В любом браузере при клике выскакивает окно рекламы.

**belomor135** · 07.07.2016, 20:03

Выскакивает видео, сайты, реклама. И постоянно вылазит поисковик майл ру при клике на любую ссылку. Название ссылки он ищет в поиске майл даже если просто переходишь в раздел. Прошу помочь. Ничего из антивирусов и чистки не помогает.

Надоело быть жертвой? Стань профи по информационной безопасности, получай самую свежую информацию об угрозах и средствах защиты от ведущего российского аналитического центра Anti-Malware.ru:

**Info_bot** · 07.07.2016, 20:04

Уважаемый(ая) belomor135, спасибо за обращение на наш форум!

Помощь при заражении комьютера на VirusInfo.Info оказывается абсолютно бесплатно. Хелперы, в самое ближайшее время, ответят на Ваш запрос. Для оказания помощи необходимо предоставить логи сканирования утилитами АВЗ и HiJackThis, подробнее можно прочитать в правилах оформления запроса о помощи.

Информация

Если вы хотите получить персональную гарантированную помощь в приоритетном режиме, то воспользуйтесь платным сервисом Помогите+.

Если наш сайт окажется полезен Вам и у Вас будет такая возможность - пожалуйста поддержите проект.

**mike 1** · 07.07.2016, 21:53

Внимание! Рекомендации написаны специально для этого пользователя. Если рекомендации написаны не для вас, не используйте их - это может повредить вашей системе.

Если у вас похожая проблема - создайте тему в разделе Лечение компьютерных вирусов и выполните Правила оформления запроса о помощи.

Здравствуйте!

Закройте все программы, временно выгрузите антивирус, файрволл и прочее защитное ПО.

Важно! на Windows Vista/7/8 AVZ запускайте через контекстное меню проводника от имени Администратора. Выполните скрипт в АВЗ (Файл - Выполнить скрипт):

Код:

begin
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1001', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1004', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1804', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced','HideFileExt', 0);
 QuarantineFile('C:\Users\BMR\AppData\Local\MicroCleaner\mrz2.exe','');
 DeleteFile('C:\Users\BMR\AppData\Local\MicroCleaner\mrz2.exe','32');
 DeleteFile('C:\Windows\system32\Tasks\MicroCleaner','64');
 DeleteFile('C:\Windows\system32\Tasks\Advanced System Check','64');
ExecuteSysClean;
RebootWindows(true);
end.

Внимание! Будет выполнена перезагрузка компьютера. После перезагрузки компьютера выполните скрипт в АВЗ:

Код:

begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip'); 
end.

Пришлите карантин согласно Приложения 2 правил по красной ссылке Прислать запрошенный карантин вверху темы

Сделайте повторные логи по правилам п.2 и 3 раздела Диагностика.(virusinfo_syscheck.zip;hijackthis.log)

**belomor135** · 08.07.2016, 18:34

Пока не помогло

**mike 1** · 08.07.2016, 20:05

Скачайте AdwCleaner (by Xplode) и сохраните его на Рабочем столе.
Запустите его (в ОС Windows Vista/Seven необходимо запускать через правую кн. мыши от имени администратора), нажмите кнопку "Scan" и дождитесь окончания сканирования.
Когда сканирование будет завершено, отчет будет сохранен в следующем расположении: C:\AdwCleaner\AdwCleaner[S1].txt.
Прикрепите отчет к своему следующему сообщению.

Подробнее читайте в этом руководстве.

**belomor135** · 09.07.2016, 12:23

Сделал

**mike 1** · 09.07.2016, 16:44

Запустите повторно AdwCleaner (by Xplode) (в ОС Windows Vista/Seven необходимо запускать через правую кн. мыши от имени администратора), нажмите кнопку "Scan", а по окончанию сканирования нажмите кнопку "Очистить" ("Clean") и дождитесь окончания удаления.
Когда удаление будет завершено, отчет будет сохранен в следующем расположении: C:\AdwCleaner\AdwCleaner[C1].txt.
Прикрепите отчет к своему следующему сообщению

Внимание: Для успешного удаления нужна перезагрузка компьютера!!!.

Подробнее читайте в этом руководстве.

**belomor135** · 09.07.2016, 19:02

Проблема вроде как пропала

**mike 1** · 09.07.2016, 19:33

Скачайте Farbar Recovery Scan Tool

и сохраните на Рабочем столе.

Примечание: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.

Запустите программу двойным щелчком. Когда программа запустится, нажмите Yes для соглашения с предупреждением.
Убедитесь, что под окном Optional Scan отмечены "List BCD", "Driver MD5" и "90 Days Files".
Нажмите кнопку Scan.
После окончания сканирования будет создан отчет (FRST.txt) в той же папке, откуда была запущена программа. Пожалуйста, прикрепите отчет в следующем сообщении.
Если программа была запущена в первый раз, будет создан отчет (Addition.txt). Пожалуйста, прикрепите его в следующем сообщении.

**belomor135** · 09.07.2016, 22:17

Сделал

**mike 1** · 09.07.2016, 22:39

ВНИМАНИЕ! Данный скрипт написан специально для этого пользователя, использование его на другом компьютере может привести к неработоспособности Windows!

Временно выгрузите антивирус, файрволл и прочее защитное ПО.

Скопируйте приведенный ниже текст в Блокнот и сохраните файл как fixlist.txt в ту же папку откуда была запущена утилита Farbar Recovery Scan Tool:

Код:

CMD: wmic /Namespace:\\root\default Path SystemRestore Call Enable "%SystemDrive%"
CreateRestorePoint:
CloseProcesses:
OPR Extension: (ВКонтакте.ру Downloader) - C:\Users\BMR\AppData\Roaming\Opera Software\Opera Stable\Extensions\fhicdenadipegbnnjbaojhjddgdmdhpd [2016-05-07]
OPR Extension: (Transtator) - C:\Users\BMR\AppData\Roaming\Opera Software\Opera Stable\Extensions\hglggmlijdoohkncfpahcffenjfcnbkn [2016-07-02]
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Windows\CRMSvc.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Users\BMR\Documents\swshost.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Users\BMR\Documents\swhust.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Users\BMR\Documents\swdhost.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Users\BMR\Documents\svshost.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Users\BMR\Documents\svdhost.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Users\BMR\AppData\Roaming\Zummadax.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Users\BMR\AppData\Roaming\WindowsUpdate
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Users\BMR\AppData\Roaming\Voltom.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Users\BMR\AppData\Roaming\Vaiait.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Users\BMR\AppData\Roaming\Tonla.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Users\BMR\AppData\Roaming\Singletom.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Users\BMR\AppData\Roaming\RenewalService
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Users\BMR\AppData\Roaming\Quotenamrons
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Users\BMR\AppData\Roaming\Geostring.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Users\BMR\AppData\Roaming\Duolux.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Users\BMR\AppData\Roaming\daemon2.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Users\BMR\AppData\Roaming\ApppazmaL
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Users\BMR\AppData\Local\xxx-line.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Users\BMR\AppData\Local\Baidu
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Program Files (x86)\Gaming Companion
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 _RSHD C:\Program Files (x86)\Booking.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\Все пользователи\xwinpx
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\Все пользователи\xifs
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\Все пользователи\VKSaver
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\Все пользователи\VkontakteDJ
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\Все пользователи\VideoFetcher
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\Все пользователи\viaair
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\Все пользователи\Torrent_Search_PED
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\Все пользователи\SwinpS
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\Все пользователи\Statdex
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\Все пользователи\Smilebar
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\Все пользователи\Ronzap
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\Все пользователи\RenewalService
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\Все пользователи\emailnotifier
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\Все пользователи\Doubleing
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\Все пользователи\dchp
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\Все пользователи\Cloudprinter
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\Documents\systemfile.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\ZU_WarThunder
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\Zona
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\YTAHelper
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\YSearcher
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\yoursearching
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\x11
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\WiseManager
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\WinZiper
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\WindowsUpdater
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\WindowsProtectManger
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\WindowsMangerProtect
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\Windows Update
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\WinDiagnosis
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\webssearches
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\WeatherChickn
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\WADHostAgent
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\VooUpdate
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\vkPro
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\VKMusic
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\VKDJ
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\VK OK AdBlock
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\UPUpdata
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\Update
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\Uncheckit
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\TSv
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\TSearch
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\Torrent_Search_PED
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\TomorrowGames
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\TimeTasks
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\TheismsLimb
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\TextEditor
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\svshost
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\svrupg.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\sparta111
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\SmartSearch
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\SimplyTech
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\ShopperPro
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\SetMyHomePage
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\ScreenChromeShot
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\Schedule
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\qksee
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\PushControl
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\PriceFountainUpdateVer
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\PriceFountain
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\pptassist
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\PennyBee
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\PCFix
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\oursurfing
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\OpLinks
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\OpenKP
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\OpenCandy
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\omniboxes
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\NUIns
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\ntsvc
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\Neiron
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\mysites123
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\MyDesktop
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\mspop.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\MoshouInput
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\Micron
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\MailUpdate
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\Mactowebise
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\luckysearches
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\LoadLeader
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\Lamzap
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\istartsurf
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\istartpageing
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\IQIYI Video
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\instatime
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\InstallChecker
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\ImageCropResize
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\ImageCenter
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\Homepager
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\GoldenGate
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\GetGo Software
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\Genieo
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\GbUpdSrv
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\Gameo
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\FreeVPN
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\FlvPlayer
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\FastVKOpen
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\FastLinkChrome
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\et
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\EmailNotifier
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\eCyber
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\EasyFileOpener
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\drpsu
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\DriverPack Notifier
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\Doubleing
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\do-search
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\DigitalSites
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\DailyWiki
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\daemon.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\csdimedia
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\cpuminer
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\CoupSeek
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\costmin
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\ConditionalRedirect
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\CloudPrinter
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\checkers
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\CentralPicture
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\CenterPicture
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\Calculator
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\Booking_helper
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\BetterViewer
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\bafhhmlkbcigapgkfdgfikhkkaihpjjn
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\ArchiveLeader
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\AppHelper
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\AdBlockerator
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\LocalLow\SearchGo
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\LocalLow\IObit
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\LocalLow\dlsecuretb
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\Аудио и видео скачивание
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\YaNews
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\wincheck
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\win_updatez
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\Win_update
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\WebExtend
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\vsemposkidki
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\valuablecoupons
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\UpdateAdmin
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\Up Top
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\UmmyVideoDownloader
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\tuto_monetize_120160517
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\TangentiallyMowers
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\SystemMonitor2016
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\SystemDir
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\sysnet
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\syslog
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\SysHlp
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\SysassistByHotWheel
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\svshost
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\SuperBrowser
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\SunnyDay3
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\SunnyDay21
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\Sparta
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\SmartWeb
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\SHAREit
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\SearchGo
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\ScriptWriter
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\screentk
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\SaveYouTime
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\Ruspromocode
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\PushControl
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\promoskiki
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\ProfitSaver
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\PriceMeter
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\PriceFountain
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\prestrm
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\PreachierOffhanded
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\PPTAssist
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\PowerMonitor
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\PhoenixBrowserUpdater
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\PegboardUpwelling
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\OmeletsBefool
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\nethost
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\MinimsPunkin
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\MEGAsync
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\mediaget2
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\mediaget
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\Media Get LLC
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\MasterpiecesSlitting
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\macasoft
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\LobotomizeOverrank
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\kometa
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\JoysUncleaned
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\JamboreesAwol
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\itorrent
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\ipro2
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\ipro
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\IntroversionForerunners
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\InterplayIntelligent
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\InstaTime
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\ImaginersGlares
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\igs
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\HttpFilter
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\HourNews
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\hotskidki
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\hostinstaller
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\Host Service
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\HasheeshesDiadic
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\GoodGame Empire
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\GobbledegookReconfigure
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\GMon Updater
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\GetGo
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\GamesBot
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\Gameo
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\FusionPlayer
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\fupdate
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\FlaggingsPlatesful
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\filesystemdriver
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\extension
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\DwellsSeismometric
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\DistributeeAngers
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\DigitalisFossilize
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\DesktopMessenger
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\DemotionDactylus
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\DailyWiki
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\CrutchBubbled
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\crossbrowse
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\ConvertAd
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\ContradictivePrudes
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\CongasNecessariness
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\ComDev
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\CalibrationWorthless
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\Blacount
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\Birds365
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\Birds
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\BiggishBlanch
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\AVKModules
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\avabvyxvdy
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\AuthoritiesThreefold
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\ArchaizeDrupe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\allskidkimos
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Users\BMR\AppData\Local\AdsBlokator
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\ProgramData\xwinpx
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\ProgramData\xifs
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\ProgramData\VKSaver
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\ProgramData\VkontakteDJ
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\ProgramData\VideoFetcher
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\ProgramData\viaair
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\ProgramData\Torrent_Search_PED
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\ProgramData\SwinpS
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\ProgramData\Statdex
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\ProgramData\Smilebar
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\ProgramData\Ronzap
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\ProgramData\RenewalService
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\ProgramData\emailnotifier
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\ProgramData\Doubleing
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\ProgramData\dchp
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\ProgramData\Cloudprinter
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files\winzipper
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files\newext
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files\Free FLV Player
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files\contentprotector
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files\Caster
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files\bittorrent
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Аудио и видео скачивание
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Zona
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Zepashchcacult
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\YTDownloader
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\YTAHelper
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\youtubeadblocker
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\YouTube Accelerator
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Yeaplayer
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\XTRM Group
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\XTab
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\x-rates
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Wooden Seal
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Wohegh
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\WinZipper
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\WinTsks
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\WinTaske
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\WinSvces
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Winsere
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\WindeskWinsearch
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Wincy
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\win_en_77
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Wifisrv
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\WebProtectorPlus
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\WebProtector
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\WebBars
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Web Amplified
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\WeatherChickn
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\WajaNetEn
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\VuuPC
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\VKSmile
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\VK OK AdBlock
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\VK Downloader
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Visual Protect Service
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\VideoBox
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Video Saver 2
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Video Saver
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Video Downloader professional
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Unlimited Free VPN  betternet
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Uniblue
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Twilight Tech
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\TurboWire
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\TuneUp Utilities
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\ttwifi
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Torrent Search
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Tor Browser
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\tooldev342
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\TNT2
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Thquse
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\ThinkupWP
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\ThinkProtect
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Thacationqkk
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Techgil
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\TampaEdit
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\SystemDefend
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\System Optimizer
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Swift Record
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\surf slide
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\SupTab
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\SuperBrowser
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Super Optimizer
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\SunnyDayApps
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\SunnyDay3
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\SunnyDay21
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\sunnyday
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\sun king
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Summer Sports
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\StrengthPlus
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Steel Cut
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Stealthy
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Staflecluwuent
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\SpeedSearchesbnd
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\spart
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Sorawardanagck
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Sonix
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\snipsmart
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Smileys We Love Toolbar for IE
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Sm23mS
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\ShopperPro
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Shop til Drop
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Shop Master
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Shop and Save Up
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Sharp Angle
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Shamotawoph
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\SFK
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Senses
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\SensePlus
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\SearchSnacks
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\SearchProtect
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Search Extensions
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Score Escape
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\SavePass 1.1
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Sale Clipper
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Sale Charger
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Rozenaock
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\RelevantKnowledge
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\RelayDouble
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\ReactorSubs
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\ReactorKeeper
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\RapidMediaConverter
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Quick Weather Updates
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\QQBrowser
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\qksee
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Pwtyfemuk
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Proxy SwitchyOmega
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PRoiceLesss
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\ProcessFoobar
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Primary Color
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PriicueLEss
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PriiceLesss
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PriceLoesss
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PriceLLeess
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PrIceLiEsus
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PrIceLesss
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PriceLEss
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PriceLEoss
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PricELeeSas
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PricceLess
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PricceeLess
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PremierOpinion
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PreiceLeSs
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Preghpluaph
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PragmaEdit
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Popi TV
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Poper Blocker
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Pine Tree
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PennyBee
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PCPitstop
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PC-Mechanic
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PCfix
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PC Speed Up
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\PathMaxx
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\osTip
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\onlysearch
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\On Stage
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Obnovi Soft
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Object Browser
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Note-up
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\NosClient
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Nimeckreelule
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\newext
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\netfilter
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\mystarttb
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\MyPC Backup
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\MusixLib
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Musix Search
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\MusicVK
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Muftion
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\mpck_en_005030263
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\MPC-HC
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\MPC Cleaner
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\MovieDea
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\MoshouInput
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Momentum
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Mobogenie3
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\MobilePCStarterKit
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\MixVideoPlayer
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\MiPony
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\MiniLite
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Microsoft Data
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\MediaPlayAir
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Media Saver
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Media Player Z
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\MaxComputerCleaner
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Max Driver Updater
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Max Deal
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Max Computer Cleaner
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\maintenance software
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Lorckphsary
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Local Weather Beta
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\LiveWPPUpdate
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\LiveUpdateWPP
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\LiveReader
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\LighterSystem
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\LightEngine
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\LibraryGeneration
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Lavasoft
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\kingsoft
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\kbasesrv
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Jungle Net
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Jejochclipasp
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\iWebar
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\IQIYI Video
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\IncludeFunc
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\igs
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\IconRunner
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\iCloud Bookmarks
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\HpDef
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\HP Defender
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Hostify
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\HomeTab
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\HomePageDefender
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\High Stairs
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\HelloSign for Gmail
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\HDefsoft
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\HDef
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Hamster Soft
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Hack this page
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\globalUpdate
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Glass Bottle
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Ghostery Storage Server
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\GetGo Software
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Ge-Force
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\GameXPService
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\GameXPServic
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\GamesRS
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Games-desktop
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\FusionPlayer
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Funshion Online
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Fresh Outlook
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Free VPN
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\filter
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Fedaryqeule
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\FB Color Changer
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\FastoPlayer
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\ExtensionSimple Blocker
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\ExsutraCouepoNN
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\EoxstraCouppon
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\EngineRunner
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Edu App
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\EasyHotspot
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\DriverPack Notifier
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\DoubleOptMedia
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Dolphin Deals
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\DolkaRuIePlugin
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\DNS Unlocker
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\dlsecuretb
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Digital More
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Dig Deep
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Defsoft
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Csrss Updater
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Crossbrowse
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Crazy Score
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\COVERT Pro
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\CouponsPlus
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Coupon Time
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Cool getWeather
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\ContentProtector
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\compfix
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\comoboss
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Common Dots
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\cmcm
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Clip2net
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\CleanBrowser
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Clcegh
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Cideyguvay
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\ChicaLogic
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Chedot
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Checked List
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Cegush
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\browse pulse
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Box Green
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Booking.com
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\BonusBerry
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\BBerry
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\BB10  PlayBook App Manager
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Baisvik
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\baidus.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\BaiduEx
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\badu
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\ba3du
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\AudioVideoKit
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Atapacult
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Application Assistance
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\AnySend
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\AnyProtectEx
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Any Angle
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\AnvSoft Web FLV Player Free
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Anisatain
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Aktiv Download Manager
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\advPlugin
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\ADSKIP
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Adguard
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\AdBlocker
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Adblock for Youtube
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\Ad Muncher
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\48 dresses
2016-07-02 16:22 - 2016-07-02 16:22 - 00000000 __RSH C:\Program Files (x86)\1 Media Player
2016-07-02 16:19 - 2016-07-03 20:43 - 00000000 ____D C:\Users\BMR\AppData\Local\Translate Mgr Helper
2016-07-02 16:19 - 2016-07-03 20:43 - 00000000 ____D C:\Users\BMR\AppData\Local\MicroCleaner
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Users\Все пользователи\UBar
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Users\Все пользователи\KRB Updater Utility
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Users\Все пользователи\IObit
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\VOPackage
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\IObit
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\ASPackage
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\Appverifier
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Users\BMR\AppData\Roaming\Advancedpccare.com
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Users\BMR\AppData\Local\ZetaGamesViewer
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Users\BMR\AppData\Local\ZetaGamesNews
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Users\BMR\AppData\Local\IObit installer
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Users\BMR\AppData\Local\IObit
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Users\BMR\AppData\Local\InstallManager
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Users\BMR\AppData\Local\extensions
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\ProgramData\UBar
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\ProgramData\KRB Updater Utility
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\ProgramData\IObit
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Program Files\UBar
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Program Files\ByteFence
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Program Files (x86)\ZetaGames
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Program Files (x86)\zaxar
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Program Files (x86)\UPCleaner
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Program Files (x86)\SystClean
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Program Files (x86)\OneSystemCare
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Program Files (x86)\Kinoroom Browser
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Program Files (x86)\IObit
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Program Files (x86)\clean2pc
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 __RSH C:\Program Files (x86)\360
2016-07-02 16:19 - 2016-07-02 16:19 - 00000000 ____D C:\Program Files (x86)\e2ru
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files\bittorrent
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Program Files\ByteFence
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files\Caster
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files\contentprotector
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files\Free FLV Player
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files\newext
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Program Files\UBar
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files\winzipper
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\1 Media Player
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Program Files (x86)\360
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\48 dresses
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Ad Muncher
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Adblock for Youtube
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\AdBlocker
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Adguard
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\ADSKIP
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\advPlugin
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Aktiv Download Manager
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Anisatain
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\AnvSoft Web FLV Player Free
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Any Angle
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\AnyProtectEx
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\AnySend
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Application Assistance
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Atapacult
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\AudioVideoKit
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\ba3du
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\badu
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\BaiduEx
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\baidus.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Baisvik
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\BB10  PlayBook App Manager
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\BBerry
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\BonusBerry
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Booking.com
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Box Green
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\browse pulse
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Cegush
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Checked List
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Chedot
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\ChicaLogic
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Cideyguvay
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Clcegh
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Program Files (x86)\clean2pc
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\CleanBrowser
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Clip2net
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\cmcm
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Common Dots
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\comoboss
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\compfix
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\ContentProtector
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Cool getWeather
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Coupon Time
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\CouponsPlus
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\COVERT Pro
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Crazy Score
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Crossbrowse
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Csrss Updater
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Defsoft
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Dig Deep
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Digital More
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\dlsecuretb
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\DNS Unlocker
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\DolkaRuIePlugin
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Dolphin Deals
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\DoubleOptMedia
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\DriverPack Notifier
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\EasyHotspot
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Edu App
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\EngineRunner
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\EoxstraCouppon
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\ExsutraCouepoNN
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\ExtensionSimple Blocker
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\FastoPlayer
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\FB Color Changer
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Fedaryqeule
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\filter
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Free VPN
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Fresh Outlook
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Funshion Online
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\FusionPlayer
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Games-desktop
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\GamesRS
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\GameXPServic
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\GameXPService
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Ge-Force
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\GetGo Software
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Ghostery Storage Server
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Glass Bottle
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\globalUpdate
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Hack this page
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Hamster Soft
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\HDef
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\HDefsoft
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\HelloSign for Gmail
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\High Stairs
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\HomePageDefender
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\HomeTab
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Hostify
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\HP Defender
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\HpDef
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\iCloud Bookmarks
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\IconRunner
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\igs
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\IncludeFunc
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Program Files (x86)\IObit
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\IQIYI Video
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\iWebar
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Jejochclipasp
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Jungle Net
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\kbasesrv
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\kingsoft
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Program Files (x86)\Kinoroom Browser
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Lavasoft
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\LibraryGeneration
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\LightEngine
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\LighterSystem
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\LiveReader
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\LiveUpdateWPP
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\LiveWPPUpdate
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Local Weather Beta
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Lorckphsary
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\maintenance software
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Max Computer Cleaner
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Max Deal
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Max Driver Updater
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\MaxComputerCleaner
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Media Player Z
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Media Saver
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\MediaPlayAir
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Microsoft Data
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\MiniLite
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\MiPony
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\MixVideoPlayer
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\MobilePCStarterKit
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Mobogenie3
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Momentum
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\MoshouInput
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\MovieDea
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\MPC Cleaner
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\MPC-HC
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\mpck_en_005030263
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Muftion
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\MusicVK
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Musix Search
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\MusixLib
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\MyPC Backup
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\mystarttb
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\netfilter
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\newext
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Nimeckreelule
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\NosClient
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Note-up
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Object Browser
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Obnovi Soft
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\On Stage
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Program Files (x86)\OneSystemCare
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\onlysearch
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\osTip
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PathMaxx
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PC Speed Up
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PC-Mechanic
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PCfix
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PCPitstop
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PennyBee
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Pine Tree
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Poper Blocker
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Popi TV
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PragmaEdit
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Preghpluaph
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PreiceLeSs
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PremierOpinion
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PricceeLess
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PricceLess
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PricELeeSas
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PriceLEoss
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PriceLEss
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PrIceLesss
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PrIceLiEsus
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PriceLLeess
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PriceLoesss
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PriiceLesss
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PriicueLEss
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Primary Color
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\ProcessFoobar
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\PRoiceLesss
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Proxy SwitchyOmega
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Pwtyfemuk
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\qksee
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\QQBrowser
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Quick Weather Updates
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\RapidMediaConverter
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\ReactorKeeper
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\ReactorSubs
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\RelayDouble
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\RelevantKnowledge
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Rozenaock
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Sale Charger
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Sale Clipper
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\SavePass 1.1
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Score Escape
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Search Extensions
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\SearchProtect
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\SearchSnacks
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\SensePlus
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Senses
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\SFK
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Shamotawoph
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Sharp Angle
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Shop and Save Up
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Shop Master
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Shop til Drop
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\ShopperPro
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Sm23mS
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Smileys We Love Toolbar for IE
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\snipsmart
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Sonix
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Sorawardanagck
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\spart
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\SpeedSearchesbnd
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Staflecluwuent
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Stealthy
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Steel Cut
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\StrengthPlus
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Summer Sports
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\sun king
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\sunnyday
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\SunnyDay21
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\SunnyDay3
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\SunnyDayApps
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Super Optimizer
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\SuperBrowser
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\SupTab
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\surf slide
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Swift Record
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Program Files (x86)\SystClean
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\System Optimizer
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\SystemDefend
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\TampaEdit
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Techgil
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Thacationqkk
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\ThinkProtect
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\ThinkupWP
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Thquse
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\TNT2
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\tooldev342
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Tor Browser
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Torrent Search
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\ttwifi
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\TuneUp Utilities
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\TurboWire
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Twilight Tech
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Uniblue
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Unlimited Free VPN  betternet
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Program Files (x86)\UPCleaner
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Video Downloader professional
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Video Saver
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Video Saver 2
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\VideoBox
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Visual Protect Service
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\VK Downloader
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\VK OK AdBlock
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\VKSmile
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\VuuPC
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\WajaNetEn
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\WeatherChickn
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Web Amplified
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\WebBars
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\WebProtector
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\WebProtectorPlus
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Wifisrv
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Wincy
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\WindeskWinsearch
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Winsere
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\WinSvces
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\WinTaske
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\WinTsks
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\WinZipper
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\win_en_77
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Wohegh
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Wooden Seal
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\x-rates
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\XTab
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\XTRM Group
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Yeaplayer
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\YouTube Accelerator
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\youtubeadblocker
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\YTAHelper
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\YTDownloader
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Program Files (x86)\zaxar
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Zepashchcacult
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Program Files (x86)\ZetaGames
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Zona
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Аудио и видео скачивание
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Common Files\Baidu
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Common Files\Duo-Ing
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Common Files\Over-Ex
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Common Files\PlusStatsing
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Common Files\Tintough
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Program Files (x86)\Common Files\TopLinks
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\AdBlockerator
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Advancedpccare.com
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\AppHelper
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Appverifier
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\ArchiveLeader
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\ASPackage
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\bafhhmlkbcigapgkfdgfikhkkaihpjjn
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\BetterViewer
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Booking_helper
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Calculator
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\CenterPicture
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\CentralPicture
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\checkers
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\CloudPrinter
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\ConditionalRedirect
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\costmin
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\CoupSeek
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\cpuminer
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\csdimedia
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\daemon.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\DailyWiki
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\DigitalSites
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\do-search
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Doubleing
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\DriverPack Notifier
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\drpsu
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\EasyFileOpener
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\eCyber
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\EmailNotifier
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\et
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\FastLinkChrome
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\FastVKOpen
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\FlvPlayer
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\FreeVPN
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Gameo
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\GbUpdSrv
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Genieo
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\GetGo Software
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\GoldenGate
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Homepager
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\ImageCenter
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\ImageCropResize
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\InstallChecker
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\instatime
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\IObit
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\IQIYI Video
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\istartpageing
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\istartsurf
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Lamzap
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\LoadLeader
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\luckysearches
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Mactowebise
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\MailUpdate
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Micron
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\MoshouInput
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\mspop.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\MyDesktop
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\mysites123
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Neiron
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\ntsvc
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\NUIns
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\omniboxes
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\OpenCandy
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\OpenKP
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\OpLinks
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\oursurfing
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\PCFix
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\PennyBee
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\pptassist
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\PriceFountain
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\PriceFountainUpdateVer
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\PushControl
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\qksee
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Schedule
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\ScreenChromeShot
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\SetMyHomePage
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\ShopperPro
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\SimplyTech
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\SmartSearch
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\sparta111
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\svrupg.exe
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\svshost
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\TextEditor
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\TheismsLimb
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\TimeTasks
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\TomorrowGames
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Torrent_Search_PED
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\TSearch
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\TSv
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Uncheckit
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Update
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\UPUpdata
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\VK OK AdBlock
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\VKDJ
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\VKMusic
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\vkPro
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\VooUpdate
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\VOPackage
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\WADHostAgent
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\WeatherChickn
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\webssearches
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\WinDiagnosis
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Windows Update
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\WindowsMangerProtect
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\WindowsProtectManger
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\WindowsUpdater
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\WinZiper
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\WiseManager
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\x11
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\yoursearching
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\YSearcher
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\YTAHelper
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Zona
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\ZU_WarThunder
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Microsoft\Video
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Roaming\Microsoft\Vision
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\AdsBlokator
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\allskidkimos
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\Apps
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\ArchaizeDrupe
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\AuthoritiesThreefold
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\avabvyxvdy
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\AVKModules
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\BiggishBlanch
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\Birds
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\Birds365
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\Blacount
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\CalibrationWorthless
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\ComDev
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\CongasNecessariness
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\ContradictivePrudes
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\ConvertAd
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\crossbrowse
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\CrutchBubbled
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\DailyWiki
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\DemotionDactylus
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\DesktopMessenger
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\DigitalisFossilize
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\DistributeeAngers
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\DwellsSeismometric
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\extension
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Users\BMR\AppData\Local\extensions
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\filesystemdriver
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\FlaggingsPlatesful
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\fupdate
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\FusionPlayer
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\Gameo
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\GamesBot
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\GetGo
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\GMon Updater
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\GobbledegookReconfigure
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\GoodGame Empire
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\HasheeshesDiadic
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\Host Service
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\hostinstaller
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\hotskidki
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\HourNews
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\HttpFilter
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\igs
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\ImaginersGlares
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Users\BMR\AppData\Local\InstallManager
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\InstaTime
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\InterplayIntelligent
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\IntroversionForerunners
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Users\BMR\AppData\Local\IObit
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Users\BMR\AppData\Local\IObit installer
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\ipro
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\ipro2
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\itorrent
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\JamboreesAwol
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\JoysUncleaned
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\kometa
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\LobotomizeOverrank
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\macasoft
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\MasterpiecesSlitting
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\Media Get LLC
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\mediaget
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\mediaget2
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\MEGAsync
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\MinimsPunkin
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\nethost
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\OmeletsBefool
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\PegboardUpwelling
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\PhoenixBrowserUpdater
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\PowerMonitor
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\PPTAssist
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\PreachierOffhanded
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\prestrm
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\PriceFountain
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\PriceMeter
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\ProfitSaver
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\promoskiki
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\PushControl
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\Ruspromocode
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\SaveYouTime
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\screentk
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\ScriptWriter
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\SearchGo
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\SHAREit
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\SmartWeb
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\Sparta
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\SunnyDay21
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\SunnyDay3
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\SuperBrowser
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\svshost
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\SysassistByHotWheel
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\SysHlp
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\syslog
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\sysnet
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\SystemDir
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\SystemMonitor2016
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\TangentiallyMowers
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\tuto_monetize_120160517
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\UmmyVideoDownloader
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\Up Top
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\UpdateAdmin
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\valuablecoupons
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\vsemposkidki
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\WebExtend
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\wincheck
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\Win_update
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\win_updatez
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\YaNews
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Users\BMR\AppData\Local\ZetaGamesNews
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\Users\BMR\AppData\Local\ZetaGamesViewer
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\Users\BMR\AppData\Local\Аудио и видео скачивание
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\ProgramData\Cloudprinter
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\ProgramData\dchp
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\ProgramData\Doubleing
2016-06-29 16:51 - 2016-06-29 16:51 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\ProgramData\emailnotifier
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\ProgramData\IObit
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\ProgramData\KRB Updater Utility
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\ProgramData\RenewalService
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\ProgramData\Ronzap
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\ProgramData\Smilebar
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\ProgramData\Statdex
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\ProgramData\SwinpS
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\ProgramData\Torrent_Search_PED
2016-07-02 16:19 - 2016-07-02 16:19 - 0000000 __RSH () C:\ProgramData\UBar
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\ProgramData\viaair
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\ProgramData\VideoFetcher
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\ProgramData\VkontakteDJ
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\ProgramData\VKSaver
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\ProgramData\xifs
2016-07-02 16:22 - 2016-07-02 16:22 - 0000000 __RSH () C:\ProgramData\xwinpx
Task: {08766AE1-A568-478B-9912-B835DE117D03} - \MicroCleaner -> No File <==== ATTENTION
Task: {31ABEA5E-504A-4B36-82DB-845BA661E633} - \Advanced System Check -> No File <==== ATTENTION
Folder: C:\FRST\Quarantine
EmptyTemp:

Запустите FRST и нажмите один раз на кнопку Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Пожалуйста, прикрепите его в следующем сообщении!
Обратите внимание, что компьютер будет перезагружен.
Внимание! Если на рабочем столе будет создан архив upload.zip, то загрузите этот архив через данную форму

**belomor135** · 09.07.2016, 23:23

Сделано

**mike 1** · 10.07.2016, 00:37

Что с проблемой?

**belomor135** · 10.07.2016, 19:30

Проблема решена. Спасибо

**mike 1** · 11.07.2016, 00:52

Для удаления утилит, которые использовались в лечении скачайте DelFix и сохраните утилиту на Рабочем столе
Запустите DelFix
Обратите внимание, что утилиты необходимо запускать от имени Администратора. По умолчанию в Windows XP так и есть. В Windows Vista и Windows 7 администратор понижен в правах по умолчанию, поэтому, не забудьте нажать правой кнопкой на программу, выбрать Запуск от имени Администратора, при необходимости укажите пароль администратора и нажмите Да
В открывшемся окне программы поставьте галочки напротив пунктов Remove desinfection tools и Create registry backup
Нажмите на кнопку Run

Выполните скрипт в AVZ при наличии доступа в интернет:

Код:

var
LogPath : string;
ScriptPath : string;
begin
 LogPath := GetAVZDirectory + 'log\avz_log.txt';
 if FileExists(LogPath) Then DeleteFile(LogPath);
 ScriptPath := GetAVZDirectory +'ScanVuln.txt';
  if DownloadFile('http://dataforce.ru/~kad/ScanVuln.txt', ScriptPath, 1) then ExecuteScript(ScriptPath) else 
begin
    if DownloadFile('http://dataforce.ru/~kad/ScanVuln.txt', ScriptPath, 0) then ExecuteScript(ScriptPath) 
else begin
       ShowMessage('Невозможно загрузить скрипт AVZ для обнаружения наиболее часто используемых уязвимостей!');
       exit;
      end;
  end;
 if FileExists(LogPath) Then ExecuteFile('notepad.exe', LogPath, 1, 0, false)
end.

После его работы, если будут найдены уязвимости, в блокноте откроется файл avz_log.txt со ссылками на обновления системы и критичных к безопасности программ, которые нужно загрузить и установить. В первую очередь это относится к браузерам, Java, Adobe Acrobat/Reader и Adobe Flash Player.

Советы и рекомендации после лечения компьютера

В любом браузере при клике выскакивает окно рекламы. (заявка № 201990)

Опции темы