Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.
Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.
Добави Kaldata.com в предпочитани източници в Google

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

Имам зараза от Троянски кон ( Dark Comet )

Marty Mihailov
в Премахване на зловреден софтуер

Featured Replies

Здравейте,
Имам голям проблем с троянски кон. Този вид е известен като Dark Comet. Всичко тръгна от един приятел който беше правил клип как се работи с него и аз го изтеглих. ( за което съжалявам много ) След малко цъкнах на програмата да се пусне и нищо не стана, затворих папката след 10 секунди я отворих отново и програмката избягала чак в C диска, папка Users  и така така някъде си навътре... Четох много постове и изтеглих някои програми:
- Malwarebytes Anti-Malware

- esetsmartinstaller_enu

- noscript

- CryptoPrevent

- MyDefrag

- FRST64

И изтрих стара ми антивирусна Advanced System Care 8. Програмата  Malwarebytes Anti-Malware я пусках да изчисти уж някои неща и какво да видя... Последно не си спомням колко бяха, но говорим за повече от 150. Така, така сега търся помощ в смисъл какво ви е нужно освен двата текстови документа от FRST които прикачих.

И както ви е известно четох малко за този троянски кон и както си пише така и стана ... Метнал се е на csrss, но нещо не знам какво направих и изчезна и тей тей си вървъ из файловете, до одеве ми местеше иконите.. Та ся утихна малко тоз кон и се оставям на ваши ръце.

               

                             Благодаря предварително ! :)

Addition.txt

FRST.txt

Здравейте..! :)

 

remove%20outdated.jpg Деинсталиране нa програми

  • Натиснете WindowsKey.png + R на клавиатурата си по едно и също време. Въведете appwiz.cpl и щракнете върху OK.
  • Деинсталирайте следните програми:

 

50CCouPoonS

DownSave

Isaveer

MinimumPricce

The AdBlocker

                      

 

След завършване на деинсталацията, моля  да рестартирате машината си!

 

 

FRST.gif Фикс с Farbar Recovery Scan Tool

 
icon13.gif Изтеглете прикачения файл и го запазете там, където сте свалили FRST.exe => fixlist.txt
Стартирайте отново FRST.exe и натиснете бутона Fix веднъж и изчакайте.
Ще се създаде нов лог файла FixLog.txt. Прикачете съдържанието му в следващия си коментар.
 
ЗАБЕЛЕЖКА: Този скрипт е написан специално за този потребител,и за тази конкретна машина. Изпълнението на фикса, на друг компютър може да доведе до увреждане на  операционната ви система

 

 

50_forum_new.gif Проверка за допълнителни рискове по сигурността:

 

n3uobiT.jpg  Моля, изтеглете CKScanner© by askey127   и го запишете на вашия десктоп

  • Стартирате с двоен клик файла CKScanner.exe и след това клик на Search For Files.
  • След много кратко време, когато часовника на курсора изчезне,кликнете на Save List To File и след това OK.
  • На вашия работен плот ще се създаде файл ckfiles.txt . Моля, копирайте съдържанието му в следващия си пост.

 

 

 

icon1348768721.jpg  Изтеглете Security Check (автор: screen317) от тук

  • Кликнете два пъти върху SecurityCheck.exe и следвайте инструкциите.
  • Когато програмата завърши работата си, ще се отвори един текстов документ: checkup.txt.
  • Копирайте съдържанието на checkup.txt с Копирай (Copy) и с Постави (Paste) го поставете в следващия си коментар.

 

xpfNZP4A.png.pagespeed.ic.bp5cRl1pJg.jpg  Дневници
 
В следващия си отговор, моля да включите следните дневници:

  • FixLog.txt
  • ckfiles.txt
  • checkup.txt
  • Автор

За това дето казахте да деинсталирам тези програми ги нямаше в Program and Futures. Мога да кача снимки, само ми кажете как ..

Как така ги няма..? Да не сте ми качили друг файл Addition.txt Защото ми направи впечатление че в тази тема:

 

изскачащи реклами и много тегава работа на кпмпютъра

 

е качен един и същи дневник..!

 

Вие ли сте публикували въпросната тема...?

 

 

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-03-2015
Ran by Tsvetan at 2015-03-13 18:29:58
Running from C:\Users\Tsvetan\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKLM\...\uTorrent) (Version: 3.3.0.29342 - BitTorrent Inc.)
50CCouPoonS (HKLM\...\{CF987D06-1DCF-7B36-5B43-13BC8699C44C}) (Version:  - "") <==== ATTENTION
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.7.0.1530 - Adobe Systems Incorporated)
Adobe Flash Player 11 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 11.4.402.265 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
AIDA64 Extreme Edition v2.70 (HKLM\...\AIDA64 Extreme Edition_is1) (Version: 2.70 - FinalWire Ltd.)
Any Video Converter 3.3.9 (HKLM\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)
Bluesoleil 6.4.249.0 (HKLM\...\{C0A871F9-D580-4404-9A69-A02CF3078C87}) (Version: 6.4.249.0 - IVT Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 3.16 - Piriform)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
DeployMSI (HKLM\...\{91C3BFAE-D78B-46E9-AECE-84B84ED83384}) (Version: 1.0.0 - Microsoft)
DownSave (HKLM\...\{AF992111-52BE-832B-5882-8477E4A3C99A}) (Version:  - "") <==== ATTENTION
F.E.A.R. - Brutal Force (HKLM\...\F.E.A.R. - Brutal Force) (Version:  - )
FastStone Image Viewer 4.7 (HKLM\...\FastStone Image Viewer) (Version: 4.7 - FastStone Soft)
FastStone Soft (HKLM\...\FastStone Soft) (Version:  - )
FlatOut Ultimate Carnage (HKLM\...\FlatOut Ultimate Carnage) (Version:  - Empire Interactive)
Freemake Video Converter version 4.0.0 (HKLM\...\Freemake Video Converter_is1) (Version: 4.0.0 - Ellora Assets Corporation)
Futuremark SystemInfo (HKLM\...\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 3.16.2.1 - Futuremark Corporation)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 37.0.2062.103 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
Hard Disk Sentinel PRO (HKLM\...\Hard Disk Sentinel_is1) (Version:  - HDS)
HD Tune 2.55 (HKLM\...\HD Tune_is1) (Version:  - EFD Software)
HTC BMP USB Driver (HKLM\...\{31A559C1-9E4D-423B-9DD3-34A6C5398752}) (Version: 1.0.5375 - HTC)
HTC Driver Installer (HKLM\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.1.0.001 - HTC Corporation)
IPTInstaller (HKLM\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.8 - HTC)
Isaveer (HKLM\...\{F1422DAA-0829-09A1-7536-73936CAB8FFA}) (Version:  - "") <==== ATTENTION
Java 8 Update 25 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Malwarebytes Anti-Malware, версия 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft CAPICOM 2.1.0.2 SDK (HKLM\...\{2FF43F5D-5729-4E02-A548-310E30A5F29B}) (Version: 2.1.0.2 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM\...\{929CE49F-1CA7-4CF3-A9A1-6D757443C63F}) (Version: 1.2.0241 - Microsoft Corporation)
Microsoft LifeCam (HKLM\...\{BD71B413-9FEE-49BB-A6D1-2C0BFB99BDFE}) (Version: 3.60.253.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Excel 2007 Help Актуализация (KB963678) (HKLM\...\{90120000-0016-0402-0000-0000000FF1CE}_ENTERPRISE_{B3B0B5D0-371D-4211-A43A-B4E70B563756}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Powerpoint 2007 Help Актуализация (KB963669) (HKLM\...\{90120000-0018-0402-0000-0000000FF1CE}_ENTERPRISE_{C64A08BB-59AC-4ACE-AF1D-D5225DF9CE2D}) (Version:  - Microsoft)
Microsoft Office Word 2007 Help Актуализация (KB963665) (HKLM\...\{90120000-001B-0402-0000-0000000FF1CE}_ENTERPRISE_{6BECE490-EB24-47FB-B6C9-91724C0B0E6E}) (Version:  - Microsoft)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.7.205.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
MinimumPricce (HKLM\...\{CA1838EF-A497-194E-3850-37A62CEE398B}) (Version:  - "") <==== ATTENTION
Movie Maker (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 8.0.1 (x86 bg) (HKLM\...\Mozilla Firefox 8.0.1 (x86 bg)) (Version: 8.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Nero 8 (HKLM\...\{1CA7ACD6-B21B-4240-AA05-4FC55F6E1033}) (Version: 8.3.465 - Nero AG)
NVIDIA 3D Vision Controller Driver 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 341.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 341.44 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.2.1 - NVIDIA Corporation)
NVIDIA Graphics Driver 341.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.44 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA Virtual Audio 1.2.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.20 - NVIDIA Corporation)
Opera Stable 28.0.1750.40 (HKLM\...\Opera 28.0.1750.40) (Version: 28.0.1750.40 - Opera Software ASA)
Platform (Version: 1.34 - VIA Technologies, Inc.) Hidden
Potplayer (HKLM\...\PotPlayer) (Version:  - Daum Kakao Corp.)
QQ??3.7 (HKU\S-1-5-21-3399673831-2713686379-3482629517-1000\...\QQPlayer) (Version: 3.7 - ????(??)????)
SHIELD Streaming (Version: 1.7.321 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
System Requirements Lab for Intel (HKLM\...\{EFE3D683-903C-4B58-AB8F-C68C69F33758}) (Version: 4.5.3.0 - Husdawg, LLC)
The AdBlocker (HKLM\...\{37476589-E48E-439E-A706-56189E2ED4C4}_is1) (Version:  - The AdBlocker) <==== ATTENTION
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden
VIA п»ї (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.34 - VIA Technologies, Inc.)
Viber (HKU\S-1-5-21-3399673831-2713686379-3482629517-1000\...\Viber) (Version: 3.0.0.133634 - Viber Media Inc)
VobSub v2.23 (Remove Only) (HKLM\...\VobSub) (Version:  - )
WinDjView 1.0.3 (HKLM\...\WinDjView) (Version: 1.0.3 - Andrew Zhezherun)
Windows 7 Manager (HKLM\...\{5E5B7F6D-69D9-4D95-85EC-EB29F1CA280B}) (Version: 4.2.3 - Yamicsoft)
Windows 7 USB/DVD Download Tool (HKLM\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows Mobile Device Center (HKLM\...\{904CCF62-818D-4675-BC76-D37EB399F917}) (Version: 6.1.6965.0 - Microsoft Corporation)
WinRAR 4.01 (32-битова версия) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
Xilisoft Video Converter Ultimate (HKLM\...\Xilisoft Video Converter Ultimate) (Version: 5.1.23.0402 - Xilisoft)
Домашний медиа-сервер (UPnP, DLNA) (HKLM\...\HMS) (Version: 1.99.2 - Evgeny Lachinov)
Фотогалерия (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
 

  • Автор

Темата е моя, да, Добре де сега ще пусна пак FRST, само ми дайте сайт да ги прикача защото чера теглих един такъв Additional и мисля че съм ги разменил с моя .. 


Опа грешка , темата не е моя, а тази тема дето пишем сега е моя :x Съжалявам за неразбирателството от моя страна ..

Ааааа...видяхте ли как ме объркахте....!Сега за да сме сигурни в цялата система..Не правете нищо друго от предния ми пост Направете повторно сканиране така:

 

  • Моля изтеглете icon1337953436.pngFarbar Recovery Scan Tool (според версията на Windows изберете 32 битовата или 64 битовата версия) и го запазете на десктопа.
  • Стартирайте файла FRST.exe (или FRST64.exe)
  • Програмата ще се стартира. Натиснете YES за да се съгласите с лицензионното споразумение.
  • Натиснете бутона YClYkft.jpg.
  • Изчакайте търпеливо проверката да приключи.
  • Ще се създадат два лог файла с името - FRST.txt и Addition.txt на десктопа.
  • Копирайте съдържанието на файла FRST.txt в следващия си пост. Прикачете Addition.txt в коментар си (погледнете опцията Прикачване на файлове, когато публикувате мнение).
  • Автор

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015

Ran by Centurion (administrator) on CENTURION-PC on 14-03-2015 12:18:01

Running from C:\Users\Centurion\Desktop

Loaded Profiles: Centurion (Available profiles: Centurion & Guest)

Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: ""

CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}

CHR Profile: C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (NTCreature) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajjjmmfkfgoekjcjojdbnknokhllodmh [2014-12-07]

CHR Extension: (Google Drive) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-07]

CHR Extension: (YouTube) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-07]

CHR Extension: (Google Search) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-07]

CHR Extension: (Give Up) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Default\Extensions\diippoclinjdbklinhchgedilfncehbi [2014-12-07]

CHR Extension: (HD Table Tennis) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Default\Extensions\edlgljkkoneggjmhhlbnkeohlaplokpj [2014-12-07]

CHR Extension: (Fire Boy And Water Girl) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Default\Extensions\iogblfbfoldfgammcabomglfajocfpea [2014-12-07]

CHR Extension: (Kaldata.com) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Default\Extensions\jliaaaomamailheoidfllejljaibbemc [2015-03-14]

CHR Extension: (Little Alchemy) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Default\Extensions\knkapnclbofjjgicpkfoagdjohlfjhpd [2014-12-07]

CHR Extension: (Google Wallet) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-07]

CHR Extension: (Gmail) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-07]

CHR Extension: (Cube Slam) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkcoeeddamedegogbcmdbadnoifmfipn [2014-12-07]

CHR Profile: C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 1

CHR Extension: (WinToFlash Suggestor) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\acaoakiamfeidcmgooclgeleejkbaecf [2014-01-21]

CHR Extension: (Google Docs) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-21]

CHR Extension: (Clash Of Clans) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bhieggnhindemlhedbkibhplbdjmakbp [2014-02-12]

CHR Extension: (Flappy Bird) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\caabaijdifnhcpccndlpgdllcnkdolff [2014-02-12]

CHR Extension: (DoWnloAAd! keepEr) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dbipbbfgfglnnaeknhplafmbknjhcjaj [2014-04-12]

CHR Extension: (Raptor Safari 2 HD) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\emlgdhopppkbocieedjjoflnkkggpccf [2014-02-16]

CHR Extension: (PanicButton) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\faminaibgiklngmfpfbhmokfmnglamcm [2014-01-21]

CHR Extension: (Flappy Bird Mouse Version) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\genbokhpdllcdfchkllceboidiiikbef [2014-02-12]

CHR Extension: (SNT) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gfbpgcohjmidnkhpcohknggnakhfidlp [2014-04-12]

CHR Extension: (One Direction App) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ifkgichhpmabepjkbkmfeclembjdbpml [2014-04-12]

CHR Extension: (SaverrEXteensioN) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ikojafnjlgigpodbfabaoipaiklloijf [2014-04-19]

CHR Extension: (Google Wallet) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-21]

CHR Extension: (YoutubeAdblocker) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pghmegicaapakfpbaelnpgiclcpkpelb [2014-04-12]

CHR Extension: (save niett) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pidldbciekeahdomobldbepjnmgjcngg [2014-04-12]

CHR Profile: C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 2

CHR Extension: (DoWnloAAd! keepEr) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\dbipbbfgfglnnaeknhplafmbknjhcjaj [2014-04-12]

CHR Extension: (SNT) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gfbpgcohjmidnkhpcohknggnakhfidlp [2014-04-12]

CHR Extension: (One Direction App) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ifkgichhpmabepjkbkmfeclembjdbpml [2014-04-12]

CHR Extension: (SaverrEXteensioN) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ikojafnjlgigpodbfabaoipaiklloijf [2014-04-19]

CHR Extension: (YoutubeAdblocker) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pghmegicaapakfpbaelnpgiclcpkpelb [2014-04-12]

CHR Extension: (save niett) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pidldbciekeahdomobldbepjnmgjcngg [2014-04-12]

CHR Profile: C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 3

CHR Extension: (Google Docs) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-25]

CHR Extension: (Google Drive) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-25]

CHR Extension: (\r\nAir Hockey) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apodhfipkokiikmebaaeppbphbjeiakn [2014-06-11]

CHR Extension: (YouTube) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-25]

CHR Extension: (Google Search) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-25]

CHR Extension: (Minecraft Game House Ideas) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ekbnipinpehmcmahhiolalmnddbnmnpm [2014-10-29]

CHR Extension: (Runestone Defense) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nigkjogdimacchkdkhpgioeiihifbpgc [2014-06-11]

CHR Extension: (Minecraft) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nkphehjjbgfckcgpcggpecjmbnifpejn [2014-11-12]

CHR Extension: (Google Wallet) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-25]

CHR Extension: (Go Sheep Go!) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nplcackcabdefgfcombapmcdgoogkmmo [2014-06-11]

CHR Extension: (Gmail) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-25]

CHR Extension: (Sky Fortress) - C:\Users\Centurion\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pomlgcojbeigcgkooendinlejlihjaom [2014-06-11]

 

==================== Services (Whitelisted) =================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 AdvancedSystemCareService8; D:\Downloads\Advanced SystemCare 8\ASCService.exe [815392 2014-11-04] (IObit)

R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64616 2014-11-03] (CyberGhost S.R.L)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-02-16] (LogMeIn, Inc.)

R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed]

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation)

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-05-12] ()

S2 SkypeUpdate; D:\Downloads\Skype\Updater\Updater.exe [315488 2015-01-02] (Skype Technologies)

S4 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [332800 2013-04-23] (IDT, Inc.) [File not signed]

R2 StopBruteForceService; D:\Downloads\Anti DDoS Guardian 3.3\StopBruteForceService.exe [77608 2014-08-22] ()

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

S2 a8501310; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\BorderlineRunner\BorderlineRunner.dll",serv

S2 BeeThinkBlockerService; D:\Downloads\Anti DDoS Guardian 3.3\BlockerService.exe [X]

S3 McComponentHostService; "C:\Program Files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-12-01] (Disc Soft Ltd)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-05-31] (Symantec Corporation)

R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [128200 2013-04-03] (Qualcomm Atheros Co., Ltd.)

S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-12-24] (Marvell Semiconductor, Inc.)

R1 NBlocker; C:\Windows\System32\DRIVERS\nblocker.sys [36568 2014-08-21] (BeeThink SoftWare, Inc.)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)

R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [32496 2013-02-06] (Synaptics Incorporated)

S3 Tosrfcom; No ImagePath

S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]

S4 FileMonitor; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [X]

S3 GGSAFERDriver; \??\D:\Downloads\Garena Plus\Room\safedrv.sys [X]

S3 IlvMoneyDRIVER53; \??\C:\Users\Centurion\Desktop\MTA DayZ Hack by AceHood 1.3.5 - 1.4\Money1280.sys [X]

S3 RegFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [X]

S3 UrlFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]

S3 WinRing0_1_2_0; \??\D:\Downloads\Razer Game Booster\Driver\WinRing0x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

 

==================== One Month Created Files and Folders ========

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2015-03-14 12:18 - 2015-03-14 12:18 - 00047086 _____ () C:\Users\Centurion\Desktop\FRST.txt

2015-03-14 01:43 - 2015-03-14 01:43 - 00000000 ____D () C:\Users\Centurion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2015-03-14 01:43 - 2015-03-14 01:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR

2015-03-14 01:43 - 2012-06-30 21:47 - 00000000 ____D () C:\Users\Centurion\Desktop\Нова папка

2015-03-13 23:29 - 2015-03-13 23:25 - 02095616 _____ (Farbar) C:\Users\Centurion\Desktop\FRST64.exe

2015-03-13 23:26 - 2015-03-14 00:18 - 00000000 ____D () C:\Users\Centurion\AppData\Roaming\IObit

2015-03-13 23:25 - 2015-03-14 12:18 - 00000000 ____D () C:\FRST

2015-03-13 23:10 - 2015-03-13 23:10 - 00004130 _____ () C:\Windows\System32\Tasks\MyDefrag v4.3.1 Monthly

2015-03-13 23:10 - 2015-03-13 23:10 - 00003450 _____ () C:\Windows\System32\Tasks\MyDefrag v4.3.1 Daily

2015-03-13 23:10 - 2015-03-13 23:10 - 00000699 _____ () C:\Users\Public\Desktop\MyDefrag.lnk

2015-03-13 23:10 - 2015-03-13 23:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyDefrag v4.3.1

2015-03-13 23:10 - 2010-05-21 12:11 - 01147392 _____ (J.C. Kessels) C:\Windows\system32\MyDefragScreenSaver_v4.3.1.exe

2015-03-13 23:10 - 2010-05-21 12:11 - 00485376 _____ (J.C. Kessels) C:\Windows\system32\MyDefragScreenSaver_v4.3.1.scr

2015-03-13 22:50 - 2015-03-13 22:49 - 00127432 _____ () C:\Users\Centurion\Desktop\noscript.exe

2015-03-13 22:47 - 2015-03-13 22:47 - 00088888 _____ () C:\Users\Centurion\AppData\Local\GDIPFONTCACHEV1.DAT

2015-03-13 22:46 - 2015-03-13 22:46 - 00053248 _____ () C:\Windows\SysWOW64\zlib.dll

2015-03-13 22:46 - 2015-03-13 22:46 - 00001216 _____ () C:\Users\Public\Desktop\CryptoPrevent.lnk

2015-03-13 22:46 - 2015-03-13 22:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foolish IT

2015-03-13 22:46 - 2015-03-13 22:46 - 00000000 ____D () C:\ProgramData\Foolish IT

2015-03-13 22:46 - 2015-03-13 22:46 - 00000000 ____D () C:\Program Files (x86)\Foolish IT

2015-03-13 22:39 - 2015-03-13 22:14 - 02347384 _____ (ESET) C:\Users\Centurion\Desktop\esetsmartinstaller_enu.exe

2015-03-13 22:35 - 2015-03-14 11:53 - 00000504 _____ () C:\Windows\setupact.log

2015-03-13 22:35 - 2015-03-14 11:52 - 00045634 _____ () C:\Windows\PFRO.log

2015-03-13 22:35 - 2015-03-13 22:35 - 00000000 _____ () C:\Windows\setuperr.log

2015-03-13 22:34 - 2015-03-13 22:34 - 00000000 ____H () C:\asc_rdflag

2015-03-13 22:16 - 2015-03-13 22:16 - 00000000 ____D () C:\Program Files (x86)\ESET

2015-03-13 22:11 - 2015-03-14 02:44 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-03-13 22:08 - 2015-03-13 22:08 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-03-13 22:08 - 2015-03-13 22:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-03-13 22:08 - 2015-03-13 22:08 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-03-13 22:08 - 2015-03-13 22:08 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-03-13 22:08 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-03-13 22:08 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-03-13 22:08 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-03-13 21:38 - 2015-03-13 23:36 - 00000000 __SHD () C:\Users\Centurion\AppData\Roaming\Windows Archive

2015-03-13 21:38 - 2015-03-13 21:38 - 00000000 ____D () C:\Windows\System32\Tasks\Update

2015-03-13 20:53 - 2015-03-13 21:13 - 00001139 _____ () C:\Users\Centurion\Desktop\neshto si.txt

2015-03-11 19:57 - 2015-02-20 06:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2015-03-11 19:57 - 2015-02-20 06:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2015-03-11 19:57 - 2015-02-20 06:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-03-11 19:57 - 2015-02-20 06:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2015-03-11 19:57 - 2015-02-20 06:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2015-03-11 19:57 - 2015-02-20 06:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2015-03-11 19:57 - 2015-02-20 06:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2015-03-11 19:57 - 2015-02-20 06:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2015-03-11 19:57 - 2015-02-20 05:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-03-11 19:57 - 2015-02-20 05:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2015-03-11 19:57 - 2015-02-03 05:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-03-11 19:57 - 2015-02-03 05:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2015-03-11 19:57 - 2015-02-03 05:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys

2015-03-11 19:57 - 2015-02-03 05:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2015-03-11 19:57 - 2015-02-03 05:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2015-03-11 19:57 - 2015-02-03 05:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2015-03-11 19:57 - 2015-02-03 05:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2015-03-11 19:57 - 2015-02-03 05:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll

2015-03-11 19:57 - 2015-02-03 05:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll

2015-03-11 19:57 - 2015-02-03 05:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-03-11 19:57 - 2015-02-03 05:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2015-03-11 19:57 - 2015-02-03 05:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2015-03-11 19:57 - 2015-02-03 05:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2015-03-11 19:57 - 2015-02-03 05:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll

2015-03-11 19:57 - 2015-02-03 05:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2015-03-11 19:57 - 2015-02-03 05:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2015-03-11 19:57 - 2015-02-03 05:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll

2015-03-11 19:57 - 2015-02-03 05:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2015-03-11 19:57 - 2015-02-03 05:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-03-11 19:57 - 2015-02-03 05:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll

2015-03-11 19:57 - 2015-02-03 05:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll

2015-03-11 19:57 - 2015-02-03 05:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2015-03-11 19:57 - 2015-02-03 05:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll

2015-03-11 19:57 - 2015-02-03 05:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll

2015-03-11 19:57 - 2015-02-03 05:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll

2015-03-11 19:57 - 2015-02-03 05:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2015-03-11 19:57 - 2015-02-03 05:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll

2015-03-11 19:57 - 2015-02-03 05:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll

2015-03-11 19:57 - 2015-02-03 05:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2015-03-11 19:57 - 2015-02-03 05:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-03-11 19:57 - 2015-02-03 05:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2015-03-11 19:57 - 2015-02-03 05:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2015-03-11 19:57 - 2015-02-03 05:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2015-03-11 19:57 - 2015-02-03 05:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2015-03-11 19:57 - 2015-02-03 05:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2015-03-11 19:57 - 2015-02-03 05:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2015-03-11 19:57 - 2015-02-03 05:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-03-11 19:57 - 2015-02-03 05:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll

2015-03-11 19:57 - 2015-02-03 05:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2015-03-11 19:57 - 2015-02-03 05:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe

2015-03-11 19:57 - 2015-02-03 05:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-03-11 19:57 - 2015-02-03 05:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2015-03-11 19:57 - 2015-02-03 05:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe

2015-03-11 19:57 - 2015-02-03 05:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2015-03-11 19:57 - 2015-02-03 05:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe

2015-03-11 19:57 - 2015-02-03 05:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe

2015-03-11 19:57 - 2015-02-03 05:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys

2015-03-11 19:57 - 2015-02-03 05:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-03-11 19:57 - 2015-02-03 05:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-03-11 19:57 - 2015-02-03 05:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll

2015-03-11 19:57 - 2015-02-03 05:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-03-11 19:57 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe

2015-03-11 19:57 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe

2015-03-11 19:57 - 2015-02-03 04:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2015-03-11 19:57 - 2014-11-01 00:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2015-03-11 19:56 - 2015-02-03 05:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll

2015-03-11 19:56 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx

2015-03-11 19:56 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll

2015-03-11 19:56 - 2015-02-03 05:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2015-03-11 19:56 - 2015-02-03 05:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll

2015-03-11 19:56 - 2015-02-03 05:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-03-11 19:56 - 2015-02-03 05:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll

2015-03-11 19:56 - 2015-02-03 05:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll

2015-03-11 19:56 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx

2015-03-11 19:56 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll

2015-03-11 19:56 - 2015-02-03 05:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL

2015-03-11 19:56 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll

2015-03-11 19:56 - 2015-02-03 05:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2015-03-11 19:56 - 2015-01-31 05:48 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2015-03-11 19:56 - 2015-01-31 05:48 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll

2015-03-11 19:56 - 2015-01-31 01:56 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2015-03-11 19:55 - 2015-03-06 07:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-03-11 19:55 - 2015-03-06 07:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-03-11 19:55 - 2015-03-06 07:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-03-11 19:55 - 2015-03-06 07:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-03-11 19:55 - 2015-03-06 07:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-03-11 19:55 - 2015-03-06 07:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-03-11 19:55 - 2015-03-06 07:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-03-11 19:55 - 2015-03-06 07:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-03-11 19:55 - 2015-03-06 07:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-03-11 19:55 - 2015-03-06 07:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-03-11 19:55 - 2015-03-06 07:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-03-11 19:55 - 2015-03-06 07:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-03-11 19:55 - 2015-03-06 07:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-03-11 19:55 - 2015-03-06 07:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-03-11 19:55 - 2015-03-06 07:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-03-11 19:55 - 2015-03-06 07:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-03-11 19:55 - 2015-03-06 07:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-03-11 19:55 - 2015-03-06 07:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-03-11 19:55 - 2015-03-06 07:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-03-11 19:55 - 2015-03-06 07:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-03-11 19:55 - 2015-03-06 07:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-03-11 19:55 - 2015-03-06 07:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-03-11 19:55 - 2015-03-06 07:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-03-11 19:55 - 2015-03-06 07:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-03-11 19:55 - 2015-03-06 07:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-03-11 19:55 - 2015-03-06 07:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-03-11 19:55 - 2015-03-06 07:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-03-11 19:55 - 2015-03-06 07:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-03-11 19:55 - 2015-03-06 07:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-03-11 19:55 - 2015-03-06 07:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-03-11 19:55 - 2015-03-06 07:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-03-11 19:55 - 2015-02-13 07:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2015-03-11 19:55 - 2015-02-13 07:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-03-11 19:55 - 2015-02-03 05:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll

2015-03-11 19:55 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll

2015-03-11 19:55 - 2015-01-31 01:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2015-03-11 19:54 - 2015-02-26 05:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-03-11 19:54 - 2015-02-24 05:15 - 00389800 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-03-11 19:54 - 2015-02-24 04:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-03-11 19:54 - 2015-02-21 02:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-03-11 19:54 - 2015-02-21 02:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-03-11 19:54 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-03-11 19:54 - 2015-02-21 02:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-03-11 19:54 - 2015-02-21 01:58 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-03-11 19:54 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-03-11 19:54 - 2015-02-20 05:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-03-11 19:54 - 2015-02-20 05:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-03-11 19:54 - 2015-02-20 04:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-03-11 19:54 - 2015-02-20 04:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-03-11 19:54 - 2015-02-20 04:48 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-03-11 19:54 - 2015-02-20 04:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-03-11 19:54 - 2015-02-20 04:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-03-11 19:54 - 2015-02-20 04:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-03-11 19:54 - 2015-02-20 04:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-03-11 19:54 - 2015-02-20 04:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-03-11 19:54 - 2015-02-20 04:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-03-11 19:54 - 2015-02-20 04:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-03-11 19:54 - 2015-02-20 04:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-03-11 19:54 - 2015-02-20 04:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-03-11 19:54 - 2015-02-20 04:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-03-11 19:54 - 2015-02-20 04:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-03-11 19:54 - 2015-02-20 04:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-03-11 19:54 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-03-11 19:54 - 2015-02-20 04:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-03-11 19:54 - 2015-02-20 04:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-03-11 19:54 - 2015-02-20 04:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-03-11 19:54 - 2015-02-20 04:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-03-11 19:54 - 2015-02-20 03:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-03-11 19:54 - 2015-02-20 03:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-03-11 19:54 - 2015-02-20 03:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-03-11 19:54 - 2015-02-20 03:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-03-11 19:54 - 2015-02-20 03:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-03-11 19:54 - 2015-02-20 03:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-03-11 19:54 - 2015-02-20 03:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-03-11 19:54 - 2015-02-20 03:43 - 14398976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-03-11 19:54 - 2015-02-20 03:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-03-11 19:54 - 2015-02-20 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-03-11 19:54 - 2015-02-20 03:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-03-11 19:54 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-03-11 19:54 - 2015-02-20 03:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-03-11 19:54 - 2015-02-20 03:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-03-11 19:54 - 2015-02-20 03:16 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-03-11 19:54 - 2015-02-20 03:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-03-11 19:54 - 2015-02-20 03:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-03-11 19:54 - 2015-02-20 02:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-03-11 19:54 - 2015-02-20 02:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-03-11 19:54 - 2015-02-03 05:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-03-11 19:54 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2015-03-11 19:54 - 2015-01-17 04:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2015-03-11 19:54 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll

2015-03-11 19:53 - 2015-02-21 03:16 - 25021440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-03-11 19:53 - 2015-02-20 04:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-03-11 19:53 - 2015-02-20 04:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-03-11 19:53 - 2015-02-20 04:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-03-11 19:53 - 2015-02-20 04:32 - 06035456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-03-11 19:53 - 2015-02-20 04:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-03-11 19:53 - 2015-02-20 03:28 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-03-11 19:51 - 2015-02-04 05:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2015-03-11 19:51 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2015-03-10 23:25 - 2015-03-13 22:02 - 00000000 ____D () C:\Users\Centurion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live for Speed (8)

2015-03-10 20:29 - 2015-03-13 22:02 - 00000000 ____D () C:\Users\Centurion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox

2015-03-10 10:07 - 2015-03-10 10:07 - 00000000 ____D () C:\Program Files (x86)\Roblox

2015-03-06 20:47 - 2015-03-06 20:48 - 00000000 ____D () C:\Users\Centurion\Desktop\LFS_Ai qj weee

2015-03-06 20:01 - 2015-03-06 20:01 - 00001712 _____ () C:\Users\Centurion\Desktop\NewTweakOrder.lnk

2015-03-03 22:04 - 2015-03-13 23:36 - 00000000 ____D () C:\Users\Centurion\AppData\Roaming\SkypeFall

2015-03-03 10:17 - 2015-03-03 10:36 - 00002888 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Centurion

2015-03-03 10:05 - 2015-03-03 10:05 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7

2015-03-03 01:50 - 2015-03-03 01:50 - 00003168 _____ () C:\Windows\System32\Tasks\{B9B7B465-5B9B-4C2A-BC88-5A40A9514FDF}

2015-03-03 01:47 - 2015-03-13 23:36 - 00000000 ____D () C:\Program Files (x86)\e tfa e virus

2015-03-03 01:44 - 2015-03-03 10:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rapid Media Converter

2015-03-03 01:44 - 2015-03-03 02:33 - 00000000 ____D () C:\Users\Centurion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rapid Media Converter

2015-03-03 01:44 - 2015-03-03 01:44 - 00000000 ____D () C:\Users\Centurion\AppData\Local\RapidMediaConverter

2015-03-02 19:10 - 2015-03-02 19:10 - 00000752 _____ () C:\Users\Centurion\Desktop\LFS containing folder.lnk

2015-03-02 18:44 - 2015-03-02 18:45 - 00000610 _____ () C:\Users\Centurion\Desktop\LFS.lnk

2015-03-02 18:44 - 2015-03-02 18:44 - 00000000 ____D () C:\Users\Centurion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live for Speed (6)

2015-03-02 18:25 - 2015-03-14 01:47 - 00000000 ____D () C:\Users\Centurion\AppData\Local\CrashDumps

2015-03-02 18:12 - 2015-03-02 18:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter Strike 1.6 v23

2015-03-02 17:29 - 2015-03-02 17:31 - 08268072 _____ (KingSOFT DVD ) C:\Users\Centurion\Downloads\cs16full_v23b_v2_5.exe

2015-03-02 17:22 - 2015-03-03 10:46 - 00000000 ____D () C:\Program Files (x86)\globalUpdate

2015-03-02 17:22 - 2015-03-02 17:22 - 00000000 ____D () C:\Users\Centurion\AppData\Local\globalUpdate

2015-03-02 17:20 - 2015-03-02 17:20 - 01739088 _____ (BitTorrent Inc.) C:\Users\Centurion\Downloads\bundle.exe

2015-03-02 15:23 - 2015-03-02 15:23 - 00000000 ____D () C:\Users\Centurion\Documents\My Cheat Tables

2015-03-02 13:01 - 2015-03-02 13:01 - 00000000 ____D () C:\Program Files\Unity

2015-03-02 12:33 - 2015-03-02 12:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CS-Source

2015-03-01 23:51 - 2015-03-01 23:51 - 00001050 _____ () C:\Users\Centurion\Desktop\Google Chrome Dolnloads.lnk

2015-03-01 18:56 - 2015-03-01 18:56 - 00000000 _____ () C:\Windows\SysWOW64\Access.dat

2015-03-01 18:54 - 2015-03-01 18:56 - 00000000 ____D () C:\ProgramData\Tunngle

2015-03-01 18:54 - 2015-03-01 18:54 - 00000000 ____D () C:\Users\Public\Documents\Tunngle

2015-03-01 18:54 - 2015-03-01 18:54 - 00000000 ____D () C:\Users\Centurion\Documents\Tunngle

2015-02-28 00:29 - 2015-02-28 00:32 - 00000000 ____D () C:\Users\Centurion\Documents\GTA San Andreas User Files

2015-02-28 00:28 - 2015-02-28 00:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GTASA

2015-02-27 23:53 - 2015-02-28 00:22 - 852783202 _____ ( ) C:\Users\Centurion\Downloads\setup.exe

2015-02-27 22:30 - 2015-03-03 10:46 - 00000000 ____D () C:\Users\Centurion\AppData\Roaming\FileZilla

2015-02-27 22:30 - 2015-02-28 16:08 - 00000000 ____D () C:\Users\Centurion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client

2015-02-27 22:30 - 2015-02-27 22:30 - 00000790 _____ () C:\Users\Centurion\Desktop\FileZilla.lnk

2015-02-27 21:09 - 2015-02-27 21:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2

2015-02-25 21:34 - 2015-01-09 01:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls

2015-02-25 21:34 - 2015-01-09 01:43 - 00419936 _____ () C:\Windows\system32\locale.nls

2015-02-21 23:16 - 2015-02-21 23:15 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2015-02-21 23:15 - 2015-02-21 23:15 - 00000000 ____D () C:\Program Files (x86)\Java

2015-02-21 14:31 - 2015-02-21 14:31 - 00000000 ____D () C:\Users\Centurion\AppData\Roaming\SpaceEngineers

2015-02-21 14:21 - 2015-02-21 14:21 - 00000000 ____D () C:\Users\Centurion\Documents\Paradox Interactive

2015-02-21 12:34 - 2015-03-04 23:48 - 00000000 ____D () C:\Users\Centurion\Desktop\Steam_GaMe

2015-02-20 19:48 - 2015-02-20 19:48 - 00000000 ____D () C:\Users\Centurion\AppData\Roaming\Macromedia

2015-02-20 19:47 - 2015-02-20 19:47 - 00000000 ____D () C:\Users\Centurion\AppData\Local\Steam

2015-02-20 08:53 - 2015-03-03 10:46 - 00000000 ____D () C:\Users\Centurion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\No-IP DUC

2015-02-18 23:12 - 2015-02-18 23:12 - 00000000 ____D () C:\Users\Centurion\Documents\Multisoft

2015-02-18 19:24 - 2015-02-18 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2015-02-18 19:24 - 2015-02-18 19:24 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2015-02-18 12:13 - 2015-02-18 12:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Forward Development

2015-02-18 12:12 - 2015-03-13 22:29 - 00000000 ____D () C:\Users\Centurion\AppData\Roaming\Adobe

2015-02-18 11:54 - 2015-02-18 12:08 - 00000000 ____D () C:\Users\Centurion\Downloads\City Car Driving v2.2.7 + Car Pack + Crack

2015-02-17 16:04 - 2015-02-17 16:04 - 01202848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FM20.DLL

2015-02-15 23:17 - 2015-02-16 10:10 - 00000000 ____D () C:\Program Files\CyberGhost 5

2015-02-15 23:17 - 2015-02-15 23:17 - 00000000 ____D () C:\Program Files\TAP-Windows

2015-02-15 22:14 - 2014-08-21 12:35 - 00036568 _____ (BeeThink SoftWare, Inc.) C:\Windows\system32\Drivers\nblocker.sys

2015-02-15 03:00 - 2015-03-02 00:58 - 00000000 ____D () C:\Users\Centurion\Downloads\David Cross_ HITS_

2015-02-13 11:39 - 2015-03-10 23:25 - 00000000 ____D () C:\Users\Centurion\Desktop\Live For Speed

2015-02-12 21:41 - 2015-03-02 17:20 - 00000859 _____ () C:\Users\Centurion\Desktop\µTorrent.lnk

2015-02-12 21:40 - 2015-03-04 20:16 - 00000000 ____D () C:\Users\Centurion\AppData\Roaming\uTorrent

2015-02-12 21:40 - 2015-02-12 21:40 - 00000000 ____D () C:\ProgramData\APN

2015-02-12 21:39 - 2015-03-14 11:54 - 00000000 ____D () C:\Users\Centurion\AppData\Local\LogMeIn Hamachi

2015-02-12 21:39 - 2015-02-12 21:39 - 00000000 ____D () C:\Users\Centurion\AppData\Local\LogMeIn

2015-02-12 20:51 - 2015-02-12 20:51 - 00000000 ____D () C:\Users\Centurion\Documents\Skype Voice Records

2015-02-12 20:51 - 2015-02-12 20:51 - 00000000 ____D () C:\Users\Centurion\Documents\Clownfish Avatars

2015-02-12 19:44 - 2015-02-12 19:44 - 00000000 ____D () C:\Users\Centurion\AppData\Roaming\java

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2099-01-14 22:34 - 2014-03-09 20:58 - 00000000 ____D () C:\ProgramData\LogMeIn

2015-03-14 12:17 - 2013-12-01 09:53 - 00000000 ____D () C:\Users\Centurion\AppData\Roaming\Skype

2015-03-14 12:06 - 2014-09-17 14:06 - 00000286 _____ () C:\Windows\Tasks\SpeedUpMyPC Maintenance.job

2015-03-14 12:01 - 2009-07-14 06:45 - 00027168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-03-14 12:01 - 2009-07-14 06:45 - 00027168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-03-14 12:00 - 2014-11-12 16:54 - 00001222 __RSH () C:\ProgramData\ntuser.pol

2015-03-14 12:00 - 2013-11-30 21:23 - 01738265 _____ () C:\Windows\WindowsUpdate.log

2015-03-14 11:53 - 2013-11-30 14:52 - 00001000 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-03-14 11:52 - 2014-09-17 14:06 - 00000280 _____ () C:\Windows\Tasks\SpeedUpMyPC Startup.job

2015-03-14 11:52 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-03-14 11:52 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\TAPI

2015-03-14 01:51 - 2013-11-30 14:52 - 00001004 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-03-13 22:34 - 2014-12-06 16:45 - 00000000 ____D () C:\Users\Centurion\Documents\DCSCMIN

2015-03-13 22:34 - 2014-11-01 12:20 - 86044672 _____ () C:\Windows\system32\config\SOFTWARE.iodefrag.bak

2015-03-13 22:34 - 2014-11-01 12:20 - 00385024 _____ () C:\Windows\system32\config\DEFAULT.iodefrag.bak

2015-03-13 22:34 - 2014-11-01 12:20 - 00102400 _____ () C:\Windows\system32\config\SAM.iodefrag.bak

2015-03-13 22:34 - 2014-11-01 12:20 - 00028672 _____ () C:\Windows\system32\config\SECURITY.iodefrag.bak

2015-03-13 22:02 - 2014-10-12 19:20 - 00000000 ___RD () C:\Users\Centurion\Desktop\

 

2015-03-13 22:02 - 2013-12-16 23:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro

2015-03-13 22:02 - 2013-12-16 23:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth

2015-03-13 20:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2015-03-12 09:20 - 2014-10-07 15:14 - 00000000 ____D () C:\ProgramData\ProductData

2015-03-12 09:18 - 2009-07-14 06:45 - 00351896 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-03-12 09:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism

2015-03-12 09:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\bg-BG

2015-03-12 09:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism

2015-03-12 09:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\bg-BG

2015-03-12 00:21 - 2013-12-01 10:00 - 00000000 ____D () C:\ProgramData\Microsoft Help

2015-03-12 00:15 - 2013-11-30 23:23 - 00000000 ____D () C:\Windows\system32\MRT

2015-03-12 00:09 - 2013-11-30 23:23 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-03-11 20:00 - 2014-01-04 16:34 - 00002181 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2015-03-10 23:16 - 2015-01-29 13:38 - 00000000 ____D () C:\Users\Centurion\AppData\Roaming\.minecraft

2015-03-10 20:41 - 2014-09-20 12:41 - 00000000 ____D () C:\Users\Centurion\Desktop\Cheat Project 1.0b1

2015-03-04 04:59 - 2014-05-31 22:29 - 00000460 ____H () C:\Windows\Tasks\Norton Security Scan for Centurion.job

2015-03-03 10:46 - 2013-12-01 09:51 - 00000000 ____D () C:\Users\Centurion\AppData\Roaming\DAEMON Tools Lite

2015-03-03 10:46 - 2013-11-30 14:52 - 00000000 ____D () C:\Program Files (x86)\Google

2015-03-03 10:45 - 2013-11-30 14:52 - 00004000 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-03-03 10:45 - 2013-11-30 14:52 - 00003748 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-03-03 01:45 - 2013-11-30 11:34 - 00001631 _____ () C:\Users\Centurion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-03-02 18:27 - 2014-06-12 08:43 - 00000000 ____D () C:\Users\Centurion\Desktop\GaMes

2015-03-02 17:20 - 2013-11-30 22:37 - 00000839 _____ () C:\Users\Centurion\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk

2015-03-02 11:28 - 2014-11-03 20:39 - 00000000 ____D () C:\Users\Centurion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\1-click run

2015-02-28 22:04 - 2014-12-01 17:42 - 00000000 ____D () C:\Users\Centurion\Documents\Bus Driver

2015-02-28 08:37 - 2014-03-23 08:30 - 00000000 ____D () C:\Users\Centurion\Documents\Euro Truck Simulator 2

2015-02-24 03:17 - 2010-11-21 05:27 - 00295552 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2015-02-22 09:08 - 2014-10-08 16:10 - 00000000 ____D () C:\ProgramData\Oracle

2015-02-22 08:57 - 2014-12-24 15:05 - 00000000 ____D () C:\Program Files\Java

2015-02-22 08:57 - 2014-10-15 17:51 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2015-02-21 22:34 - 2014-12-07 14:16 - 00002621 _____ () C:\Users\Public\Documents\Global.sw2

2015-02-21 12:34 - 2014-07-29 23:43 - 00000000 ____D () C:\Users\Centurion\Desktop\Minecraft Skins

2015-02-18 23:08 - 2014-04-25 05:35 - 00000000 ____D () C:\ProgramData\TEMP

2015-02-18 19:24 - 2015-01-30 07:08 - 00000926 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk

2015-02-16 16:20 - 2014-03-12 18:49 - 00033856 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys

2015-02-12 21:42 - 2013-12-01 09:53 - 00000000 ____D () C:\ProgramData\Skype

2015-02-12 19:39 - 2014-01-14 13:13 - 00000000 ____D () C:\Users\Centurion\Documents\My Games

2015-02-12 19:22 - 2014-12-11 05:28 - 00000000 ____D () C:\Windows\system32\appraiser

2015-02-12 19:22 - 2014-05-06 20:51 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-02-12 19:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing

2015-02-12 19:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

 

==================== Files in the root of some directories =======

 

2014-09-05 18:09 - 2014-09-05 18:09 - 0041984 ___SH () C:\Users\Centurion\AppData\Roaming\Thumbs.db

 

==================== Bamital & volsnap Check =================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

 

LastRegBack: 2014-05-29 04:13

 

==================== End Of Log ============================


И Adittional файла: 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Centurion at 2015-03-14 12:19:16
Running from C:\Users\Centurion\Desktop
Boot Mode: Normal
==========================================================
 
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
µTorrent (HKU\S-1-5-21-3679983645-2372540095-3756131332-1000\...\uTorrent) (Version: 3.4.2.38913 - BitTorrent Inc.)
1.1 (HKLM-x32\...\GTASA_is1) (Version:  - )
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.5.155 - Adobe Systems, Inc.)
Bus Driver (HKLM-x32\...\Steam App 302080) (Version:  - SCS Software)
Call of Duty: Advanced Warfare - Multiplayer (HKLM-x32\...\Steam App 209660) (Version:  - Sledgehammer Games)
City Car Driving 1.2.2 (HKLM-x32\...\{CC457F3D-5CDE-4CE8-9685-90A4EDE81374}_is1) (Version:  - Forward Development)
Clownfish for Skype (HKLM-x32\...\Clownfish) (Version:  - )
Counter-Strike Global Offensive version 1.34.4.5 (HKLM\...\{BD051FE3-1575-4CD6-81ED-E905FA94720B}_is1) (Version: 1.34.4.5 - Strogino CS Portal)
CraftTheWorld (HKLM-x32\...\CraftTheWorld_is1) (Version:  - )
Crusader Kings II (HKLM-x32\...\Steam App 203770) (Version:  - Paradox Development Studio)
CryptoPrevent (HKLM-x32\...\{5C5B24E7-4694-4049-A222-CCE7D3FAC63F}_is1) (Version:  - Foolish IT LLC)
CS-Source.v80 (HKLM-x32\...\{EE560BB6-443D-4D9E-B747-4051A606AC93}_is1) (Version: v.80 - Valve Corporation)
Cube World v0.1.0 (FIXED)(5 July 2013) (HKLM-x32\...\Cube World v0.1.0 (FIXED)(5 July 2013)0.1.0) (Version: 0.1.0 - Friends in War)
Cubic Castles (HKLM-x32\...\Steam App 317470) (Version:  - Cosmic Cow LLC)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Euro Truck Simulator 2 1.15.0.3s Public Beta (HKLM-x32\...\Euro Truck Simulator 2_is1) (Version: 1.15.0.3s Public Beta - DWORD)
Euro Truck Simulator 2 v1.11.1s (14 DLC) (HKLM-x32\...\Euro Truck Simulator 2 v1.11.1s (14 DLC)1.11.1s) (Version: 1.11.1s - Friends in War)
FileZilla Client 3.10.1.1 (HKU\S-1-5-21-3679983645-2372540095-3756131332-1000\...\FileZilla Client) (Version: 3.10.1.1 - Tim Kosse)
Game Maker 8.0 (HKLM-x32\...\Game Maker 8.0) (Version:  - )
Glyph (HKLM-x32\...\Glyph) (Version:  - Trion Worlds, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.39 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Gyazo 2.3 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version:  - Nota Inc.)
Half-Life (HKLM-x32\...\Half-Life_is1) (Version: Half-Life - Non Steam - KingSOFT DVD)
Heroes & Generals (HKLM-x32\...\Steam App 227940) (Version:  - Reto-Moto)
HP LaserJet Professional P1100-P1560-P1600 Series (HKLM\...\HP LaserJet Professional P1100-P1560-P1600 Series) (Version:  - )
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.319 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.319 - LogMeIn, Inc.) Hidden
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Excel 2007 Help Актуализация (KB963678) (HKLM-x32\...\{90120000-0016-0402-0000-0000000FF1CE}_ENTERPRISE_{B3B0B5D0-371D-4211-A43A-B4E70B563756}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Powerpoint 2007 Help Актуализация (KB963669) (HKLM-x32\...\{90120000-0018-0402-0000-0000000FF1CE}_ENTERPRISE_{C64A08BB-59AC-4ACE-AF1D-D5225DF9CE2D}) (Version:  - Microsoft)
Microsoft Office Word 2007 Help Актуализация (KB963665) (HKLM-x32\...\{90120000-001B-0402-0000-0000000FF1CE}_ENTERPRISE_{6BECE490-EB24-47FB-B6C9-91724C0B0E6E}) (Version:  - Microsoft)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Windows Media Video 9 VCM (HKLM-x32\...\WMV9_VCM) (Version:  - )
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Minecraft1.8 (HKLM-x32\...\Minecraft1.8) (Version:  - )
Murder Miners (HKLM-x32\...\Steam App 274900) (Version:  - JForce Games)
MyDefrag v4.3.1 (HKLM\...\MyDefrag v4.3.1_is1) (Version: 4.0.0.0 - J.C. Kessels)
MyPC Backup  (HKLM\...\MyPC Backup) (Version:  - JDi Backup Ltd) <==== ATTENTION
No-IP DUC (HKLM-x32\...\NoIPDUC) (Version: 4.1.0 - Vitalwerks Internet Solutions LLC)
NVIDIA GeForce Experience 2.1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.5 - NVIDIA Corporation)
NVIDIA Graphics Driver 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.09 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
RIFT (HKLM-x32\...\Glyph RIFT) (Version:  - Trion Worlds, Inc.)
ROBLOX Player for Centurion (HKU\S-1-5-21-3679983645-2372540095-3756131332-1000\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version:  - ROBLOX Corporation)
ROBLOX Studio for Centurion (HKU\S-1-5-21-3679983645-2372540095-3756131332-1000\...\{2922D6F1-2865-4EFA-97A9-94EEAB3AFA14}) (Version:  - ROBLOX Corporation)
SavePass 1.1 (HKLM-x32\...\SavePass 1.1) (Version: 1.35.9.29 - OB) <==== ATTENTION
SHIELD Streaming (Version: 3.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.18.9 - NVIDIA Corporation) Hidden
Skype Hacker v2.4.6 (HKLM-x32\...\Skype Hacker v2.4.6) (Version:  - )
SkypeFall version 1.0 (HKLM-x32\...\{50C37E0A-2AEB-409D-9FDC-AFBF9C6A75E8}}_is1) (Version: 1.0 - )
Skype™ 7.1 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.1.105 - Skype Technologies S.A.)
Space Engineers (HKLM-x32\...\Steam App 244850) (Version:  - Keen Software House)
SPINTIRES (HKLM-x32\...\{A913621A-6B59-2B42-48D6-2FDF3A865421}_is1) (Version: 1.0 - Oovee® Game Studios, IMGN.PRO (Coop-Land))
Stronghold Crusader Extreme (HKLM-x32\...\{8C3727F2-8E37-49E4-820C-03B1677F53B6}) (Version: 1.20.0000 - Firefly Studios)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version:  - )
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)
Trove (HKLM-x32\...\Glyph Trove) (Version:  - Trion Worlds, Inc.)
Unity Web Player (HKU\S-1-5-21-3679983645-2372540095-3756131332-1000\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS)
Unity Web Player (x64) (All users) (HKLM\...\UnityWebPlayer) (Version: 4.6.3f1 - Unity Technologies ApS)
Unturned (HKLM-x32\...\Steam App 304930) (Version:  - Nelson Sexton)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Winamp Detector Plug-in (HKU\S-1-5-21-3679983645-2372540095-3756131332-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Zombie Panic Source Dedicated Server (HKLM-x32\...\Steam App 17505) (Version:  - Zombie Panic! Team)
 
==================== Custom CLSID (selected items): ==========================
 
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 
==================== Restore Points  =========================
 
12-03-2015 00:05:39 Windows Update
13-03-2015 22:10:49 Removed Stronghold Crusader Extreme
 
==================== Hosts content: ==========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-14 04:34 - 2014-09-19 21:03 - 00001165 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
127.0.0.1 www.subdomain.localhost
127.0.0.1 www.subdomain.test1.ru
127.0.0.1 www.Tools.localhost
127.0.0.1 subdomain.localhost
127.0.0.1 subdomain.test1.ru
127.0.0.1 Tools.localhost
127.0.0.1 www.localhost
127.0.0.1 www.test1.ru
127.0.0.2 custom-host
127.0.0.2 www.custom
127.0.0.1 test1.ru
127.0.0.2 custom
 
 
==================== Scheduled Tasks (whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 
Task: {022A459F-D41F-4BF6-B753-73FCE754007C} - System32\Tasks\MyDefrag v4.3.1 Monthly => D:\Downloads\MyDefrag v4.3.1\Scripts\AutomaticMonthly.MyD [2010-05-21] ()
Task: {17BC06E7-D9E9-41CB-9ABF-C0D27DEC3726} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== ATTENTION
Task: {27C2BD01-B187-4367-8DF9-A1670B8F31E1} - System32\Tasks\{AA3678D7-7F76-4E10-8842-F201D8A43148} => pcalua.exe -a C:\Users\Centurion\Downloads\B2CAppSetup.exe -d C:\Users\Centurion\Downloads
Task: {2F3BE1DE-BE54-4064-A546-7C201895A93B} - System32\Tasks\UNELEVATE_20315 => C:\Program Files (x86)\ShopperPro\JSDriver\1.37.0.486\jsdrv.exe <==== ATTENTION
Task: {332F89F2-668F-4246-9F3E-C06A8FB204C0} - System32\Tasks\SpeedUpMyPC Maintenance => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATTENTION
Task: {3683E673-195E-440A-9623-3F68F75CD196} - System32\Tasks\gg_uac_daemon_Marty2 => D:\Downloads\Garena Plus\ggdllhost.exe
Task: {3AA090F3-8890-43E2-932C-E708BD7638CF} - System32\Tasks\{E3A8773A-45B0-45FB-B82F-CC4D30E9C35A} => pcalua.exe -a "D:\Downloads\RABOTI 2014\Google Chrome Dolnloads\Counter-Strike v1.6 Mega Edition.exe" -d "D:\Downloads\RABOTI 2014\Google Chrome Dolnloads"
Task: {3B7555E0-C93C-4DB6-BD8F-EE4225377762} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe
Task: {416B5065-E747-4B5A-8BCD-3FAAE097C77C} - System32\Tasks\{A0F8CD9C-A57C-453D-91CB-C8CF96D344D2} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{8C3727F2-8E37-49E4-820C-03B1677F53B6}\setup.exe" -c -runfromtemp -l0x0009 -removeonly
Task: {4C975570-6D57-45CB-B6C9-81BB49F85441} - System32\Tasks\{5E2D9E84-530D-4677-B9FD-FCF70469074B} => pcalua.exe -a "D:\Downloads\Counter-Strike 1.6 Mega Edition\Counter-Strike v1.6 Mega Edition.exe" -d "D:\Downloads\Counter-Strike 1.6 Mega Edition"
Task: {4DE43139-B8A6-48CB-8BC6-783306DAA5C1} - System32\Tasks\{A6D0BD3A-3082-4643-9939-5A9A20BE0D34} => C:\Program Files (x86)\BulGames™\Grand Theft Auto Sofia\GTA Sofia\gta_sa.exe
Task: {4DFF800F-BB01-4F50-AC78-5C3400EA0447} - System32\Tasks\Update\Error Report => C:\Users\Centurion\AppData\Roaming\Windows Archive\Error Report.exe
Task: {4FC1ECFD-0172-4F5E-AEFF-0411C78980C4} - System32\Tasks\Games\UpdateCheck_S-1-5-21-3679983645-2372540095-3756131332-1000
Task: {53202869-32D7-44EA-9926-2190C5A8339E} - System32\Tasks\SpeedUpMyPC Startup => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATTENTION
Task: {55C8230B-87FA-4491-94A3-BBA09B15F3A9} - System32\Tasks\MyDefrag v4.3.1 Daily => D:\Downloads\MyDefrag v4.3.1\Scripts\AutomaticDaily.MyD [2010-05-21] ()
Task: {75BBABF8-7F36-4804-A8AA-73B7BC9EA39A} - System32\Tasks\{83C30A66-8364-4E5D-A161-DE8CE471D5D8} => pcalua.exe -a "D:\Downloads\Grand Theft Auto (GTA) San Andreas-HOODLUM\Grand Theft Auto - San Andreas [bG].exe" -d "D:\Downloads\Grand Theft Auto (GTA) San Andreas-HOODLUM"
Task: {825D0827-105F-4E10-8E3B-EE183D8B2D94} - System32\Tasks\{74FE06D2-15FC-4E0D-A5B4-A681FC90E6C0} => pcalua.exe -a D:\Downloads\gts_build_1.4\setup.exe -d D:\Downloads\gts_build_1.4
Task: {842EE2CF-088A-420B-BF4B-757AD4011BB4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-03] (Google Inc.)
Task: {89082064-A178-4A26-BF74-257383C86472} - System32\Tasks\ASC8_PerformanceMonitor => D:\Downloads\Advanced SystemCare 8\Monitor.exe
Task: {8E4F1657-DBE7-4C00-B53A-767F4FAB2FF0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {8EB0D0D7-D8F1-4672-9FD0-2B087CEF2519} - System32\Tasks\PC Speed Maximizer Schedule => C:\Program Files (x86)\PC Speed Maximizer\SPMLauncher.exe
Task: {9B4F3CF7-1332-4101-BC4A-B14B80252B74} - System32\Tasks\{406A6778-E93F-45B4-B1DB-31904647BDCB} => pcalua.exe -a "C:\Users\Centurion\AppData\Roaming\.minecraft\minecraft launcher\Uninstall.exe"
Task: {9DB28495-DE07-414A-B7A1-373F3B20E22D} - System32\Tasks\{B3F635CF-82A0-494A-8FA2-EC6F2F1BE31F} => pcalua.exe -a "C:\Program Files (x86)\YouTube Accelerator\YTAUninstall.exe"
Task: {A74B97D1-EFD7-459A-9232-8C3D1F33D036} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-03] (Google Inc.)
Task: {AEE9E766-A8CB-4BA0-B366-B461C18780E2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated)
Task: {B85151CC-B8DD-46C5-918A-DE6AA7E4C80C} - System32\Tasks\Uninstaller_SkipUac_Centurion => D:\Downloads\IObit Uninstaller\IObitUninstaler.exe
Task: {C1AFED92-4D03-4107-8092-F647BE70AC29} - System32\Tasks\Norton Security Scan for Centurion => C:\PROGRA~2\NORTON~2\Engine\410~1.28\Nss.exe
Task: {C7DC82CA-1042-4313-A6FF-741E9E15C38D} - System32\Tasks\{B9B7B465-5B9B-4C2A-BC88-5A40A9514FDF} => pcalua.exe -a C:\Users\Centurion\AppData\Roaming\omniboxes\UninstallManager.exe -c  -ptid=obw
Task: {C99E7C85-E7EB-49E6-8630-F4A011103B3C} - System32\Tasks\Driver Booster SkipUAC (Centurion) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {CD7D6282-BC90-400B-90FB-441A1B1776EC} - System32\Tasks\YTAUpdate_logon => C:\PROGRA~2\YOUTUB~1\Updater.exe <==== ATTENTION
Task: {D024FBF0-03A0-44DC-B0A4-4DC9F419C631} - System32\Tasks\{13913428-19C1-4340-BE43-A241A4235610} => pcalua.exe -a "C:\Users\Centurion\Desktop\Fighter FX 7.2\Status Checker.exe" -d "C:\Users\Centurion\Desktop\Fighter FX 7.2"
Task: {DB1E6A81-92F2-4AA3-BCC1-D97A6D66AADF} - System32\Tasks\YTAHelper => C:\Program Files (x86)\YTAHelper\YTAHelper.exe <==== ATTENTION
Task: {E7228862-F126-417C-98FC-E7A230561A31} - System32\Tasks\ASC8_SkipUac_Centurion => D:\Downloads\Advanced SystemCare 8\ASC.exe
Task: {F24148B6-CA6A-4E39-85BF-EE7196D4B948} - System32\Tasks\YTAUpdate => C:\PROGRA~2\YOUTUB~1\Updater.exe <==== ATTENTION
Task: {F35E12A5-2285-4B87-8085-B5637318A884} - System32\Tasks\Razer_Game_Booster_AutoUpdate => D:\Downloads\Razer Game Booster\AutoUpdate.exe
Task: {F59AB27C-8E68-48B5-A77A-B367A95225B7} - System32\Tasks\{811936E1-4B6B-4B30-8B2A-B9FA7F99E6EC} => pcalua.exe -a "D:\Downloads\PC_EAs.FiFA.2oo8-.direct.play.rip.-ToeD\FiFAo8\FIFA 08\makeDesktopIcon.exe" -d "D:\Downloads\PC_EAs.FiFA.2oo8-.direct.play.rip.-ToeD\FiFAo8\FIFA 08"
Task: {F7146CE5-BC6C-4512-96C0-AD64739A2CA0} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe
Task: {F9702BBC-83A5-46DA-9C49-AF6FF99DC47A} - System32\Tasks\gg_uac_daemon_Centurion => D:\Downloads\Garena Plus\ggdllhost.exe
Task: {FA57ECA8-4D45-4CD3-93B8-343836D027B9} - System32\Tasks\{8ED861A1-8832-4908-BA51-41E65AF3F093} => pcalua.exe -a D:\Downloads\sa-mp-0.2.1-install.exe -d D:\Downloads
Task: {FD505065-9614-4C7F-B1DB-459EBF21FD8B} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe
Task: {FF27AECC-469E-46A8-B495-2D0D671E13E8} - System32\Tasks\{4902EB45-CF70-4560-8387-48D5EEF7CB3A} => C:\Program Files (x86)\BulGames™\Grand Theft Auto Sofia\GTA Sofia\gta_sa.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Norton Security Scan for Centurion.job => C:\PROGRA~2\NORTON~2\Engine\410~1.28\Nss.exe
Task: C:\Windows\Tasks\SpeedUpMyPC Maintenance.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATTENTION
Task: C:\Windows\Tasks\SpeedUpMyPC Startup.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATTENTION
 
==================== Loaded Modules (whitelisted) ==============
 
2014-02-06 19:55 - 2012-08-31 15:03 - 00288768 _____ () C:\Windows\System32\HP1100LM.DLL
2014-02-06 19:56 - 2012-08-31 15:02 - 00074240 _____ () C:\Windows\system32\spool\PRTPROCS\x64\HP1100PP.DLL
2014-01-14 10:15 - 2014-12-13 12:08 - 00012104 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2013-11-30 14:18 - 2014-12-13 10:03 - 00117576 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-12-08 12:10 - 2014-12-08 12:10 - 00102176 _____ () D:\Downloads\FileZilla FTP Client\fzshellext_64.dll
2014-05-12 12:40 - 2014-05-12 12:40 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-02-15 22:14 - 2014-08-22 14:18 - 00077608 _____ () D:\Downloads\Anti DDoS Guardian 3.3\StopBruteForceService.exe
2013-03-09 10:06 - 2013-03-09 10:06 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2015-03-11 20:00 - 2015-03-11 04:16 - 01633608 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.39\libglesv2.dll
2015-03-11 20:00 - 2015-03-11 04:16 - 00093000 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.39\libegl.dll
2015-03-11 20:00 - 2015-03-11 04:16 - 26792264 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.39\PepperFlash\pepflashplayer.dll
2014-12-04 16:43 - 2013-10-25 12:08 - 00517408 _____ () D:\Downloads\Advanced SystemCare 8\sqlite3.dll
2014-01-14 10:15 - 2014-12-13 12:08 - 00012104 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
AlternateDataStreams: C:\ProgramData:NT
AlternateDataStreams: C:\ProgramData:NT2
AlternateDataStreams: C:\Users\All Users:NT
AlternateDataStreams: C:\Users\All Users:NT2
AlternateDataStreams: C:\ProgramData\Application Data:NT
AlternateDataStreams: C:\ProgramData\Application Data:NT2
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2
AlternateDataStreams: C:\ProgramData\TEMP:10D14739
AlternateDataStreams: C:\ProgramData\TEMP:56E2E879
AlternateDataStreams: C:\ProgramData\TEMP:FB6A21E3
AlternateDataStreams: C:\Users\Centurion\Application Data:NT
AlternateDataStreams: C:\Users\Centurion\Application Data:NT2
AlternateDataStreams: C:\Users\Centurion\AppData\Roaming:NT
AlternateDataStreams: C:\Users\Centurion\AppData\Roaming:NT2
 
==================== Safe Mode (whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
 
==================== EXE Association (whitelisted) ===============
 
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-3679983645-2372540095-3756131332-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Centurion\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(Currently there is no automatic fix for this section.)
 
MSCONFIG\Services: STacSV => 2
MSCONFIG\Services: TeamViewer9 => 2
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-3679983645-2372540095-3756131332-500 - Administrator - Disabled)
Centurion (S-1-5-21-3679983645-2372540095-3756131332-1000 - Administrator - Enabled) => C:\Users\Centurion
Guest (S-1-5-21-3679983645-2372540095-3756131332-501 - Limited - Disabled) => C:\Users\Guest
HomeGroupUser$ (S-1-5-21-3679983645-2372540095-3756131332-1005 - Limited - Enabled)
 
==================== Faulty Device Manager Devices =============
 
Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (03/14/2015 11:53:30 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (03/14/2015 02:43:36 AM) (Source: Chrome) (EventID: 1) (User: NT AUTHORITY)
Description: Chrome has encountered a fatal error.
ver=42.0.2311.39;lang=;guid=0F48CBE7CDEC4E38B7B8B46BD4E892C1;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\ca663aa9-b828-4a13-8516-dd567bc59cb3.dmp
 
Error: (03/14/2015 01:47:30 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Explorer.EXE, version: 6.1.7601.17567, time stamp: 0x4d672ee4
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc000041d
Fault offset: 0x0000000002cf0fd8
Faulting process id: 0x74c
Faulting application start time: 0xExplorer.EXE0
Faulting application path: Explorer.EXE1
Faulting module path: Explorer.EXE2
Report Id: Explorer.EXE3
 
Error: (03/14/2015 01:47:22 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Explorer.EXE, version: 6.1.7601.17567, time stamp: 0x4d672ee4
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x0000000002cf0fd8
Faulting process id: 0x74c
Faulting application start time: 0xExplorer.EXE0
Faulting application path: Explorer.EXE1
Faulting module path: Explorer.EXE2
Report Id: Explorer.EXE3
 
Error: (03/14/2015 00:25:38 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 
Error: (03/13/2015 10:57:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (03/13/2015 10:39:05 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 
Error: (03/13/2015 10:39:05 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 
Error: (03/13/2015 10:39:04 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 
Error: (03/13/2015 10:38:56 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 
 
System errors:
=============
Error: (03/14/2015 11:53:18 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The BeeThink IP Blocker Service service failed to start due to the following error: 
%%2
 
Error: (03/14/2015 11:53:18 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the BorderlineRunner service to connect.
 
Error: (03/14/2015 02:49:01 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {3EB3C877-1F16-487C-9050-104DBCD66683}
 
Error: (03/13/2015 10:57:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The BeeThink IP Blocker Service service failed to start due to the following error: 
%%2
 
Error: (03/13/2015 10:36:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The BeeThink IP Blocker Service service failed to start due to the following error: 
%%2
 
Error: (03/13/2015 10:35:13 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Crash dump initialization failed!
 
Error: (03/13/2015 09:55:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The globalUpdate Update Service (globalUpdate) service failed to start due to the following error: 
%%2
 
Error: (03/12/2015 07:34:26 PM) (Source: BROWSER) (EventID: 8032) (User: )
Description: The browser service has failed to retrieve the backup list too many times on transport \Device\NetBT_Tcpip_{9C5180EB-72F5-4AB3-B362-005E9CA89F2B}.
The backup browser is stopping.
 
Error: (03/12/2015 07:32:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The globalUpdate Update Service (globalUpdate) service failed to start due to the following error: 
%%2
 
Error: (03/12/2015 09:45:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The globalUpdate Update Service (globalUpdate) service failed to start due to the following error: 
%%2
 
 
Microsoft Office Sessions:
=========================
 
CodeIntegrity Errors:
===================================
  Date: 2014-09-23 20:54:17.577
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Centurion\Desktop\MTA DayZ Hack by AceHood 1.3.5 - 1.4\Money1280.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2014-09-23 20:54:17.440
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Centurion\Desktop\MTA DayZ Hack by AceHood 1.3.5 - 1.4\Money1280.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
 
==================== Memory info =========================== 
 
Processor: Intel® Core i3-3120M CPU @ 2.50GHz
Percentage of memory in use: 50%
Total physical RAM: 3971.36 MB
Available physical RAM: 1962 MB
Total Pagefile: 7940.9 MB
Available Pagefile: 5717.51 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:146.39 GB) (Free:72.95 GB) NTFS
Drive d: () (Fixed) (Total:785.03 GB) (Free:535.45 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: CD15A8E2)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=146.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=785 GB) - (Type=07 NTFS)
 
==================== End Of Log ============================

Голяма обърквация..!

 

remove%20outdated.jpg Деинсталиране нa програми

  • Натиснете WindowsKey.png + R на клавиатурата си по едно и също време. Въведете appwiz.cpl и щракнете върху OK.
  • Деинсталирайте следните програми:

 

MyPC Backup 

SavePass 1.1

 

След завършване на деинсталацията, моля  да рестартирате машината си!

 

 

FRST.gif Фикс с Farbar Recovery Scan Tool

 
icon13.gif Изтеглете прикачения файл и го запазете там, където сте свалили FRST.exe => fixlist.txt
Стартирайте отново FRST.exe и натиснете бутона Fix веднъж и изчакайте.
Ще се създаде нов лог файла FixLog.txt. Прикачете съдържанието му в следващия си коментар.
 
ЗАБЕЛЕЖКА: Този скрипт е написан специално за този потребител,и за тази конкретна машина. Изпълнението на фикса, на друг компютър може да доведе до увреждане на  операционната ви система

 

 

50_forum_new.gif Проверка за допълнителни рискове по сигурността:

 

n3uobiT.jpg  Моля, изтеглете CKScanner© by askey127   и го запишете на вашия десктоп

  • Стартирате с двоен клик файла CKScanner.exe и след това клик на Search For Files.
  • След много кратко време, когато часовника на курсора изчезне,кликнете на Save List To File и след това OK.
  • На вашия работен плот ще се създаде файл ckfiles.txt . Моля, копирайте съдържанието му в следващия си пост.

 

 

 

icon1348768721.jpg  Изтеглете Security Check (автор: screen317) от тук

  • Кликнете два пъти върху SecurityCheck.exe и следвайте инструкциите.
  • Когато програмата завърши работата си, ще се отвори един текстов документ: checkup.txt.
  • Копирайте съдържанието на checkup.txt с Копирай (Copy) и с Постави (Paste) го поставете в следващия си коментар.

 

xpfNZP4A.png.pagespeed.ic.bp5cRl1pJg.jpg  Дневници
 
В следващия си отговор, моля да включите следните дневници:

  • FixLog.txt
  • ckfiles.txt
  • checkup.txt
  • Автор

Всички файлове ще ги сложа след секунди, но тези дето казахте да ги деинсталирам, както си спомням ги бях деинсталирал преди месец да не кажа и два ..


Като сложа ckfiles ми изписва ''post_too_long''


Качих файловете пораади проблема с поста .. 

checkup.txt

ckfiles.txt

Fixlog.txt

 

 

 

Използвате кракнати програми (игри)...Това може да е една от основните причини, компютърът ви е заразен.Инсталирайки такъв софтуер вие подлагате системата си на риск.Използвайки изпълними файлове от тези съмнителни и  неизвестни източници Вие рискувате да си навлечете различни форми на зловреден софтуер чрез който да дадете достъп до информация от твърдия диск, потенциал за контрол върху работата на вашия компютър , блокиране на вашата антивирусна защита.

 

adwcleaner_new.png Сканиране с AdwCleaner

 

Моля, изтеглете и стартирайте програмата AdwCleaner (by Xplode):

  • Затворете всички стартирани програми и браузъри
  • Кликнете два пъти върху adwcleaner.exe за да стартирате инструмента.
  • Натиснете OK, за да потвърдите, че всички стартирани програми ще бъдат затворени.
  • Маркирайте Clean
  • Вашият компютър ще се рестартира автоматично. Текстовия файл ще се отвори след рестарта.
  • Моля, да публикувате съдържанието на този лог в отговора си
  • Можете да намерите лога,който автоматично се запомня тук C:AdwCleaner[s0].txt

 

=========================================================================================================================================

 

 

JRTbythisisu.png Сканиране с Junkware Removal Tool

 

Моля, изтеглете Junkware Removal Tool (by Thisisu ) и запазете на вашия десктоп.

  • Спрете временно работата на защитните програми.
  • Стартирайте инструмента JRT.exe
  • Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата.
  • Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши.
  • Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt).
  • Моля копирайте съдържанието на лог файла в следващия си пост.

================================================================================================================================================

 

x7D2ig3K.png.pagespeed.ic.x4TC1AK8OXyUSC Сканиране с Emsisoft Emergency Kit (Portable)

 

  • Моля, изтеглете Emsisoft Emergency Kit и  запишете файла на вашия работен плот.
  • Кликнете два пъти върху EmsisoftEmergencyKit.exe.
  • Кликнете на Extract
  • След завършване, кликнете два пъти върху Emsisoft Emergency Kit shortcut на вашия Desktop за да стартирате програмата
  • Кликнете Yes за откриване на Potentially Unwanted Programs (PUP's).
  • Кликнете на Scan
  • Изберете Full Scan и след това на Scan
  • Когато сканирането приключи кликнете на Quarantine selected objects ако са открити зловредни обекти.
  • Кликнете на View Report
  • Копирайте (Copy)  съдържанието на дневника и с (paste) публикувайте съдържанието в следващия си отговор.

 

 

xpfNZP4A.png.pagespeed.ic.bp5cRl1pJg.jpg  Дневници

 

В следващия си отговор, моля да включите следните дневници:

 

  • AdwCleaner[s0].txt
  • JRT.txt
  • Emsisoft log
  • Автор
  • Затворете всички стартирани програми и браузъри
  • Кликнете два пъти върху adwcleaner.exe за да стартирате инструмента.
  • Натиснете OK, за да потвърдите, че всички стартирани програми ще бъдат затворени.
  • Маркирайте Clean
  • Вашият компютър ще се рестартира автоматично. Текстовия файл ще се отвори след рестарта.
  • Моля, да публикувате съдържанието на този лог в отговора си
  • Можете да намерите лога,който автоматично се запомня тук C:AdwCleaner[s0].txt 
  • Прикачвам файловете след 10 минути

Редактирано от Marty Mihailov (преглед на промените)

  • Автор

Докато се сканирва Emsisoft Emergency Kit Ви пращам файловете от AdwCleaner i Junkware


Тая последната програмка откри Trojan.Generic ..и още много вируси, това ли е потенциалния

AdwCleanerS0.txt

JRT.txt

Редактирано от Marty Mihailov (преглед на промените)

  • Автор

Сложих ги под карантина но 1 не ще да се слага и си стои там, името му е Application.AdGenie (A

)


Emsisoft Emergency Kit - Version 9.0
Last update: 14.3.2015 г. 14:25:36
User account: Centurion-PC\Centurion
 
Scan settings:
 
Scan type: Full Scan
Objects: Rootkits, Memory, Traces, C:\, D:\
 
Detect PUPs: On
Scan archives: On
ADS Scan: On
File extension filter: Off
Advanced caching: On
Direct disk access: Off
 
Scan start: 14.3.2015 г. 14:26:10
Value: HKEY_USERS\S-1-5-21-3679983645-2372540095-3756131332-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR detected: Setting.DisableTaskMgr (A)
Value: HKEY_USERS\S-1-5-21-3679983645-2372540095-3756131332-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS detected: Setting.DisableRegistryTools (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\SDP detected: Application.Win32.InstallAd (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613} detected: Application.AdGenie (A)
Key: HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B} detected: Application.AdGenie (A)
Key: HKEY_USERS\S-1-5-20\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B} detected: Application.AdGenie (A)
Key: HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B} detected: Application.AdGenie (A)
Key: HKEY_USERS\S-1-5-19\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B} detected: Application.AdGenie (A)
Key: HKEY_USERS\S-1-5-20\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B} detected: Application.AdGenie (A)
Key: HKEY_USERS\S-1-5-18\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B} detected: Application.AdGenie (A)
Key: HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B} detected: Application.AdGenie (A)
C:\Users\Centurion\AppData\Roaming\SkypeFall\BorderlineRunner_142342569353679.dll detected: Gen:Variant.Graftor.178478 (B)
C:\Users\Centurion\Desktop\AimBot RED MONSTER v1.4\r-aimbot.dll detected: Backdoor.Generic.769540 (B)
C:\Users\Centurion\Desktop\Cheat Project 1.0b1\CPC.exe detected: Trojan.Win32.Agent (A)
C:\Users\Centurion\Desktop\ECC 5.2\ECC.exe detected: Trojan.Generic.1794589 (B)
C:\Users\Centurion\Desktop\Jedai hack 3\Jedai Hack.dll detected: Backdoor.Hupigon.266178 (B)
C:\Users\Centurion\Desktop\Jedai hack 3\Jedai Hack.exe detected: Trojan.Generic.5304793 (B)
C:\Users\Centurion\Desktop\Jeday_Hack 2\Jedai Hack 2.dll detected: Riskware.Win32.GameHack (A)
C:\Users\Centurion\Desktop\Live For Speed\Live For Speed No Mods Used\ip-patch.exe detected: Trojan.GenericKD.1996144 (B)
C:\Users\Centurion\Desktop\Live For Speed\prekysva4\RevBouncerV3.45.exe detected: Gen:Variant.Strictor.77810 (B)
C:\Users\Centurion\Desktop\Live For Speed\Tweak\NewTweakOrderV1.07_Patch0.6G\NewTweakOrder.exe detected: Gen:Variant.Kazy.551802 (B)
C:\Users\Centurion\Desktop\Live For Speed\Tweak\RevBouncerV3.45.exe detected: Gen:Variant.Strictor.77810 (B)
C:\Users\Centurion\Desktop\ \AimBot counter strike 1.6.rar -> AimBot RED MONSTER v1.4\r-aimbot.dll detected: Backdoor.Generic.769540 (B)
C:\Users\Centurion\Desktop\ \rDos.exe detected: Trojan.Generic.5340905 (B)
C:\Users\Centurion\Desktop\неща\AimBot counter strike 1.6.rar -> AimBot RED MONSTER v1.4\r-aimbot.dll detected: Backdoor.Generic.769540 (B)
D:\CENTURION-PC\Backup Set 2014-08-31 190006\Backup Files 2014-09-14 190004\Backup files 6.zip -> C\Users\Centurion\Desktop\ￂﾭￒﾐ￐ﾹￂﾠ\AimBot counter strike 1.6.rar -> AimBot RED MONSTER v1.4\r-aimbot.dll detected: Backdoor.Generic.769540 (B)
D:\CENTURION-PC\Backup Set 2014-10-12 190002\Backup Files 2014-11-16 190005\Backup files 5.zip -> C\Users\Centurion\Desktop\AimBot counter strike 1.6.rar -> AimBot RED MONSTER v1.4\r-aimbot.dll detected: Backdoor.Generic.769540 (B)
D:\CENTURION-PC\Backup Set 2014-11-30 190008\Backup Files 2014-12-07 190003\Backup files 5.zip -> C\Users\Centurion\Desktop\Hacks.rar -> Hacks\Aim\AimBot RED MONSTER v1.4\r-aimbot.dll detected: Backdoor.Generic.769540 (B)
D:\CENTURION-PC\Backup Set 2014-11-30 190008\Backup Files 2014-12-21 190003\Backup files 4.zip -> C\Users\Centurion\Desktop\CS-Hacks.rar -> CS-Hacks\AimBot RED MONSTER v1.4\r-aimbot.dll detected: Backdoor.Generic.769540 (B)
D:\CENTURION-PC\Backup Set 2014-11-30 190008\Backup Files 2014-12-21 190003\Backup files 4.zip -> C\Users\Centurion\Desktop\CS-Hacks.rar -> CS-Hacks\Jedai hack 3\Jedai Hack.dll detected: Backdoor.Hupigon.266178 (B)
D:\CENTURION-PC\Backup Set 2014-11-30 190008\Backup Files 2014-12-21 190003\Backup files 4.zip -> C\Users\Centurion\Desktop\CS-Hacks.rar -> CS-Hacks\Jedai hack 3\Jedai Hack.exe detected: Trojan.Generic.5304793 (B)
D:\CENTURION-PC\Backup Set 2014-11-30 190008\Backup Files 2014-12-28 190003\Backup files 4.zip -> C\Users\Centurion\Desktop\￑ﾏ\AimBot counter strike 1.6.rar -> AimBot RED MONSTER v1.4\r-aimbot.dll detected: Backdoor.Generic.769540 (B)
D:\CENTURION-PC\Backup Set 2099-02-01 182100\Backup Files 2099-02-01 182100\Backup files 64.zip -> C\Users\Centurion\Desktop\ￂﾭￒﾐ￐ﾹￂﾠ\AimBot counter strike 1.6.rar -> AimBot RED MONSTER v1.4\r-aimbot.dll detected: Backdoor.Generic.769540 (B)
D:\Downloads\LFS\ip-patch.exe detected: Trojan.GenericKD.1996144 (B)
D:\Downloads\RABOTI 2014\Google Chrome Dolnloads\ip-patch.exe detected: Trojan.GenericKD.1996144 (B)
D:\Downloads\RABOTI 2014\Google Chrome Dolnloads\RevBouncerV3.45.7z -> RevBouncerV3.45.exe detected: Gen:Variant.Strictor.77810 (B)
D:\Downloads\RABOTI 2014\Google Chrome Dolnloads\setup.exe detected: Trojan.GenericKD.2198839 (B)
D:\Downloads\RABOTI 2014\Google Chrome Dolnloads\Spam BoT v1.6.exe detected: Trojan.Generic.11796781 (B)
D:\Downloads\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\steam_api64.dll detected: Trojan.Generic.12309876 (B)
D:\Downloads\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\steam_api.dll detected: Trojan.Generic.12323171 (B)
D:\Downloads\WallHack\xzvvfЙЄґЗИ.exe detected: Trojan.Generic.8799266 (B)
D:\Downloads\Тъпи неща\AimBot counter strike 1.6.rar -> AimBot RED MONSTER v1.4\r-aimbot.dll detected: Backdoor.Generic.769540 (B)
D:\Downloads\Тъпи неща\Wallhack\FGC Wallhack [-v2-].exe detected: Gen:Variant.Kazy.32166 (B)
D:\Downloads\Тъпи неща\Wallhack\FGC Wallhack [-v2-].rar -> FGC Wallhack [-v2-].exe detected: Gen:Variant.Kazy.32166 (B)
 
Scanned 387740
Found 44
 
Scan end: 14.3.2015 г. 16:17:29
Scan time: 1:51:19
 
D:\Downloads\Тъпи неща\Wallhack\FGC Wallhack [-v2-].rar Quarantined Gen:Variant.Kazy.32166 (B)
D:\Downloads\Тъпи неща\Wallhack\FGC Wallhack [-v2-].exe Quarantined Gen:Variant.Kazy.32166 (B)
D:\Downloads\Тъпи неща\AimBot counter strike 1.6.rar Quarantined Backdoor.Generic.769540 (B)
D:\Downloads\WallHack\xzvvfЙЄґЗИ.exe Quarantined Trojan.Generic.8799266 (B)
D:\Downloads\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\steam_api.dll Quarantined Trojan.Generic.12323171 (B)
D:\Downloads\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\steam_api64.dll Quarantined Trojan.Generic.12309876 (B)
D:\Downloads\RABOTI 2014\Google Chrome Dolnloads\Spam BoT v1.6.exe Quarantined Trojan.Generic.11796781 (B)
D:\Downloads\RABOTI 2014\Google Chrome Dolnloads\setup.exe Quarantined Trojan.GenericKD.2198839 (B)
D:\Downloads\RABOTI 2014\Google Chrome Dolnloads\RevBouncerV3.45.7z Quarantined Gen:Variant.Strictor.77810 (B)
D:\Downloads\RABOTI 2014\Google Chrome Dolnloads\ip-patch.exe Quarantined Trojan.GenericKD.1996144 (B)
D:\Downloads\LFS\ip-patch.exe Quarantined Trojan.GenericKD.1996144 (B)
D:\CENTURION-PC\Backup Set 2099-02-01 182100\Backup Files 2099-02-01 182100\Backup files 64.zip Quarantined Backdoor.Generic.769540 (B)
D:\CENTURION-PC\Backup Set 2014-11-30 190008\Backup Files 2014-12-28 190003\Backup files 4.zip Quarantined Backdoor.Generic.769540 (B)
D:\CENTURION-PC\Backup Set 2014-11-30 190008\Backup Files 2014-12-21 190003\Backup files 4.zip Quarantined Trojan.Generic.5304793 (B)
D:\CENTURION-PC\Backup Set 2014-11-30 190008\Backup Files 2014-12-07 190003\Backup files 5.zip Quarantined Backdoor.Generic.769540 (B)
D:\CENTURION-PC\Backup Set 2014-10-12 190002\Backup Files 2014-11-16 190005\Backup files 5.zip Quarantined Backdoor.Generic.769540 (B)
D:\CENTURION-PC\Backup Set 2014-08-31 190006\Backup Files 2014-09-14 190004\Backup files 6.zip Quarantined Backdoor.Generic.769540 (B)
C:\Users\Centurion\Desktop\неща\AimBot counter strike 1.6.rar Quarantined Backdoor.Generic.769540 (B)
C:\Users\Centurion\Desktop\ \rDos.exe Quarantined Trojan.Generic.5340905 (B)
C:\Users\Centurion\Desktop\ \AimBot counter strike 1.6.rar Quarantined Backdoor.Generic.769540 (B)
C:\Users\Centurion\Desktop\Live For Speed\Tweak\RevBouncerV3.45.exe Quarantined Gen:Variant.Strictor.77810 (B)
C:\Users\Centurion\Desktop\Live For Speed\Tweak\NewTweakOrderV1.07_Patch0.6G\NewTweakOrder.exe Quarantined Gen:Variant.Kazy.551802 (B)
C:\Users\Centurion\Desktop\Live For Speed\prekysva4\RevBouncerV3.45.exe Quarantined Gen:Variant.Strictor.77810 (B)
C:\Users\Centurion\Desktop\Live For Speed\Live For Speed No Mods Used\ip-patch.exe Quarantined Trojan.GenericKD.1996144 (B)
C:\Users\Centurion\Desktop\Jeday_Hack 2\Jedai Hack 2.dll Quarantined Riskware.Win32.GameHack (A)
C:\Users\Centurion\Desktop\Jedai hack 3\Jedai Hack.exe Quarantined Trojan.Generic.5304793 (B)
C:\Users\Centurion\Desktop\Jedai hack 3\Jedai Hack.dll Quarantined Backdoor.Hupigon.266178 (B)
C:\Users\Centurion\Desktop\ECC 5.2\ECC.exe Quarantined Trojan.Generic.1794589 (B)
C:\Users\Centurion\Desktop\Cheat Project 1.0b1\CPC.exe Quarantined Trojan.Win32.Agent (A)
C:\Users\Centurion\Desktop\AimBot RED MONSTER v1.4\r-aimbot.dll Quarantined Backdoor.Generic.769540 (B)
C:\Users\Centurion\AppData\Roaming\SkypeFall\BorderlineRunner_142342569353679.dll Quarantined Gen:Variant.Graftor.178478 (B)
Key: HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B} Quarantined Application.AdGenie (A)
Key: HKEY_USERS\S-1-5-20\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B} Quarantined Application.AdGenie (A)
Key: HKEY_USERS\S-1-5-19\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B} Quarantined Application.AdGenie (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613} Quarantined Application.AdGenie (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\SDP Quarantined Application.Win32.InstallAd (A)
Value: HKEY_USERS\S-1-5-21-3679983645-2372540095-3756131332-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS Quarantined Setting.DisableRegistryTools (A)
Value: HKEY_USERS\S-1-5-21-3679983645-2372540095-3756131332-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR Quarantined Setting.DisableTaskMgr (A)
 
Quarantined 38
 
 
Deleted 0

Повечето не ми се иска да ги трия ама явно ще трябва да се вземат мерки ..

Изтрих Мнооооого неща ..

 

 

По точно програмите които използваме и методиката която използва HJT Team  ...Всъщност имаме още много работа...системата ви е доста заразена...!

Преди да продължим отговорете ми какво е моментното състояние на системата ..Наблюдавате ли подобрение..?

Понеже нямам време да ви чакам да ми отговорите..Прекалено много време ви отделих днес... :

 

Направете повторно сканиране с:

 

FRST.gif Сканиране с Farbar Recovery Scan Tool

 

  • Моля изтеглете icon1337953436.pngFarbar Recovery Scan Tool (според версията на Windows изберете 32 битовата или 64 битовата версия) и го запазете на десктопа.
  • Стартирайте файла FRST.exe (или FRST64.exe)
  • Програмата ще се стартира. Натиснете YES за да се съгласите с лицензионното споразумение.
  • Натиснете бутона YClYkft.jpg.
  • Изчакайте търпеливо проверката да приключи.
  • Ще се създадат два лог файла с името - FRST.txt и Addition.txt на десктопа.
  • Копирайте съдържанието на файла FRST.txt в следващия си пост. Прикачете Addition.txt в коментар си (погледнете опцията Прикачване на файлове, когато публикувате мнение).
  • Автор

Ами има да, не лагв толко много след като изтрих повечето скриптове/хакове/кракове


А кой прави виповете ? защото мисля че платих нещо си там но не  съм ... Сега давам FRST


Аз чаках да ми пишете но това излезна чак сега, не знам какво е ставало, от сутринта съм online


Ето файловете

Addition.txt

FRST.txt

Нещата изглеждат много по-добре..!

Последни проверки и излизаме на финалната права..!

 

xGfiJrQ9.png.pagespeed.ic.HjgFxjvw2Zb3x8 Malwarebytes Anti-Malware (MBAM)

 

 

GUZVCQN.jpg  Моля, изтеглете Malwarebytes Anti -Malware и го запомнете на вашия работен плот .
  Кликнете два пъти върху mbam-setup-consumer-2.0.0.1хххх.exe и следвайте инструкциите, за да инсталирате програмата .

  • В секцията Settings = > Detection and Protection => Detection Options, се поставя отметка в квадратчето 'Scan for rootkits'.

MBAMsettings.JPG

  • В главния прозорец на програмата , щракнете върху 'Update Now'
  • След актуализацията завърши, кликнете на бутона " 'Scan Now  " .
  • Ако има налична актуализация , щракнете върху бутона Update Now button .
  • Ще стартира Threat Scan.
  • Когато сканирането приключи, ако има някакви открити зарази , щракнете върху Apply Actions за да се позволи на Mbam да почисти засеченото. .

MBAMReboot.JPG

  •   След рестарта ,стартирайте Mbam още веднъж.
  •   Кликнете на History tab > Application Logs .
  •   Кликнете два пъти върху реда , който показва датата и часа на сканирането или View Detailed Log .
  •   Кликнете върху " Copy да Clipboard "

MBAMLog.JPG
 
  Поставете  съдържанието на клипборда в следващия си  отговор

 

 

Hitman-Pro-Logo.png Сканиране с HitmanPro

 

1.Изтеглете Hitman Pro.
 

  • За 32-битова система - dEMD6.gif.
  • За 64-битова система - Download-button3.gif
    2.Стартирайте програмата.

3.След като сте стартирали програмата като кликнете върху иконата 5vo5F.jpg и натиснете бутона „Напред“ като се съгласите с лицензионното споразумение (EULA).
4.Сложете отметка пред "Не, искам да завърша еднократно сканиране на компютъра".

5.Натиснете бутона „Напред“.

6.Програмата ще започне да сканира. Времето за сканиране е около 2 минути.

7.След завършване на сканирането от списъка с намерените неща (ако има такива) изберете Apply to all => Ignore.

8.Натиснете "Next" и след това натиснете "Изнеси резултата в XML file" и запазете лог файла на десктопа.

9.Архивирайте файла и го прикачете в следващия си коментар или копирайте съдържанието му в следващия си коментар.
 
Забележка: Ако няма падащо меню, където да изберете ignore както на снимката:
 
6-scanfin-choose.jpg
 
Тогава просто затворете програмата след края на проверката (без да премахвате нищо)...след това отворете C:Programdata/HitmanPro/Logs, отворете и публикувайте съдържанието на лог файла в следващия си коментар.

 

 

GzlsbnV.png.pagespeed.ce.SLxxSJVib_axmA6 Сканиране с ESET Online Scan
 
 
i_arrow-r.gif Изтеглете програмата: ESET Online Scanner

  • Стартирайте esetsmartinstaller_enu.exe 7c9e83b53227ef3d.jpg
  • Сложете отметка на YES, I accept the Terms of Use и изберете Start:

04ed1c15c0abe843.jpg

  • Скенерът ще започне да изтегля компонентите, които са му необходими:

3b734079c5ccd713.jpg

  • Уверете се, че Enable detection of potentially unwanted applications е избран.

Уверете се, че е премахната отметката от:

  • Remove found threats

Уверете се че са маркирани следните позиции:

  • Scan Archives

Кликнете върху Advanced Settings и маркирайте следните опции:

  • Scan for potentially unwanted applications
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth Technology

Накрая изберете Start
 
2.JPG
 
Скенерът ще започне да изтегля последните дефиниции и ще започне сканиране на вашия компютър.
Моля, бъдете търпеливи, тъй като това може да отнеме известно време.

  • След, като сканирането завърши кликнете на List of found threats.
  • Щракнете върху Export, и запишете файла на вашия работен плот с  име  ESETScan. Копирайте съдържанието на този доклад, в следващия си отговор.
  • Изберете бутона Back.
  • Изберете бутона Finish.

 

 

 

 

xpfNZP4A.png.pagespeed.ic.bp5cRl1pJg.jpg  Дневници
 
В следващия си отговор, моля да включите следните дневници:

 

  • Дневник от Malwarebytes Anti -Malware
  • Дневник от Hitman Pro
  • Дневник от ESET Online Scanner ( List of found threats )
  • Автор

Ще имате ли достатъчно време да изпълня заръките ви и да ви дам данните ? 

  • Автор

Тогава просто затворете програмата след края на проверката (без да премахвате нищо)...след това отворетеC:Programdata/HitmanPro/Logs, отворете и публикувайте съдържанието на лог файла в следващия си коментар.
Без да искам ги изтрих и сега не ми се пуска нета и го изтрих и не ще да се инсталне ..


Оф трябваше да си пращам инсталера от Скайп за да го преизтегля и да му пробачка ... проблем ли е че ги изтрих ..

FRST.gif Фикс с Farbar Recovery Scan Tool

 
icon13.gif Изтеглете прикачения файл и го запазете там, където сте свалили FRST.exe => fixlist.txt
Стартирайте отново FRST.exe и натиснете бутона Fix веднъж и изчакайте.
Ще се създаде нов лог файла FixLog.txt. Прикачете съдържанието му в следващия си коментар.
 
ЗАБЕЛЕЖКА: Този скрипт е написан специално за този потребител,и за тази конкретна машина. Изпълнението на фикса, на друг компютър може да доведе до увреждане на  операционната ви система

 

 

xpfNZP4A.png.pagespeed.ic.bp5cRl1pJg.jpg  Дневници
 
В следващия си отговор, моля да включите следните дневници:

  • FixLog.txt

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Назад

Разглеждащи това в момента 0

  • Няма регистрирани потребители разглеждащи тази страница.

Дарение

  • Подкрепи съществуването на форума - направи дарение
    32%
    Дарени 315 € от нужните 1 000 €

Бюлетин

Получавайте известие, когато има важна промяна или новина свързана с форума.
Абонирайте се

Профил

Навигация

Търсене

Търсене

Конфигуриране на push известия в браузъра
Chrome (Android)
  1. Докоснете иконата на катинар до адресната лента.
  2. Докоснете Разрешения → Известия.
  3. Променете предпочитанията си.
Chrome (Desktop)
  1. Кликнете върху иконата на катинар в адресната лента.
  2. Изберете Настройки на сайта.
  3. Намерете Известия и коригирайте предпочитанията си.