После перезагрузки компьютера слетает AdBlock (Возможно, он был перемещен или удален).

Вложений: 3

Здравствуйте. Все началось с того, что я не мог устанавливать расширения в Chrome. Ошибка: не удалось переместить каталог расширений в профиль. Помог снос браузера с дальнейшей переустановкой. Расширение установилось, но слетало при каждой перезагрузке ПК. Сейчас ситуация повторяется - теперь я вновь даже не могу поставить его по ранее названной причине.

Уважаемый(ая) [B]Дмитрий Чуйков[/B], спасибо за обращение на наш форум!

Удаление вирусов - абсолютно бесплатная услуга на VirusInfo.Info. Хелперы в самое ближайшее время ответят на Ваш запрос. Для оказания помощи необходимо предоставить логи сканирования утилитами АВЗ и HiJackThis, подробнее можно прочитать в [URL="http://virusinfo.info/pravila.html"]правилах оформления запроса о помощи[/URL].

[INFORMATION]Если вы хотите получить персональную гарантированную помощь в приоритетном режиме, то воспользуйтесь платным сервисом [URL="http://virusinfo.info/content.php?r=613-sub_pomogite"]Помогите+[/URL].[/INFORMATION]

Если наш сайт окажется полезен Вам и у Вас будет такая возможность - пожалуйста [URL="http://virusinfo.info/content.php?r=113-virusinfo.info-donate"]поддержите проект[/URL].

Выполните скрипт в AVZ
[code]begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
QuarantineFile('C:\Program Files\caster\wizzcaster.exe','');
QuarantineFile('C:\Users\dmitry\AppData\Local\FilterStart\FilterStart.exe','');
QuarantineFile('C:\Users\dmitry\AppData\Local\System System Helper\ctfmom.exe','');
QuarantineFile('C:\Users\dmitry\AppData\Local\MicroCleaner\mrz2.exe','');
DeleteFile('C:\Users\dmitry\AppData\Local\MicroCleaner\mrz2.exe','32');
DeleteFile('C:\Windows\system32\Tasks\MicroCleaner','32');
DeleteFile('C:\Windows\system32\Tasks\Advanced System Check','32');
DeleteFile('C:\Windows\system32\Tasks\System Account Manager','32');
DeleteFile('C:\Windows\system32\Tasks\Smart System Filter','32');
DeleteFile('C:\Users\dmitry\AppData\Local\System System Helper\ctfmom.exe','32');
DeleteFile('C:\Users\dmitry\AppData\Local\FilterStart\FilterStart.exe','32');
DeleteFile('C:\Program Files\caster\wizzcaster.exe','32');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.[/code]Будет выполнена перезагрузка компьютера.

Выполните скрипт в AVZ
[code]begin
CreateQurantineArchive('c:\quarantine.zip');
end.[/code][b]c:\quarantine.zip[/b] пришлите по красной ссылке [color="Red"][u][b]Прислать запрошенный карантин[/b][/u][/color] [b]над первым сообщением[/b] темы.

[B][COLOR="Red"]Выполните ЕЩЕ РАЗ правила, прикрепите к сообщению НОВЫЕ логи[/COLOR][/B]

Вложений: 2

Сделано.

Скачайте [url=http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/][b]Farbar Recovery Scan Tool[/b][/url] [img]http://i.imgur.com/NAAC5Ba.png[/img] и сохраните на Рабочем столе.
[list][*][b]Примечание[/b]: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.[/list]

1. Запустите программу двойным щелчком. Когда программа запустится, нажмите [b]Yes[/b] для соглашения с предупреждением.
2. Убедитесь, что в окне [b]Optional Scan[/b] отмечены [i]List BCD[/i], [i]Driver MD5[/i] и [i]90 Days Files[/i].
[img]http://i.imgur.com/3munStB.png[/img]
3. Нажмите кнопку [b]Scan[/b].
4. После окончания сканирования будет создан отчет ([b]FRST.txt[/b]) в той же папке, откуда была запущена программа.
5. Если программа была запущена в первый раз, также будет создан отчет ([b]Addition.txt[/b]).
6. Отчеты, полученные в пп. 4 и 5, заархивируйте (в [b]один архив[/b]) и прикрепите к сообщению.

Вложений: 1

Готово.

1. Откройте [b]Блокнот[/b] и скопируйте в него приведенный ниже текст
[code]
CreateRestorePoint:
FF Extension: Fast search v 0.25 - C:\Users\dmitry\AppData\Roaming\Mozilla\Firefox\Profiles\cw5gj1bn.default\Extensions\{d720d64d-c71a-4316-b59e-8a41b860178f} [2016-08-01] [not signed]
OPR Extension: (Fast search v3.5) - C:\Users\dmitry\AppData\Roaming\Opera Software\Opera Stable\Extensions\leenkjhmbcgekojlkimcbodmniopgfnp [2016-08-01]
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Windows\CRMSvc.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\Documents\swshost.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\Documents\swhust.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\Documents\swdhost.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\Documents\svshost.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\Documents\svdhost.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Roaming\Zummadax.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Roaming\WindowsUpdate
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Roaming\WindowsMsg
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Roaming\Voltom.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Roaming\Vaiait.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Roaming\Tonla.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Roaming\Singletom.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Roaming\service.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Roaming\RenewalService
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Roaming\Quotenamrons
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Roaming\mystartsearch
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Roaming\msiql.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Roaming\LightGate.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Roaming\Geostring.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Roaming\Duolux.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Roaming\daemon2.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Roaming\apptj.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Roaming\ApppazmaL
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Roaming\adb.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Local\xxx-line.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 _RSHD C:\Users\dmitry\AppData\Local\Baidu
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Windows\system32\lnsecsl.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\Все пользователи\xwinpx
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\Все пользователи\xifs
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\Все пользователи\VKSaver
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\Все пользователи\VkontakteDJ
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\Все пользователи\VideoFetcher
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\Все пользователи\viaair
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\Все пользователи\Torrent_Search_PED
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\Все пользователи\SwinpS
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\Все пользователи\Statdex
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\Все пользователи\Smilebar
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\Все пользователи\Ronzap
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\Все пользователи\RenewalService
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\Все пользователи\emailnotifier
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\Все пользователи\Doubleing
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\Все пользователи\dchp
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\Все пользователи\Cloudprinter
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\x11
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\TimeTasks
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\LocalLow\SearchGo
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\LocalLow\IObit
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\LocalLow\dlsecuretb
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\Local\Аудио и видео скачивание
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\Local\YaNews
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\Local\wincheck
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\Local\win_updatez
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\Local\Win_update
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\Local\WikiUpdate.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\Local\WebExtend
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\Local\vsemposkidki
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\Local\valuablecoupons
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\Local\UpdateAdmin
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\Local\Up Top
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\Local\UmmyVideoDownloader
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\Local\SystemMonitor2016
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\Local\itorrent
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Users\dmitry\AppData\Local\Host Service
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\ProgramData\xwinpx
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\ProgramData\xifs
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\ProgramData\VKSaver
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\ProgramData\VkontakteDJ
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\ProgramData\VideoFetcher
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\ProgramData\viaair
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\ProgramData\Torrent_Search_PED
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\ProgramData\SwinpS
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\ProgramData\Statdex
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\ProgramData\Smilebar
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\ProgramData\Ronzap
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\ProgramData\RenewalService
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\ProgramData\emailnotifier
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\ProgramData\Doubleing
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\ProgramData\dchp
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\ProgramData\Cloudprinter
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Program Files\winzipper
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Program Files\newext
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Program Files\contentprotector
2016-08-01 09:50 - 2016-08-01 09:50 - 00000000 __RSH C:\Program Files\bittorrent
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\Documents\systemfile.exe
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\ZU_WarThunder
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\Zona
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\tuto_monetize_120160517
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\TangentiallyMowers
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\SystemDir
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\sysnet
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\syslog
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\SysHlp
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\SysassistByHotWheel
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\svshost
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\SuperBrowser
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\SunnyDay3
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\SunnyDay21
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\Sparta
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\SmartWeb
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\SHAREit
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\SearchGo
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\ScriptWriter
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\screentk
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\SaveYouTime
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\Ruspromocode
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\PushControl
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\promoskiki
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\ProfitSaver
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\PriceMeter
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\PriceFountain
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\prestrm
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\PreachierOffhanded
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\PPTAssist
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\PowerMonitor
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\PhoenixBrowserUpdater
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\PegboardUpwelling
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\OmeletsBefool
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\nethost
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\MinimsPunkin
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\MEGAsync
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\mediaget2
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\mediaget
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\Media Get LLC
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\MasterpiecesSlitting
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\macasoft
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\LobotomizeOverrank
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\kometa
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\JoysUncleaned
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\JamboreesAwol
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\ipro2
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\ipro
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\IntroversionForerunners
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\InterplayIntelligent
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\InstaTime
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\ImaginersGlares
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\igs
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\HttpFilter
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\HourNews
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\hotskidki
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\hostinstaller
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\HasheeshesDiadic
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\GoodGame Empire
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\GobbledegookReconfigure
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\GMon Updater
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\GetGo
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\GamesBot
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\Gameo
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\FusionPlayer
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\fupdate
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\FlaggingsPlatesful
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\filesystemdriver
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\extension
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\DwellsSeismometric
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\DistributeeAngers
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\DigitalisFossilize
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\DesktopMessenger
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\DemotionDactylus
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\DailyWiki
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\CrutchBubbled
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\crossbrowse
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\ConvertAd
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\ContradictivePrudes
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\CongasNecessariness
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\ComDev
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\CalibrationWorthless
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\Blacount
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\Birds365
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\Birds
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\BiggishBlanch
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\AVKModules
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\avabvyxvdy
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\AuthoritiesThreefold
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\ArchaizeDrupe
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\allskidkimos
2016-08-01 09:49 - 2016-08-01 09:49 - 00000000 __RSH C:\Users\dmitry\AppData\Local\AdsBlokator
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\YTAHelper
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\YSearcher
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\yoursearching
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\WiseManager
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\WinZiper
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\WindowsUpdater
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\WindowsProtectManger
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\WindowsMangerProtect
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\Windows Update
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\WinDiagnosis
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\webssearches
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\WeatherChickn
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\WADHostAgent
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\VooUpdate
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\vkPro
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\VKMusic
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\VKDJ
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\VK OK AdBlock
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\UPUpdata
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\Update
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\Uncheckit
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\TSv
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\TSearch
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\Torrent_Search_PED
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\TomorrowGames
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\TheismsLimb
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\TextEditor
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\svshost
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\svrupg.exe
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\sparta111
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\SmartSearch
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\SimplyTech
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\ShopperPro
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\SetMyHomePage
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\ScreenChromeShot
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\Schedule
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\qksee
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\PushControl
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\PriceFountainUpdateVer
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\PriceFountain
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\pptassist
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\PennyBee
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\PCFix
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\oursurfing
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\OpLinks
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\OpenKP
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\OpenCandy
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\omniboxes
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\NUIns
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\ntsvc
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\Neiron
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\mysites123
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\MyDesktop
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\mspop.exe
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\MoshouInput
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\Micron
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\MailUpdate
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\Mactowebise
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\luckysearches
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\LoadLeader
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\Lamzap
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\istartsurf
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\istartpageing
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\IQIYI Video
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\instatime
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\InstallChecker
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\ImageCropResize
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\ImageCenter
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\Homepager
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\HomePage.exe
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\GoldenGate
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\GetGo Software
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\Genieo
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\GbUpdSrv
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\Gameo
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\FreeVPN
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\FlvPlayer
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\FastVKOpen
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\FastLinkChrome
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\fastboot.exe
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\et
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\EmailNotifier
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\eCyber
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\EasyFileOpener
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\drpsu
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\DriverPack Notifier
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\Doubleing
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\do-search
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\DigitalSites
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\DailyWiki
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\daemon.exe
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\csdimedia
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\cpuminer
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\CoupSeek
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\costmin
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\ConditionalRedirect
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\CloudPrinter
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\checkers
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\CentralPicture
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\CenterPicture
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\Calculator
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\Booking_helper
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\BetterViewer
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\bafhhmlkbcigapgkfdgfikhkkaihpjjn
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\ASPackage
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\ArchiveLeader
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\AppHelper
2016-08-01 09:48 - 2016-08-01 09:48 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\AdBlockerator
2016-08-01 09:47 - 2016-08-01 10:59 - 00000000 ____D C:\Users\dmitry\AppData\Local\System System Helper
2016-08-01 09:46 - 2016-08-17 12:08 - 00000000 ____D C:\Users\dmitry\AppData\Local\MicroCleaner
2016-08-01 09:46 - 2016-08-01 09:46 - 00000000 __RSH C:\Users\Все пользователи\UBar
2016-08-01 09:46 - 2016-08-01 09:46 - 00000000 __RSH C:\Users\Все пользователи\KRB Updater Utility
2016-08-01 09:46 - 2016-08-01 09:46 - 00000000 __RSH C:\Users\Все пользователи\IObit
2016-08-01 09:46 - 2016-08-01 09:46 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\VOPackage
2016-08-01 09:46 - 2016-08-01 09:46 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\IObit
2016-08-01 09:46 - 2016-08-01 09:46 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\Appverifier
2016-08-01 09:46 - 2016-08-01 09:46 - 00000000 __RSH C:\Users\dmitry\AppData\Roaming\Advancedpccare.com
2016-08-01 09:46 - 2016-08-01 09:46 - 00000000 __RSH C:\Users\dmitry\AppData\Local\ZetaGamesViewer
2016-08-01 09:46 - 2016-08-01 09:46 - 00000000 __RSH C:\Users\dmitry\AppData\Local\ZetaGamesNews
2016-08-01 09:46 - 2016-08-01 09:46 - 00000000 __RSH C:\Users\dmitry\AppData\Local\IObit installer
2016-08-01 09:46 - 2016-08-01 09:46 - 00000000 __RSH C:\Users\dmitry\AppData\Local\IObit
2016-08-01 09:46 - 2016-08-01 09:46 - 00000000 __RSH C:\Users\dmitry\AppData\Local\InstallManager
2016-08-01 09:46 - 2016-08-01 09:46 - 00000000 __RSH C:\Users\dmitry\AppData\Local\extensions
2016-08-01 09:46 - 2016-08-01 09:46 - 00000000 __RSH C:\ProgramData\UBar
2016-08-01 09:46 - 2016-08-01 09:46 - 00000000 __RSH C:\ProgramData\KRB Updater Utility
2016-08-01 09:46 - 2016-08-01 09:46 - 00000000 __RSH C:\ProgramData\IObit
2016-08-01 09:46 - 2016-08-01 09:46 - 00000000 __RSH C:\Program Files\ByteFence
2016-08-01 09:45 - 2016-08-17 12:08 - 00000000 ____D C:\Program Files\Caster
2016-08-01 09:44 - 2016-08-16 14:21 - 00000000 ____D C:\Program Files\Max Driver Updater
2016-08-01 09:44 - 2016-08-01 11:03 - 00000000 ____D C:\Program Files\Translate Mgr
2016-08-01 09:44 - 2016-08-01 10:59 - 00000000 ____D C:\Users\dmitry\AppData\Local\FilterStart
2016-08-01 09:44 - 2016-08-01 09:44 - 00000000 ____D C:\Program Files\e2ru
2016-08-01 09:01 - 2016-08-01 09:01 - 00000000 ____D C:\Users\Все пользователи\ffe424e1-29f1-1
2016-08-01 09:01 - 2016-08-01 09:01 - 00000000 ____D C:\Users\Все пользователи\ffe424e1-17c3-0
2016-08-01 09:01 - 2016-08-01 09:01 - 00000000 ____D C:\ProgramData\ffe424e1-29f1-1
2016-08-01 09:01 - 2016-08-01 09:01 - 00000000 ____D C:\ProgramData\ffe424e1-17c3-0
2016-08-01 08:59 - 2016-08-01 09:29 - 00000000 ____D C:\Users\dmitry\AppData\Roaming\prof2you
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Program Files\bittorrent
2016-08-01 09:46 - 2016-08-01 09:46 - 0000000 __RSH () C:\Program Files\ByteFence
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Program Files\contentprotector
2014-04-19 16:25 - 2014-04-18 04:25 - 0000044 ____H () C:\Program Files\d4e8582c.tmp
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Program Files\newext
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Program Files\winzipper
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\AdBlockerator
2016-08-01 09:46 - 2016-08-01 09:46 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Advancedpccare.com
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\AppHelper
2016-08-01 09:46 - 2016-08-01 09:46 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Appverifier
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\ArchiveLeader
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\ASPackage
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\bafhhmlkbcigapgkfdgfikhkkaihpjjn
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\BetterViewer
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Booking_helper
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Calculator
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\CenterPicture
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\CentralPicture
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\checkers
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\CloudPrinter
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\ConditionalRedirect
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\costmin
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\CoupSeek
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\cpuminer
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\csdimedia
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\daemon.exe
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\DailyWiki
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\DigitalSites
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\do-search
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Doubleing
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\DriverPack Notifier
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\drpsu
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\EasyFileOpener
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\eCyber
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\EmailNotifier
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\et
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\fastboot.exe
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\FastLinkChrome
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\FastVKOpen
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\FlvPlayer
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\FreeVPN
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Gameo
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\GbUpdSrv
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Genieo
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\GetGo Software
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\GoldenGate
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\HomePage.exe
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Homepager
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\ImageCenter
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\ImageCropResize
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\InstallChecker
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\instatime
2016-08-01 09:46 - 2016-08-01 09:46 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\IObit
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\IQIYI Video
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\istartpageing
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\istartsurf
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Lamzap
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\LoadLeader
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\luckysearches
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Mactowebise
2003-04-16 17:49 - 2003-04-16 17:49 - 0233472 ____R () C:\Users\dmitry\AppData\Roaming\MafiaSetup.exe
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\MailUpdate
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Micron
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\MoshouInput
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\mspop.exe
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\MyDesktop
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\mysites123
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Neiron
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\ntsvc
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\NUIns
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\omniboxes
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\OpenCandy
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\OpenKP
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\OpLinks
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\oursurfing
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\PCFix
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\PennyBee
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\pptassist
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\PriceFountain
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\PriceFountainUpdateVer
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\PushControl
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\qksee
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Schedule
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\ScreenChromeShot
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\SetMyHomePage
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\ShopperPro
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\SimplyTech
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\SmartSearch
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\sparta111
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\svrupg.exe
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\svshost
2014-06-19 12:39 - 2014-06-19 12:39 - 0000024 _____ () C:\Users\dmitry\AppData\Roaming\temp.ini
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\TextEditor
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\TheismsLimb
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\TimeTasks
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\TomorrowGames
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Torrent_Search_PED
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\TSearch
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\TSv
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Uncheckit
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Update
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\UPUpdata
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\VK OK AdBlock
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\VKDJ
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\VKMusic
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\vkPro
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\VooUpdate
2016-08-01 09:46 - 2016-08-01 09:46 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\VOPackage
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\WADHostAgent
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\WeatherChickn
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\webssearches
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\WinDiagnosis
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Windows Update
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\WindowsMangerProtect
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\WindowsProtectManger
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\WindowsUpdater
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\WinZiper
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\WiseManager
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\x11
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\yoursearching
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\YSearcher
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\YTAHelper
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Zona
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\ZU_WarThunder
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Microsoft\Video
2016-08-01 09:48 - 2016-08-01 09:48 - 0000000 __RSH () C:\Users\dmitry\AppData\Roaming\Microsoft\Vision
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\AdsBlokator
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\allskidkimos
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\Apps
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\ArchaizeDrupe
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\AuthoritiesThreefold
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\avabvyxvdy
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\AVKModules
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\BiggishBlanch
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\Birds
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\Birds365
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\Blacount
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\CalibrationWorthless
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\ComDev
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\CongasNecessariness
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\ContradictivePrudes
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\ConvertAd
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\crossbrowse
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\CrutchBubbled
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\DailyWiki
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\DemotionDactylus
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\DesktopMessenger
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\DigitalisFossilize
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\DistributeeAngers
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\DwellsSeismometric
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\extension
2016-08-01 09:46 - 2016-08-01 09:46 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\extensions
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\filesystemdriver
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\FlaggingsPlatesful
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\fupdate
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\FusionPlayer
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\Gameo
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\GamesBot
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\GetGo
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\GMon Updater
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\GobbledegookReconfigure
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\GoodGame Empire
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\HasheeshesDiadic
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\Host Service
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\hostinstaller
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\hotskidki
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\HourNews
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\HttpFilter
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\igs
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\ImaginersGlares
2016-08-01 09:46 - 2016-08-01 09:46 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\InstallManager
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\InstaTime
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\InterplayIntelligent
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\IntroversionForerunners
2016-08-01 09:46 - 2016-08-01 09:46 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\IObit
2016-08-01 09:46 - 2016-08-01 09:46 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\IObit installer
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\ipro
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\ipro2
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\itorrent
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\JamboreesAwol
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\JoysUncleaned
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\kometa
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\LobotomizeOverrank
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\macasoft
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\MasterpiecesSlitting
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\Media Get LLC
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\mediaget
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\mediaget2
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\MEGAsync
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\MinimsPunkin
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\nethost
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\OmeletsBefool
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\PegboardUpwelling
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\PhoenixBrowserUpdater
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\PowerMonitor
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\PPTAssist
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\PreachierOffhanded
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\prestrm
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\PriceFountain
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\PriceMeter
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\ProfitSaver
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\promoskiki
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\PushControl
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\Ruspromocode
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\SaveYouTime
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\screentk
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\ScriptWriter
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\SearchGo
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\SHAREit
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\SmartWeb
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\Sparta
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\SunnyDay21
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\SunnyDay3
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\SuperBrowser
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\svshost
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\SysassistByHotWheel
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\SysHlp
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\syslog
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\sysnet
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\SystemDir
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\SystemMonitor2016
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\TangentiallyMowers
2016-08-01 09:49 - 2016-08-01 09:49 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\tuto_monetize_120160517
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\UmmyVideoDownloader
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\Up Top
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\UpdateAdmin
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\valuablecoupons
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\vsemposkidki
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\WebExtend
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\WikiUpdate.exe
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\wincheck
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\Win_update
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\win_updatez
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\YaNews
2016-08-01 09:46 - 2016-08-01 09:46 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\ZetaGamesNews
2016-08-01 09:46 - 2016-08-01 09:46 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\ZetaGamesViewer
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\Users\dmitry\AppData\Local\Аудио и видео скачивание
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\ProgramData\Cloudprinter
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\ProgramData\dchp
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\ProgramData\Doubleing
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\ProgramData\emailnotifier
2016-08-01 09:46 - 2016-08-01 09:46 - 0000000 __RSH () C:\ProgramData\IObit
2016-08-01 09:46 - 2016-08-01 09:46 - 0000000 __RSH () C:\ProgramData\KRB Updater Utility
2015-08-04 15:29 - 2015-08-04 15:29 - 0000016 _____ () C:\ProgramData\mntemp
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\ProgramData\RenewalService
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\ProgramData\Ronzap
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\ProgramData\Smilebar
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\ProgramData\Statdex
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\ProgramData\SwinpS
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\ProgramData\Torrent_Search_PED
2016-08-01 09:46 - 2016-08-01 09:46 - 0000000 __RSH () C:\ProgramData\UBar
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\ProgramData\viaair
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\ProgramData\VideoFetcher
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\ProgramData\VkontakteDJ
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\ProgramData\VKSaver
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\ProgramData\xifs
2016-08-01 09:50 - 2016-08-01 09:50 - 0000000 __RSH () C:\ProgramData\xwinpx
Task: {10884C56-ADC8-4365-99FD-7E6929DE3974} - \Smart System Filter -> No File <==== ATTENTION
Task: {485A10B9-C334-4674-A765-127D789F779F} - \MicroCleaner -> No File <==== ATTENTION
Task: {6F9FFA35-7BDB-486F-B5AF-17F794426EA3} - \System Account Manager -> No File <==== ATTENTION
Task: {84C542FB-059B-4129-A5EE-F3E0799DC4C3} - \Advanced System Check -> No File <==== ATTENTION
Reboot:
[/code]
2. Нажмите [b]Файл[/b] – [b]Сохранить как[/b]
3. Выберите папку, откуда была запущена утилита [b]Farbar Recovery Scan Tool[/b]
4. Укажите [b]Тип файла[/b] – [b]Все файлы (*.*)[/b]
5. Введите имя файла [b]fixlist.txt[/b] и нажмите кнопку [b]Сохранить[/b]
6. Запустите FRST, нажмите один раз на кнопку [b]Fix[/b] и подождите. Программа создаст лог-файл ([b]Fixlog.txt[/b]). Пожалуйста, прикрепите его в следующем сообщении.
[list][*]Обратите внимание, что будет выполнена [b]перезагрузка компьютера[/b].[/list]

Вложений: 1

Есть.

Проблема решена?

Сначала проблема сохранилась - невозможно добавить. Переустановил Chrome, перезагрузился - AdBlock остался. Надеюсь никуда уже не денется. Огромное спасибо за помощь :3

Сделайте [URL="http://virusinfo.info/showthread.php?t=146192"]лог AdwCleaner[/URL]