Проблем с интернет

4 май 201511 г.

Здравейте, преди няколко дни запонах да имам проблем с браузърите - при отваряне на някоя страница зависва и почва да мисли прекалено дълго. Не зарежда и само със затваряне на страницата, може да се придължи работата. Това се случва с всички браузъри, основно ползвам Опера, но и с Мозила и Хром е същото. Компютъра е с преинсталиан ОС Windows 7 Ultimate SP1. Предполагам, че има някакъв вирус. Самия компютър работи добре сега, преди това имах проблем с ексела - беше почнал да изписва "qqqqqqqqq" и антивирусната засече нещо и го отстрани. Благодаря предварително!

Извинявам се, че пуснах две еднакви теми!

Addition.txt

FRST.txt

4 май 201511 г.

Здравейте!

Стъпка 1

Имате остатъци от старата ви антивирусна програма Avast. Нека първо ги премахнем. Моля, следвайте инструкциите тук:

https://www.avast.com/uninstall-utility

Ако имате някакви затруднения, попитайте.

Стъпка 2

Изтеглете fixlist.txt и го запазете в папката от която стартирахте FRST.exe.

Стартирайте FRST.exe и натиснете бутона Fix веднъж!

След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.

Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

fixlist.txt

4 май 201511 г.

Автор

Привет, прикачвам лог файла.

:-)

Fixlog.txt

4 май 201511 г.

Моля, изтеглете Malwarebytes Anti-Malware 2.0.3.1025 Final и я запазете на вашия десктоп.

Стартирайте файла mbam-setup-2.0.3.1025.exe и следвайте указанията за да инсталирате програмата.
След като инсталацията приключи се уверете че сте сложили отметка пред:
Launch Malwarebytes Anti-Malware
Отметката активираща пробния 14 дневен период също е маркиран по-подразбиране. Ако не желаете да тествате защитата в реално време на програмата през следващите 14 дни тогава премахнете отметката.
Натиснете бутона Finish.
Отидете до табът Settings > Detection and Protection > и под категорията Detection Options включете опцията "Scan for rootkits".
Отидете до табът Scan, сложете радио-бутона пред Threat Scan и след това натиснете бутона Scan Now >> . Ако е намерена актуализация тогава натиснете бутона Update Now.
Ще започне проверка за зловреден софтуер.
При някои инфекции можете да видите съобщението:
"Could not load DDA driver"
Натиснете "Yes" на това съобщение за да позволите драйвера да се зареди след рестарт.
Разрешете на компютъра да се рестартира и след това продължете с останалите инструкции.
След като проверката приключи натиснете бутона Apply Actions.
Изчакайте да се появи прозореца подканващ ви да рестартирате и след това натиснете бутона Yes.
След рестарта, когато се появи десктопа MBAM ще се зареди още веднъж.
Отидете то табът History > Application Logs.
Отворете рапорта с последната дата и час и натиснете бутона "Copy to Clipboard"
Сега вече поставете съдържанието на лог файла с клавишната комбинация Ctrl + V и го публикувайте в следващия си коментар.

4 май 201511 г.

Автор

Malwarebytes Anti-Malware

www.malwarebytes.org

Scan Date: 04.05.2015

Scan Time: 15:03:10

Logfile:

Administrator: Yes

Version: 2.00.4.1028

Malware Database: v2015.05.04.02

Rootkit Database: v2015.04.21.01

License: Trial

Malware Protection: Enabled

Malicious Website Protection: Enabled

Self-protection: Disabled

OS: Windows 7 Service Pack 1

CPU: x86

File System: NTFS

User: IBM

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 309357

Time Elapsed: 11 min, 58 sec

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Enabled

Deep Rootkit Scan: Enabled

Heuristics: Enabled

PUP: Enabled

PUM: Enabled

Processes: 0

(No malicious items detected)

Modules: 0

(No malicious items detected)

Registry Keys: 13

PUP.Optional.SecureWeb.A, HKU\S-1-5-21-8244552-1803039345-1069699313-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{D3C24E2B-C820-4492-9B69-11BF7163F998}, No Action By User, [70ca4c23ef9bf541ba0dc483778cdd23],

PUP.Optional.SecureWeb.A, HKLM\SOFTWARE\CLASSES\CLSID\{D3C24E2B-C820-4492-9B69-11BF7163F998}, Quarantined, [70ca4c23ef9bf541ba0dc483778cdd23],

PUP.Optional.SecureWeb.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{2F137995-4D26-44AD-9C4E-91055090A817}, Quarantined, [70ca4c23ef9bf541ba0dc483778cdd23],

PUP.Optional.SecureWeb.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A1E7709A-3AFB-49B8-8719-CCBF3F73CCB1}, Quarantined, [70ca4c23ef9bf541ba0dc483778cdd23],

PUP.Optional.SecureWeb.A, HKLM\SOFTWARE\CLASSES\CLSID\{D3C24E2B-C820-4492-9B69-11BF7163F998}\INPROCSERVER32, Quarantined, [70ca4c23ef9bf541ba0dc483778cdd23],

PUP.Optional.SecureWeb.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{D3C24E2B-C820-4492-9B69-11BF7163F998}, Quarantined, [70ca4c23ef9bf541ba0dc483778cdd23],

PUP.Optional.SecureWeb.A, HKU\S-1-5-21-8244552-1803039345-1069699313-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{D3C24E2B-C820-4492-9B69-11BF7163F998}, Quarantined, [70ca4c23ef9bf541ba0dc483778cdd23],

PUP.Optional.AdvancedSystemProtector.A, HKLM\SOFTWARE\SYSTWEAK\Advanced~System Protector, Quarantined, [1f1be9864a401e1868f3915e9f6430d0],

PUP.Optional.RegCleanPro.A, HKLM\SOFTWARE\SYSTWEAK\RegClean Pro, Quarantined, [0f2b125dc6c448ee84f56c8cc241dd23],

PUP.Optional.SystemSpeedup, HKLM\SOFTWARE\SYSTWEAK\ssd, Quarantined, [db5fd49b6525bc7af3da3dbb3bc8d52b],

PUP.Optional.AdvancedSystemProtector.A, HKU\S-1-5-21-8244552-1803039345-1069699313-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\Advanced~System Protector, Quarantined, [7cbe78f746442b0bfb6129c654af11ef],

PUP.Optional.RegCleanerPro.A, HKU\S-1-5-21-8244552-1803039345-1069699313-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\RegClean Pro, Quarantined, [a397353a6e1c1323029589acb253f709],

PUP.Optional.SystemSpeedup, HKU\S-1-5-21-8244552-1803039345-1069699313-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\ssd, Quarantined, [6ad077f8d2b8f0469c306c8c788b39c7],

Registry Values: 0

(No malicious items detected)

Registry Data: 0

(No malicious items detected)

Folders: 2

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\clamunpack, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

Files: 65

PUP.Optional.SecureWeb.A, C:\Program Files\Techsmart Computer\gmie.dll, Quarantined, [70ca4c23ef9bf541ba0dc483778cdd23],

Trojan.Agent, C:\Users\IBM\AppData\Local\Updater\tasks.dll, Quarantined, [ac8ef679147646f03cff1b28af54a25e],

RiskWare.Tool.CK, C:\Users\IBM\Desktop\FLASH\Nero 8 Lite 8.1.1.0 & Nero 8 Micro 8.1.1.0\Nero 8.x Ultra Edition KeyGen.exe, Quarantined, [2b0fdb94d4b60e28875d41664fb39070],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\AdvancedSystemProtector.exe.config, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\norwegian_asp_NO.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\AdvancedSystemProtector.exe, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\AppResource.dll, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\asp.ico, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\AspManager.exe, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\aspsys.dll, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\ASPUninstall.exe, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\categories.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\Chinese_asp_ZH-CN.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\Chinese_uninst.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\Communication.dll, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\danish_asp_DA.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\Danish_uninst.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\dutch_asp_NL.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\Dutch_uninst.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\eng_asp_en.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\eng_uninst.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\filetypehelper.exe, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\Finnish_asp_FI.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\Finnish_uninst_fi.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\french_asp_FR.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\French_uninst.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\german_asp_DE.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\German_uninst.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\Norwegian_uninst.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\polish_uninst_pl.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\portugese_uninst_pt.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\portuguese_asp_PT-BR.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\Portuguese_uninst.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\russian_asp_ru.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\russian_uninst_ru.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\scandll.dll, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\spanish_asp_ES.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\spanish_uninst.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\greek_uninst_el.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\Interop.IWshRuntimeLibrary.dll, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\italian_asp_IT.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\Italian_uninst.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\japanese_asp_JA.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\Japanese_uninst.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\korean_uninst_ko.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\loading_withWhiteBG.avi, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\Microsoft.Win32.TaskScheduler.DLL, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\swedish_asp_SV.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\swedish_uninst.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\System.Core.dll, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\System.Data.SQLite.dll, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\TPS.ico, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\traditionalcn_uninst_zh-tw.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\Turkish_uninst_tr.ini, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\unins000.dat, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\unins000.exe, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\unins000.msg, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\unrar.dll, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\Xceed.Compression.dll, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\Xceed.Compression.Formats.dll, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\Xceed.FileSystem.dll, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\Xceed.Zip.dll, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\clamunpack\clamscan.exe, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\clamunpack\libclamav.dll, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files\ASP\clamunpack\readme.txt, Quarantined, [a09aec838cfe62d4cc29b29ef312f60a],

Physical Sectors: 0

(No malicious items detected)

(end)

4 май 201511 г.

5 май 201511 г.

Автор

Готово. Иначе има подобрение откъм работа в интернет, но явно проблема не е само там.

JRT.txt

eset.txt

AdwCleanerS0.txt

5 май 201511 г.

Автор

Междувременно ми се налага да преинсталирам adobe acrobat professional

5 май 201511 г.

Имате е наличие на пиратски софтуер, който крие в себе си зловреден софтуер. Промяната може да дойде от това да подмените този софтуер със сходна безплатна алтернатива.

1. Изтеглете ComboFix от BleepingComputer

и го запазете (бутон Save -> Save as) ComboFix на вашия десктоп:

След приключване на изтеглянето на ComboFix, иконката на програмата би трябвало да изглежда така:

2. Затворете всички работещи приложения, отворени прозорци и програми работещи във фонов режим. Спрете временно защитата в реално време на антивирусната програма и на другите програми за сигурност, ако има такива.

3. Стартирайте с двоен клик Combofix.exe. Изберете YES, за да се съгласите с условията за използване на програмата. Важно: По време на работата на ComboFix не бива да се движи мишката и да се натискат клавиши от клавиатурата. Просто търпеливо оставете ComboFix да си свърши работата, без да използвате компютъра за други цели.

4. Ако получите предупреждение от UAC, съгласете се.

5 ComboFix ще спре временно Интернет връзката, но след като приключи работата на програмата тази връзка ще бъде възстановена автоматично. ComboFix ще сканира за проблеми и за заразени файлове, като това може да отнеме известно време. Моля да бъдете търпеливи. Ако има проблем с Интернет връзката след приключване на работата на Combofix, моля да прочетете това: Manually restoring the Internet connection section.

6 Когато работата на ComboFix приключи, ще се появи текстов документ (log) в Notepad:

Копирайте с (Copy) и поставете с (Paste) съдържанието на лога в следващия си коментар.

Забележка: Ако се появи следното съобщение при отварянето на различни програми след завършване на сканирането с Combofix - "illegal operation on a registry key that has been marked for deletion." просто рестартирайте компютъра още веднъж и то ще изчезне.

По време на сканирането не използвайте компютъра си !

5 май 201511 г.

Автор

Здравейте, деактивирах Пандата, обаче като пуснах ComboFix ме предупреждава, че още е активна. Да продължа ли с изпълнението?

5 май 201511 г.

Автор

ComboFix 15-04-28.01 - IBM 05.05.2015 14:10:26.1.2 - x86

Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1033.18.2046.1367 [GMT 3:00]

Running from: c:\users\IBM\Desktop\ComboFix.exe

AV: Panda Internet Security 2015 *Enabled/Updated* {3456760B-FDAA-FFFD-06C2-7BB528D2066C}

FW: Panda Firewall *Disabled* {0C6DF72E-B7C5-FEA5-2D9D-D280D6014117}

SP: Panda Internet Security 2015 *Enabled/Updated* {8F3797EF-DB90-F073-3C72-40C753554CD1}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\programdata\F6F483A335.sys

c:\windows\system32\AdobePDF.dll

.

Infected copy of c:\windows\system32\userinit.exe was found and disinfected

Restored copy from - c:\windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe

.

((((((((((((((((((((((((( Files Created from 2015-04-05 to 2015-05-05 )))))))))))))))))))))))))))))))

.

2015-05-05 11:18 . 2015-05-05 11:18 -------- d-----w- c:\users\Default\AppData\Local\temp

2015-05-05 11:00 . 2015-05-05 11:00 62576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{53945DC3-0FAB-4501-88A3-976869389D42}\offreg.dll

2015-05-05 10:17 . 2015-05-05 10:17 -------- d-----w- c:\program files\Common Files\Macrovision Shared

2015-05-05 07:05 . 2015-05-05 07:05 -------- d-----w- c:\program files\ESET

2015-05-05 07:02 . 2015-05-05 07:02 -------- d-----w- C:\RegBackup

2015-05-05 06:53 . 2015-05-05 06:55 -------- d-----w- C:\AdwCleaner

2015-05-04 11:59 . 2015-05-05 10:01 114904 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys

2015-05-04 11:58 . 2015-05-04 12:01 -------- d-----w- c:\program files\Malwarebytes Anti-Malware

2015-05-04 11:58 . 2015-05-04 11:58 -------- d-----w- c:\programdata\Malwarebytes

2015-05-04 11:58 . 2014-11-21 03:14 51928 ----a-w- c:\windows\system32\drivers\mwac.sys

2015-05-04 11:58 . 2014-11-21 03:14 75480 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys

2015-05-04 11:58 . 2014-11-21 03:14 23256 ----a-w- c:\windows\system32\drivers\mbam.sys

2015-05-04 09:11 . 2015-05-04 09:11 -------- d-----w- c:\program files\AVAST Software

2015-05-04 06:46 . 2015-04-04 06:39 9201616 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{53945DC3-0FAB-4501-88A3-976869389D42}\mpengine.dll

2015-05-04 06:33 . 2015-01-29 17:21 50320 ----a-w- c:\windows\system32\drivers\PSKMAD.sys

2015-04-30 12:36 . 2015-05-04 09:20 -------- d-----w- C:\FRST

2015-04-29 08:27 . 2015-05-04 08:28 2516 --sha-w- c:\programdata\KGyGaAvL.sys

2015-04-29 08:25 . 2015-04-30 09:24 -------- d-----w- c:\programdata\Corel

2015-04-29 08:25 . 2015-04-29 08:25 -------- d-----w- c:\program files\Common Files\Protexis

2015-04-29 08:22 . 2015-04-29 08:22 -------- d-----w- c:\program files\Common Files\Corel

2015-04-29 08:21 . 2015-04-29 08:21 -------- d-----w- c:\program files\Corel

2015-04-29 08:17 . 2015-04-29 08:17 -------- d-----w- c:\program files\DAEMON Tools Lite

2015-04-29 07:07 . 2015-04-29 07:08 -------- d-----w- c:\program files\Google

2015-04-29 07:07 . 2015-04-29 07:08 -------- d-----w- c:\program files\GUMC6FB.tmp

2015-04-28 12:33 . 2015-04-28 12:33 25104 ----a-w- c:\windows\system32\drivers\dtlitescsibus.sys

2015-04-24 10:41 . 2015-04-30 08:37 -------- d-----w- c:\program files\Panda Security

2015-04-24 10:39 . 2015-04-24 10:42 -------- d-----w- c:\programdata\Panda Security

2015-04-24 06:58 . 2015-04-24 06:58 -------- d-----w- c:\program files\Mozilla Thunderbird

2015-04-23 08:44 . 2015-04-23 08:44 -------- d-----w- c:\programdata\Hewlett-Packard

2015-04-22 10:25 . 2015-04-23 09:18 -------- d-----w- c:\program files\Techsmart Computer

2015-04-22 10:10 . 2008-08-07 18:10 221184 ----a-w- c:\windows\brprs.exe

2015-04-22 10:10 . 2015-04-22 10:10 -------- d-----w- c:\programdata\HP

2015-04-22 10:09 . 2015-04-22 10:10 -------- d-----w- C:\hp_LJ_M1120_Full_Solution

2015-04-22 09:06 . 2015-04-22 09:08 -------- d-----w- c:\program files\CCleaner

2015-04-21 15:00 . 2015-04-21 15:00 -------- d-----w- c:\programdata\Microinvest

2015-04-21 14:39 . 2012-06-28 22:22 57288 ----a-w- c:\windows\system32\perf-MSSQL10_50.MSSQLSERVER-sqlagtctr.dll

2015-04-21 14:38 . 2012-06-28 22:22 82888 ----a-w- c:\windows\system32\perf-MSSQLSERVER-sqlctr10.52.4000.0.dll

2015-04-21 14:38 . 2015-04-21 14:38 -------- d-----w- c:\windows\system32\RsFx

2015-04-21 14:37 . 2015-04-21 14:37 -------- d-----w- c:\program files\Microsoft Visual Studio 9.0

2015-04-21 14:36 . 2015-04-21 14:36 -------- d-----w- c:\windows\system32\1033

2015-04-21 14:33 . 2015-04-21 14:38 -------- d-----w- c:\program files\Microsoft SQL Server

2015-04-21 14:31 . 2015-04-21 14:31 -------- d-----w- c:\program files\SAP BusinessObjects

2015-04-21 14:31 . 2015-04-21 14:31 -------- d-----w- C:\inetpub

2015-04-21 13:37 . 2015-04-22 10:59 -------- d-----w- c:\programdata\regid.1986-12.com.adobe

2015-04-21 12:28 . 2015-04-21 12:28 -------- d-----w- c:\program files\Common Files\Skype

2015-04-21 12:28 . 2015-04-21 12:28 -------- d-----r- c:\program files\Skype

2015-04-21 12:28 . 2015-04-21 12:28 -------- d-----w- c:\programdata\Skype

2015-04-21 10:30 . 2014-06-27 01:45 2285056 ----a-w- c:\windows\system32\msmpeg2vdec.dll

2015-04-21 08:16 . 2015-04-21 11:40 -------- d-----w- c:\programdata\FLEXnet

2015-04-21 07:32 . 2012-02-11 05:37 317440 ----a-w- c:\windows\system32\spoolsv.exe

2015-04-21 07:32 . 2011-03-11 05:39 143744 ----a-w- c:\windows\system32\drivers\nvstor.sys

2015-04-21 07:32 . 2011-03-11 05:39 117120 ----a-w- c:\windows\system32\drivers\nvraid.sys

2015-04-21 07:32 . 2011-03-11 05:38 332160 ----a-w- c:\windows\system32\drivers\iaStorV.sys

2015-04-21 07:32 . 2011-03-11 05:38 80256 ----a-w- c:\windows\system32\drivers\amdsata.sys

2015-04-21 07:32 . 2011-03-11 05:38 22400 ----a-w- c:\windows\system32\drivers\amdxata.sys

2015-04-21 07:32 . 2011-03-11 05:33 1699328 ----a-w- c:\windows\system32\esent.dll

2015-04-21 07:32 . 2011-03-11 05:31 74240 ----a-w- c:\windows\system32\fsutil.exe

2015-04-21 07:31 . 2015-03-13 03:09 667648 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe

2015-04-21 07:31 . 2014-06-24 02:59 1987584 ----a-w- c:\windows\system32\d3d10warp.dll

2015-04-21 07:31 . 2011-02-25 05:30 2616320 ----a-w- c:\windows\explorer.exe

2015-04-21 07:31 . 2014-07-09 01:29 6144 ----a-w- c:\windows\system32\KBDYAK.DLL

2015-04-21 07:31 . 2014-07-09 01:29 6144 ----a-w- c:\windows\system32\KBDBASH.DLL

2015-04-21 07:29 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\system32\d2d1.dll

2015-04-20 22:17 . 2015-04-22 09:21 -------- d-----w- c:\windows\Panther

2015-04-20 15:54 . 2013-10-04 01:58 152576 ----a-w- c:\windows\system32\SmartcardCredentialProvider.dll

2015-04-20 15:54 . 2013-10-04 01:56 168960 ----a-w- c:\windows\system32\credui.dll

2015-04-20 15:54 . 2014-10-14 01:50 2363904 ----a-w- c:\windows\system32\msi.dll

2015-04-20 15:54 . 2012-08-21 20:12 245760 ----a-w- c:\windows\system32\OxpsConverter.exe

2015-04-20 15:50 . 2014-10-04 01:42 3221504 ----a-w- c:\windows\system32\mstscax.dll

2015-04-20 15:50 . 2014-10-04 01:42 131584 ----a-w- c:\windows\system32\aaclient.dll

2015-04-20 15:50 . 2013-05-10 03:20 24576 ----a-w- c:\windows\system32\cryptdlg.dll

2015-04-20 15:50 . 2013-05-13 03:08 903168 ----a-w- c:\windows\system32\certutil.exe

2015-04-20 15:50 . 2013-05-13 03:08 43008 ----a-w- c:\windows\system32\certenc.dll

2015-04-20 15:49 . 2014-11-08 02:45 2048 ----a-w- c:\windows\system32\tzres.dll

2015-04-20 15:38 . 2015-04-20 15:38 -------- d-s---w- c:\windows\system32\CompatTel

2015-04-20 15:38 . 2015-04-20 15:38 -------- d-----w- c:\windows\system32\appraiser

2015-04-20 15:37 . 2015-04-20 15:40 -------- d-s---w- c:\windows\system32\GWX

2015-04-20 15:26 . 2015-04-20 15:29 -------- d-----w- c:\windows\system32\MRT

2015-04-20 15:10 . 2012-07-26 02:33 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys

2015-04-20 15:10 . 2012-07-26 02:32 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys

2015-04-20 15:10 . 2012-07-26 03:21 196608 ----a-w- c:\windows\system32\WUDFHost.exe

2015-04-20 15:10 . 2012-07-26 03:20 73216 ----a-w- c:\windows\system32\WUDFSvc.dll

2015-04-20 15:10 . 2012-07-26 03:20 613888 ----a-w- c:\windows\system32\WUDFx.dll

2015-04-20 15:10 . 2012-07-26 03:20 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll

2015-04-20 15:10 . 2012-07-26 03:20 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll

2015-04-20 15:09 . 2014-03-09 21:47 99480 ----a-w- c:\windows\system32\infocardapi.dll

2015-04-20 15:09 . 2014-06-30 22:14 8856 ----a-w- c:\windows\system32\icardres.dll

2015-04-20 15:09 . 2014-03-09 21:47 619672 ----a-w- c:\windows\system32\icardagt.exe

2015-04-20 15:09 . 2014-06-06 06:16 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe

2015-04-20 15:09 . 2012-03-01 05:46 19824 ----a-w- c:\windows\system32\drivers\fs_rec.sys

2015-04-20 15:09 . 2012-03-01 05:29 5120 ----a-w- c:\windows\system32\wmi.dll

2015-04-20 15:02 . 2015-04-20 15:03 -------- d-----w- c:\windows\system32\vbox

2015-04-20 14:54 . 2015-04-20 14:54 -------- d-----w- c:\programdata\NVIDIA

2015-04-20 14:49 . 2015-04-20 14:49 -------- d-----w- c:\windows\system32\drivers\bg-BG

2015-04-20 14:49 . 2015-04-20 14:49 -------- d-----w- c:\windows\bg-BG

2015-04-20 14:49 . 2015-04-20 14:49 -------- d-----w- c:\windows\system32\wbem\bg-BG

2015-04-20 14:45 . 2015-02-19 21:44 2208400 ----a-w- c:\windows\system32\nvwmi.exe

2015-04-20 14:45 . 2015-02-04 02:06 3060936 ----a-w- c:\windows\system32\nvsvc.dll

2015-04-20 14:45 . 2015-02-04 02:05 670536 ----a-w- c:\windows\system32\nvvsvc.exe

2015-04-20 14:45 . 2015-02-04 02:05 61584 ----a-w- c:\windows\system32\nvshext.dll

2015-04-20 14:45 . 2015-02-04 02:05 2553032 ----a-w- c:\windows\system32\nvsvcr.dll

2015-04-20 14:45 . 2015-02-03 16:18 4229086 ----a-w- c:\windows\system32\nvcoproc.bin

2015-04-20 14:44 . 2015-02-04 02:06 4388040 ----a-w- c:\windows\system32\nvcpl.dll

2015-04-20 14:44 . 2015-02-04 02:05 374928 ----a-w- c:\windows\system32\nvmctray.dll

2015-04-20 14:44 . 2015-02-19 21:44 60744 ----a-w- c:\windows\system32\OpenCL.dll

2015-04-20 14:44 . 2015-04-20 14:45 -------- d-----w- c:\programdata\NVIDIA Corporation

2015-04-20 14:44 . 2015-04-20 14:45 -------- d-----w- c:\program files\NVIDIA Corporation

2015-04-20 14:44 . 2013-04-09 23:34 1247744 ----a-w- c:\windows\system32\DWrite.dll

2015-04-20 14:42 . 2015-02-03 03:12 1230848 ----a-w- c:\windows\system32\WindowsCodecs.dll

2015-04-20 14:42 . 2015-02-04 02:54 417792 ----a-w- c:\windows\system32\WMPhoto.dll

2015-04-20 12:53 . 2015-04-20 12:53 640512 ----a-w- c:\windows\system32\advapi32.dll

2015-04-20 12:53 . 2015-04-20 12:53 619520 ----a-w- c:\windows\system32\tdh.dll

2015-04-20 12:53 . 2015-04-20 12:53 1289096 ----a-w- c:\windows\system32\ntdll.dll

2015-04-20 12:53 . 2015-04-20 12:53 231424 ----a-w- c:\windows\system32\mswsock.dll

2015-04-20 12:53 . 2015-04-20 12:53 49152 ----a-w- c:\windows\system32\taskhost.exe

2015-04-20 12:50 . 2015-04-20 12:50 1505280 ----a-w- c:\windows\system32\d3d11.dll

2015-04-20 12:48 . 2015-01-09 02:48 76800 ----a-w- c:\windows\system32\wdi.dll

2015-04-20 12:48 . 2015-01-09 02:48 635904 ----a-w- c:\windows\system32\perftrack.dll

2015-04-20 12:48 . 2015-01-09 02:48 27136 ----a-w- c:\windows\system32\powertracker.dll

2015-04-20 12:44 . 2014-07-17 01:40 157696 ----a-w- c:\windows\system32\winsta.dll

2015-04-20 12:43 . 2014-06-06 09:44 509440 ----a-w- c:\windows\system32\qedit.dll

2015-04-20 12:43 . 2014-06-16 01:44 730048 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys

2015-04-20 12:43 . 2014-06-16 01:44 219072 ----a-w- c:\windows\system32\drivers\dxgmms1.sys

2015-04-20 12:43 . 2014-06-16 01:40 107520 ----a-w- c:\windows\system32\cdd.dll

2015-04-20 12:41 . 2014-12-19 02:43 164864 ----a-w- c:\windows\system32\profsvc.dll

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2015-02-25 19:03 . 2015-02-25 19:03 124688 ----a-w- c:\windows\system32\drivers\PSINProt.sys

2015-02-25 19:03 . 2015-02-25 19:03 100624 ----a-w- c:\windows\system32\drivers\PSINReg.sys

2015-02-25 19:03 . 2015-02-25 19:03 168208 ----a-w- c:\windows\system32\drivers\PSINKNC.sys

2015-02-25 19:03 . 2015-02-25 19:03 113936 ----a-w- c:\windows\system32\drivers\PSINProc.sys

2015-02-25 19:02 . 2015-02-25 19:02 140048 ----a-w- c:\windows\system32\drivers\PSINAflt.sys

2015-02-25 19:02 . 2015-02-25 19:02 105232 ----a-w- c:\windows\system32\drivers\PSINFile.sys

2015-02-19 21:44 . 2009-07-13 22:09 16128576 ----a-w- c:\windows\system32\nvwgf2um.dll

2015-02-19 21:44 . 2015-02-19 21:44 11272048 ----a-w- c:\windows\system32\nvopencl.dll

2015-02-19 21:44 . 2015-02-19 21:44 24199824 ----a-w- c:\windows\system32\nvoglv32.dll

2015-02-19 21:44 . 2015-02-19 21:44 10702664 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys

2015-02-19 21:44 . 2015-02-19 21:44 908432 ----a-w- c:\windows\system32\NvIFR.dll

2015-02-19 21:44 . 2015-02-19 21:44 911504 ----a-w- c:\windows\system32\nvdispgenco3234144.dll

2015-02-19 21:44 . 2015-02-19 21:44 870032 ----a-w- c:\windows\system32\NvFBC.dll

2015-02-19 21:44 . 2015-02-19 21:44 14497760 ----a-w- c:\windows\system32\nvd3dum.dll

2015-02-19 21:44 . 2015-02-19 21:44 1060680 ----a-w- c:\windows\system32\nvdispco3234144.dll

2015-02-19 21:44 . 2015-02-19 21:44 3987784 ----a-w- c:\windows\system32\nvcuvid.dll

2015-02-19 21:44 . 2015-02-19 21:44 11209376 ----a-w- c:\windows\system32\nvcuda.dll

2015-02-19 21:43 . 2015-02-19 21:43 15294096 ----a-w- c:\windows\system32\nvcompiler.dll

2015-02-19 21:43 . 2015-02-19 21:43 2824176 ----a-w- c:\windows\system32\nvapi.dll

2015-02-09 21:02 . 2015-02-09 21:02 94864 ----a-w- c:\windows\system32\drivers\NNStlsc.sys

2015-02-09 21:02 . 2015-02-09 21:02 239888 ----a-w- c:\windows\system32\drivers\NNSStrm.sys

2015-02-09 21:02 . 2015-02-09 21:02 108432 ----a-w- c:\windows\system32\drivers\NNSSmtp.sys

2015-02-09 21:02 . 2015-02-09 21:02 281232 ----a-w- c:\windows\system32\drivers\NNSProt.sys

2015-02-09 21:02 . 2015-02-09 21:02 205456 ----a-w- c:\windows\system32\drivers\NNSPrv.sys

2015-02-09 21:02 . 2015-02-09 21:02 61712 ----a-w- c:\windows\system32\drivers\NNSPihsw.sys

2015-02-09 21:02 . 2015-02-09 21:02 120592 ----a-w- c:\windows\system32\drivers\NNSPop3.sys

2015-02-09 21:02 . 2015-02-09 21:02 99856 ----a-w- c:\windows\system32\drivers\NNSpicc.sys

2015-02-09 21:02 . 2015-02-09 21:02 202128 ----a-w- c:\windows\system32\drivers\NNSHttp.sys

2015-02-09 21:02 . 2015-02-09 21:02 126480 ----a-w- c:\windows\system32\drivers\NNSIds.sys

2015-02-09 21:02 . 2015-02-09 21:02 109584 ----a-w- c:\windows\system32\drivers\NNSHttps.sys

2015-02-09 21:02 . 2015-02-09 21:02 86800 ----a-w- c:\windows\system32\drivers\NNSAlpc.sys

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]