Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.
Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.
Добави Kaldata.com в предпочитани източници в Google

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

Упорит адуеър или някаква друга зараза

Ivan Mirchev Nikolov
в Премахване на зловреден софтуер

Featured Replies

Стъпка 1

Деинсталирайте от контролния панел:

Цитат

AVG Web TuneUp

 

Стъпка 2

Повторете стъпките с zoekHJT. Като този път, моля изчакайте програмата да си свърши работата напълно!!!

  • Автор

Изчаках, системата се рестартира, появи се файлът. Прикачам го. Забелязвам, че браузърът си помни паролите, например с влизането в хрома веднага бях логнат в гугълския ми профил.

zoek-results.txt

  • Автор

Рекламите продължават да изскачат.

Но този път в сайта на дневник не ми се появяват. Засега пробват да изскачат в клуб Z ето такава като на картинката и веднага след това изчезва.

3.png

В офнюз също: 

4.png

  • Автор

В Дневник ги няма.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-01-2017
Ran by Ivan (administrator) on IVAN-PC (06-01-2017 13:57:57)
Running from C:\Users\Ivan\Desktop
Loaded Profiles: Ivan (Available Profiles: Ivan)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Български (България)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
() C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Atheros) C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\WINWORD.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-30] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-12-21] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3477640 2012-09-23] (Adobe Systems Inc.)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [240400 2016-12-06] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [240400 2016-12-06] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [vProt] => "C:\Program Files (x86)\AVG Web TuneUp\vprot.exe"
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [134784 2015-01-31] (Qualcomm®Atheros®)
HKU\S-1-5-21-3399940750-3007407254-270903411-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2016-11-29] (Disc Soft Ltd)
HKU\S-1-5-21-3399940750-3007407254-270903411-1000\...\Run: [GoogleChromeAutoLaunch_C76D497934B1A0EE0E3BF23C3F10F9A7] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728 2016-12-08] (Google Inc.)
HKU\S-1-5-21-3399940750-3007407254-270903411-1000\...\MountPoints2: {0f6103fe-c753-11e6-9def-4cbb583f2f74} - F:\Setup.exe /AutoRun
Startup: C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2016-12-25]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 93.115.85.211 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{FD087434-4936-470D-B886-585CC2F4DEB5}: [DhcpNameServer] 93.115.85.211 8.8.8.8 8.8.4.4

Internet Explorer:
==================
HKU\S-1-5-21-3399940750-3007407254-270903411-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
SearchScopes: HKU\S-1-5-21-3399940750-3007407254-270903411-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-05-21] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2014-05-14] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-05-21] (Microsoft Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2016-10-31] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.3.6.255\AVG Web TuneUp.dll => No File
BHO-x32: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-21] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2014-05-14] (Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-3399940750-3007407254-270903411-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: lbxfile - {56831180-F115-11d2-B6AA-00104B2B9943} - C:\Program Files (x86)\Libronix DLS\System\FileProt.dll [2006-12-28] (Libronix Corporation)
Handler-x32: lbxres - {24508F1B-9E94-40EE-9759-9AF5795ADF52} - C:\Program Files (x86)\Libronix DLS\System\ResProt.dll [2006-12-28] (Libronix Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-04-01] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: 64fq43q7.default
FF ProfilePath: C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default [2017-01-06]
FF NewTab: Mozilla\Firefox\Profiles\64fq43q7.default -> about:newtab
FF Homepage: Mozilla\Firefox\Profiles\64fq43q7.default -> about:home
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2016-12-25] [not signed]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems)
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.6\\npsitesafety.dll [No File]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @mozilla.zeniko.ch/PDFlite_Browser_Plugin -> C:\Program Files (x86)\PDFlite\npPdfViewer.dll [2014-02-26] (Simon Bünzli)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-21] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-21] (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2014-01-21] (Microsoft Corporation)

Chrome: 
=======
CHR Profile: C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default [2017-01-06]
CHR Extension: (Adobe Acrobat - Create PDF) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-01-06]
CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-06]
CHR Extension: (Chrome Media Router) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-06]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2012-09-23]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [323200 2015-01-31] (Windows (R) Win 7 DDK provider) [File not signed]
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [971160 2016-12-15] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5337600 2016-12-15] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1146128 2016-12-06] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [725976 2016-12-15] (AVG Technologies CZ, s.r.o.)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2016-11-29] (Disc Soft Ltd)
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [192200 2016-11-25] () [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-30] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344184 2016-06-23] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe [81536 2014-05-13] (Atheros) [File not signed]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [163072 2016-05-13] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [312576 2016-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [267008 2016-10-05] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [298240 2016-11-30] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [254208 2016-09-26] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [52992 2016-06-01] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [299264 2016-07-27] (AVG Technologies CZ, s.r.o.)
R0 avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [77056 2016-06-20] (AVG Technologies CZ, s.r.o.)
R3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [77464 2015-01-31] (Qualcomm Atheros)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-12-21] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-12-21] (Disc Soft Ltd)
S3 ew_usbccgpfilter; C:\Windows\System32\DRIVERS\ew_usbccgpfilter.sys [18816 2016-11-25] (Huawei Technologies Co., Ltd.)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2016-11-25] (Huawei Technologies Co., Ltd.)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-30] (Intel Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
S3 RSPCIESTOR; system32\DRIVERS\RtsPStor.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-06 13:57 - 2017-01-06 13:58 - 00018414 _____ C:\Users\Ivan\Desktop\FRST.txt
2017-01-06 13:35 - 2017-01-06 13:35 - 00000000 ___RD C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2017-01-06 13:33 - 2017-01-06 13:12 - 00024064 _____ C:\Windows\zoek-delete.exe
2017-01-06 12:19 - 2017-01-06 12:39 - 00000000 ____D C:\zoek_backup
2017-01-06 12:18 - 2017-01-06 12:19 - 01309184 _____ C:\Users\Ivan\Desktop\zoek.exe
2017-01-06 12:17 - 2017-01-06 12:18 - 00000000 ____D C:\Users\Ivan\Desktop\chromepass
2017-01-06 12:16 - 2017-01-06 12:17 - 00156846 _____ C:\Users\Ivan\Desktop\chromepass.zip
2017-01-06 08:55 - 2017-01-06 09:43 - 00000000 ____D C:\Users\Ivan\AppData\LocalLow\Mozilla
2017-01-06 08:54 - 2017-01-06 08:59 - 00000000 ____D C:\Users\Ivan\AppData\Local\Mozilla
2017-01-06 08:54 - 2017-01-06 08:55 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Mozilla
2017-01-06 08:54 - 2017-01-06 08:54 - 00001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-01-06 08:54 - 2017-01-06 08:54 - 00001147 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-01-06 08:54 - 2017-01-06 08:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-01-06 08:48 - 2017-01-06 08:48 - 00243672 _____ C:\Users\Ivan\Desktop\Firefox Setup Stub 50.1.0.exe
2017-01-06 08:45 - 2017-01-06 13:40 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-01-06 08:45 - 2017-01-06 08:45 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-01-06 08:45 - 2017-01-06 08:45 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-01-06 08:45 - 2017-01-06 08:45 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-01-06 08:45 - 2017-01-06 08:45 - 00000000 ____D C:\Windows\system32\Macromed
2017-01-05 22:42 - 2017-01-06 13:57 - 00000000 ____D C:\FRST
2017-01-05 22:41 - 2017-01-05 22:41 - 02418176 _____ (Farbar) C:\Users\Ivan\Desktop\FRST64.exe
2017-01-05 22:27 - 2017-01-05 22:27 - 00000000 ____D C:\Program Files\Common Files\AVG Secure Search
2017-01-05 22:24 - 2017-01-05 22:24 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\AVG
2017-01-05 22:24 - 2017-01-05 22:24 - 00000000 ____D C:\Program Files\Common Files\AV
2017-01-05 22:23 - 2017-01-05 22:23 - 00000000 ___HD C:\$AVG
2017-01-05 22:23 - 2017-01-05 22:23 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\TuneUp Software
2017-01-05 22:23 - 2017-01-05 22:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2017-01-05 22:22 - 2017-01-06 13:35 - 00000000 ____D C:\ProgramData\MFAData
2017-01-05 22:22 - 2017-01-05 22:22 - 00000000 ____D C:\Users\Ivan\AppData\Local\MFAData
2017-01-05 22:20 - 2017-01-05 22:20 - 00000984 _____ C:\Users\Public\Desktop\AVG.lnk
2017-01-05 22:20 - 2017-01-05 22:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2017-01-05 22:18 - 2017-01-05 22:22 - 00000000 ____D C:\Program Files (x86)\AVG
2017-01-05 22:18 - 2017-01-05 22:18 - 00003600 _____ C:\Windows\System32\Tasks\AVG EUpdate Task
2017-01-05 22:18 - 2017-01-05 22:18 - 00000000 ____D C:\Users\Ivan\AppData\Local\CEF
2017-01-05 22:17 - 2017-01-05 22:24 - 00000000 ____D C:\Users\Ivan\AppData\Local\Avg
2017-01-05 22:17 - 2017-01-05 22:23 - 00000000 ____D C:\ProgramData\Avg
2017-01-05 22:17 - 2017-01-05 22:22 - 00000000 ____D C:\Users\Ivan\AppData\Local\AvgSetupLog
2017-01-05 22:17 - 2017-01-05 22:17 - 03312896 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Ivan\Desktop\AVG_Protection_Free_1606.exe
2017-01-05 22:13 - 2017-01-05 22:15 - 00003192 _____ C:\DelFix.txt
2017-01-05 20:51 - 2017-01-05 22:16 - 00000000 ____D C:\EEK
2017-01-05 20:42 - 2017-01-05 20:46 - 279761224 _____ C:\Users\Ivan\Desktop\EmsisoftEmergencyKit.exe
2017-01-05 20:22 - 2017-01-06 10:48 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-05 20:21 - 2017-01-05 20:21 - 00001102 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2017-01-05 20:21 - 2017-01-05 20:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2017-01-05 20:21 - 2017-01-05 20:21 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-05 20:21 - 2017-01-05 20:21 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2017-01-05 20:21 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2017-01-05 20:21 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2017-01-05 20:21 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-01-05 20:20 - 2017-01-05 20:20 - 22851472 _____ (Malwarebytes ) C:\Users\Ivan\Desktop\mbam-setup-2.2.1.1043.exe
2017-01-05 19:36 - 2017-01-05 19:51 - 00000000 ____D C:\Users\Ivan\AppData\OICE_15_974FA576_32C1D314_3D6F
2017-01-05 16:12 - 2017-01-05 16:12 - 00000000 ____D C:\Program Files (x86)\ESET
2017-01-03 17:04 - 2017-01-03 16:27 - 00284050 ____T C:\Users\Ivan\Documents\Founding-Declaration.pdf
2017-01-03 16:25 - 2017-01-03 16:25 - 00029761 ____T C:\Users\Ivan\Documents\Deklaracia.pdf
2016-12-30 16:38 - 2016-12-30 16:38 - 00264046 _____ C:\Users\Ivan\Desktop\Gmail - Appointment Confirmation.pdf
2016-12-30 11:38 - 2016-12-30 11:38 - 00000000 ____D C:\Users\Ivan\AppData\Local\Diagnostics
2016-12-30 11:00 - 2016-12-30 11:00 - 00061416 _____ C:\Users\Ivan\Desktop\030007a1.jpg
2016-12-30 10:36 - 2016-12-30 10:36 - 00144433 _____ C:\Users\Ivan\Desktop\030007a6.jpg
2016-12-30 10:25 - 2016-12-30 10:25 - 00000991 _____ C:\Users\Public\Desktop\HiSuite.lnk
2016-12-30 10:25 - 2016-12-30 10:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HiSuite
2016-12-30 10:24 - 2016-12-30 10:25 - 00000000 ____D C:\Program Files (x86)\HiSuite
2016-12-30 10:24 - 2016-11-25 08:15 - 00287232 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_quusbnet.sys
2016-12-30 10:24 - 2016-11-25 08:15 - 00223232 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_quusbmdm.sys
2016-12-30 10:24 - 2016-11-25 08:15 - 00126592 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_cdcacm.sys
2016-12-30 10:24 - 2016-11-25 08:15 - 00116864 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_usbdev.sys
2016-12-30 10:24 - 2016-11-25 08:15 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys
2016-12-30 10:24 - 2016-11-25 08:15 - 00018816 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbccgpfilter.sys
2016-12-30 00:49 - 2016-12-30 00:49 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\PDFlite
2016-12-30 00:48 - 2016-12-30 00:48 - 00001859 _____ C:\Users\Public\Desktop\PDFlite.lnk
2016-12-30 00:48 - 2016-12-30 00:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFlite
2016-12-30 00:48 - 2013-08-26 14:12 - 00119152 _____ C:\Windows\system32\redmon.hlp
2016-12-30 00:48 - 2013-08-26 14:12 - 00087040 _____ C:\Windows\system32\redmonnt.dll
2016-12-30 00:48 - 2013-08-26 14:12 - 00046080 _____ C:\Windows\system32\unredmon.exe
2016-12-30 00:47 - 2016-12-30 00:48 - 00000000 ____D C:\Program Files (x86)\PDFlite
2016-12-29 17:33 - 2016-12-29 17:33 - 00001192 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Libronix Digital Library System.lnk
2016-12-29 17:33 - 2016-12-29 17:33 - 00001092 _____ C:\Users\Public\Desktop\Libronix Digital Library System.lnk
2016-12-29 17:02 - 2017-01-04 21:37 - 00000000 ____D C:\Users\Ivan\Documents\Libronix DLS
2016-12-29 16:30 - 2016-12-29 17:02 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Libronix DLS
2016-12-29 16:30 - 2016-12-29 16:30 - 00000000 ____D C:\ProgramData\Libronix DLS
2016-12-29 16:29 - 2016-12-29 17:28 - 00000000 ____D C:\Program Files (x86)\Libronix DLS
2016-12-25 15:21 - 2016-12-25 15:21 - 00000000 ____H C:\Users\Ivan\Documents\Default.rdp
2016-12-25 15:21 - 2016-12-25 15:21 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Macromedia
2016-12-25 15:21 - 2016-12-25 15:21 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\com.adobe.formscentral.FormsCentralForAcrobat
2016-12-25 11:44 - 2016-12-25 11:44 - 00002453 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat XI Pro.lnk
2016-12-25 11:44 - 2016-12-25 11:44 - 00002210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe FormsCentral.lnk
2016-12-25 11:44 - 2016-12-25 11:44 - 00002140 _____ C:\Users\Public\Desktop\Adobe FormsCentral.lnk
2016-12-25 11:44 - 2016-12-25 11:44 - 00002049 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller XI.lnk
2016-12-25 11:44 - 2016-12-25 11:44 - 00002026 _____ C:\Users\Public\Desktop\Adobe Acrobat XI Pro.lnk
2016-12-25 11:40 - 2017-01-05 19:33 - 00000000 ____D C:\Windows\system32\appmgmt
2016-12-25 11:26 - 2016-12-25 11:45 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-12-25 11:22 - 2016-12-27 17:54 - 00000000 ____D C:\Users\Ivan\AppData\Local\Adobe
2016-12-25 11:22 - 2016-12-25 15:21 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Adobe
2016-12-25 11:20 - 2016-12-25 11:43 - 00000000 ____D C:\ProgramData\Adobe
2016-12-25 11:20 - 2016-12-25 11:42 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-12-25 10:29 - 2016-12-27 17:36 - 00000000 ____D C:\Users\Ivan\Evernote
2016-12-25 10:29 - 2016-12-25 10:29 - 00000932 _____ C:\Users\Ivan\Desktop\Evernote.lnk
2016-12-25 10:29 - 2016-12-25 10:29 - 00000000 ____D C:\Users\Ivan\AppData\LocalLow\Evernote
2016-12-25 10:29 - 2016-12-25 10:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote
2016-12-25 10:29 - 2016-12-25 10:29 - 00000000 ____D C:\Program Files (x86)\Evernote
2016-12-24 18:36 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-12-24 18:36 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-12-24 18:36 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-12-24 18:36 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-12-24 18:36 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-12-24 18:36 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-12-24 18:36 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-12-24 18:36 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-12-24 18:36 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-12-24 18:36 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-12-24 18:35 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-12-24 18:35 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-12-24 18:35 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-12-24 18:35 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-12-24 18:33 - 2016-12-24 18:33 - 00001128 _____ C:\ProgramData\Microsoft\Windows\Start Menu\BS.Player FREE.lnk
2016-12-24 18:33 - 2016-12-24 18:33 - 00001122 _____ C:\Users\Public\Desktop\BS.Player FREE.lnk
2016-12-24 18:33 - 2016-12-24 18:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BS.Player
2016-12-24 18:32 - 2016-12-25 22:40 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\BSplayer
2016-12-24 18:32 - 2016-12-24 18:32 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\BSplayer Pro
2016-12-24 18:32 - 2016-12-24 18:32 - 00000000 ____D C:\Program Files (x86)\Webteh
2016-12-24 16:19 - 2016-12-24 16:19 - 00002456 _____ C:\Users\Ivan\Documents\Register Vegas Pro.htm
2016-12-24 16:14 - 2016-12-24 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2016-12-24 16:13 - 2017-01-06 13:50 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{a5b3df42-c9e1-11e6-9c32-4cbb583f2f74}.TMContainer00000000000000000001.regtrans-ms
2016-12-24 16:13 - 2017-01-06 13:50 - 00065536 ___SH C:\Windows\system32\config\COMPONENTS{a5b3df42-c9e1-11e6-9c32-4cbb583f2f74}.TM.blf
2016-12-24 16:13 - 2016-12-24 16:23 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{a5b3df42-c9e1-11e6-9c32-4cbb583f2f74}.TMContainer00000000000000000002.regtrans-ms
2016-12-24 16:13 - 2016-12-24 16:17 - 00000000 ____D C:\Users\Ivan\AppData\Local\Sony
2016-12-24 16:13 - 2016-12-24 16:13 - 00000000 ____D C:\ProgramData\Sony
2016-12-24 16:13 - 2016-12-24 16:13 - 00000000 ____D C:\Program Files\Sony
2016-12-24 16:13 - 2016-12-24 16:13 - 00000000 ____D C:\Program Files (x86)\Sony
2016-12-24 16:11 - 2016-12-24 16:39 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Sony
2016-12-24 15:41 - 2016-12-24 15:41 - 00000000 ____D C:\Windows\SysWOW64\sda
2016-12-24 15:37 - 2016-12-24 15:37 - 01048576 ___SH C:\Windows\system32\config\COMPONENTS{016888b8-6c6f-11de-8d1d-001e0bcde3ec}.TxR.2.regtrans-ms
2016-12-24 15:37 - 2016-12-24 15:37 - 01048576 ___SH C:\Windows\system32\config\COMPONENTS{016888b8-6c6f-11de-8d1d-001e0bcde3ec}.TxR.1.regtrans-ms
2016-12-24 15:37 - 2016-12-24 15:37 - 01048576 ___SH C:\Windows\system32\config\COMPONENTS{016888b8-6c6f-11de-8d1d-001e0bcde3ec}.TxR.0.regtrans-ms
2016-12-24 15:37 - 2016-12-24 15:37 - 00065536 ___SH C:\Windows\system32\config\COMPONENTS{016888b8-6c6f-11de-8d1d-001e0bcde3ec}.TxR.blf
2016-12-24 15:37 - 2013-11-01 23:40 - 00330456 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsUVStor.sys
2016-12-24 15:37 - 2013-04-26 02:12 - 09889352 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RtsUVStoricon.dll
2016-12-24 15:15 - 2016-12-24 15:15 - 00000000 ____D C:\Users\Ivan\AppData\Local\Programs
2016-12-24 15:11 - 2016-12-24 15:37 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-12-24 15:11 - 2016-12-24 15:11 - 00000000 ____D C:\DRIVERS
2016-12-24 07:58 - 2017-01-06 08:59 - 00000000 ____D C:\Users\Ivan\AppData\Local\CrashDumps
2016-12-24 07:50 - 2016-12-24 07:50 - 00000000 ____D C:\Users\Ivan\Documents\Шаблони на Office по избор
2016-12-24 07:41 - 2016-12-24 07:41 - 00000960 _____ C:\Users\Public\Desktop\calibre - E-book management.lnk
2016-12-24 07:41 - 2016-12-24 07:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2016-12-24 07:41 - 2016-12-24 07:41 - 00000000 ____D C:\Program Files (x86)\Calibre2
2016-12-23 12:50 - 2016-12-23 12:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IP Camera Adapter
2016-12-23 12:50 - 2016-12-23 12:50 - 00000000 ____D C:\Program Files (x86)\IP Camera Adapter
2016-12-23 12:03 - 2016-12-23 12:03 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2016-12-23 11:58 - 2016-12-23 11:58 - 00000000 ____D C:\Users\Ivan\Documents\HiSuite
2016-12-23 11:57 - 2016-12-30 10:25 - 00000000 ____D C:\Users\Ivan\AppData\Local\Hisuite
2016-12-23 11:57 - 2016-11-25 08:15 - 02152176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFUpdate_01009.dll
2016-12-23 11:57 - 2016-11-25 08:15 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01009.dll
2016-12-23 11:57 - 2016-11-25 08:15 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winusbcoinstaller2.dll
2016-12-23 11:55 - 2016-12-23 11:55 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2016-12-22 15:58 - 2017-01-06 08:45 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-12-22 14:34 - 2016-12-22 14:34 - 00001914 _____ C:\Users\Public\Desktop\BibleWorks 10.lnk
2016-12-22 14:34 - 2000-10-31 02:11 - 00098304 _____ (TechSmith Corporation) C:\Windows\SysWOW64\tsccvid.dll
2016-12-22 14:33 - 2016-12-22 14:33 - 00000000 ____D C:\Users\Ivan\Documents\BibleWorks
2016-12-22 14:33 - 2016-12-22 14:33 - 00000000 ____D C:\Users\Ivan\AppData\Local\BibleWorks
2016-12-22 14:33 - 2016-12-22 14:33 - 00000000 ____D C:\ProgramData\BibleWorks
2016-12-22 14:33 - 2015-11-16 17:42 - 02881024 _____ C:\Windows\SysWOW64\bwinstall.dll
2016-12-22 14:33 - 2015-09-16 14:35 - 00147456 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\HRS32.DLL
2016-12-22 14:33 - 2015-09-16 14:29 - 00614400 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\HTS18.DLL
2016-12-22 14:33 - 2015-09-15 14:23 - 01974272 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\TER23.DLL
2016-12-22 14:33 - 2015-03-22 15:44 - 22962688 _____ C:\Windows\SysWOW64\bwbits10.dll
2016-12-22 14:33 - 2015-02-17 16:30 - 00610304 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\HTS17.DLL
2016-12-22 14:33 - 2015-02-16 18:14 - 01937408 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\TER22.DLL
2016-12-22 14:33 - 2014-07-31 16:52 - 01843200 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\ter20.dll
2016-12-22 14:33 - 2014-07-31 16:52 - 00593920 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\hts15.dll
2016-12-22 14:33 - 2013-11-08 09:49 - 00647680 _____ C:\Windows\SysWOW64\sqlite3.dll
2016-12-22 14:33 - 2011-02-07 17:41 - 00304640 _____ (MicroQuill Software Publishing, Inc.) C:\Windows\SysWOW64\SHW32d.DLL
2016-12-22 14:33 - 2010-08-31 13:08 - 01560576 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\TER17.DLL
2016-12-22 14:33 - 2010-08-31 13:08 - 00577573 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\HTS12.DLL
2016-12-22 14:33 - 2010-08-31 13:08 - 00267728 _____ (Wintertree Software Inc.) C:\Windows\SysWOW64\ssce5532.dll
2016-12-22 14:33 - 2009-04-20 03:00 - 00139264 _____ (Info-ZIP) C:\Windows\SysWOW64\unzip32.dll
2016-12-22 14:33 - 2007-01-25 03:03 - 00058280 _____ C:\Windows\SysWOW64\bwnthook.dll
2016-12-22 14:33 - 2007-01-25 03:02 - 00058280 _____ C:\Windows\SysWOW64\bwntsend.dll
2016-12-22 14:33 - 2005-08-06 08:45 - 00055808 _____ C:\Windows\SysWOW64\zlib1.dll
2016-12-22 14:33 - 2003-09-17 12:43 - 00081920 _____ C:\Windows\SysWOW64\bwplay.exe
2016-12-22 14:33 - 2000-03-14 05:21 - 00181760 _____ C:\Windows\SysWOW64\patchw32.dll
2016-12-22 14:33 - 1997-12-05 12:33 - 00116736 _____ C:\Windows\SysWOW64\patchw.dll
2016-12-22 14:22 - 2017-01-06 10:55 - 00000000 ____D C:\Program Files (x86)\BibleWorks 10
2016-12-22 14:22 - 2016-12-22 14:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BibleWorks 10
2016-12-22 09:39 - 2016-12-25 11:26 - 00000000 ____D C:\Users\Ivan\AppData\LocalLow\Adobe
2016-12-21 14:53 - 2016-12-21 14:53 - 03370683 _____ C:\Users\Ivan\Desktop\Topics.pdf
2016-12-21 11:50 - 2016-12-21 11:50 - 00000000 _____ C:\autoexec.bat
2016-12-21 10:14 - 2016-12-21 10:14 - 00003053 _____ C:\Users\Ivan\Desktop\SharpKeys.lnk
2016-12-21 10:14 - 2016-12-21 10:14 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RandyRants.com
2016-12-21 10:14 - 2016-12-21 10:14 - 00000000 ____D C:\Program Files (x86)\RandyRants.com
2016-12-21 10:13 - 2016-12-21 10:13 - 00486400 _____ C:\Users\Ivan\Downloads\Непотвърдено 701865.crdownload
2016-12-21 10:13 - 2016-12-21 10:13 - 00486400 _____ C:\Users\Ivan\Downloads\Непотвърдено 568051.crdownload
2016-12-21 10:12 - 2016-12-21 10:12 - 00486400 _____ C:\Users\Ivan\Downloads\Непотвърдено 131414.crdownload
2016-12-21 10:00 - 2016-12-21 10:00 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\WinRAR
2016-12-21 09:55 - 2016-12-21 09:55 - 00000000 _RSHD C:\Windows Activation Technologies
2016-12-21 09:54 - 2012-10-07 14:33 - 00001429 _____ C:\Users\Ivan\Desktop\KJ_Starter.lnk
2016-12-21 09:54 - 2012-10-07 14:33 - 00001429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KJ_Starter.lnk
2016-12-21 09:54 - 2012-10-06 00:07 - 00405881 _____ C:\Windows\KJ.exe
2016-12-21 09:53 - 2017-01-06 12:03 - 00000000 ____D C:\Windows\KJ
2016-12-21 09:51 - 2017-01-05 18:16 - 00000000 ____D C:\Downloads
2016-12-21 09:50 - 2017-01-05 19:51 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\BitComet
2016-12-21 09:50 - 2016-12-21 09:50 - 00000812 _____ C:\Users\Public\Desktop\BitComet.lnk
2016-12-21 09:50 - 2016-12-21 09:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit)
2016-12-21 09:50 - 2016-12-21 09:50 - 00000000 ____D C:\Program Files\BitComet
2016-12-21 09:49 - 2016-12-21 09:49 - 16316000 _____ C:\Users\Ivan\Downloads\BitComet_1.44_setup (1).exe
2016-12-21 09:48 - 2016-12-21 09:48 - 16316000 _____ C:\Users\Ivan\Downloads\BitComet_1.44_setup.exe
2016-12-21 09:27 - 2016-12-21 09:27 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-12-21 09:26 - 2016-12-21 11:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-12-21 09:26 - 2016-12-21 09:26 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-12-21 09:25 - 2017-01-06 08:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-12-21 09:25 - 2016-12-21 09:25 - 00000000 ____D C:\Windows\PCHEALTH
2016-12-21 09:25 - 2016-12-21 09:25 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-12-21 09:25 - 2016-12-21 09:25 - 00000000 ____D C:\Program Files\Microsoft.NET
2016-12-21 09:25 - 2016-12-21 09:25 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2016-12-21 09:25 - 2016-12-21 09:25 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2016-12-21 09:23 - 2016-12-21 11:36 - 00000000 ____D C:\ProgramData\Microsoft Help
2016-12-21 09:23 - 2016-12-21 09:25 - 00000000 ____D C:\Program Files\Microsoft Office
2016-12-21 09:23 - 2016-12-21 09:23 - 00000000 ____D C:\Users\Ivan\AppData\Local\Microsoft Help
2016-12-21 09:23 - 2016-12-21 09:23 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2016-12-21 09:23 - 2016-12-21 09:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-12-21 09:23 - 2016-12-21 09:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2016-12-21 09:22 - 2016-12-21 09:22 - 00000000 __RHD C:\MSOCache
2016-12-21 09:21 - 2016-12-21 09:21 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-12-21 09:21 - 2016-12-21 09:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-12-21 09:21 - 2016-12-21 09:21 - 00000000 ____D C:\Program Files (x86)\WinRAR
2016-12-21 09:20 - 2016-12-21 09:20 - 01972424 _____ C:\Users\Ivan\Downloads\wrar540.exe
2016-12-21 09:17 - 2016-12-21 09:17 - 00000000 ____D C:\Users\Ivan\AppData\Local\Disc_Soft_Ltd
2016-12-21 09:15 - 2016-12-21 09:15 - 00000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2016-12-21 09:13 - 2016-12-21 09:18 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\DAEMON Tools Lite
2016-12-21 09:13 - 2016-12-21 09:14 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2016-12-21 09:13 - 2016-12-21 09:13 - 00047672 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtliteusbbus.sys
2016-12-21 09:13 - 2016-12-21 09:13 - 00030264 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2016-12-21 09:13 - 2016-12-21 09:13 - 00001773 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2016-12-21 09:13 - 2016-12-21 09:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2016-12-21 09:13 - 2016-12-21 09:13 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2016-12-21 08:45 - 2016-12-21 09:25 - 00000000 ____D C:\Program Files (x86)\Microsoft.NET
2016-12-21 08:43 - 2016-12-21 08:43 - 00692072 _____ (Disc Soft Ltd.) C:\Users\Ivan\Downloads\DTLiteInstaller.exe
2016-12-21 08:28 - 2016-12-21 08:28 - 00000118 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-12-21 08:27 - 2017-01-06 13:35 - 00000000 __SHD C:\Users\Ivan\IntelGraphicsProfiles
2016-12-21 08:27 - 2016-12-21 08:27 - 00015778 _____ C:\Windows\system32\results.xml
2016-12-21 08:26 - 2016-12-21 08:26 - 00000401 _____ C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2016-12-21 08:24 - 2016-12-21 08:24 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2016-12-21 08:24 - 2013-12-21 00:38 - 00041984 _____ (Intel Corporation) C:\Windows\system32\Drivers\USB3Ver.dll
2016-12-21 08:24 - 2013-12-10 15:27 - 00016344 _____ (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll
2016-12-21 08:23 - 2016-12-21 08:23 - 00000000 ____H C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf
2016-12-21 08:23 - 2016-12-21 08:23 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2016-12-21 08:23 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2016-12-21 08:23 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2016-12-21 08:23 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2016-12-21 08:23 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2016-12-21 08:22 - 2016-12-21 08:46 - 00751640 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-12-21 08:22 - 2016-12-21 08:24 - 00000000 ____D C:\ProgramData\Intel
2016-12-21 08:22 - 2016-12-21 08:22 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-12-21 08:22 - 2016-12-21 08:22 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Intel Corporation
2016-12-21 08:21 - 2016-12-21 08:24 - 00000000 ____D C:\Program Files\Intel
2016-12-21 08:21 - 2016-12-21 08:24 - 00000000 ____D C:\Program Files (x86)\Intel
2016-12-21 08:21 - 2016-12-21 08:21 - 00000700 _____ C:\Users\Public\Desktop\Intel(R) HD Graphics Control Panel.lnk
2016-12-21 08:21 - 2016-06-23 08:53 - 00095232 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL
2016-12-21 08:21 - 2016-06-23 08:53 - 00091128 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL
2016-12-21 08:20 - 2016-12-21 08:27 - 00000000 ____D C:\Intel
2016-12-21 08:18 - 2016-12-21 08:18 - 00000000 ____D C:\Users\Ivan\Documents\Dell Downloads
2016-12-21 08:17 - 2016-12-21 08:17 - 00013560 _____ C:\Users\Ivan\Downloads\DellSystemDetectLauncher.Application
2016-12-21 08:17 - 2016-12-21 08:17 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell
2016-12-21 08:15 - 2016-12-21 08:15 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Приложения в Chrome
2016-12-21 08:14 - 2016-12-21 08:14 - 00002265 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-21 08:14 - 2016-12-21 08:14 - 00002253 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-12-21 08:13 - 2016-12-30 00:48 - 00142672 _____ C:\Users\Ivan\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-21 08:13 - 2016-12-23 12:07 - 00000000 ____D C:\Users\Ivan\AppData\Local\Deployment
2016-12-21 08:13 - 2016-12-21 08:22 - 00000000 ____D C:\Users\Ivan\AppData\Local\Google
2016-12-21 08:13 - 2016-12-21 08:20 - 00003430 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-21 08:13 - 2016-12-21 08:20 - 00003302 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-21 08:13 - 2016-12-21 08:14 - 00000000 ____D C:\Program Files (x86)\Google
2016-12-21 08:13 - 2016-12-21 08:13 - 00000000 ____D C:\Users\Ivan\AppData\Local\Apps\2.0
2016-12-21 08:13 - 2016-12-21 08:13 - 00000000 ____D C:\Users\Ivan\AppData\Local\Apps
2016-12-21 08:11 - 2016-12-21 08:12 - 00000000 ____D C:\Users\Ivan\AppData\LocalLow\Microsoft
2016-12-21 08:11 - 2016-12-21 08:11 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Atheros
2016-12-21 08:11 - 2016-12-21 08:11 - 00000000 ____D C:\Users\Ivan\AppData\Local\BMExplorer
2016-12-21 08:11 - 2016-12-21 08:11 - 00000000 ____D C:\ProgramData\Atheros
2016-12-21 08:10 - 2016-12-21 08:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HotSpot
2016-12-21 08:10 - 2016-12-21 08:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atheros Smart Net
2016-12-21 08:09 - 2016-12-21 08:09 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_btath_hcrp_01009.Wdf
2016-12-21 08:08 - 2016-12-28 16:35 - 00000000 ____D C:\Users\Ivan\Documents\Bluetooth Folder
2016-12-21 08:07 - 2016-12-21 08:08 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BT Program
2016-12-21 08:07 - 2016-12-21 08:08 - 00000000 ____D C:\Program Files\Common Files\QCA_Bluetooth
2016-12-21 08:06 - 2017-01-05 22:24 - 00000000 __SHD C:\Windows\Installer
2016-12-21 08:06 - 2016-12-24 15:37 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-12-21 08:06 - 2016-12-21 08:10 - 00000000 ____D C:\Program Files (x86)\Dell Wireless
2016-12-21 08:06 - 2016-12-21 08:06 - 00000000 ____D C:\Windows\system32\nn-NO
2016-12-21 08:06 - 2016-12-21 08:06 - 00000000 ____D C:\Windows\Options
2016-12-21 08:06 - 2016-12-21 08:06 - 00000000 ____D C:\Program Files (x86)\Cisco
2016-12-21 08:06 - 2015-02-02 00:21 - 00031345 ____N C:\Windows\system32\netathrx.inf
2016-12-21 08:06 - 2015-02-02 00:21 - 00027074 ____N C:\Windows\system32\athwbx.inf
2016-12-21 08:06 - 2015-02-02 00:21 - 00011400 ____N C:\Windows\system32\athwbx.cat
2016-12-21 08:06 - 2015-02-02 00:21 - 00009662 ____N C:\Windows\system32\athrextx.cat
2016-12-21 08:06 - 2015-01-11 19:19 - 04134912 ____N (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\athrx.sys
2016-12-21 08:06 - 2015-01-11 19:19 - 04134912 _____ (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\Drivers\athrx.sys
2016-12-21 08:06 - 2015-01-11 19:07 - 04267008 ____N (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\athwbx.sys
2016-12-21 08:06 - 2014-05-13 20:07 - 00060416 ____N (Atheros) C:\Windows\system32\athihvui.dll
2016-12-21 08:06 - 2014-05-13 20:06 - 00440320 ____N (Atheros) C:\Windows\system32\athihvs.dll
2016-12-21 08:05 - 2016-12-21 08:06 - 00000000 ____D C:\ProgramData\Dell
2016-12-21 08:03 - 2017-01-06 13:58 - 01835008 ___SH C:\Users\Ivan\NTUSER.DAT
2016-12-21 08:03 - 2017-01-06 13:58 - 00262144 ___SH C:\Users\Ivan\ntuser.dat.LOG1
2016-12-21 08:03 - 2017-01-06 13:57 - 00000000 ___RD C:\Users\Ivan\Desktop
2016-12-21 08:03 - 2017-01-06 13:53 - 00000000 ___RD C:\Users\Ivan\Downloads
2016-12-21 08:03 - 2017-01-06 13:35 - 00000000 ___RD C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-21 08:03 - 2017-01-06 13:34 - 00000000 ____D C:\Users\Ivan\AppData\Local
2016-12-21 08:03 - 2017-01-06 12:39 - 00000000 ____D C:\Users\Ivan\AppData\Roaming
2016-12-21 08:03 - 2017-01-06 12:39 - 00000000 ____D C:\Users\Ivan
2016-12-21 08:03 - 2017-01-06 08:55 - 00000000 ____D C:\Users\Ivan\AppData\LocalLow
2016-12-21 08:03 - 2017-01-05 19:36 - 00000000 ___HD C:\Users\Ivan\AppData
2016-12-21 08:03 - 2017-01-03 17:04 - 00000000 ___RD C:\Users\Ivan\Documents
2016-12-21 08:03 - 2017-01-02 13:02 - 00000000 ___SD C:\Users\Ivan\AppData\Roaming\Microsoft
2016-12-21 08:03 - 2016-12-30 11:37 - 00000000 ____D C:\Users\Ivan\AppData\Local\Microsoft
2016-12-21 08:03 - 2016-12-30 01:21 - 00000000 ___RD C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2016-12-21 08:03 - 2016-12-21 08:10 - 00524288 ___SH C:\Users\Ivan\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
2016-12-21 08:03 - 2016-12-21 08:10 - 00524288 ___SH C:\Users\Ivan\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
2016-12-21 08:03 - 2016-12-21 08:10 - 00065536 ___SH C:\Users\Ivan\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
2016-12-21 08:03 - 2016-12-21 08:03 - 00001427 _____ C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-12-21 08:03 - 2016-12-21 08:03 - 00001393 _____ C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2016-12-21 08:03 - 2016-12-21 08:03 - 00000476 ___SH C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-21 08:03 - 2016-12-21 08:03 - 00000402 ___SH C:\Users\Ivan\Documents\desktop.ini
2016-12-21 08:03 - 2016-12-21 08:03 - 00000282 ___SH C:\Users\Ivan\Downloads\desktop.ini
2016-12-21 08:03 - 2016-12-21 08:03 - 00000282 ___SH C:\Users\Ivan\Desktop\desktop.ini
2016-12-21 08:03 - 2016-12-21 08:03 - 00000174 ___SH C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
2016-12-21 08:03 - 2016-12-21 08:03 - 00000020 ___SH C:\Users\Ivan\ntuser.ini
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 __SHD C:\Recovery
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___SH C:\Users\Ivan\ntuser.dat.LOG2
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Videos
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Searches
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Saved Games
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Pictures
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Music
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Links
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Favorites
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Contacts
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Identities
2016-12-21 08:03 - 2011-04-12 10:34 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Media Center Programs
2016-12-21 08:03 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-21 08:03 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2016-12-21 08:01 - 2016-12-21 08:01 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-12-21 08:00 - 2017-01-06 13:39 - 00505730 _____ C:\Windows\WindowsUpdate.log
2016-12-21 08:00 - 2016-12-24 15:25 - 00000000 ____D C:\Windows\SoftwareDistribution
2016-12-21 08:00 - 2016-12-21 08:00 - 00001355 _____ C:\Windows\TSSysprep.log
2016-12-21 08:00 - 2016-12-21 08:00 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-12-21 07:59 - 2016-12-21 07:59 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-12-21 07:58 - 2016-12-21 14:55 - 00000000 ____D C:\Windows\Prefetch
2016-12-21 07:57 - 2017-01-06 13:34 - 4194332672 ___SH C:\pagefile.sys
2016-12-21 07:57 - 2017-01-06 12:21 - 00000000 __SHD C:\System Volume Information
2016-12-21 07:57 - 2016-12-21 08:03 - 00000000 ____D C:\Windows\Panther

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-06 13:34 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-06 13:33 - 2009-07-14 06:45 - 00025936 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-06 13:33 - 2009-07-14 06:45 - 00025936 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-06 08:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2017-01-06 08:45 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\Downloaded Program Files
2017-01-06 08:43 - 2009-07-14 07:13 - 00787118 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-06 08:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-01-05 20:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\security
2016-12-30 21:31 - 2009-07-14 06:45 - 00507696 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-30 10:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\DriverStore
2016-12-30 10:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\catroot
2016-12-30 01:04 - 2009-07-14 05:20 - 00000000 ___RD C:\Program Files
2016-12-29 16:32 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\Fonts
2016-12-27 17:54 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2016-12-27 17:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\bg-BG
2016-12-27 17:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\bg-BG
2016-12-24 16:14 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\assembly
2016-12-24 16:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Microsoft.NET
2016-12-24 15:36 - 2009-07-14 06:54 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{016888b9-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
2016-12-24 15:36 - 2009-07-14 06:54 - 00065536 ___SH C:\Windows\system32\config\COMPONENTS{016888b9-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
2016-12-24 15:08 - 2009-07-14 05:20 - 00000000 ___SD C:\ProgramData\Microsoft
2016-12-23 11:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Drivers\UMDF
2016-12-21 10:03 - 2011-04-12 10:34 - 00000000 ____D C:\Windows\ShellNew
2016-12-21 10:03 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini
2016-12-21 09:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-12-21 09:26 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-12-21 09:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\Tasks\Microsoft
2016-12-21 09:24 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2016-12-21 09:15 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Public\Documents
2016-12-21 08:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\en-US
2016-12-21 08:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\en-US
2016-12-21 08:25 - 2011-04-12 10:24 - 00000000 ____D C:\Windows\system32\Drivers\en-US
2016-12-21 08:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\wbem
2016-12-21 08:23 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Logs
2016-12-21 08:22 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore
2016-12-21 08:21 - 2009-07-14 06:54 - 00000404 ___SH C:\Users\Public\Desktop\desktop.ini
2016-12-21 08:20 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\LogFiles
2016-12-21 08:20 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\CodeIntegrity
2016-12-21 08:08 - 2009-07-14 05:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-TW
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-CN
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sv-SE
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ru-RU
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\pt-PT
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\pl-PL
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\nl-NL
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ko-KR
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ja-JP
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\it-IT
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\hu-HU
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\fr-FR
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\fi-FI
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\es-ES
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\el-GR
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\de-DE
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\da-DK
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\cs-CZ
2016-12-21 08:03 - 2009-07-14 05:20 - 00000000 ___RD C:\Users
2016-12-21 08:02 - 2009-07-14 06:45 - 00000000 ____D C:\Windows\debug
2016-12-21 08:01 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-12-21 08:01 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-21 08:01 - 2009-07-14 07:01 - 00281759 _____ C:\Windows\SysWOW64\license.rtf
2016-12-21 08:01 - 2009-07-14 07:01 - 00281759 _____ C:\Windows\system32\license.rtf
2016-12-21 08:01 - 2009-07-14 06:54 - 00000964 ___SH C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-21 08:00 - 2009-07-14 06:46 - 00002790 _____ C:\Windows\DtcInstall.log
2016-12-21 08:00 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2016-12-21 07:58 - 2011-04-12 10:34 - 00000000 ____D C:\Windows\CSC
2016-12-21 07:57 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2016-12-21 07:57 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2016-12-21 07:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\config\RegBack
2016-12-21 07:57 - 2009-07-14 04:34 - 00189440 ____H C:\Users\Default\NTUSER.DAT.LOG1
2016-12-21 07:56 - 2009-07-14 04:34 - 00262144 ___SH C:\Users\Default\NTUSER.DAT

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe
[2010-11-21 05:24] - [2011-01-16 02:01] - 0389632 ____A (Microsoft Corporation) 81257415084B84F3C0D95C381A8D4C8F

C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll
[2010-11-21 05:24] - [2011-01-16 02:01] - 1008640 ____A (Microsoft Corporation) 0B864E15A0BADFF0E7BB8B59009FDDCF

C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-12-21 07:57

==================== End of FRST.txt ============================

Addition.txt

  • Автор

Това, което забелязвам при clubZ е, че поне в три от пет зареждания на страницата изскачат тези реклами. В два от случаите не успяват да заредят. Дневник засега си е чист и е истинско удоволствие да се отварят нови страници без досадните реклами. В офнюз се появяват някои, други се мъчат да се заредят, но не успяват.

Добре нека пробваме нещо.

Стъпка 1

Изтеглете файла fixlist и го запазете на вашия десктоп.

  • Стартирайте FRST.exe и натиснете бутона FIX веднъж!
  • Почистването ще започне, не използвайте системата!
  • След като приключи, ако ви поиска рестартиране, съгласете се.
  • След като зареди системата публикувайте лог файла с име fixlog.txt, който се намира на десктопа Ви.

Забележка: Текущия фикс да не се използва на други системи!

 

Стъпка 2

 

Изтеглете: 9008929C.jpg HitmanPro.

  • Запазете файла на вашия десктоп.
  • Стартирайте програмата.

Забележка: Програмата ще се актуализира, след актуализацията HitmanPro ще се рестартира.

  • Натиснете бутона "Напред".
  • Сложете отметка на лицензионното споразумение и натиснете отново бутона "Напред".
  • Кликнете върху "Не, искам да извърша еднократно сканиране на компютъра" и натиснете бутона "Напред".
  • Програмата ще започне да сканира. Сканирането ще отнеме ~2 минути.
  • След като сканирането приключи от списъка с намерените обекти(ако има такива) изберете Apply to all => Ignore.
  • Натиснете бутона "Next" и след това бутона "Изнеси резултатите от сканирането в XML файл" и запазете лог файла на десктопа.
  • Отворете лог файла, копирайте съдържанието му и го поставете в следващия Ви коментар.

Забележка: Ако от падащото меню няма Ignore тогава просто затворете програмата след края на проверката без да премахвате нищо!

От My Computer => Tools => Folder Options => View => Сложете отметка пред "Show hidden files, folders and drives".
Натиснете Apply.

Влезте в C:\Programdata\HitmanPro\Logs прикачете лога към следващия Ви коментар.

  • Автор

Стъпка 1

Публикувам лог файла (прикачам и пускам съдържанието му):

Fix result of Farbar Recovery Scan Tool (x64) Version: 01-01-2017
Ran by Ivan (06-01-2017 18:31:03) Run:1
Running from C:\Users\Ivan\Desktop
Loaded Profiles: Ivan (Available Profiles: Ivan)
Boot Mode: Normal
==============================================

fixlist content:
*****************
start
CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-06]
CHR Extension: (Chrome Media Router) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-06]
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.6\\npsitesafety.dll [No File]
Toolbar: HKU\S-1-5-21-3399940750-3007407254-270903411-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.3.6.255\AVG Web TuneUp.dll => No File
2017-01-06 13:33 - 2017-01-06 13:12 - 00024064 _____ C:\Windows\zoek-delete.exe
2017-01-06 12:19 - 2017-01-06 12:39 - 00000000 ____D C:\zoek_backup
2017-01-06 12:18 - 2017-01-06 12:19 - 01309184 _____ C:\Users\Ivan\Desktop\zoek.exe
C:\Program Files\Common Files\AVG Secure Search
C:\EEK
C:\DelFix.txt
C:\Users\Ivan\Desktop\EmsisoftEmergencyKit.exe
end
*****************

C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda => moved successfully
C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm => moved successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin => key removed successfully
HKU\S-1-5-21-3399940750-3007407254-270903411-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => value removed successfully
HKCR\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => key not found. 
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} => key removed successfully
HKCR\Wow6432Node\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} => key not found. 
C:\Windows\zoek-delete.exe => moved successfully
C:\zoek_backup => moved successfully
C:\Users\Ivan\Desktop\zoek.exe => moved successfully
C:\Program Files\Common Files\AVG Secure Search => moved successfully
C:\EEK => moved successfully
C:\DelFix.txt => moved successfully
C:\Users\Ivan\Desktop\EmsisoftEmergencyKit.exe => moved successfully

==== End of Fixlog 18:31:05 ====

Fixlog.txt

Стъпка 2: 

HitmanPro 3.7.15.281
www.hitmanpro.com
	   Computer name . . . . : IVAN-PC
   Windows . . . . . . . : 6.1.1.7601.X64/4
   User name . . . . . . : Ivan-PC\Ivan
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Free
	   Scan date . . . . . . : 2017-01-06 18:38:49
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 4m 51s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No
	   Threats . . . . . . . : 0
   Traces  . . . . . . . : 243
	   Objects scanned . . . : 1 046 765
   Files scanned . . . . : 19 305
   Remnants scanned  . . : 156 323 files / 871 137 keys
	Potential Unwanted Programs _________________________________________________
	   HKLM\SOFTWARE\Classes\s\ (Softonic)
	Cookies _____________________________________________________________________
	   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:246059135.log.optimizely.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:254a.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:acuityplatform.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.360yield.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.turn.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:adadvisor.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:adaptv.advertising.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:adbrn.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:addthis.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:adfarm1.adition.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:adform.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:adgrx.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:adhigh.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:adingo.jp
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:adnxs.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.avocet.io
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.clubz.bg
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.creative-serving.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.deliverimp.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.domainbg.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.kaldata.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.kiosked.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.linkedin.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.programattik.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.pubmatic.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.stickyadstv.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.webcafe.bg
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:adscale.de
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:adscience.nl
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:adsrvr.org
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:adsymptotic.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:adtech.de
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:adtechus.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:advertising.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:adx.adform.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:agkn.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:angsrvr.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:at.atwola.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:atdmt.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:atemda.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:atwola.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:basebanner.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:bet.demdex.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:bidr.io
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:bidswitch.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:bluekai.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:bs.serving-sys.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:c.appier.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:casalemedia.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:chango.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:collective-media.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:connexity.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:contextweb.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:crwdcntrl.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ctnsnet.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:cxense.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:demdex.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:diff3.smartadserver.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:dotomi.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:doubleclick.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:dpm.demdex.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:dsp.linksynergy.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:erne.co
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:everesttech.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:eyereturn.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:eyeviewads.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:flashtalking.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:go.sonobi.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:googleadservices.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:gssprt.jp
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:gwallet.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ibeu2.mookie1.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:igodigital.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ih.adscale.de
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:imrworldwide.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:in.getclicky.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ipredictive.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:krxd.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:legolas-media.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:lijit.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:linksynergy.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:liverail.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:match.adsby.bidtheatre.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:match.rundsp.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:mathtag.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:media6degrees.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:metrigo.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ml314.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:mookie1.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:mxptint.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:nexac.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:openx.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:outbrain.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:owneriq.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:pixel-a.sitescout.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:pixel.rubiconproject.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:pixel.sitescout.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:po.st
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:pool.admedo.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:postrelease.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:pubmatic.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:revsci.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:rfihub.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:rlcdn.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ru4.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:rubiconproject.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:scorecardresearch.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:serving-sys.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:shopstyle.sc.omtrdc.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:simpli.fi
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:sitescout.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:skimresources.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:smartadserver.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:statcounter.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:stats.christianpost.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:swid.switchads.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:sxp.smartclip.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:taboola.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:tacoda.at.atwola.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:tap-secure.rubiconproject.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:tap-t.rubiconproject.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:tap.rubiconproject.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:tap2-cdn.rubiconproject.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:tapad.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:tidaltv.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:track.visitorpath.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:trc.taboola.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:tremorhub.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:tribalfusion.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:tubemogul.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:turn.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:vindicosuite.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:virool.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:w55c.net
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:wtp101.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:www5.smartadserver.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:www8.smartadserver.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:www9.smartadserver.com
   C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cookies:zedo.com
   C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Cookies\Low\ivan@adnxs[1].txt
   C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
   C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Cookies\Low\ivan@advertising[2].txt
   C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
   C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Cookies\Low\ivan@atwola[1].txt
   C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Cookies\Low\ivan@doubleclick[2].txt
   C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Cookies\Low\ivan@scorecardresearch[2].txt
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:246059135.log.optimizely.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:254a.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:acuityplatform.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:ad.360yield.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:adadvisor.net
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:adaptv.advertising.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:addthis.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:adfarm1.adition.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:adform.net
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:adgrx.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:adhigh.net
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:adnxs.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:ads.clubz.bg
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:ads.creative-serving.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:ads.deliverimp.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:ads.kiosked.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:ads.pubmatic.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:ads.stickyadstv.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:adscale.de
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:adsrvr.org
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:adsymptotic.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:adtech.de
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:adtechus.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:advertising.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:adx.adform.net
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:agkn.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:angsrvr.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:at.atwola.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:atemda.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:basebanner.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:bidr.io
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:bidswitch.net
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:bluekai.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:c.appier.net
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:casalemedia.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:chango.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:connexity.net
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:contextweb.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:crwdcntrl.net
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:ctnsnet.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:demdex.net
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:dotomi.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:doubleclick.net
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:dpm.demdex.net
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:dsp.linksynergy.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:erne.co
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:everesttech.net
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:eyereturn.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:eyeviewads.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:go.sonobi.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:gwallet.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:ih.adscale.de
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:ipredictive.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:krxd.net
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:legolas-media.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:lijit.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:linksynergy.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:match.adsby.bidtheatre.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:match.rundsp.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:mathtag.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:media6degrees.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:mookie1.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:mxptint.net
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:nexac.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:openx.net
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:outbrain.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:owneriq.net
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:pixel-a.sitescout.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:pixel.rubiconproject.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:pixel.sitescout.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:pool.admedo.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:pubmatic.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:revsci.net
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:rfihub.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:rlcdn.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:ru4.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:rubiconproject.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:scorecardresearch.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:simpli.fi
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:sitescout.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:smartadserver.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:sxp.smartclip.net
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:taboola.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:tap-t.rubiconproject.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:tap.rubiconproject.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:tap2-cdn.rubiconproject.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:tapad.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:tidaltv.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:tremorhub.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:tribalfusion.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:tubemogul.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:turn.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:virool.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:w55c.net
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:wtp101.com
   C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\cookies.sqlite:zedo.com


 

Прикачам го за всеки случай.

HitmanPro_20170106_1845.log

  • Автор

Да с WiFi рутер съм.

Дневник се държи добре. На офнюз и клубZ се появяват. За мен най-странното беше, че след като преинсталирах уиндъуса няколко пъти и форматирах дяловете, пак проблемът продължи.

Върнете рутера към първоначалните му настройки. Отзад има малък бутон, който може да натиснете с игла или кламер. Натиснете и задръжте за около 30 секунди и го пуснете. Настройте го наново и вижте дали проблема остава.

routerreset.jpg

  • Автор

Ок. Ще пробвам.

Рестартирах рутера. Не се появяват рекламите в clubZ и в offnews вече. :) 

Каква е била причината?

Всичко изглежда, че е наред сега. 

Изключителни благодарности за отделеното време и за ценната помощ!

Изглежда, че зловредния код е пуснал корени и там(рутера). Нека само премахнем използваните инструменти + логовете:

Изтеглете: 8864064T.png Delfix.

  • Стартирайте Delfix.exе.
  • По подразбиране трябва да има 2 отметки на "Remove disinfection tools" и "Purge system restore ". Ако липсват, ги сложете.
  • Натиснете бутона "Run". 
  • Инструмента ще се самоизтрие след като приключи своята задача.
  • Изтрийте лог файла от Delfix.
  • Ако има останали програми, които сме използвали и не са се изтрили, ги изтрийте ръчно.

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Назад

Разглеждащи това в момента 0

  • Няма регистрирани потребители разглеждащи тази страница.

Дарение

  • Подкрепи съществуването на форума - направи дарение
    32%
    Дарени 315 € от нужните 1 000 €

Бюлетин

Получавайте известие, когато има важна промяна или новина свързана с форума.
Абонирайте се

Профил

Навигация

Търсене

Търсене

Конфигуриране на push известия в браузъра
Chrome (Android)
  1. Докоснете иконата на катинар до адресната лента.
  2. Докоснете Разрешения → Известия.
  3. Променете предпочитанията си.
Chrome (Desktop)
  1. Кликнете върху иконата на катинар в адресната лента.
  2. Изберете Настройки на сайта.
  3. Намерете Известия и коригирайте предпочитанията си.