Здравейте, системата ми е windows7ultimate sp1 64bit.Не разполагам с инсталационен диск.Когато стартирам браузър освен прозореца който отварям ми изскачат още няколко прозореца които нямат нищо общо с това което търся. MBAM  откри 232 заплахи които сложих под карантина, но мисля че трябва още доста неща да се пипнат

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:02-08-2015 01

Ran by User (administrator) on USER-PC (03-08-2015 15:27:06)

Running from C:\Users\User\Downloads

Loaded Profiles: User &  (Available Profiles: User)

Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Български (България)

Internet Explorer Version 10 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

() C:\Program Files\Hewlett-Packard\SimplePass\cachesrvr.exe

(Softex Inc.) C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe

(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

(Windows ® Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe

() C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe

(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 3\creator-ws.exe

(Reimage®) C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe

() C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\HPSmplPass.exe

() C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\AMDUSB3DeviceDetector\nusb3mon.exe

(Microinvest) C:\Program Files (x86)\Microinvest\Archi Pro\Microinvest Archi Pro.exe

(cv cryptovision GmbH) C:\Program Files (x86)\cv cryptovision\cv act sc interface\RegisterTool.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

() C:\Program Files (x86)\Winamp\winampa.exe

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Goobzo) C:\Program Files (x86)\YTDownloader\BrowserHelper.exe

 

 

==================== Registry (Whitelisted) ==================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [simplePass] => C:\Program Files\Hewlett-Packard\SimplePass\HPSmplPass.exe [2758200 2013-10-14] (Hewlett-Packard)

HKLM\...\Run: [OPBHOBroker] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [155704 2013-10-14] (Hewlett-Packard)

HKLM\...\Run: [OPBHOBrokerDesktop] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [155704 2013-10-14] (Hewlett-Packard)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7204568 2013-11-04] (Realtek Semiconductor)

HKLM\...\Run: [NUSB3MON] => c:\Program Files (x86)\ATI Technologies\AMDUSB3DeviceDetector\nusb3mon.exe [97280 2012-04-11] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [startCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-20] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31072 2008-10-25] (Microsoft Corporation)

HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [33792 2003-12-13] ()

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-15] (Avast Software s.r.o.)

HKLM-x32\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [1988528 2015-05-05] (YTDownloader)

HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)

HKLM\...\Policies\Explorer\Run: [btvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-10-29] (Qualcomm®Atheros®)

HKU\S-1-5-21-3433492852-2149483728-2624338229-1000\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [1988528 2015-05-05] (YTDownloader)

HKU\S-1-5-21-3433492852-2149483728-2624338229-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [1988528 2015-05-05] (YTDownloader)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Archi Pro.lnk [2015-02-19]

ShortcutTarget: Archi Pro.lnk -> C:\Program Files (x86)\Microinvest\Archi Pro\Microinvest Archi Pro.exe (Microinvest)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\cv act sc interface RegisterTool.lnk [2015-02-19]

ShortcutTarget: cv act sc interface RegisterTool.lnk -> C:\Program Files (x86)\cv cryptovision\cv act sc interface\RegisterTool.exe (cv cryptovision GmbH)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-05-03] (Avast Software s.r.o.)

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

HKU\S-1-5-21-3433492852-2149483728-2624338229-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs

HKU\S-1-5-21-3433492852-2149483728-2624338229-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp

HKU\S-1-5-21-3433492852-2149483728-2624338229-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs

HKU\S-1-5-21-3433492852-2149483728-2624338229-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp

BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> c:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-05-03] (Avast Software s.r.o.)

BHO-x32: PDF Architect 3 Helper -> {06E08260-0695-4EC1-A74B-1310D8899D93} -> C:\Program Files (x86)\PDF Architect 3\creator-ie-helper.dll [2015-04-24] (pdfforge GmbH)

BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> c:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)

BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12] (Microsoft Corporation)

BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-06-21] (Oracle Corporation)

BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-03] (Avast Software s.r.o.)

BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-06-21] (Oracle Corporation)

Toolbar: HKLM-x32 - PDF Architect 3 Toolbar - {2DFF3579-5AA7-45B9-9328-1D38EA230861} - C:\Program Files (x86)\PDF Architect 3\creator-ie-plugin.dll [2015-04-24] (pdfforge GmbH)

DPF: HKLM-x32 {97EA2A5E-A821-48A1-B0F9-DEDB5E0E62A2} https://inetdec.nra.bg/cabs/SignCOM.cab

DPF: HKLM-x32 {F4FD133B-5AB6-441F-BBFE-966AFF032D10} https://inetdec.nra.bg/dds/InetVAT5Frm.cab

Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - c:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)

Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - c:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)

Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - c:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)

Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - c:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)

Hosts: 127.0.0.1       host.datacom.bg

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{194DDA25-38E6-4169-8295-D9C1CF0B1882}: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{2BC51471-2706-48A3-974B-F5AA308CEB11}: [DhcpNameServer] 46.40.72.9 46.40.72.13

 

FireFox:

========

FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-06-21] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-06-21] (Oracle Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)

FF Plugin-x32: PDF Architect 3 -> C:\Program Files (x86)\PDF Architect 3\np-previewer.dll [2015-04-24] (pdfforge GmbH)

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-05-03]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\PDF Architect 3\resources\pdfarchitect3firefoxextension

FF Extension: PDF Architect 3 Creator - C:\Program Files (x86)\PDF Architect 3\resources\pdfarchitect3firefoxextension [2015-06-17]

 

Chrome: 

=======

CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-07]

CHR Extension: (Google Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-07]

CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-07]

CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-07]

CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-07]

CHR Extension: (Avast SafePrice) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-05-09]

CHR Extension: (Google Sheets) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-07]

CHR Extension: (Avast Online Security) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-05-04]

CHR Extension: (Streets of Gotham Full Thrott) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkaocckiaiabahaloidhlhjfjgdpinjp [2015-01-10]

CHR Extension: (Chrome Web Store Payments) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-07]

CHR Extension: (Bubble Shooter) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\omenbmgpkbkmloombbdefdpfcclpcjdk [2015-01-10]

CHR Extension: (Hooda Math Games) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\onajjkhnppgmnngnlmgflonkepeglekd [2015-01-09]

CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-07]

CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-05-03]

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-05-03]

 

==================== Services (Whitelisted) ========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 AMD FUEL Service; c:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-11-19] (Advanced Micro Devices, Inc.) [File not signed]

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [317568 2013-10-29] (Windows ® Win 7 DDK provider) [File not signed]

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-03] (Avast Software s.r.o.)

R2 BrsHelper; C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe [112560 2015-05-05] ()

R2 Cachedrv server; C:\Program Files\Hewlett-Packard\SimplePass\cachesrvr.exe [109568 2013-10-14] () [File not signed]

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)

R2 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [62218696 2012-06-29] (Microsoft Corporation)

R2 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [87552 2013-10-14] (Softex Inc.) [File not signed]

S3 PDF Architect 3; C:\Program Files (x86)\PDF Architect 3\ws.exe [2244312 2015-04-24] (pdfforge GmbH)

S3 PDF Architect 3 CrashHandler; C:\Program Files (x86)\PDF Architect 3\crash-handler-ws.exe [901336 2015-04-24] (pdfforge GmbH)

R2 PDF Architect 3 Creator; C:\Program Files (x86)\PDF Architect 3\creator-ws.exe [740568 2015-04-24] (pdfforge GmbH)

R2 ReimageRealTimeProtector; C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [7414256 2015-05-19] (Reimage®)

R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [289496 2013-10-16] (Realtek Semiconductor)

S4 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [441288 2012-06-29] (Microsoft Corporation)

R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-01] (TeamViewer GmbH)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-10-29] (Atheros) [File not signed]

 

===================== Drivers (Whitelisted) ==========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

S3 A38CCID; C:\Windows\System32\DRIVERS\a38ccid.sys [62976 2014-11-13] (Advanced Card Systems Ltd.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-05-03] ()

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-05-03] (Avast Software s.r.o.)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-05-03] (Avast Software s.r.o.)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-05-03] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-05-03] (Avast Software s.r.o.)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-27] (Avast Software s.r.o.)

S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-05-03] (Avast Software s.r.o.)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-05-03] ()

R3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [77464 2013-10-29] (Qualcomm Atheros)

S3 iscFlash; C:\Users\User\AppData\Local\Temp\7zS9917.tmp\iscflashx64.sys [66760 2014-07-23] (Insyde Software)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-08-03] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)

S4 RsFx0153; C:\Windows\System32\DRIVERS\RsFx0153.sys [321992 2012-06-29] (Microsoft Corporation)

R3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [290520 2013-08-26] (Realtek Semiconductor Corp.)

R2 sbmntr; C:\Program Files (x86)\YTDownloader\sbmntr.sys [58520 2015-05-05] (YTDownloader)

S3 cpuz134; \??\C:\Users\User\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]

 

==================== NetSvcs (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

 

==================== One Month Created files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2015-08-03 15:27 - 2015-08-03 15:28 - 00018716 _____ C:\Users\User\Downloads\FRST.txt

2015-08-03 15:26 - 2015-08-03 15:27 - 00000000 ____D C:\FRST

2015-08-03 15:18 - 2015-08-03 15:20 - 00000000 ____D C:\Users\User\AppData\Local\BrowserHelper

2015-08-03 15:05 - 2015-08-03 15:06 - 02169856 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe

2015-08-03 14:15 - 2015-08-03 14:15 - 00000000 ____D C:\Users\User\AppData\Local\Microsoft_Corporation

2015-08-03 14:05 - 2015-08-03 15:12 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-08-03 14:05 - 2015-08-03 14:05 - 00001106 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-08-03 14:05 - 2015-08-03 14:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-08-03 14:05 - 2015-08-03 14:05 - 00000000 ____D C:\ProgramData\Malwarebytes

2015-08-03 14:05 - 2015-08-03 14:05 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-08-03 14:05 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-08-03 14:05 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-08-03 14:05 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-08-03 14:02 - 2015-08-03 14:04 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\User\Downloads\mbam-setup-2.1.8.1057.exe

2015-08-01 17:47 - 2015-08-01 17:47 - 00569913 _____ C:\Users\User\Downloads\Setup (1).zip

2015-07-31 19:15 - 2015-07-31 19:15 - 00569921 _____ C:\Users\User\Downloads\Setup.zip

2015-07-30 07:51 - 2015-07-30 07:51 - 00821708 _____ C:\Users\User\Downloads\Непотвърдено 513339.crdownload

2015-07-28 20:54 - 2015-07-28 21:02 - 00007162 _____ C:\Users\User\Desktop\УДОСТОВЕРЕНИЕ.odt

2015-07-28 20:49 - 2015-07-28 20:49 - 00015131 _____ C:\Users\User\Downloads\Неозаглавено 1.odt

2015-07-28 14:07 - 2015-07-28 14:07 - 00037016 _____ C:\Users\User\Downloads\1413389215404 (1).unknown

2015-07-28 12:40 - 2015-07-28 12:40 - 00037016 _____ C:\Users\User\Downloads\1413389215404.unknown

2015-07-23 20:03 - 2015-07-23 20:03 - 00261889 _____ C:\Users\User\Desktop\4.xps

2015-07-23 19:57 - 2015-07-23 19:58 - 00191237 _____ C:\Users\User\Desktop\3.xps

2015-07-23 19:57 - 2015-07-23 19:57 - 00191352 _____ C:\Users\User\Desktop\2.xps

2015-07-23 19:56 - 2015-07-23 19:56 - 00191987 _____ C:\Users\User\Desktop\1.xps

2015-07-23 15:52 - 2015-07-23 15:52 - 00003058 _____ C:\Windows\System32\Tasks\Comp Beach

2015-07-23 15:52 - 2015-07-23 15:52 - 00000000 ____D C:\Users\User\AppData\Local\Comp Beach

2015-07-21 15:39 - 2015-07-21 15:39 - 00033390 _____ C:\Users\User\Downloads\dec (1).html

2015-07-20 23:11 - 2015-07-20 23:13 - 00000000 ____D C:\Рожен

2015-07-20 22:42 - 2015-07-20 22:42 - 00051577 _____ C:\Users\User\Downloads\Izlozhiteli-website-published-1407 (1).xlsx

2015-07-16 21:04 - 2015-07-16 21:06 - 64591987 _____ C:\Canon.rar

2015-07-16 21:03 - 2015-07-16 21:04 - 05242880 _____ C:\dekl.2012,2013,2014 IVAN BORISOV.rar

2015-07-15 06:58 - 2015-07-15 06:58 - 00051577 _____ C:\Users\User\Downloads\Izlozhiteli-website-published-1407.xlsx

2015-07-14 23:01 - 2015-07-14 23:01 - 00008384 _____ C:\Users\User\Downloads\ИНФОБИЗНЕС - 23_2005 - Защо и кога се ползва пълен данъчен кредит по ЗДДС (2).htm

2015-07-14 23:01 - 2015-07-14 23:01 - 00008384 _____ C:\Users\User\Downloads\ИНФОБИЗНЕС - 23_2005 - Защо и кога се ползва пълен данъчен кредит по ЗДДС (1).htm

2015-07-14 22:56 - 2015-07-14 22:56 - 00092203 _____ C:\Users\User\Downloads\Вътре-Общностно Придобиване (ВОП) на Стоки.htm

2015-07-14 22:56 - 2015-07-14 22:56 - 00020081 _____ C:\Users\User\Downloads\Вътреобщностни придобивания.htm

2015-07-14 22:56 - 2015-07-14 22:56 - 00008384 _____ C:\Users\User\Downloads\ИНФОБИЗНЕС - 23_2005 - Защо и кога се ползва пълен данъчен кредит по ЗДДС.htm

2015-07-14 14:03 - 2015-07-14 14:03 - 00018432 _____ C:\Users\User\Downloads\DEKLARACIA_69_2013 (1).XLS

2015-07-13 17:02 - 2015-07-13 17:02 - 00018432 _____ C:\Users\User\Downloads\DEKLARACIA_69_2013.XLS

2015-07-13 15:03 - 2015-07-13 15:03 - 00020992 _____ C:\Users\User\Downloads\DEKL70 (1).xls

2015-07-11 20:36 - 2015-07-14 22:03 - 00000418 _____ C:\Users\User\.swfinfo

2015-07-11 08:36 - 2015-07-11 08:36 - 00140288 _____ C:\Users\User\Downloads\3785.tmp

2015-07-08 11:44 - 2015-07-08 11:44 - 02444081 _____ C:\Users\User\Downloads\viber изображение1.rar

 

==================== One Month Modified files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2015-08-03 15:19 - 2015-01-07 16:23 - 00000998 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-08-03 15:16 - 2009-07-14 07:45 - 00026544 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-08-03 15:16 - 2009-07-14 07:45 - 00026544 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-08-03 15:12 - 2015-01-07 10:29 - 01136016 _____ C:\Windows\WindowsUpdate.log

2015-08-03 15:11 - 2015-01-07 17:23 - 00000000 ____D C:\Users\User\AppData\Local\CrashDumps

2015-08-03 15:09 - 2015-01-07 16:23 - 00000994 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-08-03 15:08 - 2015-05-03 23:36 - 00000000 ____D C:\Program Files\Google

2015-08-03 15:08 - 2015-01-07 16:23 - 00000000 ____D C:\Program Files (x86)\Google

2015-08-03 15:08 - 2010-11-21 06:47 - 00068672 _____ C:\Windows\PFRO.log

2015-08-03 15:08 - 2009-07-14 08:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-08-03 15:08 - 2009-07-14 07:51 - 00052520 _____ C:\Windows\setupact.log

2015-08-03 14:59 - 2015-05-06 21:52 - 00000000 ____D C:\Program Files (x86)\globalUpdate

2015-08-03 14:59 - 2015-05-06 21:52 - 00000000 ____D C:\Program Files (x86)\e4e825a4-dc6c-43b0-a842-fc8030070fb7

2015-08-03 14:59 - 2015-01-07 15:53 - 00000000 ____D C:\Program Files (x86)\AMD

2015-08-03 14:11 - 2015-01-15 09:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GenSoft

2015-08-03 14:08 - 2015-01-07 16:23 - 00000000 ____D C:\Users\User\AppData\Local\Google

2015-08-03 12:42 - 2015-05-03 23:36 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update

2015-08-01 17:48 - 2015-06-23 10:54 - 00013601 _____ C:\Windows\system32\ScanResults.xml

2015-08-01 17:41 - 2015-06-23 10:48 - 00000464 _____ C:\Windows\system32\ScannerSettings

2015-08-01 01:31 - 2015-01-07 16:38 - 00065536 _____ C:\Windows\system32\spu_storage.bin

2015-07-29 17:21 - 2015-01-07 16:24 - 00002181 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2015-07-29 17:18 - 2015-01-07 15:59 - 00000000 ____D C:\Users\User\Documents\Bluetooth Folder

2015-07-28 12:49 - 2015-03-03 07:24 - 00000000 ____D C:\ТАХАН

2015-07-23 20:01 - 2015-01-07 17:20 - 00000000 ____D C:\Users\User\AppData\Roaming\Skype

2015-07-23 19:59 - 2015-01-07 17:20 - 00000000 ___RD C:\Program Files (x86)\Skype

2015-07-23 19:59 - 2015-01-07 17:20 - 00000000 ____D C:\ProgramData\Skype

2015-07-23 19:51 - 2015-03-11 21:25 - 00000000 ____D C:\Users\User\Desktop\PLATEJNI

2015-07-23 13:05 - 2015-01-07 17:17 - 00000155 _____ C:\Windows\winamp.ini

2015-07-23 08:04 - 2015-02-19 14:23 - 00000000 ____D C:\Program Files (x86)\TeamViewer

2015-07-17 22:59 - 2015-01-07 17:19 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2015-07-17 22:55 - 2015-01-07 17:25 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task

2015-07-16 07:14 - 2015-01-07 16:23 - 00003994 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-07-16 07:14 - 2015-01-07 16:23 - 00003742 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-07-04 15:59 - 2015-06-21 09:30 - 00001945 _____ C:\Users\Public\Desktop\PC Scan & Repair by Reimage.lnk

 

==================== Files in the root of some directories =======

 

2015-04-19 15:20 - 2015-05-09 20:32 - 0000626 _____ () C:\Users\User\AppData\Roaming\olbO0YFDXL63ebswG

 

Some files in TEMP:

====================

C:\Users\User\AppData\Local\Temp\72893_updater.exe

C:\Users\User\AppData\Local\Temp\InitBDE.exe

C:\Users\User\AppData\Local\Temp\p7ndtrtg.dll

C:\Users\User\AppData\Local\Temp\r-lqina-.dll

C:\Users\User\AppData\Local\Temp\ReimagePackage.exe

C:\Users\User\AppData\Local\Temp\ReiSysUpdate.exe

C:\Users\User\AppData\Local\Temp\SkypeSetup.exe

C:\Users\User\AppData\Local\Temp\WindowsInstaller-KB893803-v2-x86.exe

C:\Users\User\AppData\Local\Temp\{FD83BBBF-350E-4E60-A869-87E190867F20}.exe

 

 

==================== Bamital & volsnap Check =================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

 

 

LastRegBack: 2015-07-03 12:48

 

==================== End of log ============================

Addition.txt

Здравейте!

Напълно съм съгласен, че има още работа по почистването на системата ви.

Стъпка 1

Моля, деинсталирайте следните програми:

Reimage Repair

Shopper-Pro

Стъпка 2

Изтеглете fixlist.txt и го запазете в папката от която стартирахте FRST.exe.

Стартирайте FRST.exe и натиснете бутона Fix веднъж!

След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.

 

Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

Стъпка 3

Моля, обновете Malwarebytes Anti-Malware, направете сканиране от типа Threat Scan и след това публикувайте резултата тук.

В следващия си коментар в тази тема, включете следните лог файлове:

• Лог файл от FRST Fix
• Лог файл от Malwarebytes Anti-Malware

fixlist.txt

Здравей Reimage Repair се дейнсталира , но Shopper-Pro ми даде че е деинсталирана  и трябва само да я премахне от списъка с програмите.

Mежду другото Farbar recoveri scan я стартирах от друго място и  после я преместих на десктопа.Писали сте  че трябва да запазя и стартирам fixlist.txt в папката от която съм стартирал  Farbar recoveri scan.Има ли проблем ако го запазя на desctop и да го стартирам от там.Не помня в коя директория беше точно.

Как да направя това сканиране тип Threat Scan ? Не намирам опции за това

Редактирано 3 август 201511 г. от boriv (преглед на промените)

Здравей Reimage Repair се дейнсталира , но Shopper-Pro ми даде че е деинсталирана  и трябва само да я премахне от списъка с програмите.

Още по-хубаво.

Mежду другото Farbar recoveri scan я стартирах от друго място и  после я преместих на десктопа.Писали сте  че трябва да запазя и стартирам fixlist.txt в папката от която съм стартирал  Farbar recoveri scan.Има ли проблем ако го запазя на desctop и да го стартирам от там.Не помня в коя директория беше точно.

Не, не е проблем, но нека инструментите, които ще се използват да бъдат запазвани на работния ви плот.

Как да направя това сканиране тип Threat Scan ? Не намирам опции за това

При стартиране на Malwarebytes Anti-Malware, кликнете на Scan и там можете да видите Threat Scan:

 Благодаря Ви за уточнението за МБАМ - моята версия е на бг и не можех да се ориентирам.Това са лог файловете:

 

Fixlog.txtprotection-log-2015-08-04.xml

 и докато сканира забелязах прозорец който беше минимизиран :

 

и не знам дали се вижда от лог файла на МБАМ но има много обекти под карантина

Редактирано 4 август 201511 г. от boriv (преглед на промените)

Това, което сте ми прикачили е Protection log, а аз бих искал да видя Scan log. Влезте тук:

И отворете последния лог файл, в който са тези обекти, открити при сканиране.

^{мисля че е това:}

log.txt

Редактирано 5 август 201511 г. от boriv (преглед на промените)

Сега изскачат рекламни прозирци brought by Comp Beach,не приема командите от мишката всеки път или го прави с голямо закъснение.Това са лог файловете от програмите :JRT.txtAdwCleanerS0.txtAdwCleanerR0.txtesetscan.txt

Редактирано 6 август 201511 г. от boriv (преглед на промените)

Моля, повторете сканирането с ESET Online Scanner като този път маркирате и Remove found threats. Рестартирайте и ми пишете дали има някаква промяна.

Мисля че е добре - засега не изкачат рекламните прозорци.Реагира на момента на кликането на мишката, само един прозорец показва :

Изтеглете SystemLook (32-bit) или SystemLook (64-bit) и запазете програмата на десктопа.

• Кликнете два пъти върху SystemLook.exe, за да стартирате програмата.
• Копирайте съдържанието от цитата по-долу в текстовото поле на програмата:

:filefind
*CompBeach*
*Comp Beach*

:folderfind
*CompBeach*
*Comp Beach*

:regfind
CompBeach
Comp Beach

• Кликнете на бутона Look, за да започне сканирането.
• Когато сканирането завърши ще се отвори Notepad с резултата от

  сканирането. После публикувайте лог файла в следващия си коментар.

SystemLook 30.07.11 by jpshortstuff

Log created at 14:54 on 09/08/2015 by User

Administrator - Elevation successful

 

========== filefind ==========

 

Searching for "*CompBeach*"

No files found.

 

Searching for "*Comp Beach*"

C:\Windows\System32\Tasks\Comp Beach --a---- 3058 bytes [12:52 23/07/2015] [12:52 23/07/2015] 45ECBDC2A4EB9F45A6C270F9FC8F0A86

 

========== folderfind ==========

 

Searching for "*CompBeach*"

No folders found.

 

Searching for "*Comp Beach*"

C:\Users\User\AppData\Local\Comp Beach d------ [12:52 23/07/2015]

 

========== regfind ==========

 

Searching for "CompBeach"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9563BC59-9556-4805-8CD4-886781779D8D}]

"UninstallString"="C:\Windows\system32\rundll32.exe "C:\Users\User\AppData\Local\Comp Beach\Bin\CompBeach.dll",#2"

[HKEY_USERS\S-1-5-21-3433492852-2149483728-2624338229-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9563BC59-9556-4805-8CD4-886781779D8D}]

"UninstallString"="C:\Windows\system32\rundll32.exe "C:\Users\User\AppData\Local\Comp Beach\Bin\CompBeach.dll",#2"

 

Searching for "Comp Beach"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9563BC59-9556-4805-8CD4-886781779D8D}]

"DisplayName"="Comp Beach"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9563BC59-9556-4805-8CD4-886781779D8D}]

"UninstallString"="C:\Windows\system32\rundll32.exe "C:\Users\User\AppData\Local\Comp Beach\Bin\CompBeach.dll",#2"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9563BC59-9556-4805-8CD4-886781779D8D}]

"Parameters"="AD5EA9150890C7BB07A7F5B6C05ACF39 f84fe5d056aa6f4d0e04a51afbbbb7f4 F336587AD129DA4EAD0433E061DA466C "Comp Beach" "Balance Plugin corp" "ubtsq" 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4E14F8D3-07F5-4697-B94C-80984688BA74}]

"Path"="\Comp Beach"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Comp Beach]

[HKEY_USERS\S-1-5-21-3433492852-2149483728-2624338229-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9563BC59-9556-4805-8CD4-886781779D8D}]

"DisplayName"="Comp Beach"

[HKEY_USERS\S-1-5-21-3433492852-2149483728-2624338229-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9563BC59-9556-4805-8CD4-886781779D8D}]

"UninstallString"="C:\Windows\system32\rundll32.exe "C:\Users\User\AppData\Local\Comp Beach\Bin\CompBeach.dll",#2"

[HKEY_USERS\S-1-5-21-3433492852-2149483728-2624338229-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9563BC59-9556-4805-8CD4-886781779D8D}]

"Parameters"="AD5EA9150890C7BB07A7F5B6C05ACF39 f84fe5d056aa6f4d0e04a51afbbbb7f4 F336587AD129DA4EAD0433E061DA466C "Comp Beach" "Balance Plugin corp" "ubtsq" 0"

 

-= EOF =-

Моля, отворете Notepad и копирайте следния скрипт:

 

Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9563BC59-9556-4805-8CD4-886781779D8D}]
[-HKEY_USERS\S-1-5-21-3433492852-2149483728-2624338229-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9563BC59-9556-4805-8CD4-886781779D8D}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4E14F8D3-07F5-4697-B94C-80984688BA74}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Comp Beach]
[-HKEY_USERS\S-1-5-21-3433492852-2149483728-2624338229-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9563BC59-9556-4805-8CD4-886781779D8D}]
[-HKEY_USERS\S-1-5-21-3433492852-2149483728-2624338229-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9563BC59-9556-4805-8CD4-886781779D8D}]
[-HKEY_USERS\S-1-5-21-3433492852-2149483728-2624338229-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9563BC59-9556-4805-8CD4-886781779D8D}]

Запишете файла като fix.reg и го запазете на вашия работен плот.

След като го запазите, би трябвало да изглежда по този начин:

Кликнете два пъти върху него и ще бъдете попитан дали искате да приложите промените в регистрите, изберете Yes, а след това OK.

Накрая, рестартирайте компютъра си и ми пишете как е положението към момента.

Здравей, компютъра се държи добре поне аз не забелязвам проблем.Само файловете които продължават да са под карантина в МБАМ

Това не е проблем, ако ви притесняват, можете да ги маркирате и да ги изтриете, но там са в сигурни ръце. Радвам се, че всичко е наред.

Изтеглете Delfix.exe и го стартирайте. Сложете отметка пред Remove disinfection tools (трябва да има такава по-подразбиране, но все пак да си кажа) => натиснете бутона Run. Инструмента ще се самоизтрие след като приключи своята задача!

 Много благодаря за отделеното време и знания.Изтрих файловете от карантината пуснах ново сканиране и не откри нищо, така че всичко е наред!

Още веднъж благодаря!

Моля!

Всичко добро!