Премини към съдържанието

qvorat

Потребител
  • Публикации

    233
  • Регистрация

  • Последно онлайн

Харесвания

54 Много добра репутация

12 Последователи

Всичко за qvorat

  • Титла
    Почетен потребител
  • Рожден ден 13.03.2001

Информация

  • Пол
    Мъж
  • Интереси
    калдата

Контакти

  • Skype
    qvorat
  • Google+
    qvor atanasov

Последни посетители

4254 прегледа на профила
  1. qvorat

    Препоръчайте ми игра , подобна на...

    Подобна игра на The forest? Без Rust
  2. qvorat

    Проблем с играта Counter-Strike: Global Offensive

    Отваряш стийм. Цъкаш пропертиес върху ЦС:ГО после Локал Файлс и Verify Integrity of Game Cache. Чакаш и после си готов !
  3. DelFix няма да постна лог защото имам проблем. Като ми отвори нотепад когато и да е ми изписва , че нямам свързан принтер и ми се изключва нотепада..
  4. Моя грешка ! Fixlog.txt
  5. qvorat

    Търся си Coach за LoL

    Пусни си LCS-а и ще се научиш
  6. Казва се фикслист не фикслог fixlist.txt
  7. Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:08-08-2015 01 Ran by Home (administrator) on HOME-PC (09-08-2015 15:24:14) Running from C:\Users\Home\Desktop Loaded Profiles: Home (Available Profiles: Home) Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) Language: Английски (Съединени щати) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe () C:\Program Files\Garena Plus\ggdllhost.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Google Inc.) C:\Program Files\Google\Update\1.3.28.1\GoogleCrashHandler.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe () C:\Program Files\EslWire\service\WireHelperSvc.exe (Razer Inc.) C:\Program Files\Razer\Razer Cortex\RzKLService.exe (TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [978520 2015-01-30] (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyServer: [s-1-5-21-2054358307-3739566615-3368694158-1000] => http=;ftp=;https=; HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com HKU\S-1-5-21-2054358307-3739566615-3368694158-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 HKU\S-1-5-21-2054358307-3739566615-3368694158-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp HKU\S-1-5-21-2054358307-3739566615-3368694158-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.msn.com/?pc=AV01 SearchScopes: HKLM -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation) BHO: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-03-10] (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-10] (Oracle Corporation) DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\..\Interfaces\{310554DD-7062-425C-A1D3-1BD455D5C1BD}: [DhcpNameServer] 10.24.4.1 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\73n5pkmj.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] () FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [2015-02-05] (Adobe Systems, Inc.) FF Plugin: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-10] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-10] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled [No File] FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File] FF Plugin: @raidcall.en/RCplugin -> C:\Users\Home\AppData\Roaming\raidcall\plugins\nprcplugin.dll [2014-05-27] (Raidcall) FF Plugin: @t.garena.com/garenatalk -> C:\Program Files\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll [2014-10-16] ( Garena) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-2054358307-3739566615-3368694158-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Home\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-05-26] (Unity Technologies ApS) FF Extension: Adblock Plus - C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\73n5pkmj.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-15] FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird Chrome: ======= CHR Profile: C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (AdBlock) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-03-20] CHR Extension: (No Name) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-03] CHR Profile: C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1 CHR Extension: (Google Slides) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-04] CHR Extension: (Google Docs) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-04] CHR Extension: (Google Drive) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-04] CHR Extension: (YouTube) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-04] CHR Extension: (Facebook) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\boeajhmfdjldchidhphikilcgdacljfm [2015-04-04] CHR Extension: (Steam inventory helper) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2015-04-19] CHR Extension: (Google Search) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-04] CHR Extension: (Armor Games) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dodcabcaanoejbpmadedpjmgnblfjefd [2015-04-04] CHR Extension: (Google Sheets) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-04] CHR Extension: (LoungeDestroyer) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghahcnmfjfckcedfajbhekgknjdplfcl [2015-04-11] CHR Extension: (AdBlock) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-04-04] CHR Extension: (CS:GO Lounge Bump Bot) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jhfkidfnhjcjjamcbdepeohblphlamgk [2015-05-02] CHR Extension: (Steam Trader Helper) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lhoahihokddepjlegpenefeaahdkojog [2015-05-19] CHR Extension: (Dingit Infinite HD App) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\llnhnfikffkjbdnfallfpgikamegbbag [2015-08-05] CHR Extension: (Chrome Web Store Payments) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-04] CHR Extension: (Gmail) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-04] ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2013-04-30] (Advanced Micro Devices, Inc.) [File not signed] S3 celavimushost; C:\Program Files\CEVO\CSGO Client Beta\CelavimusClientHelper.exe [123608 2015-05-07] (altPUG LLC) S3 EasyAntiCheat; C:\Windows\system32\EasyAntiCheat.exe [174624 2014-10-14] (EasyAntiCheat Ltd) R2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [614416 2014-01-28] () S2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22184 2015-01-30] (Microsoft Corporation) R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [284472 2015-01-30] (Microsoft Corporation) R2 RzKLService; C:\Program Files\Razer\Razer Cortex\RzKLService.exe [105448 2014-08-28] (Razer Inc.) R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [5448464 2015-03-30] (TeamViewer GmbH) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) S2 HiPatchService; D:\Yavor\Games\HiPatchService.exe [X] ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [38984 2014-09-21] (The OpenVPN Project) S3 DrvAgent32; C:\Windows\system32\Drivers\DrvAgent32.sys [23456 2014-06-22] (Phoenix Technologies) [File not signed] S3 eapihdrv; C:\Users\Home\AppData\Local\Temp\ehdrv.sys [135760 2015-07-08] (ESET) R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG) S3 ExterminateIt; C:\Windows\system32\drivers\extit.sys [39936 2014-05-27] (CurioLab S.M.B.A.) [File not signed] R3 GKBFltr; C:\Windows\System32\Drivers\GameKB.sys [23424 2012-05-11] () R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.) R0 iusb3hcs; C:\Windows\System32\DRIVERS\iusb3hcs.sys [16880 2013-07-18] (Intel Corporation) R1 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [92888 2015-04-14] (Malwarebytes Corporation) S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation) S3 Moufiltr; C:\Windows\System32\DRIVERS\Moufiltr.sys [9661 2005-08-06] (Windows ® 2000 DDK provider) [File not signed] R3 MouseCap; C:\Windows\System32\Drivers\MouseCap.sys [6640 2005-08-08] () [File not signed] R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [239224 2014-11-15] (Microsoft Corporation) R1 MpKsl85601393; C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{2EA64C47-776E-41D6-AB2E-1FBBC42889D8}\MpKsl85601393.sys [39168 2015-08-09] (Microsoft Corporation) S3 ptun0901; C:\Windows\System32\DRIVERS\ptun0901.sys [23552 2015-01-26] (The OpenVPN Project) S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project) U3 Winsock; no ImagePath R3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [22104 2014-07-02] (SplitmediaLabs Limited) S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X] S3 ESEADriver2; no ImagePath S3 GGSAFERDriver; \??\C:\Program Files\Garena Plus\Room\safedrv.sys [X] S3 taphss6; system32\DRIVERS\taphss6.sys [X] U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed] S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] S3 XFDriver; \??\C:\Program Files\Xfire2\XFDriver.sys [X] S3 xhunter1; \??\C:\Windows\xhunter1.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-08-09 15:24 - 2015-08-09 15:24 - 00014982 _____ C:\Users\Home\Desktop\FRST.txt 2015-08-09 15:24 - 2015-08-09 15:24 - 00000000 ____D C:\FRST 2015-08-09 15:23 - 2015-08-09 15:23 - 01673216 _____ (Farbar) C:\Users\Home\Desktop\FRST.exe 2015-08-06 23:36 - 2015-07-10 22:00 - 00886784 _____ (Microsoft) C:\Users\Home\Desktop\Matchmaking Server Picker.exe 2015-08-06 23:35 - 2015-08-06 23:35 - 00426403 _____ C:\Users\Home\Downloads\matchmaking_server_picker_2_8.zip 2015-08-05 19:12 - 2015-08-05 19:12 - 00000000 ____D C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Приложения в Chrome 2015-08-02 16:16 - 2015-08-02 16:16 - 00000000 ____D C:\Program Files\Tweaking.com 2015-08-02 16:14 - 2015-08-02 16:16 - 17974904 _____ (Tweaking.com) C:\Users\Home\Downloads\tweaking.com_windows_repair_aio_setup.exe 2015-07-27 00:09 - 2015-07-27 00:09 - 00014809 _____ C:\Users\Home\Downloads\Fifty.Shades.of.Grey.2015.WEBRip.x264-WAR.torrent 2015-07-26 00:41 - 2015-07-26 00:41 - 00011932 _____ C:\Users\Home\Downloads\Minions 2015 TS x264-CPG.torrent 2015-07-24 14:26 - 2015-07-24 14:39 - 00000000 ____D C:\Users\Home\AppData\Local\Popcorn-Time 2015-07-24 14:24 - 2015-07-24 14:24 - 00000000 ____D C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Popcorn Time 2015-07-24 14:20 - 2015-07-24 14:24 - 00000000 ____D C:\Users\Home\AppData\Local\Popcorn Time 2015-07-24 14:19 - 2015-07-24 14:20 - 29103264 _____ (Popcorn Official) C:\Users\Home\Downloads\Popcorn-Time-0.3.8-0-Setup.exe 2015-07-24 13:30 - 2015-07-24 13:31 - 16270006 _____ C:\Users\Home\Downloads\sa-mp-0.3.7-install.exe 2015-07-23 12:00 - 2015-07-23 12:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CEVO Client 2015-07-23 12:00 - 2015-07-23 12:00 - 00000000 ____D C:\Program Files\CEVO 2015-07-23 11:58 - 2015-07-23 11:59 - 24003197 _____ C:\Users\Home\Downloads\CEVO CSGO Client.zip 2015-07-20 23:55 - 2015-07-20 23:55 - 00012648 _____ C:\Users\Home\Downloads\Jarhead.2005.576p.BRRIP.x264.AAC-GOD.torrent 2015-07-18 00:42 - 2015-07-18 00:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of the Storm 2015-07-18 00:32 - 2015-07-18 00:43 - 00000000 ____D C:\Program Files\Heroes of the Storm 2015-07-16 23:42 - 2015-07-16 23:42 - 00000000 ____D C:\Users\Home\AppData\Roaming\FreeHideIP 2015-07-16 23:42 - 2015-07-16 23:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Hide IP 2015-07-16 23:42 - 2015-07-16 23:42 - 00000000 ____D C:\ProgramData\FreeHideIP 2015-07-16 23:41 - 2015-07-16 23:42 - 00000000 ____D C:\Program Files\FreeHideIP 2015-07-15 22:31 - 2015-07-15 22:31 - 00000000 ____D C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2015-07-12 18:03 - 2015-07-12 18:03 - 00000000 ___RD C:\Program Files\Skype 2015-07-12 18:03 - 2015-07-12 18:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-07-12 18:03 - 2015-07-12 18:03 - 00000000 ____D C:\Program Files\Common Files\Skype 2015-07-10 21:08 - 2015-07-10 21:21 - 00000000 ____D C:\Program Files\OpenVPN Technologies ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-08-09 15:21 - 2015-04-04 09:34 - 00020231 _____ C:\Windows\setupact.log 2015-08-09 15:21 - 2014-04-03 00:44 - 01743822 _____ C:\Windows\WindowsUpdate.log 2015-08-09 15:20 - 2015-07-08 13:00 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-08-09 15:19 - 2014-04-03 17:50 - 00000982 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-08-09 15:19 - 2009-07-14 07:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-08-09 14:48 - 2014-08-24 12:26 - 00000000 ____D C:\Program Files\Steam 2015-08-09 14:46 - 2014-04-03 17:50 - 00000986 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-08-09 14:44 - 2014-04-02 15:29 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-08-09 14:12 - 2009-07-14 07:34 - 00026768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-08-09 14:12 - 2009-07-14 07:34 - 00026768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-08-09 14:03 - 2015-04-13 21:46 - 00068444 _____ C:\Windows\PFRO.log 2015-08-09 01:10 - 2014-04-02 15:39 - 00000000 ____D C:\Users\Home\AppData\Roaming\Skype 2015-08-06 13:10 - 2014-04-07 22:30 - 00000000 ____D C:\Users\Home\AppData\Local\Battle.net 2015-08-06 12:43 - 2014-08-12 19:06 - 00000000 ____D C:\Program Files\Battle.net 2015-08-04 19:28 - 2014-08-13 22:24 - 00000000 ____D C:\Users\Home\AppData\Roaming\TS3Client 2015-08-04 11:10 - 2014-04-11 17:49 - 00000000 ____D C:\Program Files\TeamViewer 2015-08-02 23:59 - 2014-09-03 21:00 - 00000000 ____D C:\Users\Home\AppData\Local\ESL Wire Game Client 2015-07-27 00:13 - 2014-04-02 15:30 - 00000000 ____D C:\Users\Home\AppData\Roaming\uTorrent 2015-07-26 19:34 - 2014-04-05 15:59 - 00000000 ____D C:\Program Files\Common Files\Steam 2015-07-19 01:02 - 2015-01-06 20:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios 2015-07-19 01:01 - 2015-06-13 18:31 - 00000000 ____D C:\Users\Home\Desktop\chalga 2015-07-18 21:09 - 2015-06-19 17:26 - 00000000 ____D C:\Users\Home\AppData\Local\VirtualStore 2015-07-15 16:37 - 2014-05-09 14:30 - 00000000 ____D C:\Users\Home\AppData\Local\CrashDumps 2015-07-14 21:44 - 2014-04-02 15:29 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2015-07-14 21:44 - 2014-04-02 15:29 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2015-07-12 18:03 - 2014-04-02 15:39 - 00000000 ____D C:\ProgramData\Skype 2015-07-10 19:58 - 2015-06-26 20:36 - 00000054 _____ C:\Users\Home\Desktop\pas.txt ==================== Files in the root of some directories ======= 2014-06-10 21:30 - 2014-06-10 21:41 - 0000102 _____ () C:\Users\Home\AppData\Roaming\Camdata.ini 2014-06-10 21:30 - 2014-06-10 21:41 - 0000408 _____ () C:\Users\Home\AppData\Roaming\CamLayout.ini 2014-06-10 21:30 - 2014-06-10 21:41 - 0000408 _____ () C:\Users\Home\AppData\Roaming\CamShapes.ini 2014-06-10 21:30 - 2014-06-10 21:41 - 0004545 _____ () C:\Users\Home\AppData\Roaming\CamStudio.cfg 2014-09-03 15:13 - 2014-09-03 15:22 - 0000016 _____ () C:\Users\Home\AppData\Roaming\Network Meter_Usage.ini 2014-04-14 19:12 - 2014-09-27 19:44 - 0138056 _____ () C:\Users\Home\AppData\Roaming\PnkBstrK.sys 2014-10-17 13:27 - 2014-10-17 13:27 - 0045270 _____ () C:\Users\Home\AppData\Roaming\room_v3.dat 2015-07-05 07:30 - 2015-07-05 07:45 - 0003145 _____ () C:\Users\Home\AppData\Roaming\spritesa 2015-05-24 12:21 - 2015-05-24 12:21 - 0000016 _____ () C:\Users\Home\AppData\Roaming\users.vdf 2014-06-10 21:29 - 2014-06-10 21:36 - 0000096 _____ () C:\Users\Home\AppData\Roaming\version2.xml 2014-07-01 17:30 - 2014-10-26 14:40 - 0007168 _____ () C:\Users\Home\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-04-19 19:30 - 2014-04-19 19:30 - 0000000 ___SH () C:\Users\Home\AppData\Local\LumaEmu 2014-04-10 20:32 - 2014-04-10 20:32 - 0000218 _____ () C:\Users\Home\AppData\Local\recently-used.xbel 2014-08-12 13:07 - 2014-09-17 22:51 - 0007605 _____ () C:\Users\Home\AppData\Local\resmon.resmoncfg 2014-09-20 18:53 - 2014-09-20 18:53 - 0000003 _____ () C:\Users\Home\AppData\Local\updater.log 2014-09-20 18:53 - 2014-12-21 16:35 - 0000413 _____ () C:\Users\Home\AppData\Local\UserProducts.xml 2015-03-08 21:21 - 2015-05-04 19:07 - 0642316 _____ () C:\ProgramData\AndyDrivers.zip 2015-02-15 19:40 - 2015-02-15 21:11 - 0000124 _____ () C:\ProgramData\autoclickconfig.ini 2014-04-02 15:17 - 2014-04-02 15:17 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2014-04-08 19:03 - 2014-05-21 11:52 - 0000473 _____ () C:\ProgramData\HirezPipeError.txt Some files in TEMP: ==================== C:\Users\Home\AppData\Local\Temp\dllnt_dump.dll C:\Users\Home\AppData\Local\Temp\Quarantine.exe C:\Users\Home\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-08-03 21:40 ==================== End of log ============================ Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:08-08-2015 01 Ran by Home (administrator) on HOME-PC (09-08-2015 15:24:14) Running from C:\Users\Home\Desktop Loaded Profiles: Home (Available Profiles: Home) Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) Language: Английски (Съединени щати) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe () C:\Program Files\Garena Plus\ggdllhost.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Google Inc.) C:\Program Files\Google\Update\1.3.28.1\GoogleCrashHandler.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe () C:\Program Files\EslWire\service\WireHelperSvc.exe (Razer Inc.) C:\Program Files\Razer\Razer Cortex\RzKLService.exe (TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [978520 2015-01-30] (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyServer: [s-1-5-21-2054358307-3739566615-3368694158-1000] => http=;ftp=;https=; HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com HKU\S-1-5-21-2054358307-3739566615-3368694158-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 HKU\S-1-5-21-2054358307-3739566615-3368694158-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp HKU\S-1-5-21-2054358307-3739566615-3368694158-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.msn.com/?pc=AV01 SearchScopes: HKLM -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation) BHO: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-03-10] (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-10] (Oracle Corporation) DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\..\Interfaces\{310554DD-7062-425C-A1D3-1BD455D5C1BD}: [DhcpNameServer] 10.24.4.1 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\73n5pkmj.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] () FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [2015-02-05] (Adobe Systems, Inc.) FF Plugin: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-10] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-10] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled [No File] FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File] FF Plugin: @raidcall.en/RCplugin -> C:\Users\Home\AppData\Roaming\raidcall\plugins\nprcplugin.dll [2014-05-27] (Raidcall) FF Plugin: @t.garena.com/garenatalk -> C:\Program Files\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll [2014-10-16] ( Garena) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-2054358307-3739566615-3368694158-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Home\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-05-26] (Unity Technologies ApS) FF Extension: Adblock Plus - C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\73n5pkmj.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-15] FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird Chrome: ======= CHR Profile: C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (AdBlock) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-03-20] CHR Extension: (No Name) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-03] CHR Profile: C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1 CHR Extension: (Google Slides) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-04] CHR Extension: (Google Docs) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-04] CHR Extension: (Google Drive) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-04] CHR Extension: (YouTube) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-04] CHR Extension: (Facebook) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\boeajhmfdjldchidhphikilcgdacljfm [2015-04-04] CHR Extension: (Steam inventory helper) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2015-04-19] CHR Extension: (Google Search) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-04] CHR Extension: (Armor Games) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dodcabcaanoejbpmadedpjmgnblfjefd [2015-04-04] CHR Extension: (Google Sheets) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-04] CHR Extension: (LoungeDestroyer) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghahcnmfjfckcedfajbhekgknjdplfcl [2015-04-11] CHR Extension: (AdBlock) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-04-04] CHR Extension: (CS:GO Lounge Bump Bot) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jhfkidfnhjcjjamcbdepeohblphlamgk [2015-05-02] CHR Extension: (Steam Trader Helper) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lhoahihokddepjlegpenefeaahdkojog [2015-05-19] CHR Extension: (Dingit Infinite HD App) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\llnhnfikffkjbdnfallfpgikamegbbag [2015-08-05] CHR Extension: (Chrome Web Store Payments) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-04] CHR Extension: (Gmail) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-04] ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2013-04-30] (Advanced Micro Devices, Inc.) [File not signed] S3 celavimushost; C:\Program Files\CEVO\CSGO Client Beta\CelavimusClientHelper.exe [123608 2015-05-07] (altPUG LLC) S3 EasyAntiCheat; C:\Windows\system32\EasyAntiCheat.exe [174624 2014-10-14] (EasyAntiCheat Ltd) R2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [614416 2014-01-28] () S2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22184 2015-01-30] (Microsoft Corporation) R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [284472 2015-01-30] (Microsoft Corporation) R2 RzKLService; C:\Program Files\Razer\Razer Cortex\RzKLService.exe [105448 2014-08-28] (Razer Inc.) R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [5448464 2015-03-30] (TeamViewer GmbH) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) S2 HiPatchService; D:\Yavor\Games\HiPatchService.exe [X] ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [38984 2014-09-21] (The OpenVPN Project) S3 DrvAgent32; C:\Windows\system32\Drivers\DrvAgent32.sys [23456 2014-06-22] (Phoenix Technologies) [File not signed] S3 eapihdrv; C:\Users\Home\AppData\Local\Temp\ehdrv.sys [135760 2015-07-08] (ESET) R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG) S3 ExterminateIt; C:\Windows\system32\drivers\extit.sys [39936 2014-05-27] (CurioLab S.M.B.A.) [File not signed] R3 GKBFltr; C:\Windows\System32\Drivers\GameKB.sys [23424 2012-05-11] () R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.) R0 iusb3hcs; C:\Windows\System32\DRIVERS\iusb3hcs.sys [16880 2013-07-18] (Intel Corporation) R1 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [92888 2015-04-14] (Malwarebytes Corporation) S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation) S3 Moufiltr; C:\Windows\System32\DRIVERS\Moufiltr.sys [9661 2005-08-06] (Windows ® 2000 DDK provider) [File not signed] R3 MouseCap; C:\Windows\System32\Drivers\MouseCap.sys [6640 2005-08-08] () [File not signed] R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [239224 2014-11-15] (Microsoft Corporation) R1 MpKsl85601393; C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{2EA64C47-776E-41D6-AB2E-1FBBC42889D8}\MpKsl85601393.sys [39168 2015-08-09] (Microsoft Corporation) S3 ptun0901; C:\Windows\System32\DRIVERS\ptun0901.sys [23552 2015-01-26] (The OpenVPN Project) S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project) U3 Winsock; no ImagePath R3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [22104 2014-07-02] (SplitmediaLabs Limited) S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X] S3 ESEADriver2; no ImagePath S3 GGSAFERDriver; \??\C:\Program Files\Garena Plus\Room\safedrv.sys [X] S3 taphss6; system32\DRIVERS\taphss6.sys [X] U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed] S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] S3 XFDriver; \??\C:\Program Files\Xfire2\XFDriver.sys [X] S3 xhunter1; \??\C:\Windows\xhunter1.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-08-09 15:24 - 2015-08-09 15:24 - 00014982 _____ C:\Users\Home\Desktop\FRST.txt 2015-08-09 15:24 - 2015-08-09 15:24 - 00000000 ____D C:\FRST 2015-08-09 15:23 - 2015-08-09 15:23 - 01673216 _____ (Farbar) C:\Users\Home\Desktop\FRST.exe 2015-08-06 23:36 - 2015-07-10 22:00 - 00886784 _____ (Microsoft) C:\Users\Home\Desktop\Matchmaking Server Picker.exe 2015-08-06 23:35 - 2015-08-06 23:35 - 00426403 _____ C:\Users\Home\Downloads\matchmaking_server_picker_2_8.zip 2015-08-05 19:12 - 2015-08-05 19:12 - 00000000 ____D C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Приложения в Chrome 2015-08-02 16:16 - 2015-08-02 16:16 - 00000000 ____D C:\Program Files\Tweaking.com 2015-08-02 16:14 - 2015-08-02 16:16 - 17974904 _____ (Tweaking.com) C:\Users\Home\Downloads\tweaking.com_windows_repair_aio_setup.exe 2015-07-27 00:09 - 2015-07-27 00:09 - 00014809 _____ C:\Users\Home\Downloads\Fifty.Shades.of.Grey.2015.WEBRip.x264-WAR.torrent 2015-07-26 00:41 - 2015-07-26 00:41 - 00011932 _____ C:\Users\Home\Downloads\Minions 2015 TS x264-CPG.torrent 2015-07-24 14:26 - 2015-07-24 14:39 - 00000000 ____D C:\Users\Home\AppData\Local\Popcorn-Time 2015-07-24 14:24 - 2015-07-24 14:24 - 00000000 ____D C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Popcorn Time 2015-07-24 14:20 - 2015-07-24 14:24 - 00000000 ____D C:\Users\Home\AppData\Local\Popcorn Time 2015-07-24 14:19 - 2015-07-24 14:20 - 29103264 _____ (Popcorn Official) C:\Users\Home\Downloads\Popcorn-Time-0.3.8-0-Setup.exe 2015-07-24 13:30 - 2015-07-24 13:31 - 16270006 _____ C:\Users\Home\Downloads\sa-mp-0.3.7-install.exe 2015-07-23 12:00 - 2015-07-23 12:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CEVO Client 2015-07-23 12:00 - 2015-07-23 12:00 - 00000000 ____D C:\Program Files\CEVO 2015-07-23 11:58 - 2015-07-23 11:59 - 24003197 _____ C:\Users\Home\Downloads\CEVO CSGO Client.zip 2015-07-20 23:55 - 2015-07-20 23:55 - 00012648 _____ C:\Users\Home\Downloads\Jarhead.2005.576p.BRRIP.x264.AAC-GOD.torrent 2015-07-18 00:42 - 2015-07-18 00:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of the Storm 2015-07-18 00:32 - 2015-07-18 00:43 - 00000000 ____D C:\Program Files\Heroes of the Storm 2015-07-16 23:42 - 2015-07-16 23:42 - 00000000 ____D C:\Users\Home\AppData\Roaming\FreeHideIP 2015-07-16 23:42 - 2015-07-16 23:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Hide IP 2015-07-16 23:42 - 2015-07-16 23:42 - 00000000 ____D C:\ProgramData\FreeHideIP 2015-07-16 23:41 - 2015-07-16 23:42 - 00000000 ____D C:\Program Files\FreeHideIP 2015-07-15 22:31 - 2015-07-15 22:31 - 00000000 ____D C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2015-07-12 18:03 - 2015-07-12 18:03 - 00000000 ___RD C:\Program Files\Skype 2015-07-12 18:03 - 2015-07-12 18:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-07-12 18:03 - 2015-07-12 18:03 - 00000000 ____D C:\Program Files\Common Files\Skype 2015-07-10 21:08 - 2015-07-10 21:21 - 00000000 ____D C:\Program Files\OpenVPN Technologies ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-08-09 15:21 - 2015-04-04 09:34 - 00020231 _____ C:\Windows\setupact.log 2015-08-09 15:21 - 2014-04-03 00:44 - 01743822 _____ C:\Windows\WindowsUpdate.log 2015-08-09 15:20 - 2015-07-08 13:00 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-08-09 15:19 - 2014-04-03 17:50 - 00000982 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-08-09 15:19 - 2009-07-14 07:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-08-09 14:48 - 2014-08-24 12:26 - 00000000 ____D C:\Program Files\Steam 2015-08-09 14:46 - 2014-04-03 17:50 - 00000986 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-08-09 14:44 - 2014-04-02 15:29 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-08-09 14:12 - 2009-07-14 07:34 - 00026768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-08-09 14:12 - 2009-07-14 07:34 - 00026768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-08-09 14:03 - 2015-04-13 21:46 - 00068444 _____ C:\Windows\PFRO.log 2015-08-09 01:10 - 2014-04-02 15:39 - 00000000 ____D C:\Users\Home\AppData\Roaming\Skype 2015-08-06 13:10 - 2014-04-07 22:30 - 00000000 ____D C:\Users\Home\AppData\Local\Battle.net 2015-08-06 12:43 - 2014-08-12 19:06 - 00000000 ____D C:\Program Files\Battle.net 2015-08-04 19:28 - 2014-08-13 22:24 - 00000000 ____D C:\Users\Home\AppData\Roaming\TS3Client 2015-08-04 11:10 - 2014-04-11 17:49 - 00000000 ____D C:\Program Files\TeamViewer 2015-08-02 23:59 - 2014-09-03 21:00 - 00000000 ____D C:\Users\Home\AppData\Local\ESL Wire Game Client 2015-07-27 00:13 - 2014-04-02 15:30 - 00000000 ____D C:\Users\Home\AppData\Roaming\uTorrent 2015-07-26 19:34 - 2014-04-05 15:59 - 00000000 ____D C:\Program Files\Common Files\Steam 2015-07-19 01:02 - 2015-01-06 20:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios 2015-07-19 01:01 - 2015-06-13 18:31 - 00000000 ____D C:\Users\Home\Desktop\chalga 2015-07-18 21:09 - 2015-06-19 17:26 - 00000000 ____D C:\Users\Home\AppData\Local\VirtualStore 2015-07-15 16:37 - 2014-05-09 14:30 - 00000000 ____D C:\Users\Home\AppData\Local\CrashDumps 2015-07-14 21:44 - 2014-04-02 15:29 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2015-07-14 21:44 - 2014-04-02 15:29 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2015-07-12 18:03 - 2014-04-02 15:39 - 00000000 ____D C:\ProgramData\Skype 2015-07-10 19:58 - 2015-06-26 20:36 - 00000054 _____ C:\Users\Home\Desktop\pas.txt ==================== Files in the root of some directories ======= 2014-06-10 21:30 - 2014-06-10 21:41 - 0000102 _____ () C:\Users\Home\AppData\Roaming\Camdata.ini 2014-06-10 21:30 - 2014-06-10 21:41 - 0000408 _____ () C:\Users\Home\AppData\Roaming\CamLayout.ini 2014-06-10 21:30 - 2014-06-10 21:41 - 0000408 _____ () C:\Users\Home\AppData\Roaming\CamShapes.ini 2014-06-10 21:30 - 2014-06-10 21:41 - 0004545 _____ () C:\Users\Home\AppData\Roaming\CamStudio.cfg 2014-09-03 15:13 - 2014-09-03 15:22 - 0000016 _____ () C:\Users\Home\AppData\Roaming\Network Meter_Usage.ini 2014-04-14 19:12 - 2014-09-27 19:44 - 0138056 _____ () C:\Users\Home\AppData\Roaming\PnkBstrK.sys 2014-10-17 13:27 - 2014-10-17 13:27 - 0045270 _____ () C:\Users\Home\AppData\Roaming\room_v3.dat 2015-07-05 07:30 - 2015-07-05 07:45 - 0003145 _____ () C:\Users\Home\AppData\Roaming\spritesa 2015-05-24 12:21 - 2015-05-24 12:21 - 0000016 _____ () C:\Users\Home\AppData\Roaming\users.vdf 2014-06-10 21:29 - 2014-06-10 21:36 - 0000096 _____ () C:\Users\Home\AppData\Roaming\version2.xml 2014-07-01 17:30 - 2014-10-26 14:40 - 0007168 _____ () C:\Users\Home\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-04-19 19:30 - 2014-04-19 19:30 - 0000000 ___SH () C:\Users\Home\AppData\Local\LumaEmu 2014-04-10 20:32 - 2014-04-10 20:32 - 0000218 _____ () C:\Users\Home\AppData\Local\recently-used.xbel 2014-08-12 13:07 - 2014-09-17 22:51 - 0007605 _____ () C:\Users\Home\AppData\Local\resmon.resmoncfg 2014-09-20 18:53 - 2014-09-20 18:53 - 0000003 _____ () C:\Users\Home\AppData\Local\updater.log 2014-09-20 18:53 - 2014-12-21 16:35 - 0000413 _____ () C:\Users\Home\AppData\Local\UserProducts.xml 2015-03-08 21:21 - 2015-05-04 19:07 - 0642316 _____ () C:\ProgramData\AndyDrivers.zip 2015-02-15 19:40 - 2015-02-15 21:11 - 0000124 _____ () C:\ProgramData\autoclickconfig.ini 2014-04-02 15:17 - 2014-04-02 15:17 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2014-04-08 19:03 - 2014-05-21 11:52 - 0000473 _____ () C:\ProgramData\HirezPipeError.txt Some files in TEMP: ==================== C:\Users\Home\AppData\Local\Temp\dllnt_dump.dll C:\Users\Home\AppData\Local\Temp\Quarantine.exe C:\Users\Home\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-08-03 21:40 ==================== End of log ============================ Не съм забелязал забавяне от миналия път Addition.txt
  8. qvorat

    въпрос за фотошоп

    то ако така ставашее..
  9. qvorat

    Giveaway на Battlefield 4

    запис
  10. приключихме ли ???
  11. https://www.virustotal.com/bg/file/1c93567000a56840c899ce8d99542c7828dc30421f9388c8f15d37ea50c51156/analysis/1436110498/ # AdwCleaner v4.207 - Logfile created 05/07/2015 at 21:05:01 # Updated 21/06/2015 by Xplode # Database : 2015-06-21.1 [server] # Operating system : Windows 7 Ultimate Service Pack 1 (x86) # Username : Home - HOME-PC # Running from : C:\Users\Home\Desktop\adwcleaner_4.207.exe # Option : Cleaning ***** [ Services ] ***** ***** [ Files / Folders ] ***** Folder Deleted : C:\Users\Home\AppData\Local\pokki File Deleted : C:\END File Deleted : C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Menu.lnk ***** [ Scheduled tasks ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Deleted : HKCU\Software\Classes\AllFileSystemObjects\shell\pokki Key Deleted : HKCU\Software\Classes\Directory\shell\pokki Key Deleted : HKCU\Software\Classes\Drive\shell\pokki Key Deleted : HKCU\Software\Classes\lnkfile\shell\pokki Key Deleted : HKLM\SOFTWARE\f03db206-cead-4333-90f3-302d1822dc68 Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_a65116cdc0b4377bed428e280c19949d56248d11 Key Deleted : HKCU\Software\Conduit Key Deleted : HKCU\Software\Pokki Key Deleted : HKCU\Software\DriverToolkit Key Deleted : HKCU\Software\Avg Secure Update Key Deleted : HKLM\SOFTWARE\Avg Secure Update Key Deleted : HKU\.DEFAULT\Software\Avg Secure Update ***** [ Web browsers ] ***** -\\ Internet Explorer v11.0.9600.17801 -\\ Mozilla Firefox v37.0 (x86 en-US) -\\ Google Chrome v43.0.2357.130 [C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [startup_URLs] : hxxp://www.istartsurf.com/?type=hp&ts=1432052719&z=355f9bbf7c7a41d1a3fced5g5z9c7o3e4weoem4g7c&from=smt&uid=ST500DM002-1BD142_Z3TWXR9HXXXXZ3TWXR9H -\\ Comodo Dragon v -\\ Chrome Canary v ************************* AdwCleaner[R3].txt - [14877 bytes] - [19/05/2015 19:28:51] AdwCleaner[R4].txt - [1029 bytes] - [24/05/2015 12:23:11] AdwCleaner[R5].txt - [2223 bytes] - [05/07/2015 20:56:30] AdwCleaner[R6].txt - [2224 bytes] - [05/07/2015 20:56:46] AdwCleaner[s2].txt - [15111 bytes] - [19/05/2015 19:32:08] AdwCleaner[s3].txt - [1095 bytes] - [24/05/2015 12:25:51] AdwCleaner[s4].txt - [2181 bytes] - [05/07/2015 21:05:01] ########## EOF - C:\AdwCleaner\AdwCleaner[s4].txt - [2240 bytes] ########## ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 7.3.1 (07.05.2015:1) OS: Windows 7 Ultimate x86 Ran by Home on ­Ґ¤ 05.07.2015 Ј. at 21:09:08,26 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Tasks ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Update Greener Web Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Util Greener Web ~~~ Files Successfully deleted: [File] C:\Users\Home\AppData\Roaming\speedrunnerslog.txt ~~~ Folders Successfully deleted: [Folder] C:\Users\Home\AppData\Roaming\tuneup software Successfully deleted: [Folder] C:\Windows\System32\ai_recyclebin Successfully deleted: [Folder] C:\Windows\System32\tasks\update Successfully deleted: [Folder] C:\Users\Home\appdata\local\30460 Successfully deleted: [Folder] C:\Users\Home\appdata\local\4936 ~~~ FireFox Successfully deleted the following from C:\Users\Home\AppData\Roaming\mozilla\firefox\profiles\73n5pkmj.default\prefs.js user_pref(browser.search.searchengine.desc, this is my first firefox searchEngine); user_pref(browser.search.searchengine.ptid, smt); user_pref(browser.search.searchengine.uid, ST500DM002-1BD142_Z3TWXR9HXXXXZ3TWXR9H); Emptied folder: C:\Users\Home\AppData\Roaming\mozilla\firefox\profiles\73n5pkmj.default\minidumps [10 files] ~~~ Chrome [C:\Users\Home\appdata\local\Google\Chrome\User Data\Default\Preferences] - default search provider reset [C:\Users\Home\appdata\local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted: [C:\Users\Home\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset [C:\Users\Home\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted: [] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on ­Ґ¤ 05.07.2015 Ј. at 21:13:27,99 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Не качвам от маларето написах ви съобщение на лично вижте го и кажете да сканирам ли .
  12. AVware Trojan.Win32.Generic!BT 20150705 Avast Win32:Sality 20150705 VIPRE Trojan.Win32.Generic!BT 20150705 Логовете по късно ще ги напиша , че сега излизам. А само тези 3те копнах , защото другите пишат , че не е заразен...
  13. Прикачвам и TDSSKiller лога , защото изписа , че коментара ми е прекалено дълъг... aswMBR version 1.0.1.2252 Copyright© 2014 AVAST Software Run date: 2015-07-05 10:34:33 ----------------------------- 10:34:33.376 OS Version: Windows 6.1.7601 Service Pack 1 10:34:33.376 Number of processors: 2 586 0x4B02 10:34:33.379 ComputerName: HOME-PC UserName: Home 10:34:55.447 Initialize success 10:34:55.536 VM: initialized successfully 10:34:55.538 VM: Amd CPU virtualization not supported 10:38:11.014 AVAST engine defs: 15070401 10:38:33.410 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP3T0L0-5 10:38:33.413 Disk 0 Vendor: ST500DM002-1BD142 KC48 Size: 476938MB BusType: 11 10:38:33.504 Disk 0 MBR read successfully 10:38:33.521 Disk 0 MBR scan 10:38:33.605 Disk 0 Windows 7 default MBR code 10:38:33.619 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048 10:38:33.624 Disk 0 Boot: NTFS code=2 10:38:33.684 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 119899 MB offset 206848 10:38:33.757 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 356937 MB offset 245760000 10:38:33.817 Disk 0 scanning sectors +976766976 10:38:34.016 Disk 0 scanning C:\Windows\system32\drivers 10:38:55.436 Service scanning 10:39:16.188 Service MpKsl950c8a12 C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7298DCD5-427A-41EB-BD12-D34145ABF0AE}\MpKsl950c8a12.sys **LOCKED** 32 10:39:39.118 Modules scanning 10:39:39.125 Disk 0 trace - called modules: 10:39:39.153 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll ataport.SYS PCIIDEX.SYS msahci.sys dxgkrnl.sys atikmpag.sys atikmdag.sys dxgmms1.sys 10:39:39.157 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xc370c778] 10:39:39.162 3 CLASSPNP.SYS[ca38b59e] -> nt!IofCallDriver -> [0xc3267c10] 10:39:39.167 5 ACPI.sys[c9d9a3d4] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP3T0L0-5[0xc321e908] 10:39:39.913 AVAST engine scan C:\Windows 10:39:42.312 AVAST engine scan C:\Windows\system32 10:45:32.736 AVAST engine scan C:\Windows\system32\drivers 10:45:57.297 AVAST engine scan C:\Users\Home 10:54:19.658 File: C:\Users\Home\AppData\Roaming\BitTorrent\BitTorrent.exe **INFECTED** Win32:Sality 11:10:13.994 AVAST engine scan C:\ProgramData 11:16:27.926 Disk 0 statistics 3340192/0/0 @ 2,14 MB/s 11:16:27.933 Scan finished successfully 11:16:36.979 Disk 0 MBR has been saved successfully to "C:\Users\Home\Desktop\MBR.dat" 11:16:37.047 The log file has been saved successfully to "C:\Users\Home\Desktop\aswMBR.txt" RogueKiller не направи никакъв лог. След прескан-а цъкнах скан то си сканира по едно време изписа , че е свършило и аз си го изключих. Пак да пробвам ли ? Fixlog.txt TDSSKiller.3.0.0.44_05.07.2015_10.32.36_log.txt
  • Разглеждащи това в момента   0 потребители

    Няма регистрирани потребители разглеждащи тази страница.

×

Информация

Поставихме бисквитки на устройството ви за най-добро потребителско изживяване. Можете да промените настройките си за бисквитки, или в противен случай приемаме, че сте съгласни с нашите условия за ползване.