﻿Лог утилиты random's system information tool 1.12(автор: random/random)
Run by User at 2015-05-05 09:02:55
Microsoft Windows 7 Домашняя базовая  Service Pack 1
Системный раздел C: размер 110 GB (72%) Свободно 153 GB
Total RAM: 4080 MB (60% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:02:56, on 05.05.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\User\Desktop\AutoLogger.exe
C:\Users\User\Desktop\AutoLogger\AVZ\avz.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\User\Desktop\AutoLogger\RSIT\User_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mail.ru/cnt/10445?gp=profitraf3
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-Service.exe
O23 - Service: BlueStacks Updater Service (BstHdUpdaterSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6979 bytes

======Список процессов======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe"
"C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" /rep_new
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" 3ddc9e87-9af4-4b5f-a91d-e7a4e9bdcc10 1
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" 
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" 
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" 
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3332.0.1666432470\592789249" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,19,42,51 --gpu-vendor-id=0x10de --gpu-device-id=0x0f00 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.5012 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=ru --force-fieldtrials="BackgroundRendererProcesses/Disallow/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Manual install/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/QueryBoundaryControl_Stable_R6_Postperiod/*PasswordGeneration/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledMin4/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/ThreeDays/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Default/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_96/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_09/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultDisabled/*UwSInterstitialStatus/On/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=3332 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="3332.2.2064728039\1126415545" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=ru --force-fieldtrials="*BackgroundRendererProcesses/Disallow/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Manual install/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/QueryBoundaryControl_Stable_R6_Postperiod/*PasswordGeneration/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledMin4/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/ThreeDays/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Default/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_96/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_09/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultDisabled/*UwSInterstitialStatus/On/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=3332 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="3332.3.203656388\1652075940" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=ru --force-fieldtrials="*BackgroundRendererProcesses/Disallow/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Manual install/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/QueryBoundaryControl_Stable_R6_Postperiod/*PasswordGeneration/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledMin4/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/ThreeDays/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Default/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_96/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_09/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultDisabled/*UwSInterstitialStatus/On/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=3332 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="3332.4.602934262\367060727" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=ru --force-fieldtrials="*BackgroundRendererProcesses/Disallow/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Manual install/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/QueryBoundaryControl_Stable_R6_Postperiod/*PasswordGeneration/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledMin4/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/ThreeDays/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Default/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_96/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_09/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultDisabled/*UwSInterstitialStatus/On/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=3332 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="3332.6.1714103033\532740963" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=ru --force-fieldtrials="*BackgroundRendererProcesses/Disallow/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Manual install/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/QueryBoundaryControl_Stable_R6_Postperiod/*PasswordGeneration/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledMin4/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/ThreeDays/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Default/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_96/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_09/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultDisabled/*UwSInterstitialStatus/On/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=3332 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="3332.9.1272293461\1246333082" /prefetch:673131151
C:\Windows\system32\svchost.exe -k SDRSVC

"C:\Users\User\Desktop\AutoLogger.exe" 
"C:\Users\User\Desktop\AutoLogger\AVZ\avz.exe" Script=AVZ\GeneralScript.txt HiddenMode=0
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" http://google.ru
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=ru --force-fieldtrials="*BackgroundRendererProcesses/Disallow/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Manual install/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/QueryBoundaryControl_Stable_R6_Postperiod/*PasswordGeneration/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledMin4/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/ThreeDays/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Default/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_96/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_09/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultDisabled/*UwSInterstitialStatus/On/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=3332 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="3332.19.1310001869\1518148817" /prefetch:673131151
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:1112 CREDAT:79873
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524 
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe9_ Global\UsGthrCtrlFltPipeMssGthrPipe9 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" 
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Users\User\Desktop\AutoLogger\RSIT\RSITx64.exe /silent /m3 /autolog /logfolder "C:\Users\User\Desktop\AutoLogger\RSIT\Log"
C:\Windows\system32\wbem\wmiprvse.exe

======Папка назначеных зданий======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\Adobe Flash Player Updater - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\MdmUpdateTaskMachineCore - "C:\Users\User\AppData\Roaming\OBS\Caches\mdm" overmete.
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup - %systemroot%\system32\rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor - %systemroot%\system32\sdclt.exe /CHECKSKIPPED
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe" 
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - sc.exe start sppsvc
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - %SystemRoot%\System32\powercfg.exe -energy -auto
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs 
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe 
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe 
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe 
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe 
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent 
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe 
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe 
C:\Windows\system32\tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan - C:\Program Files\Microsoft Security Client\MpCmdRun.exe Scan -ScheduleJob -RestrictPrivileges

=========Google Chrome=========

C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Интернет-магазин Chrome 0.2
Extension aimfjfafgigdcmkhgnhpmchkbampkegb   
Extension bckhfnghfdponbaldednpnljadgfjecj   
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0  
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.7
Extension cfhdojbkjhnklbpkdaibdccddilifddb 1 Adblock Plus 1.8.12
Extension djhgiahomjkabjdodlemhnhbnbfcomam 1 Дополнительные настройки ВКонтакте 2.11.36
Extension dljdacfojgikogldjffnkdcielnklkce 0 Download Master 2.0
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension ennkphjdgehloodpbhlhldgbnhmacadg 1 Settings 0.2
Extension epieflhokkljodoigmepcoojbiemidjh   
Extension fibcoeahjhaiemkadpacopepbdfnjhfh 0 На понтах 2.0
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension gljmkepedihfojjfmjambblgjemocehi   
Extension gmlllbghnfkpflemihljekbapjopfjik 1 Bookmark Manager 2.2015.427.11450
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.20
Extension lccekmodgklaepjeofjdjpbminllajkg 1 Chrome Hotword Shared Module 0.3.0.2
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mfffpogegjflfpflabcdkioaeobkgjik 1 GaiaAuthExtension 0.0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf 1 Chrome 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension nbpagnldghgfoolbancepceaanlmhfmd 1 Hotword triggering 0.0.1.4
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google+ Hangouts 1.0
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Google Кошелек 0.1.0.0
Extension pafkbggdmjlpgkdkcbjmhmfcdpncadgh 1 Google Now 1.2.0.1
Homepage: http://www.google.com/
default_search_provider.search_url: 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage: 
default_search_provider.search_url: 

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\mfmjpfoggikolkfilofbpgcnhdcgahib]
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pfjgibhmcgncmjhdodpaolfbjpjjajal]
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgaidlfgjkmeendhknafahppllbniejm]
"Path"=


======Снимок реестра======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-02 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-02 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2015-01-30 1332296]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-05-01 2685072]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-05-01 1570672]
"Acronis Scheduler2 Service"=C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2014-05-30 384248]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlueStacks Agent]
C:\Program Files (x86)\BlueStacks\HD-Agent.exe [2015-01-23 843480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2015-04-23 8204056]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-04-30 334896]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ApnStub.exe]
"Debugger"=C:\Windows\SysWOW64\svchost.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ApnToolbarInstaller.exe]
"Debugger"=C:\Windows\SysWOW64\svchost.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avnotify.exe]
"Debugger"=C:\Windows\SysWOW64\svchost.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ipmgui.exe]
"Debugger"=C:\Windows\SysWOW64\svchost.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw64.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv

======Ассоциации файлов======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======Список файлов и папок, созданных за последние 3 месяца======

2015-05-05 09:01:59 ----A---- C:\Windows\SYSWOW64\drivers\utewntc4.sys
2015-05-05 01:43:28 ----D---- C:\rsit
2015-05-05 01:43:28 ----D---- C:\Program Files\trend micro
2015-05-05 01:33:34 ----D---- C:\Windows\SYSWOW64\directx
2015-05-05 01:27:33 ----D---- C:\Windows\SYSWOW64\API_DirectX11
2015-05-05 00:19:21 ----D---- C:\ProgramData\Acronis
2015-05-04 23:50:07 ----A---- C:\Windows\system32\drivers\snapman.sys
2015-05-04 23:50:04 ----A---- C:\Windows\system32\drivers\fltsrv.sys
2015-05-04 23:49:40 ----D---- C:\Program Files (x86)\Acronis
2015-05-04 23:34:05 ----D---- C:\Users\User\AppData\Roaming\GHISLER
2015-05-04 23:34:05 ----D---- C:\totalcmd
2015-05-04 21:23:17 ----D---- C:\Users\User\AppData\Roaming\NVIDIA
2015-05-04 19:32:30 ----A---- C:\Windows\system32\nvspbridge64.dll
2015-05-04 19:32:29 ----A---- C:\Windows\system32\nvspcap64.dll
2015-05-04 19:32:27 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2015-05-04 19:32:26 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2015-05-04 19:31:39 ----D---- C:\ProgramData\NVIDIA
2015-05-04 19:31:21 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-05-04 19:30:36 ----A---- C:\Windows\system32\nvvsvc.exe
2015-05-04 19:30:36 ----A---- C:\Windows\system32\nvsvcr.dll
2015-05-04 19:30:36 ----A---- C:\Windows\system32\nvsvc64.dll
2015-05-04 19:30:36 ----A---- C:\Windows\system32\nvshext.dll
2015-05-04 19:30:36 ----A---- C:\Windows\system32\nvmctray.dll
2015-05-04 19:30:36 ----A---- C:\Windows\system32\nvcpl.dll
2015-05-04 19:30:18 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2015-05-04 19:30:18 ----A---- C:\Windows\system32\OpenCL.dll
2015-05-04 19:30:06 ----D---- C:\ProgramData\NVIDIA Corporation
2015-05-04 19:29:58 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-05-04 19:28:43 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2015-05-04 19:28:43 ----A---- C:\Windows\system32\nvaudcap64v.dll
2015-05-04 19:28:43 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2015-05-04 19:28:41 ----A---- C:\Windows\system32\nvhdap64.dll
2015-05-04 19:28:41 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2015-05-04 19:28:41 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2015-05-04 19:28:40 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-05-04 19:28:40 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-05-04 19:28:40 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-05-04 19:28:40 ----A---- C:\Windows\system32\nvdispgenco6435012.dll
2015-05-04 19:28:40 ----A---- C:\Windows\system32\nvdispco6435012.dll
2015-05-04 19:28:40 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-05-04 19:28:39 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-05-04 19:28:39 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-05-04 19:28:39 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-05-04 19:28:39 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-05-04 19:28:39 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-05-04 19:28:39 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-05-04 19:28:39 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-05-04 19:28:39 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-05-04 19:28:39 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-05-04 19:28:39 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-05-04 19:28:39 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-05-04 19:28:39 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-05-04 19:28:39 ----A---- C:\Windows\system32\nvopencl.dll
2015-05-04 19:28:39 ----A---- C:\Windows\system32\nvoglv64.dll
2015-05-04 19:28:39 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-05-04 19:28:39 ----A---- C:\Windows\system32\nvinitx.dll
2015-05-04 19:28:39 ----A---- C:\Windows\system32\NvIFR64.dll
2015-05-04 19:28:39 ----A---- C:\Windows\system32\NvFBC64.dll
2015-05-04 19:28:39 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-05-04 19:28:39 ----A---- C:\Windows\system32\nvcuvid.dll
2015-05-04 19:28:39 ----A---- C:\Windows\system32\nvcuda.dll
2015-05-04 19:28:39 ----A---- C:\Windows\system32\nvcompiler.dll
2015-05-04 19:28:39 ----A---- C:\Windows\system32\nvapi64.dll
2015-05-03 11:37:42 ----A---- C:\Windows\ntbtlog.txt
2015-05-03 11:36:27 ----D---- C:\Windows\pss
2015-05-03 11:22:36 ----D---- C:\Program Files (x86)\FinalWire
2015-05-03 09:18:27 ----D---- C:\Users\User\AppData\Roaming\OBS
2015-05-03 09:18:22 ----D---- C:\Program Files\OBS
2015-05-03 09:18:19 ----D---- C:\Program Files (x86)\OBS
2015-05-02 22:37:39 ----D---- C:\Windows\Migration
2015-05-02 22:27:34 ----D---- C:\Program Files\Speccy
2015-05-02 20:26:34 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2015-05-02 20:26:06 ----D---- C:\Program Files (x86)\Java
2015-05-02 20:23:30 ----D---- C:\ProgramData\Sun
2015-05-02 20:20:47 ----D---- C:\ProgramData\Oracle
2015-05-02 18:49:53 ----ASH---- C:\pagefile.sys
2015-05-02 18:35:29 ----D---- C:\Program Files\Defraggler
2015-05-02 18:24:01 ----D---- C:\ProgramData\BlueStacks
2015-05-02 18:24:01 ----D---- C:\Program Files (x86)\BlueStacks
2015-05-02 18:23:08 ----D---- C:\ProgramData\BlueStacksSetup
2015-05-02 18:04:01 ----D---- C:\Program Files\CCleaner
2015-05-02 17:44:52 ----D---- C:\Users\User\AppData\Roaming\Wargaming.net
2015-05-02 17:40:08 ----D---- C:\Users\User\AppData\Roaming\raidcall
2015-05-02 17:39:59 ----D---- C:\Program Files (x86)\RaidCall
2015-05-02 17:34:45 ----D---- C:\Program Files (x86)\Mumble
2015-05-02 17:34:22 ----D---- C:\Users\User\AppData\Roaming\TS3Client
2015-05-02 17:33:37 ----D---- C:\Program Files\TeamSpeak 3 Client
2015-05-02 14:42:35 ----D---- C:\Program Files (x86)\Microsoft Security Client
2015-05-02 14:42:29 ----D---- C:\Program Files\Microsoft Security Client
2015-05-02 14:11:03 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2015-05-02 14:08:36 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-05-02 14:05:13 ----D---- C:\Users\User\AppData\Roaming\LibreOffice
2015-05-02 13:41:42 ----D---- C:\Users\User\AppData\Roaming\PotPlayerMini
2015-05-02 13:38:14 ----D---- C:\Users\User\AppData\Roaming\Canneverbe Limited
2015-05-02 13:38:14 ----D---- C:\ProgramData\Canneverbe Limited
2015-05-02 13:36:17 ----D---- C:\ProgramData\boost_interprocess
2015-05-02 13:36:11 ----D---- C:\Program Files\NVIDIA Corporation
2015-05-02 11:50:51 ----D---- C:\Program Files (x86)\LibreOffice 4
2015-05-02 11:50:24 ----D---- C:\Users\User\AppData\Roaming\Viber
2015-05-02 11:50:18 ----RD---- C:\Program Files (x86)\Skype
2015-05-02 11:50:18 ----D---- C:\Users\User\AppData\Roaming\uTorrent
2015-05-02 11:49:14 ----D---- C:\ProgramData\Skype
2015-05-02 11:48:58 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-05-02 11:48:56 ----D---- C:\Windows\SYSWOW64\Macromed
2015-05-02 11:48:54 ----D---- C:\Windows\system32\Macromed
2015-05-02 11:48:49 ----D---- C:\ProgramData\Adobe
2015-05-02 11:48:49 ----D---- C:\Program Files (x86)\Adobe
2015-05-02 11:48:47 ----D---- C:\Users\User\AppData\Roaming\Macromedia
2015-05-02 11:48:46 ----D---- C:\Users\User\AppData\Roaming\Adobe
2015-05-02 11:47:31 ----D---- C:\Program Files\Microsoft Silverlight
2015-05-02 11:47:31 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-05-02 11:45:32 ----D---- C:\Windows\SYSWOW64\Adobe
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\Vbrun300.dll
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\vbrun200.dll
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\vbrun100.dll
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\Vb40032.dll
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\Vb40016.dll
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\ssleay32.dll
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\msvcrt10.dll
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\msvcr71.dll
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\msvcr70.dll
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\msvcp71.dll
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\MSVCP70.DLL
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\msvci70.dll
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\msvbvm50.dll
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\MSSTKPRP.DLL
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\msstdfmt.dll
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\MFC71u.dll
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\MFC71KOR.DLL
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\MFC71JPN.DLL
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\MFC71ITA.DLL
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\MFC71FRA.DLL
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\MFC71ESP.DLL
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\MFC71ENU.DLL
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\MFC71DEU.DLL
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\MFC71CHT.DLL
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\MFC71CHS.DLL
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\MFC71.dll
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\mfc70u.dll
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\mfc70kor.dll
2015-05-02 11:45:24 ----A---- C:\Windows\SYSWOW64\mfc70jpn.dll
2015-05-02 11:45:23 ----A---- C:\Windows\SYSWOW64\mfc70ita.dll
2015-05-02 11:45:23 ----A---- C:\Windows\SYSWOW64\mfc70fra.dll
2015-05-02 11:45:23 ----A---- C:\Windows\SYSWOW64\mfc70esp.dll
2015-05-02 11:45:23 ----A---- C:\Windows\SYSWOW64\mfc70enu.dll
2015-05-02 11:45:23 ----A---- C:\Windows\SYSWOW64\mfc70deu.dll
2015-05-02 11:45:23 ----A---- C:\Windows\SYSWOW64\mfc70cht.dll
2015-05-02 11:45:23 ----A---- C:\Windows\SYSWOW64\mfc70chs.dll
2015-05-02 11:45:23 ----A---- C:\Windows\SYSWOW64\mfc70.dll
2015-05-02 11:45:23 ----A---- C:\Windows\SYSWOW64\libssl32.dll
2015-05-02 11:45:23 ----A---- C:\Windows\SYSWOW64\libeay32.dll
2015-05-02 11:45:23 ----A---- C:\Windows\SYSWOW64\atl71.dll
2015-05-02 11:45:23 ----A---- C:\Windows\SYSWOW64\atl70.dll
2015-05-02 11:45:23 ----A---- C:\Windows\system32\wrap_oal.dll
2015-05-02 11:45:23 ----A---- C:\Windows\system32\ssleay32.dll
2015-05-02 11:45:23 ----A---- C:\Windows\system32\OpenAL32.dll
2015-05-02 11:45:23 ----A---- C:\Windows\system32\libssl32.dll
2015-05-02 11:45:23 ----A---- C:\Windows\system32\libeay32.dll
2015-05-02 11:43:43 ----D---- C:\ProgramData\Package Cache
2015-05-02 11:42:50 ----D---- C:\Program Files\Recuva
2015-05-02 11:42:04 ----D---- C:\Users\User\AppData\Roaming\Foxit Software
2015-05-02 11:42:04 ----D---- C:\Program Files (x86)\Foxit Software
2015-05-02 11:41:31 ----D---- C:\Program Files\CDBurnerXP
2015-05-02 11:41:03 ----D---- C:\Program Files (x86)\Opera
2015-05-02 11:40:57 ----D---- C:\ProgramData\Mozilla
2015-05-02 11:40:37 ----D---- C:\Program Files (x86)\Google
2015-05-02 11:40:27 ----SHD---- C:\Windows\Installer
2015-05-02 11:40:21 ----D---- C:\Program Files (x86)\Daum
2015-05-02 11:40:11 ----A---- C:\Windows\system32\ff_vfw.dll
2015-05-02 11:40:09 ----A---- C:\Windows\SYSWOW64\xvidvfw.dll
2015-05-02 11:40:09 ----A---- C:\Windows\SYSWOW64\xvidcore.dll
2015-05-02 11:40:09 ----A---- C:\Windows\SYSWOW64\x264vfw.dll
2015-05-02 11:40:09 ----A---- C:\Windows\SYSWOW64\unrar.dll
2015-05-02 11:40:09 ----A---- C:\Windows\SYSWOW64\lagarith.dll
2015-05-02 11:40:09 ----A---- C:\Windows\system32\xvidvfw.dll
2015-05-02 11:40:09 ----A---- C:\Windows\system32\xvidcore.dll
2015-05-02 11:40:09 ----A---- C:\Windows\system32\x264vfw64.dll
2015-05-02 11:40:09 ----A---- C:\Windows\system32\unrar64.dll
2015-05-02 11:40:09 ----A---- C:\Windows\system32\lagarith.dll
2015-05-02 11:40:08 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2015-05-02 11:40:06 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2015-05-02 11:39:54 ----D---- C:\Program Files (x86)\FreeTime
2015-05-02 11:39:40 ----D---- C:\Users\User\AppData\Roaming\AIMP3
2015-05-02 11:39:39 ----D---- C:\Program Files (x86)\AIMP3
2015-05-02 11:33:55 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2015-05-02 11:33:55 ----A---- C:\Windows\system32\rdpcore.dll
2015-05-02 11:33:55 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2015-05-02 11:33:55 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2015-05-02 11:24:23 ----A---- C:\Windows\system32\wups2.dll
2015-05-02 11:24:23 ----A---- C:\Windows\system32\wucltux.dll
2015-05-02 11:24:23 ----A---- C:\Windows\system32\wuauclt.exe
2015-05-02 11:24:22 ----A---- C:\Windows\system32\wuaueng.dll
2015-05-02 11:24:17 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-05-02 11:24:17 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-05-02 11:24:17 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-05-02 11:24:17 ----A---- C:\Windows\system32\wups.dll
2015-05-02 11:24:17 ----A---- C:\Windows\system32\wudriver.dll
2015-05-02 11:24:17 ----A---- C:\Windows\system32\wuapi.dll
2015-05-02 11:24:10 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-05-02 11:24:10 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-05-02 11:24:10 ----A---- C:\Windows\system32\wuwebv.dll
2015-05-02 11:24:10 ----A---- C:\Windows\system32\wuapp.exe
2015-05-02 11:23:11 ----A---- C:\Windows\system32\RTNUninst64.dll
2015-05-02 11:23:11 ----A---- C:\Windows\system32\RtNicProp64.dll
2015-05-02 11:23:11 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2015-05-02 11:21:05 ----D---- C:\Users\User\AppData\Roaming\Identities
2015-05-02 11:20:47 ----SD---- C:\Users\User\AppData\Roaming\Microsoft
2015-05-02 11:20:43 ----SHD---- C:\Recovery
2015-05-02 11:20:42 ----SHD---- C:\ProgramData\Шаблоны
2015-05-02 11:20:42 ----SHD---- C:\ProgramData\Рабочий стол
2015-05-02 11:20:42 ----SHD---- C:\ProgramData\Избранное
2015-05-02 11:20:42 ----SHD---- C:\ProgramData\Документы
2015-05-02 11:20:42 ----SHD---- C:\ProgramData\Главное меню
2015-05-02 11:15:18 ----D---- C:\Windows\Panther
2015-05-02 10:18:38 ----D---- C:\Windows\SoftwareDistribution
2015-05-02 10:16:31 ----D---- C:\Windows\Prefetch
2015-05-02 10:15:47 ----SHD---- C:\System Volume Information
2015-05-02 10:15:47 ----ASH---- C:\hiberfil.sys
2015-04-18 19:31:43 ----D---- C:\NVIDIA
2015-04-18 15:16:59 ----D---- C:\Program Files (x86)\Rockstar Games
2015-04-18 15:16:52 ----D---- C:\Program Files\Rockstar Games

======Список файлов и папок, измененных за последние 3 месяца======

2015-05-05 09:02:10 ----D---- C:\Windows\Temp
2015-05-05 09:01:59 ----D---- C:\Windows\SYSWOW64\drivers
2015-05-05 08:37:12 ----D---- C:\Windows\inf
2015-05-05 08:37:12 ----AD---- C:\Windows\System32
2015-05-05 08:37:12 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-05-05 01:43:28 ----RD---- C:\Program Files
2015-05-05 01:34:00 ----HD---- C:\Windows\system32\GroupPolicy
2015-05-05 01:34:00 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2015-05-05 01:33:34 ----D---- C:\Windows\Logs
2015-05-05 01:33:34 ----AD---- C:\Windows\SysWOW64
2015-05-05 01:13:33 ----D---- C:\Windows\system32\config
2015-05-05 00:27:43 ----D---- C:\Windows\system32\DriverStore
2015-05-05 00:27:43 ----D---- C:\Windows\system32\catroot
2015-05-05 00:27:42 ----D---- C:\Windows\system32\catroot2
2015-05-05 00:26:20 ----SD---- C:\ProgramData\Microsoft
2015-05-05 00:19:21 ----HD---- C:\ProgramData
2015-05-04 23:50:08 ----D---- C:\Windows\system32\drivers
2015-05-04 23:49:40 ----RD---- C:\Program Files (x86)
2015-05-04 23:49:39 ----D---- C:\Program Files (x86)\Common Files
2015-05-04 19:30:36 ----D---- C:\Windows\Help
2015-05-04 19:14:02 ----D---- C:\Windows
2015-05-03 15:33:18 ----D---- C:\Windows\Microsoft.NET
2015-05-03 09:36:56 ----D---- C:\Windows\system32\drivers\UMDF
2015-05-02 22:42:13 ----RSD---- C:\Windows\assembly
2015-05-02 22:38:12 ----D---- C:\Windows\SYSWOW64\en-US
2015-05-02 22:38:12 ----D---- C:\Windows\system32\en-US
2015-05-02 18:37:54 ----D---- C:\Windows\system32\LogFiles
2015-05-02 18:21:08 ----D---- C:\Windows\system32\wdi
2015-05-02 18:11:32 ----D---- C:\Windows\debug
2015-05-02 18:04:14 ----D---- C:\Windows\system32\Tasks
2015-05-02 18:03:18 ----RSD---- C:\Windows\Fonts
2015-05-02 17:34:14 ----D---- C:\Windows\winsxs
2015-05-02 16:24:01 ----D---- C:\Windows\rescache
2015-05-02 13:45:30 ----D---- C:\Windows\Tasks
2015-05-02 11:45:48 ----D---- C:\Windows\SYSWOW64\ru-RU
2015-05-02 11:45:48 ----D---- C:\Windows\system32\ru-RU
2015-05-02 11:44:21 ----D---- C:\Program Files\Common Files\Microsoft Shared
2015-05-02 11:29:33 ----D---- C:\Windows\system32\CodeIntegrity
2015-05-02 11:22:51 ----D---- C:\Windows\system32\restore
2015-05-02 11:21:02 ----SHD---- C:\$Recycle.Bin
2015-05-02 11:20:46 ----RD---- C:\Users
2015-05-02 11:20:43 ----D---- C:\Windows\system32\Recovery
2015-05-02 11:20:42 ----D---- C:\Program Files\Windows NT
2015-05-02 10:18:55 ----D---- C:\Windows\system32\sysprep
2015-03-03 16:17:35 ----N---- C:\Windows\system32\MpSigStub.exe

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed
======Список драйверов (тип запуска: R=Запущен, S=остановлен, 0=Загрузочный, 1=Системный, 2=Автоматически, 3=Вручную, 4=Отключено)======

R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2015-05-04 118560]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-11-15 274696]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2015-05-04 276256]
R2 BstHdDrv;BlueStacks Hypervisor; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [2015-01-23 122072]
R3 amdhub30;AMD USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\amdhub30.sys [2012-01-04 103552]
R3 amdxhc;AMD USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\amdxhc.sys [2012-01-04 220288]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-04-09 195728]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-05-01 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-04-09 38032]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2014-06-17 941272]
S3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\drivers\asmthub3.sys [2011-11-22 130024]
S3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\drivers\asmtxhci.sys [2011-11-22 395752]
S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2012-01-06 59392]
S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2012-01-06 84608]
S3 FLxHCIc;Fresco Logic xHCI (USB3) Device Driver; C:\Windows\system32\drivers\FLxHCIc.sys [2011-12-13 224512]
S3 FLxHCIh;Fresco Logic xHCI (USB3) Hub Device Driver; C:\Windows\system32\drivers\FLxHCIh.sys [2011-12-13 71424]
S3 iusb3hub;Драйвер концентратора Intel(R) USB 3.0; C:\Windows\system32\drivers\iusb3hub.sys [2012-02-27 356120]
S3 iusb3xhc;Драйвер расширяемого хост-контроллера Intel(R) USB 3.0; C:\Windows\system32\drivers\iusb3xhc.sys [2012-02-27 788760]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-11-15 124560]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\drivers\nusb3hub.sys [2012-03-15 97280]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\drivers\nusb3xhc.sys [2012-03-15 217088]
S3 rusb3hub;Renesas Electronics USB 3.0 Hub Driver (Version 3.0); C:\Windows\system32\drivers\rusb3hub.sys [2011-11-21 101376]
S3 rusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver (Version 3.0); C:\Windows\system32\drivers\rusb3xhc.sys [2011-11-21 217088]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 utewntc4;AVZ Kernel Driver; \??\C:\Windows\system32\Drivers\utewntc4.sys []
S3 VUSB3HUB;VIA USB 3 Root Hub Service; C:\Windows\system32\drivers\ViaHub3.sys [2011-11-14 204800]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 xhcdrv;VIA USB eXtensible Host Controller Service; C:\Windows\system32\drivers\xhcdrv.sys [2011-11-14 256000]

======Список служб (тип запуска: R=Запущена, S=остановлена, 0=Загрузочная, 1=Системная, 2=Автоматически, 3=Вручную, 4=Отключено)======

R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2014-05-30 943368]
R2 BstHdUpdaterSvc;BlueStacks Updater Service; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [2015-01-23 786136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-05-01 1152656]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-01-30 23784]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-05-01 1884304]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-05-01 22997648]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-04-09 936264]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-04-08 410952]
S2 BstHdAndroidSvc;BlueStacks Android Service; C:\Program Files (x86)\BlueStacks\HD-Service.exe [2015-01-23 409304]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2015-01-30 366512]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-02 257416]
S4 BstHdLogRotatorSvc;BlueStacks Log Rotator Service; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [2015-01-23 388824]
S4 gupdate;Служба Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-02 116648]
S4 gupdatem;Служба Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-02 116648]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-09-05 171680]

-----------------EOF-----------------
