Здравейте, имам съмнения че компютъра ми е заразен.При отваряне на определен от мен сайт\примерно фейсбук\ ми се отварят допълнителни прозорци с други сайтове, а също така скоростта драстично падна.Моля за помощ! 

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-06-2017
Ran by User (07-06-2017 18:23:22)
Running from C:\Users\User\Downloads
Windows 10 Pro Version 1511 (X64) (2016-02-11 02:27:59)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-2749757513-2474199141-1410865342-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2749757513-2474199141-1410865342-503 - Limited - Disabled)
Guest (S-1-5-21-2749757513-2474199141-1410865342-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2749757513-2474199141-1410865342-1003 - Limited - Enabled)
User (S-1-5-21-2749757513-2474199141-1410865342-1001 - Administrator - Enabled) => C:\Users\User

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\uTorrent) (Version: 3.5.0.43580 - BitTorrent Inc.)
ABBYY FineReader 11 (HKLM-x32\...\{F11000FE-0010-0000-0000-074957833700}) (Version: 11.11.194 - ABBYY Production LLC)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.171 - Adobe Systems Incorporated)
Advanced PDF Password Recovery (HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\Advanced PDF Password Recovery) (Version: 5.0 - ElcomSoft Co. Ltd.)
Akamai NetSession Interface (HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\Akamai) (Version:  - Akamai Technologies, Inc)
AMD Settings (HKLM\...\WUCCCApp) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.)
Catalyst Control Center Next Localization BR (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.28 - Piriform)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.66.16.50 - Conexant)
Connection Manager (HKLM-x32\...\Connection Manager_is1) (Version:  - TCT Mobile Limited)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Dolby Digital Plus Advanced Audio (HKLM\...\{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}) (Version: 7.6.5.1 - Dolby Laboratories Inc)
Dropbox (HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\Dropbox) (Version: 26.4.24 - Dropbox, Inc.)
Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.14 - Lenovo)
Energy Management (x32 Version: 8.0.2.14 - Lenovo) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden
HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.0.9.6 - Hi-Rez Studios)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Kaspersky Anti-Virus (HKLM-x32\...\InstallWIX_{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab)
Kaspersky Secure Connection (x32 Version: 17.0.0.611 - Kaspersky Lab) Hidden
K-Lite Codec Pack 10.6.5 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.6.5 - )
LG United Mobile Drivers (HKLM-x32\...\{F193D8D7-3D5E-4DB5-A74C-F8CD5378EE7B}) (Version: 3.12.3.0 - LG Electronics)
Malwarebytes Anti-Malware, версия 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\OneDriveSetup.exe) (Version: 17.3.6799.0327 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Minecraft1.7.10 (HKLM-x32\...\Minecraft1.7.10) (Version:  - )
Momento Express (HKLM-x32\...\{07518129-C44E-40D7-8D06-5C0507481A9F}) (Version:  - )
Mortimer Beckett and the Time Paradox 1.00 (HKLM-x32\...\Mortimer Beckett and the Time Paradox 1.00) (Version:  - )
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 47.0.2 (x86 bg) (HKLM-x32\...\Mozilla Firefox 47.0.2 (x86 bg)) (Version: 47.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.2.6148 - Mozilla)
Mystery Trackers 2 - Raincliff (Collector's Edition) 1.00 (HKLM-x32\...\Mystery Trackers 2 - Raincliff (Collector's Edition) 1.00) (Version:  - )
Nero Burning ROM 10 (HKLM-x32\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.2.11000.12.100 - Nero AG)
Nero Burning ROM 10 (HKLM-x32\...\{FE83F463-7E61-4B18-9FA0-B94B90A0B6B9}) (Version: 10.5.10300 - Nero AG)
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Paladins (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF402}) (Version: 0.46.1707.0 - Hi-Rez Studios)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.39048 - Realtek Semiconductor Corp.)
SA Dictionary® 2012 Beta1 (HKLM-x32\...\SA Dictionary® 2012 Beta1) (Version:  - )
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.36 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.36.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\Spotify) (Version: 1.0.53.758.gde3fc4b2 - Spotify AB)
Subway Surfers 1.0 (HKLM-x32\...\Subway Surfers 1.0) (Version: 1.0 - Cat-A-Cat)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.9.5 - Synaptics Incorporated)
The SIMS 4 v. 1.20.60.1020 (HKLM-x32\...\The SIMS 4_is1) (Version:  - )
The Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.20.60.1020 - Electronic Arts Inc.)
Tweaking.com - Windows Repair (HKLM-x32\...\Tweaking.com - Windows Repair) (Version: 3.9.30 - Tweaking.com)
Unity Web Player (HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\UnityWebPlayer) (Version: 4.6.2f1 - Unity Technologies ApS)
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{0FA8AE0C-69AE-4F60-A1AB-F79C6BA5A999}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB3161988) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E1C47F57-5CCA-4077-96A6-7BFD2A026ECD}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB3161988) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E1C47F57-5CCA-4077-96A6-7BFD2A026ECD}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB3161988) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{E1C47F57-5CCA-4077-96A6-7BFD2A026ECD}) (Version:  - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.5-3 - Wacom Technology Corp.)
WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
WebTrance2 (деинсталиране) (HKLM-x32\...\WebTrance2) (Version:  - )
Winamp (HKLM-x32\...\Winamp) (Version: 5.63  - Nullsoft, Inc)
WinDjView 2.0.2 (HKLM\...\WinDjView) (Version: 2.0.2 - Andrew Zhezherun)
Windows Driver Package - Lenovo (ACPIVPC) System  (02/17/2013 9.52.0.776) (HKLM\...\35DD26BE48DAF4A9F35F969F3CB1E3E1435E661E) (Version: 02/17/2013 9.52.0.776 - Lenovo)
Windows Driver Package - Lenovo (WUDFRd) LenovoVhid  (07/25/2013 10.30.0.288) (HKLM\...\6BCA401E9CBEED970D75F55FA5320F60D11984E9) (Version: 07/25/2013 10.30.0.288 - Lenovo)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 4.20 (64-битова версия) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Wondershare Filmora(Build 7.8.0) (HKLM\...\Wondershare Filmora_is1) (Version:  - Wondershare Software)
Wondershare Helper Compact 2.5.2 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.2 - Wondershare)
Български пакет за Mystery Trackers - The Void (Collector's Edition) 1.00 (HKLM-x32\...\Български пакет за Mystery Trackers - The Void (Collector's Edition) 1.00) (Version:  - )
Фотогалерия (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.16.0.dll (Dropbox, Inc.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0DA8EC7B-E133-4BD1-BF3A-0F92383C764B} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {1347C759-2B8A-4B0B-89CA-7E91279691C3} - System32\Tasks\{63F165AF-DD3C-499A-A3A1-300702131ED8} => Chrome.exe hxxp://ui.skype.com/ui/0/7.5.73.102.456/bg/abandoninstall?page=tsProgressBar
Task: {1D774E86-C367-470D-B2CE-B9ED2A35F516} - System32\Tasks\{F07288F4-1BDE-4C49-ABBC-8E64D514E59C} => pcalua.exe -a G:\Autorun.exe -d G:\
Task: {1ECEECBA-D805-42BF-85DA-F3772F0A6037} - System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} => C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe [2016-08-23] (AO Kaspersky Lab)
Task: {2BFCB21D-7069-4317-BA78-A80E66C11FD9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-05-10] (Adobe Systems Incorporated)
Task: {35ABDC46-D02C-4476-8883-101A7A6269A4} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {46BF56C4-CABB-47E6-99C3-3C2BA7C171B3} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2749757513-2474199141-1410865342-1001Core => C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.)
Task: {523A9747-FC2D-45D7-BECB-DBD572682CCD} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated)
Task: {5B4B475B-F2BA-4AA8-9160-E6B7A99C978F} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {5C4A9A98-C3A8-4BC8-AEFD-9CE23B672DCA} - System32\Tasks\{809A2729-3D0A-4775-B8E2-6AA09846CC26} => Chrome.exe hxxp://ui.skype.com/ui/0/7.5.73.102.456/bg/abandoninstall?page=tsProgressBar
Task: {665FA48E-F3D7-4C7D-A21E-F35B3C54F204} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {7381CA19-7505-411E-B7A8-CA29A062556F} - System32\Tasks\SoftwareInformerService => C:\Program Files\Software Informer\softinfo.exe 
Task: {8292E96A-D6F1-463F-B13A-DF8C7300C375} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {9C84CCB0-ADD2-4C61-AD02-CBFE9AB1504F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {9F6E8253-B102-4CBE-ACA2-CD8921EFFF1F} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {A0569B34-4568-46C7-A60C-60ADD31DC703} - System32\Tasks\Opera scheduled Autoupdate 1416126846 => C:\Program Files (x86)\Opera\launcher.exe 
Task: {A3F4482B-2991-4592-94BC-11D5CED7B62E} - System32\Tasks\Tweaking.com - Windows Repair Tray Icon => C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe [2015-03-12] (Tweaking.com)
Task: {AF5C2FEC-FFE5-4B7D-A151-FC5BCE888ACF} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2749757513-2474199141-1410865342-1001UA => C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.)
Task: {BDEFE56C-070E-4047-9FBC-D933BECD40FF} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {C110E96C-5816-44DB-8C42-8E57ABC93D75} - System32\Tasks\{EFABECDE-CD20-469D-8BB1-05DE6D3E8F67} => Chrome.exe hxxps://ui.skype.com/ui/0/7.33.0.104/bg/abandoninstall?page=tsInstall
Task: {CB780BD9-A199-443C-8032-B5C5FE840346} - System32\Tasks\{B554382F-9E70-41AC-A29A-53EFCFBBD717} => pcalua.exe -a "C:\Program Files (x86)\Hi-Rez Studios\HiRezGamesDiagAndSupport.exe" -c uninstall=0
Task: {CCD12B7C-276D-477F-94B4-8597725A18AE} - System32\Tasks\{EC34CB12-979C-4B1A-B0CD-61950B4D1759} => Chrome.exe hxxp://ui.skype.com/ui/0/7.1.73.105.456/bg/abandoninstall?page=tsProgressBar
Task: {D0972340-04F7-4867-85FF-159EC99B2682} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {D7D358BA-6DCF-421E-8297-7E66EAAD2B01} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {DB46C33B-0CA4-447B-9D41-683254D7A63B} - System32\Tasks\{8DBF7D03-94BD-4D81-8AB9-F8CC5306A194} => Chrome.exe hxxp://ui.skype.com/ui/0/7.3.73.101.456/bg/abandoninstall?page=tsProgressBar
Task: {DB793F79-5AE5-417C-B23E-05649ACDB7CD} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {E0C33A43-D34D-4DFA-9068-7F748ED84F3B} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe 
Task: {E11518C8-0495-4580-9A19-4077BE1E14D9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-05-02] (Google Inc.)
Task: {E35F39F3-67A7-4E1A-97B8-41E21892A490} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {F0842172-37B7-4801-A4CF-B5DA7E88E542} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-05-02] (Google Inc.)
Task: {F9383BC8-73A9-4DC7-90EC-C4A89E65E4ED} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
Task: {FDD335EA-3BFF-42A1-B1F5-734E55BC07B5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-03-03] (Piriform Ltd)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2749757513-2474199141-1410865342-1001Core.job => C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2749757513-2474199141-1410865342-1001UA.job => C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\User\Desktop\DarkHeritage_GuardiansOfHopeCE - Пряк път.lnk -> D:\игри\Dark Heritage Guardians of Hope CE\Dark Heritage Guardians of Hope CE\DarkHeritage_GuardiansOfHopeCE.exe () <===== Cyrillic
Shortcut: C:\Users\User\Desktop\MailBooks - Пряк път.lnk -> D:\MailBooks\MailBooks.exe (PanJoro) <===== Cyrillic
Shortcut: C:\Users\User\Desktop\Photoshop - Пряк път.lnk -> C:\Program Files (x86)\Photoshop\Photoshop.exe (Adobe Systems, Incorporated) <===== Cyrillic
Shortcut: C:\Users\User\Desktop\Смена языкаThe SIMS 4.lnk -> C:\Games\The SIMS 4\EASetup.exe () <===== Cyrillic
Shortcut: C:\Users\User\Desktop\Този компютър - Пряк път.lnk -> [LFPO :i+00Tz1SPS0%G`-">78 :><?NBJ@1!8AB5<=0 ?0?:01SPSjc(=Oe)::{20D04FE0-3AEA-1069-A2D8-08002B30309D}M1SPSOh+'1>OB :><?NBJ@] <===== Cyrillic
Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Опционални функции.lnk -> C:\WINDOWS\System32\fodhelper.exe (Microsoft Corporation) <===== Cyrillic
Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Помощен файл на WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.chm () <===== Cyrillic
Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Ръководство за конзолната версия на RAR.lnk -> C:\Program Files\WinRAR\Rar.txt () <===== Cyrillic
Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\SendTo\Прехвърляне на файлове с Bluetooth.LNK -> C:\WINDOWS\System32\fsquirt.exe (Microsoft Corporation) <===== Cyrillic
Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Photoshop - Пряк път.lnk -> C:\Program Files (x86)\Photoshop\Photoshop.exe (Adobe Systems, Incorporated) <===== Cyrillic

ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Windows\SendTo\Получател на факса.lnk -> C:\WINDOWS\System32\WFS.exe (Microsoft Corporation) -> /SendTo <===== Cyrillic

==================== Loaded Modules (Whitelisted) ==============

2015-10-30 10:18 - 2015-10-30 10:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-11-09 10:03 - 2016-10-25 12:42 - 02656952 _____ () c:\windows\system32\CoreUIComponents.dll
2016-08-02 21:24 - 2012-12-04 16:50 - 00051576 _____ () C:\Program Files (x86)\T-Mobile\ConnectionManager\BackgroundService\ServiceManager.exe
2016-12-24 21:15 - 2014-08-19 22:12 - 01356568 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
2016-02-11 12:07 - 2015-12-07 07:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-07-13 08:30 - 2016-07-01 06:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-11-09 10:04 - 2016-10-25 07:49 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-11-09 10:04 - 2016-10-25 07:44 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-11-09 10:04 - 2016-10-25 07:45 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-11-09 10:04 - 2016-10-25 07:48 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-11-21 18:19 - 2016-11-21 18:19 - 00155016 _____ () C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe
2017-05-12 07:42 - 2017-05-09 12:13 - 03767640 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\libglesv2.dll
2017-05-12 07:42 - 2017-05-09 12:13 - 00100696 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\libegl.dll
2016-06-28 00:19 - 2016-06-28 00:19 - 00865232 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\kpcengine.2.3.dll
2016-06-14 13:38 - 2016-06-14 13:38 - 08909504 _____ () C:\Program Files (x86)\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2017-03-30 10:15 - 2017-03-30 10:15 - 01359456 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\KasperskyLab.Ksde.NativeInterop.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:ECF3C50F [164]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BFE => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MpsSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SharedAccess => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WSService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SamSs => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv2 => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srvnet => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WSService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\100sexlinks.com -> 100sexlinks.com
IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\101lottery.com -> 101lottery.com
IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\123found.com -> 123found.com
IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\123keno.com -> 123keno.com
IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\143fuck.com -> 143fuck.com
IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\180solutions.com -> 180solutions.com
IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\1se.ru -> 1se.ru
IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\1sexparty.com -> 1sexparty.com
IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\1stfind.com -> 1stfind.com
IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\1stpagehere.com -> 1stpagehere.com
IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\2020search.com -> 2020search.com
IE restricted site: HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\20x2p.com -> 20x2p.com

There are 1541 more sites.

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-05-15 20:55 - 2017-05-15 20:55 - 00000855 _____ C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\Control Panel\Desktop\\Wallpaper -> D:\Креми\landscape-hd-wallpapers-21.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\Run: => "cAudioFilterAgent"
HKLM\...\StartupApproved\Run: => "EnergyUtility"
HKLM\...\StartupApproved\Run: => "Energy Management"
HKLM\...\StartupApproved\Run: => "StartCN"
HKLM\...\StartupApproved\Run32: => "Bonus.SSR.FR11"
HKLM\...\StartupApproved\Run32: => "WinampAgent"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKLM\...\StartupApproved\Run32: => "T-Mobile ModemListener"
HKLM\...\StartupApproved\Run32: => "SynTPEnh"
HKLM\...\StartupApproved\Run32: => "SmartAudio"
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\StartupApproved\StartupFolder: => "Dropbox.lnk"
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\StartupApproved\Run: => "DAEMON Tools Lite"
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\StartupApproved\Run: => "Dropbox Update"
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_BCEA24321E5E4F1401136BBEDFB545FE"
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\StartupApproved\Run: => "BingSvc"
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\StartupApproved\Run: => "Akamai NetSession Interface"
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-2749757513-2474199141-1410865342-1001\...\StartupApproved\Run: => "CCleaner Monitoring"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{CA890C88-C156-47B8-8300-09CD19BBCA63}C:\users\user\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\user\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{0E388F2A-6F9D-4922-A2B5-7B260789DC27}C:\users\user\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\user\appdata\roaming\spotify\spotify.exe
FirewallRules: [{F1810597-3049-442E-87D2-9EFD93DC675D}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{99B6C4AB-F696-4450-AECA-FDA52250C34C}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{BC32033E-993C-4157-AE7C-EFBD9FD3DAF8}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{DFD208A9-C994-4CF4-B4BB-8DF1739E7315}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{DB592B2F-7A77-4F64-83D5-EBC96A8E4413}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{74098215-0EB1-4B6F-ADA7-AFACE8FE73B1}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{BAAC4499-F8E8-41C1-9294-2C25EAB049C1}] => (Allow) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{C4AAD701-F340-4E66-A57E-2380074BEA3C}] => (Allow) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{CC774BD1-99B7-4674-9737-2DDA3E42B3E6}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{6A634FF9-C187-42C7-8E4D-DB6AD80B155A}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{F26D125A-CF58-41D6-AF7D-75C6BA3427DB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{06585A2D-BCB5-4107-93AB-AB5E0330C931}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0CDDE227-EE74-49AB-A26D-7D61614E674E}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{CC04C6CD-F226-4072-9A5A-D8E8CD79B406}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{901E1517-C434-4AD9-A4EC-BCB4F4629FB4}C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{5E1E6360-C42E-429A-B973-6E747A8A427D}C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{C838B2AA-EB24-493B-8382-C16F1EC65FFC}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{D49DC46F-5696-4595-A26D-1C8B553AC82B}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{760EC08F-7FA5-46F7-AD64-22926E276578}C:\users\user\desktop\utorrent.exe] => (Block) C:\users\user\desktop\utorrent.exe
FirewallRules: [UDP Query User{BBFFD870-0509-49C9-B43E-319F5CBEE1E6}C:\users\user\desktop\utorrent.exe] => (Block) C:\users\user\desktop\utorrent.exe
FirewallRules: [{4538E273-A01A-4B38-B3B8-52CB3D25C462}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{9050E3C1-F5F0-4B4D-BA26-A2C02B05D2BE}] => (Allow) LPort=2869
FirewallRules: [{7FD883D3-B21C-4BC3-8E6B-B46175DC533C}] => (Allow) LPort=1900
FirewallRules: [TCP Query User{4A2B6E1C-7266-4A8F-8DAA-D4CAE938288B}C:\users\user\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\user\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{33F28947-47A3-4703-AF3D-CC7EB2DC2B97}C:\users\user\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\user\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{A19587E4-CE30-4E26-81F2-018209D4EB82}C:\users\user\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\user\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{815A3F06-1D39-4F0D-B691-E351F0C12A25}C:\users\user\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\user\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{5D57E589-AE67-4EFA-86AD-38F1DC1DDD98}C:\users\user\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\user\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{FE8DE178-795C-4326-87F3-608796ABBDA5}C:\users\user\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\user\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{8D3E4938-8387-49D1-A235-3F00F3BF16E1}C:\program files (x86)\hi-rez studios\hirezgames\paladins\binaries\win32\paladins.exe] => (Block) C:\program files (x86)\hi-rez studios\hirezgames\paladins\binaries\win32\paladins.exe
FirewallRules: [UDP Query User{89C503D4-2531-4294-B25C-2DE3CB8D6F0B}C:\program files (x86)\hi-rez studios\hirezgames\paladins\binaries\win32\paladins.exe] => (Block) C:\program files (x86)\hi-rez studios\hirezgames\paladins\binaries\win32\paladins.exe
FirewallRules: [{3E19FDE5-522B-46ED-B4C6-D443956924AA}] => (Allow) C:\Games\The SIMS 4\Game\Bin\TS4.exe
FirewallRules: [{ADDC5961-C586-4A80-A340-C67944CC93A8}] => (Allow) C:\Games\The SIMS 4\Game\Bin\TS4.exe
FirewallRules: [{DB58893C-A041-4495-968A-839A1C7EED00}] => (Allow) C:\Games\The SIMS 4\Game\Bin\TS4_x64.exe
FirewallRules: [{BFC3AC07-BB8E-4F4B-B130-5D27F3CE06AC}] => (Allow) C:\Games\The SIMS 4\Game\Bin\TS4_x64.exe
FirewallRules: [{B7CD0E03-9395-4630-A7C9-510D476059C9}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

30-05-2017 11:18:52 Scheduled Checkpoint
06-06-2017 16:28:56 Tweaking.com - Windows Repair

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (06/07/2017 03:03:21 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (06/07/2017 02:51:45 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )
Description: Услугата "Криптографски услуги" не можа да инициализира базата  данни с каталози. ESENT грешката е: -1216.

Error: (06/07/2017 02:51:44 PM) (Source: ESENT) (EventID: 454) (User: )
Description: Catalog Database (1684) Catalog Database: Database recovery/restore failed with unexpected error -1216.

Error: (06/07/2017 02:51:44 PM) (Source: ESENT) (EventID: 494) (User: )
Description: Catalog Database (1684) Catalog Database: Database recovery failed with error -1216 because it encountered references to a database, 'C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb', which is no longer present. The database was not brought to a Clean Shutdown state before it was removed (or possibly moved or renamed). The database engine will not permit recovery to complete for this instance until the missing database is re-instated. If the database is truly no longer available and no longer required, procedures for recovering from this error are available in the Microsoft Knowledge Base or by following the "more information" link at the bottom of this message.

Error: (06/07/2017 02:51:37 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (1432) SRUJet: Error -1811 (0xfffff8ed) occurred while opening logfile C:\WINDOWS\system32\SRU\SRU0011E.log.

Error: (06/06/2017 04:51:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Име на приложение с грешки: ShellExperienceHost.exe, версия: 10.0.10586.494, времево клеймо: 0x5775e94c
Име на модул с грешки: Windows.UI.Xaml.dll, версия: 10.0.10586.672, времево клеймо: 0x580eeb60
Код на изключение: 0xc000027b
Отместване на грешка: 0x00000000006fd1db
ИД на процес на грешка: 0x2980
Начален час на приложението с грешки: 0x01d2decc0aab768a
Път на приложението с грешки: C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
Път на модула с грешки: C:\Windows\System32\Windows.UI.Xaml.dll
ИД на доклад: 32dab2cb-fc2f-4789-9e6b-9bab7a401f04
Пълно име на пакета с грешка: Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy
ИД на свързаното с пакета с грешка приложение: App

Error: (06/06/2017 04:50:54 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 6632.  Message ID: [0x2509].

Error: (06/06/2017 04:49:31 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Event provider wsp_sr attempted to register query "select * from WSP_ReplicationGroupModificationEvent" whose target class "WSP_ReplicationGroupModificationEvent" in //./root/Microsoft/Windows/Storage/Providers_v2 namespace does not exist. The query will be ignored.

Error: (06/06/2017 04:49:31 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Event provider wsp_sr attempted to register query "select * from WSP_ReplicationGroupDepartureEvent" whose target class "WSP_ReplicationGroupDepartureEvent" in //./root/Microsoft/Windows/Storage/Providers_v2 namespace does not exist. The query will be ignored.

Error: (06/06/2017 04:49:31 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Event provider wsp_sr attempted to register query "select * from WSP_ReplicationGroupArrivalEvent" whose target class "WSP_ReplicationGroupArrivalEvent" in //./root/Microsoft/Windows/Storage/Providers_v2 namespace does not exist. The query will be ignored.

System errors:
=============
Error: (06/07/2017 05:31:24 PM) (Source: DCOM) (EventID: 10016) (User: PC)
Description: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 and APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 to the user PC\User SID (S-1-5-21-2749757513-2474199141-1410865342-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). This security permission can be modified using the Component Services administrative tool.

Error: (06/07/2017 05:31:24 PM) (Source: DCOM) (EventID: 10016) (User: PC)
Description: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 and APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 to the user PC\User SID (S-1-5-21-2749757513-2474199141-1410865342-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). This security permission can be modified using the Component Services administrative tool.

Error: (06/07/2017 05:31:24 PM) (Source: DCOM) (EventID: 10016) (User: PC)
Description: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 and APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 to the user PC\User SID (S-1-5-21-2749757513-2474199141-1410865342-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). This security permission can be modified using the Component Services administrative tool.

Error: (06/07/2017 05:31:24 PM) (Source: DCOM) (EventID: 10016) (User: PC)
Description: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 and APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 to the user PC\User SID (S-1-5-21-2749757513-2474199141-1410865342-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). This security permission can be modified using the Component Services administrative tool.

Error: (06/07/2017 05:26:30 PM) (Source: DCOM) (EventID: 10016) (User: PC)
Description: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 and APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 to the user PC\User SID (S-1-5-21-2749757513-2474199141-1410865342-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). This security permission can be modified using the Component Services administrative tool.

Error: (06/07/2017 02:55:41 PM) (Source: DCOM) (EventID: 10016) (User: PC)
Description: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 and APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 to the user PC\User SID (S-1-5-21-2749757513-2474199141-1410865342-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). This security permission can be modified using the Component Services administrative tool.

Error: (06/07/2017 02:55:41 PM) (Source: DCOM) (EventID: 10016) (User: PC)
Description: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 and APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 to the user PC\User SID (S-1-5-21-2749757513-2474199141-1410865342-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). This security permission can be modified using the Component Services administrative tool.

Error: (06/07/2017 02:55:41 PM) (Source: DCOM) (EventID: 10016) (User: PC)
Description: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 and APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 to the user PC\User SID (S-1-5-21-2749757513-2474199141-1410865342-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). This security permission can be modified using the Component Services administrative tool.

Error: (06/07/2017 02:53:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Услуга Windows Presentation Foundation Font Cache 3.0.0.0 не може да бъде стартирана поради следната грешка: 
The service did not respond to the start or control request in a timely fashion.

Error: (06/07/2017 02:53:35 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Изтекъл период на изчакване (30000 милисекунди) при изчакване на услуга Windows Presentation Foundation Font Cache 3.0.0.0 да се свърже.

CodeIntegrity:
===================================
  Date: 2017-06-06 16:27:57.395
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\WINDOWS\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-06-03 20:26:25.232
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\WINDOWS\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-05-30 11:10:14.854
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\WINDOWS\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-05-21 20:50:52.371
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\WINDOWS\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-05-16 14:48:22.510
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\WINDOWS\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-05-16 09:45:14.907
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-05-16 07:38:04.280
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-04-27 07:53:45.225
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\WINDOWS\SysWOW64\usermgrcli.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-04-27 07:53:44.156
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\WINDOWS\SysWOW64\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-04-27 07:53:43.908
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\WINDOWS\SysWOW64\usermgrcli.dll because the set of per-page image hashes could not be found on the system.

==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) CPU 2030M @ 2.50GHz
Percentage of memory in use: 67%
Total physical RAM: 6041.77 MB
Available physical RAM: 1981.42 MB
Total Virtual: 6425.77 MB
Available Virtual: 2080.21 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:246.96 GB) (Free:109.7 GB) NTFS
Drive d: (Нов том) (Fixed) (Total:683.59 GB) (Free:576.6 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: D9FA2484)

Partition: GPT.

==================== End of Addition.txt ============================

 

 

FRST.txt

Цитат

Kaspersky Anti-Virus (HKLM-x32\...\InstallWIX_{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab)
Kaspersky Secure Connection (x32 Version: 17.0.0.611 - Kaspersky Lab) Hidden

Здравейте..! Вижда се че сте използвали продукти на Касперски...А дневниците показвате че в момента сте с активен Windows Defender ..Моля да ми поясните какво се случва малко по подробно..!

 

   Сканиране с SecurityCheck by glax24

• Изтеглете SecurityCheck by glax24 от тук и запомнете инструмента на десктопа .
• Стартирате програмата (ако използвате Windows XP) или стартирате с десен бутон на мишката от името на администратор (ако използватеWindows Vista/7/8/10)
• Изчакайте да приключи сканирането.Ще се отвори в текстов файл с имеSecurityCheck.txt. Копирайте съдържанието на  този файл  следващия си пост
• Можете да намерите този файл в основната директория на системния диск в папка с име SecurityCheck, напр. C:\SecurityCheck\SecurityCheck.txt

 

  Дневници
 
В следващия си отговор, моля да включите следните дневници:

• SecurityCheck.txt (копирате съдържанието)

Първо, здравейте, второ, какво по точно искате да знаете?Като цяло лаптопа работи много по-бавно след надграждането на Windows10,а сега е още по-зле, отварят се нежелани страници, от време на време изчезва иконата за звука и на последно място вчера едва зареди показвайки съобщение че сканира и поправя дисковете.Дано съм била полезна.

 Ето текстовия файл:  

 

SecurityCheck by glax24 & Severnyj v.1.4.0.50 [06.06.17]
WebSite: www.safezone.cc
DateLog: 08.06.2017 20:38:41
Path starting: C:\Users\User\AppData\Local\Temp\SecurityCheck\SecurityCheck.exe
Log directory: C:\SecurityCheck\
IsAdmin: True
User: User
VersionXML: 4.34is-07.06.2017
___________________________________________________________________________

Windows 10(6.3.10586) (x64) Professional Release: 1511 Lang: 0402
Installation date OS: 11.02.2016 02:27:59
LicenseStatus: Windows(R), Professional edition The machine is permanently activated.
LicenseStatus: Office 15, OfficeProPlusVL_KMS_Client edition Windows is in Notification mode
Boot Mode: Normal
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
SystemDrive: C: FS: [NTFS] Capacity: [247 Gb] Used: [130.8 Gb] Free: [116.2 Gb]
------------------------------- [ Windows ] -------------------------------
Extended support has ended Warning! Download Update
Internet Explorer 11.713.10586.0
User Account Control enabled
The elevation prompt for administrators disabled
^It is recommended to enable: Win+R typing UserAccountControlSettings and Enter^
Automatically download and schedule installation
Windows Update (wuauserv) - The service is running
Security Center (wscsvc) - The service is running
Remote Registry (RemoteRegistry) - The service has stopped
SSDP Discovery (SSDPSRV) - The service is running
Remote Desktop Services (TermService) - The service has stopped
Windows Remote Management (WS-Management) (WinRM) - The service has stopped
------------------------------- [ HotFix ] --------------------------------
HotFix KB4013198 Warning! Download Update
------------------------------ [ MS Office ] ------------------------------
Microsoft Office 2013 x64 v.15.0.4569.1506
---------------------------- [ Antivirus_WMI ] ----------------------------
Windows Defender (enabled and up to date)
--------------------------- [ FirewallWindows ] ---------------------------
Защитна стена на Windows (MpsSvc) - The service is running
--------------------------- [ AntiSpyware_WMI ] ---------------------------
Windows Defender (enabled and up to date)
---------------------- [ AntiVirusFirewallInstall ] -----------------------
Kaspersky Secure Connection v.17.0.0.611
Kaspersky Anti-Virus v.17.0.0.611
Kaspersky Internet Security v.17.0.0.611
-------------------------- [ SecurityUtilities ] --------------------------
Malwarebytes Anti-Malware, версия 2.2.1.1043 v.2.2.1.1043
--------------------------- [ OtherUtilities ] ----------------------------
VLC media player v.2.1.5 Warning! Download Update
WinRAR 4.20 (64-битова версия) v.4.20.0 Warning! Download Update
--------------------------------- [ IM ] ----------------------------------
Skype™ 7.36 v.7.36.101
--------------------------------- [ P2P ] ---------------------------------
µTorrent v.3.5.0.43580 Warning! P2P-client.
-------------------------------- [ Java ] ---------------------------------
Java 7 Update 67 v.7.0.670 Warning! This software is no longer supported. Please uninstall it and use Java SE 8 (jre-8u131-windows-i586.exe).
Java 8 Update 31 v.8.0.310 Warning! Download Update
Uninstall old version and install new one (jre-8u131-windows-i586.exe).
--------------------------- [ AdobeProduction ] ---------------------------
Adobe Flash Player 25 NPAPI v.25.0.0.171
Adobe Acrobat Reader DC v.17.009.20044
------------------------------- [ Browser ] -------------------------------
Google Chrome v.58.0.3029.110 Warning! Download Update
Mozilla Firefox 47.0.2 (x86 bg) v.47.0.2 Warning! Download Update
----------------------------- [ EmailClient ] -----------------------------
Windows Live Mail v.16.4.3528.0331 Warning! This software is no longer supported.
--------------------------- [ RunningProcess ] ----------------------------
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe v.58.0.3029.110
------------------ [ AntivirusFirewallProcessServices ] -------------------
Kaspersky Anti-Virus Service 17.0.0 (AVP17.0.0) - The service is running
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe v.17.0.0.611
klvssbrigde64 (klvssbrigde64) - The service has stopped
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe v.17.0.0.643
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe v.17.0.0.611
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe v.17.0.0.643
C:\Program Files\Windows Defender\MsMpEng.exe v.4.9.10586.672
C:\Program Files\Windows Defender\MpCmdRun.exe v.4.9.10586.672
C:\Program Files\Windows Defender\NisSrv.exe v.4.9.10586.672
Услуга на Windows Defender (WinDefend) - The service is running
Услуга за мрежова проверка на Windows Defender (WdNisSvc) - The service is running
---------------------------- [ UnwantedApps ] -----------------------------
Unity Web Player v.4.6.2f1 Warning! Application is distributed through the partnership programs and bundle assemblies. Uninstallation recommended. Possible you became a victim of fraud or social engineering.
Skype Click to Call v.8.5.0.9167 Warning! Browser's toolbar. It can slow down the working of your browser and have violation privacy problems.
----------------------------- [ End of Log ] ------------------------------
 

Редактирано 8 юни 20179 г. от Kremi73 (преглед на промените)

преди 16 минути, Kremi73 написа:

Първо, здравейте, второ, какво по точно искате да знаете?Като цяло лаптопа работи много по-бавно след надграждането на Windows10,а сега е още по-зле, отварят се нежелани страници, от време на време изчезва иконата за звука и на последно място вчера едва зареди показвайки съобщение че сканира и поправя дисковете.Дано съм била полезна.

Здравейте...попитах конкретен въпрос..!

Цитат

Вижда се че сте използвали продукти на Касперски...А дневниците показвате че в момента сте с активен Windows Defender ..Моля да ми поясните какво се случва

Т.е използвате ли Касперски или не...а ако не трябва да деинсталирате програмата от компютъра си...В момента работят и двете програми и има предпоставка за конфликт между двете и от тук да идва забавянето на системата ви...!

Цитат

Kaspersky Anti-Virus Service 17.0.0 (AVP17.0.0) - The service is running

Услуга на Windows Defender (WinDefend) - The service is running
Услуга за мрежова проверка на Windows Defender (WdNisSvc) - The service is running

 

Цитат

по-бавно след надграждането на Windows10

Задължително актуализирайте това:

Цитат

HotFix KB4013198 Warning! Download Update

 

Сега, да не объркам нещо, да, използвам Касперски, да го деинсталирам, така ли?Windows Defender е антивирусна програма? Не съм наясно затова питам.Бях преди Касперски с Аваст, но я деинсталирах и на нейно място инсталирах Касперски, Windows Defender не съм го инсталирала аз.

Редактирано 8 юни 20179 г. от Kremi73 (преглед на промените)

Сега аз да попитам ..Касперски е платена програма....вие плащали ли сте си за нея или я теглихте от торент тракер..?

Не съм плащала.Тая актуализация ми се струва че доста се бави от около 30мин. изписва че търси  актуализация на този компютър..Упс...излезе грешка,  да стартирам ли наново? Стартирах, успя да се ъпдейтне.Моля само кажете да махам ли Касперски, нещо не ми стана ясно?

Редактирано 8 юни 20179 г. от Kremi73 (преглед на промените)

Не, нищо за сега не деинсталирайте..! Ще мога да пиша и отговарям довечера...! Лек ден..!

Фикс с Farbar Recovery Scan Tool

 Изтеглете прикачения файл fixlist.txt и го запазете там, където сте свалили FRST.exe
Стартирайте отново FRST.exe и натиснете бутона Fix веднъж и изчакайте.

Ще се създаде нов лог файла FixLog.txt. Прикачете съдържанието му в следващия си коментар.
 
ЗАБЕЛЕЖКА: Този скрипт е написан специално за този потребител,и за тази конкретна машина. Изпълнението на фикса, на друг компютър може да доведе до увреждане на  операционната ви система

 

  Дневници
 
В следващия си отговор, моля да включите следните дневници:

• FixLog.txt

Здравейте, прикачвам файла, но да кажа,още снощи изтрих Касперски  сега без антивирусна ли съм?

 

Fixlog.txt

Редактирано 9 юни 20179 г. от Kremi73 (преглед на промените)

Не съм казвал такова нещо..!!! Май действате на своя глава...? А това въобще не ми харесва..! Каже те ми искате ли да ви помогна или да затворя темата и да ви остава да се оправяте сама..?

Повярвайте ми помогнал съм на хиляди хора из цял свят и до сега никой не си е позволил в тема в която указвам съдействие да се случват своеволия..?!?

..и така...сега следвайте внимателно стъпка по стъпка инструкциите ми..!

 

 Malwarebytes Anti-Malware (MBAM)

Моля, изтеглете Malwarebytes Anti-Malware 2.2.0.1024 Final и я запазете на вашия десктоп.

• Стартирайте файла mbam-setup-bc.хххх-х.х.х.хххх.exe и следвайте указанията за да инсталирате програмата.
• След като инсталацията приключи се уверете че сте сложили отметка пред:
• Launch Malwarebytes Anti-Malware
• Отметката активираща пробния 14 дневен период също е маркиран по-подразбиране. Ако не желаете да тествате защитата в реално време на програмата през следващите 14 дни тогава премахнете отметката. Т.е. премахнете първата отметка:

• Натиснете бутона Finish.
• Отидете до табът Settings > Detection and Protection > и под категориятаDetection Options включете опцията "Scan for rootkits".
• Отидете до табът Scan, сложете радио-бутона пред Threat Scan и след това натиснете бутона Scan Now >> . Ако е намерена актуализация тогава натиснете бутона Update Now.
• Ще започне проверка за зловреден софтуер.
• При някои инфекции можете да видите съобщението:
• "Could not load DDA driver"
• Натиснете "Yes" на това съобщение за да позволите драйвера да се зареди след рестарт.
• Разрешете на компютъра да се рестартира и след това продължете с останалите инструкции.
• След като проверката приключи натиснете бутона Apply Actions.
• Изчакайте да се появи прозореца подканващ ви да рестартирате и след това натиснете бутона Yes.
• След рестарта, когато се появи десктопа MBAM ще се зареди още веднъж.
• Отидете то табът History > Application Logs.

• Отворете рапорта с последната дата и час и натиснете бутона "Copy to Clipboard"
• Сега вече поставете съдържанието на лог файла с клавишната комбинацияCtrl + V и го публикувайте в следващия си коментар.

 

 Сканиране с AdwCleaner

 
Моля, изтеглете и стартирайте програмата Malwarebytes AdwCleaner (by Xplode):

• Затворете всички стартирани програми и браузъри
• Кликнете два пъти върху adwcleaner.exe за да стартирате инструмента.
• Натиснете OK, за да потвърдите, че всички стартирани програми ще бъдат затворени.
• Маркирайте Scan (провери).
• След завършване, кликнете на Logfile (дневник).Ще се отвори прозорец в който се намира дневника (AdwCleaner [S0] .txt).Кликнете два пъти върх реда и ще се отвори съдържанието на дневника.Публикувайте го в следващия си пост
• Върнете се към основния прозорец на AdwCleaner .маркирайте Clean (Почисти)
• Следвайте указанията и разрешете на компютъра да се рестартира.
• След рестарта ще се отвори дневник AdwCleaner[C0].txt . Моля копирайте съдържанието на лог файла в следващия си пост.

 

  Сканиране с Junkware Removal Tool
 
Моля, изтеглете Junkware Removal Tool (by Thisisu ) и запазете на вашия десктоп.

• Спрете временно работата на защитните програми.
• Стартирайте инструмента JRT.exe
• Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата.
• Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши.
• Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt).
• Моля копирайте съдържанието на лог файла в следващия си пост.

 

.и последно...свежа проверка с..:

Сканиране с Farbar Recovery Scan

• Моля изтеглете Farbar Recovery Scan Tool (според версията на Windows изберете 32 битовата или 64 битовата версия) и го запазете надесктопа.
• Стартирайте файла FRST.exe (или FRST64.exe)
• Програмата ще се стартира. Натиснете YES за да се съгласите с лицензионното споразумение.
• Натиснете бутона .
• Изчакайте търпеливо проверката да приключи.
• Ще се създадат два лог файла с името - FRST.txt и Addition.txt надесктопа.
• Копирайте съдържанието на файла FRST.txt в следващия си пост.Прикачете Addition.txt в коментар си (погледнете опцията Прикачване на файлове, когато публикувате мнение).

 

 Дневници
 
В следващия си отговор, моля да включите (като копирате целите съдържания ) следните дневници:

• Дневник от Malwarebytes Anti -Malware
• AdwCleaner.txt
• JRT.txt
• FRST.txt (копирате цялото съдържание)
• Addition.txt (прикачате..) 

Не твърдя че сте казали да трия каквото и да било, но тъй като останах с впечатление че съм с две антивирусни я свърших набързо, преди да ми отговорите.Извинявам се и обещавам без повече своеволия.

преди 10 минути, Kremi73 написа:

Не твърдя че сте казали да трия каквото и да било, но тъй като останах с впечатление че съм с две антивирусни я свърших набързо, преди да ми отговорите.Извинявам се и обещавам без повече своеволия.

Добрее...каквото били било...само ми кажете как го деинсталирахте този Касперски..?

защото съм убеден че не знаете че има специален инструмент за това и това е правилния начин..!

Как да премахнете остатъците от Касперски:
 
1.Проверете в Контрол панела => Програми =>Деинсталиране на програми дали Kaspersky фигурира в списъка с инсталираните програми.Ако е "да"..деинсталирайте по стандартния начин ,рестартирайте компютъра си и преминете към следващата точка.Ако е "не"..или деинсталацията не се стартира или се появява грешка преминете към следващата точка.
2.Изтеглете KAVremover и разархивирате.
3.Стартирайте файла kavremover.exe и следвайте инструкцията.
4.Въведете в полето защитния код ,в другото поле изберете програмата на Kaspersky която е инсталирана на вашия компютър:
 

 
5.Процесът отнема известно време.Изчакайте да се появи прозорец със съобщение за успешно премахнат продукт:
 

 
6.Рестартирайте вашия компютър.
 
 
Забележка: По подразбиране в папката на продукта ще се генерира лог - kavremvr xxxx-xx-xx xx-xx-xx (pid xxxx).log, публикувайте съдържанието му във следващия си пост.  

 

Ами "цък" на иконата на уиндоус в старт лентата/най  често използвани приложения/касперски,има стрелка с падащо меню и от него деинсталирай...това е..

Редактирано 9 юни 20179 г. от Kremi73 (преглед на промените)

Оки..тогава в горния ми пост ви описах какво още е необходимо да се направи....за да се премахне цялостно Касперски..! Моля изпълнете ги и чак тогава продължете с сканиранията от инструкцията ми по горе..! И очаквам този дневник:

Цитат

Забележка: По подразбиране в папката на продукта ще се генерира лог - kavremvr xxxx-xx-xx xx-xx-xx (pid xxxx).log, публикувайте съдържанието му във следващия си пост.  

 

не намирам точно това издание на Касперски в предложените

https://support.kaspersky.com/common/service.aspx?el=1464#block1

Списък на всички продукти от официалния сайт на Касперски

Цитат

Removal tool enables complete uninstall of the following products:

• Kaspersky Safe Kids (all versions)
• Kaspersky Secure Connection
• Kaspersky Small Office Security for Personal Computer / File Server (all versions)
• Kaspersky Total Security (all versions)
• Kaspersky PURE (all versions)
• Kaspersky Anti-Virus (version 2009 and later)
• Kaspersky Internet Security (version 2009 и по-късно)
• Kaspersky Free
• Kaspersky Password Manager (all versions)
• Kaspersky Fraud Prevention for Endpoint (all versions)
• AVP Tool driver
• Endpoint Sensor
• Kaspersky Security Scan (all versions)
• Kaspersky Endpoint Security 8 / 10 / 10 SP1 MR2 / 10 SP1 MR3 for Windows (for File Servers)
• Kaspersky Endpoint Security 8 / 10 / 10 SP1 MR2  10 SP1 MR3 for Windows (for Workstations)
• Kaspersky Anti-Virus 6.0 R2 for Windows Workstations
• Kaspersky Anti-Virus 6.0 R2 for Windows Servers
• Kaspersky Anti-Virus 6.0 FS MP4
• Kaspersky Anti-Virus 6.0 SOS MP4
• Kaspersky Anti-Virus 6.0 WKS MP4
• Kaspersky Anti-Virus 8.0 for Windows Servers Enterprise Edition/MR1/SP2
• Kaspersky Security 10 for Windows Server
• Nifty Security 24 Internet Security/Nifty Security 24 Internet Security 2013
• KTFS for Windows 3.0
• Kaspersky Anti-Ransomware Tool for Business (KART)

Проверете отново ..ето ги вашите:

Цитат

C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe v.17.0.0.611
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe v.17.0.0.643
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe v.17.0.0.611
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe v.17.0.0.643

 

Не се справям, кое да избера?Като видите поста ми драснете коя версия да е, ще продължим утре.Лека вечер!

Редактирано 9 юни 20179 г. от Kremi73 (преглед на промените)

Пробвайте от първата снимка  - 6 -ти ред и от втората снимка 18 и 19 ред..!

преди 4 часа, icotonev написа:

Пробвайте от първата снимка  - 6 -ти ред и от втората снимка 18 и 19 ред..!

Ще опитам но след 20ч тъй като съм на работа. Хубав ден ☺️

18-та позиция/втора снимка

kavremvr 2017-06-10 20-32-21 (pid 5880).log

kavremvr-srvc 2017-06-10 20-32-24 (pid 3620).log

19-та позиция/втора снимка

 

kavremvr 2017-06-10 20-43-20 (pid 4000).log

kavremvr-srvc 2017-06-10 20-43-23 (pid 5160).log

6-та позиция/първа снимка

kavremvr 2017-06-10 20-50-49 (pid 6840).log

kavremvr-srvc 2017-06-10 20-50-55 (pid 6324).log

Моля продължете със стъпките,че много се отекоха нещата  при вас..една антивирусна - три дена....!!!

Цитат

 Malwarebytes Anti-Malware (MBAM)

Моля, изтеглете Malwarebytes Anti-Malware 2.2.0.1024 Final и я запазете на вашия десктоп.

• Стартирайте файла mbam-setup-bc.хххх-х.х.х.хххх.exe и следвайте указанията за да инсталирате програмата.
• След като инсталацията приключи се уверете че сте сложили отметка пред:
• Launch Malwarebytes Anti-Malware
• Отметката активираща пробния 14 дневен период също е маркиран по-подразбиране. Ако не желаете да тествате защитата в реално време на програмата през следващите 14 дни тогава премахнете отметката. Т.е. премахнете първата отметка:

• Натиснете бутона Finish.
• Отидете до табът Settings > Detection and Protection > и под категориятаDetection Options включете опцията "Scan for rootkits".
• Отидете до табът Scan, сложете радио-бутона пред Threat Scan и след това натиснете бутона Scan Now >> . Ако е намерена актуализация тогава натиснете бутона Update Now.
• Ще започне проверка за зловреден софтуер.
• При някои инфекции можете да видите съобщението:
• "Could not load DDA driver"
• Натиснете "Yes" на това съобщение за да позволите драйвера да се зареди след рестарт.
• Разрешете на компютъра да се рестартира и след това продължете с останалите инструкции.
• След като проверката приключи натиснете бутона Apply Actions.
• Изчакайте да се появи прозореца подканващ ви да рестартирате и след това натиснете бутона Yes.
• След рестарта, когато се появи десктопа MBAM ще се зареди още веднъж.
• Отидете то табът History > Application Logs.

• Отворете рапорта с последната дата и час и натиснете бутона "Copy to Clipboard"
• Сега вече поставете съдържанието на лог файла с клавишната комбинацияCtrl + V и го публикувайте в следващия си коментар.

 

 Сканиране с AdwCleaner

 
Моля, изтеглете и стартирайте програмата Malwarebytes AdwCleaner (by Xplode):

• Затворете всички стартирани програми и браузъри
• Кликнете два пъти върху adwcleaner.exe за да стартирате инструмента.
• Натиснете OK, за да потвърдите, че всички стартирани програми ще бъдат затворени.
• Маркирайте Scan (провери).
• След завършване, кликнете на Logfile (дневник).Ще се отвори прозорец в който се намира дневника (AdwCleaner [S0] .txt).Кликнете два пъти върх реда и ще се отвори съдържанието на дневника.Публикувайте го в следващия си пост
• Върнете се към основния прозорец на AdwCleaner .маркирайте Clean (Почисти)
• Следвайте указанията и разрешете на компютъра да се рестартира.
• След рестарта ще се отвори дневник AdwCleaner[C0].txt . Моля копирайте съдържанието на лог файла в следващия си пост.

 

  Сканиране с Junkware Removal Tool
 
Моля, изтеглете Junkware Removal Tool (by Thisisu ) и запазете на вашия десктоп.

• Спрете временно работата на защитните програми.
• Стартирайте инструмента JRT.exe
• Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата.
• Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши.
• Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt).
• Моля копирайте съдържанието на лог файла в следващия си пост.

 

.и последно...свежа проверка с..:

Сканиране с Farbar Recovery Scan

• Моля изтеглете Farbar Recovery Scan Tool (според версията на Windows изберете 32 битовата или 64 битовата версия) и го запазете надесктопа.
• Стартирайте файла FRST.exe (или FRST64.exe)
• Програмата ще се стартира. Натиснете YES за да се съгласите с лицензионното споразумение.
• Натиснете бутона .
• Изчакайте търпеливо проверката да приключи.
• Ще се създадат два лог файла с името - FRST.txt и Addition.txt надесктопа.
• Копирайте съдържанието на файла FRST.txt в следващия си пост.Прикачете Addition.txt в коментар си (погледнете опцията Прикачване на файлове, когато публикувате мнение).

 

 Дневници
 
В следващия си отговор, моля да включите (като копирате целите съдържания ) следните дневници:

• Дневник от Malwarebytes Anti -Malware
• AdwCleaner.txt
• JRT.txt
• FRST.txt (копирате цялото съдържание)
• Addition.txt (прикачате..)