы ] *****
***** [ DLL ] *****
***** [ Ярлыки ] *****
***** [ Запланированные задания ] *****
***** [ Реестр ] *****
***** [ Веб браузеры ] *****
########## EOF — C:AdwCleanerAdwCleaner[S2].txt — [801 байт] ##########
# AdwCleaner v5.036 — Отчёт создан 23/02/2016 в 10:16:22
# Обновлено 22/02/2016 by Xplode
# База данных : 2016-02-22.2 [Сервер]
# Операционная система : Windows 10 Pro (x64)
# Пользователь : Павел — PASHOK
# Запущено из : C:UsersПавелDownloadsadwcleaner_5.036.exe
# Настройка : Сканировать
# помощь : http://toolslib.net/forum***** [ Службы ] *****
***** [ Папки ] *****
***** [ Файлы ] *****
Файл Найдено : C:UsersПавелAppDataRoamingMozillaFirefoxProfilesnahd6ha2.defaultextensionsstagedvb@yandex.ru.json
Файл Найдено : C:UsersПавелAppDataRoamingMozillaFirefoxProfilesnahd6ha2.defaultextensionsstagedyasearch@yandex.ru.json***** [ DLL ] *****
***** [ Ярлыки ] *****
***** [ Запланированные задания ] *****
***** [ Реестр ] *****
***** [ Веб браузеры ] *****
*************************
C:AdwCleanerAdwCleaner[C1].txt — [5426 байт] — [06/12/2015 10:33:02]
C:AdwCleanerAdwCleaner[C2].txt — [996 байт] — [31/12/2015 17:57:50]
C:AdwCleanerAdwCleaner[S1].txt — [5054 байт] — [06/12/2015 10:32:32]
C:AdwCleanerAdwCleaner[S2].txt — [2185 байт] — [31/12/2015 17:56:49]
C:AdwCleanerAdwCleaner[S3].txt — [1266 байт] — [29/01/2016 18:40:12]########## EOF — C:AdwCleanerAdwCleaner[S2].txt — [2337 байт] ##########
Как сейчас работает компьютер ? Есть ли проблемы.
Похоже у вас нет антивируса, вам необходимо его установить.
Прочитайте эту статью Какой лучший антивирус ? Как выбрать антивирус ? и выберите тот, который вам больше подходит.
Хороший вариант бесплатный антивирус Касперского (есть сейчас и такой), Панда Антивирус.
- Для ответа в этой теме необходимо авторизоваться.
