Здравейте, понеже системата ми работи много бавно, реших да се допитам до вас, какво реално се случва, и ако може да ми дадете някакво решение да я оправя малко. Понеже извършвам работа на нея и не мога да си позволя преинсталация.

Искам да подчертая, че ОС е Виста.

Благодаря ви предварително!

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 19.08.2018 02
Ran by Михаил (administrator) on MISHO3 (21-08-2018 11:34:30)
Running from C:\Users\Михаил\Downloads
Loaded Profiles: Михаил (Available Profiles: Михаил)
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) Language: English (United States)
Internet Explorer Version 9 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Auslogics) C:\Program Files\Auslogics\BoostSpeed\BoostSpeed.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe
(O2Micro International) C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\SMARTLogService\TosIPCSrv.exe
(Ulead Systems, Inc.) C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Interactive Digital Media) C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Chicony) C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\SmoothView\SmoothView.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Sony Corporation) C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
() C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCtrlCntr.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCcUxSys.exe
(Microsoft Corporation) C:\Program Files\Windows Mail\WinMail.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Михаил\Downloads\FRST (1).exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [NDSTray.exe] => NDSTray.exe
HKLM\...\Run: [Google Desktop Search] => C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-10-16] (Google)
HKLM\...\Run: [Desktop SMS] => C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe [1507328 2007-06-18] (Interactive Digital Media)
HKLM\...\Run: [topi] => C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe [581632 2007-07-10] (TOSHIBA)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [90112 2006-11-10] ()
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-11-29] (Synaptics, Inc.)
HKLM\...\Run: [Camera Assistant Software] => C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe [413696 2007-10-25] (Chicony)
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [431456 2008-01-17] (TOSHIBA Corporation)
HKLM\...\Run: [HSON] => C:\Program Files\TOSHIBA\TBS\HSON.exe [54608 2007-11-01] (TOSHIBA Corporation)
HKLM\...\Run: [SmoothView] => C:\Program Files\Toshiba\SmoothView\SmoothView.exe [509816 2008-01-25] (TOSHIBA Corporation)
HKLM\...\Run: [00TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [712704 2008-01-22] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba Registration] => C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe [571024 2007-05-04] (Toshiba)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [Seagull Drivers] => ssdal_nc.exe startup
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\Update\realsched.exe [295512 2014-02-21] (RealNetworks, Inc.)
HKLM\...\Run: [ControlCenter4] => C:\Program Files\ControlCenter4\BrCcBoot.exe [139776 2014-06-16] (Brother Industries, Ltd.)
HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [4514304 2014-08-26] (Brother Industries, Ltd.)
HKLM\...\Run: [BrHelp] => C:\Program Files\Brother\Brother Help\BrotherHelp.exe [1944576 2013-03-07] (Brother Industries, Ltd.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242904 2018-07-18] (AVAST Software)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1886072332-1982578393-485172793-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-1886072332-1982578393-485172793-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-05-10] (Google Inc.)
HKU\S-1-5-21-1886072332-1982578393-485172793-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [12762872 2018-03-30] (Piriform Ltd)
HKU\S-1-5-21-1886072332-1982578393-485172793-1000\...\Run: [Web Companion] => C:\Program Files\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize 
HKU\S-1-5-21-1886072332-1982578393-485172793-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-1886072332-1982578393-485172793-1000\...\MountPoints2: {2fe0f919-8cdc-11de-bbe0-001e684a78cb} - D:\Launcher.exe
HKU\S-1-5-21-1886072332-1982578393-485172793-1000\...\MountPoints2: {4265f5a5-3d9e-11e3-9483-001e684a78cb} - D:\Setup.exe
HKU\S-1-5-21-1886072332-1982578393-485172793-1000\...\MountPoints2: {913bfb3f-9006-11de-a6f9-001e684a78cb} - D:\Launcher.exe
HKU\S-1-5-21-1886072332-1982578393-485172793-1000\...\MountPoints2: {d2853388-9ded-11e1-98c5-001e684a78cb} - G:\iStudio.exe
HKU\S-1-5-21-1886072332-1982578393-485172793-1000\...\MountPoints2: {df1fcf49-8ce0-11de-9f60-001e684a78cb} - D:\NokiaPCIA_Autorun.exe
HKU\S-1-5-18\...\Run: [Picasa Media Detector] => C:\Program Files\Picasa2\PicasaMediaDetector.exe [443968 2008-02-26] (Google Inc.)
AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL => C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll [123392 2010-10-16] (Google)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2008-03-04]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2008-03-04]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Михаил\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk [2008-11-03]
ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Михаил\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk [2008-10-29]
ShortcutTarget: OpenOffice.org 3.0.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Михаил\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Инструмент проверки носителя Picture Motion Browser.lnk [2016-11-04]
ShortcutTarget: Инструмент проверки носителя Picture Motion Browser.lnk -> C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe (Sony Corporation)
GroupPolicy: Restriction ? <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{5192CCDD-2660-4763-A3A5-FEF30523C480}: [DhcpNameServer] 192.168.100.1
Tcpip\..\Interfaces\{FFF07F33-32DD-4705-8886-E8911DC6AB5D}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-1886072332-1982578393-485172793-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10440__180805
HKU\S-1-5-21-1886072332-1982578393-485172793-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.co.uk
URLSearchHook: HKLM - (No Name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} -  No File
URLSearchHook: HKU\S-1-5-21-1886072332-1982578393-485172793-1000 - (No Name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} -  No File
SearchScopes: HKLM -> DefaultScope {99EAFF3D-FCDA-46ED-97D1-0EAF0C70A0AA} URL = hxxp://www.google.co.uk/search?q={searchTerms}&rls=com.microsoft:*:IE-SearchBox&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7;
SearchScopes: HKLM -> {99EAFF3D-FCDA-46ED-97D1-0EAF0C70A0AA} URL = hxxp://www.google.co.uk/search?q={searchTerms}&rls=com.microsoft:*:IE-SearchBox&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7;
SearchScopes: HKLM -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678
SearchScopes: HKU\.DEFAULT -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKU\S-1-5-21-1886072332-1982578393-485172793-1000 -> {5D2DA4E5-B24B-4C5A-A687-A098C3622E9A} URL = hxxp://search.avg.com/route/?d=4d4dc04c&v=6.11.25.1&i=26&tp=chrome&q={searchTerms}&lng={language}&iy=&ychte=us
SearchScopes: HKU\S-1-5-21-1886072332-1982578393-485172793-1000 -> {70D46D94-BF1E-45ED-B567-48701376298E} URL = hxxp://127.0.0.1:4664/search&s=QBIrs_pnY7eFbSmu0tIOoOAUmoY?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1886072332-1982578393-485172793-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678
SearchScopes: HKU\S-1-5-21-1886072332-1982578393-485172793-1000 -> {B76E7A85-7322-428b-AB33-19A6A5FD1E73} URL = hxxp://www.bsplayer-search.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1886072332-1982578393-485172793-1000 -> {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = hxxp://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10440__180805&q={searchTerms}
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2013-08-14] (RealDownloader)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: SSVHelper Class -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-07-25] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2018-07-18] (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)
BHO: No Name -> {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} -> No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-07-25] (Oracle Corporation)
Toolbar: HKLM - BS.Player ControlBar - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files\BS.Player ControlBar\BSToolbar.dll [2008-10-08] ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)
Toolbar: HKU\S-1-5-21-1886072332-1982578393-485172793-1000 -> BS.Player ControlBar - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files\BS.Player ControlBar\BSToolbar.dll [2008-10-08] ()
Toolbar: HKU\S-1-5-21-1886072332-1982578393-485172793-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_67-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -  No File

FireFox:
========
FF ProfilePath: C:\Users\Михаил\AppData\Roaming\Mozilla\Firefox\Profiles\5twln5is.default [2018-08-21]
FF Homepage: Mozilla\Firefox\Profiles\5twln5is.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10440__180805
FF NewTab: Mozilla\Firefox\Profiles\5twln5is.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10440__180805
FF Extension: (Download Master Toolbar) - C:\Users\Михаил\AppData\Roaming\Mozilla\Firefox\Profiles\5twln5is.default\Extensions\[email protected] [2012-02-25] [Legacy] [not signed]
FF Extension: (Microsoft .NET Framework Assistant) - C:\Users\Михаил\AppData\Roaming\Mozilla\Firefox\Profiles\5twln5is.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011-03-12] [Legacy] [not signed]
FF SearchPlugin: C:\Users\Михаил\AppData\Roaming\Mozilla\Firefox\Profiles\5twln5is.default\searchplugins\Google_1.xml [2018-08-07]
FF SearchPlugin: C:\Users\Михаил\AppData\Roaming\Mozilla\Firefox\Profiles\5twln5is.default\searchplugins\Google_2.xml [2018-08-08]
FF SearchPlugin: C:\Users\Михаил\AppData\Roaming\Mozilla\Firefox\Profiles\5twln5is.default\searchplugins\Google_3.xml [2018-08-08]
FF SearchPlugin: C:\Users\Михаил\AppData\Roaming\Mozilla\Firefox\Profiles\5twln5is.default\searchplugins\Google_4.xml [2018-08-09]
FF SearchPlugin: C:\Users\Михаил\AppData\Roaming\Mozilla\Firefox\Profiles\5twln5is.default\searchplugins\Google_5.xml [2018-08-10]
FF SearchPlugin: C:\Users\Михаил\AppData\Roaming\Mozilla\Firefox\Profiles\5twln5is.default\searchplugins\Google_6.xml [2018-08-20]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-10-15] [Legacy] [not signed]
FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: (RealDownloader) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-02-21] [Legacy] [not signed]
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1229199.dll [2017-03-31] (Adobe Systems, Inc.)
FF Plugin: @DVR/npmedia,version=3.1.0.4 -> C:\Program Files\webrec\WEB30\WebPlugin\npmedia.dll [2015-01-07] ()
FF Plugin: @DVR/npTimeGrid,version=3.1.0.4 -> C:\Program Files\webrec\WEB30\WebPlugin\npTimeGrid.dll [2015-01-07] (Unauthorized copy)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Picasa2\npPicasa3.dll [2011-04-14] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-07-25] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-07-25] (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=16.0.3.51 -> C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll [2014-02-21] (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll [2013-08-14] (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2013-08-14] (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll [2013-08-14] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.3.51 -> C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll [2014-02-21] (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll [2013-08-14] (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\qxdjhcoueov.js [2018-08-05] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\qxdjhcoueov.cfg [2018-08-05] <==== ATTENTION

Chrome: 
=======
CHR DefaultProfile: Profile 1
CHR HomePage: Profile 1 -> hxxp://start.funmoods.com/?f=1&a=vsl&chnl=vsl&cd=2XzutAtN2Y1L1QzutDtDtCtAzz0F0DtByB0CyB0BtD0CtAzztN0D0TzutBtDtCtBtDyCtCyB&cr=1453919958
CHR StartupUrls: Profile 1 -> "hxxp://www.google.com/","hxxp://www.search.ask.com/?tpid=BTR-V7&o=APN11584&pf=V7&trgb=CR&p2=%5EBJ2%5EYYYYYY%5EYY%5EBG&gct=hp&apn_ptnrs=%5EBJ2&apn_dtid=%5EYYYYYY%5EYY%5EBG&apn_dbr=cr_34.0.1847.137&apn_uid=AB579187-F9A1-4E66-A300-DCAA835686D1&itbv=12.11.0.5199&doi=2014-05-20&psv=&pt=crx","hxxps://www.google.bg/"
CHR Session Restore: Profile 1 -> is enabled.
CHR Profile: C:\Users\Михаил\AppData\Local\Google\Chrome\User Data\Default [2018-08-05]
CHR Profile: C:\Users\Михаил\AppData\Local\Google\Chrome\User Data\Guest Profile [2018-08-21]
CHR Profile: C:\Users\Михаил\AppData\Local\Google\Chrome\User Data\Profile 1 [2018-08-21]
CHR Extension: (Презентации) - C:\Users\Михаил\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-16]
CHR Extension: (Документи) - C:\Users\Михаил\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-16]
CHR Extension: (Google Диск) - C:\Users\Михаил\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-16]
CHR Extension: (YouTube) - C:\Users\Михаил\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-16]
CHR Extension: (Google Търсене) - C:\Users\Михаил\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-16]
CHR Extension: (Avast SafePrice | Comparison, deals, coupons) - C:\Users\Михаил\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2018-08-21]
CHR Extension: (Таблици) - C:\Users\Михаил\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-16]
CHR Extension: (Google Документи офлайн) - C:\Users\Михаил\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-21]
CHR Extension: (Avast Online Security) - C:\Users\Михаил\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-04-23]
CHR Extension: (RealDownloader) - C:\Users\Михаил\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2015-04-09]
CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\Михаил\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-04]
CHR Extension: (Gmail) - C:\Users\Михаил\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-09]
CHR Profile: C:\Users\Михаил\AppData\Local\Google\Chrome\User Data\System Profile [2018-08-21]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]
CHR HKLM\...\Chrome\Extension: [nladljmabboanhihfkjacnnkgjhnokhj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6341888 2018-07-18] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [322464 2018-07-18] (AVAST Software)
S3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [282112 2013-09-25] (Brother Industries, Ltd.) [File not signed]
S3 Commander Service; C:\Program Files\Seagull\BarTender\7.75\CmdrSrv.exe [1099368 2006-08-15] (Seagull Scientific, Inc)
R2 ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [40960 2007-12-25] (TOSHIBA CORPORATION) [File not signed]
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-10-16] (Google)
S2 gupdate1cad03ab870f776; C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-09-01] (Google Inc.)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 o2flash; C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe [65536 2007-02-12] (O2Micro International) [File not signed]
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 TOSHIBA SMART Log Service; C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [126976 2007-12-03] (TOSHIBA Corporation) [File not signed]
R2 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2006-08-23] (Ulead Systems, Inc.) [File not signed]
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [167552 2018-07-18] (AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriverx.sys [188352 2018-07-18] (AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidshx.sys [164944 2018-07-18] (AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswblogx.sys [284328 2018-07-18] (AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbunivx.sys [57976 2018-07-18] (AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [189240 2018-07-18] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [42808 2018-07-18] (AVAST Software)
R0 aswKbd; C:\Windows\system32\Drivers\aswKbd.sys [21576 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [133680 2018-07-18] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr.sys [70840 2018-07-18] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [71848 2018-07-18] (AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [784120 2018-07-18] (AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [396352 2018-07-23] (AVAST Software)
R3 aswStmXP; C:\Windows\System32\drivers\aswStmXP.sys [205864 2018-07-18] (AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [310784 2018-07-18] (AVAST Software)
R3 CnxtHdAudAddService; C:\Windows\System32\drivers\CHDART.sys [187904 2008-02-01] (Conexant Systems Inc.)
R2 Hardlock; C:\Windows\system32\drivers\hardlock.sys [676864 2004-07-14] (Aladdin Knowledge Systems)
R3 QIOMem; C:\Windows\System32\DRIVERS\QIOMem.sys [8192 2007-04-09] (TOSHIBA)
R3 RTL8187B; C:\Windows\System32\DRIVERS\RTL8187B.sys [290304 2007-12-26] (Realtek Semiconductor Corporation )
R1 RtlProt; C:\Windows\System32\DRIVERS\rtlprot.sys [25896 2007-04-23] (Windows (R) Codename Longhorn DDK provider)
R3 UVCFTR; C:\Windows\System32\Drivers\UVCFTR_S.SYS [18432 2007-12-17] (Chicony Electronics Co., Ltd.)
S3 GdmFilt; system32\DRIVERS\GdmFilt.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 MdmUWm; system32\DRIVERS\mdmuwm.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [X]
S3 Tosrfcom; no ImagePath
S3 upperdev; system32\DRIVERS\usbser_lowerflt.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-08-21 11:34 - 2018-08-21 11:35 - 000028372 _____ C:\Users\Михаил\Downloads\FRST.txt
2018-08-21 11:33 - 2018-08-21 11:34 - 000000000 ____D C:\FRST
2018-08-21 11:33 - 2018-08-21 11:33 - 001773568 _____ (Farbar) C:\Users\Михаил\Downloads\FRST (1).exe
2018-08-21 11:31 - 2018-08-21 11:31 - 001773568 _____ (Farbar) C:\Users\Михаил\Downloads\FRST(1).exe
2018-08-21 10:59 - 2018-08-21 11:00 - 001773568 _____ (Farbar) C:\Users\Михаил\Downloads\FRST.exe
2018-08-21 10:12 - 2018-08-21 10:12 - 000996800 RSHOT (Auslogics) C:\Windows\system32\ActionCenterForms.dll
2018-08-20 10:57 - 2018-08-20 10:57 - 000009046 _____ C:\Users\Михаил\Downloads\Михайлов 17.08.2018 (1).xlsx
2018-08-20 10:56 - 2018-08-20 10:56 - 000009069 _____ C:\Users\Михаил\Downloads\Михайлов 17.08.2018.xlsx
2018-08-20 10:10 - 2018-08-20 10:10 - 000000924 _____ C:\Users\Михаил\Downloads\ДП-ЦС00099150-PurchaseOrder.csv
2018-08-10 12:24 - 2018-08-10 12:24 - 000098240 _____ C:\Users\Михаил\Downloads\заявка Михайлов (1).pdf
2018-08-10 12:23 - 2018-08-10 12:23 - 000009065 _____ C:\Users\Михаил\Downloads\Михайлов 10.08.2018.xlsx
2018-08-08 22:29 - 2018-08-08 22:34 - 000000000 ____D C:\Users\Михаил\Downloads\Once.Upon.A.Time.S03.WEB-DL.XviD.BGAUDiO-SiSO
2018-08-08 22:29 - 2018-08-08 22:29 - 000021825 _____ C:\Users\Михаил\Downloads\Once.Upon.A.Time.S03.WEB-DL.XviD.BGAUDiO-SiSO.torrent
2018-08-08 19:38 - 2018-08-08 19:38 - 000016649 _____ C:\Users\Михаил\Downloads\Elementary.S04E10.HDTV.x264-LOL.torrent
2018-08-08 19:38 - 2018-08-08 19:38 - 000000000 ____D C:\Users\Михаил\Downloads\Elementary.S04E10.HDTV.x264-LOL
2018-08-08 19:37 - 2018-08-08 19:38 - 236845993 ____R C:\Users\Михаил\Downloads\elementary.409.hdtv-lol.mp4
2018-08-08 19:37 - 2018-08-08 19:37 - 000016549 _____ C:\Users\Михаил\Downloads\Elementary.S04E08.HDTV.x264-LOL.torrent
2018-08-08 19:37 - 2018-08-08 19:37 - 000002489 _____ C:\Users\Михаил\Downloads\Elementary.S04E09.HDTV.x264-LOL.torrent
2018-08-08 19:37 - 2018-08-08 19:37 - 000000000 ____D C:\Users\Михаил\Downloads\Elementary.S04E08.HDTV.x264-LOL
2018-08-08 19:36 - 2018-08-08 19:36 - 000016689 _____ C:\Users\Михаил\Downloads\Elementary.S04E07.HDTV.x264-LOL.torrent
2018-08-08 19:35 - 2018-08-08 19:35 - 000029381 _____ C:\Users\Михаил\Downloads\elementary.408.hdtv-lol.srt(subsunacs.net).rar
2018-08-08 19:35 - 2018-08-08 19:35 - 000029350 _____ C:\Users\Михаил\Downloads\elementary.409.hdtv-lol(subsunacs.net).rar
2018-08-08 19:35 - 2018-08-08 19:35 - 000028933 _____ C:\Users\Михаил\Downloads\elementary_-_04x10_-_alma_matters.dimension.srt(subsunacs.net).rar
2018-08-08 19:34 - 2018-08-08 19:34 - 000031702 _____ C:\Users\Михаил\Downloads\elementary_-_04x07_-_miss_taken.dimension(subsunacs.net).rar
2018-08-08 19:28 - 2018-08-08 19:28 - 000029026 _____ C:\Users\Михаил\Downloads\elementary-04x04-all-my-exes-live-in-essex.dimension(subsunacs.net).rar
2018-08-08 19:27 - 2018-08-08 19:28 - 222465856 ____R C:\Users\Михаил\Downloads\elementary.405.hdtv-lol.mp4
2018-08-08 19:27 - 2018-08-08 19:27 - 000017209 _____ C:\Users\Михаил\Downloads\Elementary.S04E05.HDTV.x264-LOL.torrent
2018-08-08 19:26 - 2018-08-08 19:26 - 000017009 _____ C:\Users\Михаил\Downloads\elementary.404.hdtv-lol.mp4.torrent
2018-08-08 11:18 - 2018-08-08 11:18 - 000010717 _____ C:\Users\Михаил\Downloads\Versandbestätigung (3).pdf
2018-08-07 21:56 - 2018-08-07 21:56 - 000027924 _____ C:\Users\Михаил\Downloads\elementary-04x03-tag-youre-me.dimension.bulgarian(subsunacs.net).rar
2018-08-07 21:56 - 2018-08-07 21:56 - 000027924 _____ C:\Users\Михаил\Downloads\elementary-04x03-tag-youre-me.dimension.bulgarian(subsunacs.net) (1).rar
2018-08-07 21:54 - 2018-08-07 21:54 - 000016329 _____ C:\Users\Михаил\Downloads\elementary.403.hdtv-lol.mp4.torrent
2018-08-07 20:53 - 2018-08-07 20:53 - 000030877 _____ C:\Users\Михаил\Downloads\elementary.s04e02.hdtv.xvid-dimension(subsunacs.net).rar
2018-08-07 20:00 - 2018-08-07 20:00 - 000027134 _____ C:\Users\Михаил\Downloads\elementary-04x01-the-past-is-parent.dimension(subsunacs.net).rar
2018-08-07 19:54 - 2018-08-07 19:54 - 000018474 _____ C:\Users\Михаил\Downloads\elementary.402.hdtv-lol.mp4.torrent
2018-08-07 19:53 - 2018-08-07 19:53 - 000018429 _____ C:\Users\Михаил\Downloads\elementary.401.hdtv-lol.mp4.torrent
2018-08-07 19:10 - 2018-08-07 19:15 - 000000000 ____D C:\Users\Михаил\Downloads\Once.Upon.A.Time.S02.WEB-DL.XviD.BGAUDiO-SiSO
2018-08-07 19:10 - 2018-08-07 19:10 - 000022420 _____ C:\Users\Михаил\Downloads\Once.Upon.A.Time.S02.WEB-DL.XviD.BGAUDiO-SiSO.torrent
2018-08-07 18:59 - 2018-08-07 18:59 - 000008499 _____ C:\Users\Михаил\Downloads\михайло.xlsx
2018-08-07 18:57 - 2018-08-07 18:57 - 000837207 _____ C:\Users\Михаил\Downloads\14 Debelets2-Layout3.pdf
2018-08-07 17:33 - 2018-08-07 17:33 - 000040919 _____ C:\Users\Михаил\Downloads\Once.Upon.A.Time.S01.DVDRip.XviD.BGAUDiO-SiSO.torrent
2018-08-07 17:33 - 2018-08-07 17:33 - 000040919 _____ C:\Users\Михаил\Downloads\Once.Upon.A.Time.S01.DVDRip.XviD.BGAUDiO-SiSO (1).torrent
2018-08-05 20:35 - 2018-08-05 20:35 - 000090098 _____ C:\Users\Михаил\Downloads\Elementary.S03E24.(subs.sab.bz) (1).rar
2018-08-05 20:34 - 2018-08-05 20:34 - 000090098 _____ C:\Users\Михаил\Downloads\Elementary.S03E24.(subs.sab.bz).rar
2018-08-05 19:44 - 2018-08-05 19:44 - 000110384 _____ C:\Users\Михаил\Downloads\Elementary.S03E23.(subs.sab.bz).rar
2018-08-05 18:53 - 2018-08-05 18:53 - 000083498 _____ C:\Users\Михаил\Downloads\Elementary.S03E22.(subs.sab.bz).rar
2018-08-05 18:10 - 2018-08-05 18:10 - 000100468 _____ C:\Users\Михаил\Downloads\Elementary.S03E21.(subs.sab.bz).rar
2018-08-05 18:10 - 2018-08-05 18:10 - 000100468 _____ C:\Users\Михаил\Downloads\Elementary.S03E21.(subs.sab.bz) (1).rar
2018-08-05 18:07 - 2018-08-05 18:07 - 000108837 _____ C:\Users\Михаил\Downloads\Elementary.S03E17.(subs.sab.bz).rar
2018-08-05 17:52 - 2018-08-05 17:52 - 000027003 _____ C:\Users\Михаил\Downloads\Elementary.Season.03.HDTV.x264-LOL.torrent
2018-08-05 17:39 - 2018-08-05 17:39 - 000014175 _____ C:\Users\Михаил\Downloads\Elementary.S03E18.HDTV.XviD-AFG.torrent
2018-08-05 17:34 - 2018-08-05 17:34 - 000014215 _____ C:\Users\Михаил\Downloads\Elementary.S03E19.HDTV.XviD-FUM.torrent
2018-08-05 17:31 - 2018-08-05 17:32 - 000013855 _____ C:\Users\Михаил\Downloads\Elementary.S03E24.HDTV.XviD-AFG.torrent
2018-08-05 17:30 - 2018-08-05 17:30 - 000014195 _____ C:\Users\Михаил\Downloads\Elementary.S03E23.HDTV.XviD-AFG.torrent
2018-08-05 17:29 - 2018-08-05 17:29 - 000014175 _____ C:\Users\Михаил\Downloads\Elementary.S03E22.HDTV.XviD-FUM.torrent
2018-08-05 17:14 - 2018-08-05 17:14 - 000015607 _____ C:\Users\Михаил\Downloads\Elementary.S03E21.720p.HDTV.X264-DIMENSION.torrent
2018-08-05 17:14 - 2018-08-05 17:14 - 000014235 _____ C:\Users\Михаил\Downloads\Elementary.S03E20.HDTV.XviD-FUM (4).torrent
2018-08-05 17:14 - 2018-08-05 17:14 - 000014235 _____ C:\Users\Михаил\Downloads\Elementary.S03E20.HDTV.XviD-FUM (3).torrent
2018-08-05 17:09 - 2018-08-05 17:09 - 000014235 _____ C:\Users\Михаил\Downloads\Elementary.S03E20.HDTV.XviD-FUM (2).torrent
2018-08-05 17:07 - 2018-08-05 17:08 - 002971704 _____ (BitTorrent Inc.) C:\Users\Михаил\Downloads\uTorrent.exe
2018-08-05 17:01 - 2018-08-05 17:01 - 000014235 _____ C:\Users\Михаил\Downloads\Elementary.S03E20.HDTV.XviD-FUM.torrent
2018-08-05 17:01 - 2018-08-05 17:01 - 000014235 _____ C:\Users\Михаил\Downloads\Elementary.S03E20.HDTV.XviD-FUM (1).torrent
2018-08-05 14:04 - 2018-07-18 09:21 - 000321752 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2018-08-01 12:41 - 2018-08-01 12:41 - 000009041 _____ C:\Users\Михаил\Downloads\Михайлов 01.08.2018.xlsx
2018-07-31 12:35 - 2018-07-31 12:35 - 000011113 _____ C:\Users\Михаил\Downloads\ДС01054 (25).xlsx
2018-07-23 12:57 - 2018-07-23 12:57 - 000097693 _____ C:\Users\Михаил\Downloads\заявка Михайлов.pdf
2018-07-23 09:46 - 2018-08-20 10:08 - 000000000 ____D C:\Users\Михаил\AppData\Local\AVAST Software

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-08-21 11:08 - 2011-05-03 15:44 - 000000000 ____D C:\Users\Михаил\AppData\Roaming\uTorrent
2018-08-21 11:04 - 2017-04-25 12:22 - 000000000 ____D C:\Program Files\Mozilla Firefox
2018-08-21 11:04 - 2012-05-13 09:56 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
2018-08-21 11:02 - 2006-11-02 14:18 - 000000000 ____D C:\Windows\inf
2018-08-21 10:57 - 2006-11-02 15:47 - 000003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2018-08-21 10:57 - 2006-11-02 15:47 - 000003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2018-08-20 10:01 - 2006-11-02 16:01 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-08-08 22:26 - 2008-07-21 16:23 - 000145408 _____ C:\Users\Михаил\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2018-08-08 22:15 - 2006-11-02 13:33 - 000763586 _____ C:\Windows\system32\PerfStringBackup.INI
2018-08-07 23:10 - 2006-11-02 16:01 - 000032626 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2018-08-05 17:43 - 2008-11-30 16:58 - 000000000 ____D C:\Users\Михаил\AppData\Roaming\BSplayer
2018-08-05 14:05 - 2017-11-20 12:22 - 000001834 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2018-07-23 17:22 - 2017-09-25 13:54 - 000396352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys

==================== Files in the root of some directories =======

2008-07-22 15:06 - 2011-10-04 22:23 - 000024206 _____ () C:\Users\Михаил\AppData\Roaming\UserTile.png
2008-08-07 22:52 - 2008-08-07 22:52 - 000000552 _____ () C:\Users\Михаил\AppData\Local\d3d8caps.dat
2015-07-23 13:22 - 2017-10-04 17:34 - 000000680 _____ () C:\Users\Михаил\AppData\Local\d3d9caps.dat
2008-07-21 16:23 - 2018-08-08 22:26 - 000145408 _____ () C:\Users\Михаил\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Some files in TEMP:
====================
2018-08-21 10:11 - 2018-08-21 10:11 - 000391024 _____ (adaware) C:\Users\Михаил\AppData\Local\Temp\wcupdater.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-08-20 10:11

==================== End of FRST.txt ============================

Addition.txt

---

Здравейте..! Добре дошли в подраздела за почистване от зловреден софтуер. Аз се казвам Ицо и  ще ви съдействам за проблема ви с злонамерен софтуер.

Преди да започнем, моля, прочетете и искрено се надявам да следвате тези важни насоки, така че нещата да преминат  плавно и безпроблемно.

•  Както ще забележите, дневниците, които искаме тук, са доста дълги, затова е нормално да не отговарям точно след като ги публикувате. Това е така, защото ми трябва известно време, за да ги анализирам и след това да действам по съответния начин. Въпреки това винаги ще отговарям в рамките на 24 часа, най-много 48 часа, ако се случи нещо неочаквано
• Инструкциите които ще Ви  давам, ще са само за вашия компютър и само за вашата система! Използването на тези инструкции на друг компютър могат да доведат до увреждане на този компютър и евентуално да го направи неизползваем !
• Моля да следвате инструкциите ми в реда в който ги давам.
• Трябва да имате права на администратор за този компютър,инструментите които ще използваме се стартират единствено от името на администратор.
• Не стартирайте никакви други инструменти за премахване на зловреден софтуер, освен ако не сте инструктирани!
• Не инсталирайте  софтуер (или хардуер) по време на процеса на почистване,както и не сваляйте или сканирай те с нищо  вашата система, защото към нея се  добавят повече елементи.Това прави анализа по-труден.
• Вашите програми за сигурност могат да дават предупреждения за някои от инструментите които използваме.  Бъдете сигурни, всички връзки които давам за изтегляне на инструментите както и самите те, са безопасни.
•  Моля,по възможност да отговаряте в темата  докато не ви потвърдя че тя е  " Чиста !"
• Липсата на симптоми не означава, че всичко е чисто.

Моля, имайте предвид, че премахването на зловреден софтуер е непредвидим процес.. Аз ще се погрижа да ви  предложа начини на действие, които не могат да повредят вашия компютър. Въпреки това, за мен е невъзможно да  предвидя всички взаимодействия, които могат да се случат между софтуера на компютъра ви и инструментите които ще използваме , за да ви изчистим от инфекции, и в някои случаи аз не мога да  гарантирам целостта на вашата система. Възможно е, да възникнат ситуации, в които единственото решение е системата ви да се  форматира и да се преинсталира операционната система.Поради тази причина аз ви съветвам  да направите резервно копие на всички ваши лични файлове и папки, преди да започнем с почистването.

• XP
• Windows Vista
• Windows 7 ... също и  тук
• Windows 8 ... също и ... тук ... и ... тук
• Windows 10 ... също и  тук

 

• И последно и аз съм човек и  не съм всезнаещ. Има неща, които дори не мога да предвидя. Но това, което знам, отне години, за да науча и усъвършенствам . Аз и екипът ни напълно доброволно помагаме на хората в нужда използвайки собственото си свободно време. Бих искал да уважавате това и да бъдете търпеливи, тъй като понякога реалният живот изисква нашето време и отговорите ви могат да бъдат забавени. Благодаря..!

 

...и така време е да започнем ..! Дайте ми време да прегледам дневниците си и ще пиша със следващи инструкции..!

 

 

Деинсталиране на нежелани / ненужни програми:

• Натиснете клавишна комбинация   + R на клавиатурата си едновременно. Напишете (копирайте) в полето  appwiz.cpl и кликнете върху OK.
• В отворилия се списък с инсталирани програми щракнете с десния бутон на мишката върху следната програма:

Цитат

Auslogics BoostSpeed 8

 

..и след това кликнете върху Uninstall (Деинсталиране)..!

 

Защо можете да прочетете тук:

https://www.systemlookup.com/Startup/19038-boostspeed_exe.html

 

  Сканиране с Malwarebytes Anti-Malware (MBAM)

Моля изтеглете Malwarebytes Anti -Malware и я запазете на вашия десктоп.

• Стартирайте файла mb3-setup-consumer- x.x.x.xxxx.exe и следвайте указанията за да инсталирате програмата.
• След като инсталацията приключи програмата ще стартира автоматично.
• Отидете до табът Settings => Protection > и под категорията Scan Options включете опцията "Scan for rootkits" като преместите плъзгача надясно.

• Отидете до табът Scan, и изберете Threat Scan и след това натиснете бутона Start Scan.

• Ще започне проверка за зловреден софтуер.

• При някои инфекции можете да видите съобщението:
• "Could not load DDA driver"
• Натиснете "Yes" на това съобщение за да позволите драйвера да се зареди след рестарт.
• Разрешете на компютъра да се рестартира и след това продължете с останалите инструкции.
• След като проверката приключи ще се появи списъка с резултатите (ако има намерени обекти). Ако програмата е минимизирана докато сканира ще се появи следното съобщение ако има открити заплахи. Натиснете бутона View Scan Results.

• . Натиснете бутона Quarantine Selected.

• Изчакайте да се появи прозореца подканващ ви да рестартирате и след това натиснете бутона Yes.

• След рестарта, стартирайте отново Malwarebytes Anti-Malware.
• Отидете то табът Reports и отворете лог файла с името Scan Report.

• Натиснете бутона Export и след това =>  "Copy to Clipboard"

• Сега вече поставете съдържанието на лог файла с клавишната комбинация Ctrl + Vи го публикувайте в следващия си коментар.

 

 

 Сканиране с AdwCleaner

• Изтеглете и стартирайте AdwCleaner 7.1.1.0 Final
• Натиснете бутона Scan Now (или Сканиране сега, ако ви е на български)

• AdwCleaner ще обнови базата с дефинициите си и ще започне да проверява компютъра. Проверката ще отнеме не повече от няколко секунди.
• След като проверката приключи ако има намерени обекти ще се появи диалогов прозорец подканващ ви да натиснете бутона Clean & Repair (Почисти & Поправи).
• Програмата ще затвори всички излишни процеси и след почистването ще иска да рестартира машината. Съгласете се.

• Ако не бъдат открити зарази ще видите следния прозорец:

• Натиснете бутона Skip Basic Repair (Пропускане на основното поправяне).
• И в двата случая ако няма открити зарази или ако програмата е почистила такива, стартирайте пак програмата и отидете до табът Log files (Журнални файлове на български.
• Кликнете с двукратен клил на мишката върху лог файла с последната дата и част (новите файлове са най-отдолу в списъка) и публикувайте съдържанието на файла в следващия си коментар.

 

 

  Дневници
 
В следващия си отговор, моля да включите следните дневници:

• Дневник от Malwarebytes Anti -Malware
• AdwCleaner .txt

 

@nikolay11 с мен ли си още..? Имате ли някакви затруднения с инструкциите ми..?

Няма обратна връзка с автора..! Темата "Приключвам" ....Продължавам да си блъскам главата защо хората искат помощ и когато им я предложиш ...и то напълно безплатно...я отказват...! Повече няма да коментирам отношението на такива хора...Никой на никой не е длъжен...! Лека вечер...!