Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

"програма" спря да работи. Помощ!

25 февруари 201511 г.

Здравейте,

От близо два месеца все ми изписва, че някоя програма е спряла да работи. Преди два дни пък при включването на камерата ми се появи. Използвам и програмата Format Factory за вграждане на субтитри в клипове. От тази седмица ми излиза грешката " error 0xc00005". Нямам представа на какво се дължи. Изтеглих FRST. Това са резултатите:

Addition >> http://dox.bg/files/dw?a=cf06860dc7

FRST >> http://dox.bg/files/dw?a=98cfcb7315

Редактирано 5 март 201511 г. от icotonev (преглед на промените)

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

2 март 201511 г.

Здравейте ..! Ситуацията при вас е доста омазана..! Ще се опитам да ви помогна,но ще имаме доста работа..!
Като за начало..виждам че използвате две антивирусни програми..! Това е нежелателно ..:

AV: McAfee Anti-Virus and Anti-Spyware (Disabled - Up to date) {86355677-4064-3EA7-ABB3-1B136EB04637}
AV: Kingsoft AntiVirus Auto-Protect (Enabled - Up to date) {EC290B91-C1FE-14BE-A16D-56682562C5A8}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee Anti-Virus and Anti-Spyware (Disabled - Up to date) {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall (Disabled) {BE0ED752-0A0B-3FFF-80EC-B2269063014C}

Деинсталирайте по правилния начин една от двете антивирусни ..по ваш избор..!Можете да използвате и тази програма:

Изтеглете AppRemover и го запазете на вашия десктоп.

Внимание: Когато инсталирате AppRemover трябва да откажете да се инсталира OPSWAT Toolbar Security

Стартирате програмата:

Next >> Уверете се ще е маркиран "Remove Security Application"

Next >> AppRemover ще сканира всички приложения, свързани със сигурността на вашия компютър.

Маркирайте всички приложения които са излишни и си оставете само действащите...и кликате Next>> два пъти.

Следвайте допълнителните инструкциите на екрана. Ако поиска рестарт, моля направете го.

==========================================================================================================================================

Изтеглете програмата GeekUninstaller и я запазете на десктопа.
Разархивирайте я и стартирайте файла geek.exe От списъка намерете и деинсталирайте всички програми които съм ви написал в карето:

Ask Toolbar

KMPlayer Toolbar Updater

Math Problem Solver

omiga-plus uninstall

RelevantKnowledge

ShopperReports

Strong Signal

uTorrentControl2 Toolbar

Windows Savevid Toolbar

WinZipper

Java 6 Update 22

Java 6 Update 33

Кликнете с десен бутон върху програмата и изберете Uninstall

След края на всяка деинсталацията ще се отвори прозорец подканващ ви да премахнете всички остатъци от програмата (ако има такива, ако няма този прозорец няма да се появи):

Пример:

Натиснете бутона Finish за да изтриете останките от програмата.

=====================================================================================================================================================

Сканиране с AdwCleaner

Моля, изтеглете и стартирайте програмата AdwCleaner (by Xplode):

Затворете всички стартирани програми и браузъри
Кликнете два пъти върху adwcleaner.exe за да стартирате инструмента.
Натиснете OK, за да потвърдите, че всички стартирани програми ще бъдат затворени.
Маркирайте Clean
Вашият компютър ще се рестартира автоматично. Текстовия файл ще се отвори след рестарта.
Моля, да публикувате съдържанието на този лог в отговора си
Можете да намерите лога,който автоматично се запомня тук C:AdwCleaner[s0].txt

=========================================================================================================================================

Сканиране с Junkware Removal Tool

Моля, изтеглете Junkware Removal Tool (by Thisisu ) и запазете на вашия десктоп.

Спрете временно работата на защитните програми.
Стартирайте инструмента JRT.exe
Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата.
Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши.
Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt).
Моля копирайте съдържанието на лог файла в следващия си пост.

==========================================================================================================================================

Сканиране с Emsisoft Emergency Kit (Portable)

Моля, изтеглете Emsisoft Emergency Kit и запишете файла на вашия работен плот.
Кликнете два пъти върху EmsisoftEmergencyKit.exe.
Кликнете на Extract
След завършване, кликнете два пъти върху Emsisoft Emergency Kit shortcut на вашия Desktop за да стартирате програмата
Кликнете Yes за откриване на Potentially Unwanted Programs (PUP's).
Кликнете на Scan
Изберете Full Scan и след това на Scan
Когато сканирането приключи кликнете на Quarantine selected objects ако са открити зловредни обекти.
Кликнете на View Report
Копирайте (Copy) съдържанието на дневника и с (paste) публикувайте съдържанието в следващия си отговор.

=========================================================================================================================================

Сканиране с Farbar Recovery Scan Tool

Моля изтеглете Farbar Recovery Scan Tool (според версията на Windows изберете 32 битовата или 64 битовата версия) и го запазете на десктопа.
Стартирайте файла FRST.exe (или FRST64.exe)
Програмата ще се стартира. Натиснете YES за да се съгласите с лицензионното споразумение.
Натиснете бутона .
Изчакайте търпеливо проверката да приключи.
Ще се създадат два лог файла с името - FRST.txt и Addition.txt на десктопа.
Копирайте съдържанието на файла FRST.txt в следващия си пост. Прикачете Addition.txt в коментар си (погледнете опцията Прикачване на файлове, когато публикувате мнение).

========================================================================================================

Дневници

В следващия си отговор, моля да включите следните дневници:

FRST.txt
Addition.txt
JRT.txt
AdwCleaner[s0].txt
Emsisoft log

3 март 201511 г.

Автор

Благодаря за отговора. Направих всичко стъпка по стъпка. Ето ги резултатите:

FRST> http://dox.bg/files/dw?a=d71f611efa

Addition> http://dox.bg/files/dw?a=6fb9e39798

JRT> http://http://dox.bg/files/dw?a=89503dd216

AdwCleaner[s0]> http://dox.bg/files/dw?a=f1734486fc

Emsisoft>

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

3 март 201511 г.

Благодаря за отговора. Направих всичко стъпка по стъпка. Ето ги резултатите:

Нима...?

В коя моя инструкция пише да качвате резултатите в DOX..? И защо виждам все още две антивирусни програми..?

Сканиране с AdwCleaner

Вашият компютър ще се рестартира автоматично. Текстовия файл ще се отвори след рестарта.

Моля, да публикувате съдържанието на този лог в отговора си

Можете да намерите лога,който автоматично се запомня тук C:AdwCleaner[s0].txt

Сканиране с Junkware Removal Tool

Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt).

Моля копирайте съдържанието на лог файла в следващия си пост.

Сканиране с Emsisoft Emergency Kit (Portable)

Когато сканирането приключи кликнете на Quarantine selected objects ако са открити зловредни обекти.

Кликнете на View Report

Копирайте (Copy) съдържанието на дневника и с (paste) публикувайте съдържанието в следващия си отговор.

Сканиране с Farbar Recovery Scan Tool

Ще се създадат два лог файла с името - FRST.txt и Addition.txt на десктопа.

Копирайте съдържанието на файла FRST.txt в следващия си пост. Прикачете Addition.txt в коментар си (погледнете опцията Прикачване на файлове, когато публикувате мнение).

Всичко до тук е свободни съчинения от ваша страна и това затруднява моята работа..!Аз няма да позволя това...след като съм написал така инструкциите, значи има значение ...!!!

Фикс с Farbar Recovery Scan Tool

Изтеглете прикачения файл и го запазете там, където сте свалили FRST.exe => fixlist.txt

Стартирайте отново FRST.exe и натиснете бутона Fix веднъж и изчакайте.

Ще се създаде нов лог файла FixLog.txt. Прикачете съдържанието му в следващия си коментар.

ЗАБЕЛЕЖКА: Този скрипт е написан специално за този потребител,и за тази конкретна машина. Изпълнението на фикса, на друг компютър може да доведе до увреждане на операционната ви система

Дневници

В следващия си отговор, моля да включите следните дневници:

FixLog.txt

3 март 201511 г.

Автор

Съжалявам, че съм затруднил работата Ви.

Ето ги резултатите след Fix-а с FRST:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-03-2015

Ran by tihomirboev at 2015-03-03 15:57:42 Run:1

Running from C:\Users\tihomirboev\Desktop

Loaded Profiles: tihomirboev (Available profiles: tihomirboev)

Boot Mode: Normal

==============================================

Content of fixlist:

*****************

start

CreateRestorePoint:

CloseProcesses:

HKU\S-1-5-21-2756667080-2450539360-2434860297-1000\...\MountPoints2: E - E:\Install.exe

HKU\S-1-5-21-2756667080-2450539360-2434860297-1000\...\MountPoints2: {b7387323-a867-11e3-ac79-fe668b0dd315} - E:\DTLplus_Launcher.exe

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

BHO: No Name -> {27B4851A-3207-45A2-B947-BE8AFE6163AB} -> No File

Toolbar: HKLM - No Name - !{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - No File

Toolbar: HKLM - No Name - !{2318C2B1-4965-11d4-9B18-009027A5CD4F} - No File

Toolbar: HKLM - No Name - !{8dcb7100-df86-4384-8842-8fa844297b3f} - No File

Toolbar: HKLM - No Name - !{9E131A93-EED7-4BEB-B015-A0ADB30B5646} - No File

Toolbar: HKLM-x32 - No Name - !{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - No File

Toolbar: HKLM-x32 - No Name - !{2318C2B1-4965-11d4-9B18-009027A5CD4F} - No File

Toolbar: HKLM-x32 - No Name - !{8dcb7100-df86-4384-8842-8fa844297b3f} - No File

Toolbar: HKLM-x32 - No Name - !{9E131A93-EED7-4BEB-B015-A0ADB30B5646} - No File

Toolbar: HKU\.DEFAULT -> No Name - {FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} - No File

C:\Users\tihomirboev\AppData\Local\Temp\02EH0GGB.DLL

C:\Users\tihomirboev\AppData\Local\Temp\0BA14HKH.DLL

C:\Users\tihomirboev\AppData\Local\Temp\0CFR3UIX.DLL

C:\Users\tihomirboev\AppData\Local\Temp\0MXOAE1U.DLL

C:\Users\tihomirboev\AppData\Local\Temp\0O20PK4D.DLL

C:\Users\tihomirboev\AppData\Local\Temp\0QKXD1JD.DLL

C:\Users\tihomirboev\AppData\Local\Temp\0T0L1DZM.DLL

C:\Users\tihomirboev\AppData\Local\Temp\0T2FTLMK.DLL

C:\Users\tihomirboev\AppData\Local\Temp\0V1XFIKL.DLL

C:\Users\tihomirboev\AppData\Local\Temp\0XHXOKKA.DLL

C:\Users\tihomirboev\AppData\Local\Temp\0XP5EQJZ.DLL

C:\Users\tihomirboev\AppData\Local\Temp\0ZY4DL3K.DLL

C:\Users\tihomirboev\AppData\Local\Temp\1BU5NFFO.DLL

C:\Users\tihomirboev\AppData\Local\Temp\1DH5P3F4.DLL

C:\Users\tihomirboev\AppData\Local\Temp\1FMYIGT3.DLL

C:\Users\tihomirboev\AppData\Local\Temp\1G0SN23H.DLL

C:\Users\tihomirboev\AppData\Local\Temp\1IRGURGC.DLL

C:\Users\tihomirboev\AppData\Local\Temp\1OBBK30W.DLL

C:\Users\tihomirboev\AppData\Local\Temp\1OLQ5QIF.DLL

C:\Users\tihomirboev\AppData\Local\Temp\1RJZSSSU.DLL

C:\Users\tihomirboev\AppData\Local\Temp\1SPTIY4G.DLL

C:\Users\tihomirboev\AppData\Local\Temp\1SZP4WLU.DLL

C:\Users\tihomirboev\AppData\Local\Temp\21NIZJT3.DLL

C:\Users\tihomirboev\AppData\Local\Temp\23WHVLRY.DLL

C:\Users\tihomirboev\AppData\Local\Temp\2EBM6LC_.DLL

C:\Users\tihomirboev\AppData\Local\Temp\2FPR2XZG.DLL

C:\Users\tihomirboev\AppData\Local\Temp\2I3PEEM2.DLL

C:\Users\tihomirboev\AppData\Local\Temp\2JCPF2U3.DLL

C:\Users\tihomirboev\AppData\Local\Temp\2NFVEJWM.DLL

C:\Users\tihomirboev\AppData\Local\Temp\2OZBNM5U.DLL

C:\Users\tihomirboev\AppData\Local\Temp\2VN0EFH2.DLL

C:\Users\tihomirboev\AppData\Local\Temp\2WEB24EG.DLL

C:\Users\tihomirboev\AppData\Local\Temp\2ZC5LWDI.DLL

C:\Users\tihomirboev\AppData\Local\Temp\30RECY5Z.DLL

C:\Users\tihomirboev\AppData\Local\Temp\35GQ342B.DLL

C:\Users\tihomirboev\AppData\Local\Temp\3DFYYUCU.DLL

C:\Users\tihomirboev\AppData\Local\Temp\3IY5WVR2.DLL

C:\Users\tihomirboev\AppData\Local\Temp\3Q1ME2UL.DLL

C:\Users\tihomirboev\AppData\Local\Temp\3RADTDCJ.DLL

C:\Users\tihomirboev\AppData\Local\Temp\3WDKWCWY.DLL

C:\Users\tihomirboev\AppData\Local\Temp\41H21RQA.DLL

C:\Users\tihomirboev\AppData\Local\Temp\45WVZ2MK.DLL

C:\Users\tihomirboev\AppData\Local\Temp\4IGDXUEH.DLL

C:\Users\tihomirboev\AppData\Local\Temp\4IK3X3E5.DLL

C:\Users\tihomirboev\AppData\Local\Temp\4JU3U5EU.DLL

C:\Users\tihomirboev\AppData\Local\Temp\4K1CVVSF.DLL

C:\Users\tihomirboev\AppData\Local\Temp\4K5WILMX.DLL

C:\Users\tihomirboev\AppData\Local\Temp\4MHKRLEO.DLL

C:\Users\tihomirboev\AppData\Local\Temp\4UOZIPP4.DLL

C:\Users\tihomirboev\AppData\Local\Temp\4XB55BIG.DLL

C:\Users\tihomirboev\AppData\Local\Temp\5JWP4BSN.DLL

C:\Users\tihomirboev\AppData\Local\Temp\5MGE233W.DLL

C:\Users\tihomirboev\AppData\Local\Temp\5RMULJXP.DLL

C:\Users\tihomirboev\AppData\Local\Temp\5X4AODSP.DLL

C:\Users\tihomirboev\AppData\Local\Temp\5XIX5Z2R.DLL

C:\Users\tihomirboev\AppData\Local\Temp\5_EBPYX_.DLL

C:\Users\tihomirboev\AppData\Local\Temp\6PHMDS5I.DLL

C:\Users\tihomirboev\AppData\Local\Temp\86GV4Z-X.DLL

C:\Users\tihomirboev\AppData\Local\Temp\A2B1SOYJ.DLL

C:\Users\tihomirboev\AppData\Local\Temp\AHK3VG2Q.DLL

C:\Users\tihomirboev\AppData\Local\Temp\as5iqyp_.dll

C:\Users\tihomirboev\AppData\Local\Temp\AY3JSIO_.DLL

C:\Users\tihomirboev\AppData\Local\Temp\AYTHDX1Q.DLL

C:\Users\tihomirboev\AppData\Local\Temp\AZEOAO3E.DLL

C:\Users\tihomirboev\AppData\Local\Temp\B4ZGVQI9.DLL

C:\Users\tihomirboev\AppData\Local\Temp\BBFCABFBBBC.EXE

C:\Users\tihomirboev\AppData\Local\Temp\BFN3C3YY.DLL

C:\Users\tihomirboev\AppData\Local\Temp\BINTQIJT.DLL

C:\Users\tihomirboev\AppData\Local\Temp\BLCRZODZ.DLL

C:\Users\tihomirboev\AppData\Local\Temp\BXIDAEZK.DLL

C:\Users\tihomirboev\AppData\Local\Temp\BXSFUXWM.DLL

C:\Users\tihomirboev\AppData\Local\Temp\BYLPAZRX.DLL

C:\Users\tihomirboev\AppData\Local\Temp\BZ3VA21Z.DLL

C:\Users\tihomirboev\AppData\Local\Temp\C0YYKE5J.DLL

C:\Users\tihomirboev\AppData\Local\Temp\C520HXAZ.DLL

C:\Users\tihomirboev\AppData\Local\Temp\C53CGR01.DLL

C:\Users\tihomirboev\AppData\Local\Temp\C5SBYY3S.DLL

C:\Users\tihomirboev\AppData\Local\Temp\C5URQIYE.DLL

C:\Users\tihomirboev\AppData\Local\Temp\CCT.DLL

C:\Users\tihomirboev\AppData\Local\Temp\CL0NRTJI.DLL

C:\Users\tihomirboev\AppData\Local\Temp\CR4UKNH4.DLL

C:\Users\tihomirboev\AppData\Local\Temp\CU0E3NVF.DLL

C:\Users\tihomirboev\AppData\Local\Temp\DIKP3ITA.DLL

C:\Users\tihomirboev\AppData\Local\Temp\DJNV1HZJ.DLL

C:\Users\tihomirboev\AppData\Local\Temp\DK5QOARJ.DLL

C:\Users\tihomirboev\AppData\Local\Temp\DLLUI4KH.DLL

C:\Users\tihomirboev\AppData\Local\Temp\DMOTBVMN.DLL

C:\Users\tihomirboev\AppData\Local\Temp\DNNMNU03.DLL

C:\Users\tihomirboev\AppData\Local\Temp\DTNJEUZP.DLL

C:\Users\tihomirboev\AppData\Local\Temp\DXOBH1GC.DLL

C:\Users\tihomirboev\AppData\Local\Temp\DY0BQALI.DLL

C:\Users\tihomirboev\AppData\Local\Temp\E2QJ1KLA.DLL

C:\Users\tihomirboev\AppData\Local\Temp\E3CRMPPS.DLL

C:\Users\tihomirboev\AppData\Local\Temp\ECM1L2RS.DLL

C:\Users\tihomirboev\AppData\Local\Temp\EDF0T0F4.DLL

C:\Users\tihomirboev\AppData\Local\Temp\EDIPPVVS.DLL

C:\Users\tihomirboev\AppData\Local\Temp\EH6YSUWO.DLL

C:\Users\tihomirboev\AppData\Local\Temp\ELTA5TVN.DLL

C:\Users\tihomirboev\AppData\Local\Temp\EOYGJDNY.DLL

C:\Users\tihomirboev\AppData\Local\Temp\EUYSZZ4B.DLL

C:\Users\tihomirboev\AppData\Local\Temp\FJSSRRF4.DLL

C:\Users\tihomirboev\AppData\Local\Temp\FJX2LAGT.DLL

C:\Users\tihomirboev\AppData\Local\Temp\FS2C5JHK.DLL

C:\Users\tihomirboev\AppData\Local\Temp\FYNRPKCA.DLL

C:\Users\tihomirboev\AppData\Local\Temp\G5MGNII3.DLL

C:\Users\tihomirboev\AppData\Local\Temp\GBY31CA4.DLL

C:\Users\tihomirboev\AppData\Local\Temp\GCQEVJTI.DLL

C:\Users\tihomirboev\AppData\Local\Temp\GGID3GZJ.DLL

C:\Users\tihomirboev\AppData\Local\Temp\GN3MF2VC.DLL

C:\Users\tihomirboev\AppData\Local\Temp\GNSGF3TJ.DLL

C:\Users\tihomirboev\AppData\Local\Temp\GTGH40KH.DLL

C:\Users\tihomirboev\AppData\Local\Temp\GW-RYGHA.DLL

C:\Users\tihomirboev\AppData\Local\Temp\GYTD1QQW.DLL

C:\Users\tihomirboev\AppData\Local\Temp\GZLT4IVC.DLL

C:\Users\tihomirboev\AppData\Local\Temp\H25QXN5K.DLL

C:\Users\tihomirboev\AppData\Local\Temp\H4FK98JY.DLL

C:\Users\tihomirboev\AppData\Local\Temp\HDGZDKBD.DLL

C:\Users\tihomirboev\AppData\Local\Temp\HELLOW.EXE

C:\Users\tihomirboev\AppData\Local\Temp\HIBBY00A.DLL

C:\Users\tihomirboev\AppData\Local\Temp\HUPA1PGJ.DLL

C:\Users\tihomirboev\AppData\Local\Temp\HZVVDT0V.DLL

C:\Users\tihomirboev\AppData\Local\Temp\I4H2J355.DLL

C:\Users\tihomirboev\AppData\Local\Temp\IBM SPSS STATISTICS V19 CRACK ONLY BY EQUINOX__10924_I1448404770_IL1141206.EXE

C:\Users\tihomirboev\AppData\Local\Temp\ICHUPBNY.DLL

C:\Users\tihomirboev\AppData\Local\Temp\ICT2-H3Y.DLL

C:\Users\tihomirboev\AppData\Local\Temp\INSHV3.EXE

C:\Users\tihomirboev\AppData\Local\Temp\INSTALL_FLASHPLAYER16X32_CHRD_DN_AAA_AIH.EXE

C:\Users\tihomirboev\AppData\Local\Temp\ITDXKMLC.DLL

C:\Users\tihomirboev\AppData\Local\Temp\IX1I3YLF.DLL

C:\Users\tihomirboev\AppData\Local\Temp\J2XHUWA0.DLL

C:\Users\tihomirboev\AppData\Local\Temp\JAVAIC.DLL

C:\Users\tihomirboev\AppData\Local\Temp\JBBORAIL.DLL

C:\Users\tihomirboev\AppData\Local\Temp\JCJAUWWH.DLL

C:\Users\tihomirboev\AppData\Local\Temp\JDPNVPKU.DLL

C:\Users\tihomirboev\AppData\Local\Temp\JNX5GKKM.DLL

C:\Users\tihomirboev\AppData\Local\Temp\JQ2NNZ3A.DLL

C:\Users\tihomirboev\AppData\Local\Temp\JQULBPLN.DLL

C:\Users\tihomirboev\AppData\Local\Temp\jre-8u31-windows-au.exe

C:\Users\tihomirboev\AppData\Local\Temp\JZSXYYX3.DLL

C:\Users\tihomirboev\AppData\Local\Temp\K0YDI-OU.DLL

C:\Users\tihomirboev\AppData\Local\Temp\K4WJGO6T.DLL

C:\Users\tihomirboev\AppData\Local\Temp\K6BRNKD1.DLL

C:\Users\tihomirboev\AppData\Local\Temp\KMP_3.9.1.132.exe

C:\Users\tihomirboev\AppData\Local\Temp\KMP_3.9.1.133.exe

C:\Users\tihomirboev\AppData\Local\Temp\KOEJLS03.DLL

C:\Users\tihomirboev\AppData\Local\Temp\KOXQ_OYS.DLL

C:\Users\tihomirboev\AppData\Local\Temp\KZWMIXU4.DLL

C:\Users\tihomirboev\AppData\Local\Temp\L4OOGIWC.DLL

C:\Users\tihomirboev\AppData\Local\Temp\L5V11U2V.DLL

C:\Users\tihomirboev\AppData\Local\Temp\LB6PXXRQ.DLL

C:\Users\tihomirboev\AppData\Local\Temp\LJJMCGGP.DLL

C:\Users\tihomirboev\AppData\Local\Temp\LJJQONZL.DLL

C:\Users\tihomirboev\AppData\Local\Temp\LOGSFOMU.DLL

C:\Users\tihomirboev\AppData\Local\Temp\LPHEVMNF.DLL

C:\Users\tihomirboev\AppData\Local\Temp\LTCOWX50.DLL

C:\Users\tihomirboev\AppData\Local\Temp\M3KP1YG0.DLL

C:\Users\tihomirboev\AppData\Local\Temp\M4QFYFLP.DLL

C:\Users\tihomirboev\AppData\Local\Temp\MAGGOM3W.DLL

C:\Users\tihomirboev\AppData\Local\Temp\MARRLBUX.DLL

C:\Users\tihomirboev\AppData\Local\Temp\MCSJRDP4.DLL

C:\Users\tihomirboev\AppData\Local\Temp\MFVDCVS2.DLL

C:\Users\tihomirboev\AppData\Local\Temp\MJZERH3L.DLL

C:\Users\tihomirboev\AppData\Local\Temp\MM52GTVH.DLL

C:\Users\tihomirboev\AppData\Local\Temp\MRPXSSP0.DLL

C:\Users\tihomirboev\AppData\Local\Temp\MSFDJWWP.DLL

C:\Users\tihomirboev\AppData\Local\Temp\MSSCCT32.DLL

C:\Users\tihomirboev\AppData\Local\Temp\NKNSK5EJ.DLL

C:\Users\tihomirboev\AppData\Local\Temp\NPAARM2I.DLL

C:\Users\tihomirboev\AppData\Local\Temp\NSALLOUM.DLL

C:\Users\tihomirboev\AppData\Local\Temp\NVELQ3HD.DLL

C:\Users\tihomirboev\AppData\Local\Temp\NYBPBQON.DLL

C:\Users\tihomirboev\AppData\Local\Temp\NZQNMNVK.DLL

C:\Users\tihomirboev\AppData\Local\Temp\O2VGTNGH.DLL

C:\Users\tihomirboev\AppData\Local\Temp\O3J1LEWP.DLL

C:\Users\tihomirboev\AppData\Local\Temp\O3SYZTVL.DLL

C:\Users\tihomirboev\AppData\Local\Temp\OCHELPER.DLL

C:\Users\tihomirboev\AppData\Local\Temp\ochelper.exe

C:\Users\tihomirboev\AppData\Local\Temp\OCJQOENC.DLL

C:\Users\tihomirboev\AppData\Local\Temp\OD02XFEY.DLL

C:\Users\tihomirboev\AppData\Local\Temp\ODGBCTAU.DLL

C:\Users\tihomirboev\AppData\Local\Temp\OGH5QQJ1.DLL

C:\Users\tihomirboev\AppData\Local\Temp\OINO1YF4.DLL

C:\Users\tihomirboev\AppData\Local\Temp\OM3BDBLA.DLL

C:\Users\tihomirboev\AppData\Local\Temp\OOPDOLEC.DLL

C:\Users\tihomirboev\AppData\Local\Temp\ORVHMHQ4.DLL

C:\Users\tihomirboev\AppData\Local\Temp\P2CP5YI1.DLL

C:\Users\tihomirboev\AppData\Local\Temp\P2GKAFCW.DLL

C:\Users\tihomirboev\AppData\Local\Temp\P5REWMLR.DLL

C:\Users\tihomirboev\AppData\Local\Temp\PDX4NCC2.DLL

C:\Users\tihomirboev\AppData\Local\Temp\PHOUF0HW.DLL

C:\Users\tihomirboev\AppData\Local\Temp\PLYDYDJX.DLL

C:\Users\tihomirboev\AppData\Local\Temp\PUQZEK1W.DLL

C:\Users\tihomirboev\AppData\Local\Temp\PZKZJK1P.DLL

C:\Users\tihomirboev\AppData\Local\Temp\Q1245AXP.DLL

C:\Users\tihomirboev\AppData\Local\Temp\Q1CL5INI.DLL

C:\Users\tihomirboev\AppData\Local\Temp\QCDKMS2N.DLL

C:\Users\tihomirboev\AppData\Local\Temp\QDLWI4J2.DLL

C:\Users\tihomirboev\AppData\Local\Temp\QF1PM9CB.DLL

C:\Users\tihomirboev\AppData\Local\Temp\QIBEC1HM.DLL

C:\Users\tihomirboev\AppData\Local\Temp\QIU0LECI.DLL

C:\Users\tihomirboev\AppData\Local\Temp\QQD2Z5IB.DLL

C:\Users\tihomirboev\AppData\Local\Temp\Quarantine.exe

C:\Users\tihomirboev\AppData\Local\Temp\RDH0L0V0.DLL

C:\Users\tihomirboev\AppData\Local\Temp\RIWUBYBA.DLL

C:\Users\tihomirboev\AppData\Local\Temp\RLH5ZVFL.DLL

C:\Users\tihomirboev\AppData\Local\Temp\RN5Y03PR.DLL

C:\Users\tihomirboev\AppData\Local\Temp\RRFMTVFL.DLL

C:\Users\tihomirboev\AppData\Local\Temp\RWS4TMGI.DLL

C:\Users\tihomirboev\AppData\Local\Temp\RXQ03JPK.DLL

C:\Users\tihomirboev\AppData\Local\Temp\S4R0DTSA.DLL

C:\Users\tihomirboev\AppData\Local\Temp\SCPJCG1Y.DLL

C:\Users\tihomirboev\AppData\Local\Temp\SE3H1AQA.DLL

C:\Users\tihomirboev\AppData\Local\Temp\SETUP.EXE

C:\Users\tihomirboev\AppData\Local\Temp\SG14S3BI.DLL

C:\Users\tihomirboev\AppData\Local\Temp\SHTBTX3X.DLL

C:\Users\tihomirboev\AppData\Local\Temp\SIFBYS4R.DLL

C:\Users\tihomirboev\AppData\Local\Temp\SISLYLYW.DLL

C:\Users\tihomirboev\AppData\Local\Temp\SkypeSetup.exe

C:\Users\tihomirboev\AppData\Local\Temp\SMHXTPGS.DLL

C:\Users\tihomirboev\AppData\Local\Temp\SMI41FJ5.DLL

C:\Users\tihomirboev\AppData\Local\Temp\SMPDG4UB.DLL

C:\Users\tihomirboev\AppData\Local\Temp\sqlite3.dll

C:\Users\tihomirboev\AppData\Local\Temp\SUQ82VAB.DLL

C:\Users\tihomirboev\AppData\Local\Temp\SY5JRKQR.DLL

C:\Users\tihomirboev\AppData\Local\Temp\SYSLFPSX.DLL

C:\Users\tihomirboev\AppData\Local\Temp\SZRHBFYL.DLL

C:\Users\tihomirboev\AppData\Local\Temp\T3PADAOH.DLL

C:\Users\tihomirboev\AppData\Local\Temp\T4SMDL5X.DLL

C:\Users\tihomirboev\AppData\Local\Temp\tbuTor.dll

C:\Users\tihomirboev\AppData\Local\Temp\TC1GPCPJ.DLL

C:\Users\tihomirboev\AppData\Local\Temp\TH1N2LHO.DLL

C:\Users\tihomirboev\AppData\Local\Temp\TPEW923C.DLL

C:\Users\tihomirboev\AppData\Local\Temp\TUUJZY3E.DLL

C:\Users\tihomirboev\AppData\Local\Temp\UHLI3QV5.DLL

C:\Users\tihomirboev\AppData\Local\Temp\UK5AFZF5.DLL

C:\Users\tihomirboev\AppData\Local\Temp\UKKX3J1B.DLL

C:\Users\tihomirboev\AppData\Local\Temp\UNHOPGD4.DLL

C:\Users\tihomirboev\AppData\Local\Temp\USF-8DG8.DLL

C:\Users\tihomirboev\AppData\Local\Temp\UXTM1TFV.DLL

C:\Users\tihomirboev\AppData\Local\Temp\UY5ZGVVS.DLL

C:\Users\tihomirboev\AppData\Local\Temp\V3PROT2D.DLL

C:\Users\tihomirboev\AppData\Local\Temp\VC0MLZXK.DLL

C:\Users\tihomirboev\AppData\Local\Temp\VC4YA5KZ.DLL

C:\Users\tihomirboev\AppData\Local\Temp\VD2DRVMJ.DLL

C:\Users\tihomirboev\AppData\Local\Temp\VXHT0S3K.DLL

C:\Users\tihomirboev\AppData\Local\Temp\VXOMIWQD.DLL

C:\Users\tihomirboev\AppData\Local\Temp\W12JUWZU.DLL

C:\Users\tihomirboev\AppData\Local\Temp\W2BV2YCV.DLL

C:\Users\tihomirboev\AppData\Local\Temp\W4FQNADY.DLL

C:\Users\tihomirboev\AppData\Local\Temp\W4QETHR1.DLL

C:\Users\tihomirboev\AppData\Local\Temp\W5KMOZQZ.DLL

C:\Users\tihomirboev\AppData\Local\Temp\WADDPFR5.DLL

C:\Users\tihomirboev\AppData\Local\Temp\WTG0DM5S.DLL

C:\Users\tihomirboev\AppData\Local\Temp\WZKNA25J.DLL

C:\Users\tihomirboev\AppData\Local\Temp\X2EYSWA1.DLL

C:\Users\tihomirboev\AppData\Local\Temp\XALZWB3U.DLL

C:\Users\tihomirboev\AppData\Local\Temp\XAWQSRQH.DLL

C:\Users\tihomirboev\AppData\Local\Temp\XNIGT1PN.DLL

C:\Users\tihomirboev\AppData\Local\Temp\XPIQIVPD.DLL

C:\Users\tihomirboev\AppData\Local\Temp\XSPFP4HO.DLL

C:\Users\tihomirboev\AppData\Local\Temp\XWIMBIPY.DLL

C:\Users\tihomirboev\AppData\Local\Temp\XZWNQ1PR.DLL

C:\Users\tihomirboev\AppData\Local\Temp\Y0OLNP2H.DLL

C:\Users\tihomirboev\AppData\Local\Temp\YBMAKWE1.DLL

C:\Users\tihomirboev\AppData\Local\Temp\YBWPNPTQ.DLL

C:\Users\tihomirboev\AppData\Local\Temp\YIWWDTAE.DLL

C:\Users\tihomirboev\AppData\Local\Temp\YLC33PAD.DLL

C:\Users\tihomirboev\AppData\Local\Temp\YONLFUF3.DLL

C:\Users\tihomirboev\AppData\Local\Temp\YPMY1HIF.DLL

C:\Users\tihomirboev\AppData\Local\Temp\YPVBHUQM.DLL

C:\Users\tihomirboev\AppData\Local\Temp\YSE3PI5N.DLL

C:\Users\tihomirboev\AppData\Local\Temp\YUR5D4GE.DLL

C:\Users\tihomirboev\AppData\Local\Temp\Z3B0AKA0.DLL

C:\Users\tihomirboev\AppData\Local\Temp\ZAIDOMIR.DLL

C:\Users\tihomirboev\AppData\Local\Temp\ZAMCCJ1G.DLL

C:\Users\tihomirboev\AppData\Local\Temp\ZB2LNNMZ.DLL

C:\Users\tihomirboev\AppData\Local\Temp\ZGJQ1LEH.DLL

C:\Users\tihomirboev\AppData\Local\Temp\ZK7V8TEF.DLL

C:\Users\tihomirboev\AppData\Local\Temp\ZO5-D7DM.DLL

C:\Users\tihomirboev\AppData\Local\Temp\ZPHGRPYR.DLL

C:\Users\tihomirboev\AppData\Local\Temp\ZPVFZXUO.DLL

C:\Users\tihomirboev\AppData\Local\Temp\ZV1MNIZX.DLL

C:\Users\tihomirboev\AppData\Local\Temp\ZXQ0RUG5.DLL

C:\Users\tihomirboev\AppData\Local\Temp\ZYCXB0OQ.DLL

C:\Users\tihomirboev\AppData\Local\Temp\ZZAM0FOY.DLL

C:\Users\tihomirboev\AppData\Local\Temp\_is2C3D.exe

C:\Users\tihomirboev\AppData\Local\Temp\_isE263.exe

C:\Users\tihomirboev\AppData\Local\Temp\_P9ACP0S.DLL

C:\Users\tihomirboev\AppData\Local\Temp\{BF102B31-7C7A-4E1D-ACFD-47868208F969}-GOOGLETOOLBARINSTALLER_UPDATER_SIGNED.EXE

C:\Users\tihomirboev\AppData\Local\Temp\{C6D641BB-D0DF-4127-B212-B7EED5D2C148}-GOOGLEUPDATESETUP.EXE

C:\Windows\ERUNT.EXE

C:\Windows\SysWOW64\FL2023~1.EXE

C:\Windows\SysWOW64\FL2023~2.EXE

C:\Windows\SysWOW64\FL2023~3.EXE

C:\Windows\SysWOW64\FL2023~4.EXE

C:\Windows\SysWOW64\FL2023~5.EXE

C:\Windows\SysWOW64\FL2023~6.EXE

C:\Windows\SysWOW64\FL2023~7.EXE

C:\Windows\SysWOW64\FL2023~8.EXE

C:\Windows\SysWOW64\FL2023~9.EXE

C:\Windows\SysWOW64\FL202~10.EXE

C:\Windows\SysWOW64\FL9806~1.EXE

C:\Windows\SysWOW64\FL9806~2.EXE

C:\Windows\SysWOW64\FL9806~3.EXE

C:\Windows\SysWOW64\FL9806~4.EXE

C:\Windows\SysWOW64\FL9806~5.EXE

C:\Windows\SysWOW64\FL9806~6.EXE

C:\Windows\SysWOW64\FL9806~7.EXE

C:\Windows\SysWOW64\FLASHPLAYERINSTALLER.EXE

C:\Windows\SysWOW64\FLASHP~2.EXE

C:\Windows\SysWOW64\FLASHP~3.EXE

C:\Windows\SysWOW64\FLASHP~4.EXE

C:\Windows\SysWOW64\MSXML.DLL

C:\Windows\SysWOW64\NEWTONSOFT.JSON.NET20.DLL

C:\Windows\SysWOW64\Drivers\SNCDUVC.SYS

C:\Windows\SysWOW64\Drivers\SNP2UVC.SYS

Task: {60461739-5993-4D08-95CB-AB291DBAD262} - System32\Tasks\UNELEVATE_5123 => C:\Program Files (x86)\ShopperPro\JSDriver\1.37.0.871\jsdrv.exe <==== ATTENTION

Task: {96E56856-F025-48E0-B7CF-B232A1069A8A} - System32\Tasks\eType Setup => C:\Users\TIHOMI~1\AppData\Local\Temp\eType Setup403515.exe <==== ATTENTION

Task: {F06772B8-3D94-478A-8DED-A00686FB593D} - System32\Tasks\{41C353F2-128B-4DA7-B25B-67456296788E} => pcalua.exe -a C:\Users\tihomirboev\AppData\Roaming\omiga-plus\UninstallManager.exe -c -ptid=smt <==== ATTENTION

AlternateDataStreams: C:\ProgramData\TEMP:1D32EC29

AlternateDataStreams: C:\ProgramData\TEMP:4D066AD2

AlternateDataStreams: C:\ProgramData\TEMP:56E2E879

AlternateDataStreams: C:\ProgramData\TEMP:93DE1838

AlternateDataStreams: C:\ProgramData\TEMP:ABE89FFE

AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1

AlternateDataStreams: C:\ProgramData\TEMP:E1F04E8D

AlternateDataStreams: C:\Users\tihomirboev\AppData\Local:QwXwfpzzmDa5Mg8WV27k9

CMD: ipconfig /flushdns

emptytemp:

end

*****************

Restore point was successfully created.

Processes closed successfully.

"HKU\S-1-5-21-2756667080-2450539360-2434860297-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E" => Key deleted successfully.

"HKU\S-1-5-21-2756667080-2450539360-2434860297-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b7387323-a867-11e3-ac79-fe668b0dd315}" => Key deleted successfully.

HKCR\CLSID\{b7387323-a867-11e3-ac79-fe668b0dd315} => Key not found.

HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.

HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.

HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}" => Key deleted successfully.

HKCR\CLSID\{27B4851A-3207-45A2-B947-BE8AFE6163AB} => Key not found.

HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\!{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} => value deleted successfully.

HKCR\CLSID\!{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} => Key not found.

HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\!{2318C2B1-4965-11d4-9B18-009027A5CD4F} => value deleted successfully.

HKCR\CLSID\!{2318C2B1-4965-11d4-9B18-009027A5CD4F} => Key not found.

HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\!{8dcb7100-df86-4384-8842-8fa844297b3f} => value deleted successfully.

HKCR\CLSID\!{8dcb7100-df86-4384-8842-8fa844297b3f} => Key not found.

HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\!{9E131A93-EED7-4BEB-B015-A0ADB30B5646} => value deleted successfully.

HKCR\CLSID\!{9E131A93-EED7-4BEB-B015-A0ADB30B5646} => Key not found.

HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\!{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} => value deleted successfully.

HKCR\Wow6432Node\CLSID\!{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} => Key not found.

HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\!{2318C2B1-4965-11d4-9B18-009027A5CD4F} => value deleted successfully.

HKCR\Wow6432Node\CLSID\!{2318C2B1-4965-11d4-9B18-009027A5CD4F} => Key not found.

HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\!{8dcb7100-df86-4384-8842-8fa844297b3f} => value deleted successfully.

HKCR\Wow6432Node\CLSID\!{8dcb7100-df86-4384-8842-8fa844297b3f} => Key not found.

HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\!{9E131A93-EED7-4BEB-B015-A0ADB30B5646} => value deleted successfully.

HKCR\Wow6432Node\CLSID\!{9E131A93-EED7-4BEB-B015-A0ADB30B5646} => Key not found.

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} => value deleted successfully.

HKCR\CLSID\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} => Key not found.

C:\Users\tihomirboev\AppData\Local\Temp\02EH0GGB.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\0BA14HKH.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\0CFR3UIX.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\0MXOAE1U.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\0O20PK4D.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\0QKXD1JD.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\0T0L1DZM.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\0T2FTLMK.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\0V1XFIKL.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\0XHXOKKA.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\0XP5EQJZ.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\0ZY4DL3K.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\1BU5NFFO.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\1DH5P3F4.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\1FMYIGT3.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\1G0SN23H.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\1IRGURGC.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\1OBBK30W.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\1OLQ5QIF.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\1RJZSSSU.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\1SPTIY4G.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\1SZP4WLU.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\21NIZJT3.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\23WHVLRY.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\2EBM6LC_.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\2FPR2XZG.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\2I3PEEM2.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\2JCPF2U3.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\2NFVEJWM.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\2OZBNM5U.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\2VN0EFH2.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\2WEB24EG.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\2ZC5LWDI.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\30RECY5Z.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\35GQ342B.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\3DFYYUCU.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\3IY5WVR2.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\3Q1ME2UL.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\3RADTDCJ.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\3WDKWCWY.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\41H21RQA.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\45WVZ2MK.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\4IGDXUEH.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\4IK3X3E5.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\4JU3U5EU.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\4K1CVVSF.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\4K5WILMX.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\4MHKRLEO.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\4UOZIPP4.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\4XB55BIG.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\5JWP4BSN.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\5MGE233W.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\5RMULJXP.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\5X4AODSP.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\5XIX5Z2R.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\5_EBPYX_.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\6PHMDS5I.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\86GV4Z-X.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\A2B1SOYJ.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\AHK3VG2Q.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\as5iqyp_.dll => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\AY3JSIO_.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\AYTHDX1Q.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\AZEOAO3E.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\B4ZGVQI9.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\BBFCABFBBBC.EXE => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\BFN3C3YY.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\BINTQIJT.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\BLCRZODZ.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\BXIDAEZK.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\BXSFUXWM.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\BYLPAZRX.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\BZ3VA21Z.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\C0YYKE5J.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\C520HXAZ.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\C53CGR01.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\C5SBYY3S.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\C5URQIYE.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\CCT.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\CL0NRTJI.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\CR4UKNH4.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\CU0E3NVF.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\DIKP3ITA.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\DJNV1HZJ.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\DK5QOARJ.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\DLLUI4KH.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\DMOTBVMN.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\DNNMNU03.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\DTNJEUZP.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\DXOBH1GC.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\DY0BQALI.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\E2QJ1KLA.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\E3CRMPPS.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ECM1L2RS.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\EDF0T0F4.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\EDIPPVVS.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\EH6YSUWO.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ELTA5TVN.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\EOYGJDNY.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\EUYSZZ4B.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\FJSSRRF4.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\FJX2LAGT.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\FS2C5JHK.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\FYNRPKCA.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\G5MGNII3.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\GBY31CA4.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\GCQEVJTI.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\GGID3GZJ.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\GN3MF2VC.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\GNSGF3TJ.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\GTGH40KH.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\GW-RYGHA.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\GYTD1QQW.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\GZLT4IVC.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\H25QXN5K.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\H4FK98JY.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\HDGZDKBD.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\HELLOW.EXE => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\HIBBY00A.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\HUPA1PGJ.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\HZVVDT0V.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\I4H2J355.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\IBM SPSS STATISTICS V19 CRACK ONLY BY EQUINOX__10924_I1448404770_IL1141206.EXE => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ICHUPBNY.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ICT2-H3Y.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\INSHV3.EXE => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\INSTALL_FLASHPLAYER16X32_CHRD_DN_AAA_AIH.EXE => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ITDXKMLC.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\IX1I3YLF.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\J2XHUWA0.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\JAVAIC.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\JBBORAIL.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\JCJAUWWH.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\JDPNVPKU.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\JNX5GKKM.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\JQ2NNZ3A.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\JQULBPLN.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\jre-8u31-windows-au.exe => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\JZSXYYX3.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\K0YDI-OU.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\K4WJGO6T.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\K6BRNKD1.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\KMP_3.9.1.132.exe => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\KMP_3.9.1.133.exe => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\KOEJLS03.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\KOXQ_OYS.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\KZWMIXU4.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\L4OOGIWC.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\L5V11U2V.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\LB6PXXRQ.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\LJJMCGGP.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\LJJQONZL.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\LOGSFOMU.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\LPHEVMNF.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\LTCOWX50.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\M3KP1YG0.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\M4QFYFLP.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\MAGGOM3W.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\MARRLBUX.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\MCSJRDP4.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\MFVDCVS2.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\MJZERH3L.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\MM52GTVH.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\MRPXSSP0.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\MSFDJWWP.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\MSSCCT32.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\NKNSK5EJ.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\NPAARM2I.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\NSALLOUM.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\NVELQ3HD.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\NYBPBQON.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\NZQNMNVK.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\O2VGTNGH.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\O3J1LEWP.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\O3SYZTVL.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\OCHELPER.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ochelper.exe => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\OCJQOENC.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\OD02XFEY.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ODGBCTAU.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\OGH5QQJ1.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\OINO1YF4.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\OM3BDBLA.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\OOPDOLEC.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ORVHMHQ4.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\P2CP5YI1.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\P2GKAFCW.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\P5REWMLR.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\PDX4NCC2.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\PHOUF0HW.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\PLYDYDJX.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\PUQZEK1W.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\PZKZJK1P.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\Q1245AXP.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\Q1CL5INI.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\QCDKMS2N.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\QDLWI4J2.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\QF1PM9CB.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\QIBEC1HM.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\QIU0LECI.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\QQD2Z5IB.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\Quarantine.exe => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\RDH0L0V0.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\RIWUBYBA.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\RLH5ZVFL.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\RN5Y03PR.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\RRFMTVFL.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\RWS4TMGI.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\RXQ03JPK.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\S4R0DTSA.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\SCPJCG1Y.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\SE3H1AQA.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\SETUP.EXE => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\SG14S3BI.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\SHTBTX3X.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\SIFBYS4R.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\SISLYLYW.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\SkypeSetup.exe => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\SMHXTPGS.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\SMI41FJ5.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\SMPDG4UB.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\sqlite3.dll => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\SUQ82VAB.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\SY5JRKQR.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\SYSLFPSX.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\SZRHBFYL.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\T3PADAOH.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\T4SMDL5X.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\tbuTor.dll => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\TC1GPCPJ.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\TH1N2LHO.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\TPEW923C.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\TUUJZY3E.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\UHLI3QV5.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\UK5AFZF5.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\UKKX3J1B.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\UNHOPGD4.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\USF-8DG8.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\UXTM1TFV.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\UY5ZGVVS.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\V3PROT2D.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\VC0MLZXK.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\VC4YA5KZ.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\VD2DRVMJ.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\VXHT0S3K.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\VXOMIWQD.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\W12JUWZU.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\W2BV2YCV.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\W4FQNADY.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\W4QETHR1.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\W5KMOZQZ.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\WADDPFR5.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\WTG0DM5S.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\WZKNA25J.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\X2EYSWA1.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\XALZWB3U.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\XAWQSRQH.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\XNIGT1PN.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\XPIQIVPD.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\XSPFP4HO.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\XWIMBIPY.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\XZWNQ1PR.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\Y0OLNP2H.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\YBMAKWE1.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\YBWPNPTQ.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\YIWWDTAE.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\YLC33PAD.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\YONLFUF3.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\YPMY1HIF.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\YPVBHUQM.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\YSE3PI5N.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\YUR5D4GE.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\Z3B0AKA0.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ZAIDOMIR.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ZAMCCJ1G.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ZB2LNNMZ.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ZGJQ1LEH.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ZK7V8TEF.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ZO5-D7DM.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ZPHGRPYR.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ZPVFZXUO.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ZV1MNIZX.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ZXQ0RUG5.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ZYCXB0OQ.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\ZZAM0FOY.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\_is2C3D.exe => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\_isE263.exe => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\_P9ACP0S.DLL => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\{BF102B31-7C7A-4E1D-ACFD-47868208F969}-GOOGLETOOLBARINSTALLER_UPDATER_SIGNED.EXE => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp\{C6D641BB-D0DF-4127-B212-B7EED5D2C148}-GOOGLEUPDATESETUP.EXE => Moved successfully.

C:\Windows\ERUNT.EXE => Moved successfully.

C:\Windows\SysWOW64\FL2023~1.EXE => Moved successfully.

C:\Windows\SysWOW64\FL2023~2.EXE => Moved successfully.

C:\Windows\SysWOW64\FL2023~3.EXE => Moved successfully.

C:\Windows\SysWOW64\FL2023~4.EXE => Moved successfully.

C:\Windows\SysWOW64\FL2023~5.EXE => Moved successfully.

C:\Windows\SysWOW64\FL2023~6.EXE => Moved successfully.

C:\Windows\SysWOW64\FL2023~7.EXE => Moved successfully.

C:\Windows\SysWOW64\FL2023~8.EXE => Moved successfully.

C:\Windows\SysWOW64\FL2023~9.EXE => Moved successfully.

C:\Windows\SysWOW64\FL202~10.EXE => Moved successfully.

C:\Windows\SysWOW64\FL9806~1.EXE => Moved successfully.

C:\Windows\SysWOW64\FL9806~2.EXE => Moved successfully.

C:\Windows\SysWOW64\FL9806~3.EXE => Moved successfully.

C:\Windows\SysWOW64\FL9806~4.EXE => Moved successfully.

C:\Windows\SysWOW64\FL9806~5.EXE => Moved successfully.

C:\Windows\SysWOW64\FL9806~6.EXE => Moved successfully.

C:\Windows\SysWOW64\FL9806~7.EXE => Moved successfully.

C:\Windows\SysWOW64\FLASHPLAYERINSTALLER.EXE => Moved successfully.

C:\Windows\SysWOW64\FLASHP~2.EXE => Moved successfully.

C:\Windows\SysWOW64\FLASHP~3.EXE => Moved successfully.

C:\Windows\SysWOW64\FLASHP~4.EXE => Moved successfully.

C:\Windows\SysWOW64\MSXML.DLL => Moved successfully.

C:\Windows\SysWOW64\NEWTONSOFT.JSON.NET20.DLL => Moved successfully.

C:\Windows\SysWOW64\Drivers\SNCDUVC.SYS => Moved successfully.

C:\Windows\SysWOW64\Drivers\SNP2UVC.SYS => Moved successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{60461739-5993-4D08-95CB-AB291DBAD262}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{60461739-5993-4D08-95CB-AB291DBAD262}" => Key deleted successfully.

C:\Windows\System32\Tasks\UNELEVATE_5123 => Moved successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UNELEVATE_5123" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{96E56856-F025-48E0-B7CF-B232A1069A8A}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{96E56856-F025-48E0-B7CF-B232A1069A8A}" => Key deleted successfully.

C:\Windows\System32\Tasks\eType Setup => Moved successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\eType Setup" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F06772B8-3D94-478A-8DED-A00686FB593D}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F06772B8-3D94-478A-8DED-A00686FB593D}" => Key deleted successfully.

C:\Windows\System32\Tasks\{41C353F2-128B-4DA7-B25B-67456296788E} => Moved successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{41C353F2-128B-4DA7-B25B-67456296788E}" => Key deleted successfully.

C:\ProgramData\TEMP => ":1D32EC29" ADS removed successfully.

C:\ProgramData\TEMP => ":4D066AD2" ADS removed successfully.

C:\ProgramData\TEMP => ":56E2E879" ADS removed successfully.

C:\ProgramData\TEMP => ":93DE1838" ADS removed successfully.

C:\ProgramData\TEMP => ":ABE89FFE" ADS removed successfully.

C:\ProgramData\TEMP => ":D1B5B4F1" ADS removed successfully.

C:\ProgramData\TEMP => ":E1F04E8D" ADS removed successfully.

C:\Users\tihomirboev\AppData\Local => ":QwXwfpzzmDa5Mg8WV27k9" ADS removed successfully.

========= ipconfig /flushdns =========

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========

EmptyTemp: => Removed 9 GB temporary data.

The system needed a reboot.

==== End of Fixlog 16:08:41 ====

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

3 март 201511 г.

Има ли подобрение след процедурите .!Има ли нещо което ви притеснява..?

Malwarebytes Anti-Malware (MBAM)

Моля, изтеглете Malwarebytes Anti -Malware и го запомнете на вашия работен плот .
Кликнете два пъти върху mbam-setup-consumer-2.0.0.1хххх.exe и следвайте инструкциите, за да инсталирате програмата .

В секцията Settings = > Detection and Protection => Detection Options, се поставя отметка в квадратчето 'Scan for rootkits'.

В главния прозорец на програмата , щракнете върху 'Update Now'
След актуализацията завърши, кликнете на бутона " 'Scan Now " .
Ако има налична актуализация , щракнете върху бутона Update Now button .
Ще стартира Threat Scan.
Когато сканирането приключи, ако има някакви открити зарази , щракнете върху Apply Actions за да се позволи на Mbam да почисти засеченото. .

След рестарта ,стартирайте Mbam още веднъж.
Кликнете на History tab > Application Logs .
Кликнете два пъти върху реда , който показва датата и часа на сканирането или View Detailed Log .
Кликнете върху " Copy да Clipboard "

Поставете съдържанието на клипборда в следващия си отговор

======================================================================================================================================

Сканиране с ESET Online Scan

Изтеглете програмата: ESET Online Scanner

Стартирайте esetsmartinstaller_enu.exe
Сложете отметка на YES, I accept the Terms of Use и изберете Start:

Скенерът ще започне да изтегля компонентите, които са му необходими:

Уверете се, че Enable detection of potentially unwanted applications е избран.

Уверете се, че е премахната отметката от:

Remove found threats

Уверете се че са маркирани следните позиции:

Scan Archives

Кликнете върху Advanced Settings и маркирайте следните опции:

Scan for potentially unwanted applications
Scan for potentially unsafe applications
Enable Anti-Stealth Technology

Накрая изберете Start

Скенерът ще започне да изтегля последните дефиниции и ще започне сканиране на вашия компютър.
Моля, бъдете търпеливи, тъй като това може да отнеме известно време.

След, като сканирането завърши кликнете на List of found threats.
Щракнете върху Export, и запишете файла на вашия работен плот с име ESETScan. Копирайте съдържанието на този доклад, в следващия си отговор.
Изберете бутона Back.
Изберете бутона Finish.

=============================================================================================================================================

Дневници

В следващия си отговор, моля да включите следните дневници:

Дневник от Malwarebytes Anti -Malware
Дневник от ESET Online Scanner ( List of found threats )

4 март 201511 г.

Автор

Здравейте,

Ефект от процедурите - като цяло лаптопът е по-малко натоварен, по-бърз е. Определено е имал нужда от почистване. Format Factory все още ми извежда същата грешка.

Резултатите от Malwarebytes Anti -Malware:

Malwarebytes Anti-Malware

www.malwarebytes.org

Scan Date: 3.3.2015 г.

Scan Time: 20:16:43 ч.

Logfile:

Administrator: Yes

Version: 2.00.4.1028

Malware Database: v2015.03.03.05

Rootkit Database: v2015.02.25.01

License: Free

Malware Protection: Disabled

Malicious Website Protection: Disabled

Self-protection: Disabled

OS: Windows 7

CPU: x64

File System: NTFS

User: tihomirboev

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 383515

Time Elapsed: 52 min, 21 sec

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Enabled

Heuristics: Enabled

PUP: Enabled

PUM: Enabled

Processes: 0

(No malicious items detected)

Modules: 0

(No malicious items detected)

Registry Keys: 11

Adware.GamePlayLab, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110011221158}, Quarantined, [1c8d0220b2d88da9ea488f9cd72cb64a],

Adware.GamePlayLab, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110011221158}, Quarantined, [1c8d0220b2d88da9ea488f9cd72cb64a],

PUP.Optional.uTorrentTB.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{687578B9-7132-4A7A-80E4-30EE31099E03}, Quarantined, [c9e081a158320630661f4ace30d35ca4],

PUP.Optional.uTorrentTB.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{687578B9-7132-4A7A-80E4-30EE31099E03}, Quarantined, [c9e081a158320630661f4ace30d35ca4],

PUP.Optional.SearchQu, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{99079A25-328F-4BD4-BE04-00955ACAA0A7}, Quarantined, [c2e7a57db2d8f046b94a4dd0d62d1ae6],

PUP.Optional.SearchQu, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{99079A25-328F-4BD4-BE04-00955ACAA0A7}, Quarantined, [c2e7a57db2d8f046b94a4dd0d62d1ae6],

PUP.Optional.Datamngr.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}, Quarantined, [3079958d6d1d37ff720d2c2418eb6d93],

PUP.Optional.Datamngr.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}, Quarantined, [3079958d6d1d37ff720d2c2418eb6d93],

PUP.Optional.CrossRider.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HDQ-1.2cV15.01, Quarantined, [bced2101b9d1c274be0955d5798ca35d],

PUP.Optional.IWantThis.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\I Want This, Quarantined, [ccddea388307d85efd180fce34cfe719],

PUP.Optional.iWebar.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\iWebar, Quarantined, [9c0d38eac1c9a096ca75564f0ff45ea2],

Registry Values: 0

(No malicious items detected)

Registry Data: 0

(No malicious items detected)

Folders: 4

Adware.ScanQuery, C:\Program Files (x86)\Mozilla Firefox\extensions\{DE9265D8-D55D-4286-9DC4-F8D8A0CA2F64}, Quarantined, [cadfde448109bf771929332ee91a8977],

Adware.ScanQuery, C:\Program Files (x86)\Mozilla Firefox\extensions\{DE9265D8-D55D-4286-9DC4-F8D8A0CA2F64}\chrome, Quarantined, [cadfde448109bf771929332ee91a8977],

Adware.ScanQuery, C:\Program Files (x86)\Mozilla Firefox\extensions\{DE9265D8-D55D-4286-9DC4-F8D8A0CA2F64}\defaults, Quarantined, [cadfde448109bf771929332ee91a8977],

Adware.ScanQuery, C:\Program Files (x86)\Mozilla Firefox\extensions\{DE9265D8-D55D-4286-9DC4-F8D8A0CA2F64}\defaults\preferences, Quarantined, [cadfde448109bf771929332ee91a8977],

Files: 6

PUP.RemoteAdmin, C:\Windows\admdll.dll, Quarantined, [9f0a5ac8f89291a5fe0e80177a8bd22e],

PUP.RemoteAdmin, C:\Windows\raddrv.dll, Quarantined, [a207bc663159b2849d0a84126e97f40c],

Adware.ScanQuery, C:\Program Files (x86)\Mozilla Firefox\extensions\{DE9265D8-D55D-4286-9DC4-F8D8A0CA2F64}\chrome.manifest, Quarantined, [cadfde448109bf771929332ee91a8977],

Adware.ScanQuery, C:\Program Files (x86)\Mozilla Firefox\extensions\{DE9265D8-D55D-4286-9DC4-F8D8A0CA2F64}\install.rdf, Quarantined, [cadfde448109bf771929332ee91a8977],

Adware.ScanQuery, C:\Program Files (x86)\Mozilla Firefox\extensions\{DE9265D8-D55D-4286-9DC4-F8D8A0CA2F64}\chrome\scanquery.jar, Quarantined, [cadfde448109bf771929332ee91a8977],

Adware.ScanQuery, C:\Program Files (x86)\Mozilla Firefox\extensions\{DE9265D8-D55D-4286-9DC4-F8D8A0CA2F64}\defaults\preferences\prefs.js, Quarantined, [cadfde448109bf771929332ee91a8977],

Physical Sectors: 0

(No malicious items detected)

(end)

Резултатите от EsetScan:

C:\$Recycle.Bin\S-1-5-21-2756667080-2450539360-2434860297-1000\$RU26327\TeRMiNaToR\Mafia 2\pc\Mafia II Trainer +9.exe a variant of Win32/HackTool.CheatEngine.AB potentially unsafe application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\AskPartnerNetwork\Toolbar\APNSetup.exe.vir a variant of Win32/Bundled.Toolbar.Ask.E potentially unsafe application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\RelevantKnowledge\rlservice.exe.vir a variant of Win32/Adware.RK application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\uninstall.exe.vir Win32/Thinknice.E potentially unwanted application

C:\AdwCleaner\Quarantine\C\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe.vir a variant of Win32/ELEX.BH potentially unwanted application

C:\AdwCleaner\Quarantine\C\Windows\System32\roboot64.exe.vir a variant of Win64/Systweak.A potentially unwanted application

C:\found.002\dir0000.chk\mscol.exe a variant of Win32/BitCoinMiner.BY potentially unsafe application

C:\FRST\Quarantine\C\Users\tihomirboev\AppData\Local\Temp\KMP_3.9.1.132.exe.xBAD a variant of Win32/CNETInstaller.B potentially unwanted application

C:\FRST\Quarantine\C\Users\tihomirboev\AppData\Local\Temp\KMP_3.9.1.133.exe.xBAD a variant of Win32/CNETInstaller.B potentially unwanted application

C:\FRST\Quarantine\C\Users\tihomirboev\AppData\Local\Temp\tbuTor.dll.xBAD a variant of Win32/Toolbar.Conduit.B potentially unwanted application

C:\Program Files (x86)\EA GAMES\Need for Speed Most Wanted\DAT\NFS - MW v1.3 Trainers\Plus19\Plus19.exe a variant of Win32/GameHack.S potentially unsafe application

C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\Ask\AskPIP_FF_.exe a variant of Win32/Bundled.Toolbar.Ask.D potentially unsafe application

C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\BaiDu\hao123inst.exe a variant of Win32/Hao123.A potentially unwanted application

C:\Program Files (x86)\IObit\Advanced SystemCare 5\asc6_setup_v5tov6-0306.exe a variant of Win32/Toolbar.Widgi.B potentially unwanted application

C:\Program Files (x86)\IObit\Advanced SystemCare 6\Toolbar\iobitappsToolbar-stub-1.exe a variant of Win32/Toolbar.Widgi.B potentially unwanted application

C:\Users\tihomirboev\AppData\Local\Temp{F7240D06-FB02-4902-A080-0A5B56B791F7}\OmigaZip_patch\4z_ask.exe a variant of Win32/Bundled.Toolbar.Ask.D potentially unsafe application

C:\Users\tihomirboev\AppData\Local\Temp{F7240D06-FB02-4902-A080-0A5B56B791F7}\OmigaZip_patch\winzipersvc.exe a variant of Win32/ELEX.Y potentially unwanted application

C:\Users\tihomirboev\AppData\Roaming\Avant Profiles\.default\webkit\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.26.9.505_0\APISupport\APISupport.dll a variant of Win32/Conduit.SearchProtect.P potentially unwanted application

C:\Users\tihomirboev\AppData\Roaming\Avant Profiles\.default\webkit\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.26.9.505_0\nativeMessaging\TBMessagingHost.exe a variant of Win32/Toolbar.Conduit.AH potentially unwanted application

C:\Windows\System32\Adobe\Shockwave 11\gt.exe Win32/Bundled.Toolbar.Google.D potentially unsafe application

C:\Windows\System32\Adobe\Shockwave 12\gt.exe Win32/Bundled.Toolbar.Google.D potentially unsafe application

C:\Windows\SysWOW64\Adobe\Shockwave 11\gt.exe Win32/Bundled.Toolbar.Google.D potentially unsafe application

C:\Windows\SysWOW64\Adobe\Shockwave 12\gt.exe Win32/Bundled.Toolbar.Google.D potentially unsafe application

4 март 201511 г.

Автор

Пак съм аз. Реших проблема с Format Factory. Смених типа на субтитрите и не ми отчита грешка при конвертиране. Благодаря за помощта. Програмите наистина ми бяха от полза и ще опитвам периодично да почиствам системата.

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

4 март 201511 г.

Здравейте..! Има какво още да се прави по системата ви..! Не бързайте с приключването..!

Фикс с Farbar Recovery Scan Tool

Изтеглете прикачения файл и го запазете там, където сте свалили FRST.exe => fixlist.txt
Стартирайте отново FRST.exe и натиснете бутона Fix веднъж и изчакайте.
Ще се създаде нов лог файла FixLog.txt. Прикачете съдържанието му в следващия си коментар.

ЗАБЕЛЕЖКА: Този скрипт е написан специално за този потребител,и за тази конкретна машина. Изпълнението на фикса, на друг компютър може да доведе до увреждане на операционната ви система

Дневници

В следващия си отговор, моля да включите следните дневници:

FixLog.txt

Програмите наистина ми бяха от полза и ще опитвам периодично да почиствам системата.

Не ви препоръчвам да използвате всички програми които използвахме...Като завършим ще ви пиша какво да правите рутинно..!

4 март 201511 г.

Автор

Добре, ето ги резултатите след Fix-a:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-03-2015

Ran by tihomirboev at 2015-03-04 18:09:18 Run:2

Running from C:\Users\tihomirboev\Desktop

Loaded Profiles: tihomirboev (Available profiles: tihomirboev)

Boot Mode: Normal

==============================================

Content of fixlist:

*****************

start

CreateRestorePoint:

CloseProcesses:

C:\found.002\dir0000.chk\mscol.exe a variant of Win32/BitCoinMiner.BY potentially unsafe application

C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\Ask\AskPIP_FF_.exe

C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\BaiDu\hao123inst.exe

C:\Program Files (x86)\IObit\Advanced SystemCare 5\asc6_setup_v5tov6-0306.exe

C:\Program Files (x86)\IObit\Advanced SystemCare 6\Toolbar\iobitappsToolbar-stub-1.exe

C:\Users\tihomirboev\AppData\Local\Temp{F7240D06-FB02-4902-A080-0A5B56B791F7}\OmigaZip_patch\4z_ask.exe

C:\Users\tihomirboev\AppData\Local\Temp{F7240D06-FB02-4902-A080-0A5B56B791F7}\OmigaZip_patch\winzipersvc.exe

C:\Users\tihomirboev\AppData\Roaming\Avant Profiles\.default\webkit\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.26.9.505_0\APISupport\APISupport.dll

C:\Users\tihomirboev\AppData\Roaming\Avant Profiles\.default\webkit\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.26.9.505_0\nativeMessaging\TBMessagingHost.exe

C:\Windows\System32\Adobe\Shockwave 11\gt.exe

C:\Windows\System32\Adobe\Shockwave 12\gt.exe

C:\Windows\SysWOW64\Adobe\Shockwave 11\gt.exe

C:\Windows\SysWOW64\Adobe\Shockwave 12\gt.exe

emptytemp:

end

*****************

Restore point was successfully created.

Processes closed successfully.

"C:\found.002\dir0000.chk\mscol.exe a variant of Win32/BitCoinMiner.BY potentially unsafe application" => File/Directory not found.

C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\Ask\AskPIP_FF_.exe => Moved successfully.

C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\BaiDu\hao123inst.exe => Moved successfully.

C:\Program Files (x86)\IObit\Advanced SystemCare 5\asc6_setup_v5tov6-0306.exe => Moved successfully.

C:\Program Files (x86)\IObit\Advanced SystemCare 6\Toolbar\iobitappsToolbar-stub-1.exe => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp{F7240D06-FB02-4902-A080-0A5B56B791F7}\OmigaZip_patch\4z_ask.exe => Moved successfully.

C:\Users\tihomirboev\AppData\Local\Temp{F7240D06-FB02-4902-A080-0A5B56B791F7}\OmigaZip_patch\winzipersvc.exe => Moved successfully.

C:\Users\tihomirboev\AppData\Roaming\Avant Profiles\.default\webkit\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.26.9.505_0\APISupport\APISupport.dll => Moved successfully.

C:\Users\tihomirboev\AppData\Roaming\Avant Profiles\.default\webkit\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.26.9.505_0\nativeMessaging\TBMessagingHost.exe => Moved successfully.

"C:\Windows\System32\Adobe\Shockwave 11\gt.exe" => File/Directory not found.

"C:\Windows\System32\Adobe\Shockwave 12\gt.exe" => File/Directory not found.

C:\Windows\SysWOW64\Adobe\Shockwave 11\gt.exe => Moved successfully.

C:\Windows\SysWOW64\Adobe\Shockwave 12\gt.exe => Moved successfully.

EmptyTemp: => Removed 558.8 MB temporary data.

The system needed a reboot.

==== End of Fixlog 18:10:45 ====

icotonev

HJT Team

Пол:Мъж
Град:гр.Ямбол
Интереси:Malware Removal, Security Analyst, Malware Hunters,Trusted Helper

4 март 201511 г.

Прекрасно..!

Изтеглете следния файл и го запазете в папката от която стартирахте FRST.exe.
Стартирайте FRST.exe и натиснете бутона Fix веднъж!
След като приключи публикувайте лог файла - fixlog.txt, който ще се създаде след работата. Той трябва да изтрие карантинната папка на инструмента разположена в C:FRSTQuarantine.

Изтеглете DelFix и го стартирайте. Сложете отметка пред:

Remove disinfection tools
Purge system restore
Reset system settings

..и след това натиснете бутона Run
Инструмента ще се самоизтрие след като приключи своята задача!

Деинсталирайте ESET Online Scaner.

Start => Run, въведете control appwiz.cpl в полето.След това натиснете ENTER.
Изберете ESET Online Scanner от списъка с приложения, а след това маркирайте Remove. Aко бъдете подканени рестартирайте компютъра си.

Малко превенции:

Винаги поддържайте антивирусната си програма с актуални дефиниции и сканирайте с нея редовно.Само ще добавя никога да не разчитате само на AV програма (ако си изберете безплатен вариант) ,добавете задължително и качествен HIPS базиран софтуер... COMODO, PrivateFirewall, Online Armor...What is Host Intrusion Prevention System (HIPS) and how does it work? .Справка: Сигурност и антивирусна защита

Забележка: Трябва да имате само една антивирусна инсталиран в даден момент. Ако имате повече от една антивирусна програма е вероятно да предизвика конфликти и може да намали общата защита, както и нарушаване на работата на вашия компютър.

Препоръчвам програмата Malwarebytes' Anti-Malware да остане на вашия компютър и периодично да сканирате системата си с нея (поне един -два пъти в седмицата),като не забравяйте да обновите дефинициите и преди всяко сканиране..!Напомням че това не е антивирусна програма а едно изключително добро допълнение към нея..!

Ако има нещо което използвахме в лечението и не се е премахнало след последните инструкции го премахнете ръчно ,по стандартните методи..!

Още три програмки по мое мнение задължителни за всеки компютър:

- CryptoPrevent - за защита срещу CryptoLocker и подобни заплахи Имайте предвид, че ако изберете високо ниво на защита в CryptoPrevent след това можете да срещнете някои проблеми с инсталираните приложения. Може да се наложи да се намали нивото на защита, ако се натъкнете на подобни проблеми или да добавите вписванията към белия списък:

- Unchecky - която автоматично ще премахва всички нежелани допълнения по време на инсталирането на софтуера. Това помага за предотвратяване на инсталиране на зловреден код.

- Malwarebytes Anti-Exploit - за информация MBAE (Malwarebytes Anti-Exploit) vs All EKs (Exploit Kits)

Едно от важните неща са MICROSOFT UPDATES. Чрез тях можете да получите всички критични актуализации за вашата операционна система и Internet Explorer. Поддържането на вашата операционна система и браузър с актуални ъпдейти, ще помогне да направи системата по-малко податлива на атаки от троянски коне и вируси. Освен това зловредния софтуер се създава почти всеки ден. Много от тези заплахи, са насочени към уязвими места във вашия софтуер. Софтуерните компании редовно публикуват актуализации, които определят тези уязвимости.За да останете защитени, трябва да актуализирате редовно целия си софтуер. Основно внимание на следните програми:

Adobe Reader;
Adobe Flash Player;
Sun Java;
Apple QuickTime;
Базите и модулите на антивирусните програми
наличните браузъри - обновени и с със задължителни следните аддони:

- За Firefox, използвайте NoScript , Adblock , Web Of Trust
- За Chrome използвайте ScriptSafe ,AdBlock WOT (Web от Trust)

Прверявайте вашата система за актуални обновления и уязвимости с помощта на следните програми:

Ако нямате други въпроси маркирам случая за "Решен"...! Пожелавам лека вечер и безопасен интернет..!

4 март 201511 г.

Автор

Резултатите:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-03-2015

Ran by tihomirboev at 2015-03-04 23:00:28 Run:3

Running from C:\Users\tihomirboev\Desktop

Loaded Profiles: tihomirboev (Available profiles: tihomirboev)

Boot Mode: Normal

==============================================

Content of fixlist:

*****************

start

DeleteQuarantine:

end

*****************

"C:\FRST\Quarantine" => Removed successfully.

==== End of Fixlog 23:00:35 ====

Ще следвам препоръките.

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.