Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.
Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.
Добави Kaldata.com в предпочитани източници в Google

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

Няколко вируса и промяна в Chrome

Гост
Гост
в Премахване на зловреден софтуер

Featured Replies

Добър вечер. Преди малко си изтеглих от интернет пиратскат версия на Bandicam (не е от голям български сайт, а от чужд торент сайт, на който уж се доверявах)
Знам какво ще кажат повечето от вас, че сам съм си виновен и тн. и сте прави, но наистина нямам възможност да си закупя програмата. Сега относно проблема:

Започнах да я инсталирам, спрях антивирусната си (Windows Defender) и докато се инсталираше още се случваха странни неща. В Task Bar-а ми изписа, че трябва да рестартирам, за да изключа Windows Firewall(не съм рестартирал и няма да изключвам компютъра си) и още други подобни съобщения свързани с сигурността. Когато инсталацията приключи Chrome се рестартира и ми бе променена страницата в нов раздел. На десктопа имам 3 нови икони на китайски/японски. Всичките тези програми работя и мога да ги видя в Taskbar-а. Когато се опитам да ги отворя или затворя се появяват само за 1 секунда и изчезват. От Task Managaer-а  като се опитам да избера End Task нищо не става. Ето снимки на въпросните икони.

http://imgur.com/Tryltt2

http://imgur.com/DlojcYF

Изпълних инструкциите в темата " Системата ми е инфектирана - Какво да правя сега?" Ето текста от LOG файловете

Ще съм ви много благодарен ако можете да ми помогнете :)

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by Rumbata (administrator) on RUMEN (27-03-2016 20:05:58)
Running from C:\Users\Rumbata\Desktop
Loaded Profiles: Rumbata (Available Profiles: Rumbata)
Platform: Windows 8.1 Pro (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(VIA Technologies, Inc.) C:\Program Files\VIA XHCI UASP Utility\usb3Monitor.exe
() C:\Program Files (x86)\NVIDIA Corporation\LED Visualizer\NvLedServiceHost.exe
(Spotify Ltd) C:\Users\Rumbata\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Gorenie) C:\Users\Rumbata\AppData\Local\Temp\dxdiag.exe
() C:\ProgramData\CloudPrinter\CloudPrinter.exe
(Microsoft Corporation) C:\Users\Rumbata\AppData\Local\Temp\237840968\ic-0.5ab50857551d4c.exe
(Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\QQPCRTP.exe
(Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\QQPCTray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\QQPCTray.exe
(Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\plugins\QMNetMon\QQPCNetFlow.exe
(Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\QQPCRealTimeSpeedup.exe
(Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\QMDeskTopGC.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\QMUsbGuard.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [4689072 2013-12-26] (VIA)
HKLM\...\Run: [VIAxHCUtl] => C:\Program Files\VIA XHCI UASP Utility\usb3Monitor
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2789248 2016-02-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508104 2015-10-30] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCEPServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe [1039248 2013-03-13] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2304688 2015-12-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [594992 2016-01-29] (Oracle Corporation)
HKLM-x32\...\Run: [chromebrowser] => "C:\Windows\chromebrowser.exe"
HKLM-x32\...\Run: [ic-0.5ab50857551d4c.exe -start] => C:\Users\Rumbata\AppData\Local\Temp\237840968\ic-0.5ab50857551d4c.exe [2289664 2016-03-27] (Microsoft Corporation) <===== ATTENTION
HKLM-x32\...\Run: [ QQPCTray] => C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\QQPCTray.exe [362304 2016-03-27] (Tencent)
HKU\S-1-5-21-1115206490-3046242634-1650409085-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4177784 2016-01-15] (Disc Soft Ltd)
HKU\S-1-5-21-1115206490-3046242634-1650409085-1001\...\Run: [NvLedServiceHost] => C:\Program Files (x86)\NVIDIA Corporation\LED Visualizer\NvLedServiceHost.exe [87160 2016-02-17] ()
HKU\S-1-5-21-1115206490-3046242634-1650409085-1001\...\Run: [Spotify Web Helper] => C:\Users\Rumbata\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1524336 2016-03-18] (Spotify Ltd)
HKU\S-1-5-21-1115206490-3046242634-1650409085-1001\...\MountPoints2: {6715ffbe-c4f6-11e5-825b-902b34dd74a4} - "D:\MAXON-Start.exe" 
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-11-14] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-11-14] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-11-14] ()
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\QMGCShellExt64.dll [2016-03-27] (Tencent)
Startup: C:\Users\Rumbata\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2016-01-27]
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8C563269-DA83-4E81-B457-C5BCBD68B46D}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.2345.com/?34838
HKU\S-1-5-21-1115206490-3046242634-1650409085-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHukF2bfbYiq88PjQBy7Ls0nrLBntlTfrlgidBQv2l5BgLmzYAyQyIhpvFWkkTiSichL4gtAS8AuBr4aCaPWhYyFH0bBKOZn-YOB9BD33-dEDRTkk2MJGpSsm3XPRvycmmiT80hJJz3qqtEMcgUBj7nDTdYi4r2d-RYTgfmdAg,,&q={searchTerms}
HKU\S-1-5-21-1115206490-3046242634-1650409085-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHukF2bfbYiq88PjQBy7Ls0nrLBntlTfrlgidBQv2l5BgLmzYAyQyIhpvFWkkTiSichL4gtAS8AuBr4aCaPWhYyFH0bBKOZn-YOB9BD33-dEDRTkk2MJGpSsm3XPRvycmmiT80hJJz3qqtEMcgUBj7nDTdYi4r2d-RYTgfmdAg,,&q={searchTerms}
HKU\S-1-5-21-1115206490-3046242634-1650409085-1001\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHukF2bfbYiq88PjQBy7Ls0nrLBntlTfrlgidBQv2l5BgLmzYAyQyIhpvFWkkTiSichL4gtAS8AuBr4aCaPWhYyFH0bBKOZn-YOB9BD33-dEDRTkk2MJGpSsm3XPRvycmmiT80hJJz3qqtEMcgUBj7nDTdYi4r2d-RYTgfmdAg,,&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL = 
SearchScopes: HKLM-x32 -> ielnksrch URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHukF2bfbYiq88PjQBy7Ls0nrLBntlTfrlgidBQv2l5BgLmzYAyQyIhpvFWkkTiSichL4gtAS8AuBr4aCaPWhYyFH0bBKOZn-YOB9BD33-dEDRTkk2MJGpSsm3XPRvycmmiT80hJJz3qqtEMcgUBj7nDTdYi4r2d-RYTgfmdAg,,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1115206490-3046242634-1650409085-1001 -> DefaultScope {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHukF2bfbYiq88PjQBy7Ls0nrLBntlTfrlgidBQv2l5BgLmzYAyQyIhpvFWkkTiSichL4gtAS8AuBr4aCaPWhYyFH0bBKOZn-YOB9BD33-dEDRTkk2MJGpSsm3XPRvycmmiT80hJJz3qqtEMcgUBj7nDTdYi4r2d-RYTgfmdAg,,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1115206490-3046242634-1650409085-1001 -> {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHukF2bfbYiq88PjQBy7Ls0nrLBntlTfrlgidBQv2l5BgLmzYAyQyIhpvFWkkTiSichL4gtAS8AuBr4aCaPWhYyFH0bBKOZn-YOB9BD33-dEDRTkk2MJGpSsm3XPRvycmmiT80hJJz3qqtEMcgUBj7nDTdYi4r2d-RYTgfmdAg,,&q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-05-21] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_73\bin\ssv.dll [2016-02-09] (Oracle Corporation)
BHO: 电脑管家网页防火墙 -> {7C260B4B-F7A0-40B5-B403-BEFCDC6A4C3B} -> C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\TSWebMon64.dat [2016-03-27] (Tencent)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2014-05-14] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-09] (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-05-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-02-09] (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2014-05-14] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-09] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-04-01] (Microsoft Corporation)

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-02-09] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-02-09] (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-12-15] (Adobe Systems)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-02-09] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-02-09] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-02-23] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-02-23] (NVIDIA Corporation)
FF Plugin-x32: @qq.com/QQPCMgr -> C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\npQMExtensionsMozilla.dll [2016-03-27] (Tencent Technology (Shenzhen) Company Limited)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-12-15] (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2014-01-21] (Microsoft Corporation)

Chrome: 
=======
CHR HomePage: Default -> hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHukF2bfbYiq88PjQBy7Ls0nrLBntlTfrlgidBQv2l5BgLmzYAyQyIhpvFWkkTiSichL4gtAS8AuBr4aEl9Je68zteLVO1kT_ZToTsP0YDwV3JsmLNSBKT0Yc_tb41x9085jQdwyHavzTMQNWW7gIqqTg4EnCVqElp9a6TKyVw,,
CHR StartupUrls: Default -> "hxxp://google.bg/"
CHR DefaultSearchURL: Default -> hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHukF2bfbYiq88PjQBy7Ls0nrLBntlTfrlgidBQv2l5BgLmzYAyQyIhpvFWkkTiSichL4gtAS8AuBr4aHo4U3hL7_-8l4jodwUGOmiurNF1OrL-1SJPYR7H2WeFgox7E6VRGxxGPoAlvQlAxqM_az9PPUSNS847kTRrmyW6CzA,,&q={searchTerms}
CHR DefaultSearchKeyword: Default -> feed.sonic-search.com
CHR DefaultSuggestURL: Default -> hxxps://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command={searchTerms}
CHR Profile: C:\Users\Rumbata\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Презентации) - C:\Users\Rumbata\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-01-28]
CHR Extension: (Google Документи) - C:\Users\Rumbata\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-28]
CHR Extension: (Google Диск) - C:\Users\Rumbata\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-28]
CHR Extension: (YouTube) - C:\Users\Rumbata\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-28]
CHR Extension: (Google Търсене) - C:\Users\Rumbata\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-28]
CHR Extension: (Електронни таблици от Google) - C:\Users\Rumbata\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-28]
CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\Rumbata\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-28]
CHR Extension: (Gmail) - C:\Users\Rumbata\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-28]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [683696 2015-11-16] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2020056 2016-02-09] (Adobe Systems, Incorporated)
R2 CloudPrinter; C:\ProgramData\\CloudPrinter\\CloudPrinter.exe [1029632 2016-03-27] () [File not signed]
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1369464 2016-01-15] (Disc Soft Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164672 2016-02-17] (NVIDIA Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1880960 2016-02-17] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6474112 2016-02-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2609024 2016-02-17] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-02-03] (Electronic Arts)
R2 QQPCRTP; C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\QQPCRTP.exe [313936 2016-03-27] (Tencent)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-12-11] (VIA Technologies, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-04-21] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-04-21] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2016-01-26] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2016-01-26] (Disc Soft Ltd)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28032 2016-02-17] (NVIDIA Corporation)
R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [46016 2016-02-24] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation)
R1 QMUdisk; C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\QMUdisk64.sys [184536 2016-03-02] (Tencent)
R2 QQSysMonX64; C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\QQSysMonX64.sys [152184 2016-03-27] (电脑管家)
R1 softaal; C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\softaal64.sys [44664 2016-03-27] (Tencent)
R3 TAOAccelerator; C:\Windows\system32\Drivers\TAOAccelerator64.sys [99480 2016-03-27] (Tencent)
R2 TAOKernelDriver; C:\Windows\system32\Drivers\TAOKernelEx64.sys [141944 2016-03-27] (Tencent Technology(Shenzhen) Company Limited)
R3 TFsFlt; C:\Windows\System32\Drivers\TFsFltX64.sys [97400 2016-03-27] (电脑管家)
S1 TSDefenseBt; C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\TSDefenseBT64.sys [28984 2016-03-27] (Tencent)
R2 tsnethlpx64; C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\TsNetHlpX64.sys [57976 2016-03-27] ()
R1 TSSysKit; C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\TSSysKit64.sys [96888 2016-03-27] (电脑管家)
R3 VUSB3HUB; C:\Windows\System32\drivers\ViaHub3.sys [227840 2013-08-12] (VIA Technologies, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44024 2015-04-21] (Microsoft Corporation)
R3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [264000 2015-04-21] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-04-21] (Microsoft Corporation)
R3 xhcdrv; C:\Windows\System32\drivers\xhcdrv.sys [295424 2013-08-12] (VIA Technologies, Inc.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-27 20:05 - 2016-03-27 20:06 - 00021506 _____ C:\Users\Rumbata\Desktop\FRST.txt
2016-03-27 20:05 - 2016-03-27 20:05 - 00000000 ____D C:\FRST
2016-03-27 20:05 - 2016-03-27 20:00 - 02374144 _____ (Farbar) C:\Users\Rumbata\Desktop\FRST64.exe
2016-03-27 19:42 - 2016-03-27 20:00 - 00000000 ____D C:\Users\Rumbata\AppData\Roaming\Tencent
2016-03-27 19:42 - 2016-03-27 19:48 - 00000000 ____D C:\ProgramData\Tencent
2016-03-27 19:42 - 2016-03-27 19:42 - 00141944 _____ (Tencent Technology(Shenzhen) Company Limited) C:\Windows\system32\Drivers\TAOKernelEx64.sys
2016-03-27 19:42 - 2016-03-27 19:42 - 00099480 _____ (Tencent) C:\Windows\system32\Drivers\TAOAccelerator64.sys
2016-03-27 19:42 - 2016-03-27 19:42 - 00097400 _____ (电脑管家) C:\Windows\system32\Drivers\TFsFltX64.sys
2016-03-27 19:42 - 2016-03-27 19:42 - 00005120 _____ C:\Users\Rumbata\AppData\Roaming\GiftBag.db
2016-03-27 19:42 - 2016-03-27 19:42 - 00002286 _____ C:\Users\Public\Desktop\软件管理.lnk
2016-03-27 19:42 - 2016-03-27 19:42 - 00002261 _____ C:\Users\Public\Desktop\电脑管家.lnk
2016-03-27 19:42 - 2016-03-27 19:42 - 00000000 ____D C:\Users\Rumbata\AppData\Roaming\Mozilla
2016-03-27 19:42 - 2016-03-27 19:42 - 00000000 ____D C:\Users\Rumbata\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件
2016-03-27 19:42 - 2016-03-27 19:42 - 00000000 ____D C:\Users\Public\Thunder Network
2016-03-27 19:42 - 2016-03-27 19:42 - 00000000 ____D C:\ProgramData\TXQMPC
2016-03-27 19:42 - 2016-03-27 19:42 - 00000000 ____D C:\ProgramData\Thunder Network
2016-03-27 19:42 - 2016-03-27 19:42 - 00000000 ____D C:\Program Files\Common Files\Tencent
2016-03-27 19:42 - 2016-03-27 19:42 - 00000000 ____D C:\Program Files (x86)\Tencent
2016-03-27 19:42 - 2016-03-27 19:42 - 00000000 _____ C:\Users\Rumbata\Desktop\$电脑管家-清理垃圾$.qmgc
2016-03-27 19:41 - 2016-03-27 19:41 - 06493696 _____ C:\Users\Rumbata\AppData\Roaming\agent.dat
2016-03-27 19:41 - 2016-03-27 19:41 - 02570371 _____ C:\Windows\chromebrowser.exe
2016-03-27 19:41 - 2016-03-27 19:41 - 01621131 _____ C:\Users\Rumbata\AppData\Roaming\Warm-Tom.tst
2016-03-27 19:41 - 2016-03-27 19:41 - 01029632 _____ C:\Users\Rumbata\AppData\Roaming\Warm-Tom.exe
2016-03-27 19:41 - 2016-03-27 19:41 - 01029632 _____ C:\Users\Rumbata\AppData\Roaming\Hot-Tone.exe
2016-03-27 19:41 - 2016-03-27 19:41 - 00848437 _____ C:\Users\Rumbata\AppData\Roaming\Duo-Lab.bin
2016-03-27 19:41 - 2016-03-27 19:41 - 00130240 _____ C:\Users\Rumbata\AppData\Roaming\inst.lat
2016-03-27 19:41 - 2016-03-27 19:41 - 00127488 _____ C:\Users\Rumbata\AppData\Roaming\Installer.dat
2016-03-27 19:41 - 2016-03-27 19:41 - 00126464 _____ C:\Users\Rumbata\AppData\Roaming\noah.dat
2016-03-27 19:41 - 2016-03-27 19:41 - 00126464 _____ C:\Users\Rumbata\AppData\Roaming\lobby.dat
2016-03-27 19:41 - 2016-03-27 19:41 - 00072706 _____ C:\Users\Rumbata\AppData\Roaming\Hot-Tone.tst
2016-03-27 19:41 - 2016-03-27 19:41 - 00065424 _____ C:\Users\Rumbata\AppData\Roaming\Config.xml
2016-03-27 19:41 - 2016-03-27 19:41 - 00054272 _____ C:\Users\Rumbata\AppData\Roaming\ApplicationHosting.dat
2016-03-27 19:41 - 2016-03-27 19:41 - 00018432 _____ C:\Users\Rumbata\AppData\Roaming\Main.dat
2016-03-27 19:41 - 2016-03-27 19:41 - 00015840 _____ C:\Users\Rumbata\AppData\Roaming\InstallationConfiguration.xml
2016-03-27 19:41 - 2016-03-27 19:41 - 00005568 _____ C:\Users\Rumbata\AppData\Roaming\md.xml
2016-03-27 19:41 - 2016-03-27 19:41 - 00002397 _____ C:\Windows\SysWOW64\findit.xml
2016-03-27 19:41 - 2016-03-27 19:41 - 00000000 ____D C:\ProgramData\Quoteexs
2016-03-27 19:41 - 2016-03-27 19:41 - 00000000 ____D C:\ProgramData\CloudPrinter
2016-03-24 00:41 - 2016-03-24 00:42 - 00000012 _____ C:\Users\Rumbata\Desktop\IMP S LMA CO.txt
2016-03-18 18:35 - 2016-03-23 17:46 - 00000080 _____ C:\Users\Rumbata\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2016-03-18 18:35 - 2016-03-18 18:35 - 00000000 ____D C:\Users\Rumbata\Documents\Rockstar Games
2016-03-18 18:35 - 2016-03-18 18:35 - 00000000 ____D C:\Users\Rumbata\AppData\Local\Rockstar Games
2016-03-18 18:35 - 2016-03-18 18:35 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2016-03-18 18:34 - 2016-03-18 18:34 - 00000000 ____D C:\Program Files\Rockstar Games
2016-03-17 20:23 - 2016-03-27 03:22 - 00000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2016-03-17 20:23 - 2016-03-17 20:23 - 00000000 ___HD C:\Windows\msdownld.tmp
2016-03-17 20:23 - 2016-03-17 20:23 - 00000000 ____D C:\Windows\SysWOW64\directx
2016-03-17 20:23 - 2016-03-17 20:23 - 00000000 ____D C:\Users\Rumbata\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server
2016-03-15 22:13 - 2016-03-15 22:13 - 00000132 _____ C:\Users\Rumbata\AppData\Roaming\Adobe PNG Format CC Prefs
2016-03-14 01:22 - 2016-03-14 01:22 - 00000000 ____D C:\Users\Rumbata\AppData\Roaming\�Adobe
2016-03-13 21:40 - 2016-03-13 21:41 - 00000000 ____D C:\Program Files (x86)\Red Giant Link
2016-03-13 21:06 - 2016-03-13 21:06 - 00000000 ____D C:\Users\Rumbata\AppData\Roaming\ֳAdobe
2016-03-13 18:19 - 2016-03-13 18:36 - 00000000 ____D C:\Users\Rumbata\AppData\Roaming\Audacity
2016-03-13 18:19 - 2016-03-13 18:19 - 00000000 ____D C:\Users\Rumbata\AppData\Local\Audacity
2016-03-13 18:17 - 2016-03-13 18:17 - 00001035 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2016-03-13 18:16 - 2016-03-13 18:19 - 00000000 ____D C:\Program Files (x86)\Audacity
2016-03-12 21:22 - 2016-03-12 21:22 - 00002818 _____ C:\Users\Rumbata\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\µTorrent.lnk
2016-03-12 00:16 - 2016-03-12 00:16 - 00000000 ____D C:\Users\Rumbata\AppData\Roaming\HD Tune Pro
2016-03-12 00:15 - 2016-03-12 00:18 - 00000000 ____D C:\Program Files (x86)\HD Tune Pro
2016-03-12 00:13 - 2016-03-12 00:13 - 00000000 ____D C:\Windows\XSxS
2016-03-11 22:43 - 2016-03-11 22:43 - 00000000 ____D C:\Users\Rumbata\Documents\Bandicam
2016-03-11 22:43 - 2016-03-11 22:43 - 00000000 ____D C:\Users\Rumbata\AppData\Roaming\BANDISOFT
2016-03-11 17:24 - 2016-03-27 18:55 - 00000000 ____D C:\Users\Rumbata\Documents\American Truck Simulator
2016-03-08 18:37 - 2016-03-08 18:37 - 00000000 ____D C:\Users\Rumbata\AppData\Local\UnrealEngine
2016-03-08 18:37 - 2016-03-08 18:37 - 00000000 ____D C:\Users\Rumbata\AppData\Local\MC
2016-03-08 18:37 - 2015-06-04 16:28 - 00961192 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-03-08 18:37 - 2015-06-04 16:28 - 00062304 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:28 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:28 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:28 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:28 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:28 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:28 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:28 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:28 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:28 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:28 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:28 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:28 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:28 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:28 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:26 - 00883712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-03-08 18:37 - 2015-06-04 16:26 - 00064352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:26 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:26 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:26 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:26 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:26 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:26 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:26 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:26 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:26 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:26 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:26 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:26 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:26 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-03-08 18:37 - 2015-06-04 16:26 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-03-07 20:44 - 2016-03-07 20:44 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-03-04 20:01 - 2016-03-04 20:27 - 00000000 ____D C:\Users\Rumbata\AppData\Roaming\foobar2000
2016-03-04 20:01 - 2016-03-04 20:01 - 00001129 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk
2016-03-04 20:01 - 2016-03-04 20:01 - 00000000 ____D C:\Program Files (x86)\foobar2000
2016-03-04 19:39 - 2016-03-04 19:39 - 00000000 ____D C:\Users\Rumbata\AppData\Local\JimsApps
2016-03-04 19:39 - 2016-03-04 19:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Snaz
2016-03-04 19:39 - 2016-03-04 19:39 - 00000000 ____D C:\Program Files (x86)\Snaz
2016-03-03 16:09 - 2016-03-03 16:09 - 00000000 ____D C:\Users\Rumbata\Documents\PVZ Garden Warfare
2016-03-03 12:08 - 2016-03-03 12:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PVZ Garden Warfare
2016-03-03 04:20 - 2016-02-23 23:39 - 00111672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-03-03 04:18 - 2016-02-24 02:58 - 42983992 _____ C:\Windows\system32\nvcompiler.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 37616184 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 31081920 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 24914880 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 21193032 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 20733832 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 17625136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 17218792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 16995384 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 16328088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 12381632 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-03-03 04:18 - 2016-02-24 02:58 - 03143616 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 02722872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 01922496 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436200.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 01571776 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436200.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 00950328 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 00880576 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 00879000 _____ C:\Windows\system32\nvmcumd.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 00747064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 00689600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 00502080 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 00468960 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 00425016 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 00423080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 00388560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 00377792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 00175368 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 00153392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 00151184 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 00126008 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcaparm.dll
2016-03-03 04:18 - 2016-02-24 02:58 - 00046016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvadarm.sys
2016-03-03 04:02 - 2016-03-03 04:02 - 00000098 _____ C:\Windows\MSUTIL.INI
2016-03-03 04:02 - 2016-03-03 04:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GenArts Sapphire AE
2016-03-03 04:02 - 2016-03-03 04:02 - 00000000 ____D C:\ProgramData\GenArts
2016-03-03 04:02 - 2016-03-03 04:02 - 00000000 ____D C:\Program Files (x86)\GenArts
2016-03-03 04:02 - 2010-02-04 08:58 - 00584376 _____ (Intel Corporation) C:\Windows\system32\libiomp5md.dll
2016-03-03 04:02 - 2010-02-04 08:40 - 00575672 _____ (Intel Corporation) C:\Windows\SysWOW64\libiomp5md.dll
2016-03-03 03:04 - 2016-03-03 03:04 - 00000000 ____D C:\Program Files (x86)\LooksBuilder
2016-03-03 03:04 - 2014-07-28 15:10 - 19939328 _____ (Red Giant LLC) C:\Windows\system32\MBLooksUI_x64.dll
2016-03-03 03:04 - 2014-03-06 22:30 - 04769280 _____ C:\Windows\system32\ColoristaRenderer_x64.dll
2016-03-03 03:04 - 2014-02-27 16:52 - 04228096 _____ C:\Windows\system32\CosmoRenderer_x64.dll
2016-03-03 02:49 - 2016-03-03 02:49 - 00000000 ____D C:\Users\Rumbata\AppData\Roaming\Red Giant
2016-03-03 02:49 - 2016-03-03 02:49 - 00000000 ____D C:\ProgramData\Red Giant
2016-03-03 02:48 - 2016-03-13 21:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Red Giant
2016-03-03 02:48 - 2016-03-13 21:40 - 00000000 ____D C:\Program Files (x86)\Red Giant
2016-03-03 02:38 - 2016-03-03 02:38 - 00000000 ____D C:\ProgramData\RedGiant
2016-03-01 18:11 - 2016-03-01 18:11 - 00000000 ____D C:\Users\Rumbata\Desktop\screenshots
2016-03-01 01:36 - 2016-03-01 01:36 - 10800128 _____ C:\Users\Rumbata\Desktop\Пролет.ppt
2016-02-29 07:12 - 2016-02-29 07:12 - 00000000 ____D C:\Users\Rumbata\Desktop\Alpha Squad
2016-02-28 16:41 - 2016-03-27 19:40 - 00000000 ____D C:\Users\Rumbata\AppData\Roaming\Spotify
2016-02-28 16:41 - 2016-03-27 19:40 - 00000000 ____D C:\Users\Rumbata\AppData\Local\Spotify
2016-02-28 16:41 - 2016-02-28 16:41 - 00001809 _____ C:\Users\Rumbata\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2016-02-26 11:07 - 2016-02-26 11:07 - 00000082 _____ C:\Users\Rumbata\Desktop\Paypal Donate Button.txt
2016-02-26 01:09 - 2016-02-26 01:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ut Video Codec Suite
2016-02-26 01:09 - 2016-02-26 01:09 - 00000000 ____D C:\Program Files\utvideo
2016-02-26 01:09 - 2016-01-10 00:34 - 00286720 _____ C:\Windows\system32\utv_core.dll
2016-02-26 01:09 - 2016-01-10 00:34 - 00223232 _____ (TODO: <会社名>) C:\Windows\system32\utv_dmo.dll
2016-02-26 01:09 - 2016-01-10 00:34 - 00180224 _____ (TODO: <会社名>) C:\Windows\SysWOW64\utv_dmo.dll
2016-02-26 01:09 - 2016-01-10 00:34 - 00111104 _____ C:\Windows\system32\utv_vcm.dll
2016-02-26 01:09 - 2016-01-10 00:34 - 00094720 _____ C:\Windows\SysWOW64\utv_vcm.dll
2016-02-26 01:09 - 2016-01-10 00:33 - 00211456 _____ C:\Windows\SysWOW64\utv_core.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-27 20:01 - 2016-01-26 16:27 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1115206490-3046242634-1650409085-1001
2016-03-27 19:50 - 2016-01-28 14:40 - 00001018 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-27 19:48 - 2016-01-27 02:09 - 00000000 ____D C:\Windows\Panther
2016-03-27 19:48 - 2016-01-26 21:39 - 00000000 ____D C:\Users\Rumbata\AppData\Local\CrashDumps
2016-03-27 19:48 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\Inf
2016-03-27 19:46 - 2016-01-26 20:10 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-27 19:45 - 2016-01-26 20:28 - 00000000 ____D C:\Users\Rumbata\AppData\Roaming\Skype
2016-03-27 19:44 - 2016-01-26 16:22 - 00000000 ____D C:\Users\Rumbata\AppData\Local\VirtualStore
2016-03-27 19:41 - 2016-01-28 14:40 - 00002219 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-27 19:41 - 2016-01-26 16:22 - 00001434 _____ C:\Users\Rumbata\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-03-27 19:40 - 2016-01-26 19:37 - 00000000 ____D C:\Users\Rumbata\AppData\Roaming\uTorrent
2016-03-27 19:35 - 2016-02-09 22:48 - 00001130 _____ C:\Users\Rumbata\Desktop\nativelog.txt
2016-03-27 16:54 - 2016-01-27 16:42 - 00004954 _____ C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for Rumen-Rumbata Rumen
2016-03-27 15:33 - 2016-02-09 22:44 - 00000000 ____D C:\Users\Rumbata\AppData\Roaming\.minecraft
2016-03-27 14:50 - 2016-01-28 14:40 - 00001014 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-27 14:44 - 2016-01-26 16:22 - 00000000 ____D C:\Users\Rumbata\AppData\Local\Packages
2016-03-27 12:33 - 2016-01-26 17:21 - 00003758 _____ C:\Windows\System32\Tasks\AutoKMS
2016-03-26 15:55 - 2016-01-28 01:33 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-03-25 16:45 - 2014-11-21 10:38 - 00863592 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-25 16:03 - 2013-08-22 18:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-25 16:03 - 2013-08-22 18:36 - 00000000 ____D C:\Windows\AppReadiness
2016-03-25 01:37 - 2016-01-26 16:58 - 00000000 ____D C:\ProgramData\NVIDIA
2016-03-25 01:37 - 2013-08-22 17:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-23 01:35 - 2016-01-26 20:28 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-03-23 01:35 - 2016-01-26 20:28 - 00000000 ____D C:\ProgramData\Skype
2016-03-18 18:27 - 2013-08-22 16:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-03-17 22:27 - 2016-01-26 19:55 - 00000000 ____D C:\ProgramData\Origin
2016-03-16 21:10 - 2016-02-09 21:39 - 00000000 ____D C:\Users\Rumbata\AppData\Roaming\OBS
2016-03-15 19:58 - 2016-02-09 21:41 - 00000000 ____D C:\Users\Rumbata\AppData\Roaming\obs-studio
2016-03-14 01:50 - 2016-01-26 20:39 - 00000000 ____D C:\Users\Rumbata\AppData\Roaming\HandBrake
2016-03-11 17:24 - 2016-01-28 13:10 - 00000000 ____D C:\Users\Rumbata\Desktop\Games
2016-03-11 17:05 - 2016-01-26 21:05 - 00000000 ____D C:\Users\Rumbata\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-03-08 18:37 - 2016-01-26 16:57 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-08 18:37 - 2013-08-22 18:20 - 00000000 ____D C:\Windows\CbsTemp
2016-03-08 02:43 - 2016-02-20 02:51 - 00000000 ____D C:\Users\Rumbata\AppData\Local\Battle.net
2016-03-08 00:42 - 2016-02-20 02:51 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-03-04 16:57 - 2016-01-26 17:00 - 00000000 ____D C:\Users\Rumbata\AppData\Local\NVIDIA Corporation
2016-03-03 16:09 - 2016-01-26 19:55 - 00000000 ____D C:\ProgramData\Electronic Arts
2016-03-03 11:33 - 2016-01-26 20:02 - 00000000 ____D C:\Program Files (x86)\Origin Games
2016-03-03 04:20 - 2016-01-26 16:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-03-03 04:20 - 2016-01-26 16:58 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-03-03 04:03 - 2016-01-27 15:47 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-03-03 03:04 - 2016-01-27 15:44 - 00000000 ____D C:\Program Files\Adobe
2016-02-26 13:07 - 2016-01-26 16:59 - 00000000 ____D C:\Users\Rumbata\AppData\Local\NVIDIA

==================== Files in the root of some directories =======

2016-03-15 22:13 - 2016-03-15 22:13 - 0000132 _____ () C:\Users\Rumbata\AppData\Roaming\Adobe PNG Format CC Prefs
2016-03-27 19:41 - 2016-03-27 19:41 - 6493696 _____ () C:\Users\Rumbata\AppData\Roaming\agent.dat
2016-03-27 19:41 - 2016-03-27 19:41 - 0054272 _____ () C:\Users\Rumbata\AppData\Roaming\ApplicationHosting.dat
2016-03-27 19:41 - 2016-03-27 19:41 - 0065424 _____ () C:\Users\Rumbata\AppData\Roaming\Config.xml
2016-03-27 19:41 - 2016-03-27 19:41 - 0848437 _____ () C:\Users\Rumbata\AppData\Roaming\Duo-Lab.bin
2016-03-27 19:42 - 2016-03-27 19:42 - 0005120 _____ () C:\Users\Rumbata\AppData\Roaming\GiftBag.db
2016-03-27 19:41 - 2016-03-27 19:41 - 1029632 _____ () C:\Users\Rumbata\AppData\Roaming\Hot-Tone.exe
2016-03-27 19:41 - 2016-03-27 19:41 - 0072706 _____ () C:\Users\Rumbata\AppData\Roaming\Hot-Tone.tst
2016-03-27 19:41 - 2016-03-27 19:41 - 0130240 _____ () C:\Users\Rumbata\AppData\Roaming\inst.lat
2016-03-27 19:41 - 2016-03-27 19:41 - 0015840 _____ () C:\Users\Rumbata\AppData\Roaming\InstallationConfiguration.xml
2016-03-27 19:41 - 2016-03-27 19:41 - 0127488 _____ () C:\Users\Rumbata\AppData\Roaming\Installer.dat
2016-03-27 19:41 - 2016-03-27 19:41 - 0126464 _____ () C:\Users\Rumbata\AppData\Roaming\lobby.dat
2016-03-27 19:41 - 2016-03-27 19:41 - 0018432 _____ () C:\Users\Rumbata\AppData\Roaming\Main.dat
2016-03-27 19:41 - 2016-03-27 19:41 - 0005568 _____ () C:\Users\Rumbata\AppData\Roaming\md.xml
2016-03-27 19:41 - 2016-03-27 19:41 - 0126464 _____ () C:\Users\Rumbata\AppData\Roaming\noah.dat
2016-02-11 18:13 - 2016-02-11 18:27 - 0005573 _____ () C:\Users\Rumbata\AppData\Roaming\SpeedRunnersLog.txt
2016-03-27 19:41 - 2016-03-27 19:41 - 0032038 _____ () C:\Users\Rumbata\AppData\Roaming\uninstall_temp.ico
2016-03-27 19:41 - 2016-03-27 19:41 - 1029632 _____ () C:\Users\Rumbata\AppData\Roaming\Warm-Tom.exe
2016-03-27 19:41 - 2016-03-27 19:41 - 1621131 _____ () C:\Users\Rumbata\AppData\Roaming\Warm-Tom.tst
2016-01-26 16:30 - 2016-01-26 16:30 - 0007605 _____ () C:\Users\Rumbata\AppData\Local\Resmon.ResmonCfg

Files to move or delete:
====================
C:\Users\Rumbata\AppData\Local\Temp\237840968\ic-0.5ab50857551d4c.exe


Some files in TEMP:
====================
C:\Users\Rumbata\AppData\Local\Temp\7za.exe
C:\Users\Rumbata\AppData\Local\Temp\bdcamsetup.exe
C:\Users\Rumbata\AppData\Local\Temp\bdcam_0.dll
C:\Users\Rumbata\AppData\Local\Temp\CodecFixDivx.exe
C:\Users\Rumbata\AppData\Local\Temp\dxdiag.exe
C:\Users\Rumbata\AppData\Local\Temp\mesox.exe
C:\Users\Rumbata\AppData\Local\Temp\qqpcmgr_v11.4.17347.218_45287_Silence.exe
C:\Users\Rumbata\AppData\Local\Temp\setdd.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-03-19 11:08

==================== End of FRST.txt ============================

 

 

Addition.txt

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Назад

Разглеждащи това в момента 0

  • Няма регистрирани потребители разглеждащи тази страница.

Дарение

  • Подкрепи съществуването на форума - направи дарение
    32%
    Дарени 315 € от нужните 1 000 €

Бюлетин

Получавайте известие, когато има важна промяна или новина свързана с форума.
Абонирайте се

Профил

Навигация

Търсене

Търсене

Конфигуриране на push известия в браузъра
Chrome (Android)
  1. Докоснете иконата на катинар до адресната лента.
  2. Докоснете Разрешения → Известия.
  3. Променете предпочитанията си.
Chrome (Desktop)
  1. Кликнете върху иконата на катинар в адресната лента.
  2. Изберете Настройки на сайта.
  3. Намерете Известия и коригирайте предпочитанията си.