Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.
Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.
Добави Kaldata.com в предпочитани източници в Google

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

Mozilla Firefox - изскачащи реклами

The Good Old TIme
в Премахване на зловреден софтуер

Featured Replies

Здравейте на всички!

Започнаха да ми изскачат реклами навсякъде в сайтовете. Нямам представа защо - не си спомням да съм инсталирал някаква добавка. Може и да е станало така и да не съм го осъзнал или забелязал - ако съм инсталирам например някоя програма и към нея е имало някакви добави, които не съм знаел какво правят. Или някъде съм цъкнал. Като цяло нямам представа защо се получава така.

 

Ето под каква форма ми изскачат рекламите за които пиша:

 

- влизам например в някакъв сайт, Firefox-а започва да зарежда някакъв процес (върти се стрелката горе на браузър-а) и след това някои от думите в даденият сайт се оцветяват в синьо. И когато сложа курсора на мишката върху тях ми изскача реклама. Направих снимка:

 

Оградил съм думите с червено.

 

Знаете ли как мога да направя така, че да не излизат тези реклами?

 

 


Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-02-2015 01
Ran by LLL (administrator) on LLL-PC on 05-02-2015 15:18:41
Running from C:\Users\LLL\Desktop
Loaded Profiles: LLL & postgres (Available profiles: LLL & postgres)
Platform: Windows 7 Home Premium (X64) OS Language: English (United States)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgemca.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\bin\pg_ctl.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\bin\postgres.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
() C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\bin\postgres.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\bin\postgres.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
() C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(http://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE
() Q:\140066.enu\Office14\WINWORDC.EXE
() C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\OFFICEVIRT.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
() Q:\140066.ENU\OFFICE14\OffSpon.EXE
() C:\Users\LLL\Desktop\eclipse\eclipse.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4411952 2014-11-04] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2011-09-27] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2011-10-24] (Apple Inc.)
HKLM-x32\...\Run: [startCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-06-09] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [112856 2014-06-12] (VMware, Inc.)
HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)
HKU\S-1-5-21-1368315742-3110366289-1826635684-1000\...\Run: [speech Recognition] => C:\Windows\Speech\Common\sapisvr.exe [44544 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-1368315742-3110366289-1826635684-1000\...\Run: [Facebook Update] => C:\Users\LLL\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-04-15] (Facebook Inc.)
HKU\S-1-5-21-1368315742-3110366289-1826635684-1000\...\MountPoints2: {73b47e82-0669-11e3-9e64-806e6f6e6963} - E:\autorun.bat
ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: [s-1-5-21-1368315742-3110366289-1826635684-1000] => 78.130.201.110:8080
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKU\S-1-5-21-1368315742-3110366289-1826635684-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.default-search.net?sid=498&aid=162&itype=n&ver=15446&tm=611&src=hmp
HKU\S-1-5-21-1368315742-3110366289-1826635684-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://es.msn.com/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldmsd&cd=2XzuyEtN2Y1L1QzuyByE0FtDyC0DtA0BtDtD0CtBzyzy0B0DtN0D0Tzu0CyDzyyDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1Q1G1I1Q1H1B1Q&cr=355083003&ir=
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldmsd&cd=2XzuyEtN2Y1L1QzuyByE0FtDyC0DtA0BtDtD0CtBzyzy0B0DtN0D0Tzu0CyDzyyDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1Q1G1I1Q1H1B1Q&cr=355083003&ir=
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-search.net/search?sid=498&aid=162&itype=n&ver=15446&tm=611&src=ds&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldmsd&cd=2XzuyEtN2Y1L1QzuyByE0FtDyC0DtA0BtDtD0CtBzyzy0B0DtN0D0Tzu0CyDzyyDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1Q1G1I1Q1H1B1Q&cr=355083003&ir=
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldmsd&cd=2XzuyEtN2Y1L1QzuyByE0FtDyC0DtA0BtDtD0CtBzyzy0B0DtN0D0Tzu0CyDzyyDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1Q1G1I1Q1H1B1Q&cr=355083003&ir=
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-search.net/search?sid=498&aid=162&itype=n&ver=15446&tm=611&src=ds&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1368315742-3110366289-1826635684-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldmsd&cd=2XzuyEtN2Y1L1QzuyByE0FtDyC0DtA0BtDtD0CtBzyzy0B0DtN0D0Tzu0CyDzyyDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1Q1G1I1Q1H1B1Q&cr=355083003&ir=
SearchScopes: HKU\S-1-5-21-1368315742-3110366289-1826635684-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldmsd&cd=2XzuyEtN2Y1L1QzuyByE0FtDyC0DtA0BtDtD0CtBzyzy0B0DtN0D0Tzu0CyDzyyDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1Q1G1I1Q1H1B1Q&cr=355083003&ir=
SearchScopes: HKU\S-1-5-21-1368315742-3110366289-1826635684-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-search.net/search?sid=498&aid=162&itype=n&ver=15446&tm=611&src=ds&p={searchTerms}
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll (RealDownloader)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO-x32: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} ->  No File
BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\LLL\AppData\Roaming\Mozilla\Firefox\Profiles\h8in5mix.default-1377198977973
FF SearchEngineOrder.1: default-search.net
FF SelectedSearchEngine: default-search.net
FF Homepage: www.google.bg
FF Keyword.URL: hxxp://www.default-search.net/search?sid=498&aid=162&itype=n&ver=15446&tm=611&src=ds&p=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=17.0.9.17 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=17.0.9 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=17.0.9 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=17.0.9 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=17.0.9.17 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer Cloud)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1368315742-3110366289-1826635684-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\LLL\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll (RealPlayer Cloud)
FF Plugin ProgramFiles/Appdata: C:\Users\LLL\AppData\Roaming\mozilla\plugins\npatgpc.dll (Cisco WebEx LLC)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\911bg.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\default-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\diribg.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\pe-bg.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\portalbgdict.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml
FF Extension: Zoom It - C:\Users\LLL\AppData\Roaming\Mozilla\Firefox\Profiles\h8in5mix.default-1377198977973\Extensions\{c77a9524-c8d8-5f23-33ad-dcbb9c2dc250} [2015-02-05]
FF Extension: Adblock Plus - C:\Users\LLL\AppData\Roaming\Mozilla\Firefox\Profiles\h8in5mix.default-1377198977973\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-11-04]
FF HKLM-x32\...\Firefox\Extensions: [{53D8DD28-1C83-41F3-B171-C2ED5B3E5DE8}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-05-07]
FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

Chrome:
=======
CHR HomePage: Default -> https://mysearch.avg.com?cid={15AC1680-7745-4640-BBC8-93398618B446}&mid=d0b9e61039f847d389b39128c0570c4a-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=en&ds=AVG&coid=avgtbavg&pr=fr&d=2014-09-1310:08:09&v=3.2.0.15&pid=wtu&sg=&sap=hp
CHR StartupUrls: Default -> "https://www.google.bg/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\LLL\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.2.464\_platform_specific\win_x86\widevinecdmadapter.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\pdf.dll ()
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (ActiveTouch General Plugin Container) - C:\Users\LLL\AppData\Roaming\Mozilla\plugins\npatgpc.dll (Cisco WebEx LLC)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.510.13) - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll No File
CHR Plugin: (Java Platform SE 7 U51) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File
CHR Plugin: (RealPlayer G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer Cloud)
CHR Plugin: (RealPlayer Video Downloader  (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Video Downloader for HTML5  (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Video Downloader for PepperFlash  (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll No File
CHR Profile: C:\Users\LLL\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\LLL\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-08-23]
CHR Extension: (Google Drive) - C:\Users\LLL\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-23]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\LLL\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-22]
CHR Extension: (YouTube) - C:\Users\LLL\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-23]
CHR Extension: (Google Search) - C:\Users\LLL\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-23]
CHR Extension: (AdBlock) - C:\Users\LLL\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-09-08]
CHR Extension: (RealPlayer Downloader) - C:\Users\LLL\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2014-04-06]
CHR Extension: (Default-Search) - C:\Users\LLL\AppData\Local\Google\Chrome\User Data\Default\Extensions\iomphmdalfmaifjccmagmllnicjoghhk [2015-02-02]
CHR Extension: (Google Wallet) - C:\Users\LLL\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (Gmail) - C:\Users\LLL\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-23]
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2014-04-06]
CHR HKLM-x32\...\Chrome\Extension: [iomphmdalfmaifjccmagmllnicjoghhk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgfws; C:\Program Files (x86)\AVG\AVG2013\avgfws.exe [1432592 2014-11-04] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4942384 2014-10-17] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-11-20] (AVG Technologies CZ, s.r.o.)
S4 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S4 NetMsmqActivator; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139680 2012-07-08] (Microsoft Corporation) [File not signed]
S4 NetPipeActivator; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139680 2012-07-08] (Microsoft Corporation) [File not signed]
S4 NetTcpActivator; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139680 2012-07-08] (Microsoft Corporation) [File not signed]
S4 NetTcpPortSharing; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139680 2012-07-08] (Microsoft Corporation) [File not signed]
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39568 2014-04-06] ()
R2 RealPlayer Cloud Service; C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe [1141848 2014-05-07] (RealNetworks, Inc.)
R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [23552 2014-04-07] () [File not signed]
R2 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [14407384 2014-06-12] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [X]
R2 postgresql-x64-9.1; C:/Program Files (x86)/bin/pg_ctl.exe runservice -N "postgresql-x64-9.1" -D "C:/Program Files (x86)/data" -w [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW76.sys [94208 2013-09-24] (Advanced Micro Devices) [File not signed]
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [50296 2012-09-04] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [246072 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [71480 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [209720 2014-11-04] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [311608 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [116536 2013-07-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [240952 2014-10-17] (AVG Technologies CZ, s.r.o.)
S3 ezplay; C:\Windows\System32\Drivers\ezplay.sys [118400 2014-03-31] (VSO Software)
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [42224 2014-05-13] (Visicom Media Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35440 2014-05-13] (Visicom Media Inc.)
S3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI)
R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [765288 2011-10-01] (Microsoft Corporation)
R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [268648 2011-10-01] (Microsoft Corporation)
R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [25960 2011-10-01] (Microsoft Corporation)
R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [22376 2011-10-01] (Microsoft Corporation)
R0 vsock; C:\Windows\System32\drivers\vsock.sys [73296 2013-10-08] (VMware, Inc.)
R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys [33872 2013-02-22] (VMware, Inc.)
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-05 15:18 - 2015-02-05 15:19 - 00028548 _____ () C:\Users\LLL\Desktop\FRST.txt
2015-02-05 15:18 - 2015-02-05 15:18 - 02131968 _____ (Farbar) C:\Users\LLL\Desktop\FRST64.exe
2015-02-04 18:44 - 2015-02-04 19:30 - 00000216 _____ () C:\Users\LLL\Desktop\Project-Tracking-Tools-Homework.txt
2015-02-04 09:47 - 2015-02-05 12:44 - 00003354 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1368315742-3110366289-1826635684-1000
2015-02-03 16:45 - 2015-02-05 14:36 - 00000716 _____ () C:\Users\LLL\Desktop\Java Exams.txt
2015-02-03 12:02 - 2015-02-05 00:00 - 00000611 _____ () C:\Users\LLL\Desktop\regular expressions.txt
2015-02-02 14:03 - 2015-02-02 14:04 - 00000000 ____D () C:\Users\LLL\AppData\Roaming\systweak
2015-02-02 14:03 - 2014-12-08 17:01 - 00020216 _____ () C:\Windows\system32\roboot64.exe
2015-02-02 14:00 - 2015-02-02 14:00 - 00000000 ____D () C:\ProgramData\smdmf
2015-02-02 14:00 - 2015-02-02 14:00 - 00000000 ____D () C:\Program Files (x86)\Assets Manager
2015-01-31 09:09 - 2015-02-05 12:44 - 00003216 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1368315742-3110366289-1826635684-1000
2015-01-27 19:30 - 2015-01-27 19:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git
2015-01-27 19:29 - 2015-01-27 19:30 - 00000000 ____D () C:\Program Files (x86)\Git
2015-01-27 15:37 - 2015-01-27 15:42 - 00000000 ____D () C:\Users\LLL\AppData\Roaming\TortoiseSVN
2015-01-27 15:25 - 2015-01-27 15:25 - 00000000 ____D () C:\Users\LLL\AppData\Local\TortoiseSVN
2015-01-27 15:24 - 2015-01-27 21:17 - 00002336 _____ () C:\Users\LLL\Desktop\github ръководство.txt
2015-01-27 14:58 - 2015-02-05 12:43 - 00000000 ____D () C:\Users\LLL\AppData\Local\TSVNCache
2015-01-27 14:57 - 2015-01-27 14:57 - 00000000 ____D () C:\Users\LLL\AppData\Roaming\Subversion
2015-01-27 14:57 - 2015-01-27 14:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TortoiseSVN
2015-01-27 14:57 - 2015-01-27 14:57 - 00000000 ____D () C:\Program Files\TortoiseSVN
2015-01-27 14:57 - 2015-01-27 14:57 - 00000000 ____D () C:\Program Files\Common Files\TortoiseOverlays
2015-01-26 23:56 - 2015-01-26 23:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-24 19:27 - 2015-01-24 19:27 - 00000145 _____ () C:\Users\LLL\.appletviewer
2015-01-24 12:36 - 2015-01-28 14:52 - 00000034 _____ () C:\Users\LLL\Desktop\песен.txt
2015-01-22 12:10 - 2015-01-22 12:09 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-01-22 12:09 - 2015-01-22 12:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-21 16:29 - 2015-02-01 01:17 - 00000031 _____ () C:\Users\LLL\Desktop\регулярни изрази.txt
2015-01-18 01:07 - 2015-01-18 01:07 - 00011547 _____ () C:\Users\LLL\Desktop\Teamwork-Personal-Skills-Course-Program-September-2014.xlsx
2015-01-17 17:33 - 2015-01-17 17:33 - 00000000 ____D () C:\Users\LLL\Desktop\Разни
2015-01-17 03:36 - 2015-01-17 03:44 - 739246080 _____ () C:\Users\LLL\Desktop\lubuntu-14.10-desktop-i386.iso
2015-01-17 03:30 - 2015-01-17 14:48 - 00000000 ____D () C:\Users\LLL\Documents\Virtual Machines
2015-01-17 03:27 - 2015-02-05 14:47 - 00000000 ____D () C:\Users\LLL\AppData\Roaming\VMware
2015-01-17 03:27 - 2015-02-05 14:47 - 00000000 ____D () C:\Users\LLL\AppData\Local\VMware
2015-01-17 03:15 - 2014-06-12 18:23 - 00064728 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmx86.sys
2015-01-17 03:15 - 2013-10-08 18:21 - 00073296 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vsock.sys
2015-01-17 03:15 - 2013-10-08 18:21 - 00067664 _____ (VMware, Inc.) C:\Windows\system32\vsocklib.dll
2015-01-17 03:15 - 2013-10-08 18:21 - 00063568 _____ (VMware, Inc.) C:\Windows\SysWOW64\vsocklib.dll
2015-01-17 03:12 - 2014-06-12 18:23 - 00359128 _____ (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
2015-01-17 03:12 - 2014-06-12 18:22 - 00931032 _____ (VMware, Inc.) C:\Windows\system32\vnetlib64.dll
2015-01-17 03:12 - 2014-06-12 18:22 - 00437976 _____ (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
2015-01-17 03:12 - 2014-06-12 18:22 - 00031448 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmnetuserif.sys
2015-01-17 03:11 - 2015-01-17 03:11 - 00002127 _____ () C:\Users\Public\Desktop\VMware Workstation.lnk
2015-01-17 03:11 - 2015-01-17 03:11 - 00001024 _____ () C:\Windows\SysWOW64\%TMP%
2015-01-17 03:11 - 2015-01-17 03:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware
2015-01-17 03:11 - 2015-01-17 03:11 - 00000000 ____D () C:\Program Files\Common Files\VMware
2015-01-17 03:11 - 2014-02-27 18:40 - 00054464 _____ (VMware, Inc.) C:\Windows\system32\Drivers\hcmon.sys
2015-01-17 03:10 - 2015-02-05 14:28 - 00000000 ____D () C:\ProgramData\VMware
2015-01-17 03:10 - 2015-01-17 03:10 - 00000000 ____D () C:\Users\Public\Documents\Shared Virtual Machines
2015-01-17 03:10 - 2015-01-17 03:10 - 00000000 ____D () C:\Program Files (x86)\VMware
2015-01-17 01:03 - 2015-01-17 05:59 - 00000000 ____D () C:\Users\LLL\VirtualBox VMs
2015-01-17 01:02 - 2015-01-17 05:59 - 00000000 ____D () C:\Users\LLL\.VirtualBox
2015-01-17 01:01 - 2014-03-26 19:01 - 00254240 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2015-01-17 01:00 - 2014-03-26 19:00 - 00128288 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2015-01-16 23:43 - 2015-01-16 23:43 - 00011516 _____ () C:\Users\LLL\Desktop\Java-Basics-Course-Program-January-2015.xlsx
2015-01-16 16:45 - 2015-01-16 18:41 - 00000151 _____ () C:\Users\LLL\Desktop\07 La Biblia - Moises.....txt
2015-01-16 13:43 - 2015-01-16 13:50 - 00000000 ____D () C:\Users\LLL\Desktop\програмиране
2015-01-16 01:55 - 2015-01-16 01:55 - 00000000 ____D () C:\Users\LLL\AppData\Roaming\dvdcss
2015-01-16 01:00 - 2015-01-16 01:00 - 00000000 ____D () C:\Users\LLL\AppData\Roaming\SmartPCTools
2015-01-13 15:44 - 2015-01-13 15:45 - 00000000 ____D () C:\Users\LLL\introToJava
2015-01-09 22:18 - 2015-02-05 15:11 - 00000000 ____D () C:\Users\LLL\AppData\Local\Eclipse
2015-01-09 22:17 - 2015-02-05 11:42 - 00000000 ____D () C:\Users\LLL\workspace
2015-01-09 22:16 - 2015-02-05 15:11 - 00000000 ____D () C:\Users\LLL\Desktop\eclipse

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-05 15:18 - 2014-02-23 00:33 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-05 15:18 - 2014-02-15 06:58 - 00000000 ____D () C:\FRST
2015-02-05 15:06 - 2013-08-18 11:35 - 00000000 ____D () C:\ProgramData\MFAData
2015-02-05 14:42 - 2009-07-14 06:45 - 00022720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-05 14:42 - 2009-07-14 06:45 - 00022720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-05 14:35 - 2013-08-23 01:34 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-05 14:20 - 2014-10-09 22:50 - 00000000 ____D () C:\Users\LLL\AppData\Roaming\SoftGrid Client
2015-02-05 13:03 - 2014-04-15 23:58 - 00000920 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1368315742-3110366289-1826635684-1000UA.job
2015-02-05 12:47 - 2013-08-16 13:49 - 01965159 _____ () C:\Windows\WindowsUpdate.log
2015-02-05 12:44 - 2013-10-22 12:21 - 00000000 ____D () C:\Program Files (x86)\data
2015-02-05 12:43 - 2014-09-22 15:42 - 00081916 _____ () C:\Windows\setupact.log
2015-02-05 12:43 - 2013-08-23 01:34 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-05 12:43 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-05 02:46 - 2014-02-03 23:59 - 00000000 ____D () C:\Users\LLL\AppData\Roaming\Skype
2015-02-05 01:03 - 2014-04-15 23:58 - 00000898 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1368315742-3110366289-1826635684-1000Core.job
2015-02-04 23:56 - 2013-08-17 12:56 - 00000000 ____D () C:\Users\LLL\AppData\Roaming\uTorrent
2015-02-04 21:18 - 2014-02-23 00:33 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-04 21:18 - 2014-02-23 00:33 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-04 21:18 - 2014-02-23 00:33 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-04 15:30 - 2013-08-23 01:34 - 00004096 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-04 15:30 - 2013-08-23 01:34 - 00003844 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-03 08:24 - 2014-09-22 15:42 - 00121674 _____ () C:\Windows\PFRO.log
2015-02-02 14:33 - 2013-10-24 13:59 - 00000000 ____D () C:\Users\LLL\AppData\Roaming\AVI ReComp
2015-02-02 14:18 - 2014-01-29 18:45 - 00000000 ____D () C:\Users\LLL\AppData\Roaming\vlc
2015-01-28 15:24 - 2009-07-14 07:08 - 00032566 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-01-27 09:10 - 2014-10-27 23:45 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-24 19:27 - 2013-08-16 13:56 - 00000000 ____D () C:\Users\LLL
2015-01-23 01:22 - 2014-07-15 19:50 - 00000000 ____D () C:\Program Files\Recuva
2015-01-22 19:17 - 2013-10-22 12:22 - 00000000 ____D () C:\Users\postgres.LLL-PC
2015-01-22 12:10 - 2013-10-22 08:52 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-22 12:08 - 2013-08-24 22:27 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-22 11:52 - 2014-10-20 14:31 - 00272296 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2015-01-22 11:52 - 2014-10-20 14:31 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2015-01-22 11:52 - 2014-10-20 14:31 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2015-01-22 02:49 - 2014-04-22 15:47 - 00000000 ____D () C:\Users\LLL\Documents\Visual Studio 2012
2015-01-17 13:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-01-17 03:11 - 2013-08-17 08:57 - 00791762 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-01-16 14:02 - 2013-09-28 16:15 - 00000000 ____D () C:\ProgramData\TEMP
2015-01-16 13:55 - 2014-09-27 22:43 - 00000000 ____D () C:\Users\LLL\AppData\Roaming\The Word
2015-01-16 13:52 - 2014-07-12 20:30 - 00000000 ___HD () C:\Program Files (x86)\InstallJammer Registry
2015-01-16 13:44 - 2014-09-11 20:47 - 00000000 ____D () C:\Users\LLL\Desktop\English
2015-01-16 01:02 - 2013-10-08 20:21 - 00000000 ____D () C:\Users\LLL\AppData\Roaming\Aegisub

==================== Files in the root of some directories =======

2013-10-22 12:22 - 2013-10-22 12:22 - 0000315 _____ () C:\Program Files (x86)\pg_env.bat
2013-10-22 12:21 - 2013-10-22 12:22 - 6224529 _____ (PostgreSQL Global Development Group) C:\Program Files (x86)\uninstall-postgresql.exe
2013-10-08 20:25 - 2013-10-08 20:25 - 0002298 _____ () C:\Users\LLL\AppData\Roaming\ASSDraw3.cfg
2013-09-29 23:09 - 2013-10-30 01:45 - 0000607 _____ () C:\Users\LLL\AppData\Roaming\AutoGK.ini
2014-03-31 00:36 - 2014-03-31 00:39 - 0007833 _____ () C:\Users\LLL\AppData\Roaming\ezplay.cat
2014-03-31 00:36 - 2014-03-31 00:39 - 0001127 _____ () C:\Users\LLL\AppData\Roaming\ezplay.inf
2014-03-31 00:36 - 2014-03-31 00:36 - 0000125 _____ () C:\Users\LLL\AppData\Roaming\ezplay.ini
2014-03-31 00:37 - 2014-03-31 00:39 - 0000033 _____ () C:\Users\LLL\AppData\Roaming\ezplay.log
2014-03-31 00:36 - 2014-03-31 00:39 - 0118400 _____ (VSO Software) C:\Users\LLL\AppData\Roaming\ezplay.sys
2014-03-31 00:36 - 2014-03-31 00:39 - 0099384 _____ () C:\Users\LLL\AppData\Roaming\inst.exe
2014-03-31 00:36 - 2014-03-31 00:39 - 0007859 _____ () C:\Users\LLL\AppData\Roaming\pcouffin.cat
2014-03-31 00:36 - 2014-03-31 00:39 - 0001167 _____ () C:\Users\LLL\AppData\Roaming\pcouffin.inf
2014-03-31 00:36 - 2014-03-31 00:39 - 0000055 _____ () C:\Users\LLL\AppData\Roaming\pcouffin.log
2014-03-31 00:36 - 2014-03-31 00:39 - 0082816 _____ (VSO Software) C:\Users\LLL\AppData\Roaming\pcouffin.sys
2013-09-30 12:06 - 2013-10-26 22:30 - 0007597 _____ () C:\Users\LLL\AppData\Local\resmon.resmoncfg
2013-08-22 12:01 - 2013-08-22 12:09 - 0000091 _____ () C:\ProgramData\CameraRecorder.ini

Some content of TEMP:
====================
C:\Users\LLL\AppData\Local\Temp\AskPIP_FF_.exe
C:\Users\LLL\AppData\Local\Temp\bassmod.dll
C:\Users\LLL\AppData\Local\Temp\drm_dialogs.dll
C:\Users\LLL\AppData\Local\Temp\Helper.DLL
C:\Users\LLL\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\LLL\AppData\Local\Temp\npp.6.6.9.Installer.exe
C:\Users\LLL\AppData\Local\Temp\ochelper.exe
C:\Users\LLL\AppData\Local\Temp\sam__2268_il809.exe
C:\Users\LLL\AppData\Local\Temp\SkypeSetup.exe
C:\Users\LLL\AppData\Local\Temp\UNINSTALL.EXE
C:\Users\LLL\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-04 17:00

==================== End Of Log ============================

 

 

Addition.txt

  • Автор

Ползвай, друг браузър най-лесно е :).

 

Благодаря ти за предложението.

 

БОГ да те благослови. Амин.

 

Преди използвах "Google Chrome", но ми се струва, че "Mozilla Firefox" е по-бърз от Chrom-а.

Записал съм си отметки в "Mozilla", свикнах горе-долу с него и не ми се иска да го сменя.

Все пак съм ти благодарен за предложението ти !

 

БОГ да е с теб. Амин.

Здравейте,

 

Изтрил съм поста на потребителя, защото е в нарушение с правилата на раздела. Само членове на HJT TEAM, са компетентни да дават мнения тук.

Ще огледам логовете довечера, защото ми се налага да излизам.

 

Поздрави!

  • Автор

Здравейте,

 

Изтрил съм поста на потребителя, защото е в нарушение с правилата на раздела. Само членове на HJT TEAM, са компетентни да давам мнения тук.

Ще огледам логовете довечера, защото ми се налага да излизам.

 

Поздрави!

 

Благодаря ви, че ще проверите логовете.

 

БОГ да ви благослови. Амин.

Здравейте,

 

Моля, деинсталирайте следната програма от Control Panel-a:

 

Assets Manager

 

След това изтеглете edit-text.giffixlist.txt и го запазете в папката от която стартирахте FRST.exe.
Стартирайте FRST.exe и натиснете бутона Fix веднъж!
След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.
 
Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

 

Пишете после дали проблема остава.

  • Автор

БОГ да ви благослови премного. БОГ да благослови вас и най-близките ви хора. БОГ да осияе с ЛИЦЕТО СИ над вас и да ви покаже милост. Амин.

 

Благодаря ви. Ето какво се получи след процесите, които по-горе сте ми написали да извърша:

 

- Преди да ги извърша (докато още имаше проблема за когото писах в темата) Mozilla Firefox ми беше станала около два пъти, почти три пъти по-бавен от колкото беше преди да започнат да изскачат тези реклами.

 

- Сега след, като направих това, което сте ми писали да направя, браузъра Mozilla Firefox (а може и компютъра, като цяло - за това не съм сигурен) стана два или три пъти по-бърз от колкото беше още преди да се появят рекламите, които след, като направи това, което сте писали да направя - спряха да се показват.

 

Вече не изскачат рекламите.

 

Благодаря ви, че помагате и не е нужно човек да плаща за да му помогнете.

 

 

БОГ да ви благослови премного. Амин.

 

 

Ако има все още има значение, по-долу ще копирам информацията от файла, който се създаде след последната извършена операция, която ми написахте да направя:

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-02-2015
Ran by LLL at 2015-02-05 23:53:11 Run:1
Running from C:\Users\LLL\Desktop\New folder
Loaded Profiles: LLL & postgres (Available profiles: LLL & postgres)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
CloseProcesses:
HKU\S-1-5-21-1368315742-3110366289-1826635684-1000\...\MountPoints2: {73b47e82-0669-11e3-9e64-806e6f6e6963} - E:\autorun.bat
ProxyServer: [s-1-5-21-1368315742-3110366289-1826635684-1000] => 78.130.201.110:8080
HKU\S-1-5-21-1368315742-3110366289-1826635684-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.default-s...&tm=611&src=hmp
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.mysearc...r=355083003&ir=
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.mysearc...r=355083003&ir=
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-s...p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.mysearc...r=355083003&ir=
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.mysearc...r=355083003&ir=
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-s...p={searchTerms}
SearchScopes: HKU\S-1-5-21-1368315742-3110366289-1826635684-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.mysearc...r=355083003&ir=
SearchScopes: HKU\S-1-5-21-1368315742-3110366289-1826635684-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.mysearc...r=355083003&ir=
SearchScopes: HKU\S-1-5-21-1368315742-3110366289-1826635684-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-s...p={searchTerms}
BHO-x32: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} ->  No File
FF SearchEngineOrder.1: default-search.net
FF SelectedSearchEngine: default-search.net
FF Keyword.URL: hxxp://www.default-search.net/search?sid=498&aid=162&itype=n&ver=15446&tm=611&src=ds&p=
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\default-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml
FF Extension: Zoom It - C:\Users\LLL\AppData\Roaming\Mozilla\Firefox\Profiles\h8in5mix.default-1377198977973\Extensions\{c77a9524-c8d8-5f23-33ad-dcbb9c2dc250} [2015-02-05]
CHR HomePage: Default -> https://mysearch.avg...fr&d=2014-09-1310:08:09&v=3.2.0.15&pid=wtu&sg=&sap=hp
CHR Extension: (Default-Search) - C:\Users\LLL\AppData\Local\Google\Chrome\User Data\Default\Extensions\iomphmdalfmaifjccmagmllnicjoghhk [2015-02-02]
CHR HKLM-x32\...\Chrome\Extension: [iomphmdalfmaifjccmagmllnicjoghhk] - No Path
2015-02-02 14:03 - 2015-02-02 14:04 - 00000000 ____D () C:\Users\LLL\AppData\Roaming\systweak
2015-02-02 14:03 - 2014-12-08 17:01 - 00020216 _____ () C:\Windows\system32\roboot64.exe
2015-02-02 14:00 - 2015-02-02 14:00 - 00000000 ____D () C:\ProgramData\smdmf
2015-02-02 14:00 - 2015-02-02 14:00 - 00000000 ____D () C:\Program Files (x86)\Assets Manager
AlternateDataStreams: C:\ProgramData\TEMP:888AFB86
AlternateDataStreams: C:\ProgramData\TEMP:B3D74A13
AlternateDataStreams: C:\ProgramData\TEMP:ECF54A0E
HKU\S-1-5-21-1368315742-3110366289-1826635684-1000\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!
HKU\S-1-5-21-1368315742-3110366289-1826635684-1000\Software\Classes\exefile: "%1" %* <===== ATTENTION!
cmd: netsh winsock reset catalog
cmd: ipconfig /flushdns
emptytemp:
end
*****************

Processes closed successfully.
"HKU\S-1-5-21-1368315742-3110366289-1826635684-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{73b47e82-0669-11e3-9e64-806e6f6e6963}" => Key deleted successfully.
HKCR\CLSID\{73b47e82-0669-11e3-9e64-806e6f6e6963} => Key not found.
HKU\S-1-5-21-1368315742-3110366289-1826635684-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.
HKU\S-1-5-21-1368315742-3110366289-1826635684-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498}" => Key deleted successfully.
HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} => Key not found.
HKU\S-1-5-21-1368315742-3110366289-1826635684-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-1368315742-3110366289-1826635684-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
"HKU\S-1-5-21-1368315742-3110366289-1826635684-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498}" => Key deleted successfully.
HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} => Key not found.
Firefox SearchEngineOrder.1 deleted successfully.
Firefox SelectedSearchEngine deleted successfully.
Firefox Keyword.URL deleted successfully.
C:\Program Files (x86)\mozilla firefox\browser\searchplugins\default-search.xml => Moved successfully.
C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml => Moved successfully.
C:\Users\LLL\AppData\Roaming\Mozilla\Firefox\Profiles\h8in5mix.default-1377198977973\Extensions\{c77a9524-c8d8-5f23-33ad-dcbb9c2dc250} => Moved successfully.
Chrome HomePage deleted successfully.
C:\Users\LLL\AppData\Local\Google\Chrome\User Data\Default\Extensions\iomphmdalfmaifjccmagmllnicjoghhk => Moved successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\iomphmdalfmaifjccmagmllnicjoghhk" => Key deleted successfully.
C:\Users\LLL\AppData\Roaming\systweak => Moved successfully.
C:\Windows\system32\roboot64.exe => Moved successfully.
"C:\ProgramData\smdmf" => File/Directory not found.
C:\Program Files (x86)\Assets Manager => Moved successfully.
C:\ProgramData\TEMP => ":888AFB86" ADS removed successfully.
C:\ProgramData\TEMP => ":B3D74A13" ADS removed successfully.
C:\ProgramData\TEMP => ":ECF54A0E" ADS removed successfully.
"HKU\S-1-5-21-1368315742-3110366289-1826635684-1000\Software\Classes\exefile" => Key deleted successfully.
"HKU\S-1-5-21-1368315742-3110366289-1826635684-1000\Software\Classes\.exe" => Key deleted successfully.
HKU\S-1-5-21-1368315742-3110366289-1826635684-1000\Software\Classes\exefile => Key not found.

=========  netsh winsock reset catalog =========


Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.


========= End of CMD: =========


=========  ipconfig /flushdns =========


Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========

EmptyTemp: => Removed 2.5 GB temporary data.


The system needed a reboot.

==== End of Fixlog 23:54:50 ====

Редактирано от The Good Old TIme (преглед на промените)

Страхотно, нека сега да проверим и за остатъци: :)

 

 

 

СТЪПКА 1

  • Изтеглете и стартирайтe 6sv1DN9.jpgAdwCleaner.exe.
  • Натиснете бутона Scan.
  • AdwCleaner ще започне да проверява компютъра.
  • След като проверката приключи натиснете бутона Clean.
  • Програмата ще затвори всички излишни процеси и след почистването ще иска да рестартира машината. Съгласете се.
  • Ще се появи автоматично лог файл с името (AdwCleaner[s0].txt) в C:\Adwcleaner
  • Публикувайте съдържанието му в следващия си коментар.

 

 

 

 СТЪПКА 2

 

Моля изтеглете icon1351185104.png Junkware Removal Tool на вашия десктоп.

  • Спрете временно работата на защитните програми.
  • Стартирайте инструмента JRT.exe
  • Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата.
  • Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши.
  • Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt).
  • Моля копирайте съдържанието на лог файла в следващия си пост.

 

 

СТЪПКА 3

 

 
 
Моля изтеглете Malwarebytes Anti-Malware 2.0.3.1025 Final и я запазете на вашия десктоп.

  • Стартирайте файла mbam-setup-2.0.3.1025.exe и следвайте указанията за да инсталирате програмата.
  • След като инсталацията приключи се уверете че сте сложили отметка пред:
  • Launch Malwarebytes Anti-Malware
  • Отметката активираща пробния 14 дневен период също е маркиран по-подразбиране. Ако не желаете да тествате защитата в реално време на програмата през следващите 14 дни тогава премахнете отметката.
  • Натиснете бутона Finish.
  • Отидете до табът Settings > Detection and Protection > и под категорията Detection Options включете опцията "Scan for rootkits".
  • Отидете до табът Scan, сложете радио-бутона пред Threat Scan и след това натиснете бутона Scan Now >> . Ако е намерена актуализация тогава натиснете бутона Update Now.
  • Ще започне проверка за зловреден софтуер.
  • При някои инфекции можете да видите съобщението:
  • "Could not load DDA driver"
  • Натиснете "Yes" на това съобщение за да позволите драйвера да се зареди след рестарт.
  • Разрешете на компютъра да се рестартира и след това продължете с останалите инструкции.
  • След като проверката приключи натиснете бутона Apply Actions.
  • Изчакайте да се появи прозореца подканващ ви да рестартирате и след това натиснете бутона Yes.
  • След рестарта, когато се появи десктопа MBAM ще се зареди още веднъж.
  • Отидете то табът History > Application Logs.
  • Отворете рапорта с последната дата и час и натиснете бутона "Copy to Clipboard"
  • Сега вече поставете съдържанието на лог файла с клавишната комбинация Ctrl + V и го публикувайте в следващия си коментар.

 

 

 

СТЪПКА 4

 
1.Изтеглете Hitman Pro.
За 32-битова система - dEMD6.gif.
За 64-битова система - Download-button3.gif


2.Стартирайте програмата.

3.След като сте стартирали програмата като кликнете върху иконата 5vo5F.jpg и натиснете бутона „Напред“ като се съгласите с лицензионното споразумение (EULA).

4.Сложете отметка пред "Не, искам да завърша еднократно сканиране на компютъра".

5.Натиснете бутона „Напред“.

6.Програмата ще започне да сканира. Времето за сканиране е около 2 минути.

7.След завършване на сканирането от списъка с намерените неща (ако има такива) изберете Apply to all => Ignore.

8.Натиснете "Next" и след това натиснете "Изнеси резултата в XML file" и запазете лог файла на десктопа.

9.Архивирайте файла и го прикачете в следващия си коментар или копирайте съдържанието му в следващия си коментар.
 
Забележка: Ако няма падащо меню, където да изберете ignore както на снимката:
 
6-scanfin-choose.jpg
 
Тогава просто затворете програмата след края на проверката (без да премахвате нищо)...след това отворете C:Programdata\HitmanPro\Logs, отворете и публикувайте съдържанието на лог файла в следващия си коментар.

 

 

Поздрави!

  • Автор

Ще направя от проверките за които сте ми написали по-горе.

 

Вие направихте достатъчно за мен. Не е нужно повече да ви занимавам с файлове, с проверки.

Mozilla Firefox (а може би и компютъра, като цяло) ми стана 2-3 пъти по-бърз от преди още да се появят рекламите.

Благодаря ви за всичко. Благодаря ви за това, че не поискахте нищо в замяна за помощта ви.

 

Моля се БОГ да благослови вас и вашите най-близки хора. БОГ да осияе с ЛИЦЕТО СИ над вас и да покаже милост към вас. Амин.

Редактирано от The Good Old TIme (преглед на промените)

Ще направя от проверките за които сте ми написали по-горе.

 

Вие направихте достатъчно за мен. Не е нужно повече да ви занимавам с файлове, с проверки.

Mozilla Firefox (а може би и компютъра, като цяло) ми стана 2-3 пъти по-бърз от преди още да се появят рекламите.

Благодаря ви за всичко. Благодаря ви за това, че не поискахте нищо в замяна за помощта ви.

 

Моля се БОГ да благослови вас и вашите най-близки хора. БОГ да осияе с ЛИЦЕТО СИ над вас и да покаже милост към вас. Амин.

Имайте търпение и следвайте указанията на колегата!!!

Това че в момента има подобрение на скоростта не означава че всички ваши проблеми, засягащи темата са решени!

Щом потребителя не желае да продължи, темата се маркира като приключена, макар че проблема беше поправен. Без всичките резултати няма как да е маркирам като решена на 100%!

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Назад

Разглеждащи това в момента 0

  • Няма регистрирани потребители разглеждащи тази страница.

Дарение

  • Подкрепи съществуването на форума - направи дарение
    32%
    Дарени 315 € от нужните 1 000 €

Бюлетин

Получавайте известие, когато има важна промяна или новина свързана с форума.
Абонирайте се

Профил

Навигация

Търсене

Търсене

Конфигуриране на push известия в браузъра
Chrome (Android)
  1. Докоснете иконата на катинар до адресната лента.
  2. Докоснете Разрешения → Известия.
  3. Променете предпочитанията си.
Chrome (Desktop)
  1. Кликнете върху иконата на катинар в адресната лента.
  2. Изберете Настройки на сайта.
  3. Намерете Известия и коригирайте предпочитанията си.