Здравейте. От известно време започнаха да ми се появяват едни досадни прозорци, предимно в сайтове в които се предлагат някакви продукти за продажба. Под снимките на даден артикул ми изкачат реклами за същия продукт, но в друг сайт. Ще прикача и няколко снимки, за да стане по-ясно за какво става въпрос. Тъй като имаше опция да ги спра, да не се появяват, го направих, но не смятам че проблема е решен, за това ви моля за помощ.

Снимка 1

Снимка 2

 

Attach

 

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-09-30.01)
.
Microsoft Windows 7 Ultimate
Boot Device: DeviceHarddiskVolume1
Install Date: 24.4.2013 г. 20:57:40
System Uptime: 14.1.2014 г. 10:26:10 (7 hours ago)
.
Motherboard: ASRock |  | H77 Pro4/MVP
Processor: Intel® Core i5-3450 CPU @ 3.10GHz | CPUSocket | 3101/100mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 85 GiB total, 30,909 GiB free.
D: is FIXED (NTFS) - 381 GiB total, 80,124 GiB free.
E: is CDROM ()
F: is CDROM ()
G: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: VirtualBox Host-Only Ethernet Adapter
Device ID: ROOTNET0000
Manufacturer: Oracle Corporation
Name: VirtualBox Host-Only Ethernet Adapter
PNP Device ID: ROOTNET0000
Service: VBoxNetAdp
.
==== System Restore Points ===================
.
RP137: 12.1.2014 г. 00:00:01 - Scheduled Checkpoint
.
==== Installed Programs ======================
.
µTorrent
Acrobat.com
Adobe Acrobat XI Pro
Adobe AIR
Adobe Anchor Service CS3
Adobe Asset Services CS3
Adobe Bridge CS3
Adobe Bridge Start Meeting
Adobe Camera Raw 4.0
Adobe CMaps
Adobe Color - Photoshop Specific
Adobe Color Common Settings
Adobe Color EU Extra Settings
Adobe Color JA Extra Settings
Adobe Color NA Recommended Settings
Adobe Community Help
Adobe Default Language CS3
Adobe Device Central CS3
Adobe ExtendScript Toolkit 2
Adobe Flash Player 11 Plugin
Adobe Fonts All
Adobe Help Viewer CS3
Adobe Linguistics CS3
Adobe PDF Library Files
Adobe Photoshop CS5.1
Adobe Reader 9.5.5
Adobe Setup
Adobe Stock Photos CS3
Adobe Type Support
Adobe Update Manager CS3
Adobe Version Cue CS3 Client
Adobe WinSoft Linguistics Plugin
Adobe XMP Panels CS3
AIMP3
AMD Accelerated Video Transcoding
AMD APP SDK Runtime
AMD Catalyst Control Center
AMD Catalyst Install Manager
AMD Drag and Drop Transcoding
AMD Media Foundation Decoders
Asmedia ASM106x SATA Host Controller Driver
ASRock App Charger v1.0.5
ASRock eXtreme Tuner v0.1.188
ASRock InstantBoot v1.29
ASRock SmartConnect v1.0.6
ASRock XFast RAM v2.0.9
AutoCAD 2012 - English
AutoCAD 2012 Language Pack - English
Autodesk Content Service
Autodesk Design Review 2012
Autodesk Inventor Fusion 2012
Autodesk Inventor Fusion 2012 Language Pack
Autodesk Inventor Fusion plug-in for AutoCAD 2012
Autodesk Inventor Fusion plug-in language pack for AutoCAD 2012
Autodesk Material Library 2012
Autodesk Material Library Base Resolution Image Library 2012
Catalyst Control Center - Branding
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-utility64
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
CCleaner
cFosSpeed v9.04
Connection Manager
Core Temp 1.0 RC5
Corel Graphics - Windows Shell Extension
Corel Graphics - Windows Shell Extension 64 Bit
CorelDRAW Graphics Suite X5
CorelDRAW Graphics Suite X5 - Capture
CorelDRAW Graphics Suite X5 - Common
CorelDRAW Graphics Suite X5 - Connect
CorelDRAW Graphics Suite X5 - Custom Data
CorelDRAW Graphics Suite X5 - Draw
CorelDRAW Graphics Suite X5 - EN
CorelDRAW Graphics Suite X5 - Filters
CorelDRAW Graphics Suite X5 - FontNav
CorelDRAW Graphics Suite X5 - IPM
CorelDRAW Graphics Suite X5 - PHOTO-PAINT
CorelDRAW Graphics Suite X5 - Photozoom Plugin
CorelDRAW Graphics Suite X5 - Redist
CorelDRAW Graphics Suite X5 - Setup Files
CorelDRAW Graphics Suite X5 - VBA
CorelDRAW Graphics Suite X5 - VideoBrowser
CorelDRAW Graphics Suite X5 - VSTA
CorelDRAW Graphics Suite X5 - WT
CorelDRAW® Graphics Suite X5
Counter-Strike 1.6 Version 29, Exe build: 3647
Cyberfox Web Browser
Dev-C++ 5 beta 9 release (4.9.9.2)
Entity Framework Designer for Visual Studio 2012 - enu
erLT
ESET Smart Security
FARO LS 1.1.406.58
File Type Assistant
foobar2000 v1.3
GameRanger
Google Chrome
Google Update Helper
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946040)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946308)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946344)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947540)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789)
HTC Driver Installer
HTC Sync Manager
IIS 8.0 Express
IIS Express Application Compatibility Database for x64
IIS Express Application Compatibility Database for x86
Intel® Control Center
Intel® Manageability Engine Firmware Recovery Agent
Intel® Management Engine Components
Intel® OpenCL CPU Runtime
Intel® Processor Graphics
Intel® Rapid Storage Technology
Intel® Smart Connect Technology 2.0 x64
Intel® USB 3.0 eXtensible Host Controller Driver
Intel® Trusted Connect Service Client
IPTInstaller
IrfanView (remove only)
Java 7 Update 45
Java 7 Update 45 (64-bit)
Java Auto Updater
KeePass Password Safe 2.24
LiveUSB Creator (remove only)
LogMeIn Hamachi
MagicTunePremium
Malwarebytes Anti-Malware, версия 1.75.0.1300
MCShield ::Anti-Malware Tool::
Microsoft .NET Framework 4 Multi-Targeting Pack
Microsoft .NET Framework 4.5 Multi-Targeting Pack
Microsoft .NET Framework 4.5 SDK
Microsoft .NET Framework 4.5.1
Microsoft ASP.NET MVC 3
Microsoft ASP.NET Web Pages
Microsoft Help Viewer 2.0
Microsoft Office Excel MUI (Bulgarian) 2010
Microsoft Office Office 64-bit Components 2010
Microsoft Office OneNote MUI (Bulgarian) 2010
Microsoft Office Outlook MUI (Bulgarian) 2010
Microsoft Office PowerPoint MUI (Bulgarian) 2010
Microsoft Office Proof (Bulgarian) 2010
Microsoft Office Proof (English) 2010
Microsoft Office Proof (German) 2010
Microsoft Office Proof (Russian) 2010
Microsoft Office Proofing (Bulgarian) 2010
Microsoft Office Publisher MUI (Bulgarian) 2010
Microsoft Office Shared 64-bit MUI (Bulgarian) 2010
Microsoft Office Shared MUI (Bulgarian) 2010
Microsoft Office Standard 2010
Microsoft Office Word MUI (Bulgarian) 2010
Microsoft Silverlight
Microsoft Silverlight 4 SDK
Microsoft Silverlight 5 SDK
Microsoft SQL Server 2012 Command Line Utilities
Microsoft SQL Server 2012 Data-Tier App Framework
Microsoft SQL Server 2012 Express LocalDB
Microsoft SQL Server 2012 Management Objects
Microsoft SQL Server 2012 Management Objects  (x64)
Microsoft SQL Server 2012 Native Client
Microsoft SQL Server 2012 T-SQL Language Service
Microsoft SQL Server 2012 Transact-SQL Compiler Service
Microsoft SQL Server 2012 Transact-SQL ScriptDom
Microsoft SQL Server Compact 4.0 SP1 x64 ENU
Microsoft SQL Server Data Tools - enu (11.1.20627.00)
Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20627.00)
Microsoft SQL Server System CLR Types
Microsoft SQL Server System CLR Types (x64)
Microsoft System CLR Types for SQL Server 2012
Microsoft System CLR Types for SQL Server 2012 (x64)
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727
Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
Microsoft Visual Studio Tools for Applications 2.0 - ENU
Microsoft Visual Studio Tools for Applications 2.0 Runtime
Microsoft Web Deploy dbSqlPackage Provider - enu
Microsoft Web Platform Installer 4.0
Microsoft_VC80_ATL_x86
Microsoft_VC80_ATL_x86_x64
Microsoft_VC80_CRT_x86
Microsoft_VC80_CRT_x86_x64
Microsoft_VC80_MFC_x86
Microsoft_VC80_MFC_x86_x64
Microsoft_VC80_MFCLOC_x86
Microsoft_VC80_MFCLOC_x86_x64
Microsoft_VC90_ATL_x86
Microsoft_VC90_ATL_x86_x64
Microsoft_VC90_CRT_x86
Microsoft_VC90_CRT_x86_x64
Microsoft_VC90_MFC_x86
Microsoft_VC90_MFC_x86_x64
Microsoft_VC90_MFCLOC_x86
Microsoft_VC90_MFCLOC_x86_x64
Mozilla Firefox 26.0 (x86 bg)
Mozilla Maintenance Service
MPC-HC 1.7.1 (64-bit)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
My Lockbox 2.6
MyFreeCodec
Mz Assistant by isvicare
Notepad++
Oracle VM VirtualBox 4.2.12
Origin
Panda USB Vaccine 1.0.1.4
PDF Architect
PDF Settings
PDF Settings CS5
PDFCreator
PotPlayer 1.5.32392 BG
Prerequisites for SSDT
RadeonPro 1.0 (Build 1.1.1.0)
Realtek Ethernet Controller Driver
Realtek High Definition Audio Driver
Revo Uninstaller Pro 3.0.8
Samsung Kies
SAMSUNG USB Driver for Mobile Phones
Samsung_MonSetup
SamsungFirmwareUpdater
Skype™ 6.11
SopCast 3.8.2
Splashtop Software Updater
Splashtop Streamer
TeamViewer 8
TechPowerUp GPU-Z
THX TruStudio
TrueCrypt
Update for  (KB2504637)
Update for Microsoft Office 2010 (KB2202188)
VIRTU MVP 2.1.110
Visual Basic for Applications ® Core
Visual Basic for Applications ® Core - English
WCF RIA Services V1.0 SP2
Windows 7 USB/DVD Download Tool
WinRAR 5.00 (64-bit)
Xfire (remove only)
Your Uninstaller! 2010
.
==== Event Viewer Messages From Past Week ========
.
8.1.2014 г. 07:31:19, Error: Service Control Manager [7031]  - The TeamViewer 8 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 2000 milliseconds: Restart the service.
8.1.2014 г. 07:31:17, Error: Service Control Manager [7034]  - The LogMeIn Hamachi Tunneling Engine service terminated unexpectedly.  It has done this 1 time(s).
10.1.2014 г. 18:47:44, Error: Server [2505]  - The server could not bind to the transport DeviceNetBT_Tcpip_{CC803806-EE1E-41A7-B406-61C703CE1AA2} because another computer on the network has the same name.  The server could not start.
10.1.2014 г. 18:47:44, Error: NetBT [4321]  - The name "HSS-PC :20" could not be registered on the interface with IP address 10.159.185.2. The computer with the IP address 10.159.185.3 did not allow the name to be claimed by this computer.
10.1.2014 г. 18:47:44, Error: NetBT [4321]  - The name "HSS-PC :0" could not be registered on the interface with IP address 10.159.185.2. The computer with the IP address 10.159.185.3 did not allow the name to be claimed by this computer.
.
==== End Of File ===========================

 

 

DDS

 

DDS (Ver_2011-09-30.01) - NTFS_AMD64
Internet Explorer: 9.11.9600.16428  BrowserJavaVersion: 10.45.2
Run by HsS at 17:28:29 on 2014-01-14
Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1033.18.8087.5554 [GMT 2:00]
.
AV: ESET Smart Security 7.0 *Enabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: ESET Smart Security 7.0 *Enabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: Лична защитна стена на ESET *Enabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
.
============== Running Processes ===============
.
C:Windowssystem32wininit.exe
C:Windowssystem32lsm.exe
C:Windowssystem32svchost.exe -k DcomLaunch
C:Windowssystem32svchost.exe -k RPCSS
C:Windowssystem32atiesrxx.exe
C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted
C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted
C:Windowssystem32svchost.exe -k LocalService
C:Windowssystem32svchost.exe -k netsvcs
C:Windowssystem32svchost.exe -k NetworkService
C:WindowsSystem32spoolsv.exe
C:Windowssystem32atieclxx.exe
C:Windowssystem32svchost.exe -k LocalServiceNoNetwork
C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe
C:Windowssystem32taskhost.exe
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Program Files (x86)AutodeskContent ServiceConnect.Service.ContentService.exe
C:WindowsSystem32igfxpers.exe
C:Program FilesRealtekAudioHDARAVCpl64.exe
C:Program FilesLucidlogix TechnologiesVIRTU MVPMVPControlPanel.exe
C:WindowsSystem32rundll32.exe
C:Program FilesMy Lockboxmylbx.exe
C:Program Files (x86)BonjourmDNSResponder.exe
C:Program FilesASRockXFast LANspd.exe
C:Program FilesASRockXFast LANcfosspeed.exe
C:Program FilesESETESET Smart Securityegui.exe
C:Program FilesESETESET Smart Securityx86ekrn.exe
C:Program Files (x86)MCShieldMCShieldRTM.exe
C:Program Files (x86)SkypePhoneSkype.exe
C:Program FilesWindows Sidebarsidebar.exe
C:Program Files (x86)HTCHTC Sync ManagerHSMServiceEntry.exe
C:Program FilesMagicTune PremiumGammaTray.exe
C:Program FilesInteliCLS ClientHeciServer.exe
C:Program Files (x86)IntelIntel® Management Engine ComponentsFWServiceIntelMeFWService.exe
C:Program FilesIntelIntel® Smart Connect Technology AgentiSCTAgent.exe
C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe
C:Program Files (x86)IntelIntel® USB 3.0 eXtensible Host Controller DriverApplicationiusb3mon.exe
C:Program Files (x86)CreativeTHX TruStudioTHXNBSetTHXAudNB.exe
C:Program Files (x86)IntelIntel® Management Engine ComponentsDALjhi_service.exe
C:Program Files (x86)T-MobileConnection ManagerBackgroundModemListener.exe
C:Program Files (x86)LogMeIn HamachiLMIGuardianSvc.exe
C:Program Files (x86)AdobeAcrobat 11.0Acrobatacrotray.exe
C:Program Files (x86)T-MobileConnection ManagerBackgroundServiceServiceManager.exe
C:Program Files (x86)HTCInternet Pass-ThroughPassThruSvr.exe
C:Program Files (x86)PDF ArchitectHelperService.exe
C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticMOM.exe
C:Program Files (x86)LogMeIn Hamachihamachi-2-ui.exe
C:Program Files (x86)HTCHTC Sync ManagerHTC Syncadb.exe
C:Program Files (x86)PDF ArchitectConversionService.exe
c:Program Files (x86)Common FilesProtexisLicense ServicePsiService_2.exe
C:Program Files (x86)RadeonProRadeonProSupport.exe
C:Program Files (x86)SplashtopSplashtop RemoteSERVERSRService.exe
C:Program Files (x86)SplashtopSplashtop RemoteSERVERSRServer.exe
C:Program FilesMicrosoft SQL Server90Sharedsqlwriter.exe
C:Program Files (x86)SplashtopSplashtop Software UpdaterSSUService.exe
C:Windowssystem32svchost.exe -k imgsvc
C:Program Files (x86)TeamViewerVersion8TeamViewer_Service.exe
C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCCC.exe
C:WindowsSystem32svchost.exe -k secsvcs
C:Program Files (x86)LogMeIn Hamachihamachi-2.exe
C:Windowssystem32SearchIndexer.exe
C:Windowssystem32svchost.exe -k NetworkServiceNetworkRestricted
C:Program Files (x86)TeamViewerVersion8TeamViewer.exe
C:Program Files (x86)Panda USB VaccineUSBVaccine.exe
C:Program FilesWindows Media Playerwmpnetwk.exe
C:Program Files (x86)TeamViewerVersion8tv_w32.exe
C:Program Files (x86)TeamViewerVersion8tv_x64.exe
C:Program FilesLucidlogix TechnologiesVIRTU MVPEKAG20NT.EXE
C:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonation
C:WindowsSystem32svchost.exe -k LocalServicePeerNet
C:Windowssystem32wuauclt.exe
C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe
C:Program Files (x86)IntelIntel® Management Engine ComponentsLMSLMS.exe
C:Program Files (x86)IntelIntel® Management Engine ComponentsUNSUNS.exe
C:UsersHsSDesktopscreensclipper.exe
C:Program Files (x86)Common FilesAdobeOOBEPDAppUWAAAM Updates Notifier.exe
C:Program FilesCommon FilesMicrosoft SharedOfficeSoftwareProtectionPlatformOSPPSVC.EXE
C:Program FilesCyberfoxCyberfox.exe
C:Program Files (x86)SplashtopSplashtop RemoteSERVERSRFeature.exe
C:Program FilesCyberfoxplugin-container.exe
C:Program Files (x86)SplashtopSplashtop RemoteSERVERDataProxy.exe
C:Windowssystem32conhost.exe
C:Windowssystem32SearchProtocolHost.exe
C:Windowssystem32SearchFilterHost.exe
C:Windowssystem32conhost.exe
C:Windowssystem32wbemwmiprvse.exe
C:WindowsSystem32cscript.exe
.
============== Pseudo HJT Report ===============
.
BHO: PDF Architect Helper: {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:Program Files (x86)PDF ArchitectPDFIEHelper.dll
BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program Files (x86)Javajre7binssv.dll
BHO: Adobe Acrobat Create PDF Toolbar Helper: {AE7CD045-E861-484f-8273-0445EE161910} - C:Program Files (x86)Common FilesAdobeAcrobatWCIEActiveXAcroIEFavClient.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:Program Files (x86)Microsoft OfficeOffice14URLREDIR.DLL
BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program Files (x86)Javajre7binjp2ssv.dll
BHO: Adobe Acrobat Create PDF from Selection: {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:Program Files (x86)Common FilesAdobeAcrobatWCIEActiveXAcroIEFavClient.dll
TB: Adobe Acrobat Create PDF Toolbar: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:Program Files (x86)Common FilesAdobeAcrobatWCIEActiveXAcroIEFavClient.dll
TB: PDF Architect Toolbar: {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:Program Files (x86)PDF ArchitectPDFIEPlugin.dll
uRun: [AlcoholAutomount] "C:Program Files (x86)Alcohol SoftAlcohol 120axcmd.exe" /automount
uRun: [MCShield Monitor] C:Program Files (x86)MCShieldmcshieldrtm.exe
uRun: [skype] "C:Program Files (x86)SkypePhoneSkype.exe" /minimized /regrun
uRun: [sidebar] C:Program FilesWindows Sidebarsidebar.exe /autoRun
mRun: [iAStorIcon] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe
mRun: [uSB3MON] "C:Program Files (x86)IntelIntel® USB 3.0 eXtensible Host Controller DriverApplicationiusb3mon.exe"
mRun: [THX TruStudio NB Settings] "C:Program Files (x86)CreativeTHX TruStudioTHXNBSetTHXAudNB.exe" /r
mRun: [T-Mobile ModemListener] C:Program Files (x86)T-MobileConnection ManagerBackgroundModemListener.exe start
mRun: [Adobe Reader Speed Launcher] "C:Program Files (x86)AdobeReader 9.0ReaderReader_sl.exe"
mRun: [Adobe ARM] "C:Program Files (x86)Common FilesAdobeARM1.0AdobeARM.exe"
mRun: [Acrobat Assistant 8.0] "C:Program Files (x86)AdobeAcrobat 11.0AcrobatAcrotray.exe"
mRun: [switchBoard] C:Program Files (x86)Common FilesAdobeSwitchBoardSwitchBoard.exe
mRun: [AdobeCS5.5ServiceManager] "C:Program Files (x86)Common FilesAdobeCS5.5ServiceManagerCS5.5ServiceManager.exe" -launchedbylogin
mRun: [startCCC] "C:Program Files (x86)ATI TechnologiesATI.ACECore-Staticamd64CLIStart.exe" MSRun
mRun: [KeePass 2 PreLoad] "C:Program Files (x86)KeePass Password Safe 2KeePass.exe" --preload
mRun: [LogMeIn Hamachi Ui] "C:Program Files (x86)LogMeIn Hamachihamachi-2-ui.exe" --auto-start
StartupFolder: C:PROGRA~3MICROS~1WindowsSTARTM~1ProgramsStartupGAMMAT~1.LNK - C:Program FilesMagicTune PremiumGammaTray.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
uPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDrives = dword:0
mPolicies-System: ConsentPromptBehaviorAdmin = dword:0
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: PromptOnSecureDesktop = dword:0
IE: &Експортиране към Microsoft Excel - C:PROGRA~2MICROS~1Office14EXCEL.EXE/3000
IE: &Изпрати към OneNote - C:PROGRA~2MICROS~1Office14ONBttnIE.dll/105
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:Program Files (x86)Microsoft OfficeOffice14ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:Program Files (x86)Microsoft OfficeOffice14ONBttnIELinkedNotes.dll
TCP: Interfaces{CC803806-EE1E-41A7-B406-61C703CE1AA2} : DHCPNameServer = 77.71.105.254 10.159.185.1
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:Program Files (x86)Common FilesMicrosoft SharedOFFICE14MSOXMLMF.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:Program Files (x86)Common FilesSkypeSkype4COM.dll
SSODL: WebCheck - <orphaned>
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:Program Files (x86)GoogleChromeApplication31.0.1650.63Installerchrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
x64-BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre7binssv.dll
x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:Program FilesMicrosoft OfficeOffice14URLREDIR.DLL
x64-BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre7binjp2ssv.dll
x64-Run: [igfxTray] C:WindowsSystem32igfxtray.exe
x64-Run: [HotKeysCmds] C:WindowsSystem32hkcmd.exe
x64-Run: [Persistence] C:WindowsSystem32igfxpers.exe
x64-Run: [RTHDVCPL] C:Program FilesRealtekAudioHDARAVCpl64.exe -s
x64-Run: [VIRTU_MVP_AUTORUN] C:Program Files (x86)Lucidlogix TechnologiesVIRTU MVPMVPControlPanel.Exe /hide
x64-Run: [THXCfg64] C:WindowsSystem32RunDLL32.exe C:WindowsSystem32THXCfg64.dll,RunDLLEntry THXCfg64
x64-Run: [mylbx] C:Program FilesMy Lockboxmylbx.exe /a
x64-Run: [AdobeAAMUpdater-1.0] "C:Program Files (x86)Common FilesAdobeOOBEPDAppUWAUpdaterStartupUtility.exe"
x64-Run: [cFosSpeed] C:Program FilesASRockXFast LANcFosSpeed.exe
x64-Run: [egui] "C:Program FilesESETESET Smart Securityegui.exe" /hide /waitservice
x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:Program FilesMicrosoft OfficeOffice14ONBttnIE.dll
x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:Program FilesMicrosoft OfficeOffice14ONBttnIELinkedNotes.dll
x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:Program FilesCommon FilesMicrosoft SharedOFFICE14MSOXMLMF.DLL
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-Notify: igfxcui - igfxdev.dll
x64-SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - C:UsersHsSAppDataRoamingMozillaFirefoxProfiles0p4n84i7.default
FF - prefs.js: browser.startup.homepage - hxxps://www.google.bg/
FF - plugin: C:PROGRA~1MICROS~2Office14NPAUTHZ.DLL
FF - plugin: C:Program Files (x86)Common FilesAdobeOOBEPDAppCCMUtilitiesnpAdobeAAMDetect32.dll
FF - plugin: C:Program Files (x86)Common FilesAdobeOOBEPDAppCCMUtilitiesnpAdobeAAMDetect64.dll
FF - plugin: C:Program FilesJavajre7bindtpluginnpdeployJava1.dll
FF - plugin: C:Program FilesJavajre7binplugin2npjp2.dll
FF - plugin: C:WindowsSystem32MacromedFlashNPSWF64_11_9_900_170.dll
.
============= SERVICES / DRIVERS ===============
.
R0 asahci64;asahci64;C:WindowsSystem32driversasahci64.sys [2011-9-21 49760]
R0 AsrRamDisk;AsrRamDisk;C:WindowsSystem32driversAsrRamDisk.sys [2013-4-24 31016]
R0 BMLoad;Bytemobile Boot Time Load Driver;C:WindowsSystem32driversBMLoad.sys [2013-5-7 16512]
R0 epfwwfp;epfwwfp;C:WindowsSystem32driversepfwwfp.sys [2013-9-17 62136]
R0 FSProFilter;FSPro File Filter;C:WindowsSystem32driversFSPFltd.sys [2013-6-1 54848]
R0 iusb3hcs;Intel® USB 3.0 Host Controller Switch Driver;C:WindowsSystem32driversiusb3hcs.sys [2013-4-24 16152]
R1 AsrAppCharger;AsrAppCharger;C:WindowsSystem32driversAsrAppCharger.sys [2013-4-24 17192]
R1 eamonm;eamonm;C:WindowsSystem32driverseamonm.sys [2013-9-17 239320]
R1 EpfwLWF;Epfw NDIS LightWeight Filter;C:WindowsSystem32driversEpfwLWF.sys [2013-9-17 44120]
R2 AdobeARMservice;Adobe Acrobat Update Service;C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe [2013-5-11 65640]
R2 AMD External Events Utility;AMD External Events Utility;C:WindowsSystem32atiesrxx.exe [2013-10-8 239616]
R2 Autodesk Content Service;Autodesk Content Service;C:Program Files (x86)AutodeskContent ServiceConnect.Service.ContentService.exe [2011-2-2 18656]
R2 ekrn;ESET Service;C:Program FilesESETESET Smart Securityx86ekrn.exe [2013-9-12 1337752]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;C:Program Files (x86)LogMeIn Hamachihamachi-2.exe [2013-11-29 2210640]
R2 HTCMonitorService;HTCMonitorService;C:Program Files (x86)HTCHTC Sync ManagerHSMServiceEntry.exe [2013-1-29 87368]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe [2013-4-24 13592]
R2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface;C:Program FilesInteliCLS ClientHeciServer.exe [2012-2-2 628448]
R2 Intel® ME Service;Intel® ME Service;C:Program Files (x86)IntelIntel® Management Engine ComponentsFWServiceIntelMeFWService.exe [2013-4-24 121344]
R2 ISCTAgent;ISCT Always Updated Agent;C:Program FilesIntelIntel® Smart Connect Technology AgentiSCTAgent.exe [2012-2-9 133632]
R2 jhi_service;Intel® Dynamic Application Loader Host Interface Service;C:Program Files (x86)IntelIntel® Management Engine ComponentsDALJhi_service.exe [2013-4-24 161560]
R2 LMIGuardianSvc;LMIGuardianSvc;C:Program Files (x86)LogMeIn HamachiLMIGuardianSvc.exe [2013-10-11 377104]
R2 Modem Device Helper;Modem Device Helper;C:Program Files (x86)T-MobileConnection ManagerBackgroundServiceServiceManager.exe -start --> C:Program Files (x86)T-MobileConnection ManagerBackgroundServiceServiceManager.exe -start [?]
R2 PassThru Service;Internet Pass-Through Service;C:Program Files (x86)HTCInternet Pass-ThroughPassThruSvr.exe [2012-12-7 167424]
R2 PDF Architect Helper Service;PDF Architect Helper Service;C:Program Files (x86)PDF ArchitectHelperService.exe [2013-4-8 1320496]
R2 PDF Architect Service;PDF Architect Service;C:Program Files (x86)PDF ArchitectConversionService.exe [2013-4-8 799280]
R2 RadeonPro Support Service;RadeonPro Support Service;C:Program Files (x86)RadeonProRadeonProSupport.exe [2013-11-12 20608]
R2 SplashtopRemoteService;Splashtop® Remote Service;C:Program Files (x86)SplashtopSplashtop RemoteServerSRService.exe [2013-6-28 789856]
R2 SSUService;Splashtop Software Updater Service;C:Program Files (x86)SplashtopSplashtop Software UpdaterSSUService.exe [2013-8-7 609056]
R2 TeamViewer8;TeamViewer 8;C:Program Files (x86)TeamViewerVersion8TeamViewer_Service.exe [2013-10-4 5087584]
R2 UNS;Intel® Management and Security Application User Notification Service;C:Program Files (x86)IntelIntel® Management Engine ComponentsUNSUNS.exe [2013-4-24 363800]
R3 amdkmdag;amdkmdag;C:WindowsSystem32driversatikmdag.sys [2013-10-8 12534784]
R3 amdkmdap;amdkmdap;C:WindowsSystem32driversatikmpag.sys [2013-10-8 619008]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:WindowsSystem32driversAtihdW76.sys [2013-7-5 96256]
R3 ikbevent;Intel Upper keyboard Class Filter Driver;C:WindowsSystem32driversikbevent.sys [2012-2-9 25536]
R3 imsevent;Intel Upper Mouse Class Filter Driver;C:WindowsSystem32driversimsevent.sys [2012-2-9 25536]
R3 IntcDAud;Intel® Display Audio;C:WindowsSystem32driversIntcDAud.sys [2013-4-24 331264]
R3 ISCT;Intel® Smart Connect Technology Device Driver;C:WindowsSystem32driversISCTD64.sys [2012-2-9 44992]
R3 iusb3hub;Intel® USB 3.0 Hub Driver;C:WindowsSystem32driversiusb3hub.sys [2013-4-24 356120]
R3 iusb3xhc;Intel® USB 3.0 eXtensible Host Controller Driver;C:WindowsSystem32driversiusb3xhc.sys [2013-4-24 787736]
R3 MBfilt;MBfilt;C:WindowsSystem32driversMBfilt64.sys [2013-4-24 32344]
R3 MEIx64;Intel® Management Engine Interface ;C:WindowsSystem32driversHECIx64.sys [2013-4-24 60184]
R3 osppsvc;Office Software Protection Platform;C:Program FilesCommon FilesMicrosoft SharedOfficeSoftwareProtectionPlatformOSPPSVC.EXE [2010-1-9 4925184]
R3 RTL8167;Realtek 8167 NT Driver;C:WindowsSystem32driversRt64win7.sys [2013-4-24 565352]
R3 VirtuWDDM;VirtuWDDM;C:WindowsSystem32driversVirtuWDDM.sys [2013-4-24 66336]
R3 WPRO_41_2001;WinPcap Packet Driver (WPRO_41_2001);C:WindowsSystem32driversWPRO_41_2001.sys [2013-4-24 34752]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe [2013-9-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:WindowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe [2013-9-11 124088]
S2 gupdate;Услуга на Google Актуализация (gupdate);C:Program Files (x86)GoogleUpdateGoogleUpdate.exe [2013-12-28 116648]
S2 SkypeUpdate;Skype Updater;C:Program Files (x86)SkypeUpdaterUpdater.exe [2013-9-5 171680]
S2 StarWindServiceAE;StarWind AE Service;C:Program Files (x86)Alcohol SoftAlcohol 120StarWindStarWindServiceAE.exe [2007-5-28 275968]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:WindowsSysWOW64MacromedFlashFlashPlayerUpdateService.exe [2013-4-24 257416]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;C:WindowsSystem32driversssadadb.sys [2013-4-24 38080]
S3 cphs;Intel® Content Protection HECI Service;C:WindowsSysWOW64IntelCpHeciSvc.exe [2013-4-24 274200]
S3 dmvsc;dmvsc;C:WindowsSystem32driversdmvsc.sys [2011-4-12 71168]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService64.exe [2013-10-24 1431888]
S3 gupdatem;Услуга на Google Актуализация (gupdatem);C:Program Files (x86)GoogleUpdateGoogleUpdate.exe [2013-12-28 116648]
S3 HTCAND64;HTC Device Driver;C:WindowsSystem32driversANDROIDUSB.sys [2009-11-2 33736]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:WindowsSystem32ieetwcollector.exe [2014-1-4 111616]
S3 jrdusbser;Mobile Connector Device for Legacy Serial Communication;C:WindowsSystem32driversjrdusbser.sys [2013-5-7 119680]
S3 LVRS64;Logitech RightSound Filter Driver;C:WindowsSystem32driverslvrs64.sys [2012-9-21 351520]
S3 LVUVC64;Logitech HD Webcam C270(UVC);C:WindowsSystem32driverslvuvc64.sys [2012-9-21 4763680]
S3 MozillaMaintenance;Mozilla Maintenance Service;C:Program Files (x86)Mozilla Maintenance Servicemaintenanceservice.exe [2013-9-29 119408]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:WindowsSystem32driversrdpvideominiport.sys [2010-11-21 20992]
S3 Revoflt;Revoflt;C:WindowsSystem32driversrevoflt.sys [2013-12-30 31800]
S3 SamsungMonitorFirmware;SamsungMonitorFirmware;C:WindowsSystem32driversMFWCtwl.sys [2013-8-12 21360]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);C:WindowsSystem32driversssadbus.sys [2013-4-24 169288]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);C:WindowsSystem32driversssadmdfl.sys [2013-4-24 21320]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;C:WindowsSystem32driversssadmdm.sys [2013-4-24 188232]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);C:WindowsSystem32driversssadserd.sys [2013-4-24 158024]
S3 SwitchBoard;Adobe SwitchBoard;C:Program Files (x86)Common FilesAdobeSwitchBoardSwitchBoard.exe [2010-2-19 517096]
S3 Synth3dVsc;Synth3dVsc;C:WindowsSystem32driversSynth3dVsc.sys [2011-4-12 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver;C:WindowsSystem32driversterminpt.sys [2011-4-12 34816]
S3 TsUsbFlt;TsUsbFlt;C:WindowsSystem32driversTsUsbFlt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:WindowsSystem32driversTsUsbGD.sys [2010-11-21 31232]
S3 tsusbhub;tsusbhub;C:WindowsSystem32driverstsusbhub.sys [2011-4-12 117248]
S3 WatAdminSvc;Windows Activation Technologies Service;C:WindowsSystem32WatWatAdminSvc.exe [2013-4-26 1255736]
.
=============== File Associations ===============
.
FileExt: .scr: AutoCADScriptFile=C:WindowsSystem32notepad.exe "%1"
.
=============== Created Last 30 ================
.
2014-01-14 07:59:07  94656  ----a-w-  C:WindowsSystem32WPRO_41_2001woem.tmp
2014-01-05 15:59:56  --------  d-----w-  C:UsersHsSAppDataRoamingMPC-HC
2014-01-05 15:54:48  --------  d-----w-  C:Program FilesMPC-HC
2014-01-04 20:20:58  --------  d-----w-  C:Program FilesCyberfox
2014-01-04 20:11:38  --------  d-----w-  C:WindowsMigration
2014-01-04 20:07:57  99840  ----a-w-  C:WindowsSystem32driversusbccgp.sys
2014-01-04 20:07:57  52736  ----a-w-  C:WindowsSystem32driversusbehci.sys
2014-01-04 20:07:56  7808  ----a-w-  C:WindowsSystem32driversusbd.sys
2014-01-04 20:07:56  343040  ----a-w-  C:WindowsSystem32driversusbhub.sys
2014-01-04 20:07:56  325120  ----a-w-  C:WindowsSystem32driversusbport.sys
2014-01-04 20:07:56  30720  ----a-w-  C:WindowsSystem32driversusbuhci.sys
2014-01-04 20:07:56  25600  ----a-w-  C:WindowsSystem32driversusbohci.sys
2014-01-04 20:04:58  10315576  ----a-w-  C:ProgramDataMicrosoftWindows DefenderDefinition Updates{6D5017CE-9103-4952-AA66-A055A4CCEC13}mpengine.dll
2014-01-04 17:34:49  --------  d-----w-  C:UsersHsSAppDataLocalLogMeIn Hamachi
2014-01-04 17:34:49  --------  d-----w-  C:UsersHsSAppDataLocalLogMeIn
2014-01-04 17:34:49  --------  d-----w-  C:ProgramDataLogMeIn
2014-01-04 17:34:21  --------  d-----w-  C:Program Files (x86)LogMeIn Hamachi
2014-01-01 22:41:46  --------  d-----w-  C:UsersHsSAppDataRoamingIrfanView
2014-01-01 22:41:44  --------  d-----w-  C:Program Files (x86)IrfanView
2014-01-01 19:06:50  --------  d-----w-  C:UsersHsSAppDataRoamingESET
2014-01-01 19:06:50  --------  d-----w-  C:UsersHsSAppDataLocalESET
2014-01-01 19:05:34  --------  d-----w-  C:Program FilesESET
2014-01-01 12:20:15  --------  d-----w-  C:UsersHsSVirtualBox VMs
2014-01-01 12:14:01  --------  d-----w-  C:UsersHsS.VirtualBox
2014-01-01 12:13:13  237840  ----a-w-  C:WindowsSystem32driversVBoxDrv.sys
2014-01-01 12:12:43  120080  ----a-w-  C:WindowsSystem32driversVBoxUSBMon.sys
2014-01-01 12:12:31  --------  d-----w-  C:Program FilesOracle
2013-12-30 20:15:15  --------  d-----w-  C:UsersHsSAppDataLocalVS Revo Group
2013-12-30 20:15:07  31800  ----a-w-  C:WindowsSystem32driversrevoflt.sys
2013-12-30 20:15:07  --------  d-----w-  C:ProgramDataVS Revo Group
2013-12-30 20:15:05  --------  d-----w-  C:Program FilesVS Revo Group
2013-12-28 20:18:36  167424  ----a-w-  C:Program FilesWindows Media Playerwmplayer.exe
2013-12-28 20:18:36  164864  ----a-w-  C:Program Files (x86)Windows Media Playerwmplayer.exe
2013-12-28 20:18:35  12625920  ----a-w-  C:WindowsSystem32wmploc.DLL
2013-12-28 20:18:35  12625408  ----a-w-  C:WindowsSysWow64wmploc.DLL
2013-12-28 20:04:33  --------  d-----w-  C:WindowsSystem32MRT
2013-12-28 20:00:59  1168384  ----a-w-  C:WindowsSysWow64crypt32.dll
2013-12-28 19:58:05  859648  ----a-w-  C:WindowsSystem32IKEEXT.DLL
2013-12-28 19:58:05  830464  ----a-w-  C:WindowsSystem32nshwfp.dll
2013-12-28 19:58:05  324096  ----a-w-  C:WindowsSystem32FWPUCLNT.DLL
2013-12-28 19:58:05  216576  ----a-w-  C:WindowsSysWow64FWPUCLNT.DLL
2013-12-28 19:58:04  656896  ----a-w-  C:WindowsSysWow64nshwfp.dll
2013-12-27 17:41:37  --------  d-----w-  C:UsersHsSAppDataRoamingAIMP3
2013-12-27 17:41:35  --------  d-----w-  C:Program Files (x86)AIMP3
2013-12-23 21:47:12  --------  d-----w-  C:UsersHsSAppDataRoamingGlarysoft Giveaway
2013-12-23 21:47:03  --------  d-----w-  C:UsersHsSAppDataRoamingTotal Media Converter
2013-12-23 21:46:58  --------  d-----w-  C:Program Files (x86)Aneesoft
2013-12-23 06:45:20  --------  d-----w-  C:UsersHsSAppDataLocalFileTypeAssistant
2013-12-23 06:45:18  --------  d-----w-  C:Program Files (x86)File Type Assistant
2013-12-23 06:45:07  --------  d-----w-  C:Program Files (x86)FreeFileViewer
2013-12-22 13:18:15  --------  d-----w-  C:ProgramDataPanda Security
2013-12-22 13:18:12  --------  d-----w-  C:Program Files (x86)Panda USB Vaccine
2013-12-19 22:13:11  --------  d-----w-  C:UsersHsSAppDataRoamingHD Tune Pro
2013-12-19 22:13:06  --------  d-----w-  C:WindowsXSxS
2013-12-19 22:13:06  --------  d-----w-  C:Program Files (x86)Xenocode
2013-12-18 18:01:59  --------  d-----w-  C:Program Files (x86)GPU-Z
2013-12-17 18:49:51  --------  d-----w-  C:UsersHsSAppDataLocalDriverToolkit
2013-12-17 18:49:48  --------  d-----w-  C:Program Files (x86)DriverToolkit
2013-12-16 20:22:52  --------  d-----w-  C:UsersHsSAppDataRoamingTranscend Elite
.
==================== Find3M  ====================
.
2014-01-14 07:59:09  34752  ----a-w-  C:WindowsSystem32driversWPRO_41_2001.sys
2013-12-11 18:30:48  71048  ----a-w-  C:WindowsSysWow64FlashPlayerCPLApp.cpl
2013-12-11 18:30:48  692616  ----a-w-  C:WindowsSysWow64FlashPlayerApp.exe
2013-11-30 22:47:03  231376  ----a-w-  C:WindowsSystem32driverstruecrypt.sys
2013-11-26 10:25:52  267936  ------w-  C:WindowsSystem32MpSigStub.exe
2013-11-26 10:19:07  2724864  ----a-w-  C:WindowsSystem32mshtml.tlb
2013-11-26 10:18:23  4096  ----a-w-  C:WindowsSystem32ieetwcollectorres.dll
2013-11-26 09:48:07  66048  ----a-w-  C:WindowsSystem32iesetup.dll
2013-11-26 09:46:25  48640  ----a-w-  C:WindowsSystem32ieetwproxystub.dll
2013-11-26 09:23:02  2724864  ----a-w-  C:WindowsSysWow64mshtml.tlb
2013-11-26 09:18:39  139264  ----a-w-  C:WindowsSystem32ieUnatt.exe
2013-11-26 09:18:09  111616  ----a-w-  C:WindowsSystem32ieetwcollector.exe
2013-11-26 09:16:57  708608  ----a-w-  C:WindowsSystem32jscript9diag.dll
2013-11-26 08:35:02  5769216  ----a-w-  C:WindowsSystem32jscript9.dll
2013-11-26 08:28:16  553472  ----a-w-  C:WindowsSysWow64jscript9diag.dll
2013-11-26 08:16:12  4243968  ----a-w-  C:WindowsSysWow64jscript9.dll
2013-11-26 08:02:16  1995264  ----a-w-  C:WindowsSystem32inetcpl.cpl
2013-11-26 07:32:06  1928192  ----a-w-  C:WindowsSysWow64inetcpl.cpl
2013-11-26 07:07:57  2334208  ----a-w-  C:WindowsSystem32wininet.dll
2013-11-26 06:33:33  1820160  ----a-w-  C:WindowsSysWow64wininet.dll
2013-11-23 18:26:20  417792  ----a-w-  C:WindowsSysWow64WMPhoto.dll
2013-11-23 17:47:34  465920  ----a-w-  C:WindowsSystem32WMPhoto.dll
2013-11-12 02:23:09  2048  ----a-w-  C:WindowsSystem32tzres.dll
2013-11-12 02:07:29  2048  ----a-w-  C:WindowsSysWow64tzres.dll
2013-10-30 02:32:01  335360  ----a-w-  C:WindowsSystem32msieftp.dll
2013-10-30 02:19:52  301568  ----a-w-  C:WindowsSysWow64msieftp.dll
2013-10-30 01:24:31  3155968  ----a-w-  C:WindowsSystem32win32k.sys
2013-10-20 14:53:31  108968  ----a-w-  C:WindowsSystem32WindowsAccessBridge-64.dll
2013-10-19 02:18:57  81408  ----a-w-  C:WindowsSystem32imagehlp.dll
2013-10-19 01:36:59  159232  ----a-w-  C:WindowsSysWow64imagehlp.dll
.
============= FINISH: 17:29:00,98 ===============

 

Здравейте..!
 
Моля, изтеглете и стартирайте програмата AdwCleaner(by Xplode):

• [*]Затворете всички стартирани програми и браузъри [*]Кликнете два пъти върху

adwcleaner.exe за да стартирате инструмента. [*]Натиснете OK, за да потвърдите, че всички стартирани програми ще бъдат затворени. [*]Маркирайте Clean [*]Вашият компютър ще се рестартира автоматично. Текстовия файл ще се отвори след рестарта. [*]Моля, да публикувате съдържанието на този лог в отговора си [*]Можете да намерите лога,който автоматично се запомня тук C:AdwCleaner[s0].txt

Моля, изтеглете Junkware Removal Tool (by Thisisu ) и запазете на вашия десктоп.

• [*]Спрете временно работата на защитните програми. [*]Стартирайте инструмента

JRT.exe [*]Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата. [*]Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши. [*]Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt). [*]Моля копирайте съдържанието на лог файла в следващия си пост.

 

  Изтеглете Malwarebytes' Anti-Malware или от тук (не забравяйте да обновите програмата с нови дефиниции)
* Кликнете два пъти върху mbam-setup.exe, за да инсталирате програмата.
* Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish.
* Ако има намерени обновявания, тя ще ги изтегли и инсталира.
* Стартирайте програмата и изберете "Perform Full Scan", след това кликнете на Scan.
* Сканирането ще отнеме малко време, затова моля да бъдете търпеливи.
* Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата
* Уверете се, че на всички редове има отметки, и кликнете на Remove Selected.
* Когато всичко бъде премахнато, в Notepad ще бъде отворен лог.
Копирайте този лог и го публикувайте в следващия си коментар по темата.
Забележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран
 
 

 

Моля, изтеглете Malwarebytes Anti-Rootkit и запазете архива на десктопа.

• [*]Tъй като е официална бета версия, отговорността за използването на инструмента е изцяло ваша. (добре е да направите бекъп на ценните документи за всеки случай). [*]Разархивирайте архива в папка на десктопа и стартирайте файла

mbar.exe. [*]Натиснете Next и после натиснете Update. [*]Натиснете Next и после натиснете Scan. [*]Изчакайте проверката да завърши и натиснете бутона Cleanup за да премахнете всички намерени паразити (ако има такива). [*]Ако бъдете попитан да рестартирате, съгласете се. [*]Два файла (mbar-log-YYYY-MM-DD, system-log.txt) ще бъдат създадени в папката, където сте разархивирали програмата. [*]Публикувайте съдържанието на тези файлове в следващия си коментар.

Здравейте! Първо искам много да Ви благодаря, че се заехте да ми помогнете! Ето ги и лог файловете.

 

AdwCleaner

 

# AdwCleaner v3.017 - Report created 16/01/2014 at 14:27:12
# Updated 12/01/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : HsS - HSS-PC
# Running from : C:UsersHsSDownloadsadwcleaner.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : splashtopremoteservice
Service Deleted : SSUService

***** [ Files / Folders ] *****

Folder Deleted : C:ProgramDataapn
Folder Deleted : C:ProgramDataeSafe
Folder Deleted : C:ProgramDataSplashtop
Folder Deleted : C:ProgramDataMicrosoftWindowsStart MenuProgramsmyfree codec
Folder Deleted : C:Program Files (x86)myfree codec
Folder Deleted : C:Program Files (x86)RegClean Pro
Folder Deleted : C:Program Files (x86)SimilarSites
[!] Folder Deleted : C:Program Files (x86)Splashtop
Folder Deleted : C:UsersHsSAppDataLocalfiletypeassistant
Folder Deleted : C:UsersHsSAppDataLocalSplashtop
Folder Deleted : C:UsersHsSAppDataRoamingpdfforge
Folder Deleted : C:UsersHsSAppDataRoamingSimilarSites
Folder Deleted : C:UsersHsSAppDataRoamingSystweak
File Deleted : C:WindowsSystem32roboot64.exe

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLMSOFTWAREClassesAppIDsecman.DLL
Key Deleted : HKLMSOFTWAREClassesAppID{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Deleted : HKLMSOFTWAREClassesCLSID{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Deleted : HKLMSOFTWAREClassesCLSID{25A3A431-30BB-47C8-AD6A-E1063801134F}
Key Deleted : HKLMSOFTWAREClassesCLSID{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Key Deleted : HKLMSOFTWAREClassesCLSID{64697678-0000-0010-8000-00AA00389B71}
Key Deleted : HKLMSOFTWAREClassesCLSID{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLMSOFTWAREClassesCLSID{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted : HKLMSOFTWAREClassesCLSID{FD501041-8EBE-11CE-8183-00AA00577DA2}
Key Deleted : HKLMSOFTWAREClassesInterface{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLMSOFTWAREClassesInterface{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Deleted : HKCUSoftwareMicrosoftWindowsCurrentVersionExtStats{25A3A431-30BB-47C8-AD6A-E1063801134F}
Key Deleted : HKCUSoftwareMicrosoftWindowsCurrentVersionExtSettings{25A3A431-30BB-47C8-AD6A-E1063801134F}
Value Deleted : HKLMSOFTWAREMicrosoftInternet ExplorerToolbar [{25A3A431-30BB-47C8-AD6A-E1063801134F}]
Key Deleted : HKCUSoftwareAPN PIP
Key Deleted : HKCUSoftwareMyfree Codec
Key Deleted : HKCUSoftwareSplashtop Inc.
Key Deleted : HKLMSoftwareInstallIQ
Key Deleted : HKLMSoftwareMyfree Codec
Key Deleted : HKLMSoftwarePIP
Key Deleted : HKLMSoftwareSplashtop Inc.
Key Deleted : HKCUSoftwareMicrosoftWindowsCurrentVersionUninstallMyFreeCodec
Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionUninstall{B7C5EA94-B96A-41F5-BE95-25D78B486678}
Key Deleted : HKLMSOFTWAREMicrosoftWindowsCurrentVersionUninstallSplashtop Software Updater
Key Deleted : HKLMSoftwareClassesInstallerFeatures49AE5C7BA69B5F14EB59527DB8846687
Key Deleted : HKLMSoftwareClassesInstallerProducts49AE5C7BA69B5F14EB59527DB8846687

***** [ Browsers ] *****

- Internet Explorer v11.0.9600.16428


- Mozilla Firefox v26.0 (bg)

[ File : C:UsersHsSAppDataRoamingMozillaFirefoxProfiles0p4n84i7.defaultprefs.js ]


[ File : C:UsersAdministratorAppDataRoamingMozillaFirefoxProfiles1vmgnkkp.defaultprefs.js ]


- Google Chrome v31.0.1650.63

[ File : C:UsersHsSAppDataLocalGoogleChromeUser DataDefaultpreferences ]


*************************

AdwCleaner[R0].txt - [3808 octets] - [16/01/2014 14:26:09]
AdwCleaner[s0].txt - [3708 octets] - [16/01/2014 14:27:12]

########## EOF - C:AdwCleanerAdwCleaner[s0].txt - [3768 octets] ##########
 

 

 

JRT

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 7 Ultimate x64
Ran by HsS on зҐвў 16.01.2014 Ј. at 14:42:58,56
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:UsersHsSappdatalocalfiletypeassistant"



~~~ FireFox

Emptied folder: C:UsersHsSAppDataRoamingmozillafirefoxprofiles0p4n84i7.defaultminidumps [40 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on зҐвў 16.01.2014 Ј. at 14:48:39,55
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

Malwarebytes Anti-Malware

 

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Версия на базата от данни: v2014.01.16.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
HsS :: HSS-PC [администратор]

16.1.2014 г. 14:53:59 ч.
mbam-log-2014-01-16 (14-53-59).txt

Тип сканиране: Пълно сканиране (C:|D:|)
Включени опции за сканиране: Памет | Автоматично зареждане | Системен регистър | Файлова система | Евристики/Допълнителни | Евристики/Shuriken | PUP | PUM
Изключени опции за сканиране: P2P
Сканирани обекти: 440770
Изминало време: 45 минута(и), 9 секунда(и)

Открити процеси в паметта: 0
(Не бяха открити зловредни обекти)

Открити модули в паметта: 0
(Не бяха открити зловредни обекти)

Открити ключове в системния регистър: 0
(Не бяха открити зловредни обекти)

Открити стойности в системния регистър: 0
(Не бяха открити зловредни обекти)

Открити информационни обекти в системния регистър: 0
(Не бяха открити зловредни обекти)

Открити папки: 0
(Не бяха открити зловредни обекти)

Открити файлове: 8
C:Program FilesVS Revo GroupRevo Uninstaller Prorevo.uninstaller.pro.3.x.(x64)-patch.exe (PUP.Riskware.Patcher) -> Не беше предприето действие.
D:1ProgramsLegalizaciq na WindowsaLegalizaciq na Windowsa.rar (Hacktool.Agent) -> Не беше предприето действие.
D:1ProgramsLegalizaciq na WindowsaLegalizaciq na WindowsaWindows Loader v2.1.4 (x86-x64)Windows Loader.exe (Hacktool.Agent) -> Не беше предприето действие.
D:1ProgramsUnlockerUnlocker1.9.1-x64.exe (PUP.Optional.BabylonToolBar.A) -> Не беше предприето действие.
D:DownloadsRevo Uninstaller Pro v3.0.8 (x32-x64)revo.uninstaller.pro.3.x.(x64)-patch.exe (PUP.Riskware.Patcher) -> Не беше предприето действие.
D:DownloadsRevo Uninstaller Pro v3.0.8 (x32-x64)revo.uninstaller.pro.3.x.(x86)-patch.exe (PUP.Riskware.Patcher) -> Не беше предприето действие.
C:UsersHsSDownloadsadobe.acrobat.xi.pro.patch-MPT-DeGun TPB 2012adobe.acrobat.xi.pro.patch-MPT-DeGun TPB 2012adobe.acrobat.xi.pro.patch-MPT.exe (CrackTool.Agent) -> Поставен под карантина и изтрит успешно.
D:1ProgramsMalwarebytes Anti-Malware 1.75.0.1300 Finalw00t.exe (Dont.Steal.Our.Software) -> Поставен под карантина и изтрит успешно.

(край)
 

 

Malwarebytes Anti-Rootkit

 

mbar-log-2014-01-16 (15-53-29)

 

Malwarebytes Anti-Rootkit BETA 1.07.0.1008
www.malwarebytes.org

Database version: v2014.01.16.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
HsS :: HSS-PC [administrator]

16.1.2014 г. 15:53:29 ч.
mbar-log-2014-01-16 (15-53-29).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Kernel memory modifications detected. Deep Anti-Rootkit Scan engaged.
Objects scanned: 277032
Time elapsed: 8 minute(s), 18 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
 

 

system-log

 

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1008

© Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 11.0.9600.16476

File system is: NTFS
Disk drives: C: DRIVE_FIXED, D: DRIVE_FIXED
CPU speed: 3.093000 GHz
Memory total: 8480280576, free: 5200908288

=======================================


---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1008

© Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 11.0.9600.16476

File system is: NTFS
Disk drives: C: DRIVE_FIXED, D: DRIVE_FIXED
CPU speed: 3.093000 GHz
Memory total: 8480280576, free: 5215182848

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1008

© Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 11.0.9600.16476

File system is: NTFS
Disk drives: C: DRIVE_FIXED, D: DRIVE_FIXED
CPU speed: 3.093000 GHz
Memory total: 8480280576, free: 5213999104

=======================================


---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1008

© Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 11.0.9600.16476

File system is: NTFS
Disk drives: C: DRIVE_FIXED, D: DRIVE_FIXED
CPU speed: 3.093000 GHz
Memory total: 8480280576, free: 5214994432

Downloaded database version: v2014.01.16.03
Downloaded database version: v2013.12.18.01
=======================================
Initializing...
------------ Kernel report ------------
01/16/2014 15:53:26
------------ Loaded modules -----------
SystemRootsystem32ntoskrnl.exe
SystemRootsystem32hal.dll
SystemRootsystem32kdcom.dll
SystemRootsystem32mcupdate_GenuineIntel.dll
SystemRootsystem32PSHED.dll
SystemRootsystem32CLFS.SYS
SystemRootsystem32CI.dll
SystemRootsystem32driversWdf01000.sys
SystemRootsystem32driversWDFLDR.SYS
SystemRootSystem32Driversspca.sys
SystemRootSystem32DriversWMILIB.SYS
SystemRootSystem32DriversSCSIPORT.SYS
SystemRootsystem32driversACPI.sys
SystemRootsystem32driversmsisadrv.sys
SystemRootsystem32driversvdrvroot.sys
SystemRootsystem32DRIVERSiusb3hcs.sys
SystemRootsystem32driverspci.sys
SystemRootSystem32driverspartmgr.sys
SystemRootsystem32driversvolmgr.sys
SystemRootSystem32driversvolmgrx.sys
SystemRootSystem32driversmountmgr.sys
SystemRootsystem32DRIVERSiaStor.sys
SystemRootsystem32driversatapi.sys
SystemRootsystem32driversataport.SYS
SystemRootsystem32driversmsahci.sys
SystemRootsystem32driversPCIIDEX.SYS
SystemRootsystem32DRIVERSasahci64.sys
SystemRootsystem32DRIVERSAsrRamDisk.sys
SystemRootsystem32DRIVERSstorport.sys
SystemRootsystem32driversamdxata.sys
SystemRootsystem32driversfltmgr.sys
SystemRootsystem32driversfileinfo.sys
SystemRootSystem32DriversFSPFltd.sys
SystemRootSystem32Driversmsrpc.sys
SystemRootSystem32Driversksecdd.sys
SystemRootSystem32DriversNtfs.sys
SystemRootSystem32Driverscng.sys
SystemRootSystem32driverspcw.sys
SystemRootSystem32DriversFs_Rec.sys
SystemRootsystem32driversndis.sys
SystemRootsystem32driversNETIO.SYS
SystemRootSystem32Driversksecpkg.sys
SystemRootSystem32driverstcpip.sys
SystemRootSystem32driversfwpkclnt.sys
SystemRootsystem32DRIVERSepfwwfp.sys
SystemRootsystem32driversvmstorfl.sys
SystemRootsystem32driversvolsnap.sys
SystemRootSystem32Driversspldr.sys
SystemRootSystem32driversrdyboost.sys
SystemRootSystem32Driversmup.sys
SystemRootSystem32drivershwpolicy.sys
SystemRootSystem32DRIVERSfvevol.sys
SystemRootsystem32driversdisk.sys
SystemRootsystem32driversCLASSPNP.SYS
SystemRootsystem32driversBMLoad.sys
SystemRootsystem32DRIVERScdrom.sys
SystemRootsystem32DRIVERSeamonm.sys
SystemRootSystem32DriversNull.SYS
SystemRootSystem32DriversBeep.SYS
SystemRootsystem32DRIVERSehdrv.sys
C:Program FilesESETESET Smart Securityem006_64.dat
C:Program FilesESETESET Smart Securityem018_64.dat
SystemRootSystem32driversvga.sys
SystemRootSystem32driversVIDEOPRT.SYS
SystemRootSystem32driverswatchdog.sys
SystemRootSystem32DRIVERSRDPCDD.sys
SystemRootsystem32driversrdpencdd.sys
SystemRootsystem32driversrdprefmp.sys
SystemRootSystem32DriversMsfs.SYS
SystemRootSystem32DriversNpfs.SYS
SystemRootsystem32DRIVERStdx.sys
SystemRootsystem32DRIVERSTDI.SYS
??C:Windowssystem32driverstcpipBM.sys
SystemRootsystem32driversafd.sys
SystemRootSystem32DRIVERSnetbt.sys
SystemRootsystem32driversws2ifsl.sys
SystemRootsystem32DRIVERSwfplwf.sys
SystemRootsystem32DRIVERSpacer.sys
SystemRootsystem32DRIVERScfosspeed6.sys
SystemRootsystem32DRIVERSEpfwLWF.sys
SystemRootsystem32DRIVERSnetbios.sys
SystemRootsystem32DRIVERSserial.sys
SystemRootsystem32DRIVERSwanarp.sys
SystemRootsystem32DRIVERSVBoxUSBMon.sys
SystemRootsystem32DRIVERSVBoxDrv.sys
SystemRootSystem32driverstruecrypt.sys
SystemRootsystem32DRIVERStermdd.sys
SystemRootsystem32DRIVERSrdbss.sys
SystemRootsystem32driversnsiproxy.sys
SystemRootsystem32DRIVERSmssmbios.sys
SystemRootSystem32driversdiscache.sys
SystemRootsystem32driverscsc.sys
SystemRootSystem32Driversdfsc.sys
SystemRootsystem32DRIVERSblbdrive.sys
SystemRootsystem32DRIVERSAsrAppCharger.sys
SystemRootsystem32DRIVERStunnel.sys
SystemRootsystem32DRIVERSVirtuWDDM.sys
SystemRootSystem32driversdxgkrnl.sys
SystemRootSystem32driversdxgmms1.sys
SystemRootsystem32DRIVERSatikmpag.sys
SystemRootsystem32DRIVERSatikmdag.sys
SystemRootsystem32DRIVERSHDAudBus.sys
SystemRootsystem32DRIVERSigdkmd64.sys
SystemRootsystem32DRIVERSiusb3xhc.sys
SystemRootsystem32DRIVERSUSBD.SYS
SystemRootsystem32DRIVERSHECIx64.sys
SystemRootsystem32driversusbehci.sys
SystemRootsystem32driversUSBPORT.SYS
SystemRootsystem32DRIVERSRt64win7.sys
SystemRootsystem32DRIVERSi8042prt.sys
SystemRootsystem32DRIVERSikbevent.sys
SystemRootsystem32DRIVERSkbdclass.sys
SystemRootsystem32DRIVERSserenum.sys
SystemRootSystem32Driversaifumgi5.SYS
SystemRootsystem32DRIVERSintelppm.sys
SystemRootsystem32DRIVERSISCTD64.sys
SystemRootsystem32DRIVERSCompositeBus.sys
SystemRootsystem32DRIVERSAgileVpn.sys
SystemRootsystem32DRIVERSrasl2tp.sys
SystemRootsystem32DRIVERSndistapi.sys
SystemRootsystem32DRIVERSndiswan.sys
SystemRootsystem32DRIVERSraspppoe.sys
SystemRootsystem32DRIVERSraspptp.sys
SystemRootsystem32DRIVERSrassstp.sys
SystemRootsystem32DRIVERShamachi.sys
SystemRootsystem32DRIVERSrdpbus.sys
SystemRootsystem32DRIVERSmouclass.sys
SystemRootsystem32DRIVERSVBoxNetFlt.sys
SystemRootsystem32DRIVERSswenum.sys
SystemRootsystem32DRIVERSks.sys
SystemRootsystem32DRIVERSumbus.sys
SystemRootsystem32DRIVERSusbhub.sys
SystemRootSystem32DriversNDProxy.SYS
SystemRootsystem32driversAtihdW76.sys
SystemRootsystem32driversportcls.sys
SystemRootsystem32driversdrmk.sys
SystemRootsystem32driversksthunk.sys
SystemRootsystem32DRIVERSiusb3hub.sys
SystemRootsystem32driversRTKVHD64.sys
SystemRootsystem32driversMBfilt64.sys
SystemRootsystem32DRIVERSIntcDAud.sys
SystemRootSystem32win32k.sys
SystemRootSystem32driversDxapi.sys
SystemRootSystem32Driverscrashdmp.sys
SystemRootSystem32Driversdump_iaStor.sys
SystemRootSystem32Driversdump_dumpfve.sys
SystemRootsystem32DRIVERSusbccgp.sys
SystemRootsystem32drivershidusb.sys
SystemRootsystem32driversHIDCLASS.SYS
SystemRootsystem32driversHIDPARSE.SYS
SystemRootsystem32DRIVERSkbdhid.sys
SystemRootsystem32DRIVERSmouhid.sys
SystemRootsystem32DRIVERSimsevent.sys
SystemRootsystem32DRIVERSmonitor.sys
SystemRootsystem32driversusbaudio.sys
SystemRootSystem32TSDDD.dll
SystemRootSystem32cdd.dll
SystemRootSystem32ATMFD.DLL
SystemRootsystem32driversluafv.sys
SystemRootsystem32DRIVERSepfw.sys
C:Program FilesESETESET Smart Securityem008_64.dat
SystemRootsystem32DRIVERSlltdio.sys
SystemRootsystem32DRIVERSrspndr.sys
SystemRootsystem32driversHTTP.sys
SystemRootsystem32DRIVERSbowser.sys
SystemRootSystem32driversmpsdrv.sys
SystemRootsystem32DRIVERSmrxsmb.sys
SystemRootsystem32DRIVERSmrxsmb10.sys
SystemRootsystem32DRIVERSmrxsmb20.sys
SystemRootsystem32driverspeauth.sys
SystemRootSystem32Driverssecdrv.SYS
SystemRootSystem32DRIVERSsrvnet.sys
SystemRootSystem32driverstcpipreg.sys
SystemRootSystem32DRIVERSsrv2.sys
SystemRootSystem32DRIVERSsrv.sys
SystemRootsystem32driversWPRO_41_2001.sys
SystemRootsystem32DRIVERSnwifi.sys
SystemRootsystem32DRIVERSndisuio.sys
??C:Windowssystem32driversmbamchameleon.sys
??C:Windowssystem32driversMBAMSwissArmy.sys
WindowsSystem32ntdll.dll
WindowsSystem32smss.exe
WindowsSystem32apisetschema.dll
WindowsSystem32autochk.exe
WindowsSystem32user32.dll
WindowsSystem32msctf.dll
WindowsSystem32shlwapi.dll
WindowsSystem32Wldap32.dll
WindowsSystem32shell32.dll
WindowsSystem32advapi32.dll
WindowsSystem32sechost.dll
WindowsSystem32ws2_32.dll
WindowsSystem32wininet.dll
WindowsSystem32clbcatq.dll
WindowsSystem32imm32.dll
WindowsSystem32nsi.dll
WindowsSystem32psapi.dll
WindowsSystem32urlmon.dll
WindowsSystem32normaliz.dll
WindowsSystem32gdi32.dll
WindowsSystem32setupapi.dll
WindowsSystem32kernel32.dll
WindowsSystem32ole32.dll
WindowsSystem32iertutil.dll
WindowsSystem32msvcrt.dll
WindowsSystem32oleaut32.dll
WindowsSystem32difxapi.dll
WindowsSystem32usp10.dll
WindowsSystem32comdlg32.dll
WindowsSystem32lpk.dll
WindowsSystem32imagehlp.dll
WindowsSystem32rpcrt4.dll
WindowsSystem32api-ms-win-downlevel-normaliz-l1-1-0.dll
WindowsSystem32KernelBase.dll
WindowsSystem32crypt32.dll
WindowsSystem32comctl32.dll
WindowsSystem32api-ms-win-downlevel-version-l1-1-0.dll
WindowsSystem32api-ms-win-downlevel-shlwapi-l1-1-0.dll
WindowsSystem32api-ms-win-downlevel-ole32-l1-1-0.dll
WindowsSystem32api-ms-win-downlevel-advapi32-l1-1-0.dll
WindowsSystem32devobj.dll
WindowsSystem32api-ms-win-downlevel-user32-l1-1-0.dll
WindowsSystem32wintrust.dll
WindowsSystem32cfgmgr32.dll
WindowsSystem32msasn1.dll
WindowsSysWOW64normaliz.dll
----------- End -----------
Done!
<<<1>>>
Upper Device Name: DeviceHarddisk0DR0
Upper Device Object: 0xfffffa8007c44060
Upper Device Driver Name: DriverDisk
Lower Device Name: DeviceIdeIAAStorageDevice-1
Lower Device Object: 0xfffffa80078dc050
Lower Device Driver Name: DriveriaStor
IRP handler 0 of DriveriaStor is hooked
IRP handler 2 of DriveriaStor is hooked
IRP handler 14 of DriveriaStor is hooked
IRP handler 15 of DriveriaStor is hooked
IRP handler 16 of DriveriaStor is hooked
IRP handler 22 of DriveriaStor is hooked
IRP handler 23 of DriveriaStor is hooked
IRP handler 27 of DriveriaStor is hooked
Unhooking enabled.
<<<1>>>
Upper Device Name: DeviceHarddisk0DR0
Upper Device Object: 0xfffffa8007c44060
Upper Device Driver Name: DriverDisk
Lower Device Name: DeviceIdeIAAStorageDevice-1
Lower Device Object: 0xfffffa80078dc050
Lower Device Driver Name: DriveriaStor
Driver name found: iaStor
Initialization returned 0x0
Load Function returned 0x0
<<<2>>>
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xfffffa8007c44060, DeviceName: DeviceHarddisk0DR0, DriverName: DriverDisk
--------- Disk Stack ------
DevicePointer: 0xfffffa8007c44b90, DeviceName: Unknown, DriverName: Driverpartmgr
DevicePointer: 0xfffffa8007c44060, DeviceName: DeviceHarddisk0DR0, DriverName: DriverDisk
DevicePointer: 0xfffffa80078d9400, DeviceName: Unknown, DriverName: DriverACPI
DevicePointer: 0xfffffa80078dc050, DeviceName: DeviceIdeIAAStorageDevice-1, DriverName: DriveriaStor
------------ End ----------
Alternate DeviceName: DeviceHarddisk0DR0, DriverName: DriverDisk
Upper DeviceData: 0xfffff8a0043df190, 0xfffffa8007c44060, 0xfffffa800d4c1090
Lower DeviceData: 0xfffff8a0108961c0, 0xfffffa80078dc050, 0xfffffa800d486730
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:WINDOWSSYSTEM32drivers...
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
File user open failed: C:WINDOWSSYSTEM32driverssptd.sys (0x00000020)
Done!
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: B730B72

Partition information:

  Partition 0 type is Primary (0x7)
  Partition is ACTIVE.
  Partition starts at LBA: 2048  Numsec = 204800
  Partition file system is NTFS
  Partition is bootable

  Partition 1 type is Primary (0x7)
  Partition is NOT ACTIVE.
  Partition starts at LBA: 206848  Numsec = 177844224

  Partition 2 type is Primary (0x7)
  Partition is NOT ACTIVE.
  Partition starts at LBA: 178051072  Numsec = 798720000

  Partition 3 type is Empty (0x0)
  Partition is NOT ACTIVE.
  Partition starts at LBA: 0  Numsec = 0

Disk Size: 500107862016 bytes
Sector size: 512 bytes

Scanning physical sectors of unpartitioned space on drive 0 (1-2047-976753168-976773168)...
Done!
Scan finished
=======================================


Removal queue found; removal started
Removing C:ProgramDataMalwarebytes' Anti-Malware (portable)MBR_0_i.mbam...
Removing C:ProgramDataMalwarebytes' Anti-Malware (portable)Bootstrap_0_0_2048_i.mbam...
Removing C:ProgramDataMalwarebytes' Anti-Malware (portable)MBR_0_r.mbam...
Removal finished
 

Редактирано 16 януари 201412 г. от HsS (преглед на промените)

• [*]Моля изтеглете

Farbar Recovery Scan Tool и го запазете на десктопа. [*]Стартирайте файла FRST.exe. [*]Програмата ще се стартира. Натиснете YES за да се съгласите с лицензионното споразумение. [*]Сложете всички отметки. [*]Натиснете бутона SCAN. [*]Ще се създадат два лог файл с името - FRST.txt и Addition.txt на десктопа. [*]Файлът FRST.txt копирайте в следващия си пост. Addition.txt прикачете в следващия си коментар (погледнете опцията Прикачени файлове, когато публикувате мнение).

FRST

Addition

 

Съжалявам, но системата не ми позволява да публикувам лог файла FRST, защото е прекалено дълъг. Като се опитах да ги прикача, ми изписа че и мястото за качване ми е изчерпано. Надявам се не е проблем, че съм ги качил другаде.

Редактирано 17 януари 201412 г. от HsS (преглед на промените)

Деинсталирайте по стандартния метод програмата File Type Assistant. 

Start-->Control Panel->Programs->Programs and Features

Изтеглете прикачения файл и го запазете там, където сте свалили FRST.exe => Стартирайте отново FRST.exe и натиснете бутона Fix веднъж и изчакайте.Ще се създаде нов лог файла FixLog.txt. Прикачете съдържанието му в следващия си коментар.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-01-2014 02Ran by HsS at 2014-01-17 17:57:11 Run:1Running from C:UsersHsSDesktopBoot Mode: Normal==============================================Content of fixlist:*****************startHKLM-x32...Run: [] - [x]Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No FileS3 catchme; ??C:ComboFixcatchme.sys [x]??C:ComboFixcatchme.sysTask: {581D96A5-08C8-44B9-95A5-23E78898A638} - System32TasksProgramUpdateCheck => C:Program Files (x86)File Type AssistantTSAssist.exe [2013-04-08] (Trusted Software ApS) <==== ATTENTIONTask: {B2ADF088-C0CF-4437-9F49-8EAAAAF78150} - System32TasksProgramRefresh-ATFST => C:Program Files (x86)File Type Assistanttsasetup.exe [2013-04-08] (   ) <==== ATTENTIONAlternateDataStreams: C:ProgramDataTEMP:1CE11B51end*****************HKLMSoftwareWOW6432NodeMicrosoftWindowsCurrentVersionRun => Value deleted successfully.HKCUSoftwareMicrosoftInternet ExplorerToolbarWebBrowser{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Value deleted successfully.HKCRCLSID{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Key not found.catchme => Service deleted successfully.HKLMSOFTWAREMicrosoftWindows NTCurrentVersionScheduleTaskCacheTasks{581D96A5-08C8-44B9-95A5-23E78898A638} => Key not found.C:WindowsSystem32TasksProgramUpdateCheck not found.HKLMSOFTWAREMicrosoftWindows NTCurrentVersionScheduleTaskCacheTreeProgramUpdateCheck => Key not found.HKLMSOFTWAREMicrosoftWindows NTCurrentVersionScheduleTaskCacheTasks{B2ADF088-C0CF-4437-9F49-8EAAAAF78150} => Key not found.C:WindowsSystem32TasksProgramRefresh-ATFST not found.HKLMSOFTWAREMicrosoftWindows NTCurrentVersionScheduleTaskCacheTreeProgramRefresh-ATFST => Key not found.C:ProgramDataTEMP => ":1CE11B51" ADS removed successfully.==== End of Fixlog ====

След процедурите до тук наблюдавате ли първоначалните проблеми..? Какво е състоянието на системата ви..?

Мисля, че вече ги няма тези реклами които изкачаха. Благодаря за помощта и отделеното време

Прекрасно..!
 
Изтеглете Delfix.exe и го стартирайте. Сложете отметка пред Remove disinfection tools => натиснете бутона Run Инструмента ще се самоизтрие след като приключи своята задача!

Изтрийте всичко друго което използвахме в лечението,останало след работата на Delfix.

 

Препоръчвам програмата Malwarebytes' Anti-Malware да остане на вашия компютър и периодично да сканирате системата си с нея (поне един -два пъти в седмицата),като не забравяйте да обновите дефинициите и преди всяко сканиране..!


Стартирайте PatchMyPC и инсталирайте всички ъпдейти, които инструмента ви предложи.Съветвам ви да деактивирате Java в своите уеб браузъри - Disable Java
Поддържайте антивирусната си програма и ако използвате друг antispyware софтуер с актуални ъпдейти и сканирайте с тях редовно

Ако нямате други въпроси и проблеми маркирам случая за "Решен"..! Пожелавам лек вечер и безопасен интернет..!

Много благодаря. Всичко е изпълнено. Други въпроси нямам. Лека вечер и всичко най-добро ви желая!