Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.
Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.
Добави Kaldata.com в предпочитани източници в Google

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

Изкачащи попъп реклами

notirah
в Премахване на зловреден софтуер

Featured Replies

Интересно след като всички логове са чистички.

 

Нека да направим следното:

 

Изтеглете ZOEK (by Smeenk) и да го запишете на вашия работен плот
Временно деактивирайте вашата антивирусна и антишпионска защита - инструкции при необходимост ще намерите тук

  • Щракнете с десния бутон върху тази икона  51a612a8b27e2-Zoek.pngи изберете RunAsAdmin.jpg Run as Administrator, за да стартирате инструмента.
  • Изчакайте търпеливо, докато  се появи  главната конзола (може да отнеме минута или две).

52b6de58f1952-Zoek_Startpagina_5.0.0.0.P

  • В главния прозорец, моля поставете в следния скрипт:

 

createsrpoint;
emptyclsid;
emptyalltemp;
autoclean;

  • Уверете се, че  опцията Scan All Users е маркирана.
  • Натиснете Run Script и изчакайте. Сканирането може да отнеме няколко минути.
  • Когато сканирането приключи, ще се отвори лог файл с име zoek-results.
  • Ако е необходимо рестартиране, той ще се отвори след това.
  • Копирайте съдържанието му в следващия си отговор.
  • Автор

Zoek.exe v5.0.0.0 Updated 02-April-2015
Tool run by Hariton on бкЎ 04.04.2015 Ј. at 15:19:36,09.
Microsoft Windows 8.1 6.3.9600  x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Hariton\Desktop\zoek.exe [scan all users]   [Deep Scan] [Auto Clean]

==== System Restore Info ======================

4.4.2015 г. 15:24:57 Zoek.exe System Restore Point Created Successfully.

==== Empty Folders Check ======================

C:\Users\Hariton\AppData\Roaming\mkvtoolnix deleted successfully
C:\Users\Hariton\AppData\Local\HP Quick Start deleted successfully
C:\Users\Hariton\AppData\Local\PDFC deleted successfully
C:\Users\Hariton\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-3276917976-3779358348-1836126848-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully
HKEY_USERS\S-1-5-21-3276917976-3779358348-1836126848-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully
HKEY_USERS\S-1-5-21-3276917976-3779358348-1836126848-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1ABC84BE-C128-3044-2C46-44284C702700} deleted successfully
HKEY_USERS\S-1-5-21-3276917976-3779358348-1836126848-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1ABC84BE-C128-3044-2C46-44284C702700} deleted successfully
HKEY_USERS\S-1-5-21-3276917976-3779358348-1836126848-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E58C0476-5180-704C-53D7-5CCC4D4BBAC4} deleted successfully
HKEY_USERS\S-1-5-21-3276917976-3779358348-1836126848-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E58C0476-5180-704C-53D7-5CCC4D4BBAC4} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1ABC84BE-C128-3044-2C46-44284C702700} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1ABC84BE-C128-3044-2C46-44284C702700} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{1ABC84BE-C128-3044-2C46-44284C702700} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E58C0476-5180-704C-53D7-5CCC4D4BBAC4} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E58C0476-5180-704C-53D7-5CCC4D4BBAC4} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{E58C0476-5180-704C-53D7-5CCC4D4BBAC4} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully

==== Running Processes ======================

C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe
C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe
c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
C:\WINDOWS\SysWOW64\svchost.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
C:\Program Files (x86)\PDF Complete\pdfsvc.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.exe
c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CORESHREDDER.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Users\Hariton\Desktop\zoek.exe
C:\WINDOWS\SysWOW64\cmd.exe
C:\WINDOWS\SysWOW64\cmd.exe
C:\WINDOWS\SysWOW64\cmd.exe

==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\Users\Hariton\AppData\LocalLow\{1ABC84BE-C128-3044-2C46-44284C702700} deleted
C:\Users\Hariton\AppData\LocalLow\{9384FF72-BF7C-3C4D-DAD2-7E8E2F21A8E2} deleted
C:\Users\Hariton\AppData\LocalLow\{DF4EBF9C-66D8-FF25-52DE-A608947379A5} deleted
C:\Users\Hariton\AppData\LocalLow\{E58C0476-5180-704C-53D7-5CCC4D4BBAC4} deleted
C:\Users\Hariton\AppData\Local\Packages\windows_ie_ac_001\AC\{1ABC84BE-C128-3044-2C46-44284C702700} deleted
C:\Users\Hariton\AppData\Local\Packages\windows_ie_ac_001\AC\{9384FF72-BF7C-3C4D-DAD2-7E8E2F21A8E2} deleted
C:\Users\Hariton\AppData\Local\Packages\windows_ie_ac_001\AC\{DF4EBF9C-66D8-FF25-52DE-A608947379A5} deleted
C:\Users\Hariton\AppData\Local\Packages\windows_ie_ac_001\AC\{E58C0476-5180-704C-53D7-5CCC4D4BBAC4} deleted
C:\PROGRA~3\Package Cache deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\Users\Hariton\AppData\LocalLow\{4008909B-A723-585C-708C-3FD9A979DABF} deleted
C:\WINDOWS\SysNative\config\systemprofile\Searches deleted

==== System Specs ======================

Windows: Windows Version 6.2 (Build 9200)
Memory (RAM): 8074 MB
CPU Info: Intel® Core i5-4200M CPU @ 2.50GHz
CPU Speed: 2566,1 MHz
Sound Card: Speakers / HP (IDT High Definit |
Display Adapters: Intel® HD Graphics 4600 | Intel® HD Graphics 4600 | Intel® HD Graphics 4600
Monitors: 1x; Generic PnP Monitor |
Screen Resolution: 1366 X 768 - 32 bit
Network: Network Present
Network Adapters: Microsoft Wi-Fi Direct Virtual Adapter | Microsoft Hosted Network Virtual Adapter | Realtek PCIe GBE Family Controller | Mediatek MT7630E 802.11bgn Wi-Fi Adapter
CD / DVD Drives: 2x (F: | G: | ) F: hp      DVD RAM UJ8C2    | G: DTSOFT  BDROM
Ports: COM Ports NOT Present. LPT Port NOT Present.
Mouse: 5 Button Wheel Mouse Present
Hard Disks: C:  683,2GB | D:  11,5GB | E:  2,0GB
Hard Disks - Free: C:  580,7GB | D:  1,1GB | E:  2,0GB
Manufacturer *: Hewlett-Packard
BIOS Info: AT/AT COMPATIBLE |  | HPQOEM - 1
Time Zone: Финландия - стандартно време
Motherboard *: Hewlett-Packard 1942
Country: Ѓк«Ј аЁп
Language: BGR

==== System Specs (Software) ======================

Anti-Virus: Windows Defender On-access scanning disabled (Outdated)
Anti-Spyware: Windows Defender disabled (Outdated)
Default Browser: Firefox    37.0.1
Internet Explorer Version: 11.0.9600.17690
Mozilla Firefox version: 37.0.1 (x86 en-US)
Flash Player version: 16.0.0.305

==== Files Recently Created / Modified ======================

====== C:\WINDOWS ====
2015-04-03 13:18:29    CA2A8AF1DBAD0F31F9B33A2827DFBC16    207    ----a-w-    C:\WINDOWS\tweaking.com-regbackup-HARI-Windows-8.1-(64-bit).dat
2015-03-11 08:26:42    C10A66189DC8C090E7C84873EDCEBC88    2501368    ----a-w-    C:\WINDOWS\explorer.exe
====== C:\Users\Hariton\AppData\Local\Temp ====
====== Java Cache =====
====== C:\WINDOWS\SysWOW64 =====
====== C:\WINDOWS\SysWOW64\drivers =====
====== C:\WINDOWS\Sysnative =====
2015-04-03 10:09:27    E74CBF51BEFE20813AA62EBDD605B1E8    1128    ----a-w-    C:\WINDOWS\Sysnative\.crusader
2015-03-25 06:35:44    DD301FDB003F9B48EB7628A48BF32D23    677888    ----a-w-    C:\WINDOWS\Sysnative\generaltel.dll
2015-03-25 06:35:44    BB86098B80BC4911B52F4C6095E82381    760320    ----a-w-    C:\WINDOWS\Sysnative\invagent.dll
2015-03-25 06:35:44    B770418F0FE64D3E986505A6285E91E9    943104    ----a-w-    C:\WINDOWS\Sysnative\appraiser.dll
2015-03-25 06:35:44    A871B38A544058768F082598412278DB    30720    ----a-w-    C:\WINDOWS\Sysnative\acmigration.dll
2015-03-25 06:35:44    7F19365C2D9CD0AA5E517A96A22AE7C8    1107456    ----a-w-    C:\WINDOWS\Sysnative\aeinv.dll
2015-03-25 06:35:44    4BAF6A3B8DFDDCE080275B236F4B64BC    414208    ----a-w-    C:\WINDOWS\Sysnative\devinv.dll
2015-03-25 06:35:43    4E791CFE387374E8651493557B7F9993    227328    ----a-w-    C:\WINDOWS\Sysnative\aepdu.dll
====== C:\WINDOWS\Sysnative\drivers =====
2015-04-03 09:28:47    E9CD058C79EA15B4AA93E259FA713B07    136408    ----a-w-    C:\WINDOWS\Sysnative\drivers\MBAMSwissArmy.sys
2015-04-03 09:28:28    CF12E148C6FC151335B7D7FE03F1C7A2    25816    ----a-w-    C:\WINDOWS\Sysnative\drivers\mbam.sys
2015-04-03 09:28:28    7FD0FDFB97D80B21195273C4C3810FE1    64216    ----a-w-    C:\WINDOWS\Sysnative\drivers\mwac.sys
2015-04-03 09:28:28    68C3B11D1ED8C97648BEEFEC37E93E74    107736    ----a-w-    C:\WINDOWS\Sysnative\drivers\mbamchameleon.sys
2015-03-11 08:28:50    D296D0F0DB2CD1504F90405603664493    264000    ----a-w-    C:\WINDOWS\Sysnative\drivers\WdFilter.sys
2015-03-11 08:28:49    9F4DF0043965808973023A9B51A11136    114496    ----a-w-    C:\WINDOWS\Sysnative\drivers\WdNisDrv.sys
2015-03-11 08:28:49    1751F6B031ADAC34724511057D2E455D    44024    ----a-w-    C:\WINDOWS\Sysnative\drivers\WdBoot.sys
2015-03-11 08:27:35    6D3A2565E01B3E4B0F1BEDB0D4B00B3F    1113920    ----a-w-    C:\WINDOWS\Sysnative\drivers\ndis.sys
2015-03-11 08:27:26    DC66AE45816614D2999DCD3834DCCC4E    167424    -c--a-w-    C:\WINDOWS\Sysnative\drivers\rfcomm.sys
2015-03-11 08:27:26    42F88B57CAE42FC10059C887B3FCFCEA    97792    -c--a-w-    C:\WINDOWS\Sysnative\drivers\hidbth.sys
====== C:\WINDOWS\Tasks ======
2015-04-04 08:59:56    1066EE3CF5E607DC5C452A9494C477BF    3168    ----a-w-    C:\WINDOWS\Sysnative\Tasks\HPCeeScheduleForHariton
2015-04-04 08:59:56    0DED698BB6BAD9BA91D3F97CF17BD1B3    350    ----a-w-    C:\WINDOWS\Tasks\HPCeeScheduleForHariton.job
====== C:\WINDOWS\Temp ======
======= C:\Program Files =====
2015-04-03 09:54:27    --------    d-----w-    C:\Program Files\HitmanPro
======= C:\PROGRA~2 =====
2015-04-03 15:02:31    --------    d-----w-    C:\PROGRA~2\Mozilla Maintenance Service
======= C: =====
====== C:\Users\Hariton\AppData\Roaming ======
2015-04-04 11:15:30    --------    d-----w-    C:\Users\Hariton\AppData\Roaming\ZHP
2015-04-03 19:25:51    --------    d-----w-    C:\Users\Hariton\AppData\Local\Temp
2015-04-03 15:02:38    --------    d-----w-    C:\Users\Hariton\AppData\Roaming\Mozilla
====== C:\Users\Hariton ======
2015-04-04 11:14:10    904C25BEEA280D35E10B58914CCED5A4    1705984    ----a-w-    C:\Users\Hariton\Desktop\ZHPCleaner.exe
2015-04-03 14:32:38    D8A65ADFDA097A239831D28418BDBF5E    2953520    ----a-w-    C:\Users\Hariton\Downloads\avast-browser-cleanup.exe
2015-04-03 13:17:48    5365B313DC41F3CA20456A3C77B03B68    2690981    ----a-w-    C:\Users\Hariton\Downloads\JRT.exe
2015-04-03 10:24:39    F58676DE827DD9A5F3A44A698E8B4663    2095616    ----a-w-    C:\Users\Hariton\Downloads\FRST64.exe
2015-04-03 09:54:27    --------    d-----w-    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2015-04-03 09:53:50    5C80FF85C8644A630D341F27176042BA    11028616    ----a-w-    C:\Users\Hariton\Downloads\HitmanPro_x64.exe
2015-04-03 09:53:41    --------    d-----w-    C:\ProgramData\HitmanPro
2015-04-03 09:53:06    E2E40EFFA476E2203DD38327F6A5A4FA    10109856    ----a-w-    C:\Users\Hariton\Downloads\HitmanPro.exe
2015-04-03 09:24:53    31D2409237481996E00505054E68BA3E    21540440    ----a-w-    C:\Users\Hariton\Downloads\mbam-setup-2.1.4.1018.exe
2015-04-03 09:14:59    E55D0D5D5A3A585BFF48B990708007A5    2208768    ----a-w-    C:\Users\Hariton\Downloads\adwcleaner_4.200.exe

====== C: exe-files ==
2015-04-04 11:15:30    904C25BEEA280D35E10B58914CCED5A4    1705984    ----a-w-    C:\Users\Hariton\AppData\Roaming\ZHP\ZHPCleaner.exe
2015-04-04 11:14:10    904C25BEEA280D35E10B58914CCED5A4    1705984    ----a-w-    C:\Users\Hariton\Desktop\ZHPCleaner.exe
2015-04-03 15:02:31    CE3F0F544E12AA729F3A848BF6085213    103588    ----a-w-    C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe
2015-04-03 15:02:31    269BDB3CB77EB77BABE2862BEAB1F208    148080    ----a-w-    C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
2015-04-03 15:01:39    9CF95DFC308224398A11A2FF62A96E48    243368    ----a-w-    C:\Users\Hariton\AppData\Local\Microsoft\Windows\INetCache\IE\UXHQE7HJ\Firefox Setup Stub 37.0.exe
2015-04-03 14:32:38    D8A65ADFDA097A239831D28418BDBF5E    2953520    ----a-w-    C:\Users\Hariton\Downloads\avast-browser-cleanup.exe
2015-04-03 13:17:48    5365B313DC41F3CA20456A3C77B03B68    2690981    ----a-w-    C:\Users\Hariton\Downloads\JRT.exe
2015-04-03 10:24:39    F58676DE827DD9A5F3A44A698E8B4663    2095616    ----a-w-    C:\Users\Hariton\Downloads\FRST64.exe
2015-04-03 09:54:28    1891702D20D349F1D56DCD870DDF7827    127752    ----a-w-    C:\Program Files\HitmanPro\hmpsched.exe
2015-04-03 09:54:27    5C80FF85C8644A630D341F27176042BA    11028616    ----a-w-    C:\Program Files\HitmanPro\HitmanPro.exe
2015-04-03 09:53:50    5C80FF85C8644A630D341F27176042BA    11028616    ----a-w-    C:\Users\Hariton\Downloads\HitmanPro_x64.exe
2015-04-03 09:53:06    E2E40EFFA476E2203DD38327F6A5A4FA    10109856    ----a-w-    C:\Users\Hariton\Downloads\HitmanPro.exe
2015-04-03 09:24:53    31D2409237481996E00505054E68BA3E    21540440    ----a-w-    C:\Users\Hariton\Downloads\mbam-setup-2.1.4.1018.exe
2015-04-03 09:14:59    E55D0D5D5A3A585BFF48B990708007A5    2208768    ----a-w-    C:\Users\Hariton\Downloads\adwcleaner_4.200.exe
2015-03-31 08:49:40    B1B97114D180B5B1B05EB84F50441091    140464    ----a-w-    C:\Windows\Temp\0D76ADE3-8C8E-4A3E-897D-A6EB27468C30\DismHost.exe
=== C: other files ==
2015-04-03 21:03:22    E53CA224EC1BFAD22B97C50FF191C1D9    970672    ----a-w-    C:\Users\Hariton\AppData\Roaming\Mozilla\Firefox\Profiles\1j9x38kz.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
2015-04-03 09:28:47    E9CD058C79EA15B4AA93E259FA713B07    136408    ----a-w-    C:\Windows\System32\drivers\MBAMSwissArmy.sys
2015-04-03 09:28:28    CF12E148C6FC151335B7D7FE03F1C7A2    25816    ----a-w-    C:\Windows\System32\drivers\mbam.sys
2015-04-03 09:28:28    7FD0FDFB97D80B21195273C4C3810FE1    64216    ----a-w-    C:\Windows\System32\drivers\mwac.sys
2015-04-03 09:28:28    68C3B11D1ED8C97648BEEFEC37E93E74    107736    ----a-w-    C:\Windows\System32\drivers\mbamchameleon.sys

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-21-3276917976-3779358348-1836126848-1002\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun"
"DAEMON Tools Lite"="C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe -autorun"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PDF Complete"="C:\Program Files (x86)\PDF Complete\pdfsty.exe"
"QLBController"="C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe /start"
"BtTray"="c:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
"AccelerometerSysTrayApplet"="C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe"
"CLMLServer_For_P2G8"="c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
"CLVirtualDrive"="c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe /R"
"HP File Sanitizer"="C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\Coreshredder.exe"
"HP Software Update"="C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun"
"DAEMON Tools Lite"="C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe -autorun"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe 60"
"IgfxTray"="C:\windows\system32\igfxtray.exe"
"HotKeysCmds"="C:\windows\system32\hkcmd.exe"
"Persistence"="C:\windows\system32\igfxpers.exe"
"SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe "
"SysTrayApp"="C:\Program Files\IDT\WDM\sttray64.exe"

==== Startup Folders ======================

2014-07-01 12:30:37    2126    ----a-w-    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

==== Task Scheduler Jobs ======================

C:\WINDOWS\tasks\Adobe Flash Player Updater.job --a-------- C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [04.02.2015 Ј. 21:34]
C:\WINDOWS\tasks\HPCeeScheduleForHariton.job --a-------- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [15.07.2011 Ј. 04:43]
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job --a-------- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [30.10.2013 Ј. 03:52]

==== Other Scheduled Tasks ======================

"C:\WINDOWS\SysNative\tasks\Adobe Flash Player Updater" [C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]
"C:\WINDOWS\SysNative\tasks\HPCeeScheduleForHariton" [C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe]
"C:\WINDOWS\SysNative\tasks\Synaptics TouchPad Enhancements" ["C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"]
"C:\WINDOWS\SysNative\tasks\User_Feed_Synchronization-{E61CE331-E93F-450F-999A-13DEA49A3FD8}" [C:\WINDOWS\system32\msfeedssync.exe]
"C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe]
"C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe]
"C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Support Assistant\Update Check" [C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"[email protected]"="C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt" [15.12.2013 Ј. 06:24]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Hariton\AppData\Roaming\KompoZer\Profiles\mcsun7ng.default
- Undetermined - %ProfilePath%\extensions\installed-extensions.txt
- KompoZer classic - %ProfilePath%\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

ProfilePath: C:\Users\Hariton\AppData\Roaming\Mozilla\Firefox\Profiles\1j9x38kz.default
- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Hariton\AppData\Roaming\Mozilla\Firefox\Profiles\1j9x38kz.default
C62322C77D1AAB77B1CF1130FCC3673A    - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll -    Shockwave Flash


==== Fake Chromium Profiles Check ======================

Fake profile C:\Users\Administrator\AppData\Local\Google\Chrome deleted
Fake profile C:\Users\Administrator\AppData\Local\Google\Chrome SxS deleted
Fake profile C:\Users\Administrator\AppData\Local\Comodo\Dragon deleted
Fake profile C:\Users\Guest\AppData\Local\Google\Chrome deleted
Fake profile C:\Users\Guest\AppData\Local\Google\Chrome SxS deleted
Fake profile C:\Users\Guest\AppData\Local\Comodo\Dragon deleted
Fake profile C:\Users\Hariton\AppData\Local\Google\Chrome deleted
Fake profile C:\Users\Hariton\AppData\Local\Google\Chrome SxS deleted
Fake profile C:\Users\Hariton\AppData\Local\Comodo\Dragon deleted
Fake profile C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome deleted
Fake profile C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS deleted
Fake profile C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon deleted

==== Chromium Look ======================


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.bing.com/?pc=CMNTDFJS"
"Default_Page_URL"="http://www.bing.com?pc=CMNTDFJS"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.bing.com/?pc=CMNTDFJS"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google  Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{80c554b9-c7f8-4a21-9471-06d606da78a2} Bing  Url="http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1"

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\2219f8b3-c261-467b-b884-d8fd28286983 deleted successfully

==== HijackThis Entries ======================

F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: 80.92.117.135 games2.betin7.com
O1 - Hosts: 80.92.117.133 account.betin7.com
O1 - Hosts: 80.92.117.133 account2.betin7.com
O1 - Hosts: 80.92.117.137 poker.betin7.com
O1 - Hosts: 80.92.117.137 poker2.betin7.com
O1 - Hosts: 80.92.117.136 casino.betin7.com
O1 - Hosts: 80.92.117.136 casino2.betin7.com
O1 - Hosts: 80.92.117.138 help.betin7.com
O1 - Hosts: 78.24.211.202 affiliates.betin7.com
O2 - BHO: BHO_Startup - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe
O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe /start
O4 - HKLM\..\Run: [btTray] "c:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
O4 - HKLM\..\Run: [AccelerometerSysTrayApplet] C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe
O4 - HKLM\..\Run: [CLMLServer_For_P2G8] "c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
O4 - HKLM\..\Run: [CLVirtualDrive] "c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R
O4 - HKLM\..\Run: [HP File Sanitizer] C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\Coreshredder.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: BlueSoleilCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: BsHelpCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: HP Trust Circles Service (CreoService) - CryptoMill Technologies Ltd. - C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe
O23 - Service: Absolute Software Agent Service (CtAgentService) - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe
O23 - Service: CyberLink PowerDVD 12 Media Server Monitor Service - CyberLink - c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
O23 - Service: CyberLink PowerDVD 12 Media Server Service - CyberLink - c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
O23 - Service: Услуга за удостоверяване на DigitalPersona (DpHost) - DigitalPersona, Inc. - C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: HP Device Locking / Auditing (FLCDLOCK) - Hewlett-Packard Company - c:\windows\SysWOW64\flcdlock.exe
O23 - Service: HitmanPro Scheduler (HitmanProScheduler) - SurfRight B.V. - C:\Program Files\HitmanPro\hmpsched.exe
O23 - Service: HP HotSpot 1.0 Service (HotSpotSrv) - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Wireless Hotspot\HotSpotSrv.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP File Sanitizer (HPFSService) - Hewlett-Packard - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: @oem36.inf,%hpservice_desc%;HP Service (hpsrv) - Unknown owner - C:\WINDOWS\system32\Hpservice.exe (file missing)
O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel® Integrated Clock Controller Service - Intel® ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel® HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - c:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel® Capability Licensing Service TCP IP Interface - Intel® Corporation - c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel® ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: Ralink Check BT Device (RalinkCheckBTDev) - Ralink Technology, Corp. - C:\Programdata\Ralink Driver\RT2860 Wireless LAN Card\Driver\RaCheckBTDev.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Hariton\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Hariton\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Hariton\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\Hariton\AppData\Local\Microsoft\Windows\INetCache\IE\XTUMS26A will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\Hariton\AppData\Local\Mozilla\Firefox\Profiles\1j9x38kz.default\cache2 emptied successfully
C:\Users\Hariton\AppData\Local\Mozilla\Firefox\Profiles\w2qrq6xv.default-1428068658411\cache2 emptied successfully

==== Empty Chrome Cache ======================

No Chrome Cache found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=23 folders=25 14645770 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Hariton\AppData\Local\Temp will be emptied at reboot
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\Hariton\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Hariton\AppData\Local\Microsoft\Windows\INetCache\IE\XTUMS26A" not found

==== EOF on бкЎ 04.04.2015 Ј. at 15:47:33,50 ======================
 

проблема си стои. Без да разбирам нещо от софтуер, според мен проблем е пряко свързан с мозилата, а ние работим целия комп. Очаквам следващите инструкции.

Нека да направим следното.

 

 

СТЪПКА 1

 

Изтеглете edit-text.giffixlist.txt и го запазете в папката от която стартирахте FRST.exe.
Стартирайте FRST.exe и натиснете бутона Fix веднъж!
След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.
 
Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

 

 

 

СТЪПКА 2

 

 

Моля изтеглете последната версия на TDSSKiller оттук и я запазете на вашия декстоп.

Стартирайте TDSSKiller.exe за да стартирате приложението. След това кликнете върху бутона Change parameters.
Сложете отметка през Loaded Modules.

Sbf88.png
Необходим е рестарт за осъществяване на промените. Направете го!
TDSSKiller ще стартира автоматично след рестарта. Важно е да се отбележи, че вашия компютър може да изглежда по-бавен, на моменти неизползваем и с по-ниска производителност. Това е нормално и ще трае само един рестарт. Дайте му достатъчно време да зареди приложенията стартиращи с Операционната Система във фонов режим.
След това натиснете Change parameters в TDSSKiller отново.
Сложете всички отметки (този път рестарт не се изисква).
Натиснете бутона Start Scan.
Проверката не би трябвало да отмене повече от 5 minutes.
Ако подозрителен обект бъде засечен, действието по подразбиране ще бъде Skip, кликнете върху Continue.
Ако зловредни обекти бъдат намерени, тогава от падащото меню ще имате три възможности.
Бъдете сигурни, че избраното действие е Cure и натиснете върху Continue > Рестартирайте за да бъде завършена поправката.

Забележка: Ако Cure бутона не е наличен от възможностите, тогава моля изберете Skip бутона, не избирайте Delete освен ако не сте инструктирани затова.
Лог файл ще бъде създаден в свободната директория на дял C:\ . Потърсете за лог с името "TDSSKiller.[Version]_[Date]_[Time]_log.txt" и копирайте съдържанието му в следващия си пост.

 

 

 

СТЪПКА 3

 

 

Моля отворете Control Panel-a => Programs => Uninstall a program => натиснете колонката Installed On за да се видят датите на последно инсталираните програми и направете screenshot на екрана и го публикувайте в следващия си коментар.

 

 

Поздрави!

  • Автор

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by Hariton at 2015-04-04 16:50:03 Run:4
Running from C:\Users\Hariton\Downloads
Loaded Profiles: Hariton (Available profiles: Hariton)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
RemoveProxy:
Hosts:
cmd: bitsadmin /reset /allusers
cmd: netsh winsock reset catalog
cmd: ipconfig /flushdns
end
*****************


========= RemoveProxy: =========

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.
HKU\S-1-5-21-3276917976-3779358348-1836126848-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.
HKU\S-1-5-21-3276917976-3779358348-1836126848-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.


========= End of RemoveProxy: =========

C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

=========  bitsadmin /reset /allusers =========


BITSADMIN version 3.0 [ 7.7.9600 ]
BITS administration utility.
© Copyright 2000-2006 Microsoft Corp.

BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.

Unable to cancel {C79F7E7E-64E7-4A1B-9C86-5F1066E2DCE8}.
0 out of 1 jobs canceled.

========= End of CMD: =========


=========  netsh winsock reset catalog =========


Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.


========= End of CMD: =========


=========  ipconfig /flushdns =========


Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========


==== End of Fixlog 16:50:05 ====

  • Автор

програмите


http://dox.abv.bg/files/share


http://dox.bg/files/dw?a=291c12592c


не знам вече какво да правя, след малко трябва да ставам. Моля ви, помгнете ми 3-ти ден вече кибича пред компа и само рефрешвам.

post-358294-0-72749800-1428157299_thumb.

Докладвам как се реши проблема.

Тъй като потребителя бързаше (както и аз) използвахме TeamViewer. Системата очевидно бе чиста, но явно нещо в самия профил се беше загнездило. Взех стария профил и логовете, които ми трябваха за да докладвам на MBAM и adwcleaner за пропуска, деинсталирахме браузъра с GeekUninstaller, защото и резетване на профила не помогна и почистихме всички остатъци от браузъра и го преинсталирахме. Проблема се оправи и системата е напълно чиста вече. Събрах и карантинните папки на Hitmanpro и логовете на MBAM за изходящите връзки свързани с този адуер и ще ги докладвам. Изтрихме използваните от нас инструменти и затова ще маркирам случая като РЕШЕН,

 

Поздрави! ;)

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Назад

Разглеждащи това в момента 0

  • Няма регистрирани потребители разглеждащи тази страница.

Дарение

  • Подкрепи съществуването на форума - направи дарение
    32%
    Дарени 315 € от нужните 1 000 €

Бюлетин

Получавайте известие, когато има важна промяна или новина свързана с форума.
Абонирайте се

Профил

Навигация

Търсене

Търсене

Конфигуриране на push известия в браузъра
Chrome (Android)
  1. Докоснете иконата на катинар до адресната лента.
  2. Докоснете Разрешения → Известия.
  3. Променете предпочитанията си.
Chrome (Desktop)
  1. Кликнете върху иконата на катинар в адресната лента.
  2. Изберете Настройки на сайта.
  3. Намерете Известия и коригирайте предпочитанията си.