Браузеры стали иногда открывать вместо страницы, её html код

Проблем много, систему давно не менял и антивирус поставил совсем недавно.

1.Все браузеры стали частенько открывать html код страницы вместо её содержимого.
2.В Firefox загрузка файла часто произвольно обрывается(только фаерфокс)
3.Во время игры или запуска любых других фулскринных приложений примерно раз в пару минут выскакивает невидимое окно предупреждения тем самым сворачивая игру.
4.стал оочень тормозить интернет, при работе в браузере скорость держится от 0,01 - 1 Мбит/с, при разговорах и передаче данных в скайпе скорость падает до 0,01 - 0,2 Мбит/с, НО! при скачивании в торренте скорость поднимается до 20-30Мбит/с

Уважаемый(ая) [B]Joker4862[/B], спасибо за обращение на наш форум!

Помощь при заражении комьютера на VirusInfo.Info оказывается абсолютно бесплатно. Хелперы, в самое ближайшее время, ответят на Ваш запрос. Для оказания помощи необходимо предоставить логи сканирования утилитами АВЗ и HiJackThis, подробнее можно прочитать в [URL="http://virusinfo.info/pravila.html"]правилах оформления запроса о помощи[/URL].

Если наш сайт окажется полезен Вам и у Вас будет такая возможность - пожалуйста [URL="http://virusinfo.info/content.php?r=113-virusinfo.info-donate"]поддержите проект[/URL].

Скачайте [url=http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/][b]Farbar Recovery Scan Tool[/b][/url] [img]http://i.imgur.com/NAAC5Ba.png[/img] и сохраните на Рабочем столе.

[b]Примечание[/b]: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.
[list][*]Запустите программу двойным щелчком. Когда программа запустится, нажмите [b]Yes[/b] для соглашения с предупреждением.[*]Убедитесь, что под окном [b]Optional Scan[/b] отмечены [i]"List BCD"[/i] и [i]"Driver MD5"[/i].[*]Нажмите кнопку [b]Scan[/b].[*]После окончания сканирования будет создан отчет ([b]FRST.txt[/b]) в той же папке, откуда была запущена программа. Пожалуйста, прикрепите отчет в следующем сообщении.[*]Если программа была запущена в первый раз, будет создан отчет ([b]Addition.txt[/b]). Пожалуйста, прикрепите его в следующем сообщении.[/list]
[img]http://i.imgur.com/B92LqRQ.png[/img]

вот.

[list][*]Скопируйте приведенный ниже текст в Блокнот и сохраните файл как [b]fixlist.txt[/b] в ту же папку откуда была запущена утилита Farbar Recovery Scan Tool:
[code]
CreateRestorePoint:
() C:\Program Files\eDealsPop\eDealsPop.exe
() C:\Program Files\eDealPop\eDealPop.exe
HKLM\...\Run: [eDealsPop] => C:\Program Files\eDealsPop\eDealsPop.exe [7168 2014-07-17] ()
HKLM\...\Run: [eDealPop] => C:\Program Files\eDealPop\eDealPop.exe [6144 2014-12-03] ()
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
FF Extension: No Name - C:\Users\Joker\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2015-02-26]
FF Extension: The best games in one place - C:\Users\Joker\AppData\Roaming\Mozilla\Firefox\profiles\extensions\[email protected] [2014-05-05]
FF Extension: The best games in one place - C:\Users\Joker\AppData\Roaming\Mozilla\Firefox\Profiles\zkfdlabb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-10]
FF HKLM\...\Firefox\Extensions: [jid1-n5ARdBzHkUEdAA@jetpack] - C:\Users\Joker\AppData\Roaming\Mozilla\Extensions\jid1-n5ARdBzHkUEdAA@jetpack
FF Extension: SuperMegaBest.com - C:\Users\Joker\AppData\Roaming\Mozilla\Extensions\jid1-n5ARdBzHkUEdAA@jetpack [2015-02-26]
CHR HKLM\...\Chrome\Extension: [aonedlchkbicmhepimiahfalheedjgbh] - https://clients2.google.com/service/update2/crx
OPR Extension: (SuperMegaBest.com) - C:\Users\Joker\AppData\Roaming\Opera Software\Opera Stable\Extensions\aonedlchkbicmhepimiahfalheedjgbh [2015-02-27]
OPR Extension: (Dolka.ru) - C:\Users\Joker\AppData\Roaming\Opera Software\Opera Stable\Extensions\pheobeikgpfdjfnlnhinkcogflmkcmlc [2014-05-05]
S2 5c8cd95dd9d6d93.exe; C:\Users\Joker\AppData\Local\b6a8cc3a7e211e1469cec6f720e8166a\5c8cd95dd9d6d93.exe [X]
S2 5d43026ca1feaa9.exe; C:\Users\Joker\AppData\Local\bf89c71a9b13f7bec7db217067f35b2a\5d43026ca1feaa9.exe [X]
S2 99de67bbbc0f180e4cd4348780d8201c.exe; C:\Users\Joker\AppData\Local\99de67bbbc0f180e4cd4348780d8201c\99de67bbbc0f180e4cd4348780d8201c.exe [X]
S2 AddonContextualFinder.exe; C:\Users\Joker\AppData\Local\AddonContextualFinder\AddonContextualFinder.exe [X]
S2 addonguiapi.exe; C:\Users\Joker\AppData\Local\addonguiapi\addonguiapi.exe [X]
S2 advapisbe_86.exe; C:\Users\Joker\AppData\Local\advapisbe_86\advapisbe_86.exe [X]
S2 advapiurlmonProt.exe; C:\Users\Joker\AppData\Local\advapiurlmonProt\advapiurlmonProt.exe [X]
S2 apiappGUI.exe; C:\Users\Joker\AppData\Local\apiappGUI\apiappGUI.exe [X]
S2 apimotionBckp.exe; C:\Users\Joker\AppData\Local\apimotionBckp\apimotionBckp.exe [X]
S2 apiregidleapi.exe; C:\Users\Joker\AppData\Local\apiregidleapi\apiregidleapi.exe [X]
S2 appcomdlgRec.exe; C:\Users\Joker\AppData\Local\appcomdlgRec\appcomdlgRec.exe [X]
S2 AppFreewarePath.exe; C:\Users\Joker\AppData\Local\AppFreewarePath\AppFreewarePath.exe [X]
S2 apphotstartGUI.exe; C:\Users\Joker\AppData\Local\apphotstartGUI\apphotstartGUI.exe [X]
S2 ApplicationCompileMethod.exe; C:\Users\Joker\AppData\Local\ApplicationCompileMethod\ApplicationCompileMethod.exe [X]
S2 applicationmf_86.exe; C:\Users\Joker\AppData\Local\applicationmf_86\applicationmf_86.exe [X]
S2 applicationmidimap_86.exe; C:\Users\Joker\AppData\Local\applicationmidimap_86\applicationmidimap_86.exe [X]
S2 applicationnetbridgeRec.exe; C:\Users\Joker\AppData\Local\applicationnetbridgeRec\applicationnetbridgeRec.exe [X]
S2 appnapinspDrv.exe; C:\Users\Joker\AppData\Local\appnapinspDrv\appnapinspDrv.exe [X]
S2 archiveevrx86.exe; C:\Users\Joker\AppData\Local\archiveevrx86\archiveevrx86.exe [X]
S2 archivesnapshotClient.exe; C:\Users\Joker\AppData\Local\archivesnapshotClient\archivesnapshotClient.exe [X]
S2 autowakeitvdatax86.exe; C:\Users\Joker\AppData\Local\autowakeitvdatax86\autowakeitvdatax86.exe [X]
S2 autowakemswsockProt.exe; C:\Users\Joker\AppData\Local\autowakemswsockProt\autowakemswsockProt.exe [X]
S2 BackupBIOSWYSIWYG.exe; C:\Users\Joker\AppData\Local\BackupBIOSWYSIWYG\BackupBIOSWYSIWYG.exe [X]
S2 backuplpkSched.exe; C:\Users\Joker\AppData\Local\backuplpkSched\backuplpkSched.exe [X]
S2 backupmbrClient.exe; C:\Users\Joker\AppData\Local\backupmbrClient\backupmbrClient.exe [X]
S2 backupruntimeClient.exe; C:\Users\Joker\AppData\Local\backupruntimeClient\backupruntimeClient.exe [X]
S2 biosehtraceUI.exe; C:\Users\Joker\AppData\Local\biosehtraceUI\biosehtraceUI.exe [X]
S2 BIOSKernelPython.exe; C:\Users\Joker\AppData\Local\BIOSKernelPython\BIOSKernelPython.exe [X]
S2 biosmemoryTask.exe; C:\Users\Joker\AppData\Local\biosmemoryTask\biosmemoryTask.exe [X]
S2 biosrepository64.exe; C:\Users\Joker\AppData\Local\biosrepository64\biosrepository64.exe [X]
S2 cgiehstorUI.exe; C:\Users\Joker\AppData\Local\cgiehstorUI\cgiehstorUI.exe [X]
S2 cgiehtracex86.exe; C:\Users\Joker\AppData\Local\cgiehtracex86\cgiehtracex86.exe [X]
S2 CGIFileMemory.exe; C:\Users\Joker\AppData\Local\CGIFileMemory\CGIFileMemory.exe [X]
S2 CGIIndexWin32.exe; C:\Users\Joker\AppData\Local\CGIIndexWin32\CGIIndexWin32.exe [X]
S2 CGILogMacro.exe; C:\Users\Joker\AppData\Local\CGILogMacro\CGILogMacro.exe [X]
S2 CGIMethodRaw.exe; C:\Users\Joker\AppData\Local\CGIMethodRaw\CGIMethodRaw.exe [X]
S2 cgiminimal_86.exe; C:\Users\Joker\AppData\Local\cgiminimal_86\cgiminimal_86.exe [X]
S2 cginapinspProt.exe; C:\Users\Joker\AppData\Local\cginapinspProt\cginapinspProt.exe [X]
S2 CGIOCRODBC.exe; C:\Users\Joker\AppData\Local\CGIOCRODBC\CGIOCRODBC.exe [X]
S2 cgiocrProvider.exe; C:\Users\Joker\AppData\Local\cgiocrProvider\cgiocrProvider.exe [X]
S2 cgiwindowsTask.exe; C:\Users\Joker\AppData\Local\cgiwindowsTask\cgiwindowsTask.exe [X]
S2 clipboardcontrolMonitor.exe; C:\Users\Joker\AppData\Local\clipboardcontrolMonitor\clipboardcontrolMonitor.exe [X]
S2 clipboardgui_64.exe; C:\Users\Joker\AppData\Local\clipboardgui_64\clipboardgui_64.exe [X]
S2 clipboardmydocsProvider.exe; C:\Users\Joker\AppData\Local\clipboardmydocsProvider\clipboardmydocsProvider.exe [X]
S2 ClipboardRootSymbolic.exe; C:\Users\Joker\AppData\Local\ClipboardRootSymbolic\ClipboardRootSymbolic.exe [X]
S2 clipboardruntimex64.exe; C:\Users\Joker\AppData\Local\clipboardruntimex64\clipboardruntimex64.exe [X]
S2 CodecCursorMotion.exe; C:\Users\Joker\AppData\Local\CodecCursorMotion\CodecCursorMotion.exe [X]
S2 CodecDirect3dWizard.exe; C:\Users\Joker\AppData\Local\CodecDirect3dWizard\CodecDirect3dWizard.exe [X]
S2 codecdriverBckp.exe; C:\Users\Joker\AppData\Local\codecdriverBckp\codecdriverBckp.exe [X]
S2 CodecFormatMacro.exe; C:\Users\Joker\AppData\Local\CodecFormatMacro\CodecFormatMacro.exe [X]
S2 codecrawGUI.exe; C:\Users\Joker\AppData\Local\codecrawGUI\codecrawGUI.exe [X]
S2 comdlgdifxx64.exe; C:\Users\Joker\AppData\Local\comdlgdifxx64\comdlgdifxx64.exe [X]
S2 comdlgusp32.exe; C:\Users\Joker\AppData\Local\comdlgusp32\comdlgusp32.exe [X]
S2 commandfirmware_86.exe; C:\Users\Joker\AppData\Local\commandfirmware_86\commandfirmware_86.exe [X]
S2 commandnetbridgeProvider.exe; C:\Users\Joker\AppData\Local\commandnetbridgeProvider\commandnetbridgeProvider.exe [X]
S2 commandscript_86.exe; C:\Users\Joker\AppData\Local\commandscript_86\commandscript_86.exe [X]
S2 compilenetbridgeRecovery.exe; C:\Users\Joker\AppData\Local\compilenetbridgeRecovery\compilenetbridgeRecovery.exe [X]
S2 compilepython_64.exe; C:\Users\Joker\AppData\Local\compilepython_64\compilepython_64.exe [X]
S2 compilerregisterProt.exe; C:\Users\Joker\AppData\Local\compilerregisterProt\compilerregisterProt.exe [X]
S2 compilerrootGUI.exe; C:\Users\Joker\AppData\Local\compilerrootGUI\compilerrootGUI.exe [X]
S2 compilerwdcapi.exe; C:\Users\Joker\AppData\Local\compilerwdcapi\compilerwdcapi.exe [X]
S2 compilerwin32Task.exe; C:\Users\Joker\AppData\Local\compilerwin32Task\compilerwin32Task.exe [X]
S2 compilewigetMonitor.exe; C:\Users\Joker\AppData\Local\compilewigetMonitor\compilewigetMonitor.exe [X]
S2 contextualdefaultProvider.exe; C:\Users\Joker\AppData\Local\contextualdefaultProvider\contextualdefaultProvider.exe [X]
S2 contextualdos64.exe; C:\Users\Joker\AppData\Local\contextualdos64\contextualdos64.exe [X]
S2 contextualjreGUI.exe; C:\Users\Joker\AppData\Local\contextualjreGUI\contextualjreGUI.exe [X]
S2 contextualmsvidctl_86.exe; C:\Users\Joker\AppData\Local\contextualmsvidctl_86\contextualmsvidctl_86.exe [X]
S2 ContextualPrivacyScript.exe; C:\Users\Joker\AppData\Local\ContextualPrivacyScript\ContextualPrivacyScript.exe [X]
S2 contextualtspkgDrv.exe; C:\Users\Joker\AppData\Local\contextualtspkgDrv\contextualtspkgDrv.exe [X]
S2 contextualutilityDrv.exe; C:\Users\Joker\AppData\Local\contextualutilityDrv\contextualutilityDrv.exe [X]
S2 ControlSoftwareSprite.exe; C:\Users\Joker\AppData\Local\ControlSoftwareSprite\ControlSoftwareSprite.exe [X]
S2 copywebcheckProvider.exe; C:\Users\Joker\AppData\Local\copywebcheckProvider\copywebcheckProvider.exe [X]
S2 crondimsjobTask.exe; C:\Users\Joker\AppData\Local\crondimsjobTask\crondimsjobTask.exe [X]
S2 cronosx64.exe; C:\Users\Joker\AppData\Local\cronosx64\cronosx64.exe [X]
S2 cronshellMonitor.exe; C:\Users\Joker\AppData\Local\cronshellMonitor\cronshellMonitor.exe [X]
S2 cursordlcDrv.exe; C:\Users\Joker\AppData\Local\cursordlcDrv\cursordlcDrv.exe [X]
S2 cursormotionUI.exe; C:\Users\Joker\AppData\Local\cursormotionUI\cursormotionUI.exe [X]
S2 cursorprocessx64.exe; C:\Users\Joker\AppData\Local\cursorprocessx64\cursorprocessx64.exe [X]
S2 daemonitvdatax86.exe; C:\Users\Joker\AppData\Local\daemonitvdatax86\daemonitvdatax86.exe [X]
S2 DaemonMemoryShareware.exe; C:\Users\Joker\AppData\Local\DaemonMemoryShareware\DaemonMemoryShareware.exe [X]
S2 daemonmsmpeg2vdecDrv.exe; C:\Users\Joker\AppData\Local\daemonmsmpeg2vdecDrv\daemonmsmpeg2vdecDrv.exe [X]
S2 DaemonNetQuick.exe; C:\Users\Joker\AppData\Local\DaemonNetQuick\DaemonNetQuick.exe [X]
S2 daemonwinsock64.exe; C:\Users\Joker\AppData\Local\daemonwinsock64\daemonwinsock64.exe [X]
S2 dashboardschannelProvider.exe; C:\Users\Joker\AppData\Local\dashboardschannelProvider\dashboardschannelProvider.exe [X]
S2 dashboardwinsockClient.exe; C:\Users\Joker\AppData\Local\dashboardwinsockClient\dashboardwinsockClient.exe [X]
S2 databaseehdrminitClient.exe; C:\Users\Joker\AppData\Local\databaseehdrminitClient\databaseehdrminitClient.exe [X]
S2 DatabaseMotionTask.exe; C:\Users\Joker\AppData\Local\DatabaseMotionTask\DatabaseMotionTask.exe [X]
S2 databasewinsockGUI.exe; C:\Users\Joker\AppData\Local\databasewinsockGUI\databasewinsockGUI.exe [X]
S2 debugevrx64.exe; C:\Users\Joker\AppData\Local\debugevrx64\debugevrx64.exe [X]
S2 debuggerdimsjobx86.exe; C:\Users\Joker\AppData\Local\debuggerdimsjobx86\debuggerdimsjobx86.exe [X]
S2 debuggerfolderClient.exe; C:\Users\Joker\AppData\Local\debuggerfolderClient\debuggerfolderClient.exe [X]
S2 debuggerinterpreterProt.exe; C:\Users\Joker\AppData\Local\debuggerinterpreterProt\debuggerinterpreterProt.exe [X]
S2 DebuggerNetRecycle.exe; C:\Users\Joker\AppData\Local\DebuggerNetRecycle\DebuggerNetRecycle.exe [X]
S2 debuggernetx86.exe; C:\Users\Joker\AppData\Local\debuggernetx86\debuggernetx86.exe [X]
S2 debuggeropenProvider.exe; C:\Users\Joker\AppData\Local\debuggeropenProvider\debuggeropenProvider.exe [X]
S2 debugpku2u32.exe; C:\Users\Joker\AppData\Local\debugpku2u32\debugpku2u32.exe [X]
S2 debugpublicClient.exe; C:\Users\Joker\AppData\Local\debugpublicClient\debugpublicClient.exe [X]
S2 debugscreenshot32.exe; C:\Users\Joker\AppData\Local\debugscreenshot32\debugscreenshot32.exe [X]
S2 debugusbceipMonitor.exe; C:\Users\Joker\AppData\Local\debugusbceipMonitor\debugusbceipMonitor.exe [X]
S2 defaultkeyboardTask.exe; C:\Users\Joker\AppData\Local\defaultkeyboardTask\defaultkeyboardTask.exe [X]
S2 defaultmotionTask.exe; C:\Users\Joker\AppData\Local\defaultmotionTask\defaultmotionTask.exe [X]
S2 defaultnativeSched.exe; C:\Users\Joker\AppData\Local\defaultnativeSched\defaultnativeSched.exe [X]
S2 defaultpython32.exe; C:\Users\Joker\AppData\Local\defaultpython32\defaultpython32.exe [X]
S2 defaultsbe32.exe; C:\Users\Joker\AppData\Local\defaultsbe32\defaultsbe32.exe [X]
S2 desktopdriverMonitor.exe; C:\Users\Joker\AppData\Local\desktopdriverMonitor\desktopdriverMonitor.exe [X]
S2 DesktopFrozenStart.exe; C:\Users\Joker\AppData\Local\DesktopFrozenStart\DesktopFrozenStart.exe [X]
S2 DesktopGNURemote.exe; C:\Users\Joker\AppData\Local\DesktopGNURemote\DesktopGNURemote.exe [X]
S2 desktopindexRecovery.exe; C:\Users\Joker\AppData\Local\desktopindexRecovery\desktopindexRecovery.exe [X]
S2 desktopmsvidctlUI.exe; C:\Users\Joker\AppData\Local\desktopmsvidctlUI\desktopmsvidctlUI.exe [X]
S2 desktopwpcumiSched.exe; C:\Users\Joker\AppData\Local\desktopwpcumiSched\desktopwpcumiSched.exe [X]
S2 dfsshlexnapinspapi.exe; C:\Users\Joker\AppData\Local\dfsshlexnapinspapi\dfsshlexnapinspapi.exe [X]
S2 difxsbdropBckp.exe; C:\Users\Joker\AppData\Local\difxsbdropBckp\difxsbdropBckp.exe [X]
S2 direct3dmydocsProvider.exe; C:\Users\Joker\AppData\Local\direct3dmydocsProvider\direct3dmydocsProvider.exe [X]
S2 direct3dpublicUI.exe; C:\Users\Joker\AppData\Local\direct3dpublicUI\direct3dpublicUI.exe [X]
S2 direct3dsambaRecovery.exe; C:\Users\Joker\AppData\Local\direct3dsambaRecovery\direct3dsambaRecovery.exe [X]
S2 direct3dsoftwareRec.exe; C:\Users\Joker\AppData\Local\direct3dsoftwareRec\direct3dsoftwareRec.exe [X]
S2 directxgamma_64.exe; C:\Users\Joker\AppData\Local\directxgamma_64\directxgamma_64.exe [X]
S2 DirectXSharewareTask; C:\Windows\system32\DirectXSharewareTask\DirectXSharewareTask.exe [X]
S2 directxsprite64.exe; C:\Users\Joker\AppData\Local\directxsprite64\directxsprite64.exe [X]
S2 dlcbitsigdGUI.exe; C:\Users\Joker\AppData\Local\dlcbitsigdGUI\dlcbitsigdGUI.exe [X]
S2 dlcevrx86.exe; C:\Users\Joker\AppData\Local\dlcevrx86\dlcevrx86.exe [X]
S2 DLCFormatScript.exe; C:\Users\Joker\AppData\Local\DLCFormatScript\DLCFormatScript.exe [X]
S2 DLCGUIPerl.exe; C:\Users\Joker\AppData\Local\DLCGUIPerl\DLCGUIPerl.exe [X]
S2 dlcmpg2spltProvider.exe; C:\Users\Joker\AppData\Local\dlcmpg2spltProvider\dlcmpg2spltProvider.exe [X]
S2 dlcpku2u64.exe; C:\Users\Joker\AppData\Local\dlcpku2u64\dlcpku2u64.exe [X]
S2 DLCRawSymbolic.exe; C:\Users\Joker\AppData\Local\DLCRawSymbolic\DLCRawSymbolic.exe [X]
S2 dlcshellx64.exe; C:\Users\Joker\AppData\Local\dlcshellx64\dlcshellx64.exe [X]
S2 dockfolderBckp.exe; C:\Users\Joker\AppData\Local\dockfolderBckp\dockfolderBckp.exe [X]
S2 dockformat_86.exe; C:\Users\Joker\AppData\Local\dockformat_86\dockformat_86.exe [X]
S2 dosgnuTask.exe; C:\Users\Joker\AppData\Local\dosgnuTask\dosgnuTask.exe [X]
S2 dosmfTask.exe; C:\Users\Joker\AppData\Local\dosmfTask\dosmfTask.exe [X]
S2 dosmydocsx86.exe; C:\Users\Joker\AppData\Local\dosmydocsx86\dosmydocsx86.exe [X]
S2 dosrepositoryRec.exe; C:\Users\Joker\AppData\Local\dosrepositoryRec\dosrepositoryRec.exe [X]
S2 driverprivacyClient.exe; C:\Users\Joker\AppData\Local\driverprivacyClient\driverprivacyClient.exe [X]
S2 ehdrminitbitsigdBckp.exe; C:\Users\Joker\AppData\Local\ehdrminitbitsigdBckp\ehdrminitbitsigdBckp.exe [X]
S2 ehdrminitehtrace_64.exe; C:\Users\Joker\AppData\Local\ehdrminitehtrace_64\ehdrminitehtrace_64.exe [X]
S2 ehdrminitschannelRec.exe; C:\Users\Joker\AppData\Local\ehdrminitschannelRec\ehdrminitschannelRec.exe [X]
S2 ehdrminitshdocvwDrv.exe; C:\Users\Joker\AppData\Local\ehdrminitshdocvwDrv\ehdrminitshdocvwDrv.exe [X]
S2 ehstorgdi32.exe; C:\Users\Joker\AppData\Local\ehstorgdi32\ehstorgdi32.exe [X]
S2 ehtraceregidlex86.exe; C:\Users\Joker\AppData\Local\ehtraceregidlex86\ehtraceregidlex86.exe [X]
S2 encondinggnuUI.exe; C:\Users\Joker\AppData\Local\encondinggnuUI\encondinggnuUI.exe [X]
S2 encondingscriptUI.exe; C:\Users\Joker\AppData\Local\encondingscriptUI\encondingscriptUI.exe [X]
S2 encondingvbicodecapi.exe; C:\Users\Joker\AppData\Local\encondingvbicodecapi\encondingvbicodecapi.exe [X]
S2 encondingwdmaudProvider.exe; C:\Users\Joker\AppData\Local\encondingwdmaudProvider\encondingwdmaudProvider.exe [X]
S2 evrehstorBckp.exe; C:\Users\Joker\AppData\Local\evrehstorBckp\evrehstorBckp.exe [X]
S2 exportdimsjobRecovery.exe; C:\Users\Joker\AppData\Local\exportdimsjobRecovery\exportdimsjobRecovery.exe [X]
S2 exportfat32_64.exe; C:\Users\Joker\AppData\Local\exportfat32_64\exportfat32_64.exe [X]
S2 exportocrapi.exe; C:\Users\Joker\AppData\Local\exportocrapi\exportocrapi.exe [X]
S2 exportruntimex86.exe; C:\Users\Joker\AppData\Local\exportruntimex86\exportruntimex86.exe [X]
S2 ExportSambaSDK.exe; C:\Users\Joker\AppData\Local\ExportSambaSDK\ExportSambaSDK.exe [X]
S2 fat32cercredSched.exe; C:\Users\Joker\AppData\Local\fat32cercredSched\fat32cercredSched.exe [X]
S2 fat32kernelceipDrv.exe; C:\Users\Joker\AppData\Local\fat32kernelceipDrv\fat32kernelceipDrv.exe [X]
S2 FAT32PythonSprite.exe; C:\Users\Joker\AppData\Local\FAT32PythonSprite\FAT32PythonSprite.exe [X]
S2 filemsv1_0_64.exe; C:\Users\Joker\AppData\Local\filemsv1_0_64\filemsv1_0_64.exe [X]
S2 filepath_86.exe; C:\Users\Joker\AppData\Local\filepath_86\filepath_86.exe [X]
S2 fileruntimeMonitor.exe; C:\Users\Joker\AppData\Local\fileruntimeMonitor\fileruntimeMonitor.exe [X]
S2 filetxviewx64.exe; C:\Users\Joker\AppData\Local\filetxviewx64\filetxviewx64.exe [X]
S2 findercredsspRecovery.exe; C:\Users\Joker\AppData\Local\findercredsspRecovery\findercredsspRecovery.exe [X]
S2 findergammaClient.exe; C:\Users\Joker\AppData\Local\findergammaClient\findergammaClient.exe [X]
S2 FinderKeyboardOpen.exe; C:\Users\Joker\AppData\Local\FinderKeyboardOpen\FinderKeyboardOpen.exe [X]
S2 finderlocalsplSched.exe; C:\Users\Joker\AppData\Local\finderlocalsplSched\finderlocalsplSched.exe [X]
S2 findermcx2filter64.exe; C:\Users\Joker\AppData\Local\findermcx2filter64\findermcx2filter64.exe [X]
S2 finderrootRecovery.exe; C:\Users\Joker\AppData\Local\finderrootRecovery\finderrootRecovery.exe [X]
S2 findersymbolicRec.exe; C:\Users\Joker\AppData\Local\findersymbolicRec\findersymbolicRec.exe [X]
S2 findertwextUI.exe; C:\Users\Joker\AppData\Local\findertwextUI\findertwextUI.exe [X]
S2 folderehdrminitUI.exe; C:\Users\Joker\AppData\Local\folderehdrminitUI\folderehdrminitUI.exe [X]
S2 folderwindowsRec.exe; C:\Users\Joker\AppData\Local\folderwindowsRec\folderwindowsRec.exe [X]
S2 folderwininetBckp.exe; C:\Users\Joker\AppData\Local\folderwininetBckp\folderwininetBckp.exe [X]
S2 formatmpg2spltProvider.exe; C:\Users\Joker\AppData\Local\formatmpg2spltProvider\formatmpg2spltProvider.exe [X]
S2 formatplaysndsrvDrv.exe; C:\Users\Joker\AppData\Local\formatplaysndsrvDrv\formatplaysndsrvDrv.exe [X]
S2 formatprivacyapi.exe; C:\Users\Joker\AppData\Local\formatprivacyapi\formatprivacyapi.exe [X]
S2 formatsdkapi.exe; C:\Users\Joker\AppData\Local\formatsdkapi\formatsdkapi.exe [X]
S2 formatwin32x86.exe; C:\Users\Joker\AppData\Local\formatwin32x86\formatwin32x86.exe [X]
S2 formatwpcmigUI.exe; C:\Users\Joker\AppData\Local\formatwpcmigUI\formatwpcmigUI.exe [X]
S2 FreewareIconRecycle.exe; C:\Users\Joker\AppData\Local\FreewareIconRecycle\FreewareIconRecycle.exe [X]
S2 freewarelpkapi.exe; C:\Users\Joker\AppData\Local\freewarelpkapi\freewarelpkapi.exe [X]
S2 freewareprivacyMonitor.exe; C:\Users\Joker\AppData\Local\freewareprivacyMonitor\freewareprivacyMonitor.exe [X]
S2 frozenruntimeRecovery.exe; C:\Users\Joker\AppData\Local\frozenruntimeRecovery\frozenruntimeRecovery.exe [X]
S2 FunctionKeyboardSymbolic.exe; C:\Users\Joker\AppData\Local\FunctionKeyboardSymbolic\FunctionKeyboardSymbolic.exe [X]
S2 functionplaysndsrvRecovery.exe; C:\Users\Joker\AppData\Local\functionplaysndsrvRecovery\functionplaysndsrvRecovery.exe [X]
S2 GamesRS; C:\Program Files\GamesRS\GUpdater.exe [X]
S2 gammamotionUI.exe; C:\Users\Joker\AppData\Local\gammamotionUI\gammamotionUI.exe [X]
S2 gammaqdvd_64.exe; C:\Users\Joker\AppData\Local\gammaqdvd_64\gammaqdvd_64.exe [X]
S2 gammaracengnUI.exe; C:\Users\Joker\AppData\Local\gammaracengnUI\gammaracengnUI.exe [X]
S2 gammawinsatapiapi.exe; C:\Users\Joker\AppData\Local\gammawinsatapiapi\gammawinsatapiapi.exe [X]
S2 gammawinsockProvider.exe; C:\Users\Joker\AppData\Local\gammawinsockProvider\gammawinsockProvider.exe [X]
S2 gditwextProvider.exe; C:\Users\Joker\AppData\Local\gditwextProvider\gditwextProvider.exe [X]
S2 gnumotionProt.exe; C:\Users\Joker\AppData\Local\gnumotionProt\gnumotionProt.exe [X]
S2 gnushdocvwGUI.exe; C:\Users\Joker\AppData\Local\gnushdocvwGUI\gnushdocvwGUI.exe [X]
S2 gnuzipfldrRecovery.exe; C:\Users\Joker\AppData\Local\gnuzipfldrRecovery\gnuzipfldrRecovery.exe [X]
S2 gnuzipfldrx64.exe; C:\Users\Joker\AppData\Local\gnuzipfldrx64\gnuzipfldrx64.exe [X]
S2 hotstartdifxTask.exe; C:\Users\Joker\AppData\Local\hotstartdifxTask\hotstartdifxTask.exe [X]
S2 hotstartehtracex86.exe; C:\Users\Joker\AppData\Local\hotstartehtracex86\hotstartehtracex86.exe [X]
S2 iconcomdlg_64.exe; C:\Users\Joker\AppData\Local\iconcomdlg_64\iconcomdlg_64.exe [X]
S2 iconodbcProt.exe; C:\Users\Joker\AppData\Local\iconodbcProt\iconodbcProt.exe [X]
S2 iconwdcProvider.exe; C:\Users\Joker\AppData\Local\iconwdcProvider\iconwdcProvider.exe [X]
S2 iconwdmaud64.exe; C:\Users\Joker\AppData\Local\iconwdmaud64\iconwdmaud64.exe [X]
S2 importkernelProt.exe; C:\Users\Joker\AppData\Local\importkernelProt\importkernelProt.exe [X]
S2 ImportMotionOffice.exe; C:\Users\Joker\AppData\Local\ImportMotionOffice\ImportMotionOffice.exe [X]
S2 importoffice_64.exe; C:\Users\Joker\AppData\Local\importoffice_64\importoffice_64.exe [X]
S2 indexmotionx64.exe; C:\Users\Joker\AppData\Local\indexmotionx64\indexmotionx64.exe [X]
S2 indexprocess64.exe; C:\Users\Joker\AppData\Local\indexprocess64\indexprocess64.exe [X]
S2 interactivemscmsUI.exe; C:\Users\Joker\AppData\Local\interactivemscmsUI\interactivemscmsUI.exe [X]
S2 interactivepublicProvider.exe; C:\Users\Joker\AppData\Local\interactivepublicProvider\interactivepublicProvider.exe [X]
S2 InteractiveRegisterStart.exe; C:\Users\Joker\AppData\Local\InteractiveRegisterStart\InteractiveRegisterStart.exe [X]
S2 interpreteradvapix86.exe; C:\Users\Joker\AppData\Local\interpreteradvapix86\interpreteradvapix86.exe [X]
S2 InterpreterJREMethod; C:\Windows\system32\InterpreterJREMethod\InterpreterJREMethod.exe [X]
S2 interpretermethodMonitor.exe; C:\Users\Joker\AppData\Local\interpretermethodMonitor\interpretermethodMonitor.exe [X]
S2 interpreterqdvdDrv.exe; C:\Users\Joker\AppData\Local\interpreterqdvdDrv\interpreterqdvdDrv.exe [X]
S2 interpretershareware_64.exe; C:\Users\Joker\AppData\Local\interpretershareware_64\interpretershareware_64.exe [X]
S2 interpreterwinsatapix86.exe; C:\Users\Joker\AppData\Local\interpreterwinsatapix86\interpreterwinsatapix86.exe [X]
S2 interpreterwysiwygx86.exe; C:\Users\Joker\AppData\Local\interpreterwysiwygx86\interpreterwysiwygx86.exe [X]
S2 itsmpg2spltProvider.exe; C:\Users\Joker\AppData\Local\itsmpg2spltProvider\itsmpg2spltProvider.exe [X]
S2 itstspkg32.exe; C:\Users\Joker\AppData\Local\itstspkg32\itstspkg32.exe [X]
S2 itstspkg_86.exe; C:\Users\Joker\AppData\Local\itstspkg_86\itstspkg_86.exe [X]
S2 javalocalsplMonitor.exe; C:\Users\Joker\AppData\Local\javalocalsplMonitor\javalocalsplMonitor.exe [X]
S2 javampg2spltTask.exe; C:\Users\Joker\AppData\Local\javampg2spltTask\javampg2spltTask.exe [X]
S2 javatextRec.exe; C:\Users\Joker\AppData\Local\javatextRec\javatextRec.exe [X]
S2 javausp_86.exe; C:\Users\Joker\AppData\Local\javausp_86\javausp_86.exe [X]
S2 javawdiRec.exe; C:\Users\Joker\AppData\Local\javawdiRec\javawdiRec.exe [X]
S2 jremsv1_0Task.exe; C:\Users\Joker\AppData\Local\jremsv1_0Task\jremsv1_0Task.exe [X]
S2 jreregidleSched.exe; C:\Users\Joker\AppData\Local\jreregidleSched\jreregidleSched.exe [X]
S2 kernelceipevr_64.exe; C:\Users\Joker\AppData\Local\kernelceipevr_64\kernelceipevr_64.exe [X]
S2 kernelceipmf_64.exe; C:\Users\Joker\AppData\Local\kernelceipmf_64\kernelceipmf_64.exe [X]
S2 kernelruntime32.exe; C:\Users\Joker\AppData\Local\kernelruntime32\kernelruntime32.exe [X]
S2 kernelsbdropProt.exe; C:\Users\Joker\AppData\Local\kernelsbdropProt\kernelsbdropProt.exe [X]
S2 kerneltspkgMonitor.exe; C:\Users\Joker\AppData\Local\kerneltspkgMonitor\kerneltspkgMonitor.exe [X]
S2 kernelwpcmig32.exe; C:\Users\Joker\AppData\Local\kernelwpcmig32\kernelwpcmig32.exe [X]
S2 keyboardmemoryUI.exe; C:\Users\Joker\AppData\Local\keyboardmemoryUI\keyboardmemoryUI.exe [X]
S2 keyboardmpg2splt64.exe; C:\Users\Joker\AppData\Local\keyboardmpg2splt64\keyboardmpg2splt64.exe [X]
S2 keyboardrshx32Prot.exe; C:\Users\Joker\AppData\Local\keyboardrshx32Prot\keyboardrshx32Prot.exe [X]
S2 keyboardword_64.exe; C:\Users\Joker\AppData\Local\keyboardword_64\keyboardword_64.exe [X]
S2 logcca_86.exe; C:\Users\Joker\AppData\Local\logcca_86\logcca_86.exe [X]
S2 logmysqlapi.exe; C:\Users\Joker\AppData\Local\logmysqlapi\logmysqlapi.exe [X]
S2 macrolivesspMonitor.exe; C:\Users\Joker\AppData\Local\macrolivesspMonitor\macrolivesspMonitor.exe [X]
S2 MacroOCRSoftware.exe; C:\Users\Joker\AppData\Local\MacroOCRSoftware\MacroOCRSoftware.exe [X]
S2 mbrlpk_86.exe; C:\Users\Joker\AppData\Local\mbrlpk_86\mbrlpk_86.exe [X]
S2 mbrrawGUI.exe; C:\Users\Joker\AppData\Local\mbrrawGUI\mbrrawGUI.exe [X]
S2 MBRSDKUtility.exe; C:\Users\Joker\AppData\Local\MBRSDKUtility\MBRSDKUtility.exe [X]
S2 mbrtaskProt.exe; C:\Users\Joker\AppData\Local\mbrtaskProt\mbrtaskProt.exe [X]
S2 memdiagnetbridgeTask.exe; C:\Users\Joker\AppData\Local\memdiagnetbridgeTask\memdiagnetbridgeTask.exe [X]
S2 memdiagwpcumiSched.exe; C:\Users\Joker\AppData\Local\memdiagwpcumiSched\memdiagwpcumiSched.exe [X]
S2 memorysdiagschdClient.exe; C:\Users\Joker\AppData\Local\memorysdiagschdClient\memorysdiagschdClient.exe [X]
S2 memoryspritex64.exe; C:\Users\Joker\AppData\Local\memoryspritex64\memoryspritex64.exe [X]
S2 memoryuspProvider.exe; C:\Users\Joker\AppData\Local\memoryuspProvider\memoryuspProvider.exe [X]
S2 metafilemotion_64.exe; C:\Users\Joker\AppData\Local\metafilemotion_64\metafilemotion_64.exe [X]
S2 metafilesdiagschdBckp.exe; C:\Users\Joker\AppData\Local\metafilesdiagschdBckp\metafilesdiagschdBckp.exe [X]
S2 methodsoftwareMonitor.exe; C:\Users\Joker\AppData\Local\methodsoftwareMonitor\methodsoftwareMonitor.exe [X]
S2 methodtextapi.exe; C:\Users\Joker\AppData\Local\methodtextapi\methodtextapi.exe [X]
S2 minimalmsdrmUI.exe; C:\Users\Joker\AppData\Local\minimalmsdrmUI\minimalmsdrmUI.exe [X]
S2 minimalmsv1_0GUI.exe; C:\Users\Joker\AppData\Local\minimalmsv1_0GUI\minimalmsv1_0GUI.exe [X]
S2 minimalosx64.exe; C:\Users\Joker\AppData\Local\minimalosx64\minimalosx64.exe [X]
S2 minimalrawProt.exe; C:\Users\Joker\AppData\Local\minimalrawProt\minimalrawProt.exe [X]
S2 minimalrootBckp.exe; C:\Users\Joker\AppData\Local\minimalrootBckp\minimalrootBckp.exe [X]
S2 minimalruntimeGUI.exe; C:\Users\Joker\AppData\Local\minimalruntimeGUI\minimalruntimeGUI.exe [X]
S2 motionautowakeBckp.exe; C:\Users\Joker\AppData\Local\motionautowakeBckp\motionautowakeBckp.exe [X]
S2 motioncomdlgBckp.exe; C:\Users\Joker\AppData\Local\motioncomdlgBckp\motioncomdlgBckp.exe [X]
S2 motionlpkBckp.exe; C:\Users\Joker\AppData\Local\motionlpkBckp\motionlpkBckp.exe [X]
S2 MotionMotionScreenshot.exe; C:\Users\Joker\AppData\Local\MotionMotionScreenshot\MotionMotionScreenshot.exe [X]
S2 motionmscoreeProt.exe; C:\Users\Joker\AppData\Local\motionmscoreeProt\motionmscoreeProt.exe [X]
S2 motionmsvidctlProt.exe; C:\Users\Joker\AppData\Local\motionmsvidctlProt\motionmsvidctlProt.exe [X]
S2 motionofficeUI.exe; C:\Users\Joker\AppData\Local\motionofficeUI\motionofficeUI.exe [X]
S2 motionquartz64.exe; C:\Users\Joker\AppData\Local\motionquartz64\motionquartz64.exe [X]
S2 motionschannel64.exe; C:\Users\Joker\AppData\Local\motionschannel64\motionschannel64.exe [X]
S2 motionwizardx64.exe; C:\Users\Joker\AppData\Local\motionwizardx64\motionwizardx64.exe [X]
S2 mpg2spltqeditClient.exe; C:\Users\Joker\AppData\Local\mpg2spltqeditClient\mpg2spltqeditClient.exe [X]
S2 mscmsqdvdBckp.exe; C:\Users\Joker\AppData\Local\mscmsqdvdBckp\mscmsqdvdBckp.exe [X]
S2 mscoreekerberosClient.exe; C:\Users\Joker\AppData\Local\mscoreekerberosClient\mscoreekerberosClient.exe [X]
S2 mscoreeqedit_64.exe; C:\Users\Joker\AppData\Local\mscoreeqedit_64\mscoreeqedit_64.exe [X]
S2 mscoreerasplapProvider.exe; C:\Users\Joker\AppData\Local\mscoreerasplapProvider\mscoreerasplapProvider.exe [X]
S2 mscoreeschannelx64.exe; C:\Users\Joker\AppData\Local\mscoreeschannelx64\mscoreeschannelx64.exe [X]
S2 msctfmonitordfsshlexSched.exe; C:\Users\Joker\AppData\Local\msctfmonitordfsshlexSched\msctfmonitordfsshlexSched.exe [X]
S2 msctfmonitorevrProvider.exe; C:\Users\Joker\AppData\Local\msctfmonitorevrProvider\msctfmonitorevrProvider.exe [X]
S2 msctfmonitorsyncui_86.exe; C:\Users\Joker\AppData\Local\msctfmonitorsyncui_86\msctfmonitorsyncui_86.exe [X]
S2 msdrmcbvaTask.exe; C:\Users\Joker\AppData\Local\msdrmcbvaTask\msdrmcbvaTask.exe [X]
S2 msdrmmsmpeg2vdec64.exe; C:\Users\Joker\AppData\Local\msdrmmsmpeg2vdec64\msdrmmsmpeg2vdec64.exe [X]
S2 mswsocklpkMonitor.exe; C:\Users\Joker\AppData\Local\mswsocklpkMonitor\mswsocklpkMonitor.exe [X]
S2 mydocsrshx32x86.exe; C:\Users\Joker\AppData\Local\mydocsrshx32x86\mydocsrshx32x86.exe [X]
S2 mysqlehdrminitProt.exe; C:\Users\Joker\AppData\Local\mysqlehdrminitProt\mysqlehdrminitProt.exe [X]
S2 mysqlodbcMonitor.exe; C:\Users\Joker\AppData\Local\mysqlodbcMonitor\mysqlodbcMonitor.exe [X]
S2 mysqlpathTask.exe; C:\Users\Joker\AppData\Local\mysqlpathTask\mysqlpathTask.exe [X]
S2 mysqlquickProt.exe; C:\Users\Joker\AppData\Local\mysqlquickProt\mysqlquickProt.exe [X]
S2 mysqlregisterProvider.exe; C:\Users\Joker\AppData\Local\mysqlregisterProvider\mysqlregisterProvider.exe [X]
S2 mysqlwindowsx86.exe; C:\Users\Joker\AppData\Local\mysqlwindowsx86\mysqlwindowsx86.exe [X]
S2 netcryptextMonitor.exe; C:\Users\Joker\AppData\Local\netcryptextMonitor\netcryptextMonitor.exe [X]
S2 netprocessProvider.exe; C:\Users\Joker\AppData\Local\netprocessProvider\netprocessProvider.exe [X]
S2 ocradvapi64.exe; C:\Users\Joker\AppData\Local\ocradvapi64\ocradvapi64.exe [X]
S2 ocrdimsjob_86.exe; C:\Users\Joker\AppData\Local\ocrdimsjob_86\ocrdimsjob_86.exe [X]
S2 ocrtrashRec.exe; C:\Users\Joker\AppData\Local\ocrtrashRec\ocrtrashRec.exe [X]
S2 odbcadvapiRec.exe; C:\Users\Joker\AppData\Local\odbcadvapiRec\odbcadvapiRec.exe [X]
S2 odbcehstorx86.exe; C:\Users\Joker\AppData\Local\odbcehstorx86\odbcehstorx86.exe [X]
S2 odbcosRec.exe; C:\Users\Joker\AppData\Local\odbcosRec\odbcosRec.exe [X]
S2 officecbvaProvider.exe; C:\Users\Joker\AppData\Local\officecbvaProvider\officecbvaProvider.exe [X]
S2 officeitsSched.exe; C:\Users\Joker\AppData\Local\officeitsSched\officeitsSched.exe [X]
S2 officeremoteDrv.exe; C:\Users\Joker\AppData\Local\officeremoteDrv\officeremoteDrv.exe [X]
S2 officescriptTask.exe; C:\Users\Joker\AppData\Local\officescriptTask\officescriptTask.exe [X]
S2 openclbcatqx64.exe; C:\Users\Joker\AppData\Local\openclbcatqx64\openclbcatqx64.exe [X]
S2 openrecycleUI.exe; C:\Users\Joker\AppData\Local\openrecycleUI\openrecycleUI.exe [X]
S2 ostwextUI.exe; C:\Users\Joker\AppData\Local\ostwextUI\ostwextUI.exe [X]
S2 perftrackmydocsDrv.exe; C:\Users\Joker\AppData\Local\perftrackmydocsDrv\perftrackmydocsDrv.exe [X]
S2 perlmsctfmonitorRecovery.exe; C:\Users\Joker\AppData\Local\perlmsctfmonitorRecovery\perlmsctfmonitorRecovery.exe [X]
S2 PirritDesktop; C:\Users\Joker\AppData\Local\PirritSuggestor\PirritService.exe [X]
S2 playsndsrvpku2uSched.exe; C:\Users\Joker\AppData\Local\playsndsrvpku2uSched\playsndsrvpku2uSched.exe [X]
S2 privacyruby64.exe; C:\Users\Joker\AppData\Local\privacyruby64\privacyruby64.exe [X]
S2 processmsctfmonitorapi.exe; C:\Users\Joker\AppData\Local\processmsctfmonitorapi\processmsctfmonitorapi.exe [X]
S2 programquartzSched.exe; C:\Users\Joker\AppData\Local\programquartzSched\programquartzSched.exe [X]
S2 programscrollingSched.exe; C:\Users\Joker\AppData\Local\programscrollingSched\programscrollingSched.exe [X]
S2 psisrndrcredsspSched.exe; C:\Users\Joker\AppData\Local\psisrndrcredsspSched\psisrndrcredsspSched.exe [X]
S2 publiccercredDrv.exe; C:\Users\Joker\AppData\Local\publiccercredDrv\publiccercredDrv.exe [X]
S2 publiclpk64.exe; C:\Users\Joker\AppData\Local\publiclpk64\publiclpk64.exe [X]
S2 publicmf_86.exe; C:\Users\Joker\AppData\Local\publicmf_86\publicmf_86.exe [X]
S2 publicsamba64.exe; C:\Users\Joker\AppData\Local\publicsamba64\publicsamba64.exe [X]
S2 publicsdk_64.exe; C:\Users\Joker\AppData\Local\publicsdk_64\publicsdk_64.exe [X]
S2 pythonauthuiGUI.exe; C:\Users\Joker\AppData\Local\pythonauthuiGUI\pythonauthuiGUI.exe [X]
S2 pythonsbdropGUI.exe; C:\Users\Joker\AppData\Local\pythonsbdropGUI\pythonsbdropGUI.exe [X]
S2 pythonsbeProvider.exe; C:\Users\Joker\AppData\Local\pythonsbeProvider\pythonsbeProvider.exe [X]
S2 pythonutilityGUI.exe; C:\Users\Joker\AppData\Local\pythonutilityGUI\pythonutilityGUI.exe [X]
S2 quartzlpkBckp.exe; C:\Users\Joker\AppData\Local\quartzlpkBckp\quartzlpkBckp.exe [X]
S2 quartzmsv1_064.exe; C:\Users\Joker\AppData\Local\quartzmsv1_064\quartzmsv1_064.exe [X]
S2 quartzvbicodecClient.exe; C:\Users\Joker\AppData\Local\quartzvbicodecClient\quartzvbicodecClient.exe [X]
S2 quickmpg2splt_86.exe; C:\Users\Joker\AppData\Local\quickmpg2splt_86\quickmpg2splt_86.exe [X]
S2 racengnquartzTask.exe; C:\Users\Joker\AppData\Local\racengnquartzTask\racengnquartzTask.exe [X]
S2 rasmbmgrlivesspMonitor.exe; C:\Users\Joker\AppData\Local\rasmbmgrlivesspMonitor\rasmbmgrlivesspMonitor.exe [X]
S2 rasplapnapinsp_86.exe; C:\Users\Joker\AppData\Local\rasplapnapinsp_86\rasplapnapinsp_86.exe [X]
S2 recyclevbicodecBckp.exe; C:\Users\Joker\AppData\Local\recyclevbicodecBckp\recyclevbicodecBckp.exe [X]
S2 registermpg2spltx86.exe; C:\Users\Joker\AppData\Local\registermpg2spltx86\registermpg2spltx86.exe [X]
S2 registersoftwareProt.exe; C:\Users\Joker\AppData\Local\registersoftwareProt\registersoftwareProt.exe [X]
S2 registerusbceipapi.exe; C:\Users\Joker\AppData\Local\registerusbceipapi\registerusbceipapi.exe [X]
S2 registerutilityProvider.exe; C:\Users\Joker\AppData\Local\registerutilityProvider\registerutilityProvider.exe [X]
S2 registervbicodecTask.exe; C:\Users\Joker\AppData\Local\registervbicodecTask\registervbicodecTask.exe [X]
S2 repositoryrootDrv.exe; C:\Users\Joker\AppData\Local\repositoryrootDrv\repositoryrootDrv.exe [X]
S2 repositorytrashProvider.exe; C:\Users\Joker\AppData\Local\repositorytrashProvider\repositorytrashProvider.exe [X]
S2 rubympg2spltClient.exe; C:\Users\Joker\AppData\Local\rubympg2spltClient\rubympg2spltClient.exe [X]
S2 rubynapinspProvider.exe; C:\Users\Joker\AppData\Local\rubynapinspProvider\rubynapinspProvider.exe [X]
S2 rubyqcapTask.exe; C:\Users\Joker\AppData\Local\rubyqcapTask\rubyqcapTask.exe [X]
S2 sambaevrRecovery.exe; C:\Users\Joker\AppData\Local\sambaevrRecovery\sambaevrRecovery.exe [X]
S2 sambawininetClient.exe; C:\Users\Joker\AppData\Local\sambawininetClient\sambawininetClient.exe [X]
S2 schemadifxProvider.exe; C:\Users\Joker\AppData\Local\schemadifxProvider\schemadifxProvider.exe [X]
S2 schemarshx32Bckp.exe; C:\Users\Joker\AppData\Local\schemarshx32Bckp\schemarshx32Bckp.exe [X]
S2 schemawizardProt.exe; C:\Users\Joker\AppData\Local\schemawizardProt\schemawizardProt.exe [X]
S2 screenshotmsv1_0Sched.exe; C:\Users\Joker\AppData\Local\screenshotmsv1_0Sched\screenshotmsv1_0Sched.exe [X]
S2 screenshotscrollingDrv.exe; C:\Users\Joker\AppData\Local\screenshotscrollingDrv\screenshotscrollingDrv.exe [X]
S2 screenshotsyncuiRecovery.exe; C:\Users\Joker\AppData\Local\screenshotsyncuiRecovery\screenshotsyncuiRecovery.exe [X]
S2 screenshotwebcheckRec.exe; C:\Users\Joker\AppData\Local\screenshotwebcheckRec\screenshotwebcheckRec.exe [X]
S2 screenshotwysiwygSched.exe; C:\Users\Joker\AppData\Local\screenshotwysiwygSched\screenshotwysiwygSched.exe [X]
S2 scrollingcredsspProvider.exe; C:\Users\Joker\AppData\Local\scrollingcredsspProvider\scrollingcredsspProvider.exe [X]
S2 scrollinglocalsplTask.exe; C:\Users\Joker\AppData\Local\scrollinglocalsplTask\scrollinglocalsplTask.exe [X]
S2 ScrollingTextWord.exe; C:\Users\Joker\AppData\Local\ScrollingTextWord\ScrollingTextWord.exe [X]
S2 scrollingwpcumiDrv.exe; C:\Users\Joker\AppData\Local\scrollingwpcumiDrv\scrollingwpcumiDrv.exe [X]
S2 sdiagschdcbvaRec.exe; C:\Users\Joker\AppData\Local\sdiagschdcbvaRec\sdiagschdcbvaRec.exe [X]
S2 sdiagschdwinsatapi32.exe; C:\Users\Joker\AppData\Local\sdiagschdwinsatapi32\sdiagschdwinsatapi32.exe [X]
S2 sdktextx86.exe; C:\Users\Joker\AppData\Local\sdktextx86\sdktextx86.exe [X]
S2 sharewaremydocsapi.exe; C:\Users\Joker\AppData\Local\sharewaremydocsapi\sharewaremydocsapi.exe [X]
S2 sharewareusbceipSched.exe; C:\Users\Joker\AppData\Local\sharewareusbceipSched\sharewareusbceipSched.exe [X]
S2 snapshotmpg2spltSched.exe; C:\Users\Joker\AppData\Local\snapshotmpg2spltSched\snapshotmpg2spltSched.exe [X]
S2 snapshotperftrackRecovery.exe; C:\Users\Joker\AppData\Local\snapshotperftrackRecovery\snapshotperftrackRecovery.exe [X]
S2 softwarelivesspx86.exe; C:\Users\Joker\AppData\Local\softwarelivesspx86\softwarelivesspx86.exe [X]
S2 softwaresdiagschdDrv.exe; C:\Users\Joker\AppData\Local\softwaresdiagschdDrv\softwaresdiagschdDrv.exe [X]
S2 softwaresymbolicapi.exe; C:\Users\Joker\AppData\Local\softwaresymbolicapi\softwaresymbolicapi.exe [X]
S2 spriteehdrminitx86.exe; C:\Users\Joker\AppData\Local\spriteehdrminitx86\spriteehdrminitx86.exe [X]
S2 startcbva32.exe; C:\Users\Joker\AppData\Local\startcbva32\startcbva32.exe [X]
S2 startclbcatqTask.exe; C:\Users\Joker\AppData\Local\startclbcatqTask\startclbcatqTask.exe [X]
S2 startcryptextProvider.exe; C:\Users\Joker\AppData\Local\startcryptextProvider\startcryptextProvider.exe [X]
S2 SymbolicWinsockWYSIWYG.exe; C:\Users\Joker\AppData\Local\SymbolicWinsockWYSIWYG\SymbolicWinsockWYSIWYG.exe [X]
S2 syncuimsmpeg2vdec64.exe; C:\Users\Joker\AppData\Local\syncuimsmpeg2vdec64\syncuimsmpeg2vdec64.exe [X]
S2 syncuiusp_64.exe; C:\Users\Joker\AppData\Local\syncuiusp_64\syncuiusp_64.exe [X]
S2 syntaxlpkSched.exe; C:\Users\Joker\AppData\Local\syntaxlpkSched\syntaxlpkSched.exe [X]
S2 syntaxtxviewSched.exe; C:\Users\Joker\AppData\Local\syntaxtxviewSched\syntaxtxviewSched.exe [X]
S2 taskperftrackDrv.exe; C:\Users\Joker\AppData\Local\taskperftrackDrv\taskperftrackDrv.exe [X]
S2 taskurlmon32.exe; C:\Users\Joker\AppData\Local\taskurlmon32\taskurlmon32.exe [X]
S2 taskvbicodecMonitor.exe; C:\Users\Joker\AppData\Local\taskvbicodecMonitor\taskvbicodecMonitor.exe [X]
S2 taskwdiProvider.exe; C:\Users\Joker\AppData\Local\taskwdiProvider\taskwdiProvider.exe [X]
S2 textehtrace_86.exe; C:\Users\Joker\AppData\Local\textehtrace_86\textehtrace_86.exe [X]
S2 textwdcSched.exe; C:\Users\Joker\AppData\Local\textwdcSched\textwdcSched.exe [X]
S2 thumbnailwpcmigx86.exe; C:\Users\Joker\AppData\Local\thumbnailwpcmigx86\thumbnailwpcmigx86.exe [X]
S2 tooltipbitsigd32.exe; C:\Users\Joker\AppData\Local\tooltipbitsigd32\tooltipbitsigd32.exe [X]
S2 trashbitsigdSched.exe; C:\Users\Joker\AppData\Local\trashbitsigdSched\trashbitsigdSched.exe [X]
S2 trashvbicodecClient.exe; C:\Users\Joker\AppData\Local\trashvbicodecClient\trashvbicodecClient.exe [X]
S2 tspkgcredsspRec.exe; C:\Users\Joker\AppData\Local\tspkgcredsspRec\tspkgcredsspRec.exe [X]
S2 twexttspkgClient.exe; C:\Users\Joker\AppData\Local\twexttspkgClient\twexttspkgClient.exe [X]
S2 urlmonbitsigdTask.exe; C:\Users\Joker\AppData\Local\urlmonbitsigdTask\urlmonbitsigdTask.exe [X]
S2 utilityitvdataProvider.exe; C:\Users\Joker\AppData\Local\utilityitvdataProvider\utilityitvdataProvider.exe [X]
S2 utilitykerberosx86.exe; C:\Users\Joker\AppData\Local\utilitykerberosx86\utilitykerberosx86.exe [X]
S2 utilitywinsatapiSched.exe; C:\Users\Joker\AppData\Local\utilitywinsatapiSched\utilitywinsatapiSched.exe [X]
S2 utilitywpcmig_86.exe; C:\Users\Joker\AppData\Local\utilitywpcmig_86\utilitywpcmig_86.exe [X]
S2 wauctla Service; "C:\Windows\wauctla.exe" [X]
S2 wigetsdiagschdProt.exe; C:\Users\Joker\AppData\Local\wigetsdiagschdProt\wigetsdiagschdProt.exe [X]
S2 win32msctfmonitorClient.exe; C:\Users\Joker\AppData\Local\win32msctfmonitorClient\win32msctfmonitorClient.exe [X]
S2 win32uspRec.exe; C:\Users\Joker\AppData\Local\win32uspRec\win32uspRec.exe [X]
S2 windowsqcapTask.exe; C:\Users\Joker\AppData\Local\windowsqcapTask\windowsqcapTask.exe [X]
S2 windowswdcapi.exe; C:\Users\Joker\AppData\Local\windowswdcapi\windowswdcapi.exe [X]
S2 wininetqcapProvider.exe; C:\Users\Joker\AppData\Local\wininetqcapProvider\wininetqcapProvider.exe [X]
S2 winsatapiits_64.exe; C:\Users\Joker\AppData\Local\winsatapiits_64\winsatapiits_64.exe [X]
S2 winsatapimpg2spltProvider.exe; C:\Users\Joker\AppData\Local\winsatapimpg2spltProvider\winsatapimpg2spltProvider.exe [X]
S2 winsatapischannelRec.exe; C:\Users\Joker\AppData\Local\winsatapischannelRec\winsatapischannelRec.exe [X]
S2 winsockmydocsProt.exe; C:\Users\Joker\AppData\Local\winsockmydocsProt\winsockmydocsProt.exe [X]
S2 wizardmsdrmSched.exe; C:\Users\Joker\AppData\Local\wizardmsdrmSched\wizardmsdrmSched.exe [X]
S2 wizardsbe32.exe; C:\Users\Joker\AppData\Local\wizardsbe32\wizardsbe32.exe [X]
S2 wordlpkDrv.exe; C:\Users\Joker\AppData\Local\wordlpkDrv\wordlpkDrv.exe [X]
S2 wordwebcheckRecovery.exe; C:\Users\Joker\AppData\Local\wordwebcheckRecovery\wordwebcheckRecovery.exe [X]
S2 wpcmigschannelx86.exe; C:\Users\Joker\AppData\Local\wpcmigschannelx86\wpcmigschannelx86.exe [X]
S2 wysiwygpku2ux86.exe; C:\Users\Joker\AppData\Local\wysiwygpku2ux86\wysiwygpku2ux86.exe [X]
S2 wysiwygplaysndsrvMonitor.exe; C:\Users\Joker\AppData\Local\wysiwygplaysndsrvMonitor\wysiwygplaysndsrvMonitor.exe [X]
R2 rubyschemaClient.exe; C:\Users\Joker\AppData\Local\rubyschemaClient\rubyschemaClient.exe [229888 2015-02-26] () [File not signed]
S3 RegFltrX86; \??\C:\Users\Joker\AppData\Local\99de67bbbc0f180e4cd4348780d8201c\RegFltrX86.sys [X]
S3 RgFltX86; \??\C:\Users\Joker\AppData\Local\DaemonMemoryShareware\RgFltX86.sys [X]
2015-02-26 23:19 - 2014-12-08 14:12 - 00000000 ____D () C:\Windows\system32\foldermshtmlSched
2015-02-26 23:19 - 2014-12-08 12:20 - 00000000 ____D () C:\Windows\system32\direct3dmotionBckp
2015-02-26 23:19 - 2014-12-08 12:20 - 00000000 ____D () C:\Users\Joker\AppData\Local\pathclbcatqDrv
2015-02-26 23:19 - 2014-12-08 12:16 - 00000000 ____D () C:\Windows\system32\cursorjre32
2015-02-26 23:19 - 2014-12-08 12:11 - 00000000 ____D () C:\Windows\system32\mpg2spltwebcheck32
2015-02-26 23:19 - 2014-12-08 12:06 - 00000000 ____D () C:\Windows\system32\logwinsock32
2015-02-26 23:19 - 2014-12-08 12:01 - 00000000 ____D () C:\Windows\system32\cercredshellMonitor
2015-02-26 23:19 - 2014-12-08 11:56 - 00000000 ____D () C:\Windows\system32\interactivedfsshlex64
2015-02-26 23:19 - 2014-12-08 11:50 - 00000000 ____D () C:\Windows\system32\dockrecycleRec
2015-02-26 23:19 - 2014-12-08 11:45 - 00000000 ____D () C:\Windows\system32\apipublicGUI
2015-02-26 23:19 - 2014-12-08 11:40 - 00000000 ____D () C:\Windows\system32\cursorstartTask
2015-02-26 23:19 - 2014-12-08 11:35 - 00000000 ____D () C:\Windows\system32\cronwin32Rec
2015-02-26 23:19 - 2014-12-08 11:30 - 00000000 ____D () C:\Windows\system32\controlfreewareProvider
2015-02-26 23:19 - 2014-12-08 11:25 - 00000000 ____D () C:\Windows\system32\dashboardmsctfmonitorMonitor
2015-02-26 23:19 - 2014-12-08 11:20 - 00000000 ____D () C:\Windows\system32\freewarevbicodec_64
2015-02-26 23:19 - 2014-12-08 11:15 - 00000000 ____D () C:\Windows\system32\wininetcomdlgSched
2015-02-26 23:19 - 2014-12-08 11:10 - 00000000 ____D () C:\Windows\system32\defaultdockx64
2015-02-26 23:19 - 2014-12-08 11:05 - 00000000 ____D () C:\Windows\system32\fat32motionGUI
2015-02-26 23:19 - 2014-12-08 11:00 - 00000000 ____D () C:\Windows\system32\mbrspriteMonitor
2015-02-26 23:19 - 2014-12-08 10:55 - 00000000 ____D () C:\Windows\system32\interpreterwigetProt
2015-02-26 23:19 - 2014-12-08 10:50 - 00000000 ____D () C:\Windows\system32\copynative32
2015-02-26 23:19 - 2014-12-08 10:46 - 00000000 ____D () C:\Windows\system32\tooltipehstorDrv
2015-02-26 23:19 - 2014-12-08 10:41 - 00000000 ____D () C:\Windows\system32\javazipfldrx64
2015-02-26 23:19 - 2014-12-08 10:35 - 00000000 ____D () C:\Windows\system32\defaulthotstart64
2015-02-26 23:19 - 2014-12-08 10:30 - 00000000 ____D () C:\Windows\system32\indexdimsjob64
2015-02-26 23:19 - 2014-12-08 10:26 - 00000000 ____D () C:\Windows\system32\filewindowsRecovery
2015-02-26 23:19 - 2014-12-08 10:20 - 00000000 ____D () C:\Windows\system32\utilityquartzProvider
2015-02-26 23:19 - 2014-12-08 10:15 - 00000000 ____D () C:\Windows\system32\metafilescript32
2015-02-26 23:19 - 2014-12-08 10:10 - 00000000 ____D () C:\Windows\system32\runtimesbeGUI
2015-02-26 23:19 - 2014-12-08 10:05 - 00000000 ____D () C:\Windows\system32\contextualsnapshotSched
2015-02-26 23:19 - 2014-12-08 10:01 - 00000000 ____D () C:\Windows\system32\racengnrasplapTask
2015-02-26 23:19 - 2014-12-08 09:57 - 00000000 ____D () C:\Windows\system32\codeccursorTask
2015-02-26 23:19 - 2014-12-08 09:51 - 00000000 ____D () C:\Windows\system32\softwarestartx64
2015-02-26 23:19 - 2014-12-08 09:45 - 00000000 ____D () C:\Windows\system32\macropsisrndr_64
2015-02-26 23:19 - 2014-12-08 09:40 - 00000000 ____D () C:\Windows\system32\tooltipmemdiagx64
2015-02-26 23:19 - 2014-12-08 09:35 - 00000000 ____D () C:\Windows\system32\compileremoteProt
2015-02-26 23:19 - 2014-12-08 09:30 - 00000000 ____D () C:\Windows\system32\bioswininet_86
2015-02-26 23:19 - 2014-12-08 09:25 - 00000000 ____D () C:\Windows\system32\javataskSched
2015-02-26 23:19 - 2014-12-08 09:21 - 00000000 ____D () C:\Windows\system32\ehtraceevrMonitor
2015-02-26 23:19 - 2014-12-08 09:16 - 00000000 ____D () C:\Windows\system32\windowsmemdiagMonitor
2015-02-26 23:19 - 2014-12-08 09:10 - 00000000 ____D () C:\Windows\system32\napinspitsapi
2015-02-26 23:19 - 2014-12-08 09:06 - 00000000 ____D () C:\Windows\system32\registerwin3232
2015-02-26 23:19 - 2014-12-08 09:01 - 00000000 ____D () C:\Windows\system32\guivbicodecBckp
2015-02-26 23:19 - 2014-12-08 08:56 - 00000000 ____D () C:\Windows\system32\ccatxviewBckp
2015-02-26 23:19 - 2014-12-08 08:51 - 00000000 ____D () C:\Windows\system32\osmscmsDrv
2015-02-26 23:19 - 2014-12-08 08:46 - 00000000 ____D () C:\Windows\system32\cryptextlocalsplRecovery
2015-02-26 23:19 - 2014-12-08 08:43 - 00000000 ____D () C:\Windows\system32\frozenrubyRec
2015-02-26 23:19 - 2014-12-08 08:36 - 00000000 ____D () C:\Windows\system32\memorypathRecovery
2015-02-26 23:19 - 2014-12-08 08:30 - 00000000 ____D () C:\Windows\system32\cgifolderx64
2015-02-26 23:19 - 2014-12-08 08:25 - 00000000 ____D () C:\Windows\system32\filejreGUI
2015-02-26 23:19 - 2014-12-08 08:20 - 00000000 ____D () C:\Windows\system32\frozenhotstartProt
2015-02-26 23:19 - 2014-12-08 08:15 - 00000000 ____D () C:\Windows\system32\ehdrminitregidleSched
2015-02-26 23:19 - 2014-12-08 08:10 - 00000000 ____D () C:\Windows\system32\cronitsTask
2015-02-26 23:19 - 2014-12-08 08:05 - 00000000 ____D () C:\Windows\system32\dlcquickGUI
2015-02-26 23:19 - 2014-12-08 08:00 - 00000000 ____D () C:\Windows\system32\direct3dkernel_64
2015-02-26 23:19 - 2014-12-08 07:55 - 00000000 ____D () C:\Windows\system32\gnumsmpeg2vdecProt
2015-02-26 23:19 - 2014-12-08 07:51 - 00000000 ____D () C:\Windows\system32\commandmsctfmonitor_86
2015-02-26 23:19 - 2014-12-08 07:45 - 00000000 ____D () C:\Windows\system32\finderrawDrv
2015-02-26 23:19 - 2014-12-08 07:40 - 00000000 ____D () C:\Windows\system32\applicationqcapDrv
2015-02-26 23:19 - 2014-12-08 07:36 - 00000000 ____D () C:\Windows\system32\cgiocr_86
2015-02-26 23:19 - 2014-12-08 07:31 - 00000000 ____D () C:\Windows\system32\nativetooltip64
2015-02-26 23:19 - 2014-12-08 07:26 - 00000000 ____D () C:\Windows\system32\encondingminimal64
2015-02-26 23:19 - 2014-12-08 07:21 - 00000000 ____D () C:\Windows\system32\processpsisrndrMonitor
2015-02-26 23:19 - 2014-12-08 07:15 - 00000000 ____D () C:\Windows\system32\addonrecycle32
2015-02-26 23:19 - 2014-12-08 07:10 - 00000000 ____D () C:\Windows\system32\memdiagitsDrv
2015-02-26 23:19 - 2014-12-08 07:05 - 00000000 ____D () C:\Windows\system32\cronwizardGUI
2015-02-26 23:19 - 2014-12-08 07:00 - 00000000 ____D () C:\Windows\system32\findervbicodecClient
2015-02-26 23:19 - 2014-12-08 06:55 - 00000000 ____D () C:\Windows\system32\windowsccaMonitor
2015-02-26 23:19 - 2014-12-08 06:50 - 00000000 ____D () C:\Windows\system32\win32credsspBckp
2015-02-26 23:19 - 2014-12-08 06:45 - 00000000 ____D () C:\Windows\system32\backuplocalsplBckp
2015-02-26 23:19 - 2014-12-08 06:41 - 00000000 ____D () C:\Windows\system32\biosofficeapi
2015-02-26 23:19 - 2014-12-08 06:36 - 00000000 ____D () C:\Windows\system32\shdocvwmswsock32
2015-02-26 23:19 - 2014-12-08 06:31 - 00000000 ____D () C:\Windows\system32\winsockcbvaapi
2015-02-26 23:19 - 2014-12-08 06:25 - 00000000 ____D () C:\Windows\system32\advapilocalsplSched
2015-02-26 23:19 - 2014-12-08 06:20 - 00000000 ____D () C:\Windows\system32\netpku2uSched
2015-02-26 23:19 - 2014-12-08 06:16 - 00000000 ____D () C:\Windows\system32\urlmondifxSched
2015-02-26 23:19 - 2014-12-08 06:10 - 00000000 ____D () C:\Windows\system32\wdcmshtmlUI
2015-02-26 23:19 - 2014-12-08 06:05 - 00000000 ____D () C:\Windows\system32\macrolocalsplx64
2015-02-26 23:19 - 2014-12-08 06:01 - 00000000 ____D () C:\Windows\system32\perlmidimapapi
2015-02-26 23:19 - 2014-12-08 05:56 - 00000000 ____D () C:\Windows\system32\commandfirmwarex64
2015-02-26 23:19 - 2014-12-08 05:51 - 00000000 ____D () C:\Windows\system32\sbdropmcx2filterx64
2015-02-26 23:19 - 2014-12-08 05:45 - 00000000 ____D () C:\Windows\system32\direct3dwin32Bckp
2015-02-26 23:19 - 2014-12-08 05:40 - 00000000 ____D () C:\Windows\system32\ccaauthuiMonitor
2015-02-26 23:19 - 2014-12-08 05:36 - 00000000 ____D () C:\Windows\system32\snapshotccaClient
2015-02-26 23:19 - 2014-12-08 05:30 - 00000000 ____D () C:\Windows\system32\schemawordapi
2015-02-26 23:19 - 2014-12-08 05:25 - 00000000 ____D () C:\Windows\system32\usbceipcomdlgRec
2015-02-26 23:19 - 2014-12-08 05:20 - 00000000 ____D () C:\Windows\system32\methodminimalTask
2015-02-26 23:19 - 2014-12-08 05:15 - 00000000 ____D () C:\Windows\system32\apimswsockProt
2015-02-26 23:19 - 2014-12-08 05:11 - 00000000 ____D () C:\Windows\system32\codecquickBckp
2015-02-26 23:19 - 2014-12-08 05:05 - 00000000 ____D () C:\Windows\system32\playsndsrvsbex64
2015-02-26 23:19 - 2014-12-08 05:02 - 00000000 ____D () C:\Windows\system32\formatschannel32
2015-02-26 23:19 - 2014-12-08 05:00 - 00000000 ____D () C:\Windows\system32\rootsbe32
2015-02-26 23:19 - 2014-12-08 04:59 - 00000000 ____D () C:\Windows\system32\formatits32
2015-02-26 23:19 - 2014-12-08 04:45 - 00000000 ____D () C:\Windows\system32\comdlgnetbridgex64
2015-02-26 23:19 - 2014-12-08 04:45 - 00000000 ____D () C:\Users\Joker\AppData\Local\apiperlTask
2015-02-26 23:19 - 2014-12-08 04:35 - 00000000 ____D () C:\Windows\system32\motionrepositoryProvider
2015-02-26 23:19 - 2014-12-08 04:30 - 00000000 ____D () C:\Windows\system32\repositorymfClient
2015-02-26 23:19 - 2014-12-08 04:25 - 00000000 ____D () C:\Windows\system32\apischannel_86
2015-02-26 23:19 - 2014-12-08 04:20 - 00000000 ____D () C:\Windows\system32\dashboardinteractiveTask
2015-02-26 23:19 - 2014-12-08 04:15 - 00000000 ____D () C:\Windows\system32\mshtmlbitsigdClient
2015-02-26 23:19 - 2014-12-08 04:10 - 00000000 ____D () C:\Windows\system32\contextualdirectx_64
2015-02-26 23:19 - 2014-12-08 04:05 - 00000000 ____D () C:\Windows\system32\gnuscrollingBckp
2015-02-26 23:19 - 2014-12-08 04:00 - 00000000 ____D () C:\Windows\system32\wysiwygkernelceipx64
2015-02-26 23:19 - 2014-12-08 03:55 - 00000000 ____D () C:\Windows\system32\javampg2spltDrv
2015-02-26 23:19 - 2014-12-08 03:50 - 00000000 ____D () C:\Windows\system32\mpg2spltcredssp64
2015-02-26 23:19 - 2014-12-08 03:45 - 00000000 ____D () C:\Windows\system32\tooltipkernelceip_64
2015-02-26 23:19 - 2014-12-08 03:40 - 00000000 ____D () C:\Windows\system32\controlschannel64
2015-02-26 23:19 - 2014-12-08 03:35 - 00000000 ____D () C:\Windows\system32\directxrasmbmgrx64
2015-02-26 23:19 - 2014-12-08 03:30 - 00000000 ____D () C:\Windows\system32\metafileregidleMonitor
2015-02-26 23:19 - 2014-12-08 03:25 - 00000000 ____D () C:\Windows\system32\openccaClient
2015-02-26 23:19 - 2014-12-08 03:20 - 00000000 ____D () C:\Windows\system32\ehdrminitsbdropRec
2015-02-26 23:19 - 2014-12-08 03:15 - 00000000 ____D () C:\Windows\system32\trashcredsspx86
2015-02-26 23:19 - 2014-12-08 03:10 - 00000000 ____D () C:\Windows\system32\encondingauthui64
2015-02-26 23:19 - 2014-12-08 03:05 - 00000000 ____D () C:\Windows\system32\startdfsshlexGUI
2015-02-26 23:19 - 2014-12-08 03:00 - 00000000 ____D () C:\Windows\system32\usbceipschannelRec
2015-02-26 23:19 - 2014-12-08 02:55 - 00000000 ____D () C:\Windows\system32\fat32gdiRecovery
2015-02-26 23:19 - 2014-12-08 02:50 - 00000000 ____D () C:\Windows\system32\runtimekerberosSched
2015-02-26 23:19 - 2014-12-08 02:45 - 00000000 ____D () C:\Windows\system32\defaultmacro_86
2015-02-26 23:19 - 2014-12-08 02:40 - 00000000 ____D () C:\Windows\system32\applicationfirmware_64
2015-02-26 23:19 - 2014-12-08 02:35 - 00000000 ____D () C:\Windows\system32\sdkmswsockTask
2015-02-26 23:19 - 2014-12-08 02:30 - 00000000 ____D () C:\Windows\system32\dosrootClient
2015-02-26 23:19 - 2014-12-08 02:25 - 00000000 ____D () C:\Windows\system32\controlinterpreterGUI
2015-02-26 23:19 - 2014-12-08 02:20 - 00000000 ____D () C:\Windows\system32\dockstartTask
2015-02-26 23:19 - 2014-12-08 02:15 - 00000000 ____D () C:\Windows\system32\metafiletooltipProvider
2015-02-26 23:19 - 2014-12-08 02:10 - 00000000 ____D () C:\Windows\system32\finderuspProvider
2015-02-26 23:19 - 2014-12-08 02:05 - 00000000 ____D () C:\Windows\system32\rubylivesspRec
2015-02-26 23:19 - 2014-12-08 02:00 - 00000000 ____D () C:\Windows\system32\cursorqeditUI
2015-02-26 23:19 - 2014-12-08 01:55 - 00000000 ____D () C:\Windows\system32\controlmotionx64
2015-02-26 23:19 - 2014-12-08 01:50 - 00000000 ____D () C:\Windows\system32\dashboardprogram_86
2015-02-26 23:19 - 2014-12-08 01:45 - 00000000 ____D () C:\Windows\system32\mscmsitsRec
2015-02-26 23:19 - 2014-12-08 01:40 - 00000000 ____D () C:\Windows\system32\nativempg2spltProvider
2015-02-26 23:19 - 2014-12-08 01:36 - 00000000 ____D () C:\Windows\system32\ccamswsockRec
2015-02-26 23:19 - 2014-12-08 01:30 - 00000000 ____D () C:\Windows\system32\addonpku2uRec
2015-02-26 23:19 - 2014-12-08 01:25 - 00000000 ____D () C:\Windows\system32\kernelceipmsvidctlMonitor
2015-02-26 23:19 - 2014-12-08 01:20 - 00000000 ____D () C:\Windows\system32\functionmetafileSched
2015-02-26 23:19 - 2014-12-08 01:15 - 00000000 ____D () C:\Windows\system32\racengnwpcmigapi
2015-02-26 23:19 - 2014-12-08 01:10 - 00000000 ____D () C:\Windows\system32\quickrasplapSched
2015-02-26 23:19 - 2014-12-08 01:05 - 00000000 ____D () C:\Windows\system32\drivermshtmlGUI
2015-02-26 23:19 - 2014-12-08 01:00 - 00000000 ____D () C:\Windows\system32\rawehdrminitTask
2015-02-26 23:19 - 2014-12-08 00:55 - 00000000 ____D () C:\Windows\system32\scrollingregidleGUI
2015-02-26 23:19 - 2014-12-08 00:50 - 00000000 ____D () C:\Windows\system32\compilerdirectxRecovery
2015-02-26 23:19 - 2014-12-08 00:45 - 00000000 ____D () C:\Windows\system32\gnumsctfmonitor64
2015-02-26 23:19 - 2014-12-08 00:40 - 00000000 ____D () C:\Windows\system32\sdkregidleapi
2015-02-26 23:19 - 2014-12-08 00:35 - 00000000 ____D () C:\Windows\system32\odbcsharewareProt
2015-02-26 23:19 - 2014-12-08 00:30 - 00000000 ____D () C:\Windows\system32\trashmfClient
2015-02-26 23:19 - 2014-12-08 00:25 - 00000000 ____D () C:\Windows\system32\cercredurlmonClient
2015-02-26 23:19 - 2014-12-08 00:20 - 00000000 ____D () C:\Windows\system32\backupclassClient
2015-02-26 23:19 - 2014-12-08 00:15 - 00000000 ____D () C:\Windows\system32\cgidriverDrv
2015-02-26 23:19 - 2014-12-08 00:10 - 00000000 ____D () C:\Windows\system32\dfsshlexsbe32
2015-02-26 23:19 - 2014-12-08 00:06 - 00000000 ____D () C:\Windows\system32\softwaresbeClient
2015-02-26 23:19 - 2014-12-08 00:00 - 00000000 ____D () C:\Windows\system32\screenshotmydocs32
2015-02-26 23:19 - 2014-12-07 23:55 - 00000000 ____D () C:\Windows\system32\openrepositoryx86
2015-02-26 23:19 - 2014-12-07 23:50 - 00000000 ____D () C:\Windows\system32\utilityits_64
2015-02-26 23:19 - 2014-12-07 23:45 - 00000000 ____D () C:\Windows\system32\qcaptspkg_86
2015-02-26 23:19 - 2014-12-07 23:40 - 00000000 ____D () C:\Windows\system32\dashboardmsvidctl_64
2015-02-26 23:19 - 2014-12-07 23:35 - 00000000 ____D () C:\Windows\system32\directxtaskUI
2015-02-26 23:19 - 2014-12-07 23:30 - 00000000 ____D () C:\Windows\system32\softwarewdiDrv
2015-02-26 23:19 - 2014-12-07 23:25 - 00000000 ____D () C:\Windows\system32\debugwinsockSched
2015-02-26 23:19 - 2014-12-07 23:20 - 00000000 ____D () C:\Windows\system32\gnuwininetSched
2015-02-26 23:19 - 2014-12-07 23:15 - 00000000 ____D () C:\Windows\system32\pathwdi_86
2015-02-26 23:19 - 2014-12-07 23:10 - 00000000 ____D () C:\Windows\system32\programrepositoryapi
2015-02-26 23:19 - 2014-12-07 23:05 - 00000000 ____D () C:\Windows\system32\apiscreenshotDrv
2015-02-26 23:19 - 2014-12-07 23:00 - 00000000 ____D () C:\Windows\system32\jrecryptextClient
2015-02-26 23:19 - 2014-12-07 22:55 - 00000000 ____D () C:\Windows\system32\contextualkernel32
2015-02-26 23:19 - 2014-12-07 22:50 - 00000000 ____D () C:\Windows\system32\symbolicmsctfmonitor_86
2015-02-26 23:19 - 2014-12-07 22:45 - 00000000 ____D () C:\Windows\system32\osdifxBckp
2015-02-26 23:19 - 2014-12-07 22:40 - 00000000 ____D () C:\Windows\system32\wigetmsmpeg2vdec_64
2015-02-26 23:19 - 2014-12-07 22:35 - 00000000 ____D () C:\Windows\system32\sdkwordRecovery
2015-02-26 23:19 - 2014-12-07 22:30 - 00000000 ____D () C:\Windows\system32\syntaxehtraceRecovery
2015-02-26 23:19 - 2014-12-07 22:25 - 00000000 ____D () C:\Windows\system32\ocrcredsspProvider
2015-02-26 23:19 - 2014-12-07 22:20 - 00000000 ____D () C:\Windows\system32\playsndsrvtspkgRec
2015-02-26 23:19 - 2014-12-07 22:15 - 00000000 ____D () C:\Windows\system32\interpretersnapshot32
2015-02-26 23:19 - 2014-12-07 22:10 - 00000000 ____D () C:\Windows\system32\comdlgtwextTask
2015-02-26 23:19 - 2014-12-07 22:05 - 00000000 ____D () C:\Windows\system32\openvbicodecProt
2015-02-26 23:19 - 2014-12-07 22:01 - 00000000 ____D () C:\Windows\system32\exportfunctionProt
2015-02-26 23:19 - 2014-12-07 21:56 - 00000000 ____D () C:\Windows\system32\exportcryptextUI
2015-02-26 23:19 - 2014-12-07 21:51 - 00000000 ____D () C:\Windows\system32\lognetbridgex86
2015-02-26 23:19 - 2014-12-07 21:45 - 00000000 ____D () C:\Windows\system32\pathschannelBckp
2015-02-26 23:19 - 2014-12-07 21:41 - 00000000 ____D () C:\Windows\system32\dashboardpku2uRec
2015-02-26 23:19 - 2014-12-07 21:36 - 00000000 ____D () C:\Windows\system32\motionsdiagschdProt
2015-02-26 23:19 - 2014-12-07 21:30 - 00000000 ____D () C:\Windows\system32\repositorygdi64
2015-02-26 23:19 - 2014-12-07 21:26 - 00000000 ____D () C:\Windows\system32\repositoryracengnDrv
2015-02-26 23:19 - 2014-12-07 21:20 - 00000000 ____D () C:\Windows\system32\croninterpreterClient
2015-02-26 23:19 - 2014-12-07 21:16 - 00000000 ____D () C:\Windows\system32\defaultmotionBckp
2015-02-26 23:19 - 2014-12-07 21:10 - 00000000 ____D () C:\Windows\system32\jrelivesspx64
2015-02-26 23:19 - 2014-12-07 21:05 - 00000000 ____D () C:\Windows\system32\odbcvbicodecGUI
2015-02-26 23:19 - 2014-12-07 21:00 - 00000000 ____D () C:\Windows\system32\hotstartehstorMonitor
2015-02-26 23:19 - 2014-12-07 20:59 - 00000000 ____D () C:\Windows\system32\officesymbolicProvider
2015-02-26 23:19 - 2014-12-07 20:50 - 00000000 ____D () C:\Windows\system32\racengnmcx2filterTask
2015-02-26 23:19 - 2014-12-07 20:45 - 00000000 ____D () C:\Windows\system32\thumbnailccax64
2015-02-26 23:19 - 2014-12-07 20:40 - 00000000 ____D () C:\Windows\system32\winsatapilocalsplUI
2015-02-26 23:19 - 2014-12-07 20:35 - 00000000 ____D () C:\Windows\system32\wpcumimshtmlSched
2015-02-26 23:19 - 2014-12-07 20:31 - 00000000 ____D () C:\Windows\system32\classsdkx86
2015-02-26 23:19 - 2014-12-07 20:26 - 00000000 ____D () C:\Windows\system32\dockmetafileClient
2015-02-26 23:19 - 2014-12-07 20:21 - 00000000 ____D () C:\Windows\system32\wigetnetbridge64
2015-02-26 23:19 - 2014-12-07 20:16 - 00000000 ____D () C:\Windows\system32\encondingosUI
2015-02-26 23:19 - 2014-12-07 20:11 - 00000000 ____D () C:\Windows\system32\addonencondingRec
2015-02-26 23:19 - 2014-12-07 20:06 - 00000000 ____D () C:\Windows\system32\playsndsrvdimsjobMonitor
2015-02-26 23:19 - 2014-12-07 20:00 - 00000000 ____D () C:\Windows\system32\memdiagpku2ux64
2015-02-26 23:19 - 2014-12-07 19:55 - 00000000 ____D () C:\Windows\system32\sharewaresyncuiDrv
2015-02-26 23:19 - 2014-12-07 19:50 - 00000000 ____D () C:\Windows\system32\directxmsctfmonitorProvider
2015-02-26 23:19 - 2014-12-07 19:48 - 00000000 ____D () C:\Windows\system32\sbdroptspkgRecovery
2015-02-26 23:19 - 2014-12-07 19:40 - 00000000 ____D () C:\Windows\system32\gdipku2u64
2015-02-26 23:19 - 2014-12-07 19:35 - 00000000 ____D () C:\Windows\system32\win32cryptextProt
2015-02-26 23:19 - 2014-12-07 19:30 - 00000000 ____D () C:\Windows\system32\dlcdimsjobx86
2015-02-26 23:19 - 2014-12-07 19:28 - 00000000 ____D () C:\Windows\system32\sdkclbcatqx64
2015-02-26 23:19 - 2014-12-07 19:20 - 00000000 ____D () C:\Windows\system32\kernelmsvidctl32
2015-02-26 23:19 - 2014-12-07 19:15 - 00000000 ____D () C:\Windows\system32\driverplaysndsrvTask
2015-02-26 23:19 - 2014-12-07 19:10 - 00000000 ____D () C:\Windows\system32\symbolicwpcmigProvider
2015-02-26 23:19 - 2014-12-07 19:05 - 00000000 ____D () C:\Windows\system32\formatrootTask
2015-02-26 23:19 - 2014-12-07 19:00 - 00000000 ____D () C:\Windows\system32\scrollingrshx32Prot
2015-02-26 23:19 - 2014-12-07 18:55 - 00000000 ____D () C:\Windows\system32\softwaretspkgClient
2015-02-26 23:19 - 2014-12-07 18:50 - 00000000 ____D () C:\Windows\system32\pythonehstorUI
2015-02-26 23:19 - 2014-12-07 18:46 - 00000000 ____D () C:\Windows\system32\apibitsigd32
2015-02-26 23:19 - 2014-12-07 18:41 - 00000000 ____D () C:\Windows\system32\publicwinsatapiRecovery
2015-02-26 23:19 - 2014-12-07 18:36 - 00000000 ____D () C:\Windows\system32\mswsockrshx3232
2015-02-26 23:19 - 2014-12-07 18:30 - 00000000 ____D () C:\Windows\system32\gnuwinsatapiBckp
2015-02-26 23:19 - 2014-12-07 18:25 - 00000000 ____D () C:\Windows\system32\functiongnu32
2015-02-26 23:19 - 2014-12-07 18:21 - 00000000 ____D () C:\Windows\system32\tasksyncui64
2015-02-26 23:19 - 2014-12-07 18:15 - 00000000 ____D () C:\Windows\system32\odbcwpcumiClient
2015-02-26 23:19 - 2014-12-07 18:10 - 00000000 ____D () C:\Windows\system32\freewarespriteDrv
2015-02-26 23:19 - 2014-12-07 18:06 - 00000000 ____D () C:\Windows\system32\javarepositoryDrv
2015-02-26 23:19 - 2014-12-07 18:00 - 00000000 ____D () C:\Windows\system32\perlrasplapx86
2015-02-26 23:19 - 2014-12-07 17:55 - 00000000 ____D () C:\Windows\system32\contextualqdvdRec
2015-02-26 23:19 - 2014-12-07 17:50 - 00000000 ____D () C:\Windows\system32\contextualusbceipapi
2015-02-26 23:19 - 2014-12-07 17:45 - 00000000 ____D () C:\Windows\system32\nettextRecovery
2015-02-26 23:19 - 2014-12-07 17:40 - 00000000 ____D () C:\Windows\system32\compilercredsspx86
2015-02-26 23:19 - 2014-12-07 17:35 - 00000000 ____D () C:\Windows\system32\openauthui32
2015-02-26 23:19 - 2014-12-07 17:30 - 00000000 ____D () C:\Windows\system32\perlquick_64
2015-02-26 23:19 - 2014-12-07 17:25 - 00000000 ____D () C:\Windows\system32\folderosUI
2015-02-26 23:19 - 2014-12-07 17:20 - 00000000 ____D () C:\Windows\system32\keyboardprivacy32
2015-02-26 23:19 - 2014-12-07 17:17 - 00000000 ____D () C:\Windows\system32\exportshellBckp
2015-02-26 23:19 - 2014-12-07 17:01 - 00000000 ____D () C:\Windows\system32\quartzzipfldrMonitor
2015-02-26 23:19 - 2014-12-07 16:56 - 00000000 ____D () C:\Windows\system32\apparchiveRecovery
2015-02-26 23:19 - 2014-12-07 16:50 - 00000000 ____D () C:\Windows\system32\jrenativex64
2015-02-26 23:19 - 2014-12-07 16:45 - 00000000 ____D () C:\Windows\system32\addonmemdiagMonitor
2015-02-26 23:19 - 2014-12-07 16:40 - 00000000 ____D () C:\Windows\system32\clipboardtooltipBckp
2015-02-26 23:19 - 2014-12-07 16:35 - 00000000 ____D () C:\Windows\system32\driversbdropMonitor
2015-02-26 23:19 - 2014-12-07 16:30 - 00000000 ____D () C:\Windows\system32\qdvdmydocsx64
2015-02-26 23:19 - 2014-12-07 16:25 - 00000000 ____D () C:\Windows\system32\applicationscrolling32
2015-02-26 23:19 - 2014-12-07 16:22 - 00000000 ____D () C:\Windows\system32\mscoreeurlmon64
2015-02-26 23:19 - 2014-12-07 16:15 - 00000000 ____D () C:\Windows\system32\pythonqeditBckp
2015-02-26 23:19 - 2014-12-07 16:13 - 00000000 ____D () C:\Windows\system32\compiletrash32
2015-02-26 23:19 - 2014-12-07 16:05 - 00000000 ____D () C:\Windows\system32\finderregidle_86
2015-02-26 23:19 - 2014-12-07 16:00 - 00000000 ____D () C:\Windows\system32\windowsmscmsBckp
2015-02-26 23:19 - 2014-12-07 15:55 - 00000000 ____D () C:\Windows\system32\textsyncuiClient
2015-02-26 23:19 - 2014-12-07 15:54 - 00000000 ____D () C:\Windows\system32\controlshdocvwProt
2015-02-26 23:19 - 2014-12-07 15:45 - 00000000 ____D () C:\Windows\system32\rawehtrace32
2015-02-26 23:19 - 2014-12-07 13:10 - 00000000 ____D () C:\Windows\system32\ehtracesbdropapi
2015-02-26 23:19 - 2014-12-07 13:04 - 00000000 ____D () C:\Windows\system32\symboliclivesspProt
2015-02-26 23:19 - 2014-12-07 12:59 - 00000000 ____D () C:\Windows\system32\scrollingbitsigdRec
2015-02-26 23:19 - 2014-12-07 12:54 - 00000000 ____D () C:\Windows\system32\directxmsvidctlSched
2015-02-26 23:19 - 2014-12-07 12:50 - 00000000 ____D () C:\Windows\system32\biosmemoryMonitor
2015-02-26 23:19 - 2014-12-07 12:44 - 00000000 ____D () C:\Windows\system32\biosmshtmlProt
2015-02-26 23:19 - 2014-12-07 12:40 - 00000000 ____D () C:\Windows\system32\odbcmfx86
2015-02-26 23:19 - 2014-12-07 12:35 - 00000000 ____D () C:\Windows\system32\exportuspDrv
2015-02-26 23:19 - 2014-12-07 12:30 - 00000000 ____D () C:\Windows\system32\sharewarewdcProvider
2015-02-26 23:19 - 2014-12-07 12:24 - 00000000 ____D () C:\Windows\system32\desktopquartz_86
2015-02-26 23:19 - 2014-12-07 12:19 - 00000000 ____D () C:\Windows\system32\debuglogClient
2015-02-26 23:19 - 2014-12-07 12:15 - 00000000 ____D () C:\Windows\system32\opensdiagschdDrv
2015-02-26 23:19 - 2014-12-07 12:09 - 00000000 ____D () C:\Windows\system32\daemonmbrUI
2015-02-26 23:19 - 2014-12-07 12:04 - 00000000 ____D () C:\Windows\system32\exportmpg2splt_64
2015-02-26 23:19 - 2014-12-07 11:59 - 00000000 ____D () C:\Windows\system32\commandmpg2splt_64
2015-02-26 23:19 - 2014-12-07 11:54 - 00000000 ____D () C:\Windows\system32\folderthumbnailMonitor
2015-02-26 23:19 - 2014-12-07 02:50 - 00000000 ____D () C:\Windows\system32\javaracengnRecovery
2015-02-26 23:19 - 2014-12-06 13:32 - 00000000 ____D () C:\Windows\system32\symbolicquartzx64
2015-02-26 23:19 - 2014-12-06 13:26 - 00000000 ____D () C:\Windows\system32\directxwizardGUI
2015-02-26 23:19 - 2014-12-06 13:21 - 00000000 ____D () C:\Windows\system32\methodsnapshotSched
2015-02-26 23:19 - 2014-12-06 13:15 - 00000000 ____D () C:\Windows\system32\addondlcGUI
2015-02-26 23:19 - 2014-12-06 13:10 - 00000000 ____D () C:\Windows\system32\firmwarelpk_64
2015-02-26 23:19 - 2014-12-06 13:05 - 00000000 ____D () C:\Windows\system32\archiveperlMonitor
2015-02-26 23:19 - 2014-12-06 13:00 - 00000000 ____D () C:\Windows\system32\advapikerberos_64
2015-02-26 23:19 - 2014-12-06 12:56 - 00000000 ____D () C:\Windows\system32\mscoreetxviewUI
2015-02-26 23:19 - 2014-12-06 12:51 - 00000000 ____D () C:\Windows\system32\ehtracelivesspSched
2015-02-26 23:19 - 2014-12-06 12:45 - 00000000 ____D () C:\Windows\system32\taskmsctfmonitor32
2015-02-26 23:19 - 2014-12-06 12:40 - 00000000 ____D () C:\Windows\system32\iconlocalsplClient
2015-02-26 23:19 - 2014-12-06 12:35 - 00000000 ____D () C:\Windows\system32\dlcregisterBckp
2015-02-26 23:19 - 2014-12-06 12:30 - 00000000 ____D () C:\Windows\system32\macrompg2splt_64
2015-02-26 23:19 - 2014-12-06 12:25 - 00000000 ____D () C:\Windows\system32\wizardqeditRecovery
2015-02-26 23:19 - 2014-12-06 12:20 - 00000000 ____D () C:\Windows\system32\spritepku2uRecovery
2015-02-26 23:19 - 2014-12-04 21:55 - 00000000 ____D () C:\Windows\system32\quartzmpg2splt_86
2015-02-26 23:19 - 2014-12-04 13:23 - 00000000 ____D () C:\Windows\system32\regidleadvapiRecovery
2015-02-26 23:19 - 2014-12-04 12:32 - 00000000 ____D () C:\Windows\system32\motioncredsspSched
2015-02-26 23:19 - 2014-12-04 12:27 - 00000000 ____D () C:\Windows\system32\comdlgtspkgDrv
2015-02-26 23:19 - 2014-12-04 12:22 - 00000000 ____D () C:\Windows\system32\dockdifx64
2015-02-26 23:19 - 2014-12-04 12:17 - 00000000 ____D () C:\Windows\system32\interpretersdkDrv
2015-02-26 23:19 - 2014-12-04 12:12 - 00000000 ____D () C:\Windows\system32\processwizardMonitor
2015-02-26 23:19 - 2014-12-04 12:07 - 00000000 ____D () C:\Windows\system32\finderwinsatapi_64
2015-02-26 23:19 - 2014-12-04 12:02 - 00000000 ____D () C:\Windows\system32\interactivempg2splt32
2015-02-26 23:19 - 2014-12-04 11:57 - 00000000 ____D () C:\Windows\system32\sbeuspapi
2015-02-26 23:19 - 2014-12-04 11:52 - 00000000 ____D () C:\Windows\system32\filedifxGUI
2015-02-26 23:19 - 2014-12-04 11:47 - 00000000 ____D () C:\Windows\system32\wdcsdiagschdDrv
2015-02-26 23:19 - 2014-12-04 11:42 - 00000000 ____D () C:\Windows\system32\kernelceiplpkUI
2015-02-26 23:19 - 2014-12-04 11:37 - 00000000 ____D () C:\Windows\system32\databasewdc_64
2015-02-26 23:19 - 2014-12-04 11:32 - 00000000 ____D () C:\Windows\system32\syntaxehstorx64
2015-02-26 23:19 - 2014-12-04 11:27 - 00000000 ____D () C:\Windows\system32\fat32nativeProt
2015-02-26 23:19 - 2014-12-04 11:22 - 00000000 ____D () C:\Windows\system32\foldercbvax86
2015-02-26 23:19 - 2014-12-04 11:17 - 00000000 ____D () C:\Windows\system32\controlscriptDrv
2015-02-26 23:19 - 2014-12-04 11:12 - 00000000 ____D () C:\Windows\system32\daemonmpg2spltapi
2015-02-26 23:19 - 2014-12-04 11:06 - 00000000 ____D () C:\Windows\system32\guiqeditUI
2015-02-26 23:19 - 2014-12-04 11:02 - 00000000 ____D () C:\Windows\system32\memorykerberosGUI
2015-02-26 23:19 - 2014-12-04 10:57 - 00000000 ____D () C:\Windows\system32\urlmonlivesspRec
2015-02-26 23:19 - 2014-12-04 10:52 - 00000000 ____D () C:\Windows\system32\trashcercredProt
2015-02-26 23:19 - 2014-12-04 10:47 - 00000000 ____D () C:\Windows\system32\dockvbicodecProt
2015-02-26 23:19 - 2014-12-04 10:42 - 00000000 ____D () C:\Windows\system32\mysqlrubyapi
2015-02-26 23:19 - 2014-12-04 10:37 - 00000000 ____D () C:\Windows\system32\archivemidimapRecovery
2015-02-26 23:19 - 2014-12-04 10:32 - 00000000 ____D () C:\Windows\system32\programwysiwygTask
2015-02-26 23:19 - 2014-12-04 10:27 - 00000000 ____D () C:\Windows\system32\zipfldrmsvidctlProt
2015-02-26 23:19 - 2014-12-04 10:22 - 00000000 ____D () C:\Windows\system32\memorymcx2filterDrv
2015-02-26 23:19 - 2014-12-04 10:17 - 00000000 ____D () C:\Windows\system32\minimalperl32
2015-02-26 23:19 - 2014-12-04 10:12 - 00000000 ____D () C:\Windows\system32\evrmcx2filterx86
2015-02-26 23:19 - 2014-12-04 10:07 - 00000000 ____D () C:\Windows\system32\ocrnetbridgex64
2015-02-26 23:19 - 2014-12-04 10:02 - 00000000 ____D () C:\Windows\system32\cgiwinsatapiProt
2015-02-26 23:19 - 2014-12-04 09:57 - 00000000 ____D () C:\Windows\system32\msdrmsyncuiProvider
2015-02-26 23:19 - 2014-12-04 09:51 - 00000000 ____D () C:\Windows\system32\processmydocsRecovery
2015-02-26 23:19 - 2014-12-04 09:46 - 00000000 ____D () C:\Windows\system32\iconbitsigdGUI
2015-02-26 23:19 - 2014-12-04 09:42 - 00000000 ____D () C:\Windows\system32\regidlewdmaudTask
2015-02-26 23:19 - 2014-12-04 09:37 - 00000000 ____D () C:\Windows\system32\interactiveitsSched
2015-02-26 23:19 - 2014-12-04 09:31 - 00000000 ____D () C:\Windows\system32\archivecopyGUI
2015-02-26 23:19 - 2014-12-04 09:27 - 00000000 ____D () C:\Windows\system32\dospku2uUI
2015-02-26 23:19 - 2014-12-04 09:22 - 00000000 ____D () C:\Windows\system32\classprogramProvider
2015-02-26 23:19 - 2014-12-04 09:17 - 00000000 ____D () C:\Windows\system32\appwindowsRecovery
2015-02-26 23:19 - 2014-12-04 09:12 - 00000000 ____D () C:\Windows\system32\crontwextSched
2015-02-26 23:19 - 2014-12-04 09:06 - 00000000 ____D () C:\Windows\system32\daemonitsRecovery
2015-02-26 23:19 - 2014-12-04 09:02 - 00000000 ____D () C:\Windows\system32\snapshotqdvd_86
2015-02-26 23:19 - 2014-12-04 08:56 - 00000000 ____D () C:\Windows\system32\drivermscmsClient
2015-02-26 23:19 - 2014-12-04 08:51 - 00000000 ____D () C:\Windows\system32\doscredsspMonitor
2015-02-26 23:19 - 2014-12-04 08:47 - 00000000 ____D () C:\Windows\system32\methodplaysndsrv64
2015-02-26 23:19 - 2014-12-04 08:42 - 00000000 ____D () C:\Windows\system32\perlkerberos64
2015-02-26 23:19 - 2014-12-04 08:37 - 00000000 ____D () C:\Windows\system32\exportperftrackGUI
2015-02-26 23:19 - 2014-12-04 08:31 - 00000000 ____D () C:\Windows\system32\tooltipwordDrv
2015-02-26 23:19 - 2014-12-04 08:26 - 00000000 ____D () C:\Windows\system32\keyboardehdrminit_64
2015-02-26 23:19 - 2014-12-04 08:21 - 00000000 ____D () C:\Windows\system32\gnustartProvider
2015-02-26 23:19 - 2014-12-04 08:16 - 00000000 ____D () C:\Windows\system32\addonminimalx86
2015-02-26 23:19 - 2014-12-04 08:11 - 00000000 ____D () C:\Windows\system32\rootmf64
2015-02-26 23:19 - 2014-12-04 08:06 - 00000000 ____D () C:\Windows\system32\daemondefaultx86
2015-02-26 23:19 - 2014-12-04 08:02 - 00000000 ____D () C:\Windows\system32\memdiagvbicodecRec
2015-02-26 23:19 - 2014-12-04 07:57 - 00000000 ____D () C:\Windows\system32\freewarefunctionClient
2015-02-26 23:19 - 2014-12-04 07:52 - 00000000 ____D () C:\Windows\system32\windowsmscmsProvider
2015-02-26 23:19 - 2014-12-04 07:46 - 00000000 ____D () C:\Windows\system32\dashboardkeyboardRec
2015-02-26 23:19 - 2014-12-04 07:41 - 00000000 ____D () C:\Windows\system32\archivecompileMonitor
2015-02-26 23:19 - 2014-12-04 07:36 - 00000000 ____D () C:\Windows\system32\tooltipracengnUI
2015-02-26 23:19 - 2014-12-04 07:31 - 00000000 ____D () C:\Windows\system32\interactivewinsockx86
2015-02-26 23:19 - 2014-12-04 07:27 - 00000000 ____D () C:\Windows\system32\shelldfsshlexRecovery
2015-02-26 23:19 - 2014-12-04 07:21 - 00000000 ____D () C:\Windows\system32\encondingfat32Monitor
2015-02-26 23:19 - 2014-12-04 07:17 - 00000000 ____D () C:\Windows\system32\compilercronProt
2015-02-26 23:19 - 2014-12-04 07:12 - 00000000 ____D () C:\Windows\system32\classutilityx64
2015-02-26 23:19 - 2014-12-04 07:07 - 00000000 ____D () C:\Windows\system32\screenshotsoftwareSched
2015-02-26 23:19 - 2014-12-04 07:02 - 00000000 ____D () C:\Windows\system32\desktopquickTask
2015-02-26 23:19 - 2014-12-04 06:57 - 00000000 ____D () C:\Windows\system32\classjreapi
2015-02-26 23:19 - 2014-12-04 06:52 - 00000000 ____D () C:\Windows\system32\scrollingmsctfmonitorUI
2015-02-26 23:19 - 2014-12-04 06:47 - 00000000 ____D () C:\Windows\system32\mshtmlmsvidctlUI
2015-02-26 23:19 - 2014-12-04 06:42 - 00000000 ____D () C:\Windows\system32\wpcumimidimapBckp
2015-02-26 23:19 - 2014-12-04 06:37 - 00000000 ____D () C:\Windows\system32\nativeauthuiProvider
2015-02-26 23:19 - 2014-12-04 06:32 - 00000000 ____D () C:\Windows\system32\controlpublicRec
2015-02-26 23:19 - 2014-12-04 06:27 - 00000000 ____D () C:\Windows\system32\winsockqeditDrv
2015-02-26 23:19 - 2014-12-04 06:22 - 00000000 ____D () C:\Windows\system32\registerschannelClient
2015-02-26 23:19 - 2014-12-03 14:48 - 00000000 ____D () C:\Windows\system32\wpcumiuspMonitor
2015-02-26 23:19 - 2014-12-02 21:47 - 00000000 ____D () C:\Windows\system32\exportfrozenx86
2015-02-26 23:19 - 2014-12-02 14:48 - 00000000 ____D () C:\Windows\system32\BIOSFAT32Import
2015-02-26 23:19 - 2014-12-02 13:25 - 00000000 ____D () C:\Windows\system32\CursorNativeUtility
2015-02-26 23:19 - 2014-11-30 22:37 - 00000000 ____D () C:\Windows\system32\AppCommandFunction
2015-02-26 23:19 - 2014-11-29 22:37 - 00000000 ____D () C:\Windows\system32\ApplicationRepositoryRuntime
2015-02-26 23:19 - 2014-11-29 21:47 - 00000000 ____D () C:\Windows\system32\IconKernelWiget
2015-02-26 23:19 - 2014-11-27 22:36 - 00000000 ____D () C:\Windows\system32\ImportMotionScript
2015-02-26 23:19 - 2014-11-27 21:46 - 00000000 ____D () C:\Windows\system32\MemorySpriteText
2015-02-27 00:42 - 2014-06-23 17:18 - 00000000 ____D () C:\Program Files\eDealsPop
2015-02-27 00:42 - 2014-05-05 21:00 - 00000000 ____D () C:\Program Files\DolkaRuIePlugin
2015-02-27 00:15 - 2014-05-05 17:52 - 00000000 ____D () C:\Program Files\GamesRS
2015-02-26 23:26 - 2014-10-26 20:44 - 00000000 ____D () C:\Program Files\eDealPop
Hosts:
Task: {96BB5E33-B12B-4D3A-86A1-6631074DA8FE} - System32\Tasks\AmiUpdXp => C:\Users\Joker\AppData\Local\41\a18467.exe <==== ATTENTION
Task: C:\Windows\Tasks\AmiUpdXp.job => C:\Users\Joker\AppData\Local\41\a18467.exe <==== ATTENTION
AlternateDataStreams: C:\Users\Joker\Local Settings:wa
AlternateDataStreams: C:\Users\Joker\AppData\Local:wa
AlternateDataStreams: C:\Users\Joker\AppData\Local\Application Data:wa
EmptyTemp:
Reboot:
[/code][*]Запустите FRST и нажмите один раз на кнопку [b]Fix[/b] и подождите. Программа создаст лог-файл ([b]Fixlog.txt[/b]). Пожалуйста, прикрепите его в следующем сообщении![*]Обратите внимание, что компьютер будет [b]перезагружен[/b].[/list]

[LIST][*]Скачайте [B][URL="http://general-changelog-team.fr/en/downloads/finish/20-outils-de-xplode/2-adwcleaner"]AdwCleaner (by Xplode)[/URL][/B] и сохраните его на [B]Рабочем столе[/B].[*]Запустите его (в ОС [B]Windows Vista/Seven[/B] необходимо запускать через правую кн. мыши [B]от имени администратора[/B]), нажмите кнопку [B]"Scan"[/B] и дождитесь окончания сканирования.[*]Когда сканирование будет завершено, отчет будет сохранен в следующем расположении: [B][COLOR="Blue"]C:\AdwCleaner\AdwCleaner[R0].txt[/COLOR][/B].[*]Прикрепите отчет к своему следующему сообщению.[/LIST]

Подробнее читайте в [URL="http://virusinfo.info/showthread.php?t=146192"]этом руководстве[/URL].

воот

[url=http://virusinfo.info/showthread.php?t=146192&p=1041864&viewfull=1#post1041864]Удалите в AdwCleaner[/url] всё, кроме папок с названиями программ которыми вы пользуетесь (если ничем из перечисленного в логе не пользуетесь, то удалите всё). Отчет после удаления прикрепите.

Отчет после удаления.

неужели настолько все запущено?

[QUOTE]неужели настолько все запущено?[/QUOTE]
Уже немного по лучше по сравнению с тем что было.

Еще раз логи Farbar сделайте.

фывфыв

Что с проблемой?

вроде бы пропали, система работает быстрее. страницы открываются нормально, из игр не выкидывает.

Большое Спасибо!

[LIST=1][*]Скачайте [url=https://toolslib.net/downloads/finish/2/]DelFix[/url] и сохраните утилиту на [b]Рабочем столе[/b][*]Запустите [b]DelFix[/b][INDENT][SIZE="1"][B]Обратите внимание[/B], что утилиты необходимо запускать от имени Администратора. По умолчанию в [b]Windows XP[/b] так и есть. В [b]Windows Vista[/b] и [b]Windows 7[/b] администратор понижен в правах по умолчанию, поэтому, не забудьте нажать правой кнопкой на программу, выбрать [b]Запуск от имени Администратора[/b], при необходимости укажите пароль администратора и нажмите [b]Да[/b][/SIZE][/INDENT][*]В открывшемся окне программы поставьте галочки напротив пунктов [B]Remove desinfection tools[/B] и [B]Create registry backup[/B][*]Нажмите на кнопку [B]Run[/B][*]После окончания работы программы автоматически откроется блокнот с отчетом [B]delfix.txt[/B][*]Прикрепите этот отчет в вашей теме.[/LIST]

[LIST][*]Загрузите [B]SecurityCheck by glax24[/B] [URL="http://virusinfo.info/soft/tool.php?tool=SecurityCheck"]отсюда[/URL] и сохраните утилиту на [I]Рабочем столе[/I][*]Запустите двойным щелчком мыши (если Вы используете [I]Windows XP[/I]) или из меню по щелчку правой кнопки мыши [I]Запустить от имени администратора[/I] (если Вы используете [I]Windows Vista/7[/I])[*]Если увидите [U]предупреждение от вашего фаервола[/U] относительно программы SecurityCheck, не блокируйте ее работу.[*]Дождитесь окончания сканирования, откроется лог в блокноте с именем [B]SecurityCheck.txt[/B];[*]Если Вы закрыли Блокнот, то найти этот файл можно в корне системного диска в папке с именем [I]SecurityCheck[/I], например [I][COLOR="Blue"]C:\SecurityCheck\SecurityCheck.txt[/COLOR][/I][*][/LIST]