﻿Лог утилиты random's system information tool 1.16(автор: random/random)
Run by Sergej at 2018-06-04 16:13:20
Microsoft Windows 7 Корпоративная  Service Pack 1
Системный раздел C: размер 54 GB (44%) Свободно 123 GB
Total RAM: 5612 MB (64% free)
X64

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 16:13:22, on 04.06.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.19003)

FIREFOX: 60.0.1 (x86 ru)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe
C:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe
C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
C:\Windows\SysWOW64\rserver30\RServer3.exe
C:\Program Files (x86)\Radmin VPN\RvControlSvc.exe
C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
C:\Program Files (x86)\Radmin VPN\RvRvpnGui.exe
C:\Windows\SysWOW64\rserver30\FamItrfc.Exe
C:\Windows\SysWOW64\rserver30\FamItrfc.Exe
C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe
C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe
C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe
C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe
C:\Windows\SysWOW64\rserver30\FamItrf2.Exe
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
D:\Test_systems\AutoLogger.exe
D:\Test_systems\AutoLogger\AVZ\avz.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe
C:\Program Files (x86)\Opera\53.0.2907.68\opera_crashreporter.exe
C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe
C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe
C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe
C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe
C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe
C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe
C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe
C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe
C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe
C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe
C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe
C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe
C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe
D:\Test_systems\AutoLogger\RSIT\Sergej_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll
O2 - BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: SafeMon Class - {B69F34DD-F0F9-42DC-9EDD-957187DA688D} - C:\Program Files (x86)\360\Total Security\safemon\safemon.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [QHSafeTray] "C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe" /start
O4 - HKLM\..\Run: [RadminVPN] "C:\Program Files (x86)\Radmin VPN\RvRvpnGui.exe" /minimized
O4 - HKCU\..\Run: [Skype for Desktop] C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: TeamViewer.lnk = C:\Program Files (x86)\TeamViewer\TeamViewer.exe
O4 - Global Startup: TVR Scheduler.lnk = C:\Program Files (x86)\honestech\honestech TVR 2.5\scheduleTV.exe
O8 - Extra context menu item: &Отправить в OneNote - res://C:\PROGRA~2\MICROS~1\Office15\ONBttnIE.dll/105
O8 - Extra context menu item: &Экспорт в Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office15\EXCEL.EXE/3000
O9 - Extra button: Отправить в OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Отправить в OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Звонок щелчком Lync - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Звонок щелчком Lync - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: &Связанные заметки OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Связанные заметки OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Adobe Genuine Monitor Service (AGMService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Служба Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Служба Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Сервис iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NIHardwareService - Native Instruments GmbH - C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: 360 Total Security (QHActiveDefense) - QIHU 360 SOFTWARE CO. LIMITED - C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Radmin Server V3 (RServer3) - Famatech Corp. - C:\Windows\SysWOW64\rserver30\RServer3.exe
O23 - Service: Radmin VPN Control Service (RvControlSvc) - Famatech Corp. - C:\Program Files (x86)\Radmin VPN\RvControlSvc.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SW Update Service (SWUpdateService) - Samsung Electronics Co., Ltd. - C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
O23 - Service: System Explorer Service (SystemExplorerHelpService) - Mister Group - C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe
O23 - Service: TeamViewer 12 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12380 bytes

====== Список процессов ======

C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe"
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe" /watch
C:\Windows\system32\winlogon.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe"
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe"
"C:\Windows\SysWOW64\rserver30\RServer3.exe" /service
C:\Windows\system32\taskhost.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Radmin VPN\RvControlSvc.exe" /service
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe" /start
"C:\Program Files (x86)\Radmin VPN\RvRvpnGui.exe" /minimized
"C:\Windows\SysWOW64\rserver30\FamItrfc.Exe"
"C:\Windows\SysWOW64\rserver30\FamItrfc.Exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe" 
"C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe" 
"C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe" 
"C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe" 
"C:\Windows\SysWOW64\rserver30\FamItrf2.Exe"
"C:\Program Files\Samsung\S Agent\CommonAgent.exe" 
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\Windows\system32\sppsvc.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"D:\Test_systems\AutoLogger.exe" 
"D:\Test_systems\AutoLogger\AVZ\avz.exe" Script=AVZ\GeneralScript.txt HiddenMode=0
"C:\Program Files\Internet Explorer\IEXPLORE.EXE" http://google.ru
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2944 CREDAT:275457 /prefetch:2
"C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe" -noautoupdate --ran-launcher --flag-switches-begin --disable-features=SharedArrayBuffer --flag-switches-end --use-turbo2 --enable-quic --lowered-browser -- http://google.ru/
"C:\Program Files (x86)\Opera\53.0.2907.68\opera_crashreporter.exe" -noautoupdate --ran-launcher --flag-switches-begin --disable-features=SharedArrayBuffer --flag-switches-end --use-turbo2 --enable-quic --lowered-browser --crash-reporter-parent-id=1052 -- http://google.ru/
"C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe" --type=gpu-process --field-trial-handle=1256,14046703878792434837,14668787118979457986,131072 --disable-features=SharedArrayBuffer --crash-reporter-pid=3144 --gpu-preferences=KAAAAAAAAACAAwCAAQAAAAAAAAAAAGAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --crash-reporter-pid=3144 --service-request-channel-token=D60622B4192D36D1E50F64678DDBA5CB --mojo-platform-channel-handle=1280 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe" --type=renderer --field-trial-handle=1256,14046703878792434837,14668787118979457986,131072 --disable-features=SharedArrayBuffer --service-pipe-token=5C678F5910B39C5BC219160D0635C182 --lang=ru --extension-process --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36 OPR/53.0.2907.68 (Edition 360-1)" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --crash-reporter-pid=3144 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=5C678F5910B39C5BC219160D0635C182 --renderer-client-id=3 --mojo-platform-channel-handle=2060 /prefetch:1
"C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe" --type=renderer --field-trial-handle=1256,14046703878792434837,14668787118979457986,131072 --disable-features=SharedArrayBuffer --service-pipe-token=32FE4EDE14EAC0C0FAFF194826A32B81 --lang=ru --extension-process --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36 OPR/53.0.2907.68 (Edition 360-1)" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --crash-reporter-pid=3144 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=32FE4EDE14EAC0C0FAFF194826A32B81 --renderer-client-id=4 --mojo-platform-channel-handle=2364 /prefetch:1
"C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe" --type=renderer --field-trial-handle=1256,14046703878792434837,14668787118979457986,131072 --disable-features=SharedArrayBuffer --service-pipe-token=B290BACC23387EFA77F4F7B36197DDD0 --lang=ru --extension-process --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36 OPR/53.0.2907.68 (Edition 360-1)" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --crash-reporter-pid=3144 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=B290BACC23387EFA77F4F7B36197DDD0 --renderer-client-id=5 --mojo-platform-channel-handle=2420 /prefetch:1
"C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe" --type=renderer --field-trial-handle=1256,14046703878792434837,14668787118979457986,131072 --disable-features=SharedArrayBuffer --service-pipe-token=A7324DA637DC3544A1423D1F45470D05 --lang=ru --extension-process --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36 OPR/53.0.2907.68 (Edition 360-1)" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --crash-reporter-pid=3144 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=A7324DA637DC3544A1423D1F45470D05 --renderer-client-id=6 --mojo-platform-channel-handle=2484 /prefetch:1
"C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe" --type=renderer --field-trial-handle=1256,14046703878792434837,14668787118979457986,131072 --disable-features=SharedArrayBuffer --service-pipe-token=9B3DE5B61F808211115B05FA37D6A38E --lang=ru --extension-process --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36 OPR/53.0.2907.68 (Edition 360-1)" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --crash-reporter-pid=3144 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=9B3DE5B61F808211115B05FA37D6A38E --renderer-client-id=7 --mojo-platform-channel-handle=2516 /prefetch:1
\\?\C:\Windows\system32\wbem\WMIADAP.EXE
"C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe" --type=renderer --field-trial-handle=1256,14046703878792434837,14668787118979457986,131072 --disable-features=SharedArrayBuffer --service-pipe-token=370EA0D59A116A29F726AA9B5D4F02CD --lang=ru --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36 OPR/53.0.2907.68 (Edition 360-1)" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --crash-reporter-pid=3144 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=370EA0D59A116A29F726AA9B5D4F02CD --renderer-client-id=12 --mojo-platform-channel-handle=4024 /prefetch:1
"C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe" --type=renderer --field-trial-handle=1256,14046703878792434837,14668787118979457986,131072 --disable-features=SharedArrayBuffer --service-pipe-token=D369439CBF970785A7C717FB65E27BC6 --lang=ru --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36 OPR/53.0.2907.68 (Edition 360-1)" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --crash-reporter-pid=3144 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=D369439CBF970785A7C717FB65E27BC6 --renderer-client-id=15 --mojo-platform-channel-handle=4336 /prefetch:1
"C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe" --type=renderer --field-trial-handle=1256,14046703878792434837,14668787118979457986,131072 --disable-features=SharedArrayBuffer --service-pipe-token=F3F4C8D59E16BC9BC98A6BAD70153EA7 --lang=ru --extension-process --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36 OPR/53.0.2907.68 (Edition 360-1)" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --crash-reporter-pid=3144 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=F3F4C8D59E16BC9BC98A6BAD70153EA7 --renderer-client-id=16 --mojo-platform-channel-handle=5068 /prefetch:1
"C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe" --type=renderer --field-trial-handle=1256,14046703878792434837,14668787118979457986,131072 --disable-features=SharedArrayBuffer --service-pipe-token=60E64F4B3484DF177D55BA009BC08244 --lang=ru --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36 OPR/53.0.2907.68 (Edition 360-1)" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --crash-reporter-pid=3144 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=60E64F4B3484DF177D55BA009BC08244 --renderer-client-id=17 --mojo-platform-channel-handle=5668 /prefetch:1
"C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe" --type=renderer --field-trial-handle=1256,14046703878792434837,14668787118979457986,131072 --disable-features=SharedArrayBuffer --service-pipe-token=14FA5A7E4777733211B06A88FE31E97E --lang=ru --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36 OPR/53.0.2907.68 (Edition 360-1)" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --crash-reporter-pid=3144 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=14FA5A7E4777733211B06A88FE31E97E --renderer-client-id=11 --mojo-platform-channel-handle=4852 /prefetch:1
"C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe" --type=renderer --field-trial-handle=1256,14046703878792434837,14668787118979457986,131072 --disable-features=SharedArrayBuffer --service-pipe-token=700F4474B9C4EE6D382AF6B93B4269A9 --lang=ru --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36 OPR/53.0.2907.68 (Edition 360-1)" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --crash-reporter-pid=3144 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=700F4474B9C4EE6D382AF6B93B4269A9 --renderer-client-id=9 --mojo-platform-channel-handle=6312 /prefetch:1
"C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe" --type=renderer --field-trial-handle=1256,14046703878792434837,14668787118979457986,131072 --disable-features=SharedArrayBuffer --service-pipe-token=7AAADF43DADBE2DCDC9B02E661F5E3FE --lang=ru --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36 OPR/53.0.2907.68 (Edition 360-1)" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --crash-reporter-pid=3144 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=7AAADF43DADBE2DCDC9B02E661F5E3FE --renderer-client-id=10 --mojo-platform-channel-handle=6756 /prefetch:1
C:\Windows\System32\svchost.exe -k WerSvcGroup
D:\Test_systems\AutoLogger\RSIT\RSITx64.exe /silent /m3 /autolog /logfolder "D:\Test_systems\AutoLogger\RSIT\Log" /hjtp "D:\Test_systems\AutoLogger\RSIT\HiJackThis.exe"

====== Папка назначенных заданий ======

C:\Windows\system32\tasks\EasyBatteryManager - "%ProgramFiles(x86)%\Samsung\Easy Settings\EBM\EasyBatteryMgr4.exe"
C:\Windows\system32\tasks\EasyDisplayMgr - "C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe"
C:\Windows\system32\tasks\EasySpeedUpManager - "%programfiles(x86)%\Samsung\Easy Settings\EasySpeedUpManager.exe"
C:\Windows\system32\tasks\MovieColorEnhancer - "%programfiles(x86)%\Samsung\Easy Settings\MovieColorEnhancer.exe"
C:\Windows\system32\tasks\SAgent - "C:\Program Files\Samsung\S Agent\CommonAgent.exe"
C:\Windows\system32\tasks\SCCSpeedBoot - "%programfiles(x86)%\Samsung\Easy Settings\SCCSpeedBoot.exe" /s
C:\Windows\system32\tasks\SmartSetting - "%programfiles(x86)%\Samsung\Easy Settings\SmartSetting.exe"
C:\Windows\system32\tasks\WPD\SqmUpload_S-1-5-21-256552422-3466159464-3450866179-1000 - %windir%\system32\rundll32.exe portabledeviceapi.dll,#1
C:\Windows\system32\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask - %systemroot%\system32\sc.exe start osppsvc
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask - %SystemRoot%\system32\Wat\WatAdminSvc.exe /run
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline - %SystemRoot%\system32\schtasks.exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask"
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - sc.exe start sppsvc
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - %SystemRoot%\System32\powercfg.exe -energy -auto
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService - %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks - %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ehDRMInit - %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\InstallPlayReady - %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\mcupdate - %SystemRoot%\ehome\mcupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURActivate - %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURDiscovery - %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscovery - %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 - %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 - %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PeriodicScanRetry - %windir%\ehome\MCUpdate.exe -pscn 0
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrScheduleTask - %SystemRoot%\ehome\mcupdate.exe -PvrSchedule
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RecordingRestart - %SystemRoot%\ehome\ehrec /RestartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RegisterSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ReindexSearchRoot - %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\UpdateRecordPath - %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\HardDiskSentinel\Hard Disk Sentinel_Sergej - C:\Program Files (x86)\Hard Disk Sentinel Pro\HDSentinel.exe /AUTORUN

=========Mozilla firefox=========

ProfilePath - C:\Users\Sergej\AppData\Roaming\Mozilla\Firefox\Profiles\grhuv9eu.default

prefs.js - "browser.search.useDBForOrder" -  true
prefs.js - "browser.startup.homepage" -  "about:home"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Acrobat]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll


C:\Program Files (x86)\Mozilla Firefox\plugins\
npMeetingJoinPluginOC.dll
nppdf32.dll
nppdf32.RUS

C:\Users\Sergej\AppData\Roaming\Mozilla\Firefox\Profiles\grhuv9eu.default\addons.json
Adblock Plus - extension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
Video DownloadHelper - extension - {b9db16a4-6edc-47ec-a1f4-b86292ed211d}
Browsec VPN - extension - browsec@browsec.com
friGate - extension - e67f8350-7edf-11e3-baa7-0800200c9a66@fri-gate.org

C:\Users\Sergej\AppData\Roaming\Mozilla\Firefox\Profiles\grhuv9eu.default\extensions.json
friGate3 proxy helper - webextension - e67f8350-7edf-11e3-baa7-0800200c9a66@fri-gate.org - 
Application Update Service Helper - extension - aushelper@mozilla.org - 
Pocket - extension - firefox@getpocket.com - 
Follow-on Search Telemetry - extension - followonsearch@mozilla.com - 
Firefox Screenshots - extension - screenshots@mozilla.org - 
Web Compat - extension - webcompat@mozilla.org - 
Activity Stream - extension - activity-stream@mozilla.org - 
Form Autofill - extension - formautofill@mozilla.org - 
Photon onboarding - extension - onboarding@mozilla.org - 
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} - 
Browsec VPN - Free and Unlimited VPN - webextension - browsec@browsec.com - 
Video DownloadHelper - webextension - {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - 
Adblock Plus - webextension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - 
TLS 1.3 gradual roll-out fallback-limit - extension - tls13-version-fallback-rollout-bug1462099@mozilla.org - 

C:\Users\Sergej\AppData\Roaming\Mozilla\Firefox\Profiles\grhuv9eu.default\pluginreg.dat

=========Google Chrome=========

C:\Users\Sergej\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Презентации 0.10
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Интернет-магазин Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Документы 0.10
Extension apdfllckaahabafndbhieahigkjlhalf 1 Диск Google 14.1
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension efaidnbmnnnibpcajpcglclefindmkaj 0 Adobe Acrobat 15.1.0.6
Extension felcaaldnbdncclmgdcncolpebgiejap 1 Таблицы 1.2
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Google Документы офлайн 1.4
Extension glcimepnljoholdmjchkloafkggfoijh 0 Защита от веб-угроз 360 2.1.31
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.73
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mfffpogegjflfpflabcdkioaeobkgjik 1 GaiaAuthExtension 0.0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.8
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Платежная система Интернет-магазина Chrome 1.0.0.4
Extension pgigfpmgknfpcijioihkjhggolcgpeah 0  
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 6618.312.0.2
Homepage: 
default_search_provider.search_url: 
C:\Users\Sergej\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage: 
default_search_provider.search_url: 

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj]
"Path"=C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\glcimepnljoholdmjchkloafkggfoijh]
"Path"=


======Снимок реестра ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2018-02-15 229040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-14 81024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe Acrobat Create PDF Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-11-01 162528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office15\URLREDIR.DLL [2014-01-21 881880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B69F34DD-F0F9-42DC-9EDD-957187DA688D}]
SafeMon Class - C:\Program Files (x86)\360\Total Security\safemon\safemon64.dll [2018-02-09 1080552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL [2017-02-23 2351920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-11-01 162528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2017-09-12 163536]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-14 69760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe Acrobat Create PDF Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-11-01 140512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL [2014-01-23 707800]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B69F34DD-F0F9-42DC-9EDD-957187DA688D}]
SafeMon Class - C:\Program Files (x86)\360\Total Security\safemon\safemon.dll [2017-12-22 1451944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2017-02-23 1743664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-11-01 140512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-11-01 162528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-11-01 140512]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype for Desktop"=C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [2018-05-18 49654736]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
""= []
"QHSafeTray"=C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe [2018-02-09 2181728]
"RadminVPN"=C:\Program Files (x86)\Radmin VPN\RvRvpnGui.exe [2018-01-25 1400960]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
TVR Scheduler.lnk - C:\Program Files (x86)\honestech\honestech TVR 2.5\scheduleTV.exe

C:\Users\Sergej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
TeamViewer.lnk - C:\Program Files (x86)\TeamViewer\TeamViewer.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\OpenVPN_UserSetup]
"StubPath" = reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /f
[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath" = "C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.62\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

====== Ассоциации файлов ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== Список файлов и папок, созданных за последние 3 месяца ======

2018-06-04 00:44:07 ----D---- C:\Users\Sergej\AppData\Roaming\TeamViewer
2018-06-04 00:43:48 ----D---- C:\Program Files (x86)\TeamViewer
2018-06-04 00:13:47 ----D---- C:\Program Files\CCleaner
2018-06-03 21:21:02 ----D---- C:\ProgramData\Doctor Web
2018-06-03 19:51:10 ----D---- C:\Users\Sergej\AppData\Roaming\CrystalIdea Software
2018-06-03 19:50:50 ----D---- C:\Program Files\Uninstall Tool
2018-06-03 19:41:42 ----D---- C:\Windows\SYSWOW64\rserver30
2018-06-03 19:37:40 ----D---- C:\Program Files (x86)\Radmin Viewer 3
2018-06-03 19:37:20 ----D---- C:\Program Files (x86)\Radmin VPN
2018-06-01 23:05:36 ----D---- C:\Users\Sergej\AppData\Roaming\Macromedia
2018-06-01 21:20:06 ----A---- C:\Windows\SYSWOW64\hlink.dll
2018-06-01 21:20:06 ----A---- C:\Windows\system32\hlink.dll
2018-06-01 21:20:05 ----A---- C:\Windows\SYSWOW64\INETRES.dll
2018-06-01 21:20:05 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2018-06-01 21:20:05 ----A---- C:\Windows\system32\inetcomm.dll
2018-06-01 21:20:04 ----A---- C:\Windows\system32\tzres.dll
2018-06-01 21:20:04 ----A---- C:\Windows\system32\INETRES.dll
2018-06-01 21:20:03 ----A---- C:\Windows\SYSWOW64\tzres.dll
2018-06-01 20:09:26 ----D---- C:\ProgramData\SystemExplorer
2018-06-01 20:09:24 ----D---- C:\Program Files (x86)\System Explorer
2018-06-01 18:03:26 ----D---- C:\Windows\SYSWOW64\directx
2018-06-01 17:17:57 ----A---- C:\Windows\system32\FNTCACHE.DAT
2018-06-01 16:58:57 ----SHD---- C:\$RECYCLE.BIN
2018-06-01 14:56:57 ----A---- C:\Windows\system32\appraiser.dll
2018-06-01 14:56:57 ----A---- C:\Windows\system32\acmigration.dll
2018-06-01 14:56:56 ----A---- C:\Windows\system32\invagent.dll
2018-06-01 14:56:56 ----A---- C:\Windows\system32\generaltel.dll
2018-06-01 14:56:56 ----A---- C:\Windows\system32\devinv.dll
2018-06-01 14:56:56 ----A---- C:\Windows\system32\CompatTelRunner.exe
2018-06-01 14:56:56 ----A---- C:\Windows\system32\centel.dll
2018-06-01 14:56:56 ----A---- C:\Windows\system32\aitstatic.exe
2018-06-01 14:56:56 ----A---- C:\Windows\system32\aepic.dll
2018-06-01 14:56:56 ----A---- C:\Windows\system32\aeinv.dll
2018-06-01 14:56:17 ----A---- C:\Windows\SYSWOW64\inseng.dll
2018-06-01 14:56:17 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2018-06-01 14:56:17 ----A---- C:\Windows\system32\iernonce.dll
2018-06-01 14:56:16 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2018-06-01 14:56:16 ----A---- C:\Windows\system32\ieetwproxystub.dll
2018-06-01 14:56:16 ----A---- C:\Windows\system32\ieetwcollector.exe
2018-06-01 14:56:15 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2018-06-01 14:56:15 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2018-06-01 14:56:15 ----A---- C:\Windows\SYSWOW64\occache.dll
2018-06-01 14:56:15 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2018-06-01 14:56:15 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2018-06-01 14:56:15 ----A---- C:\Windows\system32\inseng.dll
2018-06-01 14:56:15 ----A---- C:\Windows\system32\ie4uinit.exe
2018-06-01 14:56:14 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2018-06-01 14:56:14 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2018-06-01 14:56:14 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2018-06-01 14:56:14 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2018-06-01 14:56:14 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-06-01 14:56:12 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2018-06-01 14:56:12 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2018-06-01 14:56:12 ----A---- C:\Windows\system32\occache.dll
2018-06-01 14:56:12 ----A---- C:\Windows\system32\iedkcs32.dll
2018-06-01 14:56:11 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2018-06-01 14:56:11 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2018-06-01 14:56:11 ----A---- C:\Windows\SYSWOW64\jscript.dll
2018-06-01 14:56:11 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2018-06-01 14:56:11 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2018-06-01 14:56:11 ----A---- C:\Windows\system32\urlmon.dll
2018-06-01 14:56:11 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2018-06-01 14:56:10 ----A---- C:\Windows\SYSWOW64\ieui.dll
2018-06-01 14:56:10 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2018-06-01 14:56:10 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2018-06-01 14:56:10 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2018-06-01 14:56:10 ----A---- C:\Windows\system32\msfeeds.dll
2018-06-01 14:56:10 ----A---- C:\Windows\system32\dxtrans.dll
2018-06-01 14:56:09 ----A---- C:\Windows\system32\iesetup.dll
2018-06-01 14:56:09 ----A---- C:\Windows\system32\ieapfltr.dll
2018-06-01 14:56:07 ----A---- C:\Windows\system32\iertutil.dll
2018-06-01 14:56:06 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2018-06-01 14:56:06 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2018-06-01 14:56:06 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2018-06-01 14:56:06 ----A---- C:\Windows\system32\vbscript.dll
2018-06-01 14:56:05 ----A---- C:\Windows\SYSWOW64\wininet.dll
2018-06-01 14:56:05 ----A---- C:\Windows\SYSWOW64\msrating.dll
2018-06-01 14:56:05 ----A---- C:\Windows\system32\ieUnatt.exe
2018-06-01 14:56:04 ----A---- C:\Windows\system32\ieui.dll
2018-06-01 14:56:04 ----A---- C:\Windows\system32\ieframe.dll
2018-06-01 14:56:04 ----A---- C:\Windows\system32\dxtmsft.dll
2018-06-01 14:56:03 ----A---- C:\Windows\system32\mshtmlmedia.dll
2018-06-01 14:56:03 ----A---- C:\Windows\system32\mshtmled.dll
2018-06-01 14:56:02 ----A---- C:\Windows\system32\webcheck.dll
2018-06-01 14:56:02 ----A---- C:\Windows\system32\jscript9diag.dll
2018-06-01 14:56:02 ----A---- C:\Windows\system32\jscript9.dll
2018-06-01 14:56:02 ----A---- C:\Windows\system32\jscript.dll
2018-06-01 14:56:01 ----A---- C:\Windows\system32\wininet.dll
2018-06-01 14:56:01 ----A---- C:\Windows\system32\jsproxy.dll
2018-06-01 14:56:00 ----A---- C:\Windows\system32\msrating.dll
2018-06-01 14:56:00 ----A---- C:\Windows\system32\MshtmlDac.dll
2018-06-01 14:55:59 ----A---- C:\Windows\system32\mshtml.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\ucrtbase.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-timezone-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-2-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-2-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l2-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-2-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\ucrtbase.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2018-06-01 14:55:57 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2018-06-01 14:55:56 ----A---- C:\Windows\system32\ntoskrnl.exe
2018-06-01 14:55:55 ----A---- C:\Windows\system32\MSVidCtl.dll
2018-06-01 14:55:54 ----A---- C:\Windows\system32\win32k.sys
2018-06-01 14:55:53 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2018-06-01 14:55:53 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2018-06-01 14:55:52 ----A---- C:\Windows\system32\ntdll.dll
2018-06-01 14:55:51 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2018-06-01 14:55:51 ----A---- C:\Windows\SYSWOW64\msi.dll
2018-06-01 14:55:51 ----A---- C:\Windows\system32\msi.dll
2018-06-01 14:55:50 ----A---- C:\Windows\SYSWOW64\msexcl40.dll
2018-06-01 14:55:50 ----A---- C:\Windows\system32\wuaueng.dll
2018-06-01 14:55:50 ----A---- C:\Windows\system32\rpcrt4.dll
2018-06-01 14:55:50 ----A---- C:\Windows\system32\lsasrv.dll
2018-06-01 14:55:50 ----A---- C:\Windows\system32\authui.dll
2018-06-01 14:55:49 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2018-06-01 14:55:49 ----A---- C:\Windows\SYSWOW64\authui.dll
2018-06-01 14:55:49 ----A---- C:\Windows\system32\schannel.dll
2018-06-01 14:55:49 ----A---- C:\Windows\system32\msra.exe
2018-06-01 14:55:49 ----A---- C:\Windows\system32\kerberos.dll
2018-06-01 14:55:49 ----A---- C:\Windows\system32\atmfd.dll
2018-06-01 14:55:49 ----A---- C:\Windows\system32\advapi32.dll
2018-06-01 14:55:48 ----A---- C:\Windows\SYSWOW64\schannel.dll
2018-06-01 14:55:48 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2018-06-01 14:55:48 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2018-06-01 14:55:48 ----A---- C:\Windows\system32\wucltux.dll
2018-06-01 14:55:48 ----A---- C:\Windows\system32\msv1_0.dll
2018-06-01 14:55:48 ----A---- C:\Windows\system32\KernelBase.dll
2018-06-01 14:55:47 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2018-06-01 14:55:47 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2018-06-01 14:55:47 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2018-06-01 14:55:47 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2018-06-01 14:55:47 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2018-06-01 14:55:47 ----A---- C:\Windows\system32\zipfldr.dll
2018-06-01 14:55:47 ----A---- C:\Windows\system32\WinSCard.dll
2018-06-01 14:55:47 ----A---- C:\Windows\system32\scksp.dll
2018-06-01 14:55:47 ----A---- C:\Windows\system32\scesrv.dll
2018-06-01 14:55:47 ----A---- C:\Windows\system32\oleaut32.dll
2018-06-01 14:55:47 ----A---- C:\Windows\system32\kernel32.dll
2018-06-01 14:55:47 ----A---- C:\Windows\system32\drivers\srv.sys
2018-06-01 14:55:47 ----A---- C:\Windows\system32\drivers\msrpc.sys
2018-06-01 14:55:47 ----A---- C:\Windows\system32\comsvcs.dll
2018-06-01 14:55:46 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2018-06-01 14:55:46 ----A---- C:\Windows\SYSWOW64\scksp.dll
2018-06-01 14:55:46 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2018-06-01 14:55:46 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2018-06-01 14:55:46 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2018-06-01 14:55:46 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2018-06-01 14:55:46 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2018-06-01 14:55:46 ----A---- C:\Windows\system32\winload.exe
2018-06-01 14:55:46 ----A---- C:\Windows\system32\t2embed.dll
2018-06-01 14:55:46 ----A---- C:\Windows\system32\rpcss.dll
2018-06-01 14:55:46 ----A---- C:\Windows\system32\rpchttp.dll
2018-06-01 14:55:46 ----A---- C:\Windows\system32\ncrypt.dll
2018-06-01 14:55:46 ----A---- C:\Windows\system32\msiexec.exe
2018-06-01 14:55:46 ----A---- C:\Windows\system32\drivers\srv2.sys
2018-06-01 14:55:46 ----A---- C:\Windows\system32\drivers\msisadrv.sys
2018-06-01 14:55:46 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2018-06-01 14:55:46 ----A---- C:\Windows\system32\drivers\acpi.sys
2018-06-01 14:55:46 ----A---- C:\Windows\system32\basecsp.dll
2018-06-01 14:55:45 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2018-06-01 14:55:45 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2018-06-01 14:55:45 ----A---- C:\Windows\SYSWOW64\comsvcs.dll
2018-06-01 14:55:45 ----A---- C:\Windows\system32\TSpkg.dll
2018-06-01 14:55:45 ----A---- C:\Windows\system32\drivers\volmgr.sys
2018-06-01 14:55:45 ----A---- C:\Windows\system32\drivers\srvnet.sys
2018-06-01 14:55:45 ----A---- C:\Windows\system32\drivers\pci.sys
2018-06-01 14:55:45 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2018-06-01 14:55:45 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2018-06-01 14:55:45 ----A---- C:\Windows\system32\consent.exe
2018-06-01 14:55:45 ----A---- C:\Windows\system32\certcli.dll
2018-06-01 14:55:45 ----A---- C:\Windows\system32\adtschema.dll
2018-06-01 14:55:44 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2018-06-01 14:55:44 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2018-06-01 14:55:44 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2018-06-01 14:55:44 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2018-06-01 14:55:44 ----A---- C:\Windows\system32\wow64win.dll
2018-06-01 14:55:44 ----A---- C:\Windows\system32\winsrv.dll
2018-06-01 14:55:44 ----A---- C:\Windows\system32\msihnd.dll
2018-06-01 14:55:44 ----A---- C:\Windows\system32\hal.dll
2018-06-01 14:55:44 ----A---- C:\Windows\system32\fontsub.dll
2018-06-01 14:55:44 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2018-06-01 14:55:44 ----A---- C:\Windows\system32\clfs.sys
2018-06-01 14:55:44 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2018-06-01 14:55:43 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2018-06-01 14:55:43 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2018-06-01 14:55:43 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2018-06-01 14:55:43 ----A---- C:\Windows\SYSWOW64\itss.dll
2018-06-01 14:55:43 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2018-06-01 14:55:43 ----A---- C:\Windows\SYSWOW64\certcli.dll
2018-06-01 14:55:43 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2018-06-01 14:55:43 ----A---- C:\Windows\system32\wudriver.dll
2018-06-01 14:55:43 ----A---- C:\Windows\system32\wow64.dll
2018-06-01 14:55:43 ----A---- C:\Windows\system32\wdigest.dll
2018-06-01 14:55:43 ----A---- C:\Windows\system32\streamci.dll
2018-06-01 14:55:43 ----A---- C:\Windows\system32\srvsvc.dll
2018-06-01 14:55:43 ----A---- C:\Windows\system32\srcore.dll
2018-06-01 14:55:43 ----A---- C:\Windows\system32\itss.dll
2018-06-01 14:55:43 ----A---- C:\Windows\system32\drivers\vdrvroot.sys
2018-06-01 14:55:43 ----A---- C:\Windows\system32\drivers\ULIAGPKX.SYS
2018-06-01 14:55:43 ----A---- C:\Windows\system32\drivers\termdd.sys
2018-06-01 14:55:43 ----A---- C:\Windows\system32\drivers\swenum.sys
2018-06-01 14:55:43 ----A---- C:\Windows\system32\drivers\NV_AGP.SYS
2018-06-01 14:55:43 ----A---- C:\Windows\system32\drivers\mssmbios.sys
2018-06-01 14:55:43 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2018-06-01 14:55:43 ----A---- C:\Windows\system32\drivers\isapnp.sys
2018-06-01 14:55:43 ----A---- C:\Windows\system32\drivers\AGP440.sys
2018-06-01 14:55:43 ----A---- C:\Windows\system32\conhost.exe
2018-06-01 14:55:43 ----A---- C:\Windows\system32\catsrvut.dll
2018-06-01 14:55:43 ----A---- C:\Windows\system32\bcrypt.dll
2018-06-01 14:55:43 ----A---- C:\Windows\system32\appinfo.dll
2018-06-01 14:55:43 ----A---- C:\Windows\system32\appidsvc.dll
2018-06-01 14:55:42 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2018-06-01 14:55:42 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2018-06-01 14:55:42 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2018-06-01 14:55:42 ----A---- C:\Windows\SYSWOW64\itircl.dll
2018-06-01 14:55:42 ----A---- C:\Windows\SYSWOW64\catsrvut.dll
2018-06-01 14:55:42 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2018-06-01 14:55:42 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2018-06-01 14:55:42 ----A---- C:\Windows\system32\wsnmp32.dll
2018-06-01 14:55:42 ----A---- C:\Windows\system32\rstrui.exe
2018-06-01 14:55:42 ----A---- C:\Windows\system32\msrahc.dll
2018-06-01 14:55:42 ----A---- C:\Windows\system32\drivers\videoprt.sys
2018-06-01 14:55:42 ----A---- C:\Windows\system32\drivers\appid.sys
2018-06-01 14:55:42 ----A---- C:\Windows\system32\csrsrv.dll
2018-06-01 14:55:42 ----A---- C:\Windows\system32\cryptbase.dll
2018-06-01 14:55:42 ----A---- C:\Windows\system32\appidapi.dll
2018-06-01 14:55:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-06-01 14:55:41 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-06-01 14:55:41 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2018-06-01 14:55:41 ----A---- C:\Windows\SYSWOW64\srclient.dll
2018-06-01 14:55:41 ----A---- C:\Windows\SYSWOW64\setup16.exe
2018-06-01 14:55:41 ----A---- C:\Windows\SYSWOW64\secur32.dll
2018-06-01 14:55:41 ----A---- C:\Windows\SYSWOW64\sdchange.exe
2018-06-01 14:55:41 ----A---- C:\Windows\SYSWOW64\racpldlg.dll
2018-06-01 14:55:41 ----A---- C:\Windows\SYSWOW64\ole32.dll
2018-06-01 14:55:41 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2018-06-01 14:55:41 ----A---- C:\Windows\SYSWOW64\msra.exe
2018-06-01 14:55:41 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2018-06-01 14:55:41 ----A---- C:\Windows\SYSWOW64\hhsetup.dll
2018-06-01 14:55:41 ----A---- C:\Windows\SYSWOW64\hh.exe
2018-06-01 14:55:41 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2018-06-01 14:55:41 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2018-06-01 14:55:41 ----A---- C:\Windows\SYSWOW64\credssp.dll
2018-06-01 14:55:41 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2018-06-01 14:55:41 ----A---- C:\Windows\system32\wups2.dll
2018-06-01 14:55:41 ----A---- C:\Windows\system32\wups.dll
2018-06-01 14:55:41 ----A---- C:\Windows\system32\wow64cpu.dll
2018-06-01 14:55:41 ----A---- C:\Windows\system32\sspisrv.dll
2018-06-01 14:55:41 ----A---- C:\Windows\system32\sspicli.dll
2018-06-01 14:55:41 ----A---- C:\Windows\system32\srclient.dll
2018-06-01 14:55:41 ----A---- C:\Windows\system32\smss.exe
2018-06-01 14:55:41 ----A---- C:\Windows\system32\setbcdlocale.dll
2018-06-01 14:55:41 ----A---- C:\Windows\system32\secur32.dll
2018-06-01 14:55:41 ----A---- C:\Windows\system32\sdchange.exe
2018-06-01 14:55:41 ----A---- C:\Windows\system32\racpldlg.dll
2018-06-01 14:55:41 ----A---- C:\Windows\system32\ole32.dll
2018-06-01 14:55:41 ----A---- C:\Windows\system32\ntvdm64.dll
2018-06-01 14:55:41 ----A---- C:\Windows\system32\msaudite.dll
2018-06-01 14:55:41 ----A---- C:\Windows\system32\lsass.exe
2018-06-01 14:55:41 ----A---- C:\Windows\system32\lpk.dll
2018-06-01 14:55:41 ----A---- C:\Windows\system32\itircl.dll
2018-06-01 14:55:41 ----A---- C:\Windows\system32\hhsetup.dll
2018-06-01 14:55:41 ----A---- C:\Windows\system32\drivers\wmiacpi.sys
2018-06-01 14:55:41 ----A---- C:\Windows\system32\dciman32.dll
2018-06-01 14:55:41 ----A---- C:\Windows\system32\credssp.dll
2018-06-01 14:55:41 ----A---- C:\Windows\system32\auditpol.exe
2018-06-01 14:55:41 ----A---- C:\Windows\system32\atmlib.dll
2018-06-01 14:55:41 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2018-06-01 14:55:41 ----A---- C:\Windows\hh.exe
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-06-01 14:55:40 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-06-01 14:55:40 ----A---- C:\Windows\SYSWOW64\wow32.dll
2018-06-01 14:55:40 ----A---- C:\Windows\SYSWOW64\user.exe
2018-06-01 14:55:40 ----A---- C:\Windows\SYSWOW64\sscore.dll
2018-06-01 14:55:40 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2018-06-01 14:55:40 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2018-06-01 14:55:40 ----A---- C:\Windows\SYSWOW64\lpk.dll
2018-06-01 14:55:40 ----A---- C:\Windows\SYSWOW64\instnm.exe
2018-06-01 14:55:40 ----A---- C:\Windows\SYSWOW64\comcat.dll
2018-06-01 14:55:40 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2018-06-01 14:55:40 ----A---- C:\Windows\system32\wuwebv.dll
2018-06-01 14:55:40 ----A---- C:\Windows\system32\wuauclt.exe
2018-06-01 14:55:40 ----A---- C:\Windows\system32\wuapi.dll
2018-06-01 14:55:40 ----A---- C:\Windows\system32\WinSetupUI.dll
2018-06-01 14:55:40 ----A---- C:\Windows\system32\sscore.dll
2018-06-01 14:55:40 ----A---- C:\Windows\system32\msobjs.dll
2018-06-01 14:55:40 ----A---- C:\Windows\system32\msimsg.dll
2018-06-01 14:55:40 ----A---- C:\Windows\system32\drivers\errdev.sys
2018-06-01 14:55:40 ----A---- C:\Windows\system32\comcat.dll
2018-06-01 14:55:40 ----A---- C:\Windows\system32\apisetschema.dll
2018-06-01 14:55:39 ----A---- C:\Windows\SYSWOW64\wups.dll
2018-06-01 14:55:39 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2018-06-01 14:55:39 ----A---- C:\Windows\SYSWOW64\oleres.dll
2018-06-01 14:55:39 ----A---- C:\Windows\system32\wuapp.exe
2018-06-01 14:55:39 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2018-06-01 14:55:39 ----A---- C:\Windows\system32\oleres.dll
2018-06-01 14:23:10 ----D---- C:\Program Files (x86)\texttotalk
2018-05-29 20:31:29 ----D---- C:\Users\Sergej\AppData\Roaming\MAGIX Computer Products Intl. Co
2018-05-29 20:21:34 ----D---- C:\Program Files (x86)\QuickTime
2018-05-22 18:52:42 ----D---- C:\Program Files\Common Files\OFX
2018-05-22 18:52:12 ----D---- C:\Program Files\Boris FX, Inc
2018-05-22 18:17:55 ----D---- C:\Program Files\Magic Bullet Looks Vegas
2018-05-22 18:17:50 ----D---- C:\Program Files (x86)\Red Giant
2018-05-22 18:01:56 ----D---- C:\Users\Sergej\AppData\Roaming\Red Giant Link
2018-05-22 18:01:42 ----D---- C:\Program Files (x86)\Magic Bullet Looks Vegas
2018-05-22 18:01:40 ----D---- C:\Program Files (x86)\LooksBuilder
2018-05-22 18:01:38 ----D---- C:\Program Files (x86)\Red Giant Link
2018-05-22 18:00:43 ----D---- C:\ProgramData\RedGiant
2018-05-03 18:30:04 ----D---- C:\Users\Sergej\AppData\Roaming\Google
2018-05-03 18:24:05 ----D---- C:\Program Files (x86)\Google
2018-04-24 23:12:38 ----A---- C:\autfile.txt
2018-04-24 19:36:05 ----D---- C:\Program Files\OpenVPN
2018-04-23 23:20:37 ----D---- C:\Program Files (x86)\HTTPTunnel
2018-04-23 20:50:27 ----A---- C:\Windows\system32\drivers\teamviewervpn.sys
2018-04-22 23:36:22 ----A---- C:\Windows\SYSWOW64\SPORDER.DLL
2018-04-20 18:41:59 ----D---- C:\Users\Sergej\AppData\Roaming\Skype
2018-04-20 18:41:40 ----D---- C:\Program Files (x86)\Microsoft
2018-03-23 20:13:33 ----D---- C:\Users\Sergej\AppData\Roaming\obs-studio
2018-03-23 20:11:57 ----D---- C:\Program Files (x86)\obs-studio
2018-03-23 19:21:56 ----D---- C:\Program Files (x86)\honestech
2018-03-23 19:21:01 ----D---- C:\Program Files (x86)\eEnjoy VIDEO DVR
2018-03-23 19:20:30 ----D---- C:\Users\Sergej\AppData\Roaming\InstallShield
2018-03-23 19:20:30 ----D---- C:\ProgramData\InstallShield

====== Список файлов и папок, измененных за последние 3 месяца ======

2018-06-04 16:12:59 ----D---- C:\Windows\System32
2018-06-04 16:12:59 ----D---- C:\Windows\inf
2018-06-04 16:12:59 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-06-04 16:09:28 ----D---- C:\Windows\Temp
2018-06-04 16:04:52 ----D---- C:\Windows\system32\config
2018-06-04 03:01:15 ----D---- C:\Users\Sergej\AppData\Roaming\360DrvMgr
2018-06-04 02:18:29 ----D---- C:\Windows\Microsoft.NET
2018-06-04 01:46:48 ----D---- C:\Windows\system32\Tasks
2018-06-04 01:46:34 ----RSD---- C:\Windows\Fonts
2018-06-04 00:43:48 ----D---- C:\Program Files (x86)
2018-06-04 00:35:13 ----RD---- C:\Program Files
2018-06-04 00:30:01 ----SHD---- C:\Windows\Installer
2018-06-04 00:26:59 ----AD---- C:\Windows\SysWOW64
2018-06-04 00:26:59 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2018-06-04 00:25:12 ----D---- C:\System Volume Information
2018-06-04 00:24:31 ----HD---- C:\ProgramData
2018-06-04 00:24:29 ----D---- C:\Windows\system32\drivers
2018-06-04 00:21:46 ----D---- C:\Users\Sergej\AppData\Roaming\uTorrent
2018-06-03 23:43:25 ----D---- C:\Users\Sergej\AppData\Roaming\ViberPC
2018-06-03 21:10:58 ----RSHD---- C:\360SANDBOX
2018-06-03 21:07:31 ----D---- C:\Users\Sergej\AppData\Roaming\DRPSu
2018-06-03 20:23:31 ----D---- C:\Windows
2018-06-03 20:15:07 ----D---- C:\Windows\system32\DriverStore
2018-06-02 20:23:05 ----D---- C:\Users\Sergej\AppData\Roaming\AIMP
2018-06-02 20:21:41 ----D---- C:\Program Files (x86)\AIMP
2018-06-02 00:17:26 ----RSD---- C:\Windows\assembly
2018-06-01 23:51:53 ----D---- C:\Windows\winsxs
2018-06-01 23:33:29 ----D---- C:\Windows\SYSWOW64\en-US
2018-06-01 23:33:29 ----D---- C:\Windows\system32\en-US
2018-06-01 23:33:28 ----D---- C:\Program Files (x86)\Microsoft.NET
2018-06-01 23:33:27 ----SD---- C:\ProgramData\Microsoft
2018-06-01 23:19:03 ----D---- C:\Windows\system32\catroot2
2018-06-01 23:05:34 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2018-06-01 23:05:29 ----D---- C:\Windows\system32\Macromed
2018-06-01 23:05:26 ----D---- C:\Windows\SYSWOW64\Macromed
2018-06-01 22:31:49 ----SD---- C:\Users\Sergej\AppData\Roaming\Microsoft
2018-06-01 21:38:09 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2018-06-01 21:36:24 ----D---- C:\Windows\system32\appraiser
2018-06-01 21:36:21 ----D---- C:\Windows\SYSWOW64\ru-RU
2018-06-01 21:36:21 ----D---- C:\Program Files\Internet Explorer
2018-06-01 21:36:21 ----D---- C:\Program Files (x86)\Internet Explorer
2018-06-01 21:36:18 ----D---- C:\Windows\system32\ru-RU
2018-06-01 21:36:18 ----D---- C:\Windows\system32\drivers\en-US
2018-06-01 21:36:18 ----D---- C:\Windows\PolicyDefinitions
2018-06-01 21:36:15 ----D---- C:\Windows\system32\Boot
2018-06-01 21:36:15 ----D---- C:\Windows\AppPatch
2018-06-01 21:14:52 ----D---- C:\Program Files (x86)\Mozilla Firefox
2018-06-01 20:49:22 ----SHD---- C:\$360Section
2018-06-01 20:49:22 ----D---- C:\ProgramData\360Quarant
2018-06-01 20:33:21 ----D---- C:\Windows\Tasks
2018-06-01 20:26:48 ----D---- C:\Program Files (x86)\Common Files
2018-06-01 20:21:04 ----D---- C:\Program Files\WinRAR
2018-06-01 18:03:26 ----D---- C:\Windows\Logs
2018-06-01 17:26:29 ----A---- C:\Windows\ntbtlog.txt
2018-06-01 17:24:45 ----D---- C:\Users\Sergej\AppData\Roaming\vlc
2018-06-01 15:54:47 ----D---- C:\ProgramData\Microsoft Help
2018-06-01 15:54:46 ----A---- C:\Windows\win.ini
2018-06-01 15:28:06 ----D---- C:\ProgramData\360safe
2018-06-01 15:27:45 ----D---- C:\Program Files (x86)\REAPER
2018-06-01 15:04:49 ----D---- C:\Program Files (x86)\Opera
2018-06-01 14:24:45 ----D---- C:\Windows\Prefetch
2018-06-01 14:23:57 ----HD---- C:\Windows\system32\GroupPolicy
2018-06-01 14:23:34 ----D---- C:\ProgramData\AMD
2018-05-29 19:55:41 ----D---- C:\Users\Sergej\AppData\Roaming\audacity
2018-05-22 18:52:42 ----D---- C:\Program Files\Common Files
2018-05-22 18:17:57 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2018-05-20 22:07:18 ----D---- C:\Users\Sergej\AppData\Roaming\Sony
2018-05-20 12:04:19 ----D---- C:\Users\Sergej\AppData\Roaming\VEGAS
2018-05-19 00:38:42 ----D---- C:\Program Files (x86)\Hard Disk Sentinel Pro
2018-05-02 17:08:23 ----D---- C:\Windows\system32\NDF
2018-05-01 16:21:09 ----D---- C:\Users\Sergej\AppData\Roaming\MAGIX
2018-05-01 13:44:54 ----D---- C:\ProgramData\Samsung
2018-04-23 21:56:43 ----D---- C:\Users\Sergej\AppData\Roaming\Yandex
2018-04-19 21:57:02 ----D---- C:\ProgramData\360TotalSecurity
2018-04-05 21:19:32 ----D---- C:\Windows\rescache
2018-04-05 19:03:04 ----D---- C:\Windows\system32\CodeIntegrity
2018-04-05 17:44:12 ----D---- C:\Windows\system32\MRT
2018-04-05 17:40:57 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2018-04-05 17:40:47 ----AC---- C:\Windows\system32\MRT.exe
2018-04-04 07:35:40 ----D---- C:\Users\Sergej\AppData\Roaming\REAPER
2018-03-23 23:15:08 ----D---- C:\Windows\ehome
2018-03-23 23:15:04 ----D---- C:\Windows\system32\migration
2018-03-23 23:11:28 ----D---- C:\Windows\debug
2018-03-23 19:21:54 ----D---- C:\Windows\Downloaded Program Files

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== Список драйверов (тип запуска: R=Запущен, S=остановлен, 0=Загрузочный, 1=Системный, 2=Автоматически, 3=Вручную, 4=Отключено) ======

R0 amd_sata;amd_sata; C:\Windows\system32\DRIVERS\amd_sata.sys [2015-03-30 85704]
R0 amd_xata;amd_xata; C:\Windows\system32\DRIVERS\amd_xata.sys [2015-03-30 43720]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2018-01-01 213736]
R1 360Box64;360Box mini-filter driver; C:\Windows\system32\DRIVERS\360Box64.sys [2018-02-09 330472]
R1 360FsFlt;360FsFlt mini-filter driver; C:\Windows\system32\DRIVERS\360FsFlt.sys [2017-12-22 433784]
R1 360netmon;360netmon; C:\Windows\system32\DRIVERS\360netmon.sys [2017-12-22 87672]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2017-12-26 270912]
R1 raddrvv3;raddrvv3; \??\C:\Windows\SysWOW64\rserver30\raddrvv3.sys [2017-12-12 96128]
R1 SABI;SAMSUNG Kernel Driver For Windows 7; \??\C:\Windows\system32\Drivers\SABI.sys [2011-09-22 13824]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2016-02-27 23981568]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2016-02-27 674816]
R3 athr;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2017-08-07 4184328]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2016-02-27 96256]
R3 bcbtums;Bluetooth RAM Firmware Download USB Filter; C:\Windows\system32\drivers\bcbtums.sys [2016-01-26 172760]
R3 BthEnum;Драйвер блока запроса Bluetooth; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Устройства Bluetooth (личной сети); C:\Windows\system32\drivers\bthpan.sys [2017-07-06 119296]
R3 BTHUSB;Драйвер порта USB радиомодуля Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwampfl;btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [2016-01-26 600280]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-05-24 2881256]
R3 mirrorv3;mirrorv3; C:\Windows\system32\DRIVERS\rminiv3.sys [2017-12-07 5632]
R3 RFCOMM;Устройство Bluetooth (протокол RFCOMM TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RvNetMP60;Famatech RadminVPN Miniport; C:\Windows\system32\DRIVERS\RvNetMP60.sys [2018-01-25 69048]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
R3 SPUVCbv;SPUVCb Driver Service; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [2011-07-13 2610552]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S1 BAPIDRV;BAPIDRV; C:\Windows\system32\DRIVERS\BAPIDRV64.sys [2018-02-09 201336]
S3 360AntiHacker;360Safe Anti Hacker Service; C:\Windows\System32\Drivers\360AntiHacker64.sys [2017-12-22 183416]
S3 360AvFlt;360AvFlt mini-filter driver; C:\Windows\system32\DRIVERS\360AvFlt.sys [2018-02-09 86248]
S3 360Camera;360Safe Camera Filter Service; C:\Windows\System32\Drivers\360Camera64.sys [2017-12-22 49088]
S3 BTHPORT;Драйвер порта Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-07 552960]
S3 CisUtMonitor;CisUtMonitor; C:\Windows\system32\DRIVERS\CisUtMonitor.sys [2017-07-04 54192]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2016-11-11 589392]
S3 lmimirr;lmimirr; C:\Windows\system32\DRIVERS\lmimirr.sys []
S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl64.sys [2017-10-13 23040]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2017-08-14 20992]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-10-28 884952]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 SBIOSIO;SBIOSIO; \??\C:\Users\Sergej\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys []
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [2010-11-21 88960]
S3 tap0901;TAP-Windows Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys [2016-04-21 27136]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2010-11-21 34816]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2017-11-27 54784]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

====== Список служб (тип запуска: R=Запущена, S=остановлена, 0=Загрузочная, 1=Системная, 2=Автоматически, 3=Вручную, 4=Отключено) ======

R2 AGMService;Adobe Genuine Monitor Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2018-05-11 2321384]
R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2018-05-11 2128872]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2018-01-05 83768]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-10-03 128608]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\cscsvc.dll
R2 NIHardwareService;NIHardwareService; C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [2015-11-17 14326896]
R2 QHActiveDefense;360 Total Security; C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe [2018-02-09 929888]
R2 RServer3;Radmin Server V3; C:\Windows\SysWOW64\rserver30\RServer3.exe [2017-12-07 1164400]
R2 RvControlSvc;Radmin VPN Control Service; C:\Program Files (x86)\Radmin VPN\RvControlSvc.exe [2018-01-25 883840]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-10-04 107624]
S2 gupdate;Служба Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-06-02 153168]
S2 SWUpdateService;SW Update Service; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [2017-10-11 3298208]
S3 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-11-01 82640]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-06-01 272384]
S3 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2016-02-27 249344]
S3 AppMgmt;@appmgmts.dll,-3250; %SystemRoot%\system32\svchost.exe -k netsvcs;"ServiceDll" = %SystemRoot%\System32\appmgmts.dll
S3 gupdatem;Служба Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-06-02 153168]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2018-04-22 116224]
S3 iPod Service;Сервис iPod; C:\Program Files\iPod\bin\iPodService.exe [2018-01-22 673080]
S3 ose;Office  Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2018-04-10 160960]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2014-01-21 5132888]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; %SystemRoot%\System32\svchost.exe -k PeerDist;"ServiceDll" = %SystemRoot%\system32\peerdistsvc.dll
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2018-04-03 1671968]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\system32\storsvc.dll
S3 SystemExplorerHelpService;System Explorer Service; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [2014-12-20 820960]
S3 TeamViewer;TeamViewer 12; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2018-03-01 10803440]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\umrdp.dll
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2017-12-26 1255736]
S4 aspnet_state;Служба состояний ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-10-03 52832]
S4 DiagTrack;Diagnostics Tracking Service; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll" = %SystemRoot%\system32\diagtrack.dll
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-06-01 174544]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]

-----------------EOF-----------------
