Премини към съдържанието

Препоръчан отговор


Здравейте, поради ползването на лаптопа не само от мен а и от брат ми и баща ми, компютъра често се пълни с всякакви зловредни програмки. Най-често успявам да се справя някак си с тях, но напоследък машината значително забави скоростта си. След рестарт зарежда значително по дълго, и се появяват някакви странни грешки със зареждането и. На скоро имах проблеми с програми като delta-homes и китайски вируси на име Baidu. Като цяло мисля че може да има и доста други проблеми с които вие бихте могли да ми помогнете, тъй като моето AVG смятам че доста се позадъхва :(
Копирам лог-а според изискванията:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-05-2015
Ran by Марто (administrator) on 123456789 on 06-05-2015 17:07:44
Running from C:\Users\Марто\Downloads
Loaded Profiles: Марто (Available profiles: Марто)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\Program Files\Core Temp\Core Temp.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareTray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Users\Марто\AppData\Roaming\ACEStream\engine\ace_engine.exe
() C:\Users\Марто\AppData\Roaming\AceWebExtension\updater\ace_web_extension.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Lavasoft) C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
(Lavasoft Limited) C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.2\LavasoftTcpService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\ToolbarUpdater.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\loggingserver.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(AVG Secure Search) C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe
() C:\Users\Марто\AppData\Roaming\ACEStream\updater\ace_update.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel® Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [shadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [cpuminer-gpu] => C:\Users\Марто\AppData\Roaming\cpuminer\sgminer\sgminer.cmd [96 2015-05-02] ()
HKLM\...\Run: [baidusdTray] => "C:\Program Files (x86)\Baidu\BaiduSd\3.0.0.4605\baidusdTray.exe"  -stmd=3
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareTray.exe [9566192 2015-03-10] ()
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [507744 2011-12-20] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31072 2008-10-25] (Microsoft Corporation)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3745232 2015-04-15] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [3033112 2015-05-06] ()
HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7451928 2015-03-13] (Piriform Ltd)
HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [7451928 2015-03-13] (Piriform Ltd)
HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\...\Run: [AceStream] => C:\Users\Марто\AppData\Roaming\ACEStream\engine\ace_engine.exe [23984 2015-02-17] ()
HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\...\Run: [AceWebException] => C:\Users\Марто\AppData\Roaming\AceWebExtension\updater\ace_web_extension.exe [22824 2015-02-28] ()
HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [1371456 2015-04-30] (Lavasoft)
HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\...\Run: [apphide] => C:\Program Files (x86)\baidu\baidu.exe
HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\...\MountPoints2: {d2265b26-7d42-11e4-83da-2089843311fd} - F:\setup.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [178512 2015-03-13] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [164568 2015-03-13] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2014-12-28]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-12-01]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_aw_14_49_ff&cd=2XzuyEtN2Y1L1QzutBtDzzzyzzyEtAtAtCtC0F0Dzz0EyBtAtN0D0Tzu0StCtDyCyDtN1L2XzutAtFyCtFyCtFtDtN1L1Czu0C0I0S0V0E0R1V1TtN1L1G1B1V1N2Y1L1Qzu2SyEtByEzztDtD0BtCtGtD0A0BtDtG0A0BtBzztGyEyEtCtAtGyBzy0F0ByCzztCyBtCtD0BtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAzz0DtA0DtBzyyEtGyE0Czy0BtGyE0FtCyDtG0BtAyBtDtGzztA0FyBtD0DtBtB0EzyyCzy2QtN1B1L1H1Ezu1O2U1M1B&cr=530506182&ir=
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_aw_14_49_ff&cd=2XzuyEtN2Y1L1QzutBtDzzzyzzyEtAtAtCtC0F0Dzz0EyBtAtN0D0Tzu0StCtDyCyDtN1L2XzutAtFyCtFyCtFtDtN1L1Czu0C0I0S0V0E0R1V1TtN1L1G1B1V1N2Y1L1Qzu2SyEtByEzztDtD0BtCtGtD0A0BtDtG0A0BtBzztGyEyEtCtAtGyBzy0F0ByCzztCyBtCtD0BtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAzz0DtA0DtBzyyEtGyE0Czy0BtGyE0FtCyDtG0BtAyBtDtGzztA0FyBtD0DtBtB0EzyyCzy2QtN1B1L1H1Ezu1O2U1M1B&cr=530506182&ir=
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-search.net/search?sid=498&aid=162&itype=r&ver=16064&tm=690&src=ds&p={searchTerms}
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = http://www.default-search.net/search?sid=503&aid=100&itype=n&ver=13986&tm=553&src=ds&p={searchTerms}
SearchScopes: HKLM -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL = http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_aw_14_49_ff&cd=2XzuyEtN2Y1L1QzutBtDzzzyzzyEtAtAtCtC0F0Dzz0EyBtAtN0D0Tzu0StCtDyCyBtN1L2XzutAtFyCtFyCtFtDtN1L1Czu0C0I0S0V0E0R1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzzyD0CyEzy0FtGtB0EtDyBtGyD0EtA0FtGyByEtAyEtGyEyB0EyCtBtDtByDzz0Azz0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAzz0DtA0DtBzyyEtGyE0Czy0BtGyE0FtCyDtG0BtAyBtDtGzztA0FyBtD0DtBtB0EzyyCzy2QtN1B1L1H1Ezu1O2U1M1B&cr=1739587123&ir=
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-search.net/search?sid=498&aid=162&itype=r&ver=16064&tm=690&src=ds&p={searchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = http://www.default-search.net/search?sid=503&aid=100&itype=n&ver=13986&tm=553&src=ds&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1502131228-3914716253-1795875646-1000 -> DefaultScope {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1502131228-3914716253-1795875646-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1502131228-3914716253-1795875646-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1502131228-3914716253-1795875646-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1502131228-3914716253-1795875646-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://mysearch.avg.com/search?cid={EC38DCEE-B056-4B2A-9577-ECCF7782466E}&mid=7866d6feb35247cda060f1c0c2d7f80e-69a9eefa582180e672c310fc37e494308aaa9252&lang=en&ds=AVG&coid=avgtbavg&cmpid=0215pi&pr=fr&d=2015-05-0614:08:46&v=4.1.0.411&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1502131228-3914716253-1795875646-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1502131228-3914716253-1795875646-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1502131228-3914716253-1795875646-1000 -> {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = http://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10140_cnet_150506&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1502131228-3914716253-1795875646-1000 -> {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1502131228-3914716253-1795875646-1000 -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1502131228-3914716253-1795875646-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
BHO: Linkey -> {4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47} -> C:\Program Files (x86)\Linkey\IEExtension\iedll64.dll [2015-04-15] (Aztec Media Inc)
BHO: No Name -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} ->  No File
BHO: No Name -> {FCE3FA8B-BA81-467C-81D8-E43C00D1BC71} ->  No File
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\XTab\SupTab.dll [2015-04-30] (Thinknice Co. Limited)
BHO-x32: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll [2013-11-29] (BitComet)
BHO-x32: Linkey -> {4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47} -> C:\Program Files (x86)\Linkey\IEExtension\iedll.dll [2015-04-15] (Aztec Media Inc)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12] (Microsoft Corporation)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.1.0.411\AVG Web TuneUp.dll [2015-05-06] (AVG)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Winsock: Catalog9-x64 01 C:\Windows\system32\LavasoftTcpService64.dll [429392 2015-04-06] (Lavasoft Limited)
Winsock: Catalog9-x64 02 C:\Windows\system32\LavasoftTcpService64.dll [429392 2015-04-06] (Lavasoft Limited)
Winsock: Catalog9-x64 03 C:\Windows\system32\LavasoftTcpService64.dll [429392 2015-04-06] (Lavasoft Limited)
Winsock: Catalog9-x64 04 C:\Windows\system32\LavasoftTcpService64.dll [429392 2015-04-06] (Lavasoft Limited)
Winsock: Catalog9-x64 16 C:\Windows\system32\LavasoftTcpService64.dll [429392 2015-04-06] (Lavasoft Limited)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Марто\AppData\Roaming\Mozilla\Firefox\Profiles\0zxh6c5w.default-1430864213634
FF NewTab: hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10140_cnet_150506
FF DefaultSearchEngine: Google Default
FF SelectedSearchEngine: Ad-Aware SecureSearch
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-30] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-30] ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.4.0\\npsitesafety.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File
FF Plugin HKU\S-1-5-21-1502131228-3914716253-1795875646-1000: @acestream.net/acestreamplugin,version=3.0.10 -> C:\Users\Марто\AppData\Roaming\ACEStream\player\npace_plugin.dll [2014-12-03] (Innovative Digital Technologies)
FF SearchPlugin: C:\Users\Марто\AppData\Roaming\Mozilla\Firefox\Profiles\0zxh6c5w.default-1430864213634\searchplugins\google-default.xml [2015-05-06]
FF Extension: AVG Web TuneUp - C:\Users\Марто\AppData\Roaming\Mozilla\Firefox\Profiles\0zxh6c5w.default-1430864213634\Extensions\avg@toolbar [2015-05-06]
FF Extension: Adblock Plus - C:\Users\Марто\AppData\Roaming\Mozilla\Firefox\Profiles\0zxh6c5w.default-1430864213634\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-05-06]
FF HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - http://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fpmeembnagmagppkgghhfjfdfajdfcah] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [iomphmdalfmaifjccmagmllnicjoghhk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3438032 2015-04-15] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [311792 2015-04-15] (AVG Technologies CZ, s.r.o.)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [945440 2012-02-01] (Broadcom Corporation.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareService.exe [720760 2015-03-10] ()
R2 LavasoftTcpService; C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.2\LavasoftTcpService.exe [2748720 2015-04-30] (Lavasoft Limited)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation)
S2 SearchProtectionService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe [17768 2015-04-30] ()
R2 vToolbarUpdater18.4.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\ToolbarUpdater.exe [1875480 2015-05-06] (AVG Secure Search)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [620056 2015-05-06] ()
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation)
S2 Update Air Globe; "C:\Program Files (x86)\Air Globe\updateAirGlobe.exe" [X]
S2 Update Cyti Web; "C:\Program Files (x86)\Cyti Web\updateCytiWeb.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162784 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [284128 2015-04-09] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [213984 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [256992 2015-04-15] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [344544 2015-03-11] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [137184 2015-04-03] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [40928 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [291296 2015-04-07] (AVG Technologies CZ, s.r.o.)
R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [134696 2012-02-02] (Broadcom Corporation.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-12-06] (Disc Soft Ltd)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [104048 2012-03-02] (Qualcomm Atheros Co., Ltd.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
S3 TrojanKillerDriver; C:\Windows\System32\DRIVERS\gtkdrv.sys [17568 2015-04-23] (Windows ® Win 7 DDK provider)
S3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [452040 2015-01-22] (BitDefender S.R.L.)
R3 ALSysIO; \??\C:\Users\4ABA~1\AppData\Local\Temp\ALSysIO64.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-06 16:53 - 2015-05-06 16:55 - 00000168 _____ () C:\Windows\setupact.log
2015-05-06 16:53 - 2015-05-06 16:53 - 00026276 _____ () C:\Windows\PFRO.log
2015-05-06 16:53 - 2015-05-06 16:53 - 00000000 _____ () C:\Windows\setuperr.log
2015-05-06 16:42 - 2015-05-06 16:42 - 00047026 _____ () C:\Users\Марто\Downloads\Addition.txt
2015-05-06 16:41 - 2015-05-06 17:07 - 00023946 _____ () C:\Users\Марто\Downloads\FRST.txt
2015-05-06 16:36 - 2015-05-06 17:07 - 00000000 ____D () C:\FRST
2015-05-06 16:36 - 2015-05-06 16:36 - 02101760 _____ (Farbar) C:\Users\Марто\Downloads\FRST64.exe
2015-05-06 15:04 - 2015-05-06 15:04 - 00000000 _____ () C:\autoexec.bat
2015-05-06 15:03 - 2015-05-06 16:51 - 00000000 ____D () C:\Users\Марто\AppData\Roaming\Enigma Software Group
2015-05-06 15:01 - 2015-05-06 15:01 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Марто\Downloads\SpyHunter-Installer.exe
2015-05-06 14:50 - 2015-05-06 14:51 - 00027624 _____ () C:\Windows\system32\bddel.exe
2015-05-06 14:35 - 2015-05-06 14:35 - 00000000 ____D () C:\Users\Марто\AppData\Roaming\LavasoftStatistics
2015-05-06 14:35 - 2015-05-06 14:35 - 00000000 ____D () C:\Users\Марто\AppData\Local\Lavasoft
2015-05-06 14:34 - 2015-05-06 16:54 - 00002968 _____ () C:\Windows\SysWOW64\LavasoftTcpServiceOff.ini
2015-05-06 14:34 - 2015-05-06 16:54 - 00002968 _____ () C:\Windows\system32\LavasoftTcpServiceOff.ini
2015-05-06 14:32 - 2015-05-06 17:00 - 00002321 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
2015-05-06 14:32 - 2015-05-06 14:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2015-05-06 14:31 - 2015-05-06 14:31 - 00000000 ____D () C:\Program Files\Lavasoft
2015-05-06 14:28 - 2015-05-06 14:33 - 00000000 ____D () C:\Users\Марто\AppData\Roaming\Lavasoft
2015-05-06 14:27 - 2015-05-06 14:27 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft
2015-05-06 14:24 - 2015-05-06 14:33 - 00000000 ____D () C:\ProgramData\Lavasoft
2015-05-06 14:24 - 2015-05-06 14:24 - 02057008 _____ () C:\Users\Марто\Downloads\Adaware_Installer.exe
2015-05-06 14:09 - 2015-05-06 14:10 - 00000000 ____D () C:\Users\Марто\AppData\Local\AVG Web TuneUp
2015-05-06 14:09 - 2015-05-06 14:09 - 00000000 ____D () C:\ProgramData\AVG Security Toolbar
2015-05-06 14:08 - 2015-05-06 14:09 - 00000000 ____D () C:\ProgramData\AVG Web TuneUp
2015-05-06 14:08 - 2015-05-06 14:08 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2015-05-06 14:07 - 2015-05-06 14:08 - 00000000 ____D () C:\Program Files (x86)\AVG Web TuneUp
2015-05-06 13:54 - 2015-05-06 13:54 - 00001163 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-05-06 13:54 - 2015-05-06 13:54 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-05-06 13:54 - 2015-05-06 13:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-06 00:45 - 2015-05-06 00:45 - 00000965 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2015-05-06 00:45 - 2015-05-06 00:45 - 00000000 ____D () C:\Users\Марто\AppData\Roaming\AVG2015
2015-05-06 00:45 - 2015-05-06 00:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-05-06 00:43 - 2015-05-06 00:46 - 00000000 ____D () C:\ProgramData\AVG2015
2015-05-06 00:43 - 2015-05-06 00:43 - 00202704 _____ (Baidu) C:\Windows\SysWOW64\Drivers\bd0001.sys
2015-05-06 00:43 - 2015-05-06 00:43 - 00198600 _____ (Baidu) C:\Windows\SysWOW64\Drivers\bd0002.sys
2015-05-06 00:43 - 2015-05-06 00:43 - 00000000 ___HD () C:\$AVG
2015-05-06 00:40 - 2015-05-06 00:57 - 00000000 ____D () C:\Users\Марто\AppData\Local\Avg2015
2015-05-06 00:40 - 2015-05-06 00:40 - 04928040 _____ (AVG Technologies) C:\Users\Марто\Downloads\avg_free_stb_all_2015_ltst_180.exe
2015-05-06 00:37 - 2015-05-06 00:37 - 00000000 ____D () C:\ProgramData\AVG2013
2015-05-06 00:36 - 2015-05-06 00:43 - 00000000 ____D () C:\Program Files (x86)\AVG
2015-05-06 00:24 - 2015-05-06 13:15 - 00000000 ____D () C:\ProgramData\MFAData
2015-05-06 00:24 - 2015-05-06 00:24 - 00000000 ____D () C:\Users\Марто\AppData\Local\MFAData
2015-05-06 00:24 - 2015-05-06 00:24 - 00000000 ____D () C:\Users\Марто\AppData\Local\Avg2013
2015-05-06 00:21 - 2015-05-06 16:53 - 00000364 _____ () C:\Windows\Tasks\AmiUpdXp.job
2015-05-06 00:21 - 2015-05-06 00:21 - 00003404 _____ () C:\Windows\System32\Tasks\AmiUpdXp
2015-05-06 00:21 - 2015-05-06 00:21 - 00000000 ____D () C:\Users\Марто\AppData\Local\3846
2015-05-06 00:15 - 2015-05-06 01:17 - 00000000 ____D () C:\Program Files (x86)\Air Globe
2015-05-06 00:08 - 2015-05-06 00:08 - 00000000 ____D () C:\Users\Марто\AppData\Roaming\NVIDIA
2015-05-06 00:05 - 2015-05-06 16:53 - 00004810 _____ () C:\Windows\Tasks\24cfc6d4-20c3-4593-b665-b9f7dc3e8711-4.job
2015-05-06 00:05 - 2015-05-06 16:53 - 00004494 _____ () C:\Windows\Tasks\0d3206fc-a091-4f06-8cec-f0aaa09d72ba-4.job
2015-05-06 00:05 - 2015-05-06 16:53 - 00003468 _____ () C:\Windows\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job
2015-05-06 00:05 - 2015-05-06 00:07 - 00003036 _____ () C:\Windows\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-6.job
2015-05-06 00:05 - 2015-05-06 00:05 - 00007840 _____ () C:\Windows\System32\Tasks\24cfc6d4-20c3-4593-b665-b9f7dc3e8711-4
2015-05-06 00:05 - 2015-05-06 00:05 - 00007524 _____ () C:\Windows\System32\Tasks\0d3206fc-a091-4f06-8cec-f0aaa09d72ba-4
2015-05-06 00:05 - 2015-05-06 00:05 - 00006498 _____ () C:\Windows\System32\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7
2015-05-06 00:05 - 2015-05-06 00:05 - 00005168 _____ () C:\Windows\System32\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-6
2015-05-06 00:05 - 2015-05-06 00:05 - 00002084 _____ () C:\Windows\Tasks\24cfc6d4-20c3-4593-b665-b9f7dc3e8711-10_user.job
2015-05-06 00:05 - 2015-05-06 00:05 - 00001334 _____ () C:\Windows\Tasks\GNOK.job
2015-05-06 00:04 - 2015-05-06 16:53 - 00004488 _____ () C:\Windows\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-4.job
2015-05-06 00:04 - 2015-05-06 16:53 - 00000970 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-05-06 00:04 - 2015-05-06 12:09 - 00000974 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-05-06 00:04 - 2015-05-06 01:18 - 00000000 ____D () C:\Program Files (x86)\App Lid
2015-05-06 00:04 - 2015-05-06 00:04 - 00007518 _____ () C:\Windows\System32\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-4
2015-05-06 00:04 - 2015-05-06 00:04 - 00003972 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2015-05-06 00:04 - 2015-05-06 00:04 - 00003718 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2015-05-06 00:04 - 2015-05-06 00:04 - 00001686 _____ () C:\Windows\Tasks\BYAIAMUF.job
2015-05-06 00:03 - 2015-05-06 16:49 - 00000000 ____D () C:\ProgramData\Baidu
2015-05-06 00:03 - 2015-05-06 14:15 - 00000000 ____D () C:\Program Files (x86)\CinemaP-1.9cV16.03
2015-05-06 00:03 - 2015-05-06 00:43 - 00202704 _____ (Baidu) C:\Windows\system32\Drivers\bd0001.sys
2015-05-06 00:03 - 2015-05-06 00:10 - 00000000 ____D () C:\Users\Марто\AppData\Roaming\Baidu
2015-05-06 00:03 - 2015-05-06 00:03 - 00002106 _____ () C:\Windows\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-10_user.job
2015-05-06 00:03 - 2014-12-05 12:35 - 00202576 _____ (Baidu) C:\Windows\system32\Drivers\bd0001.sys_55723
2015-05-05 23:59 - 2015-05-06 14:59 - 00000000 ____D () C:\Program Files (x86)\baidu
2015-05-05 23:59 - 2015-05-05 23:59 - 00000000 ____D () C:\Users\Марто\AppData\Roaming\cpuminer
2015-05-05 23:58 - 2015-05-05 23:58 - 00000000 ____D () C:\Users\Марто\Desktop\Installer (Right Click and select extract)
2015-05-05 23:44 - 2015-05-06 16:51 - 00130733 _____ () C:\Windows\WindowsUpdate.log
2015-05-05 22:45 - 2015-05-06 16:54 - 00003248 _____ () C:\Windows\System32\Tasks\Trojan Killer
2015-05-05 22:44 - 2015-05-05 22:44 - 00000944 _____ () C:\Users\Public\Desktop\Trojan Killer.lnk
2015-05-05 22:44 - 2015-05-05 22:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GridinSoft Trojan Killer
2015-05-05 22:44 - 2015-05-05 22:44 - 00000000 ____D () C:\ProgramData\GridinSoft
2015-05-05 22:44 - 2015-05-05 22:44 - 00000000 ____D () C:\Program Files\GridinSoft Trojan Killer
2015-05-05 22:39 - 2015-05-05 22:43 - 68890912 _____ (GridinSoft LLC) C:\Users\Марто\Downloads\gtk-2.2.7.1-setup.exe
2015-05-05 13:39 - 2015-05-05 13:39 - 00000421 _____ () C:\Windows\system32\cpuminer-conf.json
2015-05-04 12:02 - 2015-04-25 12:04 - 00016731 _____ () C:\Users\Марто\Desktop\Vikings.S03E10.HDTV.XviD-AFG.srt
2015-05-04 11:58 - 2015-05-04 11:58 - 00000000 ____D () C:\Users\Марто\Downloads\10._subs.sab.bz_.(subs.sab.bz)
2015-05-04 11:57 - 2015-05-04 12:00 - 364788572 _____ () C:\Users\Марто\Desktop\Vikings.S03E10.HDTV.XviD-AFG.avi
2015-05-04 11:57 - 2015-05-04 11:57 - 00023763 _____ () C:\Users\Марто\Downloads\10._subs.sab.bz_.(subs.sab.bz).rar
2015-05-03 12:06 - 2015-05-03 12:08 - 00000000 ____D () C:\Users\Марто\Desktop\Arrow.S03E21.HDTV.XviD-AFG
2015-05-01 01:07 - 2015-05-01 14:43 - 00000000 ____D () C:\Users\Марто\Desktop\qwe
2015-04-29 17:46 - 2015-04-29 17:54 - 322577223 _____ () C:\Users\Марто\Downloads\JovaniJoPrimo2.0480x272_TEST_GOCLEVER64mb(1).rar
2015-04-24 11:37 - 2015-04-24 11:37 - 00000000 ____D () C:\Users\Марто\Desktop\Arrow.S03E20.(subs.sab.bz)
2015-04-24 11:36 - 2015-04-24 11:36 - 00038909 _____ () C:\Users\Марто\Desktop\Arrow.S03E20.(subs.sab.bz).rar
2015-04-23 17:57 - 2015-04-23 17:57 - 00017568 _____ (Windows ® Win 7 DDK provider) C:\Windows\system32\Drivers\gtkdrv.sys
2015-04-22 16:21 - 2015-05-06 01:17 - 00000000 ____D () C:\Users\Марто\Desktop\Стари данни Firefox
2015-04-22 16:01 - 2015-04-22 16:01 - 00000000 ____D () C:\Program Files (x86)\Linkey
2015-04-22 15:59 - 2015-04-22 15:59 - 02380114 _____ ( ) C:\Users\Марто\Downloads\MK.exe
2015-04-21 02:57 - 2015-05-06 14:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-20 11:08 - 2015-04-20 11:10 - 00000000 ____D () C:\Users\Марто\Desktop\Vikings.S03E08.HDTV.XviD-AFG
2015-04-20 10:59 - 2015-04-20 11:01 - 00000000 ____D () C:\Users\Марто\Desktop\Vikings.s03e09._subs.sab.bz_.(subs.sab.bz)
2015-04-20 10:58 - 2015-04-20 10:58 - 00041995 _____ () C:\Users\Марто\Desktop\Vikings.s03e09._subs.sab.bz_.(subs.sab.bz).rar
2015-04-17 14:03 - 2015-04-17 14:03 - 00030357 _____ () C:\Users\Марто\Downloads\taken.3.2014.extended.720p.brrip.xvid.ac3-rarbg.srt(subsunacs.net).zip
2015-04-17 13:59 - 2015-04-17 14:19 - 00000000 ____D () C:\Users\Марто\Desktop\Taken 3 EXTENDED 2014 BRRip XviD AC3-SANTi
2015-04-17 00:21 - 2015-04-16 22:56 - 00037465 _____ () C:\Users\Марто\Desktop\Arrow.S03E19.HDTV.XviD-AFG.srt
2015-04-17 00:20 - 2015-04-17 00:38 - 364526606 _____ () C:\Users\Марто\Desktop\Arrow.S03E19.HDTV.XviD-AFG.avi
2015-04-15 13:06 - 2015-04-15 13:06 - 00256992 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgldx64.sys
2015-04-15 10:14 - 2015-03-25 06:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-15 10:14 - 2015-03-25 06:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-15 10:14 - 2015-03-25 06:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-15 10:14 - 2015-03-25 06:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-15 10:14 - 2015-03-25 06:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-15 10:14 - 2015-03-25 06:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-15 10:14 - 2015-03-25 06:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-15 10:14 - 2015-03-25 06:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-15 10:14 - 2015-03-25 06:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-15 10:14 - 2015-03-25 06:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-15 10:14 - 2015-03-25 06:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-15 10:14 - 2015-03-25 06:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-15 10:14 - 2015-03-25 06:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-15 10:14 - 2015-03-25 06:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-15 10:14 - 2015-03-25 06:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-15 10:14 - 2015-03-25 06:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-15 10:14 - 2015-03-23 06:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-15 10:14 - 2015-03-23 06:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-15 10:14 - 2015-03-23 06:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-15 10:14 - 2015-03-23 06:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-15 10:14 - 2015-03-23 06:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-15 10:14 - 2015-03-23 06:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-15 10:14 - 2015-03-23 06:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-15 10:14 - 2015-03-23 06:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-15 10:14 - 2015-03-17 08:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-15 10:14 - 2015-03-17 08:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-15 10:14 - 2015-03-17 08:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-15 10:14 - 2015-03-17 08:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-15 10:14 - 2015-03-17 08:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-04-15 10:14 - 2015-03-17 08:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-15 10:14 - 2015-03-17 08:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-15 10:14 - 2015-03-17 08:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-15 10:14 - 2015-03-17 08:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-04-15 10:14 - 2015-03-17 08:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-15 10:14 - 2015-03-17 08:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-15 10:14 - 2015-03-17 08:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-15 10:14 - 2015-03-17 08:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-15 10:14 - 2015-03-17 08:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-15 10:14 - 2015-03-17 08:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-15 10:14 - 2015-03-17 08:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-15 10:14 - 2015-03-17 08:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-04-15 10:14 - 2015-03-17 08:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-15 10:14 - 2015-03-17 08:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-15 10:14 - 2015-03-17 08:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-15 10:14 - 2015-03-17 08:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-15 10:14 - 2015-03-17 08:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-15 10:14 - 2015-03-17 08:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-15 10:14 - 2015-03-17 08:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-15 10:14 - 2015-03-17 08:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-15 10:14 - 2015-03-17 08:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-15 10:14 - 2015-03-17 08:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-04-15 10:14 - 2015-03-17 08:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-15 10:14 - 2015-03-17 08:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-15 10:14 - 2015-03-17 08:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-15 10:14 - 2015-03-17 08:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-15 10:14 - 2015-03-17 08:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 08:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-04-15 10:14 - 2015-03-17 08:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-04-15 10:14 - 2015-03-17 07:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-15 10:14 - 2015-03-17 07:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-04-15 10:14 - 2015-03-17 07:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-04-15 10:14 - 2015-03-17 07:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-15 10:14 - 2015-03-17 07:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-04-15 10:14 - 2015-03-17 07:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-04-15 10:14 - 2015-03-17 07:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-04-15 10:14 - 2015-03-17 07:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-04-15 10:14 - 2015-03-17 07:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-04-15 10:14 - 2015-03-17 07:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-04-15 10:14 - 2015-03-17 07:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-04-15 10:14 - 2015-03-17 07:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-04-15 10:14 - 2015-03-17 07:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-04-15 10:14 - 2015-03-17 07:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-04-15 10:14 - 2015-03-17 07:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-04-15 10:14 - 2015-03-17 07:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-04-15 10:14 - 2015-03-17 07:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-04-15 10:14 - 2015-03-17 07:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-04-15 10:14 - 2015-03-17 07:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 07:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 06:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-04-15 10:14 - 2015-03-17 06:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-04-15 10:14 - 2015-03-17 06:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 06:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 06:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 10:14 - 2015-03-17 06:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-15 10:14 - 2015-03-10 06:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-15 10:14 - 2015-03-10 06:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-15 10:14 - 2015-03-10 06:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-15 10:14 - 2015-03-10 06:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-04-15 10:14 - 2015-03-05 08:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-15 10:14 - 2015-03-05 07:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-15 10:14 - 2015-02-25 06:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-15 10:13 - 2015-04-02 03:17 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-15 10:13 - 2015-04-02 02:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-04-15 10:13 - 2015-03-13 07:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-15 10:13 - 2015-03-13 07:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-15 10:13 - 2015-03-13 07:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-15 10:13 - 2015-03-13 07:09 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-15 10:13 - 2015-03-13 07:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-15 10:13 - 2015-03-13 07:08 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-15 10:13 - 2015-03-13 07:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-15 10:13 - 2015-03-13 07:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-15 10:13 - 2015-03-13 07:06 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-15 10:13 - 2015-03-13 07:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-15 10:13 - 2015-03-13 06:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-15 10:13 - 2015-03-13 06:55 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-15 10:13 - 2015-03-13 06:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-15 10:13 - 2015-03-13 06:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-15 10:13 - 2015-03-13 06:53 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-15 10:13 - 2015-03-13 06:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-15 10:13 - 2015-03-13 06:44 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-15 10:13 - 2015-03-13 06:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-15 10:13 - 2015-03-13 06:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-04-15 10:13 - 2015-03-13 06:40 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-15 10:13 - 2015-03-13 06:32 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-15 10:13 - 2015-03-13 06:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-15 10:13 - 2015-03-13 06:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-04-15 10:13 - 2015-03-13 06:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-04-15 10:13 - 2015-03-13 06:27 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-15 10:13 - 2015-03-13 06:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-04-15 10:13 - 2015-03-13 06:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-15 10:13 - 2015-03-13 06:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-04-15 10:13 - 2015-03-13 06:23 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-15 10:13 - 2015-03-13 06:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-15 10:13 - 2015-03-13 06:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-04-15 10:13 - 2015-03-13 06:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-04-15 10:13 - 2015-03-13 06:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-04-15 10:13 - 2015-03-13 06:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-04-15 10:13 - 2015-03-13 06:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-04-15 10:13 - 2015-03-13 06:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-15 10:13 - 2015-03-13 06:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-15 10:13 - 2015-03-13 06:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-04-15 10:13 - 2015-03-13 06:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-15 10:13 - 2015-03-13 06:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-15 10:13 - 2015-03-13 06:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-04-15 10:13 - 2015-03-13 06:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-15 10:13 - 2015-03-13 05:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-04-15 10:13 - 2015-03-13 05:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-04-15 10:13 - 2015-03-13 05:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-04-15 10:13 - 2015-03-13 05:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-15 10:13 - 2015-03-13 05:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-15 10:13 - 2015-03-13 05:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-15 10:13 - 2015-03-13 05:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-04-15 10:13 - 2015-03-13 05:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-04-15 10:13 - 2015-03-13 05:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-15 10:13 - 2015-03-13 05:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-15 10:13 - 2015-03-13 05:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-15 10:13 - 2015-03-13 05:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-15 10:13 - 2015-03-13 05:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-15 10:13 - 2015-03-13 05:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-15 10:12 - 2015-03-04 07:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-15 10:12 - 2015-03-04 07:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-15 10:12 - 2015-03-04 07:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-15 09:04 - 2015-04-15 09:04 - 18178736 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-04-14 00:47 - 2015-04-14 00:51 - 00000000 ____D () C:\Users\Марто\Desktop\Zatox - New World Order (PART 1)
2015-04-14 00:41 - 2015-04-14 00:46 - 119629086 _____ () C:\Users\Марто\Downloads\Zatox - New World Order (PART 2).zip
2015-04-14 00:35 - 2015-04-14 00:40 - 110364842 _____ () C:\Users\Марто\Downloads\Zatox - New World Order (PART 1).zip
2015-04-13 01:25 - 2015-04-13 01:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack x64
2015-04-13 01:25 - 2015-04-13 01:25 - 00000000 ____D () C:\Program Files\K-Lite Codec Pack x64
2015-04-13 01:25 - 2013-05-31 21:00 - 00127488 _____ () C:\Windows\system32\ff_vfw.dll
2015-04-13 01:25 - 2012-06-09 20:21 - 00206336 _____ () C:\Windows\system32\unrar64.dll
2015-04-13 01:25 - 2011-12-07 20:37 - 00148992 _____ ( ) C:\Windows\system32\lagarith.dll
2015-04-13 01:23 - 2015-04-13 01:23 - 12276962 _____ ( ) C:\Users\Марто\Downloads\K-Lite Codec Pack 64-bit 9.9.5 (kaldata.com).exe
2015-04-11 02:51 - 2015-04-11 13:20 - 00000000 ____D () C:\Users\Марто\Desktop\The Sum of All Fears (2002) [DVDRip]
2015-04-10 13:14 - 2015-04-10 13:14 - 00054241 _____ () C:\Users\Марто\Downloads\1789_Desktop.rar
2015-04-10 13:13 - 2015-04-10 13:27 - 00000000 ____D () C:\Users\Марто\Desktop\Fast.and.Furious.7.2015.HD-TS.XVID.AC3.HQ.Hive-CM8
2015-04-09 23:17 - 2015-04-09 23:17 - 00055490 _____ () C:\Users\Марто\Downloads\fifty.shades.of.grey.2015.uncut.web-dl(subsunacs.net).zip
2015-04-09 22:56 - 2015-04-09 23:19 - 00000000 ____D () C:\Users\Марто\Desktop\Fifty.Shades.of.Grey.2015.WEBRip.x264-WAR
2015-04-09 14:11 - 2015-04-09 14:11 - 00284128 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2015-04-07 18:26 - 2015-04-07 18:27 - 05344528 _____ (Piriform Ltd) C:\Users\Марто\Downloads\ccsetup504.exe
2015-04-07 12:39 - 2015-04-07 12:39 - 00291296 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgtdia.sys
2015-04-06 21:48 - 2015-04-30 10:50 - 00429392 _____ (Lavasoft Limited) C:\Windows\system32\LavasoftTcpService64.dll
2015-04-06 21:48 - 2015-04-30 10:50 - 00347976 _____ (Lavasoft Limited) C:\Windows\SysWOW64\LavasoftTcpService.dll
2015-04-06 21:47 - 2015-04-06 21:47 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-06 17:04 - 2014-12-12 16:19 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-06 16:53 - 2009-07-14 08:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-06 16:53 - 2009-07-14 07:45 - 00410928 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-06 16:52 - 2009-07-14 07:45 - 00025936 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-06 16:52 - 2009-07-14 07:45 - 00025936 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-06 16:20 - 2014-12-01 22:21 - 00000294 _____ () C:\Windows\Tasks\WSE_Vosteran.job
2015-05-06 14:51 - 2015-01-07 03:14 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2015-05-06 14:50 - 2015-01-07 03:14 - 00000000 ____D () C:\Program Files (x86)\XTab
2015-05-06 13:53 - 2014-12-01 21:47 - 00000000 ____D () C:\Users\Марто\AppData\Roaming\BitComet
2015-05-06 13:13 - 2014-12-07 00:21 - 00000000 ____D () C:\Users\Марто\Documents\FIFA 14
2015-05-06 10:30 - 2015-02-13 18:58 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{3F2EB254-872A-4A05-919F-2F87239B7650}
2015-05-06 01:20 - 2015-01-07 03:15 - 00000000 ____D () C:\Program Files (x86)\YouTube Accelerator
2015-05-06 01:15 - 2009-07-14 06:20 - 00000000 ____D () C:\Program Files\Common Files\System
2015-05-06 00:45 - 2014-12-06 17:04 - 00000000 ____D () C:\Users\Марто\AppData\Roaming\TuneUp Software
2015-05-06 00:30 - 2009-07-14 05:34 - 00000580 _____ () C:\Windows\win.ini
2015-05-06 00:23 - 2009-07-14 08:13 - 00782470 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-06 00:04 - 2014-12-01 22:03 - 00109704 _____ () C:\Users\Марто\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-06 00:03 - 2015-01-02 00:32 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2015-05-05 13:56 - 2014-12-01 21:41 - 00000000 ____D () C:\KMPlayer
2015-05-05 12:36 - 2014-12-01 20:04 - 00001629 _____ () C:\Users\Марто\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-05-05 07:07 - 2015-01-25 14:21 - 00000000 ____D () C:\Users\Марто\Desktop\blaa
2015-05-05 00:20 - 2014-12-01 23:21 - 00000178 _____ () C:\Users\Марто\AppData\Roaming\WB.CFG
2015-05-02 17:50 - 2015-02-27 15:40 - 00000000 ___HD () C:\_acestream_cache_
2015-05-02 17:50 - 2015-02-27 15:36 - 00000000 ____D () C:\Users\Марто\AppData\Roaming\.ACEStream
2015-04-30 19:04 - 2014-12-12 16:19 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-30 19:04 - 2014-12-01 20:55 - 00000000 ____D () C:\Users\Марто\AppData\Local\Adobe
2015-04-30 19:04 - 2014-12-01 20:47 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-30 19:04 - 2014-12-01 20:47 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-24 01:58 - 2014-12-03 11:21 - 00000000 ____D () C:\Users\Марто\AppData\Roaming\AIMP3
2015-04-22 16:00 - 2015-01-20 21:57 - 00001023 _____ () C:\Users\Марто\Desktop\Mp3 Knife.lnk
2015-04-22 16:00 - 2015-01-20 21:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3 Knife
2015-04-22 16:00 - 2015-01-20 21:57 - 00000000 ____D () C:\Program Files (x86)\Mp3 Knife
2015-04-18 16:19 - 2015-01-15 22:15 - 00000000 ____D () C:\Users\Марто\AppData\Roaming\Skype
2015-04-17 12:03 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\AppCompat
2015-04-16 16:31 - 2014-12-28 17:03 - 00000000 ____D () C:\Users\Марто\Documents\Bluetooth Exchange Folder
2015-04-16 09:24 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\rescache
2015-04-16 07:32 - 2014-12-10 10:14 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-16 07:32 - 2014-12-02 20:33 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-16 07:32 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\SysWOW64\bg-BG
2015-04-16 07:32 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\system32\bg-BG
2015-04-16 07:16 - 2014-12-01 22:21 - 00766780 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-04-16 07:14 - 2014-12-02 17:59 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-16 07:11 - 2014-12-01 20:03 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-07 18:27 - 2014-12-05 21:08 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-04-07 18:27 - 2014-12-05 21:08 - 00000000 ____D () C:\Program Files\CCleaner
2015-04-06 21:46 - 2014-12-06 16:59 - 00000000 ____D () C:\Users\Марто\AppData\Roaming\RHEng
2015-04-06 21:45 - 2014-12-01 21:41 - 00000606 _____ () C:\Users\Марто\Desktop\KMPlayer.lnk

==================== Files in the root of some directories =======

2014-09-01 11:18 - 2014-09-01 11:18 - 0001248 _____ () C:\Users\Марто\AppData\Roaming\AJGQBYXZ
2015-03-10 00:30 - 2015-03-10 00:30 - 0005487 _____ () C:\Users\Марто\AppData\Roaming\BYAIAMUF
2015-01-25 19:12 - 2015-01-25 19:12 - 0002086 _____ () C:\Users\Марто\AppData\Roaming\GNOK
2014-09-01 11:18 - 2014-09-01 11:18 - 0001248 _____ () C:\Users\Марто\AppData\Roaming\INRWMRI
2015-01-02 00:34 - 2015-01-02 00:34 - 2052584 _____ (Object Browser) C:\Users\Марто\AppData\Roaming\INRWMRI.exe
2014-09-01 11:18 - 2014-09-01 11:18 - 0002086 _____ () C:\Users\Марто\AppData\Roaming\OECCTZ
2014-09-01 11:18 - 2014-09-01 11:18 - 0001248 _____ () C:\Users\Марто\AppData\Roaming\ORMXFH
2015-01-02 00:33 - 2015-01-02 00:33 - 1992168 _____ (HQ-VideoV01.01) C:\Users\Марто\AppData\Roaming\ORMXFH.exe
2014-09-01 11:18 - 2014-09-01 11:18 - 0002086 _____ () C:\Users\Марто\AppData\Roaming\PS
2015-01-02 00:34 - 2015-01-02 00:34 - 1504232 _____ (HQ-VideoV01.01) C:\Users\Марто\AppData\Roaming\PS.exe
2014-09-01 11:18 - 2014-09-01 11:18 - 0002086 _____ () C:\Users\Марто\AppData\Roaming\STNCQGW
2015-01-02 00:34 - 2015-01-02 00:34 - 1551336 _____ (Object Browser) C:\Users\Марто\AppData\Roaming\STNCQGW.exe
2014-12-01 23:21 - 2015-05-05 00:20 - 0000178 _____ () C:\Users\Марто\AppData\Roaming\WB.CFG
2014-12-03 13:20 - 2014-12-17 01:20 - 0000001 _____ () C:\Users\Марто\AppData\Local\DSI.DAT

Some content of TEMP:
====================
C:\Users\Марто\AppData\Local\Temp\1430848920.exe
C:\Users\Марто\AppData\Local\Temp\appshat_generic.exe
C:\Users\Марто\AppData\Local\Temp\ClientToMobilePlatform.exe
C:\Users\Марто\AppData\Local\Temp\dotNetFx45_Full_setup.exe
C:\Users\Марто\AppData\Local\Temp\eb017779-890e-4b02-92e3-0c1de990e652.exe
C:\Users\Марто\AppData\Local\Temp\esg_cleanup.exe
C:\Users\Марто\AppData\Local\Temp\F0212_s_31184.exe
C:\Users\Марто\AppData\Local\Temp\G0417_s_71353.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-04 03:18

==================== End Of Log ============================

И прикачвам файла:

Предварителни благодарности ако някой реши да отдели от времето си за да ми помогне. Поздрави !

Addition.txt

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Здравейте!

Проблемите при вас са няколко, включително системата ви в действителност е инфектирана.

Стъпка 1

Имате инсталирана повече от една антивирусна програма, което пък води до влошаване на производителността на системата, нестабилност и значителен риск от инфектиране заради real-time модулите на антивирусните програми. Възможно е те да си попречат в предотвратяване на зловреден софтуер, отколкото да работят екипно.

В случая ви препоръчвам да задържите AVG 2015 и да деинсталирате Ad-Aware Antivirus, съответно и: Ad-Aware Web Companion, AdAwareInstaller, AdAwareUpdater и AntimalwareEngine.

Стъпка 2

Виждат се остатъци и от антивирусен софтуер BitDefender. Моля, изберете нужния продукт, за да изтеглите деинсталаторът му:

http://www.bitdefender.com/site/view/uninstall_consumer_paid.html

След това рестартирайте компютъра си.

Стъпка 3

След рестартирането, деинсталирайте и следните програми:

  • AVG Web TuneUp
  • CinemaP-1.9cV16.03
  • LavasoftTcpService
  • McAfee Security Scan Plus
  • Trojan Killer
  • Web Companion
  • WSE_Vosteran
Стъпка 4

Изтеглете fixlist.txt и го запазете в папката от която стартирахте FRST.exe.

Стартирайте FRST.exe и натиснете бутона Fix веднъж!

След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.

 

Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

Стъпка 5

Моля, изтеглете Malwarebytes Anti-Malware 2.0.3.1025 Final и я запазете на вашия десктоп.

  • Стартирайте файла mbam-setup-2.0.3.1025.exe и следвайте указанията за да инсталирате програмата.
  • След като инсталацията приключи се уверете че сте сложили отметка пред:
  • Launch Malwarebytes Anti-Malware
  • Отметката активираща пробния 14 дневен период също е маркиран по-подразбиране. Ако не желаете да тествате защитата в реално време на програмата през следващите 14 дни тогава премахнете отметката.
  • Натиснете бутона Finish.
  • Отидете до табът Settings > Detection and Protection > и под категорията Detection Options включете опцията "Scan for rootkits".
  • Отидете до табът Scan, сложете радио-бутона пред Threat Scan и след това натиснете бутона Scan Now >> . Ако е намерена актуализация тогава натиснете бутона Update Now.
  • Ще започне проверка за зловреден софтуер.
  • При някои инфекции можете да видите съобщението:
  • "Could not load DDA driver"
  • Натиснете "Yes" на това съобщение за да позволите драйвера да се зареди след рестарт.
  • Разрешете на компютъра да се рестартира и след това продължете с останалите инструкции.
  • След като проверката приключи натиснете бутона Apply Actions.
  • Изчакайте да се появи прозореца подканващ ви да рестартирате и след това натиснете бутона Yes.
  • След рестарта, когато се появи десктопа MBAM ще се зареди още веднъж.
  • Отидете то табът History > Application Logs.
  • Отворете рапорта с последната дата и час и натиснете бутона "Copy to Clipboard"
  • Сега вече поставете съдържанието на лог файла с клавишната комбинация Ctrl + V и го публикувайте в следващия си коментар.
В следващия си коментар в тази тема, включете следните лог файлове:
  • Лог файл от FRST
  • Лог файл от Malwarebytes' Anti-Malware

fixlist.txt

  • Харесва ми 3

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Здравейте отново, и благодаря че се отзовахте ! По точките, въпросния BitDefender не го намерих никъде, и съответно не можах да го деинсталирам.


Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 6.5.2015 г.
Scan Time: 20:26:00 ч.
Logfile:
Administrator: Yes

Version: 2.01.6.1022
Malware Database: v2015.03.09.05
Rootkit Database: v2015.04.21.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: ÐаÑÑо

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 347243
Time Elapsed: 11 min, 8 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 32
PUP.Optional.Linkey.A, HKLM\SOFTWARE\CLASSES\APPID\{6A7CD9EC-D8BD-4340-BCD0-77C09A282921}, Quarantined, [91e885befc8e62d4fc4c32edd82b817f],
PUP.Optional.Linkey.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{6A7CD9EC-D8BD-4340-BCD0-77C09A282921}, Quarantined, [91e885befc8e62d4fc4c32edd82b817f],
PUP.Optional.Linkey.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{6A7CD9EC-D8BD-4340-BCD0-77C09A282921}, Quarantined, [91e885befc8e62d4fc4c32edd82b817f],
PUP.Optional.SupTab.A, HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, Quarantined, [f3868bb85931b086046b1b05996a5ba5],
PUP.Optional.SupTab.A, HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, Quarantined, [f3868bb85931b086046b1b05996a5ba5],
PUP.Optional.Linkey.A, HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}, Quarantined, [3a3faa99632761d5c68a0b1436cdf50b],
PUP.Optional.Linkey.A, HKLM\SOFTWARE\CLASSES\Linkey.Linkey, Quarantined, [3a3faa99632761d5c68a0b1436cdf50b],
PUP.Optional.Linkey.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Linkey.Linkey, Quarantined, [3a3faa99632761d5c68a0b1436cdf50b],
PUP.Optional.Linkey.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Linkey.Linkey, Quarantined, [3a3faa99632761d5c68a0b1436cdf50b],
PUP.Optional.Linkey.A, HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}, Quarantined, [3a3faa99632761d5c68a0b1436cdf50b],
PUP.Optional.Linkey.A, HKLM\SOFTWARE\LINKEY, Quarantined, [8bee66ddf4961c1a11b1c2267e85748c],
PUP.Optional.AppLid.A, HKLM\SOFTWARE\WOW6432NODE\App Lid, Quarantined, [11688eb55139c96d976889308d76af51],
PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\CinemaP-1.9cV16.03, Quarantined, [d8a1c0836b1f48ee0b97ac19c73c05fb],
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\delta-homesSoftware, Quarantined, [b2c766dd72187cba3e64597209fae719],
PUP.Optional.IHProtect.A, HKLM\SOFTWARE\WOW6432NODE\IHProtect, Quarantined, [51283013c3c72016429b614f2ed5d42c],
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\mystartsearchSoftware, Quarantined, [b6c3bc878a00e74f2f813b7df40f2dd3],
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\SmdmF, Quarantined, [ee8b76cdeaa0ce6826278b3d17ec728e],
PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsMangerProtect, Quarantined, [c9b03b08fb8fa78f7560c466e32218e8],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE, Quarantined, [66130d363159cd6998de47871ae931cf],
PUP.Optional.Linkey.A, HKLM\SOFTWARE\WOW6432NODE\LINKEY, Quarantined, [3c3dc87bcebc092defd36a7e21e2ca36],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, Quarantined, [cbaed86b098166d0850f53da18edf30d],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, Quarantined, [027771d2c6c41d19e9ace6475aabe917],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, Quarantined, [e59461e26e1c5adc8c10e3e325de6799],
PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, Quarantined, [bbbea0a324664fe706d19922fb082ad6],
PUP.Optional.HQVideo.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\HQ-Video-Pro-2.1cV01.01, Quarantined, [bdbcf1527d0d67cfb08074bc48bd3bc5],
PUP.Optional.iWebar.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\iWebar, Quarantined, [b2c7b1925a30c4722b1725883ac9b050],
PUP.Optional.SavePass.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\SavePass 1.1, Quarantined, [21584bf81a70ff3713e6349422e122de],
PUP.Optional.SensePlus.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\SensePlus, Quarantined, [d0a987bc94f638fe478bdcda0af9b44c],
PUP.Optional.Cinema.A, HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\SOFTWARE\CinemaP-1.9cV16.03, Quarantined, [fd7c47fcaae03303a8fb10b525de3ac6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [a5d41d260f7bac8a2f0945da867f41bf],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\SOFTWARE\INSTALLCORE\1I1T1Q1S, Quarantined, [da9f172cf79372c40b2e7085bf44f709],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\SOFTWARE\INSTALLCORE, Quarantined, [99e03c07424886b05abcbc4f65a0aa56],

Registry Values: 6
PUP.Optional.Linkey.A, HKLM\SOFTWARE\LINKEY|ie_jsurl, http://app.linkeyproject.com/popup/IE/background.js, Quarantined, [8bee66ddf4961c1a11b1c2267e85748c]
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE|path, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, Quarantined, [66130d363159cd6998de47871ae931cf]
PUP.Optional.Linkey.A, HKLM\SOFTWARE\WOW6432NODE\LINKEY|ie_jsurl, http://app.linkeyproject.com/popup/IE/background.js, Quarantined, [3c3dc87bcebc092defd36a7e21e2ca36]
PUP.Optional.Vosteran, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY|AppPath, C:\Program Files (x86)\WSE_Vosteran\\, Quarantined, [453457ec1476280eaa90b085c93c5ba5]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, smt, Quarantined, [e59461e26e1c5adc8c10e3e325de6799]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1502131228-3914716253-1795875646-1000\SOFTWARE\INSTALLCORE|tb, 0X1L1C1C1J2Z, Quarantined, [99e03c07424886b05abcbc4f65a0aa56]

Registry Data: 0
(No malicious items detected)

Folders: 6
PUP.Optional.OpenCandy, C:\Users\ÐаÑÑо\AppData\Roaming\OpenCandy, Quarantined, [d2a7db68008a2b0bccb321489d662dd3],
PUP.Optional.OpenCandy, C:\Users\ÐаÑÑо\AppData\Roaming\OpenCandy\7C4D863994384179A5037B25B5529BA4, Quarantined, [d2a7db68008a2b0bccb321489d662dd3],
PUP.Optional.OpenCandy, C:\Users\ÐаÑÑо\AppData\Roaming\OpenCandy\815856B1F4A84C1C899898AFE0BC0302, Quarantined, [d2a7db68008a2b0bccb321489d662dd3],
PUP.Optional.SettingsManager.A, C:\Users\ÐаÑÑо\AppData\Roaming\FirefoxToolbar\Settings Manager, Quarantined, [0e6bc182aedcab8b2d12ec9df310e719],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate, Quarantined, [88f1083b22685ed8c5718e0f33d0ab55],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update, Quarantined, [88f1083b22685ed8c5718e0f33d0ab55],

Files: 3
PUP.Optional.InstallCore, C:\Users\ÐаÑÑо\AppData\Roaming\0F1L1I1P0H1L1E1E1F\AIMP Packages\uninstaller.exe, Quarantined, [651455ee4a40c1753e2a72c5ce347888],
PUP.Optional.Linkey.A, C:\Users\ÐаÑÑо\AppData\Roaming\RHEng\815856B1F4A84C1C899898AFE0BC0302\SettingsManagerSetup.exe, Quarantined, [4930162da5e589ada764743e51b0718f],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update\conf, Quarantined, [88f1083b22685ed8c5718e0f33d0ab55],

Physical Sectors: 0
(No malicious items detected)


(end)

Fixlog.txt

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Прикачвам ви трите текстови файла.

AdwCleanerS0.txt

ESETScan.txt

JRT.txt


Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Моля, направете ново сканиране с ESET Online Scanner, където освен всички поставени отметки, добавете и на Remove found threats. Рестартирайте компютъра си и ми кажете имаме ли прогрес. :)

  • Харесва ми 1

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Струва ми се на мен лично че всичко е наред, но все пак ако някой лог искате да видите за да потвърдите че съм чист вече, кажете да го кача.

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Можете да ми публикувате отново лог файла от ESET Online Scanner. И един последен съвет: проверете ръчно за обновления за AVG и направете пълно сканиране на системата. Пишете ми за резултатите от него.

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Регистрирайте се или влезете в профила си за да коментирате

Трябва да имате регистрация за да може да коментирате това

Регистрирайте се

Създайте нова регистрация в нашия форум. Лесно е!

Нова регистрация

Вход

Имате регистрация? Влезте от тук.

Вход

×

Информация

Поставихме бисквитки на устройството ви за най-добро потребителско изживяване. Можете да промените настройките си за бисквитки, или в противен случай приемаме, че сте съгласни с нашите условия за ползване.