Премини към съдържанието

Препоръчан отговор


От "facebook" профилът ми се изпращат някакви спамове до различни групи, в които съм член. Подозирам, че някой има достъп до компютърът ми. Не разполагам с компакт диск за моята операционна система. 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:10-04-2016
Ran by Dell (administrator) on DELL-PC (11-04-2016 00:22:32)
Running from C:\Users\Dell\Downloads
Loaded Profiles: Dell (Available Profiles: Dell)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Български (България)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
() C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagent.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.309\SSScheduler.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.8\ToolbarUpdater.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.8\loggingserver.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(BitTorrent Inc.) C:\Users\Dell\AppData\Roaming\uTorrent\uTorrent.exe
(BitTorrent Inc.) C:\Users\Dell\AppData\Roaming\uTorrent\updates\3.4.6_42094\utorrentie.exe
(BitTorrent Inc.) C:\Users\Dell\AppData\Roaming\uTorrent\updates\3.4.6_42094\utorrentie.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7202520 2013-08-20] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-07] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_PushButton] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-07] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2774256 2013-08-11] (Synaptics Incorporated)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-12-21] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-12-11] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642816 2013-05-05] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [3862440 2016-03-02] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Rapoo RP24G] => C:\Program Files (x86)\Rapoo\RP24G\RP24G_Config.exe [5406720 2011-12-16] ()
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [186640 2016-03-23] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2875464 2016-03-11] ()
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1085656 2015-12-14] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [132736 2013-07-02] (Qualcomm®Atheros®)
HKU\S-1-5-21-2308547226-3334124160-1489364595-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2308547226-3334124160-1489364595-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3074128 2016-03-10] (Valve Corporation)
HKU\S-1-5-21-2308547226-3334124160-1489364595-1000\...\MountPoints2: {5e1c1709-194e-11e4-bad9-645a040b83fb} - F:\setup.exe
HKU\S-1-5-21-2308547226-3334124160-1489364595-1000\...\MountPoints2: {ef599d46-e728-11e5-9db0-645a040b83fb} - G:\Startme.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2016-04-01]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.309\SSScheduler.exe (McAfee, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{98E73F0F-C4BA-47D9-9D50-3D650785BAD2}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{FB926C56-143E-4EAD-936C-6BA130BD7A31}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-2308547226-3334124160-1489364595-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com/?cid={7E91EB7A-8603-4131-B40B-B55B20C4EE76}&mid=fb231f57012347d2a43ab51342ef6a08-363461deb3941587adbb4fc5e15e3d1e66fae5e6&lang=en&ds=AVG&coid=avgtbavg&cmpid=1215av&pr=fr&d=2015-12-07 11:46:37&v=4.2.8.608&pid=wtu&sg=&sap=hp
SearchScopes: HKU\S-1-5-21-2308547226-3334124160-1489364595-1000 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={7E91EB7A-8603-4131-B40B-B55B20C4EE76}&mid=fb231f57012347d2a43ab51342ef6a08-363461deb3941587adbb4fc5e15e3d1e66fae5e6&lang=en&ds=AVG&coid=avgtbavg&cmpid=1215av&pr=fr&d=2015-12-07 11:46:37&v=4.2.8.608&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2308547226-3334124160-1489364595-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={7E91EB7A-8603-4131-B40B-B55B20C4EE76}&mid=fb231f57012347d2a43ab51342ef6a08-363461deb3941587adbb4fc5e15e3d1e66fae5e6&lang=en&ds=AVG&coid=avgtbavg&cmpid=1215av&pr=fr&d=2015-12-07 11:46:37&v=4.2.8.608&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll [2013-07-02] (Qualcomm®Atheros®)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.2.8.608\AVG Web TuneUp.dll [2016-03-11] (AVG)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\94r72bz3.default
FF NewTab: hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M43B4884A-419F-438E-BC13-4DBA87E5F97A&SearchSource=69&CUI=&SSPV=&Lay=1&UM=6&UP=SPDEEE94DB-E254-4D00-9AE4-D324E58E2912
FF DefaultSearchEngine: Trovi search
FF SelectedSearchEngine: Trovi search
FF Homepage: hxxps://mysearch.avg.com/?cid={7E91EB7A-8603-4131-B40B-B55B20C4EE76}&mid=fb231f57012347d2a43ab51342ef6a08-363461deb3941587adbb4fc5e15e3d1e66fae5e6&lang=en&ds=AVG&coid=avgtbavg&cmpid=1215av&pr=fr&d=2015-12-07 11:46:37&v=4.2.1.951&pid=wtu&sg=&sap=hp
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-04-08] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-08] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1214154.dll [2014-11-07] (Adobe Systems, Inc.)
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.2.8\\npsitesafety.dll [No File]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-11] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-11] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll [2013-11-26] (Nullsoft, Inc.)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2015-09-11] (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-10] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-02-27] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\94r72bz3.default\searchplugins\avg-secure-search.xml [2016-03-11]
FF SearchPlugin: C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\94r72bz3.default\searchplugins\trovi-search.xml [2014-07-19]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\911bg.xml [2014-07-30]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\diribg.xml [2014-07-30]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\pe-bg.xml [2014-07-30]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\portalbgdict.xml [2014-07-30]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2016-03-11]
FF Extension: Lite Advisor - C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\94r72bz3.default\extensions\{307ebfb1-9789-4dd7-90a3-4367a26d5688} [2014-10-12] [not signed]
FF Extension: Flashblock - C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\94r72bz3.default\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2014-11-16] [not signed]
FF Extension: AVG Web TuneUp - C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\94r72bz3.default\Extensions\avg@toolbar.xpi [2016-03-11]
FF Extension: Skype - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-01-06]

Chrome: 
=======
CHR Profile: C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Презентации) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-04]
CHR Extension: (Google Документи) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Google Диск) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Google Търсене) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Електронни таблици от Google) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-04]
CHR Extension: (Google Документи офлайн) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (FlashBlock) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\gofhjkjmkpinhpoiabjplobcaignabnl [2014-11-16]
CHR Extension: (Skype) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-12-19]
CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-05]
CHR Extension: (Gmail) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [312448 2013-07-02] (Windows (R) Win 7 DDK provider) [File not signed]
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] ()
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [604144 2016-03-02] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [3934184 2016-03-02] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1074448 2016-03-23] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [561104 2016-03-02] (AVG Technologies CZ, s.r.o.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-11] (Intel Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.309\McCHSvc.exe [293128 2016-03-11] (McAfee, Inc.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-06-19] (Realtek Semiconductor)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)
R2 vToolbarUpdater40.2.8; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.8\ToolbarUpdater.exe [1957448 2016-03-11] (AVG Secure Search)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [1216584 2016-03-11] ()

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [35936 2013-04-10] (Advanced Micro Devices, Inc.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [184240 2015-11-06] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [315312 2016-01-26] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272304 2016-01-26] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [284080 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [378288 2016-02-03] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [269232 2016-03-02] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [42416 2015-12-04] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [302000 2015-10-08] (AVG Technologies CZ, s.r.o.)
R0 Avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [23472 2016-01-08] (AVG Technologies CZ, s.r.o.)
R3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [77464 2013-07-02] (Qualcomm Atheros)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-08-03] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2013-12-11] (Intel Corporation)
R3 rp24gms; C:\Windows\System32\drivers\rp24gms.sys [18944 2011-08-03] ()
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-11] (Synaptics Incorporated)
S3 SPPD; \??\C:\Windows\system32\drivers\SPPD.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-11 00:22 - 2016-04-11 00:23 - 00022280 _____ C:\Users\Dell\Downloads\FRST.txt
2016-04-11 00:22 - 2016-04-11 00:22 - 02375168 _____ (Farbar) C:\Users\Dell\Downloads\FRST64.exe
2016-04-11 00:22 - 2016-04-11 00:22 - 00000000 ____D C:\FRST
2016-04-10 18:29 - 2016-04-10 18:29 - 01779348 _____ C:\Users\Dell\Downloads\Semeina-Pedagogika.pdf
2016-04-10 18:29 - 2016-04-10 18:29 - 01779348 _____ C:\Users\Dell\Downloads\Semeina-Pedagogika (1).pdf
2016-04-09 23:48 - 2016-04-09 23:48 - 00016143 _____ C:\Users\Dell\Downloads\How.High.2001.480p.HDRip.XviD.AC3-LxD.torrent
2016-04-09 16:52 - 2016-04-09 16:52 - 00000000 ____D C:\Users\Dell\AppData\LocalLow\uTorrent
2016-04-08 22:22 - 2016-04-08 22:22 - 05934784 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2016-04-08 12:23 - 2016-04-08 12:23 - 00016353 _____ C:\Users\Dell\Downloads\Vikings.S04E08.XviD-AFG.torrent
2016-04-05 22:28 - 2016-04-05 22:28 - 00000000 ___RD C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2016-04-04 17:59 - 2016-04-04 17:59 - 00011788 _____ C:\Users\Dell\Downloads\The.Shawshank.Redemption.1994.BRRip.x264.Hi10P-DiN.torrent
2016-04-03 17:31 - 2016-04-03 17:31 - 00016686 _____ C:\Users\Dell\Downloads\Star.Wars.Episode.VII.The.Force.Awakens.2015.576p.BRRip.x264.AC3-HUD.torrent
2016-04-01 22:31 - 2016-04-01 22:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2016-04-01 22:29 - 2016-04-01 22:29 - 00014427 _____ C:\Users\Dell\Downloads\Vikings.S04E07.HDTV.XviD-FUM.torrent
2016-03-30 18:39 - 2016-03-30 18:39 - 00029100 _____ C:\Users\Dell\Downloads\Undisputed 2 2006 DVDRip XviD-LPD.torrent
2016-03-28 19:14 - 2016-04-06 00:49 - 00004438 _____ C:\Users\Dell\AppData\Roaming\LTspiceIV.ini
2016-03-28 19:14 - 2015-11-09 04:39 - 00000000 ____D C:\Users\Dell\Desktop\PPE-master
2016-03-28 19:13 - 2016-03-28 19:13 - 00501680 _____ C:\Users\Dell\Desktop\PPE-master.zip
2016-03-28 18:45 - 2016-03-28 18:45 - 00001199 _____ C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Start Menu\LTspice IV.lnk
2016-03-28 18:45 - 2016-03-28 18:45 - 00001175 _____ C:\Users\Dell\Desktop\LTspice IV.lnk
2016-03-28 18:43 - 2016-03-28 18:43 - 00000000 ____D C:\Program Files (x86)\LTC
2016-03-28 18:42 - 2016-03-28 18:42 - 16932864 _____ (Linear Technology Corporation) C:\Users\Dell\Downloads\LTspiceIV.exe
2016-03-26 00:29 - 2016-03-26 00:29 - 00015719 _____ C:\Users\Dell\Downloads\300.Rise.of.an.Empire.2014.BDRip.x264.AC3-SiNDK8.torrent
2016-03-25 10:41 - 2016-03-25 10:41 - 00017511 _____ C:\Users\Dell\Downloads\Vikings.S04E06.XviD-AFG.torrent
2016-03-23 02:14 - 2016-03-23 02:14 - 00014321 _____ C:\Users\Dell\Downloads\Ice.Age.The.Great.Egg-Scapade.2016.HDRip.XviD.AC3-EVO.torrent
2016-03-21 19:06 - 2016-03-21 19:06 - 00168263 _____ C:\Users\Dell\Desktop\zadaniq_att_16.rar
2016-03-20 00:24 - 2016-03-20 00:24 - 00019338 _____ C:\Users\Dell\Downloads\Lucifer.S01E01.XviD-AFG.avi.torrent
2016-03-18 23:52 - 2016-03-18 23:52 - 00011448 _____ C:\Users\Dell\Downloads\Vikings.S04E05.HDTV.x264-FLEET.torrent
2016-03-18 00:16 - 2016-03-18 00:16 - 00031858 _____ C:\Users\Dell\Desktop\Burnt.(subs.sab.bz).rar
2016-03-18 00:15 - 2016-03-18 00:15 - 00012362 _____ C:\Users\Dell\Downloads\Burnt.2015.720p.BluRay.x264-WARHD.torrent
2016-03-16 13:19 - 2016-03-16 13:19 - 00031615 _____ C:\Users\Dell\Downloads\Mathworks_Matlab_R2013a-CYGiSO.torrent
2016-03-14 21:25 - 2016-03-14 21:25 - 00014798 _____ C:\Users\Dell\Downloads\Ip.Man.3.2015.BRRip.XviD.AC3-EVO.torrent
2016-03-14 18:57 - 2016-03-14 18:57 - 00015379 _____ C:\Users\Dell\Downloads\The.Hunger.Games.Mockingjay.Part.2.2015.DVDRip.XviD.AC3-EVO.torrent
2016-03-12 13:22 - 2016-03-12 13:22 - 00010460 _____ C:\Users\Dell\Downloads\MommyGotBoobs - Emma Butt (Hold The Phone, Not The Moan).torrent
2016-03-12 01:59 - 2016-03-12 01:59 - 00013242 _____ C:\Users\Dell\Downloads\Vikings.S04E04.XviD-AFG.torrent
2016-03-12 00:31 - 2016-03-12 00:31 - 00017478 _____ C:\Users\Dell\Downloads\Big.Daddy (1999).TV.RIP-BTS.avi.torrent
2016-03-12 00:29 - 2016-03-12 00:30 - 00024959 _____ C:\Users\Dell\Downloads\Big.Daddy.1999.1080p.Blu-ray.Remux.AVC.DTS-HD.MA.5.1.torrent

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-11 00:22 - 2014-07-19 11:42 - 00000000 ____D C:\Users\Dell\AppData\Roaming\uTorrent
2016-04-11 00:18 - 2014-07-19 10:36 - 00000000 ____D C:\Users\Dell\AppData\Roaming\Skype
2016-04-11 00:08 - 2014-11-16 14:45 - 00000998 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-04-10 23:40 - 2014-07-19 10:38 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-04-10 23:19 - 2014-07-19 11:42 - 00000000 ____D C:\ProgramData\MFAData
2016-04-10 22:40 - 2009-07-14 07:45 - 00026768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-04-10 22:40 - 2009-07-14 07:45 - 00026768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-04-10 22:38 - 2014-07-22 01:15 - 00000000 ____D C:\Users\Dell\AppData\Local\CrashDumps
2016-04-10 15:25 - 2014-11-16 14:45 - 00000994 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-04-08 22:22 - 2014-07-19 10:38 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-04-08 22:22 - 2014-07-19 10:38 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-04-08 22:22 - 2014-07-19 10:38 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-04-08 01:08 - 2015-12-05 13:59 - 00000862 _____ C:\Users\Public\Desktop\AVG.lnk
2016-04-08 01:08 - 2015-12-05 13:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-04-05 22:31 - 2009-07-14 08:13 - 00782470 _____ C:\Windows\system32\PerfStringBackup.INI
2016-04-05 22:31 - 2009-07-14 06:20 - 00000000 ____D C:\Windows\inf
2016-04-05 22:27 - 2015-02-02 00:32 - 00000000 ____D C:\Program Files (x86)\Steam
2016-04-05 22:26 - 2009-07-14 08:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-04-01 22:31 - 2015-11-20 22:01 - 00000000 ____D C:\Program Files\McAfee Security Scan
2016-04-01 22:31 - 2014-09-08 20:55 - 00001964 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2016-03-30 01:14 - 2014-07-19 10:35 - 00000000 ____D C:\ProgramData\Skype
2016-03-30 01:13 - 2014-10-07 22:35 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-03-30 00:10 - 2014-11-16 14:46 - 00002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-30 00:10 - 2014-11-16 14:46 - 00002181 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-03-27 04:00 - 2015-04-14 09:35 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-03-27 04:00 - 2015-04-14 09:35 - 00000000 ___SD C:\Windows\system32\GWX
2016-03-24 23:34 - 2014-07-22 01:16 - 00000000 ____D C:\ProgramData\AVG Security Toolbar

==================== Files in the root of some directories =======

2014-07-22 01:16 - 2014-09-04 18:00 - 0000000 _____ () C:\Program Files (x86)\Mozilla Firefoxwtu-secure-search.xml
2016-03-28 19:14 - 2016-04-06 00:49 - 0004438 _____ () C:\Users\Dell\AppData\Roaming\LTspiceIV.ini
2014-07-19 11:16 - 2014-07-19 11:16 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-11-16 20:27 - 2014-11-16 20:27 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

Some files in TEMP:
====================
C:\Users\Dell\AppData\Local\Temp\AcDeltree.exe
C:\Users\Dell\AppData\Local\Temp\avguirn_081637870724.exe
C:\Users\Dell\AppData\Local\Temp\avguirn_08360775621.exe
C:\Users\Dell\AppData\Local\Temp\avguirn_08655472463.exe
C:\Users\Dell\AppData\Local\Temp\avguirn_08887361003.exe
C:\Users\Dell\AppData\Local\Temp\FNP_ACT_InstallerCA.dll
C:\Users\Dell\AppData\Local\Temp\ose00000.exe
C:\Users\Dell\AppData\Local\Temp\ose00001.exe
C:\Users\Dell\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Dell\AppData\Local\Temp\_isE4C0.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-04-08 22:45

==================== End of FRST.txt ============================

Addition.txt

Редактирано от Radoslav Tsankov (преглед на промените)

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Регистрирайте се или влезете в профила си за да коментирате

Трябва да имате регистрация за да може да коментирате това

Регистрирайте се

Създайте нова регистрация в нашия форум. Лесно е!

Нова регистрация

Вход

Имате регистрация? Влезте от тук.

Вход

×

Информация

Поставихме бисквитки на устройството ви за най-добро потребителско изживяване. Можете да промените настройките си за бисквитки, или в противен случай приемаме, че сте съгласни с нашите условия за ползване.