Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.
Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.
Добави Kaldata.com в предпочитани източници в Google

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

Нещо блокирва работата на MBAM и Avast

Alpine Trail
в Премахване на зловреден софтуер

Featured Replies

Здравейте!От известно време след автоматично сканирване на MBAM получавам син екран и компютъра ми се рестартирва.Направих пълна проверка на системата с Avast,която изтри някои неща,след което направих сканиране с MBAM и нищо не се откри.Изглежда обаче някаква гадина се активира след пускане на компютъра,при това без да отварям някакъв браузър,защото отново след автоматична проверка с MBAM стана същото.След последваща кратка проверка с Avast компютъра ми блокира,което беше съпроводено с един силен неприятен непрекъсващ звук.Това за логовете от FRST:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-02-2015
Ran by ZDRAVE (administrator) on SCHANGEME1 on 15-02-2015 09:35:54
Running from C:\Users\ZDRAVE\Desktop
Loaded Profiles: ZDRAVE (Available profiles: ZDRAVE)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Български (България)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
() C:\Program Files\ATK Hotkey\ASLDRSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(CyberLink) C:\Program Files\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
(CyberLink) C:\Program Files\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(Dr. Hanewinkel -- www.haneWIN.de) C:\Program Files\nfsd\pmapd.exe
(Chris Pietschmann (http://pietschsoft.com)) C:\Program Files\Virtual Router\VirtualRouterService.exe
(Dr. Hanewinkel -- www.haneWIN.de) C:\Program Files\nfsd\nfsd.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(ATK0100) C:\Program Files\ATK Hotkey\HControl.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
() C:\Program Files\ATKOSD2\ATKOSD2.exe
() C:\Program Files\Wireless Console 2\wcourier.exe
() C:\Program Files\ATK Hotkey\ATKOSD.exe
(H.D.S. Hungary) C:\Program Files\Hard Disk Sentinel\HDSentinel.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
() C:\Program Files\Unlocker\UnlockerAssistant.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(CyberLink) C:\Program Files\CyberLink\YouCam\YCMMirage.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(CyberLink) C:\Program Files\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
(CyberLink Corp.) C:\Program Files\CyberLink\PowerDVD12\PowerDVD12Agent.exe
(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(BitTorrent Inc.) C:\Users\ZDRAVE\AppData\Roaming\uTorrent\uTorrent.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Plex, Inc.) C:\Program Files\Plex\Plex Media Server\Plex Media Server.exe
(Chris Pietschmann (http://pietschsoft.com)) C:\Program Files\Virtual Router\VirtualRouterClient.exe
(CyberLink Corp.) C:\Program Files\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Python Software Foundation) C:\Program Files\Plex\Plex Media Server\PlexScriptHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Plex, Inc.) C:\Program Files\Plex\Plex Media Server\PlexDlnaServer.exe
() C:\Program Files\SpywareBlaster\spywareblaster.exe
() C:\Program Files\SpywareBlaster\spywareblaster.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\EXCEL.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-27] (AVAST Software)
HKLM\...\Run: [unlockerAssistant] => C:\Program Files\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] ()
HKLM\...\Run: [startCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [90112 2006-11-10] ()
HKLM\...\Run: [synTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [857648 2007-03-01] (Synaptics, Inc.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [PowerDVD13Agent] => "C:\Program Files\CyberLink\PowerDVD13\PowerDVD13Agent.exe"
HKLM\...\Run: [PowerDVD12DMREngine] => C:\Program Files\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe [505096 2013-03-04] (CyberLink)
HKLM\...\Run: [PowerDVD12Agent] => C:\Program Files\CyberLink\PowerDVD12\PowerDVD12Agent.exe [373784 2013-03-04] (CyberLink Corp.)
HKLM\...\Run: [CLMLServer] => C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [107816 2011-03-09] (CyberLink)
HKLM\...\Run: [YouCam Mirage] => C:\Program Files\CyberLink\YouCam\YCMMirage.exe [136488 2012-06-14] (CyberLink)
HKLM\...\Run: [YouCam Tray] => C:\Program Files\CyberLink\YouCam\YouCam.exe [234000 2012-06-14] (CyberLink Corp.)
HKLM\...\Run: [sunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)
HKU\S-1-5-21-3786351732-3326273418-3990330768-1000\...\Run: [uTorrent] => C:\Users\ZDRAVE\AppData\Roaming\uTorrent\uTorrent.exe [1678928 2015-01-11] (BitTorrent Inc.)
HKU\S-1-5-21-3786351732-3326273418-3990330768-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
HKU\S-1-5-21-3786351732-3326273418-3990330768-1000\...\Run: [GoogleChromeAutoLaunch_6A5BA1C834FD0EDACF0C670231852A69] => C:\Program Files\Google\Chrome\Application\chrome.exe [843592 2015-02-04] (Google Inc.)
HKU\S-1-5-21-3786351732-3326273418-3990330768-1000\...\Run: [skype] => C:\Program Files\Skype\Phone\Skype.exe [30872672 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-3786351732-3326273418-3990330768-1000\...\Run: [Plex Media Server] => C:\Program Files\Plex\Plex Media Server\Plex Media Server.exe [5142664 2014-12-21] (Plex, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Virtual Router Manager.lnk
ShortcutTarget: Virtual Router Manager.lnk -> C:\Windows\Installer\{BE905C46-2B34-4D73-AEE1-769ED138E0FF}\_118D1A4EFFA6998C3492EB.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-3786351732-3326273418-3990330768-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3786351732-3326273418-3990330768-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3786351732-3326273418-3990330768-1000 -> {7DE5D836-A57B-44E0-8558-69A5203446B5} URL = https://www.google.com/search?q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 212.39.90.42 8.8.8.8
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
 
FireFox:
========
FF ProfilePath: C:\Users\ZDRAVE\AppData\Roaming\Mozilla\Firefox\Profiles\3hd7hcqx.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\911bg.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\diribg.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\pe-bg.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\portalbgdict.xml
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-12-01]
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-04-17]
 
Chrome: 
=======
CHR HomePage: Default -> hxxp://search.babylon.com/?affID=119776&babsrc=HP_ss_bad2g&mntrId=48080015AFAE718F
CHR StartupUrls: Default -> "hxxp://www.google.com/", "hxxp://www.google.bg/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\ZDRAVE\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast SafePrice) - C:\Users\ZDRAVE\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-02-05]
CHR Extension: (AdBlock) - C:\Users\ZDRAVE\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-08-13]
CHR Extension: (Avast Online Security) - C:\Users\ZDRAVE\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-05-20]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-29]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
 
========================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 ASLDRService; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [94208 2007-02-05] () [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-29] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 CLHNServiceForPowerDVD12; C:\Program Files\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe [89864 2013-03-04] (CyberLink Corp.)
R2 CyberLink PowerDVD 12 Media Server Monitor Service; C:\Program Files\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [77576 2013-03-04] (CyberLink)
R2 CyberLink PowerDVD 12 Media Server Service; C:\Program Files\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [294664 2013-03-04] (CyberLink)
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 NFSserver; C:\Program Files\nfsd\nfsd.exe [148992 2010-01-13] (Dr. Hanewinkel -- www.haneWIN.de) [File not signed]
R2 PMAPDaemon; C:\Program Files\nfsd\pmapd.exe [78336 2008-11-19] (Dr. Hanewinkel -- www.haneWIN.de) [File not signed]
R2 Virtual Router; C:\Program Files\Virtual Router\VirtualRouterService.exe [12288 2013-02-10] (Chris Pietschmann http://pietschsoft.com)) [File not signed](
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 AIDA64Driver; C:\Program Files\FinalWire\AIDA64 Extreme Edition\kerneld.x32 [32592 2013-06-02] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-11-29] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [70384 2014-11-29] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-11-29] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-11-29] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787800 2014-11-29] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423784 2014-11-29] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [91496 2014-11-29] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206248 2014-11-29] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2014-04-18] (DT Soft Ltd)
R1 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [75480 2014-11-21] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2015-02-15] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-11-21] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2007-07-31] (ATK0100)
R2 ntk_PowerDVD12; C:\Program Files\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12.sys [121208 2012-09-10] (Cyberlink Corp.)
R3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [184192 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
R2 {73526619-C24F-470B-9BED-53D455FBB5C6}; C:\Program Files\CyberLink\PowerDVD12\Common\NavFilter\000.fcl [76560 2013-03-18] (CyberLink Corp.)
S3 cleanhlp; \??\C:\Users\ZDRAVE\Desktop\EmsisoftEmergencyKit\Run\cleanhlp32.sys [X]
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 
==================== One Month Created Files and Folders ========
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-02-15 09:35 - 2015-02-15 09:37 - 00017066 _____ () C:\Users\ZDRAVE\Desktop\FRST.txt
2015-02-15 09:34 - 2015-02-15 09:35 - 01125888 _____ (Farbar) C:\Users\ZDRAVE\Desktop\FRST.exe
2015-02-15 08:26 - 2015-02-15 08:26 - 00143488 _____ () C:\Windows\Minidump\021515-21265-01.dmp
2015-02-12 07:12 - 2015-01-23 05:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-12 07:12 - 2015-01-23 05:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-11 07:56 - 2015-01-09 03:45 - 02380288 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 07:55 - 2015-01-15 09:46 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 07:55 - 2015-01-15 09:46 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 07:55 - 2015-01-15 09:42 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 07:55 - 2015-01-15 09:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 07:55 - 2015-01-15 06:21 - 00369968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 07:54 - 2015-01-15 09:43 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 07:54 - 2015-01-15 09:43 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 07:54 - 2015-01-15 09:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 07:54 - 2015-01-15 09:42 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 07:54 - 2015-01-15 09:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 07:54 - 2015-01-15 09:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 07:54 - 2015-01-15 09:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 07:38 - 2015-01-14 07:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-02-11 07:38 - 2015-01-14 07:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 07:33 - 2015-02-04 04:54 - 00482304 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 07:33 - 2015-02-04 04:53 - 00767488 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 07:33 - 2015-02-04 04:53 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 07:33 - 2015-02-04 04:53 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 07:33 - 2015-02-04 04:53 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 07:33 - 2015-02-04 04:53 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 07:33 - 2015-02-04 04:49 - 00886784 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 07:33 - 2015-01-28 01:36 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 07:33 - 2014-11-26 05:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 07:33 - 2014-10-04 03:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-02-11 07:33 - 2014-10-04 03:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2015-02-11 07:32 - 2015-01-14 07:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 07:32 - 2015-01-12 04:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 07:32 - 2015-01-12 04:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 07:32 - 2015-01-12 04:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 07:32 - 2015-01-12 04:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 07:32 - 2015-01-12 04:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 07:32 - 2015-01-12 04:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 07:32 - 2015-01-12 04:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 07:32 - 2015-01-12 04:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 07:32 - 2015-01-12 04:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 07:32 - 2015-01-12 03:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 07:32 - 2015-01-12 03:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 07:32 - 2015-01-12 03:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 07:32 - 2015-01-12 03:55 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 07:32 - 2015-01-12 03:48 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 07:32 - 2015-01-12 03:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 07:32 - 2015-01-12 03:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 07:32 - 2015-01-12 03:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 07:32 - 2015-01-12 03:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 07:32 - 2015-01-12 03:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 07:32 - 2015-01-12 03:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 07:32 - 2015-01-12 03:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 07:32 - 2015-01-12 03:23 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 07:32 - 2015-01-12 03:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 07:32 - 2015-01-12 03:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 07:32 - 2015-01-12 03:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 07:32 - 2015-01-12 02:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 07:32 - 2015-01-12 02:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 07:32 - 2015-01-10 08:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 07:32 - 2015-01-10 08:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 07:32 - 2015-01-10 08:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 07:32 - 2015-01-10 08:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 07:32 - 2015-01-10 08:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 07:32 - 2015-01-10 08:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 07:32 - 2015-01-10 08:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 07:31 - 2015-01-13 04:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 07:31 - 2014-12-12 07:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 07:31 - 2014-12-08 04:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-05 07:42 - 2015-02-05 07:42 - 02194432 _____ () C:\Users\ZDRAVE\Desktop\adwcleaner_4.109.exe
2015-02-03 14:38 - 2015-02-03 19:02 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\Plex Home Theater
2015-02-02 19:06 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2015-02-02 19:06 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2015-02-02 18:59 - 2015-02-02 19:14 - 00000000 ____D () C:\Program Files\Plex Home Theater
2015-02-01 12:40 - 2015-02-01 12:41 - 00000000 ____D () C:\Users\ZDRAVE\Desktop\Видеоклипове от YOUTUBE
2015-02-01 11:57 - 2015-02-01 11:57 - 00000000 ____D () C:\Users\ZDRAVE\.cache
2015-02-01 11:48 - 2015-02-01 11:48 - 00000905 _____ () C:\Users\Public\Desktop\uGet.lnk
2015-02-01 11:48 - 2015-02-01 11:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uGet VGI
2015-02-01 11:37 - 2015-02-01 11:38 - 14105671 _____ (Vladimir Ivanov ) C:\Users\ZDRAVE\Documents\uGet_Setup_2.1.1.exe
2015-01-31 08:51 - 2015-02-02 15:19 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Local\Plex Media Server
2015-01-31 08:48 - 2015-02-07 16:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plex Media Server
2015-01-31 08:46 - 2015-02-02 19:01 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-31 08:46 - 2015-01-31 08:46 - 00000000 ____D () C:\Program Files\Plex
2015-01-31 08:42 - 2015-01-31 08:44 - 86795776 _____ (Plex, Inc.) C:\Users\ZDRAVE\Plex-Media-Server-0.9.1107.803-87d0708-en-US.exe
2015-01-29 05:48 - 2015-01-29 05:48 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-01-29 05:43 - 2014-10-20 07:28 - 00272296 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-01-29 05:42 - 2014-10-20 07:28 - 00176552 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-01-29 05:42 - 2014-10-20 07:28 - 00176552 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-01-29 05:41 - 2015-01-29 05:47 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-01-25 21:40 - 2015-02-01 12:12 - 00055296 ___SH () C:\Users\ZDRAVE\Desktop\Thumbs.db
2015-01-25 17:24 - 2015-01-25 17:24 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\MusicBrainz
2015-01-25 17:24 - 2015-01-25 17:24 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Local\MusicBrainz
2015-01-25 14:25 - 2015-01-25 14:25 - 00001079 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MusicBrainz Picard.lnk
2015-01-25 14:25 - 2015-01-25 14:25 - 00000000 ____D () C:\Program Files\MusicBrainz Picard
 
==================== One Month Modified Files and Folders =======
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-02-15 09:38 - 2014-08-09 04:23 - 00000000 ____D () C:\ProgramData\TEMP
2015-02-15 09:38 - 2014-04-18 05:17 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\uTorrent
2015-02-15 09:37 - 2014-04-18 05:45 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\Skype
2015-02-15 09:36 - 2014-08-07 06:22 - 00000000 ____D () C:\FRST
2015-02-15 09:30 - 2014-05-03 14:00 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-15 09:13 - 2014-05-16 08:55 - 00000000 ____D () C:\Program Files\SpywareBlaster
2015-02-15 09:10 - 2009-07-14 06:34 - 00026576 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-15 09:10 - 2009-07-14 06:34 - 00026576 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-15 09:05 - 2014-04-16 18:18 - 01270580 _____ () C:\Windows\WindowsUpdate.log
2015-02-15 09:01 - 2015-01-02 08:22 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-15 09:01 - 2014-04-16 21:03 - 00000982 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-15 09:00 - 2015-01-11 18:40 - 00001688 _____ () C:\Windows\Tasks\GVFWUIX.job
2015-02-15 09:00 - 2015-01-02 16:28 - 00000000 ____D () C:\Program Files\nfsd
2015-02-15 09:00 - 2014-05-20 19:05 - 00023715 _____ () C:\Windows\setupact.log
2015-02-15 09:00 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-15 08:39 - 2014-04-16 21:03 - 00000986 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-15 08:26 - 2014-05-23 06:52 - 00000000 ____D () C:\Windows\Minidump
2015-02-14 23:38 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-14 22:47 - 2014-07-11 10:10 - 00000438 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2015-02-14 22:05 - 2010-11-20 23:01 - 00781790 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-12 12:43 - 2014-09-01 10:18 - 00000365 _____ () C:\Users\ZDRAVE\AppData\Roaming\GVFWUIX
2015-02-12 08:32 - 2014-04-16 18:46 - 00000000 ____D () C:\Users\ZDRAVE
2015-02-12 06:35 - 2009-07-14 06:33 - 00407384 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-12 06:32 - 2014-12-11 22:22 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-12 06:32 - 2014-05-06 21:03 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-12 06:32 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\bg-BG
2015-02-11 12:41 - 2014-04-17 17:34 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-11 12:32 - 2014-04-16 18:45 - 113756392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-11 12:29 - 2014-04-18 07:29 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-09 09:30 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-02-08 08:22 - 2014-04-30 14:31 - 00000000 ____D () C:\Program Files\Hard Disk Sentinel
2015-02-08 06:16 - 2014-11-03 12:37 - 00000000 ____D () C:\Program Files\MyDefrag v4.3.1
2015-02-07 15:40 - 2014-07-12 08:06 - 00000000 ____D () C:\ProgramData\Home Media Server
2015-02-06 22:25 - 2014-05-20 19:05 - 00119834 _____ () C:\Windows\PFRO.log
2015-02-06 11:09 - 2014-04-16 21:03 - 00002087 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-06 09:54 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Branding
2015-02-06 05:30 - 2014-05-03 13:59 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-02-06 05:30 - 2014-05-03 13:59 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-02-05 08:35 - 2014-07-12 17:53 - 00001424 _____ () C:\Users\ZDRAVE\Desktop\Стартов панел с приложения за Chrome.lnk
2015-02-05 08:32 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\schemas
2015-02-05 07:49 - 2014-08-27 06:18 - 00000000 ____D () C:\AdwCleaner
2015-02-05 07:49 - 2014-07-12 17:53 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-05 07:49 - 2014-04-18 07:22 - 00000983 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-02-05 07:49 - 2014-04-18 07:22 - 00000971 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-02-05 07:49 - 2014-04-16 21:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-05 07:49 - 2014-04-16 18:46 - 00001090 _____ () C:\Users\ZDRAVE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-02-01 11:48 - 2014-07-22 22:16 - 00000000 ____D () C:\Program Files\uGet VGI
2015-01-29 05:52 - 2014-12-01 22:31 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-01-29 05:46 - 2014-08-08 14:12 - 00000000 ____D () C:\Program Files\Java
2015-01-25 15:52 - 2014-05-04 05:09 - 00000000 ___RD () C:\Users\ZDRAVE\Dropbox
2015-01-24 22:15 - 2014-12-20 18:43 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\VideoReDo-TVSuite4
2015-01-17 17:20 - 2014-12-27 15:21 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\vlc
 
==================== Files in the root of some directories =======
 
2014-08-23 14:06 - 2014-08-23 14:22 - 0001158 _____ () C:\Users\ZDRAVE\AppData\Roaming\DVDSubEdit.ini
2014-08-23 11:01 - 2014-08-23 14:15 - 0028536 _____ () C:\Users\ZDRAVE\AppData\Roaming\DVDSubEditLastFile0.txt
2014-08-23 14:15 - 2014-08-23 11:01 - 0024098 _____ () C:\Users\ZDRAVE\AppData\Roaming\DVDSubEditLastFile1.txt
2014-09-01 10:18 - 2015-02-12 12:43 - 0000365 _____ () C:\Users\ZDRAVE\AppData\Roaming\GVFWUIX
 
Files to move or delete:
====================
C:\Users\ZDRAVE\Plex-Media-Server-0.9.1107.803-87d0708-en-US.exe
 
 
Some content of TEMP:
====================
C:\Users\ZDRAVE\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp0fv5oi.dll
C:\Users\ZDRAVE\AppData\Local\Temp\HitmanPro.exe
C:\Users\ZDRAVE\AppData\Local\Temp\jre-8u25-windows-au.exe
C:\Users\ZDRAVE\AppData\Local\Temp\MovieStudioPro.exe
C:\Users\ZDRAVE\AppData\Local\Temp\SkypeSetup.exe
C:\Users\ZDRAVE\AppData\Local\Temp\sqlite3.dll
 
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-01-13 00:15
 
==================== End Of Log ==

Addition.txt

Здравейте,

 

Може ли да качите файла:

 

C:\Windows\Minidump\021515-21265-01.dmp

 

на този адрес => http://dox.abv.bg/files/share и след това да публикувате линк за изтегляне в следващия си коментар?

  • Автор

Здравейте,

 

Може ли да качите файла:

 

C:\Windows\Minidump\021515-21265-01.dmp

 

на този адрес => http://dox.abv.bg/files/share и след това да публикувате линк за изтегляне в следващия си коментар?

Здравейте,B-boy[styLe]!Този файл не може да се отвори!Излиза съобщение:"Нямате разрешение да отворите този файл.Обърнете се към неговият притежател или администратора,за да получите разрешение".

  • Автор

Аз не искам да го отваряте...а да го архивирате и да ми го качите на линка, който съм посочил. :)

При опит за архивиране излезе съобщение че достъпът е отказан.Между впрочем незнам какво стана но MBAM вече не открива нищо,следователно не се и рестартирва компа.

Пробвайте да го копирате на десктопа и да го качите на сайте без да го архивирате. После изтрийте копието от десктопа.

Възможно е да е имало фалшиво сработване в MBAM или avast! което да е причинявало конфликта или просто заразата (ако е имало такава), да е вече усоешно премахната.

Така или иначе радвайте се, че проблема е решен. Скоро ще маркирам случая като приключен.

 

 

Поздрави! :)

  • Автор

Пробвайте да го копирате на десктопа и да го качите на сайте без да го архивирате. После изтрийте копието от десктопа.

Възможно е да е имало фалшиво сработване в MBAM или avast! което да е причинявало конфликта или просто заразата (ако е имало такава), да е вече усоешно премахната.

Така или иначе радвайте се, че проблема е решен. Скоро ще маркирам случая като приключен.

 

 

Поздрави! :)

По този начин вече стана.http://dox.bg/files/dw?a=360a796b34

  • 3 седмици по-късно...

Забравил съм да отговоря на вече и без това приключената тема, за което се извинявам.

Според dmp файла, причината за синия екран е заради драйвера NETIO.SYS

Май е предизвикан от приложението: PlexDlnaServer

Все пак възможно е сривът да е породен и от конфликт на някои от щитовете на avast (като web shield-а) и затова не е зле да обновите avast! до последната му версия, както и драйверите за лан или wifi картата си.

 

Поздрави! ;)

  • 1 месец по-късно...
  • Автор

Здравейте отново!За съжаление сините екрани продължават.Направих всичко по инструкциите които ми бяха дадени,но проблемът си остана!Вече се чудя какъв е проблемът,софтуерен или хардуерен!?

  • Автор

Здравейте,

 

Прикачете новите DMP файлове от папката C:\Windows\Minidump за да видим дали проблема е още в същия софтуер.

Папка Minidump ми е празна.

icon1337954655.png

  • Изтеглете MiniToolBox.exe и го запазете на десктопа (или в друга папка по ваш избор).
  • Сложете всички отметки и натиснете Go.
  • Прикачете лог файла Result.txt в следващия си пост.
  • Автор

 

icon1337954655.png

  • Изтеглете MiniToolBox.exe и го запазете на десктопа (или в друга папка по ваш избор).
  • Сложете всички отметки и натиснете Go.
  • Прикачете лог файла Result.txt в следващия си пост.

 

Result1.txt

Вижте дали настройките за създаване на kernel memory dumps да правилни (в линка е даден пример за Windows XP и Windows 7):

 

http://www.mcci.com/mcci-v5/support/howtos2.html

 

След това остава да изчакате пак да забие и след това архивирайте новите dmp файлове (ако са се появили такива).

 

Поздрави!

Проблема отново е заради netio.sys.

Дори да сте обновили всички драйвери за системата съветвам да деинсталирате следните програми и да видите дали проблемна ще изчезне:

 

Plex Home Theater
Plex Media Server

 

Ако не, деинсталирайте и Avast Free Antivirus и Malwarebytes Anti-Malware.

 

След деинсталацията използвайте следния инструмент => avastclear.exe

  • Заредете Windows в Safe Mode
  • Стартирайте инструмента avastclear.exe
  • Посочете папката в която е инсталиран avast например: C:\Program Files\AVAST Software (Забележка: бъдете сигурни, че сте посочили правилната папка, защото всяка посочена папка ще бъде изтрита от инструмента).
  • Натиснете REMOVE
  • След деинсталацията използвайте следния инструмент - mbam-clean.exe

 

Виждат се и остатъци от драйвери на VirtualBox.

 

icon1373991893.jpg

Изтеглете Autoruns и:

  • Стартирайте програмата;
  • Изберете Options => сложете отметки пред Hide Empty Locations, Hide Microsoft Entries и Hide Windows Entries и махнете отметката пред Hide VirusTotal Clean Entries;
  • Сега изберете Options => Filter Options => и сложете отметки пред Verify Code Signature, Check VirusTotal.com и Submit Unknown Images;
  • Изберете бутона Rescan;
  • От менюто File => изберете Save => запазете файла някъде с желано от вас име (във формат arn), архивирайте го с програма по желание в zip формат и го прикачете към темата.

 

Ако се наложи на по-късен етап можем да пробваме и инструмента на Microsoft - Verifier, но като цяло не мисля, че ще се наложи.

 

Поздрави!

  • Автор

Аз всякакви Plex-ове отдавна съм деинсталирал,пък и от MiniToolBox се вижда че нямам такива програми.Търсих преди и сега драйвера netio.sys,но го няма.Сега изтрих и два .reg файла изглежда принадлежащи към Plex.Ако деинсталирам Avast и МВАМ,какво ще защитава системата ми при условие че няма никаква достатъчно основателна причина че точно защитните програми са отговорни за тези сривове.На всичкото отгоре преди скоро време отново се появи PUP.Optional.Babylon.A,засичана от MBAM,която PUP по непонятни причини беше изчезнала по едно време и за която бях писал преди в един друг форум,но оттам не можаха да се справят с проблема.Тази потенциално нежелана програма се появява при всяко рестартирване на лаптопа и изглежда е свързана с браузъра Google Chrome.Бях деинсталирал браузъра с Revo Uninstaller и то с дълбока деинсталация,но отново проблема се появи след инсталирване на Chrome.Логът от Autoruns не може да се прикачи тук.Излиза ми съобщение"Грешка Не можете да качвате такъв тип файл".http://dox.bg/files/dw?a=a4456b56c4

Редактирано от Alpine Trail (преглед на промените)

Напротив има основателна причина точно защитните програми да са причина за сривовете на netio.sys. netio.sys е драйвер за интернета и всичко що използва интернет може да е причината - защитни програми (антивирусни, защитни стени, стара версия на µTorrent клиента, стара версия на Adobe Flash Player, стари драйвери за мрежоавата карта, wireless-a, стар firmware за рутера и т.н.).

 

За вас, кое е по-важно...да няма сривове или да си държите програмите за защита? Вземете решение. Ако се установи, че е било заради avast или mbam винаги можете да сложите алтернативна антивирусна на по-късен етап.

 

И лога не може да се прикачи, защото казах да е в ZIP, не в RAR формат...

 

Babylon се чисти лесно, но това в момента не е приоритет на нашата работа. Търсим източника на проблема.

 

Отворете Autoruns с десен бутон => Run as administrator => и изтрийте следния ред.
 

\GVFWUIX            File not found: C:\Users\ZDRAVE\AppData\Roaming\GVFWUIX.exe

 

Пригответе и нови дневници от FRST (сложете и отметка пред Addition.txt преди да натиснете бутона SCAN) и публикувайте новите доклади в следващия си коментар.

 

Поздрави!

  • Автор

Благодаря за ценните разяснения.Бях останал с впечатлението че netio е свързан само с Plex.Деинсталирах MBAM и Avast,следвайки инструкциите в поста.Addition.txt

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-04-2015
Ran by ZDRAVE (administrator) on SCHANGEME1 on 25-04-2015 19:51:14
Running from C:\Users\ZDRAVE\Desktop
Loaded Profiles: ZDRAVE (Available profiles: ZDRAVE)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Български (България)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
() C:\Program Files\ATK Hotkey\ASLDRSrv.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(CyberLink) C:\Program Files\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
(CyberLink) C:\Program Files\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
(Dr. Hanewinkel -- www.haneWIN.de) C:\Program Files\nfsd\pmapd.exe
() C:\Program Files\CyberLink\Shared files\RichVideo.exe
(Ulead Systems, Inc.) C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(Chris Pietschmann (http://pietschsoft.com)) C:\Program Files\Virtual Router\VirtualRouterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Dr. Hanewinkel -- www.haneWIN.de) C:\Program Files\nfsd\nfsd.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(ATK0100) C:\Program Files\ATK Hotkey\HControl.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
() C:\Program Files\ATKOSD2\ATKOSD2.exe
() C:\Program Files\Wireless Console 2\wcourier.exe
() C:\Program Files\ATK Hotkey\ATKOSD.exe
() C:\Program Files\Unlocker\UnlockerAssistant.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(CyberLink) C:\Program Files\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
(CyberLink Corp.) C:\Program Files\CyberLink\PowerDVD12\PowerDVD12Agent.exe
(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink) C:\Program Files\CyberLink\YouCam\YCMMirage.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Chris Pietschmann (http://pietschsoft.com)) C:\Program Files\Virtual Router\VirtualRouterClient.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(CyberLink Corp.) C:\Program Files\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Eyeo GmbH) C:\Program Files\Adblock Plus for IE\AdblockPlusEngine.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [unlockerAssistant] => C:\Program Files\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] ()
HKLM\...\Run: [startCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [90112 2006-11-10] ()
HKLM\...\Run: [synTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [857648 2007-03-01] (Synaptics, Inc.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [PowerDVD12DMREngine] => C:\Program Files\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe [505096 2013-03-04] (CyberLink)
HKLM\...\Run: [PowerDVD12Agent] => C:\Program Files\CyberLink\PowerDVD12\PowerDVD12Agent.exe [373784 2013-03-04] (CyberLink Corp.)
HKLM\...\Run: [CLMLServer] => C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [107816 2011-03-09] (CyberLink)
HKLM\...\Run: [YouCam Mirage] => C:\Program Files\CyberLink\YouCam\YCMMirage.exe [136488 2012-06-14] (CyberLink)
HKLM\...\Run: [YouCam Tray] => C:\Program Files\CyberLink\YouCam\YouCam.exe [234000 2012-06-14] (CyberLink Corp.)
HKLM\...\Run: [uVS10 Preload] => C:\Program Files\Ulead Systems\Ulead VideoStudio 10\uvPL.exe [36864 2006-03-07] (Ulead Systems, Inc.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKU\S-1-5-21-3786351732-3326273418-3990330768-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
HKU\S-1-5-21-3786351732-3326273418-3990330768-1000\...\Run: [skype] => C:\Program Files\Skype\Phone\Skype.exe [31677536 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-3786351732-3326273418-3990330768-1000\...\Run: [uTorrent] => C:\Users\ZDRAVE\AppData\Roaming\uTorrent\uTorrent.exe [1739088 2015-03-14] (BitTorrent Inc.)
HKU\S-1-5-21-3786351732-3326273418-3990330768-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5529880 2015-03-13] (Piriform Ltd)
HKU\S-1-5-21-3786351732-3326273418-3990330768-1000\...\Run: [GoogleChromeAutoLaunch_6A5BA1C834FD0EDACF0C670231852A69] => C:\Program Files\Google\Chrome\Application\chrome.exe [812872 2015-04-14] (Google Inc.)
HKU\S-1-5-21-3786351732-3326273418-3990330768-1000\...\MountPoints2: {003ffd2a-c6a5-11e3-8fb5-001fc6de4f4d} - F:\Autorun.exe /s
HKU\S-1-5-21-3786351732-3326273418-3990330768-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\scrnsave.scr [10240 2009-07-14] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Virtual Router Manager.lnk [2015-01-02]
ShortcutTarget: Virtual Router Manager.lnk -> C:\Windows\Installer\{BE905C46-2B34-4D73-AEE1-769ED138E0FF}\_118D1A4EFFA6998C3492EB.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-3786351732-3326273418-3990330768-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3786351732-3326273418-3990330768-1000 -> DefaultScope {7AFF219F-A8D7-4D8E-A4A1-E0F8E0DDF2B2} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3786351732-3326273418-3990330768-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3786351732-3326273418-3990330768-1000 -> {15671ECE-DD38-441C-977A-55738792F4D2} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3786351732-3326273418-3990330768-1000 -> {7AFF219F-A8D7-4D8E-A4A1-E0F8E0DDF2B2} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3786351732-3326273418-3990330768-1000 -> {7DE5D836-A57B-44E0-8558-69A5203446B5} URL = https://www.google.com/search?q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-16] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-16] (Oracle Corporation)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-02-25] (Eyeo GmbH)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 212.39.90.42 8.8.8.8
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\ZDRAVE\AppData\Roaming\Mozilla\Firefox\Profiles\3hd7hcqx.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-16] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-16] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-16] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\911bg.xml [2014-07-24]
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\diribg.xml [2014-07-24]
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\pe-bg.xml [2014-07-24]
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\portalbgdict.xml [2014-07-24]
FF Extension: Adblock Plus - C:\Users\ZDRAVE\AppData\Roaming\Mozilla\Firefox\Profiles\3hd7hcqx.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-04-03]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]
FF Extension: No Name - C:\Program Files\AVAST Software\Avast\WebRep\FF [Not Found]

Chrome:
=======
CHR HomePage: Default -> hxxp://search.babylon.com/?affID=119776&babsrc=HP_ss_bad2g&mntrId=48080015AFAE718F
CHR StartupUrls: Default -> "hxxp://www.google.com/", "hxxp://www.google.bg/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\ZDRAVE\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Adblock Plus) - C:\Users\ZDRAVE\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-04-03]
CHR Extension: (Avast SafePrice) - C:\Users\ZDRAVE\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-04-03]
CHR Extension: (BetaFish Adblocker) - C:\Users\ZDRAVE\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-04-03]
CHR Extension: (Bookmark Manager) - C:\Users\ZDRAVE\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-22]
CHR Extension: (Avast Online Security) - C:\Users\ZDRAVE\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-25]
CHR Extension: (Google Wallet) - C:\Users\ZDRAVE\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-03]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASLDRService; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [94208 2007-02-05] () [File not signed]
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 CLHNServiceForPowerDVD12; C:\Program Files\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe [89864 2013-03-04] (CyberLink Corp.)
R2 CyberLink PowerDVD 12 Media Server Monitor Service; C:\Program Files\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [77576 2013-03-04] (CyberLink)
R2 CyberLink PowerDVD 12 Media Server Service; C:\Program Files\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [294664 2013-03-04] (CyberLink)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 NFSserver; C:\Program Files\nfsd\nfsd.exe [148992 2010-01-13] (Dr. Hanewinkel -- www.haneWIN.de) [File not signed]
R2 PMAPDaemon; C:\Program Files\nfsd\pmapd.exe [78336 2008-11-19] (Dr. Hanewinkel -- www.haneWIN.de) [File not signed]
R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [254552 2012-09-12] ()
R2 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2005-01-31] (Ulead Systems, Inc.) [File not signed]
R2 Virtual Router; C:\Program Files\Virtual Router\VirtualRouterService.exe [12288 2013-02-10] (Chris Pietschmann (http://pietschsoft.com)) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AIDA64Driver; C:\Program Files\FinalWire\AIDA64 Extreme Edition\kerneld.x32 [32592 2013-06-02] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2014-04-18] (DT Soft Ltd)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2007-07-31] (ATK0100)
R2 ntk_PowerDVD12; C:\Program Files\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12.sys [121208 2012-09-10] (Cyberlink Corp.)
R3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [184192 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
R2 {73526619-C24F-470B-9BED-53D455FBB5C6}; C:\Program Files\CyberLink\PowerDVD12\Common\NavFilter\000.fcl [76560 2013-03-18] (CyberLink Corp.)
S3 cleanhlp; \??\C:\Users\ZDRAVE\Desktop\EmsisoftEmergencyKit\Run\cleanhlp32.sys [X]
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-25 19:51 - 2015-04-25 19:51 - 00017481 _____ () C:\Users\ZDRAVE\Desktop\FRST.txt
2015-04-25 19:49 - 2015-04-25 19:49 - 01139200 _____ (Farbar) C:\Users\ZDRAVE\Desktop\FRST.exe
2015-04-25 19:20 - 2015-04-25 19:21 - 00000000 ____D () C:\Program Files\AVAST Software
2015-04-25 18:20 - 2015-04-25 18:20 - 00002082 _____ () C:\Users\ZDRAVE\Desktop\Subtitle Workshop.lnk
2015-04-25 18:20 - 2015-04-25 18:20 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\URUSoft
2015-04-25 18:20 - 2015-04-25 18:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\URUSoft
2015-04-25 18:20 - 2015-04-25 18:20 - 00000000 ____D () C:\Program Files\URUSoft
2015-04-25 12:38 - 2015-04-25 19:23 - 00435198 _____ () C:\Windows\PFRO.log
2015-04-25 11:28 - 2015-04-25 11:25 - 00190131 _____ () C:\Users\ZDRAVE\Desktop\SCHANGEME1.rar
2015-04-25 11:25 - 2015-04-25 11:25 - 00190131 _____ () C:\Users\ZDRAVE\Documents\SCHANGEME1.rar
2015-04-25 11:24 - 2015-04-25 11:24 - 06624826 _____ () C:\Users\ZDRAVE\Documents\SCHANGEME1.arn
2015-04-25 08:06 - 2015-04-25 08:06 - 00000000 ____D () C:\Users\ZDRAVE\Downloads\Autoruns
2015-04-25 08:04 - 2015-04-25 08:04 - 00546464 _____ () C:\Users\ZDRAVE\Downloads\Autoruns.zip
2015-04-24 21:37 - 2015-04-24 21:38 - 00143488 _____ () C:\Windows\Minidump\042415-25296-01.dmp
2015-04-24 18:06 - 2015-04-24 17:40 - 00143440 _____ () C:\Users\ZDRAVE\Desktop\042415-20640-01.dmp
2015-04-24 17:40 - 2015-04-24 17:40 - 00143440 _____ () C:\Windows\Minidump\042415-20640-01.dmp
2015-04-22 21:37 - 2015-04-22 21:37 - 00036439 _____ () C:\Users\ZDRAVE\Desktop\Result1.txt
2015-04-22 21:26 - 2015-04-22 21:28 - 00036295 _____ () C:\Users\ZDRAVE\Downloads\Result.txt
2015-04-22 21:24 - 2015-04-22 21:24 - 00402944 _____ (Farbar) C:\Users\ZDRAVE\Downloads\MiniToolBox.exe
2015-04-18 04:29 - 2015-04-25 19:23 - 00000728 _____ () C:\Windows\setupact.log
2015-04-18 04:29 - 2015-04-18 04:29 - 00000000 _____ () C:\Windows\setuperr.log
2015-04-16 09:30 - 2015-04-16 09:30 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-04-16 07:24 - 2015-03-25 06:00 - 03088384 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-16 07:24 - 2015-03-25 06:00 - 02020864 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-16 07:24 - 2015-03-25 06:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-16 07:24 - 2015-03-25 06:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-16 07:24 - 2015-03-25 06:00 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-16 07:24 - 2015-03-25 06:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-16 07:24 - 2015-03-25 06:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-16 07:24 - 2015-03-25 06:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-16 07:24 - 2015-03-25 06:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-16 07:24 - 2015-03-25 06:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-16 07:24 - 2015-03-25 06:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-16 07:23 - 2015-03-23 06:06 - 00860160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-16 07:23 - 2015-03-23 06:06 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-16 07:23 - 2015-03-23 06:06 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-16 07:23 - 2015-03-23 06:06 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-16 07:23 - 2015-03-23 06:06 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-16 07:23 - 2015-03-23 06:06 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-16 07:23 - 2015-03-23 06:06 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-16 07:23 - 2015-03-23 05:59 - 00896000 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-16 07:22 - 2015-03-04 07:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-16 07:22 - 2015-03-04 07:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-16 07:21 - 2015-03-17 08:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-04-16 07:21 - 2015-03-17 08:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-16 07:21 - 2015-03-17 08:01 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-16 07:21 - 2015-03-17 08:01 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-16 07:21 - 2015-03-17 07:59 - 01306112 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-16 07:21 - 2015-03-17 07:57 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-16 07:21 - 2015-03-17 07:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-16 07:21 - 2015-03-17 07:57 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-16 07:21 - 2015-03-17 07:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-16 07:21 - 2015-03-17 07:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-16 07:21 - 2015-03-17 07:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-16 07:21 - 2015-03-17 07:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-16 07:21 - 2015-03-17 07:57 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-16 07:21 - 2015-03-17 07:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-16 07:21 - 2015-03-17 07:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-16 07:21 - 2015-03-17 07:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-16 07:21 - 2015-03-17 07:57 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-16 07:21 - 2015-03-17 07:56 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-16 07:21 - 2015-03-17 07:56 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-16 07:21 - 2015-03-17 07:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-16 07:21 - 2015-03-17 07:56 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-16 07:21 - 2015-03-17 07:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-16 07:21 - 2015-03-17 07:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-16 07:21 - 2015-03-17 07:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-16 07:21 - 2015-03-17 07:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-16 07:21 - 2015-03-17 07:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-16 07:21 - 2015-03-17 07:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-16 07:20 - 2015-04-02 02:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-16 07:20 - 2015-03-13 06:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-16 07:20 - 2015-03-13 06:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-16 07:20 - 2015-03-13 06:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-16 07:20 - 2015-03-13 06:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-16 07:20 - 2015-03-13 06:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-16 07:20 - 2015-03-13 06:16 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-16 07:20 - 2015-03-13 06:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-16 07:20 - 2015-03-13 06:09 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-16 07:20 - 2015-03-13 06:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-16 07:20 - 2015-03-13 06:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-16 07:20 - 2015-03-13 05:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-16 07:20 - 2015-03-13 05:43 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-16 07:20 - 2015-03-13 05:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-16 07:20 - 2015-03-13 05:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-16 07:20 - 2015-03-05 07:06 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-16 07:19 - 2015-03-13 06:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-16 07:19 - 2015-03-13 06:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-16 07:19 - 2015-03-13 06:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-16 07:19 - 2015-03-13 06:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-16 07:19 - 2015-03-13 06:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-16 07:19 - 2015-03-13 06:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-16 07:19 - 2015-03-13 06:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-16 07:19 - 2015-03-13 06:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-16 07:19 - 2015-03-13 05:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-16 07:19 - 2015-03-13 05:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-16 07:19 - 2015-03-13 05:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-16 07:19 - 2015-03-13 05:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-16 07:19 - 2015-03-13 05:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-16 07:19 - 2015-03-13 05:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-16 07:19 - 2015-03-13 05:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-16 07:19 - 2015-03-13 05:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-16 07:19 - 2015-02-25 06:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-16 07:16 - 2015-03-10 06:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-16 07:16 - 2015-03-10 06:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-16 07:12 - 2015-04-16 07:12 - 00001775 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2015-04-16 07:12 - 2015-04-16 07:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-04-12 13:24 - 2015-04-12 13:40 - 00000000 ____D () C:\Windows\rescache
2015-04-12 11:09 - 2015-04-12 11:09 - 00001048 _____ () C:\Users\Public\Desktop\Boilsoft Video Joiner.lnk
2015-04-11 23:35 - 2015-04-11 23:35 - 00001026 _____ () C:\Users\Public\Desktop\AimOne Video Joiner.lnk
2015-04-11 23:35 - 2015-04-11 23:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AimOne
2015-04-11 23:35 - 2015-04-11 23:35 - 00000000 ____D () C:\Program Files\AimOne
2015-04-11 23:07 - 2015-04-11 23:07 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\AimOne
2015-04-11 22:45 - 2015-04-11 22:45 - 00001031 _____ () C:\Users\ZDRAVE\Desktop\MP4Joiner.lnk
2015-04-11 22:45 - 2015-04-11 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP4Joiner
2015-04-11 22:45 - 2015-04-11 22:45 - 00000000 ____D () C:\Program Files\MP4Joiner
2015-04-11 22:43 - 2015-04-11 22:43 - 08406538 _____ ( ) C:\Users\ZDRAVE\Downloads\MP4Joiner-2.2-win32 [1].exe
2015-04-11 22:02 - 2015-04-11 22:02 - 00005068 _____ () C:\Users\ZDRAVE\Documents\cc_20150411_220203.reg
2015-04-11 17:31 - 2015-04-11 17:33 - 00000000 ____D () C:\Program Files\Ultra Video Joiner
2015-04-11 17:31 - 2015-04-11 17:31 - 00000977 _____ () C:\Users\Public\Desktop\Ultra Video Joiner.lnk
2015-04-11 17:31 - 2015-04-11 17:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultra Video Joiner
2015-04-11 17:31 - 2007-04-12 14:19 - 00129024 _____ () C:\Windows\system32\AVERM.dll
2015-04-11 17:31 - 2006-09-26 13:57 - 00028672 _____ () C:\Windows\system32\AVEQT.dll
2015-04-09 19:00 - 2015-04-09 19:00 - 00000959 _____ () C:\Users\Public\Desktop\Avidemux 2.6 (32-bit).lnk
2015-04-09 19:00 - 2015-04-09 19:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avidemux
2015-04-08 20:07 - 2015-04-08 20:07 - 00001432 _____ () C:\МБАМ-08.04.2015.txt
2015-04-07 18:48 - 2015-04-07 19:15 - 00000000 ____D () C:\Program Files\Total Video Converter
2015-04-07 18:41 - 2015-04-07 18:42 - 15728768 _____ (EffectMatrix Inc. ) C:\Users\ZDRAVE\Downloads\Total Video Converter 3.71.exe
2015-04-05 16:37 - 2015-04-05 16:37 - 11896837 _____ () C:\Users\ZDRAVE\Downloads\ffmpeg-20150404-git-511585c-win32-static(2).7z
2015-04-05 16:32 - 2015-04-05 16:32 - 01255557 _____ () C:\Users\ZDRAVE\Downloads\avanti-091(1).7z
2015-04-05 16:13 - 2015-04-05 16:13 - 11896837 _____ () C:\Users\ZDRAVE\Downloads\ffmpeg-20150404-git-511585c-win32-static(1).7z
2015-04-05 16:12 - 2015-04-05 16:12 - 01065635 _____ () C:\Users\ZDRAVE\Downloads\avanti-066.7z
2015-04-05 15:46 - 2015-04-05 15:46 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\Gui4Cli
2015-04-05 15:42 - 2015-04-05 15:42 - 11896837 _____ () C:\Users\ZDRAVE\Downloads\ffmpeg-20150404-git-511585c-win32-static.7z
2015-04-05 15:38 - 2015-04-05 15:39 - 01255557 _____ () C:\Users\ZDRAVE\Downloads\avanti-091.7z
2015-04-05 12:33 - 2015-04-05 12:33 - 00000000 ____D () C:\Users\ZDRAVE\Documents\Ulead VideoStudio
2015-04-05 11:53 - 2015-04-05 11:53 - 00000000 ____D () C:\Program Files\Intel
2015-04-05 11:53 - 1998-11-18 16:33 - 00144384 _____ (Intel Corporation) C:\Windows\system32\Iacenc.dll
2015-04-05 11:53 - 1997-06-13 08:56 - 00056832 _____ () C:\Windows\system32\Iyvu9_32.dll
2015-04-05 11:48 - 1998-10-29 16:45 - 00306688 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe
2015-04-05 11:46 - 2015-04-16 07:03 - 00054156 ____H () C:\Windows\QTFont.qfn
2015-04-05 11:46 - 2015-04-05 11:47 - 00001409 _____ () C:\Windows\QTFont.for
2015-04-05 11:45 - 2015-04-16 07:12 - 00000000 ____D () C:\Program Files\QuickTime
2015-04-05 11:45 - 2015-04-16 07:08 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-04-05 11:45 - 2015-04-05 11:45 - 00000020 _____ () C:\Windows\Ulead32.ini
2015-04-05 11:45 - 2015-04-05 11:45 - 00000000 ____D () C:\ProgramData\InstallShield
2015-04-05 11:44 - 2015-04-05 11:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ulead VideoStudio 10
2015-04-05 11:44 - 2015-04-05 11:44 - 00002088 _____ () C:\Users\Public\Desktop\Ulead VideoStudio 10.lnk
2015-04-05 11:42 - 2015-04-05 11:42 - 00000000 ____D () C:\Program Files\Ulead Systems
2015-04-05 11:42 - 2015-04-05 11:42 - 00000000 ____D () C:\Program Files\Common Files\Ulead Systems
2015-04-05 00:44 - 2015-04-06 00:29 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-04 09:59 - 2015-04-04 09:59 - 00042563 _____ () C:\Users\ZDRAVE\Downloads\The.Killers.1946.720p.BluRay.X264_AMIABLE.(subs.sab.bz).rar
2015-04-03 23:10 - 2006-08-26 02:21 - 00000204 _____ () C:\Users\ZDRAVE\Downloads\install.txt
2015-04-03 21:12 - 2015-04-03 21:12 - 02050564 _____ () C:\Users\ZDRAVE\Downloads\NeroAACCodec-1.5.1(1).zip
2015-04-03 20:56 - 2015-04-03 21:18 - 00000000 ____D () C:\Program Files\theFrontend
2015-04-03 20:56 - 2015-04-03 20:56 - 00001822 _____ () C:\Users\ZDRAVE\Desktop\theFrontend.lnk
2015-04-03 20:56 - 2015-04-03 20:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\theFrontend
2015-04-03 20:22 - 2015-04-03 20:23 - 04124539 _____ ( ) C:\Users\ZDRAVE\Downloads\theFrontend 0.0.0.4 [NR-7] (1).exe
2015-04-03 20:19 - 2015-04-03 20:20 - 00025108 _____ () C:\Users\ZDRAVE\Documents\cc_20150403_201935.reg
2015-04-03 19:57 - 2015-04-03 19:57 - 00000000 ____D () C:\Program Files\Adblock Plus for IE
2015-04-03 17:26 - 2015-04-03 17:26 - 00002163 _____ () C:\Users\ZDRAVE\Desktop\Google Chrome.lnk
2015-04-03 17:26 - 2015-04-03 17:26 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-04-02 20:41 - 2015-04-02 20:41 - 02050564 _____ () C:\Users\ZDRAVE\Downloads\NeroAACCodec-1.5.1.zip
2015-04-02 20:33 - 2015-04-02 20:34 - 04124539 _____ ( ) C:\Users\ZDRAVE\Downloads\theFrontend 0.0.0.4 [NR-7].exe
2015-04-02 19:13 - 2015-04-09 20:11 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\Audacity
2015-04-02 19:12 - 2015-04-02 19:12 - 00000941 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2015-04-02 19:12 - 2015-04-02 19:12 - 00000929 _____ () C:\Users\Public\Desktop\Audacity.lnk
2015-04-02 19:12 - 2015-04-02 19:12 - 00000000 ____D () C:\Program Files\Audacity
2015-04-02 19:09 - 2015-04-02 19:10 - 24210616 _____ (Audacity Team ) C:\Users\ZDRAVE\Downloads\audacity-win-2.1.0.exe
2015-04-01 19:35 - 2015-04-01 19:35 - 02208768 _____ () C:\Users\ZDRAVE\Downloads\adwcleaner_4.200.exe
2015-03-31 22:52 - 2015-03-31 22:52 - 00000929 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-03-31 22:52 - 2015-03-31 22:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-03-31 22:52 - 2015-03-31 22:52 - 00000000 ____D () C:\Program Files\CCleaner
2015-03-31 22:49 - 2015-03-31 22:50 - 05344528 _____ (Piriform Ltd) C:\Users\ZDRAVE\Downloads\ccsetup504.exe
2015-03-30 21:45 - 2015-03-30 21:45 - 00000957 _____ () C:\Users\Public\Desktop\Free Video Joiner.lnk
2015-03-30 21:45 - 2015-03-30 21:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Video Joiner
2015-03-30 21:45 - 2015-03-30 21:45 - 00000000 ____D () C:\Program Files\Free Video Joiner
2015-03-30 21:30 - 2015-03-30 21:30 - 03504649 _____ () C:\Users\ZDRAVE\Downloads\freevideojoinersetup.rar
2015-03-30 21:10 - 2015-03-30 21:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TMPGEnc Plus 2.5
2015-03-30 21:10 - 2015-03-30 21:10 - 00000000 ____D () C:\Program Files\Pegasys Inc
2015-03-30 21:07 - 2015-03-30 21:07 - 08816464 _____ (Pegasys Inc. ) C:\Users\ZDRAVE\Downloads\TMPGEnc-2.524.63.181-Plus-EN-Installer-DL.exe
2015-03-29 20:03 - 2015-03-29 20:03 - 00028160 _____ () C:\Users\ZDRAVE\Downloads\10_Rillington_place__1971_.(subs.sab.bz).rar
2015-03-27 21:38 - 2015-03-27 21:38 - 00000000 ____D () C:\Users\ZDRAVE\Documents\Ashampoo Burning Studio 15
2015-03-26 20:37 - 2015-03-26 20:38 - 00014382 _____ () C:\Users\ZDRAVE\Downloads\Laura
2015-03-26 19:05 - 2015-03-26 19:05 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\Ashampoo
2015-03-26 16:38 - 2015-03-26 16:38 - 00156239 _____ () C:\Users\ZDRAVE\Downloads\Alfred.Hitchcock.Collection.DVDRip.XviD.torrent
2015-03-26 13:33 - 2015-03-26 13:33 - 00014874 _____ () C:\Users\ZDRAVE\Downloads\Arlington.Road.1999.BDRip.x264.AAC-WAR.torrent
2015-03-26 13:31 - 2015-03-28 17:42 - 00000000 ____D () C:\Users\ZDRAVE\Downloads\ФИЛМИ
2015-03-26 13:28 - 2015-03-26 13:28 - 00011277 _____ () C:\Users\ZDRAVE\Downloads\The.Ninth.Gate.1999.BDRip.XviD.AC3-WAR.torrent
2015-03-26 13:02 - 2015-03-26 13:03 - 00017440 _____ () C:\Users\ZDRAVE\Downloads\Strange.Days.1995.BDRip.x264.AAC-WAR.torrent
2015-03-26 12:59 - 2015-03-26 12:59 - 00018165 _____ () C:\Users\ZDRAVE\Downloads\Fracture.2007.480p.BRRip.XviD.DUAL-KiNGS.torrent
2015-03-26 07:42 - 2015-03-26 07:56 - 00000000 ____D () C:\Windows\system32\vbox

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-25 19:51 - 2014-08-07 07:22 - 00000000 ____D () C:\FRST
2015-04-25 19:46 - 2014-04-16 19:18 - 01911823 _____ () C:\Windows\WindowsUpdate.log
2015-04-25 19:39 - 2014-04-16 22:03 - 00000986 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-25 19:34 - 2009-07-14 07:34 - 00026576 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-25 19:34 - 2009-07-14 07:34 - 00026576 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-25 19:30 - 2014-05-03 15:00 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-25 19:28 - 2014-04-18 06:17 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\uTorrent
2015-04-25 19:27 - 2014-04-18 06:45 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\Skype
2015-04-25 19:23 - 2015-01-02 17:28 - 00000000 ____D () C:\Program Files\nfsd
2015-04-25 19:23 - 2014-07-11 11:10 - 00000436 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2015-04-25 19:23 - 2014-04-16 22:03 - 00000982 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-25 19:23 - 2009-07-14 07:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-25 19:05 - 2014-08-09 05:23 - 00000000 ____D () C:\ProgramData\TEMP
2015-04-25 18:21 - 2014-05-16 09:55 - 00000000 ____D () C:\Program Files\SpywareBlaster
2015-04-25 17:08 - 2014-12-27 16:21 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\vlc
2015-04-24 21:37 - 2014-05-23 07:52 - 00000000 ____D () C:\Windows\Minidump
2015-04-22 19:59 - 2014-12-27 16:21 - 00000988 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-04-22 19:56 - 2015-03-22 09:34 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-04-19 21:35 - 2010-11-21 00:01 - 00781790 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-18 05:34 - 2014-11-03 13:37 - 00000000 ____D () C:\Program Files\MyDefrag v4.3.1
2015-04-17 08:30 - 2009-07-14 05:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-04-17 07:00 - 2014-12-11 23:22 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-17 07:00 - 2014-05-06 22:03 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-17 07:00 - 2009-07-14 05:37 - 00000000 ____D () C:\Windows\system32\bg-BG
2015-04-17 00:02 - 2014-04-17 18:34 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-16 23:48 - 2014-04-16 19:45 - 125832184 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-16 23:47 - 2014-04-18 08:29 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-04-16 09:46 - 2014-04-17 22:23 - 00000000 ____D () C:\ProgramData\Oracle
2015-04-16 09:44 - 2014-08-08 15:12 - 00000000 ____D () C:\Program Files\Java
2015-04-16 09:25 - 2015-01-29 06:41 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-04-16 06:46 - 2014-05-03 14:59 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-04-16 06:46 - 2014-05-03 14:59 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-04-13 18:31 - 2014-04-30 15:31 - 00000000 ____D () C:\Program Files\Hard Disk Sentinel
2015-04-12 11:09 - 2015-03-14 12:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Boilsoft
2015-04-12 11:08 - 2015-03-14 12:51 - 00000000 ____D () C:\Program Files\Boilsoft
2015-04-12 10:41 - 2014-04-16 19:46 - 00000000 ____D () C:\Users\ZDRAVE
2015-04-11 21:59 - 2014-04-18 07:20 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\DAEMON Tools Lite
2015-04-10 20:48 - 2015-01-05 21:17 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\avidemux
2015-04-10 06:50 - 2015-03-15 19:33 - 00000000 ____D () C:\Users\ZDRAVE\Documents\Youcam
2015-04-09 19:00 - 2015-01-05 21:16 - 00000000 ____D () C:\Program Files\Avidemux 2.6
2015-04-08 18:52 - 2014-04-16 22:02 - 00126520 _____ () C:\Users\ZDRAVE\AppData\Local\GDIPFONTCACHEV1.DAT
2015-04-08 18:46 - 2009-07-14 07:33 - 00444384 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-05 11:48 - 2014-04-17 22:45 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2015-04-05 11:42 - 2014-04-17 23:41 - 00000000 ____D () C:\Program Files\Common Files\InstallShield
2015-04-03 22:56 - 2014-04-20 19:11 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\CyberLink
2015-04-03 17:10 - 2015-03-02 17:08 - 00000000 ____D () C:\Program Files\Windows Live
2015-04-03 17:10 - 2014-04-18 06:45 - 00000000 ___RD () C:\Program Files\Skype
2015-04-03 17:09 - 2014-04-18 06:44 - 00000000 ____D () C:\ProgramData\Skype
2015-04-01 19:36 - 2014-08-27 07:18 - 00000000 ____D () C:\AdwCleaner
2015-03-31 21:56 - 2015-03-14 12:51 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Roaming\Boilsoft
2015-03-29 16:42 - 2014-04-20 19:11 - 00000000 ____D () C:\Users\ZDRAVE\Documents\CyberLink
2015-03-29 16:42 - 2014-04-20 18:52 - 00000000 ____D () C:\Users\Public\CyberLink
2015-03-26 19:05 - 2014-12-20 17:32 - 00000000 ____D () C:\Users\ZDRAVE\AppData\Local\ashampoo

==================== Files in the root of some directories =======

2014-08-23 15:06 - 2014-08-23 15:22 - 0001158 _____ () C:\Users\ZDRAVE\AppData\Roaming\DVDSubEdit.ini
2014-08-23 12:01 - 2014-08-23 15:15 - 0028536 _____ () C:\Users\ZDRAVE\AppData\Roaming\DVDSubEditLastFile0.txt
2014-08-23 15:15 - 2014-08-23 12:01 - 0024098 _____ () C:\Users\ZDRAVE\AppData\Roaming\DVDSubEditLastFile1.txt
2014-09-01 11:18 - 2015-02-12 13:43 - 0000365 _____ () C:\Users\ZDRAVE\AppData\Roaming\GVFWUIX

Some content of TEMP:
====================
C:\Users\ZDRAVE\AppData\Local\Temp\jre-8u45-windows-au.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-04-25 18:49

==================== End Of Log ============================

Докато гледам лог файловете нека да видим и колко актуални са драйверите ви.

 

Свалете програмата software.gifHWiNFO32

След успешна инсталация и стартиране, ще се появи следния прозорец:
e2991178c154ba7b.jpg

Натиснете Run.
Изчакайте търпеливо. След това изберете Save Report и HTML формат и натиснете Browse.

Посочете вашия десктоп и натиснете Next.

Ще се появява се Report Filter, изберете Finish.

0897c918f37fc402.jpg

На десктопа ще се появи HTML файл с име "User Name", където "User Name" е името на компютъра Ви (например файла от снимката се казва HOLLER-PC.HTM). Качете файла тук и публикувайте линка за download в следващия си пост.

1. Създайте нова точка за възстановяване:

 

http://windows.microsoft.com/bg-bg/windows7/create-a-restore-point

 

2. Изтеглете и разархивирайте следните два файла в отделни папки:

 

http://dox.bg/files/dw?a=a5e3ea8586

 

http://dox.bg/files/dw?a=f0457f385c

 

След това с десен бутон на My Computer => Manage => Отидете на Device Manager => отворете Network Adapters => отворете първо Realtek адаптера => отидете на Driver => кликнете Update Driver => изберете Browse my computer for driver software => посочете папката на първия разархивиран файл (като не забравяте да сложите отметката пред "include subfolders") и изберете Next и изчакайте драйвера да се актуаклизира.

 

Повторете стъпките и за Atheros (пак от Device Manager-a) => само че посочете папката на втория разархивиран файл.

 

Пишете дали ъпдейтите са минали успешно и дали сривовете продължават.

 

Това е засега!

 

Пoздрави!

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Назад

Разглеждащи това в момента 0

  • Няма регистрирани потребители разглеждащи тази страница.

Дарение

  • Подкрепи съществуването на форума - направи дарение
    32%
    Дарени 315 € от нужните 1 000 €

Бюлетин

Получавайте известие, когато има важна промяна или новина свързана с форума.
Абонирайте се

Профил

Навигация

Търсене

Търсене

Конфигуриране на push известия в браузъра
Chrome (Android)
  1. Докоснете иконата на катинар до адресната лента.
  2. Докоснете Разрешения → Известия.
  3. Променете предпочитанията си.
Chrome (Desktop)
  1. Кликнете върху иконата на катинар в адресната лента.
  2. Изберете Настройки на сайта.
  3. Намерете Известия и коригирайте предпочитанията си.