Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.
Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.
Добави Kaldata.com в предпочитани източници в Google

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

Инфектиран Firefox

Djani Ivanov
в Премахване на зловреден софтуер

Featured Replies

Заразих си лаптопа с нещо досадно:сменя ми хоумпейджа на фирефокса,редиректва ме постоянно и бави системата.След няколко опита с разни clean tools се оправи за 2 дни и пак се появи.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 26-10-2016
Ran by 20160127 (administrator) on LENOVO-PC (27-10-2016 08:03:43)
Running from C:\Users\20160127\Desktop
Loaded Profiles: 20160127 (Available Profiles: 20160127)
Platform: Windows 8.1 Pro (Update) (X64) Language: Български (България)
Internet Explorer Version 11 (Default browser: "C:\Program Files (x86)\Firefox\Firefox.exe" "%1")
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Preventon Technologies Limited) C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVScanningService.exe
(Preventon Technologies Limited) C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVWatchService.exe
() C:\ProgramData\Logic Handler\set.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\InterHop\InterHop.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
() C:\ProgramData\NetworkPacketManitor\Nettrans.exe
() C:\ProgramData\Quoteex\Quoteex.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
() C:\Program Files (x86)\UvConverter\UvConverter.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
() C:\Users\20160127\AppData\Local\Temp\555.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(hxxp://www.amule.org/) C:\Program Files (x86)\amuleC\ed2k.exe
() C:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian.exe
(Mozilla Corporation) C:\Program Files (x86)\Firefox\Firefox.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian.exe


==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtsFT] => C:\Windows\RTFTrack.exe [5158144 2016-10-22] (Realtek semiconductor)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2016-01-27] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2016-01-27] (Lenovo(beijing) Limited)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-09-09] (Apple Inc.)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [899680 2013-02-04] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [25366584 2016-10-10] (Dropbox, Inc.)
HKLM-x32\...\Run: [VFPROguard] => C:\Program Files (x86)\Fighters\VIRUSfighter\vfprotray.exe [1361080 2016-10-21] (SPAMfighter)
HKLM-x32\...\Run: [app] => C:\Program Files (x86)\hhh\uc.exe [163934 2016-10-09] ()
HKLM-x32\...\Run: [555.exe] => C:\Users\20160127\AppData\Local\Temp\555.exe [296960 2016-10-22] () <===== ATTENTION
HKU\S-1-5-21-487210043-2901861752-200921591-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4177784 2016-01-15] (Disc Soft Ltd)
HKU\S-1-5-21-487210043-2901861752-200921591-1001\...\Run: [svchost0] => C:\Program Files (x86)\hhh\uc.exe [163934 2016-10-09] ()
HKU\S-1-5-21-487210043-2901861752-200921591-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-487210043-2901861752-200921591-1001\...\MountPoints2: {3b01a229-dfed-11e5-8264-18cf5e627299} - "G:\LaunchU3.exe" -a
HKU\S-1-5-21-487210043-2901861752-200921591-1001\...\MountPoints2: {782b8184-0ba9-11e6-8268-18cf5e627299} - "H:\SETUP.EXE"
HKU\S-1-5-21-487210043-2901861752-200921591-1001\...\MountPoints2: {782b819c-0ba9-11e6-8268-18cf5e627299} - "I:\SETUP.EXE"
HKU\S-1-5-21-487210043-2901861752-200921591-1001\...\MountPoints2: {a5700943-ca80-11e5-8257-18cf5e627299} - "G:\SETUP.EXE"
HKU\S-1-5-18\...\Run: [] => 0
AppInit_DLLs: C:\ProgramData\Quoteex\TrisJaytop.dll => C:\ProgramData\Quoteex\TrisJaytop.dll [358912 2016-10-22] ()
AppInit_DLLs-x32: C:\ProgramData\Quoteex\Strongit.dll => C:\ProgramData\Quoteex\Strongit.dll [248320 2016-10-22] ()
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [KzShlobj2] -> {AAA0C5B8-933F-4200-93AD-B143D7FFF9F3} => C:\Program Files (x86)\KuaiZip\X64\KZipShell.dll [2016-10-22] ()
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 109.104.192.1 109.104.192.2
Tcpip\..\Interfaces\{47C05590-E465-40E3-B9FA-1F5EB91DBB4A}: [NameServer] 108.61.178.207
Tcpip\..\Interfaces\{7EE12994-0258-4D3D-9F78-9551A7DC4D9B}: [NameServer] 108.61.178.207
Tcpip\..\Interfaces\{90F0113D-CC86-4838-8490-297B26FB98AE}: [NameServer] 108.61.178.207
Tcpip\..\Interfaces\{D3422984-39FF-4D4B-9DB1-243AA3CCF146}: [DhcpNameServer] 109.104.192.1 109.104.192.2

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mylucky123.com/?type=hp&ts=1477473910&z=7be40095896dafc65827605g9zdmem2z9m0c8t2e9m&from=interhop1024&uid=ST1000LM024XHN-M101MBB_S30YJ9HF508099
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mylucky123.com/?type=hp&ts=1477473910&z=7be40095896dafc65827605g9zdmem2z9m0c8t2e9m&from=interhop1024&uid=ST1000LM024XHN-M101MBB_S30YJ9HF508099
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mylucky123.com/search/?type=ds&ts=1477473910&z=7be40095896dafc65827605g9zdmem2z9m0c8t2e9m&from=interhop1024&uid=ST1000LM024XHN-M101MBB_S30YJ9HF508099&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mylucky123.com/search/?type=ds&ts=1477473910&z=7be40095896dafc65827605g9zdmem2z9m0c8t2e9m&from=interhop1024&uid=ST1000LM024XHN-M101MBB_S30YJ9HF508099&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mylucky123.com/?type=hp&ts=1477473910&z=7be40095896dafc65827605g9zdmem2z9m0c8t2e9m&from=interhop1024&uid=ST1000LM024XHN-M101MBB_S30YJ9HF508099
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mylucky123.com/?type=hp&ts=1477473910&z=7be40095896dafc65827605g9zdmem2z9m0c8t2e9m&from=interhop1024&uid=ST1000LM024XHN-M101MBB_S30YJ9HF508099
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1477473910&z=7be40095896dafc65827605g9zdmem2z9m0c8t2e9m&from=interhop1024&uid=ST1000LM024XHN-M101MBB_S30YJ9HF508099&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1477473910&z=7be40095896dafc65827605g9zdmem2z9m0c8t2e9m&from=interhop1024&uid=ST1000LM024XHN-M101MBB_S30YJ9HF508099&q={searchTerms}
HKU\S-1-5-21-487210043-2901861752-200921591-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHukF2bfbYiq88O7li655VWuP3MSoeIc5EbuLmwk1OXM2LKlM031aCL4-qDRuDGyMuh649-QALtubRz05f-EQ6VsAzxQcrpHWRcG6j6clSfOJHG2nnLcHUB7L2IO499eEhxra-jqPGyFrHm8ds8ZhATyir8e_B6uyfO_NHEmoA,,&q={searchTerms}
HKU\S-1-5-21-487210043-2901861752-200921591-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mylucky123.com/?type=hp&ts=1477473910&z=7be40095896dafc65827605g9zdmem2z9m0c8t2e9m&from=interhop1024&uid=ST1000LM024XHN-M101MBB_S30YJ9HF508099
HKU\S-1-5-21-487210043-2901861752-200921591-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHukF2bfbYiq88O7li655VWuP3MSoeIc5EbuLmwk1OXM2LKlM031aCL4-qDRuDGyMuh649-QALtubRz05f-EQ6VsAzxQcrpHWRcG6j6clSfOJHG2nnLcHUB7L2IO499eEhxra-jqPGyFrHm8ds8ZhATyir8e_B6uyfO_NHEmoA,,&q={searchTerms}
HKU\S-1-5-21-487210043-2901861752-200921591-1001\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHukF2bfbYiq88O7li655VWuP3MSoeIc5EbuLmwk1OXM2LKlM031aCL4-qDRuDGyMuh649-QALtubRz05f-EQ6VsAzxQcrpHWRcG6j6clSfOJHG2nnLcHUB7L2IO499eEhxra-jqPGyFrHm8ds8ZhATyir8e_B6uyfO_NHEmoA,,&q={searchTerms}
HKU\S-1-5-21-487210043-2901861752-200921591-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mylucky123.com/?type=hp&ts=1477473910&z=7be40095896dafc65827605g9zdmem2z9m0c8t2e9m&from=interhop1024&uid=ST1000LM024XHN-M101MBB_S30YJ9HF508099
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1477473910&z=7be40095896dafc65827605g9zdmem2z9m0c8t2e9m&from=interhop1024&uid=ST1000LM024XHN-M101MBB_S30YJ9HF508099&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1477473910&z=7be40095896dafc65827605g9zdmem2z9m0c8t2e9m&from=interhop1024&uid=ST1000LM024XHN-M101MBB_S30YJ9HF508099&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL =
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1477473910&z=7be40095896dafc65827605g9zdmem2z9m0c8t2e9m&from=interhop1024&uid=ST1000LM024XHN-M101MBB_S30YJ9HF508099&q={searchTerms}
SearchScopes: HKU\S-1-5-21-487210043-2901861752-200921591-1001 -> DefaultScope {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHukF2bfbYiq88O7li655VWuP3MSoeIc5EbuLmwk1OXM2LKlM031aCL4-qDRuDGyMuh649-QALtubRz05f-EQ6VsAzxQcrpHWRcG6j6clSfOJHG2nnLcHUB7L2IO499eEhxra-jqPGyFrHm8ds8ZhATyir8e_B6uyfO_NHEmoA,,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-487210043-2901861752-200921591-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1477473910&z=7be40095896dafc65827605g9zdmem2z9m0c8t2e9m&from=interhop1024&uid=ST1000LM024XHN-M101MBB_S30YJ9HF508099&q={searchTerms}
SearchScopes: HKU\S-1-5-21-487210043-2901861752-200921591-1001 -> {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHukF2bfbYiq88O7li655VWuP3MSoeIc5EbuLmwk1OXM2LKlM031aCL4-qDRuDGyMuh649-QALtubRz05f-EQ6VsAzxQcrpHWRcG6j6clSfOJHG2nnLcHUB7L2IO499eEhxra-jqPGyFrHm8ds8ZhATyir8e_B6uyfO_NHEmoA,,&q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-03-15] (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2016-04-12] (Microsoft Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-03-15] (Microsoft Corporation)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2016-04-12] (Microsoft Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2015-03-18] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: d1gs8x2s.default
FF ProfilePath: C:\Users\20160127\AppData\Roaming\Mozilla\Firefox\naweriweentcofise\Profiles\d1gs8x2s.default\Profiles\d1gs8x2s.default [not found]
FF ProfilePath: C:\Users\20160127\AppData\Roaming\Firefox\Firefox\naweriweentcofise\Profiles\d1gs8x2s.default\Profiles\d1gs8x2s.default [not found]
FF ProfilePath: C:\Users\20160127\AppData\Roaming\Mozilla\Firefox\Profiles\d1gs8x2s.default [2016-10-26]
FF Homepage: Mozilla\Firefox\Profiles\d1gs8x2s.default -> hxxp://www.mylucky123.com/?type=hp&ts=1477473910&z=7be40095896dafc65827605g9zdmem2z9m0c8t2e9m&from=interhop1024&uid=ST1000LM024XHN-M101MBB_S30YJ9HF508099
FF Extension: (Firefox Hotfix) - C:\Users\20160127\AppData\Roaming\Mozilla\Firefox\Profiles\d1gs8x2s.default\Extensions\[email protected] [2016-08-31]
FF SearchPlugin: C:\Users\20160127\AppData\Roaming\Mozilla\Firefox\Profiles\d1gs8x2s.default\searchplugins\1rft0ywe.xml [2016-10-22]
FF SearchPlugin: C:\Users\20160127\AppData\Roaming\Mozilla\Firefox\Profiles\d1gs8x2s.default\searchplugins\mylucky123.xml [2016-10-26]
FF ProfilePath: C:\Users\20160127\AppData\Roaming\Firefox\Firefox\Profiles\d1gs8x2s.default [2016-10-27]
FF Homepage: Firefox\Firefox\Profiles\d1gs8x2s.default -> hxxp://google.bg
FF Extension: (SimilarWeb) - C:\Users\20160127\AppData\Roaming\Firefox\Firefox\Profiles\d1gs8x2s.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi [2016-10-26] [not signed]
FF Extension: (FF Adr) - C:\Users\20160127\AppData\Roaming\Firefox\Firefox\Profiles\d1gs8x2s.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi [2016-10-26] [not signed]
FF Extension: (Firefox Hotfix) - C:\Users\20160127\AppData\Roaming\Firefox\Firefox\Profiles\d1gs8x2s.default\Extensions\[email protected] [2016-08-31]
FF Extension: (English (US) Language Pack) - C:\Users\20160127\AppData\Roaming\Firefox\Firefox\Profiles\d1gs8x2s.default\Extensions\[email protected] [2016-10-26] [not signed]
FF SearchPlugin: C:\Users\20160127\AppData\Roaming\Firefox\Firefox\Profiles\d1gs8x2s.default\searchplugins\1rft0ywe.xml [2016-10-22]
FF SearchPlugin: C:\Users\20160127\AppData\Roaming\Firefox\Firefox\Profiles\d1gs8x2s.default\searchplugins\mylucky123.xml [2016-10-26]
FF SearchPlugin: C:\Users\20160127\AppData\Roaming\Firefox\Firefox\Profiles\d1gs8x2s.default\searchplugins\searchinme.xml [2016-10-26]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_205.dll [2016-10-26] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_205.dll [2016-10-26] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-05-15] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-05-15] (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-18] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-11-18] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-08-05] (Apple Inc.)
R2 Archer; C:\Program Files (x86)\WinArcher\Archer.dll [337920 2016-10-26] () [File not signed]
R2 AV Engine Scanning Service; C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVScanningService.exe [2009912 2016-02-18] (Preventon Technologies Limited)
R2 AV Watch Service; C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVWatchService.exe [400528 2016-02-18] (Preventon Technologies Limited)
R2 backlh; C:\ProgramData\Logic Handler\set.exe [3786752 2016-10-22] () [File not signed]
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-06-06] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-06-06] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [38000 2016-10-10] (Dropbox, Inc.)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1369464 2016-01-15] (Disc Soft Ltd)
R2 ed2kidle; C:\Program Files (x86)\amuleC\ed2k.exe [237568 2016-10-08] (hxxp://www.amule.org/) [File not signed]
R2 FirefoxU; C:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe [523952 2016-10-24] ()
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [355232 2015-08-09] (Intel Corporation)
R3 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 InterHop; C:\Program Files (x86)\InterHop\InterHop.exe [160256 2016-10-24] () [File not signed]
R2 iSafeService; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [131024 2016-08-19] (Elex do Brasil Participações Ltda)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-15] (Intel Corporation)
R2 Kuaizip Update Checker; C:\Program Files (x86)\KuaiZip\X86\kuaizipUpdateChecker.dll [216704 2016-10-22] ()
R2 Nettrans; C:\ProgramData\NetworkPacketManitor\Nettrans.exe [57856 2016-09-28] () [File not signed]
R2 Quoteex; C:\ProgramData\\Quoteex\\Quoteex.exe [710656 2016-10-22] () [File not signed]
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
R2 UvConverter; C:\Program Files (x86)\UvConverter\UvConverter.exe [441344 2016-10-24] () [File not signed]
S3 vmicvss; C:\Windows\System32\ICSvc.dll [524800 2014-10-29] (Microsoft Corporation)
S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [56040 2015-11-19] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 WinSAPSvc; C:\ProgramData\WinSAPSvc\WinSAP.dll [218624 2016-10-26] () [File not signed]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2014-07-21] (Advanced Micro Devices, Inc.)
R3 AVFSFilter; C:\Windows\system32\DRIVERS\avfsfilter.sys [13720 2016-02-18] ()
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2016-02-05] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2016-02-05] (Disc Soft Ltd)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-10-22] (REALiX(tm))
R1 iSafeKrnl; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [262344 2016-05-23] (Elex do Brasil Participações Ltda)
S3 iSafeKrnlBoot; C:\Windows\System32\DRIVERS\iSafeKrnlBoot.sys [55056 2016-05-23] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlKit; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [110112 2016-05-23] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlMon; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys [52440 2016-05-23] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlR3; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [103904 2016-05-23] (Elex do Brasil Participações Ltda)
R1 iSafeNetFilter; C:\Windows\System32\DRIVERS\iSafeNetFilter.sys [52392 2016-05-19] (Elex do Brasil Participações Ltda)
R2 KuaiZipDrive2; C:\Windows\system32\drivers\KuaiZipDrive2.sys [93072 2016-10-22] (WinMount International Inc) <==== ATTENTION
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [416472 2016-10-22] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [3127552 2016-10-22] (Realtek Semiconductor Corp.)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)
S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33960 2016-10-22] (Synaptics Incorporated)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 dbx; system32\DRIVERS\dbx.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-10-27 08:03 - 2016-10-27 08:04 - 00030311 _____ C:\Users\20160127\Desktop\FRST.txt
2016-10-27 08:03 - 2016-10-27 08:03 - 02407936 _____ (Farbar) C:\Users\20160127\Desktop\FRST64.exe
2016-10-27 08:03 - 2016-10-27 08:03 - 00000000 ____D C:\FRST
2016-10-26 17:55 - 2016-10-26 17:55 - 00000000 ____D C:\Users\20160127\AppData\Roaming\eCyber
2016-10-26 17:49 - 2016-10-26 17:49 - 00001855 _____ C:\ProgramData\Microsoft\Windows\Start Menu\YAC.lnk
2016-10-26 17:49 - 2016-10-26 17:49 - 00001849 _____ C:\Users\Public\Desktop\YAC.lnk
2016-10-26 17:49 - 2016-10-26 17:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC
2016-10-26 17:31 - 2016-10-26 17:31 - 00000000 ____D C:\Program Files (x86)\gu5rrtle
2016-10-26 13:31 - 2016-10-26 13:31 - 00000000 ____D C:\Program Files (x86)\ucdkxzwq
2016-10-26 12:50 - 2016-10-26 12:50 - 00000000 ____D C:\Users\20160127\Documents\Custom Office Templates
2016-10-26 12:35 - 2016-10-26 12:35 - 00000000 ____D C:\Program Files (x86)\MSECache
2016-10-26 12:32 - 2016-10-26 18:35 - 00003586 _____ C:\Windows\System32\Tasks\Traffic Exchange v2 OnGuard
2016-10-26 12:32 - 2016-10-26 18:35 - 00003586 _____ C:\Windows\System32\Tasks\Traffic Exchange v2 On Guard
2016-10-26 12:32 - 2016-10-26 18:35 - 00003586 _____ C:\Windows\System32\Tasks\Traffic Exchange v2 OG
2016-10-26 12:32 - 2016-10-26 18:35 - 00003586 _____ C:\Windows\System32\Tasks\Traffic Exchange v2 Guardian
2016-10-26 12:32 - 2016-10-26 18:35 - 00003586 _____ C:\Windows\System32\Tasks\Traffic Exchange v2 Guard
2016-10-26 12:32 - 2016-10-26 18:35 - 00003586 _____ C:\Windows\System32\Tasks\Traffic Exchange v2
2016-10-26 12:31 - 2016-10-26 18:34 - 00003596 _____ C:\Windows\System32\Tasks\Online Application v2 OnGuard
2016-10-26 12:31 - 2016-10-26 18:34 - 00003596 _____ C:\Windows\System32\Tasks\Online Application v2 On Guard
2016-10-26 12:31 - 2016-10-26 18:34 - 00003596 _____ C:\Windows\System32\Tasks\Online Application v2 OG
2016-10-26 12:31 - 2016-10-26 18:34 - 00003596 _____ C:\Windows\System32\Tasks\Online Application v2 Guardian
2016-10-26 12:31 - 2016-10-26 18:34 - 00003596 _____ C:\Windows\System32\Tasks\Online Application v2 Guard
2016-10-26 12:31 - 2016-10-26 18:34 - 00003596 _____ C:\Windows\System32\Tasks\Online Application v2
2016-10-26 12:27 - 2016-10-26 12:27 - 00000000 ____D C:\Windows\system32\log
2016-10-26 12:27 - 2016-10-26 12:27 - 00000000 ____D C:\Users\20160127\AppData\Roaming\Elex-tech
2016-10-26 12:27 - 2016-10-26 12:27 - 00000000 ____D C:\Program Files (x86)\Elex-tech
2016-10-26 12:27 - 2016-05-23 05:41 - 00055056 _____ (Elex do Brasil Participações Ltda) C:\Windows\system32\Drivers\iSafeKrnlBoot.sys
2016-10-26 12:27 - 2016-05-19 09:42 - 00052392 _____ (Elex do Brasil Participações Ltda) C:\Windows\system32\Drivers\iSafeNetFilter.sys
2016-10-26 12:26 - 2016-10-26 12:26 - 00000000 ____D C:\Users\20160127\AppData\Roaming\Firefox
2016-10-26 12:26 - 2016-10-26 12:26 - 00000000 ____D C:\Users\20160127\AppData\Local\Firefox
2016-10-26 12:26 - 2016-10-26 12:26 - 00000000 ____D C:\Program Files (x86)\Firefox
2016-10-26 12:25 - 2016-10-26 20:07 - 00000000 _____ C:\Users\Public\Documents\report.dat
2016-10-26 12:25 - 2016-10-26 17:31 - 00000000 ____D C:\Program Files (x86)\InterHop
2016-10-26 12:25 - 2016-10-26 12:27 - 00000003 _____ C:\Windows\SysWOW64\hoewmds
2016-10-26 12:25 - 2016-10-26 12:25 - 00000000 ____D C:\Users\20160127\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\amuleC
2016-10-26 12:25 - 2016-10-26 12:25 - 00000000 ____D C:\Users\20160127\AppData\Roaming\aMule
2016-10-26 12:25 - 2016-10-26 12:25 - 00000000 ____D C:\Program Files (x86)\UvConverter
2016-10-26 12:25 - 2016-10-26 12:25 - 00000000 ____D C:\Program Files (x86)\amuleC
2016-10-26 12:25 - 2016-10-26 12:25 - 00000000 _____ C:\Users\Public\Documents\temp.dat
2016-10-26 12:23 - 2016-10-26 17:31 - 00003446 _____ C:\Windows\System32\Tasks\ChelfNotify Task
2016-10-26 12:23 - 2016-10-26 17:31 - 00000000 ____D C:\ProgramData\ChelfNotify
2016-10-26 12:23 - 2016-10-26 12:23 - 00000000 ____D C:\ProgramData\WinSAPSvc
2016-10-26 12:23 - 2016-10-26 12:23 - 00000000 ____D C:\Program Files (x86)\WinArcher
2016-10-26 12:23 - 2016-10-26 12:23 - 00000000 ____D C:\Program Files (x86)\nitenelb
2016-10-24 20:23 - 2016-10-24 20:23 - 00000000 ____D C:\Program Files\Application Verifier
2016-10-24 20:23 - 2016-10-24 20:23 - 00000000 ____D C:\Program Files (x86)\Application Verifier
2016-10-24 20:22 - 2016-10-24 20:23 - 00000000 ____D C:\ProgramData\Windows App Certification Kit
2016-10-24 20:22 - 2016-10-24 20:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits
2016-10-24 20:18 - 2016-10-24 20:18 - 00000000 ____D C:\Program Files (x86)\HTML Help Workshop
2016-10-24 17:24 - 2016-10-24 19:57 - 00000000 ____D C:\Users\20160127\AppData\Roaming\Dev-Cpp
2016-10-24 17:16 - 2016-10-24 17:37 - 00000000 ____D C:\Users\20160127\Documents\Visual Studio 2015
2016-10-23 14:53 - 2016-10-26 12:53 - 00002020 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-10-23 14:53 - 2016-10-26 12:53 - 00001956 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-10-23 14:53 - 2016-10-23 14:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-10-23 14:34 - 2016-10-23 14:34 - 138795288 _____ (Microsoft Corporation) C:\Users\20160127\Desktop\msert.exe
2016-10-22 18:00 - 2016-10-22 18:00 - 00000000 ____D C:\ProgramData\Microleaves
2016-10-22 17:02 - 2016-10-22 17:02 - 00243696 _____ C:\Users\20160127\Downloads\Firefox Setup Stub 49.0.2.exe
2016-10-22 16:08 - 2016-10-22 16:08 - 09890008 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RsCRIcon.dll
2016-10-22 16:08 - 2016-10-22 16:08 - 05158144 _____ (Realtek semiconductor) C:\Windows\RTFTrack.exe
2016-10-22 16:08 - 2016-10-22 16:08 - 04330712 _____ (Realtek Semiconductor Corp.) C:\Windows\RtCRU64.exe
2016-10-22 16:08 - 2016-10-22 16:08 - 03127552 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\rtsuvc.sys
2016-10-22 16:08 - 2016-10-22 16:08 - 01980672 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RsDecode.dll
2016-10-22 16:08 - 2016-10-22 16:08 - 00639744 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtCamP64.dll
2016-10-22 16:08 - 2016-10-22 16:08 - 00555264 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RtCamP.dll
2016-10-22 16:08 - 2016-10-22 16:08 - 00416472 _____ (Realsil Semiconductor Corporation) C:\Windows\system32\Drivers\RtsUer.sys
2016-10-22 16:08 - 2016-10-22 16:08 - 00099072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtCamO64.dll
2016-10-22 16:08 - 2016-10-22 16:08 - 00083160 _____ (Realtek Semiconductor.) C:\Windows\system32\RtCRX64.dll
2016-10-22 16:07 - 2016-10-22 16:07 - 00481768 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys
2016-10-22 16:06 - 2016-10-26 17:54 - 00002998 _____ C:\Windows\System32\Tasks\Dolby Selector
2016-10-22 16:06 - 2016-10-22 16:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
2016-10-22 16:06 - 2016-10-22 16:06 - 00000000 ____D C:\Program Files (x86)\Dolby Advanced Audio v2
2016-10-22 16:03 - 2013-07-25 14:39 - 00206552 _____ (Conexant Systems Inc.) C:\Windows\system32\CxAudMsg64.exe
2016-10-22 16:03 - 2011-09-01 15:23 - 00447104 _____ (Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
2016-10-22 16:00 - 2016-10-22 16:00 - 02867928 _____ (Conexant Systems, Inc.) C:\Windows\system32\UCI64A53.DLL
2016-10-22 16:00 - 2016-10-22 16:00 - 01534656 _____ (Conexant Systems Inc.) C:\Windows\system32\Drivers\CHDRT64.sys
2016-10-22 16:00 - 2016-10-22 16:00 - 00997568 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64BP12.dll
2016-10-22 15:57 - 2016-10-22 15:57 - 04137472 _____ (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\Drivers\athrx.sys
2016-10-22 15:56 - 2016-10-22 15:56 - 00130248 _____ (Qualcomm Atheros Co., Ltd.) C:\Windows\system32\Drivers\L1C63x64.sys
2016-10-22 15:54 - 2016-10-22 16:13 - 00000000 ____D C:\Windows\LastGood.Tmp
2016-10-22 15:54 - 2016-10-22 15:54 - 00195152 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverW8x64.sys
2016-10-22 15:54 - 2016-10-22 15:54 - 00033960 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys
2016-10-22 15:54 - 2016-10-22 15:54 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2016-10-22 15:51 - 2016-10-22 15:51 - 00000000 ____D C:\ProgramData\ProductData
2016-10-22 15:50 - 2016-10-26 15:44 - 00002894 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (20160127)
2016-10-22 15:50 - 2016-10-22 16:08 - 00002297 _____ C:\Users\Public\Desktop\Driver Booster 4.lnk
2016-10-22 15:50 - 2016-10-22 15:51 - 00000000 ____D C:\Users\20160127\AppData\LocalLow\IObit
2016-10-22 15:50 - 2016-10-22 15:50 - 00027552 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS
2016-10-22 15:50 - 2016-10-22 15:50 - 00003262 _____ C:\Windows\System32\Tasks\Driver Booster Scheduler
2016-10-22 15:50 - 2016-10-22 15:50 - 00000000 ____D C:\Windows\IObit
2016-10-22 15:50 - 2016-10-22 15:50 - 00000000 ____D C:\Users\20160127\AppData\Roaming\IObit
2016-10-22 15:50 - 2016-10-22 15:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 4
2016-10-22 15:50 - 2016-10-22 15:50 - 00000000 ____D C:\ProgramData\IObit
2016-10-22 15:50 - 2016-10-22 15:50 - 00000000 ____D C:\Program Files (x86)\IObit
2016-10-22 15:31 - 2016-10-22 15:31 - 00006020 _____ C:\Windows\System32\Tasks\Fekutain Renew
2016-10-22 15:31 - 2016-10-22 15:31 - 00000000 ____D C:\ProgramData\{E471F806-9043-4d46-A5BA-440930B083AD}.tmp
2016-10-22 15:31 - 2016-10-22 15:31 - 00000000 ____D C:\Program Files (x86)\LuDaShi
2016-10-22 15:30 - 2016-10-26 17:31 - 00000000 ____D C:\Program Files (x86)\Nergose
2016-10-22 15:30 - 2016-10-22 17:00 - 00000000 ____D C:\Users\20160127\AppData\Roaming\Aniqok
2016-10-22 15:30 - 2016-10-22 15:30 - 00000000 ____D C:\Users\20160127\AppData\Local\Plerkuinghulut
2016-10-22 15:29 - 2016-10-22 15:29 - 00093072 _____ (WinMount International Inc) C:\Windows\system32\Drivers\KuaiZipDrive2.sys
2016-10-22 15:29 - 2016-10-22 15:29 - 00001054 _____ C:\Users\20160127\AppData\Roaming\Microsoft\Windows\Start Menu\KuaiZip.lnk
2016-10-22 15:29 - 2016-10-22 15:29 - 00000000 ____D C:\Users\20160127\AppData\Roaming\Softlink
2016-10-22 15:29 - 2016-10-22 15:29 - 00000000 ____D C:\Users\20160127\AppData\Roaming\KuaiZip
2016-10-22 15:29 - 2016-10-22 15:29 - 00000000 ____D C:\Program Files (x86)\KuaiZip
2016-10-22 15:28 - 2016-10-26 18:35 - 00003640 _____ C:\Windows\System32\Tasks\Traffic Exchange Updater
2016-10-22 15:28 - 2016-10-26 18:35 - 00003580 _____ C:\Windows\System32\Tasks\Traffic Exchange Guardian
2016-10-22 15:28 - 2016-10-26 18:35 - 00003580 _____ C:\Windows\System32\Tasks\Traffic Exchange Guard
2016-10-22 15:28 - 2016-10-26 18:35 - 00003580 _____ C:\Windows\System32\Tasks\Traffic Exchange
2016-10-22 15:28 - 2016-10-26 18:34 - 00003654 _____ C:\Windows\System32\Tasks\Online Application Updater
2016-10-22 15:28 - 2016-10-26 18:34 - 00003590 _____ C:\Windows\System32\Tasks\Online Application Guardian
2016-10-22 15:28 - 2016-10-26 18:34 - 00003590 _____ C:\Windows\System32\Tasks\Online Application Guard
2016-10-22 15:28 - 2016-10-26 18:34 - 00003590 _____ C:\Windows\System32\Tasks\Online Application
2016-10-22 15:28 - 2016-10-22 15:29 - 00000000 ____D C:\Users\20160127\AppData\Roaming\Microleaves
2016-10-22 15:28 - 2016-10-22 15:28 - 00003280 _____ C:\Windows\System32\Tasks\psv_Goodlam
2016-10-22 15:28 - 2016-10-22 15:28 - 00000000 ____D C:\Program Files (x86)\Microleaves
2016-10-22 15:28 - 2016-10-22 15:28 - 00000000 ____D C:\Program Files (x86)\hhh
2016-10-22 15:27 - 2016-10-26 15:48 - 00000000 ____D C:\ProgramData\Quoteex
2016-10-22 15:27 - 2016-10-22 15:28 - 00000000 ____D C:\ProgramData\Logic Handler
2016-10-22 15:27 - 2016-10-22 15:27 - 07214592 _____ C:\Users\20160127\AppData\Roaming\agent.dat
2016-10-22 15:27 - 2016-10-22 15:27 - 01911262 _____ C:\Users\20160127\AppData\Roaming\Standax.tst
2016-10-22 15:27 - 2016-10-22 15:27 - 01897575 _____ C:\Users\20160127\AppData\Roaming\Ontoair.bin
2016-10-22 15:27 - 2016-10-22 15:27 - 00710656 _____ C:\Users\20160127\AppData\Roaming\Standax.exe
2016-10-22 15:27 - 2016-10-22 15:27 - 00190394 _____ C:\Users\20160127\AppData\Roaming\SaltOthome.bin
2016-10-22 15:27 - 2016-10-22 15:27 - 00140288 _____ C:\Users\20160127\AppData\Roaming\Installer.dat
2016-10-22 15:27 - 2016-10-22 15:27 - 00126464 _____ C:\Users\20160127\AppData\Roaming\noah.dat
2016-10-22 15:27 - 2016-10-22 15:27 - 00070704 _____ C:\Users\20160127\AppData\Roaming\Config.xml
2016-10-22 15:27 - 2016-10-22 15:27 - 00018432 _____ C:\Users\20160127\AppData\Roaming\Main.dat
2016-10-22 15:27 - 2016-10-22 15:27 - 00016224 _____ C:\Users\20160127\AppData\Roaming\InstallationConfiguration.xml
2016-10-22 15:27 - 2016-10-22 15:27 - 00005568 _____ C:\Users\20160127\AppData\Roaming\md.xml
2016-10-22 15:27 - 2016-10-22 15:27 - 00003652 _____ C:\Windows\System32\Tasks\snp
2016-10-22 15:27 - 2016-10-22 15:27 - 00003274 _____ C:\Windows\System32\Tasks\psv_Dongzenzap
2016-10-22 15:27 - 2016-10-22 15:27 - 00003270 _____ C:\Windows\System32\Tasks\psv_Hotjayfind
2016-10-22 15:27 - 2016-10-22 15:27 - 00003240 _____ C:\Windows\System32\Tasks\snf
2016-10-22 15:27 - 2016-10-22 15:27 - 00000000 ____D C:\ProgramData\Quoteexs
2016-10-22 15:27 - 2016-10-22 15:27 - 00000000 ____D C:\ProgramData\NetworkPacketManitor
2016-10-21 22:07 - 2016-10-23 14:54 - 00000000 ____D C:\ProgramData\clp
2016-10-21 22:07 - 2016-10-22 16:59 - 00000000 ____D C:\Users\20160127\AppData\Roaming\Fighters
2016-10-21 22:07 - 2016-10-22 16:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fighters
2016-10-21 22:07 - 2016-10-21 22:07 - 00002019 _____ C:\Users\Public\Desktop\VIRUSfighter.lnk
2016-10-21 22:06 - 2016-10-22 16:59 - 00000000 ____D C:\Program Files (x86)\Fighters
2016-10-21 22:05 - 2016-10-22 16:59 - 00000000 ____D C:\ProgramData\Fighters
2016-10-21 22:05 - 2016-10-21 22:05 - 00000000 ____D C:\ProgramData\Common Toolkit Suite
2016-10-20 17:13 - 2016-10-20 17:13 - 00852307 _____ C:\Users\20160127\Desktop\комп.архитектури.pdf
2016-10-14 17:58 - 2016-10-14 17:58 - 00000000 ____D C:\Users\20160127\Desktop\ucheben-plan
2016-10-14 08:49 - 2016-10-14 08:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-10-10 21:30 - 2016-10-10 21:30 - 00074352 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2016-10-10 21:30 - 2016-10-10 21:30 - 00074352 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2016-10-10 21:30 - 2016-10-10 21:30 - 00074352 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2016-10-10 21:30 - 2016-10-10 21:30 - 00038000 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2016-10-06 19:39 - 2016-10-06 19:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2016-10-06 19:37 - 2016-10-06 19:37 - 00001768 _____ C:\Users\Public\Desktop\iTunes.lnk
2016-10-06 19:37 - 2016-10-06 19:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2016-10-06 19:35 - 2016-10-06 19:37 - 00000000 ____D C:\Program Files\iTunes
2016-10-06 19:35 - 2016-10-06 19:35 - 00000000 ____D C:\Program Files\iPod

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-10-27 08:02 - 2016-01-27 16:11 - 00000000 ____D C:\Users\20160127\AppData\Roaming\ClassicShell
2016-10-27 08:02 - 2016-01-27 13:41 - 00003982 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{0CF03790-5C34-4035-8D35-7C5953B66414}
2016-10-26 18:09 - 2016-01-27 13:37 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-487210043-2901861752-200921591-1001
2016-10-26 17:54 - 2016-01-27 15:55 - 00002988 _____ C:\Windows\System32\Tasks\Synaptics TouchPad Enhancements
2016-10-26 17:50 - 2016-06-06 18:45 - 00000932 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2016-10-26 17:41 - 2016-02-01 23:46 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-10-26 15:44 - 2016-06-06 18:49 - 00000000 ___RD C:\Users\20160127\Dropbox
2016-10-26 15:40 - 2016-06-06 18:45 - 00000928 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2016-10-26 15:40 - 2016-01-27 13:31 - 00000000 ____D C:\Users\20160127
2016-10-26 15:39 - 2013-08-22 17:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-10-26 13:02 - 2016-02-03 17:17 - 00113230 _____ C:\Windows\system32\perfh002.dat
2016-10-26 13:02 - 2016-02-03 17:17 - 00037626 _____ C:\Windows\system32\perfc002.dat
2016-10-26 13:02 - 2013-09-30 07:22 - 01093794 _____ C:\Windows\system32\PerfStringBackup.INI
2016-10-26 13:02 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\Inf
2016-10-26 13:01 - 2016-09-25 18:53 - 00000000 ____D C:\Users\20160127\AppData\LocalLow\uTorrent
2016-10-26 13:01 - 2016-02-05 12:00 - 00000000 ____D C:\Users\20160127\AppData\Roaming\uTorrent
2016-10-26 12:53 - 2016-01-27 13:31 - 00001438 _____ C:\Users\20160127\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-10-26 12:41 - 2016-02-01 23:46 - 00003718 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-10-26 12:41 - 2013-08-22 18:36 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-10-26 12:41 - 2013-08-22 18:36 - 00000000 ____D C:\Windows\system32\Macromed
2016-10-24 20:26 - 2016-01-27 13:48 - 00000000 ____D C:\ProgramData\Package Cache
2016-10-24 20:22 - 2016-01-27 13:31 - 00000000 ____D C:\Users\20160127\AppData\Local\Packages
2016-10-24 20:20 - 2016-02-03 16:47 - 00000000 ____D C:\Program Files (x86)\Windows Kits
2016-10-24 20:20 - 2016-02-03 16:47 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs
2016-10-24 20:08 - 2013-08-22 18:36 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-10-23 14:53 - 2016-03-27 20:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-10-22 16:59 - 2016-02-05 11:51 - 00000000 ____D C:\Program Files (x86)\SysTools Docx Repair
2016-10-22 16:53 - 2013-08-22 16:25 - 00000230 _____ C:\Windows\win.ini
2016-10-22 16:38 - 2013-08-22 16:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-10-22 16:13 - 2016-01-27 15:21 - 00000000 ____D C:\Windows\SysWOW64\sda
2016-10-22 16:06 - 2016-01-27 15:06 - 00000000 ____D C:\Program Files\CONEXANT
2016-10-22 16:05 - 2016-05-20 21:53 - 00000000 ____D C:\Users\Public\Documents\Conexant
2016-10-22 16:05 - 2016-01-27 15:07 - 00008603 _____ C:\Windows\SAII_LOG.TXT
2016-10-14 20:14 - 2013-08-22 18:36 - 00000000 ____D C:\Windows\AppReadiness
2016-10-14 08:49 - 2016-06-06 18:45 - 00000000 ____D C:\Program Files (x86)\Dropbox
2016-10-13 19:41 - 2016-02-13 18:00 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-10-13 19:41 - 2016-02-13 17:59 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-10-11 20:37 - 2016-06-19 11:42 - 00000000 ____D C:\Users\20160127\AppData\Roaming\Apple Computer
2016-10-10 12:09 - 2013-08-22 18:36 - 00000000 ____D C:\Windows\system32\NDF
2016-10-06 19:44 - 2016-06-19 12:15 - 00000000 ____D C:\Users\20160127\Documents\Outlook Files
2016-10-06 19:44 - 2016-06-19 12:15 - 00000000 ____D C:\Users\20160127\AppData\Local\Apple Inc
2016-10-06 19:35 - 2016-06-19 11:40 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-10-04 13:03 - 2016-09-08 17:53 - 00001150 _____ C:\Users\20160127\Desktop\EuropeBattle - Пряк път.lnk
2016-10-01 19:54 - 2016-06-06 18:45 - 00000000 ____D C:\Users\20160127\AppData\Local\Dropbox
2016-09-30 16:19 - 2016-06-19 12:14 - 00003428 _____ C:\Windows\System32\Tasks\Apple Diagnostics

==================== Files in the root of some directories =======

2016-10-22 15:27 - 2016-10-22 15:27 - 7214592 _____ () C:\Users\20160127\AppData\Roaming\agent.dat
2016-10-22 15:27 - 2016-10-22 15:27 - 0070704 _____ () C:\Users\20160127\AppData\Roaming\Config.xml
2016-10-22 15:27 - 2016-10-22 15:27 - 0016224 _____ () C:\Users\20160127\AppData\Roaming\InstallationConfiguration.xml
2016-10-22 15:27 - 2016-10-22 15:27 - 0140288 _____ () C:\Users\20160127\AppData\Roaming\Installer.dat
2016-10-22 15:27 - 2016-10-22 15:27 - 0018432 _____ () C:\Users\20160127\AppData\Roaming\Main.dat
2016-10-22 15:27 - 2016-10-22 15:27 - 0005568 _____ () C:\Users\20160127\AppData\Roaming\md.xml
2016-10-22 15:27 - 2016-10-22 15:27 - 0126464 _____ () C:\Users\20160127\AppData\Roaming\noah.dat
2016-10-22 15:27 - 2016-10-22 15:27 - 1897575 _____ () C:\Users\20160127\AppData\Roaming\Ontoair.bin
2016-10-22 15:27 - 2016-10-22 15:27 - 0190394 _____ () C:\Users\20160127\AppData\Roaming\SaltOthome.bin
2016-10-22 15:27 - 2016-10-22 15:27 - 0710656 _____ () C:\Users\20160127\AppData\Roaming\Standax.exe
2016-10-22 15:27 - 2016-10-22 15:27 - 1911262 _____ () C:\Users\20160127\AppData\Roaming\Standax.tst
2016-10-22 15:28 - 2016-10-22 15:28 - 0032038 _____ () C:\Users\20160127\AppData\Roaming\uninstall_temp.ico
2016-01-27 15:07 - 2016-01-27 15:07 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Files to move or delete:
====================
C:\Users\20160127\AppData\Local\Temp\555.exe


Some files in TEMP:
====================
C:\Users\20160127\AppData\Local\Temp\555.exe
C:\Users\20160127\AppData\Local\Temp\binkw32.dll
C:\Users\20160127\AppData\Local\Temp\bitool.dll
C:\Users\20160127\AppData\Local\Temp\Browser_V5.6.14087.902_r_4644_(Build1608021049).exe
C:\Users\20160127\AppData\Local\Temp\d2l_Install.exe
C:\Users\20160127\AppData\Local\Temp\GomEncDnInstaller.exe
C:\Users\20160127\AppData\Local\Temp\inst_buychannel_06.exe
C:\Users\20160127\AppData\Local\Temp\keydown01.exe
C:\Users\20160127\AppData\Local\Temp\KuaiZip.exe
C:\Users\20160127\AppData\Local\Temp\ludashisetup.exe
C:\Users\20160127\AppData\Local\Temp\ose00002.exe
C:\Users\20160127\AppData\Local\Temp\p11857.exe
C:\Users\20160127\AppData\Local\Temp\p21991.exe
C:\Users\20160127\AppData\Local\Temp\setup.exe


==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-10-22 17:33

==================== End of FRST.txt ============================

Addition.txt

Здравейте,

 

СТЪПКА 1

 

Моля изтеглете Malwarebytes Anti-Malware 2.2.1.1043 Final и я запазете на вашия десктоп.

  • Стартирайте файла mbam-setup-2.2.1.1043.exe и следвайте указанията за да инсталирате програмата.
  • След като инсталацията приключи се уверете че сте сложили отметка пред:
  • Launch Malwarebytes Anti-Malware
  • Отметката активираща пробния 14 дневен период също е маркиран по-подразбиране. Ако не желаете да тествате защитата в реално време на програмата през следващите 14 дни тогава премахнете отметката. Т.е. премахнете първата отметка:

DkgJ7Zr.png

  • Натиснете бутона Finish.
  • Отидете до табът Settings > Detection and Protection > и под категорията Detection Options включете опцията "Scan for rootkits".
  • Отидете до табът Scan, сложете радио-бутона пред Threat Scan и след това натиснете бутона Scan Now >> . Ако е намерена актуализация тогава натиснете бутона Update Now.
  • Ще започне проверка за зловреден софтуер.
  • При някои инфекции можете да видите съобщението:
  • "Could not load DDA driver"
  • Натиснете "Yes" на това съобщение за да позволите драйвера да се зареди след рестарт.
  • Разрешете на компютъра да се рестартира и след това продължете с останалите инструкции.
  • След като проверката приключи натиснете бутона Apply Actions.
  • Изчакайте да се появи прозореца подканващ ви да рестартирате и след това натиснете бутона Yes.
  • След рестарта, когато се появи десктопа MBAM ще се зареди още веднъж.
  • Отидете то табът History > Application Logs.

65ZBqkR.jpg

  • Отворете рапорта с последната дата и час и натиснете бутона "Copy to Clipboard"
  • Сега вече поставете съдържанието на лог файла с клавишната комбинация Ctrl + V и го публикувайте в следващия си коментар.

 

СТЪПКА 2

 

Направете нова проверка с FRST като се уверите, че има отметка пред Addition.txt преди да натиснете бутона SCAN и след това публикувайте съдържанието на новите файлове - FRST.txt и Addition.txt в следващия си коментар.

 

Поздрави!

  • Автор

Не ме накара да рестартирам просто изтри заразените файлове(може би?).Аз рестартирах сам и сега файърфокса не ми тръгва бил несъвместим wtf ето логовете ot frst

 

Addition.txt

FRST.txt

Не може да няма щом е намерила неща и сте разрешили да ги премахне.

  • Отидете то табът History > Application Logs.

65ZBqkR.jpg

  • Отворете рапорта с последната дата и час и натиснете бутона "Copy to Clipboard"
  • Сега вече поставете съдържанието на лог файла с клавишната комбинация Ctrl + V и го публикувайте в следващия си коментар.
  • Автор

Имаше само protection log,scan нямаше като се прибера пак ще проверя и ще ти пратя скриийншот.

  • Автор

Malwarebytes Anti-Malware
www.malwarebytes.org


Protection, 30.10.2016 г. 17:00, SYSTEM, LENOVO-PC, Protection, Malware Protection, Starting,
Protection, 30.10.2016 г. 17:00, SYSTEM, LENOVO-PC, Protection, Malware Protection, Started,
Protection, 30.10.2016 г. 17:00, SYSTEM, LENOVO-PC, Protection, Malicious Website Protection, Starting,
Protection, 30.10.2016 г. 17:00, SYSTEM, LENOVO-PC, Protection, Malicious Website Protection, Started,
Update, 30.10.2016 г. 17:00, SYSTEM, LENOVO-PC, Scheduler, Domain Database, 2016.10.28.3, 2016.10.30.6,

(end)

Malwarebytes Anti-Malware
www.malwarebytes.org


Detection, 28.10.2016 г. 18:30, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\trisjaytop.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [65330a94d6c463d32c7d08d16e96ac54]
Detection, 28.10.2016 г. 18:31, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Elex, C:\ProgramData\ChelfNotify\BrowserUpdate.exe, Quarantine, [0e8aa1fde3b7979f543bae654bba926e]
Detection, 28.10.2016 г. 18:31, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\uninstall.exe, Quarantine Failed, 5, Достъпът е отказан.  , [0296abf37d1d69cd59f40221b74a659b]
Detection, 28.10.2016 г. 18:31, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\uninstall.exe, Quarantine Failed, 5, Достъпът е отказан.  , [0296abf37d1d69cd59f40221b74a659b]
Detection, 28.10.2016 г. 18:31, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\uninstall.exe, Quarantine Failed, 5, Достъпът е отказан.  , [0296abf37d1d69cd59f40221b74a659b]
Detection, 28.10.2016 г. 18:32, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\uninstall.exe, Quarantine Failed, 5, Достъпът е отказан.  , [0296abf37d1d69cd59f40221b74a659b]
Detection, 28.10.2016 г. 18:32, 20160127, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury, C:\Program Files (x86)\Common Files\Tindex\uninstall.exe, Quarantine, [5b3ddfbf1585fc3aeb7d1ff1c3428878]
Detection, 28.10.2016 г. 18:34, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\strongit.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [4a4ef7a71e7ceb4b771fa5348f75b050]
Detection, 28.10.2016 г. 18:34, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\trisjaytop.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [65330a94d6c463d32c7d08d16e96ac54]
Detection, 28.10.2016 г. 18:34, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeSrvMon64.dll, Quarantine Failed, 5, Достъпът е отказан.  , [d2c67e20efab6dc926abe0ae659f5ea2]
Detection, 28.10.2016 г. 18:36, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeSrvMon64.dll, Quarantine Failed, 5, Достъпът е отказан.  , [d2c67e20efab6dc926abe0ae659f5ea2]
Detection, 28.10.2016 г. 18:36, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\strongit.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [4a4ef7a71e7ceb4b771fa5348f75b050]
Detection, 28.10.2016 г. 18:37, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\strongit.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [4a4ef7a71e7ceb4b771fa5348f75b050]
Detection, 28.10.2016 г. 18:37, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\strongit.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [4a4ef7a71e7ceb4b771fa5348f75b050]
Detection, 28.10.2016 г. 18:37, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Ghokswa, C:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe, Quarantine Failed, 5, Достъпът е отказан.  , [badea7f7b5e5c670cc7be5c611f33bc5]
Detection, 28.10.2016 г. 18:37, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\strongit.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [4a4ef7a71e7ceb4b771fa5348f75b050]
Detection, 28.10.2016 г. 18:37, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\strongit.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [4a4ef7a71e7ceb4b771fa5348f75b050]
Detection, 28.10.2016 г. 18:37, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\strongit.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [4a4ef7a71e7ceb4b771fa5348f75b050]
Detection, 28.10.2016 г. 18:37, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\strongit.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [4a4ef7a71e7ceb4b771fa5348f75b050]
Detection, 28.10.2016 г. 18:37, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\strongit.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [4a4ef7a71e7ceb4b771fa5348f75b050]
Detection, 28.10.2016 г. 18:38, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\strongit.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [4a4ef7a71e7ceb4b771fa5348f75b050]
Detection, 28.10.2016 г. 18:38, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\strongit.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [4a4ef7a71e7ceb4b771fa5348f75b050]
Detection, 28.10.2016 г. 18:38, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\strongit.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [4a4ef7a71e7ceb4b771fa5348f75b050]
Detection, 28.10.2016 г. 18:38, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\strongit.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [4a4ef7a71e7ceb4b771fa5348f75b050]
Detection, 28.10.2016 г. 18:38, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\strongit.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [4a4ef7a71e7ceb4b771fa5348f75b050]
Detection, 28.10.2016 г. 18:38, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\strongit.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [4a4ef7a71e7ceb4b771fa5348f75b050]
Detection, 28.10.2016 г. 18:38, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\strongit.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [4a4ef7a71e7ceb4b771fa5348f75b050]
Detection, 28.10.2016 г. 18:38, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\strongit.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [4a4ef7a71e7ceb4b771fa5348f75b050]
Detection, 28.10.2016 г. 18:38, SYSTEM, LENOVO-PC, Protection, Malware Protection, File, PUP.Optional.Linkury.ACMB1, c:\programdata\quoteex\strongit.dll, Quarantine Failed, 6, Невалиден манипулатор.  , [4a4ef7a71e7ceb4b771fa5348f75b050]
Protection, 28.10.2016 г. 18:38, SYSTEM, LENOVO-PC, Protection, Malicious Website Protection, Stopping,
Protection, 28.10.2016 г. 18:38, SYSTEM, LENOVO-PC, Protection, Malicious Website Protection, Stopped,
Protection, 28.10.2016 г. 18:38, SYSTEM, LENOVO-PC, Protection, Malware Protection, Stopping,
Protection, 28.10.2016 г. 18:41, SYSTEM, LENOVO-PC, Protection, Malware Protection, Stopped,

(end)

Това са двата protection log-а,scan log не съществува.И оня ден като не ми беше съвместим файърфокса го преинсталирах и днес като включих комютъра пак така...не бил съвместим.

 

2.jpg

3.jpg

Редактирано от Djani Ivanov (преглед на промените)

Изобщо не сте следвали инструкциите ми за сканиране с MBAM. Не е пусната опцията за сканиране за рууткити и не са предприети никакви действия относно намерените обекти в последния ви лог файл. Повторете проверката, както е по инструкции и след това прикачете лог файла и след това направете нова проверка с FRST.

Поздрави!

 

Извинявам се за забавянето, но вчера нямах интернет заради авария в квартала. Съвсем скоро ще напиша скрипт.

Поздрави!

Здравейте,

Като начало деинсталирайте следната програма:

 

СТЪПКА 1

 

Изтеглете програмата GeekUninstaller и я запазете на десктопа.

Разархивирайте я и стартирайте файла geek.exe IxXO5oO.jpg
От списъка намерете Online.io Application (примера е за Mozilla Firefox, но това е просто за показно).

Кликнете с десен бутон върху програмата и изберете Force Removal
 
XhV2QLa.png
 
След края на инсталацията ще се отвори прозорец подканващ ви да премахнете всички остатъци от програмата (ако има такива, ако няма този прозорец няма да се появи):
 
Пример за Mozilla браузъра:

geekuninstaller-3.png

Натиснете бутона Finish за да изтриете останките от програмата.

Повторете стъпките за следните програми в списъка на програмата:

SafeFinder
Traffic Exchange

Не съм срещал колко ефективна е VIRUSfighter, но бих я заменил с някои от добре известните антивирусни програми като Avira, avast, 360 Total Security, Kaspersky Free Antivirus (активира се през руско прокси и интерфейса и е само на руски засега).

 

СТЪПКА 2

 

След това Изтеглете edit-text.giffixlist.txt и го запазете на десктопа.
Стартирайте FRST.exe и натиснете бутона Fix веднъж!
След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.
 
Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

 

 

СТЪПКА 3

 

  • Изтеглете и стартирайте 6sv1DN9.jpgAdwCleaner.exe
  • Натиснете бутона Scan.
  • AdwCleaner ще започне да проверява компютъра.
  • След като проверката приключи натиснете бутона Clean.
  • Програмата ще затвори всички излишни процеси и след почистването ще иска да рестартира машината. Съгласете се.
  • Ще се появи автоматично лог файл с името (AdwCleaner[S1].txt и  AdwCleaner[С1].txt) в C:\Adwcleaner
  • Публикувайте съдържанието на  AdwCleaner[С1].txt в следващия си коментар.

 

След това пишете как е положението. ;)

  • Автор

ето фикс лог-а,а за логовете от adwcleaner когато я пуснах да сканира намери около 300 detection-а и заби когато натиснах почисти(програмата спря да работи искате ли уиндоус да поправи съвместимоста..)пуснах я втори път да сканира и намери само 20тина грешки от регистрите,дали другите са се изтрили?и логовете в C:/adware са C[0],S[0],S[1] кой да ти кача?

п.п постоянно ми се срива файърфокса и malwarebytes спами,че има нещо в firefox.exe/firefoxupdate.exe и т.н,изтеглих си авира да пусна ли едно сканиране и с нея?

Fixlog.txt

Качете всички логове от AdwCleaner.

Деинсталирайте и Mozilla Firefox с помощта на GeekUninstaller, но вместо Force Removal изберете Uninstall. След това изтеглете и инсталирайте последната версия на браузъра оттук:

https://www.kaldata.com/софтуер/mozilla-firefox-2-51239.html

След това направете нова проверка с Malwarebytes Anti-Malware и премахнете намерените неща и публикувайте лог файла. Направете и нова проверка с FRST и прикачете новите лог файлове.

Засега изчакайте с проверката с Avira и не правете нищо на своя глава. Надявам се сте деинсталирали Virusfighter преди да инсталирате Avira?

Поздрави!

Така. Сега се вгледах, че причината за несъвместимостта на браузъра ви е, че всъщност това не е браузъра, а нежелания софтуер, който се инсталира в друга папка. Оригиналния браузър се инсталира в C:\Program Files (x86)\Mozilla Firefox

а нежелания в C:\Program Files (x86)\Firefox

Не, че не може и ръчно потребителя да зададе да се инсталира в C:\Program Files (x86)\Firefox чрез Custom инсталацията, но специално в тази ситуация не е така. Появи се и информация относно него при чуждестранните колеги и Picasso предостави доста полезна информация.

Като начало премахнете нежелания софтуер от това да е браузър по подразбиране за системата ви. Отворете Internet Explorer => Tools => Folder Options => отидете до Programs табът => Set associations => сложете отметки пред всички разширения, които в момента са зададени за Firefox и натиснете Save. Това би трябвало да направи Internet Explorer браузър по подразбиране за системата ви.

Сега, нека да премахнем напълно фалшивия и истинския Firefox (накрая ще можете да си инсталирате правилната версия и да я зададете по подразбиране). Има и остатъци от предишната ви антивирусна програма, които е добре да почистим. Не видях обаче да сте инсталирали Avira в логовете??? Има изтеглен някакъв файл. но ми е леко съмнителен:

2016-11-03 13:56 - 2016-11-03 13:56 - 04479640 _____ (Avira Operations GmbH & Co. KG) C:\Users\20160127\Desktop\avira_en_av_581b25ac527ec__adw.exe

Най-добре изтеглете и инсталирайте Avira оттук => http://install.avira-update.com/package/wks_avira13/win32/en/pecl/avira_free_antivirus_en.exe

Деинсталирайте отново Mozilla Firefox и Mozilla Maintenance Service с GeekUninstaller и опцията Uninstall, но не инсталирайте все още отново Mozilla-та.

След това Изтеглете edit-text.giffixlist.txt и го запазете на десктопа.
Стартирайте FRST.exe и натиснете бутона Fix веднъж!
След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.
 
Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

След рестарта инсталирайте Mozilla от изтегления от вас файл => C:\Users\20160127\Downloads\Firefox Setup 49.0.2.exe

Пишете какво е положението после. ;)

Поздрави!

  • Автор

направих нещата с експлолъра,инсталирах авирата за която си дал линк,денсталирах мозила,но FRST неще да тръгва сега?постоянно проверя за ъпдейти и немога да натисна фикс...?

Здравейте,

Има временен проблем с обновленията на FRST. За да сканирате с инструмента или временно извадете лан кабела (или прекъснете интернет връзката по удобен за вас начин, например да спрете временно интернет адаптера) или преименувайте файла на betaFRST.exe или betaFRST64.exe.

Това трябва да ви позволи да стартирате инструмента и да заобиколите проблема с търсенето на актуализации.

Поздрави!

  • Автор

единственото кофти,че ми ги няма данните от мозилата,но да се надяваме,че се е изтрило поне

Fixlog.txt

Е то би трябвало данните от Мозилата да са заминали още при първото и деинсталиране с GeekUninstaller-a. Кои точно ви трябват, защото може някои от тях все още да се намират в карантинната папка на FRST - C:\FRST\Quarantine. Например файловете за отметките или за паролите може би ще са си там. Занапред е добре да си правите бекъп на профила с MozBackup или добавката FEBE, за да може при преинсталация на браузъра в случай на зараза, която не може да се почисти без премахването на браузъра, да можете после да си възстановите профила от бекъпа.

Как са сега нещата вече?

Поздрави!

  • Автор

Като цяло мозилата е добре,но самата система нещо натоварена ми се струва.Постоянно взе да "мисли" тоя лаптоп,може ли да е от това,че го натоварихме с тея antimalware и т.н?

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Назад

Разглеждащи това в момента 0

  • Няма регистрирани потребители разглеждащи тази страница.

Дарение

  • Подкрепи съществуването на форума - направи дарение
    32%
    Дарени 315 € от нужните 1 000 €

Бюлетин

Получавайте известие, когато има важна промяна или новина свързана с форума.
Абонирайте се

Профил

Навигация

Търсене

Търсене

Конфигуриране на push известия в браузъра
Chrome (Android)
  1. Докоснете иконата на катинар до адресната лента.
  2. Докоснете Разрешения → Известия.
  3. Променете предпочитанията си.
Chrome (Desktop)
  1. Кликнете върху иконата на катинар в адресната лента.
  2. Изберете Настройки на сайта.
  3. Намерете Известия и коригирайте предпочитанията си.