Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-03-2016 01
Ran by Natali (administrator) on NATALI-ПК (08-04-2016 14:38:15)
Running from C:\Users\Natali\Desktop
Loaded Profiles: Natali (Available Profiles: Natali)
Platform: Microsoft Windows 7 Домашняя расширенная  Service Pack 1 (X86) Language: Русский (Россия)
Internet Explorer Version 9 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
() C:\Windows\KMS-R@1n.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Symantec Corporation) C:\Program Files\Norton Security with Backup\Engine\22.6.0.142\NSBU.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Symantec Corporation) C:\Program Files\Norton Security with Backup\Engine\22.6.0.142\NSBU.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
() C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Joyent, Inc) C:\Program Files\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
(Joyent, Inc) C:\Program Files\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12336856 2015-06-18] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-01-07] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2312896 2016-02-12] (Adobe Systems Incorporated)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1085656 2015-12-18] (Adobe Systems Incorporated)
HKU\S-1-5-21-4061255917-297343436-2846361848-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6667992 2016-03-11] (Piriform Ltd)
ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security with Backup\Engine\22.6.0.142\buShell.dll [2016-02-18] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security with Backup\Engine\22.6.0.142\buShell.dll [2016-02-18] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security with Backup\Engine\22.6.0.142\buShell.dll [2016-02-18] (Symantec Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x86.dll [2016-01-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x86.dll [2016-01-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x86.dll [2016-01-22] ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{AEC77129-5A82-4A43-B70C-B09087746E0C}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://yandex.ru/?win=192&clid=2233381
HKU\S-1-5-21-4061255917-297343436-2846361848-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com.ua/
SearchScopes: HKLM -> {09CD854E-149E-4460-B0D3-172D7D897F4D} URL = hxxp://yandex.ru/yandsearch?text={searchTerms}&win=192&clid=2233382
SearchScopes: HKU\S-1-5-21-4061255917-297343436-2846361848-1000 -> {09CD854E-149E-4460-B0D3-172D7D897F4D} URL = hxxp://yandex.ru/yandsearch?text={searchTerms}&win=192&clid=2233382
SearchScopes: HKU\S-1-5-21-4061255917-297343436-2846361848-1000 -> {73A71234-6AFA-488F-8D24-6C2181788965} URL = hxxp://www.google.com/search?hl=en&q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-02-09] (Microsoft Corporation)
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security with Backup\Engine\22.6.0.142\coIEPlg.dll [2016-02-21] (Symantec Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2016-03-15] (Microsoft Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security with Backup\Engine\22.6.0.142\coIEPlg.dll [2016-02-21] (Symantec Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2015-02-17] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Natali\AppData\Roaming\Mozilla\Firefox\Profiles\9f1rwq5n.default
FF DefaultSearchEngine: Google
FF Homepage: hxxps://www.google.com.ua/?gws_rd=ssl#q=%D0%B2%D0%BE%D1%80%D0%BA+%D1%8E%D0%B0
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-18] (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-04-07] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-04-07] (Google Inc.)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-02-27] (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-02-12] (Adobe Systems)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-11-18] (Microsoft Corporation)
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2016-04-07] [not signed]
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.6.0.142\coFFAddon
FF Extension: Norton Identity Safe - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.6.0.142\coFFAddon [2016-04-06]

Chrome: 
=======
CHR Profile: C:\Users\Natali\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Презентации) - C:\Users\Natali\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-03-05]
CHR Extension: (Документы Google) - C:\Users\Natali\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-03-05]
CHR Extension: (Диск Google) - C:\Users\Natali\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-05]
CHR Extension: (YouTube) - C:\Users\Natali\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-05]
CHR Extension: (Norton Security Toolbar) - C:\Users\Natali\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2016-04-07]
CHR Extension: (Google Таблицы) - C:\Users\Natali\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-03-05]
CHR Extension: (Google Документы офлайн) - C:\Users\Natali\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (Norton Identity Safe) - C:\Users\Natali\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2016-04-07]
CHR Extension: (Платежная система Интернет-магазина Chrome) - C:\Users\Natali\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-05]
CHR Extension: (Gmail) - C:\Users\Natali\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-05]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files\Norton Security with Backup\Engine\22.6.0.142\Exts\Chrome.crx [2016-02-21]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-4061255917-297343436-2846361848-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ahkmpjnmnhjkpkacdhkliipnncobgkhk] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-4061255917-297343436-2846361848-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [oelpkepjlgmehajehfeicfbjdiobdkfj] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-4061255917-297343436-2846361848-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [phokcamelcbnjikjgomjjadeihhbbidh] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeUpdateService; C:\Program Files\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [693440 2016-01-28] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe [2020056 2016-02-09] (Adobe Systems, Incorporated)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2013-04-30] (Advanced Micro Devices, Inc.) [File not signed]
S3 defragsvc; C:\Windows\System32\defragsvc.dll [218624 2009-07-14] (Корпорация Майкрософт)
R2 KMS-R@1n; C:\Windows\KMS-R@1n.exe [23040 2016-03-20] () [File not signed]
R2 NSBU; C:\Program Files\Norton Security with Backup\Engine\22.6.0.142\NSBU.exe [289080 2016-02-26] (Symantec Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S3 WPCSvc; C:\Windows\System32\wpcsvc.dll [10752 2009-07-14] (Корпорация Майкрософт)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [567064 2014-08-19] (Wacom Technology, Corp.)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [45184 2012-03-05] (Advanced Micro Devices)
R3 athr; C:\Windows\System32\DRIVERS\athr.sys [2910720 2012-04-23] (Qualcomm Atheros Communications, Inc.)
R1 BHDrvx86; C:\Program Files\Norton Security with Backup\NortonData\22.6.0.142\Definitions\BASHDefs\20160405.001\BHDrvx86.sys [1269488 2016-04-05] (Symantec Corporation)
R1 ccSet_NSBU; C:\Windows\system32\drivers\NSBU\1606000.08E\ccSetx86.sys [137456 2016-02-24] (Symantec Corporation)
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [389968 2016-02-04] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [125264 2016-04-06] (Symantec Corporation)
S3 hidkmdf; C:\Windows\System32\DRIVERS\hidkmdf.sys [12088 2014-08-06] (Windows (R) Win 7 DDK provider)
R1 IDSVix86; C:\Program Files\Norton Security with Backup\NortonData\22.6.0.142\Definitions\IPSDefs\20160407.001\IDSvix86.sys [580344 2016-04-04] (Symantec Corporation)
R2 KMDFMEMIO; C:\Windows\System32\DRIVERS\kmdfmemio.sys [13312 2006-11-14] (SAMSUNG ELECTRONICS CO., LTD.)
R0 mountmgr; C:\Windows\System32\drivers\mountmgr.sys [78784 2015-07-15] (Корпорация Майкрософт)
R3 NAVENG; C:\Program Files\Norton Security with Backup\NortonData\22.6.0.142\Definitions\VirusDefs\20160407.024\NAVENG.SYS [104440 2016-04-06] (Symantec Corporation)
R3 NAVEX15; C:\Program Files\Norton Security with Backup\NortonData\22.6.0.142\Definitions\VirusDefs\20160407.024\NAVEX15.SYS [1647216 2016-04-06] (Symantec Corporation)
R3 SRTSP; C:\Windows\system32\drivers\NSBU\1606000.08E\SRTSP.SYS [713968 2016-02-24] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NSBU\1606000.08E\SRTSPX.SYS [44792 2016-02-24] (Symantec Corporation)
R0 SymEFASI; C:\Windows\System32\drivers\NSBU\1606000.08E\SYMEFASI.SYS [1287408 2016-02-24] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [103152 2016-04-06] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NSBU\1606000.08E\Ironx86.SYS [234736 2016-02-24] (Symantec Corporation)
R1 SymNetS; C:\Windows\system32\drivers\NSBU\1606000.08E\SYMNETS.SYS [431328 2016-02-24] (Symantec Corporation)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project)
R0 volmgrx; C:\Windows\System32\drivers\volmgrx.sys [297040 2009-07-14] (Корпорация Майкрософт)
S3 WacHidRouter; C:\Windows\System32\DRIVERS\wachidrouter.sys [85304 2014-08-06] (Wacom Technology)
S3 wacomrouterfilter; C:\Windows\System32\DRIVERS\wacomrouterfilter.sys [13112 2014-08-06] (Wacom Technology)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-08 14:38 - 2016-04-08 14:38 - 00017097 _____ C:\Users\Natali\Desktop\FRST.txt
2016-04-08 14:37 - 2016-04-08 14:38 - 00000000 ____D C:\FRST
2016-04-08 14:36 - 2016-04-08 14:36 - 01725440 _____ (Farbar) C:\Users\Natali\Desktop\FRST.exe
2016-04-08 13:44 - 2016-04-08 13:44 - 03119168 _____ C:\Users\Natali\Desktop\adwcleaner_5.109.exe
2016-04-08 12:42 - 2016-04-08 12:42 - 11831365 _____ C:\Users\Natali\Downloads\AutoLogger.zip
2016-04-08 10:37 - 2016-04-08 10:37 - 00000000 ____D C:\Users\Все пользователи\Malwarebytes
2016-04-08 10:37 - 2016-04-08 10:37 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-04-08 10:30 - 2016-04-08 10:30 - 22851472 _____ (Malwarebytes ) C:\Users\Natali\Downloads\mbam-setup-2.2.1.1043.exe
2016-04-07 20:16 - 2016-04-07 20:27 - 00000000 ____D C:\KVRT_Data
2016-04-07 20:14 - 2016-04-07 20:15 - 93044312 _____ (Kaspersky Lab ZAO) C:\Users\Natali\Downloads\KVRT.exe
2016-04-07 18:34 - 2016-04-07 18:34 - 10112832 _____ C:\Users\Natali\Downloads\avz4.zip
2016-04-07 17:58 - 2016-04-08 09:44 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-04-07 17:30 - 2016-04-07 17:37 - 00000000 ____D C:\Users\Natali\AppData\Local\Mozilla
2016-04-07 17:30 - 2016-04-07 17:30 - 00000000 ____D C:\Users\Natali\AppData\Roaming\Mozilla
2016-04-07 17:29 - 2016-04-08 09:44 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-04-07 17:29 - 2016-04-07 17:29 - 00001117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-04-07 17:29 - 2016-04-07 17:29 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-04-07 17:27 - 2016-04-07 17:28 - 43712128 _____ C:\Users\Natali\Downloads\firefox-setup-45.0.exe
2016-04-07 17:13 - 2016-04-08 11:29 - 00000000 ____D C:\Users\Natali\AppData\Local\CrashDumps
2016-04-07 16:56 - 2016-04-08 14:29 - 00000000 ____D C:\AdwCleaner
2016-04-07 16:54 - 2016-04-07 16:55 - 03119168 _____ C:\Users\Natali\Downloads\AdwCleaner.exe
2016-04-07 16:22 - 2016-04-07 16:47 - 00000000 ____D C:\Users\Natali\Doctor Web
2016-04-07 16:18 - 2016-04-07 16:21 - 187782336 _____ C:\Users\Natali\Downloads\azr9a6a7.exe
2016-04-07 14:57 - 2016-04-07 21:49 - 00002137 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-04-07 14:57 - 2016-04-07 21:49 - 00002125 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-04-07 14:56 - 2016-04-08 14:32 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-04-07 14:56 - 2016-04-08 14:01 - 00000956 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-04-06 20:51 - 2016-04-06 20:51 - 00000000 ____D C:\Program Files\Common Files\AV
2016-04-06 20:48 - 2016-04-06 21:01 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2016-04-06 20:48 - 2016-04-06 20:48 - 00103152 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT.SYS
2016-04-06 20:48 - 2016-04-06 20:48 - 00008178 _____ C:\Windows\system32\Drivers\SYMEVENT.CAT
2016-04-06 20:47 - 2016-04-06 20:47 - 00002489 _____ C:\Users\Public\Desktop\Norton Security + резервное копирование.LNK
2016-04-06 20:46 - 2016-04-06 20:47 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security with Backup
2016-04-06 20:46 - 2016-04-06 20:46 - 00000000 ____D C:\Windows\system32\Drivers\NSBU
2016-04-06 20:46 - 2016-04-06 20:46 - 00000000 ____D C:\Program Files\Norton Security with Backup
2016-04-06 20:44 - 2016-04-06 20:44 - 00000000 ____D C:\Users\Все пользователи\NortonInstaller
2016-04-06 20:44 - 2016-04-06 20:44 - 00000000 ____D C:\ProgramData\NortonInstaller
2016-04-06 20:44 - 2016-04-06 20:44 - 00000000 ____D C:\Program Files\NortonInstaller
2016-04-06 20:42 - 2016-04-06 20:52 - 00000000 ____D C:\Users\Все пользователи\Norton
2016-04-06 20:42 - 2016-04-06 20:52 - 00000000 ____D C:\Users\Natali\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
2016-04-06 20:42 - 2016-04-06 20:52 - 00000000 ____D C:\ProgramData\Norton
2016-04-06 20:42 - 2016-04-06 20:42 - 01089416 _____ (Symantec Corporation) C:\Users\Natali\Downloads\NSBUDownloader.exe
2016-04-06 20:42 - 2016-04-06 20:42 - 00000000 ____D C:\Users\Public\Downloads\Norton
2016-04-06 15:53 - 2016-04-06 15:53 - 00000000 ____D C:\Windows\system32\Чистилка
2016-04-06 15:40 - 2016-04-08 14:06 - 00000896 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-04-06 15:40 - 2016-04-06 15:40 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-04-06 15:40 - 2016-04-06 15:40 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-04-06 15:40 - 2016-04-06 15:40 - 00000000 ____D C:\Windows\system32\Macromed
2016-04-06 15:40 - 2016-04-06 15:40 - 00000000 ____D C:\Users\Natali\AppData\Roaming\Macromedia
2016-04-06 15:39 - 2016-04-06 15:40 - 00000000 ___HD C:\Windows\AxInstSV
2016-04-06 14:45 - 2016-04-06 14:45 - 00000000 ____D C:\Users\Natali\Documents\Чистилка
2016-04-06 14:44 - 2016-04-06 20:29 - 00000000 ____D C:\Users\Все пользователи\Чистилка
2016-04-06 14:44 - 2016-04-06 20:29 - 00000000 ____D C:\ProgramData\Чистилка
2016-04-06 14:42 - 2016-04-06 14:42 - 01308400 ____R C:\Users\Natali\Downloads\Chistilka 2.16.82.exe
2016-04-06 14:01 - 2016-04-06 14:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-04-06 14:01 - 2016-04-06 14:01 - 00000000 ____D C:\Program Files\CCleaner
2016-04-06 12:29 - 2016-04-06 12:29 - 00262144 _____ C:\Windows\system32\config\elam
2016-04-06 12:09 - 2016-04-06 12:09 - 00000159 _____ C:\Users\Natali\Downloads\kav-chip-april.zip
2016-04-06 11:43 - 2016-04-07 20:28 - 00000000 ____D C:\Users\Natali\AppData\LocalLow\SearchGo
2016-04-06 11:43 - 2016-04-06 11:43 - 00000000 ____D C:\Users\Natali\AppData\Local\Поиcк в Интeрнете
2016-04-06 11:42 - 2016-04-06 11:44 - 00000000 ____D C:\Users\Natali\AppData\Local\Unity
2016-04-06 11:41 - 2016-04-06 12:29 - 00000000 ____D C:\Users\Natali\AppData\Local\syslog
2016-04-06 11:41 - 2016-04-06 11:44 - 00000000 ____D C:\Users\Natali\AppData\LocalLow\Unity
2016-04-03 16:51 - 2016-03-25 21:36 - 00034024 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-04-03 16:51 - 2016-03-25 21:25 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-04-03 16:51 - 2016-03-23 17:02 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-04-03 16:51 - 2016-03-23 17:02 - 00177664 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-04-03 16:51 - 2016-03-17 21:04 - 00560640 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-04-03 16:51 - 2016-03-17 21:04 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-04-03 16:51 - 2016-03-17 21:04 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-04-03 16:51 - 2016-03-17 21:04 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-03-29 11:27 - 2016-03-29 11:38 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2016-03-29 11:27 - 2016-03-29 11:27 - 00001989 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2016-03-29 11:18 - 2016-03-29 11:19 - 51030454 _____ C:\Users\Natali\Downloads\kak-risovat-krutie-komiksi.pdf
2016-03-25 12:04 - 2016-03-25 12:04 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf
2016-03-25 12:03 - 2016-03-25 12:03 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf
2016-03-25 11:57 - 2016-03-25 11:57 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom
2016-03-25 11:57 - 2016-03-25 11:57 - 00000000 ____D C:\Users\Natali\AppData\Roaming\WTablet
2016-03-25 11:57 - 2016-03-25 11:57 - 00000000 ____D C:\Program Files\TabletPlugins
2016-03-25 11:57 - 2014-08-06 21:15 - 00085304 _____ (Wacom Technology) C:\Windows\system32\Drivers\wachidrouter.sys
2016-03-25 11:57 - 2014-08-06 21:15 - 00013112 _____ (Wacom Technology) C:\Windows\system32\Drivers\wacomrouterfilter.sys
2016-03-25 11:57 - 2014-08-06 21:15 - 00012088 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys
2016-03-25 11:57 - 2012-04-12 01:34 - 01461992 _____ (Microsoft Corporation) C:\Windows\system32\wdfcoinstaller01009.dll
2016-03-25 11:57 - 2012-04-12 01:34 - 01461992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01009.dll
2016-03-25 11:56 - 2016-03-25 11:57 - 00000000 ____D C:\Program Files\Tablet
2016-03-25 11:56 - 2014-08-19 22:12 - 01614104 _____ (Wacom Technology, Corp.) C:\Windows\system32\Pen_Tablet.dll
2016-03-25 11:56 - 2014-08-19 22:12 - 01610008 _____ (Wacom Technology, Corp.) C:\Windows\system32\WacomMT.dll
2016-03-25 11:56 - 2014-08-19 22:12 - 01607448 _____ (Wacom Technology, Corp.) C:\Windows\system32\Pen_Touch_Tablet.dll
2016-03-25 11:56 - 2014-08-19 22:12 - 01493784 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wintab32.dll
2016-03-25 11:53 - 2016-03-25 11:54 - 40103880 _____ C:\Users\Natali\Downloads\PenTablet_5.3.5-3.exe
2016-03-22 18:33 - 2016-04-06 14:56 - 00000000 ____D C:\Users\Natali\AppData\Roaming\Media Player Classic
2016-03-22 18:30 - 2016-03-22 18:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2016-03-22 18:30 - 2009-11-09 21:00 - 00085504 _____ C:\Windows\system32\ff_vfw.dll
2016-03-22 18:30 - 2009-11-09 21:00 - 00000038 _____ C:\Windows\avisplitter.ini
2016-03-22 18:30 - 2009-08-16 18:08 - 00178176 _____ C:\Windows\system32\unrar.dll
2016-03-22 18:30 - 2009-05-30 00:37 - 00205824 _____ C:\Windows\system32\xvidvfw.dll
2016-03-22 18:30 - 2009-05-30 00:31 - 00881664 _____ C:\Windows\system32\xvidcore.dll
2016-03-22 18:30 - 2008-10-03 15:30 - 00000414 _____ C:\Windows\system32\lame_acm.xml
2016-03-22 18:30 - 2008-09-24 21:41 - 00839680 _____ (hxxp://www.mp3dev.org/) C:\Windows\system32\lameACM.acm
2016-03-22 18:30 - 2007-09-21 03:52 - 00118784 _____ (fccHandler) C:\Windows\system32\ac3acm.acm
2016-03-22 18:30 - 2007-07-10 19:10 - 00000547 _____ C:\Windows\system32\ff_vfw.dll.manifest
2016-03-22 18:30 - 2006-04-02 15:47 - 00630784 _____ (On2.com) C:\Windows\system32\vp7vfw.dll
2016-03-22 18:30 - 2004-05-18 21:16 - 00039936 _____ (Disappearing Inc.) C:\Windows\system32\huffyuv.dll
2016-03-22 18:30 - 2004-01-25 19:18 - 00217088 _____ (www.helixcommunity.org) C:\Windows\system32\yv12vfw.dll
2016-03-20 15:45 - 2016-03-20 15:45 - 00000000 ____D C:\Users\Natali\AppData\Local\mpress
2016-03-20 15:37 - 2016-03-20 15:37 - 00023040 _____ C:\Windows\KMS-R@1n.exe
2016-03-20 15:37 - 2016-03-20 15:37 - 00003584 _____ C:\Windows\KMS-R@1nHook.dll
2016-03-20 15:12 - 2016-03-20 15:12 - 00009926 _____ C:\Users\Natali\Downloads\[rutor.org]KMSmicro.Selection.Edition.1.0.0.Aktivator.Win7.8..torrent
2016-03-19 19:32 - 2016-03-19 19:39 - 737026048 _____ C:\Users\Natali\Downloads\SW_DVD5_Office_Professional_Plus_2013_W32_Russian_MLF_X18-55179.ISO
2016-03-19 13:25 - 2016-04-06 21:19 - 00000000 ____D C:\Windows\AutoKMS
2016-03-19 13:24 - 2016-03-19 13:24 - 00000000 ____D C:\Users\Все пользователи\Microsoft Toolkit
2016-03-19 13:24 - 2016-03-19 13:24 - 00000000 ____D C:\ProgramData\Microsoft Toolkit
2016-03-17 16:35 - 2016-03-17 16:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
2016-03-17 16:35 - 2016-03-17 16:35 - 00000000 ____D C:\Program Files\AMD AVT
2016-03-17 16:35 - 2016-03-17 16:35 - 00000000 ____D C:\Program Files\AMD APP
2016-03-17 16:33 - 2016-03-17 16:33 - 00000000 ____D C:\Users\Все пользователи\ATI
2016-03-17 16:33 - 2016-03-17 16:33 - 00000000 ____D C:\ProgramData\ATI
2016-03-17 15:54 - 2016-03-17 15:55 - 93657184 ____R (Advanced Micro Devices, Inc.) C:\Users\Natali\Downloads\13-4_mobility_vista_win7_win8_32_dd_ccc_whql.exe
2016-03-17 15:53 - 2016-03-17 15:53 - 00028868 _____ C:\Users\Natali\Downloads\13-4_mobility_vista_win7_win8_32_dd_ccc_whql.exe.torrent
2016-03-17 13:24 - 2016-03-17 13:24 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2016-03-17 11:20 - 2016-03-17 16:35 - 00000000 ____D C:\Program Files\ATI Technologies
2016-03-17 10:57 - 2016-03-17 10:59 - 138371215 _____ C:\Users\Natali\Downloads\External_VGA_AMD_8.77.2.1000 (1).ZIP
2016-03-16 14:55 - 2015-12-16 00:50 - 01814528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-03-16 14:55 - 2015-12-16 00:49 - 12388864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-03-16 14:55 - 2015-12-16 00:47 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-03-16 14:55 - 2015-12-16 00:46 - 09753088 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-03-16 14:55 - 2015-12-16 00:45 - 01140224 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-03-16 14:55 - 2015-12-16 00:45 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-03-16 14:55 - 2015-12-16 00:44 - 01804800 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-03-16 14:55 - 2015-12-16 00:44 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-03-16 14:55 - 2015-12-16 00:44 - 00718848 _____ (Корпорация Майкрософт) C:\Windows\system32\jscript.dll
2016-03-16 14:55 - 2015-12-16 00:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-03-16 14:55 - 2015-12-16 00:44 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2016-03-16 14:55 - 2015-12-16 00:44 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-03-16 14:55 - 2015-12-16 00:44 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-03-16 14:55 - 2015-12-16 00:43 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-03-16 14:55 - 2015-12-16 00:43 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-03-16 14:55 - 2015-12-16 00:43 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-03-16 14:55 - 2015-12-16 00:43 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-03-16 14:55 - 2015-12-16 00:43 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-03-16 14:55 - 2015-12-16 00:43 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-03-16 14:55 - 2015-12-16 00:43 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2016-03-16 14:55 - 2015-12-16 00:43 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2016-03-16 14:55 - 2015-12-16 00:43 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2016-03-16 14:38 - 2016-03-16 14:38 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2016-03-16 14:38 - 2016-03-16 14:38 - 00434176 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00353584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2016-03-16 14:38 - 2016-03-16 14:38 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2016-03-16 14:38 - 2016-03-16 14:38 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2016-03-16 14:38 - 2016-03-16 14:38 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2016-03-16 14:38 - 2016-03-16 14:38 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-03-16 14:38 - 2016-03-16 14:38 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2016-03-16 14:38 - 2016-03-16 14:38 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-03-16 14:38 - 2016-03-16 14:38 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2016-03-16 13:43 - 2016-03-16 13:43 - 00000000 ____D C:\Users\Natali\AppData\Local\Microsoft Games
2016-03-16 13:37 - 2016-03-16 13:37 - 00000000 ____D C:\Users\Natali\Tracing
2016-03-16 13:19 - 2016-02-05 21:44 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-03-16 13:19 - 2016-02-05 20:33 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll
2016-03-16 13:19 - 2016-02-02 21:48 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2016-03-16 13:19 - 2016-02-01 22:02 - 00105408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-03-16 13:19 - 2016-02-01 21:49 - 02364928 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-03-16 13:19 - 2016-02-01 21:49 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-03-16 13:19 - 2016-02-01 21:49 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-03-16 13:19 - 2016-02-01 21:45 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-03-16 13:19 - 2016-02-01 21:44 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-03-16 13:19 - 2016-01-21 03:51 - 00057280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2016-03-16 13:19 - 2015-06-03 23:22 - 00355456 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-03-16 12:26 - 2016-03-16 12:26 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SABI_01009.Wdf
2016-03-16 12:26 - 2016-03-16 12:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2016-03-16 12:25 - 2016-03-16 12:25 - 00000000 ____D C:\Program Files\Samsung
2016-03-16 12:25 - 2010-03-31 10:35 - 00010752 _____ (SAMSUNG ELECTRONICS) C:\Windows\system32\Drivers\SABI.sys
2016-03-16 12:05 - 2016-03-16 12:05 - 13750697 _____ C:\Users\Natali\Downloads\Battery_Life_Extender_1.0.0.6.zip
2016-03-16 11:33 - 2016-03-16 11:33 - 00000428 _____ C:\Users\Natali\Downloads\CB177999.inf.torrent
2016-03-16 11:32 - 2016-03-16 11:34 - 222875784 ____R (AMD Inc.) C:\Users\Natali\Downloads\amd-catalyst-omega-14.12-with-dotnet45-win7-32bit.exe
2016-03-16 11:32 - 2016-03-16 11:32 - 00034295 _____ C:\Users\Natali\Downloads\amd-catalyst-omega-14.12-with-dotnet45-win7-32bit.exe.torrent
2016-03-16 11:31 - 2016-03-16 11:31 - 00032937 _____ C:\Users\Natali\Downloads\amd-catalyst-omega-14.12-with-dotnet45-win8.1-32bit.exe.torrent
2016-03-15 21:42 - 2016-03-15 21:42 - 01340329 _____ C:\Users\Natali\Downloads\Windows6.1-KB2888049-x86.msu
2016-03-15 21:40 - 2016-03-15 21:40 - 03186802 _____ C:\Users\Natali\Downloads\Windows6.1-KB2882822-x86.msu
2016-03-15 21:39 - 2016-03-15 21:40 - 02233654 _____ C:\Users\Natali\Downloads\Windows6.1-KB2639308-x86.msu
2016-03-15 21:39 - 2016-03-15 21:39 - 00599885 _____ C:\Users\Natali\Downloads\Windows6.1-KB2834140-v2-x86.msu
2016-03-15 21:39 - 2016-03-15 21:39 - 00230071 _____ C:\Users\Natali\Downloads\Windows6.1-KB2786081-x86.msu
2016-03-15 21:38 - 2016-03-15 21:39 - 05911327 _____ C:\Users\Natali\Downloads\Windows6.1-KB2670838-x86.msu
2016-03-15 21:38 - 2016-03-15 21:38 - 04904874 _____ C:\Users\Natali\Downloads\Windows6.1-KB2731771-x86.msu
2016-03-15 21:38 - 2016-03-15 21:38 - 01162805 _____ C:\Users\Natali\Downloads\Windows6.1-KB2533623-x86.msu
2016-03-15 21:37 - 2016-03-15 21:38 - 01662478 _____ C:\Users\Natali\Downloads\Windows6.1-KB2729094-v2-x86.msu
2016-03-15 21:25 - 2016-03-15 21:26 - 32335056 _____ (Microsoft Corporation) C:\Users\Natali\Downloads\IE11-Windows6.1-x86-ru-ru.exe
2016-03-15 21:08 - 2016-03-15 21:08 - 00000307 _____ C:\Users\Natali\Downloads\CH142836.inf.torrent
2016-03-15 20:36 - 2016-03-17 16:10 - 00000000 ____D C:\Program Files\AMD
2016-03-15 19:23 - 2016-03-15 19:24 - 115013576 ____R (Advanced Micro Devices, Inc.) C:\Users\Natali\Downloads\12-4_mobility_vista_win7_32_dd_ccc.exe
2016-03-15 19:10 - 2016-03-15 19:10 - 00035359 _____ C:\Users\Natali\Downloads\12-4_mobility_vista_win7_32_dd_ccc.exe.torrent
2016-03-15 19:01 - 2016-04-06 14:56 - 00000000 ____D C:\Windows\Minidump
2016-03-15 18:52 - 2016-03-15 18:55 - 100973336 _____ (Advanced Micro Devices, Inc.) C:\Users\Natali\Downloads\13-1_mobility_vista_win7_win8_32_dd_ccc_whql.exe
2016-03-15 18:28 - 2016-03-15 18:29 - 107523552 ____R (Advanced Micro Devices, Inc.) C:\Users\Natali\Downloads\13-1-legacy_vista_win7_win8_32_dd_ccc.exe
2016-03-15 18:28 - 2016-03-15 18:28 - 00031089 _____ C:\Users\Natali\Downloads\13-1_mobility_vista_win7_win8_32_dd_ccc_whql.exe.torrent
2016-03-15 18:27 - 2016-03-15 18:28 - 00033082 _____ C:\Users\Natali\Downloads\13-1-legacy_vista_win7_win8_32_dd_ccc.exe.torrent
2016-03-13 18:31 - 2016-03-13 18:31 - 00000000 ____D C:\Users\Natali\AppData\Roaming\ATI
2016-03-13 18:31 - 2016-03-13 18:31 - 00000000 ____D C:\Users\Natali\AppData\Local\ATI
2016-03-13 18:26 - 2016-03-13 18:26 - 00000000 ____D C:\Program Files\ATI
2016-03-13 18:23 - 2016-03-13 19:18 - 00000000 ____D C:\Users\Natali\AppData\Local\AMD
2016-03-13 17:52 - 2016-03-13 17:55 - 223173944 _____ (AMD Inc.) C:\Users\Natali\Downloads\radeon-crimson-15.12-raidxpert-utility-win10-win8.1-win7-32bit.exe
2016-03-13 15:30 - 2016-03-13 15:33 - 247545296 _____ (AMD Inc.) C:\Users\Natali\Downloads\non-whql-32bit-nieg-radeon-crimson-16.2.1-win10-win8.1-win7-feb27.exe
2016-03-13 15:28 - 2016-03-13 15:30 - 226499872 _____ (AMD Inc.) C:\Users\Natali\Downloads\amd-catalyst-15.7.1-with-dotnet45-win7-32bit.exe
2016-03-12 19:28 - 2016-03-12 19:28 - 31787008 _____ (AMD Inc.) C:\Users\Natali\Downloads\radeon-crimson-15.12-sb-sata-ahci-win10-win8.1-win7-32bit.exe
2016-03-12 19:01 - 2016-03-12 19:03 - 131807161 _____ C:\Users\Natali\Downloads\VGA_AMD_8.802.3.0000.ZIP
2016-03-12 17:31 - 2016-03-29 11:27 - 00000000 ____D C:\Users\Natali\AppData\LocalLow\Adobe
2016-03-11 16:09 - 2016-03-11 16:11 - 109291464 _____ (Advanced Micro Devices, Inc.) C:\Users\Natali\Downloads\13-9-legacy_vista_win7_32_dd_ccc_whql.exe
2016-03-11 15:26 - 2016-03-11 15:27 - 138371215 _____ C:\Users\Natali\Downloads\External_VGA_AMD_8.77.2.1000.ZIP
2016-03-11 15:24 - 2016-03-11 15:25 - 09141937 _____ C:\Users\Natali\Downloads\Samsung_Update_Plus_3.0.0.17.zip
2016-03-11 14:56 - 2016-03-11 14:56 - 00000000 ____D C:\Users\Все пользователи\SAMSUNG
2016-03-11 14:56 - 2016-03-11 14:56 - 00000000 ____D C:\ProgramData\SAMSUNG
2016-03-11 14:55 - 2016-03-11 14:55 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_KMDFMEMIO_01000.Wdf
2016-03-11 14:55 - 2006-11-14 10:11 - 00013312 _____ (SAMSUNG ELECTRONICS CO., LTD.) C:\Windows\system32\Drivers\KMDFMEMIO.sys
2016-03-11 14:50 - 2016-03-11 14:50 - 20835623 _____ C:\Users\Natali\Downloads\Easy_Display_Manager_WXP_3.2.3.3.ZIP
2016-03-10 18:56 - 2016-03-10 18:56 - 00000000 ____D C:\Users\Natali\AppData\Local\Skype
2016-03-10 18:55 - 2016-03-16 13:41 - 00000000 ____D C:\Users\Natali\AppData\Roaming\Skype
2016-03-10 18:55 - 2016-03-10 18:55 - 00002685 _____ C:\Users\Public\Desktop\Skype.lnk
2016-03-10 18:55 - 2016-03-10 18:55 - 00000000 ___RD C:\Program Files\Skype
2016-03-10 18:55 - 2016-03-10 18:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-03-10 18:55 - 2016-03-10 18:55 - 00000000 ____D C:\Program Files\Common Files\Skype
2016-03-10 18:54 - 2016-03-10 18:55 - 00000000 ____D C:\Users\Все пользователи\Skype
2016-03-10 18:54 - 2016-03-10 18:55 - 00000000 ____D C:\ProgramData\Skype
2016-03-10 18:46 - 2016-03-10 18:47 - 32335056 _____ (Microsoft Corporation) C:\Users\Natali\Downloads\Internet Explorer 11 (32).exe
2016-03-10 18:45 - 2016-03-10 18:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-03-10 18:44 - 2016-03-10 18:44 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-03-10 16:40 - 2016-03-10 16:40 - 00000000 ____D C:\Users\Natali\Documents\Пользовательские шаблоны Office
2016-03-10 16:38 - 2016-03-10 16:39 - 04952336 _____ (Advanced Micro Devices, Inc.) C:\Users\Natali\Downloads\autodetectutility.exe
2016-03-10 16:22 - 2016-03-10 16:22 - 00000000 ____D C:\Users\Natali\AppData\Roaming\PDAppFlex
2016-03-10 16:13 - 2016-03-10 16:13 - 00000000 ____D C:\Users\Все пользователи\regid.1986-12.com.adobe
2016-03-10 16:13 - 2016-03-10 16:13 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-03-10 14:38 - 2016-03-10 14:38 - 00001256 _____ C:\Users\Natali\Desktop\Adobe Photoshop CC 2015 (32 Bit).lnk
2016-03-10 14:38 - 2016-03-10 14:38 - 00000000 ____D C:\Users\Natali\Documents\Adobe
2016-03-10 14:19 - 2016-04-08 14:34 - 00000000 ___RD C:\Users\Natali\Creative Cloud Files
2016-03-10 14:19 - 2016-04-08 14:34 - 00000000 ____D C:\Users\Все пользователи\boost_interprocess
2016-03-10 14:19 - 2016-04-08 14:34 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-03-10 14:17 - 2016-03-29 11:27 - 00000000 ____D C:\Users\Natali\AppData\Roaming\Adobe
2016-03-10 14:14 - 2016-03-10 14:14 - 00001191 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2016-03-10 14:14 - 2016-03-10 14:14 - 00001179 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2016-03-10 14:12 - 2016-03-29 11:30 - 00000000 ____D C:\Users\Все пользователи\Adobe
2016-03-10 14:12 - 2016-03-29 11:30 - 00000000 ____D C:\ProgramData\Adobe
2016-03-10 14:11 - 2016-03-29 11:27 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-03-10 14:11 - 2016-03-29 11:27 - 00000000 ____D C:\Program Files\Adobe
2016-03-10 14:07 - 2016-04-08 14:34 - 00000000 ____D C:\Users\Natali\AppData\Local\Adobe
2016-03-10 14:07 - 2016-03-10 14:07 - 00692416 _____ (Adobe Systems Incorporated) C:\Users\Natali\Downloads\CreativeCloudSet-Up.exe
2016-03-10 11:31 - 2016-03-10 11:31 - 00000000 ___HD C:\$Windows.~WS
2016-03-09 13:01 - 2016-02-11 21:44 - 03994560 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2016-03-09 13:01 - 2016-02-11 21:44 - 03938240 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-03-09 13:01 - 2016-02-11 21:44 - 00138176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-03-09 13:01 - 2016-02-11 21:44 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-03-09 13:01 - 2016-02-11 21:41 - 01310232 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-03-09 13:01 - 2016-02-11 21:38 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-03-09 13:01 - 2016-02-11 21:38 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-03-09 13:01 - 2016-02-11 21:37 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-03-09 13:01 - 2016-02-11 21:37 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-03-09 13:01 - 2016-02-11 21:37 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-03-09 13:01 - 2016-02-11 21:37 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-03-09 13:01 - 2016-02-11 21:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-03-09 13:01 - 2016-02-11 21:37 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-03-09 13:01 - 2016-02-11 21:35 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-03-09 13:01 - 2016-02-11 21:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-03-09 13:01 - 2016-02-11 21:35 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-03-09 13:01 - 2016-02-11 21:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-03-09 13:01 - 2016-02-11 21:33 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-03-09 13:01 - 2016-02-11 21:33 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-03-09 13:01 - 2016-02-11 21:31 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-03-09 13:01 - 2016-02-11 21:31 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-03-09 13:01 - 2016-02-11 21:30 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-03-09 13:01 - 2016-02-11 21:30 - 00642560 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-03-09 13:01 - 2016-02-11 21:30 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-03-09 13:01 - 2016-02-11 20:43 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-03-09 13:01 - 2016-02-11 20:37 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-03-09 13:01 - 2016-02-11 20:32 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-03-09 13:01 - 2016-02-11 20:32 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-03-09 13:01 - 2016-02-11 20:32 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-03-09 13:01 - 2016-02-11 20:31 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-03-09 13:01 - 2016-02-11 20:30 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-03-09 13:01 - 2016-02-11 20:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-03-09 13:01 - 2016-02-11 20:30 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-03-09 13:01 - 2016-02-09 12:51 - 12625408 _____ (Корпорация Майкрософт (Microsoft Corp.)) C:\Windows\system32\wmploc.DLL
2016-03-09 13:01 - 2016-02-09 12:51 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-03-09 13:01 - 2016-02-09 12:50 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-03-09 13:01 - 2016-02-09 12:13 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-03-09 13:01 - 2016-02-09 12:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-03-09 13:01 - 2016-02-09 12:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-03-09 13:01 - 2016-02-05 21:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-03-09 13:01 - 2016-02-05 21:44 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-03-09 13:01 - 2016-02-05 21:42 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-03-09 13:01 - 2016-02-05 20:43 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-03-09 13:01 - 2016-02-05 20:43 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-03-09 13:01 - 2016-02-04 21:41 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-03-09 13:01 - 2016-02-04 20:46 - 02387456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-03-09 13:01 - 2016-02-03 21:49 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-03-09 13:01 - 2016-02-03 21:49 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2016-03-09 13:01 - 2016-02-03 21:43 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-03-09 13:01 - 2016-02-03 20:59 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-03-09 11:40 - 2016-03-09 11:40 - 00000000 ____D C:\$WINDOWS.~BT
2016-03-09 11:39 - 2016-03-09 11:40 - 18447464 _____ (Microsoft Corporation) C:\Users\Natali\Downloads\MediaCreationTool.exe
2016-03-09 10:45 - 2016-04-03 17:57 - 00000000 ____D C:\Windows\system32\appraiser
2016-03-09 10:45 - 2016-03-09 10:45 - 00000000 ___SD C:\Windows\system32\CompatTel

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-08 14:32 - 2009-07-14 07:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-04-08 14:30 - 2009-07-14 07:34 - 00028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-04-08 14:30 - 2009-07-14 07:34 - 00028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-04-08 13:02 - 2009-07-14 05:37 - 00000000 ____D C:\Windows\inf
2016-04-07 21:39 - 2016-03-05 15:18 - 00000000 ____D C:\Users\Natali
2016-04-07 17:01 - 2016-03-07 16:08 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-04-07 17:00 - 2016-03-07 16:01 - 00000000 ____D C:\Users\Все пользователи\Microsoft Help
2016-04-07 17:00 - 2009-07-14 05:04 - 00000478 _____ C:\Windows\win.ini
2016-04-07 14:57 - 2016-03-05 16:49 - 00000000 ____D C:\Program Files\Google
2016-04-07 14:56 - 2016-03-05 16:49 - 00000000 ____D C:\Users\Natali\AppData\Local\Deployment
2016-04-06 22:58 - 2011-05-03 18:37 - 00000000 ____D C:\TEMP
2016-04-06 21:59 - 2016-03-05 17:11 - 00000000 ____D C:\Users\Natali\AppData\Roaming\uTorrent
2016-04-06 20:33 - 2016-03-06 15:11 - 00000000 ____D C:\Users\Все пользователи\Kaspersky Lab
2016-04-06 20:33 - 2016-03-06 15:11 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2016-04-06 15:40 - 2009-07-14 07:52 - 00000000 ____D C:\Windows\Downloaded Program Files
2016-04-06 14:56 - 2016-03-05 15:02 - 00000000 ____D C:\Windows\Panther
2016-04-06 14:42 - 2016-03-05 17:12 - 00000000 ____D C:\Users\Natali\AppData\LocalLow\uTorrent
2016-03-29 10:15 - 2011-04-12 01:46 - 00724590 _____ C:\Windows\system32\perfh019.dat
2016-03-29 10:15 - 2011-04-12 01:46 - 00150874 _____ C:\Windows\system32\perfc019.dat
2016-03-29 10:15 - 2010-11-21 00:01 - 01648402 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-24 12:29 - 2016-03-07 09:33 - 00000000 ___SD C:\Windows\system32\GWX
2016-03-19 15:57 - 2009-07-14 07:53 - 00032568 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-03-19 14:45 - 2016-03-07 16:01 - 00000000 ____D C:\Users\Natali\AppData\Local\Microsoft Help
2016-03-19 13:42 - 2016-03-05 17:42 - 00000000 ____D C:\Users\Natali\AppData\Local\MSfree Inc
2016-03-17 16:35 - 2016-03-05 16:56 - 00000000 ____D C:\Users\Все пользователи\AMD
2016-03-17 16:35 - 2016-03-05 16:56 - 00000000 ____D C:\ProgramData\AMD
2016-03-17 16:08 - 2016-02-25 13:24 - 00000000 ____D C:\AMD
2016-03-16 15:34 - 2009-07-14 05:37 - 00000000 ____D C:\Windows\rescache
2016-03-16 14:43 - 2016-03-05 15:18 - 00001397 _____ C:\Users\Natali\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-03-16 14:41 - 2009-07-14 05:37 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-03-15 19:37 - 2009-07-14 05:37 - 00000000 ____D C:\Windows\LiveKernelReports
2016-03-13 15:45 - 2016-03-06 14:07 - 00000000 ____D C:\Users\Все пользователи\Package Cache
2016-03-13 15:45 - 2016-03-06 14:07 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-11 14:54 - 2016-03-05 16:40 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2016-03-10 13:48 - 2009-07-14 07:33 - 00433352 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-10 13:15 - 2016-03-07 11:02 - 00000000 ____D C:\Windows\system32\MRT
2016-03-10 13:06 - 2016-03-07 11:02 - 141270216 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-03-10 11:31 - 2009-07-14 05:37 - 00000000 ____D C:\Windows\AppCompat
2016-03-09 10:33 - 2016-03-05 16:41 - 00111520 _____ C:\Users\Natali\AppData\Local\GDIPFONTCACHEV1.DAT

==================== Files in the root of some directories =======

2016-03-06 17:31 - 2016-03-06 17:31 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-04-05 12:44

==================== End of FRST.txt ============================